last executing test programs: 8m16.539641536s ago: executing program 0 (id=118): socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$loop(0x0, 0xb7c8, 0xa8182) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) io_uring_setup(0xfd2, &(0x7f0000000040)={0x0, 0x366, 0xc000, 0x800c, 0xa0002f5}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/sys/vm/nr_overcommit_hugepages\x00', 0x1, 0x0) write(r4, 0x0, 0x0) socket(0xa, 0x3, 0x87) 8m15.124389311s ago: executing program 0 (id=121): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x15) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)="3900000013000b4700bb65e1c3e4ffff0100000035390000560000022500000019000a00100000ad07fd17e5ffff080c38000000000000000a", 0x39}], 0xc) syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg(r2, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'netpci0\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x107fff, 0x1, 0x4, 0x89, 0x0, 0xffb, 0x7, 0xb6b, 0x0, 0x4, 0x1, 0x3, 0x9, 0x100, 0x1003, 0x2, 0x3, 0x3, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0xa, 0x5, 0x100000, 0x9, 0x3, 0x63c, 0x400010, 0x10001006, 0x2, 0x8, 0x1bf7, 0xb, 0x40, 0xa0d1ae, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x85, 0x79b, 0x3, 0x40001, 0x7f, 0x4, 0x6, 0x9, 0x8001, 0x101, 0xa, 0x1fa0860a, 0x401, 0x100aa, 0x1000, 0x2, 0x0, 0x7, 0x8b, 0x5, 0x2af, 0x9, 0x5, 0x2, 0x1, 0x9, 0x5, 0x7, 0x1, 0x0, 0x4, 0x3, 0x8, 0x6, 0x3, 0x3, 0x480, 0x10000, 0x3f6, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x0, 0x81, 0x100, 0x5f9, 0x252, 0x2f, 0xb, 0x4, 0x9, 0xc50, 0xffffffff, 0xe, 0x2, 0xd9a, 0x3, 0xc102, 0xfffffffd, 0x3, 0x2, 0x8927, 0x8, 0xfe, 0x4, 0x2, 0x40, 0x8, 0x0, 0x5, 0x402, 0x66cd, 0x8000008, 0x8, 0x799e, 0x1fc, 0x1ff, 0xffffffff]}}) r3 = socket(0x2b, 0x1, 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x2000}, [@printk={@p, {0x3, 0x3, 0x6}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8001}, {0x85, 0x0, 0x0, 0xca}}]}, &(0x7f0000000140)='GPL\x00', 0x1, 0x100, &(0x7f0000000440)=""/216}, 0x94) setsockopt$IPT_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b0, 0x0, 0x238, 0x170, 0xd8, 0x0, 0x410, 0x410, 0x410, 0x410, 0x410, 0x6, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0xffffff00, 0x0, 'veth0\x00', 'veth0_to_bridge\x00', {}, {0xff}, 0x62, 0x0, 0x50}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0xb, 0x4, @ipv4=@loopback, 0x4e24}}}, {{@ip={@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000, 0xff, 'geneve0\x00', 'veth1_to_team\x00', {}, {}, 0x89, 0x6, 0x24}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xff, 'ip6_vti0\x00', 'geneve0\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x5}, {0x0, 0x6}}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x31, 0x7, 0x1}}}, {{@ip={@loopback, @multicast1, 0xff, 0xff, 'veth0_to_batadv\x00', 'bridge_slave_0\x00', {0xff}, {0xff}, 0x44, 0x1, 0x15}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x55d, 0x3, @multicast1, 0x4e21}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xcf8a) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="500000002700010000000000000000000a000100000000000000000000000000ac1e", @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x2000c0c0}, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, 0x0, 0x8041) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000d, 0x13, r1, 0x0) 8m8.719244951s ago: executing program 0 (id=133): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r3 = syz_open_pts(r2, 0x200) r4 = dup3(r3, r2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0xff) 7m59.466682268s ago: executing program 0 (id=143): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x204001, &(0x7f0000000040), 0x1, 0xbb0, &(0x7f0000000bc0)="$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") syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x790, &(0x7f0000006a80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x80342, 0x168) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000500), &(0x7f0000000540)=0x4) read$FUSE(0xffffffffffffffff, &(0x7f0000000a80)={0x2020}, 0x2020) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r4, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xff\a\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x5c) timer_create(0x2, 0x0, &(0x7f00000001c0)) timer_gettime(0x0, &(0x7f0000000040)) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0) 7m57.260081415s ago: executing program 0 (id=148): set_mempolicy(0x2, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) set_mempolicy(0x2, &(0x7f00000000c0)=0x20e, 0x7fffffff) syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4008, &(0x7f0000000240)={[{@fat=@errors_remount}, {@numtail}, {@utf8no}, {@fat=@codepage={'codepage', 0x3d, '949'}}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'cp932'}}, {@numtail}, {@shortname_win95}, {@utf8no}, {@shortname_mixed}, {@utf8no}, {@utf8no}]}, 0x81, 0x2f8, &(0x7f0000000580)="$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") r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900), 0x0, 0x0, 0x0, 0x7}, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0xa, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl(0xffffffffffffffff, 0x8b2a, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x568, 0x0, 0x0, 0x428, 0x428, 0x428, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28, 'socket\x00', 0x3}}]}, @common=@unspec=@CONNSECMARK={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c8) socket$netlink(0x10, 0x3, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000200)={0xd, 0x2, 0x0, "bc3d70dde5cabbe40f00f401bb7f00bf170000000200", 0x3136564e}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000002280)={0x2, &(0x7f0000000040)=[{0x48}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_pscan_rep_mode={{0x20, 0x7}, {@none, 0x6}}}, 0xa) 7m52.732316435s ago: executing program 0 (id=156): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x8000) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f00000002c0)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000340)={'a', ' *:* ', 'm\x00'}, 0x8) r6 = openat$cgroup_devices(r4, &(0x7f0000000140)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r6, &(0x7f0000000040)={'c', ' *:* ', 'rwm\x00'}, 0xa) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0xa0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ptrace$peeksig(0x4209, r1, &(0x7f0000000280)={0x1, 0x1, 0x5}, &(0x7f0000000440)=[{}, {}, {}, {}, {}]) socket$nl_generic(0x10, 0x3, 0x10) 7m51.667891832s ago: executing program 32 (id=156): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x8000) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f00000002c0)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000340)={'a', ' *:* ', 'm\x00'}, 0x8) r6 = openat$cgroup_devices(r4, &(0x7f0000000140)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r6, &(0x7f0000000040)={'c', ' *:* ', 'rwm\x00'}, 0xa) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0xa0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ptrace$peeksig(0x4209, r1, &(0x7f0000000280)={0x1, 0x1, 0x5}, &(0x7f0000000440)=[{}, {}, {}, {}, {}]) socket$nl_generic(0x10, 0x3, 0x10) 6m15.338137642s ago: executing program 5 (id=271): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000ffff25bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x4000010}, 0x8000002) accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x6, 0x9, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f40)=ANY=[@ANYBLOB="1c0000004a00152202000000000000000a0000000400e0563985a224d1827e1428a8533da3cbb44d1a30", @ANYRES32=0x0, @ANYBLOB="02000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20080804}, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x9, 0x0, &(0x7f0000000040)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="500000000a0601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r7, 0xc02c563a, &(0x7f0000000f80)={0x0, {0x9a, 0x17, 0x7, 0x6}, {0xf37, 0x2, 0x4, 0x9}, {0x2, 0x100}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x194, 0x0, &(0x7f0000000700)="b461802305624431ed3373010000003d2600906919d5d5fe00c6fc7ef8eef9757a601bee936390009c5bbd000000003632b69f0eb2062818f2980660abbc6f6322cbfac48000d75bfab0cd655ba6f12c02869ec5254594d7d144c39e3200000000d76a6100810800ffff000000000000e6b2347d38650608e39d2f8e612f5787cfb4d8b5808cf339089d46844de51517a756705ab535c084ee3da160dffccccbc132908c2d4588aec206fc5ae73940dfd5387542e810faec0a2bab2619a5fe6137560a30311f9f2624cf08fe6b910ba57ba7d147616e4171dda39c4f5c53be33fc65cdf551d7f35f4b5ce952e9afe51be2affb21872637fc69f502ae580d359e354fc7b3d847e0aae75529322827125c768dd3864745c27922ab3ab830d3c114dc3b3a80e39819460ef63c1a341d5a33ade0749c6dea4d84e2d8c780eb4415be96e5b1e11864782077088534c4a60cc5a68e238ffa59770fc19b1ed25e545ae107cb933ae8e3afcbd5ec28003b20d4c0a8d425d66cd6d208d43d29cbcdfb1cc0ef5f388bacdeed1f13ef597d20539507cf7d5030", 0x0, 0x3f95b0e1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffefffc}, 0x50) syz_open_dev$sg(&(0x7f0000000140), 0x4, 0x3) socket$inet6(0x10, 0x3, 0x3) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x2, 0x300, 0x0, 0x5, 0x0, @dev, @private=0xa010100}, {{0xfffe, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) 6m14.533858177s ago: executing program 5 (id=274): socket$kcm(0x10, 0x2, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000080)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) sendmsg$unix(r3, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x20004044}, 0x20000840) chdir(&(0x7f0000000140)='./file0\x00') r4 = open(&(0x7f0000000040)='./bus\x00', 0x4ca7e, 0x10) fallocate(r4, 0x0, 0x0, 0x1000f4) sendfile(r4, r4, 0x0, 0x40000000800) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) fallocate(r5, 0x100000000000011, 0x2000, 0x2f93) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r6 = syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000009780)='./file1\x00', 0x200c02, &(0x7f0000000280)={[{@nolazytime}]}, 0x0, 0x9764, &(0x7f0000012f40)="$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") ioctl$FS_IOC_GETFSMAP(r6, 0x40285881, &(0x7f0000000000)=ANY=[]) 6m11.325015063s ago: executing program 5 (id=280): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000140), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x10) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x2730, 0x40, 0x2, 0x82}, &(0x7f0000000180)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000240)=0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x34000, 0x0) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f0000000040)={0x30, 0x0}) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x48, 0x0, r0}) r4 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r4, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000340)=[0x0, 0x0], &(0x7f00000003c0), 0x0, 0xd1, &(0x7f0000000400)=[{}, {}], 0x10, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x800ed, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x20, 0x4, 0x0, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, r4}, 0x94) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x121302, 0x0) write$binfmt_register(r7, &(0x7f0000000040)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x0, 0x3a, 'tracefs\x00', 0x3a, '*:@{\':', 0x3a, './trace'}, 0x35) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r8, 0x0, 0x0) 6m9.72242673s ago: executing program 5 (id=282): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000006300)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000390000000000000000000000850000004100000085000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r1, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x0, 0x0, 0x0, @private2, @local}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f0000000880)=ANY=[@ANYBLOB="1802000074040000000000000000000085000000410000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f0000000040)="16ffca0fc6f84423bb8348c99c48", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x801, &(0x7f0000000a80)=ANY=[], 0xfe, 0x185, &(0x7f00000007c0)="$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") chdir(0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r5, 0x11, 0x1, &(0x7f0000000100)=0xdb, 0x4) r6 = socket(0xa, 0x4, 0x3a) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mkdirat(0xffffffffffffff9c, 0x0, 0x51) mount(0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000000c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r8 = openat(0xffffffffffffff9c, 0x0, 0x0, 0xd5) openat$cgroup_ro(r8, 0x0, 0xf000, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, 0x0, 0x0) ioctl$SIOCGETMIFCNT_IN6(r6, 0x89e0, 0x0) llistxattr(0x0, 0x0, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$sock(r9, 0x0, 0x0, 0x40440d1) r10 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r10, 0x0, 0x0) 6m8.772417565s ago: executing program 5 (id=285): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000440)=[&(0x7f0000000400)={0x0, 0x0, 0x0, 0x3, 0x6, r2, &(0x7f0000000300)="a44585e1847122bc646216ac2a9246fcbe90f47d2a14b21e767f75aa22c1426eba6494181c14bf96dfa045cfe43ad570ead3b51960e558b21ae3d8e2ad49478399033b61f98aac8a441bba8ffebbbc035a0d841a0d3427ac6319b886497cf11a45fd39eabe8e8bdb4afcb152d9eebda343c74b6237d8520d7fa975c8be81899eb79f1d6dd7a7b7d83988160526c43251bf2a196fcbfbdff6a95140a3a8abf6c3ff5d4bd41c0352f69f4431bb9aa368db252c9f51a7347b941006bd52ba02a197c34d21916da6417c03e3867a9eeb4d2c556fd78c261cb5f2a721e82e792df8cbaf5a8ad19605c35a29770318d157b44bdfa9559b8c79", 0xf6, 0x1c8}]) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000b00)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xffffffffffffffff}}, './file2\x00'}) r4 = openat$incfs(0xffffffffffffffff, &(0x7f0000000b80)='.pending_reads\x00', 0x1090c1, 0x4) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000bc0)={{{@in6=@dev, @in6=@private1}}, {{@in6=@private2}, 0x0, @in6=@empty}}, &(0x7f0000000cc0)=0xe8) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$unix(r2, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, r3}}}, @rights={{0xb, 0x1, 0x1, [r2]}}, @rights={{0x18, 0x1, 0x1, [r2, r1]}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0x68, 0x20004044}, 0x20000840) chdir(&(0x7f0000000140)='./file0\x00') r5 = open(&(0x7f0000000040)='./bus\x00', 0x4c27e, 0x10) fallocate(r5, 0x0, 0x0, 0x1000f4) sendfile(r5, r5, 0x0, 0x40000000800) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) 6m7.527939427s ago: executing program 5 (id=289): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) close(0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000001280)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, 0x0, 0x0) close(0x3) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) mlockall(0x2) r3 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x39c4, 0x2, 0x3, 0xfffffffe}, &(0x7f0000000580), &(0x7f0000000280), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r3, 0x11, &(0x7f0000000500)='n', 0x1) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r3, 0x13, &(0x7f0000000180)=[0x2, 0x6], 0x2) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r4, 0xc0d05604, &(0x7f0000000d80)={0x2, @pix_mp={0x3ff, 0x11, 0x43564548, 0x1, 0x9, [{0xffffffff, 0x8}, {0x1, 0xc7}, {0x9}, {0x7}, {0xf, 0x4}, {0x1000, 0x5}, {0x6, 0xa4}, {0x2, 0x1}], 0x1, 0xe, 0x7, 0x0, 0x1}}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x110e22ffff, 0x0, 0x0) shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d0009058223"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x6, 0x3, 0x10007e, 0x20000006, 0x53, 0x6, 0x10000, 0x80005, 0x1, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x26, 0xd, 0x1, 0x6, 0x7, 0xe661, 0x4, 0x7, 0x7, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x800080ee, 0xa, 0x17, 0x92c, 0x9, 0x200, 0x3e, 0x8c, 0x6, 0xca9, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x8445, 0x6, 0x5, 0x1, 0x200], [0x1000000b, 0x9, 0x80000130, 0x8004, 0x5, 0xfffffff3, 0x2, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x4, 0x0, 0x0, 0x5, 0x42f, 0xe, 0x312, 0x78, 0x1, 0x1e, 0x4, 0x7, 0x7fff, 0x6, 0x4400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x101, 0x1, 0x4, 0xffff80f1, 0x1, 0x6, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0xfffffe01, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93695, 0x43, 0x9], [0x7, 0xa, 0x4, 0x8005, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x5, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x5, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x11, 0x800003, 0x200, 0x400080, 0x3, 0x4, 0x2950bfaf, 0x2, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x21c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x24], [0x9, 0x40bb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xbb, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x1, 0x6, 0x96, 0xffffffff, 0x80000001, 0x7, 0x4, 0xc8, 0x1, 0xfffff000, 0x4010080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d69b, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x928, 0xb1e, 0xc7, 0x200, 0xffff2441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r5 = socket(0x2, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) 6m5.085024974s ago: executing program 33 (id=289): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) close(0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000001280)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, 0x0, 0x0) close(0x3) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) mlockall(0x2) r3 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x39c4, 0x2, 0x3, 0xfffffffe}, &(0x7f0000000580), &(0x7f0000000280), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r3, 0x11, &(0x7f0000000500)='n', 0x1) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r3, 0x13, &(0x7f0000000180)=[0x2, 0x6], 0x2) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r4, 0xc0d05604, &(0x7f0000000d80)={0x2, @pix_mp={0x3ff, 0x11, 0x43564548, 0x1, 0x9, [{0xffffffff, 0x8}, {0x1, 0xc7}, {0x9}, {0x7}, {0xf, 0x4}, {0x1000, 0x5}, {0x6, 0xa4}, {0x2, 0x1}], 0x1, 0xe, 0x7, 0x0, 0x1}}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x110e22ffff, 0x0, 0x0) shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d0009058223"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x6, 0x3, 0x10007e, 0x20000006, 0x53, 0x6, 0x10000, 0x80005, 0x1, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x26, 0xd, 0x1, 0x6, 0x7, 0xe661, 0x4, 0x7, 0x7, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x800080ee, 0xa, 0x17, 0x92c, 0x9, 0x200, 0x3e, 0x8c, 0x6, 0xca9, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x8445, 0x6, 0x5, 0x1, 0x200], [0x1000000b, 0x9, 0x80000130, 0x8004, 0x5, 0xfffffff3, 0x2, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x4, 0x0, 0x0, 0x5, 0x42f, 0xe, 0x312, 0x78, 0x1, 0x1e, 0x4, 0x7, 0x7fff, 0x6, 0x4400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x101, 0x1, 0x4, 0xffff80f1, 0x1, 0x6, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0xfffffe01, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93695, 0x43, 0x9], [0x7, 0xa, 0x4, 0x8005, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x5, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x5, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x11, 0x800003, 0x200, 0x400080, 0x3, 0x4, 0x2950bfaf, 0x2, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x21c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x24], [0x9, 0x40bb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xbb, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x1, 0x6, 0x96, 0xffffffff, 0x80000001, 0x7, 0x4, 0xc8, 0x1, 0xfffff000, 0x4010080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d69b, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x928, 0xb1e, 0xc7, 0x200, 0xffff2441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r5 = socket(0x2, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) 6m1.158031805s ago: executing program 3 (id=295): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000340)={'vxcan1\x00', 0x0}) sendto$packet(r0, &(0x7f00000022c0), 0x0, 0x20008884, &(0x7f0000000080)={0x11, 0x4, r1, 0x1, 0xd, 0x6, @broadcast}, 0x14) socket$key(0xf, 0x3, 0x2) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x3cb3a7749966c5a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000019080)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002280)='/proc/diskstats\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000200)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r6, &(0x7f000000e400)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000080)={0x50, 0x0, r7, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x2}}, 0x50) r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r6, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x3, 0x7fff0000}]}) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0x0) syz_fuse_handle_req(r6, &(0x7f00000083c0)="99529ca7d265e2dba44891e35e7d5dab7921b730436ecd4e999a25bcf86a25f8f029c0dd50373e90b7cf7779b12ecd4423c5b13cfac186975cd723976f3c747612913029d42517c189364bc59d8ebad53ed1b86f8f66c99b1f9b5b40d78cef1f14f81815d53bdca7fef40607358db69eb8c0b1f6b0942ab4b1ee7ca8deb4eddef06381a3d1c52d6147fc5109c7c607591497a6b2477f60cc881d3219c96bffb34aadec3fa97250713cce17cd536721bf9c40a019531ed0bbad139e26a3d4d39b68ab1bf37cb1a4bd197a8789cb1940cd86d9e56713bc36c7cffd07a311f5bc2e91f16d152eb480645e85ec9b3bf09c7fa140dced0afd55d7b99e90a96e7748e2d0dc09672ac199ce529e631efe1783769819c182ca106f6184bcbb387ed246c43562d74c36ac3a7ec2f0e11f70bad0007c03bb9c0d2dacc2148cce4a4aea327c7319016ad146b52bfae0357f9e892e9bec61a13c93551cfa3d4f4bfa7585c93bb0bef01a9114f3dc54179cf9a57fe88f5cff3403e33c9d09e3e9c2e10f1f16894e1b59e3cad47c1f202cf7b756f2851fc96d09459c9a8d34c19e6a3525cd5001aac5181f57286d0e1e88ce5092c7c76b6abdaebf2c499aa47587b48eb12a2b72548c190b0324ebedb81a63333b6edb25550f859c5ccc404a944ff7f61af8800888192fbd4c8e0e417d1d181b4b335a6f52e0a7dae18397e81e3f747cab7be902ed903bdd6a622f178f9b4244718ee1206237257374d2fd1466ab6135ef7ef4a114ae170eafe9cd78cf9ffc36974cbc4b8003072bed78765a0b9f1240f24dec6a9e46db9bb498d40f727c0cbf8f4a6a49539bd0805caf65d80130d7fb60a69dc7ed890874a17530c042cf33a977d331435d68ef33885f638c777ad49564ca77d8b81ddd853a21cd55d95b627310dd633a4f005853a5506cd8f744c367f3cb6998b0fa97de6bb35b166b0c6408c4e0a38ed26235a88520c38ca97ac8a6dc81e6dc6483d383fa09f198997b8eea1c68c9e3320683c9a02dd89ddc34c241e7294ccc88d6b35762892e8746e558bfbc2251949f2ecb763dad5b975eaf36e2864be6a41d3e20514d32f5d4b6350dc7e3cc3a85428ea98efb3b1edc2a2ec1e618452949cc7e2ba1251990168fee342d4f304b7a7af9162bcbe6b09c75d7420d2c547b4e3cee1836df6eddd5dff73a4e308fcd8eaa7a33e6980a6f8ead03257a37d72d3b265d02fa42f57db877654ed513e31c35e1af0bd28511d6b57cfe07b27cbe9767a534b426dfc3dd257d5899444f34cbf4dc74b9eab2e7e3e1e1a8a6ac5e4359d653506b299a5b7c67b92dc462f1216655f952362a3387ad9966b606d98e8d1b544dc27dc6bc78fd18a446736e25c51143db9886b6c09812d5825b5d9e0932f218ff8bea4d9e1c4df9c9d4eb19336d48163a921c4ff1f0beef26b01b7e8c0d23fb59b84e229eaabb791f2cffc9aa4db75162cbfe4c9ae8d76a5b6bc4bff20e3f8f125b9aadb3e728d7f78d61fd55f46b7f59511b876e6563256686e44f25cf38d393a9b762bada272eba8df28e4086c4cd2fe3c9fab97756fb145373e6ca1991bb1ee6589e49c821ff29f047970819f88f724bd077cd3f0ae463d99b3e53078431e3f9bebabc5289a65479359efe3909186aac60a29f561de8c590988c913c9e693ab8106e8287f6565eee6735f7c88cad7124d1c8d9ff347e97912824088ee954de01c6d8a06447f06899607eadbfd078bc3df506252005749378dbd7399c9eca60b81dc0d88dedec31e5cf6e7b6d6d411958df8f9e0bf4443e8d3bdfe49d05f811d17088024d0629fc8ab8e05e309bf55e8e60d342623765f4e8d2dc4a90291cd4354ff9568c8170e6ea56e028bcf2719595253adb8c84050bb9ce4927a1c1f4560da87d109ceda90bbe45a1717763d8025f1ff40f157185ddf17079da272ae10c4f34162caf4b0d31221a57b3059fd449c87554d968a54b2eebd760dc3263c40d9eedf5905d5699d29706ea6e9e81ff2bf92489a06deffe7e978661f37a88450783e23f107c2bfce000dfc91c5fca49e46d9ea978f215a45984699f0d2503b30a741e13be56b7abe3e5663c0825c3cb04ead44ce97719c4ee6f4cdd3c452775ad7163d5c9034583cc2dbc2b0c04917a3e1aa3d0a8bb6fcf94d7922eb1d543c09185827aeb1b72ae7103ef2c014af2ff4b47fca40fb0e66ddf0264476d7a84e9b8dc551d4c407bdbac6757f7a25bd404b45bec1091696203cc438860131ad5f2fd80e3c45629864dd9f7d302b66fb8fb86735c9a6dcf8b135a273dd2ae9473bc905081be9fcb8f91b1ddba1ac692798dac0b9ccffe0319a779f5e10c65f294b22fe475283b023f9cd890e92c5447b1bc1528255c5af383bc1fb6e72cb9a67215a9e25cde63c89baa8c7125c7e8b748b728d07d9cb66778404f54e6a9e3ae1ae82f3d0ce77199f23f94a01b71b805b476fedbebeb52c83a1b857f23ba438c56a6c4c2a5909f721e6e3d240e4a16455e92220d13022ce7ec0b1365ba4e67aa6ecb324f8826579e12cebdfc0d8af63e83b5e5624d5b791f99093f9a27f7baea9fd10111209c0857a04f07408111063ef34026aee27a3d51b40e53883f9094402534bdd21cc49d7f5593e99cb204cd805bee4add0f82cf4b6dc5da14d6b79fbc68c9ccf7fb5fe774f8879e13079b024a8ad24bf123c420d630837a84ba05abf0ae4dc3fc04f25c7f74ff91d0d609c958642a48551e51b5c0074a56a7da10ce153b08cabea636f8489d8e7b655758a41d7f7474c9d76bf4d54d789bfceaffef139854065de6a94b0275a9626aab99ae838364b1a491e55017e4212b6b01f7a41bc9c215ecd17c49a8610db28c699259c58b81a0e84c45fd8e719c05c48501c49e8a6515044d247f58e4cd0bf22fd6ae31f45339d1f801196d426c52269b1aaffaf18e2a03760bb231cb7cefa6d72f1d7eb6a3bbd65d0914221b8fbf531dbd562eb4a1b28983ac7d83d4813b10b34c9525ba644f61a2c4800d4fe96a7bca63da1041ed73cc57fb9d42f9dfc8ca41d80292bbb311c89b0a0fcee1d88a025a7416863342aea00e6f049cb2ddebd17c5c617ff562a8af0c965cbe8341431a30ea239e4a62aa2b19757a3b0de04229a9907f8610c27b26591405845bf8b5b83706ed18d910c4f68777378366ff565617b19168a04560a32ce5ad64aaef9f4377118c4335b24826cdcde78fb4bdb11498553f56d8dfeb3a482c70cc6580c399b92339cbdb3464fcc7b00e9839fd0d2b8b6db90c56b33593a0048bf7983421f29b1285c81a239045b96a9b0cacd70d6d9853206471f06915efc8d3ec4c50fb13601abc73247a656066fd7b329159b3ce9e3302b4c0d6aec58cb0946a8ee8e7f55f1af604f1edb4d887fa6292dc0ce57705c1a25dc62650c127d11a364b397aefc2fcc3a164bdc53165a461b01de9180c1461b309c75af0911b4cc1b8aa05652b62119c87b4b235c573aa15b1516cddf61efd6a7f8c953fbaaee9c0e800e8f519e1494de850ddb976864088fe0cf90bbc54395078ea2501e8baa84d6807e184105bc2a140b663416496886422643bbf764d406af06e7d086678828defda0b648b25666b7b5ea29e927141740d5be0e61bf25d40b8404ffd3c67bb855b11d4faf82b7b8051615c101c3deb0601a0fa9ecd8b4a95082ccbc8222b0982802dd8430e653d6eea2786dc3a91397135faffdc65a5bae048f5c463b1a6648becce961d39d063d28d1ad6dafcea0b0878379adb16cc0d4cea572abeacd9a168a4fe2e338092b5bc93ecf02ac6ccda03e5b23adf511fdf7a79442093233b79c67d3fdd3c36c96a8f67aa79e4743d99cf963ae6161877f73656eb0314d889f4b8649bbce8a759f90eac6c006197b54b2bbac7c9b237f1e3dc099c62a65481960e6ad697fc66316ac084ba99c60f58bf44ff45f3b2006cbc4196a25f124dfaf247e863a855ef6070deb45219a922dcf2be9bd01c340e1ca5ed7c3ddac9f7a677c5d00610991d21e0751ac8044585b39f3fec5b672a11a9bce32196c2003d01ea50b0f0403e16df188ecbbb74f295f01398363ddfecdb63a49347c912c125670205d7b6be999688df85bb7d5ac12b62b4fdc4eadcc2a9a7897028404f697b007603a0ad588c772952d6670ee870771774ad157c0b9cccd4b2192d835606198ea0c65036ae4e406cdc539ff3aa81fa20b7ab58d6f3abdb69cc1f503d593f7025d2035e7f21db76336efc2843a0dc9bd2eb8794718134ee68fc57d4d2bcc18969d08177f442b87433b48540c661940cf9e2462c53efa310c7e47487deab2ae15b1978ef05aa1e14110943f649d82486f710a39854409e74edcaf06b4a92d3580b9cdabf83c6351657698d3d5af7514f382e75d1c912cded577258603fc9ed002e010747cddf7885d34afc9a84d82696c6660cb5ecafb68b564908fc49c4db6a187d037241a26b1141cf20f2e968a53366db0f60b79cd98cf3c897c50b7b9728e6e7100f99e4d5ed2428dbd285516ca6660777a39b4b2617c1be5b0232d60b9c8099f5daedbf190109439c40b46090985200d6c0501313f3fa4d244864575c275faca47aeff32c7b3e3c59392618562a7c2d4b3af85a37a8847f595352024cb63d3a9085c2a502c6a3248f43c5fc828e636cb634b2d393d853ae2dc9605985cf85c060860a90256c7b574c1e01c320687a2bb0b2d51cc2950c485f2ffa5db0ad7aaf753f543de7f86efb775c6bac2989a33757a28836fd27f9347229a0004bd2e546994c69c678fe5717f613f905d945c072004c3a80e0e54215e19ff9972521890d4e705e429f16fc35fe5a15f2e6b75cd719d38f76b087b62e4b5dcdb35f4baa2bab167150bafb6c69e260ca51004bc826d46b77c3f67eaa08497294868e6d91b7b867e4da62052f4f891677256cfbaf19cf32bad99a7da69d8a66537686f89a58d78c7eeaa99cd38009a1a32582bedc5c718e57b19cd405ae659a89909356a07fcef89384d160fa5ae6683cc379642aea4f0c915f72d679bd521399cb16112f2abdede3001400b4a64d2173e153a68631183679b56b8f389ba889784133453a7e892fd3b092f5040870a3cfd6f982990143e7c0882b4ff4c5d049192d36925a25ae4be441aa30dc7e74398b340c45b52c73ed3b0cd640e3cc9fd4be24e7355f386106f65895f1ee850b2a781d1d1d322ca5a3b0fdb78ce1eda048ece94af25437969c99c58c08f1446ca5541e03987a20fd75283e3e116dc4c9222ab7522e4ccf6da14aef49cac9a6a2cd4aba1c54d49e6da4179a66b84e384cd3da53908579b28c11d525ebdc4dc69074cef8a9ecd3aab98f2858769d656b46141c3a4e69a5ed6c0a732c9ec1fce080eaebf537fa5e17236a44ba9c931f555d193e475ffafd20c53ccbab607c1a15fd06742a64691205eb0d00f7f40e4dd8efb279cf09b2522aac0729a631aacb92d5cfa2ce6bb07385b981890b5916755d5cc3a51c8c36bd2987068cc24fcf73840895ca9bbb9aff1059601f771afedf0a48d5921103920515b27d7e607951982feba197df8c61600feb3622b9eea13a4db4068728cb98cca76cfae197f6258758490bf41673ee29acd91fd296ec863c646e0ca6a0f0e9de146c663ba13d962964d7c32804fd12a14c1ca7212ad48bdfab469c6570dca562220ecbe7b6b163ed4c9361c5c10bed5c92861b8786ada20a99245d282e4454187ec02adfe354e30647cb10661c85168f7958e3ce69ab48c9455214707a63c9b1167f0845a6bfcce2a96cd53eab430f13cd527f1666290719a47c517cfa22fec2e9916af8aa93c78e567993d7fb8ee60fc4b903b8c67a3658302c5e5f35250c30427e4c055b6c54705bc599861f80b7200d361965ff98c88cc698a2615cadeac4bdfd3d613377cea52d2bbcb7e6b78ac31d4b2c33eaf0b2ed40b963e3cb25c7dfea3ebfe7b4aff2aaaaf184dc80ab649a108e2c830ce7eaea58a263392aa9cd13d7f7bd607dc7c804b19dfa41b3e5a5155201a87311e22062c93896e70f3a5c4b03521300b61cc311ebd5beb9838d0ed207c6bfc99e4392508e95804b10b36024f32e1fe1138e9ee7773f797b2bc6be7416f4e9691ef4c2a8d06af6c8b84bd1e6fd1ba3d3183475ef6c139ccf8dcf37671fbb96a2ab5e0e042f7c4728cf30bcc1a0de28a5024276ceaa194b4926e7f6a97b78bac36e47f832d56a96cd266434d37bcf2c2f57877717d91b1854972f832354acc207a2ee8caace7504e0e6197dd7e64a01c4c67bb2de8acc0cccc6c6bff0b0cbfe345542c5a795dfa48cc0990ab5702574d36494bc44c20f5b324f7c984d986cc8cb40cb2550076d96a069b6688d22171beed2dc5b6ff3ede8fff4c4a9de6d3817357a7ca7d24d87300b4545ebbac8cf7f09ec637a4f4d6bd07673709b6c363a75ccef585610c5f15de7851b5ab53e02a757bfc3caeb9a9a8996beffdc0cfd1201b6cd99cb035584e51a6c15a5d2e17d2f8aa6b41e26809392fac6caed1e02a53dcea8a413203608780dab33315a76eba24d540e4c5b9790420834bc8d4e47bc65ae52a54c0ff308427a8d7aff746aa6589d17514e40fee5d0b3533cf4ad2c5f9d96db9f50bd69ed8c92b860e199a35cf268c66ed13516a3b4b024f62d4b2a656067eece95575bdb4907efc488a9821bc3a9c81dd11b2128b7a01aa7a9ce6e73de3b4e9beced70206f91575baddbcbe5722337953c8016a0f4b62120d776c43b7d1a879b692107954f45acdf8967dcaa994aad4922d4fe093e16c2d0090906f5036af99e50bb09b04e9c9b3b5085abf621297ce203010249cede92e9b66b446b86b43eaaae228dfdd3b4408c12b404bb727f7e969e7da04fc59900112bf8d38af0416dc616e75f167aa1352215f07115a6f4eb6bb5fff6f5c2fc9ab906392036b44090e65fdaf017dc53bc94e0807d679d793df18cc44e6c846d414cef1569530f7692daf91eaaf4ae89fe2522f2c9cf33b6ca508ebcd006bc1a61f0c800553aff9dc7d57200b25ecb83e1e0b8cd29520b63aa649d3f71a62570eee56e03223ddf31f0c04fa686b7f6dd054e7a259d9ba335c2c5b2c508897506c0db7f01878dec1411c33f0af61b81dbcf9ff8bdc0c50044963a79f3ee1462150c6bd03a32dbdfef8d72f0b8b3a395ffb0cc85792e7bc867feb5e312cb64e29e193388e9f173c162f4a1320a6f99ea3795fb77d982605959909a1aa11076fcc779ea6b80ec1bf0edfc2569ec04d15a0bdeebccf3c75393dca5e81663532f8ced12d08e4c2ae6e2954d427c7bf053dc4718f56f453bc88d74045bd2f9747aae9b5298a0de927f1d6b1308f4e1483487f083e71ed09298deb52bb10079b13def7453eb432498069edb5ade70c5c54913684d934a3febf78753ac13300a91f467ff3f6e2f00898f015d08f7739047b321b3eaee5ad8aa7adbf7833f014d8c576a491af9fca6843b327ed513821cb3951b2e67a275225d7af6b382e2f955adaacba5d1fdea2223202dee132b91d5cf381b51da94145255f584a70c5e8d11e06a44afa6599bf3ed0cb61703eba254333af53afac60e54cf6397f9f7302249ab644f0b576c713b15007be1f4f9bb213660bca8a70251472b86669d361ef968f542e81ddbe8f4d2e9cabe8d7bf6a31f14a2cc272963553a424c105e7750437ec5bf316e30ce60b4b0c27ccc1eb27e60f6472fef27654da49905ff9c01b28695310ecd8701aedff25a83da4b7c41995f902bdf249769dcb53a3efa894710dd66ba8745ae2253cc6b75a038183a0bee21226d48239320efad6727093e4f94bbc2fdcc216200d903c32bb9f16dd17d5dac423ae0696f3decc576b8f1fdce63d0532370af7d1e2fa2ca5c5d17bd88f5e3abb4792dac8689ca13752f83d753b06b037bf5a80a3748983790352775685b0414c9d74849fd217e388f904278ddb6b0abdda941b61579c796e2bb77a9bc363b18642c401faa502a31011544111b6eedaa369976c814773d83220a75f31026d6ad0b8b4298ea6062234db232bc435e096e84f740e55bb14d46ae04af0500aa5bb218aff6c76aa8a8e3140a1b0d6638538fd7f30fa8d992e53abf8af2fbc16b9e8a668c1aac72cea1a746ee5f7f3392a4ec8f1d19f2f426b6069b1cd347cbc38bceba96ce5da49198083403143c740c04639cd1089abb34fe812d85921c47437604f684bca44a1eaa965c0a6e1c1fd1f70ee932af3455b36184cc15934cdb3f28959d37d8fc10696f8ec1e4b0c3d1b9ff74a01b796d1bb68954a3768c8bcec741b3b69da892f8922142b16b2cabb469a9906b34216243fac80374c10e178c5fd36440f8d7a8588a9c2510d86ffa8cb68ce8c330d2111c94724e522f04573dad43bce252eb505d29ca9379a6b281519d38b7174f3ae8f185544f3003c936a7e6b23ca97a313aac6a061caa45fda73522f3061767bb4e33dbe4bde390eb0f07225a8aef939cb6ab2ada10c02527281abad394cd4ea9f59467a08b72047cdb75d7b2b98e5b4542554a60f953ac7a4b980f42518eec05ff2c044549cab0cf33eef36dfbabcbc0300009d898862d2194cfcdd9a713c30bbe52291105193656ea5eb830873ac956469d31689cc3c69edb5cb9a6e31ce3e6fb50ddd4e52ef9fdeacfc0db21e1e83e0d8d0a64f17cacb4dc208a893e7fd8ffa86cfc554dfba3d9fd281115eccb4b9d909f2fbf3fbb66bedd7b5db3f6d4f076f5d8fb54f8832896f8ef6f624162f1dd589be7a8e87dd5065708a8b0bfb18a5c2299f5605ac8a11c1add55b2018e6099380a70bee3e0727ca6ec58928fe6eb3147b47401e8d822eebade713b58335787669e5e0de5d328a1067df4cd9124665bb02ee8adfd1b3618374ef167df1f0fe79456f78aee3da4c1bf397e4637b0cf41a0f4a2910efd02b17bf5f3c15b0084b36fa7d4e85a53e5be366b428244eeba7499c3e54397227928e2ff6e583f332d6f7e8cf4d058f379b58a7d03a4bfa454bb4b6d543804b8970e6a9fe8886179eb418a8ce9e509e8433571f7d32378f2e983fa418c8c91760ec9fb20968e7fc23b7c4ac71693b2576ac0f8ce2020ff1e7a7ff24301b48b544fb29a1ca4f2502daded865e488a16dd33ec67b2eee3025cdc5ef90f253c4b5e0a61d51e495b675c5a1d55b4ba3812c5f44cd08487e61d36b0c2dc32d27333a5ee8a0906bfbcd388bd9389d1509912c0471c7b706a5aff880569a3fb11ac5f14d780deb4c1b1afe30fb6b8daf87b27a4ceb869d587a97f2f5af8d819aa47bbf207db68a6ecbbefb1e109ed0bfbbf3b54fba9e79de8fad9c3bcd3e74b8b92ccea3ff5c558c6cd72d78a711fc39df603bd4aa1439dd302258edd2204e52d7f435c6f552b612fbc321bea971195cd4d8bb033e2a779e239164d7eea6d8fd233b0b9b776246564cfcf44b31a83031a2413bf98a398c9f93da243cef9ce73d81bade8ad551fb0ffa75bc874c11d23ac9d7752f22a0f54c3870f3314a83e64332db810da1ebb288e10c4eb9be9ec037317b8f813e68160a887da3f5c0389510a0734b69ef275e19973b169d340610cf2112e9964cc0566b9b690c3feb36c8526491d3a563f0bead2abbcf0665e048aa3f929351b2f89876580633a403250ae3b5244c8c0e996bf888938dfc8920348d88e272e6eadc7c0387ca1dae228bd620ce3975d43b58758d9412d304a227245587065f58c4573ba2557f1d8333ba007709b1239d682f03405b22135757178fb701bbde81d2f8faaa7666c025d8a8bb426dc4b8e61aed79b3b3d3a9b01ee9142772d869677ede166e7a8be8ab84cdd6946b1478ce77ba307213971cfb24c86c344310f279e38d22254bf4caf83c02e715cb0550e615dc9f8dd2400fa749e3527493c15fb454c158e4c0603ae6e962b7890058ec7c10f0618ee274a15bca6ca9fe5bc5f9e7797c0950299912be9c58463c07d667d4bffe8aa590ae43db08512b40f3d265026bef2facdd508984e5f6d2ac7ef573397f14ed2e2ccdcbe5796e60ae64d173814906d1da5a5bfe8a2a4c5d6bb0b3315b878b4877d0c045f6e6cfa0dfc1ea4de7abe26f2b2d8c93299ed1d83f1b7853c756bfa346cd53b008fec169883983fe0f2405777dd85e17b2e4e8b23432c0dc4c386d67b6597184d0b4b95877362304638484cc0951400f66ee8391dd44417c58b3d46a8345a8049fcd70f7b5f4a6f912e2b18760947c74ef2b732b342878d7e7cc99902de87db36469555fbbfe76189f108d6ab31f4727fe4e22d075afaf6cc726ab17a5e1b4ab6c8f29a459da3c4266b5ad8ff55906a190f8b19a3bb92a50df49647c03d5d6106ec07e9300038d059a75b54ac31683ef8e5eee946e1c84d016ee1e7800a92c0a3823b62e0417fe86b191951f65abc0c38c1e0e8f1121a04b62a8a720790560f922804b1b7e7eaa497e1bede6e3d0dcf0312dbf221561958fa1e85a8f99e6fc82f919e78c17d1beda16cfef25fb5d00f7c32df9a51eac76000c988ffdf011564aa0e319764b16a5a7c728a470ff70772fb76c9ada26a0ac073fcbfa12501c2454b19e02d928e3939a40bfff76c002533b3849cdf8016728445131e5f1e292b7d3dc06bb3a3cfff6fabae0b7341694a8938c1d2497cd70b76c337c9a312e96c8f736d7625a535e1906eba53d199221ca60202a65be0f7e530aca10e61fa39c7601d65954e5ed4cab94345c6b89c7f8a0de5c61a7945e1564731b6715331d13263b2961a163382f7c4934d847033860e402f3aadb4f3e6cf47a97a2031401da4d2c8de8c80cdad71b97b4deb2075a02282f958ac6772354e67f097ca693778224b80892490015e7d697fb9107f75cea708178ffec93fb1d44e8493bad1d42c918e661219ea819e0200759037a5a585c0fe074fd407536fe58013f42612c41bfc66e16870d7a9c00ee93a3122b253fecbf5de3837641f4a1376af0f053463413c26c29f9a346318565276856b963da30ba6ab8c4c8ef6cfddc432328586d9d9829895835759bcde0851ae0c838a3927ea63fe5ba793fae94da61cab00fc05f3a265a2da1221bb2b66775ed7ba856b41011652d4984991e56249360ddfc997245ac1547a1c16382d42df383a8d1c852643b24895c422712e79c436fdfffece4ed1c50922d4f25296aaf6b204522086d188bee254f8303b60537ead1195ac5dd301286f0042dd68aa05a70e4beb779aa0b61a316f736b72c9ab7ed860a0908a078f4b8a53f2df0abf993f689de4b02b9138ca5047fb0bfc9ba3b92bff033e36fc9553260b008cef3d147c62d1d3944fd1eaff79bc5a922ec2190907bfda1b51c2c7fb867db1f8e13a37b5e3ae0165e93350b958a239ec1f2b78561cff854b975307b5b5dd23b040602a5a36bd79947ee04c7d0e5e30f9c4c79f7b4e6eada98bfc6c357cdf8939213423f1b21ba26cfc2b2756ea3eb992372db0ab8a7c37d8ae96bf3ed6be873c1891550ef741812032e1ae938326c399ee43a3061602dda006f1b6b620bebb6a5752bee77e8acf9921ebf4d4c8af7eb5e937c65697c0664c594e31a62377a25605051996c474ca322ce8e0e6ef8a7988be", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)={0xb0, 0x0, 0xfffffffffffffff9, [{{0x20000003, 0x8, 0x4, 0x8, 0xbc88, 0x9, {0x4, 0x5, 0x5, 0x6, 0x3, 0x12e, 0x7, 0x8, 0xf7fffffa, 0xc000, 0x0, r8, r9, 0x80, 0x8}}, {0xffffdfffffffffff, 0x401, 0x6, 0x8100008, '\x9e\xaf\x82\xa7\x13&'}}]}, 0x0, 0x0, 0x0}) getdents64(r10, 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r6, &(0x7f0000000000)={0x2f, 0x6, 0x0, {0x1, 0x2, 0x6, 0x0, '\x9e\xaf\x82\xa7\x13&'}}, 0x2f) 5m59.691737362s ago: executing program 3 (id=297): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1234, @loopback}, 0x10) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x84}, @NFTA_SET_DESC={0x20, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}]}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, '\x00\x00\x00\x00\x00\x00\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xf0}}, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) setns(0xc9, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 5m58.512102149s ago: executing program 3 (id=299): openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x0, 0x48) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendfile(r0, r0, 0x0, 0x20000005) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bfe000/0x400000)=nil) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) userfaultfd(0x801) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)=ANY=[], 0x50) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc1b}, 0x28) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x6, 0xe, 0x4, 0x4, 0x2, 0x1000, 0xf1, 0x0, 0x7fffffffffff9, 0x10000000005, 0x0, 0x1, 0x0, 0x5, 0x0, 0xbde], 0x1000, 0x3c4210}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x804, 0x6}, 0x3d, [0x6, 0xc95b, 0x9, 0x8, 0x81, 0x2, 0x1, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0xa, 0x0, 0xffff2d37, 0xd1, 0x6, 0x4, 0x100, 0x7, 0x7, 0x7, 0x3, 0x3c57, 0x1, 0x24, 0x2adc, 0x800, 0x1f461e2c, 0x3, 0xe661, 0x4, 0x1000007, 0x3, 0x8001, 0x4c74, 0x8000, 0x642, 0x3, 0xa, 0x0, 0x71, 0x1, 0xe, 0x103, 0x0, 0x5, 0x3d, 0x8f, 0x6, 0x1, 0x4, 0x5, 0x4, 0x9, 0x0, 0x80, 0x2000, 0x4, 0x6, 0x8c0, 0x4, 0x1, 0x40], [0x10080007, 0xffff, 0x12b, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0x3, 0xf9, 0x2d, 0x2bf, 0x6c9, 0x1ff, 0x0, 0x3, 0x0, 0x7, 0x2, 0x1c, 0xe, 0x313, 0x78, 0xea4, 0xa, 0x4, 0x4, 0xd, 0x4, 0x410, 0x1, 0x6, 0x400401, 0xff, 0x1005, 0x7ff, 0x5f31, 0xc, 0x101, 0x6, 0x1000004, 0x9, 0x4, 0x9, 0xfffffffa, 0x9, 0x7, 0x5, 0x0, 0x10003, 0x7, 0x5e0176bd, 0x2, 0x7f, 0x9, 0x8, 0x3, 0x4, 0x1, 0x8, 0x6, 0x9, 0x48c93690, 0x2, 0xff], [0x5, 0x1, 0x5, 0x64e, 0xfffffdfa, 0x7fffffff, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x5, 0x5, 0x0, 0x4001ef, 0x9, 0x8, 0x88, 0x3, 0x10000009, 0x3e6, 0xb, 0x5, 0x2, 0x60002, 0xf, 0x7, 0x84, 0x6d01, 0x5, 0x3b, 0x2, 0x200, 0x80, 0x3, 0x4, 0x2, 0xffffffff, 0xa5, 0x7, 0x6, 0x8, 0x4, 0x54fe12da, 0x5, 0x5, 0x3, 0x400000, 0xfff7fff9, 0x10000000, 0x1, 0x5, 0x8, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0xbb31, 0x6, 0xfffffffc, 0x5, 0x938, 0x6, 0x6, 0x4051bf, 0x5, 0xce7, 0x1ff, 0x6, 0x87, 0x5, 0x7, 0x104, 0x80000000, 0x1, 0x7fff, 0x8ffff, 0xa61c, 0x2, 0x0, 0x1, 0xfffffff8, 0x8000014c, 0x60a7, 0x6, 0x2, 0xfffffffe, 0x80000003, 0x405, 0x8, 0xff, 0x103, 0xfffffff1, 0x10002, 0xa, 0x8, 0x100, 0x9602, 0xb, 0x2, 0x800, 0x6, 0x101, 0x10000, 0x2, 0x8, 0x2b91, 0xffffffff, 0x8, 0x9, 0x1, 0x6c0b, 0x83a0, 0x1, 0x5, 0xb1c, 0x1, 0x8, 0xfff, 0xffffffff]}, 0x45c) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r4, &(0x7f0000000040)="e2", 0x918) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x408d6}, 0x24000010) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000180)={[0x3, 0x934, 0x2, 0x100000001, 0x10001, 0xf69f, 0x6, 0x200, 0x100000000, 0x2, 0x10001, 0x7, 0x400, 0x80, 0x6071, 0x40], 0x41000, 0x8000}) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000000)={0x1, 0x1}, 0x2) socket(0x80000000000000a, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 5m54.097496012s ago: executing program 3 (id=305): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x42, 0x8814) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4008811) r3 = syz_open_dev$video4linux(&(0x7f0000000040), 0xfffffffffffffffe, 0x200) ioctl$VIDIOC_SUBDEV_S_FMT(r3, 0xc0585605, &(0x7f00000001c0)={0x1, 0x0, {0xfffffffd, 0x9, 0x100a, 0x7, 0x8, 0x2, 0x3}}) shmctl$IPC_RMID(0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x200000, &(0x7f00000001c0)={[{@nodioread_nolock}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@i_version}, {@min_batch_time={'min_batch_time', 0x3d, 0xda}}, {@discard}, {@lazytime}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x553, &(0x7f0000000980)="$eJzs3U1vG0UfAPD/Ok7f0udpKlUVcECReqCo1GkSXorEoRwRVFSCe7GSbVTFqavYqZpQifZAL1xQhYQQlRAfgDvHii/Ap+iBShWqIjhwMVpnnbqNnbiJ27j495M2mdkdZ3Y8O+MZj50NYGhNZD8KEa9GxLdJxJG2Y8XID06sp1t7dGM225JoND77M4kk39dKn+S/x/LIKxHx29cRpwqb862trC6UK5V0KY9P1hevTtZWVk9fXizPp/PplemZmbPvzEy//967fSvrmxf+/uHTex+d/ebE2ve/PDh6J4lzcTg/1l6OXbjZHpmIifw5GY1zTyWc6kNmgyTZ6xNgR0bydj4aWR9wJEbyVg/8930VEQ1gSCXaPwyp1jigNbfv0zz4pfHww/UJ0ObyF9ffG4kDzbnRobXkiZlRNt8d70P+WR6//nH3TrZF/96HANjWzVsRcaZY3Nz/JXn/t3NnekjzdB76P3hx7mXjn7c6jX8KG+Of6DD+GevQdndi+/ZfeNCHbLrKxn8fdBz/bixajY/ksf81x3yjyaXLlTTr2/4fESdjdH8W32o95+za/Ua3Y+3jv2zL8m+NBfPzeFDc/+Rj5sr18m7K3O7hrYjXOo5/k436TzrUf/Z8XOgxj+Pp3de7Hdu+/M9X4+eINzrW/+MVrWTr9cnJ5vUw2boqNvvr9vHfu+W/1+XP6v/Q1uUfT9rXa2vPnsdPB/5Jux3b6fW/L/m8Gd6X77terteXpiL2JZ9s3j/9+LGteCt9Vv6TJ7bu/zpd/wcj4osey3/72O2uSQeh/ueeqf6fPXD/4y9/7JZ/b/X/djN0Mt/TS//X6wnu5rkDAAAAAACAQVOIiMORFEob4UKhVFr/fMexOFSoVGv1U5eqy1fmovld2fEYLbRWusfaPg8xlX8ethWffio+ExFHI+K7kYPNeGm2Wpnb68IDAAAAAAAAAAAAAAAAAADAgBjr9P3/1v9bH9njkwOeP7f8huG1bfvvx52egIHk9R+Gl/YPw0v7h+Gl/cPwKq7fzxgYQl7/YXhp/zC8tH8AAAAAAAAAAAAAAAAAAAAAAAAAAADoqwvnz2dbY+3RjdksPndtZXmheu30XFpbKC0uz5Zmq0tXS/PV6nwlLc1WF7f7e5Vq9erUdCxfn6yntfpkbWX14mJ1+Ur94uXF8nx6MR19IaUCAAAAAAAAAAAAAAAAAACAl0ttZXWhXKmkSwICOwoUB+M0BPoc2OueCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAe+zcAAP//eIg3rQ==") r4 = openat$dir(0xffffffffffffff9c, 0x0, 0x101000, 0x82) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000040)={0x8, 0x40000cca8, 0x10003}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x6) ioctl$FITRIM(r5, 0xc0185879, 0x0) prlimit64(r0, 0xb, 0x0, &(0x7f00000000c0)) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000002c0)='./file0\x00', 0x2048c5, &(0x7f0000000580)=ANY=[@ANYBLOB="726f6469723c73686f3d77696e6e742c73686f72746e616d653d6d697865642cf5000000000000006c3d302c756e6951786c6074653d312c73686f72746e616d653d77696e39352c73686f72746e616d01006d697865642c757466383d312c73686f77657865632c646f733178666c6f7070792c73686f72746e616d653d6c6f7765722c02000000746e616d653d7769d6ff0062765dd3b7746e616d653d77696e6e742c6572726f72636f6e74696e75652c756e695f786c6174653d312c756e695f786c6174653d312c00e756f99e66023f152c5c01f53e7ffd05e912b164248c4f08008c4f5d8966ba45045955f14cc87f1f977b1b060d297857ac54a51d4777c76e3e9fcee0e8b6f6a15cae4da5000094bb8f379d4cf08a76ae26764c425939bf7039a153260dc0edb975697c8e1d629917bbd9ea2613ccaa927c4dc3b1b502c49570f03ffc79e63bde5da9903835896ebe11da77086e964b35d50baa0d3d468a4920a688ffef7838849d1f185832c92aa9ea53870da2b8a0af96c8f8e963ea2123df27e505bd29b7a1fe9af5b41ccef407834ac328d4c57818e276b77754d1eb098299274f44a43ecd"], 0x0, 0x2c7, &(0x7f0000002b80)="$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") r6 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x13481, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r6, &(0x7f0000000840)={0x2020}, 0x2020) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x200000c, 0x80010, 0xffffffffffffffff, 0x3000) 5m51.916694317s ago: executing program 3 (id=308): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1234, @loopback}, 0x10) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x84}, @NFTA_SET_DESC={0x20, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}]}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, '\x00\x00\x00\x00\x00\x00\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xf0}}, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) setns(0xc9, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) 5m45.987856149s ago: executing program 3 (id=316): syz_open_dev$sndctrl(&(0x7f0000000580), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x2c, 0x41, 0x107, 0xfffffffe, 0xfffffffe, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x7}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) pwrite64(0xffffffffffffffff, &(0x7f00000008c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0xed0e1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r7 = semget$private(0x0, 0x6, 0x1b5) semop(r7, 0x0, 0x0) semop(r7, &(0x7f0000000200)=[{0x0, 0xffff, 0x1000}], 0x1) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) fsopen(&(0x7f0000000080)='binfmt_misc\x00', 0x1) open(0x0, 0x141100, 0x20) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01ec9e00000000000000010000000900010073797a30000000000900030073797a320000000070000000060a0104000000000f0000000100000208000b400000000048000480440001800b0001006578746864720000340002800500020007000000080003400200000208000440000000220800014000000012080006400000000408000540000000010900010073797a30"], 0xe4}}, 0x0) 5m45.262108867s ago: executing program 34 (id=316): syz_open_dev$sndctrl(&(0x7f0000000580), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x2c, 0x41, 0x107, 0xfffffffe, 0xfffffffe, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x7}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) pwrite64(0xffffffffffffffff, &(0x7f00000008c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0xed0e1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r7 = semget$private(0x0, 0x6, 0x1b5) semop(r7, 0x0, 0x0) semop(r7, &(0x7f0000000200)=[{0x0, 0xffff, 0x1000}], 0x1) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) fsopen(&(0x7f0000000080)='binfmt_misc\x00', 0x1) open(0x0, 0x141100, 0x20) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01ec9e00000000000000010000000900010073797a30000000000900030073797a320000000070000000060a0104000000000f0000000100000208000b400000000048000480440001800b0001006578746864720000340002800500020007000000080003400200000208000440000000220800014000000012080006400000000408000540000000010900010073797a30"], 0xe4}}, 0x0) 5m12.79295748s ago: executing program 2 (id=347): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x24800, &(0x7f0000000140)={[{@usrjquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@test_dummy_encryption}, {@nouid32}, {@barrier_val={'barrier', 0x3d, 0x6}}]}, 0x9, 0x61d, &(0x7f0000000700)="$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") ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_to_team\x00'}) io_setup(0x80000001, &(0x7f0000000100)) r0 = openat2$dir(0xffffff9c, &(0x7f0000000180)='./trace\x00', &(0x7f00000001c0)={0x341002, 0x13, 0x1c}, 0x18) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x10) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x2730, 0x13d06, 0x1, 0x92}, 0x0, &(0x7f00000002c0)=0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x34000, 0x0) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f0000000040)={0x30, 0x0}) syz_io_uring_submit(0x0, r1, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000054) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x20, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000a2f1a9d73d51cfdf361e93754d4bfc135f155a79fd5671662faa9d2d49f1376e9e615927c3"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x121302, 0x0) write$binfmt_register(r4, &(0x7f0000000040)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x0, 0x3a, 'tracefs\x00', 0x3a, '*:@{\':', 0x3a, './trace'}, 0x35) openat$vimc1(0xffffffffffffff9c, &(0x7f00000008c0), 0x2, 0x0) 5m10.396374841s ago: executing program 2 (id=349): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc/net/ip_vs_app\x00', 0x0, 0x0) pread64(r1, &(0x7f0000000940)=""/1027, 0x403, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r0, &(0x7f00000003c0)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24004000) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x4}}, 0xe8) 5m9.148580382s ago: executing program 2 (id=350): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000500), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89a0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x800005}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) futex_waitv(&(0x7f0000004040)=[{0x0, &(0x7f00000001c0), 0x2}], 0x1, 0x0, &(0x7f00000040c0)={0x77359400}, 0x1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008011}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x44000) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='.\x00', &(0x7f0000000240)='gfs2\x00', 0x100801f, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f0000000040)={'fscrypt:', @desc2}, &(0x7f0000000100)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) keyctl$chown(0x4, r1, 0x0, 0xee00) keyctl$chown(0x4, r1, 0x0, 0x0) syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) r2 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r2, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"4772ffacff04856ec9e8776f8ee906be", "2dfad343e15ead11f40c897700", "0000b3f88813da82b4cf00"}, 0x3eaf, 0x4}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f0000000040)={0x80, 0x0, 0x0, 0x5}) ioctl$EXT4_IOC_SETFSUUID(0xffffffffffffffff, 0x4008662c, &(0x7f0000000140)={0x10, 0x0, "fda7be45625260e4dfec5d53fcd2e074"}) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) 5m6.855651991s ago: executing program 2 (id=352): socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00') r1 = open_tree(r0, &(0x7f0000000300)='mnt\x00', 0x88101) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x89101) move_mount(r1, 0x0, r2, 0x0, 0x46) unlink(&(0x7f0000000440)='./cgroup\x00') fanotify_init(0x4, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$NFNL_MSG_ACCT_NEW(r3, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="000300957880fa6383bb03671a3b94f332217584042e5c4943c9ea148be04a1f2beb800c161fbd9c3dbd9ccfbbe474ccfb612062af1a58d58597471760c280"], 0x14}, 0x1, 0x0, 0x0, 0x40000c5}, 0x4000) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES16=r0, @ANYBLOB='\f\x00'], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4040855) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r4, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x49, 0x20008000) setsockopt$inet_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f00000004c0)=@ccm_128={{0x304}, '\x00', "bcf87c7910b661b4be4ae0143548a525", "07b5e559", "1aec271e54d0bbda"}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setitimer(0x2, &(0x7f0000000040)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) getitimer(0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) 5m3.056969921s ago: executing program 2 (id=354): syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac3(0xffffffffffffffff, &(0x7f0000000580)={0x14, &(0x7f0000000100)={0x40, 0x6, 0xa0, {0xa0, 0x22, "93caf4e7652fa8afb42f4baa7fade21233b126a103a09e2010dcef3a365cfc4268d10126b0c780d064804a7f48938a13436f18b1f94d479746f1f0b3d855e2f629c86cbaa4c88656122bce6e5b491387a4dafabf06cf4e4704507f9d4f7df915c05e8f4c1ae8a79e470e9cefbd5004bbdb2f03f7f9e2ea2461a00ce32fbc9668902e622fdf53c80c1550d28e989b9807b83c15127ff43bb911c011e87c1e"}}, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x47, &(0x7f0000000200)=0x7) setresuid(0x0, 0xee00, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) 4m59.017762244s ago: executing program 2 (id=358): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x2, 0xb, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000400)=ANY=[@ANYBLOB="980200001700010029bdf000fcdbdf2509000000aa006700c033acb580479deced7e75e0fef339255ab3285bbb661d69f6de9c1e698623cbe25ba9289c25953bdd7e42c8dbd7d865390dc89595cc7c31c94073a9d8ae74ad204e0bb34db120979e4766763cb5ec83b5d4fc9fa47cb69de23e48268b981d0783f39f9598eae0468b00619891b1d4fc9c9686d6e08ae4a2425dbebb83a80b65d3ab2eb0507b6e18e63dc4769b46d66d5fcfe8458f78226a1d055f1ad2b88154de73d91cfdba0000080033", @ANYRES32=0x0, @ANYBLOB="0800f300", @ANYRES32], 0x298}, 0x1, 0x0, 0x0, 0x4000040}, 0x20044002) set_mempolicy(0x3, 0x0, 0x40) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(0xffffffffffffffff, 0xc040564b, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2) read(0xffffffffffffffff, &(0x7f0000000040), 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r3, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) r5 = fsopen(&(0x7f0000000000)='hpfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, 0x0, &(0x7f0000000b00), 0x0) socket$l2tp6(0xa, 0x2, 0x73) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x4, 0x9, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffbf}, 0x0) syz_clone(0x20000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) 4m43.304654453s ago: executing program 35 (id=358): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x2, 0xb, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000400)=ANY=[@ANYBLOB="980200001700010029bdf000fcdbdf2509000000aa006700c033acb580479deced7e75e0fef339255ab3285bbb661d69f6de9c1e698623cbe25ba9289c25953bdd7e42c8dbd7d865390dc89595cc7c31c94073a9d8ae74ad204e0bb34db120979e4766763cb5ec83b5d4fc9fa47cb69de23e48268b981d0783f39f9598eae0468b00619891b1d4fc9c9686d6e08ae4a2425dbebb83a80b65d3ab2eb0507b6e18e63dc4769b46d66d5fcfe8458f78226a1d055f1ad2b88154de73d91cfdba0000080033", @ANYRES32=0x0, @ANYBLOB="0800f300", @ANYRES32], 0x298}, 0x1, 0x0, 0x0, 0x4000040}, 0x20044002) set_mempolicy(0x3, 0x0, 0x40) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(0xffffffffffffffff, 0xc040564b, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2) read(0xffffffffffffffff, &(0x7f0000000040), 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r3, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) r5 = fsopen(&(0x7f0000000000)='hpfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, 0x0, &(0x7f0000000b00), 0x0) socket$l2tp6(0xa, 0x2, 0x73) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x4, 0x9, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffbf}, 0x0) syz_clone(0x20000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) 3m21.018359609s ago: executing program 7 (id=697): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newtaction={0x6c, 0x30, 0xb, 0x3, 0x0, {}, [{0x58, 0x1, [@m_ct={0x54, 0x1, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000000, 0x0, 0x0, 0x0, 0xffffffff}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @local}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8890}, 0x40) 3m20.688270872s ago: executing program 7 (id=702): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x9}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x20006, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x41}}, [@jmp={0x5, 0x1, 0x2, 0x0, 0xdad1124f55525050, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x27, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) 3m20.466146959s ago: executing program 7 (id=707): r0 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc25c4111, 0x0) 3m20.12408961s ago: executing program 7 (id=710): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x42, 0x8814) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4008811) r3 = syz_open_dev$video4linux(&(0x7f0000000040), 0xfffffffffffffffe, 0x200) ioctl$VIDIOC_SUBDEV_S_FMT(r3, 0xc0585605, &(0x7f00000001c0)={0x1, 0x0, {0xfffffffd, 0x9, 0x100a, 0x7, 0x8, 0x2, 0x3}}) shmctl$IPC_RMID(0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x200000, &(0x7f00000001c0)={[{@nodioread_nolock}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@i_version}, {@min_batch_time={'min_batch_time', 0x3d, 0xda}}, {@discard}, {@lazytime}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x553, &(0x7f0000000980)="$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") r4 = openat$dir(0xffffffffffffff9c, 0x0, 0x101000, 0x82) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000040)={0x8, 0x40000cca8, 0x10003}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x6) ioctl$FITRIM(r5, 0xc0185879, 0x0) prlimit64(r0, 0xb, 0x0, &(0x7f00000000c0)) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000002c0)='./file0\x00', 0x2048c5, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x0, 0x2c7, &(0x7f0000002b80)="$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") r6 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x13481, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r6, &(0x7f0000000840)={0x2020}, 0x2020) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x200000c, 0x80010, 0xffffffffffffffff, 0x3000) 3m19.096895126s ago: executing program 7 (id=716): r0 = syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x800) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x40045730, 0x0) 3m16.3805144s ago: executing program 7 (id=725): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) writev(r0, &(0x7f0000000340)=[{&(0x7f0000001700)='\x00', 0x1}, {0x0}], 0x2) 3m15.605830233s ago: executing program 36 (id=725): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) writev(r0, &(0x7f0000000340)=[{&(0x7f0000001700)='\x00', 0x1}, {0x0}], 0x2) 22.90450568s ago: executing program 8 (id=1420): syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) setresuid(0x0, 0xee00, 0x0) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r4, 0x0, 0x0) 21.300439816s ago: executing program 8 (id=1423): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/rcu_normal', 0x260280, 0x100) syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) unshare(0x600) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000), 0xc) 16.068552485s ago: executing program 8 (id=1430): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_clone(0xa1c68400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) tkill(r0, 0xf) 13.820033711s ago: executing program 8 (id=1433): syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) setresuid(0x0, 0xee00, 0x0) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r4, 0x0, 0x0) 12.593671336s ago: executing program 9 (id=1437): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) fcntl$setstatus(r0, 0x4, 0x42000) read$FUSE(r0, &(0x7f0000000d00)={0x2020}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) inotify_init() writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4048004) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x5, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) r2 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x3, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r2, 0x40026f33, &(0x7f0000000140)=0xc0) add_key(&(0x7f0000000640)='pkcs7_test\x00', 0x0, &(0x7f00000006c0)="3fce3668", 0x1b, 0xfffffffffffffffe) r3 = socket(0x2d, 0x2, 0x0) connect$netlink(r3, &(0x7f0000000140)=@unspec={0x2d}, 0xc) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(r4, &(0x7f0000002d40)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f00000000c0)={0xf0f041}) 12.399328804s ago: executing program 8 (id=1438): syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac3(0xffffffffffffffff, &(0x7f0000000580)={0x14, &(0x7f0000000100)={0x40, 0x6, 0x4d, {0x4d, 0x22, "93caf4e7652fa8afb42f4baa7fade21233b126a103a09e2010dcef3a365cfc4268d10126b0c780d064804a7f48938a13436f18b1f94d479746f1f0b3d855e2f629c86cbaa4c88656122bce"}}, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) setresuid(0x0, 0xee00, 0x0) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, r4, 0x0, 0x31, r4) keyctl$read(0xb, r4, 0x0, 0x0) request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) 9.721889795s ago: executing program 9 (id=1441): syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac3(0xffffffffffffffff, &(0x7f0000000580)={0x14, &(0x7f0000000100)={0x40, 0x6, 0x51, {0x51, 0x22, "93caf4e7652fa8afb42f4baa7fade21233b126a103a09e2010dcef3a365cfc4268d10126b0c780d064804a7f48938a13436f18b1f94d479746f1f0b3d855e2f629c86cbaa4c88656122bce6e5b4913"}}, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) setresuid(0x0, 0xee00, 0x0) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, r4, 0x0, 0x31, r4) keyctl$read(0xb, r4, 0x0, 0x0) request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) 8.456579129s ago: executing program 6 (id=1446): syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c636865636b3d72656c617865642c646d61736b3d30303030303030303030303030303030303030303036322c666c7573682c00ed65503ccec9beef4e3a71579390a78893cf794eabe67967531177a5a8a723cb36529bc238be0bc2df664dee9ab34c2269c61c143e0c11a83b8a7214e0a160bcc29b3c030bf99ccb18520651f6cb1a99bbe9b6f8235a156c38c8cb2a8312538163a9da8fb380c7caa6475b7003c0e3003e88bd4ef6abe8b7c2dad0d8e397576687df8ae41502420d0aba004f5b98e9a286"], 0x1, 0x29b, &(0x7f0000000340)="$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") syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), 0xffffffffffffffff) futex(0x0, 0x5, 0x0, 0x0, 0x0, 0x2fffffd) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x11020, 0x0, 0x1, 0x0, 0x0) 8.234129617s ago: executing program 9 (id=1447): r0 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='\x00\xe5\xff\xff\xff\xff\xff\xff\xff2', &(0x7f0000000180)='%*.\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f00000002c0)='\xe6\xdf\xf4\x89\b,\xcd\x9dP\x9e\xd7\xe3/\xd2=#\xc8\xb7\x98\f\x87\xcf\x00\x00\x00\x00\x00\x00\x00\x9a\x8e\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000200)="82", 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b80)='\xe0\"\xef\xb1\xea\xe6\x9c\xe6\xc8M\xdb\x86\xb3\x8b\xbe\xd5\xbdB\x92\xa0\x19-+a\x13qQ\xd5f39hSr\xafbB\xe2\xe8\xcd\x1bf\x18\x7f\xf27E#\"\xab\x99\xec\x88\x8d\xd8C\x0f\x95\xff\xfeG\xf9t\xb1 \xcc\xc5\xbb\x88\xb6\xd2\xf2Jwq\xf8oG0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000740)={0x48, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x24, 0x33, @probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x1c00}, @broadcast, @device_a, @initial, {0x6, 0x1}}, @void, @void, @void, @void, @val={0x72, 0x6}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x7]}]}, 0x48}}, 0x28008004) 6.455618543s ago: executing program 1 (id=1455): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) fcntl$setstatus(r0, 0x4, 0x42000) read$FUSE(r0, &(0x7f0000000d00)={0x2020}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) inotify_init() writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4048004) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x5, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) r2 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x3, 0x4}) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r2, 0x40026f34, &(0x7f0000000040)=0x1) ioctl$DVB_DEMUX_DMX_ADD_PID(r2, 0x40026f33, &(0x7f0000000140)=0xc0) add_key(&(0x7f0000000640)='pkcs7_test\x00', 0x0, &(0x7f00000006c0)="3fce3668", 0x1b, 0xfffffffffffffffe) connect$netlink(0xffffffffffffffff, &(0x7f0000000140)=@unspec={0x2d}, 0xc) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(r3, &(0x7f0000002d40)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f00000000c0)={0xf0f041}) 5.544643552s ago: executing program 6 (id=1456): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_OPER(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x30, r1, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x44014}, 0x20000000) 4.591757112s ago: executing program 6 (id=1457): syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac3(0xffffffffffffffff, &(0x7f0000000580)={0x14, &(0x7f0000000100)={0x40, 0x6, 0x51, {0x51, 0x22, "93caf4e7652fa8afb42f4baa7fade21233b126a103a09e2010dcef3a365cfc4268d10126b0c780d064804a7f48938a13436f18b1f94d479746f1f0b3d855e2f629c86cbaa4c88656122bce6e5b4913"}}, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) setresuid(0x0, 0xee00, 0x0) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, r4, 0x0, 0x31, r4) keyctl$read(0xb, r4, 0x0, 0x0) request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) 3.610569264s ago: executing program 1 (id=1459): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r0 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) quotactl_fd$Q_SETINFO(r0, 0xffffffff80000601, 0x0, &(0x7f0000000300)={0x5, 0x2, 0x1, 0x1}) 3.552456354s ago: executing program 4 (id=1460): mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000009d000000010001000900000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{r0}, 0x0, &(0x7f0000010140)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r0, &(0x7f0000000080), 0x0}, 0x20) 3.486003139s ago: executing program 4 (id=1461): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80782, 0x0) ioctl$TIOCPKT(r0, 0x5420, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x6) ioctl$TCXONC(r1, 0x540a, 0x3) 3.469052188s ago: executing program 1 (id=1462): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x78, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x41c}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x2}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x78}}, 0x0) 3.328873945s ago: executing program 8 (id=1463): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x30, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1000}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="840000001000010027bd700402d4df2500000000", @ANYRES32=r2, @ANYBLOB="916f0600c06a010064001280110001006272696467655f736c617665000000004c00058005001e00a10000000500210000000000050009000000000005"], 0x84}, 0x1, 0x0, 0x0, 0x24004011}, 0x0) 3.264432224s ago: executing program 4 (id=1464): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x200280d0}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="501a00000d0a010800000000000000000a0000000900020073797a31000000000900010073797a3100000000241a038018013f800c000a8006000100003f01000800034000000002"], 0x1a50}}, 0x8000) 3.152362507s ago: executing program 9 (id=1465): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc_mnt\x00', 0x1ff) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000440), 0x10) socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0xf5d1b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x6b4, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, &(0x7f0000000280)='./proc_mnt\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x80) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)={0x20, 0x19, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x8004) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc_mnt/net/can/rcvlist_sff\x00', 0x0, 0x0) read(r6, &(0x7f0000000400)=""/1, 0x1000) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = syz_open_dev$dvb_frontend(0x0, 0x0, 0x40002) ioctl$FE_GET_INFO(r7, 0x80a86f3d, &(0x7f00000001c0)) 3.128352898s ago: executing program 6 (id=1466): socketpair$unix(0x1, 0x2, 0x0, 0x0) unshare(0x22020600) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x108843, 0x55) setuid(0xee01) fcntl$setlease(r0, 0x400, 0x2) 3.03116222s ago: executing program 1 (id=1467): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='7', 0x1) futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x0) 2.980652991s ago: executing program 4 (id=1468): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) fcntl$setstatus(r0, 0x4, 0x42000) read$FUSE(r0, &(0x7f0000000d00)={0x2020}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) inotify_init() writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4048004) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x5, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) r2 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r2, 0x40026f34, &(0x7f0000000040)=0x1) ioctl$DVB_DEMUX_DMX_ADD_PID(r2, 0x40026f33, &(0x7f0000000140)=0xc0) add_key(&(0x7f0000000640)='pkcs7_test\x00', 0x0, &(0x7f00000006c0)="3fce3668", 0x1b, 0xfffffffffffffffe) r3 = socket(0x2d, 0x2, 0x0) connect$netlink(r3, &(0x7f0000000140)=@unspec={0x2d}, 0xc) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(r4, &(0x7f0000002d40)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f00000000c0)={0xf0f041}) 2.131571096s ago: executing program 9 (id=1469): openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x6000000d}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000c40)={0x2000000a}) 2.040542893s ago: executing program 1 (id=1470): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) fcntl$setstatus(r0, 0x4, 0x42000) read$FUSE(r0, &(0x7f0000000d00)={0x2020}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) inotify_init() writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4048004) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x5, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) r2 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x3, 0x4}) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r2, 0x40026f34, &(0x7f0000000040)=0x1) ioctl$DVB_DEMUX_DMX_ADD_PID(r2, 0x40026f33, &(0x7f0000000140)=0xc0) add_key(&(0x7f0000000640)='pkcs7_test\x00', 0x0, &(0x7f00000006c0)="3fce3668", 0x1b, 0xfffffffffffffffe) connect$netlink(0xffffffffffffffff, &(0x7f0000000140)=@unspec={0x2d}, 0xc) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(r3, &(0x7f0000002d40)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f00000000c0)={0xf0f041}) 288.853184ms ago: executing program 4 (id=1471): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) sendmmsg$unix(r1, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9802}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x20000004}}], 0x2, 0x0) 72.660578ms ago: executing program 4 (id=1472): r0 = landlock_create_ruleset(&(0x7f0000000180)={0x8201, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r1, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x419, 0x600, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xf8, 0x0, "", [{{0x9, 0x4, 0x0, 0x10, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}}}]}}]}}, 0x0) 22.083016ms ago: executing program 1 (id=1473): syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac3(0xffffffffffffffff, &(0x7f0000000580)={0x14, &(0x7f0000000100)={0x40, 0x6, 0x4f, {0x4f, 0x22, "93caf4e7652fa8afb42f4baa7fade21233b126a103a09e2010dcef3a365cfc4268d10126b0c780d064804a7f48938a13436f18b1f94d479746f1f0b3d855e2f629c86cbaa4c88656122bce6e5b"}}, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) setresuid(0x0, 0xee00, 0x0) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, r4, 0x0, 0x31, r4) keyctl$read(0xb, r4, 0x0, 0x0) request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) 0s ago: executing program 9 (id=1474): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000c00000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x7ff, r0, 0x4}, 0x38) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}, 0x38) kernel console output (not intermixed with test programs): 967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.873" name="file2" dev="loop9" ino=140 res=0 errno=-22 [ 495.036015][T10055] loop8: detected capacity change from 0 to 8 [ 495.284143][T10061] loop9: detected capacity change from 0 to 164 [ 495.299358][T10061] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 495.316477][T10061] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 495.401863][T10064] netlink: 4 bytes leftover after parsing attributes in process `syz.4.878'. [ 495.414579][T10065] Bluetooth: hci0: unsupported parameter 5161 [ 495.414604][T10065] Bluetooth: hci0: unsupported parameter 8192 [ 495.414616][T10065] Bluetooth: hci0: unsupported parameter 5161 [ 495.414627][T10065] Bluetooth: hci0: unsupported parameter 8192 [ 495.506966][ T27] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 495.644790][T10073] loop9: detected capacity change from 0 to 256 [ 495.645780][T10073] exfat: Deprecated parameter 'namecase' [ 495.645810][T10073] exfat: Deprecated parameter 'utf8' [ 495.668380][ T27] usb 2-1: New USB device found: idVendor=05ab, idProduct=0301, bcdDevice=1.00 [ 495.669397][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 495.669422][ T27] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 495.669443][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 495.669463][ T27] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 495.672132][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.672154][ T27] usb 2-1: Product: syz [ 495.672166][ T27] usb 2-1: Manufacturer: syz [ 495.672179][ T27] usb 2-1: SerialNumber: syz [ 495.733959][T10041] loop6: detected capacity change from 0 to 32768 [ 495.738614][T10073] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xb94bd070, utbl_chksum : 0xe619d30d) [ 495.743270][ T27] usb 2-1: config 0 descriptor?? [ 495.761367][T10041] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.874 (10041) [ 495.785471][ T27] ums-isd200 2-1:0.0: USB Mass Storage device detected [ 495.853874][T10041] BTRFS info (device loop6): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 495.853909][T10041] BTRFS info (device loop6): using blake2b checksum algorithm [ 496.001701][ T27] scsi host1: usb-storage 2-1:0.0 [ 496.085768][T10097] capability: warning: `syz.8.884' uses deprecated v2 capabilities in a way that may be insecure [ 496.283404][ T27] usb 2-1: USB disconnect, device number 12 [ 496.313582][T10041] BTRFS info (device loop6): enabling ssd optimizations [ 496.313632][T10041] BTRFS info (device loop6): turning on async discard [ 496.313648][T10041] BTRFS info (device loop6): enabling free space tree [ 497.117776][ T7611] BTRFS info (device loop6): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 497.457970][ T9] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 497.507243][ T27] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 497.657232][ T27] usb 2-1: Using ep0 maxpacket: 32 [ 497.665234][ T27] usb 2-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 497.683938][ T27] usb 2-1: config 1 interface 0 altsetting 50 bulk endpoint 0x3 has invalid maxpacket 32 [ 497.683969][ T27] usb 2-1: config 1 interface 0 altsetting 50 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 497.683996][ T27] usb 2-1: config 1 interface 0 has no altsetting 0 [ 497.742046][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.742075][ T27] usb 2-1: Product: syz [ 497.742088][ T27] usb 2-1: Manufacturer: syz [ 497.742101][ T27] usb 2-1: SerialNumber: syz [ 497.765640][ T9] usb 10-1: Using ep0 maxpacket: 32 [ 497.768724][T10113] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 497.779407][ T9] usb 10-1: New USB device found: idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 497.782234][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 497.782265][ T9] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 497.782295][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 497.782339][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 498.300397][ T27] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 498.304268][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.304294][ T9] usb 10-1: Product: syz [ 498.304306][ T9] usb 10-1: Manufacturer: syz [ 498.304319][ T9] usb 10-1: SerialNumber: syz [ 498.312953][ T9] usb 10-1: config 0 descriptor?? [ 498.330450][T10110] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 498.395273][ T27] usb 2-1: USB disconnect, device number 13 [ 498.462381][ T9] input: Generic X-Box pad as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input12 [ 498.843533][ T9] usb 10-1: USB disconnect, device number 2 [ 498.843615][ C0] xpad 10-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 499.453812][ T5724] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 499.612225][ T5724] usb 2-1: New USB device found: idVendor=17ef, idProduct=6047, bcdDevice=0.00 [ 499.809211][ T5724] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 499.809492][ T5724] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 499.809531][ T5724] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 499.809673][ T5724] usb 2-1: config 0 interface 0 has no altsetting 0 [ 499.810087][ T5724] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.021637][ T5724] usb 2-1: config 0 descriptor?? [ 500.466521][ T5723] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 500.511340][ T5724] input: HID 17ef:6047 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:17EF:6047.0006/input/input13 [ 500.511935][ T5614] Bluetooth: hci4: SCO packet for unknown connection handle 201 [ 500.621219][ T5723] usb 5-1: New USB device found: idVendor=046d, idProduct=ca04, bcdDevice=0.00 [ 500.622180][ T5723] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 500.622210][ T5723] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 500.622234][ T5723] usb 5-1: config 0 interface 0 has no altsetting 0 [ 500.622265][ T5723] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.688310][ T9] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 500.708853][ T5724] lenovo 0003:17EF:6047.0006: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.1-1/input0 [ 500.717344][ T5723] usb 5-1: config 0 descriptor?? [ 500.765601][ T5724] usb 2-1: USB disconnect, device number 14 [ 500.847853][ T9] usb 10-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 500.850346][ T9] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 500.850430][ T9] usb 10-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 500.850454][ T9] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 500.850472][ T9] usb 10-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 500.853007][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.853031][ T9] usb 10-1: Product: syz [ 500.853043][ T9] usb 10-1: Manufacturer: syz [ 500.853081][ T9] usb 10-1: SerialNumber: syz [ 500.891724][T10169] fido_id[10169]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 500.937876][ T27] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 500.977418][ T9] cdc_mbim 10-1:1.0: skipping garbage [ 501.059806][T10172] misc userio: Invalid payload size [ 501.060333][T10172] misc userio: The device must be registered before sending interrupts [ 501.088476][ T27] usb 9-1: New USB device found: idVendor=054c, idProduct=0268, bcdDevice=0.00 [ 501.090954][ T27] usb 9-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 501.090985][ T27] usb 9-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 501.091036][ T27] usb 9-1: config 0 interface 0 has no altsetting 0 [ 501.091069][ T27] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.099270][ T27] usb 9-1: config 0 descriptor?? [ 501.145999][ T5723] hid_parser_main: 30 callbacks suppressed [ 501.146116][ T5723] logitech 0003:046D:CA04.0007: unknown main item tag 0x0 [ 501.192681][ T5723] logitech 0003:046D:CA04.0007: hiddev0,hidraw0: USB HID v0.00 Device [HID 046d:ca04] on usb-dummy_hcd.4-1/input0 [ 501.192752][ T5723] logitech 0003:046D:CA04.0007: no inputs found [ 501.194005][ T9] cdc_mbim 10-1:1.0: bind() failure [ 501.238436][ T9] cdc_ncm 10-1:1.1: CDC Union missing and no IAD found [ 501.238508][ T9] cdc_ncm 10-1:1.1: bind() failure [ 501.245045][ T9] usb 10-1: USB disconnect, device number 3 [ 501.412029][ T5724] usb 5-1: USB disconnect, device number 9 [ 501.451170][T10179] loop1: detected capacity change from 0 to 512 [ 501.514243][T10179] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 501.520466][T10179] ext4 filesystem being mounted at /181/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 501.549189][T10184] loop6: detected capacity change from 0 to 8 [ 501.584228][T10184] SQUASHFS error: Unable to read directory block [1d0:74] [ 501.629893][ T5609] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 501.747663][ T27] sony 0003:054C:0268.0008: failed to retrieve feature report 0xf2 with the Sixaxis MAC address [ 501.882727][ T27] sony 0003:054C:0268.0008: hiddev0,hidraw0: USB HID v80.00 Joystick [HID 054c:0268] on usb-dummy_hcd.8-1/input0 [ 501.882760][ T27] sony 0003:054C:0268.0008: failed to claim input [ 501.970604][ T27] usb 9-1: USB disconnect, device number 7 [ 502.013898][T10195] loop9: detected capacity change from 0 to 64 [ 502.117201][ T5756] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 502.119960][T10193] fido_id[10193]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 502.213680][ T32] audit: type=1800 audit(2000000161.450:93): pid=10195 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.916" name="file1" dev="loop9" ino=5 res=0 errno=-22 [ 502.267381][ T5756] usb 2-1: Using ep0 maxpacket: 8 [ 502.268180][ T5756] usb 2-1: New USB device found: idVendor=172f, idProduct=0038, bcdDevice=0.00 [ 502.269352][ T5756] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 502.269382][ T5756] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1040, setting to 1024 [ 502.269408][ T5756] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 502.269433][ T5756] usb 2-1: config 0 interface 0 has no altsetting 0 [ 502.269464][ T5756] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.292409][ T5756] usb 2-1: config 0 descriptor?? [ 502.293552][T10189] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 502.378702][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.378756][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.495054][T10197] loop4: detected capacity change from 0 to 32768 [ 502.502943][T10197] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.917 (10197) [ 502.526068][T10197] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 502.526102][T10197] BTRFS info (device loop4): using blake2b checksum algorithm [ 502.607218][T10197] BTRFS info (device loop4): enabling ssd optimizations [ 502.607247][T10197] BTRFS info (device loop4): turning on async discard [ 502.607263][T10197] BTRFS info (device loop4): enabling free space tree [ 502.607281][T10197] BTRFS info (device loop4): use zstd compression, level 3 [ 502.706387][ T9] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 502.722951][ T5756] hid (null): global environment stack underflow [ 502.724905][ T5610] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 502.750631][ T5756] waltop 0003:172F:0038.0009: unknown main item tag 0x2 [ 502.750943][ T5756] waltop 0003:172F:0038.0009: reserved main item tag 0xd [ 502.750976][ T5756] waltop 0003:172F:0038.0009: global environment stack underflow [ 502.750990][ T5756] waltop 0003:172F:0038.0009: item 0 2 1 11 parsing failed [ 502.755336][ T5756] waltop 0003:172F:0038.0009: probe with driver waltop failed with error -22 [ 502.917958][ T9] usb 9-1: New USB device found: idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 502.921419][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.921444][ T9] usb 9-1: Product: syz [ 502.921458][ T9] usb 9-1: Manufacturer: syz [ 502.921493][ T9] usb 9-1: SerialNumber: syz [ 502.952821][ T9] usb 9-1: config 0 descriptor?? [ 502.985989][ T9855] usb 2-1: USB disconnect, device number 15 [ 503.018038][T10200] loop9: detected capacity change from 0 to 32768 [ 503.214790][T10200] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 503.469064][ T9473] ocfs2: Unmounting device (7,9) on (node local) [ 503.668622][ T9] usb 9-1: Firmware version (0.0) predates our first public release. [ 503.668648][ T9] usb 9-1: Please update to version 0.2 or newer [ 504.079642][ T9] usb 9-1: USB disconnect, device number 8 [ 504.933742][ T5724] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 504.980816][T10243] loop4: detected capacity change from 0 to 32768 [ 505.002390][T10243] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.929 (10243) [ 505.047935][T10243] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 505.047969][T10243] BTRFS info (device loop4): using blake2b checksum algorithm [ 505.103237][ T5724] usb 2-1: New USB device found: idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 505.108602][ T5724] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 505.108652][ T5724] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 505.108677][ T5724] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 505.108723][ T5724] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.130425][T10251] loop6: detected capacity change from 0 to 4096 [ 505.225906][T10243] BTRFS info (device loop4): enabling ssd optimizations [ 505.225934][T10243] BTRFS info (device loop4): turning on async discard [ 505.225949][T10243] BTRFS info (device loop4): enabling free space tree [ 505.225964][T10243] BTRFS info (device loop4): use zstd compression, level 3 [ 505.268829][ T5724] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 505.272731][ T5724] usb 2-1: invalid MIDI out EP 0 [ 505.433431][ T32] audit: type=1800 audit(2000000164.670:94): pid=10243 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.929" name="file1" dev="loop4" ino=260 res=0 errno=-22 [ 505.688822][T10268] loop9: detected capacity change from 0 to 40427 [ 505.763166][T10268] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 505.763202][T10268] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 505.865928][T10268] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 505.882473][ T5610] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 505.895657][T10268] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 505.895683][T10268] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 506.186848][ T32] audit: type=1800 audit(2000000165.420:95): pid=10268 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.935" name="file1" dev="loop9" ino=11 res=0 errno=-22 [ 506.423247][T10282] genirq: Flags mismatch irq 32. 00200000 (pcmmio) vs. 00200000 (virtio1-output.0) [ 506.794540][T10285] syz.9.935: attempt to access beyond end of device [ 506.794540][T10285] loop9: rw=8423425, sector=77824, nr_sectors = 8 limit=40427 [ 508.432316][T10292] ip_tables: iptables: counters copy to user failed while replacing table [ 509.056415][ T27] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 509.097321][ T9473] F2FS-fs (loop9): invalid namelen(0), ino:0, run fsck to fix. [ 509.097344][ T9473] F2FS-fs (loop9): invalid namelen(0), ino:0, run fsck to fix. [ 509.097359][ T9473] F2FS-fs (loop9): invalid namelen(0), ino:0, run fsck to fix. [ 509.097372][ T9473] F2FS-fs (loop9): invalid namelen(0), ino:0, run fsck to fix. [ 509.097379][ T9473] F2FS-fs (loop9): invalid namelen(0), ino:0, run fsck to fix. [ 509.097386][ T9473] F2FS-fs (loop9): invalid namelen(0), ino:0, run fsck to fix. [ 509.097394][ T9473] F2FS-fs (loop9): invalid namelen(0), ino:0, run fsck to fix. [ 509.206299][ T27] usb 9-1: Using ep0 maxpacket: 8 [ 509.207290][ T27] usb 9-1: New USB device found: idVendor=0518, idProduct=0002, bcdDevice=0.00 [ 509.208481][ T27] usb 9-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 509.208508][ T27] usb 9-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 509.208529][ T27] usb 9-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 509.208553][ T27] usb 9-1: config 0 interface 0 has no altsetting 0 [ 509.208584][ T27] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.282335][T10302] loop6: detected capacity change from 0 to 4096 [ 509.313970][ T27] usb 9-1: config 0 descriptor?? [ 509.375517][ T5756] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 509.443222][T10302] ntfs3(loop6): Failed to load $Extend (-22). [ 509.443279][T10302] ntfs3(loop6): Failed to initialize $Extend. [ 509.510273][T10302] ntfs3(loop6): ino=20, mi_enum_attr [ 509.529466][ T5756] usb 5-1: New USB device found: idVendor=04b4, idProduct=bca1, bcdDevice=0.00 [ 509.531864][ T5756] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 509.531898][ T5756] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 509.531958][ T5756] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.583297][ T5756] usb 5-1: config 0 descriptor?? [ 509.584347][T10304] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 509.749105][T10296] loop1: detected capacity change from 0 to 40427 [ 509.754487][T10296] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 509.754511][T10296] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 509.789487][T10296] F2FS-fs (loop1): invalid crc value [ 509.849940][ T27] input: HID 0518:0002 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0518:0002.000A/input/input15 [ 510.018379][ T5756] cypress 0003:04B4:BCA1.000B: unknown main item tag 0x0 [ 510.019965][ T5756] cypress 0003:04B4:BCA1.000B: unknown main item tag 0x0 [ 510.020002][ T5756] cypress 0003:04B4:BCA1.000B: unknown main item tag 0x0 [ 510.020028][ T5756] cypress 0003:04B4:BCA1.000B: unknown main item tag 0x0 [ 510.020053][ T5756] cypress 0003:04B4:BCA1.000B: unknown main item tag 0x0 [ 510.020078][ T5756] cypress 0003:04B4:BCA1.000B: unknown main item tag 0x0 [ 510.020103][ T5756] cypress 0003:04B4:BCA1.000B: unknown main item tag 0x0 [ 510.020128][ T5756] cypress 0003:04B4:BCA1.000B: unknown main item tag 0x0 [ 510.020152][ T5756] cypress 0003:04B4:BCA1.000B: unknown main item tag 0x0 [ 510.020178][ T5756] cypress 0003:04B4:BCA1.000B: unknown main item tag 0x0 [ 510.155100][ T27] ezkey 0003:0518:0002.000A: input,hiddev0,hidraw0: USB HID v0.f1 Device [HID 0518:0002] on usb-dummy_hcd.8-1/input0 [ 510.176290][ T27] usb 9-1: USB disconnect, device number 9 [ 510.313607][ T5756] cypress 0003:04B4:BCA1.000B: hidraw1: USB HID v7f.fd Device [HID 04b4:bca1] on usb-dummy_hcd.4-1/input0 [ 510.400569][T10296] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 510.429601][ T5756] usb 5-1: USB disconnect, device number 10 [ 510.579381][T10296] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 510.579411][T10296] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 510.751459][ T32] audit: type=1800 audit(2000000169.990:96): pid=10296 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.942" name="file1" dev="loop1" ino=10 res=0 errno=-22 [ 510.778907][T10313] fido_id[10313]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 510.812497][T10312] fido_id[10312]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 510.896973][ T5609] syz-executor: attempt to access beyond end of device [ 510.896973][ T5609] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 510.948992][ T5609] CPU: 0 UID: 0 PID: 5609 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 510.949028][ T5609] Tainted: [L]=SOFTLOCKUP [ 510.949035][ T5609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 510.949051][ T5609] Call Trace: [ 510.949129][ T5609] [ 510.949177][ T5609] dump_stack_lvl+0xe8/0x150 [ 510.949301][ T5609] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 510.949391][ T5609] f2fs_write_end_bio+0xda7/0x11c0 [ 510.949456][ T5609] __submit_merged_bio+0x258/0x6a0 [ 510.949476][ T5609] ? rcu_is_watching+0x16/0xb0 [ 510.949526][ T5609] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 510.949550][ T5609] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 510.949595][ T5609] f2fs_write_data_pages+0x2a13/0x36e0 [ 510.949650][ T5609] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 510.949682][ T5609] ? is_bpf_text_address+0x292/0x2b0 [ 510.949722][ T5609] ? is_bpf_text_address+0x26/0x2b0 [ 510.949766][ T5609] ? stack_trace_save+0xa9/0x100 [ 510.949790][ T5609] ? __pfx_stack_trace_save+0x10/0x10 [ 510.949825][ T5609] ? lockdep_unlock+0x5c/0xd0 [ 510.949852][ T5609] ? __lock_acquire+0x1511/0x2de0 [ 510.949897][ T5609] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 510.949918][ T5609] do_writepages+0x338/0x560 [ 510.949958][ T5609] ? do_raw_spin_unlock+0xf5/0x200 [ 510.949982][ T5609] filemap_fdatawrite+0x1e9/0x2f0 [ 510.950006][ T5609] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 510.950071][ T5609] ? do_raw_spin_unlock+0xf5/0x200 [ 510.950094][ T5609] f2fs_sync_dirty_inodes+0x471/0x970 [ 510.950158][ T5609] f2fs_write_checkpoint+0x860/0x24d0 [ 510.950214][ T5609] kill_f2fs_super+0x2dc/0x700 [ 510.950238][ T5609] ? rcu_do_enqueue+0x616/0x870 [ 510.950257][ T5609] ? lockdep_hardirqs_on+0x7b/0x110 [ 510.950356][ T5609] ? __pfx_kill_f2fs_super+0x10/0x10 [ 510.950382][ T5609] ? __pfx_call_rcu+0x10/0x10 [ 510.950404][ T5609] ? shrinker_free+0x2a7/0x3b0 [ 510.950451][ T5609] deactivate_locked_super+0xbe/0x110 [ 510.950488][ T5609] cleanup_mnt+0x204/0x2a0 [ 510.950522][ T5609] task_work_run+0x1d9/0x260 [ 510.950559][ T5609] ? __pfx_task_work_run+0x10/0x10 [ 510.950588][ T5609] exit_to_user_mode_loop+0x204/0x770 [ 510.950606][ T5609] ? rcu_is_watching+0x16/0xb0 [ 510.950628][ T5609] do_syscall_64+0x328/0x520 [ 510.950646][ T5609] ? trace_irq_disable+0x3b/0x140 [ 510.950662][ T5609] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.950700][ T5609] ? clear_bhb_loop+0x70/0xc0 [ 510.950720][ T5609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.950738][ T5609] RIP: 0033:0x7f7ba8d9f417 [ 510.950791][ T5609] Code: a2 c7 05 dc 62 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 510.950807][ T5609] RSP: 002b:00007ffd0657ad38 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 510.950861][ T5609] RAX: 0000000000000000 RBX: 00007f7ba8e34ccb RCX: 00007f7ba8d9f417 [ 510.950873][ T5609] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd0657adf0 [ 510.950885][ T5609] RBP: 00007ffd0657adf0 R08: 00007ffd0657bdf0 R09: 00000000ffffffff [ 510.950898][ T5609] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd0657be80 [ 510.950910][ T5609] R13: 00007f7ba8e34ccb R14: 000000000007cae9 R15: 00007ffd0657bec0 [ 510.950942][ T5609] [ 510.976072][ T5609] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 511.315727][ T32] audit: type=1326 audit(2000000170.550:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10318 comm="syz.4.950" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe93219e1d9 code=0x7ffc0000 [ 511.315998][ T32] audit: type=1326 audit(2000000170.550:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10318 comm="syz.4.950" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe93219e1d9 code=0x7ffc0000 [ 511.340342][ T32] audit: type=1326 audit(2000000170.570:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10318 comm="syz.4.950" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe93219e1d9 code=0x7ffc0000 [ 511.340978][ T32] audit: type=1326 audit(2000000170.570:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10318 comm="syz.4.950" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe93219e1d9 code=0x7ffc0000 [ 511.350243][ T32] audit: type=1326 audit(2000000170.590:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10318 comm="syz.4.950" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe93215ea0e code=0x7ffc0000 [ 511.350297][ T32] audit: type=1326 audit(2000000170.590:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10318 comm="syz.4.950" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe93219e1d9 code=0x7ffc0000 [ 511.350336][ T32] audit: type=1326 audit(2000000170.590:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10318 comm="syz.4.950" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe93219e1d9 code=0x7ffc0000 [ 511.357158][ T32] audit: type=1326 audit(2000000170.590:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10318 comm="syz.4.950" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe93219e1d9 code=0x7ffc0000 [ 511.357217][ T32] audit: type=1326 audit(2000000170.590:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10318 comm="syz.4.950" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe93219e1d9 code=0x7ffc0000 [ 511.373299][T10321] sd 0:0:1:0: device reset [ 511.387161][ T5724] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 511.420045][ T5724] usb 2-1: USB disconnect, device number 16 [ 511.470838][ T9855] usb 9-1: new full-speed USB device number 10 using dummy_hcd [ 511.721156][ T9855] usb 9-1: New USB device found: idVendor=056e, idProduct=00ff, bcdDevice=0.00 [ 511.727358][ T9855] usb 9-1: config 0 interface 0 has no altsetting 0 [ 511.727418][ T9855] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.755534][ T9855] usb 9-1: config 0 descriptor?? [ 511.765578][T10324] loop4: detected capacity change from 0 to 512 [ 511.772836][T10324] EXT4-fs: Ignoring removed nobh option [ 511.788824][T10324] fscrypt (loop4, inode 2): Error -61 getting encryption context [ 511.789646][T10324] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -61 [ 511.789733][T10324] EXT4-fs error (device loop4): ext4_orphan_get:1403: inode #13: comm syz.4.951: inode has both inline data and extents flags [ 511.789789][T10324] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 511.790956][T10324] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.951: couldn't read orphan inode 13 (err -117) [ 511.790984][T10324] loop4: lost filesystem error report for type 5 error -117 [ 511.795126][T10311] loop6: detected capacity change from 0 to 40427 [ 511.801967][T10324] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 511.838548][T10311] F2FS-fs (loop6): Corrupted extension count (64 + 1 > 64) [ 511.838576][T10311] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 511.878855][T10324] fscrypt (loop4, inode 2): Error -61 getting encryption context [ 511.923162][T10311] F2FS-fs (loop6): Image doesn't support compression [ 511.935040][ T5610] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 511.947996][T10311] F2FS-fs (loop6): invalid crc value [ 512.200699][T10336] tipc: Started in network mode [ 512.200732][T10336] tipc: Node identity e0000001, cluster identity 4711 [ 512.200830][T10336] tipc: Enabling of bearer rejected, failed to enable media [ 512.239693][ T9855] elecom 0003:056E:00FF.000C: global environment stack underflow [ 512.239715][ T9855] elecom 0003:056E:00FF.000C: item 0 0 1 11 parsing failed [ 512.240697][ T9855] elecom 0003:056E:00FF.000C: probe with driver elecom failed with error -22 [ 512.410593][T10311] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 512.482039][ T9855] usb 9-1: USB disconnect, device number 10 [ 512.502364][T10311] F2FS-fs (loop6): f2fs_disable_checkpoint starts, unusable: 0 [ 512.502394][T10311] F2FS-fs (loop6): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 512.502421][T10311] F2FS-fs (loop6): Start checkpoint disabled! [ 512.565045][T10335] loop4: detected capacity change from 0 to 32768 [ 512.580483][T10311] F2FS-fs (loop6): f2fs_disable_checkpoint finishes, err:0 [ 512.594536][T10311] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 512.594562][T10311] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 513.005378][ T6862] kworker/u8:20: attempt to access beyond end of device [ 513.005378][ T6862] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 513.005925][ T6862] CPU: 1 UID: 0 PID: 6862 Comm: kworker/u8:20 Tainted: G L syzkaller #0 PREEMPT(full) [ 513.005953][ T6862] Tainted: [L]=SOFTLOCKUP [ 513.005960][ T6862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 513.005972][ T6862] Workqueue: writeback wb_workfn (flush-7:6) [ 513.006004][ T6862] Call Trace: [ 513.006011][ T6862] [ 513.006019][ T6862] dump_stack_lvl+0xe8/0x150 [ 513.006041][ T6862] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 513.006067][ T6862] f2fs_write_end_bio+0xda7/0x11c0 [ 513.006113][ T6862] __submit_merged_bio+0x258/0x6a0 [ 513.006131][ T6862] ? rcu_is_watching+0x16/0xb0 [ 513.006156][ T6862] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 513.006194][ T6862] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 513.006238][ T6862] f2fs_write_data_pages+0x2a13/0x36e0 [ 513.006294][ T6862] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 513.006327][ T6862] ? stack_trace_save+0xa9/0x100 [ 513.006396][ T6862] ? __lock_acquire+0x747/0x2de0 [ 513.006435][ T6862] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 513.006454][ T6862] do_writepages+0x338/0x560 [ 513.006478][ T6862] ? __lock_acquire+0x747/0x2de0 [ 513.006500][ T6862] ? reacquire_held_locks+0x117/0x1a0 [ 513.006518][ T6862] ? writeback_sb_inodes+0x450/0x1af0 [ 513.006542][ T6862] __writeback_single_inode+0x136/0x1220 [ 513.006563][ T6862] ? do_raw_spin_unlock+0xf5/0x200 [ 513.006585][ T6862] writeback_sb_inodes+0x9de/0x1af0 [ 513.006601][ T6862] ? __lock_acquire+0x747/0x2de0 [ 513.006639][ T6862] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 513.006694][ T6862] ? rcu_is_watching+0x16/0xb0 [ 513.006712][ T6862] ? queue_io+0x2d3/0x470 [ 513.006732][ T6862] wb_writeback+0x41c/0xad0 [ 513.006752][ T6862] ? queue_io+0x261/0x470 [ 513.006775][ T6862] ? __pfx_wb_writeback+0x10/0x10 [ 513.006791][ T6862] ? do_raw_spin_lock+0x12b/0x2f0 [ 513.006826][ T6862] wb_workfn+0x431/0x10f0 [ 513.006863][ T6862] ? __pfx_wb_workfn+0x10/0x10 [ 513.006895][ T6862] ? do_raw_spin_lock+0x12b/0x2f0 [ 513.006922][ T6862] ? lock_acquire+0x115/0x350 [ 513.006949][ T6862] ? rcu_is_watching+0x16/0xb0 [ 513.006968][ T6862] ? process_scheduled_works+0x97a/0x1630 [ 513.006988][ T6862] process_scheduled_works+0xc3d/0x1630 [ 513.007039][ T6862] ? __pfx_process_scheduled_works+0x10/0x10 [ 513.007065][ T6862] ? assign_work+0x3cf/0x5d0 [ 513.007098][ T6862] worker_thread+0xa47/0xfb0 [ 513.007146][ T6862] kthread+0x38b/0x480 [ 513.007164][ T6862] ? __pfx_worker_thread+0x10/0x10 [ 513.007180][ T6862] ? __pfx_kthread+0x10/0x10 [ 513.007199][ T6862] ret_from_fork+0x514/0xb70 [ 513.007247][ T6862] ? __pfx_ret_from_fork+0x10/0x10 [ 513.007265][ T6862] ? __switch_to+0xc78/0x1410 [ 513.007286][ T6862] ? __pfx_kthread+0x10/0x10 [ 513.007305][ T6862] ret_from_fork_asm+0x1a/0x30 [ 513.007340][ T6862] [ 513.135653][ T6862] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 513.506775][ T9855] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 513.670906][ T9855] usb 2-1: New USB device found: idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 513.677264][ T9855] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.677291][ T9855] usb 2-1: Product: syz [ 513.677304][ T9855] usb 2-1: Manufacturer: syz [ 513.677341][ T9855] usb 2-1: SerialNumber: syz [ 513.735913][ T9855] usb 2-1: config 0 descriptor?? [ 513.776712][ T9855] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 513.797294][ T9855] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 513.800977][ T9855] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 513.801054][ T9855] usb 2-1: media controller created [ 513.890874][ T9855] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 513.938000][ T887] usb 10-1: new full-speed USB device number 4 using dummy_hcd [ 513.973704][T10349] dvb-usb: bulk message failed: -22 (7/0) [ 514.005992][T10360] loop4: detected capacity change from 0 to 4096 [ 514.102490][ T887] usb 10-1: New USB device found: idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 514.104189][ T887] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 514.104219][ T887] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 514.104244][ T887] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 514.110217][ T887] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.110242][ T887] usb 10-1: Product: syz [ 514.110256][ T887] usb 10-1: Manufacturer: syz [ 514.110269][ T887] usb 10-1: SerialNumber: syz [ 514.121590][ T887] usb 10-1: config 0 descriptor?? [ 514.171692][ T887] streamzap 10-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?! [ 514.196849][ T9855] DVB: Unable to find symbol mt352_attach() [ 514.198221][T10360] NILFS error (device loop4): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 514.210409][T10366] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 514.247076][T10369] loop8: detected capacity change from 0 to 128 [ 514.252339][T10360] Remounting filesystem read-only [ 514.278454][T10369] FAT-fs (loop8): Directory bread(block 1048) failed [ 514.278488][T10369] FAT-fs (loop8): Directory bread(block 1049) failed [ 514.278510][T10369] FAT-fs (loop8): Directory bread(block 1050) failed [ 514.278532][T10369] FAT-fs (loop8): Directory bread(block 1051) failed [ 514.278553][T10369] FAT-fs (loop8): Directory bread(block 1052) failed [ 514.278575][T10369] FAT-fs (loop8): Directory bread(block 1053) failed [ 514.278594][T10369] FAT-fs (loop8): Directory bread(block 1054) failed [ 514.278614][T10369] FAT-fs (loop8): Directory bread(block 1055) failed [ 514.355940][T10369] syz.8.966: attempt to access beyond end of device [ 514.355940][T10369] loop8: rw=8390659, sector=1096, nr_sectors = 8 limit=128 [ 514.391547][ T9855] DVB: Unable to find symbol nxt6000_attach() [ 514.391565][ T9855] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 514.415819][ T9855] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input16 [ 514.445888][ T887] usb 10-1: USB disconnect, device number 4 [ 514.453854][ T9855] dvb-usb: schedule remote query interval to 1000 msecs. [ 514.453904][ T9855] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 514.453919][ T9855] dvb-usb: bulk message failed: -22 (7/0) [ 514.453933][ T9855] dvb-usb: bulk message failed: -22 (7/0) [ 514.494953][ T9855] usb 2-1: USB disconnect, device number 17 [ 514.757697][T10377] loop1: detected capacity change from 0 to 512 [ 514.758828][T10377] EXT4-fs: Ignoring removed i_version option [ 514.758896][T10377] EXT4-fs: Ignoring removed bh option [ 514.795860][T10377] EXT4-fs error (device loop1): ext4_orphan_get:1403: comm syz.1.970: inode #13: comm syz.1.970: iget: illegal inode # [ 514.795896][T10377] loop1: lost filesystem error report for type 5 error -117 [ 514.806435][T10377] EXT4-fs (loop1): Remounting filesystem read-only [ 514.808087][T10377] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 514.848061][ T27] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 514.853758][ T9855] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 514.927292][ T887] usb 9-1: new full-speed USB device number 11 using dummy_hcd [ 514.953461][ T5609] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 515.020598][ T27] usb 5-1: New USB device found: idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 515.043636][ T27] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 515.043665][ T27] usb 5-1: config 0 has no interface number 0 [ 515.053142][ T27] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.053169][ T27] usb 5-1: Product: syz [ 515.053181][ T27] usb 5-1: Manufacturer: syz [ 515.053194][ T27] usb 5-1: SerialNumber: syz [ 515.061937][ T27] usb 5-1: config 0 descriptor?? [ 515.091246][ T887] usb 9-1: New USB device found: idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 515.107232][ T887] usb 9-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 515.107260][ T887] usb 9-1: Product: syz [ 515.107273][ T887] usb 9-1: Manufacturer: syz [ 515.107286][ T887] usb 9-1: SerialNumber: syz [ 515.121197][ T27] usb 5-1: selecting invalid altsetting 1 [ 515.121471][ T27] dvb_ttusb_budget: ttusb_init_controller: error [ 515.121485][ T27] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 515.152126][ T887] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 515.211697][T10383] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 515.484884][ T27] DVB: Unable to find symbol stv0299_attach() [ 515.999932][ T887] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 515.999978][ T887] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 516.074092][ T27] DVB: Unable to find symbol tda8083_attach() [ 516.074108][ T27] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 516.093058][ T27] usb 5-1: USB disconnect, device number 11 [ 516.321455][ T887] usb 9-1: USB disconnect, device number 11 [ 516.472032][T10403] loop4: detected capacity change from 0 to 512 [ 516.521230][T10403] EXT4-fs error (device loop4): ext4_orphan_get:1403: inode #15: comm syz.4.977: iget: bad i_size value: 38620345925642 [ 516.521273][T10403] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 516.536082][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 516.536106][ C1] EXT4-fs (loop4): initial error at time 2000000175: ext4_orphan_get:1403: inode 15 [ 516.536135][ C1] EXT4-fs (loop4): last error at time 2000000175: ext4_orphan_get:1403: inode 15 [ 516.538006][T10403] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.977: couldn't read orphan inode 15 (err -117) [ 516.538037][T10403] loop4: lost filesystem error report for type 5 error -117 [ 516.622533][T10403] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 516.968772][ T5610] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 517.926681][ T887] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 517.991160][T10429] loop6: detected capacity change from 0 to 2048 [ 518.004292][T10429] EXT4-fs: Ignoring removed nomblk_io_submit option [ 518.063477][T10429] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 518.136546][ T887] usb 9-1: Using ep0 maxpacket: 8 [ 518.234339][ T887] usb 9-1: unable to get BOS descriptor or descriptor too short [ 518.234392][ T887] usb 9-1: New USB device found: idVendor=0a92, idProduct=1020, bcdDevice=0.40 [ 518.239925][ T887] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 518.239960][ T887] usb 9-1: can't read configurations, error -71 [ 518.280004][ T7611] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 518.326334][ T5724] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 518.406825][ T9855] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 518.488393][T10443] ip_tables: iptables: counters copy to user failed while replacing table [ 518.489744][ T5724] usb 2-1: New USB device found: idVendor=055f, idProduct=a800, bcdDevice=1.00 [ 518.513899][ T5724] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 1306, setting to 64 [ 518.513969][ T5724] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.542824][T10432] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 518.558546][ T5724] mdc800 2-1:1.0: Found Mustek MDC800 on USB. [ 518.579806][ T9855] usb 5-1: New USB device found: idVendor=0b05, idProduct=1807, bcdDevice=0.00 [ 518.582757][ T9855] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 518.582790][ T9855] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 518.582814][ T9855] usb 5-1: config 0 interface 0 has no altsetting 0 [ 518.582879][ T9855] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.614725][ T9855] usb 5-1: config 0 descriptor?? [ 518.929644][ T5724] usb 2-1: USB disconnect, device number 18 [ 519.249827][ T5274] 8021q: adding VLAN 0 to HW filter on device eth17 [ 519.544168][ T5724] mdc800 2-1:1.0: Mustek MDC800 disconnected from USB. [ 519.566751][T10453] loop8: detected capacity change from 0 to 512 [ 519.663991][T10453] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 519.664107][T10453] ext4 filesystem being mounted at /102/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 519.689495][ T9855] hid_parser_main: 222 callbacks suppressed [ 519.689542][ T9855] asus 0003:0B05:1807.000D: unknown main item tag 0x0 [ 519.689578][ T9855] asus 0003:0B05:1807.000D: unknown main item tag 0x0 [ 519.689603][ T9855] asus 0003:0B05:1807.000D: unknown main item tag 0x0 [ 519.689627][ T9855] asus 0003:0B05:1807.000D: unknown main item tag 0x0 [ 519.689652][ T9855] asus 0003:0B05:1807.000D: unknown main item tag 0x0 [ 519.689705][ T9855] asus 0003:0B05:1807.000D: unknown main item tag 0x0 [ 519.689730][ T9855] asus 0003:0B05:1807.000D: unknown main item tag 0x0 [ 519.689754][ T9855] asus 0003:0B05:1807.000D: unknown main item tag 0x0 [ 519.689778][ T9855] asus 0003:0B05:1807.000D: unknown main item tag 0x0 [ 519.689802][ T9855] asus 0003:0B05:1807.000D: unknown main item tag 0x0 [ 519.738243][ T9855] asus 0003:0B05:1807.000D: hidraw0: USB HID v0.00 Device [HID 0b05:1807] on usb-dummy_hcd.4-1/input0 [ 519.763777][ T9855] usb 5-1: USB disconnect, device number 12 [ 519.887880][ T4425] bridge_slave_1: left allmulticast mode [ 519.887926][ T4425] bridge_slave_1: left promiscuous mode [ 519.888268][ T4425] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.904719][T10461] loop6: detected capacity change from 0 to 512 [ 519.956900][ T4425] bridge_slave_0: left allmulticast mode [ 519.956925][ T4425] bridge_slave_0: left promiscuous mode [ 519.957183][ T4425] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.965664][ T8234] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 519.978256][T10461] EXT4-fs (loop6): Test dummy encryption mode enabled [ 519.978279][T10461] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 519.983437][ T5614] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 520.078043][T10461] EXT4-fs error (device loop6): ext4_orphan_get:1429: comm syz.6.994: bad orphan inode 131083 [ 520.078103][T10461] loop6: lost filesystem error report for type 5 error -117 [ 520.095067][T10461] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 520.166735][ T5724] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 520.291593][T10461] overlayfs: upper fs needs to support d_type. [ 520.385002][T10463] fido_id[10463]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 520.512590][ T5724] usb 10-1: unable to get BOS descriptor or descriptor too short [ 520.545846][ T5724] usb 10-1: New USB device found: idVendor=1235, idProduct=8214, bcdDevice=0.40 [ 520.587533][ T5724] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 520.587697][ T5724] usb 10-1: can't read configurations, error -71 [ 520.921271][T10461] overlayfs: failed index dir cleanup (-512) [ 520.921289][T10461] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 521.025396][T10479] loop8: detected capacity change from 0 to 512 [ 521.051599][T10479] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 521.065832][T10479] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 521.066234][T10479] EXT4-fs (loop8): orphan cleanup on readonly fs [ 521.074436][T10479] EXT4-fs warning (device loop8): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 521.074494][T10479] EXT4-fs (loop8): Cannot turn on quotas: error -22 [ 521.225256][T10479] EXT4-fs (loop8): 1 orphan inode deleted [ 521.246765][T10479] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 521.261137][ T7611] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 521.330047][T10482] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 521.424287][ T4425] bond1 (unregistering): (slave bond0): Releasing backup interface [ 521.468165][ T4425] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 521.511816][ T4425] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 521.552625][ T4425] bond0 (unregistering): Released all slaves [ 521.573933][ T4425] bond1 (unregistering): Released all slaves [ 521.643119][T10493] loop4: detected capacity change from 0 to 256 [ 521.651636][T10493] exfat: Deprecated parameter 'utf8' [ 521.651679][T10493] exfat: Deprecated parameter 'utf8' [ 521.651742][T10493] exfat: Deprecated parameter 'utf8' [ 521.660710][ T8234] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 521.754384][T10493] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 521.993867][ T5724] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 522.181970][ T5724] usb 10-1: New USB device found: idVendor=3344, idProduct=1122, bcdDevice=0.00 [ 522.288946][ T5724] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 522.454175][ T5724] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.454201][ T5724] usb 10-1: Product: syz [ 522.454214][ T5724] usb 10-1: Manufacturer: syz [ 522.454251][ T5724] usb 10-1: SerialNumber: syz [ 522.771799][ T5724] usb 10-1: selecting invalid altsetting 1 [ 522.896013][ T5274] 8021q: adding VLAN 0 to HW filter on device eth18 [ 522.972846][ T5724] LME2510(C): Firmware Status: 00 00 00 00 00 00 [ 522.973107][ T5724] dvb_usb_lmedm04 10-1:1.0: probe with driver dvb_usb_lmedm04 failed with error -22 [ 522.975775][ T5724] usb 10-1: USB disconnect, device number 6 [ 522.996066][ T9855] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 523.046361][ T5756] usb 9-1: new full-speed USB device number 14 using dummy_hcd [ 523.130150][ T4425] hsr_slave_0: left promiscuous mode [ 523.130816][ T4425] hsr_slave_1: left promiscuous mode [ 523.131523][ T4425] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 523.132107][ T4425] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 523.187006][ T9855] usb 5-1: New USB device found: idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 523.188585][ T9855] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 523.188609][ T9855] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 523.188653][ T9855] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.191533][ T9855] usb 5-1: config 0 descriptor?? [ 523.197880][ T9855] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 523.222417][ T5756] usb 9-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 523.226879][ T5756] usb 9-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 523.226911][ T5756] usb 9-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 523.226932][ T5756] usb 9-1: config 0 interface 0 has no altsetting 0 [ 523.232522][ T5756] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 523.232548][ T5756] usb 9-1: Product: syz [ 523.232560][ T5756] usb 9-1: Manufacturer: syz [ 523.232573][ T5756] usb 9-1: SerialNumber: syz [ 523.235201][ T5756] usb 9-1: config 0 descriptor?? [ 523.246479][ T9855] dvb-usb: bulk message failed: -22 (3/0) [ 523.259634][ T5756] usb 9-1: selecting invalid altsetting 0 [ 523.444979][ T9855] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 523.458629][ T9855] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 523.458709][ T9855] usb 5-1: media controller created [ 523.461840][ T9855] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 523.549480][ T9855] dvb-usb: bulk message failed: -22 (6/0) [ 523.564887][ T9855] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 523.623465][ T9855] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input17 [ 523.652889][ T9855] dvb-usb: schedule remote query interval to 150 msecs. [ 523.652916][ T9855] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 523.683598][ T9855] usb 5-1: USB disconnect, device number 13 [ 523.929297][ T5702] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 524.077970][ T5702] usb 2-1: Using ep0 maxpacket: 8 [ 524.084294][ T5702] usb 2-1: unable to get BOS descriptor or descriptor too short [ 524.084345][ T5702] usb 2-1: New USB device found: idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 524.090905][ T5702] usb 2-1: config 4 interface 0 has no altsetting 0 [ 524.095407][ T5702] usb 2-1: string descriptor 0 read error: -22 [ 524.095493][ T5702] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 524.138905][ T9855] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 524.186992][ T5702] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 524.262127][T10526] loop9: detected capacity change from 0 to 32768 [ 524.263888][T10526] BTRFS warning: v1 space cache is deprecated, falling back to no space cache [ 524.302825][T10526] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.1011 (10526) [ 524.322862][ T5702] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 524.324765][ T5702] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 524.324814][ T5702] usb 2-1: media controller created [ 524.430717][ T5702] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 524.487498][T10526] BTRFS info (device loop9): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 524.487531][T10526] BTRFS info (device loop9): using xxhash64 checksum algorithm [ 524.556429][T10534] loop4: detected capacity change from 0 to 512 [ 524.571160][ T5702] zl10353_read_register: readreg error (reg=127, ret==0) [ 524.610629][T10534] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 524.656022][T10534] EXT4-fs (loop4): 1 truncate cleaned up [ 524.674415][T10534] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 524.832909][T10540] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 524.924761][T10526] BTRFS info (device loop9): rebuilding free space tree [ 525.035577][ T4425] team0 (unregistering): Port device team_slave_1 removed [ 525.075299][ T5756] usb 9-1: USB disconnect, device number 14 [ 525.092506][T10526] BTRFS info (device loop9): disabling free space tree [ 525.092565][T10526] BTRFS info (device loop9): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 525.092586][T10526] BTRFS info (device loop9): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 525.163948][T10534] EXT4-fs error (device loop4): xattr_find_entry:333: inode #15: comm syz.4.1013: corrupted xattr entries [ 525.195450][T10534] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 525.195600][T10534] EXT4-fs error (device loop4): get_max_inline_xattr_value_size:73: inode #15: comm syz.4.1013: corrupt xattr in inline inode [ 525.385777][T10526] BTRFS info (device loop9): allowing degraded mounts [ 525.385795][T10526] BTRFS info (device loop9): enabling ssd optimizations [ 525.385805][T10526] BTRFS info (device loop9): turning on async discard [ 525.385813][T10526] BTRFS info (device loop9): force clearing of disk cache [ 525.385822][T10526] BTRFS info (device loop9): use zlib compression, level 3 [ 525.422216][T10534] EXT4-fs error (device loop4): xattr_find_entry:333: inode #15: comm syz.4.1013: corrupted xattr entries [ 525.452138][ T4425] team0 (unregistering): Port device team_slave_0 removed [ 525.511688][ T5702] usb 2-1: USB disconnect, device number 19 [ 525.580634][T10551] EXT4-fs error (device loop4): xattr_find_entry:333: inode #15: comm syz.4.1013: corrupted xattr entries [ 525.646937][T10559] XFS (mtdblock0): Invalid superblock magic number [ 525.867164][ T5610] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 526.214403][ T9473] BTRFS info (device loop9): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 527.930787][T10575] Set syz1 is full, maxelem 2076 reached [ 528.054248][ T5274] 8021q: adding VLAN 0 to HW filter on device eth19 [ 528.193506][T10569] loop1: detected capacity change from 0 to 40427 [ 528.246587][T10569] F2FS-fs (loop1): invalid crc value [ 528.624099][T10569] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 528.742679][T10569] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 528.797460][ T9855] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 528.973656][ T9855] usb 10-1: New USB device found: idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 528.983240][ T9855] usb 10-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 528.983266][ T9855] usb 10-1: Product: syz [ 528.983278][ T9855] usb 10-1: SerialNumber: syz [ 528.986450][ T9855] usb 10-1: config 0 descriptor?? [ 529.071313][ T5609] syz-executor: attempt to access beyond end of device [ 529.071313][ T5609] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 529.115220][ T5609] CPU: 1 UID: 0 PID: 5609 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 529.115251][ T5609] Tainted: [L]=SOFTLOCKUP [ 529.115258][ T5609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 529.115270][ T5609] Call Trace: [ 529.115278][ T5609] [ 529.115286][ T5609] dump_stack_lvl+0xe8/0x150 [ 529.115315][ T5609] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 529.115354][ T5609] f2fs_write_end_bio+0xda7/0x11c0 [ 529.115388][ T5609] __submit_merged_bio+0x258/0x6a0 [ 529.115407][ T5609] ? rcu_is_watching+0x16/0xb0 [ 529.115431][ T5609] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 529.115453][ T5609] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 529.115495][ T5609] f2fs_write_data_pages+0x2a13/0x36e0 [ 529.115550][ T5609] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 529.115566][ T5609] ? is_bpf_text_address+0x26/0x2b0 [ 529.115598][ T5609] ? arch_stack_walk+0xfb/0x150 [ 529.115679][ T5609] ? add_lock_to_list+0xc7/0x100 [ 529.115699][ T5609] ? lockdep_unlock+0x5c/0xd0 [ 529.115714][ T5609] ? __lock_acquire+0x1511/0x2de0 [ 529.115758][ T5609] ? do_raw_spin_lock+0x12b/0x2f0 [ 529.115789][ T5609] ? do_raw_spin_unlock+0xf5/0x200 [ 529.115808][ T5609] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 529.115826][ T5609] do_writepages+0x338/0x560 [ 529.115857][ T5609] ? do_raw_spin_unlock+0xf5/0x200 [ 529.115879][ T5609] filemap_fdatawrite+0x1e9/0x2f0 [ 529.115902][ T5609] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 529.115970][ T5609] ? do_raw_spin_unlock+0xf5/0x200 [ 529.115995][ T5609] f2fs_sync_dirty_inodes+0x471/0x970 [ 529.116030][ T5609] f2fs_write_checkpoint+0x860/0x24d0 [ 529.116085][ T5609] kill_f2fs_super+0x2dc/0x700 [ 529.116110][ T5609] ? rcu_do_enqueue+0x616/0x870 [ 529.116129][ T5609] ? lockdep_hardirqs_on+0x7b/0x110 [ 529.116151][ T5609] ? __pfx_kill_f2fs_super+0x10/0x10 [ 529.116184][ T5609] ? __pfx_call_rcu+0x10/0x10 [ 529.116206][ T5609] ? shrinker_free+0x2a7/0x3b0 [ 529.116229][ T5609] deactivate_locked_super+0xbe/0x110 [ 529.116250][ T5609] cleanup_mnt+0x204/0x2a0 [ 529.116273][ T5609] task_work_run+0x1d9/0x260 [ 529.116294][ T5609] ? __pfx_task_work_run+0x10/0x10 [ 529.116320][ T5609] exit_to_user_mode_loop+0x204/0x770 [ 529.116348][ T5609] ? rcu_is_watching+0x16/0xb0 [ 529.116372][ T5609] do_syscall_64+0x328/0x520 [ 529.116389][ T5609] ? trace_irq_disable+0x3b/0x140 [ 529.116407][ T5609] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.116427][ T5609] ? clear_bhb_loop+0x70/0xc0 [ 529.116449][ T5609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.116468][ T5609] RIP: 0033:0x7f7ba8d9f417 [ 529.116487][ T5609] Code: a2 c7 05 dc 62 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 529.116503][ T5609] RSP: 002b:00007ffd0657ad38 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 529.116525][ T5609] RAX: 0000000000000000 RBX: 00007f7ba8e34ccb RCX: 00007f7ba8d9f417 [ 529.116539][ T5609] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd0657adf0 [ 529.116551][ T5609] RBP: 00007ffd0657adf0 R08: 00007ffd0657bdf0 R09: 00000000ffffffff [ 529.116563][ T5609] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd0657be80 [ 529.116575][ T5609] R13: 00007f7ba8e34ccb R14: 00000000000811a5 R15: 00007ffd0657bec0 [ 529.116607][ T5609] [ 529.200831][ T9855] hso 10-1:0.0: Failed to find BULK eps [ 529.369254][ T5609] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 529.429661][ T9855] usb 10-1: USB disconnect, device number 7 [ 529.685767][T10622] loop4: detected capacity change from 0 to 512 [ 529.699187][T10622] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 529.772236][T10622] EXT4-fs (loop4): 1 truncate cleaned up [ 529.773415][T10622] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 529.948244][ T5610] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 529.948734][ T5274] 8021q: adding VLAN 0 to HW filter on device eth20 [ 530.067686][T10630] loop5: detected capacity change from 0 to 7 [ 530.124348][T10631] loop6: detected capacity change from 0 to 2048 [ 530.153674][T10630] Dev loop5: unable to read RDB block 7 [ 530.153705][T10630] loop5: AHDI p1 [ 530.153748][T10630] loop5: partition table partially beyond EOD, truncated [ 530.254282][T10631] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 530.495771][T10642] loop9: detected capacity change from 0 to 512 [ 530.634814][T10642] EXT4-fs error (device loop9): ext4_orphan_get:1403: inode #15: comm syz.9.1036: iget: bad extended attribute block 134217728 [ 530.634852][T10642] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 530.635297][T10642] EXT4-fs error (device loop9): ext4_orphan_get:1408: comm syz.9.1036: couldn't read orphan inode 15 (err -117) [ 530.635322][T10642] loop9: lost filesystem error report for type 5 error -117 [ 530.637495][T10642] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 530.649897][T10642] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.1036: invalid indirect mapped block 768 (level 1) [ 530.653629][ T32] kauditd_printk_skb: 5 callbacks suppressed [ 530.653646][ T32] audit: type=1800 audit(2000000189.890:111): pid=10642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.1036" name="file0" dev="loop9" ino=13 res=0 errno=-5 [ 531.212526][ T9473] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 531.519936][T10617] loop8: detected capacity change from 0 to 32768 [ 531.528107][T10617] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.1030 (10617) [ 531.648369][ T2256] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 531.676849][T10617] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 531.676885][T10617] BTRFS info (device loop8): using crc32c checksum algorithm [ 531.810847][ T2256] usb 2-1: New USB device found: idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 531.814327][ T2256] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 531.814379][ T2256] usb 2-1: config 0 has no interface number 0 [ 531.814416][ T2256] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 531.820886][T10617] BTRFS info (device loop8): setting nodatasum [ 531.820919][T10617] BTRFS info (device loop8): setting nodatacow [ 531.820933][T10617] BTRFS info (device loop8): disabling tree log [ 531.820948][T10617] BTRFS info (device loop8): turning on async discard [ 531.821004][T10617] BTRFS info (device loop8): enabling free space tree [ 531.821020][T10617] BTRFS info (device loop8): max_inline set to 0 [ 531.907362][ T2256] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.907388][ T2256] usb 2-1: Product: syz [ 531.907400][ T2256] usb 2-1: Manufacturer: syz [ 531.907411][ T2256] usb 2-1: SerialNumber: syz [ 531.915321][ T2256] usb 2-1: config 0 descriptor?? [ 531.981258][ T2256] yurex 2-1:0.50: USB YUREX device now attached to Yurex #0 [ 532.242818][ T27] usb 2-1: USB disconnect, device number 20 [ 532.257142][ T8234] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 532.276055][ T27] yurex 2-1:0.50: USB YUREX #0 now disconnected [ 532.524720][T10695] program syz.9.1049 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 532.551711][T10664] loop4: detected capacity change from 0 to 32768 [ 532.555487][T10664] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1043 (10664) [ 532.562091][T10664] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 532.562124][T10664] BTRFS info (device loop4): using crc32c checksum algorithm [ 532.595550][ T5274] 8021q: adding VLAN 0 to HW filter on device eth21 [ 532.881953][T10664] BTRFS info (device loop4): enabling ssd optimizations [ 532.881996][T10664] BTRFS info (device loop4): turning on flush-on-commit [ 532.882014][T10664] BTRFS info (device loop4): enabling free space tree [ 532.882030][T10664] BTRFS info (device loop4): enabling auto defrag [ 532.882047][T10664] BTRFS info (device loop4): use lzo compression, level 1 [ 532.882064][T10664] BTRFS info (device loop4): max_inline set to 4096 [ 533.065946][T10716] loop8: detected capacity change from 0 to 512 [ 533.146075][T10716] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 533.162490][T10716] ext4 filesystem being mounted at /111/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 533.294189][ T32] audit: type=1800 audit(2000000192.530:112): pid=10727 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1050" name="file1" dev="loop8" ino=15 res=0 errno=-22 [ 533.374100][ T5610] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 533.838525][ T8234] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 534.000074][ T5756] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 534.098116][T10747] loop9: detected capacity change from 0 to 128 [ 534.115542][T10747] FAT-fs (loop9): Directory bread(block 1048) failed [ 534.115575][T10747] FAT-fs (loop9): Directory bread(block 1049) failed [ 534.115734][T10747] FAT-fs (loop9): Directory bread(block 1050) failed [ 534.174045][T10747] FAT-fs (loop9): Directory bread(block 1051) failed [ 534.174097][T10747] FAT-fs (loop9): Directory bread(block 1052) failed [ 534.174119][T10747] FAT-fs (loop9): Directory bread(block 1053) failed [ 534.174140][T10747] FAT-fs (loop9): Directory bread(block 1054) failed [ 534.174162][T10747] FAT-fs (loop9): Directory bread(block 1055) failed [ 534.176350][ T5756] usb 5-1: Using ep0 maxpacket: 16 [ 534.177942][ T5756] usb 5-1: New USB device found: idVendor=05ac, idProduct=027b, bcdDevice=0.00 [ 534.180127][ T5756] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.185003][ T5756] usb 5-1: config 0 descriptor?? [ 534.206016][T10747] FAT-fs (loop9): Directory bread(block 1048) failed [ 534.206050][T10747] FAT-fs (loop9): Directory bread(block 1049) failed [ 534.525233][T10756] loop8: detected capacity change from 0 to 16 [ 534.543346][T10756] erofs (device loop8): mounted with root inode @ nid 36. [ 534.610971][ T887] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 534.630736][T10756] erofs (device loop8): bogus i_mode (0) @ nid 360287970189639716 [ 534.643006][ T5756] hid_parser_main: 14 callbacks suppressed [ 534.643031][ T5756] apple 0003:05AC:027B.000E: unknown main item tag 0x0 [ 534.643070][ T5756] apple 0003:05AC:027B.000E: unknown main item tag 0x0 [ 534.643095][ T5756] apple 0003:05AC:027B.000E: unknown main item tag 0x0 [ 534.643120][ T5756] apple 0003:05AC:027B.000E: unknown main item tag 0x0 [ 534.643144][ T5756] apple 0003:05AC:027B.000E: unknown main item tag 0x0 [ 534.643190][ T5756] apple 0003:05AC:027B.000E: unknown main item tag 0x0 [ 534.643218][ T5756] apple 0003:05AC:027B.000E: unknown main item tag 0x0 [ 534.648995][ T5756] apple 0003:05AC:027B.000E: unknown main item tag 0x0 [ 534.649025][ T5756] apple 0003:05AC:027B.000E: unknown main item tag 0x0 [ 534.649054][ T5756] apple 0003:05AC:027B.000E: unknown main item tag 0x0 [ 534.739595][ T5756] apple 0003:05AC:027B.000E: hidraw0: USB HID v7f.fd Device [HID 05ac:027b] on usb-dummy_hcd.4-1/input0 [ 534.787520][ T887] usb 2-1: Using ep0 maxpacket: 8 [ 534.807838][ T887] usb 2-1: unable to get BOS descriptor or descriptor too short [ 534.807890][ T887] usb 2-1: New USB device found: idVendor=0000, idProduct=0000, bcdDevice=0.00 [ 534.807925][ T887] usb 2-1: no configurations [ 534.807936][ T887] usb 2-1: can't read configurations, error -22 [ 534.885694][ T5723] usb 5-1: USB disconnect, device number 14 [ 534.952751][T10765] loop8: detected capacity change from 0 to 4096 [ 535.003017][T10770] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 535.029986][T10765] NILFS (loop8): cannot delete checkpoints: invalid range [21543, 1792) [ 535.030048][T10765] NILFS (loop8): error -22 preparing GC: cannot delete checkpoints [ 535.044067][T10761] fido_id[10761]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 536.400324][T10803] loop8: detected capacity change from 0 to 512 [ 536.404810][T10803] EXT4-fs: Ignoring removed i_version option [ 536.404859][T10803] EXT4-fs: Ignoring removed oldalloc option [ 536.413871][T10803] EXT4-fs (loop8): Test dummy encryption mode enabled [ 536.480643][T10803] EXT4-fs (loop8): 1 truncate cleaned up [ 536.481798][T10803] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 536.534367][T10803] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 536.612667][T10806] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 536.644571][T10789] loop1: detected capacity change from 0 to 32768 [ 536.667125][T10803] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 536.721523][T10789] JBD2: Ignoring recovery information on journal [ 536.787786][T10789] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 536.862152][ T8234] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 537.687291][ T887] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 537.837815][ T887] usb 10-1: Using ep0 maxpacket: 32 [ 537.838977][ T887] usb 10-1: New USB device found: idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 537.841534][ T887] usb 10-1: config 0 has an invalid interface number: 51 but max is 0 [ 537.841560][ T887] usb 10-1: config 0 has no interface number 0 [ 537.844005][ T887] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.844029][ T887] usb 10-1: Product: syz [ 537.844044][ T887] usb 10-1: Manufacturer: syz [ 537.844057][ T887] usb 10-1: SerialNumber: syz [ 537.849812][ T887] usb 10-1: config 0 descriptor?? [ 537.887476][ T887] quatech2 10-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 537.992793][T10831] program syz.8.1087 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 538.157374][ T887] usb 10-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 538.171224][ T887] usb 10-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 538.312953][ T5609] ocfs2: Unmounting device (7,1) on (node local) [ 538.390799][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - port change to invalid port: 92 [ 538.495929][T10839] bond0: option arp_interval: invalid value () [ 538.495954][T10839] bond0: option arp_interval: allowed values 0 - 2147483647 [ 538.596015][ C1] usb 10-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 538.599289][T10753] usb 10-1: USB disconnect, device number 8 [ 538.619953][T10753] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 538.671411][T10753] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 538.672117][T10753] quatech2 10-1:0.51: device disconnected [ 538.811728][T10843] loop8: detected capacity change from 0 to 4096 [ 538.875261][T10843] ntfs3(loop8): Mark volume as dirty due to NTFS errors [ 538.948686][T10843] ntfs3(loop8): Failed to load $Extend (-22). [ 538.948724][T10843] ntfs3(loop8): Failed to initialize $Extend. [ 538.996379][ T5723] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 539.026513][ T2256] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 539.155196][ T5723] usb 5-1: Using ep0 maxpacket: 32 [ 539.158391][ T5723] usb 5-1: New USB device found: idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 539.161801][ T5723] usb 5-1: config index 0 descriptor too short (expected 19, got 18) [ 539.169670][ T5723] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.169695][ T5723] usb 5-1: Product: syz [ 539.169716][ T5723] usb 5-1: Manufacturer: syz [ 539.169729][ T5723] usb 5-1: SerialNumber: syz [ 539.175870][ T5723] usb 5-1: config 0 descriptor?? [ 539.191901][ T5723] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 539.191947][ T5723] dvb-usb: bulk message failed: -22 (2/0) [ 539.198743][ T2256] usb 2-1: Using ep0 maxpacket: 16 [ 539.205189][ T2256] usb 2-1: New USB device found: idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 539.205621][ T5723] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 539.206831][ T5723] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 539.206879][ T5723] usb 5-1: media controller created [ 539.286780][ T2256] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.286807][ T2256] usb 2-1: Product: syz [ 539.286820][ T2256] usb 2-1: Manufacturer: syz [ 539.286833][ T2256] usb 2-1: SerialNumber: syz [ 539.291051][ T2256] usb 2-1: config 0 descriptor?? [ 539.330623][ T2256] gspca_main: spca508-2.14.0 probing 041e:4018 [ 539.362175][ T5723] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 539.390000][T10845] cxusb: i2c wr: len=78 is too big! [ 539.390000][T10845] [ 539.419647][T10841] loop6: detected capacity change from 0 to 32768 [ 540.384520][ T5723] usb 5-1: selecting invalid altsetting 7 [ 540.384542][ T5723] cxusb: set interface failed [ 540.384554][ T5723] dvb-usb: bulk message failed: -22 (1/0) [ 540.385342][T10841] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1092 (10841) [ 540.428429][ T2256] gspca_spca508: reg_read err -110 [ 540.443066][ T2256] gspca_spca508: reg_read err -32 [ 540.515581][T10841] BTRFS info (device loop6): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 540.515615][T10841] BTRFS info (device loop6): using blake2b checksum algorithm [ 540.581054][T10865] loop8: detected capacity change from 0 to 128 [ 540.632703][T10841] BTRFS info (device loop6): enabling ssd optimizations [ 540.632730][T10841] BTRFS info (device loop6): turning on async discard [ 540.632745][T10841] BTRFS info (device loop6): enabling free space tree [ 540.635113][ T4370] BTRFS warning (device loop6): checksum verify failed on logical 5308416 mirror 1 wanted 0x53ccb67cf2cd4d57b8377a99cb15d167f07773786963ca6c47ef35dda1a43427 found 0x39daeeba5c300ffa097ed88b0d5a7ef24d4cd74ea7e23544b8359be3d4a03d73 level 0 [ 540.635342][T10841] BTRFS: error (device loop6) in btrfs_fill_super:982: errno=-5 IO failure [ 540.643375][T10841] BTRFS error (device loop6 state EI): commit super block returned -EROFS [ 540.722250][ T32] audit: type=1800 audit(2000000199.960:113): pid=10865 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1097" name="file1" dev="loop8" ino=146 res=0 errno=-22 [ 540.759210][ T2256] gspca_spca508: reg_read err -71 [ 540.761813][ T2256] gspca_spca508: reg_read err -71 [ 540.762199][ T2256] gspca_spca508: reg write: error -71 [ 540.762390][ T2256] spca508 2-1:0.0: probe with driver spca508 failed with error -71 [ 540.765971][ T2256] usb 2-1: USB disconnect, device number 23 [ 540.815275][ T5723] DVB: Unable to find symbol lgdt330x_attach() [ 540.815286][ T5723] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 541.088910][ T5723] rc_core: IR keymap rc-dvico-portable not found [ 541.088931][ T5723] Registered IR keymap rc-empty [ 541.099766][ T5723] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 541.105515][ T5723] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input20 [ 541.149171][ T5723] dvb-usb: schedule remote query interval to 100 msecs. [ 541.149196][ T5723] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 541.185265][ T5723] usb 5-1: USB disconnect, device number 15 [ 541.258178][ T887] dvb-usb: bulk message failed: -22 (1/0) [ 541.660627][ T5723] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 542.765260][T10904] loop8: detected capacity change from 0 to 128 [ 542.861470][T10906] loop6: detected capacity change from 0 to 256 [ 542.868024][T10906] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 542.879034][T10906] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 542.941064][T10904] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 542.944676][T10904] ext4 filesystem being mounted at /128/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 542.994264][T10904] fscrypt (loop8, inode 12): Unsupported encryption flags (0x08) [ 544.102067][ T8234] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 544.231350][T10897] loop4: detected capacity change from 0 to 32768 [ 544.294179][T10897] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 544.436732][T10897] XFS (loop4): Ending clean mount [ 545.440846][T10897] XFS (loop4): Quotacheck needed: Please wait. [ 545.872733][T10897] XFS (loop4): Quotacheck: Done. [ 545.974592][ T5610] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 546.081571][T10941] loop8: detected capacity change from 0 to 32768 [ 546.114200][T10941] XFS (loop8): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 546.170911][T10941] XFS (loop8): Ending clean mount [ 546.283969][ T8234] XFS (loop8): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 546.366309][ T5723] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 546.518866][ T5723] usb 10-1: New USB device found: idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 546.519837][ T5723] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.570184][ T5723] usb 10-1: config 0 descriptor?? [ 547.395213][ T5723] hackrf 10-1:0.0: Board ID: 00 [ 547.395237][ T5723] hackrf 10-1:0.0: Firmware version: [ 547.541496][ T5723] hackrf 10-1:0.0: Registered as swradio24 [ 547.541567][ T5723] videodev: could not get a free minor [ 547.541578][ T5723] hackrf 10-1:0.0: Failed to register as video device (-23) [ 547.570709][ T5723] hackrf 10-1:0.0: probe with driver hackrf failed with error -23 [ 547.573096][ T5723] usb 10-1: USB disconnect, device number 9 [ 547.878602][T10977] loop8: detected capacity change from 0 to 4096 [ 547.892743][T10982] loop1: detected capacity change from 0 to 256 [ 547.974902][T10984] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 549.792784][T10980] loop4: detected capacity change from 0 to 32768 [ 549.848531][ T5723] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 549.968578][T10980] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1119 (10980) [ 550.089875][ T5723] usb 9-1: Using ep0 maxpacket: 32 [ 550.095417][ T5723] usb 9-1: New USB device found: idVendor=0582, idProduct=007d, bcdDevice=0.40 [ 550.128336][ T5723] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 550.174146][ T5723] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.174164][ T5723] usb 9-1: Product: syz [ 550.174173][ T5723] usb 9-1: Manufacturer: syz [ 550.174186][ T5723] usb 9-1: SerialNumber: syz [ 550.284359][T10980] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 550.284408][T10980] BTRFS info (device loop4): using sha256 checksum algorithm [ 550.433796][ T5723] snd-ua101 9-1:1.1: sample format descriptor not found [ 550.433855][ T5723] snd-ua101 9-1:1.0: invalid num_altsetting [ 550.628892][T10980] BTRFS info (device loop4): allowing degraded mounts [ 550.628921][T10980] BTRFS info (device loop4): enabling ssd optimizations [ 550.628938][T10980] BTRFS info (device loop4): disabling tree log [ 550.628954][T10980] BTRFS info (device loop4): turning on sync discard [ 550.628969][T10980] BTRFS info (device loop4): enabling free space tree [ 550.729146][ T5723] usb 9-1: USB disconnect, device number 15 [ 550.890062][ T5610] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 551.590143][T11011] loop9: detected capacity change from 0 to 32768 [ 552.250760][T11064] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 552.867223][ T5723] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 553.113920][ T5723] usb 5-1: New USB device found: idVendor=0dba, idProduct=1000, bcdDevice=0.40 [ 553.120343][ T5723] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 1024, setting to 64 [ 553.122899][ T5723] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.122922][ T5723] usb 5-1: Product: syz [ 553.122935][ T5723] usb 5-1: Manufacturer: syz [ 553.122948][ T5723] usb 5-1: SerialNumber: syz [ 553.359546][T11060] loop4: detected capacity change from 0 to 64 [ 553.461623][T11060] hfs: hfs: invalid btree header node [ 553.461640][T11060] hfs: (loop4): catalog (cnid 0x4) bitmap corrupted, forcing rdonly [ 553.461654][T11060] hfs: Run fsck.hfs to repair. [ 553.470009][T11084] loop1: detected capacity change from 0 to 512 [ 553.567783][T11060] hfs: get root inode failed [ 553.723230][T11086] loop9: detected capacity change from 0 to 32768 [ 553.724254][T11086] xfs: Deprecated parameter 'noattr2' [ 553.724272][T11086] XFS: noattr2 mount option is deprecated. [ 553.724292][T11086] xfs: Deprecated parameter 'noattr2' [ 553.724303][T11086] XFS: noattr2 mount option is deprecated. [ 553.775906][T11084] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 553.814266][T11084] EXT4-fs (loop1): 1 truncate cleaned up [ 553.852541][T11086] XFS (loop9): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 553.862402][T11084] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 553.908508][T11086] XFS (loop9): Ending clean mount [ 553.915915][T11086] XFS (loop9): Quotacheck needed: Please wait. [ 553.930854][T11084] EXT4-fs error (device loop1): ext4_generic_delete_entry:2675: inode #2: block 13: comm syz.1.1148: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 553.940122][T11084] EXT4-fs (loop1): Remounting filesystem read-only [ 553.940148][T11084] EXT4-fs warning (device loop1): ext4_rename_delete:3741: inode #2: comm syz.1.1148: Deleting old file: nlink 5, error=-117 [ 554.024292][ T5723] usb 5-1: USB disconnect, device number 16 [ 554.114315][ T5609] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 554.163381][ T8082] udevd[8082]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 554.317900][T11086] XFS (loop9): Quotacheck: Done. [ 554.484325][ T9473] XFS (loop9): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 555.451597][ T32] audit: type=1326 audit(2000000214.690:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11117 comm="syz.6.1155" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa3e59e1d9 code=0x7fc00000 [ 557.147768][T11192] loop9: detected capacity change from 0 to 512 [ 557.228232][T11190] loop8: detected capacity change from 0 to 4096 [ 557.276619][ T5756] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 557.360385][T11195] loop4: detected capacity change from 0 to 2048 [ 557.361297][T11195] EXT4-fs: Ignoring removed i_version option [ 557.427312][ T5756] usb 2-1: New USB device found: idVendor=18d1, idProduct=1eaf, bcdDevice=0.00 [ 557.428679][ T5756] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 557.428725][ T5756] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 557.428745][ T5756] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 557.428767][ T5756] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 557.432167][ T5756] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.432190][ T5756] usb 2-1: Product: syz [ 557.432203][ T5756] usb 2-1: Manufacturer: syz [ 557.432214][ T5756] usb 2-1: SerialNumber: syz [ 557.453523][T11195] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 557.453659][T11195] ext4 filesystem being mounted at /252/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 557.875801][T11164] loop6: detected capacity change from 0 to 40427 [ 557.903113][T11164] F2FS-fs (loop6): Invalid SB checksum offset: 0 [ 557.903137][T11164] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 557.918808][T11164] F2FS-fs (loop6): invalid crc value [ 557.984382][ T5610] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 558.126631][ T5756] usb 2-1: Cannot retrieve CPort count: -110 [ 558.126684][ T5756] usb 2-1: Cannot retrieve CPort count: -110 [ 558.126708][ T5756] es2_ap_driver 2-1:1.0: probe with driver es2_ap_driver failed with error -110 [ 558.144998][T11164] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 558.293036][ T5743] usb 2-1: USB disconnect, device number 24 [ 558.354855][T11164] F2FS-fs (loop6): Try to recover 2th superblock, ret: 0 [ 558.354910][T11164] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 558.480747][ T7611] syz-executor: attempt to access beyond end of device [ 558.480747][ T7611] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 558.489480][T11221] Bluetooth: hci0: Invalid link key type 76 for 00:00:4c:00:00:00 [ 558.513969][ T7611] CPU: 0 UID: 0 PID: 7611 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 558.514006][ T7611] Tainted: [L]=SOFTLOCKUP [ 558.514013][ T7611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 558.514025][ T7611] Call Trace: [ 558.514033][ T7611] [ 558.514043][ T7611] dump_stack_lvl+0xe8/0x150 [ 558.514076][ T7611] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 558.514104][ T7611] f2fs_write_end_bio+0xda7/0x11c0 [ 558.514141][ T7611] __submit_merged_bio+0x258/0x6a0 [ 558.514160][ T7611] ? rcu_is_watching+0x16/0xb0 [ 558.514184][ T7611] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 558.514207][ T7611] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 558.514251][ T7611] f2fs_write_data_pages+0x2a13/0x36e0 [ 558.514306][ T7611] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 558.514323][ T7611] ? is_bpf_text_address+0x26/0x2b0 [ 558.514352][ T7611] ? arch_stack_walk+0xfb/0x150 [ 558.514399][ T7611] ? add_lock_to_list+0xc7/0x100 [ 558.514419][ T7611] ? lockdep_unlock+0x5c/0xd0 [ 558.514433][ T7611] ? __lock_acquire+0x1511/0x2de0 [ 558.514477][ T7611] ? do_raw_spin_lock+0x12b/0x2f0 [ 558.514506][ T7611] ? do_raw_spin_unlock+0xf5/0x200 [ 558.514524][ T7611] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 558.514544][ T7611] do_writepages+0x338/0x560 [ 558.514573][ T7611] ? do_raw_spin_unlock+0xf5/0x200 [ 558.514595][ T7611] filemap_fdatawrite+0x1e9/0x2f0 [ 558.514617][ T7611] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 558.514678][ T7611] ? do_raw_spin_unlock+0xf5/0x200 [ 558.514696][ T7611] f2fs_sync_dirty_inodes+0x471/0x970 [ 558.514732][ T7611] f2fs_write_checkpoint+0x860/0x24d0 [ 558.514778][ T7611] kill_f2fs_super+0x2dc/0x700 [ 558.514800][ T7611] ? rcu_do_enqueue+0x616/0x870 [ 558.514817][ T7611] ? lockdep_hardirqs_on+0x7b/0x110 [ 558.514836][ T7611] ? __pfx_kill_f2fs_super+0x10/0x10 [ 558.514868][ T7611] ? __pfx_call_rcu+0x10/0x10 [ 558.514889][ T7611] ? shrinker_free+0x2a7/0x3b0 [ 558.514910][ T7611] deactivate_locked_super+0xbe/0x110 [ 558.514931][ T7611] cleanup_mnt+0x204/0x2a0 [ 558.514954][ T7611] task_work_run+0x1d9/0x260 [ 558.514975][ T7611] ? __pfx_task_work_run+0x10/0x10 [ 558.515002][ T7611] exit_to_user_mode_loop+0x204/0x770 [ 558.515021][ T7611] ? rcu_is_watching+0x16/0xb0 [ 558.515043][ T7611] do_syscall_64+0x328/0x520 [ 558.515059][ T7611] ? trace_irq_disable+0x3b/0x140 [ 558.515076][ T7611] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.515093][ T7611] ? clear_bhb_loop+0x70/0xc0 [ 558.515114][ T7611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.515133][ T7611] RIP: 0033:0x7ffa3e59f417 [ 558.515151][ T7611] Code: a2 c7 05 dc 62 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 558.515167][ T7611] RSP: 002b:00007ffd0d95f8c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 558.515188][ T7611] RAX: 0000000000000000 RBX: 00007ffa3e634ccb RCX: 00007ffa3e59f417 [ 558.515202][ T7611] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd0d95f980 [ 558.515212][ T7611] RBP: 00007ffd0d95f980 R08: 00007ffd0d960980 R09: 00000000ffffffff [ 558.515225][ T7611] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd0d960a10 [ 558.515237][ T7611] R13: 00007ffa3e634ccb R14: 00000000000884ad R15: 00007ffd0d960a50 [ 558.515269][ T7611] [ 558.520796][ T7611] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 559.382836][T11243] random: crng reseeded on system resumption [ 559.431615][T11243] Restarting kernel threads ... [ 559.449151][T11243] Done restarting kernel threads. [ 559.506284][ T5723] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 559.550284][T11231] loop8: detected capacity change from 0 to 32768 [ 559.564875][T11231] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.1189 (11231) [ 559.599598][T11231] BTRFS info (device loop8): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 559.599666][T11231] BTRFS info (device loop8): using sha256 checksum algorithm [ 559.643886][T11251] loop9: detected capacity change from 0 to 512 [ 559.660203][ T5723] usb 2-1: New USB device found: idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 559.665268][ T5723] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.665294][ T5723] usb 2-1: Product: syz [ 559.665307][ T5723] usb 2-1: Manufacturer: syz [ 559.665318][ T5723] usb 2-1: SerialNumber: syz [ 559.708612][T11251] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e019, mo2=0002] [ 559.708755][T11251] System zones: 0-2, 18-18, 34-34 [ 559.739656][T11254] loop6: detected capacity change from 0 to 512 [ 559.742784][ T5723] usb 2-1: config 0 descriptor?? [ 559.781530][T11231] BTRFS info (device loop8): turning off barriers [ 559.781551][T11231] BTRFS info (device loop8): enabling free space tree [ 559.826859][T11251] EXT4-fs (loop9): 1 orphan inode deleted [ 559.835039][T11251] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 559.844257][T11251] ext4 filesystem being mounted at /86/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 559.938583][ T8234] BTRFS info (device loop8): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 560.194410][ T5723] usb 2-1: Firmware: major: 28, minor: 158, hardware type: RZUSB (3) [ 560.467859][ T9473] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 560.489612][ T5723] usb 2-1: failed to fetch extended address, random address set [ 561.102402][ T5723] usb 2-1: USB disconnect, device number 25 [ 561.280841][T11287] loop9: detected capacity change from 0 to 64 [ 562.660394][T11287] syz.9.1201: attempt to access beyond end of device [ 562.660394][T11287] loop9: rw=8388608, sector=1024, nr_sectors = 2 limit=64 [ 562.660739][T11287] Buffer I/O error on dev loop9, logical block 512, async page read [ 562.661049][T11287] syz.9.1201: attempt to access beyond end of device [ 562.661049][T11287] loop9: rw=8388608, sector=113152, nr_sectors = 2 limit=64 [ 562.661075][T11287] Buffer I/O error on dev loop9, logical block 56576, async page read [ 562.912742][T11299] syz.9.1201: attempt to access beyond end of device [ 562.912742][T11299] loop9: rw=8388608, sector=1024, nr_sectors = 2 limit=64 [ 562.912777][T11299] Buffer I/O error on dev loop9, logical block 512, async page read [ 562.912856][T11299] syz.9.1201: attempt to access beyond end of device [ 562.912856][T11299] loop9: rw=8388608, sector=113152, nr_sectors = 2 limit=64 [ 562.912879][T11299] Buffer I/O error on dev loop9, logical block 56576, async page read [ 563.655525][ T10] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 563.853384][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.853501][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.016496][ T10] usb 2-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 564.066805][ T10] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 564.066837][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 564.066855][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 564.066979][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 564.144508][ T10] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 564.144536][ T10] usb 2-1: Product: syz [ 564.144548][ T10] usb 2-1: Manufacturer: syz [ 564.437091][T11312] loop4: detected capacity change from 0 to 64 [ 564.468029][ T10] cdc_wdm 2-1:1.0: skipping garbage [ 564.468051][ T10] cdc_wdm 2-1:1.0: skipping garbage [ 564.474576][ T10] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 564.474598][ T10] cdc_wdm 2-1:1.0: Unknown control protocol [ 564.541696][T11312] MINIX-fs: mounting file system with errors, running fsck is recommended [ 564.585606][T11312] MINIX-fs warning: remounting fs with errors, running fsck is recommended [ 564.662105][T11312] MINIX-fs warning: remounting fs with errors, running fsck is recommended [ 564.929301][T11322] loop4: detected capacity change from 0 to 512 [ 564.944104][T11322] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 564.962302][T11322] EXT4-fs (loop4): 1 truncate cleaned up [ 564.967569][T11322] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 565.016089][T11304] loop6: detected capacity change from 0 to 32768 [ 565.056463][ T5723] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 565.093557][ T2256] usb 2-1: USB disconnect, device number 26 [ 565.101693][T11327] EXT4-fs error (device loop4): __ext4_expand_extra_isize:6539: inode #15: comm syz.4.1216: bad extra_isize 62 (inode size 256) [ 565.108804][T11327] EXT4-fs (loop4): Remounting filesystem read-only [ 565.191166][ T32] audit: type=1800 audit(2000000224.430:115): pid=11304 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1212" name="file1" dev="loop6" ino=4 res=0 errno=-22 [ 565.211456][ T5610] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 565.231335][ T5723] usb 10-1: Using ep0 maxpacket: 8 [ 565.248899][ T5723] usb 10-1: New USB device found: idVendor=0225, idProduct=0000, bcdDevice=0.00 [ 565.252939][ T5723] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 565.252963][ T5723] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 565.253003][ T5723] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 565.253040][ T5723] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.324665][ T5723] hub 10-1:1.0: bad descriptor, ignoring hub [ 565.324693][ T5723] hub 10-1:1.0: probe with driver hub failed with error -5 [ 565.325184][ T5723] cdc_wdm 10-1:1.0: skipping garbage [ 565.325201][ T5723] cdc_wdm 10-1:1.0: skipping garbage [ 565.370176][ T5723] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 565.370199][ T5723] cdc_wdm 10-1:1.0: Unknown control protocol [ 565.395397][T11304] read_mapping_page failed! [ 565.395415][T11304] ERROR: (device loop6): txCommit: [ 565.395415][T11304] [ 565.721530][T11338] scsi_dev_info_list_add_str: bad dev info string '‰' '' '' [ 565.831133][ T5723] usb 10-1: USB disconnect, device number 10 [ 566.811255][T11354] loop9: detected capacity change from 0 to 1024 [ 566.835545][T11354] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 566.979011][T10769] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 567.133290][T10769] usb 9-1: New USB device found: idVendor=12d8, idProduct=0001, bcdDevice=1.00 [ 567.134375][T10769] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 567.134422][T10769] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 567.175685][T10769] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.175712][T10769] usb 9-1: Product: syz [ 567.175727][T10769] usb 9-1: Manufacturer: syz [ 567.175741][T10769] usb 9-1: SerialNumber: syz [ 567.465384][T10769] usb 9-1: USB disconnect, device number 16 [ 567.629485][T11367] program syz.1.1236 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 567.929533][T11363] loop4: detected capacity change from 0 to 32768 [ 567.933352][T11363] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1234 (11363) [ 567.948407][T11363] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 567.948438][T11363] BTRFS info (device loop4): using sha256 checksum algorithm [ 568.057266][T11363] BTRFS info (device loop4): enabling ssd optimizations [ 568.057296][T11363] BTRFS info (device loop4): turning on async discard [ 568.057312][T11363] BTRFS info (device loop4): enabling free space tree [ 568.098007][T11390] loop8: detected capacity change from 0 to 1024 [ 568.273641][ T5610] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 568.374536][T11372] loop1: detected capacity change from 0 to 32768 [ 568.428782][T11390] hfsplus: inconsistency in B*Tree (226,1,255,1,0) [ 568.481537][T11372] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 568.693079][T11372] XFS (loop1): Ending clean mount [ 569.690269][T11413] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1244'. [ 569.694304][T11413] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1244'. [ 569.694854][T11413] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1244'. [ 570.083023][ T5609] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 570.602344][ C0] unchecked MSR access error: WRMSR to 0x404 (tried to write 0x0000000000000001) at rIP: 0xffffffff817154e2 (__mcheck_cpu_init_prepare_banks+0x1f2/0x3d0) [ 570.602397][ C0] Call Trace: [ 570.602406][ C0] [ 570.602418][ C0] ? __pfx___mcheck_cpu_init_prepare_banks+0x10/0x10 [ 570.602440][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 570.602463][ C0] ? sched_clock_cpu+0x74/0x440 [ 570.602490][ C0] mce_cpu_restart+0x11a/0x2c0 [ 570.602508][ C0] ? __pfx_mce_cpu_restart+0x10/0x10 [ 570.602524][ C0] __flush_smp_call_function_queue+0x35d/0xc50 [ 570.602571][ C0] ? __pfx_mce_cpu_restart+0x10/0x10 [ 570.602589][ C0] __sysvec_call_function_single+0x9a/0x3d0 [ 570.602607][ C0] sysvec_call_function_single+0x9e/0xc0 [ 570.602623][ C0] [ 570.602628][ C0] [ 570.602634][ C0] asm_sysvec_call_function_single+0x1a/0x20 [ 570.602650][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp8+0x52/0xb0 [ 570.602673][ C0] Code: 00 0f 41 81 f8 00 01 00 00 41 0f 95 c0 81 fa 00 00 00 10 0f 93 c2 44 08 c2 75 63 83 b9 44 17 00 00 00 74 5a 8b 91 18 17 00 00 <83> fa 03 75 4f 48 8b 91 20 17 00 00 44 8b 81 1c 17 00 00 48 8b 0a [ 570.602685][ C0] RSP: 0018:ffffc9000f0a7c68 EFLAGS: 00040246 [ 570.602700][ C0] RAX: ffffffff82559203 RBX: ffffc9000f0a7e38 RCX: ffff88802e9b3e80 [ 570.602711][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 570.602720][ C0] RBP: dffffc0000000000 R08: 0000000000000210 R09: 0000000000000004 [ 570.602730][ C0] R10: 000000007fffffff R11: ffffffff82558e10 R12: ffffffff8c20b200 [ 570.602740][ C0] R13: 0000000000000001 R14: 0000000000000001 R15: 0000555562aa6a53 [ 570.602753][ C0] ? __pfx_filldir64+0x10/0x10 [ 570.602769][ C0] ? filldir64+0x3f3/0x690 [ 570.602788][ C0] filldir64+0x3f3/0x690 [ 570.602808][ C0] ? __pfx_filldir64+0x10/0x10 [ 570.602821][ C0] offset_readdir+0x1aa/0x530 [ 570.602837][ C0] ? down_read_killable+0x1b6/0x3b0 [ 570.602918][ C0] iterate_dir+0x3db/0x880 [ 570.602937][ C0] __se_sys_getdents64+0xf1/0x280 [ 570.602953][ C0] ? __pfx___se_sys_getdents64+0x10/0x10 [ 570.602967][ C0] ? __pfx_filldir64+0x10/0x10 [ 570.602982][ C0] ? do_user_addr_fault+0xd3f/0x1480 [ 570.603012][ C0] do_syscall_64+0x166/0x520 [ 570.603026][ C0] ? trace_irq_disable+0x3b/0x140 [ 570.603039][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 570.603054][ C0] ? clear_bhb_loop+0x70/0xc0 [ 570.603069][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 570.603084][ C0] RIP: 0033:0x7fc0ab9c6b73 [ 570.603098][ C0] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8 [ 570.603110][ C0] RSP: 002b:00007ffc3290b778 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 570.603128][ C0] RAX: ffffffffffffffda RBX: 0000555562aa6a10 RCX: 00007fc0ab9c6b73 [ 570.603139][ C0] RDX: 0000000000008000 RSI: 0000555562aa6a40 RDI: 0000000000000003 [ 570.603148][ C0] RBP: 0000555562aa6a40 R08: 00007fc0abbf4e20 R09: 0000000000000001 [ 570.603159][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000555562aa6a14 [ 570.603168][ C0] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007ffc3290c930 [ 570.603192][ C0] [ 570.644447][T11430] netlink: 'syz.9.1251': attribute type 10 has an invalid length. [ 570.717566][T11430] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 570.792060][T11430] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 570.806291][ T5756] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 570.925730][T11432] tmpfs: Too few inodes for current use [ 570.978089][ T5756] usb 2-1: Using ep0 maxpacket: 32 [ 570.987795][ T5756] usb 2-1: New USB device found: idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 571.001789][ T5756] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.070070][ T5756] usb 2-1: config 0 descriptor?? [ 571.281898][ T5756] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 571.301163][ T5756] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 571.304957][ T5756] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 571.305011][ T5756] usb 2-1: media controller created [ 571.349180][ T5756] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 571.530558][ T5756] az6027: usb out operation failed. (-71) [ 571.530930][ T5756] az6027: usb out operation failed. (-71) [ 571.530942][ T5756] stb0899_attach: Driver disabled by Kconfig [ 571.531027][ T5756] az6027: no front-end attached [ 571.531027][ T5756] [ 571.531399][ T5756] az6027: usb out operation failed. (-71) [ 571.531411][ T5756] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 571.534874][ T5756] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input21 [ 571.598492][ T5756] dvb-usb: schedule remote query interval to 400 msecs. [ 571.598514][ T5756] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 571.601459][ T5756] usb 2-1: USB disconnect, device number 27 [ 571.661939][T11455] af_packet: tpacket_rcv: packet too big, clamped from 74 to 4294967286. macoff=82 [ 571.691912][ T5756] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 571.707166][ T9] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 571.803793][T11460] loop9: detected capacity change from 0 to 2048 [ 571.857847][ T9] usb 5-1: New USB device found: idVendor=108c, idProduct=0159, bcdDevice=0.01 [ 571.859043][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 571.859089][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 571.872165][ T9] usb 5-1: string descriptor 0 read error: -22 [ 571.872316][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.893142][ T9] etas_es58x 5-1:1.0: Starting (null) (null) (Serial Number (null)) [ 572.253539][ T9] usb 5-1: USB disconnect, device number 17 [ 572.455337][T11458] loop8: detected capacity change from 0 to 32768 [ 572.535759][T11458] XFS (loop8): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 572.553510][T11484] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1273'. [ 572.592083][T11458] XFS (loop8): Ending clean mount [ 572.669355][T11458] XFS (loop8): Quotacheck needed: Please wait. [ 574.282014][T11498] loop9: detected capacity change from 0 to 2048 [ 574.416685][T11458] XFS (loop8): Quotacheck: Done. [ 576.650312][T11508] FAULT_INJECTION: forcing a failure. [ 576.650312][T11508] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 576.650346][T11508] CPU: 1 UID: 0 PID: 11508 Comm: syz.4.1281 Tainted: G L syzkaller #0 PREEMPT(full) [ 576.650371][T11508] Tainted: [L]=SOFTLOCKUP [ 576.650378][T11508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 576.650390][T11508] Call Trace: [ 576.650398][T11508] [ 576.650406][T11508] dump_stack_lvl+0xe8/0x150 [ 576.650435][T11508] should_fail_ex+0x3eb/0x540 [ 576.650573][T11508] strncpy_from_user+0x36/0x2c0 [ 576.650625][T11508] do_getname+0x77/0x250 [ 576.650650][T11508] __se_sys_statx+0xd7/0x2a0 [ 576.650674][T11508] ? __pfx___se_sys_statx+0x10/0x10 [ 576.650699][T11508] ? __se_sys_futex+0x3a8/0x450 [ 576.650727][T11508] ? rcu_is_watching+0x16/0xb0 [ 576.650752][T11508] ? __x64_sys_statx+0x20/0xc0 [ 576.650772][T11508] do_syscall_64+0x166/0x520 [ 576.650790][T11508] ? trace_irq_disable+0x3b/0x140 [ 576.650807][T11508] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.650827][T11508] ? clear_bhb_loop+0x70/0xc0 [ 576.650847][T11508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.650866][T11508] RIP: 0033:0x7fe93219e1d9 [ 576.650884][T11508] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 576.650900][T11508] RSP: 002b:00007fe9330e5028 EFLAGS: 00000246 ORIG_RAX: 000000000000014c [ 576.650920][T11508] RAX: ffffffffffffffda RBX: 00007fe932425fa0 RCX: 00007fe93219e1d9 [ 576.650935][T11508] RDX: 0000000000004000 RSI: 0000000000000000 RDI: 0000000000000003 [ 576.650947][T11508] RBP: 00007fe932235888 R08: 0000000000000000 R09: 0000000000000000 [ 576.650958][T11508] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000000 [ 576.650969][T11508] R13: 00007fe932426038 R14: 00007fe932425fa0 R15: 00007ffe41cacb58 [ 576.650998][T11508] [ 576.913653][ T8234] XFS (loop8): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 577.132825][T11510] netlink: 'syz.1.1284': attribute type 4 has an invalid length. [ 578.260635][T11516] vxcan0: tx address claim with different name [ 581.658347][T11537] loop1: detected capacity change from 0 to 32768 [ 581.707958][T11537] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 581.741752][T11537] XFS (loop1): Ending clean mount [ 581.992559][ T5609] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 584.214325][T11576] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1301'. [ 584.287798][ T5723] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 584.436295][ T5723] usb 2-1: Using ep0 maxpacket: 32 [ 584.440048][ T5723] usb 2-1: New USB device found: idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 584.441339][ T5723] usb 2-1: config index 0 descriptor too short (expected 27632, got 27) [ 584.441362][ T5723] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 584.441380][ T5723] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 584.441399][ T5723] usb 2-1: config 1 has no interface number 0 [ 584.441435][ T5723] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 584.441458][ T5723] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 584.441495][ T5723] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.530403][ T5723] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 586.191353][ C1] wlan0: beacon TX faster than countdown (channel/color switch) completion [ 586.243518][ T5723] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 586.673698][T10769] usb 2-1: USB disconnect, device number 28 [ 586.680463][T10769] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 587.749736][T11594] loop1: detected capacity change from 0 to 2048 [ 587.828734][T11597] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 589.803322][T11614] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1314'. [ 590.950105][T11633] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1322'. [ 591.803531][T11649] loop1: detected capacity change from 0 to 512 [ 591.983336][T11649] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 49, start 00000103) [ 592.009540][T11649] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000103) [ 592.158444][T11646] loop4: detected capacity change from 0 to 32768 [ 592.195267][T11653] tipc: Started in network mode [ 592.195300][T11653] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 592.195546][T11653] tipc: Enabled bearer , priority 0 [ 592.209561][ T32] audit: type=1800 audit(2000000251.450:116): pid=11646 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1311" name="file1" dev="loop4" ino=4 res=0 errno=-22 [ 592.462791][ T32] audit: type=1800 audit(2000000251.670:117): pid=11656 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1311" name="file1" dev="loop4" ino=4 res=0 errno=-22 [ 593.328499][ T887] tipc: Node number set to 43690 [ 593.496083][T11671] loop1: detected capacity change from 0 to 1024 [ 593.739099][ T887] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 593.898765][ T887] usb 5-1: Using ep0 maxpacket: 8 [ 593.905169][ T887] usb 5-1: New USB device found: idVendor=0225, idProduct=0000, bcdDevice=0.00 [ 593.906773][ T887] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 593.906799][ T887] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 593.906854][ T887] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 593.906893][ T887] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.931963][ T887] hub 5-1:1.0: bad descriptor, ignoring hub [ 593.931992][ T887] hub 5-1:1.0: probe with driver hub failed with error -5 [ 593.937234][ T887] cdc_wdm 5-1:1.0: skipping garbage [ 593.937256][ T887] cdc_wdm 5-1:1.0: skipping garbage [ 594.069366][ T887] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 594.069389][ T887] cdc_wdm 5-1:1.0: Unknown control protocol [ 594.567295][ T887] usb 5-1: USB disconnect, device number 18 [ 594.714445][ T5614] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 595.366414][ T887] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 595.877776][ T887] usb 10-1: New USB device found: idVendor=0711, idProduct=0900, bcdDevice=1.00 [ 595.883668][ T887] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 595.883697][ T887] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 595.885589][ T887] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.885613][ T887] usb 10-1: Product: syz [ 595.885627][ T887] usb 10-1: Manufacturer: syz [ 595.885639][ T887] usb 10-1: SerialNumber: syz [ 596.177486][ T887] usblp 10-1:1.0: usblp0: USB Bidirectional printer dev 11 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 597.594105][T11720] loop8: detected capacity change from 0 to 256 [ 597.652753][ T9857] usb 10-1: USB disconnect, device number 11 [ 597.710024][ T9857] usblp0: removed [ 597.888878][T11728] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 600.707143][T11746] loop9: detected capacity change from 0 to 4096 [ 601.260660][T11746] ntfs3(loop9): Different NTFS sector size (4096) and media sector size (512). [ 601.791046][T11754] loop6: detected capacity change from 0 to 1024 [ 601.793689][T11754] EXT4-fs: Ignoring removed bh option [ 601.819469][T11754] EXT4-fs (loop6): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 601.867616][T11754] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 602.093513][ T7611] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 605.802652][T11788] loop1: detected capacity change from 0 to 1024 [ 605.838153][T11788] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 605.878980][T11788] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 605.905774][T11788] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 605.905810][T11788] EXT4-fs (loop1): This should not happen!! Data will be lost [ 605.905810][T11788] [ 605.905835][T11788] EXT4-fs (loop1): Total free blocks count 0 [ 605.905849][T11788] EXT4-fs (loop1): Free/Dirty block details [ 605.905891][T11788] EXT4-fs (loop1): free_blocks=20480 [ 605.905930][T11788] EXT4-fs (loop1): dirty_blocks=80 [ 605.905943][T11788] EXT4-fs (loop1): Block reservation details [ 605.905954][T11788] EXT4-fs (loop1): i_reserved_data_blocks=5 [ 605.971816][T11792] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 48 with error 28 [ 606.097283][ T5609] EXT4-fs warning (device loop1): ext4_evict_inode:196: inode #15: comm syz-executor: data will be lost [ 606.247539][T11774] loop9: detected capacity change from 0 to 32768 [ 606.276765][T11774] XFS (loop9): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 606.297345][ T9] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 606.371037][T11796] loop1: detected capacity change from 0 to 4096 [ 606.406602][T11774] XFS (loop9): Ending clean mount [ 606.433089][T11774] XFS (loop9): User initiated shutdown received. [ 606.433600][T11774] XFS (loop9): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:468). Shutting down filesystem. [ 606.433813][T11774] XFS (loop9): Please unmount the filesystem and rectify the problem(s) [ 606.471708][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 606.472646][ T9] usb 5-1: New USB device found: idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 606.497867][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.497900][ T9] usb 5-1: Product: syz [ 606.497913][ T9] usb 5-1: Manufacturer: syz [ 606.497927][ T9] usb 5-1: SerialNumber: syz [ 606.504705][ T9] usb 5-1: config 0 descriptor?? [ 606.506660][T11796] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 606.561453][ T9] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 606.633531][ T9473] XFS (loop9): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 606.720778][T11796] ntfs3(loop1): Failed to load $Extend (-22). [ 606.720806][T11796] ntfs3(loop1): Failed to initialize $Extend. [ 606.775865][ T9] gspca_sonixj: reg_w1 err -71 [ 606.776003][ T9] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 606.832740][ T9] usb 5-1: USB disconnect, device number 19 [ 607.154377][ T32] audit: type=1800 audit(2000000266.390:118): pid=11796 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1376" name="file1" dev="loop1" ino=30 res=0 errno=-4 [ 611.483895][T11839] kvm: user requested TSC rate below hardware speed [ 611.685833][T11841] tmpfs: Using encoding : utf8-12.1.0 [ 611.746030][T11843] loop9: detected capacity change from 0 to 256 [ 613.069137][T11849] loop9: detected capacity change from 0 to 32768 [ 613.169522][T11849] XFS (loop9): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 613.307264][T11849] XFS (loop9): Ending clean mount [ 615.597485][ T9473] XFS (loop9): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 616.937668][ T5723] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 617.089215][ T5723] usb 5-1: Using ep0 maxpacket: 32 [ 617.189207][ T5723] usb 5-1: New USB device found: idVendor=0582, idProduct=007d, bcdDevice=0.40 [ 617.197256][ T5723] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 617.508383][ T5723] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.508410][ T5723] usb 5-1: Product: syz [ 617.508423][ T5723] usb 5-1: Manufacturer: syz [ 617.508436][ T5723] usb 5-1: SerialNumber: syz [ 617.518692][ T5723] snd-ua101 5-1:1.1: sample format descriptor not found [ 617.518713][ T5723] snd-ua101 5-1:1.0: invalid num_altsetting [ 617.653431][T11894] smpboot: CPU 1 is now offline [ 617.915581][ T9] usb 5-1: USB disconnect, device number 20 [ 621.075302][ T10] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 621.533940][ T10] usb 10-1: Using ep0 maxpacket: 16 [ 621.565659][ T10] usb 10-1: New USB device found: idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 621.898775][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.898793][ T10] usb 10-1: Product: syz [ 621.898801][ T10] usb 10-1: Manufacturer: syz [ 621.898808][ T10] usb 10-1: SerialNumber: syz [ 622.361506][ T10] usb 10-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 622.382694][ T10] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 622.382925][ T10] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 622.382965][ T10] usb 10-1: media controller created [ 622.459670][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 623.745603][ T10] zl10353_read_register: readreg error (reg=127, ret==-71) [ 624.746413][ T10] dvb_usb_gl861 10-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 624.778573][ T10] usb 10-1: USB disconnect, device number 12 [ 625.270222][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.271325][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 627.638340][ T9855] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 627.786288][ T9855] usb 10-1: Using ep0 maxpacket: 32 [ 627.786977][ T9855] usb 10-1: New USB device found: idVendor=0582, idProduct=007d, bcdDevice=0.40 [ 627.787833][ T9855] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 627.789449][ T9855] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.789478][ T9855] usb 10-1: Product: syz [ 627.789486][ T9855] usb 10-1: Manufacturer: syz [ 627.789493][ T9855] usb 10-1: SerialNumber: syz [ 627.957073][ T9855] snd-ua101 10-1:1.1: sample format descriptor not found [ 627.957090][ T9855] snd-ua101 10-1:1.0: invalid num_altsetting [ 628.853253][ T9855] usb 10-1: USB disconnect, device number 13 [ 633.362690][T11964] loop1: detected capacity change from 0 to 2048 [ 633.433125][T11967] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 635.241790][ T10] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 635.540035][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 635.540082][ T10] usb 5-1: New USB device found: idVendor=0000, idProduct=0000, bcdDevice=0.00 [ 635.540102][ T10] usb 5-1: no configurations [ 635.540109][ T10] usb 5-1: can't read configurations, error -22 [ 642.302466][T12030] FAULT_INJECTION: forcing a failure. [ 642.302466][T12030] name failslab, interval 1, probability 0, space 0, times 0 [ 642.302488][T12030] CPU: 0 UID: 0 PID: 12030 Comm: syz.4.1444 Tainted: G L syzkaller #0 PREEMPT(full) [ 642.302504][T12030] Tainted: [L]=SOFTLOCKUP [ 642.302508][T12030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 642.302515][T12030] Call Trace: [ 642.302520][T12030] [ 642.302525][T12030] dump_stack_lvl+0xe8/0x150 [ 642.302556][T12030] should_fail_ex+0x3eb/0x540 [ 642.302572][T12030] should_failslab+0xa8/0x100 [ 642.302608][T12030] __kmalloc_cache_noprof+0x9e/0x600 [ 642.302622][T12030] ? find_get_task_by_vpid+0x1d/0x280 [ 642.302634][T12030] ? yama_ptracer_add+0x56/0x4b0 [ 642.302707][T12030] ? yama_ptracer_add+0x56/0x4b0 [ 642.302723][T12030] yama_ptracer_add+0x56/0x4b0 [ 642.302736][T12030] yama_task_prctl+0xd0/0x180 [ 642.302748][T12030] security_task_prctl+0xf6/0x190 [ 642.302796][T12030] __se_sys_prctl+0xbf/0x1910 [ 642.302811][T12030] ? __pfx___se_sys_prctl+0x10/0x10 [ 642.302825][T12030] ? __x64_sys_prctl+0x20/0xc0 [ 642.302836][T12030] do_syscall_64+0x166/0x520 [ 642.302847][T12030] ? trace_irq_disable+0x3b/0x140 [ 642.302857][T12030] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.302868][T12030] ? clear_bhb_loop+0x70/0xc0 [ 642.302879][T12030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.302890][T12030] RIP: 0033:0x7fe93219e1d9 [ 642.302902][T12030] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 642.302910][T12030] RSP: 002b:00007fe9330e5028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 642.302923][T12030] RAX: ffffffffffffffda RBX: 00007fe932425fa0 RCX: 00007fe93219e1d9 [ 642.302932][T12030] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000059616d61 [ 642.302938][T12030] RBP: 00007fe932235888 R08: 0000000000000000 R09: 0000000000000000 [ 642.302944][T12030] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 642.302950][T12030] R13: 00007fe932426038 R14: 00007fe932425fa0 R15: 00007ffe41cacb58 [ 642.302967][T12030] [ 642.729596][T12032] loop6: detected capacity change from 0 to 512 [ 642.816399][T12034] FAULT_INJECTION: forcing a failure. [ 642.816399][T12034] name failslab, interval 1, probability 0, space 0, times 0 [ 642.816423][T12034] CPU: 0 UID: 0 PID: 12034 Comm: syz.4.1448 Tainted: G L syzkaller #0 PREEMPT(full) [ 642.816438][T12034] Tainted: [L]=SOFTLOCKUP [ 642.816445][T12034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 642.816452][T12034] Call Trace: [ 642.816457][T12034] [ 642.816462][T12034] dump_stack_lvl+0xe8/0x150 [ 642.816480][T12034] should_fail_ex+0x3eb/0x540 [ 642.816495][T12034] should_failslab+0xa8/0x100 [ 642.816506][T12034] ? prepare_creds+0x30/0x820 [ 642.816518][T12034] kmem_cache_alloc_noprof+0x9c/0x600 [ 642.816529][T12034] ? make_kuid+0x1e5/0x670 [ 642.816540][T12034] ? prepare_creds+0x30/0x820 [ 642.816550][T12034] ? __pfx_make_kuid+0x10/0x10 [ 642.816561][T12034] prepare_creds+0x30/0x820 [ 642.816574][T12034] __sys_setreuid+0x100/0x960 [ 642.816589][T12034] do_syscall_64+0x166/0x520 [ 642.816607][T12034] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.816618][T12034] ? clear_bhb_loop+0x70/0xc0 [ 642.816629][T12034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.816640][T12034] RIP: 0033:0x7fe93219e1d9 [ 642.816651][T12034] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 642.816661][T12034] RSP: 002b:00007fe9330e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000071 [ 642.816674][T12034] RAX: ffffffffffffffda RBX: 00007fe932425fa0 RCX: 00007fe93219e1d9 [ 642.816682][T12034] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee01 [ 642.816688][T12034] RBP: 00007fe932235888 R08: 0000000000000000 R09: 0000000000000000 [ 642.816694][T12034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 642.816700][T12034] R13: 00007fe932426038 R14: 00007fe932425fa0 R15: 00007ffe41cacb58 [ 642.816724][T12034] [ 647.773975][T12077] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1464'. [ 650.893578][T12104] ------------[ cut here ]------------ [ 650.893590][T12104] memcpy: detected buffer overflow: 16 byte read of buffer size 0 [ 650.893604][T12104] WARNING: lib/string_helpers.c:1037 at __fortify_report+0x6b/0xa0, CPU#0: syz.4.1472/12104 [ 650.922469][T12104] Modules linked in: [ 650.927492][T12104] CPU: 0 UID: 0 PID: 12104 Comm: syz.4.1472 Tainted: G L syzkaller #0 PREEMPT(full) [ 650.940808][T12104] Tainted: [L]=SOFTLOCKUP [ 650.946040][T12104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 650.958604][T12104] RIP: 0010:__fortify_report+0x89/0xa0 [ 650.965951][T12104] Code: e8 5c 9a 55 fd 48 8d 3d 45 ed 9e 0c 45 84 e4 49 8b 37 48 c7 c0 00 2b 6c 8c 48 c7 c1 20 2b 6c 8c 48 0f 44 c8 4c 89 f2 49 89 d8 <67> 48 0f b9 3a 5b 41 5c 41 5e 41 5f 5d c3 cc cc cc cc cc cc cc cc [ 650.989859][T12104] RSP: 0018:ffffc9000578fdc8 EFLAGS: 00010246 [ 650.997348][T12104] RAX: ffffffff8c6c2b00 RBX: 0000000000000000 RCX: ffffffff8c6c2b00 [ 651.006615][T12104] RDX: 0000000000000010 RSI: ffffffff8c6c29e0 RDI: ffffffff9184da00 [ 651.016638][T12104] RBP: 000000000000000e R08: 0000000000000000 R09: 1ffff1100c49eca1 [ 651.026837][T12104] R10: dffffc0000000000 R11: ffffed100c49eca2 R12: 0000000000000000 [ 651.036514][T12104] R13: 0000000000000000 R14: 0000000000000010 R15: ffffffff8c6c2838 [ 651.045894][T12104] FS: 00007fe9330e56c0(0000) GS:ffff888123ab6000(0000) knlGS:0000000000000000 [ 651.055882][T12104] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 651.063959][T12104] CR2: 000000110c2d8cc3 CR3: 0000000076ffe000 CR4: 00000000003526f0 [ 651.073347][T12104] Call Trace: [ 651.077043][T12104] [ 651.080328][T12104] __fortify_panic+0x9/0x10 [ 651.085562][T12104] landlock_merge_ruleset+0xc46/0xc90 [ 651.092249][T12104] __se_sys_landlock_restrict_self+0x2bc/0xd40 [ 651.099692][T12104] do_syscall_64+0x166/0x520 [ 651.105436][T12104] ? trace_irq_disable+0x3b/0x140 [ 651.111661][T12104] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.119220][T12104] ? clear_bhb_loop+0x70/0xc0 [ 651.124729][T12104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.132760][T12104] RIP: 0033:0x7fe93219e1d9 [ 651.138009][T12104] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 651.160003][T12104] RSP: 002b:00007fe9330e5028 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 651.169846][T12104] RAX: ffffffffffffffda RBX: 00007fe932425fa0 RCX: 00007fe93219e1d9 [ 651.178738][T12104] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 651.187923][T12104] RBP: 00007fe932235888 R08: 0000000000000000 R09: 0000000000000000 [ 651.197091][T12104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 651.206431][T12104] R13: 00007fe932426038 R14: 00007fe932425fa0 R15: 00007ffe41cacb58 [ 651.215244][T12104] [ 651.219298][T12104] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 651.227303][T12104] CPU: 0 UID: 0 PID: 12104 Comm: syz.4.1472 Tainted: G L syzkaller #0 PREEMPT(full) [ 651.239788][T12104] Tainted: [L]=SOFTLOCKUP [ 651.244690][T12104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 651.256036][T12104] Call Trace: [ 651.259738][T12104] [ 651.262966][T12104] vpanic+0x26f/0x710 [ 651.267631][T12104] panic+0xc5/0xd0 [ 651.271732][T12104] ? __pfx_panic+0x10/0x10 [ 651.276802][T12104] __warn+0x315/0x4c0 [ 651.281273][T12104] ? __fortify_report+0x6b/0xa0 [ 651.286907][T12104] ? __fortify_report+0x6b/0xa0 [ 651.292327][T12104] __report_bug+0x276/0x570 [ 651.297479][T12104] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.304282][T12104] ? __fortify_report+0x6b/0xa0 [ 651.309938][T12104] ? __pfx___report_bug+0x10/0x10 [ 651.315750][T12104] report_bug_entry+0x19b/0x290 [ 651.321081][T12104] ? __fortify_report+0x89/0xa0 [ 651.326521][T12104] ? __fortify_report+0x8e/0xa0 [ 651.331933][T12104] handle_bug+0xce/0x200 [ 651.336910][T12104] exc_invalid_op+0x1a/0x50 [ 651.342453][T12104] asm_exc_invalid_op+0x1a/0x20 [ 651.347903][T12104] RIP: 0010:__fortify_report+0x89/0xa0 [ 651.354126][T12104] Code: e8 5c 9a 55 fd 48 8d 3d 45 ed 9e 0c 45 84 e4 49 8b 37 48 c7 c0 00 2b 6c 8c 48 c7 c1 20 2b 6c 8c 48 0f 44 c8 4c 89 f2 49 89 d8 <67> 48 0f b9 3a 5b 41 5c 41 5e 41 5f 5d c3 cc cc cc cc cc cc cc cc [ 651.376667][T12104] RSP: 0018:ffffc9000578fdc8 EFLAGS: 00010246 [ 651.383325][T12104] RAX: ffffffff8c6c2b00 RBX: 0000000000000000 RCX: ffffffff8c6c2b00 [ 651.392366][T12104] RDX: 0000000000000010 RSI: ffffffff8c6c29e0 RDI: ffffffff9184da00 [ 651.401223][T12104] RBP: 000000000000000e R08: 0000000000000000 R09: 1ffff1100c49eca1 [ 651.410087][T12104] R10: dffffc0000000000 R11: ffffed100c49eca2 R12: 0000000000000000 [ 651.419040][T12104] R13: 0000000000000000 R14: 0000000000000010 R15: ffffffff8c6c2838 [ 651.427817][T12104] ? __fortify_report+0x2c/0xa0 [ 651.433156][T12104] __fortify_panic+0x9/0x10 [ 651.438087][T12104] landlock_merge_ruleset+0xc46/0xc90 [ 651.444136][T12104] __se_sys_landlock_restrict_self+0x2bc/0xd40 [ 651.451083][T12104] do_syscall_64+0x166/0x520 [ 651.456128][T12104] ? trace_irq_disable+0x3b/0x140 [ 651.461631][T12104] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.468300][T12104] ? clear_bhb_loop+0x70/0xc0 [ 651.473528][T12104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.480192][T12104] RIP: 0033:0x7fe93219e1d9 [ 651.485564][T12104] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 651.509204][T12104] RSP: 002b:00007fe9330e5028 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 651.519890][T12104] RAX: ffffffffffffffda RBX: 00007fe932425fa0 RCX: 00007fe93219e1d9 [ 651.529914][T12104] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 651.539527][T12104] RBP: 00007fe932235888 R08: 0000000000000000 R09: 0000000000000000 [ 651.548965][T12104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 651.558118][T12104] R13: 00007fe932426038 R14: 00007fe932425fa0 R15: 00007ffe41cacb58 [ 651.567603][T12104] [ 651.570974][T12104] Kernel Offset: disabled [ 651.576010][T12104] Rebooting in 86400 seconds..