last executing test programs: 28m13.00495268s ago: executing program 0 (id=6): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fanotify_init(0x200, 0x0) r4 = memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x1) dup(r4) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) 28m9.386119793s ago: executing program 0 (id=8): socket(0xa, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x800, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$panthor(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x42800) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @private=0xa010100}, {0x2, 0x0, @local}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 28m9.201451219s ago: executing program 4 (id=5): socket$inet_tcp(0x2, 0x1, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = eventfd2(0x1, 0x80800) ioctl$KVM_HYPERV_EVENTFD(r0, 0x4018aebd, &(0x7f0000000080)={0x4000, r1}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r3 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r4, 0x6000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) 28m7.774607774s ago: executing program 0 (id=10): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = fanotify_init(0x200, 0x0) memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x1) fanotify_mark(r4, 0x1, 0x48000046, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) 28m7.706380761s ago: executing program 4 (id=12): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000140)=0xffffffffffdffffa, 0xa, 0x3) get_mempolicy(0x0, 0x0, 0x206, &(0x7f0000394000/0x3000)=nil, 0x3) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r4, 0xc0405610, &(0x7f0000000040)={0x2}) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, 0x0) 28m2.486259491s ago: executing program 0 (id=14): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) openat$kvm(0xffffffffffffff9c, 0x0, 0x40000, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r3, 0x4b65, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc1}}) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4ea4, 0xfffffffc, @local, 0x1}, 0x1c) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x2c}, 0x44004) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) openat$ptp0(0xffffffffffffff9c, &(0x7f00000040c0), 0x20000, 0x0) 28m2.364057966s ago: executing program 4 (id=15): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0xfffffffd) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x7d4165c9) listen(r2, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000680)={@in6={{0xa, 0x4e1e, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x81}}, 0x0, 0x0, 0x40, 0x0, "2b20a1a47cddc63b223be606d7303a4d4d11e10450d766feb63b382d54bab577021cad5de4fe7630a33b6deca160b1267ff02123bc27830000000000ffff40000000000000b5b29049cb65f00300"}, 0xd8) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000540)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 27m52.837124408s ago: executing program 0 (id=18): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000140)=0xffffffffffdffffa, 0xa, 0x3) get_mempolicy(0x0, 0x0, 0x206, &(0x7f0000394000/0x3000)=nil, 0x3) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r4, 0xc0405610, &(0x7f0000000040)={0x2}) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, 0x0) 27m52.63964762s ago: executing program 4 (id=20): socket$inet_tcp(0x2, 0x1, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = eventfd2(0x1, 0x80800) ioctl$KVM_HYPERV_EVENTFD(r0, 0x4018aebd, &(0x7f0000000080)={0x4000, r1}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r2 = socket$netlink(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000080)=0x16, 0x4) 27m43.10126808s ago: executing program 0 (id=22): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000140)=0xffffffffffdffffa, 0xa, 0x3) get_mempolicy(0x0, 0x0, 0x206, &(0x7f0000394000/0x3000)=nil, 0x3) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r4, 0xc0405610, &(0x7f0000000040)={0x2}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 27m37.059678107s ago: executing program 32 (id=21): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000140)=0xffffffffffdffffa, 0xa, 0x3) get_mempolicy(0x0, 0x0, 0x206, &(0x7f0000394000/0x3000)=nil, 0x3) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r4, 0xc0405610, &(0x7f0000000040)={0x2}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 27m35.785681026s ago: executing program 33 (id=17): socket(0xa, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x800, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$panthor(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x42800) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @private=0xa010100}, {0x2, 0x0, @local}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 27m35.333458703s ago: executing program 34 (id=20): socket$inet_tcp(0x2, 0x1, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = eventfd2(0x1, 0x80800) ioctl$KVM_HYPERV_EVENTFD(r0, 0x4018aebd, &(0x7f0000000080)={0x4000, r1}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r2 = socket$netlink(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000080)=0x16, 0x4) 27m19.284995816s ago: executing program 35 (id=22): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000140)=0xffffffffffdffffa, 0xa, 0x3) get_mempolicy(0x0, 0x0, 0x206, &(0x7f0000394000/0x3000)=nil, 0x3) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r4, 0xc0405610, &(0x7f0000000040)={0x2}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 19m21.071623508s ago: executing program 1 (id=216): memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000780)={0xfffffffe, 0x0, 0x0, 'queue0\x00', 0x48}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000100)={0x80, 0x1, 'client1\x00', 0xffffffff80000004, "00000000ffffffe3", "71a19060009f0000000000000000001aa241d3c6895c4100", 0x800000}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SIOCAX25DELFWD(0xffffffffffffffff, 0x89eb, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, &(0x7f0000000280)={0x0, 0xa, 0x279, 0x1, 0x27}) recvmmsg(0xffffffffffffffff, &(0x7f0000000f00)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x40000060, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000000)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_int(r5, 0x0, 0x16, 0x0, &(0x7f0000000340)) syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000009740)='./file0\x00', 0x0, &(0x7f0000000340)={[{@uquota}, {@sysvgroups}, {@noalign}, {@nolazytime}, {@inode32}, {@discard}, {@prjquota}, {@inode64}, {@gquota}, {@inode64}, {@nodiscard}]}, 0x0, 0x9794, &(0x7f0000009780)="$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") 19m17.047425945s ago: executing program 1 (id=217): memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000780)={0xfffffffe, 0x0, 0x0, 'queue0\x00', 0x48}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000100)={0x80, 0x1, 'client1\x00', 0xffffffff80000004, "00000000ffffffe3", "71a19060009f0000000000000000001aa241d3c6895c4100", 0x800000}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SIOCAX25DELFWD(0xffffffffffffffff, 0x89eb, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r5, 0xc0305710, &(0x7f0000000280)={0x0, 0xa, 0x279, 0x1, 0x27}) recvmmsg(0xffffffffffffffff, &(0x7f0000000f00)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x40000060, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000000)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_int(r6, 0x0, 0x16, 0x0, &(0x7f0000000340)) syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000009740)='./file0\x00', 0x0, &(0x7f0000000340)={[{@uquota}, {@sysvgroups}, {@noalign}, {@nolazytime}, {@inode32}, {@discard}, {@prjquota}, {@inode64}, {@gquota}, {@inode64}, {@nodiscard}]}, 0x0, 0x9794, &(0x7f0000009780)="$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") 19m16.886879991s ago: executing program 5 (id=218): socket(0xa, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x800, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$panthor(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x42800) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @private=0xa010100}, {0x2, 0x0, @local}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 19m15.574863579s ago: executing program 8 (id=229): r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000280)=[@nested_amd_vmsave={0x183, 0x18, 0x1}, @nested_create_vm={0x12d, 0x18}, @nested_vmresume={0x130, 0x18}, @enable_nested={0x12c, 0x18}, @nested_amd_stgi={0x17e, 0x10}, @nested_amd_stgi={0x17e, 0x10}], 0x80}) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f0000000380)={0x2, 0x0, [{0x8000000d, 0x3, 0x4, 0x49e, 0x40, 0x6, 0x8001}, {0x1, 0x2, 0x3, 0x1, 0x2, 0x4, 0x1}]}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x3a, [0xfffffff8, 0x8, 0x5, 0x10009, 0x8, 0x155f, 0x6, 0x2, 0x25cd, 0x1, 0xb4, 0xa, 0xb2b9, 0x6, 0x8, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x1000, 0x1, 0x0, 0xd, 0x4, 0x12a0, 0x8000, 0x1, 0x7, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10001, 0x5, 0x91, 0x4, 0x4, 0x16, 0x0, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xffffff81, 0xff, 0x2, 0x2, 0x2, 0x2, 0x7, 0x4, 0x7, 0x4, 0x4007f, 0xffffffff, 0x9212], [0x9, 0x16e, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000077, 0x8e, 0xd50, 0x7, 0x5, 0xfffffffd, 0x80a, 0x4, 0x5, 0x1000, 0x0, 0x200b395, 0x400000, 0x80000000, 0x4, 0x19, 0x7, 0x1, 0x3, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x96, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x1, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1ce, 0x1, 0x80000004, 0x80000001, 0x6, 0x2, 0x9, 0x95, 0x80000000, 0x4, 0xfffffff9, 0x40000003, 0x1000, 0xfffff804, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x5, 0x200006, 0x8, 0x400, 0xfffffffe, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x89, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x8000, 0x401, 0x3e55, 0x5, 0xd3, 0x8, 0x3437, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x80, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0x0, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0x3, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x8000007, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0x9, 0xfffffff7, 0x8, 0x7, 0x5396, 0x936, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xffffffff, 0x7fffffff, 0x9, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x0, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0xc, 0x463f, 0x4, 0xdab, 0x8003, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CAP_PTP_KVM(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000300)) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19m15.508042917s ago: executing program 5 (id=220): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x20, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f0000001680)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x20, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x2b, 0xffffffde, 0x80002, 0x0, 0xfffe, 0x2, 0xfffffff4, 0x0, 0x0, 0x8, 0x100}}, 0x50) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x40242, 0x1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = syz_create_resource$binfmt(&(0x7f00000001c0)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x400, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c633774262eb5ab2c7b9c5cff6ce78185d8c4dc064744e042"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000500)={0x4, "b50800a5cc599bdefbafde250000000000000000001000"}) pselect6(0x40, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x1, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x6, 0xb7fb, 0x0, 0x0, 0x0, 0x0, 0x40000000000}, &(0x7f0000000100)={0x0, 0x3938700}, 0x0) 19m14.390210538s ago: executing program 1 (id=222): r0 = landlock_create_ruleset(&(0x7f0000000080)={0x10}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x8152}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x32) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x6c6882, 0x13d) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x4905, 0x3}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0xa) landlock_create_ruleset(&(0x7f00000001c0)={0x1005, 0x1}, 0x18, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', r2, &(0x7f0000000000)='./file0\x00', 0x4) 19m12.746213955s ago: executing program 5 (id=225): openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 19m12.678119217s ago: executing program 1 (id=226): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x20, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f0000001680)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x2b, 0xffffffde, 0x80002, 0x0, 0xfffe, 0x2, 0xfffffff4, 0x0, 0x0, 0x8, 0x100}}, 0x50) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x40242, 0x1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = syz_create_resource$binfmt(&(0x7f00000001c0)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x400, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c633774262eb5ab2c7b9c5cff6ce78185d8c4dc064744e042"}) pselect6(0x40, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x1, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x6, 0xb7fb, 0x0, 0x0, 0x0, 0x0, 0x40000000000}, &(0x7f0000000100)={0x0, 0x3938700}, 0x0) 19m11.261883751s ago: executing program 8 (id=228): socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0xc0189436, 0x0) sendmmsg$inet6(r0, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)}], 0x1}}], 0x2, 0x1c000) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r2, 0xfffffffc) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000200)={[{@nombcache}, {@dioread_lock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4c}}, {@nouid32}, {@grpquota}, {@bh}, {@inlinecrypt}]}, 0x1, 0x46b, &(0x7f0000000740)="$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") syz_open_dev$tty1(0xc, 0x4, 0x2) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r6, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r4, 0x1, 0x70bd2c, 0x1000000, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x37}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000002000/0x3000)=nil, 0x3000}, 0x7}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mkdirat(0xffffffffffffff9c, 0x0, 0x1e0) 19m8.23184964s ago: executing program 5 (id=230): r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000280)=[@nested_amd_vmsave={0x183, 0x18, 0x1}, @nested_create_vm={0x12d, 0x18}, @nested_vmresume={0x130, 0x18}, @enable_nested={0x12c, 0x18}, @nested_amd_stgi={0x17e, 0x10}, @nested_amd_stgi={0x17e, 0x10}], 0x80}) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f0000000380)={0x2, 0x0, [{0x8000000d, 0x3, 0x4, 0x49e, 0x40, 0x6, 0x8001}, {0x1, 0x2, 0x3, 0x1, 0x2, 0x4, 0x1}]}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x3a, [0xfffffff8, 0x8, 0x5, 0x10009, 0x8, 0x155f, 0x6, 0x2, 0x25cd, 0x1, 0xb4, 0xa, 0xb2b9, 0x6, 0x8, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x1000, 0x1, 0x0, 0xd, 0x4, 0x12a0, 0x8000, 0x1, 0x7, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10001, 0x5, 0x91, 0x4, 0x4, 0x16, 0x0, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xffffff81, 0xff, 0x2, 0x2, 0x2, 0x2, 0x7, 0x4, 0x7, 0x4, 0x4007f, 0xffffffff, 0x9212], [0x9, 0x16e, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000077, 0x8e, 0xd50, 0x7, 0x5, 0xfffffffd, 0x80a, 0x4, 0x5, 0x1000, 0x0, 0x200b395, 0x400000, 0x80000000, 0x4, 0x19, 0x7, 0x1, 0x3, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x96, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x1, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1ce, 0x1, 0x80000004, 0x80000001, 0x6, 0x2, 0x9, 0x95, 0x80000000, 0x4, 0xfffffff9, 0x40000003, 0x1000, 0xfffff804, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x5, 0x200006, 0x8, 0x400, 0xfffffffe, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x89, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x8000, 0x401, 0x3e55, 0x5, 0xd3, 0x8, 0x3437, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x80, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0x0, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0x3, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x8000007, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0x9, 0xfffffff7, 0x8, 0x7, 0x5396, 0x936, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xffffffff, 0x7fffffff, 0x9, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x0, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0xc, 0x463f, 0x4, 0xdab, 0x8003, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CAP_PTP_KVM(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000300)) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0xc084) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = dup(r5) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 19m7.760566431s ago: executing program 1 (id=231): socket(0xa, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x800, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$panthor(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x42800) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 18m58.762634123s ago: executing program 1 (id=234): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x560f, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) mknod(0x0, 0x1, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="61122400000000006113340000000000bf1000000000000015000200091b00003d030100000000008701000000000000bc26000000000000bf67000000000000560300000ee600f06702000014000000140300000ee600f0bf050000000000000f610000000000006507f4ff02000400070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586e3f640f9f7e9a73b761ad4f0952a70046270d2b6436fdeecd791614ed46de741eb8cf91c046ef9beca574b350021c7ec6ef130f53748068ca432dae4e248b22b9ad8b2811f67916a1764578cba4b069037bfb3362d5691ac397f7e207145d970f0d97867552629b146645c785fb77dbeca38e49a9d5221f1f45f0a25890d04d91a15a05ae7e7ed6252c3d6c1973fb858de1da70d67317e7872b0603ce47ed2c1520e71b527bb42aa2e20e1e85df73736ed0a782ab7e7278dd54358cfdf6313d40f926332623625b49626481054787ab2dff85a9bebd6b317f26c691a65aa97bb3d1506a3a565e9c7ea5ad4611d2d77ee8a5c1b23814a26b6a20061fbb65bdd03770fa849f2a29ba69f90625f42592a70ba890f7a92878ae73574c3a233ee5954119931a1905210715fa77a8795f2fbec3797cb90f59fe8a4abec25f40c87bf25b750bbaa"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x20, &(0x7f00000001c0)={&(0x7f0000000040)=""/85, 0x55, 0x0, 0x0}}, 0x10) 18m58.643994513s ago: executing program 8 (id=236): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0x200000a0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x58) 18m55.322789159s ago: executing program 5 (id=238): openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 18m46.629575215s ago: executing program 8 (id=241): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x20, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f0000001680)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x2b, 0xffffffde, 0x80002, 0x0, 0xfffe, 0x2, 0xfffffff4, 0x0, 0x0, 0x8, 0x100}}, 0x50) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x40242, 0x1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) syz_create_resource$binfmt(&(0x7f00000001c0)='./file0\x00') openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x400, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c633774262eb5ab2c7b9c5cff6ce78185d8c4dc064744e042"}) pselect6(0x40, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x1, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x6, 0xb7fb, 0x0, 0x0, 0x0, 0x0, 0x40000000000}, &(0x7f0000000100)={0x0, 0x3938700}, 0x0) 18m45.563224102s ago: executing program 5 (id=242): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 18m44.45635578s ago: executing program 8 (id=245): socket(0xa, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x800, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$panthor(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x42800) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 18m41.762304864s ago: executing program 36 (id=234): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x560f, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) mknod(0x0, 0x1, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x20, &(0x7f00000001c0)={&(0x7f0000000040)=""/85, 0x55, 0x0, 0x0}}, 0x10) 18m39.302474408s ago: executing program 8 (id=249): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x560f, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) mknod(0x0, 0x1, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x20, &(0x7f00000001c0)={&(0x7f0000000040)=""/85, 0x55, 0x0, 0x0}}, 0x10) 18m28.288434684s ago: executing program 37 (id=242): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 18m23.496676974s ago: executing program 38 (id=249): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x560f, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) mknod(0x0, 0x1, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x20, &(0x7f00000001c0)={&(0x7f0000000040)=""/85, 0x55, 0x0, 0x0}}, 0x10) 11m45.072734163s ago: executing program 7 (id=595): socket$nl_route(0x10, 0x3, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0xc0189436, 0x0) sendmmsg$inet6(r1, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)}], 0x1}}], 0x2, 0x1c000) write$cgroup_freezer_state(r0, 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r3, 0xfffffffc) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000200)={[{@nombcache}, {@dioread_lock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4c}}, {@nouid32}, {@grpquota}, {@bh}, {@inlinecrypt}]}, 0x1, 0x46b, &(0x7f0000000740)="$eJzs28tvVNUfAPDvvX0APx7tD/EBolaJSeOjpQWVhRuNJi4wmugCl7UdSMNADa2JECLFGNyYGBJdG5cm/gXujIlRVyZudW9IiLIBXdXcO/fCdJgpFKa9lfl8ktuec++ZOec793XuOTMB9KyR7E8SsS0ifouIoUZ2eYGRxr9rV85O/33l7HQSS0tv/Znk5a5eOTtdFi1ft7XIjKYR6cdJUcly86fPHJ+q12univz4won3xudPn3l29sTUsdqx2snJQ4cOHph44fnJ57oSZxbX1T0fzu3d/do7F1+fPnLx3Z++ydq7rdjeHEe3jGSB/7WUa932ZLcrq9j2pnTSX2FDWJW+iMh210B+/g9FX9zYeUPx6keVNg5YU9m9aVPnzYtLwD0siapbAFSjvNFnz7/lsk5djw3h8kuNB6As7mvF0tjSH2lRZqDl+babRiLiyOI/X2ZLrNE4BABAs0+nvzgcz7Tr/6XxQFO5HcUcynBE/D8idkbEfRGxKyLuj8jLPhgRD62y/tapoZv7P+mlOwrsNmX9vxeLua3l/b+y9xfDfUVuex7/QHJ0tl7bX3wmozGwKctPrFDHd6/8+lmnbc39v2zJ6i/7gkU7LvW3DNDNTC1M5Z3SLrh8PmJPf7v4k+szAUlE7I6IPat76x1lYvapr/d2KnTr+FfQhXmmpa+y8Baz+BejJf5SsvL85PjmqNf2j5dHxc1+/uXCm53qv6v4u+ByrfG/af+3FhlOmudr51dfx4XfP+n4THOHx386mLydzzMPFus+mFpYODURMZgczvPL1k/eeG2ZL8tnx//ovvbn/87iNVn8D0dEdhA/EhGPRsRjRdsfj4gnImLfCvH/+HLnbWX8kVa0/89HzLS9/l0//lv2/+oTfcd/+LZT/be3/w/mqdFiTX79u4V2zckuF60NvJvPDgAAAP4r0vw78Ek6dj2dpmNjje/w74r/pfW5+YWnj869f3Km8V354RhIy5GuoWI8tD5br00ki8U7NsZHJ4ux4nK89EAxbvx535Y8PzY9V5+pOHbodVs7nP+ZP/qqbh2wxra0XTs5uO4NASrQOo+eLs+ee2M9GwOsK7/Xht51i/M/Xa92AOvP/R96V7vz/1xL3lwA3Jvc/6F3Of+hR6XfV90CoELu/9CT7uZ3/WuY2LwxmlFNYqPulDwRUSbSDdEeiTVKVH1lAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6I5/AwAA//+Afus0") syz_open_dev$tty1(0xc, 0x4, 0x2) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r7, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r5, 0x1, 0x70bd2c, 0x1000000, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x37}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000002000/0x3000)=nil, 0x3000}, 0x7}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mkdirat(0xffffffffffffff9c, 0x0, 0x1e0) 11m43.363380353s ago: executing program 7 (id=597): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xcd) r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r2, 0x707, &(0x7f00000000c0)={&(0x7f0000000000)=[{0xa, 0x29, 0x0, 0x0}], 0x1}) syz_usb_connect(0x3, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010003f6fdd140402090b975f601020301090224000201005004090400f700c873b808090504105802030d580904"], &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0}) getsockopt$bt_hci(r0, 0x84, 0x3, &(0x7f0000000040)=""/4111, &(0x7f0000000000)=0x100f) 11m40.981785061s ago: executing program 7 (id=601): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f0000001600)=""/118, 0x0, 0x3332f000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000100)) r3 = dup(r2) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000040)={0x0, r3}) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0xc3ec, 0x3, 0x401, 0x9, 0x19, "502fa8c758ff0268"}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, 0x0) syz_emit_ethernet(0x31, &(0x7f0000000680)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x2, 0xb, 0x23, 0x66, 0x0, 0x6, 0x11, 0x0, @remote, @multicast1, {[@timestamp_addr={0x44, 0x4, 0x6c, 0x1, 0xb}]}}, {0x4e22, 0x4e21, 0xb, 0x0, @opaque="45dfea"}}}}}, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0x400) 11m39.800012136s ago: executing program 7 (id=603): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000580)={[{@nomblk_io_submit}, {@journal_dev={'journal_dev', 0x3d, 0x3f2}}, {@noload}]}, 0x3, 0x482, &(0x7f0000001240)="$eJzs3M9rHFUcAPDvTLJpY6qJtf5q/RGtYhFNmrZqDx5UFDxUEBTU45LEUptWaSLYEjD1UE8ignfx6L/gSS8ingSvepdCkV5sPa3Mzkyym2w22XQ3W93PB7b9vvmR974783bfzNvdAAbWZPZPErEvIn6PiPG82LzBZP7fjevLszevL88mUau99VdS3+7v68uz5ablfmONhUjiUIt6Fy9eOltdWJi/UJSnl859NL148dKzZ85VT8+fnj9/7OTJE8dnXnj+2HNdyXMs0iJ6/b2v3jj1RVP+6/Loksl2K5+s1bpcXX/d2RAP97EddGaoOF6Vev8fj6GGozcer322Wvi0Tw0EeqZWq9XGNl+9UgP+x5JoLuvyMCjKN/ry+rfVdfBLPRt99N+1l/MLoCzvG8UjXzO8esegsu76tpsmI+LdlX++yR7Rm/sQAABNfsjGP89ko53l2WzssTb+SOO+hu3uKuaGJiLi7ojYHxH3xPk4EBH3RtS3vT8iHuiw/oZJkvowc+P4J7264+S2IRv/vVjMbTWP/8rRX0wM1UsX80JUkvfPLMwfLZ6TI1HZk5Vn2tTx46u/fbnZusbxX/bI6i/HgkU7rg7vad5nrrpU3XnGza5djjg43Cr/ZHUmIImIByPiYKs/kG5dx5mnv3tos3Vb599GFyaaat9GPJUf/5VYl38paT8/Ob03FuaPTpdnxUa//Hrlzc3qX5f/3ugk/y7Ijv8dLc//1fwnksb52sXO67jyx+ebXtNMVoqgg/N/pbpUHUnerscjxbJPqktLF2YiRpJTeaMblx9b27csl9tn+R853Lr/74+1Z+JQRGQn8cMR8UhEPFocu8ci4vGIONwm/59feeKD9ctGy/xv5fzvgiz/uY6O/1owEs1L0hbbZMHQ2Z++b6p0Yi0s8r/Z/vXvRD06UizZzuvfxla0Dm71+QMAAID/gjQi9kWSTq3GaTo1lX+G/0A+9Z35+Pxc/h2Biaik5Z2u8Yb7oTPFZX1evhwR+UcLyvXHI63fN/56aLRenpr9cGGur5kDY5v0/8yfQ/1uHdBzvrAFg0v/h8HVtv9Xdq8dwO7b0P/b9vk9PW0LsLtavP+P9qMdwO5rNf73ez8wGNb1f9N+MEDc/4fBpf/D4NL/YSAtjsbWX5JvG5R/aYe7bxWMR+y8hRGx0uX2bDuISh8q3cUg0p5XMdLbU6tnQbKzNidxOzS+oe9s4Z02PxwOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwu/g3AAD//0C6yvY=") syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x10040d0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r0, &(0x7f0000000580)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/27, 0x1b}, 0x3}], 0x1, 0x2, 0x0) 11m38.571462104s ago: executing program 7 (id=605): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x34, &(0x7f0000000180), 0x4) chdir(&(0x7f0000000080)='./file1\x00') syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000100)='./file2\x00', 0x1000b, &(0x7f00000000c0)=ANY=[], 0x21, 0x1c5, &(0x7f00000002c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000100)=""/54, 0x36) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) writev(r3, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000180)="85063125", 0x4}], 0x2) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101) (async) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) (async) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) setsockopt$sock_attach_bpf(r0, 0x1, 0x34, &(0x7f0000000180), 0x4) (async) chdir(&(0x7f0000000080)='./file1\x00') (async) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000100)='./file2\x00', 0x1000b, &(0x7f00000000c0)=ANY=[], 0x21, 0x1c5, &(0x7f00000002c0)="$eJzsVU+rUkEU/42OV2tRrSNwkZQt0uu1ok3kKvwAbaNEbyZd++MVShG6rfwebfwaLdq3CQqCNrWooIXRNowzc8bmPQXf0+f7A/OD62/O35kzR848ip/HAPB3OmqiBgUPZ/BZCEgAeaF1d7Kaf3qaSyx/l5qvsP4N84wRD4aPG1EU9ra4WG5L6YNgPxnJf7fpw/Te2WV5hFyd8BPl227xmy/EGhe1coFEJz0OBR7S4n7alEzFb5rwz0EdLI81+y730GUsdjl3VP95sWj6L95+ncIvVfHH6ahJiwc8pUjX0p+wfaib7yyf81J9Io3Z3IeGHwmXAZT73WfleDC82uk22mE7fBIE1Rv+Nd+/HpQfdqLQ17/C2sKMKOLarSxopp6y7BkAX3jAnoaFH3pbczS2CzuW5vCMh3TxInYgZcUaFng7j+Uw0BXcxSVQS18kwtIWVBYJVVIdAmkl8NB/xdei98opr1LzadQaQ6j9VNgEUufIzF0lPFgCuVVvJkY1Zi4w15knzF+ZzZtl3iKpMnxjqZjQjb5s9Pu9iveeQyr06ild4BlrcC6xL4x2/c05THEXsnBwcHBwcHBwOGH4FwAA//+74FHW") (async) openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) (async) getdents64(r1, &(0x7f0000000100)=""/54, 0x36) (async) open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) (async) writev(r3, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000180)="85063125", 0x4}], 0x2) (async) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, 0x0) (async) 11m37.569742116s ago: executing program 7 (id=607): r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r0, 0x2007ffc) sendfile(r0, r0, 0x0, 0x800000009) 11m22.363174255s ago: executing program 39 (id=607): r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r0, 0x2007ffc) sendfile(r0, r0, 0x0, 0x800000009) 2m23.485505315s ago: executing program 6 (id=1055): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x1c, 0x12, 0xa, 0x20b, 0x0, 0x0, {0x2}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x9}]}], {0x14}}, 0x44}}, 0x0) 2m22.500590846s ago: executing program 6 (id=1056): syz_mount_image$udf(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f00000005c0), 0x1, 0x519, &(0x7f0000000600)="$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") (fail_nth: 8) 2m21.354224106s ago: executing program 6 (id=1060): mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) move_pages(0x0, 0x1, &(0x7f00000003c0)=[&(0x7f0000ffc000/0x4000)=nil], &(0x7f0000000540)=[0x1, 0x1], 0x0, 0x0) 2m18.488221477s ago: executing program 6 (id=1061): openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r5 = accept$packet(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000200)=@req3={0xffff, 0xfffffffb, 0x80000000, 0x0, 0x7, 0xe, 0x7fff}, 0x1c) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 2m15.392216455s ago: executing program 6 (id=1064): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000280)=[@nested_amd_vmsave={0x183, 0x18, 0x1}, @nested_create_vm={0x12d, 0x18}, @nested_vmresume={0x130, 0x18}, @enable_nested={0x12c, 0x18}, @nested_amd_stgi={0x17e, 0x10}, @nested_amd_stgi={0x17e, 0x10}], 0x80}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x3a, [0xfffffff8, 0x8, 0x5, 0x10009, 0x8, 0x155f, 0x6, 0x2, 0x25cd, 0x1, 0xb4, 0xa, 0xb2b9, 0x6, 0x8, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x1000, 0x1, 0x0, 0xd, 0x4, 0x12a0, 0x8000, 0x1, 0x7, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10001, 0x5, 0x91, 0x4, 0x4, 0x16, 0x0, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xffffff81, 0xff, 0x2, 0x2, 0x2, 0x2, 0x7, 0x4, 0x7, 0x4, 0x4007f, 0xffffffff, 0x9212], [0x9, 0x16e, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000077, 0x8e, 0xd50, 0x7, 0x5, 0xfffffffd, 0x80a, 0x4, 0x5, 0x1000, 0x0, 0x200b395, 0x400000, 0x80000000, 0x4, 0x19, 0x7, 0x1, 0x3, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x96, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x1, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1ce, 0x1, 0x80000004, 0x80000001, 0x6, 0x2, 0x9, 0x95, 0x80000000, 0x4, 0xfffffff9, 0x40000003, 0x1000, 0xfffff804, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x5, 0x200006, 0x8, 0x400, 0xfffffffe, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x89, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x8000, 0x401, 0x3e55, 0x5, 0xd3, 0x8, 0x3437, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x80, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0x0, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0x3, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x8000007, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0x9, 0xfffffff7, 0x8, 0x7, 0x5396, 0x936, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xffffffff, 0x7fffffff, 0x9, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x0, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0xc, 0x463f, 0x4, 0xdab, 0x8003, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CAP_PTP_KVM(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000300)) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0xc084) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2m12.319032299s ago: executing program 6 (id=1067): r0 = socket$inet6(0xa, 0x3, 0x3c) syz_open_dev$usbmon(&(0x7f0000000000), 0x8, 0x101802) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x1}, 0x10) write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe000000000000000800040001000000", 0x24) fstat(r1, &(0x7f00000001c0)) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) madvise(&(0x7f0000ac9000/0x2000)=nil, 0x2000, 0x10) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket(0x15, 0x5, 0xb8) getsockopt(r5, 0x200000000114, 0x2710, &(0x7f000001eec0)=""/102389, &(0x7f0000000000)=0xc74) connect$inet6(r0, &(0x7f0000000400)={0xa, 0xfffd, 0x0, @empty, 0x5}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x9, 0xbf, &(0x7f000000cf3d)=""/191, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) 1m55.506463577s ago: executing program 40 (id=1067): r0 = socket$inet6(0xa, 0x3, 0x3c) syz_open_dev$usbmon(&(0x7f0000000000), 0x8, 0x101802) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x1}, 0x10) write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe000000000000000800040001000000", 0x24) fstat(r1, &(0x7f00000001c0)) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) madvise(&(0x7f0000ac9000/0x2000)=nil, 0x2000, 0x10) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket(0x15, 0x5, 0xb8) getsockopt(r5, 0x200000000114, 0x2710, &(0x7f000001eec0)=""/102389, &(0x7f0000000000)=0xc74) connect$inet6(r0, &(0x7f0000000400)={0xa, 0xfffd, 0x0, @empty, 0x5}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x9, 0xbf, &(0x7f000000cf3d)=""/191, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) 8.310525424s ago: executing program 9 (id=1174): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x1fe, 0x2, 0x2000, 0x2000, &(0x7f0000002000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x5f, 0x0, 0x0) 4.899308006s ago: executing program 9 (id=1182): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x200800, 0x0) flock(r0, 0x1) close(0x3) 4.80208815s ago: executing program 2 (id=1183): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCXONC(r1, 0x540a, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4000014}, 0x40) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)) 4.250528662s ago: executing program 3 (id=1184): unshare(0x2040400) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, 0x0, 0x0}, 0x20) 3.957444624s ago: executing program 2 (id=1185): prctl$PR_SET_THP_DISABLE(0x4e, 0x0) 3.689286513s ago: executing program 9 (id=1186): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}, 0x6}, 0x1c) 3.423763553s ago: executing program 3 (id=1187): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffffffe}}, 0x81, 0xe79}, &(0x7f0000000240)=0x90) 3.230645307s ago: executing program 2 (id=1188): connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) 2.576330093s ago: executing program 3 (id=1189): r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) socket$inet(0x2, 0x3, 0x2) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @sit={{0x8}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x440b0) 2.210919185s ago: executing program 2 (id=1190): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) socket(0x10, 0x803, 0x0) close(0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r2], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 1.949570812s ago: executing program 9 (id=1191): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioprio_get$pid(0x2, 0x0) 1.756523157s ago: executing program 3 (id=1192): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x101ab7a27ff97a38) 1.227707153s ago: executing program 2 (id=1193): r0 = syz_io_uring_setup(0x1, &(0x7f0000000580)={0x0, 0x226c, 0x13500, 0x2, 0xeffffffd}, &(0x7f0000000240), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x21, &(0x7f0000000340), 0x1) 1.016320503s ago: executing program 3 (id=1194): prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) write$eventfd(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0xf5, 0x9, 0x7fff0000}]}) getcwd(0x0, 0x0) 909.824811ms ago: executing program 9 (id=1195): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffffe39}]}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r0, &(0x7f0000001180)={0x2020}, 0x2020) 502.249549ms ago: executing program 2 (id=1196): sendto$inet6(0xffffffffffffffff, &(0x7f0000000380)="a20a", 0x2, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1000) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x40000073, 0x0, 0x81}]}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x75, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x8, 0xfffffff8, 0x8, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 278.914705ms ago: executing program 3 (id=1197): socket$kcm(0x10, 0x2, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socket$kcm(0xa, 0x2, 0x3a) r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r1, &(0x7f00000001c0)={&(0x7f00000000c0)=@tipc=@name={0x1e, 0x2, 0x3, {{0x43}, 0x5}}, 0x80, 0x0, 0x0, &(0x7f0000000580)=ANY=[], 0x1458}, 0x240048c0) 0s ago: executing program 9 (id=1198): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xfe, &(0x7f0000001340)=[{&(0x7f00000001c0)="2e00000010008188040f46ecdb4cb9cca7480ef40f000000e3bd6efb010509000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) kernel console output (not intermixed with test programs): 003 [ 1667.000185][T12433] RBP: 00007f347b19d090 R08: 0000000000000000 R09: 0000000000000000 [ 1667.000279][T12433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1667.000368][T12433] R13: 00007f347a616038 R14: 00007f347a615fa0 R15: 00007ffe44d75548 [ 1667.000516][T12433] [ 1667.314528][T12438] netlink: 40 bytes leftover after parsing attributes in process `syz.9.866'. [ 1667.324254][T12438] netlink: 32 bytes leftover after parsing attributes in process `syz.9.866'. [ 1667.410316][T12440] loop9: detected capacity change from 0 to 128 [ 1667.760286][T12435] syz.9.866: attempt to access beyond end of device [ 1667.760286][T12435] loop9: rw=2049, sector=154, nr_sectors = 96 limit=128 [ 1667.880889][T12187] hsr_slave_0: entered promiscuous mode [ 1667.912853][T12435] syz.9.866: attempt to access beyond end of device [ 1667.912853][T12435] loop9: rw=2049, sector=138, nr_sectors = 16 limit=128 [ 1667.968745][T12187] hsr_slave_1: entered promiscuous mode [ 1668.018910][T12187] debugfs: 'hsr0' already exists in 'hsr' [ 1668.052055][T12187] Cannot create hsr debugfs directory [ 1668.527974][T12429] hfsplus: b-tree write err: -5, ino 2 [ 1668.570517][T12429] hfsplus: b-tree write err: -5, ino 17 [ 1668.649217][ T6583] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1668.685848][T12429] hfsplus: bad catalog entry type [ 1668.846177][ T6583] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1668.881714][ T6583] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1668.912549][ T6583] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1668.972721][ T6583] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1669.010030][ T6583] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1669.093990][ T6583] usb 4-1: config 0 descriptor?? [ 1669.390869][ T1093] hfsplus: b-tree write err: -5, ino 25 [ 1669.419907][ T1093] hfsplus: b-tree write err: -5, ino 4 [ 1669.466779][ T1093] hfsplus: b-tree write err: -5, ino 2 [ 1669.501362][ T1093] hfsplus: b-tree write err: -5, ino 26 [ 1669.527559][ T1093] hfsplus: b-tree write err: -5, ino 17 [ 1669.594971][ T6583] plantronics 0003:047F:FFFF.0010: reserved main item tag 0xd [ 1669.864600][ T6583] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1669.993612][ T6583] usb 4-1: USB disconnect, device number 5 [ 1670.208966][T12451] loop9: detected capacity change from 0 to 8192 [ 1670.298244][T12451] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1670.385261][T12451] FAULT_INJECTION: forcing a failure. [ 1670.385261][T12451] name failslab, interval 1, probability 0, space 0, times 0 [ 1670.493575][T12451] CPU: 1 UID: 0 PID: 12451 Comm: syz.9.868 Tainted: G L syzkaller #0 PREEMPT(full) [ 1670.493757][T12451] Tainted: [L]=SOFTLOCKUP [ 1670.493823][T12451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1670.493907][T12451] Call Trace: [ 1670.493966][T12451] [ 1670.494021][T12451] __dump_stack+0x26/0x30 [ 1670.494209][T12451] dump_stack_lvl+0x14c/0x1c0 [ 1670.494393][T12451] dump_stack+0x1e/0x25 [ 1670.494561][T12451] should_fail_ex+0x7e2/0x8c0 [ 1670.494773][T12451] should_failslab+0x158/0x200 [ 1670.494935][T12451] __kmalloc_noprof+0x1e0/0x1680 [ 1670.495093][T12451] ? kfree+0x20/0x1130 [ 1670.495218][T12451] ? tomoyo_realpath_from_path+0xeb/0x9f0 [ 1670.495414][T12451] ? tomoyo_path_number_perm+0x41/0x7d0 [ 1670.495566][T12451] ? filter_irq_stacks+0x49/0x190 [ 1670.495762][T12451] ? kmsan_get_metadata+0xf1/0x160 [ 1670.495984][T12451] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1670.496219][T12451] tomoyo_realpath_from_path+0xeb/0x9f0 [ 1670.496424][T12451] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1670.496649][T12451] ? __srcu_read_lock+0x5e/0xd0 [ 1670.496820][T12451] tomoyo_path_number_perm+0x1d0/0x7d0 [ 1670.497018][T12451] ? kmsan_get_metadata+0xf1/0x160 [ 1670.497289][T12451] tomoyo_file_ioctl+0x3d/0x50 [ 1670.497488][T12451] security_file_ioctl+0x139/0x570 [ 1670.497724][T12451] __se_sys_ioctl+0xbb/0x400 [ 1670.497943][T12451] __x64_sys_ioctl+0x97/0xe0 [ 1670.498144][T12451] x64_sys_call+0x1975/0x3ea0 [ 1670.498337][T12451] do_syscall_64+0x134/0xf80 [ 1670.498505][T12451] ? clear_bhb_loop+0x50/0xa0 [ 1670.498670][T12451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1670.498836][T12451] RIP: 0033:0x7fef2059c799 [ 1670.498949][T12451] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1670.499089][T12451] RSP: 002b:00007fef2151a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1670.499230][T12451] RAX: ffffffffffffffda RBX: 00007fef20815fa0 RCX: 00007fef2059c799 [ 1670.499340][T12451] RDX: 0000200000000000 RSI: 00000000c0185879 RDI: 0000000000000004 [ 1670.499439][T12451] RBP: 00007fef2151a090 R08: 0000000000000000 R09: 0000000000000000 [ 1670.499535][T12451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1670.499628][T12451] R13: 00007fef20816038 R14: 00007fef20815fa0 R15: 00007fff94db4d98 [ 1670.499775][T12451] [ 1670.856178][T12451] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1670.872080][T12062] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1671.128919][ T5783] Bluetooth: hci5: command 0x0406 tx timeout [ 1671.338769][T12456] fido_id[12456]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1673.450584][T12187] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1673.598498][T12187] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1673.794510][T12187] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1673.845656][ T5783] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1673.873532][ T5783] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1673.893871][ T5783] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1673.933957][ T5783] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1673.964860][ T5783] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1674.021597][T12187] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1674.268941][T12480] loop9: detected capacity change from 0 to 4096 [ 1674.525697][T12491] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1674.666494][T12481] wlan0 speed is unknown, defaulting to 1000 [ 1674.718928][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 1674.719011][ T29] audit: type=1800 audit(1774502132.935:584): pid=12480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.875" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 1676.112876][T11291] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1676.185954][ T5783] Bluetooth: hci3: command tx timeout [ 1676.309186][T11291] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1676.332758][T11291] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1676.344480][T11291] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1676.415674][T11291] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1676.462527][T11291] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1676.493041][T11291] usb 10-1: config 0 descriptor?? [ 1676.999762][T11291] plantronics 0003:047F:FFFF.0011: reserved main item tag 0xd [ 1677.264990][T11291] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 1677.393336][T11291] usb 10-1: USB disconnect, device number 9 [ 1677.569168][ T794] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 1677.842463][ T794] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 12408, setting to 64 [ 1677.895572][ T794] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1677.950325][ T794] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1678.025221][ T794] usb 7-1: config 0 descriptor?? [ 1678.273386][ T5783] Bluetooth: hci3: command tx timeout [ 1678.474753][ T794] ath6kl: Failed to submit usb control message: -71 [ 1678.481799][ T794] ath6kl: unable to send the bmi data to the device: -71 [ 1678.556337][ T794] ath6kl: Unable to send get target info: -71 [ 1678.624624][ T794] ath6kl: Failed to init ath6kl core: -71 [ 1678.690327][ T794] ath6kl_usb 7-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1678.777355][T12516] fido_id[12516]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 1678.850443][ T794] usb 7-1: USB disconnect, device number 43 [ 1678.858611][T12522] loop3: detected capacity change from 0 to 512 [ 1678.875528][T12522] EXT4-fs: Ignoring removed bh option [ 1678.881193][T12522] EXT4-fs: inline encryption not supported [ 1679.059213][T12187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1679.155254][T12522] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.885: missing EA_INODE flag [ 1679.243020][T10420] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1679.253425][T12522] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1679.262371][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 1679.278555][ C1] EXT4-fs (loop3): initial error at time 1774502137: ext4_xattr_inode_iget:441: inode 11 [ 1679.288870][ C1] EXT4-fs (loop3): last error at time 1774502137: ext4_xattr_inode_iget:441: inode 11 [ 1679.306575][T12522] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.885: error while reading EA inode 11 err=-117 [ 1679.358731][T12522] loop3: lost filesystem error report for type 5 error -117 [ 1679.361344][T12522] EXT4-fs (loop3): 1 orphan inode deleted [ 1679.401413][T12522] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1679.547415][T10420] usb 10-1: config index 0 descriptor too short (expected 23569, got 27) [ 1679.603624][T10420] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1679.670721][T10420] usb 10-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1679.681769][T12522] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1679.692013][T10420] usb 10-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1679.714620][T10420] usb 10-1: Manufacturer: syz [ 1679.785236][T10420] usb 10-1: config 0 descriptor?? [ 1679.917669][T10420] igorplugusb 10-1:0.0: incorrect number of endpoints [ 1680.003376][T12481] chnl_net:caif_netlink_parms(): no params data found [ 1680.208096][T12536] loop9: detected capacity change from 0 to 64 [ 1680.359310][ T5783] Bluetooth: hci3: command tx timeout [ 1680.473272][T12536] BFS-fs: bfs_fill_super(): loop9 is unclean, continuing [ 1681.828525][T12543] loop3: detected capacity change from 0 to 512 [ 1682.406788][ T5783] Bluetooth: hci3: command tx timeout [ 1682.890456][ T107] bridge_slave_1: left allmulticast mode [ 1682.931939][ T107] bridge_slave_1: left promiscuous mode [ 1683.053336][ T107] bridge0: port 2(bridge_slave_1) entered disabled state [ 1683.167667][ T107] bridge_slave_0: left allmulticast mode [ 1683.191668][ T107] bridge_slave_0: left promiscuous mode [ 1683.242910][ T107] bridge0: port 1(bridge_slave_0) entered disabled state [ 1684.445643][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1684.452953][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1684.843705][T12559] netlink: 'syz.3.892': attribute type 3 has an invalid length. [ 1685.929503][ T107] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1686.111433][ T107] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1686.203815][ T107] bond0 (unregistering): Released all slaves [ 1686.530535][T12187] 8021q: adding VLAN 0 to HW filter on device team0 [ 1687.096834][ T6583] usb 10-1: USB disconnect, device number 10 [ 1687.362719][ T107] hsr_slave_0: left promiscuous mode [ 1687.390715][ T107] hsr_slave_1: left promiscuous mode [ 1687.418675][ T107] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1687.479667][ T107] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1688.613017][ T6583] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1688.705530][T12576] loop6: detected capacity change from 0 to 32768 [ 1688.806055][T12576] XFS (loop6): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1688.852897][ T6583] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 12408, setting to 64 [ 1688.978575][ T6583] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1689.071450][ T6583] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1689.150267][ T6583] usb 10-1: config 0 descriptor?? [ 1689.257332][T12576] XFS (loop6): Ending clean mount [ 1689.268231][ T107] team0 (unregistering): Port device team_slave_1 removed [ 1689.435689][ T107] team0 (unregistering): Port device team_slave_0 removed [ 1689.855297][ T6066] bridge0: port 1(bridge_slave_0) entered blocking state [ 1689.863191][ T6066] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1690.120049][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 1690.127796][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1690.250903][ T6583] ath6kl: Failed to submit usb control message: -71 [ 1690.280351][ T6583] ath6kl: unable to send the bmi data to the device: -71 [ 1690.287899][ T6583] ath6kl: Unable to send get target info: -71 [ 1690.305526][ T6583] ath6kl: Failed to init ath6kl core: -71 [ 1690.341413][ T6583] ath6kl_usb 10-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1690.402993][ T6583] usb 10-1: USB disconnect, device number 11 [ 1691.459304][T12481] bridge0: port 1(bridge_slave_0) entered blocking state [ 1691.493066][T12481] bridge0: port 1(bridge_slave_0) entered disabled state [ 1691.553061][T12481] bridge_slave_0: entered allmulticast mode [ 1691.613210][T12481] bridge_slave_0: entered promiscuous mode [ 1691.675649][T12481] bridge0: port 2(bridge_slave_1) entered blocking state [ 1691.683310][T11504] Bluetooth: hci0: command 0x0406 tx timeout [ 1691.713285][T12481] bridge0: port 2(bridge_slave_1) entered disabled state [ 1691.721094][T12481] bridge_slave_1: entered allmulticast mode [ 1691.733394][T12481] bridge_slave_1: entered promiscuous mode [ 1691.904868][T12603] FAULT_INJECTION: forcing a failure. [ 1691.904868][T12603] name failslab, interval 1, probability 0, space 0, times 0 [ 1692.022571][T12603] CPU: 1 UID: 0 PID: 12603 Comm: syz.9.898 Tainted: G L syzkaller #0 PREEMPT(full) [ 1692.022764][T12603] Tainted: [L]=SOFTLOCKUP [ 1692.022827][T12603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1692.022917][T12603] Call Trace: [ 1692.022974][T12603] [ 1692.023030][T12603] __dump_stack+0x26/0x30 [ 1692.023224][T12603] dump_stack_lvl+0x14c/0x1c0 [ 1692.023405][T12603] dump_stack+0x1e/0x25 [ 1692.023575][T12603] should_fail_ex+0x7e2/0x8c0 [ 1692.023781][T12603] should_failslab+0x158/0x200 [ 1692.023940][T12603] kmem_cache_alloc_noprof+0x146/0x1270 [ 1692.024103][T12603] ? security_file_alloc+0x7a/0x6c0 [ 1692.024314][T12603] ? kmem_cache_alloc_noprof+0x430/0x1270 [ 1692.024485][T12603] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1692.024713][T12603] security_file_alloc+0x7a/0x6c0 [ 1692.024928][T12603] alloc_empty_file+0x1ce/0x920 [ 1692.025115][T12603] alloc_file_pseudo+0x1dd/0x400 [ 1692.025301][T12603] __shmem_file_setup+0x4c4/0x5f0 [ 1692.025472][T12603] shmem_file_setup+0x7f/0xb0 [ 1692.025626][T12603] memfd_alloc_file+0x94/0x990 [ 1692.025813][T12603] __se_sys_memfd_create+0x855/0xb10 [ 1692.025991][T12603] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1692.026235][T12603] __x64_sys_memfd_create+0x78/0xb0 [ 1692.026425][T12603] x64_sys_call+0x256c/0x3ea0 [ 1692.026623][T12603] do_syscall_64+0x134/0xf80 [ 1692.026795][T12603] ? clear_bhb_loop+0x50/0xa0 [ 1692.026967][T12603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1692.027136][T12603] RIP: 0033:0x7fef2059c799 [ 1692.027254][T12603] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1692.027396][T12603] RSP: 002b:00007fef21519e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 1692.027544][T12603] RAX: ffffffffffffffda RBX: 0000000000000168 RCX: 00007fef2059c799 [ 1692.027652][T12603] RDX: 00007fef21519ee0 RSI: 0000000000000000 RDI: 00007fef20632e79 [ 1692.027765][T12603] RBP: 0000200000000240 R08: 00000000ffffffff R09: 0000000000000000 [ 1692.027867][T12603] R10: 0000000000000001 R11: 0000000000000202 R12: 00002000000001c0 [ 1692.027979][T12603] R13: 00007fef21519ee0 R14: 00007fef21519ea0 R15: 0000200000000200 [ 1692.028138][T12603] [ 1692.296396][T12481] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1692.609232][T11504] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1692.638081][T11504] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1692.650192][T11504] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1692.665058][T11504] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1692.678089][T11504] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1692.695646][T12481] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1693.173057][ T7593] XFS (loop6): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1693.320117][T12481] team0: Port device team_slave_0 added [ 1693.326605][T12614] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 1693.353298][T12605] wlan0 speed is unknown, defaulting to 1000 [ 1693.410586][T12612] binder: 12611:12612 ioctl c0306201 2000000003c0 returned -14 [ 1693.495874][T12481] team0: Port device team_slave_1 added [ 1693.812567][T12614] netlink: 16 bytes leftover after parsing attributes in process `syz.3.900'. [ 1694.344163][T12481] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1694.388992][T12481] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1694.461566][T12481] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1694.571841][T12481] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1694.632750][T12481] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1694.772641][T12481] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1694.828155][T11504] Bluetooth: hci4: command tx timeout [ 1695.933269][T12481] hsr_slave_0: entered promiscuous mode [ 1695.979093][T12481] hsr_slave_1: entered promiscuous mode [ 1696.029943][T12481] debugfs: 'hsr0' already exists in 'hsr' [ 1696.130193][T12481] Cannot create hsr debugfs directory [ 1696.283978][T11291] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 1696.462469][T11291] usb 7-1: device descriptor read/64, error -71 [ 1696.760564][T11291] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 1696.882935][T11504] Bluetooth: hci4: command tx timeout [ 1696.922524][T11291] usb 7-1: device descriptor read/64, error -71 [ 1696.942914][ T6583] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1697.039308][T11291] usb usb7-port1: attempt power cycle [ 1697.160439][ T6583] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 12408, setting to 64 [ 1697.186097][ T6583] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1697.226085][ T6583] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1697.305002][ T6583] usb 4-1: config 0 descriptor?? [ 1697.475487][T11291] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 1697.513907][T11291] usb 7-1: device descriptor read/8, error -71 [ 1697.567993][ T6583] ath6kl: Failed to submit usb control message: -71 [ 1697.577905][ T6583] ath6kl: unable to send the bmi data to the device: -71 [ 1697.596396][ T6583] ath6kl: Unable to send get target info: -71 [ 1697.615719][ T6583] ath6kl: Failed to init ath6kl core: -71 [ 1697.659380][ T6583] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1697.753420][T11291] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 1697.828373][ T6583] usb 4-1: USB disconnect, device number 6 [ 1697.875000][T11291] usb 7-1: device descriptor read/8, error -71 [ 1698.024065][T11291] usb usb7-port1: unable to enumerate USB device [ 1698.522075][T12605] chnl_net:caif_netlink_parms(): no params data found [ 1698.627426][T12666] netlink: 12 bytes leftover after parsing attributes in process `syz.3.910'. [ 1698.963586][T11504] Bluetooth: hci4: command tx timeout [ 1699.304626][T12671] loop3: detected capacity change from 0 to 128 [ 1699.354993][T12671] vfat: Unknown parameter 'ÿ' [ 1699.668994][ T29] audit: type=1326 audit(1774502157.885:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12674 comm="syz.9.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef2059c799 code=0x7ffc0000 [ 1699.724549][ T794] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 1699.737881][ T29] audit: type=1326 audit(1774502157.945:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12674 comm="syz.9.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef2059c799 code=0x7ffc0000 [ 1699.803747][ T29] audit: type=1326 audit(1774502157.955:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12674 comm="syz.9.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fef2059c799 code=0x7ffc0000 [ 1699.892541][T11435] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 1699.951939][ T794] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 10 [ 1699.998560][ T29] audit: type=1326 audit(1774502157.955:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12674 comm="syz.9.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef2059c799 code=0x7ffc0000 [ 1700.053866][ T794] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1700.082740][ T794] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1700.135075][ T794] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1700.156069][ T29] audit: type=1326 audit(1774502157.955:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12674 comm="syz.9.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef2059c799 code=0x7ffc0000 [ 1700.189749][T11435] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1700.239138][ T29] audit: type=1326 audit(1774502158.005:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12674 comm="syz.9.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fef2059c799 code=0x7ffc0000 [ 1700.270376][ T794] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1700.290903][T11435] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1700.330011][ T794] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1700.352526][T11435] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1700.392721][ T794] usb 4-1: Product: syz [ 1700.397132][ T794] usb 4-1: Manufacturer: syz [ 1700.398712][ T29] audit: type=1326 audit(1774502158.005:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12674 comm="syz.9.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef2059c799 code=0x7ffc0000 [ 1700.444593][ T794] usb 4-1: SerialNumber: syz [ 1700.472443][T11435] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1700.481850][T11435] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1700.498864][ T794] usb 4-1: config 0 descriptor?? [ 1700.507243][T12671] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1700.516353][T11435] usb 7-1: Product: syz [ 1700.520899][T11435] usb 7-1: Manufacturer: syz [ 1700.530689][T11435] usb 7-1: SerialNumber: syz [ 1700.539319][ T794] usb 4-1: ucan: probing device on interface #0 [ 1700.575623][T11435] usb 7-1: config 0 descriptor?? [ 1700.581188][ T29] audit: type=1326 audit(1774502158.055:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12674 comm="syz.9.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fef2059c799 code=0x7ffc0000 [ 1700.597477][ T794] usb 4-1: ucan: invalid endpoint configuration [ 1700.638239][ T14] bridge_slave_1: left allmulticast mode [ 1700.664651][T11435] garmin_gps 7-1:0.0: Garmin GPS usb/tty converter detected [ 1700.675519][ T14] bridge_slave_1: left promiscuous mode [ 1700.682337][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 1700.695618][ T794] usb 4-1: ucan: probe failed; try to update the device firmware [ 1700.707733][ T29] audit: type=1326 audit(1774502158.055:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12674 comm="syz.9.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef2059c799 code=0x7ffc0000 [ 1700.748696][T11435] garmin_gps ttyUSB0: failed to submit interrupt urb: -22 [ 1700.777814][T11435] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -22 [ 1700.803642][ T14] bridge_slave_0: left allmulticast mode [ 1700.809683][ T14] bridge_slave_0: left promiscuous mode [ 1700.849877][ T6583] usb 7-1: USB disconnect, device number 48 [ 1700.854953][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 1700.867316][ T6583] garmin_gps 7-1:0.0: device disconnected [ 1700.992859][ T29] audit: type=1326 audit(1774502158.075:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12674 comm="syz.9.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fef2059c799 code=0x7ffc0000 [ 1701.052770][T11504] Bluetooth: hci4: command tx timeout [ 1701.104385][T11435] usb 4-1: USB disconnect, device number 7 [ 1701.472676][ T794] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 1701.513220][T11435] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1701.659805][ T794] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1701.688079][ T794] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1701.729362][T11435] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 1701.763115][ T794] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1701.776220][T11435] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1701.789896][ T794] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1701.818145][T11435] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1701.842775][ T794] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1701.866587][T11435] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 1701.882468][ T794] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1701.922994][T11435] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1701.938700][ T794] usb 10-1: config 0 descriptor?? [ 1701.952605][T11435] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1701.984590][T11435] usb 4-1: Product: syz [ 1702.005848][T11435] usb 4-1: Manufacturer: syz [ 1702.032908][T11435] usb 4-1: SerialNumber: syz [ 1702.086264][T11435] usb 4-1: config 0 descriptor?? [ 1702.130483][ T14] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1702.147801][T11435] usb 4-1: ucan: probing device on interface #0 [ 1702.158404][T11435] usb 4-1: ucan: invalid endpoint configuration [ 1702.184400][T11435] usb 4-1: ucan: probe failed; try to update the device firmware [ 1702.206523][ T14] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1702.311437][ T14] bond0 (unregistering): Released all slaves [ 1702.468827][ T794] usbhid 10-1:0.0: can't add hid device: -71 [ 1702.502828][ T794] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1702.599531][ T794] usb 10-1: USB disconnect, device number 12 [ 1702.619517][ T6583] usb 4-1: USB disconnect, device number 8 [ 1702.938302][ T14] hsr_slave_0: left promiscuous mode [ 1702.968046][ T14] hsr_slave_1: left promiscuous mode [ 1703.003639][ T14] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1703.057816][ T14] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1703.286111][ T6583] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1703.469376][ T6583] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 12408, setting to 64 [ 1703.515578][ T6583] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1703.559224][ T6583] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1703.635502][ T6583] usb 4-1: config 0 descriptor?? [ 1703.748044][T12695] loop6: detected capacity change from 0 to 512 [ 1703.841273][T12695] UDF-fs: warning (device loop6): udf_load_vrs: No VRS found [ 1703.867794][T12695] UDF-fs: Scanning with blocksize 512 failed [ 1703.926063][T12695] UDF-fs: warning (device loop6): udf_load_vrs: No VRS found [ 1703.951412][ T6583] ath6kl: Failed to submit usb control message: -71 [ 1703.972696][ T6583] ath6kl: unable to send the bmi data to the device: -71 [ 1703.999568][T12695] UDF-fs: Scanning with blocksize 1024 failed [ 1704.011765][ T6583] ath6kl: Unable to send get target info: -71 [ 1704.047562][ T6583] ath6kl: Failed to init ath6kl core: -71 [ 1704.048719][T12695] UDF-fs: warning (device loop6): udf_load_vrs: No VRS found [ 1704.074204][T12695] UDF-fs: Scanning with blocksize 2048 failed [ 1704.117925][ T6583] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1704.147148][T12695] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 1704.198202][ T6583] usb 4-1: USB disconnect, device number 9 [ 1704.221160][T12695] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1704.437286][ T14] team0 (unregistering): Port device team_slave_1 removed [ 1704.545526][ T14] team0 (unregistering): Port device team_slave_0 removed [ 1705.081380][T12701] loop6: detected capacity change from 0 to 512 [ 1705.165972][T12701] UDF-fs: warning (device loop6): udf_load_vrs: No VRS found [ 1705.176807][T12701] UDF-fs: Scanning with blocksize 512 failed [ 1705.219313][T12701] UDF-fs: warning (device loop6): udf_load_vrs: No VRS found [ 1705.262818][T12701] UDF-fs: Scanning with blocksize 1024 failed [ 1705.305511][T12701] UDF-fs: warning (device loop6): udf_load_vrs: No VRS found [ 1705.348603][T12701] UDF-fs: Scanning with blocksize 2048 failed [ 1705.440341][T12701] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 1705.547141][T12701] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1705.671057][T12705] loop3: detected capacity change from 0 to 256 [ 1705.760828][T12705] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1706.050182][T12605] bridge0: port 1(bridge_slave_0) entered blocking state [ 1706.088195][T12605] bridge0: port 1(bridge_slave_0) entered disabled state [ 1706.127312][T12605] bridge_slave_0: entered allmulticast mode [ 1706.166129][T12605] bridge_slave_0: entered promiscuous mode [ 1706.235656][T12605] bridge0: port 2(bridge_slave_1) entered blocking state [ 1706.284497][T12605] bridge0: port 2(bridge_slave_1) entered disabled state [ 1706.330628][T12605] bridge_slave_1: entered allmulticast mode [ 1706.373381][T12605] bridge_slave_1: entered promiscuous mode [ 1706.647337][T12708] loop9: detected capacity change from 0 to 2048 [ 1706.867371][T12481] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1706.950860][T12481] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1707.145512][T12605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1707.188527][T12481] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1707.263178][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 1707.263266][ T29] audit: type=1800 audit(1774502165.475:616): pid=12705 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.923" name="file1" dev="loop3" ino=1048703 res=0 errno=0 [ 1707.433042][ T29] audit: type=1800 audit(1774502165.475:617): pid=12713 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.923" name="file1" dev="loop3" ino=1048703 res=0 errno=0 [ 1707.469727][T12605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1707.749275][T12481] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1707.868424][T12605] team0: Port device team_slave_0 added [ 1707.958109][T12605] team0: Port device team_slave_1 added [ 1708.423158][T12605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1708.430331][T12605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1708.552630][T12605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1708.673631][T12733] netlink: 24 bytes leftover after parsing attributes in process `syz.3.929'. [ 1708.801752][T12605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1708.801768][T12733] loop3: detected capacity change from 0 to 512 [ 1708.835644][ T9778] usb 10-1: new full-speed USB device number 13 using dummy_hcd [ 1708.860103][T12733] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 1708.883200][T12605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1708.913201][T12733] UDF-fs: Scanning with blocksize 512 failed [ 1708.928784][T12605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1708.944823][T12733] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 1708.998026][T12733] UDF-fs: Scanning with blocksize 1024 failed [ 1709.113291][ T9778] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 1709.134284][T12733] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 1709.149469][ T9778] usb 10-1: can't read configurations, error -71 [ 1709.168204][T12733] UDF-fs: Scanning with blocksize 2048 failed [ 1709.191982][T12733] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 1709.265137][T12733] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1709.438827][T12605] hsr_slave_0: entered promiscuous mode [ 1709.487131][T12605] hsr_slave_1: entered promiscuous mode [ 1709.497435][T12605] debugfs: 'hsr0' already exists in 'hsr' [ 1709.505719][T12605] Cannot create hsr debugfs directory [ 1711.480696][T12481] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1711.577956][T12752] loop6: detected capacity change from 0 to 4096 [ 1711.805399][T12757] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1712.025627][ T29] audit: type=1800 audit(1774502170.245:618): pid=12752 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.935" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 1712.204224][T12481] 8021q: adding VLAN 0 to HW filter on device team0 [ 1712.558232][T11195] bridge0: port 1(bridge_slave_0) entered blocking state [ 1712.566006][T11195] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1712.921403][T12767] netlink: 12 bytes leftover after parsing attributes in process `syz.3.937'. [ 1712.931951][ T1093] bridge0: port 2(bridge_slave_1) entered blocking state [ 1712.939559][ T1093] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1713.783098][T12605] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1714.012706][T12605] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1714.191181][T12605] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1714.297919][ T6940] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1714.520916][T12605] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1714.528665][ T6940] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1714.568204][ T6940] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1714.612971][ T6940] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1714.658481][ T6940] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1714.783124][ T6940] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1714.814845][ T6940] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1714.842077][ T6940] usb 4-1: Product: syz [ 1714.846927][ T6940] usb 4-1: Manufacturer: syz [ 1714.885257][ T6940] usb 4-1: SerialNumber: syz [ 1714.928454][ T6940] usb 4-1: config 0 descriptor?? [ 1715.026308][ T6940] garmin_gps 4-1:0.0: Garmin GPS usb/tty converter detected [ 1715.108517][ T6940] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 1715.179402][ T6940] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8 [ 1717.099427][T12605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1717.143288][ T9778] usb 4-1: USB disconnect, device number 10 [ 1717.210625][ T9778] garmin_gps 4-1:0.0: device disconnected [ 1717.456391][T12605] 8021q: adding VLAN 0 to HW filter on device team0 [ 1717.590061][ T81] bridge0: port 1(bridge_slave_0) entered blocking state [ 1717.598009][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1717.816858][T12813] loop3: detected capacity change from 0 to 512 [ 1717.837680][ T6003] bridge0: port 2(bridge_slave_1) entered blocking state [ 1717.845392][ T6003] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1717.896136][T12813] EXT4-fs: Ignoring removed bh option [ 1717.931091][T12813] EXT4-fs: inline encryption not supported [ 1717.942615][ T6940] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 1717.963625][T12481] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1718.085184][T12813] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.946: missing EA_INODE flag [ 1718.186624][ T6940] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1718.272934][T12813] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1718.282307][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 1718.298479][ C0] EXT4-fs (loop3): initial error at time 1774502176: ext4_xattr_inode_iget:441: inode 11 [ 1718.308752][ C0] EXT4-fs (loop3): last error at time 1774502176: ext4_xattr_inode_iget:441: inode 11 [ 1718.352491][ T6940] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1718.373143][T12813] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.946: error while reading EA inode 11 err=-117 [ 1718.405457][ T6940] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1718.458631][T12813] loop3: lost filesystem error report for type 5 error -117 [ 1718.464353][T12813] EXT4-fs (loop3): 1 orphan inode deleted [ 1718.495598][ T6940] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1718.523112][T12813] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1718.568784][ T6940] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1718.624915][ T6940] usb 7-1: config 0 descriptor?? [ 1718.676383][T12813] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1719.089605][ T6940] plantronics 0003:047F:FFFF.0012: reserved main item tag 0xd [ 1719.520439][ T6940] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 1719.684064][ T6940] usb 7-1: USB disconnect, device number 49 [ 1720.780634][T12832] fido_id[12832]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 1721.962833][T12852] loop6: detected capacity change from 0 to 512 [ 1721.992653][T12481] veth0_vlan: entered promiscuous mode [ 1722.028638][T12852] UDF-fs: warning (device loop6): udf_load_vrs: No VRS found [ 1722.057685][T12852] UDF-fs: Scanning with blocksize 512 failed [ 1722.133460][T12852] UDF-fs: warning (device loop6): udf_load_vrs: No VRS found [ 1722.141154][T12852] UDF-fs: Scanning with blocksize 1024 failed [ 1722.271687][T12481] veth1_vlan: entered promiscuous mode [ 1722.297886][T12852] UDF-fs: warning (device loop6): udf_load_vrs: No VRS found [ 1722.353006][T12852] UDF-fs: Scanning with blocksize 2048 failed [ 1722.413295][T12852] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 1722.457294][T12605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1722.533517][T12852] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1722.925897][ T40] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 1723.030005][T12481] veth0_macvtap: entered promiscuous mode [ 1723.138316][ T40] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1723.168119][ T40] usb 10-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1723.188649][T12481] veth1_macvtap: entered promiscuous mode [ 1723.232653][ T40] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1723.300826][ T40] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1723.370887][ T40] usb 10-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1723.432720][ T40] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1723.441089][ T40] usb 10-1: Product: syz [ 1723.480741][ T40] usb 10-1: Manufacturer: syz [ 1723.526473][ T40] usb 10-1: SerialNumber: syz [ 1723.611566][ T40] usb 10-1: config 0 descriptor?? [ 1723.680329][ T40] garmin_gps 10-1:0.0: Garmin GPS usb/tty converter detected [ 1723.748865][T12605] veth0_vlan: entered promiscuous mode [ 1723.776766][ T40] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 1723.892499][T12481] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1723.893603][ T40] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8 [ 1723.933848][T12867] netlink: 24 bytes leftover after parsing attributes in process `syz.6.956'. [ 1724.421726][T12605] veth1_vlan: entered promiscuous mode [ 1724.528158][T12481] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1724.810305][T12875] loop3: detected capacity change from 0 to 512 [ 1724.848060][T12398] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1724.867867][T12875] EXT4-fs (loop3): invalid inodes per group: 0 [ 1724.867867][T12875] [ 1724.889309][T12398] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1724.994807][ T14] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1725.088420][ T14] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1725.510399][T12605] veth0_macvtap: entered promiscuous mode [ 1725.569519][T12605] veth1_macvtap: entered promiscuous mode [ 1725.650620][T12880] loop3: detected capacity change from 0 to 2048 [ 1725.771106][ T9778] usb 10-1: USB disconnect, device number 15 [ 1725.861094][ T9778] garmin_gps 10-1:0.0: device disconnected [ 1726.106714][T12605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1726.296577][T12605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1726.546657][ T6003] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1726.570958][ T6003] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1726.620440][ T6003] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1726.672613][ T6003] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1727.956484][T12903] loop9: detected capacity change from 0 to 512 [ 1728.049813][T12903] EXT4-fs: Ignoring removed bh option [ 1728.115336][T12903] EXT4-fs: inline encryption not supported [ 1728.220997][T12903] EXT4-fs error (device loop9): ext4_xattr_inode_iget:441: inode #11: comm syz.9.963: missing EA_INODE flag [ 1728.317380][T12903] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1728.322382][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 1728.338592][ C1] EXT4-fs (loop9): initial error at time 1774502186: ext4_xattr_inode_iget:441: inode 11 [ 1728.348904][ C1] EXT4-fs (loop9): last error at time 1774502186: ext4_xattr_inode_iget:441: inode 11 [ 1728.390518][T12906] loop6: detected capacity change from 0 to 512 [ 1728.405340][T12906] EXT4-fs: Ignoring removed bh option [ 1728.411009][T12906] EXT4-fs: inline encryption not supported [ 1728.485759][T12903] EXT4-fs error (device loop9): ext4_xattr_inode_iget:446: comm syz.9.963: error while reading EA inode 11 err=-117 [ 1728.623861][T12903] loop9: lost filesystem error report for type 5 error -117 [ 1728.670465][T12903] EXT4-fs (loop9): 1 orphan inode deleted [ 1728.697148][T12906] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #11: comm syz.6.964: missing EA_INODE flag [ 1728.838255][T12903] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1728.851985][T12906] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1728.862295][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 1728.878335][ C1] EXT4-fs (loop6): initial error at time 1774502187: ext4_xattr_inode_iget:441: inode 11 [ 1728.888693][ C1] EXT4-fs (loop6): last error at time 1774502187: ext4_xattr_inode_iget:441: inode 11 [ 1728.919785][T12906] EXT4-fs error (device loop6): ext4_xattr_inode_iget:446: comm syz.6.964: error while reading EA inode 11 err=-117 [ 1729.032789][T12906] loop6: lost filesystem error report for type 5 error -117 [ 1729.056140][T12906] EXT4-fs (loop6): 1 orphan inode deleted [ 1729.074879][T12906] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1729.212678][T12906] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1729.814636][T11653] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1730.715084][T12930] netlink: 24 bytes leftover after parsing attributes in process `syz.3.967'. [ 1730.759859][T12939] loop6: detected capacity change from 0 to 64 [ 1730.828895][T12939] BFS-fs: bfs_fill_super(): loop6 is unclean, continuing [ 1732.224280][ T29] audit: type=1326 audit(1774502190.435:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12955 comm="syz.6.969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd14bd9c799 code=0x7ffc0000 [ 1732.265254][T12956] FAULT_INJECTION: forcing a failure. [ 1732.265254][T12956] name failslab, interval 1, probability 0, space 0, times 0 [ 1732.327480][T12956] CPU: 1 UID: 0 PID: 12956 Comm: syz.6.969 Tainted: G L syzkaller #0 PREEMPT(full) [ 1732.327677][T12956] Tainted: [L]=SOFTLOCKUP [ 1732.327736][T12956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1732.327828][T12956] Call Trace: [ 1732.327884][T12956] [ 1732.327941][T12956] __dump_stack+0x26/0x30 [ 1732.328125][T12956] dump_stack_lvl+0x14c/0x1c0 [ 1732.328306][T12956] dump_stack+0x1e/0x25 [ 1732.328466][T12956] should_fail_ex+0x7e2/0x8c0 [ 1732.328695][T12956] should_failslab+0x158/0x200 [ 1732.328853][T12956] kmem_cache_alloc_node_noprof+0x14c/0x12d0 [ 1732.329017][T12956] ? kmsan_get_metadata+0xf1/0x160 [ 1732.329230][T12956] ? __alloc_skb+0x744/0x1190 [ 1732.329391][T12956] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1732.329625][T12956] __alloc_skb+0x744/0x1190 [ 1732.329769][T12956] ? kmsan_get_metadata+0xf1/0x160 [ 1732.329978][T12956] ? __alloc_skb+0x35e/0x1190 [ 1732.330132][T12956] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1732.330360][T12956] audit_log_start+0xa45/0x1690 [ 1732.330684][T12956] audit_seccomp+0x73/0x370 [ 1732.330866][T12956] ? kmsan_get_metadata+0xf1/0x160 [ 1732.331076][T12956] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1732.331308][T12956] __seccomp_filter+0x2dfb/0x3b20 [ 1732.331530][T12956] ? kmsan_get_metadata+0xf1/0x160 [ 1732.331756][T12956] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1732.331973][T12956] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1732.332225][T12956] __secure_computing+0x13d/0x3c0 [ 1732.332431][T12956] do_syscall_64+0xdb/0xf80 [ 1732.332608][T12956] ? clear_bhb_loop+0x50/0xa0 [ 1732.332772][T12956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1732.332939][T12956] RIP: 0033:0x7fd14bd9c799 [ 1732.333084][T12956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1732.333214][T12956] RSP: 002b:00007fd14ccd7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1732.333356][T12956] RAX: ffffffffffffffda RBX: 00007fd14c015fa0 RCX: 00007fd14bd9c799 [ 1732.333469][T12956] RDX: 0000200000000080 RSI: 0000000040081271 RDI: 0000000000000004 [ 1732.333578][T12956] RBP: 00007fd14ccd7090 R08: 0000000000000000 R09: 0000000000000000 [ 1732.333670][T12956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1732.333759][T12956] R13: 00007fd14c016038 R14: 00007fd14c015fa0 R15: 00007ffd3062d368 [ 1732.333903][T12956] [ 1732.353321][ T29] audit: type=1326 audit(1774502190.475:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12955 comm="syz.6.969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd14bd9c799 code=0x7ffc0000 [ 1732.615871][T12956] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 1732.702594][T12956] audit: out of memory in audit_log_start [ 1732.982585][ T29] audit: type=1326 audit(1774502190.475:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12955 comm="syz.6.969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd14bd5cfce code=0x7ffc0000 [ 1733.135230][ T29] audit: type=1326 audit(1774502190.475:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12955 comm="syz.6.969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd14bd9c799 code=0x7ffc0000 [ 1733.288521][ T29] audit: type=1326 audit(1774502190.485:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12955 comm="syz.6.969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd14bd5cfce code=0x7ffc0000 [ 1733.452473][ T29] audit: type=1326 audit(1774502190.485:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12955 comm="syz.6.969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd14bd5cfce code=0x7ffc0000 [ 1733.593180][ T29] audit: type=1326 audit(1774502190.925:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12955 comm="syz.6.969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fd14bd5cfce code=0x7ffc0000 [ 1733.787425][ T29] audit: type=1326 audit(1774502190.925:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12955 comm="syz.6.969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd14bd5cfce code=0x7ffc0000 [ 1734.597888][T12976] sg_write: data in/out 155612/57 bytes for SCSI command 0x0-- guessing data in; [ 1734.597888][T12976] program syz.6.974 not setting count and/or reply_len properly [ 1734.804051][T12978] loop9: detected capacity change from 0 to 64 [ 1734.880915][T12972] loop3: detected capacity change from 0 to 4096 [ 1734.922842][T12978] BFS-fs: bfs_fill_super(): loop9 is unclean, continuing [ 1734.991458][ T5783] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1735.003435][ T5783] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1735.013435][ T5783] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1735.029747][ T5783] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1735.062553][ T5783] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1735.319894][T12986] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1735.746666][T12981] wlan0 speed is unknown, defaulting to 1000 [ 1735.875206][T12991] mmap: syz.6.976 (12991) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1736.839754][T13001] netlink: 24 bytes leftover after parsing attributes in process `syz.3.978'. [ 1737.212432][ T5783] Bluetooth: hci2: command tx timeout [ 1737.966740][T12398] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1738.359842][T12398] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1738.651684][T13014] loop9: detected capacity change from 0 to 2048 [ 1738.671207][T12398] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1738.750523][T13018] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1738.890569][T13014] NILFS error (device loop9): nilfs_check_folio: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=203 [ 1739.005952][T13014] Remounting filesystem read-only [ 1739.271925][T12398] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1739.295613][ T5783] Bluetooth: hci2: command tx timeout [ 1739.358178][T12389] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1739.502511][T12389] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1740.189991][ T7646] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1740.233169][ T7646] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1740.816403][T12398] bridge_slave_1: left allmulticast mode [ 1740.832510][T12398] bridge_slave_1: left promiscuous mode [ 1740.839268][T12398] bridge0: port 2(bridge_slave_1) entered disabled state [ 1740.956933][T12398] bridge_slave_0: left allmulticast mode [ 1741.055451][T12398] bridge_slave_0: left promiscuous mode [ 1741.062439][T12398] bridge0: port 1(bridge_slave_0) entered disabled state [ 1741.364604][ T5783] Bluetooth: hci2: command tx timeout [ 1741.546494][T13039] loop9: detected capacity change from 0 to 2048 [ 1741.752548][T13043] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1742.717330][T13054] netlink: 12 bytes leftover after parsing attributes in process `syz.2.989'. [ 1743.184422][T12398] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1743.283910][T13057] loop9: detected capacity change from 0 to 256 [ 1743.325501][T12398] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1743.390300][T13057] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1743.437163][T12398] bond0 (unregistering): Released all slaves [ 1743.443693][ T5783] Bluetooth: hci2: command tx timeout [ 1743.565296][T13057] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1743.772722][T12981] chnl_net:caif_netlink_parms(): no params data found [ 1744.021784][T13067] loop6: detected capacity change from 0 to 64 [ 1744.091495][T13067] BFS-fs: bfs_fill_super(): loop6 is unclean, continuing [ 1744.157165][T13061] loop2: detected capacity change from 0 to 2048 [ 1744.381923][T13070] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1744.473994][T12398] hsr_slave_0: left promiscuous mode [ 1744.484144][T13061] NILFS error (device loop2): nilfs_check_folio: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=203 [ 1744.592486][T12398] hsr_slave_1: left promiscuous mode [ 1744.640506][T12398] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1744.685646][T12398] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1744.737253][T13061] Remounting filesystem read-only [ 1744.785477][T12398] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1744.884714][T12398] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1745.033043][T12398] veth1_macvtap: left promiscuous mode [ 1745.038886][T12398] veth0_macvtap: left promiscuous mode [ 1745.114731][T12398] veth1_vlan: left promiscuous mode [ 1745.120372][T12398] veth0_vlan: left promiscuous mode [ 1745.861384][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1745.880073][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1747.294551][T13092] 9p: Bad value for 'wfdno' [ 1747.698756][T12398] team0 (unregistering): Port device team_slave_1 removed [ 1747.796856][T13096] loop9: detected capacity change from 0 to 512 [ 1747.840772][T12398] team0 (unregistering): Port device team_slave_0 removed [ 1747.911284][T13096] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1747.958892][T13096] ext4 filesystem being mounted at /67/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1748.122337][T13100] EXT4-fs error (device loop9): ext4_do_update_inode:5569: inode #2: comm syz.9.1002: corrupted inode contents [ 1748.146417][T13100] EXT4-fs error (device loop9): ext4_dirty_inode:6450: inode #2: comm syz.9.1002: mark_inode_dirty error [ 1748.176289][T13100] EXT4-fs error (device loop9): ext4_do_update_inode:5569: inode #2: comm syz.9.1002: corrupted inode contents [ 1748.204633][T13100] EXT4-fs error (device loop9): __ext4_ext_dirty:207: inode #2: comm syz.9.1002: mark_inode_dirty error [ 1748.475215][T13103] sctp: [Deprecated]: syz.9.1002 (pid 13103) Use of int in maxseg socket option. [ 1748.475215][T13103] Use struct sctp_assoc_value instead [ 1749.266441][T11653] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1749.652926][T13111] loop3: detected capacity change from 0 to 512 [ 1749.913225][T13112] loop6: detected capacity change from 0 to 512 [ 1750.434950][T13112] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1750.570503][T13112] ext4 filesystem being mounted at /443/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1750.788447][T12981] bridge0: port 1(bridge_slave_0) entered blocking state [ 1750.849641][T12981] bridge0: port 1(bridge_slave_0) entered disabled state [ 1750.889211][T12981] bridge_slave_0: entered allmulticast mode [ 1750.940573][T12981] bridge_slave_0: entered promiscuous mode [ 1751.027705][T12981] bridge0: port 2(bridge_slave_1) entered blocking state [ 1751.065819][T12981] bridge0: port 2(bridge_slave_1) entered disabled state [ 1751.097308][T12981] bridge_slave_1: entered allmulticast mode [ 1751.120787][T12981] bridge_slave_1: entered promiscuous mode [ 1751.144556][T13127] loop9: detected capacity change from 0 to 128 [ 1751.234960][T13127] hpfs: Unknown parameter 'fsuuid' [ 1751.605095][ T7593] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1751.876437][T12981] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1751.971102][T12981] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1752.549143][T13136] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1011'. [ 1752.559952][T13136] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1011'. [ 1752.565425][T12981] team0: Port device team_slave_0 added [ 1752.669318][T13137] 9p: Bad value for 'wfdno' [ 1752.670377][T12981] team0: Port device team_slave_1 added [ 1752.942347][T13136] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 1752.951323][T13136] macvlan2: entered allmulticast mode [ 1753.052508][T13136] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 1753.073734][T13141] loop3: detected capacity change from 0 to 256 [ 1753.085221][T13141] vfat: Unknown parameter '' [ 1753.414601][T13140] loop9: detected capacity change from 0 to 512 [ 1753.538598][T12981] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1753.611592][T12981] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1753.757232][T12981] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1753.841955][T12981] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1753.903628][T12981] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1754.020428][T13147] loop3: detected capacity change from 0 to 512 [ 1754.062742][T12981] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1754.536197][ T6583] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 1754.612651][T13140] EXT4-fs (loop9): failed to open journal device unknown-block(0,0) -6 [ 1754.626059][ T6940] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1754.693791][ T6583] usb 7-1: device descriptor read/64, error -71 [ 1754.756945][T13140] netdevsim netdevsim9: Direct firmware load for ..€ failed with error -2 [ 1754.814560][T13140] netdevsim netdevsim9: Falling back to sysfs fallback for: ..€ [ 1754.842583][ T6940] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1754.860091][T12981] hsr_slave_0: entered promiscuous mode [ 1754.887158][T12981] hsr_slave_1: entered promiscuous mode [ 1754.908903][T12981] debugfs: 'hsr0' already exists in 'hsr' [ 1754.913362][ T6940] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1754.921321][T12981] Cannot create hsr debugfs directory [ 1754.960221][ T6940] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1754.963527][ T6583] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 1754.981055][ T6940] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1755.045311][ T6940] usb 3-1: config 0 descriptor?? [ 1755.139330][ T6940] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1755.147224][T13154] loop9: detected capacity change from 0 to 128 [ 1755.165830][ T6583] usb 7-1: device descriptor read/64, error -71 [ 1755.210846][T13154] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1755.291651][ T6583] usb usb7-port1: attempt power cycle [ 1755.327853][T13154] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1755.682850][ T6583] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 1755.744948][ T6583] usb 7-1: device descriptor read/8, error -71 [ 1756.022463][ T6583] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 1756.079182][ T6583] usb 7-1: device descriptor read/8, error -71 [ 1756.204484][ T6583] usb usb7-port1: unable to enumerate USB device [ 1756.313124][T13165] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20001 [ 1756.909636][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 1756.909723][ T29] audit: type=1326 audit(1774502215.125:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13146 comm="syz.6.1017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd14bd9c799 code=0x7fc00000 [ 1757.164251][T13167] loop9: detected capacity change from 0 to 512 [ 1757.225738][T13167] EXT4-fs: Ignoring removed bh option [ 1757.285566][T13167] EXT4-fs: inline encryption not supported [ 1757.415249][T13167] EXT4-fs error (device loop9): ext4_xattr_inode_iget:441: inode #11: comm syz.9.1022: missing EA_INODE flag [ 1757.434678][ T40] usb 3-1: USB disconnect, device number 2 [ 1757.459958][T13167] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1757.462313][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 1757.478321][ C1] EXT4-fs (loop9): initial error at time 1774502215: ext4_xattr_inode_iget:441: inode 11 [ 1757.488701][ C1] EXT4-fs (loop9): last error at time 1774502215: ext4_xattr_inode_iget:441: inode 11 [ 1757.597632][T13167] EXT4-fs error (device loop9): ext4_xattr_inode_iget:446: comm syz.9.1022: error while reading EA inode 11 err=-117 [ 1757.611367][T13167] loop9: lost filesystem error report for type 5 error -117 [ 1757.660879][T13167] EXT4-fs (loop9): 1 orphan inode deleted [ 1757.773710][T13167] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1758.249516][T12981] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1758.416023][T12981] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1758.498340][T13179] FAULT_INJECTION: forcing a failure. [ 1758.498340][T13179] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1758.567541][T13178] xt_hashlimit: size too large, truncated to 1048576 [ 1758.627917][T13179] CPU: 0 UID: 0 PID: 13179 Comm: syz.3.1026 Tainted: G L syzkaller #0 PREEMPT(full) [ 1758.628117][T13179] Tainted: [L]=SOFTLOCKUP [ 1758.628179][T13179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1758.628275][T13179] Call Trace: [ 1758.628332][T13179] [ 1758.628391][T13179] __dump_stack+0x26/0x30 [ 1758.628574][T13179] dump_stack_lvl+0x14c/0x1c0 [ 1758.628757][T13179] dump_stack+0x1e/0x25 [ 1758.628926][T13179] should_fail_ex+0x7e2/0x8c0 [ 1758.629124][T13179] should_fail+0x2a/0x40 [ 1758.629296][T13179] should_fail_usercopy+0x2e/0x40 [ 1758.629491][T13179] _copy_to_user+0x35/0x120 [ 1758.629678][T13179] simple_read_from_buffer+0x1b2/0x340 [ 1758.629932][T13179] proc_fail_nth_read+0x1e0/0x2d0 [ 1758.630108][T13179] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1758.630270][T13179] vfs_read+0x27c/0xf90 [ 1758.630449][T13179] ? stack_depot_save_flags+0x35/0x790 [ 1758.630625][T13179] ? kmsan_get_metadata+0xf1/0x160 [ 1758.630835][T13179] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1758.631058][T13179] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1758.631290][T13179] ksys_read+0x1d9/0x470 [ 1758.631495][T13179] __x64_sys_read+0x97/0xf0 [ 1758.631695][T13179] x64_sys_call+0x311c/0x3ea0 [ 1758.631898][T13179] do_syscall_64+0x134/0xf80 [ 1758.632069][T13179] ? clear_bhb_loop+0x50/0xa0 [ 1758.632225][T13179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1758.632385][T13179] RIP: 0033:0x7f347a35cfce [ 1758.632498][T13179] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1758.632641][T13179] RSP: 002b:00007f347b19cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1758.632785][T13179] RAX: ffffffffffffffda RBX: 00007f347b19d6c0 RCX: 00007f347a35cfce [ 1758.632904][T13179] RDX: 000000000000000f RSI: 00007f347b19d0a0 RDI: 0000000000000004 [ 1758.633001][T13179] RBP: 00007f347b19d090 R08: 0000000000000000 R09: 0000000000000000 [ 1758.633099][T13179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1758.633194][T13179] R13: 00007f347a616038 R14: 00007f347a615fa0 R15: 00007ffe44d75548 [ 1758.633338][T13179] [ 1759.416978][T12981] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1759.450156][T11653] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1759.904931][T13184] loop2: detected capacity change from 0 to 512 [ 1760.033166][T13184] FAT-fs (loop2): bogus logical sector size 63488 [ 1760.039918][T13184] FAT-fs (loop2): Can't find a valid FAT filesystem [ 1760.530691][T12981] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1760.569361][T13184] netlink: 'syz.2.1028': attribute type 12 has an invalid length. [ 1761.126200][T13192] loop2: detected capacity change from 0 to 64 [ 1761.429767][T13193] loop3: detected capacity change from 0 to 512 [ 1762.934946][T12605] hfs: node 4:3 still has 1 user(s)! [ 1763.211876][T13202] loop3: detected capacity change from 0 to 512 [ 1763.327928][T12981] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1763.348284][T13202] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 1763.375448][T13202] UDF-fs: Scanning with blocksize 512 failed [ 1763.407745][ T40] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 1763.461811][T13202] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 1763.489280][T13202] UDF-fs: Scanning with blocksize 1024 failed [ 1763.538913][T13202] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 1763.600118][T13202] UDF-fs: Scanning with blocksize 2048 failed [ 1763.653094][ T40] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1763.675936][T13202] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 1763.712411][ T40] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1763.727442][T12981] 8021q: adding VLAN 0 to HW filter on device team0 [ 1763.769499][ T40] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1763.825492][ T40] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1763.861289][T13202] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1763.905423][ T40] usb 10-1: config 0 descriptor?? [ 1763.922802][T12382] bridge0: port 1(bridge_slave_0) entered blocking state [ 1763.930540][T12382] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1764.036603][ T40] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 1764.198393][ T6066] bridge0: port 2(bridge_slave_1) entered blocking state [ 1764.206272][ T6066] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1764.531713][T13206] loop2: detected capacity change from 0 to 256 [ 1766.154502][T13212] syz.3.1035 (13212): drop_caches: 2 [ 1768.398081][ T6940] usb 10-1: USB disconnect, device number 16 [ 1770.915766][T13222] loop9: detected capacity change from 0 to 64 [ 1771.056976][T13222] BFS-fs: bfs_fill_super(): loop9 is unclean, continuing [ 1771.336652][T13224] loop6: detected capacity change from 0 to 512 [ 1771.409134][T13224] EXT4-fs: Ignoring removed bh option [ 1771.431889][T13224] EXT4-fs: inline encryption not supported [ 1771.664576][T13224] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #11: comm syz.6.1037: missing EA_INODE flag [ 1771.790565][T13224] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1771.792309][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 1771.808397][ C1] EXT4-fs (loop6): initial error at time 1774502230: ext4_xattr_inode_iget:441: inode 11 [ 1771.818673][ C1] EXT4-fs (loop6): last error at time 1774502230: ext4_xattr_inode_iget:441: inode 11 [ 1771.846597][T13224] EXT4-fs error (device loop6): ext4_xattr_inode_iget:446: comm syz.6.1037: error while reading EA inode 11 err=-117 [ 1771.871213][T13224] loop6: lost filesystem error report for type 5 error -117 [ 1771.874584][T13224] EXT4-fs (loop6): 1 orphan inode deleted [ 1771.951288][T13224] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1772.552939][T13236] loop3: detected capacity change from 0 to 512 [ 1773.040609][T12981] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1773.224098][ T7593] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1774.232060][T13251] xt_hashlimit: size too large, truncated to 1048576 [ 1775.875746][T13262] loop2: detected capacity change from 0 to 128 [ 1776.064175][T13262] vfat: Unknown parameter 'ÿ' [ 1776.810594][ T7402] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 1776.914101][T13259] loop6: detected capacity change from 0 to 4096 [ 1777.158326][ T7402] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 10 [ 1777.278967][ T7402] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1777.369307][ T7402] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1777.380488][T13266] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1777.450970][ T7402] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1777.584883][ T7402] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1777.630858][ T29] audit: type=1800 audit(1774502235.835:632): pid=13259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1048" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 1777.662653][ T7402] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1777.732386][ T7402] usb 3-1: Product: syz [ 1777.736912][ T7402] usb 3-1: Manufacturer: syz [ 1777.741733][ T7402] usb 3-1: SerialNumber: syz [ 1777.904539][ T7402] usb 3-1: config 0 descriptor?? [ 1777.954293][T13262] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1778.027039][ T7402] usb 3-1: ucan: probing device on interface #0 [ 1778.122335][ T7402] usb 3-1: ucan: invalid endpoint configuration [ 1778.128835][ T7402] usb 3-1: ucan: probe failed; try to update the device firmware [ 1778.400839][ T6583] usb 3-1: USB disconnect, device number 3 [ 1778.797920][T13272] loop3: detected capacity change from 0 to 512 [ 1778.985196][T13272] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 1779.025422][T13272] UDF-fs: Scanning with blocksize 512 failed [ 1779.100117][T13272] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 1779.179986][T13272] UDF-fs: Scanning with blocksize 1024 failed [ 1779.294553][T13272] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 1779.330565][T13272] UDF-fs: Scanning with blocksize 2048 failed [ 1779.419645][T12981] veth0_vlan: entered promiscuous mode [ 1779.463598][T13272] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 1779.615084][T13272] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1779.690736][T12981] veth1_vlan: entered promiscuous mode [ 1779.892611][T13277] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1050'. [ 1779.918097][T13281] loop2: detected capacity change from 0 to 64 [ 1780.040104][T13281] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing [ 1780.166868][T13281] forcing mempool usage for bio_alloc_bioset+0xab0/0x1a10 [ 1780.633511][T12981] veth0_macvtap: entered promiscuous mode [ 1780.800654][T12981] veth1_macvtap: entered promiscuous mode [ 1781.138781][T13286] loop3: detected capacity change from 0 to 512 [ 1781.212523][T13286] EXT4-fs: Ignoring removed bh option [ 1781.218247][T13286] EXT4-fs: inline encryption not supported [ 1781.265535][T12981] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1781.464739][T13286] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.1052: missing EA_INODE flag [ 1781.509866][T12981] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1781.627022][T13286] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1781.632292][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 1781.648437][ C0] EXT4-fs (loop3): initial error at time 1774502239: ext4_xattr_inode_iget:441: inode 11 [ 1781.658705][ C0] EXT4-fs (loop3): last error at time 1774502239: ext4_xattr_inode_iget:441: inode 11 [ 1781.672036][T13286] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.1052: error while reading EA inode 11 err=-117 [ 1781.778880][T13286] loop3: lost filesystem error report for type 5 error -117 [ 1781.792659][T13286] EXT4-fs (loop3): 1 orphan inode deleted [ 1781.841357][ T7646] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1781.893985][T13286] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1781.919107][ T7646] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1781.940836][T13293] loop2: detected capacity change from 0 to 512 [ 1782.085207][T13286] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1782.097267][ T7646] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1782.161043][ T7646] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1783.010320][T13304] FAULT_INJECTION: forcing a failure. [ 1783.010320][T13304] name failslab, interval 1, probability 0, space 0, times 0 [ 1783.103598][T13304] CPU: 0 UID: 0 PID: 13304 Comm: syz.6.1056 Tainted: G L syzkaller #0 PREEMPT(full) [ 1783.103800][T13304] Tainted: [L]=SOFTLOCKUP [ 1783.103860][T13304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1783.103953][T13304] Call Trace: [ 1783.104009][T13304] [ 1783.104065][T13304] __dump_stack+0x26/0x30 [ 1783.104251][T13304] dump_stack_lvl+0x14c/0x1c0 [ 1783.104433][T13304] dump_stack+0x1e/0x25 [ 1783.104597][T13304] should_fail_ex+0x7e2/0x8c0 [ 1783.104817][T13304] should_failslab+0x158/0x200 [ 1783.104972][T13304] kmem_cache_alloc_noprof+0x146/0x1270 [ 1783.105128][T13304] ? kmsan_get_metadata+0xf1/0x160 [ 1783.105341][T13304] ? vm_area_alloc+0x5c/0x230 [ 1783.105596][T13304] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1783.105833][T13304] vm_area_alloc+0x5c/0x230 [ 1783.105984][T13304] mmap_region+0x2744/0x6220 [ 1783.106319][T13304] ? arch_get_unmapped_area_topdown+0x10e8/0x1120 [ 1783.106598][T13304] ? kmsan_get_metadata+0xf1/0x160 [ 1783.106819][T13304] ? security_mmap_addr+0x78/0x4d0 [ 1783.106997][T13304] do_mmap+0x17aa/0x1d70 [ 1783.107200][T13304] vm_mmap_pgoff+0x40c/0x760 [ 1783.107444][T13304] ksys_mmap_pgoff+0x16b/0x7d0 [ 1783.107614][T13304] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1783.107850][T13304] __x64_sys_mmap+0x19c/0x260 [ 1783.108046][T13304] x64_sys_call+0x18cd/0x3ea0 [ 1783.108238][T13304] do_syscall_64+0x134/0xf80 [ 1783.108414][T13304] ? clear_bhb_loop+0x50/0xa0 [ 1783.108582][T13304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1783.108749][T13304] RIP: 0033:0x7fd14bd9c502 [ 1783.108868][T13304] Code: 4f 01 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 6e 5b 5d c3 0f 1f 00 48 c7 c0 e8 ff ff ff 64 [ 1783.109002][T13304] RSP: 002b:00007fd14ccd6df8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1783.109149][T13304] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd14bd9c502 [ 1783.109254][T13304] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 1783.109345][T13304] RBP: 0000000000000022 R08: 00000000ffffffff R09: 0000000000000000 [ 1783.109440][T13304] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000004 [ 1783.109532][T13304] R13: 00007fd14ccd6ee0 R14: 00007fd14ccd6ea0 R15: 00002000000005c0 [ 1783.109678][T13304] [ 1783.821579][T13308] process 'syz.9.1058' launched './file0' with NULL argv: empty string added [ 1784.081328][T13311] xt_hashlimit: size too large, truncated to 1048576 [ 1785.156874][T13317] loop3: detected capacity change from 0 to 40427 [ 1785.232846][T13317] F2FS-fs (loop3): invalid crc value [ 1785.780040][T13317] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1785.791404][T13317] F2FS-fs (loop3): Start checkpoint disabled! [ 1785.805289][T13317] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 1785.878764][T13317] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 1786.085819][ T6583] usb 10-1: new low-speed USB device number 17 using dummy_hcd [ 1787.123986][T12400] kworker/u8:31: attempt to access beyond end of device [ 1787.123986][T12400] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1787.304763][T12400] CPU: 1 UID: 0 PID: 12400 Comm: kworker/u8:31 Tainted: G L syzkaller #0 PREEMPT(full) [ 1787.304968][T12400] Tainted: [L]=SOFTLOCKUP [ 1787.305031][T12400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1787.305184][T12400] Workqueue: writeback wb_workfn (flush-7:3) [ 1787.305433][T12400] Call Trace: [ 1787.305492][T12400] [ 1787.305549][T12400] __dump_stack+0x26/0x30 [ 1787.305730][T12400] dump_stack_lvl+0x14c/0x1c0 [ 1787.305923][T12400] dump_stack+0x1e/0x25 [ 1787.306087][T12400] f2fs_handle_critical_error+0xa6f/0xc20 [ 1787.306400][T12400] f2fs_stop_checkpoint+0x65/0x80 [ 1787.306585][T12400] f2fs_write_end_io+0x12e6/0x2560 [ 1787.306833][T12400] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1787.307000][T12400] bio_endio+0x1006/0x1160 [ 1787.307176][T12400] submit_bio_noacct+0x533/0x2960 [ 1787.307421][T12400] submit_bio+0x57a/0x620 [ 1787.307591][T12400] f2fs_submit_write_bio+0x115/0x350 [ 1787.307805][T12400] __submit_merged_bio+0x16f/0x780 [ 1787.308014][T12400] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1787.308245][T12400] __submit_merged_write_cond+0x4ba/0xae0 [ 1787.308485][T12400] f2fs_write_data_pages+0x5073/0x5e10 [ 1787.308795][T12400] ? kmsan_get_metadata+0xf1/0x160 [ 1787.309018][T12400] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1787.309245][T12400] ? update_load_avg+0x14eb/0x25d0 [ 1787.309530][T12400] ? update_load_avg+0x13f0/0x25d0 [ 1787.309740][T12400] ? kmsan_get_metadata+0xf1/0x160 [ 1787.309958][T12400] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1787.310177][T12400] ? kmsan_get_metadata+0xf1/0x160 [ 1787.310394][T12400] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1787.310613][T12400] ? kmsan_get_metadata+0xf1/0x160 [ 1787.310828][T12400] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1787.311055][T12400] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1787.311209][T12400] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1787.311357][T12400] do_writepages+0x3f2/0x860 [ 1787.311562][T12400] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1787.311791][T12400] ? writeback_sb_inodes+0x11/0x1d90 [ 1787.312019][T12400] ? kmsan_get_metadata+0xf1/0x160 [ 1787.312250][T12400] __writeback_single_inode+0xfc/0x1440 [ 1787.312458][T12400] ? kmsan_get_metadata+0xf1/0x160 [ 1787.312685][T12400] writeback_sb_inodes+0xb3b/0x1d90 [ 1787.313020][T12400] ? kmsan_get_metadata+0xf1/0x160 [ 1787.313237][T12400] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1787.313485][T12400] wb_writeback+0x4f1/0xcd0 [ 1787.313702][T12400] ? queue_io+0x421/0x800 [ 1787.313900][T12400] wb_workfn+0x3b9/0x19b0 [ 1787.314076][T12400] ? kmsan_get_metadata+0xf1/0x160 [ 1787.314314][T12400] ? __pfx_wb_workfn+0x10/0x10 [ 1787.314477][T12400] process_scheduled_works+0xb82/0x1e80 [ 1787.314780][T12400] worker_thread+0xee4/0x1590 [ 1787.315002][T12400] kthread+0x53f/0x600 [ 1787.315221][T12400] ? __pfx_worker_thread+0x10/0x10 [ 1787.315406][T12400] ? __pfx_kthread+0x10/0x10 [ 1787.315590][T12400] ret_from_fork+0x20f/0x910 [ 1787.315794][T12400] ? __switch_to+0x51c/0x750 [ 1787.316050][T12400] ? __pfx_kthread+0x10/0x10 [ 1787.316240][T12400] ret_from_fork_asm+0x1a/0x30 [ 1787.316466][T12400] [ 1788.364933][ T6583] usb 10-1: device descriptor read/all, error -71 [ 1788.379965][T12400] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 1788.521842][T13326] syz.6.1061 (13326): drop_caches: 2 [ 1789.089277][T13334] loop9: detected capacity change from 0 to 256 [ 1789.431667][T13334] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 1793.120506][T13361] loop9: detected capacity change from 0 to 512 [ 1793.505242][T13364] xt_hashlimit: size too large, truncated to 1048576 [ 1798.422730][T13390] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1798.443581][T13390] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1798.453788][T13390] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1798.515553][T13390] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1798.534021][T13390] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1800.322932][T13397] syz.3.1073 (13397): drop_caches: 2 [ 1803.800843][T13390] Bluetooth: hci3: command tx timeout [ 1805.962975][T13390] Bluetooth: hci3: command tx timeout [ 1807.189431][T13389] wlan0 speed is unknown, defaulting to 1000 [ 1808.155989][ T5783] Bluetooth: hci3: command tx timeout [ 1808.206392][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1808.993794][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1809.687758][T13404] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1074'. [ 1809.973600][T13409] loop9: detected capacity change from 0 to 256 [ 1810.192513][ T5783] Bluetooth: hci3: command tx timeout [ 1814.963300][T13416] loop3: detected capacity change from 0 to 512 [ 1815.578762][T13418] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1079'. [ 1815.718076][T13418] netlink: 'syz.2.1079': attribute type 20 has an invalid length. [ 1815.821304][T13418] netlink: 'syz.2.1079': attribute type 21 has an invalid length. [ 1816.037881][T13390] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1816.055001][T13390] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1816.097942][T13390] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1816.142597][T13390] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1816.171422][T13390] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1816.569540][T13432] loop9: detected capacity change from 0 to 512 [ 1816.655681][T13432] EXT4-fs: Ignoring removed bh option [ 1816.661348][T13432] EXT4-fs: inline encryption not supported [ 1816.677298][ T14] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1816.924656][T13432] EXT4-fs error (device loop9): ext4_xattr_inode_iget:441: inode #11: comm syz.9.1080: missing EA_INODE flag [ 1816.937061][T13432] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1816.938483][T13432] EXT4-fs error (device loop9): ext4_xattr_inode_iget:446: comm syz.9.1080: error while reading EA inode 11 err=-117 [ 1816.948110][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 1816.948217][ C1] EXT4-fs (loop9): initial error at time 1774502275: ext4_xattr_inode_iget:441: inode 11 [ 1816.948403][ C1] EXT4-fs (loop9): last error at time 1774502275: ext4_xattr_inode_iget:441: inode 11 [ 1817.095742][T13432] loop9: lost filesystem error report for type 5 error -117 [ 1817.097543][T13432] EXT4-fs (loop9): 1 orphan inode deleted [ 1817.165912][T13432] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1817.289068][T13432] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1817.319121][ T14] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1817.436776][T13389] chnl_net:caif_netlink_parms(): no params data found [ 1817.929961][ T14] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1818.118226][T13428] wlan0 speed is unknown, defaulting to 1000 [ 1818.251103][ T5783] Bluetooth: hci2: command tx timeout [ 1818.882490][ T14] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1818.963004][T13455] netlink: 'syz.2.1084': attribute type 2 has an invalid length. [ 1819.025708][T13455] netlink: 'syz.2.1084': attribute type 2 has an invalid length. [ 1819.063063][T13455] netlink: 'syz.2.1084': attribute type 1 has an invalid length. [ 1819.344087][ T7402] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 1819.599233][ T7402] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1819.621316][ T5783] Bluetooth: hci4: command 0x0406 tx timeout [ 1819.642320][ T7402] usb 10-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1819.672317][ T7402] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1819.759338][ T7402] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1819.793445][ T7402] usb 10-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1819.803931][ T7402] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1819.822316][ T7402] usb 10-1: Product: syz [ 1819.833572][ T7402] usb 10-1: Manufacturer: syz [ 1819.900955][ T7402] usb 10-1: SerialNumber: syz [ 1819.990315][ T7402] usb 10-1: config 0 descriptor?? [ 1820.123569][ T7402] garmin_gps 10-1:0.0: Garmin GPS usb/tty converter detected [ 1820.225054][ T7402] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 1820.340641][T13390] Bluetooth: hci2: command tx timeout [ 1820.354469][ T7402] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8 [ 1820.386178][ T7402] usb 10-1: USB disconnect, device number 20 [ 1820.396350][ T7402] garmin_gps 10-1:0.0: device disconnected [ 1820.756457][T13474] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1086'. [ 1822.476419][T13390] Bluetooth: hci2: command tx timeout [ 1824.136753][ T14] bridge_slave_1: left allmulticast mode [ 1824.192587][ T14] bridge_slave_1: left promiscuous mode [ 1824.215028][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 1824.377732][ T14] bridge_slave_0: left allmulticast mode [ 1824.462438][ T14] bridge_slave_0: left promiscuous mode [ 1824.499765][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 1824.562029][T13482] loop3: detected capacity change from 0 to 512 [ 1824.566719][T13390] Bluetooth: hci2: command tx timeout [ 1824.679738][T13482] EXT4-fs (loop3): invalid inodes per group: 0 [ 1824.679738][T13482] [ 1825.062942][T13491] loop3: detected capacity change from 0 to 2048 [ 1826.327565][ T14] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1826.399705][ T14] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1826.447535][ T14] bond0 (unregistering): Released all slaves [ 1826.629853][T13493] loop9: detected capacity change from 0 to 4096 [ 1826.741082][T13494] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1826.939225][ T29] audit: type=1800 audit(1774502285.145:633): pid=13493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1091" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 1827.510970][T13480] bridge0: port 2(bridge_slave_1) entered disabled state [ 1827.521063][T13480] bridge0: port 1(bridge_slave_0) entered disabled state [ 1828.273366][T13480] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1828.314730][T13480] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1829.246620][ T14] hsr_slave_0: left promiscuous mode [ 1829.268197][ T14] hsr_slave_1: left promiscuous mode [ 1829.324631][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1829.341899][T13502] netlink: 'syz.2.1094': attribute type 2 has an invalid length. [ 1829.343931][ T14] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1829.359671][T13504] loop3: detected capacity change from 0 to 512 [ 1829.376072][T13502] netlink: 'syz.2.1094': attribute type 2 has an invalid length. [ 1829.405875][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1829.433861][T13502] netlink: 'syz.2.1094': attribute type 1 has an invalid length. [ 1829.443003][ T14] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1829.588922][ T14] veth1_macvtap: left promiscuous mode [ 1829.619784][ T14] veth0_macvtap: left promiscuous mode [ 1829.641321][T13504] EXT4-fs error (device loop3): ext4_iget_extra_inode:5025: inode #15: comm syz.3.1093: corrupted in-inode xattr: invalid ea_ino [ 1829.682771][ T14] veth1_vlan: left promiscuous mode [ 1829.688459][ T14] veth0_vlan: left promiscuous mode [ 1829.742641][T13504] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1829.752275][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 1829.768513][ C0] EXT4-fs (loop3): initial error at time 1774502287: ext4_iget_extra_inode:5025: inode 15 [ 1829.778847][ C0] EXT4-fs (loop3): last error at time 1774502287: ext4_iget_extra_inode:5025: inode 15 [ 1829.800436][T13504] EXT4-fs (loop3): Remounting filesystem read-only [ 1829.855739][T13504] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1830.968575][T11752] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1832.263720][T11291] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1832.576689][T11291] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1832.698436][T11291] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1832.745923][T11291] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1832.763644][T11291] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1832.821029][T11291] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1832.846202][T11291] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1832.871665][T11291] usb 4-1: Product: syz [ 1832.877647][T11291] usb 4-1: Manufacturer: syz [ 1832.907067][T11291] usb 4-1: SerialNumber: syz [ 1832.934435][T11291] usb 4-1: config 0 descriptor?? [ 1833.007038][T11291] garmin_gps 4-1:0.0: Garmin GPS usb/tty converter detected [ 1833.057048][T11291] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 1833.093324][T11291] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8 [ 1833.111662][T13518] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1098'. [ 1833.182689][T11291] usb 4-1: USB disconnect, device number 11 [ 1833.257948][T11291] garmin_gps 4-1:0.0: device disconnected [ 1833.730534][ T14] team0 (unregistering): Port device team_slave_1 removed [ 1833.833282][ T14] team0 (unregistering): Port device team_slave_0 removed [ 1834.388243][T13522] loop3: detected capacity change from 0 to 512 [ 1834.425796][ T81] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1834.443616][T13522] FAT-fs (loop3): bogus logical sector size 63488 [ 1834.468015][T13522] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1834.478079][ T81] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1834.522949][ T7402] wlan0 speed is unknown, defaulting to 1000 [ 1834.550064][T13389] bridge0: port 1(bridge_slave_0) entered blocking state [ 1834.551948][ T7402] syz1: Port: 1 Link DOWN [ 1834.594730][T13389] bridge0: port 1(bridge_slave_0) entered disabled state [ 1834.628688][T13389] bridge_slave_0: entered allmulticast mode [ 1834.680139][T13389] bridge_slave_0: entered promiscuous mode [ 1834.850591][ T81] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1834.873000][ T81] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1834.935719][T13522] netlink: 'syz.3.1100': attribute type 12 has an invalid length. [ 1835.094214][T13389] bridge0: port 2(bridge_slave_1) entered blocking state [ 1835.101809][T13389] bridge0: port 2(bridge_slave_1) entered disabled state [ 1835.163023][T13389] bridge_slave_1: entered allmulticast mode [ 1835.215233][T13389] bridge_slave_1: entered promiscuous mode [ 1845.714689][T13389] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1845.831440][T13389] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1846.270967][T13536] netlink: 'syz.2.1104': attribute type 2 has an invalid length. [ 1846.279446][T13536] netlink: 'syz.2.1104': attribute type 2 has an invalid length. [ 1846.297563][T13536] netlink: 'syz.2.1104': attribute type 1 has an invalid length. [ 1846.315012][T13428] chnl_net:caif_netlink_parms(): no params data found [ 1846.407055][T13389] team0: Port device team_slave_0 added [ 1846.466869][ T14] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1846.760182][T13389] team0: Port device team_slave_1 added [ 1846.948301][T13538] loop2: detected capacity change from 0 to 512 [ 1847.034398][ T14] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1847.372531][ T7402] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 1847.488701][T13389] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1847.520724][T13389] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1847.649695][T13389] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1847.663181][ T7402] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1847.692369][ T7402] usb 10-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1847.728286][ T7402] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1847.748964][ T7402] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1847.793929][ T7402] usb 10-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1847.811022][ T7402] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1847.851261][ T14] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1847.859499][ T7402] usb 10-1: Product: syz [ 1847.878876][ T7402] usb 10-1: Manufacturer: syz [ 1847.893315][ T7402] usb 10-1: SerialNumber: syz [ 1847.924824][ T7402] usb 10-1: config 0 descriptor?? [ 1847.996357][ T7402] garmin_gps 10-1:0.0: Garmin GPS usb/tty converter detected [ 1848.011540][T13389] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1848.021113][ T7402] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 1848.035738][ T7402] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8 [ 1848.071953][T13389] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1848.187369][ T6583] usb 10-1: USB disconnect, device number 21 [ 1848.209432][ T6583] garmin_gps 10-1:0.0: device disconnected [ 1848.222866][T13389] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1848.262807][ T7402] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 1848.302474][T13548] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1109'. [ 1848.487211][ T14] netdevsim netdevsim6 netdevsim0 (unregistering): left allmulticast mode [ 1848.515488][ T7402] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1848.541866][ T7402] usb 3-1: config 1 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 1848.565837][ T7402] usb 3-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1848.602183][ T7402] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1848.630040][ T7402] usb 3-1: string descriptor 0 read error: -22 [ 1848.645089][ T7402] usb 3-1: New USB device found, idVendor=16c0, idProduct=05e1, bcdDevice= 0.40 [ 1848.656845][ T14] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1848.667524][ T7402] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1848.717350][T13545] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1849.346033][T13545] loop2: detected capacity change from 0 to 256 [ 1849.843540][T13389] hsr_slave_0: entered promiscuous mode [ 1850.083560][T13389] hsr_slave_1: entered promiscuous mode [ 1850.119893][T13389] debugfs: 'hsr0' already exists in 'hsr' [ 1850.469115][T13389] Cannot create hsr debugfs directory [ 1851.180474][T13545] FAT-fs (loop2): Directory bread(block 64) failed [ 1852.171843][T13545] FAT-fs (loop2): Directory bread(block 65) failed [ 1852.248696][T13545] FAT-fs (loop2): Directory bread(block 66) failed [ 1852.773768][T13545] FAT-fs (loop2): Directory bread(block 67) failed [ 1853.683085][T13545] FAT-fs (loop2): Directory bread(block 68) failed [ 1853.690053][T13545] FAT-fs (loop2): Directory bread(block 69) failed [ 1853.813133][T13545] FAT-fs (loop2): Directory bread(block 70) failed [ 1853.828702][T13545] FAT-fs (loop2): Directory bread(block 71) failed [ 1853.860884][T13545] FAT-fs (loop2): Directory bread(block 72) failed [ 1854.010328][T13545] FAT-fs (loop2): Directory bread(block 73) failed [ 1854.162492][ T7402] usbhid 3-1:1.0: can't add hid device: -32 [ 1856.981215][T13545] fat__get_entry: 12 callbacks suppressed [ 1856.981305][T13545] FAT-fs (loop2): Directory bread(block 86) failed [ 1856.997884][ T7402] usbhid 3-1:1.0: probe with driver usbhid failed with error -32 [ 1857.043661][T13545] FAT-fs (loop2): Directory bread(block 87) failed [ 1857.050840][T13545] FAT-fs (loop2): Directory bread(block 88) failed [ 1857.146882][T13545] FAT-fs (loop2): Directory bread(block 89) failed [ 1857.190161][T13545] FAT-fs (loop2): Directory bread(block 90) failed [ 1857.224750][T13545] FAT-fs (loop2): Directory bread(block 91) failed [ 1857.231716][T13545] FAT-fs (loop2): Directory bread(block 92) failed [ 1857.289077][T13428] bridge0: port 1(bridge_slave_0) entered blocking state [ 1857.301129][T13545] FAT-fs (loop2): Directory bread(block 93) failed [ 1857.342989][T13545] FAT-fs (loop2): Directory bread(block 94) failed [ 1857.345940][T13428] bridge0: port 1(bridge_slave_0) entered disabled state [ 1857.373531][T13545] FAT-fs (loop2): Directory bread(block 95) failed [ 1857.396217][T13428] bridge_slave_0: entered allmulticast mode [ 1857.416624][T13428] bridge_slave_0: entered promiscuous mode [ 1857.676924][T13428] bridge0: port 2(bridge_slave_1) entered blocking state [ 1857.723944][T13428] bridge0: port 2(bridge_slave_1) entered disabled state [ 1857.732001][T13428] bridge_slave_1: entered allmulticast mode [ 1857.820913][T13428] bridge_slave_1: entered promiscuous mode [ 1858.097065][ T9778] usb 3-1: USB disconnect, device number 4 [ 1858.824109][T13428] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1859.058702][T13428] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1859.582485][ T14] bridge_slave_1: left allmulticast mode [ 1859.588576][ T14] bridge_slave_1: left promiscuous mode [ 1859.629925][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 1859.735229][ T14] bridge_slave_0: left allmulticast mode [ 1859.782406][ T14] bridge_slave_0: left promiscuous mode [ 1859.816054][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 1860.403336][ T5783] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1860.418416][ T5783] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1860.430312][ T5783] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1860.456001][ T5783] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1860.473590][ T5783] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1860.720488][T13583] loop9: detected capacity change from 0 to 512 [ 1860.847677][T13591] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1118'. [ 1862.562543][T13390] Bluetooth: hci1: command tx timeout [ 1864.661639][T13390] Bluetooth: hci1: command tx timeout [ 1864.835146][ T14] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1865.127793][ T14] bond0 (unregistering): Released all slaves [ 1866.793161][T13390] Bluetooth: hci1: command tx timeout [ 1867.963798][T13428] team0: Port device team_slave_0 added [ 1868.267395][T13428] team0: Port device team_slave_1 added [ 1868.584663][T13614] FAULT_INJECTION: forcing a failure. [ 1868.584663][T13614] name failslab, interval 1, probability 0, space 0, times 0 [ 1869.115163][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1869.121770][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1869.128788][T13390] Bluetooth: hci1: command tx timeout [ 1869.143950][T13614] CPU: 0 UID: 0 PID: 13614 Comm: syz.3.1123 Tainted: G L syzkaller #0 PREEMPT(full) [ 1869.144133][T13614] Tainted: [L]=SOFTLOCKUP [ 1869.144192][T13614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1869.144280][T13614] Call Trace: [ 1869.144333][T13614] [ 1869.144390][T13614] __dump_stack+0x26/0x30 [ 1869.144573][T13614] dump_stack_lvl+0x14c/0x1c0 [ 1869.144750][T13614] dump_stack+0x1e/0x25 [ 1869.144907][T13614] should_fail_ex+0x7e2/0x8c0 [ 1869.145111][T13614] should_failslab+0x158/0x200 [ 1869.145263][T13614] kmem_cache_alloc_noprof+0x146/0x1270 [ 1869.145429][T13614] ? kmsan_get_metadata+0xf1/0x160 [ 1869.145646][T13614] ? vm_area_alloc+0x5c/0x230 [ 1869.145811][T13614] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1869.146040][T13614] vm_area_alloc+0x5c/0x230 [ 1869.146189][T13614] mmap_region+0x2744/0x6220 [ 1869.146496][T13614] ? arch_get_unmapped_area_topdown+0x10e8/0x1120 [ 1869.146805][T13614] ? kmsan_get_metadata+0xf1/0x160 [ 1869.147022][T13614] ? security_mmap_addr+0x78/0x4d0 [ 1869.147204][T13614] do_mmap+0x17aa/0x1d70 [ 1869.147413][T13614] vm_mmap_pgoff+0x40c/0x760 [ 1869.147664][T13614] ksys_mmap_pgoff+0x16b/0x7d0 [ 1869.147839][T13614] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1869.148070][T13614] __x64_sys_mmap+0x19c/0x260 [ 1869.148274][T13614] x64_sys_call+0x18cd/0x3ea0 [ 1869.148467][T13614] do_syscall_64+0x134/0xf80 [ 1869.148648][T13614] ? clear_bhb_loop+0x50/0xa0 [ 1869.148817][T13614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1869.148978][T13614] RIP: 0033:0x7f347a39c502 [ 1869.149095][T13614] Code: 4f 01 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 6e 5b 5d c3 0f 1f 00 48 c7 c0 e8 ff ff ff 64 [ 1869.149238][T13614] RSP: 002b:00007f347b19cdf8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1869.149383][T13614] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f347a39c502 [ 1869.149491][T13614] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 1869.149593][T13614] RBP: 0000000000000022 R08: 00000000ffffffff R09: 0000000000000000 [ 1869.149691][T13614] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000004 [ 1869.149787][T13614] R13: 00007f347b19cee0 R14: 00007f347b19cea0 R15: 0000200000001580 [ 1869.149935][T13614] [ 1870.803188][T13582] wlan0 speed is unknown, defaulting to 1000 [ 1874.188053][ T14] hsr_slave_0: left promiscuous mode [ 1874.272337][ T14] hsr_slave_1: left promiscuous mode [ 1874.318085][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1874.367859][ T14] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1874.453644][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1874.472575][ T5783] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1874.490345][ T5783] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1874.505328][ T5783] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1874.557282][ T14] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1874.569235][ T5783] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1874.587841][ T5783] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1874.722824][ T14] veth1_macvtap: left promiscuous mode [ 1874.728536][ T14] veth0_macvtap: left promiscuous mode [ 1874.835870][ T14] veth1_vlan: left promiscuous mode [ 1874.861941][ T14] veth0_vlan: left promiscuous mode [ 1875.043935][T13639] loop3: detected capacity change from 0 to 4096 [ 1875.296766][T13647] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1875.480600][T13640] loop9: detected capacity change from 0 to 512 [ 1875.672464][ T29] audit: type=1800 audit(1774502333.875:634): pid=13639 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1129" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 1875.728453][T13651] loop2: detected capacity change from 0 to 512 [ 1876.723589][ T5783] Bluetooth: hci3: command tx timeout [ 1876.887049][T13651] EXT4-fs (loop2): failed to open journal device unknown-block(0,0) -6 [ 1877.567552][T13660] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1131'. [ 1878.397480][ T14] team0 (unregistering): Port device team_slave_1 removed [ 1878.519940][ T14] team0 (unregistering): Port device team_slave_0 removed [ 1878.804908][ T5783] Bluetooth: hci3: command tx timeout [ 1880.120385][T13642] wlan0 speed is unknown, defaulting to 1000 [ 1884.655885][ T5783] Bluetooth: hci3: command tx timeout [ 1886.733149][ T5783] Bluetooth: hci3: command tx timeout [ 1890.467911][T13693] loop3: detected capacity change from 0 to 256 [ 1890.824937][T12384] bridge_slave_1: left allmulticast mode [ 1890.863812][T12384] bridge_slave_1: left promiscuous mode [ 1890.880634][T12384] bridge0: port 2(bridge_slave_1) entered disabled state [ 1890.943618][T12384] bridge_slave_0: left allmulticast mode [ 1890.971135][T12384] bridge_slave_0: left promiscuous mode [ 1891.027970][T12384] bridge0: port 1(bridge_slave_0) entered disabled state [ 1891.159700][T12384] bridge_slave_1: left allmulticast mode [ 1891.213034][T12384] bridge_slave_1: left promiscuous mode [ 1891.219680][T12384] bridge0: port 2(bridge_slave_1) entered disabled state [ 1891.338836][T12384] bridge_slave_0: left allmulticast mode [ 1891.372697][T12384] bridge_slave_0: left promiscuous mode [ 1891.384933][T12384] bridge0: port 1(bridge_slave_0) entered disabled state [ 1891.413630][ T6583] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 1892.086284][T13705] loop2: detected capacity change from 0 to 32768 [ 1892.232936][ T6583] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1892.246515][ T6583] usb 10-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1892.258221][T13705] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 1892.272301][T13705] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1892.352553][ T6583] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1892.414576][ T6583] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1892.469685][ T6583] usb 10-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1892.492733][ T6583] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1892.501443][ T6583] usb 10-1: Product: syz [ 1892.509094][ T6583] usb 10-1: Manufacturer: syz [ 1892.517342][ T6583] usb 10-1: SerialNumber: syz [ 1892.533969][ T6583] usb 10-1: config 0 descriptor?? [ 1892.603440][ T6583] garmin_gps 10-1:0.0: Garmin GPS usb/tty converter detected [ 1892.661710][ T6583] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 1892.721995][ T6583] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8 [ 1892.747160][T12384] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1892.765438][T13693] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1892.831203][T13693] FAT-fs (loop3): Filesystem has been set read-only [ 1892.877641][T12384] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1892.879795][T13693] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1892.999729][T13693] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1893.012221][T12384] bond0 (unregistering): Released all slaves [ 1893.140247][ T29] audit: type=1800 audit(1774502351.355:635): pid=13693 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1139" name="file1" dev="loop3" ino=1048712 res=0 errno=0 [ 1893.220980][T13693] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 1893.309253][T13705] XFS (loop2): Ending clean mount [ 1893.321376][T13705] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1893.352972][ T6583] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 1893.633473][ T6583] usb 4-1: config 5 has an invalid interface number: 123 but max is 0 [ 1893.668961][ T6583] usb 4-1: config 5 has no interface number 0 [ 1893.680952][ T6583] usb 4-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 1893.732753][ T6583] usb 4-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid maxpacket 14702, setting to 64 [ 1893.758020][ T6583] usb 4-1: config 5 interface 123 has no altsetting 0 [ 1893.825304][ T6583] usb 4-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 1893.836983][T12384] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1893.861894][ T6583] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1893.881866][ T6583] usb 4-1: Product: syz [ 1893.888949][ T6583] usb 4-1: Manufacturer: syz [ 1893.914786][ T6583] usb 4-1: SerialNumber: syz [ 1893.944840][T12384] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1893.984034][T13715] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1894.067582][T12384] bond0 (unregistering): Released all slaves [ 1894.220794][ T40] usb 10-1: USB disconnect, device number 22 [ 1894.314696][ T40] garmin_gps 10-1:0.0: device disconnected [ 1894.652799][T13582] chnl_net:caif_netlink_parms(): no params data found [ 1894.901945][ T6583] ni6501 4-1:5.123: driver 'ni6501' failed to auto-configure device. [ 1894.965654][T13722] loop2: detected capacity change from 0 to 512 [ 1895.032589][ T6583] usb 4-1: USB disconnect, device number 12 [ 1895.744807][T12384] hsr_slave_0: left promiscuous mode [ 1895.804193][T12384] hsr_slave_1: left promiscuous mode [ 1895.884613][T12384] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1895.941365][T12384] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1896.420566][T12384] team0 (unregistering): Port device team_slave_1 removed [ 1896.436183][T13722] EXT4-fs (loop2): failed to open journal device unknown-block(0,0) -6 [ 1896.636269][T12384] team0 (unregistering): Port device team_slave_0 removed [ 1897.010587][T13739] loop2: detected capacity change from 0 to 128 [ 1897.080040][T13739] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1897.164231][T13739] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1897.811853][T13745] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1145'. [ 1898.464080][T12384] team0 (unregistering): Port device team_slave_1 removed [ 1898.579455][T12384] team0 (unregistering): Port device team_slave_0 removed [ 1899.224729][T13753] loop9: detected capacity change from 0 to 512 [ 1899.315439][T13753] EXT4-fs (loop9): invalid inodes per group: 0 [ 1899.315439][T13753] [ 1899.808249][T13722] netdevsim netdevsim2: Direct firmware load for ..€ failed with error -2 [ 1899.873601][T13722] netdevsim netdevsim2: Falling back to sysfs fallback for: ..€ [ 1900.310460][T13756] loop9: detected capacity change from 0 to 2048 [ 1900.315196][T13751] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1903.009813][T13582] bridge0: port 1(bridge_slave_0) entered blocking state [ 1903.057363][T13582] bridge0: port 1(bridge_slave_0) entered disabled state [ 1903.125852][T13582] bridge_slave_0: entered allmulticast mode [ 1903.214901][T13582] bridge_slave_0: entered promiscuous mode [ 1903.303734][T13642] chnl_net:caif_netlink_parms(): no params data found [ 1903.892026][T13582] bridge0: port 2(bridge_slave_1) entered blocking state [ 1903.917965][T13582] bridge0: port 2(bridge_slave_1) entered disabled state [ 1904.003351][T13582] bridge_slave_1: entered allmulticast mode [ 1904.043878][T13582] bridge_slave_1: entered promiscuous mode [ 1904.719688][T13582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1904.850806][T13582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1905.022698][T13785] loop9: detected capacity change from 0 to 128 [ 1905.097461][ T7720] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1905.118583][T13785] vfat: Unknown parameter 'ÿ' [ 1905.310803][ T7720] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1905.394573][ T7720] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1905.465077][ T7720] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1905.478836][T13582] team0: Port device team_slave_0 added [ 1905.483050][T13723] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 1905.493884][T13772] usb 10-1: new full-speed USB device number 23 using dummy_hcd [ 1905.533881][ T7720] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1905.579237][T13582] team0: Port device team_slave_1 added [ 1905.646278][ T7720] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1905.656774][ T7720] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1905.667086][ T7720] usb 4-1: Product: syz [ 1905.671495][ T7720] usb 4-1: Manufacturer: syz [ 1905.721298][T13772] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 10 [ 1905.736877][T13723] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1905.745692][ T7720] usb 4-1: SerialNumber: syz [ 1905.761547][T13723] usb 3-1: config 1 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 1905.793016][T13772] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1905.808666][T13723] usb 3-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1905.835025][ T7720] usb 4-1: config 0 descriptor?? [ 1905.856062][T13772] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1905.904988][ T7720] garmin_gps 4-1:0.0: Garmin GPS usb/tty converter detected [ 1905.924418][T13723] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1905.950383][T13772] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1906.000241][T13723] usb 3-1: string descriptor 0 read error: -22 [ 1906.013057][ T7720] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 1906.045515][T13723] usb 3-1: New USB device found, idVendor=16c0, idProduct=05e1, bcdDevice= 0.40 [ 1906.082427][ T7720] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8 [ 1906.100485][T13723] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1906.153430][T13772] usb 10-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1906.207181][T13772] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1906.255430][T13789] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1906.265010][T13772] usb 10-1: Product: syz [ 1906.282438][T13772] usb 10-1: Manufacturer: syz [ 1906.298190][T13772] usb 10-1: SerialNumber: syz [ 1906.451472][T13772] usb 10-1: config 0 descriptor?? [ 1906.492755][T13785] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 1906.677702][T13772] usb 10-1: ucan: probing device on interface #0 [ 1906.700643][T13772] usb 10-1: ucan: invalid endpoint configuration [ 1906.729170][T13772] usb 10-1: ucan: probe failed; try to update the device firmware [ 1906.759206][T13789] loop2: detected capacity change from 0 to 256 [ 1906.876977][T13582] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1906.916417][T13772] usb 10-1: USB disconnect, device number 23 [ 1906.957314][T13582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1907.111994][T13582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1907.383081][T13789] FAT-fs (loop2): Directory bread(block 64) failed [ 1907.433257][T13789] FAT-fs (loop2): Directory bread(block 65) failed [ 1907.475558][T13642] bridge0: port 1(bridge_slave_0) entered blocking state [ 1907.484223][T13642] bridge0: port 1(bridge_slave_0) entered disabled state [ 1907.492908][T13642] bridge_slave_0: entered allmulticast mode [ 1907.504932][T13642] bridge_slave_0: entered promiscuous mode [ 1907.512648][T13789] FAT-fs (loop2): Directory bread(block 66) failed [ 1907.519403][T13789] FAT-fs (loop2): Directory bread(block 67) failed [ 1907.583818][T13789] FAT-fs (loop2): Directory bread(block 68) failed [ 1907.609134][T13582] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1907.631652][T13789] FAT-fs (loop2): Directory bread(block 69) failed [ 1907.667664][T13582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1907.705795][T13789] FAT-fs (loop2): Directory bread(block 70) failed [ 1907.770034][T13789] FAT-fs (loop2): Directory bread(block 71) failed [ 1907.855184][T13582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1907.879767][T13789] FAT-fs (loop2): Directory bread(block 72) failed [ 1907.927852][T13789] FAT-fs (loop2): Directory bread(block 73) failed [ 1908.001376][T13642] bridge0: port 2(bridge_slave_1) entered blocking state [ 1908.053340][T13642] bridge0: port 2(bridge_slave_1) entered disabled state [ 1908.068095][T11415] usb 4-1: USB disconnect, device number 13 [ 1908.100698][T13642] bridge_slave_1: entered allmulticast mode [ 1908.115314][T11415] garmin_gps 4-1:0.0: device disconnected [ 1908.151208][T13642] bridge_slave_1: entered promiscuous mode [ 1908.888590][T13642] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1908.997253][T13642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1909.052670][T13723] usbhid 3-1:1.0: can't add hid device: -71 [ 1909.059252][T13723] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 1909.212698][T13723] usb 3-1: USB disconnect, device number 6 [ 1909.799006][T13582] hsr_slave_0: entered promiscuous mode [ 1910.291829][T13582] hsr_slave_1: entered promiscuous mode [ 1910.372978][T13582] debugfs: 'hsr0' already exists in 'hsr' [ 1910.402504][T13582] Cannot create hsr debugfs directory [ 1911.044447][T13642] team0: Port device team_slave_0 added [ 1911.300343][T13642] team0: Port device team_slave_1 added [ 1911.692531][T13820] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1159'. [ 1912.125636][T13821] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1159'. [ 1912.286232][T13642] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1912.300329][T13642] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1912.344033][T13833] netlink: 'syz.9.1162': attribute type 39 has an invalid length. [ 1912.360213][T13642] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1913.295920][T13642] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1913.332896][T13642] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1913.401608][T13642] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1914.877352][T13642] hsr_slave_0: entered promiscuous mode [ 1914.927325][T13642] hsr_slave_1: entered promiscuous mode [ 1914.955981][T13642] debugfs: 'hsr0' already exists in 'hsr' [ 1915.002878][T13642] Cannot create hsr debugfs directory [ 1918.457857][T13582] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1918.958061][T13894] tap0: tun_chr_ioctl cmd 1074025692 [ 1919.133011][T13582] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1920.469146][T13642] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1920.605244][T13642] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1920.724038][T13642] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1920.887631][T13642] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1921.848554][T13390] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1921.863501][T13390] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1921.875472][T13390] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1921.889456][T13390] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1921.901247][T13390] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1922.658500][T13919] wlan0 speed is unknown, defaulting to 1000 [ 1923.218891][T13934] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1190'. [ 1924.090833][T13390] Bluetooth: hci2: command tx timeout [ 1925.232545][ C1] ===================================================== [ 1925.239896][ C1] BUG: KMSAN: uninit-value in __flush_smp_call_function_queue+0x362/0x18e0 [ 1925.248683][ C1] __flush_smp_call_function_queue+0x362/0x18e0 [ 1925.255109][ C1] generic_smp_call_function_single_interrupt+0x1c/0x30 [ 1925.262263][ C1] __sysvec_call_function_single+0x4b/0x3e0 [ 1925.268428][ C1] sysvec_call_function_single+0x7c/0x90 [ 1925.274234][ C1] asm_sysvec_call_function_single+0x1f/0x30 [ 1925.280395][ C1] finish_task_switch+0x11b/0x8b0 [ 1925.285693][ C1] __schedule+0x2607/0x8640 [ 1925.290396][ C1] preempt_schedule_irq+0x50/0xa0 [ 1925.295603][ C1] raw_irqentry_exit_cond_resched+0x5d/0x80 [ 1925.301865][ C1] irqentry_exit+0x8f/0x6c0 [ 1925.306546][ C1] sysvec_apic_timer_interrupt+0x52/0x90 [ 1925.312355][ C1] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 1925.318542][ C1] queue_delayed_work_on+0x1c9/0x2e0 [ 1925.324101][ C1] srcu_reschedule+0x3a4/0x4b0 [ 1925.329034][ C1] process_srcu+0x1a78/0x2f50 [ 1925.333872][ C1] process_scheduled_works+0xb82/0x1e80 [ 1925.339582][ C1] worker_thread+0xee4/0x1590 [ 1925.344533][ C1] kthread+0x53f/0x600 [ 1925.348778][ C1] ret_from_fork+0x20f/0x910 [ 1925.353545][ C1] ret_from_fork_asm+0x1a/0x30 [ 1925.358509][ C1] [ 1925.360915][ C1] Local variable warn created at: [ 1925.366036][ C1] __dquot_alloc_space+0x4d/0x1cd0 [ 1925.371382][ C1] shmem_inode_acct_blocks+0x376/0x5d0 [ 1925.377092][ C1] [ 1925.379544][ C1] CPU: 1 UID: 0 PID: 13772 Comm: kworker/1:8 Tainted: G L syzkaller #0 PREEMPT(full) [ 1925.390787][ C1] Tainted: [L]=SOFTLOCKUP [ 1925.395215][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1925.405437][ C1] Workqueue: rcu_gp process_srcu [ 1925.410574][ C1] ===================================================== [ 1925.417607][ C1] Disabling lock debugging due to kernel taint [ 1925.423877][ C1] Kernel panic - not syncing: kmsan.panic set ... [ 1925.430455][ C1] CPU: 1 UID: 0 PID: 13772 Comm: kworker/1:8 Tainted: G B L syzkaller #0 PREEMPT(full) [ 1925.441687][ C1] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 1925.447349][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1925.457548][ C1] Workqueue: rcu_gp process_srcu [ 1925.462707][ C1] Call Trace: [ 1925.466089][ C1] [ 1925.469030][ C1] __dump_stack+0x26/0x30 [ 1925.473546][ C1] dump_stack_lvl+0x50/0x1c0 [ 1925.478321][ C1] ? dump_stack+0x12/0x25 [ 1925.482833][ C1] dump_stack+0x1e/0x25 [ 1925.487171][ C1] vpanic+0x7b4/0x1430 [ 1925.491466][ C1] panic+0x15d/0x160 [ 1925.495676][ C1] kmsan_report+0x31a/0x320 [ 1925.500440][ C1] ? __msan_warning+0x1b/0x30 [ 1925.505314][ C1] ? __flush_smp_call_function_queue+0x362/0x18e0 [ 1925.511922][ C1] ? generic_smp_call_function_single_interrupt+0x1c/0x30 [ 1925.519230][ C1] ? __sysvec_call_function_single+0x4b/0x3e0 [ 1925.525480][ C1] ? sysvec_call_function_single+0x7c/0x90 [ 1925.531475][ C1] ? asm_sysvec_call_function_single+0x1f/0x30 [ 1925.537805][ C1] ? finish_task_switch+0x11b/0x8b0 [ 1925.543216][ C1] ? __schedule+0x2607/0x8640 [ 1925.548064][ C1] ? preempt_schedule_irq+0x50/0xa0 [ 1925.553448][ C1] ? raw_irqentry_exit_cond_resched+0x5d/0x80 [ 1925.559757][ C1] ? irqentry_exit+0x8f/0x6c0 [ 1925.564598][ C1] ? sysvec_apic_timer_interrupt+0x52/0x90 [ 1925.570608][ C1] ? asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 1925.576940][ C1] ? queue_delayed_work_on+0x1c9/0x2e0 [ 1925.582608][ C1] ? srcu_reschedule+0x3a4/0x4b0 [ 1925.587715][ C1] ? process_srcu+0x1a78/0x2f50 [ 1925.592820][ C1] ? process_scheduled_works+0xb82/0x1e80 [ 1925.598724][ C1] ? worker_thread+0xee4/0x1590 [ 1925.603757][ C1] ? kthread+0x53f/0x600 [ 1925.608183][ C1] ? ret_from_fork+0x20f/0x910 [ 1925.613121][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 1925.618261][ C1] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1925.624887][ C1] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1925.631175][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 1925.636512][ C1] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1925.642631][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 1925.647967][ C1] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1925.654508][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 1925.659853][ C1] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1925.665897][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 1925.671242][ C1] __msan_warning+0x1b/0x30 [ 1925.675943][ C1] __flush_smp_call_function_queue+0x362/0x18e0 [ 1925.682376][ C1] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1925.688458][ C1] generic_smp_call_function_single_interrupt+0x1c/0x30 [ 1925.695620][ C1] __sysvec_call_function_single+0x4b/0x3e0 [ 1925.701745][ C1] sysvec_call_function_single+0x7c/0x90 [ 1925.707572][ C1] [ 1925.710618][ C1] [ 1925.713649][ C1] asm_sysvec_call_function_single+0x1f/0x30 [ 1925.719810][ C1] RIP: 0010:finish_task_switch+0x11b/0x8b0 [ 1925.725840][ C1] Code: e8 0f 84 65 02 00 00 4d 85 ed 0f 85 6d 02 00 00 e9 ea 05 00 00 49 83 c7 48 4c 8b 6d c0 4c 89 ff e8 9a 53 59 0f fb 48 8b 45 b8 <48> 8d 98 88 1b 00 00 41 be ff ff ff bf 44 23 b0 88 1b 00 00 48 89 [ 1925.745621][ C1] RSP: 0018:ffff8880ac797540 EFLAGS: 00000282 [ 1925.751872][ C1] RAX: ffff88812ca70000 RBX: ffff88813fca30c0 RCX: 0000000000000001 [ 1925.759981][ C1] RDX: 0000000015848028 RSI: 0000000000000001 RDI: ffffffff95848028 [ 1925.768087][ C1] RBP: ffff8880ac7975b0 R08: ffffea000000000f R09: 0000000000000000 [ 1925.776204][ C1] R10: ffff888237c90028 R11: 0000000000000000 R12: 0000000000000000 [ 1925.784307][ C1] R13: ffff888084a9a140 R14: 0000000000000000 R15: ffff88813fca3108 [ 1925.792491][ C1] __schedule+0x2607/0x8640 [ 1925.797200][ C1] ? update_cfs_rq_load_avg+0x747/0x8c0 [ 1925.802992][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 1925.808354][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 1925.813782][ C1] preempt_schedule_irq+0x50/0xa0 [ 1925.819002][ C1] raw_irqentry_exit_cond_resched+0x5d/0x80 [ 1925.825127][ C1] irqentry_exit+0x8f/0x6c0 [ 1925.829836][ C1] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1925.836387][ C1] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1925.842679][ C1] sysvec_apic_timer_interrupt+0x52/0x90 [ 1925.848505][ C1] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 1925.854673][ C1] RIP: 0010:queue_delayed_work_on+0x1c9/0x2e0 [ 1925.860968][ C1] Code: 81 e6 00 02 00 00 31 ff e8 c4 6d 5a 00 49 81 e7 00 02 00 00 75 07 e8 d6 68 5a 00 eb 06 e8 cf 68 5a 00 fb c6 83 20 03 00 00 00 83 a8 0f 00 00 00 00 00 00 44 89 f0 48 83 c4 50 5b 41 5c 41 5d [ 1925.880834][ C1] RSP: 0018:ffff8880ac797980 EFLAGS: 00000293 [ 1925.887059][ C1] RAX: ffffffff81a56dd1 RBX: ffff88812ca70bc8 RCX: ffff88812ca70000 [ 1925.895178][ C1] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000 [ 1925.903280][ C1] RBP: ffff8880ac7979f8 R08: ffffea000000000f R09: 0000000000000000 [ 1925.911408][ C1] R10: ffff888237c90028 R11: ffffffff91055580 R12: 00000000ffffffff [ 1925.919543][ C1] R13: 0000000000000000 R14: 00000000ffffff01 R15: 0000000000000200 [ 1925.927656][ C1] ? __pfx_delay_tsc+0x10/0x10 [ 1925.932634][ C1] ? queue_delayed_work_on+0x1c1/0x2e0 [ 1925.938355][ C1] srcu_reschedule+0x3a4/0x4b0 [ 1925.943321][ C1] process_srcu+0x1a78/0x2f50 [ 1925.948187][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 1925.953536][ C1] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1925.959653][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 1925.964992][ C1] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1925.971549][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 1925.976889][ C1] ? __pfx_process_srcu+0x10/0x10 [ 1925.982098][ C1] process_scheduled_works+0xb82/0x1e80 [ 1925.988024][ C1] worker_thread+0xee4/0x1590 [ 1925.992927][ C1] kthread+0x53f/0x600 [ 1925.997195][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1926.002519][ C1] ? __pfx_kthread+0x10/0x10 [ 1926.007328][ C1] ret_from_fork+0x20f/0x910 [ 1926.012108][ C1] ? __switch_to+0x51c/0x750 [ 1926.016937][ C1] ? __pfx_kthread+0x10/0x10 [ 1926.021755][ C1] ret_from_fork_asm+0x1a/0x30 [ 1926.026760][ C1] [ 1926.030513][ C1] Kernel Offset: disabled [ 1926.034917][ C1] Rebooting in 86400 seconds..