last executing test programs: 12m26.769101214s ago: executing program 0 (id=9): socket$inet6(0xa, 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x8002) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f0000000040)={0x7fffffff, 0x2, 'client0\x00', 0x80000002, "e71f965750d710e6", "455e510f0d44af4102e0de820f9e0aa6a1799ab955161ea99cd2b7021658b5f8", 0x8, 0x1}) ioctl$KDENABIO(r1, 0x4b36) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x54, 0x10, 0x1, 0x470bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r6, 0x64e10, 0x36a01}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x1c, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_EHT_HOSTS_LIMIT={0x8, 0x25, 0xfff}, @IFLA_BRPORT_PROXYARP_WIFI={0x5}, @IFLA_BRPORT_GROUP_FWD_MASK={0x6, 0x1f, 0xf}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c080}, 0x8002) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x23, &(0x7f0000000040), &(0x7f0000000200)=0x38) sendto$packet(r0, &(0x7f00000002c0)="1a040500c7ff03fc01004788031c09", 0x10025, 0x4000004, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x6, 0x6, @remote}, 0x14) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0x8, @val=@netfilter={0x5, 0x1, 0xe, 0x1}}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r7, 0x18000000000002a0, 0x7ee, 0x0, &(0x7f0000000e80)="b9e403c6631e39495aa05dc7cf1c", 0x0, 0x7ab, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840), 0xc) 12m24.547094647s ago: executing program 0 (id=11): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000540), 0x0, 0x0, &(0x7f0000000640)={0x11, 0x4, r9, 0x1, 0xff, 0x6, @remote}, 0x14) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 12m24.535716927s ago: executing program 1 (id=2): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x810, &(0x7f0000000000)={[{@errors_remount}, {@grpquota}]}, 0x8, 0x4fe, &(0x7f0000000a40)="$eJzs3c9vG1kdAPDvTOImm3U3XdgDIGDLslDQqs6P7kYrONC9gNBqJcSKE4duSNwoil1HcVKa0ENy5I5EJU7wJ3DjgNQTB27c4MalHJAqqEANUg9GM54mJoljs03iJv58pPHMe+P4+57t957nJc4LYGhdjYjtiLgUEZ9ExGSRnxRb3Gxv2f2ePrm/sPvk/kISrdbH/0jy81ledPxM5tXiMccj4offi/hJcjhuc3NrZb5Wq64V6an1+upUc3Pr+nJa5MzOzcxNv3/jvdkTq+ub9d8+/u7yhz/6/e++9OhP29/8WVas8s8v5+c663GS2lUvRbkjbzQiPjyNYAMyWrx/OH+y1vaZiHgrb/+TMZK/mv05olkDAOdAqzUZrcnONABw0WXX/+VI0koxF1CONK1U2nN4b8REWms019+ZbGzcWYx8DutKlNLby7XqdDFXeCVKSZaeyY/307MH0jci4vWI+MXYK3m6stCoLQ7ygw8ADLFXD4z//x5rj/8AwAU3PugCAABnzvgPAMPH+A8Aw+f/GP/7/3YgAPBSc/0PAMPH+A8Aw6fn+L9zNuUAAM7EDz76KNtau8X/v168u7nx7fLd64vV5kqlvrFQWWisrVaWGo2lWrWy0Gr1erxao7E68+5esrm5dave2Lizfmu5Pr9UvVUtnXJ9AIDeXn/z4V+SiNj+1iv5Fh1rORir4WJLB10AYGBGBl0AYGB8nweGVx/X+KYB4ILrtZZn1z8RemDxVzivrn3e/D8MK/P/MLw+3fz/d068HMDZM/8Pw6vVSqz5DwBDxhw/8EK//wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAhVc63JK3ka4FvZ7dppRJxOSKuRCm5vVyrTkfEaxHx57HSWJaeGXShAYAXlP49Kdb/ujb5dvng2UvJf8byfUT89Fcf//Le/Pr62kyW/8+9/PUHRf7spUFUAADodPNwVnucLvYdF/JPn9xfeL6dZREff9BeXDSLu1ts7TOjMZrvx6MUERP/Sop0W/Z5ZeQE4m/vRMTn9ut/ryNCOZ8Daa98ejB+FvvyKcTff/4Pxk//J36an8v2pfy5+OwJlAWGzcMP2v1k0fayJla0vzSu5vuj2/943kO9uOf93+6h/i/d6/9GDsVP8jZ/dS99fEkev/uH7x/KbE22z+1EfGH0qPjJXvykS//7dp91/OsXv/xWt3OtX0dci6Pjt9XzbnZqvb461dzcur5cn1+qLlXvzM7OzcxNv3/jvdmpfI66ffvHAw//rFjm/rWuz81OxESX+OM96v+1Puv/m2ef/Pgrx8T/xlePfv3fOCZ+NiZ+vc/48xM3uy7fncVf7FL/Xq//O33Gf/S3rcU+7woAnIHm5tbKfK1WXetxkH3W7HUfB+fzILYjXoJi9DpIi7fsy1KeC35wTKeRnlHnBJyq/UY/6JIAAAAAAAAAAAAAAADdNDe3VsbidL9ONOg6AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcHH9NwAA//8tM9Id") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x18d883, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f0000002380)={0x2020}, 0x2020) 12m23.994931085s ago: executing program 1 (id=12): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6(0xa, 0x3, 0x2) setsockopt$inet6_opts(r3, 0x29, 0x36, &(0x7f0000000000)=@hopopts={0x2}, 0x8) 12m23.883682217s ago: executing program 0 (id=13): mount$9p_fd(0x0, 0x0, 0x0, 0x4000, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x1000040, &(0x7f0000000300)={[{@noinit_itable}, {@noload}, {@errors_remount}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x5}}, {@noacl}, {@grpid}, {@noacl}]}, 0x1, 0x5c5, &(0x7f0000000480)="$eJzs3T1sG9cdAPD/HUVLtuXKQwu0hQejLeAChqkP263bSV6LujDgoUCXVqBowRAlGiLVWIKAyLsRxEOQBF6cLRkyJsiQIciSMWuWfMwBjFhIAMtDwoBfsixRDiWbZCL+fsCJ790d+f+/O77nu8OdGcDAOl37k0b8LiKuJhFj25YNRXPh6cZ6mxtr+ccba/kkqtVr3ySRRMSjjbV8a/2k+Xo8ItYj4rcR8XE24my69ZFHWoXyyur8TLFYWGrWxysLN8fLK6vnbizMzBXmCovn//q3i5cuXJycmtye7uPq9lp2f22988XdV+58+o/7d99599R6/rWZJKZjtLlseztepMY2ycb0jvkXuhGsj5J+J8CBZJr9vNaVfhNjkWn2+naq2weH4Z6kB3RRdTiiumVbERgAyXN0+tYgAvwStY4Daue/ramXxx8PLjdOQGpxNzfW8i9HK/5Q49pEjNTPTY59mzx1ZlI73zzZy0Q5lNZvR8TE0NDu73/S/P4d3MSLSJCu+uhyY0ft3v/p1vgTbcaf0da10+fUGv82m+PfZpv4mT3Gv6sdxvj+P1+9uWf828Px+7bxk634SZv4aUT8r8P49/79waW9llXfijgT7eO3JM++Pjx+/UaxMNH42zbGh2dO/X3v9kccq8fP7IrfuGY7Uk9ke/uPNHNKO2z/+5+894f1Z8T/8x+fvf/bbf+jEfFqJ8FrKz56+597LX5wO3lYOwrY7/5PIhv3O4kfEX+ZPv15s+iqIQAAAAAAAAAAvEBp/V62JM1tldM0l2s8w/vrOJYWS+XK2eul5cXZxj1vJyObtu60GmvUk1p9snk/bqs+taN+PtMMmDlar+fypeJsn9sOAAAAAAAAAAAAAAAAAAAAPxfHdzz//12m/vz/dMTUiX7nBvTA3j/5DRx2+j8Mrqf7f9K3PIDe8+8/DKyq/g+DS/+HwaX/w+DS/2Fwte3/R3ufB9B7u/r/SH/yAHpv38f//8p2JxEAAAAAAAAAAAAAAAAAAAAAAAAAADhcrl65UpuqjzfW8rX67NDK8nzp/+dmC+X53MJyPpcvLd3MzZVKc8VCLl9a+KnPS0qlmxOxuHxrvFIoV8bLK6v/XSgtL7Z+U7TgPw4FAAAAAAAAAAAAAAAAAACA3UbrU5LmIrKNeprmchEnIuJkEsn1G8XCRET8KiI+y2SHa/XJficNAAAAAAAAAAAAAAAAAAAAh0x5ZXV+plgsLHWvMNQM1dm7vqx0NZ+h/awcEetPzYlInm+L1T5x3+/KNjdgfc5I1/fX4S5kOvweDnyhj4MSAAAAAAAAAAAAAAAAAAAMqCcP/Xb6jh+6mxAAAAAAAAAAAAAAAAAAAAAMpPTrJCJq05mxP43uXHok2czUXyPipXvXXr81U6ksTdbmP9yaX3mjOX+qH/kDnWr10zQiav0YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeKK8sjo/UywWlg5YGO5gnX63EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAgfgwAAP//8czFuw==") r0 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e24, 0x6, @empty}, 0x1c) syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./bus\x00', 0x3010050, &(0x7f0000000080)=ANY=[@ANYRES8=r0], 0x41, 0x14fa, &(0x7f0000000700)="$eJzs3Au0ztXWMPA511p/NklPkvuaa/55kssiSXJJSCRJkiS5JSRJkoTEJrckJCH3JPeQ3GIn9/st9yQ5kiQJCUnWN3Q6n/e8nfftnO+c7/V9Z8/fGGvsNff/mfNZa889nv9ljL2/7Ti4av1qlesyM/xT8M9fUgEgBQD6AcA1ABABQKlspbIBDoNMGlP/uTcR/1oPTbvSKxBXkvQ/fZP+p2/S//RN+p++Sf/TN+l/+ib9T9+k/0KkZ1un575WRvod/3PP/0Ge//8/R87//0YOFxvz5fpi13f6B1Kk/+mb9D99k/6nb9L/9E36n75J///NRQCV/pvD0v/0TfovRHp2pZ8/y7iy40r//gkhhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGESB/OhcsMAPxlfqXXJYQQQgghhBBCiH+dkPFKr0AIIYQQQgghhBD/9yEo0GAgggyQEVIgE2SGqyALXA1Z4RpIwLWQDa6D7HA95ICckAtyQx7IC/nAAoEDhhjyQwFIwg1QEG6EQlAYikBR8FAMisNNUAJuhpJwC5SCW6E03AZloCyUg/JwO1SAO6AiVILKcCdUgbugKlSDu6E63AM14F6oCfdBLbgfasMDUAcehLrwENSDh6E+PAIN4FFoCI2gMTSBpv9H+S9CV3gJukF3SIUe0BNehl7QG/pAX+gHr0B/eBUGwGswEAbBYHgdhsAbMBTehGEwHEbAWzASRsFoGANjYRyMh7dhArwDE+FdmASTYQpMhWkwHWbAezATZsFseB/mwAcwF+bBfFgAC+FDWASLIQ0+giXwMSyFZbAcVsBKWAWrYQ2shXWwHjbARtgEm2ELbIVPYBtshx2wE3bBbtgDn8Je+Az2weewH774B/PP/qf8TggIqFChQYMZMAOmYApmxsyYBbNgVsyKCUxgNsyG2TE75sAcmAtzYR7Mg/kwHxISMjLmx/yYxCQWxIJYCAthESyCHj0Wx+JYAm/GklgSS2EpLI2lsQyWxbJYHstjBayAFbEiVsbKWAWrYFWsinfj3XgP1sAaWBNrYi2shbWxNtbBOlgX62I9rIf1sT42wAbYEBtiY2yMTbEpNsNm2BybY0tsia2wFbbG1tgG22BbbIvtsB22x/bYATtgR+yInbAzdsYX8UV8CV/C7lhF9cCe2BN7YS/sg32xL76C/fFVfBVfw4E4CAfj6/g6voFD8QwOw+E4AkdgBTUKR+MYZDUOx+N4nIATcCJOxEk4GSfjVJyG03EGzsCZOAtn4fs4Bz/AD3AezsMFuBAX4iJcjGmYhkvwLC7FZbgcV+BKXIUrcQ2uxTW4HjfgetyEm3ALbsFP8BPcjttxJ+7E3bgbP8VP8TP8DAfiftyPB/AAHsSDeAgP4WE8jEfwCB7Fo3gMj+FxPI4n8CSewpN4Gk/jGTyL5/AcnsfzeAGfz/N1vd2F1w0EdYlRRmVQGVSKSlGZVWaVRWVRWVVWlVAJlU1lU9lVdpVD5VC5VC6VR+VR+VQ+RYoUq1jlV/lVUiVVQVVQFVKFVBFVRHnlVXFVXJVQJVRJVVKVUreq0uo2VUaVVS18eVVeVVAtfUVVSVVWlVUVdZeqqqqpaqq6qq5qqBqqpqqpaqlaqrZ6QNVRPbAPPqQudaa+GoQN1GBsqBqpxqqJegMfU83UUGyuWqiW6gk1HIdha9XMt1FPq7ZqNLZTz6ox+JzqoMZhR/WC6qQ6qy7qRdVVNffdMvz2EaimYi/VW/VRfdVMvEtd6lhV9ZoaqAapwep1tQDfUEPVm2qYGq5GqLfUSDVKjVZj1Fg1To1Xb6sJ6h01Ub2rJqnJaoqaqqap6WqGek/NVLPUbPW+mqM+UHPVPDVfLVAL1YdqkVqs0tRHaon6WC1Vy9RytUKtVKvUarVGrVXr1Hq1QW1Um9RmtUVtVZ+obWq72qF2ql1qt9qjPlV71Wdqn/pc7VdfqAPqT+qg+lIdUl+pw+prdUR9o46qb9Ux9Z06rr5XJ9RJdUr9oE6rH9UZdVadUz+p8+pndUH9oi6qoECjVlproyOdQWfUKTqTzqyv0ln01TqrvkYn9LU6m75OZ9fX6xw6p86lc+s8Oq/Op60m7TTrWOfXBXRS36AL6ht1IV1YF9FFtdfFdHF9ky6hb9Yl9S26lL5Vl9a36TK6rC6ny+vbdQV9h66oK+nK+k5dRd+lq+pq+m5dXd+ja+h7dU19n66l79e19QO6jn5Q19UP6Xr6YV1fP6Ib6Ed1Q91IN9ZNdFP9mG6mH9fNdQvdUj+hW+kndWv9lG6jn9Zt9TO6nX5Wt9fP6Q76ed1Rv6A76c66i/5FX9RBd9PddaruoXvql3Uv3Vv30X11P/2K7q9f1QP0a3qgHqQH69f1EP2GHqrf1MP0cD1Cv6VH6lF6tB6jx+pxerx+W0/Q7+iJ+l09SU/WU/RUPU1P131+qzT778h/52/kD/j13bforfoTvU1v1zv0Tr1L79Z79B69V+/V+/Q+vV/v1wf0AX1QH9SH9CF9WB/WR/QRfVQf1cf0MX1cH9cn9En9k/5Bn9Y/6jP6rD6rf9Ln9Xl94befARg0ymhjTGQymIwmxWQymc1VJou52mQ115iEudZkM9eZ7OZ6k8PkNLlMbpPH5DX5jDVknGETm/ymgEmaG0xBc6MpZAqbIqao8aaYKW5u+qfz/2h9TU1T08w0M81Nc9PStDStTCvT2rQ2bUwb09a0Ne1MO9PetDcdTAfT0XQ0nUwn08V0MV1NV9PNdDOpJtX0NC+bXqa36WP6mn7mFdPf9DcDzAAz0Aw0g81gM8QMMUPNUDPMDDMjzAgz0ow0o81oM9aMNePNeDPBTDATzUQzyUwyU8wUM81MMzPMDDPTzDSzzWwzx8wxc81cM9/MNwvNQrPILDJpJs0sMUvMUrPMLDMrzAqzyqwya8was86sMxvMBrPJbDJLzVaz1Wwz28wOs8PsMrvMHrPH7DV7zT6zz+w3+80Bc8AcNAfNIXPIHDaHzRFzxBw1R80xc8wcN8fNCXPCnDKnzGlz2pwxZ8w5c86cN+fNBXPBXDQXL132RSpSkYlMlCHKEKVEKVHmKHOUJcoSZY2yRokoEWWLskXZo+ujHFHOKFeUO8oT5Y1SwUYUuYijOMofFYiS0Q1RwejGqFBUOCoSFY18VCwqHt0UlYhujkpGt0Sloluj0tFtUZmobFQuKh/dHlWI7ogqRpWiytGdUZXorqhqVC26O6oe3RPViO6Nakb3RbWi+6Pa0QNRnejBqG70UFQvejiqHz0SNYgejRpGjaLGUZOo6b+0fghncj7uu9nuNtX2sD3ty7aX7W372L62n33F9rev2gH2NTvQDrKD7et2iH3DDrVv2mF2uB1h37Ij7Sg72o6xY+04O96+bSfYd+xE+66dZCfbKXaqnWan2xn2PTvTzrKz7ft2jv3AzrXz7Hy7wC60H9pFdrFNsx/ZJfZju9Qus8vtCrvSrrKr7Rq71q6z6+0Gu9FuspvtFrvVfmK32e12h91pd9nddo/91O61n9l99nO7335hD9g/2YP2S3vIfmUP26/tEfuNPWq/tcfsd/a4/d6esCftKfuDPW1/tGfsWXvO/mTP25/tBfuLvWjDpYv7S6d3MmQoA2WgFEqhzJSZslAWykpZKUEJykbZKDtlpxyUg3JRLspDeSgf5aNLmJjyU35KUpIKUkEqRIWoCBUhT56KU3EqQSWoJJWkUlSKSlNpKkNlqByVo9vpdrqD7qBKVInupDvpLrqLqlE1qk7VqQbVoJpUk2pRLapNtakO1aG6VJfqUT2qT/WpATWghtSQGlNjakpNqRk1o+bUnFpSS2pFrag1taY21IbaUltqR+2oPbWnDtSBOlJH6kSdqAt1oa7UlbpRN0qlVOpJPakX9aI+1If6UT/qT/1pAA2ggTSQBtNgGkJDaCgNpWE0nEbQWzSSRtFoGkNjaRyNp/E0gSbQRJpIk2gSTaEpNI2m0QyaQTNpJs2m2TSH5tBcmkvzaT4tpIW0iBZRGqXRElpCS2kpLafltJJW0mpaTWtpLa2n9bSRNtJm2kxbaStto220g3bQLtpFe2gP7aW9tI/20X7aTwfoAB2kg3SIDtFhOkxH6AgdpaN0jI7RcTpOJ+gEnaJTdJpO0xk6Q+foHJ2nn+kC/UIXKVCKU5DZXeWyuKtdVneNS3GZ3KU4AoBLcS6X2+VxeV0+Z10Ol/OvYnLOFXKFXRFX1HlXzBV3N/0uLuPKunKuvLvdVXB3uIq/i6u7e1wNd6+r6e5z1dzdfxXXcve72u4RV8c96uq6Rq6ea+Lqu0dcA/eoa+gaucauiWvlnnSt3VOujXvatXXP/C5e5Ba7tW6dW+82uL3uM3fO/eSOum/defez6+a6u37uFdffveoGuNfcQDfod/EI95Yb6Ua50W6MG+vG/S6e4qa6aW66m+HeczPdrN/FC92Hbo5Lc3PdPDffLfg1vrSmNPeRW+I+dkvdMrfcrXAr3Sq32q3532td4Ta5zW6L2+M+ddvcdrfD7XS73O5f40v72Oc+d/vdF+6I+8YddF+6Q+6YO+y+/jW+tL9j7jt33H3vTriT7pT7wZ12P7oz7uyv+7+09x/cL+6iCw4YWbFmwxFn4Iycwpk4M1/FWfhqzsrXcIKv5Wx8HWfn6zkH5+RcnJvzcF7Ox5aJHTPHnJ8LcJJv4IJ8IxfiwlyEi7LnYlycb+ISfDOX5Fu4FN/Kpfk2LsNluRyX59u5At/BFbkSV+Y7uUoIXJWr8d1cne/hGnwv1+T7uBbfz7X5Aa7DD3Jdfojr8cNcnx/hBvwoN+RG3JibcFN+jJvx49ycW3BLfoJb8ZPcmp/iNvw0t+VnuB0/y+35Oe7Az3NHfoE7cWfuwi9yV36Ju3F3TuUe3JNf5l7cm/twX+7Hr3B/fpUH8Gs8kAfxYH6dh/AbPJTf5GE8nEfwWzySR/FoHsNjeRyP57d5Ar/DE/ldnsSTeQpP5Wk8nWfwezyTZ/Fsfp/n8Ac8l+fxfF7AC/lDXsSLOY0/4iX8MS/lZbycV/BKXsWreQ2v5XW8njfwRt7Em3kLb+VPeBtv5x28k3fxbt7Dn/Je/oz38ee8n7/gA/wnPshf8iH+ig/z13yEv+Gj/C0f4+/4OH/PJ/gkn+If+DT/yGf4LJ/jn/g8/8wX+Be+yIEhxljFOjZxFGeIM8YpcaY4c3xVnCW+Os4aXxMn4mvjbPF1cfb4+jhHnDPOFeeO88R543yxjSl2McdxnD8uECfjG+KC8Y1xobhwXCQuGvu4WFw8vikuEd8cl4xviUvFt8al49viMnHZ+JH7yse3xxXiO+KKcaW4cnxnXCW+K64aV4vvjqvH98Q14nvjmvF9ccn4/rh2/EBcJ34wrhs/FNeLH47rx4/EDeJH44Zxo7hx3CRuGj8WN4sfj5vHLeKW8RNxq/jJuHX8VNwmfjpuGz/zh8dT4x5xz/jl+OU4hHv1/OSC5MLkh8lFycXJtORHySXJj5NLk8uSy5MrkiuTq5Krk2uSa5PrkuuTG5Lmt5vKEKplBI9eee2Nj3wGn9Gn+Ew+s7/KZ/FX+6z+Gp/w1/ps/jqf3V/vc/icPpfP7fP4vD6ft5688+xjn98X8El/gy/ob/SFfGFfxBf13hfzxX0T39Q39c384765b+Fb+if8E/5J/6R/yj/ln/Zt/TO+nX/Wt/fP+Q7+ef+8f8F38p19F/+i7+pf8t18d5/qU31P39P38r18H9/H9/P9fH/f3w/wA/xAP9AP9oP9ED/ED/VD/TA/zI/wI/xIP9KP9qP9WD/Wj/fj/QQ/wU/0E/0kP8lP8VP8ND/Nz/Az/Ew/08/2s/2cQnP8XD/Xz/fz/UK/0C/yi3yaT/NL/BK/1C/1y/1yv9Kv9Kv9ar/Wr/Xr/Xq/0W/0m/1mv9Vv9dv8Nr/D7/C7/C6/x+/xe/1ev8/v8/v9fn/AH/AH/UF/yH/lD/uv/RH/jT/qv/XH/Hf+uP/en/An/Sn/gz/tf/Rn/Fl/zv/kz/uf/QX/i7/ogx+feDsxIfFOYmLi3cSkxOTElMTUxLTE9MSMxHuJmYlZidmJ9xNzEh8k5ibmJeYnFiQWJj5MLEosTqQlPkosSXycWJpYllieWJFYmViVCCHvtjjkDwVCMtwQCoYbQ6FQOBQJRYMPxULxcFMoEW4OJcMtoVS4NZQOt4UyoWwoFx4NDUOj0Dg0CU3DY6FZeDw0Dy1Cy/BEaBWeDK3DU6FNeDq0Dc+EduHZ0D48FzqE50PH8ELoFDqHLuHF0DW8FLqF7iE19Ag9w8uhV+gd+oS+oV94JfQPr4YB4bUwMAwKg8PrYUh4IwwNb4ZhYXgYEd4KI8OoMDqMCWPDuDA+vB0mhHfCxPBumBQmhylhapgWpocZ4b0wM8wKs8P7YU74IMwN88L8sCAsDB+GRWFxSAsfhSXh47A0LAvLw4qwMqwKq8OasDasC+vDhrAxbAqbw5awNXwStoXtYUfYGXaF3WFP+DTsDZ+FfeHzsD98EQ6EP4WD4ctwKHwVDoevw5HwTTgavg3HwnfhePg+nAgnw6nwQzgdfgxnwtlwLvwUzoefw4XwS7gof7MmhBBCCPF30X9wvMff+F4GAFC/zXsCwNXbcx/+zzU35vjzvLfK0yoBAE937/jQX0aVKqmpqb+9dqmGqMA8AEj8df2/xMugJTwJbaAFlPib6+utOp/nP6ifvBUg83/ISYHL8eX6N/8X9R97YsSi0vG5bP9N/XkAhQpczskEl+PL9Uv+F/VzNvuD9Wf6cjxA8/+QkwUux5frF4fH4Rlo81evFEIIIYQQQggh/qy3Ktf+j+6fL92f5zGXczLC5fiP7s+FEEIIIYQQQghx5T3XuctTj7Vp06L93zfB354L/GNZMpGJTP4/m1zpTyYhhBBCCCHEv9rli/4rvRIhhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEECL9+p/4d2JXeo9CCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCHElfa/AgAA//9P7TWn") socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009e173610ef171e3206de90f6007009021200010000000009040000000202"], 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 12m23.330166545s ago: executing program 1 (id=14): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x80) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) futex(&(0x7f000000cffc)=0x1, 0xd, 0x2, 0x0, 0x0, 0x400000) bpf$PROG_LOAD(0x5, 0x0, 0x0) memfd_create(0x0, 0x0) r4 = geteuid() getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=@updsa={0x2d8, 0x1a, 0x2, 0x70bd28, 0x25dfdbfb, {{@in6=@loopback, @in6=@empty, 0x4e20, 0x0, 0x4e20, 0x0, 0xa, 0xa0, 0x0, 0x33, 0x0, r4}, {@in=@empty, 0x4d3, 0x6c}, @in=@broadcast, {0x4, 0x0, 0x8, 0x2, 0x50, 0x100000000, 0x88ea, 0x7}, {0xfa0, 0x7fffffffffffffff, 0xfff, 0x8}, {0x9, 0x7, 0x4}, 0x70bd29, 0x3500, 0xa, 0x2, 0x82, 0x5}, [@policy_type={0xa}, @algo_crypt={0x86, 0x2, {{'adiantum(lrw(twofish),fcrypt)\x00'}, 0x1f0, "13a64ff461462c7c39542892275131690bb67cff512e08ae11817a4a7d9e5ecd8a2cc9d8a71410dde733751f9234d4c50eb5d80869912279e41a8d92240f"}}, @policy={0xac, 0x7, {{@in=@dev={0xac, 0x14, 0x14, 0x30}, @in6=@empty, 0x4e23, 0x0, 0x4e23, 0x3, 0x2, 0x80, 0x90, 0x2f, 0x0, 0xee01}, {0x7, 0x100000001, 0x8001, 0x2, 0x0, 0x5, 0xbe6, 0x7ff}, {0x4, 0x1, 0x0, 0x8}, 0x80000000, 0x6e6bbf, 0x2, 0x1, 0x6, 0x2}}, @migrate={0x9c, 0x11, [{@in=@local, @in6=@mcast2, @in=@empty, @in=@rand_addr=0x64010100, 0x32, 0x3, 0x0, 0x3504, 0x2, 0x2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@empty, 0x2b, 0x4, 0x0, 0x3502, 0x2, 0x2}]}, @offload={0xc}]}, 0x2d8}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ca3000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f000094c000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r5 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="2ff000fea0"], 0x0, 0x200, 0x0, 0x0, 0x41100, 0x3b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) 12m22.906763691s ago: executing program 32 (id=14): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x80) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) futex(&(0x7f000000cffc)=0x1, 0xd, 0x2, 0x0, 0x0, 0x400000) bpf$PROG_LOAD(0x5, 0x0, 0x0) memfd_create(0x0, 0x0) r4 = geteuid() getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=@updsa={0x2d8, 0x1a, 0x2, 0x70bd28, 0x25dfdbfb, {{@in6=@loopback, @in6=@empty, 0x4e20, 0x0, 0x4e20, 0x0, 0xa, 0xa0, 0x0, 0x33, 0x0, r4}, {@in=@empty, 0x4d3, 0x6c}, @in=@broadcast, {0x4, 0x0, 0x8, 0x2, 0x50, 0x100000000, 0x88ea, 0x7}, {0xfa0, 0x7fffffffffffffff, 0xfff, 0x8}, {0x9, 0x7, 0x4}, 0x70bd29, 0x3500, 0xa, 0x2, 0x82, 0x5}, [@policy_type={0xa}, @algo_crypt={0x86, 0x2, {{'adiantum(lrw(twofish),fcrypt)\x00'}, 0x1f0, "13a64ff461462c7c39542892275131690bb67cff512e08ae11817a4a7d9e5ecd8a2cc9d8a71410dde733751f9234d4c50eb5d80869912279e41a8d92240f"}}, @policy={0xac, 0x7, {{@in=@dev={0xac, 0x14, 0x14, 0x30}, @in6=@empty, 0x4e23, 0x0, 0x4e23, 0x3, 0x2, 0x80, 0x90, 0x2f, 0x0, 0xee01}, {0x7, 0x100000001, 0x8001, 0x2, 0x0, 0x5, 0xbe6, 0x7ff}, {0x4, 0x1, 0x0, 0x8}, 0x80000000, 0x6e6bbf, 0x2, 0x1, 0x6, 0x2}}, @migrate={0x9c, 0x11, [{@in=@local, @in6=@mcast2, @in=@empty, @in=@rand_addr=0x64010100, 0x32, 0x3, 0x0, 0x3504, 0x2, 0x2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@empty, 0x2b, 0x4, 0x0, 0x3502, 0x2, 0x2}]}, @offload={0xc}]}, 0x2d8}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ca3000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f000094c000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r5 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="2ff000fea0"], 0x0, 0x200, 0x0, 0x0, 0x41100, 0x3b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) 12m19.367147603s ago: executing program 2 (id=19): socket$inet6(0xa, 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x8002) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f0000000040)={0x7fffffff, 0x2, 'client0\x00', 0x80000002, "e71f965750d710e6", "455e510f0d44af4102e0de820f9e0aa6a1799ab955161ea99cd2b7021658b5f8", 0x8, 0x1}) ioctl$KDENABIO(r1, 0x4b36) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x54, 0x10, 0x1, 0x470bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r5, 0x64e10, 0x36a01}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x1c, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_EHT_HOSTS_LIMIT={0x8, 0x25, 0xfff}, @IFLA_BRPORT_PROXYARP_WIFI={0x5}, @IFLA_BRPORT_GROUP_FWD_MASK={0x6, 0x1f, 0xf}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c080}, 0x8002) sendto$packet(r0, &(0x7f00000002c0)="1a040500c7ff03fc01004788031c09", 0x10025, 0x4000004, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x6, 0x6, @remote}, 0x14) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0x8, @val=@netfilter={0x5, 0x1, 0xe, 0x1}}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r6, 0x18000000000002a0, 0x7ee, 0x0, &(0x7f0000000e80)="b9e403c6631e39495aa05dc7cf1c", 0x0, 0x7ab, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840), 0xc) 12m19.190289376s ago: executing program 0 (id=20): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x810, &(0x7f0000000000)={[{@errors_remount}, {@grpquota}]}, 0x8, 0x4fe, &(0x7f0000000a40)="$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") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x18d883, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x0) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r1, &(0x7f0000002380)={0x2020}, 0x2020) 12m18.521286785s ago: executing program 0 (id=21): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000540), 0x0, 0x0, &(0x7f0000000640)={0x11, 0x4, r9, 0x1, 0xff, 0x6, @remote}, 0x14) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 12m17.710735438s ago: executing program 0 (id=22): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6(0xa, 0x3, 0x2) setsockopt$inet6_opts(r3, 0x29, 0x36, &(0x7f0000000000)=@hopopts={0x2}, 0x8) 12m16.971880158s ago: executing program 33 (id=22): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6(0xa, 0x3, 0x2) setsockopt$inet6_opts(r3, 0x29, 0x36, &(0x7f0000000000)=@hopopts={0x2}, 0x8) 12m16.945602629s ago: executing program 2 (id=25): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() mount$tmpfs(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000280), 0x2000001, &(0x7f0000000380)=ANY=[@ANYBLOB="6d706f6c3d6caef6cfd83d7374617469632c00"]) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$fscrypt_provisioning(0x0, 0x0, 0x0, 0x11, 0xfffffffffffffffa) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(0xffffffffffffffff, 0x40045402, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$RTC_WKALM_SET(r4, 0x4028700f, &(0x7f0000000140)={0x2, 0x1, {0x0, 0x5, 0x8000, 0x1a, 0x0, 0x5c, 0x4}}) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x47, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r5 = socket$unix(0x1, 0x2, 0x0) bind$unix(r5, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) ioctl$HIDIOCGUCODE(r7, 0xc018480d, &(0x7f0000000000)={0x1, 0x200, 0x800, 0x76f, 0x96c}) sendfile(r6, r7, 0x0, 0x20000023896) 12m15.055640106s ago: executing program 2 (id=26): ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000680)=0x0) process_vm_writev(r0, &(0x7f00000002c0)=[{0x0}, {&(0x7f0000000840)=""/137, 0x89}, {&(0x7f0000000200)=""/17, 0x11}, {0x0}], 0x4, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x1, 0x4009, 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001dc0)={0x3, 0x7, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r1, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="04040aaaaaaaaaaa1000"], 0xd) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0xfffffffffffffe41}, {0x20, 0xc8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x0, 0x0, 0x3c, 0x3c}}}, 0x14) 12m12.869152738s ago: executing program 2 (id=28): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x810, &(0x7f0000000000)={[{@errors_remount}, {@grpquota}]}, 0x8, 0x4fe, &(0x7f0000000a40)="$eJzs3c9vG1kdAPDvTOImm3U3XdgDIGDLslDQqs6P7kYrONC9gNBqJcSKE4duSNwoil1HcVKa0ENy5I5EJU7wJ3DjgNQTB27c4MalHJAqqEANUg9GM54mJoljs03iJv58pPHMe+P4+57t957nJc4LYGhdjYjtiLgUEZ9ExGSRnxRb3Gxv2f2ePrm/sPvk/kISrdbH/0jy81ledPxM5tXiMccj4offi/hJcjhuc3NrZb5Wq64V6an1+upUc3Pr+nJa5MzOzcxNv3/jvdkTq+ub9d8+/u7yhz/6/e++9OhP29/8WVas8s8v5+c663GS2lUvRbkjbzQiPjyNYAMyWrx/OH+y1vaZiHgrb/+TMZK/mv05olkDAOdAqzUZrcnONABw0WXX/+VI0koxF1CONK1U2nN4b8REWms019+ZbGzcWYx8DutKlNLby7XqdDFXeCVKSZaeyY/307MH0jci4vWI+MXYK3m6stCoLQ7ygw8ADLFXD4z//x5rj/8AwAU3PugCAABnzvgPAMPH+A8Aw+f/GP/7/3YgAPBSc/0PAMPH+A8Aw6fn+L9zNuUAAM7EDz76KNtau8X/v168u7nx7fLd64vV5kqlvrFQWWisrVaWGo2lWrWy0Gr1erxao7E68+5esrm5dave2Lizfmu5Pr9UvVUtnXJ9AIDeXn/z4V+SiNj+1iv5Fh1rORir4WJLB10AYGBGBl0AYGB8nweGVx/X+KYB4ILrtZZn1z8RemDxVzivrn3e/D8MK/P/MLw+3fz/d068HMDZM/8Pw6vVSqz5DwBDxhw/8EK//wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAhVc63JK3ka4FvZ7dppRJxOSKuRCm5vVyrTkfEaxHx57HSWJaeGXShAYAXlP49Kdb/ujb5dvng2UvJf8byfUT89Fcf//Le/Pr62kyW/8+9/PUHRf7spUFUAADodPNwVnucLvYdF/JPn9xfeL6dZREff9BeXDSLu1ts7TOjMZrvx6MUERP/Sop0W/Z5ZeQE4m/vRMTn9ut/ryNCOZ8Daa98ejB+FvvyKcTff/4Pxk//J36an8v2pfy5+OwJlAWGzcMP2v1k0fayJla0vzSu5vuj2/943kO9uOf93+6h/i/d6/9GDsVP8jZ/dS99fEkev/uH7x/KbE22z+1EfGH0qPjJXvykS//7dp91/OsXv/xWt3OtX0dci6Pjt9XzbnZqvb461dzcur5cn1+qLlXvzM7OzcxNv3/jvdmpfI66ffvHAw//rFjm/rWuz81OxESX+OM96v+1Puv/m2ef/Pgrx8T/xlePfv3fOCZ+NiZ+vc/48xM3uy7fncVf7FL/Xq//O33Gf/S3rcU+7woAnIHm5tbKfK1WXetxkH3W7HUfB+fzILYjXoJi9DpIi7fsy1KeC35wTKeRnlHnBJyq/UY/6JIAAAAAAAAAAAAAAADdNDe3VsbidL9ONOg6AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcHH9NwAA//8tM9Id") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x18d883, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x0) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r1, &(0x7f0000002380)={0x2020}, 0x2020) 12m12.558107243s ago: executing program 2 (id=29): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000540)="f4efe043044442", 0x7, 0x0, &(0x7f0000000640)={0x11, 0x4, r9, 0x1, 0xff, 0x6, @remote}, 0x14) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 12m11.332268461s ago: executing program 2 (id=32): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1000000000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) futex(&(0x7f000000cffc)=0x1, 0xd, 0x2, 0x0, 0x0, 0x400000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) 12m11.058189285s ago: executing program 34 (id=32): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1000000000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) futex(&(0x7f000000cffc)=0x1, 0xd, 0x2, 0x0, 0x0, 0x400000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) 10m19.222270845s ago: executing program 4 (id=150): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 10m16.933089979s ago: executing program 4 (id=152): syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0xa00000, &(0x7f0000000000)={[{@noauto_da_alloc}, {@errors_remount}]}, 0x21, 0x4c0, &(0x7f0000001740)="$eJzs3c9vVFsdAPDvvf1JKbQoCzUqiCgawkw7QENY4UZjCImRuHIBtR2apjOdpjNFWlmU/8FEElf6J7gwcWHCyr073bnBhQkq0Udf8hbzcu9MS1+Zgb7QN0M6n09ycu85Z5jvOXNzzxlO23sCGFjnI2I7IkYj4n5ETLXLk3aKW62Uve7Vy8cLOy8fLyTRbN79T5LXZ2Wx799kTrbfczwifvqjiF8kb8atb26tzFcq5fV2vtiorhXrm1tXlqvzS+Wl8mqpNDc7N3Pj6vXSkfX1XPUPL364fPtnf/7TN57/dfv7v8qaNdmu29+Po9Tq+shenKxgOCJufxHB+mAoWv0ZPVDe4ZLzAUoj4ksRcSG//6diKL+aAMBx1mxORXNqfx4AOO7SfA0sSQvttYDJSNNCobWGdzYm0kqt3rj8oLaxuthaK5uOkfTBcqU8014rnI6RJMvP5uev86UD+asRcSYifj12Is8XFmqVxX5+8QGAAXbywPz//7HW/A8AHHPj/W4AANBz5n8AGDzmfwAYPOZ/ABg85n8AGDzmfwAYPOZ/ABgoP7lzJ0vNnfbzrxcfbm6s1B5eWSzXVwrVjYXCQm19rbBUqy3lz+ypvuv9KrXa2uy12HhUbJTrjWJ9c+tetbax2riXP9f7XnmkJ70CAN7mzLlnf08iYvvmiTzFvr0czNVwvKX9bgDQN0P9bgDQN3b7gsHl//jAu/Zr7forQk+Pvi1Ab1z6qvV/GFTW/2FwWf+HwWX9HwZXs5nY8x8ABow1fsDP/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODzm8xTkhbae4FPRpoWChGnImI6RpIHy5XyTEScjoi/jY2MZfnZfjcaAHhP6b+S+Ki9DeDFyYO1o8nHY/kxIn7527u/eTTfaKzPZuX/3StvPG2Xl3reeADgEHbn6d15fNerl48XdlMv2/PiB63NRbO4O+3UqhmO4fw4HtmXk4n/Je18SxIRQ0cQf/tJRHylU/+TfG1kur3z6cH4WexTPY2ffiZ+mte1jtln8eUjaAsMmmfZ+HOr0/2Xxvn82Pn+H89HqPe3O/7tHBz/kuG9SENdxr/zh41x7S8/Hu1W9yTia8Md4keyN/4mXeJfPGT8f3z9mxe61TV/F3EpOsffH6vYqK4V65tbV5ar80vlpfJqqTQ3Ozdz4+r1UjFfoy7urlS/6d83L5/uFj/r/0SX+PmVvzPZtf/fOWT/f//J/Z9/6y3xv/ftTvHTOJsfO3/+2Zz43UPGn5/4Y9ftu7P4i136/67rf/mQ8Z//c2vxkC8FAHqgvrm1Ml+plNedONk72f2m96G0p/tJc6rV0g+lPcfnpJ+jEtALr2/6frcEAAAAAAAAAAAAAADophd/TtTvPgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB8fRoAAP//wLrUnw==") creat(&(0x7f0000000680)='./file1\x00', 0x182) 10m15.589994378s ago: executing program 4 (id=155): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@getqdisc={0x24, 0x25, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x8, 0xb}, {0xa, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) 10m12.448598255s ago: executing program 4 (id=159): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_team\x00', 0x26) sendto$inet(r3, 0x0, 0x0, 0x4004004, &(0x7f0000000080)={0x2, 0x4c1e, @multicast1}, 0x10) setsockopt$inet_int(r3, 0x0, 0x19, &(0x7f0000000100)=0x3, 0x4) recvmmsg(r3, &(0x7f0000007880)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x40010000, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x6, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="bf16000000000000b7020000ff8500007b2af8ff000000007b2af0ff000000007b2ae8ff000000007b2ae0fe000000007b2ad8ff000000007b2ad0ff000000007b2ac8ff000000007b2ac0ff00000000b702000002000000732ac0ff00000000b702000001000000632ac4ff00000000180200000a0000010000000000000000632accff00000000180200000a0000020000000000000000632ac0ff00000000bf61000000000000bfa200000000000007020000c0ffffffb703000040000000b7040000000000008500000045000000b70000000200000095"], &(0x7f00000011c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="b9ff2cf0085d375101cc81d105a5", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r5 = socket$igmp6(0xa, 0x3, 0x2) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f00000000c0)=0x4, 0x4) bind$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, '\x00', 0x28}, 0x11}, 0x1c) r7 = epoll_create1(0x80000) kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, r5, &(0x7f0000000240)={r7, r0, 0x100}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b402000008000000611659000000000085000000270000009500000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff7d, 0x10, &(0x7f0000000000), 0x3}, 0x28) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x1c) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES64=r3, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="00000000000000000000000000001400000000000000cff900"], 0x50) 10m11.520967169s ago: executing program 4 (id=160): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x2080}, 0x18, 0x0) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) gettid() timer_create(0x9, 0x0, 0x0) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000140)={{0x77359400}, {0x0, 0x9}}, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x77359400}, {r5, r6+10000000}}, 0x0) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff8006]}, 0x0, 0x0, 0xfff8) landlock_restrict_self(r4, 0x0) syz_emit_vhci(0x0, 0x7) syz_emit_vhci(0x0, 0x22) 10m9.278132751s ago: executing program 4 (id=162): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x6, 0x1be}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) getrlimit(0xc, &(0x7f0000000040)) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x840000000002, 0x3, 0x100) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000080)={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, 0x1, "d13e41eb5698c023926aec567268e7476fddc4815932b43bc053b5893f2837ed", 0xf, 0x7, 0x8, 0x3312}, 0x3c) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f00000000c0)=0x1, 0x4) r3 = accept4(r1, 0x0, 0x0, 0x800) readv(r3, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000006c0)='./file0\x00', 0x58e, &(0x7f0000000080)={[{@errors_remount}, {@lazytime}, {@block_validity}, {@block_validity}, {@block_validity}, {@norecovery}, {@jqfmt_vfsv0}]}, 0x1, 0x459, &(0x7f0000000240)="$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") 9m53.905517587s ago: executing program 35 (id=162): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x6, 0x1be}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) getrlimit(0xc, &(0x7f0000000040)) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x840000000002, 0x3, 0x100) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000080)={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, 0x1, "d13e41eb5698c023926aec567268e7476fddc4815932b43bc053b5893f2837ed", 0xf, 0x7, 0x8, 0x3312}, 0x3c) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f00000000c0)=0x1, 0x4) r3 = accept4(r1, 0x0, 0x0, 0x800) readv(r3, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000006c0)='./file0\x00', 0x58e, &(0x7f0000000080)={[{@errors_remount}, {@lazytime}, {@block_validity}, {@block_validity}, {@block_validity}, {@norecovery}, {@jqfmt_vfsv0}]}, 0x1, 0x459, &(0x7f0000000240)="$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") 8m19.658227029s ago: executing program 3 (id=298): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000009"], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x0, @remote}, {0x2, 0x4e23, @local}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x6}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 8m17.471837471s ago: executing program 3 (id=300): r0 = epoll_create1(0x0) poll(&(0x7f0000000a80)=[{r0, 0x2021}], 0x1, 0xdb4) io_setup(0x5, &(0x7f0000000100)=0x0) io_submit(r1, 0x2, &(0x7f00000006c0)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0xd2e8ce703c520b7f, 0xe, r0, 0x0, 0x0, 0x100000000}, 0x0]) 8m15.363196702s ago: executing program 3 (id=303): unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xb, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000100)={0x33, 0x1e, 0x0, 0x2, 0x3, 0xa9, 0x5, 0x2, 0x1}) socket$nl_netfilter(0x10, 0x3, 0xc) 8m15.091089246s ago: executing program 3 (id=304): syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc1f, &(0x7f0000000480)="$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") setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r0 = fanotify_init(0x200, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x1f7) fanotify_mark(r0, 0x441, 0x8000001, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)) prlimit64(0x0, 0xe, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x80400a, &(0x7f0000000280)=ANY=[], 0x2, 0x6c5, &(0x7f0000000b00)="$eJzs3U2IXWf9B/DvuZncyc0f0mmbpvmLkKGBog0mM7nURBAaRSSLIEE33Q7JpBlyk5bJVNIi5katgitX0oWLisRFVyIi1JVY14LgxlX2AXcuslBHzsuduTNzM7mTl7lp/HzgzHnOPOd5nt/55Tzn3JcJJ8D/rLNvZm8/Rc4eO3ej3L5zu9u7c7t7dVBOMp2klUzVqxSdpPg0OZN6yf+Xv2y6K+43zut3PymmPvy4W29NNUu1f2u7dluM3LOf7Fvb2JNkti7+a4wOW6P7q5aqnwvr/T2kYi3uMmFHB4mDSVvdor9eOWpqbDT+vAWeWjfr++YWM8n+1HfX8nVAmqvDg68Mk7fttam/e3EAAADAkzLyvfyw5+7lXm7kwO6EAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAM+Gon5mYNEsrUF5NsXg+f/toWfqtycc7iP64FK1+vZzkw4EAAAAAAAAAB7JkXu5lxs5MNheLarv/F+pNg5WP/8v7+Z6FrOc47mRhaxkJcuZTzIz1FH7xsLKyvL81pY/T9lydXX1ZtPy5MiWJzfG1d8c6Ja/NPiM/+kBAAAAAAAAADxeP8jZ9e//AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgaVAke+pVtRwclGfSmkqyL0m7mF3bvT3RYB+DP046AAAAAHjyOs36QPGfurBaVO/5D1Xv+/fl3VzLSpaykl4Wc7H6LKB+19/6a7/bu3O7e7Vctnb8tX/sKI6qx9SfPYweea7a46W1FmfzzXwnxzKb81nOUr6bhaxkMbP5RlVaSJGZ5tOLmTu3OxnEujXeMxu2zm+O7chQuYzvcBVJJ5eyVMV2PBfag9BbzX6Hh0b7fTvZNOKtMjvFG40xc3SxWZdH9LNm/XSYqY5871pG5prcl9l4fjjvW3O/w/Nk80jzaa19BnVwfZRyc/NID5Xz/c26zPWPn2zOd/hR2lomiiK99H9abg3OvkPb5zz54t/+dP5y69qVy5euH3t6TqOHtPmc6A5l4uWxMtErM9F/hEzse5T4H592k436Krqzq+UrVdsDWcq38nYuZjGnMpf5nM5cvpKT6ebkUF5f2j6v1Vxr7WyuHf1CUyjvST8Zujftmun7VZR5fX4or8NXupmqbvg361l6YYwsFe2MztLfR4Yy9bmmUI7xw6E7zuRtzsT8UCZe3D4Tv/z3apLrvWtXli8vvDPmeK8263LafrDx2vyrx3JAO9ccbnm+vFD+Y6W+bQyfHWXdi4O6TflqN9+4TDWdbahrp5rPdd2DZmrZ06Fbo3qq614eOUq3qjs8VLfhVU7eTm/tVUhj1ycpAGPY/9r+dudu5y+djzo/6lzunNv39enT059vZ++fp/6w5zetX7e+WryWj/L9HJh0pAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Cy4/t77VxZ6vcXlnRY6D9VqR4W0HnOHt0ZWDVJR/6Y9Yp8jecJH+uwUprc7o36b+nFN92nenkTMndw3nt0tZGoXxprOiKpz65M6aa3Fk+TKyAfcTe3i9Ql4ck6sXH3nxPX33v/S0tWFtxbfWrx28vSpN051vzx/88Slpd7iXP2z2dnEh2fK+suASUcCAAAAAAAAAAAAjGs3/nvDiGGL/gSOFQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPhsOvtm9vZTZH7u+Fy5fed2t1cug3KSdr3nVJJWkuJ7SfFpcib1kpmh7or7jfP63U9+8eqHH3fX+5oa7N/a1O53/1xdrUudcY+i3yyZTbKnWT/Y9Fj9XRjqrz9uRBsUa0dYJuzoIHEwaf8NAAD//6liBFc=") setxattr$security_capability(0x0, &(0x7f0000000300), 0x0, 0x12, 0x2) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) pipe(0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, '\x00', "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "9b1f80001b00"}, 0x38) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="e400000000000000000000000700000094040000865400000003051005c3e45b3e088e6f722b0df22b3c00126eacb1ceb7f260dab33486c73af20b59020788c2fdffc9060c47629611bad4427b49310104076002042a03051106b63d39a9a516678325f283800b5d83237b00000000ac1414aaac1414bbe0000002ffffffff00000000ac14142de0000002890327440c7b302e7dc6a00000000807174bac1414aae00000027f0000017f000001ac1e10018317eaac1e0101ac1414aaffffffff64010101e0000001831b0b640101017f00000164010102ffffffffac1414aae0000001000000"], 0x11b}, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0x8) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f00000000c0)={0x20, 0xfffffffffffffff5, 0x0, {0x1000, 0x4, 0x200fff, 0x3}}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) write(r2, &(0x7f0000000140)='0', 0x1) 8m13.229092843s ago: executing program 3 (id=306): r0 = open(&(0x7f0000001b80)='.\x00', 0x0, 0x2) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000088) 8m9.090344584s ago: executing program 3 (id=311): add_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, &(0x7f0000000040)="42d7", 0xfffff, 0xfffffffffffffffe) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000180)=""/130) unshare(0x0) write(0xffffffffffffffff, &(0x7f0000000180)='10', 0x2) write(0xffffffffffffffff, &(0x7f0000000200)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='0', 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) semget(0x3, 0x4, 0x39c) 8m6.169198377s ago: executing program 36 (id=311): add_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, &(0x7f0000000040)="42d7", 0xfffff, 0xfffffffffffffffe) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000180)=""/130) unshare(0x0) write(0xffffffffffffffff, &(0x7f0000000180)='10', 0x2) write(0xffffffffffffffff, &(0x7f0000000200)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='0', 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) semget(0x3, 0x4, 0x39c) 10.576570976s ago: executing program 7 (id=1083): r0 = syz_clone(0x82020000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f00000001c0)='./file2\x00', 0x1000414, &(0x7f0000000000)=ANY=[], 0x6, 0x806, &(0x7f0000000200)="$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") fchdir(0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x100c803, 0x0) syz_open_procfs(r0, &(0x7f0000009b40)='pagemap\x00') 10.055849073s ago: executing program 7 (id=1085): mount(0x0, &(0x7f0000000100)='./mytrace\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000340)={0x10, 0x0, 0x25dfdbfb, 0x800000}, 0xc) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x1539, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mytrace/events/xhci-hcd/xhci_address_ctrl_ctx/inject\x00', 0x2, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r5) sendmsg$NL80211_CMD_DEL_PMK(r5, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x5c, r6, 0x20, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0x3a}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x80) write(r5, &(0x7f0000000680)='drop=', 0x5) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="18020000fcfff1ff00000000000000008500000036000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r7, r9, 0x25, 0x4, @void}, 0x10) 8.500967254s ago: executing program 7 (id=1086): r0 = syz_clone(0x82020000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f00000001c0)='./file2\x00', 0x1000414, &(0x7f0000000000)=ANY=[], 0x6, 0x806, &(0x7f0000000200)="$eJzs3U1oHOcZAOB3FCmW5WBMWtxgbGfspOCAo6xWiVKRQ7JZjeRJpF2xuyo2paQmloOwnAS7obUviSkkbWkpPZXSQ5prbr21FFrooc2p0Bx6aG+BnEoK/SNtKKjM/siSrZXk/6R+HiHN7Mz7zfd+o9W8M5J2NgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACASKpTpdJYErN5beF42l91qlGf22R9b3u/XjdZ55l1/UYkxWcMD8fH/+gs+/zl1XuLL4djf+fR/hguJsNxcdfePU99bnCg136ThK7XoW3GJRFvFEmdObm8vHjumruJ4Wtucut895fX3OTfK8XXmayWNyOfq8xkad6sp5MTE6XHjk030+l8NmueaLayubTayCqteiM9Un0kHZucHE+z0RP1hdrMVGU26y188tFyqTSRPjc6n1UazXrtseeiWT2Wz87mtZl2TLn0jShiniyeiM/nrbSVVebS9PTS8uL4VqkWQWMbrbin8/zZ//CeD1/74O9Li8UTst9Gku4Tszw2Vi6PTTwx+cSTpdJguVRev6B0hViNiIGIIuKWPGn5DLm5B3C4AQPd+h+zkUctFuJ4pBt8DEU1pqIR9ZgrHv9x6KqIrl79/+Jjf/39Zv2urf+9Kv/A5dX7ol3/D3YeHexX/zfM9XZ+nI8LcTHOxMlYjuVYjHN3PKMtPgZudAvJ2kf/uS8iapFHM+qRx1xUYiaySLtL0piMiZiIUrwQx2I6mpHGdOQxG1k040Q0oxVZ+xlVjUZkUYlW1KMRaRyJajwSaYzFZEzGeKSRxWiciHosRC1mYioq7a2cjqX2fh+/Isu9O+MXL/3hw7eL+dWgsU0GnxQnc0XQ3zYZ+0CUr6H+r6wU5wtXRqj/d4F7N1t5C47icH1WevUfAAAA+L+VtH/7Xlz/D8WB9tx0Ppt95U6nBQAAANxE7b/87y8mQ8XcgUiK6//SBpHv3/bcAAAAgJsjab/GLomIkXiwM3c6luKNWIyNfgkQEXtud4oAAADADWr//f9gMRmJeL29oHe7lD7X/wAAAMBnzbf73WP/g949dpvzO5JfDUXEUHJp/vjDydlKEVc5e0+nXXfy5dUttqb3Jbu7G2lPJgYv7koiYrCa7U96d7/8747O9KP2132Dq8373es/aTSKBHYWfW+UQGyeQPtRfC8OdWIOnWpPdnWbDCadXkam89lstFqffap9S8Tis/Xay0vfjCh6/05tbncSp5eWF0dffGX5VHtnXCqaXzrbvYFicu/2c1np7oE4EMO9ZmtHPNR+IUa335FOv6W134CBTpuBzcefrO3zzTjciTk80pmO9NZ0+hwu+hwbfWosKpXdA63seOu1lTWjL7Iosl4d+dDlkUf8ZNc2R/5mPNSJeejIQ53JBlmU12Xx8hVZLC0vltfu/+3ti21n8fah14//67f1JBvfKovxa8hi5Z6IK7MAuFNOt+/606lCxWRnu+5+stJR1P9O3d3Rq7s7ey23caz95+VeVs8yeu3XVPfB6FX3XnUbWD0wbq+6r0TniH6kE3Okcz4xuK8b16m0nbpS2uCI/urSq7/rHtEff/dHP/3qwfd+1u53bXXbRhadI/q78UgnpjuJ+3/Tp8YWY/7+aiUZa4/+naLFO337bc6Wi/0V8fWzr8be8xcuPrp09uRLiy8tvlwuj0+UHi+Vnij3TiaG2mcMm2QKwN1r6/fY6RvRqzPJ48VV9fCajZ5afz13/+q/FIzGi/FKLMepONp+tUFEPLhxvyNr/g3h6BZXrZdjx+LoFteWl2PLV8cm0Sd2fM3gvvDD9uTjW/DNAIDb5PAWdTiJw+91Q/udISRH+113X1VHi1p+xdVx9K/lG/nSrdwZAHCXyBofJSOtt5JGI59/YWxycqzSOnZf2qhXn08b+dRMlua1VtaoHqvUZrJ0vlFv1au9XxxPZc20uTA/X2+00ul6I42BZn68/c7vafet35vZXKXWyqvN+dms0szSar3WqlRb6VTerKbzC8/O/vhPnU010uZ8Vs2n82qllddrabO+0Khmo2nazLJ2YN48ljXSfCqrtfLpvJitpfONfK7SuBQRswtzWTqVNauNfL5Vb7Sz6fWV16brjbn2ZkevHv5fbuvOBoBPifMXLp45uby8eO76Zv68neA7PUYAYD1VGgAAAAAAAAAAAAAAPv3OX7h4ZjiWF8/t6b0QoFh6A68IvLaZHXHLu7hrZ4pv5KcgjeubOXDfzdnO155++ky/mGdff+DY9rbT/UkZjC1f6vrW7oh7f/6DzpJn+gd/q/vzd3P22PsRcR3NV5INVn2y0plZd5i48n0tAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCO+F8AAAD//+TEVwI=") write$binfmt_register(0xffffffffffffffff, 0x0, 0x0) fchdir(r1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x100c803, 0x0) syz_open_procfs(r0, &(0x7f0000009b40)='pagemap\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x4a) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 8.07578769s ago: executing program 6 (id=1090): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/dynamic_debug/control\x00', 0x2, 0x0) write(r0, &(0x7f0000000100), 0x0) 7.883780042s ago: executing program 5 (id=1091): r0 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)={0xbe, 0x0, [{}, {}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4000000}, {0x0, 0x0, 0x0, 0x9}, {}, {0x0, 0x0, 0x0, 0x10}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x6}, {}, {}, {0x40000001}, {}, {0x80000019}, {}, {0x80000008, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x6}, {}, {0x40000001}, {0x0, 0x0, 0x0, 0x0, 0x800}, {}, {}, {}, {}, {0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x2}, {}, {}, {0xd}, {}, {}, {0x80000008, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x0, 0x0, 0x6}, {0x0, 0x0, 0x0, 0x0, 0x400000}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {0x80000008}, {0x0, 0xd405, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x10000000}, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, {0x0, 0xaf}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x37ef}, {}, {0x0, 0x0, 0x1, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x2}, {0x0, 0x3a6}, {0xc000001b}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x0, 0xb}, {}, {}, {0x80000019}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x1}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x0, 0x2}, {}, {0xd}, {}, {0xd, 0x4}, {0x0, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x100}, {}, {}, {}, {}, {0xb}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, {0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0xfffffff7}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5e}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {0x0, 0x80000001}, {0x0, 0x3}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcf}]}) 7.786346424s ago: executing program 6 (id=1092): r0 = syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x4, &(0x7f00000014c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000280)=[0x0]) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net\x00') openat(r2, &(0x7f0000000340)='rpc/nfsd.fh/channel\x00', 0x1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x20040, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000002140)=""/4105, 0x1009}], 0x1, 0xfae7, 0xf01) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r0], 0x7c}, 0x1, 0x0, 0x0, 0x74d2c3c536b07dc7}, 0x80414) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x458, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r5, 0xc10c5541, &(0x7f0000000040)) 7.508291978s ago: executing program 6 (id=1094): mkdir(0x0, 0x1ff) mount(0x0, &(0x7f0000000100)='./mytrace\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000340)={0x10, 0x0, 0x25dfdbfb, 0x800000}, 0xc) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x1539, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mytrace/events/xhci-hcd/xhci_address_ctrl_ctx/inject\x00', 0x2, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r5) sendmsg$NL80211_CMD_DEL_PMK(r5, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x5c, r6, 0x20, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0x3a}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x80) write(r5, &(0x7f0000000680)='drop=', 0x5) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="18020000fcfff1ff00000000000000008500000036000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r7, r9, 0x25, 0x4, @void}, 0x10) 7.465074378s ago: executing program 5 (id=1095): syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000000, &(0x7f0000000100)={[{@grpjquota}]}, 0xfe, 0x2a4, &(0x7f0000000a80)="$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") r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="7f454c4603000702810000000000000003003e00c0123c07d80100000000000040000000000000008b00000000000000330d00000500380002"], 0xb0) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@base={0xa, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) close(0x3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) open_by_handle_at(r4, &(0x7f0000000240)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0x15, 0x8, 0x0, 0x2, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r3}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000080)=r5}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x101042, 0x145) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r7, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000000)) ioctl$XFS_IOC_DIOINFO(0xffffffffffffffff, 0x800c581e, &(0x7f0000000140)) 6.144594636s ago: executing program 6 (id=1097): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x8000) syz_emit_ethernet(0x62, &(0x7f0000000440)={@local, @random="0072d600", @val={@val={0x88a8, 0x2, 0x1, 0x3}, {0x8100, 0x6, 0x0, 0x2}}, {@llc_tr={0x11, {@llc={0x0, 0xd4, 'IG', "46d8a9c89a6a79eaa4125fdec5bc486147c415cbe105622df8da954054e0030b2dbd960d8b4dea00c587086c431e6f93ff0fbb75161f840df0404ecbf0f725f58cc994af9449986d"}}}}}, 0x0) read(r0, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x335, @time={0x101, 0x10001}, 0x1b, {}, 0x2, 0x0, 0x6}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x108}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x867, &(0x7f0000000140)={0x0, 0x9164, 0x1000, 0x1, 0x359}, &(0x7f00000002c0), &(0x7f0000ff4000), 0x0) 5.348359097s ago: executing program 5 (id=1099): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0x100b, 0x4}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000940)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x70, 0x10b8, &(0x7f0000000400)={@ptr={0x66642a85, 0x0, 0x0, 0x0, 0x80000001, 0x3e}, @ptr={0x70742a85, 0x20000000, &(0x7f0000000580)=""/226, 0xe2, 0x1, 0x26}, @fda={0x66646185, 0x9, 0x1, 0xb4}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1040}], 0x0, 0x0, 0x0}) 4.863362774s ago: executing program 5 (id=1102): r0 = syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x4, &(0x7f00000014c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000280)=[0x0]) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net\x00') openat(r2, &(0x7f0000000340)='rpc/nfsd.fh/channel\x00', 0x1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x20040, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000002140)=""/4105, 0x1009}], 0x1, 0xfae7, 0xf01) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r0], 0x7c}, 0x1, 0x0, 0x0, 0x74d2c3c536b07dc7}, 0x80414) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x458, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r5, 0xc10c5541, &(0x7f0000000040)) 4.487937159s ago: executing program 7 (id=1104): r0 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)={0xbe, 0x0, [{}, {}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4000000}, {0x0, 0x0, 0x0, 0x9}, {}, {0x0, 0x0, 0x0, 0x10}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x6}, {}, {}, {0x40000001}, {}, {0x80000019}, {}, {0x80000008, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x6}, {}, {0x40000001}, {0x0, 0x0, 0x0, 0x0, 0x800}, {}, {}, {}, {}, {0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x2}, {}, {}, {0xd}, {}, {}, {0x80000008, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x0, 0x0, 0x6}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {0x80000008}, {0x0, 0xd405, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x10000000}, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, {0x0, 0xaf}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x37ef}, {}, {0x0, 0x0, 0x1, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x2}, {0x0, 0x3a6}, {0xc000001b}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x0, 0xb}, {}, {}, {0x80000019}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x1}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x0, 0x2}, {}, {0xd}, {}, {0xd, 0x4}, {0x0, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x100}, {}, {}, {}, {}, {0xb}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, {0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0xfffffff7}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5e}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {0x0, 0x80000001}, {0x0, 0x3}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcf}]}) 4.321760151s ago: executing program 5 (id=1105): mkdir(0x0, 0x1ff) mount(0x0, &(0x7f0000000100)='./mytrace\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000340)={0x10, 0x0, 0x25dfdbfb, 0x800000}, 0xc) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x1539, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mytrace/events/xhci-hcd/xhci_address_ctrl_ctx/inject\x00', 0x2, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r5) sendmsg$NL80211_CMD_DEL_PMK(r5, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x5c, r6, 0x20, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0x3a}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x80) write(r5, &(0x7f0000000680)='drop=', 0x5) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="18020000fcfff1ff00000000000000008500000036000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r7, r9, 0x25, 0x4, @void}, 0x10) 2.794305842s ago: executing program 5 (id=1107): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) syz_emit_vhci(&(0x7f00000025c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_req={{0x34, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0x9) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r0 = epoll_create1(0x0) poll(&(0x7f0000000a80)=[{r0, 0x2021}], 0x1, 0xdb4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) shutdown(r1, 0x0) epoll_wait(r0, &(0x7f0000000000)=[{}], 0x1, 0x101) socket$alg(0x26, 0x5, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, 0x0, 0x0, 0x279, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.700067913s ago: executing program 7 (id=1108): syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000000, &(0x7f0000000100)={[{@grpjquota}]}, 0xfe, 0x2a4, &(0x7f0000000a80)="$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") r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="7f454c4603000702810000000000000003003e00c0123c07d80100000000000040000000000000008b00000000000000330d00000500380002"], 0xb0) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@base={0xa, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) close(0x3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) open_by_handle_at(r4, &(0x7f0000000240)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0x15, 0x8, 0x0, 0x2, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r3}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000080)=r5}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x101042, 0x145) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r7, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000000)) ioctl$XFS_IOC_DIOINFO(0xffffffffffffffff, 0x800c581e, &(0x7f0000000140)) 2.303497428s ago: executing program 8 (id=1110): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0x100b, 0x4}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000940)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x70, 0x10b8, &(0x7f0000000400)={@ptr={0x66642a85, 0x0, 0x0, 0x0, 0x80000001, 0x3e}, @ptr={0x70742a85, 0x20000000, &(0x7f0000000580)=""/226, 0xe2, 0x1, 0x26}, @fda={0x66646185, 0x9, 0x1, 0xb4}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1040}], 0x0, 0x0, 0x0}) 2.090303251s ago: executing program 8 (id=1111): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) fchmodat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xb0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x480, 0x0) 1.870883914s ago: executing program 8 (id=1112): syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000000, &(0x7f0000000100)={[{@grpjquota}]}, 0xfe, 0x2a4, &(0x7f0000000a80)="$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") r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r0, &(0x7f0000000640)=ANY=[], 0xb0) lsetxattr$security_capability(0x0, &(0x7f00000025c0), 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 1.819746105s ago: executing program 7 (id=1113): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xeef, 0x72c4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x22, 0x18, {[@global=@item_012={0x1, 0x1, 0x0, "01"}, @global=@item_012={0x1, 0x1, 0x6, '\x00'}, @global=@item_4={0x3, 0x1, 0x0, "bb7b9b07"}, @local=@item_012={0x1, 0x2, 0x0, "04"}, @global=@item_4={0x3, 0x1, 0xa, "8506bd9e"}, @local=@item_012={0x1, 0x2, 0x0, "01"}, @main=@item_012={0x0, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x5, "633e28ad"}]}}, 0x0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) 1.520366199s ago: executing program 6 (id=1114): openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/acpi/devices/LNXCPU:01/eject\x00', 0x1, 0x0) write(r0, &(0x7f00000002c0)='1', 0x1) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e21, 0xff, @private0, 0x7fff}}, 0x0, 0x0, 0x47, 0x0, "d97ecad505a019c1cfa0bfe0202a941714c7df589f0090ffb99793d8aac23f0232c87e617d084cc67def1cce92dd9ddd05331278cc4cd334b74ef9615cdfd96549594f3b8efb54859d4a8f0fe1e1b249"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e21, 0x9, @loopback, 0x400}}, 0x0, 0x0, 0x38, 0x0, "947116a1a606754ba31cb6010000000000000000f81bef965a071f0d1aadd97b9640d9a0cd9eaed05e9aec7f03d4406a77bcd75801000000000000008eb7fafaa8b125736e000000fff900"}, 0xd8) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000780)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0xc04, &(0x7f00000000c0)={[{@init_itable_val}, {@test_dummy_encryption}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6e}}, {@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@quota}]}, 0x3, 0x475, &(0x7f0000000680)="$eJzs3E9sFNUfAPDvzG4L5V/7I/xQ/qhVNBL/tLQgcvCC0cSDJiZ6wGNtC0EKNbQmQoiiMXg0JN6NRxMvJp48GL0Y9WTiVe+GhBguoKc1091pd5fZslu3bHE/n2Ta92Ze+953Z97ue/N2N4C+NZr9SCK2RcRvETFczTYWGK3+unXj0vRfNy5NJ1GpvPZnslTu5o1L03nR/O+25plyRPpREvsK6l24cPHM1Nzc7Plafnzx7NvjCxcuPn367NSp2VOz5yaPHTtyeOLZo5PPtB/MptaHsrhu7n1vfv+el964+sr0iatv/vRlksffFEeXjK528LFKpcvV9db2unRS7mFD6Eip2k1jYKn/D0cpVk7ecLz4YU8bB6yrSqVS2R3xbfHRHZcrwH9YEr1uAdAb+St9Nv/Nt7s4/Oi568erE6As7lu1rXqkHGltbhRN89tuGo1NceLy359lW6zPfQgAgAbfZeOfp4rGf2nsriu3I+Lr4YgYiYj/RcTOiDgaEbsi4v8RS2Xvi4j7O6y/eZHk9vFPeq34L1dZ7OnA4PGI52prW43jvzQvMlKq5bYvxT+QnDw9N3uo+pjEwRjYlOUnVqnj+xd+/aTVsSz+fPyXbVn92e+V1aH0Wrkp1Jmpxal/FXSd6x9E7C0XxZ8sj32TiNgTEXvXWMfpJ77Y3+pYq/jb+sddWGeqfB7xePX8X46m+HPJ6uuT45tjbvbQeH5V3O7nX668evvezcupNcffBdn531J4/S/HP5LUr9cudF7Hld8/bjmnufP5L77+B5PXG/a9O7W4eH4iYjB5udro+v2TTeUmV8pn8R88UNz/d8bKI7EvIrKL+IGIeDAiHqq1/eGIeCQiDtTKbi6I8cfnH31r7fGvryz+mY7O/0piMJr3FCdKZ374pqHSkU7iz87/kaXUwdqedp7/2mnX2q5mAAAAuPekEbEtknRsOZ2mY2PV9/Dvii3p3PzC4pMn5985N1P9jMBIDKT5na7huvuhE7VpfZ6fbMofrt03/rQ0tJQfm56fm+l18NDntrbo/5k/Sr1uHbDufF4L+lcn/X9oHdsB3H1e/6F/6f/Qvwr6v2E+9Imi1//3W5ZOGr8gDLinNfX/khkB9A+9HfqX/g/9q77/b/GmP+gXC0Nx5w/Jd5oY6vY/3PiJr9r+xoE1JfI7rhsg0jwRab4nKW+E9mzwRDk2RDPaT/T4iQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBL/gkAAP//lKri+w==") 1.264417483s ago: executing program 8 (id=1115): socket$inet6(0xa, 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x8002) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000000040)={0x7fffffff, 0x2, 'client0\x00', 0x80000002, "e71f965750d710e6", "455e510f0d44af4102e0de820f9e0aa6a1799ab955161ea99cd2b7021658b5f8", 0x8, 0x1}) ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x54, 0x10, 0x1, 0x470bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r4, 0x64e10, 0x36a01}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x1c, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_EHT_HOSTS_LIMIT={0x8, 0x25, 0xfff}, @IFLA_BRPORT_PROXYARP_WIFI={0x5}, @IFLA_BRPORT_GROUP_FWD_MASK={0x6, 0x1f, 0xf}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c080}, 0x8002) sendto$packet(r0, &(0x7f00000002c0)="1a040500c7ff03fc01004788031c", 0xe, 0x4000004, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x6, 0x6, @remote}, 0x14) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0x8, @val=@netfilter={0x5, 0x1, 0xe, 0x1}}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r5, 0x18000000000002a0, 0x7ee, 0x0, &(0x7f0000000e80)="b9e403c6631e39495aa05dc7cf1c", 0x0, 0x7ab, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840), 0xc) 1.034801975s ago: executing program 8 (id=1116): pipe(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x480, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) inotify_init1(0x80000) ioperm(0x4, 0xe, 0x15) getgroups(0x0, 0x0) tkill(0x0, 0x1b) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) timer_settime(0x0, 0x1, &(0x7f0000000680)={{0x0, 0x3938700}, {0x0, 0x3938700}}, &(0x7f00000006c0)) dup(r2) 52.585819ms ago: executing program 8 (id=1117): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x80) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) futex(&(0x7f000000cffc)=0x1, 0xd, 0x2, 0x0, 0x0, 0x400000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = geteuid() getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=@updsa={0x2d8, 0x1a, 0x2, 0x70bd28, 0x25dfdbfb, {{@in6=@loopback, @in6=@empty, 0x4e20, 0x0, 0x4e20, 0x0, 0xa, 0xa0, 0x0, 0x33, 0x0, r4}, {@in=@empty, 0x4d3, 0x6c}, @in=@broadcast, {0x4, 0x0, 0x8, 0x2, 0x50, 0x100000000, 0x88ea, 0x7}, {0xfa0, 0x7fffffffffffffff, 0xfff, 0x8}, {0x9, 0x7, 0x4}, 0x70bd29, 0x3500, 0xa, 0x2, 0x82, 0x5}, [@policy_type={0xa}, @algo_crypt={0x86, 0x2, {{'adiantum(lrw(twofish),fcrypt)\x00'}, 0x1f0, "13a64ff461462c7c39542892275131690bb67cff512e08ae11817a4a7d9e5ecd8a2cc9d8a71410dde733751f9234d4c50eb5d80869912279e41a8d92240f"}}, @policy={0xac, 0x7, {{@in=@dev={0xac, 0x14, 0x14, 0x30}, @in6=@empty, 0x4e23, 0x0, 0x4e23, 0x3, 0x2, 0x80, 0x90, 0x2f, 0x0, 0xee01}, {0x7, 0x100000001, 0x8001, 0x2, 0x0, 0x5, 0xbe6, 0x7ff}, {0x4, 0x1, 0x0, 0x8}, 0x80000000, 0x6e6bbf, 0x2, 0x1, 0x6, 0x2}}, @migrate={0x9c, 0x11, [{@in=@local, @in6=@mcast2, @in=@empty, @in=@rand_addr=0x64010100, 0x32, 0x3, 0x0, 0x3504, 0x2, 0x2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@empty, 0x2b, 0x4, 0x0, 0x3502, 0x2, 0x2}]}, @offload={0xc}]}, 0x2d8}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ca3000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f000094c000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) 0s ago: executing program 6 (id=1118): timerfd_create(0x4, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) inotify_init() bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000113000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000c76000/0x3000)=nil, &(0x7f0000d05000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x8b9, &(0x7f0000000040)={0x0, 0x3cb3, 0x1c080, 0x3, 0x30002b7}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0xfdef}], 0x1, 0x0, 0x0, 0x800300}, 0x20000801) recvmsg(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002) kernel console output (not intermixed with test programs): a:aa:3f) already exists on: batadv_slave_1 [ 289.323847][ T6913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.346422][ T6913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.409174][ T6913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.436720][ T6913] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 289.505459][ T7145] netlink: 12 bytes leftover after parsing attributes in process `syz.6.219'. [ 289.527545][ T6913] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.548746][ T6913] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.566500][ T6913] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.585637][ T6913] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.975483][ T4431] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.983804][ T4431] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.098299][ T4431] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.125572][ T4431] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.956104][ T5871] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 292.000746][ T7166] loop7: detected capacity change from 0 to 256 [ 292.036311][ T7166] exfat: Deprecated parameter 'namecase' [ 292.052425][ T7166] exfat: Deprecated parameter 'namecase' [ 292.149192][ T5871] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 292.163634][ T7166] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 292.215654][ T5871] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 292.251206][ T5871] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 292.274956][ T5871] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 292.294044][ T5871] usb 6-1: SerialNumber: syz [ 295.738006][ T5871] usb 6-1: bad CDC descriptors [ 295.766738][ T5871] usb 6-1: USB disconnect, device number 4 [ 296.032240][ T7192] loop5: detected capacity change from 0 to 256 [ 296.056665][ T7192] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 296.155350][ T28] audit: type=1800 audit(1790242235.471:84): pid=7192 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.227" name="file1" dev="loop5" ino=1048618 res=0 errno=0 [ 296.537941][ T7195] syzkaller0: entered promiscuous mode [ 296.543684][ T7195] syzkaller0: entered allmulticast mode [ 297.478429][ T7207] FAULT_INJECTION: forcing a failure. [ 297.478429][ T7207] name failslab, interval 1, probability 0, space 0, times 0 [ 297.492396][ T7207] CPU: 1 PID: 7207 Comm: syz.6.223 Not tainted syzkaller #0 [ 297.499756][ T7207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 297.509895][ T7207] Call Trace: [ 297.513233][ T7207] [ 297.516223][ T7207] dump_stack_lvl+0x18c/0x250 [ 297.520977][ T7207] ? show_regs_print_info+0x20/0x20 [ 297.526339][ T7207] ? load_image+0x420/0x420 [ 297.531007][ T7207] ? __lock_acquire+0x7d80/0x7d80 [ 297.536192][ T7207] should_fail_ex+0x394/0x4c0 [ 297.540934][ T7207] should_failslab+0x9/0x20 [ 297.545599][ T7207] slab_pre_alloc_hook+0x59/0x300 [ 297.550708][ T7207] kmem_cache_alloc_lru+0x4d/0x2b0 [ 297.555921][ T7207] ? sock_alloc_inode+0x28/0xc0 [ 297.560871][ T7207] sock_alloc_inode+0x28/0xc0 [ 297.565694][ T7207] ? sockfs_init_fs_context+0xb0/0xb0 [ 297.571177][ T7207] new_inode_pseudo+0x63/0x1d0 [ 297.576021][ T7207] __sock_create+0x12d/0x940 [ 297.580773][ T7207] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 297.586832][ T7207] __sys_socket+0xd7/0x1b0 [ 297.591326][ T7207] __x64_sys_socket+0x7a/0x90 [ 297.596074][ T7207] do_syscall_64+0x55/0xb0 [ 297.600556][ T7207] ? clear_bhb_loop+0x40/0x90 [ 297.605292][ T7207] ? clear_bhb_loop+0x40/0x90 [ 297.610080][ T7207] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 297.616226][ T7207] RIP: 0033:0x7f9361b9e159 [ 297.620880][ T7207] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 297.640552][ T7207] RSP: 002b:00007f9362ac7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 297.649154][ T7207] RAX: ffffffffffffffda RBX: 00007f9361e26090 RCX: 00007f9361b9e159 [ 297.657206][ T7207] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 297.665472][ T7207] RBP: 00007f9361c3506b R08: 0000000000000000 R09: 0000000000000000 [ 297.673516][ T7207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 297.681543][ T7207] R13: 00007f9361e26128 R14: 00007f9361e26090 R15: 00007fff88a8da38 [ 297.689593][ T7207] [ 297.695677][ T7207] socket: no more sockets [ 299.563263][ T7217] loop3: detected capacity change from 0 to 256 [ 299.656686][ T7217] exfat: Deprecated parameter 'namecase' [ 299.705986][ T7217] exfat: Deprecated parameter 'namecase' [ 299.800933][ T7217] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 302.187617][ T7234] loop3: detected capacity change from 0 to 1024 [ 302.629985][ T7242] syzkaller0: entered promiscuous mode [ 302.675013][ T7242] syzkaller0: entered allmulticast mode [ 303.139428][ T7250] loop7: detected capacity change from 0 to 256 [ 303.235674][ T7250] device-mapper: ioctl: Invalid ioctl structure: name myp, dev f801 [ 303.935681][ T7270] loop7: detected capacity change from 0 to 256 [ 303.958751][ T7270] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 304.042780][ T28] audit: type=1800 audit(1790242243.371:85): pid=7270 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.243" name="file1" dev="loop7" ino=1048621 res=0 errno=0 [ 306.423506][ T7285] loop7: detected capacity change from 0 to 512 [ 306.584797][ T7285] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 306.845349][ T7285] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 308.140058][ T6913] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.560910][ T7301] syzkaller0: entered promiscuous mode [ 308.596294][ T7301] syzkaller0: entered allmulticast mode [ 309.721378][ T7311] loop5: detected capacity change from 0 to 256 [ 309.750650][ T7311] exfat: Deprecated parameter 'namecase' [ 309.773378][ T7311] exfat: Deprecated parameter 'namecase' [ 311.346623][ T7311] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 312.556431][ T7330] loop7: detected capacity change from 0 to 256 [ 312.930470][ T7330] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 313.029234][ T28] audit: type=1800 audit(1790242252.341:86): pid=7330 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.256" name="file1" dev="loop7" ino=1048624 res=0 errno=0 [ 313.994997][ T56] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 314.211998][ T56] usb 8-1: not running at top speed; connect to a high speed hub [ 314.257631][ T56] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 314.293433][ T56] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.330184][ T56] usb 8-1: Product: syz [ 314.365588][ T56] usb 8-1: Manufacturer: syz [ 314.370387][ T56] usb 8-1: SerialNumber: syz [ 314.747791][ T56] usb 8-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 314.776789][ T56] usb 8-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 315.085476][ T56] usb 8-1: USB disconnect, device number 2 [ 315.405623][ T7357] loop3: detected capacity change from 0 to 1024 [ 315.448672][ T7032] udevd[7032]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 315.487825][ T7357] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 316.695107][ T7357] EXT4-fs (loop3): Errors on filesystem, clearing orphan list. [ 316.769967][ T7357] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 316.844470][ T7357] EXT4-fs error (device loop3): ext4_iget_extra_inode:4752: inode #15: comm syz.3.254: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 317.194523][ T5783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.821154][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.827875][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.973292][ T7376] loop3: detected capacity change from 0 to 256 [ 319.038909][ T7376] exfat: Deprecated parameter 'namecase' [ 319.044674][ T7376] exfat: Deprecated parameter 'namecase' [ 319.127905][ T7376] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 320.342789][ T7389] device-mapper: ioctl: name not supplied when creating device [ 320.383682][ T7389] netlink: 8 bytes leftover after parsing attributes in process `syz.3.266'. [ 322.147047][ T7398] loop6: detected capacity change from 0 to 1024 [ 322.271861][ T7398] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 322.581562][ T5983] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 322.883845][ T7409] mtrr: base(0x20000000) is not aligned on a size(0x0000) boundary [ 323.303356][ T7421] loop6: detected capacity change from 0 to 256 [ 323.627795][ T7421] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 323.711704][ T28] audit: type=1800 audit(1790242263.041:87): pid=7421 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.271" name="file1" dev="loop6" ino=1048627 res=0 errno=0 [ 324.283056][ T7428] loop6: detected capacity change from 0 to 256 [ 324.338099][ T7428] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 324.382589][ T7428] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 324.428889][ T7428] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 324.462298][ T7428] exFAT-fs (loop6): failed to load alloc-bitmap [ 324.496231][ T7428] exFAT-fs (loop6): failed to recognize exfat type [ 327.422035][ T7461] loop5: detected capacity change from 0 to 128 [ 327.613773][ T7465] device-mapper: ioctl: name not supplied when creating device [ 327.652509][ T7465] netlink: 8 bytes leftover after parsing attributes in process `syz.7.276'. [ 328.532747][ T7461] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 328.751340][ T7461] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 328.844228][ T7461] ext2 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 330.775175][ T5939] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 331.469444][ T7495] loop5: detected capacity change from 0 to 512 [ 334.689746][ T7509] loop6: detected capacity change from 0 to 16 [ 335.144341][ T7509] erofs: (device loop6): mounted with root inode @ nid 36. [ 335.357526][ T28] audit: type=1800 audit(1790242274.691:88): pid=7509 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.284" name="file1" dev="loop6" ino=86 res=0 errno=0 [ 335.620259][ T5777] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 335.664602][ T7516] loop7: detected capacity change from 0 to 1024 [ 335.811096][ T7516] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 336.115524][ T6913] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 336.279424][ T7528] device-mapper: ioctl: name not supplied when creating device [ 336.319167][ T7528] netlink: 8 bytes leftover after parsing attributes in process `syz.6.286'. [ 337.789915][ T7537] loop7: detected capacity change from 0 to 256 [ 337.807793][ T7537] exfat: Deprecated parameter 'namecase' [ 337.813616][ T7537] exfat: Deprecated parameter 'namecase' [ 337.876336][ T7537] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 340.059403][ T7557] loop3: detected capacity change from 0 to 1024 [ 340.171559][ T7557] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 340.587449][ T5783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 340.995059][ T7573] netlink: 8 bytes leftover after parsing attributes in process `syz.7.297'. [ 348.275658][ T7620] capability: warning: `syz.6.289' uses deprecated v2 capabilities in a way that may be insecure [ 348.418646][ T7622] loop3: detected capacity change from 0 to 2048 [ 348.486155][ T7622] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 348.588796][ T7622] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 349.498798][ T7631] loop7: detected capacity change from 0 to 512 [ 349.653871][ T7631] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 349.736804][ T5806] smpboot: CPU 1 is now offline [ 349.802356][ T7634] loop6: detected capacity change from 0 to 1024 [ 349.898849][ T7631] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 350.142890][ T5783] UDF-fs: error (device loop3): udf_read_inode: (ino 1414) failed !bh [ 350.226392][ T5783] UDF-fs: error (device loop3): udf_read_inode: (ino 1414) failed !bh [ 350.265726][ T7631] EXT4-fs error (device loop7): ext4_iget_extra_inode:4752: inode #15: comm syz.7.299: corrupted in-inode xattr: invalid ea_ino [ 350.416390][ T7634] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 350.430194][ T7631] EXT4-fs (loop7): Remounting filesystem read-only [ 350.480122][ T7631] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 352.195323][ T7647] TCP: TCP_TX_DELAY enabled [ 352.668755][ T6913] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.966701][ T5983] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 353.295595][ T7653] loop7: detected capacity change from 0 to 256 [ 353.345009][ T7653] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 354.084277][ T7659] loop6: detected capacity change from 0 to 1024 [ 354.285848][ T7659] EXT4-fs (loop6): inodes count not valid: 1 vs 32 [ 354.563167][ T7586] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 357.597648][ T48] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.158670][ T48] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.427062][ T5786] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 358.437818][ T5786] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 358.452850][ T5786] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 358.461472][ T5786] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 358.473863][ T5786] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 358.481250][ T5786] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 358.530506][ T7678] loop6: detected capacity change from 0 to 1024 [ 358.800450][ T48] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.890519][ T7678] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 359.288398][ T5983] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 359.439491][ T48] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.033829][ T7694] loop6: detected capacity change from 0 to 256 [ 360.069350][ T7694] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 360.597367][ T5786] Bluetooth: hci3: command tx timeout [ 360.733605][ T7698] loop7: detected capacity change from 0 to 256 [ 360.749659][ T7698] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 362.243062][ T7677] chnl_net:caif_netlink_parms(): no params data found [ 362.668014][ T5786] Bluetooth: hci3: command tx timeout [ 362.775186][ T7706] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 363.007249][ T7706] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 363.048743][ T7706] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.100327][ T7706] usb 8-1: config 0 descriptor?? [ 363.130544][ T7706] cp210x 8-1:0.0: cp210x converter detected [ 363.209480][ T7677] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.260071][ T7677] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.290479][ T7677] bridge_slave_0: entered allmulticast mode [ 363.333247][ T7677] bridge_slave_0: entered promiscuous mode [ 363.339429][ T7706] cp210x 8-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 363.367245][ T7677] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.384744][ T7706] cp210x 8-1:0.0: querying part number failed [ 363.411162][ T7677] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.465792][ T7706] usb 8-1: cp210x converter now attached to ttyUSB0 [ 363.485154][ T7677] bridge_slave_1: entered allmulticast mode [ 363.519230][ T7677] bridge_slave_1: entered promiscuous mode [ 363.937888][ T7716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 363.969830][ T7716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 364.348654][ T7677] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 364.423219][ T7677] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 364.746879][ T5786] Bluetooth: hci3: command tx timeout [ 364.878087][ T7677] team0: Port device team_slave_0 added [ 365.021574][ T7677] team0: Port device team_slave_1 added [ 365.173917][ T7677] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 365.221177][ T7677] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 365.285004][ T7677] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 366.587223][ T5816] usb 8-1: USB disconnect, device number 3 [ 366.625264][ T5816] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 366.660479][ T5816] cp210x 8-1:0.0: device disconnected [ 367.575064][ T5786] Bluetooth: hci3: command tx timeout [ 367.717804][ T7677] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 367.765406][ T7677] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 367.921667][ T7677] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 367.940804][ T7736] loop7: detected capacity change from 0 to 512 [ 368.010563][ T7736] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 368.109925][ T7736] ext4 filesystem being mounted at /27/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 368.157580][ T48] hsr_slave_0: left promiscuous mode [ 368.340708][ T48] hsr_slave_1: left promiscuous mode [ 368.431253][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 368.459034][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 368.510050][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 368.551172][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 368.588864][ T48] bridge_slave_1: left allmulticast mode [ 368.594557][ T48] bridge_slave_1: left promiscuous mode [ 368.648692][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.719912][ T48] bridge_slave_0: left allmulticast mode [ 368.755496][ T48] bridge_slave_0: left promiscuous mode [ 368.761271][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.793575][ T6913] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.689348][ T48] veth1_macvtap: left promiscuous mode [ 369.697465][ T48] veth0_macvtap: left promiscuous mode [ 369.721834][ T48] veth1_vlan: left promiscuous mode [ 369.743034][ T48] veth0_vlan: left promiscuous mode [ 370.522837][ T7753] loop7: detected capacity change from 0 to 1024 [ 370.605280][ T7753] EXT4-fs (loop7): inodes count not valid: 1 vs 32 [ 378.207235][ T5777] Bluetooth: hci2: command 0x0406 tx timeout [ 378.213788][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.201553][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.450561][ T5764] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 380.687826][ T5764] usb 8-1: config 0 interface 0 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 380.740037][ T5764] usb 8-1: config 0 interface 0 has no altsetting 0 [ 380.774410][ T5764] usb 8-1: New USB device found, idVendor=046d, idProduct=c70e, bcdDevice= 0.00 [ 380.839320][ T5764] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.890204][ T5764] usb 8-1: config 0 descriptor?? [ 381.109495][ T7775] loop6: detected capacity change from 0 to 256 [ 381.144303][ T7775] exfat: Deprecated parameter 'namecase' [ 381.211349][ T7775] exfat: Deprecated parameter 'namecase' [ 381.288036][ T7775] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 381.600721][ T5764] usbhid 8-1:0.0: can't add hid device: -71 [ 381.635071][ T5764] usbhid: probe of 8-1:0.0 failed with error -71 [ 381.921764][ T48] team0 (unregistering): Port device team_slave_1 removed [ 381.939888][ T5764] usb 8-1: USB disconnect, device number 4 [ 382.238994][ T5786] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 382.258831][ T48] team0 (unregistering): Port device team_slave_0 removed [ 383.498829][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 383.660000][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 383.740733][ T7788] loop7: detected capacity change from 0 to 1024 [ 383.782638][ T7788] EXT4-fs (loop7): inodes count not valid: 1 vs 32 [ 386.538143][ T48] bond0 (unregistering): Released all slaves [ 386.596540][ T7805] loop5: detected capacity change from 0 to 512 [ 386.615047][ T7805] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 386.697182][ T7805] EXT4-fs error (device loop5): ext4_iget_extra_inode:4752: inode #15: comm syz.5.344: corrupted in-inode xattr: invalid ea_ino [ 386.731406][ T7805] EXT4-fs (loop5): Remounting filesystem read-only [ 386.769892][ T7805] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 387.027956][ T7677] hsr_slave_0: entered promiscuous mode [ 387.044696][ T5939] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.092883][ T28] audit: type=1326 audit(1790242326.421:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7808 comm="syz.6.347" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9361b9e159 code=0x7ffc0000 [ 387.118278][ T7677] hsr_slave_1: entered promiscuous mode [ 387.209342][ T7677] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 387.254396][ T28] audit: type=1326 audit(1790242326.421:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7808 comm="syz.6.347" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9361b9e159 code=0x7ffc0000 [ 387.301973][ T7677] Cannot create hsr debugfs directory [ 387.449252][ T7813] loop5: detected capacity change from 0 to 256 [ 387.496533][ T7813] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 387.847802][ T28] audit: type=1326 audit(1790242326.421:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7808 comm="syz.6.347" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9361b9e159 code=0x7ffc0000 [ 389.134280][ T28] audit: type=1326 audit(1790242326.421:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7808 comm="syz.6.347" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9361b9e159 code=0x7ffc0000 [ 389.330495][ T28] audit: type=1326 audit(1790242326.421:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7808 comm="syz.6.347" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9361b9e159 code=0x7ffc0000 [ 390.408270][ T7821] loop5: detected capacity change from 0 to 1024 [ 390.475140][ T28] audit: type=1326 audit(1790242326.451:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7808 comm="syz.6.347" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7f9361b9e159 code=0x7ffc0000 [ 390.507040][ T7821] EXT4-fs (loop5): inodes count not valid: 1 vs 32 [ 390.745567][ T28] audit: type=1326 audit(1790242326.451:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7808 comm="syz.6.347" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9361b9e159 code=0x7ffc0000 [ 390.943247][ T28] audit: type=1326 audit(1790242326.461:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7808 comm="syz.6.347" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9361b9e159 code=0x7ffc0000 [ 390.992976][ T7677] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 391.058539][ T7677] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 391.130397][ T28] audit: type=1326 audit(1790242326.461:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7808 comm="syz.6.347" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9361b9e159 code=0x7ffc0000 [ 391.214424][ T7677] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 391.256258][ T7677] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 391.273319][ T28] audit: type=1326 audit(1790242326.471:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7808 comm="syz.6.347" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9361b9e159 code=0x7ffc0000 [ 392.787572][ T7677] 8021q: adding VLAN 0 to HW filter on device bond0 [ 392.889568][ T7677] 8021q: adding VLAN 0 to HW filter on device team0 [ 392.957558][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.965466][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state [ 393.020074][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.027352][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 393.246822][ T7677] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 393.973519][ T7839] loop6: detected capacity change from 0 to 256 [ 394.039932][ T7839] exfat: Deprecated parameter 'namecase' [ 394.101621][ T7839] exfat: Deprecated parameter 'namecase' [ 394.183342][ T7842] loop7: detected capacity change from 0 to 764 [ 394.229947][ T7839] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 394.280622][ T7677] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 396.769822][ T7858] loop6: detected capacity change from 0 to 1024 [ 396.891086][ T7858] EXT4-fs (loop6): inodes count not valid: 1 vs 32 [ 397.618661][ T7677] veth0_vlan: entered promiscuous mode [ 397.700978][ T7677] veth1_vlan: entered promiscuous mode [ 399.039908][ T7677] veth0_macvtap: entered promiscuous mode [ 399.208660][ T7677] veth1_macvtap: entered promiscuous mode [ 399.303365][ T7677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 399.416893][ T7677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.493523][ T7677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 399.535046][ T7677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.615085][ T7677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 399.667870][ T7677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.745699][ T7677] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 399.807637][ T7677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 399.899020][ T7677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.913257][ T7890] loop5: detected capacity change from 0 to 256 [ 399.987683][ T7677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 400.005901][ T7890] exfat: Deprecated parameter 'namecase' [ 400.011615][ T7890] exfat: Deprecated parameter 'namecase' [ 400.066176][ T7677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.330236][ T7677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 400.342987][ T7890] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 400.387075][ T7677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.596680][ T7677] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 400.938372][ T7677] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.976352][ T7677] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.213554][ T7677] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.268141][ T7677] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.458332][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.522406][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.691034][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.775037][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.988978][ T7906] loop7: detected capacity change from 0 to 256 [ 403.036459][ T7906] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 408.172524][ T7936] loop5: detected capacity change from 0 to 1024 [ 408.256473][ T7936] EXT4-fs (loop5): inodes count not valid: 1 vs 32 [ 408.380958][ T7771] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 408.919928][ T7940] loop5: detected capacity change from 0 to 4096 [ 408.971287][ T7940] EXT4-fs: Ignoring removed mblk_io_submit option [ 409.502648][ T7940] EXT4-fs: Ignoring removed orlov option [ 409.514614][ T7940] EXT4-fs (loop5): Test dummy encryption mode enabled [ 409.571510][ T7950] loop7: detected capacity change from 0 to 256 [ 409.610188][ T7940] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 409.630551][ T7950] exfat: Deprecated parameter 'namecase' [ 409.683695][ T7950] exfat: Deprecated parameter 'namecase' [ 409.823923][ T7950] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 410.829236][ T7940] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 410.950846][ T7967] loop7: detected capacity change from 0 to 256 [ 411.021780][ T7967] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 411.404594][ T5939] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.028697][ T7977] netlink: 8 bytes leftover after parsing attributes in process `syz.5.385'. [ 417.859723][ T8008] loop7: detected capacity change from 0 to 512 [ 417.934631][ T8008] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 418.087728][ T8008] EXT4-fs error (device loop7): ext4_iget_extra_inode:4752: inode #15: comm syz.7.394: corrupted in-inode xattr: invalid ea_ino [ 418.197816][ T8008] EXT4-fs (loop7): Remounting filesystem read-only [ 418.253178][ T8008] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 419.317011][ T6913] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.668201][ T8021] loop7: detected capacity change from 0 to 256 [ 419.753348][ T8021] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 419.768255][ T8023] loop8: detected capacity change from 0 to 1024 [ 419.856428][ T8021] exFAT-fs (loop7): Medium has reported failures. Some data may be lost. [ 419.892393][ T8023] EXT4-fs (loop8): inodes count not valid: 1 vs 32 [ 419.958747][ T8021] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 420.072834][ T8021] exFAT-fs (loop7): failed to load alloc-bitmap [ 420.140399][ T8021] exFAT-fs (loop7): failed to recognize exfat type [ 420.432329][ T8028] loop8: detected capacity change from 0 to 1024 [ 420.601872][ T8028] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 422.039464][ T7677] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 422.254321][ T8039] loop5: detected capacity change from 0 to 256 [ 422.321697][ T8039] exfat: Deprecated parameter 'namecase' [ 422.385514][ T8039] exfat: Deprecated parameter 'namecase' [ 422.451052][ T8039] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 430.834980][ T5816] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 431.791875][ T5816] usb 7-1: config 0 has an invalid interface number: 9 but max is 0 [ 431.820013][ T5816] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 431.903597][ T5816] usb 7-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 431.966808][ T5816] usb 7-1: config 0 has no interface number 1 [ 432.005158][ T5816] usb 7-1: New USB device found, idVendor=0421, idProduct=0302, bcdDevice=45.e8 [ 432.062011][ T5816] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.123438][ T5816] usb 7-1: config 0 descriptor?? [ 432.195417][ T5816] usb 7-1: bad CDC descriptors [ 432.223422][ T5816] usb 7-1: bad CDC descriptors [ 432.353197][ T5786] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 432.485138][ T5764] usb 7-1: USB disconnect, device number 2 [ 433.171908][ T8115] loop7: detected capacity change from 0 to 1024 [ 433.357853][ T8115] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 434.904077][ T6913] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 437.477895][ T8150] loop8: detected capacity change from 0 to 128 [ 437.649991][ T8150] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 437.743614][ T8150] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 437.845006][ T8150] ext2 filesystem being mounted at /9/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 438.216585][ T8150] EXT4-fs error (device loop8): htree_dirblock_to_tree:1112: inode #2: block 4: comm syz.8.417: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1 [ 438.763852][ T7677] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 439.060789][ T8165] loop8: detected capacity change from 0 to 16 [ 439.168129][ T8165] erofs: (device loop8): z_erofs_load_lz4_config: too large lz4 pclusterblks 16832 [ 439.326496][ T7771] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 440.514719][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.525806][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.924233][ T8186] loop5: detected capacity change from 0 to 1024 [ 443.079780][ T8186] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 443.406676][ T5939] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 448.743705][ T8225] loop5: detected capacity change from 0 to 2048 [ 448.895919][ T8225] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 455.894750][ T8279] loop6: detected capacity change from 0 to 512 [ 458.328123][ T8279] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 458.568815][ T8279] ext4 filesystem being mounted at /110/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 458.766646][ T5786] Bluetooth: hci3: link tx timeout [ 458.772943][ T5786] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 459.259167][ T5983] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.856556][ T5786] Bluetooth: hci3: command 0x0406 tx timeout [ 462.378327][ T8318] loop8: detected capacity change from 0 to 1024 [ 462.385619][ T8318] EXT4-fs: Ignoring removed bh option [ 462.433093][ T8318] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 462.448870][ T8318] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.686735][ T8360] loop6: detected capacity change from 0 to 256 [ 467.715177][ T8360] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 469.291746][ T8375] loop6: detected capacity change from 0 to 256 [ 469.358400][ T8375] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 469.456274][ T8375] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 469.542563][ T8375] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 470.692462][ T8375] exFAT-fs (loop6): failed to load alloc-bitmap [ 470.731685][ T8375] exFAT-fs (loop6): failed to recognize exfat type [ 472.932979][ T8390] loop5: detected capacity change from 0 to 512 [ 473.081763][ T8390] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 474.278623][ T8390] ext4 filesystem being mounted at /95/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 476.189315][ T5939] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 481.288634][ T8452] FAULT_INJECTION: forcing a failure. [ 481.288634][ T8452] name failslab, interval 1, probability 0, space 0, times 0 [ 481.303129][ T8452] CPU: 0 PID: 8452 Comm: syz.8.467 Not tainted syzkaller #0 [ 481.310475][ T8452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 481.320924][ T8452] Call Trace: [ 481.324297][ T8452] [ 481.327341][ T8452] dump_stack_lvl+0x18c/0x250 [ 481.332282][ T8452] ? show_regs_print_info+0x20/0x20 [ 481.337569][ T8452] ? load_image+0x420/0x420 [ 481.342124][ T8452] ? __lock_acquire+0x7d80/0x7d80 [ 481.347213][ T8452] should_fail_ex+0x394/0x4c0 [ 481.351957][ T8452] should_failslab+0x9/0x20 [ 481.356529][ T8452] slab_pre_alloc_hook+0x59/0x300 [ 481.361621][ T8452] kmem_cache_alloc_lru+0x4d/0x2b0 [ 481.366766][ T8452] ? sock_alloc_inode+0x28/0xc0 [ 481.371736][ T8452] sock_alloc_inode+0x28/0xc0 [ 481.376440][ T8452] ? sockfs_init_fs_context+0xb0/0xb0 [ 481.381841][ T8452] new_inode_pseudo+0x63/0x1d0 [ 481.386663][ T8452] __sock_create+0x12d/0x940 [ 481.391283][ T8452] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 481.397322][ T8452] __sys_socket+0xd7/0x1b0 [ 481.401793][ T8452] __x64_sys_socket+0x7a/0x90 [ 481.406524][ T8452] do_syscall_64+0x55/0xb0 [ 481.411000][ T8452] ? clear_bhb_loop+0x40/0x90 [ 481.415928][ T8452] ? clear_bhb_loop+0x40/0x90 [ 481.420645][ T8452] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 481.426570][ T8452] RIP: 0033:0x7ffb12b9e159 [ 481.431068][ T8452] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 481.451182][ T8452] RSP: 002b:00007ffb13b51028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 481.459647][ T8452] RAX: ffffffffffffffda RBX: 00007ffb12e25fa0 RCX: 00007ffb12b9e159 [ 481.467644][ T8452] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 481.475634][ T8452] RBP: 00007ffb12c3506b R08: 0000000000000000 R09: 0000000000000000 [ 481.483632][ T8452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 481.491647][ T8452] R13: 00007ffb12e26038 R14: 00007ffb12e25fa0 R15: 00007ffee29590c8 [ 481.499794][ T8452] [ 481.504389][ T8452] socket: no more sockets [ 482.156439][ T8459] loop7: detected capacity change from 0 to 128 [ 482.237538][ T8459] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 482.335913][ T8459] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 482.424992][ T8459] ext2 filesystem being mounted at /64/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 482.715945][ T8459] EXT4-fs error (device loop7): htree_dirblock_to_tree:1112: inode #2: block 4: comm syz.7.463: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1 [ 483.201360][ T6913] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 488.929972][ T8503] mmap: syz.7.478 (8503) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 494.666854][ T5786] Bluetooth: hci3: command 0x0406 tx timeout [ 494.773275][ T8537] loop8: detected capacity change from 0 to 764 [ 497.745014][ T5806] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 497.985095][ T5806] usb 8-1: config 0 interface 0 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 498.044902][ T5806] usb 8-1: config 0 interface 0 has no altsetting 0 [ 498.109400][ T5806] usb 8-1: New USB device found, idVendor=046d, idProduct=c70e, bcdDevice= 0.00 [ 499.234890][ T5806] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.354159][ T5806] usb 8-1: config 0 descriptor?? [ 499.730319][ T8574] loop6: detected capacity change from 0 to 256 [ 499.780699][ T8574] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 500.339499][ T5806] usbhid 8-1:0.0: can't add hid device: -71 [ 500.390811][ T5806] usbhid: probe of 8-1:0.0 failed with error -71 [ 500.485028][ T5806] usb 8-1: USB disconnect, device number 5 [ 502.293737][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.300143][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 505.753024][ T8623] loop5: detected capacity change from 0 to 256 [ 505.801617][ T8623] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 506.198635][ T8625] loop6: detected capacity change from 0 to 256 [ 506.290645][ T8625] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 512.173030][ T8661] loop8: detected capacity change from 0 to 1024 [ 512.274983][ T8661] EXT4-fs (loop8): inodes count not valid: 1 vs 32 [ 513.168702][ T8672] loop8: detected capacity change from 0 to 256 [ 513.208173][ T8672] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 515.566629][ T8688] loop5: detected capacity change from 0 to 512 [ 516.664960][ T8688] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 516.820682][ T8688] EXT4-fs (loop5): Test dummy encryption mode enabled [ 517.002950][ T8688] EXT4-fs (loop5): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 517.266398][ T5939] EXT4-fs (loop5): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 519.322516][ T8707] loop5: detected capacity change from 0 to 1024 [ 519.435902][ T8707] EXT4-fs (loop5): inodes count not valid: 1 vs 32 [ 524.726733][ T8752] loop6: detected capacity change from 0 to 256 [ 524.788991][ T8752] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 526.673348][ T8768] loop6: detected capacity change from 0 to 2048 [ 526.766657][ T8768] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 528.429078][ T8] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 528.591655][ T8787] loop7: detected capacity change from 0 to 256 [ 528.643655][ T8787] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 528.954927][ T8] usb 7-1: Using ep0 maxpacket: 32 [ 528.995995][ T8] usb 7-1: config index 0 descriptor too short (expected 539, got 27) [ 529.018705][ T8789] loop5: detected capacity change from 0 to 1024 [ 529.065905][ T8] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 529.139994][ T8] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 25717, setting to 1024 [ 529.302311][ T8] usb 7-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 529.365173][ T8] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.446928][ T8789] hfsplus: xattr searching failed [ 529.454904][ T8] usb 7-1: Product: syz [ 529.459097][ T8] usb 7-1: Manufacturer: syz [ 529.539320][ T8] usb 7-1: SerialNumber: syz [ 529.578340][ T8] usb 7-1: config 0 descriptor?? [ 529.635065][ T8782] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 529.643526][ T8] hub 7-1:0.0: bad descriptor, ignoring hub [ 529.688179][ T8] hub: probe of 7-1:0.0 failed with error -5 [ 529.746298][ T8] input: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input5 [ 530.065185][ T8797] loop5: detected capacity change from 0 to 1024 [ 530.169427][ T8797] EXT4-fs: inline encryption not supported [ 530.255158][ T5806] usb 7-1: USB disconnect, device number 3 [ 530.261033][ C0] usbtouchscreen 7-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 530.359386][ T8797] __quota_error: 48 callbacks suppressed [ 530.359399][ T8797] Quota error (device loop5): do_check_range: Getting block 64 out of range 1-5 [ 530.466486][ T8797] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 530.514969][ T8797] EXT4-fs error (device loop5): ext4_acquire_dquot:6953: comm syz.5.541: Failed to acquire dquot type 0 [ 530.630827][ T8797] EXT4-fs error (device loop5): mb_free_blocks:1970: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 530.818715][ T8797] EXT4-fs (loop5): 1 truncate cleaned up [ 530.854693][ T8797] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 531.177795][ T8811] loop6: detected capacity change from 0 to 256 [ 531.217947][ T8811] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 531.450277][ T5939] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 532.934084][ T8823] loop7: detected capacity change from 0 to 2048 [ 533.072126][ T8823] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 533.505241][ T8831] binder: 8828:8831 ioctl c0306201 200000000080 returned -14 [ 533.541063][ T8830] loop5: detected capacity change from 0 to 256 [ 533.556786][ T8830] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 535.258229][ T5777] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 536.527400][ T8864] loop8: detected capacity change from 0 to 512 [ 536.619727][ T8864] EXT4-fs (loop8): Test dummy encryption mode enabled [ 536.694907][ T8864] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 537.615803][ T8872] FAULT_INJECTION: forcing a failure. [ 537.615803][ T8872] name failslab, interval 1, probability 0, space 0, times 0 [ 537.629926][ T8872] CPU: 0 PID: 8872 Comm: syz.6.558 Not tainted syzkaller #0 [ 537.637311][ T8872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 537.647763][ T8872] Call Trace: [ 537.651091][ T8872] [ 537.654037][ T8872] dump_stack_lvl+0x18c/0x250 [ 537.658739][ T8872] ? show_regs_print_info+0x20/0x20 [ 537.663958][ T8872] ? load_image+0x420/0x420 [ 537.668475][ T8872] ? __lock_acquire+0x7d80/0x7d80 [ 537.673526][ T8872] should_fail_ex+0x394/0x4c0 [ 537.678227][ T8872] should_failslab+0x9/0x20 [ 537.682763][ T8872] slab_pre_alloc_hook+0x59/0x300 [ 537.687828][ T8872] kmem_cache_alloc_lru+0x4d/0x2b0 [ 537.692975][ T8872] ? sock_alloc_inode+0x28/0xc0 [ 537.697884][ T8872] sock_alloc_inode+0x28/0xc0 [ 537.702584][ T8872] ? sockfs_init_fs_context+0xb0/0xb0 [ 537.708021][ T8872] new_inode_pseudo+0x63/0x1d0 [ 537.712827][ T8872] __sock_create+0x12d/0x940 [ 537.717431][ T8872] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 537.723430][ T8872] __sys_socket+0xd7/0x1b0 [ 537.727864][ T8872] __x64_sys_socket+0x7a/0x90 [ 537.732556][ T8872] do_syscall_64+0x55/0xb0 [ 537.736984][ T8872] ? clear_bhb_loop+0x40/0x90 [ 537.741770][ T8872] ? clear_bhb_loop+0x40/0x90 [ 537.746469][ T8872] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 537.752470][ T8872] RIP: 0033:0x7f9361b9e159 [ 537.756994][ T8872] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 537.776836][ T8872] RSP: 002b:00007f9362ae8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 537.785268][ T8872] RAX: ffffffffffffffda RBX: 00007f9361e25fa0 RCX: 00007f9361b9e159 [ 537.793251][ T8872] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 537.801228][ T8872] RBP: 00007f9361c3506b R08: 0000000000000000 R09: 0000000000000000 [ 537.809331][ T8872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 537.817338][ T8872] R13: 00007f9361e26038 R14: 00007f9361e25fa0 R15: 00007fff88a8da38 [ 537.825371][ T8872] [ 537.831398][ T8872] socket: no more sockets [ 537.877264][ T154] ACPI: \_SB_.CP01: Eject incomplete - status 0xf [ 537.947090][ T8864] EXT4-fs (loop8): 1 truncate cleaned up [ 537.953778][ T8864] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 538.293593][ T7677] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 541.437891][ T5777] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 542.141058][ T8908] loop6: detected capacity change from 0 to 1024 [ 542.210149][ T8908] EXT4-fs (loop6): inodes count not valid: 1 vs 32 [ 544.594939][ T8916] FAULT_INJECTION: forcing a failure. [ 544.594939][ T8916] name failslab, interval 1, probability 0, space 0, times 0 [ 544.607632][ T8916] CPU: 0 PID: 8916 Comm: syz.6.567 Not tainted syzkaller #0 [ 544.614965][ T8916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 544.625036][ T8916] Call Trace: [ 544.628337][ T8916] [ 544.631303][ T8916] dump_stack_lvl+0x18c/0x250 [ 544.636029][ T8916] ? show_regs_print_info+0x20/0x20 [ 544.641273][ T8916] ? load_image+0x420/0x420 [ 544.645919][ T8916] ? __lock_acquire+0x7d80/0x7d80 [ 544.650988][ T8916] should_fail_ex+0x394/0x4c0 [ 544.656246][ T8916] should_failslab+0x9/0x20 [ 544.660786][ T8916] slab_pre_alloc_hook+0x59/0x300 [ 544.665965][ T8916] kmem_cache_alloc_lru+0x4d/0x2b0 [ 544.671301][ T8916] ? sock_alloc_inode+0x28/0xc0 [ 544.676194][ T8916] sock_alloc_inode+0x28/0xc0 [ 544.680905][ T8916] ? sockfs_init_fs_context+0xb0/0xb0 [ 544.686432][ T8916] new_inode_pseudo+0x63/0x1d0 [ 544.691245][ T8916] __sock_create+0x12d/0x940 [ 544.695948][ T8916] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 544.701973][ T8916] __sys_socket+0xd7/0x1b0 [ 544.706445][ T8916] __x64_sys_socket+0x7a/0x90 [ 544.711170][ T8916] do_syscall_64+0x55/0xb0 [ 544.715634][ T8916] ? clear_bhb_loop+0x40/0x90 [ 544.720435][ T8916] ? clear_bhb_loop+0x40/0x90 [ 544.725152][ T8916] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 544.731090][ T8916] RIP: 0033:0x7f9361b9e159 [ 544.735540][ T8916] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 544.755255][ T8916] RSP: 002b:00007f9362ae8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 544.763682][ T8916] RAX: ffffffffffffffda RBX: 00007f9361e25fa0 RCX: 00007f9361b9e159 [ 544.771686][ T8916] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 544.779678][ T8916] RBP: 00007f9361c3506b R08: 0000000000000000 R09: 0000000000000000 [ 544.787665][ T8916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 544.795677][ T8916] R13: 00007f9361e26038 R14: 00007f9361e25fa0 R15: 00007fff88a8da38 [ 544.803681][ T8916] [ 544.807975][ T8916] socket: no more sockets [ 548.728744][ T8958] loop8: detected capacity change from 0 to 256 [ 548.738620][ T8958] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 551.230884][ T8966] loop7: detected capacity change from 0 to 1024 [ 551.302679][ T8966] EXT4-fs (loop7): inodes count not valid: 1 vs 32 [ 554.338212][ T5777] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 558.956790][ T5777] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 559.187856][ T9053] loop8: detected capacity change from 0 to 128 [ 559.257035][ T9053] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 559.332766][ T9053] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 559.444375][ T9053] ext2 filesystem being mounted at /61/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 559.733659][ T9062] loop6: detected capacity change from 0 to 8 [ 559.792988][ T9053] EXT4-fs error (device loop8): htree_dirblock_to_tree:1112: inode #2: block 4: comm syz.8.597: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1 [ 560.295683][ T7677] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 562.085283][ T9092] loop5: detected capacity change from 0 to 164 [ 562.166313][ T9092] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 562.290028][ T9092] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 562.355546][ T5777] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 563.150568][ T9108] loop8: detected capacity change from 0 to 256 [ 563.213178][ T9108] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 563.507687][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.521039][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 566.248073][ T5777] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 566.460484][ T5777] Bluetooth: hci2: Invalid handle: 0x20c9 > 0x0eff [ 574.987695][ T9233] loop5: detected capacity change from 0 to 128 [ 575.086234][ T9233] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 575.161126][ T9233] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 576.423660][ T9233] ext2 filesystem being mounted at /135/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 576.683742][ T9233] EXT4-fs error (device loop5): htree_dirblock_to_tree:1112: inode #2: block 4: comm syz.5.627: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1 [ 576.952063][ T5939] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 584.342031][ T9287] loop5: detected capacity change from 0 to 256 [ 584.438105][ T9287] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 585.163448][ T9295] loop5: detected capacity change from 0 to 16 [ 585.243317][ T9295] erofs: (device loop5): mounted with root inode @ nid 36. [ 592.553042][ T9343] loop6: detected capacity change from 0 to 1024 [ 592.678445][ T9343] EXT4-fs: Ignoring removed oldalloc option [ 592.737416][ T9343] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 592.862867][ T9346] loop7: detected capacity change from 0 to 256 [ 592.873332][ T9346] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 593.203525][ T9343] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 593.363734][ T9343] EXT4-fs (loop6): shut down requested (0) [ 593.649299][ T5983] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 595.138157][ T9362] loop6: detected capacity change from 0 to 256 [ 595.195692][ T9362] exfat: Deprecated parameter 'namecase' [ 595.201469][ T9362] exfat: Deprecated parameter 'namecase' [ 595.368417][ T9362] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 597.347092][ T5806] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 597.577197][ T5806] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 597.608428][ T5806] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 597.680100][ T5806] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 597.731604][ T5806] usb 6-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.01 [ 597.778056][ T5806] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.826299][ T9370] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 598.377185][ T5786] Bluetooth: hci4: Reading Intel version command failed (-71) [ 598.396227][ T5806] usb 6-1: USB disconnect, device number 5 [ 599.453519][ T9380] FAULT_INJECTION: forcing a failure. [ 599.453519][ T9380] name failslab, interval 1, probability 0, space 0, times 0 [ 599.467594][ T9380] CPU: 0 PID: 9380 Comm: syz.8.651 Not tainted syzkaller #0 [ 599.475219][ T9380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 599.485771][ T9380] Call Trace: [ 599.489175][ T9380] [ 599.492336][ T9380] dump_stack_lvl+0x18c/0x250 [ 599.497166][ T9380] ? show_regs_print_info+0x20/0x20 [ 599.503296][ T9380] ? load_image+0x420/0x420 [ 599.508304][ T9380] ? __lock_acquire+0x7d80/0x7d80 [ 599.514999][ T9380] should_fail_ex+0x394/0x4c0 [ 599.520462][ T9380] should_failslab+0x9/0x20 [ 599.525551][ T9380] slab_pre_alloc_hook+0x59/0x300 [ 599.531277][ T9380] kmem_cache_alloc_lru+0x4d/0x2b0 [ 599.536789][ T9380] ? sock_alloc_inode+0x28/0xc0 [ 599.541778][ T9380] sock_alloc_inode+0x28/0xc0 [ 599.546485][ T9380] ? sockfs_init_fs_context+0xb0/0xb0 [ 599.552358][ T9380] new_inode_pseudo+0x63/0x1d0 [ 599.557236][ T9380] __sock_create+0x12d/0x940 [ 599.562721][ T9380] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 599.568736][ T9380] __sys_socket+0xd7/0x1b0 [ 599.573506][ T9380] __x64_sys_socket+0x7a/0x90 [ 599.578678][ T9380] do_syscall_64+0x55/0xb0 [ 599.583242][ T9380] ? clear_bhb_loop+0x40/0x90 [ 599.588136][ T9380] ? clear_bhb_loop+0x40/0x90 [ 599.593052][ T9380] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 599.599183][ T9380] RIP: 0033:0x7ffb12b9e159 [ 599.603642][ T9380] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 599.623343][ T9380] RSP: 002b:00007ffb13b51028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 599.632603][ T9380] RAX: ffffffffffffffda RBX: 00007ffb12e25fa0 RCX: 00007ffb12b9e159 [ 599.640609][ T9380] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 599.648597][ T9380] RBP: 00007ffb12c3506b R08: 0000000000000000 R09: 0000000000000000 [ 599.656590][ T9380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 599.664597][ T9380] R13: 00007ffb12e26038 R14: 00007ffb12e25fa0 R15: 00007ffee29590c8 [ 599.672601][ T9380] [ 599.677173][ T9380] socket: no more sockets [ 600.977116][ T9395] netlink: 8 bytes leftover after parsing attributes in process `syz.5.662'. [ 603.390475][ T9420] loop6: detected capacity change from 0 to 256 [ 603.456814][ T9420] exfat: Deprecated parameter 'namecase' [ 603.462723][ T9420] exfat: Deprecated parameter 'namecase' [ 603.602369][ T9420] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 604.748519][ T9431] loop6: detected capacity change from 0 to 128 [ 605.678781][ T9440] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 605.678840][ T9440] FAT-fs (loop6): Filesystem has been set read-only [ 608.499319][ T9460] loop6: detected capacity change from 0 to 256 [ 608.521599][ T9460] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 609.569889][ T9467] loop8: detected capacity change from 0 to 1024 [ 609.654406][ T9471] loop6: detected capacity change from 0 to 256 [ 609.715878][ T9471] exfat: Deprecated parameter 'namecase' [ 609.721619][ T9471] exfat: Deprecated parameter 'namecase' [ 609.755762][ T9467] EXT4-fs: Ignoring removed orlov option [ 609.929488][ T9471] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 610.303661][ T9467] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 610.883034][ T28] audit: type=1800 audit(1790242550.201:147): pid=9467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.661" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 611.814008][ T9481] FAULT_INJECTION: forcing a failure. [ 611.814008][ T9481] name failslab, interval 1, probability 0, space 0, times 0 [ 611.827220][ T9481] CPU: 0 PID: 9481 Comm: syz.7.669 Not tainted syzkaller #0 [ 611.834609][ T9481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 611.844785][ T9481] Call Trace: [ 611.848090][ T9481] [ 611.851037][ T9481] dump_stack_lvl+0x18c/0x250 [ 611.855753][ T9481] ? show_regs_print_info+0x20/0x20 [ 611.861041][ T9481] ? load_image+0x420/0x420 [ 611.866703][ T9481] ? __lock_acquire+0x7d80/0x7d80 [ 611.871779][ T9481] should_fail_ex+0x394/0x4c0 [ 611.876501][ T9481] should_failslab+0x9/0x20 [ 611.881044][ T9481] slab_pre_alloc_hook+0x59/0x300 [ 611.886092][ T9481] kmem_cache_alloc_lru+0x4d/0x2b0 [ 611.891227][ T9481] ? sock_alloc_inode+0x28/0xc0 [ 611.896106][ T9481] sock_alloc_inode+0x28/0xc0 [ 611.900799][ T9481] ? sockfs_init_fs_context+0xb0/0xb0 [ 611.906193][ T9481] new_inode_pseudo+0x63/0x1d0 [ 611.910979][ T9481] __sock_create+0x12d/0x940 [ 611.915582][ T9481] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 611.921593][ T9481] __sys_socket+0xd7/0x1b0 [ 611.926037][ T9481] __x64_sys_socket+0x7a/0x90 [ 611.930734][ T9481] do_syscall_64+0x55/0xb0 [ 611.935167][ T9481] ? clear_bhb_loop+0x40/0x90 [ 611.939867][ T9481] ? clear_bhb_loop+0x40/0x90 [ 611.944562][ T9481] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 611.950476][ T9481] RIP: 0033:0x7f25fcd9e159 [ 611.954902][ T9481] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 611.974697][ T9481] RSP: 002b:00007f25fdce9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 611.983210][ T9481] RAX: ffffffffffffffda RBX: 00007f25fd025fa0 RCX: 00007f25fcd9e159 [ 611.991230][ T9481] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 611.999221][ T9481] RBP: 00007f25fce3506b R08: 0000000000000000 R09: 0000000000000000 [ 612.007363][ T9481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 612.015362][ T9481] R13: 00007f25fd026038 R14: 00007f25fd025fa0 R15: 00007ffd7b97b0f8 [ 612.023449][ T9481] [ 612.027824][ T9481] socket: no more sockets [ 612.436293][ T7677] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 614.979802][ T9509] netlink: 16 bytes leftover after parsing attributes in process `syz.5.681'. [ 616.048149][ T9518] loop8: detected capacity change from 0 to 256 [ 616.149201][ T9518] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 617.884640][ T9525] FAULT_INJECTION: forcing a failure. [ 617.884640][ T9525] name failslab, interval 1, probability 0, space 0, times 0 [ 617.898517][ T9525] CPU: 0 PID: 9525 Comm: syz.6.685 Not tainted syzkaller #0 [ 617.905856][ T9525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 617.915979][ T9525] Call Trace: [ 617.919291][ T9525] [ 617.922241][ T9525] dump_stack_lvl+0x18c/0x250 [ 617.927076][ T9525] ? show_regs_print_info+0x20/0x20 [ 617.932323][ T9525] ? load_image+0x420/0x420 [ 617.937036][ T9525] ? __lock_acquire+0x7d80/0x7d80 [ 617.942097][ T9525] should_fail_ex+0x394/0x4c0 [ 617.946804][ T9525] should_failslab+0x9/0x20 [ 617.951332][ T9525] slab_pre_alloc_hook+0x59/0x300 [ 617.956411][ T9525] kmem_cache_alloc_lru+0x4d/0x2b0 [ 617.961558][ T9525] ? sock_alloc_inode+0x28/0xc0 [ 617.966456][ T9525] sock_alloc_inode+0x28/0xc0 [ 617.971215][ T9525] ? sockfs_init_fs_context+0xb0/0xb0 [ 617.976647][ T9525] new_inode_pseudo+0x63/0x1d0 [ 617.981459][ T9525] __sock_create+0x12d/0x940 [ 617.986074][ T9525] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 617.992081][ T9525] __sys_socket+0xd7/0x1b0 [ 617.996544][ T9525] __x64_sys_socket+0x7a/0x90 [ 618.001329][ T9525] do_syscall_64+0x55/0xb0 [ 618.005770][ T9525] ? clear_bhb_loop+0x40/0x90 [ 618.010467][ T9525] ? clear_bhb_loop+0x40/0x90 [ 618.015174][ T9525] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 618.021091][ T9525] RIP: 0033:0x7f9361b9e159 [ 618.025627][ T9525] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 618.045265][ T9525] RSP: 002b:00007f9362ac7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 618.053873][ T9525] RAX: ffffffffffffffda RBX: 00007f9361e26090 RCX: 00007f9361b9e159 [ 618.061885][ T9525] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 618.069881][ T9525] RBP: 00007f9361c3506b R08: 0000000000000000 R09: 0000000000000000 [ 618.077996][ T9525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 618.085979][ T9525] R13: 00007f9361e26128 R14: 00007f9361e26090 R15: 00007fff88a8da38 [ 618.093978][ T9525] [ 618.098274][ T9525] socket: no more sockets [ 624.846552][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.852955][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 627.396051][ T9575] loop6: detected capacity change from 0 to 8 [ 627.462467][ T9575] unable to read xattr id index table [ 628.177846][ T5786] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 629.829715][ T9593] FAULT_INJECTION: forcing a failure. [ 629.829715][ T9593] name fail_futex, interval 1, probability 0, space 0, times 1 [ 629.842874][ T9593] CPU: 0 PID: 9593 Comm: syz.7.694 Not tainted syzkaller #0 [ 629.850189][ T9593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 629.860284][ T9593] Call Trace: [ 629.863605][ T9593] [ 629.866623][ T9593] dump_stack_lvl+0x18c/0x250 [ 629.871347][ T9593] ? show_regs_print_info+0x20/0x20 [ 629.876676][ T9593] ? load_image+0x420/0x420 [ 629.881338][ T9593] ? plist_add+0x3db/0x490 [ 629.885924][ T9593] should_fail_ex+0x394/0x4c0 [ 629.890632][ T9593] get_futex_key+0x136/0x1030 [ 629.895355][ T9593] ? futex_setup_timer+0xc0/0xc0 [ 629.900310][ T9593] futex_wake+0x127/0x4f0 [ 629.904653][ T9593] ? __fget_files+0x3fc/0x460 [ 629.909356][ T9593] ? futex_wake_mark+0x150/0x150 [ 629.914303][ T9593] ? __fdget+0x192/0x210 [ 629.918674][ T9593] ? __sys_sendto+0x162/0x6b0 [ 629.923365][ T9593] ? __sys_sendto+0x1ef/0x6b0 [ 629.928070][ T9593] do_futex+0x35d/0x3e0 [ 629.932257][ T9593] ? __ia32_sys_get_robust_list+0x110/0x110 [ 629.938190][ T9593] __se_sys_futex+0x3a9/0x440 [ 629.942926][ T9593] ? __x64_sys_futex+0xf0/0xf0 [ 629.947709][ T9593] ? __x64_sys_futex+0x21/0xf0 [ 629.952491][ T9593] do_syscall_64+0x55/0xb0 [ 629.956928][ T9593] ? clear_bhb_loop+0x40/0x90 [ 629.961621][ T9593] ? clear_bhb_loop+0x40/0x90 [ 629.966317][ T9593] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 629.972225][ T9593] RIP: 0033:0x7f25fcd9e159 [ 629.976668][ T9593] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 629.996827][ T9593] RSP: 002b:00007f25fdce90e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 630.005283][ T9593] RAX: ffffffffffffffda RBX: 00007f25fd025fa8 RCX: 00007f25fcd9e159 [ 630.013370][ T9593] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f25fd025fac [ 630.021400][ T9593] RBP: 00007f25fd025fa0 R08: 0000000000745d1e R09: 0000000000000000 [ 630.029401][ T9593] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 630.037750][ T9593] R13: 00007f25fd026038 R14: 00007ffd7b97b010 R15: 00007ffd7b97b0f8 [ 630.045928][ T9593] [ 631.934916][ T5764] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 634.457770][ T5764] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 634.535438][ T5764] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 634.630464][ T5764] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 634.697463][ T5764] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 634.811011][ T5764] usb 6-1: can't set config #1, error -71 [ 634.866734][ T5764] usb 6-1: USB disconnect, device number 6 [ 639.670708][ T9651] loop7: detected capacity change from 0 to 764 [ 640.892312][ T5786] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 642.812010][ T9692] loop8: detected capacity change from 0 to 256 [ 642.830054][ T9695] loop5: detected capacity change from 0 to 512 [ 642.926694][ T9695] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.715: invalid indirect mapped block 256 (level 2) [ 642.946683][ T9692] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 643.069845][ T9695] EXT4-fs (loop5): Remounting filesystem read-only [ 643.128810][ T9695] EXT4-fs (loop5): 2 truncates cleaned up [ 643.165600][ T9695] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 643.376336][ T28] audit: type=1800 audit(1790242582.711:148): pid=9692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.717" name="file1" dev="loop8" ino=1048683 res=0 errno=0 [ 643.502429][ T5939] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 643.604292][ T9707] loop6: detected capacity change from 0 to 128 [ 643.713606][ T9707] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 643.857302][ T9707] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 643.993398][ T9707] ext2 filesystem being mounted at /179/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 644.111614][ T5786] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 644.272425][ T9707] EXT4-fs error (device loop6): htree_dirblock_to_tree:1112: inode #2: block 4: comm syz.6.705: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1 [ 644.732958][ T5983] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 644.918655][ T9720] loop5: detected capacity change from 0 to 1024 [ 646.287792][ T56] kworker/dying (56) used greatest stack depth: 19952 bytes left [ 646.829525][ T28] audit: type=1326 audit(1790242586.161:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9734 comm="syz.8.730" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb12b9e159 code=0x7ffc0000 [ 646.913444][ T9735] loop8: detected capacity change from 0 to 1024 [ 647.015370][ T28] audit: type=1326 audit(1790242586.201:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9734 comm="syz.8.730" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb12b9e159 code=0x7ffc0000 [ 647.060805][ T9735] hfsplus: unknown catalog record type 65281 [ 647.186817][ T28] audit: type=1326 audit(1790242586.221:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9734 comm="syz.8.730" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ffb12b9e159 code=0x7ffc0000 [ 647.440196][ T28] audit: type=1326 audit(1790242586.221:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9734 comm="syz.8.730" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb12b9e159 code=0x7ffc0000 [ 647.600199][ T28] audit: type=1326 audit(1790242586.231:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9734 comm="syz.8.730" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ffb12b9e159 code=0x7ffc0000 [ 647.787888][ T28] audit: type=1326 audit(1790242586.231:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9734 comm="syz.8.730" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ffb12b9dec2 code=0x7ffc0000 [ 647.924950][ T28] audit: type=1326 audit(1790242586.241:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9734 comm="syz.8.730" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ffb12b5e98e code=0x7ffc0000 [ 648.039217][ T28] audit: type=1326 audit(1790242586.241:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9734 comm="syz.8.730" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7ffb12b9df87 code=0x7ffc0000 [ 648.168257][ T28] audit: type=1326 audit(1790242586.241:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9734 comm="syz.8.730" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ffb12b5e98e code=0x7ffc0000 [ 649.805147][ T5786] Bluetooth: hci0: unexpected event for opcode 0x080b [ 652.619607][ T9763] loop8: detected capacity change from 0 to 1024 [ 652.657487][ T9763] EXT4-fs: Ignoring removed bh option [ 652.767185][ T9763] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 ro without journal. Quota mode: none. [ 652.917976][ T9763] EXT4-fs (loop8): re-mounted 00000000-0000-0006-0000-000000000000 r/w. [ 652.977788][ T9763] ext4 filesystem being remounted at /97/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 653.253466][ T7677] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 653.348256][ T9772] loop7: detected capacity change from 0 to 256 [ 653.488833][ T9772] exfat: Deprecated parameter 'namecase' [ 653.552777][ T9772] exfat: Deprecated parameter 'namecase' [ 653.714386][ T9772] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 654.393942][ T9783] loop5: detected capacity change from 0 to 128 [ 654.569001][ T9783] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 654.665907][ T9783] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 655.541252][ T9783] ext2 filesystem being mounted at /171/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 655.779636][ T9783] EXT4-fs error (device loop5): htree_dirblock_to_tree:1112: inode #2: block 4: comm syz.5.747: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1 [ 656.200590][ T5939] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 656.450064][ T9794] loop5: detected capacity change from 0 to 128 [ 656.560386][ T9794] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 656.569103][ T9793] loop7: detected capacity change from 0 to 1024 [ 656.659352][ T9794] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 656.678214][ T9793] EXT4-fs: Ignoring removed bh option [ 656.756602][ T9794] ext2 filesystem being mounted at /172/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 656.927183][ T9793] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 ro without journal. Quota mode: none. [ 657.266237][ T9793] EXT4-fs (loop7): re-mounted 00000000-0000-0006-0000-000000000000 r/w. [ 657.294933][ T9793] ext4 filesystem being remounted at /136/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 657.356912][ T5939] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 657.715822][ T6913] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 659.044950][ T8] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 659.364390][ T8] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 659.404095][ T9817] loop5: detected capacity change from 0 to 256 [ 659.437857][ T8] usb 7-1: config 0 has no interfaces? [ 659.476685][ T9817] exfat: Deprecated parameter 'namecase' [ 659.525933][ T9817] exfat: Deprecated parameter 'namecase' [ 659.579801][ T8] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 659.647486][ T9817] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 659.669616][ T8] usb 7-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 659.736804][ T8] usb 7-1: Product: syz [ 659.741150][ T8] usb 7-1: Manufacturer: syz [ 659.833058][ T8] usb 7-1: config 0 descriptor?? [ 661.418706][ T5816] usb 7-1: USB disconnect, device number 4 [ 662.450080][ T9840] loop5: detected capacity change from 0 to 512 [ 662.505646][ T9840] EXT4-fs (loop5): Test dummy encryption mode enabled [ 662.512585][ T9840] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 662.597604][ T9840] EXT4-fs (loop5): 1 truncate cleaned up [ 662.604225][ T9840] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 662.931642][ T9844] loop7: detected capacity change from 0 to 256 [ 663.002885][ T9844] exfat: Deprecated parameter 'namecase' [ 663.070623][ T9844] exfat: Deprecated parameter 'namecase' [ 663.139174][ T9844] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 664.733187][ T5939] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 667.005510][ T9874] loop7: detected capacity change from 0 to 256 [ 667.034469][ T9874] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 668.220601][ T9881] loop7: detected capacity change from 0 to 512 [ 668.995139][ T9884] Device name cannot be null; rc = [-22] [ 669.367737][ T9881] EXT4-fs (loop7): Test dummy encryption mode enabled [ 669.464957][ T9881] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 669.563685][ T9881] EXT4-fs (loop7): 1 truncate cleaned up [ 669.635955][ T9881] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 669.700710][ T9889] loop8: detected capacity change from 0 to 256 [ 669.856808][ T9889] exfat: Deprecated parameter 'namecase' [ 669.925731][ T6913] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 669.963449][ T9889] exfat: Deprecated parameter 'namecase' [ 671.034399][ T9897] loop6: detected capacity change from 0 to 1024 [ 671.324682][ T9897] hfsplus: request for non-existent node 33554434 in B*Tree [ 671.405676][ T9897] hfsplus: request for non-existent node 33554434 in B*Tree [ 671.440752][ T9897] hfsplus: request for non-existent node 33554434 in B*Tree [ 671.451872][ T9889] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 671.489249][ T9897] hfsplus: request for non-existent node 33554434 in B*Tree [ 671.539457][ T9897] hfsplus: request for non-existent node 33554434 in B*Tree [ 671.577040][ T9897] hfsplus: request for non-existent node 33554434 in B*Tree [ 673.685293][ T5816] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 673.926021][ T5816] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 673.987342][ T5816] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 674.078096][ T5816] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 674.127906][ T5816] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 674.184138][ T5816] usb 7-1: SerialNumber: syz [ 674.927497][ T9921] loop8: detected capacity change from 0 to 512 [ 675.011813][ T9924] loop5: detected capacity change from 0 to 512 [ 675.047913][ T5816] usb 7-1: bad CDC descriptors [ 675.128851][ T9924] EXT4-fs (loop5): Test dummy encryption mode enabled [ 675.137425][ T5816] usb 7-1: USB disconnect, device number 5 [ 675.209212][ T9924] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 675.221939][ T9927] loop6: detected capacity change from 0 to 128 [ 675.258812][ T9921] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 675.316838][ T9927] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 675.368400][ T9924] EXT4-fs (loop5): 1 truncate cleaned up [ 675.397158][ T9927] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 675.413817][ T9924] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 675.526443][ T9927] ext2 filesystem being mounted at /187/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 675.810813][ T7677] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 675.859970][ T9927] EXT4-fs error (device loop6): htree_dirblock_to_tree:1112: inode #2: block 4: comm syz.6.788: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1 [ 675.910884][ T5939] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 676.314982][ T5983] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 677.699416][ T9947] loop6: detected capacity change from 0 to 256 [ 677.729829][ T9947] exfat: Deprecated parameter 'namecase' [ 677.775758][ T9947] exfat: Deprecated parameter 'namecase' [ 677.825892][ T9947] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 680.250641][ T9963] loop6: detected capacity change from 0 to 512 [ 680.298830][ T9963] EXT4-fs (loop6): Test dummy encryption mode enabled [ 680.356911][ T9963] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 680.440320][ T9963] EXT4-fs (loop6): 1 truncate cleaned up [ 680.469440][ T9963] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 680.809616][ T9967] loop7: detected capacity change from 0 to 128 [ 680.849420][ T9967] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 680.902225][ T9967] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 680.958884][ T9967] ext2 filesystem being mounted at /153/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 681.078749][ T5983] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 681.206769][ T9967] EXT4-fs error (device loop7): htree_dirblock_to_tree:1112: inode #2: block 4: comm syz.7.800: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1 [ 681.468883][ T6913] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 682.231835][ T9378] Bluetooth: hci2: command 0x0406 tx timeout [ 682.845829][ T9988] loop7: detected capacity change from 0 to 256 [ 682.886282][ T9988] exfat: Deprecated parameter 'namecase' [ 683.015880][ T9988] exfat: Deprecated parameter 'namecase' [ 683.143219][ T9988] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 684.205718][ T9378] Bluetooth: hci1: unexpected event for opcode 0x0c0d [ 684.219336][T10005] loop6: detected capacity change from 0 to 512 [ 684.315622][T10005] EXT4-fs error (device loop6): ext4_orphan_get:1408: inode #15: comm syz.6.810: iget: bad i_size value: 38620345925642 [ 684.423435][T10005] EXT4-fs error (device loop6): ext4_orphan_get:1413: comm syz.6.810: couldn't read orphan inode 15 (err -117) [ 684.474925][ T5816] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 684.503892][T10005] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 684.709156][ T5816] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 684.730483][ T5816] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 684.774680][ T5816] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 684.800808][ T5816] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 684.834915][ T5816] usb 6-1: SerialNumber: syz [ 685.188005][ T5983] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 685.603114][T10022] loop7: detected capacity change from 0 to 1024 [ 685.671791][ T5816] usb 6-1: bad CDC descriptors [ 685.730242][T10022] EXT4-fs: Ignoring removed bh option [ 685.745184][ T5816] usb 6-1: USB disconnect, device number 7 [ 685.761999][T10025] loop6: detected capacity change from 0 to 256 [ 685.814181][T10025] exfat: Deprecated parameter 'namecase' [ 685.839521][T10021] loop8: detected capacity change from 0 to 1024 [ 685.858992][T10022] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 ro without journal. Quota mode: none. [ 685.888693][T10025] exfat: Deprecated parameter 'namecase' [ 685.953080][T10025] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 686.024020][T10027] loop5: detected capacity change from 0 to 764 [ 686.126722][T10022] EXT4-fs (loop7): re-mounted 00000000-0000-0006-0000-000000000000 r/w. [ 686.333271][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.341272][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.363768][T10022] ext4 filesystem being remounted at /158/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 686.989834][ T6913] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 688.505672][ T8] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 688.625013][ T5816] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 688.734920][ T8] usb 7-1: Using ep0 maxpacket: 16 [ 688.765284][ T8] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 688.806352][ T8] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 688.832971][ T5816] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 688.862284][ T5816] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 688.887519][ T8] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 688.922902][ T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 688.935206][ T5816] usb 6-1: config 0 interface 0 has no altsetting 0 [ 688.967725][ T5816] usb 6-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 688.979105][ T8] usb 7-1: config 0 descriptor?? [ 689.017664][ T5816] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.082517][ T5816] usb 6-1: config 0 descriptor?? [ 689.411660][ T8] microsoft 0003:045E:07DA.0001: ignoring exceeding usage max [ 689.511703][ T8] HID 045e:07da: Invalid code 65791 type 1 [ 689.539092][ T8] HID 045e:07da: Invalid code 768 type 1 [ 689.586201][ T8] HID 045e:07da: Invalid code 769 type 1 [ 689.622476][ T8] HID 045e:07da: Invalid code 770 type 1 [ 689.633281][ T5816] hid-multitouch 0003:0EEF:72C4.0002: hidraw0: USB HID v0.00 Device [HID 0eef:72c4] on usb-dummy_hcd.5-1/input0 [ 689.678442][ T8] HID 045e:07da: Invalid code 771 type 1 [ 689.749283][ T8] HID 045e:07da: Invalid code 772 type 1 [ 689.780917][ T8] HID 045e:07da: Invalid code 773 type 1 [ 689.822507][ T8] HID 045e:07da: Invalid code 774 type 1 [ 689.857817][ T8] HID 045e:07da: Invalid code 775 type 1 [ 689.900825][ T8] HID 045e:07da: Invalid code 776 type 1 [ 689.926888][ T5816] usb 6-1: USB disconnect, device number 8 [ 690.044254][T10051] fido_id[10051]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 690.076386][ T8] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.0001/input/input6 [ 690.260575][ T8] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 690.423329][ T8] usb 7-1: USB disconnect, device number 6 [ 690.664051][T10057] fido_id[10057]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 691.878145][T10068] loop8: detected capacity change from 0 to 1024 [ 695.186915][T10073] loop8: detected capacity change from 0 to 8 [ 695.267523][T10073] SQUASHFS error: Unknown inode type 0 in squashfs_iget! [ 697.125675][T10086] netlink: 168 bytes leftover after parsing attributes in process `syz.6.836'. [ 702.283140][T10102] loop5: detected capacity change from 0 to 764 [ 702.768838][T10108] loop8: detected capacity change from 0 to 128 [ 703.131722][T10108] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 703.238824][T10108] ext4 filesystem being mounted at /121/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 703.700872][ T7677] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 703.726864][T10122] loop7: detected capacity change from 0 to 1024 [ 703.753907][T10122] EXT4-fs: Ignoring removed bh option [ 703.837957][T10122] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 ro without journal. Quota mode: none. [ 704.044333][ T6913] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 704.082006][T10127] loop8: detected capacity change from 0 to 4096 [ 704.177460][T10127] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 707.990609][T10138] loop5: detected capacity change from 0 to 512 [ 708.045202][T10127] syz.8.846 (pid 10127) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 708.090455][T10138] EXT4-fs: Ignoring removed mblk_io_submit option [ 708.202782][T10138] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 708.324508][T10127] fs-verity: sha256 using implementation "sha256-avx2" [ 708.386266][T10138] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 708.423758][T10127] fs-verity (loop8, inode 15): fs-verity keyring is empty, rejecting signed file! [ 708.462922][T10138] EXT4-fs (loop5): orphan cleanup on readonly fs [ 708.492934][T10138] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:478: comm syz.5.848: Invalid block bitmap block 0 in block_group 0 [ 708.582820][ T7677] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 708.592942][T10138] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:478: comm syz.5.848: Invalid block bitmap block 0 in block_group 0 [ 708.690024][T10138] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:478: comm syz.5.848: Invalid block bitmap block 0 in block_group 0 [ 708.789269][T10138] __quota_error: 21 callbacks suppressed [ 708.789281][T10138] Quota error (device loop5): write_blk: dquota write failed [ 708.868041][T10138] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 708.927927][T10138] EXT4-fs error (device loop5): ext4_acquire_dquot:6953: comm syz.5.848: Failed to acquire dquot type 1 [ 708.961406][T10138] EXT4-fs (loop5): 1 orphan inode deleted [ 708.975199][ T1091] Quota error (device loop5): do_check_range: Getting block 0 out of range 1-5 [ 708.998354][ T1091] EXT4-fs error (device loop5): ext4_release_dquot:6989: comm kworker/u4:7: Failed to release dquot type 1 [ 709.036856][T10156] loop8: detected capacity change from 0 to 512 [ 709.058515][T10138] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 709.096358][T10156] EXT4-fs (loop8): Test dummy encryption mode enabled [ 709.124869][T10156] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 709.237070][T10156] EXT4-fs (loop8): 1 truncate cleaned up [ 709.264147][T10156] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 709.304531][ T5939] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 709.831938][ T7677] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 715.013169][T10185] loop5: detected capacity change from 0 to 256 [ 715.063691][T10185] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 715.409949][T10187] 9pnet_fd: Insufficient options for proto=fd [ 715.719128][T10191] loop7: detected capacity change from 0 to 512 [ 715.801844][T10191] EXT4-fs (loop7): Test dummy encryption mode enabled [ 715.849901][T10191] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 715.935623][T10191] EXT4-fs (loop7): 1 truncate cleaned up [ 715.984376][T10191] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 716.462299][T10204] loop5: detected capacity change from 0 to 256 [ 716.488671][ T6913] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 716.511376][T10204] exfat: Deprecated parameter 'namecase' [ 716.561671][T10204] exfat: Deprecated parameter 'namecase' [ 716.722332][T10204] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 718.298827][T10210] loop7: detected capacity change from 0 to 764 [ 719.090911][T10223] loop5: detected capacity change from 0 to 256 [ 719.103041][T10223] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 720.156307][T10240] loop7: detected capacity change from 0 to 128 [ 720.213745][T10240] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 720.307113][T10240] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 720.378175][T10240] ext2 filesystem being mounted at /170/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 720.505112][ T5764] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 721.086323][ T5764] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 721.130244][ T5764] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 721.184388][ T6913] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 721.205376][ T5764] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 721.249267][ T5764] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 721.311232][ T5764] usb 6-1: SerialNumber: syz [ 721.935312][T10263] loop7: detected capacity change from 0 to 256 [ 721.977295][T10263] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 722.542897][ T5764] usb 6-1: bad CDC descriptors [ 722.638361][ T5764] usb 6-1: USB disconnect, device number 9 [ 722.888545][T10271] loop5: detected capacity change from 0 to 764 [ 723.727776][T10282] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 723.892378][T10284] loop8: detected capacity change from 0 to 128 [ 723.920235][T10284] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 723.977870][T10284] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 724.034046][T10284] ext2 filesystem being mounted at /130/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 725.626205][T10284] EXT4-fs error (device loop8): htree_dirblock_to_tree:1112: inode #2: block 4: comm syz.8.895: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1 [ 726.333575][ T7677] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 726.692287][T10303] loop8: detected capacity change from 0 to 256 [ 726.776067][T10303] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 729.065102][ T8] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 729.316196][ T8] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 729.405853][ T8] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 729.509159][ T8] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 729.565548][ T8] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 729.604862][ T8] usb 8-1: SerialNumber: syz [ 730.384278][T10329] netlink: 8 bytes leftover after parsing attributes in process `syz.5.907'. [ 730.445231][ T8] usb 8-1: bad CDC descriptors [ 731.472236][ T8] usb 8-1: USB disconnect, device number 6 [ 731.844183][T10339] loop5: detected capacity change from 0 to 256 [ 731.940267][T10340] loop7: detected capacity change from 0 to 256 [ 731.958975][T10340] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 732.271595][T10339] exfat: Deprecated parameter 'namecase' [ 732.320524][T10339] exfat: Deprecated parameter 'namecase' [ 732.416636][T10339] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 735.410071][T10359] binder: BINDER_SET_CONTEXT_MGR already set [ 735.435454][T10359] binder: 10358:10359 ioctl 4018620d 200000004a80 returned -16 [ 736.014885][ T8] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 736.278390][ T8] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 736.480500][ T8] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 737.537967][ T8] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 737.612034][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 738.382604][T10373] FAULT_INJECTION: forcing a failure. [ 738.382604][T10373] name failslab, interval 1, probability 0, space 0, times 0 [ 738.395369][T10373] CPU: 0 PID: 10373 Comm: syz.6.914 Not tainted syzkaller #0 [ 738.402762][T10373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 738.412950][T10373] Call Trace: [ 738.416246][T10373] [ 738.419188][T10373] dump_stack_lvl+0x18c/0x250 [ 738.423896][T10373] ? show_regs_print_info+0x20/0x20 [ 738.429120][T10373] ? load_image+0x420/0x420 [ 738.433637][T10373] ? __lock_acquire+0x7d80/0x7d80 [ 738.438769][T10373] should_fail_ex+0x394/0x4c0 [ 738.443485][T10373] should_failslab+0x9/0x20 [ 738.448023][T10373] slab_pre_alloc_hook+0x59/0x300 [ 738.453161][T10373] kmem_cache_alloc_lru+0x4d/0x2b0 [ 738.458294][T10373] ? sock_alloc_inode+0x28/0xc0 [ 738.463180][T10373] sock_alloc_inode+0x28/0xc0 [ 738.467891][T10373] ? sockfs_init_fs_context+0xb0/0xb0 [ 738.473276][T10373] new_inode_pseudo+0x63/0x1d0 [ 738.478060][T10373] __sock_create+0x12d/0x940 [ 738.482683][T10373] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 738.488681][T10373] __sys_socket+0xd7/0x1b0 [ 738.493115][T10373] __x64_sys_socket+0x7a/0x90 [ 738.497994][T10373] do_syscall_64+0x55/0xb0 [ 738.502444][T10373] ? clear_bhb_loop+0x40/0x90 [ 738.507415][T10373] ? clear_bhb_loop+0x40/0x90 [ 738.512145][T10373] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 738.518090][T10373] RIP: 0033:0x7f9361b9e159 [ 738.522522][T10373] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 738.542598][T10373] RSP: 002b:00007f9362ae8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 738.551034][T10373] RAX: ffffffffffffffda RBX: 00007f9361e25fa0 RCX: 00007f9361b9e159 [ 738.559017][T10373] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 738.567276][T10373] RBP: 00007f9361c3506b R08: 0000000000000000 R09: 0000000000000000 [ 738.575457][T10373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 738.583637][T10373] R13: 00007f9361e26038 R14: 00007f9361e25fa0 R15: 00007fff88a8da38 [ 738.591661][T10373] [ 738.597138][T10373] socket: no more sockets [ 738.677535][ T8] usb 6-1: SerialNumber: syz [ 738.763278][ T8] usb 6-1: can't set config #1, error -71 [ 738.815009][ T8] usb 6-1: USB disconnect, device number 10 [ 738.990333][T10379] loop5: detected capacity change from 0 to 256 [ 739.095249][T10378] loop7: detected capacity change from 0 to 256 [ 739.142168][T10379] exfat: Deprecated parameter 'namecase' [ 739.166977][T10378] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 739.502243][T10379] exfat: Deprecated parameter 'namecase' [ 739.603999][T10379] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 743.090784][T10402] FAULT_INJECTION: forcing a failure. [ 743.090784][T10402] name failslab, interval 1, probability 0, space 0, times 0 [ 743.103619][T10402] CPU: 0 PID: 10402 Comm: syz.7.928 Not tainted syzkaller #0 [ 743.111009][T10402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 743.121316][T10402] Call Trace: [ 743.124613][T10402] [ 743.127562][T10402] dump_stack_lvl+0x18c/0x250 [ 743.132266][T10402] ? show_regs_print_info+0x20/0x20 [ 743.137484][T10402] ? load_image+0x420/0x420 [ 743.142027][T10402] ? __lock_acquire+0x7d80/0x7d80 [ 743.147092][T10402] should_fail_ex+0x394/0x4c0 [ 743.151829][T10402] should_failslab+0x9/0x20 [ 743.156395][T10402] slab_pre_alloc_hook+0x59/0x300 [ 743.161476][T10402] kmem_cache_alloc_lru+0x4d/0x2b0 [ 743.166658][T10402] ? sock_alloc_inode+0x28/0xc0 [ 743.171565][T10402] sock_alloc_inode+0x28/0xc0 [ 743.176268][T10402] ? sockfs_init_fs_context+0xb0/0xb0 [ 743.181692][T10402] new_inode_pseudo+0x63/0x1d0 [ 743.186487][T10402] __sock_create+0x12d/0x940 [ 743.191174][T10402] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 743.197467][T10402] __sys_socket+0xd7/0x1b0 [ 743.201917][T10402] __x64_sys_socket+0x7a/0x90 [ 743.206617][T10402] do_syscall_64+0x55/0xb0 [ 743.211059][T10402] ? clear_bhb_loop+0x40/0x90 [ 743.215773][T10402] ? clear_bhb_loop+0x40/0x90 [ 743.220483][T10402] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 743.226412][T10402] RIP: 0033:0x7f25fcd9e159 [ 743.230845][T10402] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 743.250477][T10402] RSP: 002b:00007f25fdce9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 743.258932][T10402] RAX: ffffffffffffffda RBX: 00007f25fd025fa0 RCX: 00007f25fcd9e159 [ 743.266931][T10402] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 743.274928][T10402] RBP: 00007f25fce3506b R08: 0000000000000000 R09: 0000000000000000 [ 743.282916][T10402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 743.290899][T10402] R13: 00007f25fd026038 R14: 00007f25fd025fa0 R15: 00007ffd7b97b0f8 [ 743.298897][T10402] [ 743.303383][T10402] socket: no more sockets [ 745.665344][T10415] 9pnet_fd: Insufficient options for proto=fd [ 745.706018][T10414] loop5: detected capacity change from 0 to 256 [ 745.834666][T10414] exfat: Deprecated parameter 'namecase' [ 745.840767][T10414] exfat: Deprecated parameter 'namecase' [ 746.042453][T10414] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 747.884373][T10428] FAULT_INJECTION: forcing a failure. [ 747.884373][T10428] name failslab, interval 1, probability 0, space 0, times 0 [ 747.897212][T10428] CPU: 0 PID: 10428 Comm: syz.5.937 Not tainted syzkaller #0 [ 747.904736][T10428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 747.914920][T10428] Call Trace: [ 747.918287][T10428] [ 747.921240][T10428] dump_stack_lvl+0x18c/0x250 [ 747.926336][T10428] ? show_regs_print_info+0x20/0x20 [ 747.931655][T10428] ? load_image+0x420/0x420 [ 747.936182][T10428] ? __lock_acquire+0x7d80/0x7d80 [ 747.941680][T10428] should_fail_ex+0x394/0x4c0 [ 747.947312][T10428] should_failslab+0x9/0x20 [ 747.951880][T10428] slab_pre_alloc_hook+0x59/0x300 [ 747.956947][T10428] kmem_cache_alloc_lru+0x4d/0x2b0 [ 747.962201][T10428] ? sock_alloc_inode+0x28/0xc0 [ 747.967172][T10428] sock_alloc_inode+0x28/0xc0 [ 747.971985][T10428] ? sockfs_init_fs_context+0xb0/0xb0 [ 747.977389][T10428] new_inode_pseudo+0x63/0x1d0 [ 747.982436][T10428] __sock_create+0x12d/0x940 [ 747.987210][T10428] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 747.993230][T10428] __sys_socket+0xd7/0x1b0 [ 747.997748][T10428] __x64_sys_socket+0x7a/0x90 [ 748.002458][T10428] do_syscall_64+0x55/0xb0 [ 748.006897][T10428] ? clear_bhb_loop+0x40/0x90 [ 748.011633][T10428] ? clear_bhb_loop+0x40/0x90 [ 748.016780][T10428] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 748.022731][T10428] RIP: 0033:0x7f91b499e159 [ 748.027252][T10428] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 748.046879][T10428] RSP: 002b:00007f91b5948028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 748.055416][T10428] RAX: ffffffffffffffda RBX: 00007f91b4c25fa0 RCX: 00007f91b499e159 [ 748.063686][T10428] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 748.071672][T10428] RBP: 00007f91b4a3506b R08: 0000000000000000 R09: 0000000000000000 [ 748.079751][T10428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 748.087763][T10428] R13: 00007f91b4c26038 R14: 00007f91b4c25fa0 R15: 00007ffc51a1a378 [ 748.095798][T10428] [ 748.100273][T10428] socket: no more sockets [ 748.118671][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 748.126091][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 753.434110][ T5833] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 753.686853][ T5833] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 753.789231][ T5833] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 753.866859][ T5833] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 753.933746][ T5833] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 753.977493][ T5833] usb 8-1: SerialNumber: syz [ 754.928199][ T5833] usb 8-1: bad CDC descriptors [ 754.959563][ T5833] usb 8-1: USB disconnect, device number 7 [ 756.731581][T10459] loop5: detected capacity change from 0 to 128 [ 756.777126][T10459] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 756.884406][T10459] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 756.979330][T10459] ext2 filesystem being mounted at /225/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 757.207750][T10459] EXT4-fs error (device loop5): htree_dirblock_to_tree:1112: inode #2: block 4: comm syz.5.941: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1 [ 757.572637][ T5939] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 757.793704][T10466] loop7: detected capacity change from 0 to 256 [ 757.833437][T10466] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 759.588822][T10473] loop5: detected capacity change from 0 to 764 [ 762.794146][T10495] netlink: 72 bytes leftover after parsing attributes in process `syz.7.957'. [ 763.267955][T10499] loop7: detected capacity change from 0 to 764 [ 764.544903][ T5806] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 764.757005][ T5806] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 765.928388][ T5806] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 766.035551][ T5806] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 766.104945][ T5806] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 766.154806][ T5806] usb 6-1: SerialNumber: syz [ 766.311973][ T5806] usb 6-1: bad CDC descriptors [ 766.384821][ T5806] usb 6-1: USB disconnect, device number 11 [ 769.666629][T10539] loop5: detected capacity change from 0 to 256 [ 769.686932][T10540] netlink: 72 bytes leftover after parsing attributes in process `syz.6.967'. [ 769.737966][T10539] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 772.614282][T10566] netlink: 72 bytes leftover after parsing attributes in process `syz.6.976'. [ 773.157194][T10571] loop8: detected capacity change from 0 to 764 [ 775.015994][T10580] loop7: detected capacity change from 0 to 764 [ 777.468800][T10600] netlink: 72 bytes leftover after parsing attributes in process `syz.5.986'. [ 782.016441][T10626] Bluetooth: hci0: unsupported parameter 255 [ 782.065370][T10626] Bluetooth: hci0: unsupported parameter 255 [ 782.295333][T10628] netlink: 72 bytes leftover after parsing attributes in process `syz.6.995'. [ 784.754589][T10647] loop5: detected capacity change from 0 to 764 [ 785.144005][T10655] loop8: detected capacity change from 0 to 256 [ 785.394996][T10655] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 786.982450][ T28] audit: type=1800 audit(1790242726.301:179): pid=10655 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.999" name="file1" dev="loop8" ino=1048714 res=0 errno=0 [ 787.548891][T10664] netlink: 72 bytes leftover after parsing attributes in process `syz.8.1004'. [ 788.786517][T10675] binder: 10674:10675 ioctl 4018620d 0 returned -22 [ 788.845667][T10675] binder: 10674:10675 ioctl c0306201 200000000080 returned -14 [ 794.824255][T10727] loop5: detected capacity change from 0 to 256 [ 795.076480][T10725] loop7: detected capacity change from 0 to 764 [ 795.149452][T10727] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 796.618283][ T28] audit: type=1800 audit(1790242735.941:180): pid=10722 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1013" name="file1" dev="loop5" ino=1048716 res=0 errno=0 [ 798.114799][ T8] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 798.376870][ T8] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 799.575639][ T8] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 799.652235][ T8] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 799.738509][ T8] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 799.787912][ T8] usb 8-1: SerialNumber: syz [ 801.342352][ T8] usb 8-1: bad CDC descriptors [ 801.447076][ T8] usb 8-1: USB disconnect, device number 8 [ 801.592580][T10766] loop5: detected capacity change from 0 to 764 [ 802.793344][T10782] binder: BINDER_SET_CONTEXT_MGR already set [ 802.807893][T10782] binder: 10781:10782 ioctl 4018620d 200000004a80 returned -16 [ 803.086333][T10785] 9pnet_fd: Insufficient options for proto=fd [ 806.615688][T10800] loop8: detected capacity change from 0 to 256 [ 806.658793][T10800] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 807.784923][ T5764] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 809.117530][ T5764] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 809.149768][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.157020][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.226809][ T5764] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 809.305341][ T5764] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 809.314453][ T5764] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 809.337166][T10811] loop8: detected capacity change from 0 to 128 [ 809.406237][T10811] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 809.453043][ T5764] usb 8-1: SerialNumber: syz [ 809.532562][T10811] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 809.614083][T10811] ext2 filesystem being mounted at /155/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 811.095737][ T5764] usb 8-1: bad CDC descriptors [ 811.175009][ T5764] usb 8-1: USB disconnect, device number 9 [ 811.385576][ T7677] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 811.555212][T10820] binder: BINDER_SET_CONTEXT_MGR already set [ 811.561272][T10820] binder: 10819:10820 ioctl 4018620d 200000004a80 returned -16 [ 813.981776][T10835] loop5: detected capacity change from 0 to 764 [ 819.594195][T10861] loop8: detected capacity change from 0 to 764 [ 821.397424][ T8] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 821.606589][ T8] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 821.664926][ T8] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 821.751127][ T8] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 821.790805][ T8] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 821.831398][ T8] usb 8-1: SerialNumber: syz [ 823.235679][ T8] usb 8-1: bad CDC descriptors [ 823.296093][ T8] usb 8-1: USB disconnect, device number 10 [ 826.591719][T10897] loop8: detected capacity change from 0 to 764 [ 827.978331][T10904] FAULT_INJECTION: forcing a failure. [ 827.978331][T10904] name failslab, interval 1, probability 0, space 0, times 0 [ 827.991225][T10904] CPU: 0 PID: 10904 Comm: syz.5.1069 Not tainted syzkaller #0 [ 827.998736][T10904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 828.009161][T10904] Call Trace: [ 828.012550][T10904] [ 828.015493][T10904] dump_stack_lvl+0x18c/0x250 [ 828.020311][T10904] ? show_regs_print_info+0x20/0x20 [ 828.025663][T10904] ? load_image+0x420/0x420 [ 828.030241][T10904] ? __lock_acquire+0x7d80/0x7d80 [ 828.035305][T10904] should_fail_ex+0x394/0x4c0 [ 828.040025][T10904] should_failslab+0x9/0x20 [ 828.044555][T10904] slab_pre_alloc_hook+0x59/0x300 [ 828.049641][T10904] kmem_cache_alloc_lru+0x4d/0x2b0 [ 828.054805][T10904] ? sock_alloc_inode+0x28/0xc0 [ 828.059714][T10904] sock_alloc_inode+0x28/0xc0 [ 828.064431][T10904] ? sockfs_init_fs_context+0xb0/0xb0 [ 828.069864][T10904] new_inode_pseudo+0x63/0x1d0 [ 828.074666][T10904] __sock_create+0x12d/0x940 [ 828.079281][T10904] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 828.085300][T10904] __sys_socket+0xd7/0x1b0 [ 828.089876][T10904] __x64_sys_socket+0x7a/0x90 [ 828.094961][T10904] do_syscall_64+0x55/0xb0 [ 828.099414][T10904] ? clear_bhb_loop+0x40/0x90 [ 828.104130][T10904] ? clear_bhb_loop+0x40/0x90 [ 828.108838][T10904] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 828.114770][T10904] RIP: 0033:0x7f91b499e159 [ 828.119510][T10904] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 828.139164][T10904] RSP: 002b:00007f91b5948028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 828.147603][T10904] RAX: ffffffffffffffda RBX: 00007f91b4c25fa0 RCX: 00007f91b499e159 [ 828.155604][T10904] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 828.163585][T10904] RBP: 00007f91b4a3506b R08: 0000000000000000 R09: 0000000000000000 [ 828.171652][T10904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 828.179993][T10904] R13: 00007f91b4c26038 R14: 00007f91b4c25fa0 R15: 00007ffc51a1a378 [ 828.188077][T10904] [ 828.192669][T10904] socket: no more sockets [ 829.394787][ T8] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 829.619131][ T8] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 829.665427][ T8] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 829.716145][ T8] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 829.764872][ T8] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 829.772914][ T8] usb 8-1: SerialNumber: syz [ 831.532202][ T8] usb 8-1: bad CDC descriptors [ 831.579266][ T8] usb 8-1: USB disconnect, device number 11 [ 832.910186][T10928] loop7: detected capacity change from 0 to 764 [ 835.634488][T10967] 9pnet_fd: Insufficient options for proto=fd [ 837.097390][T10975] loop5: detected capacity change from 0 to 128 [ 837.180500][T10976] loop8: detected capacity change from 0 to 764 [ 837.203871][T10975] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 837.259717][T10975] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 837.358553][T10975] ext2 filesystem being mounted at /266/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 837.598007][T10975] EXT4-fs error (device loop5): htree_dirblock_to_tree:1112: inode #2: block 4: comm syz.5.1095: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1 [ 837.948847][ T5939] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 838.506446][T10988] loop7: detected capacity change from 0 to 764 [ 840.274566][T11007] loop8: detected capacity change from 0 to 764 [ 840.697058][T11009] loop7: detected capacity change from 0 to 128 [ 840.777784][T11009] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 840.877092][T11009] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 840.948922][T11009] ext2 filesystem being mounted at /227/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 841.163039][T11009] EXT4-fs error (device loop7): htree_dirblock_to_tree:1112: inode #2: block 4: comm syz.7.1108: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1 [ 841.457325][ T6913] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 841.529492][T11022] loop8: detected capacity change from 0 to 128 [ 841.588958][T11022] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 841.636533][T11022] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 841.728024][T11022] ext2 filesystem being mounted at /176/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 841.954986][ T5816] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 841.991350][ T7677] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 842.147017][ T5816] usb 8-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 842.191835][ T5816] usb 8-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 842.249981][ T5816] usb 8-1: config 0 interface 0 has no altsetting 0 [ 842.292422][ T5816] usb 8-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 843.218793][ T5816] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 843.261780][ T5816] usb 8-1: config 0 descriptor?? [ 948.384609][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 948.391630][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P7677/1:b..l [ 948.399987][ C0] rcu: (detected by 0, t=10502 jiffies, g=64609, q=70 ncpus=1) [ 948.407640][ C0] task:syz-executor state:R running task stack:21800 pid:7677 ppid:7670 flags:0x00004002 [ 948.419513][ C0] Call Trace: [ 948.422828][ C0] [ 948.425776][ C0] __schedule+0x15ae/0x4660 [ 948.430402][ C0] ? deref_stack_reg+0x1ab/0x230 [ 948.435413][ C0] ? asan.module_dtor+0x20/0x20 [ 948.440284][ C0] ? mark_lock+0x94/0x320 [ 948.444896][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 948.450895][ C0] ? preempt_schedule_irq+0xb4/0x150 [ 948.456201][ C0] preempt_schedule_irq+0xbf/0x150 [ 948.461356][ C0] ? preempt_schedule_notrace+0x110/0x110 [ 948.467125][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 948.473210][ C0] irqentry_exit+0x67/0x70 [ 948.477699][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 948.483695][ C0] RIP: 0010:preempt_count_sub+0x65/0x160 [ 948.489649][ C0] Code: ff ff ff 7f 39 cf 7f 25 81 ff ff 00 00 00 0f 93 c1 84 c0 0f 95 c0 08 c8 74 53 65 8b 05 5c bd a6 7e f7 df 65 01 3d 53 bd a6 7e <5b> 5d c3 e8 43 c6 d3 02 85 c0 74 f4 48 c7 c0 30 66 8c 8e 48 c1 e8 [ 948.509542][ C0] RSP: 0018:ffffc9000b3a7360 EFLAGS: 00000297 [ 948.515621][ C0] RAX: 0000000080000001 RBX: dffffc0000000000 RCX: 0000000000000000 [ 948.523623][ C0] RDX: 0000000000000000 RSI: ffffc9000b3a7f10 RDI: 00000000ffffffff [ 948.531600][ C0] RBP: 0000000000000001 R08: ffff8880187a3c00 R09: 0000000000000003 [ 948.539600][ C0] R10: 0000000000000004 R11: 0000000000000000 R12: ffffc9000b3a7f10 [ 948.547766][ C0] R13: ffffc9000b3a7448 R14: ffffc9000b3a7f20 R15: ffffc9000b3a7458 [ 948.555787][ C0] unwind_next_frame+0x1d1b/0x2990 [ 948.560952][ C0] ? __x64_sys_unlink+0x49/0x50 [ 948.566189][ C0] ? __x64_sys_unlink+0x49/0x50 [ 948.572402][ C0] ? stack_trace_save+0x100/0x100 [ 948.577669][ C0] arch_stack_walk+0x144/0x190 [ 948.582467][ C0] ? do_syscall_64+0x55/0xb0 [ 948.587191][ C0] stack_trace_save+0xaa/0x100 [ 948.592367][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 948.598160][ C0] save_stack+0x125/0x230 [ 948.602832][ C0] ? __reset_page_owner+0x190/0x190 [ 948.608444][ C0] ? percpu_ref_put+0x19/0x180 [ 948.613249][ C0] ? free_unref_page_prepare+0x7d7/0x8f0 [ 948.618904][ C0] ? free_unref_page_list+0xbe/0x860 [ 948.624283][ C0] ? release_pages+0x208a/0x2300 [ 948.629252][ C0] ? __folio_batch_release+0x71/0xe0 [ 948.634545][ C0] ? shmem_undo_range+0x5ff/0x1a80 [ 948.639663][ C0] ? shmem_evict_inode+0x285/0xa70 [ 948.645052][ C0] ? evict+0x4b7/0x8a0 [ 948.649128][ C0] ? do_unlinkat+0x38c/0x590 [ 948.653746][ C0] ? __x64_sys_unlink+0x49/0x50 [ 948.658610][ C0] ? page_ext_get+0x22/0x2b0 [ 948.663391][ C0] ? page_ext_get+0x1e2/0x2b0 [ 948.668094][ C0] __reset_page_owner+0x4e/0x190 [ 948.673039][ C0] ? rcu_is_watching+0x15/0xb0 [ 948.677816][ C0] free_unref_page_prepare+0x7d7/0x8f0 [ 948.683287][ C0] free_unref_page_list+0xbe/0x860 [ 948.688419][ C0] ? __folio_memcg+0x63/0x170 [ 948.693110][ C0] ? folio_memcg+0x127/0x4a0 [ 948.697708][ C0] release_pages+0x208a/0x2300 [ 948.702498][ C0] ? lru_cache_disable+0x30/0x30 [ 948.707452][ C0] ? do_raw_spin_unlock+0x121/0x230 [ 948.712690][ C0] __folio_batch_release+0x71/0xe0 [ 948.717828][ C0] shmem_undo_range+0x5ff/0x1a80 [ 948.722885][ C0] ? verify_lock_unused+0x140/0x140 [ 948.728226][ C0] ? shmem_truncate_range+0xa0/0xa0 [ 948.733472][ C0] ? inode_wait_for_writeback+0x1e3/0x230 [ 948.739222][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 948.744259][ C0] ? do_raw_spin_lock+0x11f/0x2b0 [ 948.749302][ C0] shmem_evict_inode+0x285/0xa70 [ 948.754608][ C0] ? inode_wait_for_writeback+0x1e3/0x230 [ 948.760344][ C0] ? shmem_free_in_core_inode+0xb0/0xb0 [ 948.765910][ C0] ? sb_clear_inode_writeback+0x330/0x330 [ 948.771661][ C0] ? do_raw_spin_lock+0x11f/0x2b0 [ 948.776718][ C0] ? bit_waitqueue+0x30/0x30 [ 948.781380][ C0] ? do_raw_spin_unlock+0x121/0x230 [ 948.786607][ C0] ? shmem_free_in_core_inode+0xb0/0xb0 [ 948.792179][ C0] evict+0x4b7/0x8a0 [ 948.796105][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 948.801290][ C0] ? proc_nr_inodes+0x230/0x230 [ 948.806278][ C0] ? do_raw_spin_unlock+0x121/0x230 [ 948.811503][ C0] ? _raw_spin_unlock+0x28/0x40 [ 948.816475][ C0] do_unlinkat+0x38c/0x590 [ 948.820997][ C0] ? fsnotify_link_count+0xf0/0xf0 [ 948.826122][ C0] ? getname_flags+0x20a/0x500 [ 948.830925][ C0] __x64_sys_unlink+0x49/0x50 [ 948.835627][ C0] do_syscall_64+0x55/0xb0 [ 948.840928][ C0] ? clear_bhb_loop+0x40/0x90 [ 948.845795][ C0] ? clear_bhb_loop+0x40/0x90 [ 948.850495][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 948.856494][ C0] RIP: 0033:0x7ffb12b9d247 [ 948.861019][ C0] RSP: 002b:00007ffee2958338 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 948.869465][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ffb12b9d247 [ 948.877495][ C0] RDX: 00007ffee2958360 RSI: 00007ffee29583f0 RDI: 00007ffee29583f0 [ 948.885841][ C0] RBP: 00007ffee29583f0 R08: 00007ffee29593f0 R09: 00000000ffffffff [ 948.893830][ C0] R10: 0000000000000100 R11: 0000000000000206 R12: 00007ffee2959480 [ 948.901810][ C0] R13: 00007ffb12c344bb R14: 00000000000cda2d R15: 00007ffee29594c0 [ 948.909803][ C0] [ 948.912831][ C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g64609 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 948.924030][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 948.934256][ C0] rcu: RCU grace-period kthread stack dump: [ 948.940143][ C0] task:rcu_preempt state:R running task stack:26824 pid:17 ppid:2 flags:0x00004000 [ 948.950932][ C0] Call Trace: [ 948.954227][ C0] [ 948.957173][ C0] __schedule+0x15ae/0x4660 [ 948.961709][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 948.966766][ C0] ? lock_chain_count+0x20/0x20 [ 948.971637][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 948.976848][ C0] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 948.982770][ C0] ? asan.module_dtor+0x20/0x20 [ 948.987641][ C0] ? rcu_is_watching+0x15/0xb0 [ 948.992453][ C0] schedule+0xbd/0x170 [ 948.996659][ C0] schedule_timeout+0x188/0x2d0 [ 949.001569][ C0] ? console_conditional_schedule+0x40/0x40 [ 949.007509][ C0] ? update_process_times+0x1b0/0x1b0 [ 949.014934][ C0] ? prepare_to_swait_event+0x344/0x360 [ 949.020781][ C0] rcu_gp_fqs_loop+0x30d/0x1590 [ 949.025648][ C0] ? rcu_gp_kthread+0x3b0/0x3b0 [ 949.030507][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 949.036514][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 949.041544][ C0] ? rcu_gp_init+0x1530/0x1530 [ 949.046312][ C0] ? rcu_gp_cleanup+0xade/0xc30 [ 949.051196][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 949.056493][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 949.061717][ C0] rcu_gp_kthread+0x9d/0x3b0 [ 949.066315][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 949.071428][ C0] ? __kthread_parkme+0x71/0x1c0 [ 949.076405][ C0] ? __kthread_parkme+0x15b/0x1c0 [ 949.081453][ C0] kthread+0x2fa/0x390 [ 949.085531][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 949.090657][ C0] ? kthread_blkcg+0xd0/0xd0 [ 949.095442][ C0] ret_from_fork+0x48/0x80 [ 949.099871][ C0] ? kthread_blkcg+0xd0/0xd0 [ 949.104475][ C0] ret_from_fork_asm+0x11/0x20 [ 949.109298][ C0] [ 949.112324][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 949.118732][ C0] CPU: 0 PID: 11039 Comm: syz.6.1118 Not tainted syzkaller #0 [ 949.126194][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 949.136962][ C0] RIP: 0010:kasan_check_range+0x12/0x290 [ 949.142642][ C0] Code: 0f 0b b8 ea ff ff ff c3 0f 0b b8 ea ff ff ff c3 cc cc cc cc cc cc cc cc 66 0f 1f 00 b0 01 48 85 f6 0f 84 b4 01 00 00 55 41 57 <41> 56 41 55 41 54 53 4c 8d 04 37 49 39 f8 0f 82 13 02 00 00 49 89 [ 949.162258][ C0] RSP: 0018:ffffc9000b1cf6a8 EFLAGS: 00000202 [ 949.168359][ C0] RAX: ffffffff887dec01 RBX: ffff888026c79000 RCX: ffffffff887dec18 [ 949.176426][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888026c790e4 [ 949.184517][ C0] RBP: 0000000000000002 R08: ffff888026c790e7 R09: 1ffff11004d8f21c [ 949.192494][ C0] R10: dffffc0000000000 R11: ffffed1004d8f21d R12: ffff888026c79000 [ 949.200469][ C0] R13: 1ffff11004d8f208 R14: ffff888026c790e4 R15: dffffc0000000000 [ 949.208458][ C0] FS: 00007f9362ae86c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 949.218352][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 949.225028][ C0] CR2: 00007f9361b872c0 CR3: 0000000064645000 CR4: 00000000003506f0 [ 949.233006][ C0] Call Trace: [ 949.236378][ C0] [ 949.239425][ C0] refcount_dec_and_test+0x18/0x70 [ 949.244868][ C0] consume_skb+0xcf/0x110 [ 949.249211][ C0] unix_stream_read_generic+0xd32/0x1ea0 [ 949.254963][ C0] ? unix_stream_read_actor+0xa0/0xa0 [ 949.260342][ C0] ? wake_bit_function+0x200/0x200 [ 949.265468][ C0] ? aa_sk_perm+0x83c/0x970 [ 949.270010][ C0] unix_stream_recvmsg+0x169/0x1c0 [ 949.275139][ C0] ? unix_stream_sendmsg+0xbf0/0xbf0 [ 949.280873][ C0] ? __lock_acquire+0x1262/0x7d80 [ 949.285925][ C0] ? __unix_stream_recvmsg+0x150/0x150 [ 949.291683][ C0] ? aa_sock_msg_perm+0x94/0x150 [ 949.296657][ C0] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 949.301970][ C0] ? security_socket_recvmsg+0x89/0xb0 [ 949.307464][ C0] ? unix_stream_sendmsg+0xbf0/0xbf0 [ 949.312775][ C0] ____sys_recvmsg+0x2bd/0x5d0 [ 949.318727][ C0] ? __sys_recvmsg_sock+0x50/0x50 [ 949.323786][ C0] ? import_iovec+0x73/0xa0 [ 949.328342][ C0] ___sys_recvmsg+0x214/0x590 [ 949.333040][ C0] ? __sys_recvmsg+0x2a0/0x2a0 [ 949.337816][ C0] ? __seccomp_filter+0x492/0x1ca0 [ 949.342950][ C0] ? __fget_files+0x3fc/0x460 [ 949.347652][ C0] __x64_sys_recvmsg+0x21e/0x2f0 [ 949.352639][ C0] ? ___sys_recvmsg+0x590/0x590 [ 949.357611][ C0] ? __secure_computing+0x111/0x2f0 [ 949.362831][ C0] do_syscall_64+0x55/0xb0 [ 949.367260][ C0] ? clear_bhb_loop+0x40/0x90 [ 949.371950][ C0] ? clear_bhb_loop+0x40/0x90 [ 949.376644][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 949.382560][ C0] RIP: 0033:0x7f9361b9e159 [ 949.387003][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 949.406624][ C0] RSP: 002b:00007f9362ae8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 949.415069][ C0] RAX: ffffffffffffffda RBX: 00007f9361e25fa0 RCX: 00007f9361b9e159 [ 949.423077][ C0] RDX: 0000000040002002 RSI: 0000200000000000 RDI: 0000000000000005 [ 949.431415][ C0] RBP: 00007f9361c3506b R08: 0000000000000000 R09: 0000000000000000 [ 949.439420][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 949.447408][ C0] R13: 00007f9361e26038 R14: 00007f9361e25fa0 R15: 00007fff88a8da38 [ 949.455404][ C0]