last executing test programs: 1m23.587246584s ago: executing program 1 (id=1060): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_procfs(0x0, 0x0) lseek(r4, 0x8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a4000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000440)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x16) setsockopt$inet6_int(r0, 0x29, 0x38, 0x0, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) (fail_nth: 2) recvmmsg(r0, &(0x7f0000005bc0)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4004840}, 0x4) 1m22.631251995s ago: executing program 1 (id=1062): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000005580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELOBJ={0x54, 0x14, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_USERDATA={0x4}]}, @NFT_MSG_NEWFLOWTABLE={0x30, 0x16, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) 1m21.968932396s ago: executing program 1 (id=1065): syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x1000000, &(0x7f00000000c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[], 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2, 0xffffffffffffffff}, 0x4) r4 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000540)='.log\x00', 0x1c10c1, 0x9c37611dc13d0db7) ioctl$UI_DEV_CREATE(r4, 0xc0086c43) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r5) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x1c, r6, 0x331, 0x70bd2c, 0x25dfdbfb, {0xb}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008010}, 0x4000084) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r4, r7, 0x25, 0x3, @val=@netfilter={0x0, 0x1, 0x3, 0x1}}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb702000000000000182300", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000680)="76389e6a65585578f830e9000000", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000140)=ANY=[@ANYBLOB="c90920ca"]) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev}, @time_exceeded={0x2b, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}}}}}}, 0x0) ftruncate(r0, 0xf4ff) 1m19.746577441s ago: executing program 1 (id=1070): syz_mount_image$minix(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000001180)=ANY=[@ANYBLOB="00637dd254644a5ed23c41a4dab19ac29abba508756df61bb8ef1d30257bee912821db4cba718590f2f1fc8782377c77dec67080e3c6b9ce30a574a6f49c48d3793db4435aa6ba06cb87a4e478ca6099e2fbca886cbdcde0df5d3c87997a809428b92e4c0ead6a73708b8541859feb0a3ea76927bc1340366be35fca6a9431638b3e"], 0x1, 0x1d4, &(0x7f00000002c0)="$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") r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) pipe(&(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f00000005c0)='fd', 0x0, r3) socket(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ptrace(0x10, r5) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000001200000000000000006337f134225cea584694fabd00000000000000000000000000006676de7a055b77795c8f100aff0715a10cfd5c20698bed590c34bdfc404ff15fd050922fd7dffed1cedb7b1fb0f242101d8343087d4d7dac22441ff64e54d6ee5a0f5c2a794b3ef1ae03af10e80914f74dbbdb54590adb"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r6}, 0x4) ptrace$getregset(0x4205, r5, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r4, 0x1, 0x4) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) fchdir(r7) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x300, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x11129}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x8015}, 0x40040) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001080)=ANY=[@ANYBLOB="240000001200010100000000fedbdf250700000008000000985fc2c6", @ANYRES32=0x0, @ANYBLOB="0800e88004004380"], 0x24}}, 0x0) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x100, 0x0, 0x300}, 0x20}, 0x1, 0xba01, 0x0, 0x4004001}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfff9, 0x7, 0x0, 0x0, 0x2}, {0x2, 0x6, 0x6, 0x200000000, 0x5, 0x4, 0x1, 0xfffffffffffffff9}, {0x8040000000060, 0x7, 0x9, 0x9}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {{@in=@empty, 0x4d6, 0x3c}, 0xa, @in=@private=0xa010101, 0xffffffde, 0x0, 0x67a01bcf906970c1, 0x81, 0x7, 0x0, 0x2}}, 0xe8) 1m19.01112142s ago: executing program 1 (id=1074): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2280, 0x0) r1 = gettid() ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000100)={0x8f15, 0x45, {0x0}, {0xffffffffffffffff}, 0x3, 0x2}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0x944, 0x3}) kcmp(r1, r2, 0x6, r0, r3) signalfd(r0, &(0x7f00000000c0)={[0x400]}, 0x8) close(r0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6}, 0xc) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x310, 0x11, 0x148, 0x310, 0x0, 0x410, 0x2a8, 0x2a8, 0x410, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x20, 0x3, 0x5, 0x2}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00', {0xff}}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x508) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110e22fff2) ioctl$TUNGETVNETLE(r0, 0x40047451, 0x0) 1m16.814802351s ago: executing program 1 (id=1078): syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000000)='./file1\x00', 0xa18c56, &(0x7f0000001040)={[{@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp852'}}, {@uni_xlateno}, {@fat=@dos1xfloppy}, {@shortname_win95}, {@shortname_lower}, {@fat=@debug}, {@rodir}, {@uni_xlateno}, {@shortname_lower}, {@utf8}, {@rodir}, {@utf8no}]}, 0x81, 0x29b, &(0x7f0000000580)="$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") write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a40)='memory.swap.current\x00', 0x275a, 0x0) 1m16.533736513s ago: executing program 32 (id=1078): syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000000)='./file1\x00', 0xa18c56, &(0x7f0000001040)={[{@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp852'}}, {@uni_xlateno}, {@fat=@dos1xfloppy}, {@shortname_win95}, {@shortname_lower}, {@fat=@debug}, {@rodir}, {@uni_xlateno}, {@shortname_lower}, {@utf8}, {@rodir}, {@utf8no}]}, 0x81, 0x29b, &(0x7f0000000580)="$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") write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a40)='memory.swap.current\x00', 0x275a, 0x0) 12.485972694s ago: executing program 3 (id=1254): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xca) bind$ax25(r0, &(0x7f0000000300)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0xf32f, 0xfe000000}, &(0x7f00000000c0)=0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x20004010) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x4008080) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r5, 0x890b, &(0x7f00000007c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @null, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) connect$rose(r5, &(0x7f0000000040)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) connect$rose(r5, &(0x7f0000000240)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @null}, 0x1c) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10) syz_emit_ethernet(0x80, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r6) 11.309768641s ago: executing program 3 (id=1259): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x24, 0x14, 0x1, 0x0, 0x0, {0x2c}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "f2e4c9d0cd987aae7f"}]}, 0x24}}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd63"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x20100) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 10.602520107s ago: executing program 3 (id=1266): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000000)='./bus\x00', 0x300000a, &(0x7f0000000080)={[{@nodatacow}, {@thread_pool={'thread_pool', 0x3d, 0x3}}, {@nodiscard}, {@clear_cache}, {@discard}, {@clear_cache}, {@nobarrier}, {@compress_algo={'compress', 0x3d, 'no'}}, {@nospace_cache}, {@enospc_debug}, {@ssd_spread}, {@nossd}]}, 0x3, 0x55a3, &(0x7f0000005600)="$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") add_key$user(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) lsetxattr(0x0, &(0x7f0000000340)=@known='trusted.overlay.origin\x00', &(0x7f0000000380)='discard', 0x7, 0x3) 9.674917237s ago: executing program 4 (id=1269): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xca) bind$ax25(r0, &(0x7f0000000300)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0xf32f, 0xfe000000}, &(0x7f00000000c0)=0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x20004010) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x4008080) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r5, 0x890b, &(0x7f00000007c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @null, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) connect$rose(r5, &(0x7f0000000040)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) connect$rose(r5, &(0x7f0000000240)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @null}, 0x1c) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10) syz_emit_ethernet(0x80, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r6) 8.250747s ago: executing program 5 (id=1274): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000) 8.180859844s ago: executing program 4 (id=1275): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x108}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r2, 0x0, 0x48800) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000013014000000110001000000000000000000"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x867, &(0x7f0000000140)={0x0, 0x9164, 0x1000, 0x1, 0x359}, &(0x7f00000002c0), &(0x7f0000ff4000)) 7.92763282s ago: executing program 5 (id=1277): ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000140)={0x28, 0x4, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5}) timer_create(0x0, 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) sendto$inet6(0xffffffffffffffff, &(0x7f0000000280)="020409fcec", 0x5, 0x800, 0x0, 0x0) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffff3f, {}, {}, @raw32}], 0xffc8) 7.205614038s ago: executing program 5 (id=1278): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000500)={0x1c, &(0x7f0000000580)={0x0, 0x17}, 0x0, &(0x7f00000004c0)}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b01, 0x0) 6.899050345s ago: executing program 4 (id=1281): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r1) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x1c, r2, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x64044000) socket$packet(0x11, 0x2, 0x300) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000002040)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000a00)=""/144, 0x90}], 0x1}, 0x2}], 0x1, 0x40000022, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4089, 0x197}, {&(0x7f0000000400)=""/106, 0x1c}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xbe8}, {&(0x7f0000000540)=""/158, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x4c, &(0x7f000002eff0)={0x1, &(0x7f0000000000)=[{0xffff}]}, 0x10) openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0x200, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) request_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000006c0)='o.\x00\xac\xb1(\n\x0e\xcb:\xd0,', 0x0) request_key(&(0x7f0000000140)='id_legacy\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0xfffffffffffffffe) sendmsg$IPVS_CMD_GET_SERVICE(r8, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x20, r6, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}]}, 0x20}}, 0x12) r9 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0x8000}, 0x80, 0x0}, 0x0) sendmsg$kcm(r9, &(0x7f0000000000)={&(0x7f0000000b40)=@qipcrtr={0x2a, 0x1, 0x7ffe}, 0x80, 0x0}, 0x40) sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, r6, 0x100, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x48004}, 0x0) connect$unix(r5, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e23}, 0x6e) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="14010000350001000000000000000000020100800c0001"], 0x114}], 0x1}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000000) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) 6.655641722s ago: executing program 3 (id=1282): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000180)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r6, 0x40103e05, &(0x7f0000000140)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x1, 0x0, &(0x7f0000000000)) mount(&(0x7f0000000040)=@nullb, 0x0, 0x0, 0x1000080, 0x0) io_uring_setup(0xf08, &(0x7f00000003c0)={0x0, 0xfb6e, 0x38c1, 0x4, 0xf0}) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b00)=ANY=[@ANYBLOB="28000000400007012bbd700000000000047c0000085ce080"], 0x28}, 0x1, 0x0, 0x0, 0x48815}, 0xc020) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_FW_DOWNLOAD(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x28, r7, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NFC_ATTR_FIRMWARE_NAME={0xa, 0x14, '/)+:^,'}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x88040}, 0x20000080) 5.622662194s ago: executing program 2 (id=1284): r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0) ppoll(&(0x7f00000022c0)=[{r1, 0x2}], 0x1, &(0x7f0000002340), 0x0, 0x0) 5.499946346s ago: executing program 4 (id=1285): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xca) bind$ax25(r0, &(0x7f0000000300)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0xf32f, 0xfe000000}, &(0x7f00000000c0)=0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x20004010) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x4008080) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r5, 0x890b, &(0x7f00000007c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @null, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) connect$rose(r5, &(0x7f0000000040)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) connect$rose(r5, &(0x7f0000000240)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @null}, 0x1c) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10) syz_emit_ethernet(0x80, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r6) 5.464747572s ago: executing program 0 (id=1286): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x18}}, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x21, &(0x7f0000000440), 0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, 0x0) syz_io_uring_setup(0x1b99, &(0x7f0000000400)={0x0, 0x79b0, 0x800, 0x0, 0x40024e}, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$vim2m(&(0x7f0000003800), 0x7, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) 5.398966453s ago: executing program 2 (id=1287): r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x12202, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20004810) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x8000102) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000280)={0x40}, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) sendmmsg$unix(r3, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000002c0)="0a690b6528a1f42d548655afb9", 0xd}, {&(0x7f0000000300)}, {&(0x7f00000003c0)="107b5c9b209d083fd0dee19bf2ae62f83fad9168be3cb66dcb11fa2dcac0d312", 0x20}, {&(0x7f0000000500)}], 0x4, 0x0, 0x0, 0x200400c4}}, {{0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000240)="c82a7287c5d17b22540e7fb0fd08a97177b68e1f0a5bea2a67050e2471069e3f56205aa3235a93e194cab3bc9f5d226cf7436386453708e05aa2fb4ac9e327b0f8a8980df9d961d7afe222f42d46fcff8b563da92c35ce2d936b62a7643d24e6", 0x60}, {0x0, 0xf00}, {&(0x7f0000000800)="cbb8371b27d923d576288b4e0504dccf8b8c82da89c28886f02d4ee2c16e792dea07a72dcd74669ca36aa01f77061f91143da33b01cae15a954803bf90447e6f1a575e468a5960364287dcb62dc4c9bfc5038b2c77d682b706dacbd6cccb46c27a4877cdf19374e06faecbdeba86105a8fe444780c03dc24d00ab4baa12c67f77ced2ce7b09fe73cbb30135a02398298d019976041fccf81987882", 0x9b}], 0x4, 0x0, 0x0, 0x40000}}], 0x2, 0xc000) bind$tipc(r1, &(0x7f00000001c0)=@name={0x1e, 0x2, 0x2, {{0x40, 0x4}, 0x1}}, 0x10) r4 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x24, r5, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0x1}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x4044) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x84022, &(0x7f00000001c0)=ANY=[@ANYBLOB]) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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") r7 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0xe00) ioctl$I2C_SMBUS(r7, 0x720, &(0x7f0000000480)={0x1, 0x4, 0x4, &(0x7f0000000080)={0xb, "617894d1c0e8ebeb8b3226b2b3791c63cd49a79d570000004dfe472fcca348806c"}}) chdir(&(0x7f0000000340)='./file2\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000001240)='./file0/file0\x00', 0x2) 4.330128569s ago: executing program 4 (id=1288): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="01002abd7000fedbdf253b00000008000300", @ANYRES32=r1, @ANYBLOB="3e0033008000e100ffffffffffff08021100000050505050505000df593300fcffffffffffffff0c00014003010e05030982fc3c0401042c037206"], 0x5c}, 0x1, 0x0, 0x0, 0x880}, 0x0) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd0000000000000109022400018000000009040000010300000009210500000122050009058103"], 0x0) read$msr(0xffffffffffffffff, &(0x7f0000001d80)=""/99, 0x63) syz_usb_control_io(r2, 0x0, 0x0) r3 = syz_usb_connect$uac1(0x6, 0xc6, &(0x7f0000000fc0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x2a39, 0x3fd2, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb4, 0x3, 0x1, 0x80, 0xb0, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3, 0x33}, [@processing_unit={0xa, 0x24, 0x7, 0x6, 0x3, 0xb, "73a686"}, @feature_unit={0x13, 0x24, 0x6, 0x4, 0x3, 0x6, [0x1, 0x1, 0x6, 0x2, 0x6, 0x1], 0x4}, @mixer_unit={0x7, 0x24, 0x4, 0x3, 0x0, "dc22"}, @selector_unit={0x5, 0x24, 0x5, 0x2, 0x40}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x3, 0x2, 0x1, 0x1, 0x13}]}, {{0x9, 0x5, 0x1, 0x9, 0x410, 0x7, 0x1, 0x6, {0x7, 0x25, 0x1, 0x0, 0xa, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x77, 0x3, 0x5, 0x8, "3b1081"}, @as_header={0x7, 0x24, 0x1, 0x0, 0xce, 0x1001}, @as_header={0x7, 0x24, 0x1, 0x7b, 0x5, 0x1001}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0xb, 0xb, 0x10, 0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x9, 0xe, 0x2c, {0x7, 0x25, 0x1, 0x4, 0x2, 0xc}}}}}}}}]}}, &(0x7f0000001280)={0xa, &(0x7f00000010c0)={0xa, 0x6, 0x300, 0x3d, 0x8, 0x2, 0x40}, 0x51, &(0x7f0000001100)={0x5, 0xf, 0x51, 0x5, [@wireless={0xb, 0x10, 0x1, 0x2, 0x0, 0x64, 0x0, 0x800, 0xf9}, @wireless={0xb, 0x10, 0x1, 0x2, 0x20, 0x5, 0x5, 0x0, 0xa4}, @wireless={0xb, 0x10, 0x1, 0xc, 0xb2, 0x4, 0x6, 0xc, 0x8}, @ssp_cap={0x24, 0x10, 0xa, 0x2, 0x6, 0x3, 0xf00, 0x6, [0xc0, 0xff3f3f, 0xc0, 0xffc000, 0xf, 0xff00]}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x2, 0xa, 0x4fc}]}, 0x2, [{0x4, &(0x7f0000001180)=@lang_id={0x4, 0x3, 0x41f}}, {0x9b, &(0x7f00000011c0)=@string={0x9b, 0x3, "f47abd0f3b54d96113ae455ce712bf44170b47ab0f6036a6ef970ddbb519d10f48593eccac16905b5de5c40fe25432db13ced932c88bed6a180cdd2dade542dba4e18095a1ef0c2f573fe3cdf6fc0b499cc0e726b1696322c21c2dd56bb64f6d542cb737aadfa110556cb3936d52f13f024fee29ae23e69253303e1931011326151da62df419277ae64ab008f17bf001ba7c6a6ece7c28b0e3"}}]}) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) write$RDMA_USER_CM_CMD_ACCEPT(r4, &(0x7f0000000f80)={0x8, 0x120, 0xfa00, {0x0, {0x80000, 0x5f9b, "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", 0x2, 0x0, 0x7, 0x7, 0x6, 0x5, 0x3, 0x1}}}, 0x128) syz_usb_control_io$uac1(r3, &(0x7f00000013c0)={0x14, &(0x7f00000012c0)={0x0, 0x21, 0x67, {0x67, 0xc, "09705bd86b7cf0c99a81e67c818674c7954749048d244b72d5d55e693d20f5374e145ebd3f9bc5906935f602fef221bcada45c54546c0650b651e58dfab81b6a83170482bd21792c767306c6fe19f774ce5bafa85e3ea26611a1284cb3630e650c7ca75489"}}, &(0x7f0000001340)={0x0, 0x3, 0x76, @string={0x76, 0x3, "08740eaae1f92d6667da716f2e894ae4c98c3798236b1f00a66d875d8e8e851f516cb4c6f51170b8cdbcc40d32bb5aed7348e7f8908db2038342ea8507f7073245400fd753f2aa22ad20ad05efadbad768f78efacb68ba2096186dac64b8fab866a48d7e4a6368a3e9ce4c72ae6a8531c7545f65"}}}, &(0x7f0000001680)={0x44, &(0x7f0000001400)={0x40, 0xa, 0x91, "2d9ad51efa94d6a3ebad3ba3e72ce79cfb7b7b963d3e8457dd1b8bd61a1a746b6b471b9e551f093b80053ee15904058e879de97f09e05b5ea6fc693db39c63df9f3b8c69af606f3093efef4c054459c2a84ba2b84b1ed8bab6bd26891a0232ab50a2b1631c6e1b2e9df047da089149a7cf0fdca58501df3342a9846d0d8e10da9fc2d93eb3f69b0934e75370524b1cf72a"}, &(0x7f00000014c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000001500)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000001540)={0x20, 0x81, 0x1, 'X'}, &(0x7f0000001580)={0x20, 0x82, 0x3, "8cd632"}, &(0x7f00000015c0)={0x20, 0x83, 0x2, "e0f4"}, &(0x7f0000001600)={0x20, 0x84, 0x2, "d886"}, &(0x7f0000001640)={0x20, 0x85, 0x3, "fc0774"}}) syz_usb_control_io(r2, &(0x7f0000000200)={0x2c, &(0x7f0000000040)={0x20, 0x13, 0x5, {0x5, 0xd, "b8c243"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r3, &(0x7f0000001840)={0x2c, &(0x7f0000001700)={0x40, 0xa, 0x5, {0x5, 0xa, "e1f137"}}, &(0x7f0000001740)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x80a}}, &(0x7f0000001780)={0x0, 0xf, 0x30, {0x5, 0xf, 0x30, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x9, "31651148c20272425946bdd5c5e11a4b"}, @ptm_cap={0x3}, @ssp_cap={0x14, 0x10, 0xa, 0xff, 0x2, 0x56, 0x880, 0xe, [0xcf, 0xffc00f]}]}}, &(0x7f00000017c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x40, 0x1, 0x1, 0x80, "dc5f324d", "d3c18172"}}, &(0x7f0000001800)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x83, 0x18, 0x81, 0x0, 0x9, 0x2, 0xa673}}}, &(0x7f0000001cc0)={0x84, &(0x7f0000001880)={0x0, 0x11, 0x66, "5949cface3da88421ef51cb9e314e20a74437cba3f6042b98f06ca6079db362b5d5aad4f5f8cbafafcdf0deb32c67d882ec4daffbb0da99defe049935e526efc1c4269d0a4ccb93bd01a5135b74a16409652606642977f85a745a70a9027a7c4417802ef556f"}, &(0x7f0000001900)={0x0, 0xa, 0x1, 0x7}, 0x0, &(0x7f0000001980)={0x20, 0x0, 0x4, {0x3, 0x3}}, &(0x7f00000019c0)={0x20, 0x0, 0x8, {0x200, 0x80, [0xf00]}}, &(0x7f0000001a00)={0x40, 0x7, 0x2, 0xeabf}, &(0x7f0000001a40)={0x40, 0x9, 0x1, 0x91}, &(0x7f0000001a80)={0x40, 0xb, 0x2, "25fc"}, &(0x7f0000001ac0)={0x40, 0xf, 0x2, 0xb}, &(0x7f0000001b00)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000001b40)={0x40, 0x17, 0x6, @local}, &(0x7f0000001b80)={0x40, 0x19, 0x2, "6df1"}, &(0x7f0000001bc0)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000001c00)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000001c40)={0x40, 0x1e, 0x1, 0x9}, &(0x7f0000001c80)={0x40, 0x21, 0x1, 0x81}}) syz_usb_connect(0x2, 0x971, &(0x7f0000000240)={{0x12, 0x1, 0x250, 0x4, 0xff, 0xf4, 0x8, 0x451, 0x5416, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x95f, 0x3, 0x6d, 0x5, 0x0, 0x9, "", [{{0x9, 0x4, 0x3f, 0x2, 0xf, 0x9a, 0x4c, 0xd6, 0x9, [@cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, "0186"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x50, 0xfffd, 0x8, 0x9}, {0x6, 0x24, 0x1a, 0x3}, [@network_terminal={0x7, 0x24, 0xa, 0x4, 0x5, 0x29, 0x3}, @network_terminal={0x7, 0x24, 0xa, 0x8, 0x5, 0x4, 0x1}, @dmm={0x7, 0x24, 0x14, 0x3, 0x2}, @mdlm={0x15, 0x24, 0x12, 0x200}, @dmm={0x7, 0x24, 0x14, 0x2, 0x5a}]}, @cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "833b"}, {0x5, 0x24, 0x0, 0x976}, {0xd, 0x24, 0xf, 0x1, 0x39fa, 0x0, 0x0, 0x7}, [@country_functional={0xe, 0x24, 0x7, 0x4c, 0x5, [0x1, 0x200, 0x0, 0xfffb]}]}], [{{0x9, 0x5, 0xd, 0xc, 0x400, 0x8, 0x8, 0x3, [@generic={0x99, 0x9, "bc800c7fb055af1866e679dce9bc75c8105db5264fd8db9dfbc31e54895d08e78c20f5590689c8388066ccc4b3c092f2c10d93eedca1e1b9253bd63d00b58fbf3f1ba5f0b95d5d3f2d3089045bdc0b8ae4485da27fbe5d734567e05f82130c3b0a4404a62ff72f6c25a109b8e3a38db745564e9cfb324bca58a5e914d4c0bc8792e91bde9abfb4035a4a3d7cf99a1091064ca633245cc1"}, @generic={0x3f, 0x5, "e36ee3e2ea63733b2830ee2608c5e5f982b488c35aca86e30605254e99197aa1865cb0b04e3ad0ad9b5eba4528422141ab9fd3797e5f26b270912a9238"}]}}, {{0x9, 0x5, 0x5, 0x2, 0x20, 0xe5, 0x6, 0xeb}}, {{0x9, 0x5, 0x7, 0x10, 0x8, 0x63, 0x80, 0xc, [@generic={0xa3, 0x9, "b5a848c1c724aa9aac5ae9c229a3d610c815ebf6649d8884c15fe4fbb8611b9f755f31203808613c1eb32a6c6b6e10d36e4b69caad0284227072d42237489a50b40bf714b3e19a11a08f7b53e6424f74c00bbb494e1804e535ddc015772a4b5ac41c3b4ffbac87be8c0ca2e0200b46e987af032d8d6388d31022da62b00ec7058d8db4bd647dd68acd5571be46f5d03a81f9cfb0bddc5a1519ae9dd034e56e1ef3"}]}}, {{0x9, 0x5, 0x2, 0xc, 0x200, 0x1, 0x3, 0x0, [@generic={0x3e, 0x30, "6a6e45cd2867e2d5e8bbc17cf99f21034b9e50e303bb50ff4dc6d4c5a3b940a90c1c28b71d9b298c9e0a3a510e756cec23dba9ff64d114c3e9c9ab3f"}]}}, {{0x9, 0x5, 0xe, 0x4, 0x40, 0x9, 0x62, 0x4}}, {{0x9, 0x5, 0x5, 0x0, 0x28, 0x7, 0x7, 0x2, [@generic={0xc9, 0x11, "7824b961f7314f8630021cf1dfbbeba2637cc6ff3d603877738c0bdf381748d131b3a198c023542fe6ec10c7c99f871b8e738569edb31b724339dc723e7421b063b6a9d01bff3d1307089ba591822c41f2e47e6f9a841eb6885f6d42d272762c0f9d6623a3e47af23270123a0c60af4e512f309ca30a05d7e1c941df98a3b7d462abad899e570572146edf1e5bc705bdcd76f2ee49c4ea595063942fb7188bf755275e8b848455135ce41c728da1d4cd8da047918c72a9437cc5618ab7490e59a2dae37b4dc334"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xa, 0x3ff}]}}, {{0x9, 0x5, 0x8, 0xc, 0x400, 0x45, 0x23, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0x6}, @generic={0x20, 0xa, "7b221a64c49c715d1f71c213d0c5e6622254fa41f70a558ee9316d4e33a6"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x20, 0x6, 0x8, 0x62}}, {{0x9, 0x5, 0x4, 0x4, 0x8, 0x3, 0x4, 0xc}}, {{0x9, 0x5, 0x2, 0xe6ab649f3df076cf, 0x200, 0x2, 0x9, 0x1}}, {{0x9, 0x5, 0xa, 0xa, 0x20, 0x8f, 0x3, 0x7, [@generic={0x4b, 0x30, "f825759f9682f6391c0a58ed6b43312adb7699b4f8101a9ab6082967752d6bbf7664828d03e75f3da695347b9a8908bf8a71e4d134cd7aa2a52cafbff3f1b1d858a0dd2ee90d90102a"}, @generic={0xee, 0x31, "ccca63d6936db0ac3d4bbee4e2214ea54eaa9ff33ecfa5e58f2e0359c52b2b18a74e0501f29fe15ba0bb0f3e2e40a08fbf2341a8b90e06b6414480f1f802962ff49f134f04b2d3ae25b8e311d0311d5e161fb721410ee38b6ef467603b7b5f6a6555d37b4785c3524aed8a044c3537523dbba436149301ffb258e132716bc412ef2c773af083c039869ad0f590aef71640fe7af1292bdc2aade588c0ad23b973dda31b872cd097e2ad217d01d59ed45de5f690ee20ecf7f7d06b982c3a3bf8e815c392949f40ad3d685d76a13d1683fa6446614acb53ab346d4c0f350155fc2545d74a0aeb30338b800c9e76"}]}}, {{0x9, 0x5, 0x4, 0x3, 0x3ff, 0x7, 0x7f, 0x7}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0xc6, 0x5, 0x52}}, {{0x9, 0x5, 0x9, 0x2, 0x20, 0x1, 0xe9, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x8}]}}, {{0x9, 0x5, 0x2, 0x2, 0x400, 0x3, 0xfc, 0xf1, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xf, 0xc9f1}]}}]}}, {{0x9, 0x4, 0x1, 0x1, 0x10, 0x0, 0x83, 0xd1, 0x8, [], [{{0x9, 0x5, 0x1, 0x10, 0x200, 0x6, 0x2, 0x6, [@generic={0xbf, 0x6, "4dcbfd3caf51c1596defed9e9e4424b2bf66d96576d224b834e2532e9c117c94b573182770dd5dcfb4ce66e5e1ea233842e51f79f41dc0af0011efde165a4a86cd9f4001794697b97a60814ae193174e07452a83771a3b3ae127ee77b11a80c2c8a24750a04f83f1047cf177c9340e0c478c6f50c1403ee8c8f9dc7f14e6f30e0b35b6f22249a02ce0bf86aae3347cc237e5e6ba83ff5fdb8c9ff0e007e1131fa42849d3399f9fcfd5d732eef5b227070e10e2adca03a0bd2ad1f88f33"}, @generic={0x97, 0x30, "5286be07763c123403b9cf7c14e892334e012ec730ee9b8befca4225fd4294b44b13c02059412160f6742fe3778ad391a0a5de14b26d7b7f8aea929b20440eb9e99e03a3421451a0b179c416a016ebc6b49df690bf2ca943d459b8b4be193147a944907c46d180a5d601ff55eefab3f7656e0bc7cb0f645fd2134f146d920401b4cbe36973ef93fa9e861a1db04d627e7a1c358dd7"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0x4, 0x7, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x81}]}}, {{0x9, 0x5, 0x6, 0xc, 0x400, 0xf8, 0x0, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xfc, 0xe6f4}, @uac_iso={0x7, 0x25, 0x1, 0xa, 0x0, 0x3}]}}, {{0x9, 0x5, 0x2, 0x8, 0x20, 0x8, 0x5, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x6, 0x8}]}}, {{0x9, 0x5, 0xf, 0x3, 0x3ff, 0x0, 0x28, 0x7, [@generic={0x8, 0x4, "3dce4dc4fd99"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x7}]}}, {{0x9, 0x5, 0x9, 0x0, 0x3ff, 0x7, 0x6}}, {{0x9, 0x5, 0x80, 0x10, 0x3ff, 0x5d, 0x6d, 0xb8}}, {{0x9, 0x5, 0x8, 0x3, 0x10, 0x3, 0x8, 0x7}}, {{0x9, 0x5, 0xb, 0x2, 0x10, 0xb, 0x5c, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x4, 0x3}]}}, {{0x9, 0x5, 0x86, 0x0, 0x40, 0x3, 0x4, 0x6}}, {{0x9, 0x5, 0x2, 0x10, 0x8, 0x10, 0x0, 0x8}}, {{0x9, 0x5, 0x9, 0x10, 0x20, 0x8, 0xc4, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xff, 0x5}]}}, {{0x9, 0x5, 0xa, 0x8, 0x48, 0x0, 0x10, 0x7, [@generic={0x6a, 0x6, "04068d9be6a6b7e2d63ffe0874fc06b3b0503565495124b9b816b637328450ab35add1d9cf2a079eafc5862f5d2e3c24e0f12fd80c773f4294354b61b0d9dcf7a2a50310b59569c6f4952fc34f0fe516a9275ee03af0f3b048bf6168cf6cf84caba2af06174bd204"}]}}, {{0x9, 0x5, 0xa, 0x2, 0x200, 0x8, 0xc0, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x6, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x5}]}}, {{0x9, 0x5, 0xa, 0x0, 0x400, 0x8, 0xfb, 0x4}}, {{0x9, 0x5, 0x5, 0x4, 0x10, 0x8, 0x4, 0x7, [@generic={0x39, 0x22, "9fef4d261fde718f6ff544819b489575f7bb2e00e76915de3b0c98567db1845bb0d4afafcb33cb8733f8608d072a088d1024958b2b14b9"}]}}]}}, {{0x9, 0x4, 0x4a, 0x40, 0x6, 0xff, 0x0, 0x0, 0xd3, [], [{{0x9, 0x5, 0x4, 0x0, 0x200, 0x4, 0xff, 0x8}}, {{0x9, 0x5, 0xc, 0x10, 0x8, 0xd, 0x7f, 0x8, [@generic={0xc, 0x23, "0a45f6abc4aa32e4c5b7"}, @generic={0xea, 0x4, "b53d19a7c7fe68750d0f9a1210aefd453cb7c572c15c1f61f54915c2f4a44c5945cd960bafef2724dc01144707474ca38ef0373273d957b64e103d3860d39577fc7cffd6a254ebb900752f9786492ffe6f13e92964e8c6536cd5cbb6fc76bbe4cdf656125a1261d3dae428e1f44dab296299b2f2469c46a8ddcce8f94a0e372f3c2cda916dfeefdd11e4efbde98ce2fad57f698dc666036550d7df2d0e5fe0fa3394aed45b125b72e7b971d25d1b639a7936321a48d411f4d8748264ab04d7de845c9491cb502147c4684cf141f7ef9d9f0d438bdb91246b381ee906cde6dddf3a6f0cc88807e629"}]}}, {{0x9, 0x5, 0xd, 0xc, 0x400, 0x6, 0x3, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0xfe, 0x6}]}}, {{0x9, 0x5, 0x2, 0x1, 0x10, 0x40, 0x0, 0x8}}, {{0x9, 0x5, 0x1, 0x8, 0x400, 0x3, 0x0, 0x2}}, {{0x9, 0x5, 0x3, 0x0, 0x10, 0x3, 0x2, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6}, @generic={0x35, 0xa, "e51634a9564979e7514e9b5e993a7cd63f8a48748f952a0eb85dd68c6e6aebfdfb6c9f7f3b0e11ad5f396984593a2646a164ce"}]}}]}}]}}]}}, &(0x7f0000000f40)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x1, 0x1, 0x9, 0xff, 0x23}, 0x10f, &(0x7f00000000c0)={0x5, 0xf, 0x10f, 0x5, [@generic={0xd1, 0x10, 0x1, "60cd51e5d72855d8dcfcd9669819a6c0c3dc01715b0be1416e0e0ae9742316437454dfc7122917f8276ced7fe3cb1a44d749a1bcdd8993185664d965d0edb58486498cc160925c8644b77e8ae78125ef092427a682e548a670e3c8c50882179d4307ff9d24dab3fe2fb92610d7a4be412e1ec7a72130147b33febb1473aebbc1ccd498e8041e045bc5b6e0aaef8bbf388258c531b687cf9fe19e990a5b45cb2fa07877566438c5c38101cf431455ff7106510fdcafb4e9e781ccbed7df95817488b93b0ff8eb5ccaf580cf236d4d"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "d0f893681276e4728eeb2e52ed51c9b7"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x1, 0x8, 0x8}, @ssp_cap={0x18, 0x10, 0xa, 0x8, 0x3, 0x5, 0x8800, 0x200, [0x3f, 0x7f40c0, 0x0]}, @ptm_cap={0x3}]}, 0x7, [{0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x412}}, {0xfe, &(0x7f0000000c80)=@string={0xfe, 0x3, "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"}}, {0x4, &(0x7f0000000d80)=@lang_id={0x4, 0x3, 0x423}}, {0x4, &(0x7f0000000dc0)=@lang_id={0x4, 0x3, 0x429}}, {0x13, &(0x7f0000000e00)=@string={0x13, 0x3, "2426ea257370e74082c5822a27358b42ad"}}, {0xbb, &(0x7f0000000e40)=@string={0xbb, 0x3, "2c4035f1ed5c848fb269becff97a43d248fc4dd305caef1c2eb5c65995f86e3524dae99337820d7b1eed54621f06bc3eb61ba682fa242c8b8a1dc160e6449358eaf9f6dfc3ada15ccdec7d82e5fb8a1a1f771b3b692ebb5ea10426861edde89f0a684b9f3b17adac6703fda20ceea710c7d9fbf52bbe39ceb106065ae7dd02cbd13fe63b9d71d5fc50a7697e7ee3167927339f161f2372a7a96e76bd6951dc6c0773b2ebd33dcf73ad54f5691444c7c25504e3738d6a0a7f29"}}, {0x4, &(0x7f0000000f00)=@lang_id={0x4, 0x3, 0x44a}}]}) 4.104289493s ago: executing program 0 (id=1289): sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) add_key(&(0x7f0000000000)='dns_resolver\x00', 0x0, &(0x7f00000000c0)="b95d", 0x2, 0xfffffffffffffffe) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000dc0)={[{@check_relaxed}, {@iocharset={'iocharset', 0x3d, 'iso8859-13'}}, {@session={'session', 0x3d, 0x22}}, {@gid={'gid', 0x3d, 0xee01}}, {@overriderock}, {@map_acorn}, {@check_strict}, {}, {@block={'block', 0x3d, 0x400}}, {@cruft}, {@overriderock}, {@uid}]}, 0x1, 0xa00, &(0x7f00000003c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x220}}], 0x1, 0x810) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x2000001, &(0x7f0000000300)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3d339566b6d4106c70fb14739176", @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="5a05"]) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_triestat\x00') r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xbad}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3.595946642s ago: executing program 2 (id=1290): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000080)={0xc8, 0x0, 0x316f, 0x0, 0x30, "ec28a144f13d7607"}) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = dup2(r0, r0) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000280)=0x7fffffff) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x2002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000100)={0x0, 'veth0_to_batadv\x00', {0x1}, 0x2a}) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'team_slave_0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [], [0xff], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) openat$uhid(0xffffffffffffff9c, &(0x7f0000001300), 0x802, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000004540)={0x7, 0xc, 0x7, 0x113, 0xf8, 0x2, 0x2, 0xd3}, 0x0, &(0x7f00000045c0)={0x8, 0x79c, 0x708, 0x4, 0x81, 0x5, 0xa83, 0x7}, &(0x7f0000004600)={0x0, 0x3938700}, 0x0) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @mcast2, 0x3}, 0x1c) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x9511, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000140)={0x3, 'vlan0\x00', {0xd}, 0x8}) sendmsg$nl_route_sched(r0, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newtaction={0x8c, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x78, 0x1, [@m_ct={0x74, 0x1, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CT_LABELS_MASK={0x14, 0x8, "54a78386948f6f25e85def02a7a4b734"}, @TCA_CT_PARMS={0x18, 0x1, {0x81, 0x3ff, 0x7, 0x2, 0x4003}}, @TCA_CT_LABELS={0x14, 0x7, "8653a596ac1ce59f58eace863f88e8c4"}, @TCA_CT_ZONE={0x6, 0x4, 0x149d}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44004041}, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) 3.522478613s ago: executing program 0 (id=1291): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x97}, @printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x4, @local, 'ip_vti0\x00'}}, 0x1e) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d65b"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010ffffffffffffff7f0000000500000a400000000c0a4f9133130000000000000a0000060900070073797a31000000000900010073797a310000000014000380100000800c00018006000100d10300001400000011000100000000000000efff0100000a"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000002440)={0x0, 0xdfc0bf0, 0x8}, 0xc) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x100, 0x62) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0x40086610, &(0x7f00000004c0)={@desc={0x1, 0x0, @desc3}}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000034c0)=@bloom_filter={0x1e, 0x1, 0xf5, 0x9, 0xb002, r5, 0x7, '\x00', 0x0, r6, 0x5, 0x3, 0x5, 0x8}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xd, 0x5a87, 0x4, 0x1, 0x0, r7}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000021c0)={r7, 0x58, &(0x7f0000003440)}, 0x10) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0xd}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) ioctl$PPPIOCSMRU(r0, 0x40047452, &(0x7f0000000080)=0xe8a2) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f00000033c0)={0x0, 0x0}) recvmmsg(r8, &(0x7f0000003200)=[{{&(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000000800)=[{&(0x7f00000001c0)=""/186, 0xba}, {&(0x7f0000000400)=""/219, 0xdb}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000140)=""/64, 0x40}, {&(0x7f0000000300)=""/41, 0x29}, {&(0x7f0000000500)=""/69, 0x45}, {&(0x7f0000000580)=""/55, 0x37}, {&(0x7f00000005c0)=""/216, 0xd8}, {&(0x7f00000006c0)=""/172, 0xac}, {&(0x7f0000000780)=""/125, 0x7d}], 0xa, &(0x7f00000008c0)=""/220, 0xdc}, 0x1}, {{&(0x7f00000009c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/126, 0x7e}, {&(0x7f0000000ac0)=""/4096, 0x1000}, {&(0x7f0000001ac0)=""/80, 0x50}, {&(0x7f0000001b40)=""/100, 0x64}, {&(0x7f0000001bc0)=""/243, 0xf3}], 0x5, &(0x7f0000001d40)=""/231, 0xe7}, 0xc8}, {{&(0x7f0000001e40)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000001fc0)=[{&(0x7f0000001ec0)=""/103, 0x67}, {&(0x7f0000001f40)=""/90, 0x5a}], 0x2, &(0x7f0000002000)=""/167, 0xa7}, 0x6}, {{&(0x7f00000020c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000002480)=[{&(0x7f0000002140)=""/81, 0x51}, {&(0x7f00000021c0)}, {&(0x7f0000002200)=""/200, 0xc8}, {&(0x7f0000002300)=""/144, 0x90}, {&(0x7f00000023c0)=""/117, 0x75}, {&(0x7f0000002440)}], 0x6}, 0x401}, {{&(0x7f0000002500)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000002a00)=[{&(0x7f0000002580)=""/173, 0xad}, {&(0x7f0000002640)=""/117, 0x75}, {&(0x7f00000026c0)}, {&(0x7f0000002700)=""/94, 0x5e}, {&(0x7f0000002780)}, {&(0x7f00000027c0)=""/42, 0x2a}, {&(0x7f0000002800)=""/190, 0xbe}, {&(0x7f00000028c0)=""/67, 0x43}, {&(0x7f0000002940)=""/129, 0x81}], 0x9}, 0x3}, {{&(0x7f0000002ac0)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000002c00)=[{&(0x7f0000002b40)=""/165, 0xa5}], 0x1, &(0x7f0000002c40)=""/128, 0x80}, 0x3}, {{0x0, 0x0, &(0x7f0000003080)=[{&(0x7f0000002cc0)=""/20, 0x14}, {&(0x7f0000002d00)=""/156, 0x9c}, {&(0x7f0000002dc0)=""/173, 0xad}, {&(0x7f0000002e80)=""/115, 0x73}, {&(0x7f0000002f00)=""/228, 0xe4}, {&(0x7f0000003000)=""/100, 0x64}], 0x6, &(0x7f0000003100)=""/205, 0xcd}, 0x4}], 0x7, 0x0, &(0x7f0000003400)={r9, r10+10000000}) 3.285753243s ago: executing program 3 (id=1292): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000000)='./bus\x00', 0x300000a, &(0x7f0000000080)={[{@nodatacow}, {@thread_pool={'thread_pool', 0x3d, 0x3}}, {@nodiscard}, {@clear_cache}, {@discard}, {@clear_cache}, {@nobarrier}, {@compress_algo={'compress', 0x3d, 'no'}}, {@nospace_cache}, {@enospc_debug}, {@ssd_spread}, {@nossd}]}, 0x3, 0x55a3, &(0x7f0000005600)="$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") add_key$user(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) lsetxattr(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000380)='discard', 0x7, 0x3) 3.19965387s ago: executing program 5 (id=1293): r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000340)={r0}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="ad00"/16, 0x10) recvmmsg(r2, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r3, 0x11e, 0x1, 0x0, &(0x7f0000000000)) 3.021334898s ago: executing program 0 (id=1294): unshare(0x200) syz_80211_join_ibss(0x0, &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) io_setup(0x222, &(0x7f0000000180)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000540)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xc, 0xb9, &(0x7f0000000140)=""/185, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x34, r5, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x8820) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r3, &(0x7f00000009c0)={0x2, 0x4e24, @loopback}, 0x10) writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) 2.130724494s ago: executing program 2 (id=1295): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r1) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x1c, r2, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x64044000) socket$packet(0x11, 0x2, 0x300) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000002040)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000a00)=""/144, 0x90}], 0x1}, 0x2}], 0x1, 0x40000022, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4089, 0x197}, {&(0x7f0000000400)=""/106, 0x1c}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xbe8}, {&(0x7f0000000540)=""/158, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x4c, &(0x7f000002eff0)={0x1, &(0x7f0000000000)=[{0xffff}]}, 0x10) openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0x200, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) request_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000006c0)='o.\x00\xac\xb1(\n\x0e\xcb:\xd0,', 0x0) request_key(&(0x7f0000000140)='id_legacy\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0xfffffffffffffffe) sendmsg$IPVS_CMD_GET_SERVICE(r8, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x20, r6, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}]}, 0x20}}, 0x12) r9 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0x8000}, 0x80, 0x0}, 0x0) sendmsg$kcm(r9, &(0x7f0000000000)={&(0x7f0000000b40)=@qipcrtr={0x2a, 0x1, 0x7ffe}, 0x80, 0x0}, 0x40) sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, r6, 0x100, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x48004}, 0x0) connect$unix(r5, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e23}, 0x6e) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="14010000350001000000000000000000020100800c0001"], 0x114}], 0x1}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000600000a20000000120a010800000000000500000a0900010073797a3100000000140000001100010000000000000000000000000a000000"], 0x48}}, 0x4000000) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) 1.754412647s ago: executing program 0 (id=1296): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d65b"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) socket$packet(0x11, 0x3, 0x300) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000200)={0x0, 0x1, 0x80, 0x1, 0xdb}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x2, 0x0, 0x300) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r2, 0xf501, 0x0) pselect6(0x40, &(0x7f0000000800)={0x2, 0x9, 0xa, 0x7fff, 0x0, 0xbea, 0x1, 0x8000000000000000}, &(0x7f0000000840)={0x9, 0xec15, 0x0, 0x5, 0xe, 0x200, 0x9, 0xffc7}, 0x0, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 1.672697675s ago: executing program 2 (id=1297): openat$vnet(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000010c0)=ANY=[@ANYBLOB="12010000e5876e4040200516940a0000000109022400010000000009040000025883b200090585"], 0x0) 1.497535324s ago: executing program 5 (id=1298): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xca) bind$ax25(r0, &(0x7f0000000300)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0xf32f, 0xfe000000}, &(0x7f00000000c0)=0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x20004010) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x4008080) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r5, 0x890b, &(0x7f00000007c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @null, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) connect$rose(r5, &(0x7f0000000040)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) connect$rose(r5, &(0x7f0000000240)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @null}, 0x1c) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10) syz_emit_ethernet(0x80, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r6) 1.425455773s ago: executing program 0 (id=1299): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000183b9220b113420016519a02030109021b00010000000009040000012e459e000905c435a3"], 0x0) copy_file_range(r0, &(0x7f0000000140)=0x5, r0, 0x0, 0x10000, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.self_freezing\x00', 0x275a, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2800c0001800600060065580000971b0280540211"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x3000) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000300)=0xa8) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000000)) r4 = ioctl$TIOCGPTPEER(r3, 0x5441, 0x2000b3d) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000140)=0x1b) ftruncate(r1, 0xc17a) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='nodots,allow_utime=000000000034,usefree,check=strict,dots,\x00'/70, @ANYBLOB="14c6c781dcb879623815ea762b25f8a6ea2fdc01978d1f848547463451ff1eca3f7dfa249f41f45e06229771cf821a722728e3f99648648c02370a68596fa44b6dd5c10001faf7ebec378a5a61d3e8fdee523ce5bf50850613ff7d6e817b84ce33847ef8539f230d9b2d12a8bd2245eb1de857bc24e1fb3983665450b9322c5299ba0eb3c7281388eb8f65"], 0x1, 0x1e9, &(0x7f00000002c0)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x4000)=nil, 0x4000, 0xe, 0x11, r5, 0x0) rename(&(0x7f0000001980)='./file1\x00', &(0x7f00000001c0)='./file0/file1\x00') setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e23, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}}, 0x17fc9b10, 0x6, 0x4, 0x5, 0x6c, 0x200, 0xa0}, 0x9c) r6 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r6, 0xc0d05604, &(0x7f0000000040)={0xa}) add_key(&(0x7f0000000180)='ceph\x00', &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9) syz_mount_image$btrfs(&(0x7f0000000200), &(0x7f0000005600)='./file0\x00', 0x800, &(0x7f0000000240), 0x0, 0x559e, &(0x7f0000005680)="$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") 1.349676296s ago: executing program 4 (id=1300): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x80002, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r3, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x6a5, 0x0, 0x3}]}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$vim2m(&(0x7f0000000140), 0x10002, 0x2) 1.115103373s ago: executing program 3 (id=1301): r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x12202, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20004810) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x8000102) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000280)={0x40}, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) sendmmsg$unix(r3, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000002c0)="0a690b6528a1f42d548655afb9", 0xd}, {&(0x7f0000000300)}, {&(0x7f00000003c0)="107b5c9b209d083fd0dee19bf2ae62f83fad9168be3cb66dcb11fa2dcac0d312", 0x20}, {&(0x7f0000000500)}], 0x4, 0x0, 0x0, 0x200400c4}}, {{0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000240)="c82a7287c5d17b22540e7fb0fd08a97177b68e1f0a5bea2a67050e2471069e3f56205aa3235a93e194cab3bc9f5d226cf7436386453708e05aa2fb4ac9e327b0f8a8980df9d961d7afe222f42d46fcff8b563da92c35ce2d936b62a7643d24e6", 0x60}, {0x0, 0xf00}, {&(0x7f0000000800)="cbb8371b27d923d576288b4e0504dccf8b8c82da89c28886f02d4ee2c16e792dea07a72dcd74669ca36aa01f77061f91143da33b01cae15a954803bf90447e6f1a575e468a5960364287dcb62dc4c9bfc5038b2c77d682b706dacbd6cccb46c27a4877cdf19374e06faecbdeba86105a8fe444780c03dc24d00ab4baa12c67f77ced2ce7b09fe73cbb30135a02398298d019976041fccf81987882", 0x9b}], 0x4, 0x0, 0x0, 0x40000}}], 0x2, 0xc000) bind$tipc(r1, &(0x7f00000001c0)=@name={0x1e, 0x2, 0x2, {{0x40, 0x4}, 0x1}}, 0x10) r4 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x24, r5, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0x1}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x4044) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x84022, &(0x7f00000001c0)=ANY=[@ANYBLOB='nr_inodes']) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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") r7 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0xe00) ioctl$I2C_SMBUS(r7, 0x720, &(0x7f0000000480)={0x1, 0x4, 0x4, &(0x7f0000000080)={0xb, "617894d1c0e8ebeb8b3226b2b3791c63cd49a79d570000004dfe472fcca348806c"}}) chdir(&(0x7f0000000340)='./file2\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000001240)='./file0/file0\x00', 0x2) 101.521965ms ago: executing program 5 (id=1302): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="01002abd7000fedbdf253b00000008000300", @ANYRES32=r1, @ANYBLOB="3e0033008000e100ffffffffffff08021100000050505050505000df593300fcffffffffffffff0c00014003010e05030982fc3c0401042c037206"], 0x5c}, 0x1, 0x0, 0x0, 0x880}, 0x0) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd0000000000000109022400018000000009040000010300000009210500000122050009058103"], 0x0) read$msr(0xffffffffffffffff, &(0x7f0000001d80)=""/99, 0x63) syz_usb_control_io(r2, 0x0, 0x0) r3 = syz_usb_connect$uac1(0x6, 0xc6, &(0x7f0000000fc0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x2a39, 0x3fd2, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb4, 0x3, 0x1, 0x80, 0xb0, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3, 0x33}, [@processing_unit={0xa, 0x24, 0x7, 0x6, 0x3, 0xb, "73a686"}, @feature_unit={0x13, 0x24, 0x6, 0x4, 0x3, 0x6, [0x1, 0x1, 0x6, 0x2, 0x6, 0x1], 0x4}, @mixer_unit={0x7, 0x24, 0x4, 0x3, 0x0, "dc22"}, @selector_unit={0x5, 0x24, 0x5, 0x2, 0x40}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x3, 0x2, 0x1, 0x1, 0x13}]}, {{0x9, 0x5, 0x1, 0x9, 0x410, 0x7, 0x1, 0x6, {0x7, 0x25, 0x1, 0x0, 0xa, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x77, 0x3, 0x5, 0x8, "3b1081"}, @as_header={0x7, 0x24, 0x1, 0x0, 0xce, 0x1001}, @as_header={0x7, 0x24, 0x1, 0x7b, 0x5, 0x1001}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0xb, 0xb, 0x10, 0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x9, 0xe, 0x2c, {0x7, 0x25, 0x1, 0x4, 0x2, 0xc}}}}}}}}]}}, &(0x7f0000001280)={0xa, &(0x7f00000010c0)={0xa, 0x6, 0x300, 0x3d, 0x8, 0x2, 0x40}, 0x51, &(0x7f0000001100)={0x5, 0xf, 0x51, 0x5, [@wireless={0xb, 0x10, 0x1, 0x2, 0x0, 0x64, 0x0, 0x800, 0xf9}, @wireless={0xb, 0x10, 0x1, 0x2, 0x20, 0x5, 0x5, 0x0, 0xa4}, @wireless={0xb, 0x10, 0x1, 0xc, 0xb2, 0x4, 0x6, 0xc, 0x8}, @ssp_cap={0x24, 0x10, 0xa, 0x2, 0x6, 0x3, 0xf00, 0x6, [0xc0, 0xff3f3f, 0xc0, 0xffc000, 0xf, 0xff00]}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x2, 0xa, 0x4fc}]}, 0x2, [{0x4, &(0x7f0000001180)=@lang_id={0x4, 0x3, 0x41f}}, {0x9b, &(0x7f00000011c0)=@string={0x9b, 0x3, "f47abd0f3b54d96113ae455ce712bf44170b47ab0f6036a6ef970ddbb519d10f48593eccac16905b5de5c40fe25432db13ced932c88bed6a180cdd2dade542dba4e18095a1ef0c2f573fe3cdf6fc0b499cc0e726b1696322c21c2dd56bb64f6d542cb737aadfa110556cb3936d52f13f024fee29ae23e69253303e1931011326151da62df419277ae64ab008f17bf001ba7c6a6ece7c28b0e3"}}]}) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) write$RDMA_USER_CM_CMD_ACCEPT(r4, &(0x7f0000000f80)={0x8, 0x120, 0xfa00, {0x0, {0x80000, 0x5f9b, "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", 0x2, 0x0, 0x7, 0x7, 0x6, 0x5, 0x3, 0x1}}}, 0x128) syz_usb_control_io$uac1(r3, &(0x7f00000013c0)={0x14, &(0x7f00000012c0)={0x0, 0x21, 0x67, {0x67, 0xc, "09705bd86b7cf0c99a81e67c818674c7954749048d244b72d5d55e693d20f5374e145ebd3f9bc5906935f602fef221bcada45c54546c0650b651e58dfab81b6a83170482bd21792c767306c6fe19f774ce5bafa85e3ea26611a1284cb3630e650c7ca75489"}}, &(0x7f0000001340)={0x0, 0x3, 0x76, @string={0x76, 0x3, "08740eaae1f92d6667da716f2e894ae4c98c3798236b1f00a66d875d8e8e851f516cb4c6f51170b8cdbcc40d32bb5aed7348e7f8908db2038342ea8507f7073245400fd753f2aa22ad20ad05efadbad768f78efacb68ba2096186dac64b8fab866a48d7e4a6368a3e9ce4c72ae6a8531c7545f65"}}}, &(0x7f0000001680)={0x44, &(0x7f0000001400)={0x40, 0xa, 0x91, "2d9ad51efa94d6a3ebad3ba3e72ce79cfb7b7b963d3e8457dd1b8bd61a1a746b6b471b9e551f093b80053ee15904058e879de97f09e05b5ea6fc693db39c63df9f3b8c69af606f3093efef4c054459c2a84ba2b84b1ed8bab6bd26891a0232ab50a2b1631c6e1b2e9df047da089149a7cf0fdca58501df3342a9846d0d8e10da9fc2d93eb3f69b0934e75370524b1cf72a"}, &(0x7f00000014c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000001500)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000001540)={0x20, 0x81, 0x1, 'X'}, &(0x7f0000001580)={0x20, 0x82, 0x3, "8cd632"}, &(0x7f00000015c0)={0x20, 0x83, 0x2, "e0f4"}, &(0x7f0000001600)={0x20, 0x84, 0x2, "d886"}, &(0x7f0000001640)={0x20, 0x85, 0x3, "fc0774"}}) syz_usb_control_io(r2, &(0x7f0000000200)={0x2c, &(0x7f0000000040)={0x20, 0x13, 0x5, {0x5, 0xd, "b8c243"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r3, &(0x7f0000001840)={0x2c, &(0x7f0000001700)={0x40, 0xa, 0x5, {0x5, 0xa, "e1f137"}}, &(0x7f0000001740)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x80a}}, &(0x7f0000001780)={0x0, 0xf, 0x30, {0x5, 0xf, 0x30, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x9, "31651148c20272425946bdd5c5e11a4b"}, @ptm_cap={0x3}, @ssp_cap={0x14, 0x10, 0xa, 0xff, 0x2, 0x56, 0x880, 0xe, [0xcf, 0xffc00f]}]}}, &(0x7f00000017c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x40, 0x1, 0x1, 0x80, "dc5f324d", "d3c18172"}}, &(0x7f0000001800)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x83, 0x18, 0x81, 0x0, 0x9, 0x2, 0xa673}}}, &(0x7f0000001cc0)={0x84, &(0x7f0000001880)={0x0, 0x11, 0x66, "5949cface3da88421ef51cb9e314e20a74437cba3f6042b98f06ca6079db362b5d5aad4f5f8cbafafcdf0deb32c67d882ec4daffbb0da99defe049935e526efc1c4269d0a4ccb93bd01a5135b74a16409652606642977f85a745a70a9027a7c4417802ef556f"}, &(0x7f0000001900)={0x0, 0xa, 0x1, 0x7}, 0x0, &(0x7f0000001980)={0x20, 0x0, 0x4, {0x3, 0x3}}, &(0x7f00000019c0)={0x20, 0x0, 0x8, {0x200, 0x80, [0xf00]}}, &(0x7f0000001a00)={0x40, 0x7, 0x2, 0xeabf}, &(0x7f0000001a40)={0x40, 0x9, 0x1, 0x91}, &(0x7f0000001a80)={0x40, 0xb, 0x2, "25fc"}, &(0x7f0000001ac0)={0x40, 0xf, 0x2, 0xb}, &(0x7f0000001b00)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000001b40)={0x40, 0x17, 0x6, @local}, &(0x7f0000001b80)={0x40, 0x19, 0x2, "6df1"}, &(0x7f0000001bc0)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000001c00)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000001c40)={0x40, 0x1e, 0x1, 0x9}, &(0x7f0000001c80)={0x40, 0x21, 0x1, 0x81}}) syz_usb_connect(0x2, 0x971, &(0x7f0000000240)={{0x12, 0x1, 0x250, 0x4, 0xff, 0xf4, 0x8, 0x451, 0x5416, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x95f, 0x3, 0x6d, 0x5, 0x0, 0x9, "", [{{0x9, 0x4, 0x3f, 0x2, 0xf, 0x9a, 0x4c, 0xd6, 0x9, [@cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, "0186"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x50, 0xfffd, 0x8, 0x9}, {0x6, 0x24, 0x1a, 0x3}, [@network_terminal={0x7, 0x24, 0xa, 0x4, 0x5, 0x29, 0x3}, @network_terminal={0x7, 0x24, 0xa, 0x8, 0x5, 0x4, 0x1}, @dmm={0x7, 0x24, 0x14, 0x3, 0x2}, @mdlm={0x15, 0x24, 0x12, 0x200}, @dmm={0x7, 0x24, 0x14, 0x2, 0x5a}]}, @cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "833b"}, {0x5, 0x24, 0x0, 0x976}, {0xd, 0x24, 0xf, 0x1, 0x39fa, 0x0, 0x0, 0x7}, [@country_functional={0xe, 0x24, 0x7, 0x4c, 0x5, [0x1, 0x200, 0x0, 0xfffb]}]}], [{{0x9, 0x5, 0xd, 0xc, 0x400, 0x8, 0x8, 0x3, [@generic={0x99, 0x9, "bc800c7fb055af1866e679dce9bc75c8105db5264fd8db9dfbc31e54895d08e78c20f5590689c8388066ccc4b3c092f2c10d93eedca1e1b9253bd63d00b58fbf3f1ba5f0b95d5d3f2d3089045bdc0b8ae4485da27fbe5d734567e05f82130c3b0a4404a62ff72f6c25a109b8e3a38db745564e9cfb324bca58a5e914d4c0bc8792e91bde9abfb4035a4a3d7cf99a1091064ca633245cc1"}, @generic={0x3f, 0x5, "e36ee3e2ea63733b2830ee2608c5e5f982b488c35aca86e30605254e99197aa1865cb0b04e3ad0ad9b5eba4528422141ab9fd3797e5f26b270912a9238"}]}}, {{0x9, 0x5, 0x5, 0x2, 0x20, 0xe5, 0x6, 0xeb}}, {{0x9, 0x5, 0x7, 0x10, 0x8, 0x63, 0x80, 0xc, [@generic={0xa3, 0x9, "b5a848c1c724aa9aac5ae9c229a3d610c815ebf6649d8884c15fe4fbb8611b9f755f31203808613c1eb32a6c6b6e10d36e4b69caad0284227072d42237489a50b40bf714b3e19a11a08f7b53e6424f74c00bbb494e1804e535ddc015772a4b5ac41c3b4ffbac87be8c0ca2e0200b46e987af032d8d6388d31022da62b00ec7058d8db4bd647dd68acd5571be46f5d03a81f9cfb0bddc5a1519ae9dd034e56e1ef3"}]}}, {{0x9, 0x5, 0x2, 0xc, 0x200, 0x1, 0x3, 0x0, [@generic={0x3e, 0x30, "6a6e45cd2867e2d5e8bbc17cf99f21034b9e50e303bb50ff4dc6d4c5a3b940a90c1c28b71d9b298c9e0a3a510e756cec23dba9ff64d114c3e9c9ab3f"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x200, 0x7f, 0x85}}, {{0x9, 0x5, 0x5, 0x0, 0x28, 0x7, 0x7, 0x2, [@generic={0xc9, 0x11, "7824b961f7314f8630021cf1dfbbeba2637cc6ff3d603877738c0bdf381748d131b3a198c023542fe6ec10c7c99f871b8e738569edb31b724339dc723e7421b063b6a9d01bff3d1307089ba591822c41f2e47e6f9a841eb6885f6d42d272762c0f9d6623a3e47af23270123a0c60af4e512f309ca30a05d7e1c941df98a3b7d462abad899e570572146edf1e5bc705bdcd76f2ee49c4ea595063942fb7188bf755275e8b848455135ce41c728da1d4cd8da047918c72a9437cc5618ab7490e59a2dae37b4dc334"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xa, 0x3ff}]}}, {{0x9, 0x5, 0x8, 0xc, 0x400, 0x45, 0x23, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0x6}, @generic={0x20, 0xa, "7b221a64c49c715d1f71c213d0c5e6622254fa41f70a558ee9316d4e33a6"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x20, 0x6, 0x8, 0x62}}, {{0x9, 0x5, 0x4, 0x4, 0x8, 0x3, 0x4, 0xc}}, {{0x9, 0x5, 0x2, 0xe6ab649f3df076cf, 0x200, 0x2, 0x9, 0x1}}, {{0x9, 0x5, 0xa, 0xa, 0x20, 0x8f, 0x3, 0x7, [@generic={0x4b, 0x30, "f825759f9682f6391c0a58ed6b43312adb7699b4f8101a9ab6082967752d6bbf7664828d03e75f3da695347b9a8908bf8a71e4d134cd7aa2a52cafbff3f1b1d858a0dd2ee90d90102a"}, @generic={0xee, 0x31, "ccca63d6936db0ac3d4bbee4e2214ea54eaa9ff33ecfa5e58f2e0359c52b2b18a74e0501f29fe15ba0bb0f3e2e40a08fbf2341a8b90e06b6414480f1f802962ff49f134f04b2d3ae25b8e311d0311d5e161fb721410ee38b6ef467603b7b5f6a6555d37b4785c3524aed8a044c3537523dbba436149301ffb258e132716bc412ef2c773af083c039869ad0f590aef71640fe7af1292bdc2aade588c0ad23b973dda31b872cd097e2ad217d01d59ed45de5f690ee20ecf7f7d06b982c3a3bf8e815c392949f40ad3d685d76a13d1683fa6446614acb53ab346d4c0f350155fc2545d74a0aeb30338b800c9e76"}]}}, {{0x9, 0x5, 0x4, 0x3, 0x3ff, 0x7, 0x7f, 0x7}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0xc6, 0x5, 0x52}}, {{0x9, 0x5, 0x9, 0x2, 0x20, 0x1, 0xe9, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x8}]}}, {{0x9, 0x5, 0x2, 0x2, 0x400, 0x3, 0xfc, 0xf1, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xf, 0xc9f1}]}}]}}, {{0x9, 0x4, 0x1, 0x1, 0x10, 0x0, 0x83, 0xd1, 0x8, [], [{{0x9, 0x5, 0x1, 0x10, 0x200, 0x6, 0x2, 0x6, [@generic={0xbf, 0x6, "4dcbfd3caf51c1596defed9e9e4424b2bf66d96576d224b834e2532e9c117c94b573182770dd5dcfb4ce66e5e1ea233842e51f79f41dc0af0011efde165a4a86cd9f4001794697b97a60814ae193174e07452a83771a3b3ae127ee77b11a80c2c8a24750a04f83f1047cf177c9340e0c478c6f50c1403ee8c8f9dc7f14e6f30e0b35b6f22249a02ce0bf86aae3347cc237e5e6ba83ff5fdb8c9ff0e007e1131fa42849d3399f9fcfd5d732eef5b227070e10e2adca03a0bd2ad1f88f33"}, @generic={0x97, 0x30, "5286be07763c123403b9cf7c14e892334e012ec730ee9b8befca4225fd4294b44b13c02059412160f6742fe3778ad391a0a5de14b26d7b7f8aea929b20440eb9e99e03a3421451a0b179c416a016ebc6b49df690bf2ca943d459b8b4be193147a944907c46d180a5d601ff55eefab3f7656e0bc7cb0f645fd2134f146d920401b4cbe36973ef93fa9e861a1db04d627e7a1c358dd7"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0x4, 0x7, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x81}]}}, {{0x9, 0x5, 0x6, 0xc, 0x400, 0xf8, 0x0, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xfc, 0xe6f4}, @uac_iso={0x7, 0x25, 0x1, 0xa, 0x0, 0x3}]}}, {{0x9, 0x5, 0x2, 0x8, 0x20, 0x8, 0x5, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x6, 0x8}]}}, {{0x9, 0x5, 0xf, 0x3, 0x3ff, 0x0, 0x28, 0x7, [@generic={0x8, 0x4, "3dce4dc4fd99"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x7}]}}, {{0x9, 0x5, 0x9, 0x0, 0x3ff, 0x7, 0x6}}, {{0x9, 0x5, 0x80, 0x10, 0x3ff, 0x5d, 0x6d, 0xb8}}, {{0x9, 0x5, 0x8, 0x3, 0x10, 0x3, 0x8, 0x7}}, {{0x9, 0x5, 0xb, 0x2, 0x10, 0xb, 0x5c, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x4, 0x3}]}}, {{0x9, 0x5, 0x86, 0x0, 0x40, 0x3, 0x4, 0x6}}, {{0x9, 0x5, 0x2, 0x10, 0x8, 0x10, 0x0, 0x8}}, {{0x9, 0x5, 0x9, 0x10, 0x20, 0x8, 0xc4, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xff, 0x5}]}}, {{0x9, 0x5, 0xa, 0x8, 0x48, 0x0, 0x10, 0x7, [@generic={0x6a, 0x6, "04068d9be6a6b7e2d63ffe0874fc06b3b0503565495124b9b816b637328450ab35add1d9cf2a079eafc5862f5d2e3c24e0f12fd80c773f4294354b61b0d9dcf7a2a50310b59569c6f4952fc34f0fe516a9275ee03af0f3b048bf6168cf6cf84caba2af06174bd204"}]}}, {{0x9, 0x5, 0xa, 0x2, 0x200, 0x8, 0xc0, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x6, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x5}]}}, {{0x9, 0x5, 0xa, 0x0, 0x400, 0x8, 0xfb, 0x4}}, {{0x9, 0x5, 0x5, 0x4, 0x10, 0x8, 0x4, 0x7, [@generic={0x39, 0x22, "9fef4d261fde718f6ff544819b489575f7bb2e00e76915de3b0c98567db1845bb0d4afafcb33cb8733f8608d072a088d1024958b2b14b9"}]}}]}}, {{0x9, 0x4, 0x4a, 0x40, 0x6, 0xff, 0x0, 0x0, 0xd3, [], [{{0x9, 0x5, 0x4, 0x0, 0x200, 0x4, 0xff, 0x8}}, {{0x9, 0x5, 0xc, 0x10, 0x8, 0xd, 0x7f, 0x8, [@generic={0xc, 0x23, "0a45f6abc4aa32e4c5b7"}, @generic={0xea, 0x4, "b53d19a7c7fe68750d0f9a1210aefd453cb7c572c15c1f61f54915c2f4a44c5945cd960bafef2724dc01144707474ca38ef0373273d957b64e103d3860d39577fc7cffd6a254ebb900752f9786492ffe6f13e92964e8c6536cd5cbb6fc76bbe4cdf656125a1261d3dae428e1f44dab296299b2f2469c46a8ddcce8f94a0e372f3c2cda916dfeefdd11e4efbde98ce2fad57f698dc666036550d7df2d0e5fe0fa3394aed45b125b72e7b971d25d1b639a7936321a48d411f4d8748264ab04d7de845c9491cb502147c4684cf141f7ef9d9f0d438bdb91246b381ee906cde6dddf3a6f0cc88807e629"}]}}, {{0x9, 0x5, 0xd, 0xc, 0x400, 0x6, 0x3, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0xfe, 0x6}]}}, {{0x9, 0x5, 0x2, 0x1, 0x10, 0x40, 0x0, 0x8}}, {{0x9, 0x5, 0x1, 0x8, 0x400, 0x3, 0x0, 0x2}}, {{0x9, 0x5, 0x3, 0x0, 0x10, 0x3, 0x2, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6}, @generic={0x35, 0xa, "e51634a9564979e7514e9b5e993a7cd63f8a48748f952a0eb85dd68c6e6aebfdfb6c9f7f3b0e11ad5f396984593a2646a164ce"}]}}]}}]}}]}}, &(0x7f0000000f40)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x1, 0x1, 0x9, 0xff, 0x23}, 0x10f, &(0x7f00000000c0)={0x5, 0xf, 0x10f, 0x5, [@generic={0xd1, 0x10, 0x1, "60cd51e5d72855d8dcfcd9669819a6c0c3dc01715b0be1416e0e0ae9742316437454dfc7122917f8276ced7fe3cb1a44d749a1bcdd8993185664d965d0edb58486498cc160925c8644b77e8ae78125ef092427a682e548a670e3c8c50882179d4307ff9d24dab3fe2fb92610d7a4be412e1ec7a72130147b33febb1473aebbc1ccd498e8041e045bc5b6e0aaef8bbf388258c531b687cf9fe19e990a5b45cb2fa07877566438c5c38101cf431455ff7106510fdcafb4e9e781ccbed7df95817488b93b0ff8eb5ccaf580cf236d4d"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "d0f893681276e4728eeb2e52ed51c9b7"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x1, 0x8, 0x8}, @ssp_cap={0x18, 0x10, 0xa, 0x8, 0x3, 0x5, 0x8800, 0x200, [0x3f, 0x7f40c0, 0x0]}, @ptm_cap={0x3}]}, 0x7, [{0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x412}}, {0xfe, &(0x7f0000000c80)=@string={0xfe, 0x3, "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"}}, {0x4, &(0x7f0000000d80)=@lang_id={0x4, 0x3, 0x423}}, {0x4, &(0x7f0000000dc0)=@lang_id={0x4, 0x3, 0x429}}, {0x13, &(0x7f0000000e00)=@string={0x13, 0x3, "2426ea257370e74082c5822a27358b42ad"}}, {0xbb, &(0x7f0000000e40)=@string={0xbb, 0x3, "2c4035f1ed5c848fb269becff97a43d248fc4dd305caef1c2eb5c65995f86e3524dae99337820d7b1eed54621f06bc3eb61ba682fa242c8b8a1dc160e6449358eaf9f6dfc3ada15ccdec7d82e5fb8a1a1f771b3b692ebb5ea10426861edde89f0a684b9f3b17adac6703fda20ceea710c7d9fbf52bbe39ceb106065ae7dd02cbd13fe63b9d71d5fc50a7697e7ee3167927339f161f2372a7a96e76bd6951dc6c0773b2ebd33dcf73ad54f5691444c7c25504e3738d6a0a7f29"}}, {0x4, &(0x7f0000000f00)=@lang_id={0x4, 0x3, 0x44a}}]}) 0s ago: executing program 2 (id=1303): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000180)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r6, 0x40103e05, &(0x7f0000000140)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x1, 0x0, &(0x7f0000000000)) mount(&(0x7f0000000040)=@nullb, 0x0, 0x0, 0x1000080, 0x0) io_uring_setup(0xf08, &(0x7f00000003c0)={0x0, 0xfb6e, 0x38c1, 0x4, 0xf0}) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b00)=ANY=[@ANYBLOB="28000000400007012bbd700000000000047c0000085ce080"], 0x28}, 0x1, 0x0, 0x0, 0x48815}, 0xc020) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_FW_DOWNLOAD(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x28, r7, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NFC_ATTR_FIRMWARE_NAME={0xa, 0x14, '/)+:^,'}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x88040}, 0x20000080) kernel console output (not intermixed with test programs): 342.973965][ T5831] cleanup_mnt+0x437/0x4d0 [ 342.973983][ T5831] ? _raw_spin_unlock_irq+0x23/0x50 [ 342.974002][ T5831] task_work_run+0x1d9/0x270 [ 342.974025][ T5831] ? __pfx_task_work_run+0x10/0x10 [ 342.974055][ T5831] exit_to_user_mode_loop+0xed/0x480 [ 342.974077][ T5831] ? rcu_is_watching+0x15/0xb0 [ 342.974101][ T5831] do_syscall_64+0x32d/0xf80 [ 342.974118][ T5831] ? trace_irq_disable+0x3b/0x150 [ 342.974136][ T5831] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.974153][ T5831] ? clear_bhb_loop+0x40/0x90 [ 342.974173][ T5831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.974189][ T5831] RIP: 0033:0x7f1aee99d9d7 [ 342.974207][ T5831] Code: a2 c7 05 1c fd 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 342.974222][ T5831] RSP: 002b:00007ffed700e9a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 342.974240][ T5831] RAX: 0000000000000000 RBX: 00007f1aeea32050 RCX: 00007f1aee99d9d7 [ 342.974252][ T5831] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffed700ea60 [ 342.974262][ T5831] RBP: 00007ffed700ea60 R08: 00007ffed700fa60 R09: 00000000ffffffff [ 342.974274][ T5831] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffed700faf0 [ 342.974285][ T5831] R13: 00007f1aeea32050 R14: 0000000000053a31 R15: 00007ffed700fb30 [ 342.974315][ T5831] [ 342.978683][ T5831] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 343.052208][ T9635] bio_check_eod: 32 callbacks suppressed [ 343.052232][ T9635] syz.4.864: attempt to access beyond end of device [ 343.052232][ T9635] loop4: rw=8390657, sector=150, nr_sectors = 2 limit=128 [ 343.052271][ T9635] syz.4.864: attempt to access beyond end of device [ 343.052271][ T9635] loop4: rw=8390657, sector=152, nr_sectors = 2 limit=128 [ 343.052573][ T9638] syz.4.864: attempt to access beyond end of device [ 343.052573][ T9638] loop4: rw=8390657, sector=148, nr_sectors = 2 limit=128 [ 343.258960][ T9641] loop2: detected capacity change from 0 to 32768 [ 343.263167][ T9641] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.867 (9641) [ 343.278346][ T9641] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 343.278398][ T9641] BTRFS info (device loop2): using sha256 checksum algorithm [ 343.394277][ T9641] BTRFS info (device loop2): enabling ssd optimizations [ 343.394299][ T9641] BTRFS info (device loop2): turning on async discard [ 343.394309][ T9641] BTRFS info (device loop2): enabling free space tree [ 344.012778][ T5837] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 344.354017][ T9665] wlan0 speed is unknown, defaulting to 1000 [ 344.679740][ T9675] loop1: detected capacity change from 0 to 32768 [ 344.687861][ T9675] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.866 (9675) [ 344.726705][ T9675] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 344.726742][ T9675] BTRFS info (device loop1): using sha256 checksum algorithm [ 344.988484][ T9675] BTRFS info (device loop1): enabling ssd optimizations [ 344.988504][ T9675] BTRFS info (device loop1): turning on async discard [ 344.988514][ T9675] BTRFS info (device loop1): enabling free space tree [ 345.071059][ T9695] program syz.3.874 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 345.620439][ T5831] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 345.868424][ T9702] loop4: detected capacity change from 0 to 64 [ 346.384373][ T9672] loop2: detected capacity change from 0 to 32768 [ 346.385562][ T9699] netlink: 71 bytes leftover after parsing attributes in process `syz.4.876'. [ 346.447964][ T9672] [ 346.447964][ T9672] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 346.447964][ T9672] [ 346.565237][ T9710] ERROR: (device loop2): diWrite: ixpxd invalid [ 346.565237][ T9710] [ 346.647866][ T9710] ERROR: (device loop2): remounting filesystem as read-only [ 346.647902][ T9710] ERROR: (device loop2): txCommit: [ 346.647902][ T9710] [ 346.745694][ T9672] [ 346.745694][ T9672] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 346.745694][ T9672] [ 346.745806][ T9672] [ 346.745806][ T9672] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 346.745806][ T9672] [ 346.745850][ T9672] [ 346.745850][ T9672] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 346.745850][ T9672] [ 346.745892][ T9672] [ 346.745892][ T9672] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 346.745892][ T9672] [ 346.812994][ T9672] [ 346.812994][ T9672] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 346.812994][ T9672] [ 346.951176][ T9672] [ 346.951176][ T9672] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 346.951176][ T9672] [ 346.951316][ T9672] [ 346.951316][ T9672] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 346.951316][ T9672] [ 346.951357][ T9672] [ 346.951357][ T9672] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 346.951357][ T9672] [ 346.972080][ T9704] loop3: detected capacity change from 0 to 32768 [ 346.981972][ T9672] [ 346.981972][ T9672] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 346.981972][ T9672] [ 347.028181][ T9704] btrfs: Deprecated parameter 'usebackuproot' [ 347.350963][ T9704] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 347.429531][ T9704] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.878 (9704) [ 347.621389][ T9704] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 347.677639][ T9704] BTRFS info (device loop3): using crc32c checksum algorithm [ 348.322170][ T9731] loop4: detected capacity change from 0 to 4096 [ 348.506313][ T6184] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 348.724460][ T9704] BTRFS error (device loop3): failed to load root extent [ 348.744961][ T9704] BTRFS warning (device loop3): try to load backup roots slot 1 [ 348.892867][ T13] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 349.326430][ T9704] BTRFS warning (device loop3): couldn't read tree root [ 349.333820][ T9704] BTRFS warning (device loop3): try to load backup roots slot 2 [ 349.343161][ T6184] BTRFS error (device loop3): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 349.356211][ T9704] BTRFS warning (device loop3): couldn't read tree root [ 349.365822][ T9704] BTRFS warning (device loop3): try to load backup roots slot 3 [ 349.606343][ T9704] BTRFS error (device loop3): open_ctree failed: -4 [ 349.938672][ T9746] tmpfs: Unknown parameter 'size@' [ 350.585437][ T9746] loop4: detected capacity change from 0 to 8192 [ 350.837961][ T9752] program syz.3.887 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 351.680332][ T5987] hid-generic 0001:0100:0009.000A: unknown main item tag 0x0 [ 351.689154][ T5987] hid-generic 0001:0100:0009.000A: unknown main item tag 0x0 [ 351.697928][ T5987] hid-generic 0001:0100:0009.000A: unknown main item tag 0x0 [ 351.707594][ T5987] hid-generic 0001:0100:0009.000A: unknown main item tag 0x0 [ 351.715400][ T5987] hid-generic 0001:0100:0009.000A: unknown main item tag 0x0 [ 351.895175][ T5987] hid-generic 0001:0100:0009.000A: unknown main item tag 0x0 [ 351.930813][ T5987] hid-generic 0001:0100:0009.000A: unknown main item tag 0x0 [ 351.948889][ T9741] loop2: detected capacity change from 0 to 32768 [ 351.965829][ T5987] hid-generic 0001:0100:0009.000A: unknown main item tag 0x0 [ 351.996670][ T5998] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 352.027802][ T5987] hid-generic 0001:0100:0009.000A: unknown main item tag 0x0 [ 352.048597][ T9766] program syz.1.894 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 352.058454][ T9741] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 352.062111][ T5987] hid-generic 0001:0100:0009.000A: unknown main item tag 0x0 [ 352.079784][ T9741] OCFS2: ERROR (device loop2): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode 73: bits per cluster 32 [ 352.100515][ T9741] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 352.112700][ T9741] (syz.2.880,9741,1):ocfs2_read_locked_inode:599 ERROR: status = -30 [ 352.135505][ T9741] (syz.2.880,9741,0):_ocfs2_get_system_file_inode:144 ERROR: status = -30 [ 352.145532][ T9741] (syz.2.880,9741,1):ocfs2_init_local_system_inodes:496 ERROR: status=-30, sysfile=8, slot=0 [ 352.151201][ T5987] hid-generic 0001:0100:0009.000A: hidraw0: HID v0.05 Device [syz0] on syz1 [ 352.196881][ T5998] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 352.209943][ T5998] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.216769][ T9741] (syz.2.880,9741,1):ocfs2_init_local_system_inodes:505 ERROR: status = -30 [ 352.227864][ T5998] usb 5-1: config 0 descriptor?? [ 352.253660][ T9741] (syz.2.880,9741,1):ocfs2_mount_volume:1758 ERROR: status = -30 [ 352.316472][ T9741] (syz.2.880,9741,1):ocfs2_fill_super:1177 ERROR: status = -30 [ 352.522573][ T5998] usb 5-1: USB disconnect, device number 17 [ 352.724019][ T9773] comedi comedi0: 8255: I/O port conflict (0x4,4) [ 353.152826][ T9776] loop1: detected capacity change from 0 to 64 [ 353.386001][ T5936] usb 3-1: new low-speed USB device number 15 using dummy_hcd [ 353.479992][ T5998] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 353.534728][ T5936] usb 3-1: device descriptor read/64, error -71 [ 353.657086][ T5998] usb 4-1: config 0 has no interfaces? [ 353.668544][ T5998] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 353.682257][ T5998] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.693435][ T5998] usb 4-1: config 0 descriptor?? [ 353.774703][ T5936] usb 3-1: new low-speed USB device number 16 using dummy_hcd [ 354.070055][ T9789] tmpfs: Bad value for 'size' [ 354.359670][ T1172] usb 4-1: USB disconnect, device number 20 [ 354.373522][ T9792] FAULT_INJECTION: forcing a failure. [ 354.373522][ T9792] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 354.606109][ T9792] CPU: 0 UID: 0 PID: 9792 Comm: syz.2.902 Tainted: G L syzkaller #0 PREEMPT(full) [ 354.606130][ T9792] Tainted: [L]=SOFTLOCKUP [ 354.606134][ T9792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 354.606141][ T9792] Call Trace: [ 354.606146][ T9792] [ 354.606151][ T9792] dump_stack_lvl+0xe8/0x150 [ 354.606175][ T9792] should_fail_ex+0x412/0x560 [ 354.606205][ T9792] _copy_to_user+0x31/0xb0 [ 354.606224][ T9792] simple_read_from_buffer+0xe1/0x170 [ 354.606241][ T9792] proc_fail_nth_read+0x1bb/0x230 [ 354.606257][ T9792] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 354.606273][ T9792] ? rw_verify_area+0x2a6/0x4d0 [ 354.606282][ T9792] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 354.606296][ T9792] vfs_read+0x20c/0xa70 [ 354.606306][ T9792] ? __pfx___mutex_lock+0x10/0x10 [ 354.606322][ T9792] ? __pfx_vfs_read+0x10/0x10 [ 354.606330][ T9792] ? vhost_update_used_flags+0x19b/0x2b0 [ 354.606342][ T9792] ? vhost_vq_init_access+0x116/0x450 [ 354.606354][ T9792] ? vhost_vsock_dev_ioctl+0x953/0xed0 [ 354.606370][ T9792] ksys_read+0x150/0x270 [ 354.606381][ T9792] ? __pfx_ksys_read+0x10/0x10 [ 354.606396][ T9792] do_syscall_64+0x14d/0xf80 [ 354.606407][ T9792] ? trace_irq_disable+0x3b/0x150 [ 354.606419][ T9792] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.606429][ T9792] ? clear_bhb_loop+0x40/0x90 [ 354.606442][ T9792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.606452][ T9792] RIP: 0033:0x7fe80415cfce [ 354.606463][ T9792] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 354.606473][ T9792] RSP: 002b:00007fe804fa8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 354.606485][ T9792] RAX: ffffffffffffffda RBX: 00007fe804fa96c0 RCX: 00007fe80415cfce [ 354.606493][ T9792] RDX: 000000000000000f RSI: 00007fe804fa90a0 RDI: 0000000000000004 [ 354.606500][ T9792] RBP: 00007fe804fa9090 R08: 0000000000000000 R09: 0000000000000000 [ 354.606506][ T9792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 354.606513][ T9792] R13: 00007fe804416038 R14: 00007fe804415fa0 R15: 00007ffc4d164f68 [ 354.606528][ T9792] [ 354.901604][ T9789] loop4: detected capacity change from 0 to 8192 [ 355.301337][ T9799] program syz.0.903 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 356.133826][ T9810] netlink: 16 bytes leftover after parsing attributes in process `syz.4.905'. [ 356.143418][ T9810] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 357.276757][ T9829] netlink: 16 bytes leftover after parsing attributes in process `syz.4.912'. [ 357.285989][ T9829] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 358.084566][ T9834] tmpfs: Bad value for 'size' [ 358.677893][ T9834] loop1: detected capacity change from 0 to 8192 [ 359.188757][ T9848] program syz.0.919 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 359.895490][ T9850] loop2: detected capacity change from 0 to 32768 [ 359.929804][ T9850] ea_get: extended attribute size too large: 2617245744 > INT_MAX [ 359.946764][ T9850] ea_get: extended attribute size too large: 2617245744 > INT_MAX [ 359.969946][ T9850] program syz.2.921 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 360.304509][ T9859] netlink: 16 bytes leftover after parsing attributes in process `syz.4.922'. [ 360.314213][ T9859] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 361.647355][ T9855] loop1: detected capacity change from 0 to 32768 [ 361.821850][ T9878] loop2: detected capacity change from 0 to 40427 [ 361.837237][ T9878] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 361.844880][ T9878] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 361.861519][ T9878] F2FS-fs (loop2): invalid crc value [ 361.907194][ T9878] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 361.924392][ T9878] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 361.931569][ T9878] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 362.092785][ T9883] netlink: 'syz.2.929': attribute type 1 has an invalid length. [ 362.170455][ T9885] tmpfs: Bad value for 'size' [ 362.542390][ T9855] JBD2: Ignoring recovery information on journal [ 362.828896][ T9885] loop4: detected capacity change from 0 to 8192 [ 362.840036][ T9855] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 362.981447][ T9888] netlink: 4 bytes leftover after parsing attributes in process `syz.0.932'. [ 363.027559][ T9888] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 363.368205][ T9892] program syz.4.933 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 363.843917][ T9894] FAULT_INJECTION: forcing a failure. [ 363.843917][ T9894] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 363.858104][ T9894] CPU: 0 UID: 0 PID: 9894 Comm: syz.0.934 Tainted: G L syzkaller #0 PREEMPT(full) [ 363.858135][ T9894] Tainted: [L]=SOFTLOCKUP [ 363.858141][ T9894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 363.858151][ T9894] Call Trace: [ 363.858159][ T9894] [ 363.858166][ T9894] dump_stack_lvl+0xe8/0x150 [ 363.858198][ T9894] should_fail_ex+0x412/0x560 [ 363.858230][ T9894] _copy_from_user+0x2d/0xb0 [ 363.858258][ T9894] __se_sys_mount+0x18b/0x420 [ 363.858284][ T9894] ? __pfx___se_sys_mount+0x10/0x10 [ 363.858311][ T9894] ? __x64_sys_mount+0x20/0xc0 [ 363.858334][ T9894] do_syscall_64+0x14d/0xf80 [ 363.858351][ T9894] ? trace_irq_disable+0x3b/0x150 [ 363.858371][ T9894] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.858386][ T9894] ? clear_bhb_loop+0x40/0x90 [ 363.858405][ T9894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.858421][ T9894] RIP: 0033:0x7fca5cd9c799 [ 363.858439][ T9894] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 363.858454][ T9894] RSP: 002b:00007fca5db82028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 363.858474][ T9894] RAX: ffffffffffffffda RBX: 00007fca5d015fa0 RCX: 00007fca5cd9c799 [ 363.858487][ T9894] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 0000000000000000 [ 363.858502][ T9894] RBP: 00007fca5db82090 R08: 0000200000000140 R09: 0000000000000000 [ 363.858514][ T9894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 363.858525][ T9894] R13: 00007fca5d016038 R14: 00007fca5d015fa0 R15: 00007ffc5dd54c78 [ 363.858552][ T9894] [ 364.202050][ T9894] overlayfs: failed to create directory ./file0/work (errno: 13); mounting read-only [ 364.236905][ T9894] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 364.625767][ T9901] netlink: 16 bytes leftover after parsing attributes in process `syz.4.935'. [ 364.634879][ T9901] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 365.084121][ T5831] ocfs2: Unmounting device (7,1) on (node local) [ 365.491902][ T9913] loop1: detected capacity change from 0 to 128 [ 365.857909][ T9924] Bluetooth: MGMT ver 1.23 [ 366.553969][ T9930] tmpfs: Too few inodes for current use [ 367.103742][ T9935] loop3: detected capacity change from 0 to 8 [ 367.251604][ T9935] SQUASHFS error: xz decompression failed, data probably corrupt [ 367.294138][ T9935] SQUASHFS error: Failed to read block 0x108: -5 [ 367.327630][ T9935] SQUASHFS error: Unable to read metadata cache entry [106] [ 367.367120][ T9935] SQUASHFS error: Unable to read inode 0x11f [ 367.438139][ T9940] netlink: 'syz.0.946': attribute type 1 has an invalid length. [ 367.447048][ T9940] netlink: 60 bytes leftover after parsing attributes in process `syz.0.946'. [ 367.896648][ T9946] program syz.0.947 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 368.338414][ T9934] loop1: detected capacity change from 0 to 32768 [ 368.340897][ T9947] loop4: detected capacity change from 0 to 512 [ 368.386571][ T9947] EXT4-fs: Ignoring removed nomblk_io_submit option [ 368.417144][ T9949] FAULT_INJECTION: forcing a failure. [ 368.417144][ T9949] name failslab, interval 1, probability 0, space 0, times 0 [ 368.462198][ T9947] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 368.475619][ T9949] CPU: 0 UID: 0 PID: 9949 Comm: syz.2.949 Tainted: G L syzkaller #0 PREEMPT(full) [ 368.475649][ T9949] Tainted: [L]=SOFTLOCKUP [ 368.475656][ T9949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 368.475671][ T9949] Call Trace: [ 368.475682][ T9949] [ 368.475690][ T9949] dump_stack_lvl+0xe8/0x150 [ 368.475728][ T9949] should_fail_ex+0x412/0x560 [ 368.475761][ T9949] should_failslab+0xa8/0x100 [ 368.475783][ T9949] __kmalloc_noprof+0xe8/0x760 [ 368.475801][ T9949] ? __pcs_replace_empty_main+0x3cd/0x730 [ 368.475823][ T9949] ? __pcs_replace_empty_main+0x263/0x730 [ 368.475849][ T9949] __pcs_replace_empty_main+0x3cd/0x730 [ 368.475880][ T9949] kmem_cache_alloc_noprof+0x37d/0x650 [ 368.475904][ T9949] ? io_submit_one+0x130/0x14c0 [ 368.475922][ T9949] ? __might_fault+0xcb/0x130 [ 368.475946][ T9949] ? kmem_cache_alloc_noprof+0x15a/0x650 [ 368.475975][ T9949] io_submit_one+0x130/0x14c0 [ 368.475998][ T9949] ? irqentry_exit+0x61a/0x700 [ 368.476017][ T9949] ? lockdep_hardirqs_on+0x7a/0x110 [ 368.476036][ T9949] ? irqentry_exit+0x61a/0x700 [ 368.476055][ T9949] ? trace_irq_disable+0x3b/0x150 [ 368.476080][ T9949] ? __pfx_io_submit_one+0x10/0x10 [ 368.476113][ T9949] ? __might_fault+0xaf/0x130 [ 368.476141][ T9949] __se_sys_io_submit+0x195/0x340 [ 368.476171][ T9949] ? __pfx___se_sys_io_submit+0x10/0x10 [ 368.476195][ T9949] ? ksys_write+0x242/0x270 [ 368.476228][ T9949] do_syscall_64+0x14d/0xf80 [ 368.476246][ T9949] ? trace_irq_disable+0x3b/0x150 [ 368.476266][ T9949] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.476285][ T9949] ? clear_bhb_loop+0x40/0x90 [ 368.476307][ T9949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.476325][ T9949] RIP: 0033:0x7fe80419c799 [ 368.476342][ T9949] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 368.476357][ T9949] RSP: 002b:00007fe804fa9028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 368.476378][ T9949] RAX: ffffffffffffffda RBX: 00007fe804415fa0 RCX: 00007fe80419c799 [ 368.476391][ T9949] RDX: 0000200000000340 RSI: 0000000000000001 RDI: 00007fe804f65000 [ 368.476404][ T9949] RBP: 00007fe804fa9090 R08: 0000000000000000 R09: 0000000000000000 [ 368.476422][ T9949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 368.476433][ T9949] R13: 00007fe804416038 R14: 00007fe804415fa0 R15: 00007ffc4d164f68 [ 368.476462][ T9949] [ 368.772675][ T9947] EXT4-fs (loop4): 1 truncate cleaned up [ 368.780021][ T9947] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 369.284093][ T9963] netlink: 'syz.0.954': attribute type 11 has an invalid length. [ 369.559810][ T5840] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.065116][ T9975] tmpfs: Unknown parameter 'grpquota' [ 370.076677][ T9975] overlayfs: failed to resolve './file1': -2 [ 370.506730][ T9977] loop4: detected capacity change from 0 to 8192 [ 370.698305][ T9986] loop2: detected capacity change from 0 to 128 [ 370.754422][ T9986] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 370.949932][ T9986] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 371.061956][ T9992] program syz.1.961 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 371.202422][ T9986] UDF-fs: error (device loop2): udf_read_inode: (ino 87) failed !bh [ 371.427506][ T9986] UDF-fs: error (device loop2): udf_fill_super: Error in udf_iget, block=3, partition=0 [ 371.543204][ T1172] libceph: connect (1)[c::]:6789 error -101 [ 371.551656][ T1172] libceph: mon0 (1)[c::]:6789 connect error [ 371.564201][ T1172] libceph: connect (1)[c::]:6789 error -101 [ 371.577556][ T1172] libceph: mon0 (1)[c::]:6789 connect error [ 371.709485][ T9996] ceph: No mds server is up or the cluster is laggy [ 371.842831][ T5936] libceph: connect (1)[c::]:6789 error -101 [ 371.858229][ T5936] libceph: mon0 (1)[c::]:6789 connect error [ 373.398331][T10029] FAULT_INJECTION: forcing a failure. [ 373.398331][T10029] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 373.454707][T10029] CPU: 0 UID: 0 PID: 10029 Comm: syz.0.972 Tainted: G L syzkaller #0 PREEMPT(full) [ 373.454740][T10029] Tainted: [L]=SOFTLOCKUP [ 373.454747][T10029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 373.454757][T10029] Call Trace: [ 373.454767][T10029] [ 373.454776][T10029] dump_stack_lvl+0xe8/0x150 [ 373.454806][T10029] should_fail_ex+0x412/0x560 [ 373.454835][T10029] _copy_from_user+0x2d/0xb0 [ 373.454853][T10029] io_submit_one+0xd3/0x14c0 [ 373.454875][T10029] ? irqentry_exit+0x61a/0x700 [ 373.454893][T10029] ? lockdep_hardirqs_on+0x7a/0x110 [ 373.454909][T10029] ? irqentry_exit+0x61a/0x700 [ 373.454928][T10029] ? trace_irq_disable+0x3b/0x150 [ 373.454953][T10029] ? __pfx_io_submit_one+0x10/0x10 [ 373.454986][T10029] ? __might_fault+0xaf/0x130 [ 373.455016][T10029] __se_sys_io_submit+0x195/0x340 [ 373.455047][T10029] ? __pfx___se_sys_io_submit+0x10/0x10 [ 373.455072][T10029] ? ksys_write+0x242/0x270 [ 373.455103][T10029] do_syscall_64+0x14d/0xf80 [ 373.455123][T10029] ? trace_irq_disable+0x3b/0x150 [ 373.455143][T10029] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.455162][T10029] ? clear_bhb_loop+0x40/0x90 [ 373.455184][T10029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.455202][T10029] RIP: 0033:0x7fca5cd9c799 [ 373.455220][T10029] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 373.455236][T10029] RSP: 002b:00007fca5db82028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 373.455257][T10029] RAX: ffffffffffffffda RBX: 00007fca5d015fa0 RCX: 00007fca5cd9c799 [ 373.455270][T10029] RDX: 0000200000000340 RSI: 0000000000000001 RDI: 00007fca5afd3000 [ 373.455283][T10029] RBP: 00007fca5db82090 R08: 0000000000000000 R09: 0000000000000000 [ 373.455295][T10029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 373.455305][T10029] R13: 00007fca5d016038 R14: 00007fca5d015fa0 R15: 00007ffc5dd54c78 [ 373.455334][T10029] [ 373.723717][ T9991] loop4: detected capacity change from 0 to 131072 [ 373.740555][ T9991] F2FS-fs (loop4): invalid crc value [ 374.000873][T10034] gretap1: entered allmulticast mode [ 374.057316][ T9991] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 374.228090][T10038] loop2: detected capacity change from 0 to 1764 [ 374.283126][T10038] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 374.343877][T10038] 9p: Bad value for 'rfdno' [ 375.443281][T10042] loop3: detected capacity change from 0 to 32768 [ 376.190860][T10060] loop4: detected capacity change from 0 to 4096 [ 376.211080][T10060] ntfs3(loop4): Different NTFS sector size (2048) and media sector size (512). [ 376.569227][T10064] FAULT_INJECTION: forcing a failure. [ 376.569227][T10064] name failslab, interval 1, probability 0, space 0, times 0 [ 376.616469][T10064] CPU: 1 UID: 0 PID: 10064 Comm: syz.2.984 Tainted: G L syzkaller #0 PREEMPT(full) [ 376.616531][T10064] Tainted: [L]=SOFTLOCKUP [ 376.616538][T10064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 376.616549][T10064] Call Trace: [ 376.616556][T10064] [ 376.616564][T10064] dump_stack_lvl+0xe8/0x150 [ 376.616597][T10064] should_fail_ex+0x412/0x560 [ 376.616627][T10064] ? shmem_alloc_inode+0x28/0x40 [ 376.616645][T10064] should_failslab+0xa8/0x100 [ 376.616668][T10064] kmem_cache_alloc_lru_noprof+0x87/0x640 [ 376.616697][T10064] ? __pfx_stack_trace_save+0x10/0x10 [ 376.616723][T10064] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 376.616739][T10064] shmem_alloc_inode+0x28/0x40 [ 376.616756][T10064] alloc_inode+0x6a/0x1b0 [ 376.616781][T10064] new_inode+0x22/0x170 [ 376.616803][T10064] ? kasan_save_track+0x4f/0x80 [ 376.616828][T10064] ? kasan_save_track+0x3e/0x80 [ 376.616855][T10064] shmem_get_inode+0x3cd/0xfd0 [ 376.616890][T10064] ? __pfx_shmem_get_inode+0x10/0x10 [ 376.616926][T10064] __shmem_file_setup+0x20b/0x370 [ 376.616950][T10064] ? __pfx___shmem_file_setup+0x10/0x10 [ 376.616980][T10064] memfd_alloc_file+0x99/0x560 [ 376.617006][T10064] ? __pfx_memfd_alloc_file+0x10/0x10 [ 376.617036][T10064] __se_sys_memfd_create+0x31f/0x410 [ 376.617063][T10064] do_syscall_64+0x14d/0xf80 [ 376.617083][T10064] ? trace_irq_disable+0x3b/0x150 [ 376.617104][T10064] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.617123][T10064] ? clear_bhb_loop+0x40/0x90 [ 376.617145][T10064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.617163][T10064] RIP: 0033:0x7fe80419c799 [ 376.617181][T10064] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 376.617196][T10064] RSP: 002b:00007fe804fa8e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 376.617217][T10064] RAX: ffffffffffffffda RBX: 000000000000559e RCX: 00007fe80419c799 [ 376.617230][T10064] RDX: 00007fe804fa8ee0 RSI: 0000000000000000 RDI: 00007fe804232e79 [ 376.617243][T10064] RBP: 0000200000005680 R08: 00000000ffffffff R09: 0000000000000000 [ 376.617255][T10064] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000005600 [ 376.617266][T10064] R13: 00007fe804fa8ee0 R14: 00007fe804fa8ea0 R15: 0000200000000240 [ 376.617295][T10064] [ 377.094403][T10073] 9p: Bad value for 'rfdno' [ 378.125082][T10087] FAULT_INJECTION: forcing a failure. [ 378.125082][T10087] name failslab, interval 1, probability 0, space 0, times 0 [ 378.139340][T10087] CPU: 0 UID: 0 PID: 10087 Comm: syz.4.989 Tainted: G L syzkaller #0 PREEMPT(full) [ 378.139370][T10087] Tainted: [L]=SOFTLOCKUP [ 378.139376][T10087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 378.139386][T10087] Call Trace: [ 378.139390][T10087] [ 378.139395][T10087] dump_stack_lvl+0xe8/0x150 [ 378.139416][T10087] should_fail_ex+0x412/0x560 [ 378.139434][T10087] should_failslab+0xa8/0x100 [ 378.139447][T10087] __kmalloc_cache_noprof+0x88/0x660 [ 378.139458][T10087] ? __se_sys_memfd_create+0x21d/0x410 [ 378.139475][T10087] __se_sys_memfd_create+0x21d/0x410 [ 378.139490][T10087] do_syscall_64+0x14d/0xf80 [ 378.139502][T10087] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.139513][T10087] ? clear_bhb_loop+0x40/0x90 [ 378.139525][T10087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.139535][T10087] RIP: 0033:0x7fde9c99c799 [ 378.139546][T10087] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 378.139555][T10087] RSP: 002b:00007fde9d895e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 378.139567][T10087] RAX: ffffffffffffffda RBX: 000000000000056e RCX: 00007fde9c99c799 [ 378.139575][T10087] RDX: 00007fde9d895ee0 RSI: 0000000000000000 RDI: 00007fde9ca32e79 [ 378.139582][T10087] RBP: 0000200000000640 R08: 00000000ffffffff R09: 0000000000000000 [ 378.139589][T10087] R10: 0000000000000001 R11: 0000000000000202 R12: 00002000000005c0 [ 378.139595][T10087] R13: 00007fde9d895ee0 R14: 00007fde9d895ea0 R15: 0000200000000600 [ 378.139611][T10087] [ 378.700863][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.709191][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.565743][T10097] loop4: detected capacity change from 0 to 128 [ 379.804332][T10097] FAULT_INJECTION: forcing a failure. [ 379.804332][T10097] name failslab, interval 1, probability 0, space 0, times 0 [ 379.824107][T10097] CPU: 1 UID: 0 PID: 10097 Comm: syz.4.992 Tainted: G L syzkaller #0 PREEMPT(full) [ 379.824137][T10097] Tainted: [L]=SOFTLOCKUP [ 379.824143][T10097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 379.824154][T10097] Call Trace: [ 379.824162][T10097] [ 379.824170][T10097] dump_stack_lvl+0xe8/0x150 [ 379.824204][T10097] should_fail_ex+0x412/0x560 [ 379.824237][T10097] should_failslab+0xa8/0x100 [ 379.824258][T10097] __kvmalloc_node_noprof+0x178/0x8a0 [ 379.824277][T10097] ? seq_read_iter+0x202/0xe10 [ 379.824306][T10097] seq_read_iter+0x202/0xe10 [ 379.824335][T10097] ? __asan_memset+0x22/0x50 [ 379.824366][T10097] seq_read+0x367/0x480 [ 379.824394][T10097] ? __pfx_seq_read+0x10/0x10 [ 379.824422][T10097] ? apparmor_file_permission+0x1f4/0x300 [ 379.824451][T10097] ? __pfx_seq_read+0x10/0x10 [ 379.824468][T10097] proc_reg_read+0x1e9/0x2e0 [ 379.824498][T10097] vfs_readv+0x587/0x840 [ 379.824522][T10097] ? __pfx_proc_reg_read+0x10/0x10 [ 379.824551][T10097] ? __pfx_vfs_readv+0x10/0x10 [ 379.824589][T10097] ? __fget_files+0x2a/0x420 [ 379.824614][T10097] ? __fget_files+0x3a0/0x420 [ 379.824634][T10097] ? __fget_files+0x2a/0x420 [ 379.824670][T10097] do_readv+0x154/0x2e0 [ 379.824692][T10097] ? __pfx_do_readv+0x10/0x10 [ 379.824722][T10097] do_syscall_64+0x14d/0xf80 [ 379.824739][T10097] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.824756][T10097] ? clear_bhb_loop+0x40/0x90 [ 379.824776][T10097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.824793][T10097] RIP: 0033:0x7fde9c99c799 [ 379.824810][T10097] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 379.824824][T10097] RSP: 002b:00007fde9d8b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 379.824844][T10097] RAX: ffffffffffffffda RBX: 00007fde9cc15fa0 RCX: 00007fde9c99c799 [ 379.824857][T10097] RDX: 0000000000000001 RSI: 00002000000038c0 RDI: 0000000000000007 [ 379.824867][T10097] RBP: 00007fde9d8b7090 R08: 0000000000000000 R09: 0000000000000000 [ 379.824876][T10097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 379.824884][T10097] R13: 00007fde9cc16038 R14: 00007fde9cc15fa0 R15: 00007ffed293b668 [ 379.824907][T10097] [ 379.887214][ T5987] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 379.981894][T10107] loop2: detected capacity change from 0 to 256 [ 380.057040][T10103] wlan0 speed is unknown, defaulting to 1000 [ 380.316863][ T5987] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 380.330363][ T5987] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 380.404095][T10116] openvswitch: netlink: Unexpected mask (mask=20440, allowed=10048) [ 380.511871][ T5987] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 380.525386][ T5987] usb 1-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 380.534492][ T5987] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.559437][ T5987] usb 1-1: config 0 descriptor?? [ 381.116964][ T5987] usb 1-1: USB disconnect, device number 17 [ 381.257929][T10115] loop2: detected capacity change from 0 to 32768 [ 381.319546][T10115] JBD2: Ignoring recovery information on journal [ 381.368944][T10115] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 381.884836][T10140] tmpfs: Too few inodes for current use [ 382.476891][T10140] loop3: detected capacity change from 0 to 8192 [ 382.788806][ T5837] ocfs2: Unmounting device (7,2) on (node local) [ 382.975530][T10157] loop4: detected capacity change from 0 to 32768 [ 382.993919][T10157] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1011 (10157) [ 383.015990][T10157] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 383.026253][T10157] BTRFS info (device loop4): using sha256 checksum algorithm [ 383.320794][T10170] siw: device registration error -23 [ 383.548387][T10157] BTRFS info (device loop4): enabling ssd optimizations [ 383.556298][T10157] BTRFS info (device loop4): turning on async discard [ 383.563088][T10157] BTRFS info (device loop4): enabling free space tree [ 383.687715][ T5840] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 384.701969][T10192] FAULT_INJECTION: forcing a failure. [ 384.701969][T10192] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 384.734475][T10192] CPU: 0 UID: 0 PID: 10192 Comm: syz.3.1017 Tainted: G L syzkaller #0 PREEMPT(full) [ 384.734507][T10192] Tainted: [L]=SOFTLOCKUP [ 384.734513][T10192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 384.734523][T10192] Call Trace: [ 384.734530][T10192] [ 384.734538][T10192] dump_stack_lvl+0xe8/0x150 [ 384.734570][T10192] should_fail_ex+0x412/0x560 [ 384.734603][T10192] _copy_to_user+0x31/0xb0 [ 384.734624][T10192] put_user_ifreq+0x6a/0xc0 [ 384.734648][T10192] sock_do_ioctl+0x26d/0x320 [ 384.734674][T10192] ? __pfx_sock_do_ioctl+0x10/0x10 [ 384.734695][T10192] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 384.734731][T10192] sock_ioctl+0x5c6/0x7f0 [ 384.734756][T10192] ? __pfx_sock_ioctl+0x10/0x10 [ 384.734779][T10192] ? __fget_files+0x2a/0x420 [ 384.734803][T10192] ? __fget_files+0x3a0/0x420 [ 384.734826][T10192] ? __fget_files+0x2a/0x420 [ 384.734852][T10192] ? bpf_lsm_file_ioctl+0x9/0x20 [ 384.734871][T10192] ? __pfx_sock_ioctl+0x10/0x10 [ 384.734894][T10192] __se_sys_ioctl+0xfc/0x170 [ 384.734916][T10192] do_syscall_64+0x14d/0xf80 [ 384.734934][T10192] ? trace_irq_disable+0x3b/0x150 [ 384.734955][T10192] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.734973][T10192] ? clear_bhb_loop+0x40/0x90 [ 384.734996][T10192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.735013][T10192] RIP: 0033:0x7f201319c799 [ 384.735030][T10192] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 384.735045][T10192] RSP: 002b:00007f2013f7f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 384.735063][T10192] RAX: ffffffffffffffda RBX: 00007f2013415fa0 RCX: 00007f201319c799 [ 384.735075][T10192] RDX: 0000200000000180 RSI: 0000000000008933 RDI: 0000000000000003 [ 384.735085][T10192] RBP: 00007f2013f7f090 R08: 0000000000000000 R09: 0000000000000000 [ 384.735095][T10192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 384.735103][T10192] R13: 00007f2013416038 R14: 00007f2013415fa0 R15: 00007fffd942b028 [ 384.735131][T10192] [ 385.161013][T10200] 9p: Bad value for 'rfdno' [ 385.569985][T10210] IPVS: set_ctl: invalid protocol: 201 0.0.0.0:0 [ 385.793366][ T5987] usb 5-1: new low-speed USB device number 18 using dummy_hcd [ 386.541275][ T5987] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 386.563469][ T5987] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 386.588919][ T5987] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 386.616104][ T5987] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 386.647278][ T5987] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.660244][T10209] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 386.673867][T10203] loop3: detected capacity change from 0 to 32768 [ 386.696462][ T5987] hub 5-1:1.0: bad descriptor, ignoring hub [ 386.707395][ T5987] hub 5-1:1.0: probe with driver hub failed with error -5 [ 386.748159][ T5987] cdc_wdm 5-1:1.0: skipping garbage [ 386.764251][T10203] JBD2: Ignoring recovery information on journal [ 386.779744][ T5987] cdc_wdm 5-1:1.0: skipping garbage [ 386.841409][T10203] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 387.012106][T10219] FAULT_INJECTION: forcing a failure. [ 387.012106][T10219] name failslab, interval 1, probability 0, space 0, times 0 [ 387.054533][T10219] CPU: 1 UID: 0 PID: 10219 Comm: syz.2.1027 Tainted: G L syzkaller #0 PREEMPT(full) [ 387.054563][T10219] Tainted: [L]=SOFTLOCKUP [ 387.054569][T10219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 387.054581][T10219] Call Trace: [ 387.054588][T10219] [ 387.054596][T10219] dump_stack_lvl+0xe8/0x150 [ 387.054624][T10219] should_fail_ex+0x412/0x560 [ 387.054654][T10219] should_failslab+0xa8/0x100 [ 387.054674][T10219] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 387.054701][T10219] ? dup_task_struct+0x52/0x840 [ 387.054723][T10219] dup_task_struct+0x52/0x840 [ 387.054739][T10219] ? _raw_spin_unlock_irq+0x23/0x50 [ 387.054760][T10219] copy_process+0x89b/0x4430 [ 387.054800][ T5987] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 387.054807][T10219] ? __pfx_copy_process+0x10/0x10 [ 387.054831][T10219] ? mutex_init_lockdep+0xf9/0x130 [ 387.054849][T10219] vhost_task_create+0x1f9/0x380 [ 387.054868][T10219] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 387.054886][T10219] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 387.054906][T10219] ? __pfx_vhost_task_create+0x10/0x10 [ 387.054935][T10219] ? __pfx_vhost_task_fn+0x10/0x10 [ 387.054966][T10219] ? __lock_acquire+0x6b5/0x2cf0 [ 387.054996][T10219] kvm_mmu_post_init_vm+0x14c/0x300 [ 387.055021][T10219] kvm_arch_vcpu_ioctl_run+0x106/0x20d0 [ 387.055052][T10219] ? __mutex_trylock_common+0x158/0x260 [ 387.055075][T10219] ? __pfx___mutex_trylock_common+0x10/0x10 [ 387.055103][T10219] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 387.055126][T10219] ? register_lock_class+0x31/0x2e0 [ 387.055162][T10219] ? __lock_acquire+0x6b5/0x2cf0 [ 387.055194][T10219] ? kasan_quarantine_put+0xbb/0x1f0 [ 387.055221][T10219] ? kvm_vcpu_ioctl+0x280/0xfd0 [ 387.055249][T10219] ? do_raw_write_lock+0x11d/0x260 [ 387.055285][T10219] kvm_vcpu_ioctl+0xa62/0xfd0 [ 387.055310][T10219] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 387.055327][T10219] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 387.055366][T10219] ? __fget_files+0x2a/0x420 [ 387.055392][T10219] ? __fget_files+0x2a/0x420 [ 387.055414][T10219] ? __fget_files+0x3a0/0x420 [ 387.055435][T10219] ? __fget_files+0x2a/0x420 [ 387.055474][T10219] ? bpf_lsm_file_ioctl+0x9/0x20 [ 387.055493][T10219] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 387.055513][T10219] __se_sys_ioctl+0xfc/0x170 [ 387.055534][T10219] do_syscall_64+0x14d/0xf80 [ 387.055553][T10219] ? trace_irq_disable+0x3b/0x150 [ 387.055574][T10219] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.055591][T10219] ? clear_bhb_loop+0x40/0x90 [ 387.055613][T10219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.055631][T10219] RIP: 0033:0x7fe80419c799 [ 387.055648][T10219] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 387.055663][T10219] RSP: 002b:00007fe804fa9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 387.055683][T10219] RAX: ffffffffffffffda RBX: 00007fe804415fa0 RCX: 00007fe80419c799 [ 387.055696][T10219] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 387.055707][T10219] RBP: 00007fe804fa9090 R08: 0000000000000000 R09: 0000000000000000 [ 387.055722][T10219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 387.055733][T10219] R13: 00007fe804416038 R14: 00007fe804415fa0 R15: 00007ffc4d164f68 [ 387.055761][T10219] [ 387.529622][ T5987] cdc_wdm 5-1:1.0: Unknown control protocol [ 387.638098][ T5987] usb 5-1: USB disconnect, device number 18 [ 387.907914][ T5830] ocfs2: Unmounting device (7,3) on (node local) [ 388.215641][ T30] audit: type=1800 audit(1773407906.237:20): pid=10233 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1032" name="bus" dev="overlay" ino=1243 res=0 errno=0 [ 388.378844][T10238] loop4: detected capacity change from 0 to 128 [ 389.335339][T10238] syz.4.1033: attempt to access beyond end of device [ 389.335339][T10238] loop4: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 389.766593][T10238] syz.4.1033: attempt to access beyond end of device [ 389.766593][T10238] loop4: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 389.810647][T10238] buffer_io_error: 20 callbacks suppressed [ 389.810669][T10238] Buffer I/O error on dev loop4, logical block 79, lost async page write [ 389.889559][T10238] syz.4.1033: attempt to access beyond end of device [ 389.889559][T10238] loop4: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 389.925644][T10238] Buffer I/O error on dev loop4, logical block 80, lost async page write [ 389.945336][T10238] syz.4.1033: attempt to access beyond end of device [ 389.945336][T10238] loop4: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 389.979966][T10238] syz.4.1033: attempt to access beyond end of device [ 389.979966][T10238] loop4: rw=8390657, sector=166, nr_sectors = 2 limit=128 [ 390.020248][T10238] Buffer I/O error on dev loop4, logical block 83, lost async page write [ 390.061047][T10238] syz.4.1033: attempt to access beyond end of device [ 390.061047][T10238] loop4: rw=8390657, sector=168, nr_sectors = 2 limit=128 [ 390.084829][T10238] Buffer I/O error on dev loop4, logical block 84, lost async page write [ 390.096689][T10238] syz.4.1033: attempt to access beyond end of device [ 390.096689][T10238] loop4: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 390.115366][T10238] syz.4.1033: attempt to access beyond end of device [ 390.115366][T10238] loop4: rw=8390657, sector=190, nr_sectors = 2 limit=128 [ 390.132239][T10238] Buffer I/O error on dev loop4, logical block 95, lost async page write [ 390.145955][T10238] syz.4.1033: attempt to access beyond end of device [ 390.145955][T10238] loop4: rw=8390657, sector=192, nr_sectors = 2 limit=128 [ 390.180154][T10238] Buffer I/O error on dev loop4, logical block 96, lost async page write [ 390.197488][T10238] syz.4.1033: attempt to access beyond end of device [ 390.197488][T10238] loop4: rw=2049, sector=194, nr_sectors = 8 limit=128 [ 390.323573][T10257] x_tables: duplicate underflow at hook 1 [ 390.350950][T10259] loop2: detected capacity change from 0 to 2048 [ 390.360532][T10259] EXT4-fs: Ignoring removed bh option [ 390.369507][T10259] EXT4-fs: Ignoring removed mblk_io_submit option [ 390.518060][T10259] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 390.543494][T10259] ext4 filesystem being mounted at /214/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 390.619333][T10266] xt_CT: You must specify a L4 protocol and not use inversions on it [ 390.699078][ T30] audit: type=1804 audit(1773407908.727:21): pid=10265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1039" name="/newroot/214/file0/file1" dev="loop2" ino=15 res=1 errno=0 [ 390.738080][T10259] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1039'. [ 390.753577][T10269] FAULT_INJECTION: forcing a failure. [ 390.753577][T10269] name failslab, interval 1, probability 0, space 0, times 0 [ 390.789617][T10269] CPU: 0 UID: 0 PID: 10269 Comm: syz.4.1040 Tainted: G L syzkaller #0 PREEMPT(full) [ 390.789650][T10269] Tainted: [L]=SOFTLOCKUP [ 390.789665][T10269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 390.789675][T10269] Call Trace: [ 390.789682][T10269] [ 390.789689][T10269] dump_stack_lvl+0xe8/0x150 [ 390.789719][T10269] should_fail_ex+0x412/0x560 [ 390.789751][T10269] should_failslab+0xa8/0x100 [ 390.789774][T10269] __kmalloc_noprof+0xe8/0x760 [ 390.789793][T10269] ? tomoyo_encode+0x28b/0x550 [ 390.789826][T10269] tomoyo_encode+0x28b/0x550 [ 390.789857][T10269] tomoyo_realpath_from_path+0x58d/0x5d0 [ 390.789893][T10269] ? tomoyo_path_number_perm+0x219/0x630 [ 390.789915][T10269] tomoyo_path_number_perm+0x246/0x630 [ 390.789937][T10269] ? register_lock_class+0x31/0x2e0 [ 390.789964][T10269] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 390.789989][T10269] ? __lock_acquire+0x6b5/0x2cf0 [ 390.790053][T10269] ? __pfx_from_kuid+0x10/0x10 [ 390.790076][T10269] ? down_write_killable+0x180/0x240 [ 390.790103][T10269] ? __pfx_down_write_killable+0x10/0x10 [ 390.790129][T10269] tomoyo_path_chown+0x46/0xc0 [ 390.790150][T10269] security_path_chown+0x139/0x340 [ 390.790171][T10269] chown_common+0x40c/0x6b0 [ 390.790203][T10269] ? __pfx_chown_common+0x10/0x10 [ 390.790237][T10269] ? mnt_get_write_access+0x213/0x280 [ 390.790264][T10269] do_fchownat+0x14c/0x250 [ 390.790290][T10269] ? __pfx_do_fchownat+0x10/0x10 [ 390.790312][T10269] ? __pfx_ksys_write+0x10/0x10 [ 390.790338][T10269] __x64_sys_lchown+0x85/0xa0 [ 390.790362][T10269] do_syscall_64+0x14d/0xf80 [ 390.790383][T10269] ? trace_irq_disable+0x3b/0x150 [ 390.790404][T10269] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.790423][T10269] ? clear_bhb_loop+0x40/0x90 [ 390.790445][T10269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.790463][T10269] RIP: 0033:0x7fde9c99c799 [ 390.790481][T10269] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 390.790496][T10269] RSP: 002b:00007fde9d896028 EFLAGS: 00000246 ORIG_RAX: 000000000000005e [ 390.790516][T10269] RAX: ffffffffffffffda RBX: 00007fde9cc16090 RCX: 00007fde9c99c799 [ 390.790530][T10269] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000200 [ 390.790541][T10269] RBP: 00007fde9d896090 R08: 0000000000000000 R09: 0000000000000000 [ 390.790552][T10269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 390.790563][T10269] R13: 00007fde9cc16128 R14: 00007fde9cc16090 R15: 00007ffed293b668 [ 390.790595][T10269] [ 391.050321][T10269] ERROR: Out of memory at tomoyo_realpath_from_path. [ 391.067133][T10255] loop3: detected capacity change from 0 to 32768 [ 391.103375][T10255] JBD2: Ignoring recovery information on journal [ 391.582694][T10274] EXT4-fs error (device loop2): ext4_find_dest_de:2050: inode #2: block 16: comm syz.2.1039: bad entry in directory: directory entry overrun - offset=108, inode=646161, rec_len=4096, size=4096 fake=0 [ 391.630663][T10255] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 391.700074][T10273] loop4: detected capacity change from 0 to 8192 [ 392.071743][T10287] loop4: detected capacity change from 0 to 64 [ 392.119790][ T5837] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.249186][T10299] loop1: detected capacity change from 0 to 128 [ 393.306995][T10299] Buffer I/O error on dev loop1, logical block 79, lost async page write [ 393.338377][T10299] Buffer I/O error on dev loop1, logical block 80, lost async page write [ 393.358289][T10295] loop2: detected capacity change from 0 to 32768 [ 393.388828][T10299] Buffer I/O error on dev loop1, logical block 83, lost async page write [ 393.397694][T10299] Buffer I/O error on dev loop1, logical block 84, lost async page write [ 393.506559][T10295] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1046 (10295) [ 393.538585][T10295] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 393.548939][T10295] BTRFS info (device loop2): using sha256 checksum algorithm [ 393.658137][T10295] BTRFS info (device loop2): enabling ssd optimizations [ 393.719576][T10295] BTRFS info (device loop2): turning on async discard [ 393.726453][T10295] BTRFS info (device loop2): enabling free space tree [ 393.739729][ T5830] ocfs2: Unmounting device (7,3) on (node local) [ 394.307683][T10321] x_tables: duplicate underflow at hook 1 [ 394.679524][T10327] xt_CT: You must specify a L4 protocol and not use inversions on it [ 395.476757][ T5837] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 396.174795][ T9] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 396.323604][T10348] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1057'. [ 396.335137][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 396.366948][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC4, changing to 0x84 [ 396.403108][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 396.436981][ T9] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16 [ 396.464848][T10348] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1057'. [ 396.477476][ T9] usb 5-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3 [ 396.488532][ T9] usb 5-1: Product: syz [ 396.493023][ T9] usb 5-1: Manufacturer: syz [ 396.515618][ T9] usb 5-1: SerialNumber: syz [ 396.524953][ T9] usb 5-1: config 0 descriptor?? [ 396.576016][ T9] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 397.078574][T10334] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 397.181078][T10334] loop4: detected capacity change from 0 to 128 [ 397.229289][ T30] audit: type=1800 audit(1773407915.257:22): pid=10334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1056" name="file1" dev="loop4" ino=1048769 res=0 errno=0 [ 397.325507][ T30] audit: type=1800 audit(1773407915.277:23): pid=10334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1056" name="file1" dev="loop4" ino=1048769 res=0 errno=0 [ 398.523696][ T6384] usb 5-1: Failed to submit usb control message: -110 [ 398.602617][ T6384] usb 5-1: unable to send the bmi data to the device: -110 [ 398.650810][ T6384] usb 5-1: unable to get target info from device [ 398.680006][ T6384] usb 5-1: could not get target info (-110) [ 398.700911][ T5998] hid_parser_main: 188 callbacks suppressed [ 398.700931][ T5998] hid-generic 0001:0100:0009.000B: unknown main item tag 0x0 [ 398.703502][ T6384] usb 5-1: could not probe fw (-110) [ 398.735898][T10374] wlan0 speed is unknown, defaulting to 1000 [ 398.736305][ T5998] hid-generic 0001:0100:0009.000B: unknown main item tag 0x0 [ 398.793086][ T5998] hid-generic 0001:0100:0009.000B: unknown main item tag 0x0 [ 398.818891][ T5998] hid-generic 0001:0100:0009.000B: unknown main item tag 0x0 [ 398.838298][ T5998] hid-generic 0001:0100:0009.000B: unknown main item tag 0x0 [ 398.854686][ T5998] hid-generic 0001:0100:0009.000B: unknown main item tag 0x0 [ 398.872496][ T5998] hid-generic 0001:0100:0009.000B: unknown main item tag 0x0 [ 398.880127][ T5998] hid-generic 0001:0100:0009.000B: unknown main item tag 0x0 [ 398.933456][T10383] loop1: detected capacity change from 0 to 128 [ 398.945485][ T5998] hid-generic 0001:0100:0009.000B: unknown main item tag 0x0 [ 398.991517][ T5998] hid-generic 0001:0100:0009.000B: unknown main item tag 0x0 [ 399.001825][T10383] bio_check_eod: 43 callbacks suppressed [ 399.001845][T10383] syz.1.1065: attempt to access beyond end of device [ 399.001845][T10383] loop1: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 399.005885][ T1172] usb 5-1: USB disconnect, device number 19 [ 399.016959][T10383] syz.1.1065: attempt to access beyond end of device [ 399.016959][T10383] loop1: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 399.040924][ T5842] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 399.123014][T10383] buffer_io_error: 25 callbacks suppressed [ 399.123060][T10383] Buffer I/O error on dev loop1, logical block 79, lost async page write [ 399.516830][T10383] syz.1.1065: attempt to access beyond end of device [ 399.516830][T10383] loop1: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 399.534511][ T5998] hid-generic 0001:0100:0009.000B: hidraw0: HID v0.05 Device [syz0] on syz1 [ 399.567115][T10383] Buffer I/O error on dev loop1, logical block 80, lost async page write [ 399.611738][T10383] syz.1.1065: attempt to access beyond end of device [ 399.611738][T10383] loop1: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 399.666688][ T5842] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 399.712153][ T5842] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.716550][T10383] syz.1.1065: attempt to access beyond end of device [ 399.716550][T10383] loop1: rw=8390657, sector=166, nr_sectors = 2 limit=128 [ 399.757424][T10383] Buffer I/O error on dev loop1, logical block 83, lost async page write [ 399.767773][T10383] syz.1.1065: attempt to access beyond end of device [ 399.767773][T10383] loop1: rw=8390657, sector=168, nr_sectors = 2 limit=128 [ 399.808049][ T5842] usb 3-1: config 0 descriptor?? [ 400.033459][T10383] Buffer I/O error on dev loop1, logical block 84, lost async page write [ 400.052208][ T5842] usb 3-1: USB disconnect, device number 17 [ 400.504516][T10383] syz.1.1065: attempt to access beyond end of device [ 400.504516][T10383] loop1: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 400.576583][T10383] syz.1.1065: attempt to access beyond end of device [ 400.576583][T10383] loop1: rw=8390657, sector=190, nr_sectors = 2 limit=128 [ 400.592663][T10383] Buffer I/O error on dev loop1, logical block 95, lost async page write [ 400.611798][T10383] syz.1.1065: attempt to access beyond end of device [ 400.611798][T10383] loop1: rw=8390657, sector=192, nr_sectors = 2 limit=128 [ 400.642582][T10383] Buffer I/O error on dev loop1, logical block 96, lost async page write [ 400.659346][T10383] syz.1.1065: attempt to access beyond end of device [ 400.659346][T10383] loop1: rw=2049, sector=194, nr_sectors = 8 limit=128 [ 401.298302][T10404] loop1: detected capacity change from 0 to 256 [ 401.412711][T10399] loop4: detected capacity change from 0 to 8192 [ 401.555624][ T5998] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 401.744838][ T5998] usb 1-1: Using ep0 maxpacket: 8 [ 401.763483][ T5998] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 401.775009][ T5998] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 401.803237][ T5998] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 401.840938][ T5998] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 401.875911][ T5998] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 401.937001][ T5998] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 402.495677][ T5998] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.730266][ T5998] usb 1-1: usb_control_msg returned -32 [ 402.754950][ T5998] usbtmc 1-1:16.0: can't read capabilities [ 403.094184][T10402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 403.105957][T10402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 403.145900][T10402] tmpfs: Bad value for 'mpol' [ 403.749042][T10425] loop2: detected capacity change from 0 to 32768 [ 403.841116][T10425] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1075 (10425) [ 403.905304][T10425] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 403.955322][T10425] BTRFS info (device loop2): using sha256 checksum algorithm [ 404.106150][T10434] usbtmc 1-1:16.0: usb_control_msg returned -32 [ 404.123473][T10425] BTRFS info (device loop2): rebuilding free space tree [ 404.311718][ T5918] usb 1-1: USB disconnect, device number 18 [ 404.503868][T10425] BTRFS info (device loop2): disabling free space tree [ 404.520188][ T1320] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.535890][T10425] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 404.570641][T10425] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 404.608970][T10425] BTRFS info (device loop2): setting nodatasum [ 404.619274][T10425] BTRFS info (device loop2): setting nodatacow [ 404.639065][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 404.664830][T10425] BTRFS info (device loop2): turning off barriers [ 404.668516][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 404.688013][ T1172] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 404.690956][T10425] BTRFS info (device loop2): turning on sync discard [ 404.705975][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 404.723393][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 404.735290][T10425] BTRFS info (device loop2): force clearing of disk cache [ 404.742671][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 405.392184][ T1320] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.404720][ T1172] usb 4-1: Using ep0 maxpacket: 16 [ 405.420521][ T5837] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 405.422184][ T1172] usb 4-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 405.443040][ T1172] usb 4-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 405.453741][ T1172] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 405.463360][ T1172] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.908279][ T1172] mcp2221 0003:04D8:00DD.000C: item fetching failed at offset 3/5 [ 405.935723][ T1172] mcp2221 0003:04D8:00DD.000C: can't parse reports [ 405.962832][ T1172] mcp2221 0003:04D8:00DD.000C: probe with driver mcp2221 failed with error -22 [ 406.591526][ T1320] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.636142][T10455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.683501][T10455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.708539][ T5998] usb 4-1: USB disconnect, device number 21 [ 406.815890][T10456] wlan0 speed is unknown, defaulting to 1000 [ 406.859998][ T5849] Bluetooth: hci1: command tx timeout [ 406.950251][T10479] loop2: detected capacity change from 0 to 8192 [ 407.019262][ T1320] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.230600][T10486] loop4: detected capacity change from 0 to 1024 [ 407.304879][T10486] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 407.326841][T10486] ext4 filesystem being mounted at /221/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 407.419005][ T30] audit: type=1804 audit(1773407925.447:24): pid=10486 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1088" name="/newroot/221/file1/file1" dev="loop4" ino=15 res=1 errno=0 [ 407.535280][T10486] EXT4-fs error (device loop4): ext4_map_blocks:821: inode #15: block 3: comm syz.4.1088: lblock 3 mapped to illegal pblock 3 (length 3) [ 407.587479][T10486] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 407.629290][T10486] EXT4-fs (loop4): This should not happen!! Data will be lost [ 407.629290][T10486] [ 408.199476][ T1320] bridge_slave_1: left allmulticast mode [ 408.207035][ T1320] bridge_slave_1: left promiscuous mode [ 408.235671][ T1320] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.260823][ T1320] bridge_slave_0: left allmulticast mode [ 408.267582][ T1320] bridge_slave_0: left promiscuous mode [ 408.273487][ T1320] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.311810][ T135] EXT4-fs error (device loop4): ext4_map_blocks:821: inode #15: block 8: comm kworker/u8:5: lblock 8 mapped to illegal pblock 8 (length 8) [ 408.549794][ T135] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 408.564646][ T135] EXT4-fs (loop4): This should not happen!! Data will be lost [ 408.564646][ T135] [ 409.544731][ T5849] Bluetooth: hci1: command tx timeout [ 409.598532][ T5840] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 411.357632][T10525] program syz.4.1095 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 411.574963][ T5849] Bluetooth: hci1: command tx timeout [ 411.971275][T10529] siw: device registration error -23 [ 412.010311][ T1320] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 412.151980][ T1320] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 412.191421][ T1320] bond0 (unregistering): Released all slaves [ 412.665490][T10532] loop4: detected capacity change from 0 to 8192 [ 413.153895][T10456] chnl_net:caif_netlink_parms(): no params data found [ 413.184809][ T29] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 413.334706][ T5919] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 413.355646][ T29] usb 3-1: Using ep0 maxpacket: 16 [ 413.369025][ T29] usb 3-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 413.388373][ T29] usb 3-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 413.409286][ T29] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 413.430994][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.500337][ T5919] usb 4-1: Using ep0 maxpacket: 8 [ 413.516172][ T5919] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 413.531125][ T5919] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 413.550848][ T5919] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 413.586380][ T5919] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 413.631774][ T5919] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 413.645131][ T5919] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 413.654377][ T5919] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.654728][ T5849] Bluetooth: hci1: command tx timeout [ 413.819849][T10456] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.827917][T10456] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.856537][T10456] bridge_slave_0: entered allmulticast mode [ 413.876633][T10456] bridge_slave_0: entered promiscuous mode [ 413.905191][ T5919] usb 4-1: usb_control_msg returned -32 [ 413.912108][ T5919] usbtmc 4-1:16.0: can't read capabilities [ 413.919112][ T29] mcp2221 0003:04D8:00DD.000D: item fetching failed at offset 3/5 [ 413.931111][ T29] mcp2221 0003:04D8:00DD.000D: can't parse reports [ 413.943025][ T1320] hsr_slave_0: left promiscuous mode [ 413.951093][ T29] mcp2221 0003:04D8:00DD.000D: probe with driver mcp2221 failed with error -22 [ 413.961314][ T1320] hsr_slave_1: left promiscuous mode [ 413.969172][ T1320] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 413.986593][ T1320] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 413.996383][ T1320] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 414.031249][ T1320] veth1_macvtap: left promiscuous mode [ 414.039196][ T1320] veth0_macvtap: left promiscuous mode [ 414.045390][ T1320] veth1_vlan: left promiscuous mode [ 414.050875][ T1320] veth0_vlan: left promiscuous mode [ 414.129630][T10535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 414.139593][T10535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 414.148907][ T29] usb 3-1: USB disconnect, device number 18 [ 414.639399][T10570] usbtmc 4-1:16.0: usb_control_msg returned -32 [ 414.715499][ T1320] team0 (unregistering): Port device team_slave_1 removed [ 414.737680][ T1320] team0 (unregistering): Port device team_slave_0 removed [ 414.929710][T10456] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.941445][T10456] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.954028][T10456] bridge_slave_1: entered allmulticast mode [ 414.981932][T10456] bridge_slave_1: entered promiscuous mode [ 415.796730][T10581] ip6t_srh: unknown srh invflags 4000 [ 415.857149][T10456] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 415.875893][T10581] loop2: detected capacity change from 0 to 7 [ 415.928017][T10456] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 415.971079][T10581] Dev loop2: unable to read RDB block 7 [ 416.006455][T10581] loop2: unable to read partition table [ 416.051584][T10581] loop2: partition table beyond EOD, truncated [ 416.076819][T10581] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 416.097943][ T5987] usb 4-1: USB disconnect, device number 22 [ 416.172508][T10456] team0: Port device team_slave_0 added [ 416.226628][T10590] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1110'. [ 416.267963][ T5936] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 416.284486][T10579] FAULT_INJECTION: forcing a failure. [ 416.284486][T10579] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 416.299566][T10456] team0: Port device team_slave_1 added [ 416.324073][ T5201] Dev loop2: unable to read RDB block 7 [ 416.332141][T10579] CPU: 0 UID: 0 PID: 10579 Comm: syz.0.1106 Tainted: G L syzkaller #0 PREEMPT(full) [ 416.332169][T10579] Tainted: [L]=SOFTLOCKUP [ 416.332175][T10579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 416.332184][T10579] Call Trace: [ 416.332190][T10579] [ 416.332198][T10579] dump_stack_lvl+0xe8/0x150 [ 416.332231][T10579] should_fail_ex+0x412/0x560 [ 416.332260][T10579] _copy_from_iter+0x1d3/0x1670 [ 416.332287][T10579] ? rcu_is_watching+0x15/0xb0 [ 416.332308][T10579] ? __pfx__copy_from_iter+0x10/0x10 [ 416.332337][T10579] ? netlink_sendmsg+0x650/0xb40 [ 416.332351][T10579] ? skb_put+0x11b/0x210 [ 416.332372][T10579] netlink_sendmsg+0x6c0/0xb40 [ 416.332398][T10579] ? __pfx_netlink_sendmsg+0x10/0x10 [ 416.332415][T10579] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 416.332448][T10579] ? __pfx_netlink_sendmsg+0x10/0x10 [ 416.332464][T10579] sock_sendmsg_nosec+0x112/0x150 [ 416.332490][T10579] ____sys_sendmsg+0x589/0x8c0 [ 416.332518][T10579] ? __pfx_____sys_sendmsg+0x10/0x10 [ 416.332544][T10579] ? import_iovec+0x73/0xa0 [ 416.332563][T10579] ___sys_sendmsg+0x2a5/0x360 [ 416.332578][T10579] ? __pfx____sys_sendmsg+0x10/0x10 [ 416.332623][T10579] ? __fget_files+0x2a/0x420 [ 416.332637][T10579] ? __fget_files+0x3a0/0x420 [ 416.332655][T10579] __x64_sys_sendmsg+0x1bd/0x2a0 [ 416.332668][T10579] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 416.332684][T10579] ? __pfx_ksys_write+0x10/0x10 [ 416.332700][T10579] do_syscall_64+0x14d/0xf80 [ 416.332711][T10579] ? trace_irq_disable+0x3b/0x150 [ 416.332724][T10579] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.332734][T10579] ? clear_bhb_loop+0x40/0x90 [ 416.332751][T10579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.332762][T10579] RIP: 0033:0x7fca5cd9c799 [ 416.332772][T10579] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 416.332781][T10579] RSP: 002b:00007fca5aff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 416.332794][T10579] RAX: ffffffffffffffda RBX: 00007fca5d016090 RCX: 00007fca5cd9c799 [ 416.332802][T10579] RDX: 0000000020004002 RSI: 0000200000000400 RDI: 0000000000000007 [ 416.332808][T10579] RBP: 00007fca5aff6090 R08: 0000000000000000 R09: 0000000000000000 [ 416.332815][T10579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 416.332821][T10579] R13: 00007fca5d016128 R14: 00007fca5d016090 R15: 00007ffc5dd54c78 [ 416.332837][T10579] [ 416.434983][ T5201] loop2: unable to read partition table [ 416.619451][ T5936] usb 5-1: Using ep0 maxpacket: 32 [ 416.666424][ T5936] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 416.678213][ T5936] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.682137][T10590] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 417.122916][ T5936] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 417.219941][ T5201] loop2: partition table beyond EOD, truncated [ 417.273166][T10456] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 417.286965][T10456] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 417.353618][ T5201] Dev loop2: unable to read RDB block 7 [ 417.360074][ T5201] loop2: unable to read partition table [ 417.366074][T10456] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 417.377229][ T5201] loop2: partition table beyond EOD, truncated [ 417.412265][T10456] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 417.445887][T10456] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 417.588685][T10456] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 417.796562][ T5201] Dev loop2: unable to read RDB block 7 [ 417.818720][ T5201] loop2: unable to read partition table [ 417.826111][T10456] hsr_slave_0: entered promiscuous mode [ 417.831940][ T5201] loop2: partition table beyond EOD, truncated [ 417.843176][T10456] hsr_slave_1: entered promiscuous mode [ 418.034684][T10456] debugfs: 'hsr0' already exists in 'hsr' [ 418.040507][T10456] Cannot create hsr debugfs directory [ 418.074872][ T5936] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 418.726549][ T5936] usb 4-1: Using ep0 maxpacket: 16 [ 418.750738][ T5936] usb 4-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 418.792655][ T5201] Dev loop2: unable to read RDB block 7 [ 418.802773][ T5936] usb 4-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 418.821771][ T5201] loop2: unable to read partition table [ 418.837587][ T5201] loop2: partition table beyond EOD, truncated [ 418.844023][ T5936] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 418.856355][ T29] usb 5-1: USB disconnect, device number 20 [ 418.898585][ T5936] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.787221][ T5987] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 419.959868][ T5987] usb 3-1: Using ep0 maxpacket: 32 [ 419.979591][ T5987] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC4, changing to 0x84 [ 420.035015][ T5987] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 420.047411][T10642] loop4: detected capacity change from 0 to 32768 [ 420.063919][T10642] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1121 (10642) [ 420.086238][ T5936] mcp2221 0003:04D8:00DD.000E: item fetching failed at offset 3/5 [ 420.092290][ T5987] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16 [ 420.094139][T10642] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 420.114313][T10642] BTRFS info (device loop4): using sha256 checksum algorithm [ 420.132011][ T5936] mcp2221 0003:04D8:00DD.000E: can't parse reports [ 420.150081][ T5987] usb 3-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3 [ 420.152253][ T5936] mcp2221 0003:04D8:00DD.000E: probe with driver mcp2221 failed with error -22 [ 420.180740][ T5987] usb 3-1: Product: syz [ 420.195429][ T5987] usb 3-1: Manufacturer: syz [ 420.223269][ T5987] usb 3-1: SerialNumber: syz [ 420.260812][ T5987] usb 3-1: config 0 descriptor?? [ 420.293525][T10642] BTRFS info (device loop4): enabling ssd optimizations [ 420.297868][ T5987] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 420.300656][T10642] BTRFS info (device loop4): turning on async discard [ 420.317764][T10642] BTRFS info (device loop4): enabling free space tree [ 420.369823][T10607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 420.395580][T10607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 420.414688][ T5936] usb 4-1: USB disconnect, device number 23 [ 420.494491][T10636] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 420.710377][T10670] netlink: 'syz.0.1123': attribute type 7 has an invalid length. [ 420.826752][T10636] loop2: detected capacity change from 0 to 128 [ 421.017534][ T30] audit: type=1800 audit(1773407939.037:25): pid=10636 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1118" name="file1" dev="loop2" ino=1048785 res=0 errno=0 [ 421.371394][ T5987] usb 3-1: USB disconnect, device number 19 [ 421.372335][ T135] usb 3-1: Failed to submit usb control message: -71 [ 421.423278][T10456] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 421.430852][ T135] usb 3-1: unable to send the bmi data to the device: -71 [ 421.470862][ T135] usb 3-1: unable to get target info from device [ 421.494201][ T135] usb 3-1: could not get target info (-71) [ 421.529294][ T135] usb 3-1: could not probe fw (-71) [ 421.620037][T10456] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 421.622925][ T5840] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 421.729104][T10456] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 421.788182][ T29] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 421.805245][T10456] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 422.002963][ T29] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 422.017674][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.040080][ T29] usb 4-1: Product: syz [ 422.070046][ T29] usb 4-1: Manufacturer: syz [ 422.082586][ T29] usb 4-1: SerialNumber: syz [ 422.191660][T10701] loop2: detected capacity change from 0 to 128 [ 422.225016][T10701] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 422.315991][T10699] 9p: Bad value for 'rfdno' [ 422.410463][T10701] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 422.442314][T10701] UDF-fs: error (device loop2): udf_read_inode: (ino 87) failed !bh [ 422.467097][T10701] UDF-fs: error (device loop2): udf_fill_super: Error in udf_iget, block=3, partition=0 [ 422.577857][ T29] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 422.611438][T10456] 8021q: adding VLAN 0 to HW filter on device bond0 [ 422.651852][ T29] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 422.751913][T10456] 8021q: adding VLAN 0 to HW filter on device team0 [ 422.801602][T10709] loop4: detected capacity change from 0 to 128 [ 422.811225][ T1320] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.818441][ T1320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 422.900630][T10709] syz.4.1130: attempt to access beyond end of device [ 422.900630][T10709] loop4: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 422.923434][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.930698][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 422.971786][T10709] syz.4.1130: attempt to access beyond end of device [ 422.971786][T10709] loop4: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 423.088230][T10709] Buffer I/O error on dev loop4, logical block 79, lost async page write [ 423.726976][ T29] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPIPE [ 423.753897][ T29] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 423.801973][T10709] syz.4.1130: attempt to access beyond end of device [ 423.801973][T10709] loop4: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 423.817371][ T29] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 423.852428][ T29] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 423.876092][T10709] Buffer I/O error on dev loop4, logical block 80, lost async page write [ 423.942645][ T29] usb 4-1: USB disconnect, device number 24 [ 423.959407][T10709] syz.4.1130: attempt to access beyond end of device [ 423.959407][T10709] loop4: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 424.016426][T10709] syz.4.1130: attempt to access beyond end of device [ 424.016426][T10709] loop4: rw=8390657, sector=166, nr_sectors = 2 limit=128 [ 424.089363][T10709] Buffer I/O error on dev loop4, logical block 83, lost async page write [ 424.150359][T10709] syz.4.1130: attempt to access beyond end of device [ 424.150359][T10709] loop4: rw=8390657, sector=168, nr_sectors = 2 limit=128 [ 424.191247][T10709] Buffer I/O error on dev loop4, logical block 84, lost async page write [ 424.222966][T10709] syz.4.1130: attempt to access beyond end of device [ 424.222966][T10709] loop4: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 424.287909][T10709] syz.4.1130: attempt to access beyond end of device [ 424.287909][T10709] loop4: rw=8390657, sector=190, nr_sectors = 2 limit=128 [ 424.343363][T10709] Buffer I/O error on dev loop4, logical block 95, lost async page write [ 424.391793][T10709] syz.4.1130: attempt to access beyond end of device [ 424.391793][T10709] loop4: rw=8390657, sector=192, nr_sectors = 2 limit=128 [ 424.449364][T10709] Buffer I/O error on dev loop4, logical block 96, lost async page write [ 424.467440][T10733] x_tables: duplicate underflow at hook 1 [ 424.478854][T10709] syz.4.1130: attempt to access beyond end of device [ 424.478854][T10709] loop4: rw=2049, sector=194, nr_sectors = 8 limit=128 [ 424.655601][ T5842] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 424.766497][T10738] xt_CT: You must specify a L4 protocol and not use inversions on it [ 424.922861][T10456] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 424.983797][ T5842] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 425.018723][ T5842] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.043663][ T5842] usb 3-1: Product: syz [ 425.051024][ T5842] usb 3-1: Manufacturer: syz [ 425.057242][ T5842] usb 3-1: SerialNumber: syz [ 425.588075][ T5842] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 425.625304][ T5842] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 426.082957][T10456] veth0_vlan: entered promiscuous mode [ 426.176786][T10456] veth1_vlan: entered promiscuous mode [ 426.271168][ T5842] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPIPE [ 426.318207][ T5842] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 426.362536][ T5842] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 426.371796][T10456] veth0_macvtap: entered promiscuous mode [ 426.380029][T10764] loop4: detected capacity change from 0 to 1764 [ 426.803542][ T5842] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -32 [ 426.818888][T10456] veth1_macvtap: entered promiscuous mode [ 426.840084][ T5842] usb 3-1: USB disconnect, device number 20 [ 426.851631][T10764] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 426.931647][T10764] 9p: Bad value for 'rfdno' [ 427.003755][T10751] loop3: detected capacity change from 0 to 32768 [ 427.009542][T10456] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 427.122080][T10751] JBD2: Ignoring recovery information on journal [ 427.134508][T10456] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 427.260139][T10751] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 427.407309][ T78] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.430930][T10776] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1140'. [ 427.785273][ T78] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.844269][ T78] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.873848][ T78] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.183022][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 428.211395][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 428.847950][T10781] 9p: Bad value for 'rfdno' [ 428.911272][ T135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 428.941161][T10786] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1143'. [ 428.959072][ T135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 429.122812][T10792] loop4: detected capacity change from 0 to 128 [ 429.358640][T10792] syz.4.1144: attempt to access beyond end of device [ 429.358640][T10792] loop4: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 429.432887][T10789] syz.3.1136 (10789): drop_caches: 2 [ 429.453034][T10792] syz.4.1144: attempt to access beyond end of device [ 429.453034][T10792] loop4: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 429.523251][T10792] Buffer I/O error on dev loop4, logical block 79, lost async page write [ 429.626472][T10792] syz.4.1144: attempt to access beyond end of device [ 429.626472][T10792] loop4: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 429.666381][T10792] Buffer I/O error on dev loop4, logical block 80, lost async page write [ 429.685494][T10792] syz.4.1144: attempt to access beyond end of device [ 429.685494][T10792] loop4: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 429.705858][T10792] syz.4.1144: attempt to access beyond end of device [ 429.705858][T10792] loop4: rw=8390657, sector=166, nr_sectors = 2 limit=128 [ 429.729928][T10792] Buffer I/O error on dev loop4, logical block 83, lost async page write [ 429.885446][T10792] syz.4.1144: attempt to access beyond end of device [ 429.885446][T10792] loop4: rw=8390657, sector=168, nr_sectors = 2 limit=128 [ 429.916993][T10792] Buffer I/O error on dev loop4, logical block 84, lost async page write [ 429.971199][T10801] tmpfs: Too few inodes for current use [ 430.115798][T10792] syz.4.1144: attempt to access beyond end of device [ 430.115798][T10792] loop4: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 430.191309][ T5830] ocfs2: Unmounting device (7,3) on (node local) [ 430.286413][T10792] syz.4.1144: attempt to access beyond end of device [ 430.286413][T10792] loop4: rw=8390657, sector=190, nr_sectors = 2 limit=128 [ 430.320431][T10792] Buffer I/O error on dev loop4, logical block 95, lost async page write [ 430.360687][T10792] syz.4.1144: attempt to access beyond end of device [ 430.360687][T10792] loop4: rw=8390657, sector=192, nr_sectors = 2 limit=128 [ 430.440126][T10792] Buffer I/O error on dev loop4, logical block 96, lost async page write [ 430.469168][T10792] syz.4.1144: attempt to access beyond end of device [ 430.469168][T10792] loop4: rw=2049, sector=194, nr_sectors = 8 limit=128 [ 430.491386][T10801] loop5: detected capacity change from 0 to 8192 [ 430.839695][T10811] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 430.855467][T10796] loop2: detected capacity change from 0 to 32768 [ 430.880163][T10796] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1145 (10796) [ 430.895815][T10811] overlayfs: missing 'lowerdir' [ 430.994559][T10796] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 431.030186][T10796] BTRFS info (device loop2): using sha256 checksum algorithm [ 431.045565][ T10] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 431.189055][T10796] BTRFS info (device loop2): rebuilding free space tree [ 431.224668][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 431.236528][ T10] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 431.255143][ T10] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 431.267816][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 431.278951][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 431.289447][ T10] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 431.303585][ T10] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 431.313733][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.345046][ T29] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 431.358292][T10796] BTRFS info (device loop2): disabling free space tree [ 431.376602][T10796] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 431.397076][T10796] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 431.443856][T10796] BTRFS info (device loop2): setting nodatasum [ 431.460610][T10796] BTRFS info (device loop2): setting nodatacow [ 431.468545][T10796] BTRFS info (device loop2): turning off barriers [ 431.486673][T10796] BTRFS info (device loop2): turning on sync discard [ 431.504160][T10796] BTRFS info (device loop2): force clearing of disk cache [ 431.517764][ T29] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 431.529298][ T29] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 431.536139][ T10] usb 5-1: usb_control_msg returned -32 [ 431.546151][ T29] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 431.563033][T10805] netlink: 'syz.0.1147': attribute type 4 has an invalid length. [ 431.566149][ T10] usbtmc 5-1:16.0: can't read capabilities [ 431.580875][T10805] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1147'. [ 431.597492][ T29] usb 4-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 431.616852][ T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.632357][T10805] .`: renamed from bond0 (while UP) [ 431.644083][ T29] usb 4-1: config 0 descriptor?? [ 431.707719][ T5837] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 431.864417][ T10] usb 4-1: USB disconnect, device number 25 [ 432.631743][T10844] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1154'. [ 433.429049][T10852] veth0_vlan: entered allmulticast mode [ 434.347164][ T1172] usb 5-1: USB disconnect, device number 21 [ 434.862507][T10876] tmpfs: Too few inodes for current use [ 435.266150][T10875] loop4: detected capacity change from 0 to 32768 [ 435.285858][T10875] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1159 (10875) [ 435.301202][T10875] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 435.311392][T10875] BTRFS info (device loop4): using sha256 checksum algorithm [ 435.499865][T10875] BTRFS info (device loop4): enabling ssd optimizations [ 435.506936][T10875] BTRFS info (device loop4): turning on async discard [ 435.513722][T10875] BTRFS info (device loop4): enabling free space tree [ 436.137631][T10894] loop2: detected capacity change from 0 to 32768 [ 436.146471][T10894] BTRFS info: device /dev/loop2 (7:2) using temp-fsid 9d80e61a-89aa-41ee-92df-bb128d67554a [ 436.156584][T10894] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1160 (10894) [ 436.221970][T10894] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 436.234214][T10894] BTRFS info (device loop2): using sha256 checksum algorithm [ 436.321521][ T5840] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 436.351071][T10906] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1161'. [ 436.379851][T10894] BTRFS info (device loop2): enabling ssd optimizations [ 436.386915][T10894] BTRFS info (device loop2): turning on async discard [ 436.394203][T10894] BTRFS info (device loop2): enabling free space tree [ 436.407616][T10906] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1161'. [ 436.763210][T10921] x_tables: duplicate underflow at hook 1 [ 437.034085][T10925] xt_CT: You must specify a L4 protocol and not use inversions on it [ 437.253226][T10928] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1165'. [ 437.314319][ T5837] BTRFS info (device loop2): last unmount of filesystem 9d80e61a-89aa-41ee-92df-bb128d67554a [ 437.326443][T10928] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1165'. [ 437.821978][T10939] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1167'. [ 438.658305][ T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 438.964823][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 439.503508][ T10] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 439.542625][ T10] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 439.594783][ T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 439.649778][ T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 439.723944][ T10] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 439.783885][ T10] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 439.841560][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.932181][T10972] loop3: detected capacity change from 0 to 128 [ 439.992477][T10972] affs: Unexpected value for 'verbose' [ 440.106499][ T10] usb 6-1: usb_control_msg returned -32 [ 440.134002][ T10] usbtmc 6-1:16.0: can't read capabilities [ 440.148720][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.148791][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.727932][T10982] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1177'. [ 441.246609][T10982] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1177'. [ 441.314739][ T9] usb 6-1: USB disconnect, device number 2 [ 441.804188][T11001] wlan0 speed is unknown, defaulting to 1000 [ 443.100872][T11008] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1180'. [ 443.110203][T11008] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1180'. [ 443.517566][T11020] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1182'. [ 445.574757][ T5987] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 445.771633][ T5987] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 445.826307][ T5987] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.894270][ T5987] usb 1-1: Product: syz [ 445.930208][ T5987] usb 1-1: Manufacturer: syz [ 445.958044][ T5987] usb 1-1: SerialNumber: syz [ 446.196427][ T1172] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 446.387332][ T1172] usb 4-1: Using ep0 maxpacket: 8 [ 446.408887][ T5987] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 446.412530][ T1172] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 446.458469][ T5987] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 446.480325][ T1172] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 446.540689][T11052] loop5: detected capacity change from 0 to 32768 [ 446.547176][ T1172] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 446.547215][ T1172] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 446.547239][ T1172] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 446.547289][ T1172] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 446.547312][ T1172] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.670528][T11052] JBD2: Ignoring recovery information on journal [ 446.782294][T11052] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 446.808067][ T1172] usb 4-1: usb_control_msg returned -32 [ 446.820591][ T1172] usbtmc 4-1:16.0: can't read capabilities [ 447.043341][T11073] loop2: detected capacity change from 0 to 1764 [ 447.085134][T11073] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 447.150639][T11073] 9p: Bad value for 'rfdno' [ 447.357980][ T5987] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -EPROTO [ 447.384714][ T5987] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 447.404655][ T5987] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 447.447633][ T5987] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 447.708074][T11083] syz.5.1189 (11083): drop_caches: 2 [ 447.838017][ T5987] usb 1-1: USB disconnect, device number 19 [ 448.157677][T10456] ocfs2: Unmounting device (7,5) on (node local) [ 448.315312][T11099] 9p: Bad value for 'rfdno' [ 448.874830][T11098] loop2: detected capacity change from 0 to 32768 [ 448.897530][T11098] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1194 (11098) [ 448.962378][T11098] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 448.988761][T11098] BTRFS info (device loop2): using sha256 checksum algorithm [ 449.010700][ T29] usb 4-1: USB disconnect, device number 26 [ 449.201923][T11098] BTRFS info (device loop2): enabling ssd optimizations [ 449.814084][T11098] BTRFS info (device loop2): turning on async discard [ 449.853791][T11098] BTRFS info (device loop2): enabling free space tree [ 450.285535][T11140] loop3: detected capacity change from 0 to 32768 [ 450.326190][T11140] BTRFS info: device /dev/loop3 (7:3) using temp-fsid 8ab70187-d9ab-4803-a35e-a186b461e331 [ 450.336308][T11140] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1200 (11140) [ 450.362020][T11140] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 450.372445][T11140] BTRFS info (device loop3): using sha256 checksum algorithm [ 450.412615][T11107] loop5: detected capacity change from 0 to 32768 [ 450.507380][T11140] BTRFS info (device loop3): enabling ssd optimizations [ 450.514380][T11140] BTRFS info (device loop3): turning on async discard [ 450.521293][T11140] BTRFS info (device loop3): enabling free space tree [ 450.568194][T11107] JBD2: Ignoring recovery information on journal [ 450.905031][ T5837] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 451.161578][T11107] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 451.198981][T11157] netlink: 'syz.4.1201': attribute type 1 has an invalid length. [ 451.258056][T11157] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1201'. [ 451.763723][ T5830] BTRFS info (device loop3): last unmount of filesystem 8ab70187-d9ab-4803-a35e-a186b461e331 [ 452.649812][T11179] loop4: detected capacity change from 0 to 1764 [ 452.772620][T10456] ocfs2: Unmounting device (7,5) on (node local) [ 452.808088][T11179] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 453.397744][T11179] 9p: Bad value for 'rfdno' [ 453.889676][T11200] wlan0 speed is unknown, defaulting to 1000 [ 454.855788][ T5987] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 454.987584][ T9] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 455.024733][ T5987] usb 6-1: Using ep0 maxpacket: 8 [ 455.043206][ T5987] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 455.064551][ T5987] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 455.085855][ T5987] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 455.104261][ T5987] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 455.119364][ T5987] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 455.136908][ T5987] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 455.149073][ T5987] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.247933][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 455.290193][ T9] usb 3-1: string descriptor 0 read error: -22 [ 455.368347][T11222] FAULT_INJECTION: forcing a failure. [ 455.368347][T11222] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 455.381548][T11222] CPU: 1 UID: 0 PID: 11222 Comm: syz.3.1216 Tainted: G L syzkaller #0 PREEMPT(full) [ 455.381578][T11222] Tainted: [L]=SOFTLOCKUP [ 455.381585][T11222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 455.381597][T11222] Call Trace: [ 455.381605][T11222] [ 455.381613][T11222] dump_stack_lvl+0xe8/0x150 [ 455.381647][T11222] should_fail_ex+0x412/0x560 [ 455.381679][T11222] _copy_from_user+0x2d/0xb0 [ 455.381701][T11222] ___sys_sendmsg+0x1c6/0x360 [ 455.381728][T11222] ? __pfx____sys_sendmsg+0x10/0x10 [ 455.381755][T11222] ? preempt_schedule_thunk+0x16/0x30 [ 455.381802][T11222] ? __fget_files+0x2a/0x420 [ 455.381826][T11222] ? __fget_files+0x3a0/0x420 [ 455.381859][T11222] __x64_sys_sendmsg+0x1bd/0x2a0 [ 455.381883][T11222] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 455.381912][T11222] ? __pfx_ksys_write+0x10/0x10 [ 455.381942][T11222] do_syscall_64+0x14d/0xf80 [ 455.381962][T11222] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.381980][T11222] ? clear_bhb_loop+0x40/0x90 [ 455.382002][T11222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.382021][T11222] RIP: 0033:0x7f201319c799 [ 455.382039][T11222] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 455.382055][T11222] RSP: 002b:00007f20113d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 455.382075][T11222] RAX: ffffffffffffffda RBX: 00007f2013416180 RCX: 00007f201319c799 [ 455.382089][T11222] RDX: 0000000004004090 RSI: 00002000000002c0 RDI: 0000000000000008 [ 455.382101][T11222] RBP: 00007f20113d5090 R08: 0000000000000000 R09: 0000000000000000 [ 455.382113][T11222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 455.382124][T11222] R13: 00007f2013416218 R14: 00007f2013416180 R15: 00007fffd942b028 [ 455.382153][T11222] [ 455.573085][ T9] usb 3-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40 [ 455.586765][ T5987] usb 6-1: usb_control_msg returned -32 [ 455.592928][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.618099][ T5987] usbtmc 6-1:16.0: can't read capabilities [ 455.637213][T11211] loop4: detected capacity change from 0 to 32768 [ 455.651458][T11211] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1212 (11211) [ 455.763307][T11211] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 455.776803][ T9] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 455.794066][T11211] BTRFS info (device loop4): using sha256 checksum algorithm [ 455.928095][T11211] BTRFS info (device loop4): enabling ssd optimizations [ 455.943964][T11238] usbtmc 6-1:16.0: usb_control_msg returned -32 [ 455.954445][ T5919] usb 6-1: USB disconnect, device number 3 [ 455.971266][T11211] BTRFS info (device loop4): turning on async discard [ 456.034209][T11211] BTRFS info (device loop4): enabling free space tree [ 456.412253][T11245] FAULT_INJECTION: forcing a failure. [ 456.412253][T11245] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 456.425949][T11245] CPU: 0 UID: 0 PID: 11245 Comm: syz.3.1218 Tainted: G L syzkaller #0 PREEMPT(full) [ 456.425979][T11245] Tainted: [L]=SOFTLOCKUP [ 456.425985][T11245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 456.425996][T11245] Call Trace: [ 456.426004][T11245] [ 456.426012][T11245] dump_stack_lvl+0xe8/0x150 [ 456.426046][T11245] should_fail_ex+0x412/0x560 [ 456.426078][T11245] _copy_to_user+0x31/0xb0 [ 456.426100][T11245] bpf_test_finish+0x191/0x6b0 [ 456.426137][T11245] ? __pfx_bpf_test_finish+0x10/0x10 [ 456.426167][T11245] ? bpf_test_timer_leave+0xbe/0x290 [ 456.426187][T11245] ? preempt_count_add+0x91/0x190 [ 456.426209][T11245] bpf_prog_test_run_flow_dissector+0x478/0x610 [ 456.426241][T11245] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 456.426264][T11245] ? __fget_files+0x2a/0x420 [ 456.426293][T11245] ? __fget_files+0x2a/0x420 [ 456.426322][T11245] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 456.426342][T11245] bpf_prog_test_run+0x2c7/0x340 [ 456.426380][T11245] __sys_bpf+0x643/0x950 [ 456.426404][T11245] ? __pfx___sys_bpf+0x10/0x10 [ 456.426446][T11245] ? rcu_is_watching+0x15/0xb0 [ 456.426474][T11245] __x64_sys_bpf+0x7c/0x90 [ 456.426495][T11245] do_syscall_64+0x14d/0xf80 [ 456.426518][T11245] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.426537][T11245] ? clear_bhb_loop+0x40/0x90 [ 456.426559][T11245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.426577][T11245] RIP: 0033:0x7f201319c799 [ 456.426594][T11245] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 456.426610][T11245] RSP: 002b:00007f20113f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 456.426630][T11245] RAX: ffffffffffffffda RBX: 00007f2013416090 RCX: 00007f201319c799 [ 456.426644][T11245] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a [ 456.426656][T11245] RBP: 00007f20113f6090 R08: 0000000000000000 R09: 0000000000000000 [ 456.426668][T11245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 456.426679][T11245] R13: 00007f2013416128 R14: 00007f2013416090 R15: 00007fffd942b028 [ 456.426708][T11245] [ 457.230390][T11256] loop3: detected capacity change from 0 to 32768 [ 457.241808][T11256] BTRFS info: device /dev/loop3 (7:3) using temp-fsid 22f732ad-6ca6-4142-ac95-a49bc5ac10f4 [ 457.252049][T11256] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1221 (11256) [ 457.267116][T11256] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 457.277524][T11256] BTRFS info (device loop3): using sha256 checksum algorithm [ 457.424980][T11256] BTRFS info (device loop3): enabling ssd optimizations [ 457.431970][T11256] BTRFS info (device loop3): turning on async discard [ 457.438811][T11256] BTRFS info (device loop3): enabling free space tree [ 457.447871][T11270] loop5: detected capacity change from 0 to 1764 [ 457.475247][T11270] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 457.494115][ T5840] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 457.679519][ T9] usb 3-1: USB disconnect, device number 21 [ 457.717677][T11276] 9p: Bad value for 'rfdno' [ 458.398117][ T5830] BTRFS info (device loop3): last unmount of filesystem 22f732ad-6ca6-4142-ac95-a49bc5ac10f4 [ 458.672513][T11288] loop5: detected capacity change from 0 to 128 [ 458.778102][T11288] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 458.829551][T11288] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 458.845533][T11288] UDF-fs: error (device loop5): udf_read_inode: (ino 87) failed !bh [ 458.896600][T11288] UDF-fs: error (device loop5): udf_fill_super: Error in udf_iget, block=3, partition=0 [ 459.729055][ T29] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 460.288811][ T29] usb 6-1: Using ep0 maxpacket: 32 [ 460.440288][ T29] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC4, changing to 0x84 [ 460.459758][ T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 460.515572][ T29] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16 [ 460.566234][ T29] usb 6-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3 [ 460.597362][ T29] usb 6-1: Product: syz [ 460.614300][ T29] usb 6-1: Manufacturer: syz [ 460.652817][ T29] usb 6-1: SerialNumber: syz [ 460.874873][ T29] usb 6-1: config 0 descriptor?? [ 461.177465][ T29] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 461.207858][T11297] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 461.420995][T11297] loop5: detected capacity change from 0 to 128 [ 461.498069][ T30] audit: type=1800 audit(1773407979.517:26): pid=11297 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1228" name="file1" dev="loop5" ino=1048796 res=0 errno=0 [ 461.590541][ T30] audit: type=1800 audit(1773407979.517:27): pid=11297 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1228" name="file1" dev="loop5" ino=1048796 res=0 errno=0 [ 461.784708][ T9] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 461.825451][ T5936] usb 6-1: USB disconnect, device number 4 [ 461.838629][ T13] usb 6-1: Failed to submit usb control message: -71 [ 461.858137][ T13] usb 6-1: unable to send the bmi data to the device: -71 [ 461.883518][ T13] usb 6-1: unable to get target info from device [ 461.904132][ T13] usb 6-1: could not get target info (-71) [ 461.928648][ T13] usb 6-1: could not probe fw (-71) [ 461.946297][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 461.970178][ T9] usb 4-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 462.011088][ T9] usb 4-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 462.044746][ T9] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 462.098142][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.172833][T11326] loop4: detected capacity change from 0 to 32768 [ 462.208051][T11326] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1233 (11326) [ 462.294483][T11326] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 462.329023][T11326] BTRFS info (device loop4): using sha256 checksum algorithm [ 462.540562][T11326] BTRFS info (device loop4): enabling ssd optimizations [ 462.584094][ T9] mcp2221 0003:04D8:00DD.000F: item fetching failed at offset 3/5 [ 462.598064][T11326] BTRFS info (device loop4): turning on async discard [ 462.606398][ T9] mcp2221 0003:04D8:00DD.000F: can't parse reports [ 462.606503][ T9] mcp2221 0003:04D8:00DD.000F: probe with driver mcp2221 failed with error -22 [ 462.638459][T11326] BTRFS info (device loop4): enabling free space tree [ 462.809844][T11352] tmpfs: Unknown parameter '' [ 462.903441][ T29] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 463.212771][T11328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 463.235791][T11328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 463.290801][ T5842] usb 4-1: USB disconnect, device number 27 [ 463.357984][T11352] loop5: detected capacity change from 0 to 8192 [ 463.415516][ T29] usb 3-1: Using ep0 maxpacket: 32 [ 463.433895][ T29] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC4, changing to 0x84 [ 463.455118][ T29] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 463.482154][ T29] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16 [ 463.501672][ T29] usb 3-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3 [ 463.521541][ T29] usb 3-1: Product: syz [ 463.527540][ T29] usb 3-1: Manufacturer: syz [ 463.537682][ T29] usb 3-1: SerialNumber: syz [ 463.545772][ T29] usb 3-1: config 0 descriptor?? [ 463.564713][ T29] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 463.766494][ T5840] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 463.789514][T11349] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 463.828859][T11349] loop2: detected capacity change from 0 to 128 [ 463.926757][ T30] audit: type=1800 audit(1773407981.947:28): pid=11349 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1237" name="file1" dev="loop2" ino=1048802 res=0 errno=0 [ 464.003109][ T30] audit: type=1800 audit(1773407981.947:29): pid=11349 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1237" name="file1" dev="loop2" ino=1048802 res=0 errno=0 [ 464.450468][ T9] usb 3-1: USB disconnect, device number 22 [ 464.468568][ T1320] usb 3-1: Failed to submit usb control message: -71 [ 464.489738][ T1320] usb 3-1: unable to send the bmi data to the device: -71 [ 464.504665][ T1320] usb 3-1: unable to get target info from device [ 464.516120][ T1320] usb 3-1: could not get target info (-71) [ 464.541198][ T1320] usb 3-1: could not probe fw (-71) [ 464.575646][T11373] loop4: detected capacity change from 0 to 128 [ 464.632534][T11373] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 464.669827][T11373] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 464.680057][T11373] UDF-fs: error (device loop4): udf_read_inode: (ino 87) failed !bh [ 464.698657][T11373] UDF-fs: error (device loop4): udf_fill_super: Error in udf_iget, block=3, partition=0 [ 464.872286][T11375] siw: device registration error -23 [ 465.794770][ T5987] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 465.991966][ T5987] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 466.015989][ T5987] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.036987][ T5987] usb 3-1: Product: syz [ 466.048399][ T5987] usb 3-1: Manufacturer: syz [ 466.062856][ T5987] usb 3-1: SerialNumber: syz [ 466.520387][T11401] loop4: detected capacity change from 0 to 32768 [ 466.536630][T11401] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1251 (11401) [ 466.561753][ T5987] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 466.607222][ T5987] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 466.646101][ T5987] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 466.687377][ T5987] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 466.717285][ T5987] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 466.728695][T11401] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 466.754127][T11401] BTRFS info (device loop4): using sha256 checksum algorithm [ 466.782762][ T5987] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -32 [ 466.912668][T11401] BTRFS info (device loop4): enabling ssd optimizations [ 466.930124][T11401] BTRFS info (device loop4): turning on async discard [ 466.949618][T11401] BTRFS info (device loop4): enabling free space tree [ 468.319922][ T5840] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 468.373497][T11399] Option 'V [ 468.373497][T11399] \9~d 'Ʋx?;rr' to dns_resolver key: bad/missing value [ 468.655650][ T5987] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 468.798385][ T9] usb 3-1: USB disconnect, device number 23 [ 468.834716][ T5987] usb 6-1: Using ep0 maxpacket: 8 [ 468.849432][ T5987] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 468.859344][ T5987] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 468.892231][ T5987] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 468.923005][ T5987] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 468.946486][ T5987] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 468.961804][ T5987] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 468.978798][ T5987] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.495889][ T5987] usb 6-1: usb_control_msg returned -32 [ 469.501817][ T5987] usbtmc 6-1:16.0: can't read capabilities [ 469.862624][T11460] usbtmc 6-1:16.0: usb_control_msg returned -32 [ 469.870330][ T5936] usb 6-1: USB disconnect, device number 5 [ 470.822119][T11467] wlan0 speed is unknown, defaulting to 1000 [ 471.153707][T11481] loop5: detected capacity change from 0 to 1024 [ 471.221960][T11481] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 471.257397][T11481] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1268'. [ 471.274370][T11481] EXT4-fs: Ignoring removed i_version option [ 471.281368][T11481] EXT4-fs (loop5): stripe (253) is not aligned with cluster size (16), stripe is disabled [ 471.307802][T11481] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 471.461082][T10456] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 471.577375][T11476] loop2: detected capacity change from 0 to 32768 [ 471.605911][T11476] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1267 (11476) [ 471.623786][T11474] loop3: detected capacity change from 0 to 32768 [ 471.700247][T11474] BTRFS info: device /dev/loop3 (7:3) using temp-fsid 197f2922-0f60-4df0-9673-a882311831e4 [ 471.724361][T11476] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 471.742585][T11474] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1266 (11474) [ 471.775403][T11476] BTRFS info (device loop2): using sha256 checksum algorithm [ 471.831738][T11474] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 471.873555][T11474] BTRFS info (device loop3): using sha256 checksum algorithm [ 471.970484][T11476] BTRFS info (device loop2): enabling ssd optimizations [ 472.200249][T11476] BTRFS info (device loop2): turning on async discard [ 472.338677][T11476] BTRFS info (device loop2): enabling free space tree [ 472.589871][T11474] BTRFS info (device loop3): rebuilding free space tree [ 472.986092][T11537] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1275'. [ 473.024141][T11474] BTRFS info (device loop3): disabling free space tree [ 473.398103][T11537] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1275'. [ 473.405614][T11474] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 473.454762][T11474] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 473.550222][ T5837] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 473.599593][T11474] BTRFS info (device loop3): setting nodatasum [ 473.631933][T11474] BTRFS info (device loop3): setting nodatacow [ 473.658100][T11474] BTRFS info (device loop3): turning off barriers [ 473.677418][T11474] BTRFS info (device loop3): turning on sync discard [ 473.721661][T11474] BTRFS info (device loop3): force clearing of disk cache [ 473.801711][T11549] x_tables: duplicate underflow at hook 1 [ 473.904778][ T5936] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 474.171344][T11554] xt_CT: You must specify a L4 protocol and not use inversions on it [ 474.314779][ T5936] usb 6-1: Using ep0 maxpacket: 8 [ 474.504304][ T5830] BTRFS info (device loop3): last unmount of filesystem 197f2922-0f60-4df0-9673-a882311831e4 [ 474.513633][ T5936] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 474.853803][ T5936] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 474.905476][ T5936] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 474.919929][ T5936] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 474.931241][ T5936] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 474.952169][ T5936] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 474.962257][ T5936] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.020806][T11557] netlink: 'syz.4.1281': attribute type 1 has an invalid length. [ 475.039135][T11557] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1281'. [ 475.204436][ T5936] usb 6-1: usb_control_msg returned -32 [ 475.245266][ T5936] usbtmc 6-1:16.0: can't read capabilities [ 476.098070][T11574] tmpfs: Unknown parameter '' [ 476.707961][T11585] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1282'. [ 476.717058][T11585] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 476.844317][T11574] loop2: detected capacity change from 0 to 8192 [ 476.944042][T11584] 9p: Bad value for 'rfdno' [ 477.135171][ T10] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 477.304652][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 477.318183][ T10] usb 5-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 477.489931][ T10] usb 5-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 477.494172][ T1172] usb 6-1: USB disconnect, device number 6 [ 477.528905][ T10] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 477.563225][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.582520][ T10] mcp2221 0003:04D8:00DD.0010: item fetching failed at offset 3/5 [ 478.627641][T11582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 478.643764][ T10] mcp2221 0003:04D8:00DD.0010: can't parse reports [ 478.663086][ T10] mcp2221 0003:04D8:00DD.0010: probe with driver mcp2221 failed with error -22 [ 478.666978][T11582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 478.757722][T11597] loop3: detected capacity change from 0 to 32768 [ 478.760944][ T10] usb 5-1: USB disconnect, device number 22 [ 478.790692][T11597] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1292 (11597) [ 478.812506][T11611] netlink: 'syz.2.1295': attribute type 1 has an invalid length. [ 478.827502][T11611] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1295'. [ 478.982059][T11597] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 478.993482][T11597] BTRFS info (device loop3): using sha256 checksum algorithm [ 479.089205][T11597] BTRFS info (device loop3): rebuilding free space tree [ 479.341534][T11597] BTRFS info (device loop3): disabling free space tree [ 479.359005][T11597] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 479.388655][T11597] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 479.405090][ T10] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 479.509933][T11597] BTRFS info (device loop3): setting nodatasum [ 479.517113][T11597] BTRFS info (device loop3): setting nodatacow [ 479.523436][T11597] BTRFS info (device loop3): turning off barriers [ 479.531606][T11597] BTRFS info (device loop3): turning on sync discard [ 479.539155][T11597] BTRFS info (device loop3): force clearing of disk cache [ 479.575527][ T5830] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 479.576756][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 479.596550][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 479.608555][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 479.623116][ T10] usb 3-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 479.633283][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.672230][ T5936] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 479.673812][ T10] usb 3-1: config 0 descriptor?? [ 479.744734][ T5987] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 479.839016][ T5936] usb 1-1: Using ep0 maxpacket: 32 [ 479.865160][ T5936] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC4, changing to 0x84 [ 479.877134][ T5936] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 479.920035][ T5936] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16 [ 479.947196][ T5936] usb 1-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3 [ 479.956494][ T5936] usb 1-1: Product: syz [ 479.966672][ T5987] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 479.982775][ T5987] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.984093][ T5936] usb 1-1: Manufacturer: syz [ 479.992348][ T10] usb 3-1: USB disconnect, device number 24 [ 479.997334][ T5936] usb 1-1: SerialNumber: syz [ 480.005928][ T5987] usb 5-1: Product: syz [ 480.009745][ T5936] usb 1-1: config 0 descriptor?? [ 480.068370][ T5987] usb 5-1: Manufacturer: syz [ 480.073159][ T5987] usb 5-1: SerialNumber: syz [ 480.081955][T11647] tmpfs: Bad value for 'nr_inodes' [ 480.439203][ T5936] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 480.588480][T11637] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 480.700700][T11647] loop3: detected capacity change from 0 to 8192 [ 480.854976][ T30] audit: type=1800 audit(1773407998.877:30): pid=11637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1299" name="file1" dev="tmpfs" ino=1603 res=0 errno=0 [ 481.084337][ T5987] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 481.105503][ C1] ------------[ cut here ]------------ [ 481.113542][ C1] ODEBUG: free active (active state 0) object: ffff88803220c890 object type: timer_list hint: rose_t0timer_expiry+0x0/0x560 [ 481.117832][ T5987] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 481.126588][ C1] WARNING: lib/debugobjects.c:632 at debug_check_no_obj_freed+0x405/0x550, CPU#1: udevd/5201 [ 481.126668][ C1] Modules linked in: [ 481.154635][ C1] CPU: 1 UID: 0 PID: 5201 Comm: udevd Tainted: G L syzkaller #0 PREEMPT(full) [ 481.165135][ C1] Tainted: [L]=SOFTLOCKUP [ 481.169471][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 481.169956][ T5987] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 481.179624][ C1] RIP: 0010:debug_check_no_obj_freed+0x44a/0x550 [ 481.179671][ C1] Code: 89 44 24 20 e8 37 9b 74 fd 48 8b 44 24 20 4c 8b 4d 00 4c 89 ef 48 c7 c6 20 66 28 8c 48 c7 c2 a0 6b 28 8c 8b 0c 24 4d 89 f8 50 <67> 48 0f b9 3a 48 83 c4 08 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc [ 481.179689][ C1] RSP: 0018:ffffc90000a08b48 EFLAGS: 00010246 [ 481.220576][ C1] RAX: ffffffff8a9b5250 RBX: ffffffff9a509d20 RCX: 0000000000000000 [ 481.228567][ C1] RDX: ffffffff8c286ba0 RSI: ffffffff8c286620 RDI: ffffffff901d3170 [ 481.236656][ C1] RBP: ffffffff8bcf4600 R08: ffff88803220c890 R09: ffffffff8bcf59e0 [ 481.244745][ C1] R10: dffffc0000000000 R11: ffffffff81b2fca0 R12: ffff88803220ca00 [ 481.252716][ C1] R13: ffffffff901d3170 R14: ffff88803220c000 R15: ffff88803220c890 [ 481.260713][ C1] FS: 00007f6c02f5f880(0000) GS:ffff88812553d000(0000) knlGS:0000000000000000 [ 481.269660][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 481.276283][ C1] CR2: 0000001b3160cff8 CR3: 000000007d10c000 CR4: 00000000003526f0 [ 481.284265][ C1] Call Trace: [ 481.287587][ C1] [ 481.290421][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 481.296095][ C1] kfree+0x13e/0x640 [ 481.299995][ C1] ? rose_timer_expiry+0x4cb/0x600 [ 481.305144][ C1] rose_timer_expiry+0x4cb/0x600 [ 481.310086][ C1] ? call_timer_fn+0x178/0x640 [ 481.314967][ C1] call_timer_fn+0x192/0x640 [ 481.319564][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 481.325070][ C1] ? call_timer_fn+0xd4/0x640 [ 481.329751][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 481.334886][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 481.340114][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 481.345592][ C1] __run_timer_base+0x652/0x8b0 [ 481.350455][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 481.355867][ C1] run_timer_softirq+0xb7/0x170 [ 481.360716][ C1] handle_softirqs+0x22a/0x870 [ 481.365500][ C1] ? __irq_exit_rcu+0xca/0x220 [ 481.370284][ C1] __irq_exit_rcu+0xca/0x220 [ 481.374910][ C1] irq_exit_rcu+0x9/0x30 [ 481.379143][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 481.384812][ C1] [ 481.387760][ C1] [ 481.390708][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 481.396812][ C1] RIP: 0010:unwind_next_frame+0x1ab8/0x23c0 [ 481.402731][ C1] Code: 00 48 c7 c2 80 a3 c9 8b e8 05 87 2b 00 48 c7 c7 20 f4 75 8e 4c 89 fe e8 76 6d 2b 00 e8 f1 1c 35 00 89 d8 48 81 c4 98 00 00 00 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 09 16 3f 0a cc 4c 8b 7c 24 50 eb [ 481.422477][ C1] RSP: 0018:ffffc90003057150 EFLAGS: 00000296 [ 481.428670][ C1] RAX: 0000000090d89101 RBX: ffffffff90d89101 RCX: 0000000000000046 [ 481.436682][ C1] RDX: 0000000000000001 RSI: ffffffff8e1877bd RDI: ffff88807cc95b80 [ 481.444698][ C1] RBP: dffffc0000000000 R08: ffffc90003057630 R09: 0000000000000000 [ 481.452684][ C1] R10: ffffc900030571d8 R11: fffff5200060ae3d R12: ffffc90003057640 [ 481.460698][ C1] R13: ffffc90003050000 R14: ffffc90003057188 R15: ffffffff81773bb5 [ 481.468706][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 481.474117][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 481.480290][ C1] arch_stack_walk+0x11b/0x150 [ 481.485071][ C1] ? tomoyo_check_open_permission+0x229/0x470 [ 481.491226][ C1] stack_trace_save+0xa9/0x100 [ 481.496003][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 481.501380][ C1] kasan_save_track+0x3e/0x80 [ 481.506085][ C1] ? kasan_save_track+0x3e/0x80 [ 481.510948][ C1] ? __kasan_kmalloc+0x93/0xb0 [ 481.515730][ C1] ? __kmalloc_noprof+0x35c/0x760 [ 481.520798][ C1] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 481.526684][ C1] __kasan_kmalloc+0x93/0xb0 [ 481.531282][ C1] __kmalloc_noprof+0x35c/0x760 [ 481.536153][ C1] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 481.542020][ C1] ? __kmalloc_noprof+0x1b8/0x760 [ 481.547080][ C1] tomoyo_realpath_from_path+0xe3/0x5d0 [ 481.552641][ C1] tomoyo_check_open_permission+0x229/0x470 [ 481.558583][ C1] ? tomoyo_check_open_permission+0x1d3/0x470 [ 481.564682][ C1] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 481.571177][ C1] ? mnt_get_write_access+0x66/0x280 [ 481.576519][ C1] security_file_open+0xa9/0x240 [ 481.581466][ C1] do_dentry_open+0x384/0x14e0 [ 481.586264][ C1] ? vfs_open+0x31/0x340 [ 481.590556][ C1] vfs_open+0x3b/0x340 [ 481.594678][ C1] ? path_openat+0x2df0/0x3860 [ 481.599451][ C1] path_openat+0x2e08/0x3860 [ 481.604244][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 481.609644][ C1] ? stack_depot_save_flags+0x33/0x810 [ 481.615129][ C1] ? __pfx_path_openat+0x10/0x10 [ 481.620072][ C1] ? __x64_sys_openat+0x138/0x170 [ 481.625126][ C1] ? do_syscall_64+0x14d/0xf80 [ 481.629973][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.636069][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 481.641033][ C1] do_file_open+0x23e/0x4a0 [ 481.645553][ C1] ? __pfx_do_file_open+0x10/0x10 [ 481.650609][ C1] ? _raw_spin_unlock+0x28/0x50 [ 481.655505][ C1] ? alloc_fd+0x64b/0x6c0 [ 481.659854][ C1] do_sys_openat2+0x113/0x200 [ 481.664533][ C1] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 481.670021][ C1] ? __pfx_do_sys_openat2+0x10/0x10 [ 481.675275][ C1] ? rcu_is_watching+0x15/0xb0 [ 481.680057][ C1] __x64_sys_openat+0x138/0x170 [ 481.684947][ C1] do_syscall_64+0x14d/0xf80 [ 481.689561][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.695650][ C1] ? clear_bhb_loop+0x40/0x90 [ 481.700335][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.706290][ C1] RIP: 0033:0x7f6c028a7407 [ 481.710718][ C1] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 481.730459][ C1] RSP: 002b:00007ffec37c2700 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 481.738952][ C1] RAX: ffffffffffffffda RBX: 00007f6c02f5f880 RCX: 00007f6c028a7407 [ 481.746944][ C1] RDX: 0000000000080141 RSI: 000055688d4f802e RDI: ffffffffffffff9c [ 481.754949][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 481.762939][ C1] R10: 00000000000001a4 R11: 0000000000000202 R12: 00000000ffffffff [ 481.770959][ C1] R13: 00000000ffffffff R14: ffffffffffffffff R15: 0000000000000000 [ 481.779043][ C1] [ 481.782069][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 481.789366][ C1] CPU: 1 UID: 0 PID: 5201 Comm: udevd Tainted: G L syzkaller #0 PREEMPT(full) [ 481.799773][ C1] Tainted: [L]=SOFTLOCKUP [ 481.804085][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 481.814248][ C1] Call Trace: [ 481.817634][ C1] [ 481.820472][ C1] vpanic+0x56c/0xa60 [ 481.824449][ C1] ? __pfx__printk+0x10/0x10 [ 481.829027][ C1] ? __pfx_vpanic+0x10/0x10 [ 481.833547][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 481.838826][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 481.844022][ C1] panic+0xc5/0xd0 [ 481.847739][ C1] ? __pfx_panic+0x10/0x10 [ 481.852158][ C1] __warn+0x315/0x4f0 [ 481.856230][ C1] ? debug_check_no_obj_freed+0x405/0x550 [ 481.861980][ C1] ? debug_check_no_obj_freed+0x405/0x550 [ 481.867709][ C1] __report_bug+0x29a/0x540 [ 481.872216][ C1] ? debug_check_no_obj_freed+0x405/0x550 [ 481.877932][ C1] ? __pfx___report_bug+0x10/0x10 [ 481.882954][ C1] ? debug_check_no_obj_freed+0x44f/0x550 [ 481.888667][ C1] ? debug_check_no_obj_freed+0x44a/0x550 [ 481.894386][ C1] ? pt_regs_val+0xc/0x70 [ 481.898710][ C1] report_bug_entry+0x19a/0x290 [ 481.903571][ C1] ? debug_check_no_obj_freed+0x44a/0x550 [ 481.909283][ C1] ? debug_check_no_obj_freed+0x44f/0x550 [ 481.915018][ C1] handle_bug+0xce/0x200 [ 481.919255][ C1] exc_invalid_op+0x1a/0x50 [ 481.923746][ C1] asm_exc_invalid_op+0x1a/0x20 [ 481.928585][ C1] RIP: 0010:debug_check_no_obj_freed+0x44a/0x550 [ 481.934917][ C1] Code: 89 44 24 20 e8 37 9b 74 fd 48 8b 44 24 20 4c 8b 4d 00 4c 89 ef 48 c7 c6 20 66 28 8c 48 c7 c2 a0 6b 28 8c 8b 0c 24 4d 89 f8 50 <67> 48 0f b9 3a 48 83 c4 08 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc [ 481.954517][ C1] RSP: 0018:ffffc90000a08b48 EFLAGS: 00010246 [ 481.960582][ C1] RAX: ffffffff8a9b5250 RBX: ffffffff9a509d20 RCX: 0000000000000000 [ 481.968552][ C1] RDX: ffffffff8c286ba0 RSI: ffffffff8c286620 RDI: ffffffff901d3170 [ 481.976544][ C1] RBP: ffffffff8bcf4600 R08: ffff88803220c890 R09: ffffffff8bcf59e0 [ 481.984511][ C1] R10: dffffc0000000000 R11: ffffffff81b2fca0 R12: ffff88803220ca00 [ 481.992480][ C1] R13: ffffffff901d3170 R14: ffff88803220c000 R15: ffff88803220c890 [ 482.000447][ C1] ? __pfx_timer_debug_hint+0x10/0x10 [ 482.005853][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 482.011509][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 482.017140][ C1] kfree+0x13e/0x640 [ 482.021032][ C1] ? rose_timer_expiry+0x4cb/0x600 [ 482.026139][ C1] rose_timer_expiry+0x4cb/0x600 [ 482.031065][ C1] ? call_timer_fn+0x178/0x640 [ 482.035831][ C1] call_timer_fn+0x192/0x640 [ 482.040416][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 482.045870][ C1] ? call_timer_fn+0xd4/0x640 [ 482.050550][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 482.055660][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 482.060854][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 482.066331][ C1] __run_timer_base+0x652/0x8b0 [ 482.071186][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 482.076559][ C1] run_timer_softirq+0xb7/0x170 [ 482.081406][ C1] handle_softirqs+0x22a/0x870 [ 482.086172][ C1] ? __irq_exit_rcu+0xca/0x220 [ 482.090925][ C1] __irq_exit_rcu+0xca/0x220 [ 482.095501][ C1] irq_exit_rcu+0x9/0x30 [ 482.099833][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 482.105459][ C1] [ 482.108385][ C1] [ 482.111299][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 482.117270][ C1] RIP: 0010:unwind_next_frame+0x1ab8/0x23c0 [ 482.123152][ C1] Code: 00 48 c7 c2 80 a3 c9 8b e8 05 87 2b 00 48 c7 c7 20 f4 75 8e 4c 89 fe e8 76 6d 2b 00 e8 f1 1c 35 00 89 d8 48 81 c4 98 00 00 00 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 09 16 3f 0a cc 4c 8b 7c 24 50 eb [ 482.142745][ C1] RSP: 0018:ffffc90003057150 EFLAGS: 00000296 [ 482.148812][ C1] RAX: 0000000090d89101 RBX: ffffffff90d89101 RCX: 0000000000000046 [ 482.156776][ C1] RDX: 0000000000000001 RSI: ffffffff8e1877bd RDI: ffff88807cc95b80 [ 482.164749][ C1] RBP: dffffc0000000000 R08: ffffc90003057630 R09: 0000000000000000 [ 482.172716][ C1] R10: ffffc900030571d8 R11: fffff5200060ae3d R12: ffffc90003057640 [ 482.180676][ C1] R13: ffffc90003050000 R14: ffffc90003057188 R15: ffffffff81773bb5 [ 482.188653][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 482.193788][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 482.199949][ C1] arch_stack_walk+0x11b/0x150 [ 482.204712][ C1] ? tomoyo_check_open_permission+0x229/0x470 [ 482.210804][ C1] stack_trace_save+0xa9/0x100 [ 482.215557][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 482.220919][ C1] kasan_save_track+0x3e/0x80 [ 482.225593][ C1] ? kasan_save_track+0x3e/0x80 [ 482.230439][ C1] ? __kasan_kmalloc+0x93/0xb0 [ 482.235273][ C1] ? __kmalloc_noprof+0x35c/0x760 [ 482.240281][ C1] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 482.246014][ C1] __kasan_kmalloc+0x93/0xb0 [ 482.250592][ C1] __kmalloc_noprof+0x35c/0x760 [ 482.255432][ C1] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 482.261248][ C1] ? __kmalloc_noprof+0x1b8/0x760 [ 482.266353][ C1] tomoyo_realpath_from_path+0xe3/0x5d0 [ 482.271905][ C1] tomoyo_check_open_permission+0x229/0x470 [ 482.277910][ C1] ? tomoyo_check_open_permission+0x1d3/0x470 [ 482.283988][ C1] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 482.290413][ C1] ? mnt_get_write_access+0x66/0x280 [ 482.295805][ C1] security_file_open+0xa9/0x240 [ 482.300737][ C1] do_dentry_open+0x384/0x14e0 [ 482.305492][ C1] ? vfs_open+0x31/0x340 [ 482.309738][ C1] vfs_open+0x3b/0x340 [ 482.313797][ C1] ? path_openat+0x2df0/0x3860 [ 482.318651][ C1] path_openat+0x2e08/0x3860 [ 482.323233][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 482.328614][ C1] ? stack_depot_save_flags+0x33/0x810 [ 482.334093][ C1] ? __pfx_path_openat+0x10/0x10 [ 482.339034][ C1] ? __x64_sys_openat+0x138/0x170 [ 482.344042][ C1] ? do_syscall_64+0x14d/0xf80 [ 482.348791][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.354858][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 482.359795][ C1] do_file_open+0x23e/0x4a0 [ 482.364286][ C1] ? __pfx_do_file_open+0x10/0x10 [ 482.369439][ C1] ? _raw_spin_unlock+0x28/0x50 [ 482.374288][ C1] ? alloc_fd+0x64b/0x6c0 [ 482.378626][ C1] do_sys_openat2+0x113/0x200 [ 482.383294][ C1] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 482.388744][ C1] ? __pfx_do_sys_openat2+0x10/0x10 [ 482.393942][ C1] ? rcu_is_watching+0x15/0xb0 [ 482.398699][ C1] __x64_sys_openat+0x138/0x170 [ 482.403560][ C1] do_syscall_64+0x14d/0xf80 [ 482.408143][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.414197][ C1] ? clear_bhb_loop+0x40/0x90 [ 482.418868][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.424755][ C1] RIP: 0033:0x7f6c028a7407 [ 482.429177][ C1] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 482.448794][ C1] RSP: 002b:00007ffec37c2700 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 482.457211][ C1] RAX: ffffffffffffffda RBX: 00007f6c02f5f880 RCX: 00007f6c028a7407 [ 482.465268][ C1] RDX: 0000000000080141 RSI: 000055688d4f802e RDI: ffffffffffffff9c [ 482.473293][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 482.481253][ C1] R10: 00000000000001a4 R11: 0000000000000202 R12: 00000000ffffffff [ 482.489216][ C1] R13: 00000000ffffffff R14: ffffffffffffffff R15: 0000000000000000 [ 482.497363][ C1] [ 482.500757][ C1] Kernel Offset: disabled [ 482.505076][ C1] Rebooting in 86400 seconds..