last executing test programs: 15m40.470417486s ago: executing program 4 (id=182): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e9782bbd7000ffdbdf250a0000000000000008000500", @ANYRES32=r3], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x192}}, 0x20}}, 0x0) 15m40.1643877s ago: executing program 4 (id=185): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x20a02, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x20201) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x5, 0x0, 0x6}}}}}}, 0x0) syz_emit_ethernet(0x42, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0xc2, 0x0, 0x0, 0x5, {[@sack={0x5, 0xa, [0xfd, 0x4000]}, @fastopen={0x22, 0x2}]}}}}}}}, 0x0) ioctl$TUNSETDEBUG(r1, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETLINK(r1, 0x400454cd, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000080)={0x84, @local, 0x15, 0x3, 'sh\x00', 0x28, 0x5, 0x72}, 0x2c) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x24, r5, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x24}}, 0x0) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000003c0)={0x0, 0x1c, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x1c}}, 0x0) 15m38.014185512s ago: executing program 4 (id=194): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000009440)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x7, @initdev={0xfe, 0x88, '\x00', 0x4, 0x0}, 0x6}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000040)='H', 0x1}], 0x1}}, {{&(0x7f0000000440)={0xa, 0x4e23, 0x401, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5}, 0x1c, 0x0}}], 0x2, 0x48000) syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa00010, &(0x7f0000000080)=ANY=[@ANYBLOB='iocharset=iso8859-1,nostrict,iocharset=default,anchor=00000000000000000145,gid=', @ANYRESDEC=0x0, @ANYBLOB="2c706172746974696f6e3d30303030303030303030303030303030303030322c756e64656c6574652c706172746974696f6e3d30303030303030303030303030303030303030312c756e686964652c001e066340c987db28915dbe6892bc3dce41ae76eaf528dc889820692d753009e30e567403a6c30e933de68a0a923eec1dccf226b58adb7d968bafe76628bceade8672fb893f87dc88", @ANYRES8=0x0, @ANYRESOCT=0x0, @ANYRES8], 0x1, 0xc5a, &(0x7f0000001040)="$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") openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000080)=0x8001, 0x4) 15m35.355606757s ago: executing program 4 (id=201): r0 = socket(0x400000000010, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb7", 0x85}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de38327e", 0x9e}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac", 0x57}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede3", 0x91}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c617c69458d721eb85d0e5372751cd23cc88571", 0x9c}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e", 0x73}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede48830ca6e", 0x71}], 0x2, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x78}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e00)="abc662f2a7dc713d226b612e712df36db5547daf508fb74a679224eba0fe5f05c53081ff6ebac83c264c6deeec6d4546fe7d00337f488ecee46577d71b39e24cdef94f1629", 0x45}], 0x1}}], 0x3, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 15m34.422697528s ago: executing program 4 (id=204): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x20a02, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x20201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) syz_emit_ethernet(0x1036, &(0x7f00000004c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @void, {@ipv4={0x800, @icmp={{0x8, 0x4, 0x0, 0x0, 0x1028, 0x66, 0x0, 0x89, 0x1, 0x0, @broadcast, @rand_addr=0x64010102, {[@timestamp={0x44, 0x4, 0xbf, 0x0, 0x9}, @ra={0x94, 0x4}, @end]}}, @echo={0x8, 0x0, 0x0, 0x9, 0x4, "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"}}}}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x3, &(0x7f0000000340)) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000400)={0x0, @reserved}) syz_emit_ethernet(0x42, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0xc2, 0x0, 0x0, 0x5, {[@sack={0x5, 0xa, [0xfd, 0x4000]}, @fastopen={0x22, 0x2}]}}}}}}}, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETLINK(r0, 0x400454cd, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000080)={0x84, @local, 0x15, 0x3, 'sh\x00', 0x28, 0x5, 0x72}, 0x2c) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f00000000c0)=@ethtool_link_settings={0x4d, 0x10001, 0x7, 0x7, 0x82, 0x8, 0xfa, 0x40, 0xca, 0x5, [0x6, 0x0, 0x4b, 0x5f15, 0x0, 0x188, 0xffffffff, 0x2], [0xffffffff]}}) 15m32.747156061s ago: executing program 4 (id=208): mkdirat(0xffffffffffffff9c, 0x0, 0x22) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000025300)=""/102392, 0x18ff8) getgroups(0x5, &(0x7f0000008500)=[0x0, 0x0, 0x0, 0x0, 0x0]) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000001100)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000500000002000000000000080000000000304f3e"], 0x0, 0x29, 0x0, 0x1}, 0x28) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000086c0)={{{@in6=@mcast1, @in=@multicast1}}, {{@in6=@local}, 0x0, @in6=@initdev}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000008ac0)={{0x1, 0x1, 0x18, r0, {0x0, 0xffffffffffffffff}}, './file0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000002e00090027bd7000000000000400000008000c00", @ANYRES32=0x0, @ANYBLOB="0c0016"], 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b48013d030100000000000702000000b00000bc26100000000000bf67200000000000160200000fff07006702000007000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) 15m29.956215929s ago: executing program 2 (id=217): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb7", 0x85}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de38327e", 0x9e}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac", 0x57}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede33131", 0x93}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d531", 0x4e}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841", 0x3a}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede48830ca6e", 0x71}], 0x2, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x90}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e00)="abc662f2a7dc713d226b612e712df36db5547daf508fb74a679224eba0fe5f05c53081ff6ebac83c264c6deeec6d4546fe7d00337f488ecee46577d71b39e24cdef94f16", 0x44}], 0x1}}], 0x3, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 15m29.095245316s ago: executing program 2 (id=221): syz_usb_connect(0x6, 0x3d, &(0x7f0000000240)=ANY=[], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x80000000}) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f00000002c0)='hfsplus\x00', 0x800000, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x52, r3, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0xfd53}}, 0x0) epoll_wait(r1, &(0x7f0000000280)=[{}], 0x1, 0x7) 15m26.355657982s ago: executing program 2 (id=227): openat$procfs(0xffffffffffffff9c, &(0x7f0000002200)='/proc/diskstats\x00', 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0xab) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x40004) r1 = socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) ptrace$ARCH_MAP_VDSO_X32(0x1e, 0x0, 0x2, 0x2001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) unshare(0x8000000) request_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)='\x00', 0xfffffffffffffffc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, &(0x7f0000000400)) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRESDEC=r4], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@float={0x7, 0x0, 0x0, 0x10, 0x4}]}, {0x0, [0x30, 0x0, 0x5f, 0x5f, 0x0, 0x30, 0x5f]}}, &(0x7f0000000200)=""/128, 0x2d, 0x80, 0x1, 0x5}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{}, &(0x7f0000000280), 0x0}, 0x20) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2000, 0x0) 15m22.698287442s ago: executing program 2 (id=235): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x82, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x4, &(0x7f0000000800), 0x1, 0x76a, &(0x7f0000001800)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000680), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@volatile}]}) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@generic={&(0x7f00000001c0)='./file0/../file0\x00'}, 0x18) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80, 0x0) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r1, 0x40786e88, &(0x7f0000000640)={{&(0x7f0000000280)=[{0x9, 0x1, 0xa45b, {0x0, 0xfb}, 0x100000000}], 0x1, 0x40, 0xd, 0xe2}, {0x0, 0x0, 0x10, 0x20c, 0xfffffffffffffff7}, {0x0, 0x0, 0x8, 0x4, 0x2}, {0x0, 0x0, 0x28, 0x2, 0xffffffffffffff2d}, {&(0x7f00000003c0)=[0x9], 0x1, 0x8, 0x98f, 0xffff}}) move_mount(0xffffffffffffffff, &(0x7f0000000400)='./file0/../file0\x00', r1, &(0x7f0000000440)='./file0\x00', 0x120) syz_open_dev$MSR(&(0x7f0000000180), 0xfff, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x2, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'ipvlan0\x00', &(0x7f0000000000)=@ethtool_rxnfc={0x2a, 0x2, 0x4, {0xc, @ah_ip6_spec={@local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xb, 0xbe}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x4, 0x63, [0x9, 0x1]}, @udp_ip6_spec={@private1={0xfc, 0x1, '\x00', 0x1}, @private0, 0x4e1e, 0x4e23, 0x9}, {0x0, @random='IGVW~W', 0x5, 0xe0, [0x8]}, 0x4, 0x95ca}, 0x3, [0xc7c, 0x0, 0x9]}}) 15m21.400563273s ago: executing program 2 (id=240): prctl$PR_SET_MM(0x23, 0x6, &(0x7f000005b000/0x2000)=nil) 15m17.369352843s ago: executing program 32 (id=208): mkdirat(0xffffffffffffff9c, 0x0, 0x22) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000025300)=""/102392, 0x18ff8) getgroups(0x5, &(0x7f0000008500)=[0x0, 0x0, 0x0, 0x0, 0x0]) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000001100)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000500000002000000000000080000000000304f3e"], 0x0, 0x29, 0x0, 0x1}, 0x28) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000086c0)={{{@in6=@mcast1, @in=@multicast1}}, {{@in6=@local}, 0x0, @in6=@initdev}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000008ac0)={{0x1, 0x1, 0x18, r0, {0x0, 0xffffffffffffffff}}, './file0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000002e00090027bd7000000000000400000008000c00", @ANYRES32=0x0, @ANYBLOB="0c0016"], 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b48013d030100000000000702000000b00000bc26100000000000bf67200000000000160200000fff07006702000007000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) 15m12.912086427s ago: executing program 2 (id=253): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40), 0xfc, 0x586, &(0x7f0000000900)="$eJzs3V1rHNUbAPBnNpv09f9vCqWoF1LohZXaTZP4UkGwXooWC3pfl2QbSjbdkt2UJhZsBXvjjRRBxIL4Abz3svgF/BQFLRQpQS9EWJnNbLpNdvO6dbfZ3w+mOWdnpmeenHkm5+zsMgEMrBPpP7mIFyPi6yTiSMu6fGQrT6xst/z45lS6JFGvf/xHEkn2WnP7JPt5KKu8EBG/fBlxOre+3eri0myxXC7NZ/Wx2ty1seri0pkrc8WZ0kzp6sTk5Lk3JifefuvNXUQ39FTt1Yt/fffR/ffPfXVy+dufHh69m8T5OJyta41jF261Vk4U/8lKw3F+zYbjXWisnyS9PgB2ZCjL8+FIrwFHYijLemDv+zwi6sCASuQ/DKjmOKA5t+/SPPi58ei9lQlQI/aR1vjzK++NxP7G3OjgcvLUzCid7452of20jZ9/v3c3XWLj9yEObFIH2JZbtyPibD6//vqfZNe/nTvbePN4Y2vbGLS/P9BL99Pxz2vtxn+51fFPtBn/HGqTuzuxef7nHnahmY7S8d87bce/q5eu0aGs9r/GmG84uXylXDobEf9vjAzrnW99fDHS+HFu+UG90yat4790SdtvjgWz43iY3/f0PtPFWjEiRnYTd9Oj2xEv5dvFn6z2f9Km/9Pfx8UttnG8dO/lTus2j//Zqv8Y8Urb/n/SrcnG9yfHGufDWPOsWO/PO8d/7dR+r+NP+//gxvGPJq33a6vbb+OH/X+XOq3b6fk/knzSKDeT4EaxVpsfjxhJPlz/+sSTfZv15vZp/KdObnz9a3f+p5OvT7cY/51jdzpu2g/9P92p/1dmmGv6f/uFBx989v3O40/7//VG6VT2Snb9ay87V7Z6gF34FQIAAAAAAEDfyEXE4UhyhdVyLlcorHy+41gczJUr1drpy5WFq9PR+K7saAznmne6j7R8HmI8+zxssz6xpj4ZEUcj4puhA416YapSnu518AAAAAAAAAAAAAAAAAAAANAnDnX4/n/qt6FeHx3wzDUebLCv10cB9MKmj/xf+5SmrT75B+h7m+Y/sGfJfxhc8h8Gl/yHwSX/YXDJfxhc8h8Gl/wHAAAAAAAAAAAAAAAAAAAAAAAAAACArrp44UK61Jcf35xK69PXFxdmK9fPTJeqs4W5hanCVGX+WmGmUpkplwpTlbnN/r9ypXJtfCIWbozVStXaWHVx6dJcZeFq7dKVueJM6VJp+D+JCgAAAAAAAAAAAAAAAAAAAJ4v1cWl2WK5XJpX6Fh4N/riMOrJswtwxY52z++q9VxE9Ecv793C7ax7t7dXDy9KAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDGvwEAAP//hkUw0Q==") (async) syz_usb_connect(0x0, 0x0, 0x0, 0x0) (async) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) (async) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)=0xf7e) (async) syz_usb_connect$uac3(0x2, 0x116, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x582, 0xc, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x104, 0x3, 0x1, 0x4, 0x80, 0xf8, {0x8, 0xb, 0x1, 0x0, 0x1, 0x26, 0x30, 0x9}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xc, 0x34, 0x4}, [@power_domain={0xd, 0x24, 0x10, 0x6, 0x9, 0x7, 0x5, "42f1cdcf"}, @extension_unit={0x9, 0x24, 0xa, 0x5, 0x3, [0x1]}, @input_terminal={0x14, 0x24, 0x2, 0x2, 0x202, 0x4, 0xf7, 0x7, 0xff, 0xffbc, 0x8000}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xe, 0xff64, 0x4, 0x2}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x1, 0xe5, 0x0, 0x6, 0x84}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x9, 0xb, 0x3, 0x6, 0x3}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x6, 0xb, 0x80, 0x5, 0xa}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xd0, 0x7, 0x8, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0xeb, 0x5, 0xd9, {0xa, 0x25, 0x25, 0x7, 0x3, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x3, 0x1, 0x3b, 0x5, "460c1478b1fbcb"}, @as_header={0x17, 0x24, 0x1, 0x3, 0xbc, 0xfffd, 0x4, 0xa5, 0x8, 0x9, 0xb}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x9, 0x4, 0x7f, 0xff, "4114fb", "57dc13"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0x7, 0x3, 0x6}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x2, 0x3, 0xc7, {0xa, 0x25, 0x25, 0x4, 0xd, 0xf}}}}}}}}]}}, &(0x7f00000015c0)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x310, 0x6, 0x1, 0x0, 0x20, 0xfd}, 0x1d, &(0x7f00000012c0)={0x5, 0xf, 0x1d, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xe, 0x2, 0x9, 0x1000}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x0, 0x4, 0x6}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x3, 0x8, 0x2}]}, 0x4, [{0xfa, &(0x7f0000001300)=@string={0xfa, 0x3, "12537e6b227ffeed6cd39fd7625760715e01510a188441f8fb9279595d66791166183b3f62ec15ffc819792431b619b84ed0d39c56b4a745508a13ff4924f6d4398f99dea657292451a310f233a6e78e686abf77ec36459dc850041eb55b773c67f06a1d99ed761592f1d5f2ea369f4feb52b6f1c25cea4805cf23ff80a2840fb83cb9b290a5de54b4f43e1ef76fcd0ca4282e5e40f25ff93064367a7e78a81e4eaf494606cb2b0622cc41a47a7c038d3f4d5806946fbebe033a30aa925a6e3840db1b20613c808ee20257a1088802c771e4d26da181913c7e78cf053ac4ad3e438a2ec12a27960fee8e61d071cd01b0ac0274e3b59bb8c0"}}, {0x4, &(0x7f0000001400)=@lang_id={0x4, 0x3, 0x400a}}, {0xec, &(0x7f0000001440)=@string={0xec, 0x3, "1e95143b94b4ff655b20a8f265ced3d64cf386c8cc2cc3bf4c6b9c40e984d712e817f9fa55746b6fa605e71ed84a108fe9a456dde7c0e73ce7a46286ba62ec91a56f3e3bbb1dd8335a0c5d9ca8cf045ff3e7a358f6d5e0c6f3b6d1476f1b75c04571d1bdc0300ed0044c0e62fc7bc5872bdf200dc24cc555bc34c274172e64ae0b9eff7eac68fefd973adf3ad849afc8c68d791b1e1ff6083a81ce7324e9b816427698b3157811a827c5cf050d65aff727492d8de214387152739bf1c63b0399799cee12e73308a2eec44708fa8cc4244c05f9555881f3ae6a06af3ba03a6505c86c1f6ec4a42014b5dc"}}, {0x72, &(0x7f0000001540)=@string={0x72, 0x3, "d9b9805ae884957da084ec78fe650e6c6776dba42d9cdf91ea9aa222c02edcabd936bcb6eac373f2e7fbfaeb0c423e04706b98d14125d4cac1985cb2e0ee60573dde4d969a22f14bdc0616929ad6bb2180481d365342ebb9ab6eb5beadfc1a2a71c6eb15c4703a7a681e4bbfb7affc4e"}}]}) (async) read$dsp(r0, &(0x7f00000002c0)=""/4096, 0x1000) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) chdir(&(0x7f0000000040)='./file0\x00') (async) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) lseek(r1, 0x200, 0x1) getdents64(r1, 0x0, 0x0) 15m12.066237588s ago: executing program 33 (id=253): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40), 0xfc, 0x586, &(0x7f0000000900)="$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") (async) syz_usb_connect(0x0, 0x0, 0x0, 0x0) (async) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) (async) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)=0xf7e) (async) syz_usb_connect$uac3(0x2, 0x116, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x582, 0xc, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x104, 0x3, 0x1, 0x4, 0x80, 0xf8, {0x8, 0xb, 0x1, 0x0, 0x1, 0x26, 0x30, 0x9}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xc, 0x34, 0x4}, [@power_domain={0xd, 0x24, 0x10, 0x6, 0x9, 0x7, 0x5, "42f1cdcf"}, @extension_unit={0x9, 0x24, 0xa, 0x5, 0x3, [0x1]}, @input_terminal={0x14, 0x24, 0x2, 0x2, 0x202, 0x4, 0xf7, 0x7, 0xff, 0xffbc, 0x8000}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xe, 0xff64, 0x4, 0x2}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x1, 0xe5, 0x0, 0x6, 0x84}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x9, 0xb, 0x3, 0x6, 0x3}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x6, 0xb, 0x80, 0x5, 0xa}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xd0, 0x7, 0x8, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0xeb, 0x5, 0xd9, {0xa, 0x25, 0x25, 0x7, 0x3, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x3, 0x1, 0x3b, 0x5, "460c1478b1fbcb"}, @as_header={0x17, 0x24, 0x1, 0x3, 0xbc, 0xfffd, 0x4, 0xa5, 0x8, 0x9, 0xb}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x9, 0x4, 0x7f, 0xff, "4114fb", "57dc13"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0x7, 0x3, 0x6}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x2, 0x3, 0xc7, {0xa, 0x25, 0x25, 0x4, 0xd, 0xf}}}}}}}}]}}, &(0x7f00000015c0)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x310, 0x6, 0x1, 0x0, 0x20, 0xfd}, 0x1d, &(0x7f00000012c0)={0x5, 0xf, 0x1d, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xe, 0x2, 0x9, 0x1000}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x0, 0x4, 0x6}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x3, 0x8, 0x2}]}, 0x4, [{0xfa, &(0x7f0000001300)=@string={0xfa, 0x3, "12537e6b227ffeed6cd39fd7625760715e01510a188441f8fb9279595d66791166183b3f62ec15ffc819792431b619b84ed0d39c56b4a745508a13ff4924f6d4398f99dea657292451a310f233a6e78e686abf77ec36459dc850041eb55b773c67f06a1d99ed761592f1d5f2ea369f4feb52b6f1c25cea4805cf23ff80a2840fb83cb9b290a5de54b4f43e1ef76fcd0ca4282e5e40f25ff93064367a7e78a81e4eaf494606cb2b0622cc41a47a7c038d3f4d5806946fbebe033a30aa925a6e3840db1b20613c808ee20257a1088802c771e4d26da181913c7e78cf053ac4ad3e438a2ec12a27960fee8e61d071cd01b0ac0274e3b59bb8c0"}}, {0x4, &(0x7f0000001400)=@lang_id={0x4, 0x3, 0x400a}}, {0xec, &(0x7f0000001440)=@string={0xec, 0x3, "1e95143b94b4ff655b20a8f265ced3d64cf386c8cc2cc3bf4c6b9c40e984d712e817f9fa55746b6fa605e71ed84a108fe9a456dde7c0e73ce7a46286ba62ec91a56f3e3bbb1dd8335a0c5d9ca8cf045ff3e7a358f6d5e0c6f3b6d1476f1b75c04571d1bdc0300ed0044c0e62fc7bc5872bdf200dc24cc555bc34c274172e64ae0b9eff7eac68fefd973adf3ad849afc8c68d791b1e1ff6083a81ce7324e9b816427698b3157811a827c5cf050d65aff727492d8de214387152739bf1c63b0399799cee12e73308a2eec44708fa8cc4244c05f9555881f3ae6a06af3ba03a6505c86c1f6ec4a42014b5dc"}}, {0x72, &(0x7f0000001540)=@string={0x72, 0x3, "d9b9805ae884957da084ec78fe650e6c6776dba42d9cdf91ea9aa222c02edcabd936bcb6eac373f2e7fbfaeb0c423e04706b98d14125d4cac1985cb2e0ee60573dde4d969a22f14bdc0616929ad6bb2180481d365342ebb9ab6eb5beadfc1a2a71c6eb15c4703a7a681e4bbfb7affc4e"}}]}) (async) read$dsp(r0, &(0x7f00000002c0)=""/4096, 0x1000) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) chdir(&(0x7f0000000040)='./file0\x00') (async) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) lseek(r1, 0x200, 0x1) getdents64(r1, 0x0, 0x0) 18.936686647s ago: executing program 0 (id=2654): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2800000, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f000000cf00)="$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") sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x880}, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x1800, 0x0) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000080)=0x7f) r3 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x18bb41, 0x51) ioctl$F2FS_IOC_SET_PIN_FILE(r3, 0x4004f50d, &(0x7f0000000340)=0xdffefefc) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x9, 0x800800}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x20a02, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x20201) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa32080045000028006700000206907864010001ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5cc9000590780006"], 0x0) syz_emit_ethernet(0x42, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0xc2, 0x0, 0x0, 0x5, {[@sack={0x5, 0xa, [0xfd, 0x4000]}, @fastopen={0x22, 0x2}]}}}}}}}, 0x0) ioctl$TUNSETDEBUG(r4, 0x400454c9, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) 16.731571562s ago: executing program 3 (id=2658): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xdafbe5d6891b6e0) r0 = inotify_init1(0x80000) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x20000000) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000001ac0)='./file0\x00', 0x0, &(0x7f0000001a80), 0x3, 0x5bc, &(0x7f0000001440)="$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") semctl$IPC_RMID(0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10000, &(0x7f0000002380)=ANY=[@ANYBLOB='nodots(sx=', @ANYRESHEX=0xee00, @ANYBLOB=',check=normal,fmask=00000000000000000000002,sys_immutable,nodots,dots,nodots,nodots,nodots,fmask=00000000000000000177777,dots,quiet,nodots,nodots,check=relaxed,nodots,umask=00000000000000000076645,nodots,nodots,nfs=stale_rw,nodots,smackfsfloor=fmask,defcontext=unconfined_u,permit_directio,permit_directio,fscontext=staff_u,seclabel,euid>', @ANYRESDEC, @ANYRES64], 0xff, 0x1f5, &(0x7f0000000600)="$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") flock(0xffffffffffffffff, 0x6) unlinkat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x200) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0x3) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000010180)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0xa, 0x4, 0x2, 0x4, 0x4, {0x3, 0x0, 0x101, 0x9, 0x5, 0xffffffff}, {0x3, 0x2, 0x3ff, 0x2, 0x5}, 0x2, 0x3, 0xeea4}}, @TCA_POLICE_RATE={0x404, 0x2, [0x100000, 0x2, 0x0, 0x5, 0x7, 0x6, 0x5, 0x5, 0x4, 0x10000, 0xfffffff1, 0x800, 0x1, 0x1, 0x1, 0x4, 0xffffffda, 0x8, 0x2, 0x76ccfa5f, 0x5, 0x8, 0x80, 0x451, 0x2, 0x1, 0x6, 0x8, 0xfff, 0x100, 0x8, 0x1, 0x9, 0x2, 0xa, 0x1, 0x8, 0x7, 0x5, 0x8, 0x6, 0xfff, 0x9, 0x9, 0x4, 0x200, 0x8000, 0xffffff01, 0x1, 0x80, 0xa8, 0x7f, 0x84, 0x6, 0x637, 0x8, 0xfb, 0x9, 0x97, 0x6, 0x791a, 0x9, 0x3, 0x7, 0xab5, 0x0, 0x66ab6d08, 0xd, 0x8, 0x17ffe, 0x2, 0xfffffff7, 0x9, 0x1eb, 0x7, 0xd43, 0x9, 0x6, 0x7, 0x7, 0x4, 0x4, 0x5a8b, 0x6f, 0x3f, 0x6, 0x7, 0x4, 0x15, 0x7f, 0xfff, 0xb, 0x2, 0x10001, 0xffffffff, 0x3, 0xaa2, 0x400, 0x40, 0x1, 0x0, 0x80, 0x44f0, 0x1, 0xffff, 0xf, 0x3f0f, 0x9, 0x7, 0x33f6, 0x6, 0x200, 0x100, 0x1ea, 0x1, 0x7ff, 0x7ff, 0x4, 0x49, 0x80000001, 0x7, 0x4, 0x5, 0x1, 0x10000000, 0x8, 0x1, 0x800, 0x40, 0x6, 0x400, 0x2, 0xb7c, 0xfffffffc, 0x3, 0x9, 0x3, 0x6, 0x1ff, 0x1ff, 0x8, 0x2, 0x15, 0xffffffff, 0x9, 0x6, 0x5, 0x7ff, 0x8, 0x2, 0x9, 0xfffffffd, 0x7, 0x6, 0x1, 0x3, 0x9, 0x7fff, 0x1, 0x5, 0x7, 0x10001, 0x2, 0x8, 0x5, 0x4, 0x2, 0x2, 0x1, 0x8001, 0x1, 0xfffffff4, 0x5, 0x8, 0xfffefffc, 0x1, 0x0, 0x1, 0x1, 0xd0c0, 0xfffff33c, 0xc974, 0x3, 0xff, 0x3, 0x1b4, 0x24f, 0x3, 0x10001, 0x6, 0x7, 0x5, 0x7, 0xede9, 0x2, 0x5, 0x5, 0x7, 0x800, 0x2, 0x5, 0x7fff, 0x5, 0x8, 0x6, 0x7, 0xffffffe4, 0x9, 0xfffffff7, 0x2, 0x6, 0x7, 0xd9f, 0x6, 0x9, 0x0, 0x10000, 0x0, 0x8, 0x10, 0x720b, 0xfffffff7, 0x7106075a, 0xffff, 0x401, 0x3, 0x8, 0x6, 0x3, 0xf, 0x6, 0x9, 0x9, 0xffffffff, 0x7ff, 0x10, 0x0, 0x8, 0x4, 0xa27d, 0x9, 0x9, 0x0, 0x81, 0x4, 0x7f8000, 0x9, 0x0, 0x1, 0x0, 0x40000005, 0xc1, 0x2, 0x401, 0x40, 0x2]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x488}}, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 16.209574009s ago: executing program 0 (id=2661): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setresuid(0xee01, 0xffffffffffffffff, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}], 0x20, 0x1}}], 0x2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000002000100fffe0900010073797a300000000040000000030a01020000000000000000010000000900030073797a310000000014000480080002400000000008000140000000040900010073797a300000000064000000060a010400000000000000000100000008000b40000000000900010073797a30000000003c00048010000180080001006c6f6700040002802800018008000100666962001c00028008000140000000110800034000000005080002400000000114000000110001"], 0xec}}, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) lseek(r3, 0x9, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000006c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x170}, 0x1, 0x0, 0x0, 0x20000800}, 0x44001) r4 = socket(0x1e, 0x1, 0x0) connect$tipc(r4, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) recvmmsg(r4, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000340)=""/161, 0xa1}], 0x1, 0x0, 0x700}, 0x100}], 0x1, 0x400101a2, 0x0) write$binfmt_misc(r4, &(0x7f0000000340), 0x2000011a) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000080)={0x0}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000280)={r5, @in6={{0xa, 0x4e22, 0x100, @empty, 0x1}}, 0x2, 0xd, 0xfffffff9, 0x1000, 0x8, 0x9, 0x6}, 0x9c) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r6, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000340)=ANY=[@ANYBLOB="071101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r7, 0x707, &(0x7f00000000c0)={&(0x7f0000000080)=[{0xd0, 0x0, 0x0, 0x0}], 0x1}) memfd_secret(0x80000) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x2, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x208004, 0x21fffc, 0xc, 0x0, 0x2, 0xfffffffe}) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r10, 0x4b33, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r9, 0x80045530, &(0x7f0000001480)=""/4096) r11 = socket$inet_sctp(0x2, 0x5, 0x84) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000002080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r8, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000002140)={&(0x7f00000020c0)={0x34, r12, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5, 0x2, 0x1}]}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan1\x00'}) 11.013396352s ago: executing program 5 (id=2675): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) socket$l2tp(0x2, 0x2, 0x73) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b05000009058d67c0002a00", @ANYRESOCT], 0x0) syz_usb_ep_write(r2, 0x8d, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)={0x72}, 0x8) 10.847723393s ago: executing program 6 (id=2676): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getrusage(0xffffffffffffffff, &(0x7f0000000380)) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) pipe(&(0x7f00000002c0)) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x6f4c}]}, 0x30}, 0x1, 0x0, 0x0, 0x24040051}, 0x4000000) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x40200, 0x0) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000040)=0x13) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0) 9.669619146s ago: executing program 6 (id=2678): r0 = socket(0x2a, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getgid() connect$x25(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r1, @ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) 9.428803232s ago: executing program 1 (id=2679): socket$netlink(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, 0x0, 0x8000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r0, r3, 0x25, 0x0, @void}, 0x10) r4 = socket(0x10, 0x803, 0x0) socket(0x2, 0xa, 0x300) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) unshare(0x62040200) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) 9.310459147s ago: executing program 6 (id=2680): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f00000000c0)={0x17c04, r1, 0x8, 0xfff, 0x800000000}) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x4e22, @empty}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x110) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f00000006c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)={0x44, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x10fb, 0x400, 0x10, 0x10, 0x1, 0x3, 0x9, 0x2]}}]}]}]}, 0x44}}, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f0000000480)={0x2, {{0x2, 0x400, @multicast2}}, {{0x2, 0x0, @private}}}, 0x108) ioctl$BTRFS_IOC_INO_PATHS(r1, 0xc0389423, &(0x7f0000000080)={0x6, 0x10, [0xffffffff80000000, 0x80, 0x1, 0x2], &(0x7f0000000000)=[0x0, 0x0]}) 9.262046393s ago: executing program 7 (id=2681): fchdir(0xffffffffffffffff) exit(0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000280)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x7, 0xf0}]}) 8.95944671s ago: executing program 3 (id=2682): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000001200)={0x48, 0x8, 0xffffffffffffffff, 0x0, 0x1007fff, 0x0, 0x0, 0x4}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x8, 0x4, 0x8b, 0xfffa}, 0x41, [0x7ffe, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x5, 0x3, 0x7f, 0x6, 0x4d, 0x9, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0xd, 0x5, 0x4, 0x8, 0x4, 0x7f, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x4c75, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0xd, 0x80003e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0xfffffffe, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x131, 0x7ffe, 0x10, 0xfffffff3, 0x129432e6, 0x0, 0xf9, 0xd, 0x2bf, 0x6c9, 0x2, 0x6, 0x3, 0x0, 0x7, 0x5, 0x0, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x8, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0x1, 0x4, 0x0, 0x2, 0x100002, 0xa, 0x4, 0x9, 0x8, 0x800, 0x6, 0x7, 0x8002, 0x1, 0xfe000000, 0xff7f, 0x2, 0x81, 0x9, 0x2, 0x5, 0x9, 0x1, 0x7, 0x10, 0x9, 0x48c93690, 0x42, 0x9], [0x400, 0x4, 0x0, 0x5, 0xfffffffe, 0x5, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x17ec12b8, 0x800004, 0x5, 0x5, 0x0, 0x0, 0x5, 0x8, 0x83, 0x80000003, 0x200009, 0x100003e3, 0x9, 0x5, 0x3, 0x2, 0xf38, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffffc, 0x1, 0x1, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x20000004, 0x65], [0x9, 0xffffffff, 0x3, 0xb, 0x5, 0x938, 0x2, 0x6, 0x7, 0x5, 0x2, 0x1ff, 0x2, 0xf58, 0x5, 0x0, 0x4, 0x10000, 0x6, 0x7ffe, 0x80000004, 0x200a620, 0x2, 0xa, 0x1, 0x4, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0x0, 0x3, 0x7f, 0x100, 0x9606, 0x7, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x4, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1f, 0x0, 0x4, 0xb0b2748, 0x1, 0x1, 0x400, 0xffbf2441, 0xffd]}, 0x45c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000000)={0x0, 0xfffffff7, 0x84a8, 0x515f3157, 0x4, "78e1141009fd93233bce43f20613281f43d01f"}) write$UHID_INPUT(r4, &(0x7f0000001040)={0xd, {"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", 0x1010}}, 0x1b7) 8.293147034s ago: executing program 6 (id=2683): r0 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000100)='\xbe-$}\x00', &(0x7f00000001c0)='./file0\x00', r1) syz_usb_connect$uac2(0x3, 0x80, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000200000010532b230040000102030109026e00030104600e080b0202010620400904000000010120000924010700020e000105240b1400090401800001022000090401010101022000090501"], 0x0) 8.060265511s ago: executing program 3 (id=2684): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000080)={[{@quota}, {@quota}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@orlov}, {@test_dummy_encryption_v1}, {@jqfmt_vfsv1}]}, 0x3, 0x448, &(0x7f0000000440)="$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") r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) chdir(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setrlimit(0x4, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x26f}], 0x1}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000380)="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", 0x431}], 0x1}}], 0x1, 0x0) r5 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r5, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2c25fe80000000000000dc8b850f238466ccfe807a000000ad6e911b51818462b4003a0000", 0x2b}], 0x1}, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, 0x0) connect$packet(r0, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0xa, 0x6, @remote}, 0x14) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$uinput_user_dev(r6, &(0x7f0000000400)={'syz0\x00', {0x3, 0x402, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0xdb, 0x0, 0x7, 0x8, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x80, 0x7, 0x20003, 0x8, 0x4c76, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x800, 0x17, 0x0, 0x7, 0x5, 0x3e, 0x18e, 0x200006, 0x6, 0x454f, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0xa, 0x8000012f, 0x8004, 0x5, 0xffffbff3, 0x129432f6, 0xc8, 0xc9, 0xe, 0x2bf, 0x6c7, 0x1, 0xfffffffc, 0x5, 0x0, 0x0, 0x9, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xea4, 0x8, 0x4, 0x7, 0x7fff, 0x6, 0x500, 0x401, 0x6, 0x1, 0xff, 0xd, 0xfffff575, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x80000001, 0x6, 0x1, 0xfdfffffd, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xfffffffc, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x9, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0xfffffffd, 0x1ef, 0x5, 0x8, 0x96, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0xffffffff, 0x2, 0x400003, 0xfffffffd, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x5, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x4, 0x120000, 0x200807ff, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x4, 0x6, 0x6, 0x80000000, 0xb9, 0xce4, 0x10001ff, 0x2, 0x4184, 0x5, 0x6, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x6, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x80000002, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{r6}, {}], 0x2, 0x0, 0x0, 0xfffffffffffffecc) syz_extract_tcp_res(&(0x7f0000000280), 0xcec, 0xe) 7.938938274s ago: executing program 1 (id=2685): r0 = socket(0x400000000010, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb7", 0x85}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967", 0x9a}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac", 0x57}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede33131", 0x93}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c617c69458d721eb85d0e5372751cd23cc88571", 0x9c}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e", 0x73}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede48830ca", 0x70}], 0x2, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x90}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 7.46809644s ago: executing program 5 (id=2686): r0 = landlock_create_ruleset(&(0x7f0000000000)={0x828a, 0x3, 0x2}, 0x18, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000200)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) r2 = socket(0x2, 0x3, 0xff) close_range(r2, 0xffffffffffffffff, 0x2) rt_sigtimedwait(&(0x7f00000000c0)={[0xe]}, 0x0, 0x0, 0x8) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, &(0x7f0000000200)=0xfffffff0, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'veth0_macvtap\x00', 0x0}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002240)=[{{&(0x7f0000000040)={0x2, 0x4e23, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @local, @remote}}}], 0x20}}], 0x1, 0x20044814) landlock_restrict_self(r0, 0x8) 6.688687886s ago: executing program 5 (id=2687): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x7ffe, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x3000000, &(0x7f0000000080), 0x1, 0x533, &(0x7f0000000b00)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000400)={0x44, r1, 0x1, 0x0, 0xffffffff, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x18, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x4}]}]}]}, 0x44}}, 0x0) socket$rds(0x15, 0x5, 0x0) 6.619696528s ago: executing program 3 (id=2688): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0x12, &(0x7f0000000100)=0x9, 0x4) sendto$packet(r2, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x3}, 0x14) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001680)) r3 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000001c0)={0x0, r3}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000000)={0x0, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4096}) connect$vsock_stream(r4, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) 5.465290384s ago: executing program 1 (id=2689): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb7", 0x85}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de38327e", 0x9e}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac", 0x57}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede33131", 0x93}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d531", 0x4e}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d", 0x39}], 0x2, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x90}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e00)="abc662f2a7dc713d226b612e712df36db5547daf508fb74a679224eba0fe5f05c53081ff6ebac83c264c6deeec6d4546fe7d00337f488ecee46577d71b39e24cdef94f1629", 0x45}], 0x1}}], 0x3, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 5.453314941s ago: executing program 0 (id=2690): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getrusage(0xffffffffffffffff, &(0x7f0000000380)) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) pipe(&(0x7f00000002c0)) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x6f4c}]}, 0x30}, 0x1, 0x0, 0x0, 0x24040051}, 0x4000000) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x40200, 0x0) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000040)=0x13) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0) 5.256568289s ago: executing program 6 (id=2691): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x121001, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000006c0)={0x9, @win={{0x4, 0x8, 0x80, 0x1}, 0x4, 0x7fff, &(0x7f0000000180)={{0x9, 0x7, 0xa, 0x6}}, 0xc90b, &(0x7f00000001c0)="040302a27a599ce05e6800cf1093c4dfca84384490a21dfa1810544235931d0b1b5689", 0xde}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000009740)='./file0\x00', 0x4000000, &(0x7f0000000440)={[{@prjquota}, {@usrquota}, {@dax_never}, {@nouuid}, {@dax_always}, {@discard}, {@prjquota}, {@usrquota}, {@gquota}, {@nolargeio}]}, 0x1, 0x979e, &(0x7f0000009780)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) getpgid(0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r6, 0x641f) sendmsg$netlink(r0, &(0x7f00000004c0)={&(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbff, 0x1}, 0xc, &(0x7f0000000400)=[{&(0x7f0000000240)={0x140, 0x32, 0x400, 0x70bd25, 0x25dfdbff, "", [@typed={0x8, 0x14b, 0x0, 0x0, @u32}, @typed={0xb, 0x9b, 0x0, 0x0, @str='discard'}, @typed={0x8, 0x94, 0x0, 0x0, @uid=r5}, @generic="67bdee0737e408f640827803d51e3291b4699b60095079e707372e89b91aa72b0f3fd09ccd4d38720f88c9c06a8ef28c95cdca678522", @generic="5f4306c5200eea64ceb41d1b47f4b058a01e8663bda693547ee713b75fd2bef3863ab7ae89739dfada448c1d", @generic="7c32e324f02d2db1246571957a94748c84ba7de703ee40976d8f37f0789b597882966e3db646d3ec72fb154042c78f9a0bc6b4473906654736ea105fd0cceb70c4b1b46c949150168fa66f7f19a37fb10eef4c25e8d7f18d01afb83879d846d3e333ba43edac81212b9c1fc0bb7538e4182dae83311d47bc402bbb418f820aa8e2fddbce07ff341abca2f91a5b7900b523497bfc0080c0deafb38ec01dc94be49ec4c1febf75dfd6b4123a529c604a49"]}, 0x140}, {&(0x7f0000000380)={0x4c, 0x24, 0x10, 0x70bd2a, 0x25dfdbfe, "", [@generic="06835e6985ddacb053b702fd80becb1d813b3223028875e0975eab3517408e078e0eae2830571892455f941c0488d410a29e", @typed={0x7, 0x23, 0x0, 0x0, @str='@{\x00'}]}, 0x4c}], 0x2, 0x0, 0x0, 0x20040000}, 0x8080) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 5.241699032s ago: executing program 5 (id=2692): r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r0, @ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) 5.167758149s ago: executing program 7 (id=2693): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000140)="2e1221b23bb601c477d3df163e75963d86ddf06712e900092f8db0049d90491c3248040000dbb8a10000", 0x2a}, {&(0x7f0000000200)="24f5bbd11cb3", 0x6}, {&(0x7f00000002c0)="a43b2eaab4000000000080006558a4927f05", 0x12}], 0x3) 5.121477997s ago: executing program 3 (id=2694): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xdafbe5d6891b6e0) r0 = inotify_init1(0x80000) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x20000000) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000001ac0)='./file0\x00', 0x0, &(0x7f0000001a80), 0x3, 0x5bc, &(0x7f0000001440)="$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") semctl$IPC_RMID(0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10000, &(0x7f0000002380)=ANY=[@ANYBLOB='nodots(sx=', @ANYRESHEX=0xee00, @ANYBLOB=',check=normal,fmask=00000000000000000000002,sys_immutable,nodots,dots,nodots,nodots,nodots,fmask=00000000000000000177777,dots,quiet,nodots,nodots,check=relaxed,nodots,umask=00000000000000000076645,nodots,nodots,nfs=stale_rw,nodots,smackfsfloor=fmask,defcontext=unconfined_u,permit_directio,permit_directio,fscontext=staff_u,seclabel,euid>', @ANYRESDEC, @ANYRES64], 0xff, 0x1f5, &(0x7f0000000600)="$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") flock(0xffffffffffffffff, 0x6) unlinkat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x200) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0x3) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000010180)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0xa, 0x4, 0x2, 0x4, 0x4, {0x3, 0x0, 0x101, 0x9, 0x5, 0xffffffff}, {0x3, 0x2, 0x3ff, 0x2, 0x5}, 0x2, 0x3, 0xeea4}}, @TCA_POLICE_RATE={0x404, 0x2, [0x100000, 0x2, 0x0, 0x5, 0x7, 0x6, 0x5, 0x5, 0x4, 0x10000, 0xfffffff1, 0x800, 0x1, 0x1, 0x1, 0x4, 0xffffffda, 0x8, 0x2, 0x76ccfa5f, 0x5, 0x8, 0x80, 0x451, 0x2, 0x1, 0x6, 0x8, 0xfff, 0x100, 0x8, 0x1, 0x9, 0x2, 0xa, 0x1, 0x8, 0x7, 0x5, 0x8, 0x6, 0xfff, 0x9, 0x9, 0x4, 0x200, 0x8000, 0xffffff01, 0x1, 0x80, 0xa8, 0x7f, 0x84, 0x6, 0x637, 0x8, 0xfb, 0x9, 0x97, 0x6, 0x791a, 0x9, 0x3, 0x7, 0xab5, 0x0, 0x66ab6d08, 0xd, 0x8, 0x17ffe, 0x2, 0xfffffff7, 0x9, 0x1eb, 0x7, 0xd43, 0x9, 0x6, 0x7, 0x7, 0x4, 0x4, 0x5a8b, 0x6f, 0x3f, 0x6, 0x7, 0x4, 0x15, 0x7f, 0xfff, 0xb, 0x2, 0x10001, 0xffffffff, 0x3, 0xaa2, 0x400, 0x40, 0x1, 0x0, 0x80, 0x44f0, 0x1, 0xffff, 0xf, 0x3f0f, 0x9, 0x7, 0x33f6, 0x6, 0x200, 0x100, 0x1ea, 0x1, 0x7ff, 0x7ff, 0x4, 0x49, 0x80000001, 0x7, 0x4, 0x5, 0x1, 0x10000000, 0x8, 0x1, 0x800, 0x40, 0x6, 0x400, 0x2, 0xb7c, 0xfffffffc, 0x3, 0x9, 0x3, 0x6, 0x1ff, 0x1ff, 0x8, 0x2, 0x15, 0xffffffff, 0x9, 0x6, 0x5, 0x7ff, 0x8, 0x2, 0x9, 0xfffffffd, 0x7, 0x6, 0x1, 0x3, 0x9, 0x7fff, 0x1, 0x5, 0x7, 0x10001, 0x2, 0x8, 0x5, 0x4, 0x2, 0x2, 0x1, 0x8001, 0x1, 0xfffffff4, 0x5, 0x8, 0xfffefffc, 0x1, 0x0, 0x1, 0x1, 0xd0c0, 0xfffff33c, 0xc974, 0x3, 0xff, 0x3, 0x1b4, 0x24f, 0x3, 0x10001, 0x6, 0x7, 0x5, 0x7, 0xede9, 0x2, 0x5, 0x5, 0x7, 0x800, 0x2, 0x5, 0x7fff, 0x5, 0x8, 0x6, 0x7, 0xffffffe4, 0x9, 0xfffffff7, 0x2, 0x6, 0x7, 0xd9f, 0x6, 0x9, 0x0, 0x10000, 0x0, 0x8, 0x10, 0x720b, 0xfffffff7, 0x7106075a, 0xffff, 0x401, 0x3, 0x8, 0x6, 0x3, 0xf, 0x6, 0x9, 0x9, 0xffffffff, 0x7ff, 0x10, 0x0, 0x8, 0x4, 0xa27d, 0x9, 0x9, 0x0, 0x81, 0x4, 0x7f8000, 0x9, 0x0, 0x1, 0x0, 0x40000005, 0xc1, 0x2, 0x401, 0x40, 0x2]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x488}}, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 4.677300156s ago: executing program 7 (id=2695): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee3, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file2\x00', 0xffffffffffffff9c, 0x0, 0x0) write$proc_mixer(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x86) openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x4000c01, &(0x7f0000000280)={0xa, 0x400, 0xfffffffe, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000006c0)={0x0, 0x2}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) 4.600459175s ago: executing program 1 (id=2696): r0 = socket$rds(0x15, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r3) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r7, 0x40045567, 0x7) sendmsg$BATADV_CMD_GET_GATEWAYS(r5, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r6, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x808f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x28080}, 0x20008050) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000540)={0x40, r2, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x24, 0x33, @action_no_ack={{{0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x5}, @broadcast, @broadcast, @initial, {0x8, 0x5}, @value=@ver_80211n={0x0, 0xc07, 0x3, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1}}, @sa_query_req={0x8, 0x0, 0x3}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x44000}, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={0xffffffffffffffff}) quotactl_fd$Q_SYNC(r8, 0xffffffff80000101, 0x0, 0x0) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@fadd={0x58, 0x114, 0x6, {{0x3, 0x101}, &(0x7f0000000040)=0x42, &(0x7f00000000c0)=0xffff, 0xc, 0x6, 0x7, 0x3, 0x4, 0xffff}}], 0x58, 0x90}, 0x0) r9 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) sendto(r9, 0x0, 0xffffffffffffff98, 0x4010, 0x0, 0xffffffffffffffe8) r10 = syz_open_dev$sndpcmc(&(0x7f00000002c0), 0x4, 0x925000) fstatfs(r10, &(0x7f0000000300)=""/43) 4.078688654s ago: executing program 0 (id=2697): r0 = socket(0x400000000010, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb7", 0x85}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d0", 0x95}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac", 0x57}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede33131", 0x93}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d531", 0x4e}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede48830ca6e", 0x71}], 0x2, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x78}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 3.63840112s ago: executing program 7 (id=2698): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0xdf) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x121100, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x800001000091}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) mount(&(0x7f00000003c0)=@md0, 0x0, &(0x7f0000000300)='udf\x00', 0x200480, 0x0) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x91, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) 3.5933336s ago: executing program 1 (id=2699): sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, 0x0, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/uts\x00') setns(r0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) mount$9p_fd(0x0, 0x0, &(0x7f00000000c0), 0x200000, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair(0x1, 0x1, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, 0x0, 0x0}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000300000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r6}, 0x38) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0xffffff1f, 0xfffffffc, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c014}, 0x4000080) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r8, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="31032fbd7000fddbdf250800000008000300", @ANYRES32=r10, @ANYBLOB="05002d0001000000040006"], 0x2c}, 0x1, 0x0, 0x0, 0x8814}, 0x20000084) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={&(0x7f00000003c0)="d02edb4183a8641b94d68d7698d651143568daf0b256e37231e1775bc071ca6ad5ed9e534bb2f93b9495a3339f419ad80cac9735c1ba0c9d253d5c86e7f56f3a1d2e167bcc91881198aa2fd71059873358f932c7bf6c6bf18ed09b6f7df3bb837804e0878255", 0x0, &(0x7f0000000500), &(0x7f00000006c0), 0x3, r6}, 0x38) 3.523858594s ago: executing program 5 (id=2700): r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x8102) writev(r0, &(0x7f0000001500)=[{&(0x7f0000000000)="47ad3d32240000006bdb74ecb9f7c342cc2c008d3ec3c2d2d5bbf6a4e41419ec3dc11a4f85090084665ea561e52d97fbe9e830a0", 0x34}], 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r1) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x48e, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) (async) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) (async) r4 = socket$unix(0x1, 0x5, 0x0) r5 = dup2(r4, r3) close_range(r5, 0xffffffffffffffff, 0x0) 2.667532959s ago: executing program 6 (id=2701): r0 = socket(0x400000000010, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb7", 0x85}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967", 0x9a}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac", 0x57}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede33131", 0x93}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c617c69458d721eb85d0e5372751cd23cc88571", 0x9c}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e", 0x73}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede48830ca", 0x70}], 0x2, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x90}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2.357066683s ago: executing program 0 (id=2702): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MTU={0x8, 0x4, 0x200}]}, 0x3c}}, 0x4000000) 1.359870676s ago: executing program 1 (id=2703): r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000300)=@filter={'filter\x00', 0xe, 0x4, 0x310, 0xffffffff, 0x1d8, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x4, &(0x7f0000000180), {[{{@ip={@local, @multicast2, 0xffffff00, 0xffffffff, 'macvtap0\x00', 'wlan1\x00', {0xff}, {0xff}, 0x5e, 0x2}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x2, 0x6, 0x7fffffff, 0x1}}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@ttl={{0x28}, {0x0, 0x7}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x4, 0x1, 0x2, 0x1, 0x1, 0x4], 0x4, 0x1}, {0x0, [0x7, 0x2, 0x4, 0x1, 0x7, 0x2]}}}}, {{@uncond, 0x0, 0xa0, 0xe0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3cca9634fb33499de774cce2e14a60ea98cd77064cab19408b9df851a8cd"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x370) syz_mount_image$ocfs2(&(0x7f0000000000), &(0x7f00000048c0)='./file0\x00', 0x2000054, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00'], 0x1, 0x489a, &(0x7f00000091c0)="$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") r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x8, 0x0, 0x0, 0x4}}) r2 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r2, 0x8008af73, &(0x7f00000006c0)={0x0, 0xe2, ""/226}) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000070a03000000000000000000050000070c0006400000000000e0ff02"], 0x20}, 0x1, 0x0, 0x0, 0x40408d5}, 0x14) 726.652299ms ago: executing program 3 (id=2704): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0xa, 0xa, 0x1, "0200000025052e8bd9e466020100000000c2370000722a01000800", 0x32314d4e}) clock_adjtime(0x17, &(0x7f0000000040)={0xd51, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x0, 0x0, 0x1, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x100, 0x3, 0x0, 0xe438, 0x0, 0x0, 0xe0}) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x1, 0x0, 0x0) r1 = fanotify_init(0x40, 0x8000) r2 = syz_open_procfs(0x0, &(0x7f0000001380)='stack\x00') timerfd_gettime(r2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), r3) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x14, r4, 0x901, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x80c0) fanotify_mark(r1, 0x645, 0x19, 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00') capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x80000001, 0x0, 0x5, 0xfffffffc, 0x4}) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) rmdir(&(0x7f0000000040)='./file0\x00') 694.764425ms ago: executing program 7 (id=2705): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MTU={0x8, 0x4, 0x200}]}, 0x3c}}, 0x4000000) (fail_nth: 1) 578.971053ms ago: executing program 5 (id=2706): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0x12, &(0x7f0000000100)=0x9, 0x4) sendto$packet(r2, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x3}, 0x14) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001680)) r3 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000001c0)={0x0, r3}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000000)={0x0, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, 0x0) connect$vsock_stream(r4, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) 575.600208ms ago: executing program 0 (id=2707): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) io_setup(0x6, 0x0) (fail_nth: 1) 0s ago: executing program 7 (id=2708): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb7", 0x85}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de38327e", 0x9e}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac", 0x57}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede33131", 0x93}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d531", 0x4e}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d", 0x39}], 0x2, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x90}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e00)="abc662f2a7dc713d226b612e712df36db5547daf508fb74a679224eba0fe5f05c53081ff6ebac83c264c6deeec6d4546fe7d00337f488ecee46577d71b39e24cdef94f1629", 0x45}], 0x1}}], 0x3, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) kernel console output (not intermixed with test programs): rso_alias_return_thunk+0x5/0xfbef5 [ 1006.047887][ T1020] ? reacquire_held_locks+0x104/0x190 [ 1006.047923][ T1020] ? writeback_sb_inodes+0x463/0x19d0 [ 1006.047965][ T1020] __writeback_single_inode+0x133/0x10e0 [ 1006.047999][ T1020] ? do_raw_spin_unlock+0xf5/0x210 [ 1006.048047][ T1020] writeback_sb_inodes+0x979/0x19d0 [ 1006.048078][ T1020] ? __lock_acquire+0x6b5/0x2cf0 [ 1006.048152][ T1020] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1006.048181][ T1020] ? do_raw_spin_lock+0x12b/0x2f0 [ 1006.048282][ T1020] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1006.048321][ T1020] ? rcu_is_watching+0x15/0xb0 [ 1006.048357][ T1020] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1006.048404][ T1020] wb_writeback+0x445/0xb00 [ 1006.048444][ T1020] ? queue_io+0x201/0x470 [ 1006.048487][ T1020] ? __pfx_wb_writeback+0x10/0x10 [ 1006.048517][ T1020] ? do_raw_spin_lock+0x12b/0x2f0 [ 1006.048583][ T1020] wb_workfn+0x3f8/0xf10 [ 1006.048623][ T1020] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1006.048656][ T1020] ? look_up_lock_class+0x57/0x110 [ 1006.048716][ T1020] ? __pfx_wb_workfn+0x10/0x10 [ 1006.048764][ T1020] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1006.048796][ T1020] ? do_raw_spin_lock+0x12b/0x2f0 [ 1006.048836][ T1020] ? lock_acquire+0x106/0x350 [ 1006.048869][ T1020] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1006.048916][ T1020] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1006.048954][ T1020] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1006.049020][ T1020] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1006.049058][ T1020] ? process_scheduled_works+0xa70/0x1860 [ 1006.049088][ T1020] ? process_scheduled_works+0xa70/0x1860 [ 1006.049120][ T1020] process_scheduled_works+0xb5d/0x1860 [ 1006.049150][ T1020] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1006.049231][ T1020] ? __pfx_process_scheduled_works+0x10/0x10 [ 1006.049270][ T1020] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1006.049304][ T1020] ? assign_work+0x3d5/0x5e0 [ 1006.049352][ T1020] worker_thread+0xa53/0xfc0 [ 1006.049411][ T1020] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1006.049460][ T1020] kthread+0x388/0x470 [ 1006.049500][ T1020] ? __pfx_worker_thread+0x10/0x10 [ 1006.049528][ T1020] ? __pfx_kthread+0x10/0x10 [ 1006.049570][ T1020] ret_from_fork+0x514/0xb70 [ 1006.049607][ T1020] ? __pfx_ret_from_fork+0x10/0x10 [ 1006.049637][ T1020] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1006.049671][ T1020] ? __switch_to+0xc79/0x1410 [ 1006.049718][ T1020] ? __pfx_kthread+0x10/0x10 [ 1006.049759][ T1020] ret_from_fork_asm+0x1a/0x30 [ 1006.049822][ T1020] [ 1006.402155][ T1020] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 1007.374476][ T5624] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1007.425052][T14743] netlink: 'syz.1.2367': attribute type 7 has an invalid length. [ 1007.525719][T14743] netlink: 'syz.1.2367': attribute type 8 has an invalid length. [ 1007.981374][T14754] binder: 14749:14754 ioctl 81e8943c 0 returned -22 [ 1008.116898][T12228] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1009.164353][T14756] loop7: detected capacity change from 0 to 40427 [ 1009.178028][T14756] F2FS-fs (loop7): invalid crc value [ 1009.249555][T14756] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 1009.262150][T14756] F2FS-fs (loop7): Start checkpoint disabled! [ 1009.288148][T14756] F2FS-fs (loop7): f2fs_disable_checkpoint() finish, err:0 [ 1009.303972][T14756] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 1009.315708][T12228] usb 6-1: Using ep0 maxpacket: 32 [ 1009.353072][T12228] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1009.675722][T12228] usb 6-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 1009.697100][T12228] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1009.776410][T12228] usb 6-1: Product: syz [ 1009.849372][T12228] usb 6-1: Manufacturer: syz [ 1009.849402][T12228] usb 6-1: SerialNumber: syz [ 1009.883612][T12228] usb 6-1: config 0 descriptor?? [ 1009.891030][T12228] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 1010.047645][T14752] nbd6: detected capacity change from 0 to 128 [ 1010.338243][T14765] loop0: detected capacity change from 0 to 512 [ 1010.862608][T14765] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1011.014011][T14765] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1011.601572][T12228] input: gspca_pac7302 as /devices/platform/dummy_hcd.5/usb6/6-1/input/input56 [ 1011.661792][T12228] usb 6-1: USB disconnect, device number 29 [ 1011.709711][T14765] loop0: detected capacity change from 0 to 256 [ 1011.717462][T14765] msdos: Unknown parameter 'nodots(sx' [ 1012.122746][ T3307] kworker/u8:7: attempt to access beyond end of device [ 1012.122746][ T3307] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1012.162002][ T3307] CPU: 0 UID: 0 PID: 3307 Comm: kworker/u8:7 Tainted: G L syzkaller #0 PREEMPT(full) [ 1012.162048][ T3307] Tainted: [L]=SOFTLOCKUP [ 1012.162059][ T3307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1012.162090][ T3307] Workqueue: writeback wb_workfn (flush-7:7) [ 1012.162144][ T3307] Call Trace: [ 1012.162155][ T3307] [ 1012.162167][ T3307] dump_stack_lvl+0xe8/0x150 [ 1012.162203][ T3307] f2fs_stop_checkpoint+0x3c7/0x590 [ 1012.162259][ T3307] f2fs_write_end_io+0x1274/0x1740 [ 1012.162327][ T3307] __submit_merged_bio+0x256/0x6a0 [ 1012.162366][ T3307] __submit_merged_write_cond+0x3c9/0x4e0 [ 1012.162427][ T3307] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 1012.162490][ T3307] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1012.162532][ T3307] f2fs_write_data_pages+0x287e/0x34f0 [ 1012.162608][ T3307] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1012.162721][ T3307] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1012.162753][ T3307] ? __lock_acquire+0x6b5/0x2cf0 [ 1012.162810][ T3307] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1012.162844][ T3307] do_writepages+0x32e/0x550 [ 1012.162880][ T3307] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1012.162912][ T3307] ? reacquire_held_locks+0x104/0x190 [ 1012.162947][ T3307] ? writeback_sb_inodes+0x463/0x19d0 [ 1012.162985][ T3307] __writeback_single_inode+0x133/0x10e0 [ 1012.163019][ T3307] ? do_raw_spin_unlock+0xf5/0x210 [ 1012.163064][ T3307] writeback_sb_inodes+0x979/0x19d0 [ 1012.163099][ T3307] ? __lock_acquire+0x6b5/0x2cf0 [ 1012.163162][ T3307] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1012.163191][ T3307] ? do_raw_spin_lock+0x12b/0x2f0 [ 1012.163281][ T3307] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1012.163312][ T3307] ? rcu_is_watching+0x15/0xb0 [ 1012.163344][ T3307] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1012.163386][ T3307] wb_writeback+0x445/0xb00 [ 1012.163421][ T3307] ? queue_io+0x201/0x470 [ 1012.163460][ T3307] ? __pfx_wb_writeback+0x10/0x10 [ 1012.163488][ T3307] ? do_raw_spin_lock+0x12b/0x2f0 [ 1012.163547][ T3307] wb_workfn+0x3f8/0xf10 [ 1012.163584][ T3307] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1012.163616][ T3307] ? look_up_lock_class+0x57/0x110 [ 1012.163669][ T3307] ? __pfx_wb_workfn+0x10/0x10 [ 1012.163713][ T3307] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1012.163744][ T3307] ? do_raw_spin_lock+0x12b/0x2f0 [ 1012.163781][ T3307] ? lock_acquire+0x106/0x350 [ 1012.163813][ T3307] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1012.163856][ T3307] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1012.163891][ T3307] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1012.163930][ T3307] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1012.163965][ T3307] ? process_scheduled_works+0xa70/0x1860 [ 1012.163994][ T3307] ? process_scheduled_works+0xa70/0x1860 [ 1012.164025][ T3307] process_scheduled_works+0xb5d/0x1860 [ 1012.164054][ T3307] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1012.164129][ T3307] ? __pfx_process_scheduled_works+0x10/0x10 [ 1012.164165][ T3307] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1012.164197][ T3307] ? assign_work+0x3d5/0x5e0 [ 1012.164231][ T3307] worker_thread+0xa53/0xfc0 [ 1012.164281][ T3307] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1012.164324][ T3307] kthread+0x388/0x470 [ 1012.164364][ T3307] ? __pfx_worker_thread+0x10/0x10 [ 1012.164390][ T3307] ? __pfx_kthread+0x10/0x10 [ 1012.164428][ T3307] ret_from_fork+0x514/0xb70 [ 1012.164462][ T3307] ? __pfx_ret_from_fork+0x10/0x10 [ 1012.164490][ T3307] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1012.164521][ T3307] ? __switch_to+0xc79/0x1410 [ 1012.164565][ T3307] ? __pfx_kthread+0x10/0x10 [ 1012.164603][ T3307] ret_from_fork_asm+0x1a/0x30 [ 1012.164657][ T3307] [ 1012.164698][ T3307] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 1013.006942][T14789] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 1015.207625][T12228] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1015.425717][T12228] usb 2-1: Using ep0 maxpacket: 32 [ 1015.530991][T14815] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2387'. [ 1015.849076][T12228] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1015.863660][T12228] usb 2-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 1015.873031][T12228] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1015.881200][T12228] usb 2-1: Product: syz [ 1015.885370][T12228] usb 2-1: Manufacturer: syz [ 1015.890037][T12228] usb 2-1: SerialNumber: syz [ 1015.899616][T12228] usb 2-1: config 0 descriptor?? [ 1015.909054][T12228] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 1016.030147][T14792] loop6: detected capacity change from 0 to 32768 [ 1016.152764][T14792] (syz.6.2382,14792,0):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 1016.214055][T14792] (syz.6.2382,14792,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 1016.806180][ T5784] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 1016.955649][T14829] loop0: detected capacity change from 0 to 40427 [ 1016.968734][T14829] F2FS-fs (loop0): invalid crc value [ 1017.055306][T14829] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 1017.069818][T12228] input: gspca_pac7302 as /devices/platform/dummy_hcd.1/usb2/2-1/input/input57 [ 1017.080161][T14829] F2FS-fs (loop0): Start checkpoint disabled! [ 1017.112442][T12228] usb 2-1: USB disconnect, device number 45 [ 1017.125977][T14829] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0 [ 1017.134389][T14829] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 1017.353043][ T5784] usb 7-1: Using ep0 maxpacket: 16 [ 1017.899364][ T5784] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1017.910204][ T5784] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1017.921657][ T5784] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1017.931994][ T5784] usb 7-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 1017.941254][ T5784] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1018.029433][ T5784] usb 7-1: config 0 descriptor?? [ 1018.067765][T14838] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 1019.118211][ T5784] hid-picolcd 0003:04D8:F002.0009: unknown main item tag 0x0 [ 1019.125774][ T5784] hid-picolcd 0003:04D8:F002.0009: unknown main item tag 0x0 [ 1019.133196][ T5784] hid-picolcd 0003:04D8:F002.0009: unknown main item tag 0x0 [ 1019.140635][ T5784] hid-picolcd 0003:04D8:F002.0009: unknown main item tag 0x0 [ 1019.148007][ T5784] hid-picolcd 0003:04D8:F002.0009: unknown main item tag 0x0 [ 1019.195978][ T1020] kworker/u8:6: attempt to access beyond end of device [ 1019.195978][ T1020] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1019.260058][ T1020] CPU: 1 UID: 0 PID: 1020 Comm: kworker/u8:6 Tainted: G L syzkaller #0 PREEMPT(full) [ 1019.260099][ T1020] Tainted: [L]=SOFTLOCKUP [ 1019.260109][ T1020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1019.260136][ T1020] Workqueue: writeback wb_workfn (flush-7:0) [ 1019.260187][ T1020] Call Trace: [ 1019.260199][ T1020] [ 1019.260210][ T1020] dump_stack_lvl+0xe8/0x150 [ 1019.260245][ T1020] f2fs_stop_checkpoint+0x3c7/0x590 [ 1019.260298][ T1020] f2fs_write_end_io+0x1274/0x1740 [ 1019.260357][ T1020] __submit_merged_bio+0x256/0x6a0 [ 1019.260393][ T1020] __submit_merged_write_cond+0x3c9/0x4e0 [ 1019.260451][ T1020] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 1019.260514][ T1020] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1019.260558][ T1020] f2fs_write_data_pages+0x287e/0x34f0 [ 1019.260635][ T1020] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1019.260752][ T1020] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1019.260785][ T1020] ? __lock_acquire+0x6b5/0x2cf0 [ 1019.260843][ T1020] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1019.260877][ T1020] do_writepages+0x32e/0x550 [ 1019.260914][ T1020] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1019.260945][ T1020] ? reacquire_held_locks+0x104/0x190 [ 1019.260980][ T1020] ? writeback_sb_inodes+0x463/0x19d0 [ 1019.261019][ T1020] __writeback_single_inode+0x133/0x10e0 [ 1019.261052][ T1020] ? do_raw_spin_unlock+0xf5/0x210 [ 1019.261097][ T1020] writeback_sb_inodes+0x979/0x19d0 [ 1019.261136][ T1020] ? __lock_acquire+0x6b5/0x2cf0 [ 1019.261199][ T1020] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1019.261229][ T1020] ? do_raw_spin_lock+0x12b/0x2f0 [ 1019.261314][ T1020] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1019.261346][ T1020] ? rcu_is_watching+0x15/0xb0 [ 1019.261526][ T1020] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1019.261584][ T1020] wb_writeback+0x445/0xb00 [ 1019.261628][ T1020] ? queue_io+0x201/0x470 [ 1019.261678][ T1020] ? __pfx_wb_writeback+0x10/0x10 [ 1019.261714][ T1020] ? do_raw_spin_lock+0x12b/0x2f0 [ 1019.261795][ T1020] wb_workfn+0x3f8/0xf10 [ 1019.261848][ T1020] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1019.261889][ T1020] ? look_up_lock_class+0x57/0x110 [ 1019.261965][ T1020] ? __pfx_wb_workfn+0x10/0x10 [ 1019.262027][ T1020] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1019.262071][ T1020] ? do_raw_spin_lock+0x12b/0x2f0 [ 1019.262167][ T1020] ? lock_acquire+0x106/0x350 [ 1019.262209][ T1020] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1019.262277][ T1020] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1019.262326][ T1020] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1019.262374][ T1020] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1019.262422][ T1020] ? process_scheduled_works+0xa70/0x1860 [ 1019.262458][ T1020] ? process_scheduled_works+0xa70/0x1860 [ 1019.262501][ T1020] process_scheduled_works+0xb5d/0x1860 [ 1019.262534][ T1020] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1019.262614][ T1020] ? __pfx_process_scheduled_works+0x10/0x10 [ 1019.262656][ T1020] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1019.262693][ T1020] ? assign_work+0x3d5/0x5e0 [ 1019.262733][ T1020] worker_thread+0xa53/0xfc0 [ 1019.262793][ T1020] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1019.262840][ T1020] kthread+0x388/0x470 [ 1019.262884][ T1020] ? __pfx_worker_thread+0x10/0x10 [ 1019.262916][ T1020] ? __pfx_kthread+0x10/0x10 [ 1019.262962][ T1020] ret_from_fork+0x514/0xb70 [ 1019.263000][ T1020] ? __pfx_ret_from_fork+0x10/0x10 [ 1019.263032][ T1020] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1019.263070][ T1020] ? __switch_to+0xc79/0x1410 [ 1019.263130][ T1020] ? __pfx_kthread+0x10/0x10 [ 1019.263175][ T1020] ret_from_fork_asm+0x1a/0x30 [ 1019.263236][ T1020] [ 1019.263249][ T1020] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 1019.716144][ T5784] hid-picolcd 0003:04D8:F002.0009: No report with id 0xf3 found [ 1019.723965][ T5784] hid-picolcd 0003:04D8:F002.0009: No report with id 0xf4 found [ 1019.736248][ T5784] usb 7-1: USB disconnect, device number 24 [ 1020.008742][T14845] binder: 14843:14845 ioctl 81e8943c 0 returned -22 [ 1020.446654][T14855] random: crng reseeded on system resumption [ 1021.394739][T14850] block nbd7: shutting down sockets [ 1021.799853][T14866] loop3: detected capacity change from 0 to 512 [ 1021.855065][T13908] Bluetooth: Unexpected start frame (len 16) [ 1021.921371][T14872] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1021.921717][T14873] loop5: detected capacity change from 0 to 512 [ 1021.928404][T14872] overlayfs: failed to set xattr on upper [ 1021.928421][T14872] overlayfs: ...falling back to redirect_dir=nofollow. [ 1021.928434][T14872] overlayfs: ...falling back to index=off. [ 1021.928445][T14872] overlayfs: ...falling back to uuid=null. [ 1021.928546][T14872] overlayfs: failed to clone lowerpath [ 1022.072086][T14883] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2405'. [ 1022.088928][T14866] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1022.099860][T14872] netlink: 'syz.1.2406': attribute type 2 has an invalid length. [ 1022.106836][T14873] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1022.125751][T14866] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1022.139954][T14873] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1022.187913][T14879] loop0: detected capacity change from 0 to 512 [ 1022.202307][T14882] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2406'. [ 1022.245737][T14872] netlink: 'syz.1.2406': attribute type 1 has an invalid length. [ 1022.346530][T14873] loop5: detected capacity change from 0 to 256 [ 1022.354078][T14873] msdos: Unknown parameter 'nodots(sx' [ 1022.430173][T14893] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1022.436617][T14866] loop3: detected capacity change from 0 to 256 [ 1022.451341][T14893] overlayfs: failed to set xattr on upper [ 1022.463557][T14893] overlayfs: ...falling back to redirect_dir=nofollow. [ 1022.470488][T14893] overlayfs: ...falling back to index=off. [ 1022.476464][T14893] overlayfs: ...falling back to uuid=null. [ 1022.483552][T14893] overlayfs: failed to clone lowerpath [ 1022.495215][T14866] msdos: Unknown parameter 'nodots(sx' [ 1022.771879][T14893] netlink: 'syz.6.2409': attribute type 2 has an invalid length. [ 1022.861661][T14893] netlink: 'syz.6.2409': attribute type 1 has an invalid length. [ 1023.771259][T14879] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1024.081816][T14879] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1024.173142][T14893] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2409'. [ 1024.490227][T14879] loop0: detected capacity change from 0 to 256 [ 1024.516668][T14879] msdos: Unknown parameter 'nodots(sx' [ 1025.355159][ T5784] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 1025.953648][T14926] loop6: detected capacity change from 0 to 40427 [ 1025.974789][T14926] F2FS-fs (loop6): invalid crc value [ 1026.207919][T14926] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 1026.220554][ T5784] usb 8-1: Using ep0 maxpacket: 32 [ 1026.227648][T14926] F2FS-fs (loop6): Start checkpoint disabled! [ 1026.594906][T14926] F2FS-fs (loop6): f2fs_disable_checkpoint() finish, err:0 [ 1026.729705][T14926] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 1026.809474][ T5784] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1027.751526][T14915] loop3: detected capacity change from 0 to 32768 [ 1027.823557][T14915] (syz.3.2416,14915,0):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 1027.863681][T14915] (syz.3.2416,14915,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 1028.034124][T13908] block nbd7: Receive control failed (result -32) [ 1028.034124][T13712] block nbd7: Receive control failed (result -32) [ 1028.049714][T14944] loop5: detected capacity change from 0 to 512 [ 1028.115724][T14934] nbd7: detected capacity change from 0 to 128 [ 1028.191914][ T7552] block nbd7: Dead connection, failed to find a fallback [ 1028.199023][ T7552] block nbd7: shutting down sockets [ 1028.204240][ T7552] blk_print_req_error: 27 callbacks suppressed [ 1028.204260][ T7552] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1028.251891][ T5784] usb 8-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 1028.261063][ T5784] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1028.308575][ T5784] usb 8-1: config 0 descriptor?? [ 1028.320995][ T7552] buffer_io_error: 27 callbacks suppressed [ 1028.321018][ T7552] Buffer I/O error on dev nbd7, logical block 0, async page read [ 1028.351067][ T5784] usb 8-1: can't set config #0, error -71 [ 1028.357670][ T7552] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1028.366727][ T7552] Buffer I/O error on dev nbd7, logical block 0, async page read [ 1028.376816][ T5784] usb 8-1: USB disconnect, device number 30 [ 1028.387674][ T7552] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1028.404843][ T7552] Buffer I/O error on dev nbd7, logical block 0, async page read [ 1028.411845][T14944] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1028.412949][ T7552] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1028.528512][T14944] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1028.614177][T14954] loop1: detected capacity change from 0 to 4096 [ 1028.870531][ T7552] Buffer I/O error on dev nbd7, logical block 0, async page read [ 1028.879499][ T7552] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1028.998056][ T7552] Buffer I/O error on dev nbd7, logical block 0, async page read [ 1029.060930][ T7552] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1029.132475][ T7552] Buffer I/O error on dev nbd7, logical block 0, async page read [ 1029.658806][T14966] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1029.745855][ T7552] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1029.761476][ T7552] Buffer I/O error on dev nbd7, logical block 0, async page read [ 1030.478790][ T7552] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1030.488056][ T7552] Buffer I/O error on dev nbd7, logical block 0, async page read [ 1030.497888][ T7552] ldm_validate_partition_table(): Disk read failed. [ 1030.505598][ T7552] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1030.514739][ T7552] Buffer I/O error on dev nbd7, logical block 0, async page read [ 1030.587208][ T7552] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1030.596518][ T7552] Buffer I/O error on dev nbd7, logical block 0, async page read [ 1030.612905][ T7552] Dev nbd7: unable to read RDB block 0 [ 1030.623783][ T7552] nbd7: unable to read partition table [ 1031.122999][ T7552] ldm_validate_partition_table(): Disk read failed. [ 1031.132328][ T7552] Dev nbd7: unable to read RDB block 0 [ 1031.140016][ T7552] nbd7: unable to read partition table [ 1032.306024][T12228] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1032.624548][ T5784] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 1032.712569][ T5934] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 1033.172105][ T5784] usb 8-1: Using ep0 maxpacket: 32 [ 1033.625646][T12228] usb 2-1: Using ep0 maxpacket: 32 [ 1033.721407][ T5784] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1033.808667][ T5934] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1033.820689][ T5934] usb 1-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1033.885819][ T5934] usb 1-1: config 2 interface 0 has no altsetting 0 [ 1034.457956][ T5784] usb 8-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 1034.467085][ T5784] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1034.482282][ T5784] usb 8-1: Product: syz [ 1034.486624][ T5784] usb 8-1: Manufacturer: syz [ 1034.521517][ T5784] usb 8-1: SerialNumber: syz [ 1034.778939][ T5784] usb 8-1: config 0 descriptor?? [ 1034.825695][ T5934] usb 1-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 1034.840258][ T5934] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1034.870242][ T5934] usb 1-1: Product: syz [ 1034.925540][ T2069] block nbd5: Connection timed out, retrying (0/2 alive) [ 1034.932824][ T2069] block nbd5: Dead connection, failed to find a fallback [ 1034.940020][ T2069] block nbd5: shutting down sockets [ 1034.957689][ T2069] blk_print_req_error: 27 callbacks suppressed [ 1034.957714][ T2069] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1034.978620][ T5934] usb 1-1: Manufacturer: syz [ 1035.022290][ T2069] buffer_io_error: 27 callbacks suppressed [ 1035.022313][ T2069] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1035.051133][ T5934] usb 1-1: SerialNumber: syz [ 1035.140251][ T7557] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1035.149345][ T7557] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1035.157274][ T7557] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1035.166350][ T7557] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1035.174296][ T7557] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1035.288413][ T5934] usb 1-1: can't set config #2, error -71 [ 1035.294245][ T7557] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1035.304540][ T7557] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1035.314035][ T7557] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1035.322457][ T7557] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1035.332033][ T5934] usb 1-1: USB disconnect, device number 34 [ 1035.334482][ T7557] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1035.350157][ T5784] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 1035.353738][T12228] usb 2-1: device descriptor read/all, error -71 [ 1035.400402][ T5784] gspca_pac7302: reg_w() failed i: ff v: 01 error -71 [ 1035.407391][ T5784] gspca_pac7302 8-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 1035.423968][ T5784] usb 8-1: USB disconnect, device number 31 [ 1035.441058][T13712] Bluetooth: Unexpected start frame (len 16) [ 1035.476100][ T7557] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1035.497423][ T7557] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1035.523157][ T7557] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1035.571284][ T7557] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1035.581813][T15008] loop1: detected capacity change from 0 to 512 [ 1035.614420][ T7557] ldm_validate_partition_table(): Disk read failed. [ 1035.666224][ T7557] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1035.694355][ T7557] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1035.740780][ T7557] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1035.772914][ T7557] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1035.804641][ T7557] Dev nbd5: unable to read RDB block 0 [ 1035.819964][ T7557] nbd5: unable to read partition table [ 1035.853254][T15008] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1035.867285][T15014] loop7: detected capacity change from 0 to 1024 [ 1035.909746][ T7557] ldm_validate_partition_table(): Disk read failed. [ 1035.934322][ T7557] Dev nbd5: unable to read RDB block 0 [ 1035.940679][ T7557] nbd5: unable to read partition table [ 1036.015180][T15008] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1037.316964][T15008] loop1: detected capacity change from 0 to 256 [ 1037.439018][T15008] msdos: Unknown parameter 'nodots(sx' [ 1038.043833][T15040] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2451'. [ 1039.079164][T15053] loop6: detected capacity change from 0 to 64 [ 1039.141247][T15045] lo speed is unknown, defaulting to 1000 [ 1039.555965][T12228] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 1039.773816][T12228] usb 1-1: Using ep0 maxpacket: 32 [ 1039.790950][T12228] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1039.828504][T12228] usb 1-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 1039.828668][T15062] loop6: detected capacity change from 0 to 40427 [ 1039.848527][T15062] F2FS-fs (loop6): invalid crc value [ 1039.851940][T12228] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1039.909160][T15066] loop1: detected capacity change from 0 to 4096 [ 1039.947596][T15062] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 1039.970626][T15062] F2FS-fs (loop6): Start checkpoint disabled! [ 1039.990604][T15062] F2FS-fs (loop6): f2fs_disable_checkpoint() finish, err:0 [ 1039.995468][T15070] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 1040.022728][T12228] usb 1-1: Product: syz [ 1040.030682][T15062] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 1040.053278][T12228] usb 1-1: Manufacturer: syz [ 1040.060071][T12228] usb 1-1: SerialNumber: syz [ 1040.204533][T15073] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1040.228915][T12228] usb 1-1: config 0 descriptor?? [ 1040.496112][T12228] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 1040.516247][ T8194] block nbd6: Connection timed out, retrying (2/2 alive) [ 1040.530527][ T8194] block nbd6: Send control failed (result -32) [ 1040.538531][ T8194] block nbd6: Request send failed, requeueing [ 1040.539224][T10469] block nbd6: Receive control failed (result -32) [ 1040.547271][ T8194] block nbd6: Dead connection, failed to find a fallback [ 1040.553449][ T5646] block nbd6: Receive control failed (result -32) [ 1040.559390][ T8194] block nbd6: shutting down sockets [ 1040.571411][ T8194] blk_print_req_error: 27 callbacks suppressed [ 1040.571477][ T8194] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1040.604165][ T8194] buffer_io_error: 27 callbacks suppressed [ 1040.604224][ T8194] Buffer I/O error on dev nbd6, logical block 0, async page read [ 1040.619697][T12284] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1040.633327][T12284] Buffer I/O error on dev nbd6, logical block 0, async page read [ 1040.644098][T12284] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1040.653356][T12284] Buffer I/O error on dev nbd6, logical block 0, async page read [ 1040.664417][T12284] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1040.674472][T12284] Buffer I/O error on dev nbd6, logical block 0, async page read [ 1040.709071][T12284] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1041.085424][T12284] Buffer I/O error on dev nbd6, logical block 0, async page read [ 1041.096644][T12284] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1041.108912][T12284] Buffer I/O error on dev nbd6, logical block 0, async page read [ 1041.159384][T12284] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1041.239770][T12284] Buffer I/O error on dev nbd6, logical block 0, async page read [ 1041.278406][T12284] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1041.287671][T12284] Buffer I/O error on dev nbd6, logical block 0, async page read [ 1041.299836][T12284] ldm_validate_partition_table(): Disk read failed. [ 1041.307149][T12284] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1041.341455][T12284] Buffer I/O error on dev nbd6, logical block 0, async page read [ 1041.457029][T12284] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1041.525313][T12284] Buffer I/O error on dev nbd6, logical block 0, async page read [ 1041.681781][T12284] Dev nbd6: unable to read RDB block 0 [ 1041.759680][T12228] input: gspca_pac7302 as /devices/platform/dummy_hcd.0/usb1/1-1/input/input58 [ 1041.805063][T12284] nbd6: unable to read partition table [ 1042.100968][T15085] binder: 15080:15085 ioctl 81e8943c 0 returned -22 [ 1042.131699][T12284] ldm_validate_partition_table(): Disk read failed. [ 1042.283226][T12284] Dev nbd6: unable to read RDB block 0 [ 1042.406250][T12284] nbd6: unable to read partition table [ 1042.916352][ T5763] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1045.967668][T12228] usb 1-1: USB disconnect, device number 35 [ 1046.142354][ T57] kworker/u8:4: attempt to access beyond end of device [ 1046.142354][ T57] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1046.156467][ T57] CPU: 1 UID: 0 PID: 57 Comm: kworker/u8:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 1046.156502][ T57] Tainted: [L]=SOFTLOCKUP [ 1046.156511][ T57] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1046.156531][ T57] Workqueue: writeback wb_workfn (flush-7:6) [ 1046.156580][ T57] Call Trace: [ 1046.156590][ T57] [ 1046.156601][ T57] dump_stack_lvl+0xe8/0x150 [ 1046.156631][ T57] f2fs_stop_checkpoint+0x3c7/0x590 [ 1046.156680][ T57] f2fs_write_end_io+0x1274/0x1740 [ 1046.156740][ T57] __submit_merged_bio+0x256/0x6a0 [ 1046.156774][ T57] __submit_merged_write_cond+0x3c9/0x4e0 [ 1046.156828][ T57] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 1046.156889][ T57] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1046.156929][ T57] f2fs_write_data_pages+0x287e/0x34f0 [ 1046.156957][ T57] ? f2fs_build_free_nids+0xdc/0x1810 [ 1046.157045][ T57] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1046.157094][ T57] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 1046.157174][ T57] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 1046.157227][ T57] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1046.157255][ T57] ? __lock_acquire+0x6b5/0x2cf0 [ 1046.157306][ T57] ? set_shrinker_bit+0x7c/0x350 [ 1046.157333][ T57] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1046.157370][ T57] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1046.157407][ T57] do_writepages+0x32e/0x550 [ 1046.157442][ T57] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1046.157470][ T57] ? reacquire_held_locks+0x104/0x190 [ 1046.157501][ T57] ? writeback_sb_inodes+0x463/0x19d0 [ 1046.157538][ T57] __writeback_single_inode+0x133/0x10e0 [ 1046.157570][ T57] ? do_raw_spin_unlock+0xf5/0x210 [ 1046.157615][ T57] writeback_sb_inodes+0x979/0x19d0 [ 1046.157640][ T57] ? __lock_acquire+0x6b5/0x2cf0 [ 1046.157705][ T57] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1046.157731][ T57] ? do_raw_spin_lock+0x12b/0x2f0 [ 1046.157821][ T57] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1046.157849][ T57] ? rcu_is_watching+0x15/0xb0 [ 1046.157878][ T57] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1046.157919][ T57] wb_writeback+0x445/0xb00 [ 1046.157952][ T57] ? queue_io+0x201/0x470 [ 1046.157989][ T57] ? __pfx_wb_writeback+0x10/0x10 [ 1046.158013][ T57] ? do_raw_spin_lock+0x12b/0x2f0 [ 1046.158072][ T57] wb_workfn+0x3f8/0xf10 [ 1046.158106][ T57] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1046.158134][ T57] ? look_up_lock_class+0x57/0x110 [ 1046.158190][ T57] ? __pfx_wb_workfn+0x10/0x10 [ 1046.158231][ T57] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1046.158259][ T57] ? do_raw_spin_lock+0x12b/0x2f0 [ 1046.158292][ T57] ? lock_acquire+0x106/0x350 [ 1046.158321][ T57] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1046.158361][ T57] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1046.158397][ T57] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1046.158433][ T57] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1046.158465][ T57] ? process_scheduled_works+0xa70/0x1860 [ 1046.158494][ T57] ? process_scheduled_works+0xa70/0x1860 [ 1046.158522][ T57] process_scheduled_works+0xb5d/0x1860 [ 1046.158548][ T57] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1046.158619][ T57] ? __pfx_process_scheduled_works+0x10/0x10 [ 1046.158653][ T57] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1046.158681][ T57] ? assign_work+0x3d5/0x5e0 [ 1046.158714][ T57] worker_thread+0xa53/0xfc0 [ 1046.158764][ T57] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1046.158805][ T57] kthread+0x388/0x470 [ 1046.158838][ T57] ? __pfx_worker_thread+0x10/0x10 [ 1046.158862][ T57] ? __pfx_kthread+0x10/0x10 [ 1046.158896][ T57] ret_from_fork+0x514/0xb70 [ 1046.158927][ T57] ? __pfx_ret_from_fork+0x10/0x10 [ 1046.158953][ T57] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1046.158981][ T57] ? __switch_to+0xc79/0x1410 [ 1046.159022][ T57] ? __pfx_kthread+0x10/0x10 [ 1046.159057][ T57] ret_from_fork_asm+0x1a/0x30 [ 1046.159110][ T57] [ 1046.159119][ T57] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 1046.640657][ T5646] block nbd8: Receive control failed (result -32) [ 1046.659383][ T5646] block nbd8: Receive control failed (result -32) [ 1046.964268][T15103] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2468'. [ 1047.747753][ T7533] udevd[7533]: setting owner of /dev/bus/usb/001/035 to uid=0, gid=0 failed: No such file or directory [ 1047.885697][T15108] loop1: detected capacity change from 0 to 512 [ 1048.006359][T15111] loop3: detected capacity change from 0 to 512 [ 1048.075377][T15108] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1048.123754][T15087] nbd8: detected capacity change from 0 to 128 [ 1048.333905][T15108] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1048.443526][T15111] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1048.472899][T15111] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1048.497997][T15108] loop1: detected capacity change from 0 to 256 [ 1048.505378][T15108] msdos: Unknown parameter 'nodots(sx' [ 1048.672136][ T7664] block nbd8: Dead connection, failed to find a fallback [ 1048.732522][ T7664] block nbd8: shutting down sockets [ 1048.782514][ T7664] blk_print_req_error: 27 callbacks suppressed [ 1048.782537][ T7664] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1048.939249][ T7664] buffer_io_error: 27 callbacks suppressed [ 1048.939272][ T7664] Buffer I/O error on dev nbd8, logical block 0, async page read [ 1049.023291][ T7664] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1049.126603][ T7664] Buffer I/O error on dev nbd8, logical block 0, async page read [ 1049.164421][ T7664] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1049.204676][ T7664] Buffer I/O error on dev nbd8, logical block 0, async page read [ 1049.230890][ T7664] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1049.253026][ T5646] Bluetooth: Unexpected start frame (len 16) [ 1049.288222][ T7664] Buffer I/O error on dev nbd8, logical block 0, async page read [ 1049.332547][ T7664] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1049.372938][ T7664] Buffer I/O error on dev nbd8, logical block 0, async page read [ 1050.229357][T15136] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2466'. [ 1050.465977][ T7664] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1050.475189][ T7664] Buffer I/O error on dev nbd8, logical block 0, async page read [ 1050.483074][ T7664] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1050.553949][T15145] FAULT_INJECTION: forcing a failure. [ 1050.553949][T15145] name failslab, interval 1, probability 0, space 0, times 0 [ 1050.609349][T15148] loop3: detected capacity change from 0 to 64 [ 1050.617309][ T7664] Buffer I/O error on dev nbd8, logical block 0, async page read [ 1050.625334][ T7664] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1050.691158][T15144] loop0: detected capacity change from 0 to 4096 [ 1050.716307][ T7664] Buffer I/O error on dev nbd8, logical block 0, async page read [ 1050.720141][T15150] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1050.740595][ T7664] ldm_validate_partition_table(): Disk read failed. [ 1050.747597][ T7664] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1050.756650][ T7664] Buffer I/O error on dev nbd8, logical block 0, async page read [ 1050.764552][ T7664] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1050.790626][ T30] audit: type=1326 audit(1777233595.564:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15149 comm="syz.6.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f883b79cdd9 code=0x7ffc0000 [ 1050.814737][T15145] CPU: 1 UID: 0 PID: 15145 Comm: syz.5.2478 Tainted: G L syzkaller #0 PREEMPT(full) [ 1050.814769][T15145] Tainted: [L]=SOFTLOCKUP [ 1050.814777][T15145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1050.814790][T15145] Call Trace: [ 1050.814798][T15145] [ 1050.814806][T15145] dump_stack_lvl+0xe8/0x150 [ 1050.814835][T15145] should_fail_ex+0x412/0x560 [ 1050.814865][T15145] should_failslab+0xa8/0x100 [ 1050.814897][T15145] ? security_file_alloc+0x34/0x310 [ 1050.814917][T15145] kmem_cache_alloc_noprof+0x87/0x650 [ 1050.814943][T15145] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1050.814967][T15145] ? rcu_is_watching+0x15/0xb0 [ 1050.814993][T15145] ? trace_kmem_cache_alloc+0x29/0xe0 [ 1050.815034][T15145] security_file_alloc+0x34/0x310 [ 1050.815059][T15145] init_file+0x90/0x2b0 [ 1050.815085][T15145] alloc_empty_file+0x74/0x1d0 [ 1050.815109][T15145] alloc_file_pseudo+0x155/0x240 [ 1050.815136][T15145] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1050.815162][T15145] ? __pfx_shmem_get_inode+0x10/0x10 [ 1050.815196][T15145] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1050.815223][T15145] __shmem_file_setup+0x2e9/0x370 [ 1050.815250][T15145] ? __pfx___shmem_file_setup+0x10/0x10 [ 1050.815274][T15145] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1050.815299][T15145] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1050.815328][T15145] memfd_alloc_file+0x99/0x560 [ 1050.815353][T15145] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1050.815378][T15145] ? __pfx_memfd_alloc_file+0x10/0x10 [ 1050.815418][T15145] __se_sys_memfd_create+0x31f/0x410 [ 1050.815444][T15145] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1050.815466][T15145] do_syscall_64+0x15f/0xf80 [ 1050.815489][T15145] ? trace_irq_disable+0x3b/0x140 [ 1050.815524][T15145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1050.815544][T15145] RIP: 0033:0x7f477359cdd9 [ 1050.815567][T15145] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1050.815591][T15145] RSP: 002b:00007f47743cfe08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 1050.815615][T15145] RAX: ffffffffffffffda RBX: 0000000000000173 RCX: 00007f477359cdd9 [ 1050.815630][T15145] RDX: 00007f47743cfee0 RSI: 0000000000000000 RDI: 00007f4773632f49 [ 1050.815643][T15145] RBP: 0000200000000240 R08: 00000000ffffffff R09: 0000000000000000 [ 1050.815657][T15145] R10: 0000000000000001 R11: 0000000000000202 R12: 00002000000001c0 [ 1050.815670][T15145] R13: 00007f47743cfee0 R14: 00007f47743cfea0 R15: 0000200000000200 [ 1050.815700][T15145] [ 1051.426566][ T7664] Buffer I/O error on dev nbd8, logical block 0, async page read [ 1051.435188][ T7664] Dev nbd8: unable to read RDB block 0 [ 1051.441646][ T7664] nbd8: unable to read partition table [ 1051.452568][ T7664] ldm_validate_partition_table(): Disk read failed. [ 1051.459754][ T7664] Dev nbd8: unable to read RDB block 0 [ 1051.465906][ T7664] nbd8: unable to read partition table [ 1051.498110][ T30] audit: type=1326 audit(1777233595.564:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15149 comm="syz.6.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f883b79cdd9 code=0x7ffc0000 [ 1051.521779][ T30] audit: type=1326 audit(1777233595.564:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15149 comm="syz.6.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f883b79cdd9 code=0x7ffc0000 [ 1051.600483][ T30] audit: type=1326 audit(1777233595.564:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15149 comm="syz.6.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f883b79cdd9 code=0x7ffc0000 [ 1051.827017][ T5934] usb 7-1: new full-speed USB device number 25 using dummy_hcd [ 1051.834469][ T30] audit: type=1326 audit(1777233595.564:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15149 comm="syz.6.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f883b79cdd9 code=0x7ffc0000 [ 1052.189596][T15153] loop7: detected capacity change from 0 to 40427 [ 1052.308760][T15153] F2FS-fs (loop7): invalid crc value [ 1052.402181][T15153] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 1052.416455][T15153] F2FS-fs (loop7): Start checkpoint disabled! [ 1052.456339][T15153] F2FS-fs (loop7): f2fs_disable_checkpoint() finish, err:0 [ 1052.466286][T15153] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 1052.606911][ T30] audit: type=1326 audit(1777233595.564:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15149 comm="syz.6.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f883b79cdd9 code=0x7ffc0000 [ 1052.613971][ T5934] usb 7-1: device descriptor read/64, error -71 [ 1052.766159][ T30] audit: type=1326 audit(1777233595.564:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15149 comm="syz.6.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f883b79cdd9 code=0x7ffc0000 [ 1052.965382][ T30] audit: type=1326 audit(1777233595.564:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15149 comm="syz.6.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f883b79cdd9 code=0x7ffc0000 [ 1053.069654][ T5934] usb 7-1: new full-speed USB device number 26 using dummy_hcd [ 1053.345292][ T30] audit: type=1326 audit(1777233595.564:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15149 comm="syz.6.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f883b79cdd9 code=0x7ffc0000 [ 1053.638428][ T30] audit: type=1326 audit(1777233595.564:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15149 comm="syz.6.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f883b79cdd9 code=0x7ffc0000 [ 1053.756959][ T5934] usb 7-1: device descriptor read/64, error -71 [ 1053.888207][ T5934] usb usb7-port1: attempt power cycle [ 1053.935573][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 1053.941986][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.027109][T15170] loop5: detected capacity change from 0 to 4096 [ 1054.135901][T15173] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1054.562910][T15168] binder: 15164:15168 ioctl 81e8943c 0 returned -22 [ 1055.297187][T15167] netlink: 'syz.3.2482': attribute type 7 has an invalid length. [ 1055.359386][T15167] netlink: 'syz.3.2482': attribute type 8 has an invalid length. [ 1055.416041][ T57] kworker/u8:4: attempt to access beyond end of device [ 1055.416041][ T57] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1055.431829][ T57] CPU: 1 UID: 0 PID: 57 Comm: kworker/u8:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 1055.431873][ T57] Tainted: [L]=SOFTLOCKUP [ 1055.431885][ T57] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1055.431906][ T57] Workqueue: writeback wb_workfn (flush-7:7) [ 1055.431965][ T57] Call Trace: [ 1055.431978][ T57] [ 1055.431991][ T57] dump_stack_lvl+0xe8/0x150 [ 1055.432033][ T57] f2fs_stop_checkpoint+0x3c7/0x590 [ 1055.432107][ T57] f2fs_write_end_io+0x1274/0x1740 [ 1055.432186][ T57] __submit_merged_bio+0x256/0x6a0 [ 1055.432234][ T57] __submit_merged_write_cond+0x3c9/0x4e0 [ 1055.432305][ T57] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 1055.432383][ T57] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1055.432438][ T57] f2fs_write_data_pages+0x287e/0x34f0 [ 1055.432549][ T57] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1055.432715][ T57] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1055.432753][ T57] ? __lock_acquire+0x6b5/0x2cf0 [ 1055.432832][ T57] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1055.432873][ T57] do_writepages+0x32e/0x550 [ 1055.432914][ T57] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1055.432947][ T57] ? reacquire_held_locks+0x104/0x190 [ 1055.432983][ T57] ? writeback_sb_inodes+0x463/0x19d0 [ 1055.433026][ T57] __writeback_single_inode+0x133/0x10e0 [ 1055.433062][ T57] ? do_raw_spin_unlock+0xf5/0x210 [ 1055.433118][ T57] writeback_sb_inodes+0x979/0x19d0 [ 1055.433149][ T57] ? __lock_acquire+0x6b5/0x2cf0 [ 1055.433223][ T57] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1055.433251][ T57] ? do_raw_spin_lock+0x12b/0x2f0 [ 1055.433323][ T57] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1055.433346][ T57] ? rcu_is_watching+0x15/0xb0 [ 1055.433371][ T57] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1055.433403][ T57] wb_writeback+0x445/0xb00 [ 1055.433431][ T57] ? queue_io+0x201/0x470 [ 1055.433472][ T57] ? __pfx_wb_writeback+0x10/0x10 [ 1055.433492][ T57] ? do_raw_spin_lock+0x12b/0x2f0 [ 1055.433539][ T57] wb_workfn+0x3f8/0xf10 [ 1055.433566][ T57] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1055.433589][ T57] ? look_up_lock_class+0x57/0x110 [ 1055.433632][ T57] ? __pfx_wb_workfn+0x10/0x10 [ 1055.433665][ T57] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1055.433687][ T57] ? do_raw_spin_lock+0x12b/0x2f0 [ 1055.433714][ T57] ? lock_acquire+0x106/0x350 [ 1055.433738][ T57] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1055.433770][ T57] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1055.433796][ T57] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1055.433824][ T57] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1055.433850][ T57] ? process_scheduled_works+0xa70/0x1860 [ 1055.433870][ T57] ? process_scheduled_works+0xa70/0x1860 [ 1055.433893][ T57] process_scheduled_works+0xb5d/0x1860 [ 1055.433915][ T57] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1055.433971][ T57] ? __pfx_process_scheduled_works+0x10/0x10 [ 1055.434002][ T57] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1055.434033][ T57] ? assign_work+0x3d5/0x5e0 [ 1055.434073][ T57] worker_thread+0xa53/0xfc0 [ 1055.434127][ T57] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1055.434160][ T57] kthread+0x388/0x470 [ 1055.434187][ T57] ? __pfx_worker_thread+0x10/0x10 [ 1055.434207][ T57] ? __pfx_kthread+0x10/0x10 [ 1055.434234][ T57] ret_from_fork+0x514/0xb70 [ 1055.434260][ T57] ? __pfx_ret_from_fork+0x10/0x10 [ 1055.434281][ T57] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1055.434303][ T57] ? __switch_to+0xc79/0x1410 [ 1055.434336][ T57] ? __pfx_kthread+0x10/0x10 [ 1055.434365][ T57] ret_from_fork_asm+0x1a/0x30 [ 1055.434409][ T57] [ 1055.860293][ T57] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 1055.958115][ T5646] block nbd9: Receive control failed (result -32) [ 1055.966399][ T5646] block nbd9: Receive control failed (result -32) [ 1056.050025][T15172] nbd9: detected capacity change from 0 to 128 [ 1056.082430][ T7533] block nbd9: Dead connection, failed to find a fallback [ 1056.150831][ T7533] block nbd9: shutting down sockets [ 1056.189000][ T7533] blk_print_req_error: 27 callbacks suppressed [ 1056.189023][ T7533] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1056.342770][ T7533] buffer_io_error: 27 callbacks suppressed [ 1056.342794][ T7533] Buffer I/O error on dev nbd9, logical block 0, async page read [ 1056.459068][ T7533] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1056.487210][ T7533] Buffer I/O error on dev nbd9, logical block 0, async page read [ 1056.514494][ T7533] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1056.591652][ T7533] Buffer I/O error on dev nbd9, logical block 0, async page read [ 1056.622020][ T7533] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1056.666589][ T7533] Buffer I/O error on dev nbd9, logical block 0, async page read [ 1056.706224][ T7533] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1056.751760][ T7533] Buffer I/O error on dev nbd9, logical block 0, async page read [ 1056.779151][ T7533] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1056.812148][ T7533] Buffer I/O error on dev nbd9, logical block 0, async page read [ 1056.851920][ T7533] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1056.874191][ T7533] Buffer I/O error on dev nbd9, logical block 0, async page read [ 1056.890484][ T7533] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1056.917021][ T7533] Buffer I/O error on dev nbd9, logical block 0, async page read [ 1056.935290][ T7533] ldm_validate_partition_table(): Disk read failed. [ 1056.945378][ T7533] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1056.965265][ T7533] Buffer I/O error on dev nbd9, logical block 0, async page read [ 1056.985720][ T7533] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1057.005646][ T7533] Buffer I/O error on dev nbd9, logical block 0, async page read [ 1057.015799][ T9] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 1057.034721][ T7533] Dev nbd9: unable to read RDB block 0 [ 1057.041216][ T7533] nbd9: unable to read partition table [ 1057.222068][ T7533] ldm_validate_partition_table(): Disk read failed. [ 1057.253318][ T7533] Dev nbd9: unable to read RDB block 0 [ 1057.268759][ T9] usb 7-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1057.983703][ T7533] nbd9: unable to read partition table [ 1057.991081][ T9] usb 7-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1058.012813][ T9] usb 7-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1058.024109][ T9] usb 7-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1058.037900][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1058.089653][T15192] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1058.149113][T15204] loop1: detected capacity change from 0 to 4096 [ 1058.171085][ T5646] Bluetooth: Unexpected start frame (len 16) [ 1058.184844][T15208] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1058.793534][ T5784] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 1059.296176][T15207] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2497'. [ 1059.442596][T15192] loop6: detected capacity change from 0 to 4096 [ 1059.508175][ T5784] usb 8-1: Using ep0 maxpacket: 16 [ 1059.802079][T15192] ntfs3(loop6): ino=3, ntfs_set_state failed, -22. [ 1059.834205][T15219] ./cgroup: Can't lookup blockdev [ 1059.841232][T15192] ntfs3(loop6): Failed to initialize $Extend/$ObjId. [ 1059.932057][T15219] loop5: detected capacity change from 0 to 128 [ 1060.160764][ T9] aiptek 7-1:17.0: Aiptek using 400 ms programming speed [ 1060.385301][ T9] input: Aiptek as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:17.0/input/input59 [ 1060.541728][ T9] usb 7-1: USB disconnect, device number 28 [ 1060.547749][ C0] aiptek 7-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1060.728382][T15219] ufs: ufs_fill_super(): fragment size 3263967611 is not a power of 2 [ 1060.849334][ T5784] usb 8-1: config 8 has an invalid interface number: 206 but max is 0 [ 1060.857560][ T5784] usb 8-1: config 8 has no interface number 0 [ 1060.863710][ T5784] usb 8-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 1060.875505][ T5784] usb 8-1: config 8 interface 206 altsetting 1 endpoint 0x87 has invalid maxpacket 33058, setting to 1024 [ 1060.886815][ T5784] usb 8-1: config 8 interface 206 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 1060.897711][ T5784] usb 8-1: config 8 interface 206 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 1060.912112][ T5784] usb 8-1: config 8 interface 206 has no altsetting 0 [ 1061.098460][ T7278] ntfs3(loop6): ino=3, ntfs3_write_inode failed, -22. [ 1061.116421][ T6786] ntfs3(loop6): ino=3, ntfs_set_state failed, -22. [ 1061.125166][ T6786] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 1061.136798][ T6786] ntfs3(loop6): ino=3, ntfs_set_state failed, -22. [ 1061.144380][ T7278] ntfs3(loop6): ino=3, ntfs3_write_inode failed, -22. [ 1061.195840][ T5784] usb 8-1: string descriptor 0 read error: -71 [ 1061.202172][ T5784] usb 8-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 1061.211210][ T5784] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1061.323151][ T5784] usb 8-1: can't set config #8, error -71 [ 1061.346410][ T5784] usb 8-1: USB disconnect, device number 32 [ 1061.462860][ T5646] Bluetooth: Unexpected start frame (len 16) [ 1061.492849][T15215] loop0: detected capacity change from 0 to 32768 [ 1061.520877][ T5646] Bluetooth: Unexpected start frame (len 16) [ 1061.647663][T15249] loop6: detected capacity change from 0 to 512 [ 1061.681637][T15215] (syz.0.2498,15215,0):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 1061.692214][T15247] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2510'. [ 1061.731560][T15249] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1061.756412][T15215] (syz.0.2498,15215,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 1061.798568][T15238] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2508'. [ 1061.839525][T15249] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #11: comm syz.6.2505: ea_inode with extended attributes [ 1062.009241][T15249] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1062.104337][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 1062.120694][ C1] EXT4-fs (loop6): initial error at time 1777233606: ext4_xattr_inode_iget:441: inode 11 [ 1062.130574][ C1] EXT4-fs (loop6): last error at time 1777233606: ext4_xattr_inode_iget:441: inode 11 [ 1062.206413][T15249] EXT4-fs error (device loop6): ext4_xattr_inode_iget:446: comm syz.6.2505: error while reading EA inode 11 err=-117 [ 1062.402027][T15249] loop6: lost filesystem error report for type 5 error -117 [ 1062.510279][T15249] EXT4-fs (loop6): 1 orphan inode deleted [ 1062.627439][T15249] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1063.345504][T15266] xt_hashlimit: size too large, truncated to 1048576 [ 1065.462669][ T6786] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1066.695343][T15292] tap0: tun_chr_ioctl cmd 1074025677 [ 1066.718722][T15292] tap0: linktype set to 0 [ 1066.853011][T12228] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1067.516060][T12228] usb 2-1: Using ep0 maxpacket: 16 [ 1067.524259][T12228] usb 2-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 1067.537641][T12228] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 1067.550274][T12228] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1067.564338][T12228] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1067.591235][T12228] usb 2-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 1067.600766][T12228] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1067.614991][T12228] usb 2-1: Product: syz [ 1067.621874][T12228] usb 2-1: Manufacturer: syz [ 1067.627518][T12228] usb 2-1: SerialNumber: syz [ 1067.635842][T12228] usb 2-1: config 0 descriptor?? [ 1068.014527][T12228] appledisplay 2-1:0.0: Error while getting initial brightness: -110 [ 1068.646496][T15306] netlink: 'syz.5.2525': attribute type 7 has an invalid length. [ 1068.654512][T15306] netlink: 'syz.5.2525': attribute type 8 has an invalid length. [ 1069.933903][T12228] appledisplay 2-1:0.0: probe with driver appledisplay failed with error -110 [ 1069.957164][T12228] usb 2-1: USB disconnect, device number 48 [ 1070.020059][T15308] loop6: detected capacity change from 0 to 512 [ 1070.027371][T15308] EXT4-fs: Ignoring removed nobh option [ 1070.098123][T15308] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1071.154314][T15308] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 1071.335668][T15308] EXT4-fs (loop6): 1 truncate cleaned up [ 1071.358419][T15308] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1071.411808][T15330] loop1: detected capacity change from 0 to 512 [ 1071.460538][ T6786] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1071.462015][T10469] block nbd10: Receive control failed (result -32) [ 1071.483282][ T5646] block nbd10: Receive control failed (result -32) [ 1071.659597][T15330] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1071.672136][T15330] ext4 filesystem being mounted at /430/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1071.683122][T15314] nbd10: detected capacity change from 0 to 128 [ 1071.697598][ T7557] block nbd10: Dead connection, failed to find a fallback [ 1071.704939][ T7557] block nbd10: shutting down sockets [ 1071.727201][ T7557] blk_print_req_error: 27 callbacks suppressed [ 1071.727220][ T7557] I/O error, dev nbd10, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1071.900353][ T7557] buffer_io_error: 27 callbacks suppressed [ 1071.900392][ T7557] Buffer I/O error on dev nbd10, logical block 0, async page read [ 1071.968876][ T7557] I/O error, dev nbd10, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1072.130749][T15346] binder: 15340:15346 ioctl 81e8943c 0 returned -22 [ 1072.141173][T15330] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1072.296146][ T7557] Buffer I/O error on dev nbd10, logical block 0, async page read [ 1072.419100][ T7557] I/O error, dev nbd10, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1072.609495][ T7557] Buffer I/O error on dev nbd10, logical block 0, async page read [ 1072.689007][T15342] nbd11: detected capacity change from 0 to 128 [ 1072.762415][ T7557] I/O error, dev nbd10, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1073.050066][ T7557] Buffer I/O error on dev nbd10, logical block 0, async page read [ 1073.058124][ T7557] I/O error, dev nbd10, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1073.067266][ T7557] Buffer I/O error on dev nbd10, logical block 0, async page read [ 1073.075286][ T7557] I/O error, dev nbd10, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1073.084415][ T7557] Buffer I/O error on dev nbd10, logical block 0, async page read [ 1073.092423][ T7557] I/O error, dev nbd10, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1073.101571][ T7557] Buffer I/O error on dev nbd10, logical block 0, async page read [ 1073.109554][ T7557] I/O error, dev nbd10, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1073.118682][ T7557] Buffer I/O error on dev nbd10, logical block 0, async page read [ 1073.126587][ T7557] ldm_validate_partition_table(): Disk read failed. [ 1073.994601][ T7557] I/O error, dev nbd10, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1074.003789][ T7557] Buffer I/O error on dev nbd10, logical block 0, async page read [ 1074.011850][ T7557] I/O error, dev nbd10, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1074.021906][ T7557] Buffer I/O error on dev nbd10, logical block 0, async page read [ 1074.031879][ T7557] Dev nbd10: unable to read RDB block 0 [ 1074.038074][ T7557] nbd10: unable to read partition table [ 1074.230399][ T7557] ldm_validate_partition_table(): Disk read failed. [ 1074.302782][ T7557] Dev nbd10: unable to read RDB block 0 [ 1074.901458][ T7557] nbd10: unable to read partition table [ 1076.490392][T15381] capability: warning: `syz.7.2544' uses 32-bit capabilities (legacy support in use) [ 1076.551585][ T5646] block nbd11: Receive control failed (result -104) [ 1076.582875][T10469] block nbd11: Receive control failed (result -32) [ 1076.727352][T15381] program syz.7.2544 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1076.929668][T15389] binder: 15382:15389 ioctl 81e8943c 0 returned -22 [ 1076.943771][T15381] loop7: detected capacity change from 0 to 1156 [ 1077.549074][T10469] Bluetooth: Unexpected start frame (len 16) [ 1078.278580][T15412] netlink: 'syz.1.2553': attribute type 7 has an invalid length. [ 1078.499800][T15412] netlink: 'syz.1.2553': attribute type 8 has an invalid length. [ 1079.012272][T15398] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2550'. [ 1080.186218][T15439] loop1: detected capacity change from 0 to 512 [ 1080.578609][T15439] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.2561: iget: bad i_size value: 38620345925642 [ 1080.906347][T15439] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1080.906924][T15439] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.2561: couldn't read orphan inode 15 (err -117) [ 1080.946855][T15445] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2565'. [ 1080.964890][T15445] FAULT_INJECTION: forcing a failure. [ 1080.964890][T15445] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1080.993357][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 1080.993415][ C1] EXT4-fs (loop1): initial error at time 1777233625: ext4_orphan_get:1397: inode 15 [ 1080.993457][ C1] EXT4-fs (loop1): last error at time 1777233625: ext4_orphan_get:1397: inode 15 [ 1081.024450][ T5784] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1081.045975][T15439] loop1: lost filesystem error report for type 5 error -117 [ 1081.046304][T15445] CPU: 0 UID: 0 PID: 15445 Comm: syz.6.2565 Tainted: G L syzkaller #0 PREEMPT(full) [ 1081.046355][T15445] Tainted: [L]=SOFTLOCKUP [ 1081.046370][T15445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1081.046392][T15445] Call Trace: [ 1081.046406][T15445] [ 1081.046421][T15445] dump_stack_lvl+0xe8/0x150 [ 1081.046467][T15445] should_fail_ex+0x412/0x560 [ 1081.046551][T15445] _copy_from_user+0x2d/0xb0 [ 1081.046607][T15445] ___sys_sendmsg+0x1c6/0x360 [ 1081.046654][T15445] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1081.046697][T15445] ? __lock_acquire+0x6b5/0x2cf0 [ 1081.046745][T15445] ? __pfx____sys_sendmsg+0x10/0x10 [ 1081.046853][T15445] ? __fget_files+0x2a/0x420 [ 1081.046895][T15445] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1081.046938][T15445] ? __fget_files+0x3a0/0x420 [ 1081.047002][T15445] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1081.047056][T15445] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1081.047119][T15445] ? __pfx_ksys_write+0x10/0x10 [ 1081.047178][T15445] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1081.047208][T15445] do_syscall_64+0x15f/0xf80 [ 1081.047266][T15445] ? trace_irq_disable+0x3b/0x140 [ 1081.047316][T15445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1081.047344][T15445] RIP: 0033:0x7f883b79cdd9 [ 1081.047374][T15445] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1081.047398][T15445] RSP: 002b:00007f883c5b4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1081.047439][T15445] RAX: ffffffffffffffda RBX: 00007f883ba15fa0 RCX: 00007f883b79cdd9 [ 1081.047460][T15445] RDX: 00000000040008c0 RSI: 0000200000000280 RDI: 0000000000000003 [ 1081.047497][T15445] RBP: 00007f883c5b4090 R08: 0000000000000000 R09: 0000000000000000 [ 1081.047518][T15445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1081.047537][T15445] R13: 00007f883ba16038 R14: 00007f883ba15fa0 R15: 00007ffd73b073d8 [ 1081.047591][T15445] [ 1081.054572][T15439] EXT4-fs (loop1): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1081.377175][ T5623] EXT4-fs (loop1): unmounting filesystem 00000000-0000-00a1-0000-000000000000. [ 1081.796202][ T5784] usb 4-1: Using ep0 maxpacket: 32 [ 1082.025809][T13500] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1083.297614][T15473] loop6: detected capacity change from 0 to 32768 [ 1083.305679][ T5784] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1083.326919][T15473] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1083.335214][T15473] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1083.407502][T15473] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 1083.417999][ T9] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 1083.425755][ T9] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 1083.625367][T13500] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1083.635265][T13500] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1083.644334][T13500] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1083.654366][ T5784] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1083.662168][ T5784] usb 4-1: can't read configurations, error -71 [ 1083.680948][T15480] FAULT_INJECTION: forcing a failure. [ 1083.680948][T15480] name failslab, interval 1, probability 0, space 0, times 0 [ 1083.737876][T15480] CPU: 1 UID: 0 PID: 15480 Comm: syz.7.2574 Tainted: G L syzkaller #0 PREEMPT(full) [ 1083.737918][T15480] Tainted: [L]=SOFTLOCKUP [ 1083.737928][T15480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1083.737945][T15480] Call Trace: [ 1083.737955][T15480] [ 1083.737967][T15480] dump_stack_lvl+0xe8/0x150 [ 1083.738002][T15480] should_fail_ex+0x412/0x560 [ 1083.738043][T15480] should_failslab+0xa8/0x100 [ 1083.738093][T15480] __kmalloc_noprof+0xe8/0x760 [ 1083.738128][T15480] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1083.738162][T15480] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1083.738215][T15480] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1083.738258][T15480] ? tomoyo_domain+0xd7/0x130 [ 1083.738302][T15480] ? tomoyo_path_number_perm+0x219/0x630 [ 1083.738336][T15480] tomoyo_path_number_perm+0x246/0x630 [ 1083.738370][T15480] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1083.738398][T15480] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1083.738432][T15480] ? __lock_acquire+0x6b5/0x2cf0 [ 1083.738468][T15480] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1083.738509][T15480] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1083.738540][T15480] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1083.738601][T15480] ? __fget_files+0x2a/0x420 [ 1083.738638][T15480] ? __fget_files+0x2a/0x420 [ 1083.738671][T15480] ? __fget_files+0x3a0/0x420 [ 1083.738702][T15480] ? __fget_files+0x2a/0x420 [ 1083.738739][T15480] security_file_ioctl+0xc3/0x2a0 [ 1083.738774][T15480] __se_sys_ioctl+0x47/0x170 [ 1083.738815][T15480] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1083.738844][T15480] do_syscall_64+0x15f/0xf80 [ 1083.738877][T15480] ? trace_irq_disable+0x3b/0x140 [ 1083.738925][T15480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1083.738952][T15480] RIP: 0033:0x7f903699cdd9 [ 1083.738976][T15480] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1083.738999][T15480] RSP: 002b:00007f90378d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1083.739028][T15480] RAX: ffffffffffffffda RBX: 00007f9036c15fa0 RCX: 00007f903699cdd9 [ 1083.739048][T15480] RDX: 0000200000000080 RSI: 000000004008af30 RDI: 0000000000000007 [ 1083.739066][T15480] RBP: 00007f90378d5090 R08: 0000000000000000 R09: 0000000000000000 [ 1083.739083][T15480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1083.739099][T15480] R13: 00007f9036c16038 R14: 00007f9036c15fa0 R15: 00007ffc6983b248 [ 1083.739140][T15480] [ 1083.739152][T15480] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1084.012404][ T9] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 586ms [ 1084.034201][T13500] aiptek 2-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 1084.732851][ T9] gfs2: fsid=syz:syz.0: jid=0: Done [ 1084.741319][T15473] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 1084.786540][T15457] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2566'. [ 1084.823359][T15490] loop1: detected capacity change from 0 to 512 [ 1085.075847][T15473] gfs2: fsid=syz:syz.0: found 1 quota changes [ 1085.674584][T15494] binder: 15491:15494 ioctl 81e8943c 0 returned -22 [ 1085.726219][T15490] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1085.789171][T15490] ext4 filesystem being mounted at /436/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1086.290089][ T9] usb 2-1: USB disconnect, device number 49 [ 1086.397925][ T5623] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1086.694197][T15508] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2581'. [ 1086.834380][T15513] 9p: Bad value for 'rfdno' [ 1086.858102][T15513] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2581'. [ 1087.012024][T15515] FAULT_INJECTION: forcing a failure. [ 1087.012024][T15515] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1087.037358][T15515] CPU: 1 UID: 0 PID: 15515 Comm: syz.1.2584 Tainted: G L syzkaller #0 PREEMPT(full) [ 1087.037387][T15515] Tainted: [L]=SOFTLOCKUP [ 1087.037394][T15515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1087.037406][T15515] Call Trace: [ 1087.037414][T15515] [ 1087.037422][T15515] dump_stack_lvl+0xe8/0x150 [ 1087.037452][T15515] should_fail_ex+0x412/0x560 [ 1087.037494][T15515] _copy_from_user+0x2d/0xb0 [ 1087.037524][T15515] ___sys_sendmsg+0x1c6/0x360 [ 1087.037549][T15515] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1087.037572][T15515] ? __lock_acquire+0x6b5/0x2cf0 [ 1087.037600][T15515] ? __pfx____sys_sendmsg+0x10/0x10 [ 1087.037658][T15515] ? __fget_files+0x2a/0x420 [ 1087.037681][T15515] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1087.037703][T15515] ? __fget_files+0x3a0/0x420 [ 1087.037736][T15515] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1087.037765][T15515] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1087.037799][T15515] ? __pfx_ksys_write+0x10/0x10 [ 1087.037836][T15515] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1087.037857][T15515] do_syscall_64+0x15f/0xf80 [ 1087.037879][T15515] ? trace_irq_disable+0x3b/0x140 [ 1087.037914][T15515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1087.037933][T15515] RIP: 0033:0x7f3eedf9cdd9 [ 1087.037951][T15515] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1087.037968][T15515] RSP: 002b:00007f3eeedbf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1087.037988][T15515] RAX: ffffffffffffffda RBX: 00007f3eee215fa0 RCX: 00007f3eedf9cdd9 [ 1087.038003][T15515] RDX: 0000000004008804 RSI: 0000200000000d00 RDI: 0000000000000003 [ 1087.038019][T15515] RBP: 00007f3eeedbf090 R08: 0000000000000000 R09: 0000000000000000 [ 1087.038039][T15515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1087.038057][T15515] R13: 00007f3eee216038 R14: 00007f3eee215fa0 R15: 00007fff785fb948 [ 1087.038105][T15515] [ 1087.449605][T10469] Bluetooth: Unexpected start frame (len 16) [ 1088.005536][T15526] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2587'. [ 1088.448681][T15535] FAULT_INJECTION: forcing a failure. [ 1088.448681][T15535] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1088.461860][T15535] CPU: 1 UID: 0 PID: 15535 Comm: syz.5.2590 Tainted: G L syzkaller #0 PREEMPT(full) [ 1088.461901][T15535] Tainted: [L]=SOFTLOCKUP [ 1088.461911][T15535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1088.461927][T15535] Call Trace: [ 1088.461938][T15535] [ 1088.461949][T15535] dump_stack_lvl+0xe8/0x150 [ 1088.461987][T15535] should_fail_ex+0x412/0x560 [ 1088.462028][T15535] _copy_from_user+0x2d/0xb0 [ 1088.462069][T15535] ___sys_sendmsg+0x1c6/0x360 [ 1088.462105][T15535] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1088.462137][T15535] ? __lock_acquire+0x6b5/0x2cf0 [ 1088.462173][T15535] ? __pfx____sys_sendmsg+0x10/0x10 [ 1088.462258][T15535] ? __fget_files+0x2a/0x420 [ 1088.462290][T15535] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1088.462321][T15535] ? __fget_files+0x3a0/0x420 [ 1088.462367][T15535] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1088.462406][T15535] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1088.462454][T15535] ? __pfx_ksys_write+0x10/0x10 [ 1088.462503][T15535] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1088.462533][T15535] do_syscall_64+0x15f/0xf80 [ 1088.462563][T15535] ? trace_irq_disable+0x3b/0x140 [ 1088.462612][T15535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1088.462639][T15535] RIP: 0033:0x7f477359cdd9 [ 1088.462665][T15535] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1088.462687][T15535] RSP: 002b:00007f47743d0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1088.462715][T15535] RAX: ffffffffffffffda RBX: 00007f4773815fa0 RCX: 00007f477359cdd9 [ 1088.462736][T15535] RDX: 0000000000000000 RSI: 0000200000006040 RDI: 0000000000000004 [ 1088.462754][T15535] RBP: 00007f47743d0090 R08: 0000000000000000 R09: 0000000000000000 [ 1088.462772][T15535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1088.462789][T15535] R13: 00007f4773816038 R14: 00007f4773815fa0 R15: 00007fff603d8cb8 [ 1088.462831][T15535] [ 1088.470521][T15531] lo speed is unknown, defaulting to 1000 [ 1089.888584][T15547] binder: 15541:15547 ioctl 81e8943c 0 returned -22 [ 1091.029285][T15528] loop0: detected capacity change from 0 to 32768 [ 1091.074237][T15528] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1091.203159][ T9] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1091.291374][T15528] XFS (loop0): Ending clean mount [ 1091.314416][T15528] XFS (loop0): Quotacheck needed: Please wait. [ 1091.381747][T15528] XFS (loop0): Quotacheck: Done. [ 1091.411944][T10469] block nbd12: Receive control failed (result -32) [ 1091.422117][ T5646] block nbd12: Receive control failed (result -32) [ 1091.425712][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 1091.435828][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1091.454249][ T9] usb 4-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 1091.463754][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1091.472340][ T5620] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1091.488791][ T9] usb 4-1: Product: syz [ 1091.493260][ T9] usb 4-1: Manufacturer: syz [ 1091.498225][ T9] usb 4-1: SerialNumber: syz [ 1091.531321][ T9] usb 4-1: config 0 descriptor?? [ 1091.547216][ T9] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 1091.719537][T15548] nbd12: detected capacity change from 0 to 128 [ 1091.735765][ T7533] block nbd12: Dead connection, failed to find a fallback [ 1091.751174][ T7533] block nbd12: shutting down sockets [ 1091.757003][ T7533] blk_print_req_error: 27 callbacks suppressed [ 1091.764890][ T7533] I/O error, dev nbd12, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1091.817741][ T7533] buffer_io_error: 27 callbacks suppressed [ 1091.817790][ T7533] Buffer I/O error on dev nbd12, logical block 0, async page read [ 1091.910342][T15571] loop0: detected capacity change from 0 to 512 [ 1091.920130][ T7533] I/O error, dev nbd12, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1091.957531][ T7533] Buffer I/O error on dev nbd12, logical block 0, async page read [ 1091.985645][ T7533] I/O error, dev nbd12, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1092.036053][ T7533] Buffer I/O error on dev nbd12, logical block 0, async page read [ 1092.081638][T15575] loop5: detected capacity change from 0 to 4096 [ 1092.087632][ T7533] I/O error, dev nbd12, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1092.559336][ T9] gspca_pac7302: reg_w() failed i: ff v: 01 error -110 [ 1092.573100][T15571] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1092.592622][ T9] gspca_pac7302 4-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 1092.616905][T15582] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1092.631755][ T7533] Buffer I/O error on dev nbd12, logical block 0, async page read [ 1092.726841][ T7533] I/O error, dev nbd12, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1092.736470][ T7533] Buffer I/O error on dev nbd12, logical block 0, async page read [ 1092.885277][T15571] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1092.892513][ T7533] I/O error, dev nbd12, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1093.339010][ T7533] Buffer I/O error on dev nbd12, logical block 0, async page read [ 1093.349385][T15571] loop0: detected capacity change from 0 to 256 [ 1093.356947][T15571] msdos: Unknown parameter 'nodots(sx' [ 1093.434455][ T7533] I/O error, dev nbd12, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1093.443773][ T7533] Buffer I/O error on dev nbd12, logical block 0, async page read [ 1093.451904][ T7533] I/O error, dev nbd12, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1093.461269][ T7533] Buffer I/O error on dev nbd12, logical block 0, async page read [ 1093.573304][ T7533] ldm_validate_partition_table(): Disk read failed. [ 1093.585965][ T7533] I/O error, dev nbd12, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1093.595390][ T7533] Buffer I/O error on dev nbd12, logical block 0, async page read [ 1093.603442][ T7533] I/O error, dev nbd12, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1093.612639][ T7533] Buffer I/O error on dev nbd12, logical block 0, async page read [ 1093.621107][ T7533] Dev nbd12: unable to read RDB block 0 [ 1093.908989][T15594] binder: 15592:15594 ioctl 81e8943c 0 returned -22 [ 1094.704678][ T7533] nbd12: unable to read partition table [ 1094.872144][ T7533] ldm_validate_partition_table(): Disk read failed. [ 1094.917557][ T9] usb 4-1: USB disconnect, device number 39 [ 1094.937634][ T7533] Dev nbd12: unable to read RDB block 0 [ 1094.993136][ T7533] nbd12: unable to read partition table [ 1095.231136][T15606] loop3: detected capacity change from 0 to 64 [ 1095.286030][T12228] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 1095.450885][T15606] bfs: Unknown parameter '/sys/kernel/mm/transparent_hugepage/khugepaged/scan_sleep_millisecs' [ 1095.685884][T12228] usb 8-1: Using ep0 maxpacket: 32 [ 1095.726837][T12228] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1095.831803][T12228] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1095.850804][T15607] loop3: detected capacity change from 0 to 64 [ 1095.866312][ T5763] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 1095.888422][T12228] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1095.925397][T12228] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1095.941796][T15610] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1095.948948][T15610] overlayfs: failed to set xattr on upper [ 1095.950501][T12228] usb 8-1: config 0 descriptor?? [ 1095.976248][T15610] overlayfs: ...falling back to redirect_dir=nofollow. [ 1095.990835][T15610] overlayfs: ...falling back to index=off. [ 1096.008663][T12228] hub 8-1:0.0: USB hub found [ 1096.027557][T15610] overlayfs: ...falling back to uuid=null. [ 1096.054336][T15610] overlayfs: failed to clone lowerpath [ 1096.093412][ T5646] block nbd14: Receive control failed (result -32) [ 1096.096419][T10469] block nbd14: Receive control failed (result -32) [ 1096.116281][ T5763] usb 7-1: Using ep0 maxpacket: 32 [ 1096.157284][T15613] netlink: 'syz.5.2609': attribute type 2 has an invalid length. [ 1096.157686][ T5763] usb 7-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1096.165049][T15613] netlink: 'syz.5.2609': attribute type 1 has an invalid length. [ 1096.166188][T15613] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2609'. [ 1096.193214][ T5763] usb 7-1: config 0 interface 0 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1096.226244][T12228] hub 8-1:0.0: 1 port detected [ 1096.239320][ T5763] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1096.250592][ T5763] usb 7-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.00 [ 1096.262839][ T5763] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1096.279975][T15595] nbd14: detected capacity change from 0 to 128 [ 1096.288734][ T7557] block nbd14: Dead connection, failed to find a fallback [ 1096.307528][ T7557] block nbd14: shutting down sockets [ 1096.313933][ T7557] ldm_validate_partition_table(): Disk read failed. [ 1096.327185][ T7557] Dev nbd14: unable to read RDB block 0 [ 1096.333425][ T7557] nbd14: unable to read partition table [ 1096.366794][ T7557] ldm_validate_partition_table(): Disk read failed. [ 1096.377959][ T5763] usb 7-1: config 0 descriptor?? [ 1096.417818][ T7557] Dev nbd14: unable to read RDB block 0 [ 1096.424502][ T7557] nbd14: unable to read partition table [ 1096.650149][T12228] usb 8-1: USB disconnect, device number 33 [ 1096.997867][ T5763] lenovo 0003:17EF:60A3.000A: unknown main item tag 0x0 [ 1097.018809][ T5763] lenovo 0003:17EF:60A3.000A: unknown main item tag 0x0 [ 1097.028679][T15626] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1097.045296][ T5763] lenovo 0003:17EF:60A3.000A: unknown main item tag 0x0 [ 1097.054985][T15602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1097.077998][T15626] overlayfs: failed to set xattr on upper [ 1097.090360][ T5763] lenovo 0003:17EF:60A3.000A: unknown main item tag 0x0 [ 1097.093559][T15602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1097.102698][T15626] overlayfs: ...falling back to redirect_dir=nofollow. [ 1097.117471][ T5763] lenovo 0003:17EF:60A3.000A: unknown main item tag 0x0 [ 1097.145869][ T5763] lenovo 0003:17EF:60A3.000A: unknown main item tag 0x0 [ 1097.174205][ T5763] lenovo 0003:17EF:60A3.000A: unknown main item tag 0x0 [ 1097.246512][T15630] binder: 15617:15630 ioctl 81e8943c 0 returned -22 [ 1097.301223][T15626] overlayfs: ...falling back to index=off. [ 1097.327437][ T5763] lenovo 0003:17EF:60A3.000A: unknown main item tag 0x0 [ 1097.374903][ T5763] lenovo 0003:17EF:60A3.000A: unknown main item tag 0x0 [ 1097.398948][T15626] overlayfs: ...falling back to uuid=null. [ 1097.464956][ T5763] lenovo 0003:17EF:60A3.000A: unknown main item tag 0x0 [ 1097.501833][T15626] overlayfs: failed to clone lowerpath [ 1097.559709][T15634] netlink: 'syz.1.2613': attribute type 2 has an invalid length. [ 1097.594139][T15634] netlink: 'syz.1.2613': attribute type 1 has an invalid length. [ 1097.610636][T15631] loop3: detected capacity change from 0 to 4096 [ 1097.644998][ T5763] lenovo 0003:17EF:60A3.000A: hidraw0: USB HID v0.83 Device [HID 17ef:60a3] on usb-dummy_hcd.6-1/input0 [ 1098.194630][T15637] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1098.560127][ T5763] usb 7-1: USB disconnect, device number 29 [ 1098.568700][T15621] block nbd13: shutting down sockets [ 1098.595700][T15626] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2613'. [ 1098.795853][T15636] fido_id[15636]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 1098.799874][T15643] FAULT_INJECTION: forcing a failure. [ 1098.799874][T15643] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1098.905197][T15643] CPU: 0 UID: 0 PID: 15643 Comm: syz.6.2617 Tainted: G L syzkaller #0 PREEMPT(full) [ 1098.905240][T15643] Tainted: [L]=SOFTLOCKUP [ 1098.905250][T15643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1098.905266][T15643] Call Trace: [ 1098.905276][T15643] [ 1098.905287][T15643] dump_stack_lvl+0xe8/0x150 [ 1098.905324][T15643] should_fail_ex+0x412/0x560 [ 1098.905364][T15643] _copy_from_user+0x2d/0xb0 [ 1098.905409][T15643] __sys_bpf+0x229/0x950 [ 1098.905458][T15643] ? __pfx___sys_bpf+0x10/0x10 [ 1098.905510][T15643] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1098.905539][T15643] ? ksys_write+0x242/0x270 [ 1098.905577][T15643] ? __pfx_ksys_write+0x10/0x10 [ 1098.905616][T15643] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1098.905642][T15643] __x64_sys_bpf+0x7c/0x90 [ 1098.905676][T15643] do_syscall_64+0x15f/0xf80 [ 1098.905704][T15643] ? trace_irq_disable+0x3b/0x140 [ 1098.905745][T15643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1098.905769][T15643] RIP: 0033:0x7f883b79cdd9 [ 1098.905790][T15643] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1098.905810][T15643] RSP: 002b:00007f883c5b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1098.905834][T15643] RAX: ffffffffffffffda RBX: 00007f883ba15fa0 RCX: 00007f883b79cdd9 [ 1098.905851][T15643] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 1098.905867][T15643] RBP: 00007f883c5b4090 R08: 0000000000000000 R09: 0000000000000000 [ 1098.905882][T15643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1098.905896][T15643] R13: 00007f883ba16038 R14: 00007f883ba15fa0 R15: 00007ffd73b073d8 [ 1098.905933][T15643] [ 1099.245729][T15646] FAULT_INJECTION: forcing a failure. [ 1099.245729][T15646] name failslab, interval 1, probability 0, space 0, times 0 [ 1099.258969][T15646] CPU: 1 UID: 0 PID: 15646 Comm: syz.3.2618 Tainted: G L syzkaller #0 PREEMPT(full) [ 1099.259008][T15646] Tainted: [L]=SOFTLOCKUP [ 1099.259019][T15646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1099.259036][T15646] Call Trace: [ 1099.259047][T15646] [ 1099.259058][T15646] dump_stack_lvl+0xe8/0x150 [ 1099.259095][T15646] should_fail_ex+0x412/0x560 [ 1099.259136][T15646] should_failslab+0xa8/0x100 [ 1099.259183][T15646] __kvmalloc_node_noprof+0x178/0x8a0 [ 1099.259227][T15646] ? io_pin_pages+0x9f/0x1b0 [ 1099.259261][T15646] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1099.259301][T15646] io_pin_pages+0x9f/0x1b0 [ 1099.259335][T15646] io_sqe_buffer_register+0x239/0x1870 [ 1099.259371][T15646] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1099.259414][T15646] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1099.259454][T15646] ? _parse_integer_limit+0x1ae/0x1f0 [ 1099.259496][T15646] ? __pfx_io_sqe_buffer_register+0x10/0x10 [ 1099.259527][T15646] ? __lock_acquire+0x6b5/0x2cf0 [ 1099.259561][T15646] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1099.259594][T15646] ? iovec_from_user+0x1ba/0x250 [ 1099.259639][T15646] __io_register_rsrc_update+0x4e1/0x1280 [ 1099.259672][T15646] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1099.259711][T15646] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1099.259754][T15646] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1099.259794][T15646] ? __pfx___io_register_rsrc_update+0x10/0x10 [ 1099.259833][T15646] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1099.259882][T15646] io_register_rsrc_update+0x1b1/0x1c0 [ 1099.259918][T15646] ? __pfx_io_register_rsrc_update+0x10/0x10 [ 1099.259953][T15646] ? __fget_files+0x2a/0x420 [ 1099.259998][T15646] __se_sys_io_uring_register+0xfb4/0x1ac0 [ 1099.260039][T15646] ? __pfx___se_sys_io_uring_register+0x10/0x10 [ 1099.260073][T15646] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1099.260105][T15646] ? ksys_write+0x242/0x270 [ 1099.260149][T15646] ? __pfx_ksys_write+0x10/0x10 [ 1099.260197][T15646] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1099.260231][T15646] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1099.260262][T15646] do_syscall_64+0x15f/0xf80 [ 1099.260293][T15646] ? trace_irq_disable+0x3b/0x140 [ 1099.260343][T15646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1099.260371][T15646] RIP: 0033:0x7ff94619cdd9 [ 1099.260396][T15646] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1099.260420][T15646] RSP: 002b:00007ff94711b028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 1099.260448][T15646] RAX: ffffffffffffffda RBX: 00007ff946416090 RCX: 00007ff94619cdd9 [ 1099.260469][T15646] RDX: 0000200000000100 RSI: 0000000000000010 RDI: 0000000000000003 [ 1099.260494][T15646] RBP: 00007ff94711b090 R08: 0000000000000000 R09: 0000000000000000 [ 1099.260512][T15646] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000001 [ 1099.260529][T15646] R13: 00007ff946416128 R14: 00007ff946416090 R15: 00007ffeb98d0cd8 [ 1099.260572][T15646] [ 1099.767382][T15658] loop1: detected capacity change from 0 to 256 [ 1100.311661][T15658] FAT-fs (loop1): bogus number of FAT sectors [ 1100.390310][T15658] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1100.432572][T15659] loop7: detected capacity change from 0 to 512 [ 1100.550350][T15659] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1100.565536][T15659] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1100.662721][T15653] binder: 15649:15653 ioctl 81e8943c 0 returned -22 [ 1101.226928][T15651] nbd13: detected capacity change from 0 to 128 [ 1101.432441][T15680] loop5: detected capacity change from 0 to 4096 [ 1101.478908][T15680] ntfs3(loop5): Different NTFS sector size (1024) and media sector size (512). [ 1101.599036][T15680] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 1101.691391][T15680] ntfs3(loop5): Failed to load $Extend (-22). [ 1101.734684][T15680] ntfs3(loop5): Failed to initialize $Extend. [ 1101.745873][T15689] loop0: detected capacity change from 0 to 512 [ 1102.133293][T15689] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1102.187216][T15696] tipc: Started in network mode [ 1102.222571][T15696] tipc: Node identity 364e548037ee, cluster identity 4711 [ 1102.245124][T15696] tipc: Enabled bearer , priority 18 [ 1102.371240][T15689] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1102.705753][ T5763] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1102.917676][ T5763] usb 6-1: Using ep0 maxpacket: 8 [ 1103.102937][ T5763] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1103.314344][T12228] tipc: Node number set to 27284608 [ 1103.330219][ T5763] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1103.376719][T15689] loop0: detected capacity change from 0 to 256 [ 1103.383337][ T5763] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1103.418924][T15689] msdos: Unknown parameter 'nodots(sx' [ 1103.453657][ T5763] usb 6-1: config 0 descriptor?? [ 1103.733856][ T5763] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1103.755073][ T8194] block nbd11: Connection timed out, retrying (0/2 alive) [ 1103.762372][ T8194] block nbd11: Dead connection, failed to find a fallback [ 1103.769505][ T8194] block nbd11: shutting down sockets [ 1103.774795][ T8194] blk_print_req_error: 64 callbacks suppressed [ 1103.774815][ T8194] I/O error, dev nbd11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1103.790154][ T8194] buffer_io_error: 64 callbacks suppressed [ 1103.790173][ T8194] Buffer I/O error on dev nbd11, logical block 0, async page read [ 1103.803990][ T7552] I/O error, dev nbd11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1103.813124][ T7552] Buffer I/O error on dev nbd11, logical block 0, async page read [ 1103.821108][ T7552] I/O error, dev nbd11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1103.844977][ T7552] Buffer I/O error on dev nbd11, logical block 0, async page read [ 1103.852999][ T7552] I/O error, dev nbd11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1103.862312][ T7552] Buffer I/O error on dev nbd11, logical block 0, async page read [ 1103.870338][ T7552] I/O error, dev nbd11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1103.879481][ T7552] Buffer I/O error on dev nbd11, logical block 0, async page read [ 1103.887518][ T7552] I/O error, dev nbd11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1103.896755][ T7552] Buffer I/O error on dev nbd11, logical block 0, async page read [ 1103.904772][ T7552] I/O error, dev nbd11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1103.913902][ T7552] Buffer I/O error on dev nbd11, logical block 0, async page read [ 1103.921894][ T7552] I/O error, dev nbd11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1103.931024][ T7552] Buffer I/O error on dev nbd11, logical block 0, async page read [ 1103.938935][ T7552] ldm_validate_partition_table(): Disk read failed. [ 1104.171969][ T7552] I/O error, dev nbd11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1104.215122][T15718] FAULT_INJECTION: forcing a failure. [ 1104.215122][T15718] name failslab, interval 1, probability 0, space 0, times 0 [ 1104.227952][T15718] CPU: 1 UID: 0 PID: 15718 Comm: syz.6.2636 Tainted: G L syzkaller #0 PREEMPT(full) [ 1104.227991][T15718] Tainted: [L]=SOFTLOCKUP [ 1104.228002][T15718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1104.228019][T15718] Call Trace: [ 1104.228030][T15718] [ 1104.228043][T15718] dump_stack_lvl+0xe8/0x150 [ 1104.228080][T15718] should_fail_ex+0x412/0x560 [ 1104.228121][T15718] should_failslab+0xa8/0x100 [ 1104.228165][T15718] ? security_file_alloc+0x34/0x310 [ 1104.228192][T15718] kmem_cache_alloc_noprof+0x87/0x650 [ 1104.228228][T15718] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1104.228267][T15718] ? rcu_is_watching+0x15/0xb0 [ 1104.228303][T15718] ? trace_kmem_cache_alloc+0x29/0xe0 [ 1104.228344][T15718] security_file_alloc+0x34/0x310 [ 1104.228374][T15718] init_file+0x90/0x2b0 [ 1104.228409][T15718] alloc_empty_file+0x74/0x1d0 [ 1104.228443][T15718] alloc_file_pseudo+0x155/0x240 [ 1104.228474][T15718] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1104.228510][T15718] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1104.228541][T15718] ? do_raw_spin_unlock+0xf5/0x210 [ 1104.228586][T15718] ? _raw_spin_unlock+0x28/0x50 [ 1104.228610][T15718] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1104.228652][T15718] sock_alloc_file+0xb8/0x2e0 [ 1104.228691][T15718] ? __sys_socket+0x12b/0x1b0 [ 1104.228722][T15718] __sys_socket+0x13c/0x1b0 [ 1104.228750][T15718] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1104.228780][T15718] __x64_sys_socket+0x7a/0x90 [ 1104.228809][T15718] do_syscall_64+0x15f/0xf80 [ 1104.228839][T15718] ? trace_irq_disable+0x3b/0x140 [ 1104.228888][T15718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1104.228915][T15718] RIP: 0033:0x7f883b79cdd9 [ 1104.228940][T15718] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1104.228963][T15718] RSP: 002b:00007f883c5b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1104.228990][T15718] RAX: ffffffffffffffda RBX: 00007f883ba15fa0 RCX: 00007f883b79cdd9 [ 1104.229011][T15718] RDX: 0000000000000300 RSI: 0000000000000002 RDI: 0000000000000011 [ 1104.229028][T15718] RBP: 00007f883c5b4090 R08: 0000000000000000 R09: 0000000000000000 [ 1104.229046][T15718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1104.229063][T15718] R13: 00007f883ba16038 R14: 00007f883ba15fa0 R15: 00007ffd73b073d8 [ 1104.229104][T15718] [ 1104.619654][ T7552] Buffer I/O error on dev nbd11, logical block 0, async page read [ 1104.627792][ T7552] I/O error, dev nbd11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1104.637049][ T7552] Buffer I/O error on dev nbd11, logical block 0, async page read [ 1104.659332][ T7552] Dev nbd11: unable to read RDB block 0 [ 1104.665792][ T7552] nbd11: unable to read partition table [ 1104.675657][ T7552] ldm_validate_partition_table(): Disk read failed. [ 1104.682842][ T7552] Dev nbd11: unable to read RDB block 0 [ 1104.689197][ T7552] nbd11: unable to read partition table [ 1104.726092][ T7533] ldm_validate_partition_table(): Disk read failed. [ 1104.733450][ T7533] Dev nbd11: unable to read RDB block 0 [ 1104.739665][ T7533] nbd11: unable to read partition table [ 1104.751397][ T7533] ldm_validate_partition_table(): Disk read failed. [ 1104.774594][ T7533] Dev nbd11: unable to read RDB block 0 [ 1104.781531][ T7533] nbd11: unable to read partition table [ 1105.469837][ T5784] usb 1-1: new full-speed USB device number 36 using dummy_hcd [ 1105.696691][T15740] loop3: detected capacity change from 0 to 40427 [ 1105.710776][ T5763] gspca_vc032x: reg_w err -110 [ 1105.724474][ T5763] vc032x 6-1:0.0: probe with driver vc032x failed with error -110 [ 1105.752982][T15740] F2FS-fs (loop3): invalid crc value [ 1105.847546][T15740] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 1105.969767][T15740] F2FS-fs (loop3): Start checkpoint disabled! [ 1106.446205][T15740] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 1106.455871][T15740] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 1106.643464][ T57] kworker/u8:4: attempt to access beyond end of device [ 1106.643464][ T57] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1106.725508][ T57] CPU: 0 UID: 0 PID: 57 Comm: kworker/u8:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 1106.725554][ T57] Tainted: [L]=SOFTLOCKUP [ 1106.725564][ T57] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1106.725583][ T57] Workqueue: writeback wb_workfn (flush-7:3) [ 1106.725635][ T57] Call Trace: [ 1106.725646][ T57] [ 1106.725658][ T57] dump_stack_lvl+0xe8/0x150 [ 1106.725690][ T57] f2fs_stop_checkpoint+0x3c7/0x590 [ 1106.725742][ T57] f2fs_write_end_io+0x1274/0x1740 [ 1106.725802][ T57] __submit_merged_bio+0x256/0x6a0 [ 1106.725838][ T57] __submit_merged_write_cond+0x3c9/0x4e0 [ 1106.725892][ T57] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 1106.725953][ T57] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1106.725997][ T57] f2fs_write_data_pages+0x287e/0x34f0 [ 1106.726027][ T57] ? f2fs_build_free_nids+0xdc/0x1810 [ 1106.726112][ T57] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1106.726173][ T57] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 1106.726251][ T57] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 1106.726302][ T57] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1106.726334][ T57] ? __lock_acquire+0x6b5/0x2cf0 [ 1106.726382][ T57] ? set_shrinker_bit+0x7c/0x350 [ 1106.726410][ T57] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1106.726445][ T57] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1106.726479][ T57] do_writepages+0x32e/0x550 [ 1106.726515][ T57] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1106.726546][ T57] ? reacquire_held_locks+0x104/0x190 [ 1106.726580][ T57] ? writeback_sb_inodes+0x463/0x19d0 [ 1106.726619][ T57] __writeback_single_inode+0x133/0x10e0 [ 1106.726652][ T57] ? do_raw_spin_unlock+0xf5/0x210 [ 1106.726698][ T57] writeback_sb_inodes+0x979/0x19d0 [ 1106.726728][ T57] ? __lock_acquire+0x6b5/0x2cf0 [ 1106.726790][ T57] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1106.726819][ T57] ? do_raw_spin_lock+0x12b/0x2f0 [ 1106.726904][ T57] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1106.726935][ T57] ? rcu_is_watching+0x15/0xb0 [ 1106.726968][ T57] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1106.727009][ T57] wb_writeback+0x445/0xb00 [ 1106.727044][ T57] ? queue_io+0x201/0x470 [ 1106.727083][ T57] ? __pfx_wb_writeback+0x10/0x10 [ 1106.727110][ T57] ? do_raw_spin_lock+0x12b/0x2f0 [ 1106.727180][ T57] wb_workfn+0x3f8/0xf10 [ 1106.727218][ T57] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1106.727249][ T57] ? look_up_lock_class+0x57/0x110 [ 1106.727301][ T57] ? __pfx_wb_workfn+0x10/0x10 [ 1106.727345][ T57] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1106.727377][ T57] ? do_raw_spin_lock+0x12b/0x2f0 [ 1106.727414][ T57] ? lock_acquire+0x106/0x350 [ 1106.727446][ T57] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1106.727489][ T57] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1106.727524][ T57] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1106.727562][ T57] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1106.727597][ T57] ? process_scheduled_works+0xa70/0x1860 [ 1106.727625][ T57] ? process_scheduled_works+0xa70/0x1860 [ 1106.727656][ T57] process_scheduled_works+0xb5d/0x1860 [ 1106.727685][ T57] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1106.727754][ T57] ? __pfx_process_scheduled_works+0x10/0x10 [ 1106.727790][ T57] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1106.727820][ T57] ? assign_work+0x3d5/0x5e0 [ 1106.727855][ T57] worker_thread+0xa53/0xfc0 [ 1106.727906][ T57] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1106.727949][ T57] kthread+0x388/0x470 [ 1106.727986][ T57] ? __pfx_worker_thread+0x10/0x10 [ 1106.728013][ T57] ? __pfx_kthread+0x10/0x10 [ 1106.728051][ T57] ret_from_fork+0x514/0xb70 [ 1106.728085][ T57] ? __pfx_ret_from_fork+0x10/0x10 [ 1106.728113][ T57] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1106.728152][ T57] ? __switch_to+0xc79/0x1410 [ 1106.728196][ T57] ? __pfx_kthread+0x10/0x10 [ 1106.728233][ T57] ret_from_fork_asm+0x1a/0x30 [ 1106.728287][ T57] [ 1107.185302][ T57] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 1107.200679][ T5934] usb 6-1: USB disconnect, device number 31 [ 1107.525617][T13500] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1107.711545][T15766] loop3: detected capacity change from 0 to 2048 [ 1107.752674][ T5784] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1108.209798][T13500] usb 2-1: Using ep0 maxpacket: 16 [ 1108.539158][ T5784] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1108.547234][ T5784] usb 1-1: can't read configurations, error -71 [ 1108.881478][T13500] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1108.891732][T13500] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1108.902607][T13500] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1108.904047][T15777] loop0: detected capacity change from 0 to 40427 [ 1108.912358][T13500] usb 2-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 1108.927788][T13500] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1108.942994][T15777] F2FS-fs (loop0): invalid crc value [ 1109.042754][T15776] loop5: detected capacity change from 0 to 4096 [ 1109.080709][T15777] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 1109.093350][T15777] F2FS-fs (loop0): Start checkpoint disabled! [ 1109.166967][T13500] usb 2-1: config 0 descriptor?? [ 1109.173090][T15776] nilfs2: Unknown parameter '' [ 1109.173498][T15777] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0 [ 1109.225690][T15777] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 1110.159533][T13500] hid_parser_main: 26 callbacks suppressed [ 1110.159559][T13500] hid-picolcd 0003:04D8:F002.000B: unknown main item tag 0x0 [ 1110.172806][T13500] hid-picolcd 0003:04D8:F002.000B: unknown main item tag 0x0 [ 1110.180256][T13500] hid-picolcd 0003:04D8:F002.000B: unknown main item tag 0x0 [ 1110.248464][T15790] loop3: detected capacity change from 0 to 512 [ 1110.267856][T13500] hid-picolcd 0003:04D8:F002.000B: unknown main item tag 0x0 [ 1110.497920][T13500] hid-picolcd 0003:04D8:F002.000B: unknown main item tag 0x0 [ 1110.517247][T15790] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1110.562814][T15796] loop7: detected capacity change from 0 to 4096 [ 1110.572221][T15790] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1110.619256][T13500] hid-picolcd 0003:04D8:F002.000B: No report with id 0xf3 found [ 1110.627048][T13500] hid-picolcd 0003:04D8:F002.000B: No report with id 0xf4 found [ 1110.653006][ T78] kworker/u8:5: attempt to access beyond end of device [ 1110.653006][ T78] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1110.711391][ T78] CPU: 0 UID: 0 PID: 78 Comm: kworker/u8:5 Tainted: G L syzkaller #0 PREEMPT(full) [ 1110.711431][ T78] Tainted: [L]=SOFTLOCKUP [ 1110.711441][ T78] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1110.711458][ T78] Workqueue: writeback wb_workfn (flush-7:0) [ 1110.711514][ T78] Call Trace: [ 1110.711525][ T78] [ 1110.711536][ T78] dump_stack_lvl+0xe8/0x150 [ 1110.711568][ T78] f2fs_stop_checkpoint+0x3c7/0x590 [ 1110.711618][ T78] f2fs_write_end_io+0x1274/0x1740 [ 1110.711679][ T78] __submit_merged_bio+0x256/0x6a0 [ 1110.711715][ T78] __submit_merged_write_cond+0x3c9/0x4e0 [ 1110.711770][ T78] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 1110.711828][ T78] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1110.711871][ T78] f2fs_write_data_pages+0x287e/0x34f0 [ 1110.711946][ T78] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1110.712059][ T78] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1110.712088][ T78] ? __lock_acquire+0x6b5/0x2cf0 [ 1110.712142][ T78] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1110.712175][ T78] do_writepages+0x32e/0x550 [ 1110.712209][ T78] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1110.712239][ T78] ? reacquire_held_locks+0x104/0x190 [ 1110.712272][ T78] ? writeback_sb_inodes+0x463/0x19d0 [ 1110.712308][ T78] __writeback_single_inode+0x133/0x10e0 [ 1110.712345][ T78] ? do_raw_spin_unlock+0xf5/0x210 [ 1110.712391][ T78] writeback_sb_inodes+0x979/0x19d0 [ 1110.712423][ T78] ? __lock_acquire+0x6b5/0x2cf0 [ 1110.712502][ T78] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1110.712534][ T78] ? do_raw_spin_lock+0x12b/0x2f0 [ 1110.712633][ T78] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1110.712669][ T78] ? rcu_is_watching+0x15/0xb0 [ 1110.712707][ T78] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1110.712756][ T78] wb_writeback+0x445/0xb00 [ 1110.712796][ T78] ? queue_io+0x201/0x470 [ 1110.712837][ T78] ? __pfx_wb_writeback+0x10/0x10 [ 1110.712863][ T78] ? do_raw_spin_lock+0x12b/0x2f0 [ 1110.712925][ T78] wb_workfn+0x3f8/0xf10 [ 1110.712965][ T78] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1110.712997][ T78] ? look_up_lock_class+0x57/0x110 [ 1110.713055][ T78] ? __pfx_wb_workfn+0x10/0x10 [ 1110.713102][ T78] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1110.713133][ T78] ? do_raw_spin_lock+0x12b/0x2f0 [ 1110.713175][ T78] ? lock_acquire+0x106/0x350 [ 1110.713209][ T78] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1110.713252][ T78] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1110.713311][ T78] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1110.713352][ T78] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1110.713389][ T78] ? process_scheduled_works+0xa70/0x1860 [ 1110.713419][ T78] ? process_scheduled_works+0xa70/0x1860 [ 1110.713451][ T78] process_scheduled_works+0xb5d/0x1860 [ 1110.713481][ T78] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1110.713568][ T78] ? __pfx_process_scheduled_works+0x10/0x10 [ 1110.713607][ T78] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1110.713639][ T78] ? assign_work+0x3d5/0x5e0 [ 1110.713676][ T78] worker_thread+0xa53/0xfc0 [ 1110.713708][ T78] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1110.713763][ T78] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1110.713809][ T78] kthread+0x388/0x470 [ 1110.713847][ T78] ? __pfx_worker_thread+0x10/0x10 [ 1110.713877][ T78] ? __pfx_kthread+0x10/0x10 [ 1110.713919][ T78] ret_from_fork+0x514/0xb70 [ 1110.713954][ T78] ? __pfx_ret_from_fork+0x10/0x10 [ 1110.713985][ T78] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1110.714017][ T78] ? __switch_to+0xc79/0x1410 [ 1110.714069][ T78] ? __pfx_kthread+0x10/0x10 [ 1110.714108][ T78] ret_from_fork_asm+0x1a/0x30 [ 1110.714167][ T78] [ 1110.714462][ T78] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 1111.086611][T15800] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1111.287482][T15795] netlink: 296 bytes leftover after parsing attributes in process `syz.7.2660'. [ 1111.296568][T15795] openvswitch: netlink: Flow key attr not present in new flow. [ 1111.306589][T13500] usb 2-1: USB disconnect, device number 50 [ 1112.410522][T15804] loop3: detected capacity change from 0 to 256 [ 1113.289901][T15806] loop6: detected capacity change from 0 to 131072 [ 1113.353444][T15806] F2FS-fs (loop6): invalid crc value [ 1113.359472][T15804] msdos: Unknown parameter 'nodots(sx' [ 1113.605317][T15806] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1113.618216][T15806] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 1113.632771][T15806] F2FS-fs (loop6): f2fs_lookup: inode (ino=4) has zero i_nlink [ 1113.997362][T15816] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2666'. [ 1114.006369][T15816] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2666'. [ 1114.021514][T15817] loop7: detected capacity change from 0 to 4096 [ 1114.518931][T15821] loop5: detected capacity change from 0 to 4096 [ 1114.539516][T15821] ntfs3: Unknown parameter 'windows_' [ 1114.571182][T15825] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1115.316986][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.331674][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.515039][T15833] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2671'. [ 1116.370981][T15842] loop7: detected capacity change from 0 to 40427 [ 1116.384003][T15842] F2FS-fs (loop7): invalid crc value [ 1116.425967][T15856] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2676'. [ 1116.498365][T15842] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 1116.511366][T15842] F2FS-fs (loop7): Start checkpoint disabled! [ 1116.550359][T15842] F2FS-fs (loop7): f2fs_disable_checkpoint() finish, err:0 [ 1116.565672][T15842] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 1116.638200][T13500] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1116.751236][ T5784] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 1117.560357][T13908] Bluetooth: hci2: command 0x0406 tx timeout [ 1117.603685][ T6889] kworker/u8:14: attempt to access beyond end of device [ 1117.603685][ T6889] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1117.654305][ T5784] usb 1-1: Using ep0 maxpacket: 32 [ 1117.684325][ T6889] CPU: 0 UID: 0 PID: 6889 Comm: kworker/u8:14 Tainted: G L syzkaller #0 PREEMPT(full) [ 1117.684366][ T6889] Tainted: [L]=SOFTLOCKUP [ 1117.684376][ T6889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1117.684394][ T6889] Workqueue: writeback wb_workfn (flush-7:7) [ 1117.684445][ T6889] Call Trace: [ 1117.684456][ T6889] [ 1117.684468][ T6889] dump_stack_lvl+0xe8/0x150 [ 1117.684502][ T6889] f2fs_stop_checkpoint+0x3c7/0x590 [ 1117.684556][ T6889] f2fs_write_end_io+0x1274/0x1740 [ 1117.684621][ T6889] __submit_merged_bio+0x256/0x6a0 [ 1117.684664][ T6889] __submit_merged_write_cond+0x3c9/0x4e0 [ 1117.684722][ T6889] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 1117.684788][ T6889] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1117.684834][ T6889] f2fs_write_data_pages+0x287e/0x34f0 [ 1117.684865][ T6889] ? f2fs_build_free_nids+0xdc/0x1810 [ 1117.684960][ T6889] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1117.685013][ T6889] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 1117.685100][ T6889] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 1117.685158][ T6889] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1117.685189][ T6889] ? __lock_acquire+0x6b5/0x2cf0 [ 1117.685241][ T6889] ? set_shrinker_bit+0x7c/0x350 [ 1117.685276][ T6889] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1117.685313][ T6889] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1117.685348][ T6889] do_writepages+0x32e/0x550 [ 1117.685387][ T6889] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1117.685418][ T6889] ? reacquire_held_locks+0x104/0x190 [ 1117.685453][ T6889] ? writeback_sb_inodes+0x463/0x19d0 [ 1117.685497][ T6889] __writeback_single_inode+0x133/0x10e0 [ 1117.685532][ T6889] ? do_raw_spin_unlock+0xf5/0x210 [ 1117.685583][ T6889] writeback_sb_inodes+0x979/0x19d0 [ 1117.685613][ T6889] ? __lock_acquire+0x6b5/0x2cf0 [ 1117.685690][ T6889] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1117.685720][ T6889] ? do_raw_spin_lock+0x12b/0x2f0 [ 1117.685825][ T6889] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1117.685858][ T6889] ? rcu_is_watching+0x15/0xb0 [ 1117.685893][ T6889] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1117.685940][ T6889] wb_writeback+0x445/0xb00 [ 1117.685979][ T6889] ? queue_io+0x201/0x470 [ 1117.686024][ T6889] ? __pfx_wb_writeback+0x10/0x10 [ 1117.686053][ T6889] ? do_raw_spin_lock+0x12b/0x2f0 [ 1117.686123][ T6889] wb_workfn+0x3f8/0xf10 [ 1117.686162][ T6889] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1117.686194][ T6889] ? look_up_lock_class+0x57/0x110 [ 1117.686257][ T6889] ? __pfx_wb_workfn+0x10/0x10 [ 1117.686311][ T6889] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1117.686344][ T6889] ? do_raw_spin_lock+0x12b/0x2f0 [ 1117.686383][ T6889] ? lock_acquire+0x106/0x350 [ 1117.686417][ T6889] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1117.686465][ T6889] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1117.686503][ T6889] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1117.686544][ T6889] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1117.686582][ T6889] ? process_scheduled_works+0xa70/0x1860 [ 1117.686611][ T6889] ? process_scheduled_works+0xa70/0x1860 [ 1117.686646][ T6889] process_scheduled_works+0xb5d/0x1860 [ 1117.686676][ T6889] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1117.686760][ T6889] ? __pfx_process_scheduled_works+0x10/0x10 [ 1117.686804][ T6889] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1117.686837][ T6889] ? assign_work+0x3d5/0x5e0 [ 1117.686877][ T6889] worker_thread+0xa53/0xfc0 [ 1117.686937][ T6889] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1117.686986][ T6889] kthread+0x388/0x470 [ 1117.687025][ T6889] ? __pfx_worker_thread+0x10/0x10 [ 1117.687054][ T6889] ? __pfx_kthread+0x10/0x10 [ 1117.687094][ T6889] ret_from_fork+0x514/0xb70 [ 1117.687130][ T6889] ? __pfx_ret_from_fork+0x10/0x10 [ 1117.687161][ T6889] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1117.687194][ T6889] ? __switch_to+0xc79/0x1410 [ 1117.687242][ T6889] ? __pfx_kthread+0x10/0x10 [ 1117.687287][ T6889] ret_from_fork_asm+0x1a/0x30 [ 1117.687352][ T6889] [ 1117.786761][T15866] lo speed is unknown, defaulting to 1000 [ 1117.927139][ T6889] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 1118.341344][ T5784] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1118.350585][ T5784] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1118.411054][ T5784] usb 1-1: config 0 descriptor?? [ 1118.804784][T15876] loop3: detected capacity change from 0 to 512 [ 1118.812000][T15876] EXT4-fs: Ignoring removed orlov option [ 1118.846877][T15876] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1118.853700][T15876] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1118.896827][T15876] EXT4-fs (loop3): 1 truncate cleaned up [ 1118.908099][ T5784] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1118.972583][T15876] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1118.998289][ T5784] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1119.158537][ T5784] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1119.166435][ T5784] usb 1-1: media controller created [ 1119.185817][ T5784] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1119.207129][ T5763] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 1119.208905][T15840] capability: warning: `syz.0.2661' uses deprecated v2 capabilities in a way that may be insecure [ 1119.427280][ T5763] usb 7-1: Using ep0 maxpacket: 16 [ 1119.459290][ T5763] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1119.471718][ T5763] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1119.514879][ T5763] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1119.627534][ T5763] usb 7-1: config 1 interface 1 has no altsetting 0 [ 1119.892925][ T5763] usb 7-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 1119.937470][ T5763] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1120.010604][ T5763] usb 7-1: Product: syz [ 1120.041508][ T5763] usb 7-1: Manufacturer: syz [ 1120.092685][ T5763] usb 7-1: SerialNumber: syz [ 1120.243780][ T5624] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1120.349777][T15891] loop5: detected capacity change from 0 to 512 [ 1120.354178][ T5763] usb 7-1: selecting invalid altsetting 0 [ 1120.362664][ T5784] az6027: usb out operation failed. (-71) [ 1120.418773][ T5784] az6027: usb out operation failed. (-71) [ 1120.424801][ T5784] stb0899_attach: Driver disabled by Kconfig [ 1120.430781][ T5784] az6027: no front-end attached [ 1120.430781][ T5784] [ 1120.515407][ T5784] az6027: usb out operation failed. (-71) [ 1120.521180][ T5784] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1120.762146][ T5784] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input62 [ 1120.801152][T15891] EXT4-fs (loop5): 1 orphan inode deleted [ 1120.808912][T15891] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1120.821189][ T5784] dvb-usb: schedule remote query interval to 400 msecs. [ 1120.828194][ T5784] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1120.836559][T15891] ext4 filesystem being mounted at /482/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1121.548248][T13908] Bluetooth: hci2: command 0x0406 tx timeout [ 1121.622978][ T5784] usb 1-1: USB disconnect, device number 38 [ 1121.652048][ T5621] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1121.678181][ T5763] usb 7-1: USB disconnect, device number 30 [ 1121.780008][T15907] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2690'. [ 1121.804242][ T5784] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1122.067427][T15913] loop3: detected capacity change from 0 to 512 [ 1122.085694][T15908] loop6: detected capacity change from 0 to 32768 [ 1122.200511][T15908] XFS (loop6): DAX unsupported by block device. Turning off DAX. [ 1122.421128][T15908] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1122.895594][T15913] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1123.019528][T15908] XFS (loop6): Ending clean mount [ 1123.081613][T15908] XFS (loop6): Quotacheck needed: Please wait. [ 1123.214401][T15913] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1123.317099][T15908] XFS (loop6): Quotacheck: Done. [ 1124.279841][T15913] loop3: detected capacity change from 0 to 256 [ 1124.317367][T15913] msdos: Unknown parameter 'nodots(sx' [ 1125.501246][ T6786] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1126.336095][T15961] FAULT_INJECTION: forcing a failure. [ 1126.336095][T15961] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1126.392758][T15959] nbd: must specify a device to reconfigure [ 1126.423255][T15961] CPU: 0 UID: 0 PID: 15961 Comm: syz.7.2705 Tainted: G L syzkaller #0 PREEMPT(full) [ 1126.423299][T15961] Tainted: [L]=SOFTLOCKUP [ 1126.423310][T15961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1126.423327][T15961] Call Trace: [ 1126.423337][T15961] [ 1126.423350][T15961] dump_stack_lvl+0xe8/0x150 [ 1126.423386][T15961] should_fail_ex+0x412/0x560 [ 1126.423428][T15961] _copy_from_user+0x2d/0xb0 [ 1126.423477][T15961] ___sys_sendmsg+0x1c6/0x360 [ 1126.423512][T15961] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1126.423545][T15961] ? __lock_acquire+0x6b5/0x2cf0 [ 1126.423582][T15961] ? __pfx____sys_sendmsg+0x10/0x10 [ 1126.423663][T15961] ? __fget_files+0x2a/0x420 [ 1126.423695][T15961] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1126.423728][T15961] ? __fget_files+0x3a0/0x420 [ 1126.423775][T15961] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1126.423815][T15961] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1126.423863][T15961] ? __pfx_ksys_write+0x10/0x10 [ 1126.423914][T15961] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1126.423944][T15961] do_syscall_64+0x15f/0xf80 [ 1126.423975][T15961] ? trace_irq_disable+0x3b/0x140 [ 1126.424024][T15961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1126.424052][T15961] RIP: 0033:0x7f903699cdd9 [ 1126.424078][T15961] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1126.424100][T15961] RSP: 002b:00007f90378d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1126.424128][T15961] RAX: ffffffffffffffda RBX: 00007f9036c15fa0 RCX: 00007f903699cdd9 [ 1126.424149][T15961] RDX: 0000000004000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 1126.424168][T15961] RBP: 00007f90378d5090 R08: 0000000000000000 R09: 0000000000000000 [ 1126.424185][T15961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1126.424202][T15961] R13: 00007f9036c16038 R14: 00007f9036c15fa0 R15: 00007ffc6983b248 [ 1126.424252][T15961] [ 1126.738102][ T7664] udevd[7664]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1126.898393][T15968] FAULT_INJECTION: forcing a failure. [ 1126.898393][T15968] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1231.945515][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1231.952596][ C0] rcu: 1-...!: (1 GPs behind) idle=8b44/1/0x4000000000000000 softirq=79658/79659 fqs=1 [ 1231.964349][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5934/1:b..l [ 1231.972308][ C0] rcu: (detected by 0, t=10506 jiffies, g=87893, q=580 ncpus=2) [ 1231.980044][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1231.980083][ C1] NMI backtrace for cpu 1 [ 1231.980105][ C1] CPU: 1 UID: 0 PID: 15965 Comm: udevd Tainted: G L syzkaller #0 PREEMPT(full) [ 1231.980137][ C1] Tainted: [L]=SOFTLOCKUP [ 1231.980146][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1231.980161][ C1] RIP: 0010:_raw_spin_unlock+0x23/0x50 [ 1231.980194][ C1] Code: 90 90 90 90 90 90 90 f3 0f 1e fa 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 7a 70 f7 f5 48 89 df e8 82 e5 f7 f5 bf 01 00 00 00 e8 67 e9 f5 65 8b 05 71 51 8e 07 85 c0 74 07 5b e9 42 e2 65 f5 [ 1231.980214][ C1] RSP: 0018:ffffc90000a08d00 EFLAGS: 00000046 [ 1231.980236][ C1] RAX: 0000000000000001 RBX: ffff888079d422a8 RCX: 0000000000000001 [ 1231.980253][ C1] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000001 [ 1231.980267][ C1] RBP: dffffc0000000000 R08: ffff888079d422ab R09: 1ffff1100f3a8455 [ 1231.980286][ C1] R10: dffffc0000000000 R11: ffffed100f3a8456 R12: ffff88807d1c3000 [ 1231.980305][ C1] R13: ffff888079d42000 R14: ffff88807d1c2000 R15: 18aa01920519c93a [ 1231.980327][ C1] FS: 00007faf99802880(0000) GS:ffff888125395000(0000) knlGS:0000000000000000 [ 1231.980349][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1231.980366][ C1] CR2: 00007ffcd65b3d1c CR3: 00000000977f3000 CR4: 0000000000350ef0 [ 1231.980386][ C1] Call Trace: [ 1231.980398][ C1] [ 1231.980410][ C1] advance_sched+0x94f/0xc20 [ 1231.980555][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1231.980590][ C1] ? __pfx_advance_sched+0x10/0x10 [ 1231.980622][ C1] __hrtimer_run_queues+0x3c0/0xa20 [ 1231.980672][ C1] hrtimer_interrupt+0x44b/0x950 [ 1231.980727][ C1] __sysvec_apic_timer_interrupt+0x102/0x430 [ 1231.980761][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 1231.980789][ C1] [ 1231.980798][ C1] [ 1231.980808][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1231.980835][ C1] RIP: 0010:sock_write_iter+0x304/0x4f0 [ 1231.980872][ C1] Code: 38 00 74 08 48 89 df e8 1a 9e be f8 41 bf 90 00 00 00 4c 03 3b 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 <74> 08 4c 89 ff e8 f2 9d be f8 4d 8b 3f 49 81 ff 10 71 4f 8a 0f 85 [ 1231.980893][ C1] RSP: 0018:ffffc900066ffb60 EFLAGS: 00000246 [ 1231.980913][ C1] RAX: 1ffffffff19d879a RBX: ffff888035d37260 RCX: dffffc0000000000 [ 1231.980932][ C1] RDX: ffff88801d7d9ec0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1231.980948][ C1] RBP: ffffc900066ffc90 R08: ffff88801d7d9ec0 R09: 0000000000000003 [ 1231.980965][ C1] R10: 000000000000000a R11: 0000000000000000 R12: 1ffff92000cdff70 [ 1231.980981][ C1] R13: ffffc900066ffba0 R14: ffff888035d37240 R15: ffffffff8cec3cd0 [ 1231.981018][ C1] ? __pfx_sock_write_iter+0x10/0x10 [ 1231.981061][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1231.981090][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1231.981119][ C1] ? security_file_permission+0x75/0x260 [ 1231.981152][ C1] vfs_write+0x61d/0xb90 [ 1231.981194][ C1] ? __pfx_vfs_write+0x10/0x10 [ 1231.981227][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 1231.981261][ C1] ? __x64_sys_sendmsg+0x1da/0x2a0 [ 1231.981293][ C1] ? fput_close_sync+0x11f/0x240 [ 1231.981324][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1231.981357][ C1] ksys_write+0x150/0x270 [ 1231.981394][ C1] ? __pfx_ksys_write+0x10/0x10 [ 1231.981432][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1231.981468][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1231.981495][ C1] do_syscall_64+0x15f/0xf80 [ 1231.981522][ C1] ? trace_irq_disable+0x3b/0x140 [ 1231.981563][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1231.981588][ C1] RIP: 0033:0x7faf990a7407 [ 1231.981610][ C1] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1231.981630][ C1] RSP: 002b:00007ffcd65b66f0 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 1231.981652][ C1] RAX: ffffffffffffffda RBX: 00007faf99802880 RCX: 00007faf990a7407 [ 1231.981670][ C1] RDX: 0000000000000000 RSI: 00007ffcd65b6797 RDI: 000000000000000a [ 1231.981686][ C1] RBP: 000000000000000a R08: 0000000000000000 R09: 0000000000000000 [ 1231.981699][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 00007faf998026e8 [ 1231.981713][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000560737195bb0 [ 1231.981742][ C1] [ 1231.982076][ C0] task:kworker/1:7 state:R running task stack:22560 pid:5934 tgid:5934 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1232.415697][ C0] Workqueue: events_power_efficient gc_worker [ 1232.421793][ C0] Call Trace: [ 1232.425159][ C0] [ 1232.428098][ C0] __schedule+0x17b4/0x5680 [ 1232.432614][ C0] ? unwind_next_frame+0xa6/0x2550 [ 1232.437778][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1232.443515][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 1232.448478][ C0] ? __pfx___schedule+0x10/0x10 [ 1232.453448][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 1232.458409][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1232.464075][ C0] preempt_schedule_irq+0x4d/0xa0 [ 1232.469232][ C0] irqentry_exit+0x14f/0x730 [ 1232.473874][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1232.479574][ C0] ? trace_irq_disable+0x3b/0x140 [ 1232.484728][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1232.490812][ C0] RIP: 0010:seqcount_lockdep_reader_access+0xed/0x100 [ 1232.497608][ C0] Code: 00 75 11 e8 45 27 fb f7 4d 85 f6 75 16 e8 3b 27 fb f7 eb 15 e8 34 27 fb f7 e8 9f 38 dd 01 4d 85 f6 74 ea e8 25 27 fb f7 fb 5b <41> 5e e9 77 c4 45 f7 cc 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 [ 1232.517239][ C0] RSP: 0018:ffffc9000582f970 EFLAGS: 00000293 [ 1232.523358][ C0] RAX: ffffffff89ca7c8b RBX: 0000000000000001 RCX: ffff888032ca8000 [ 1232.531532][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1232.539560][ C0] RBP: ffffc9000582fad0 R08: ffffffff903096f7 R09: 1ffffffff20612de [ 1232.547560][ C0] R10: dffffc0000000000 R11: fffffbfff20612df R12: dffffc0000000000 [ 1232.555583][ C0] R13: ffffffff9a94a720 R14: 0000000000000200 R15: 000000000001c563 [ 1232.563581][ C0] ? seqcount_lockdep_reader_access+0xeb/0x100 [ 1232.569794][ C0] gc_worker+0x304/0x1290 [ 1232.574167][ C0] ? gc_worker+0x25d/0x1290 [ 1232.578695][ C0] ? __pfx_gc_worker+0x10/0x10 [ 1232.583677][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1232.589344][ C0] ? process_scheduled_works+0xa70/0x1860 [ 1232.595098][ C0] ? process_scheduled_works+0xa70/0x1860 [ 1232.600854][ C0] process_scheduled_works+0xb5d/0x1860 [ 1232.606429][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1232.612218][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1232.618313][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1232.623967][ C0] ? assign_work+0x3d5/0x5e0 [ 1232.628578][ C0] worker_thread+0xa53/0xfc0 [ 1232.633187][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1232.638849][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1232.644550][ C0] kthread+0x388/0x470 [ 1232.648647][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1232.653771][ C0] ? __pfx_kthread+0x10/0x10 [ 1232.658380][ C0] ret_from_fork+0x514/0xb70 [ 1232.662981][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1232.668632][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1232.673759][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1232.679402][ C0] ? __switch_to+0xc79/0x1410 [ 1232.684190][ C0] ? __pfx_kthread+0x10/0x10 [ 1232.688808][ C0] ret_from_fork_asm+0x1a/0x30 [ 1232.693606][ C0] [ 1232.696623][ C0] rcu: rcu_preempt kthread starved for 10500 jiffies! g87893 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1232.707969][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1232.717994][ C0] rcu: RCU grace-period kthread stack dump: [ 1232.723894][ C0] task:rcu_preempt state:R running task stack:27536 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1232.738026][ C0] Call Trace: [ 1232.741326][ C0] [ 1232.744268][ C0] __schedule+0x17b4/0x5680 [ 1232.748802][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 1232.753890][ C0] ? __pfx___schedule+0x10/0x10 [ 1232.758779][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1232.764522][ C0] ? schedule+0x90/0x360 [ 1232.768801][ C0] schedule+0x164/0x360 [ 1232.772974][ C0] schedule_timeout+0x158/0x2c0 [ 1232.777851][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1232.783590][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1232.788995][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1232.794314][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1232.799970][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1232.805804][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1232.811457][ C0] ? prepare_to_swait_event+0x340/0x370 [ 1232.817033][ C0] rcu_gp_fqs_loop+0x312/0x11d0 [ 1232.822007][ C0] ? __pfx_rcu_watching_snap_save+0x10/0x10 [ 1232.827922][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1232.833303][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1232.838521][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1232.844345][ C0] rcu_gp_kthread+0x9e/0x2b0 [ 1232.848961][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1232.854167][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1232.860098][ C0] ? __kthread_parkme+0x7a/0x1f0 [ 1232.865076][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1232.870817][ C0] ? __kthread_parkme+0x19c/0x1f0 [ 1232.875865][ C0] kthread+0x388/0x470 [ 1232.879963][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1232.885262][ C0] ? __pfx_kthread+0x10/0x10 [ 1232.890043][ C0] ret_from_fork+0x514/0xb70 [ 1232.894645][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1232.899938][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1232.905582][ C0] ? __switch_to+0xc79/0x1410 [ 1232.910303][ C0] ? __pfx_kthread+0x10/0x10 [ 1232.914970][ C0] ret_from_fork_asm+0x1a/0x30 [ 1232.919776][ C0] [ 1232.922793][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1232.929226][ C0] CPU: 0 UID: 0 PID: 6830 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 1232.940351][ C0] Tainted: [L]=SOFTLOCKUP [ 1232.944683][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1232.954752][ C0] RIP: 0010:smp_call_function_many_cond+0xfd4/0x13d0 [ 1232.961531][ C0] Code: 89 ee 83 e6 01 31 ff e8 fa fc 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 a5 f8 0b 00 eb 37 f3 90 43 0f b6 04 2c <84> c0 75 10 41 f7 06 01 00 00 00 74 1e e8 8a f8 0b 00 eb e5 44 89 [ 1232.981149][ C0] RSP: 0018:ffffc90004587560 EFLAGS: 00000293 [ 1232.987238][ C0] RAX: 0000000000000000 RBX: ffff8880b863c148 RCX: ffff888024fb3d80 [ 1232.995301][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1233.003844][ C0] RBP: ffffc90004587688 R08: ffffffff903096f7 R09: 1ffffffff20612de [ 1233.011916][ C0] R10: dffffc0000000000 R11: fffffbfff20612df R12: 1ffff110170e8169 [ 1233.019898][ C0] R13: dffffc0000000000 R14: ffff8880b8740b48 R15: 0000000000000001 [ 1233.027883][ C0] FS: 0000555595066500(0000) GS:ffff888125295000(0000) knlGS:0000000000000000 [ 1233.036957][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1233.043561][ C0] CR2: 0000000000000002 CR3: 0000000029be4000 CR4: 0000000000350ef0 [ 1233.051567][ C0] Call Trace: [ 1233.054845][ C0] [ 1233.057777][ C0] ? smp_call_function_many_cond+0x7c1/0x13d0 [ 1233.063868][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 1233.069093][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1233.075539][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1233.081371][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1233.087111][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 1233.092538][ C0] on_each_cpu_cond_mask+0x3f/0x80 [ 1233.097665][ C0] flush_tlb_mm_range+0x5c3/0x10b0 [ 1233.102803][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1233.108440][ C0] ? up_write+0x1ab/0x410 [ 1233.112883][ C0] dup_mmap+0x17a2/0x1d90 [ 1233.117339][ C0] ? __pfx_dup_mmap+0x10/0x10 [ 1233.122048][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1233.127784][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1233.133440][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1233.139100][ C0] copy_mm+0x13b/0x4a0 [ 1233.143268][ C0] copy_process+0x1f1c/0x4450 [ 1233.147977][ C0] ? copy_process+0xd87/0x4450 [ 1233.152770][ C0] ? __pfx_copy_process+0x10/0x10 [ 1233.157831][ C0] kernel_clone+0x284/0x8f0 [ 1233.162355][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 1233.167439][ C0] __x64_sys_clone+0x1b6/0x230 [ 1233.172222][ C0] ? __pfx___x64_sys_clone+0x10/0x10 [ 1233.177550][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1233.183195][ C0] ? do_user_addr_fault+0xc6f/0x1340 [ 1233.188499][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1233.194576][ C0] do_syscall_64+0x15f/0xf80 [ 1233.199178][ C0] ? trace_irq_disable+0x3b/0x140 [ 1233.204490][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1233.210390][ C0] RIP: 0033:0x7f90369c5852 [ 1233.214933][ C0] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 1233.234656][ C0] RSP: 002b:00007ffc6983b460 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1233.243175][ C0] RAX: ffffffffffffffda RBX: 00007ffc6983b460 RCX: 00007f90369c5852 [ 1233.251157][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1233.259134][ C0] RBP: 00007ffc6983b5ec R08: 0000000000000000 R09: 0000000000000001 [ 1233.267103][ C0] R10: 00005555950667d0 R11: 0000000000000246 R12: 0000000000000001 [ 1233.275072][ C0] R13: 00000000000927c0 R14: 0000000000113011 R15: 00007ffc6983b640 [ 1233.283189][ C0]