last executing test programs: 7m19.004643813s ago: executing program 2 (id=107): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_lsm={0x1d, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000009000000000000000500000085100000050000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00', @ANYRES32=0x1, @ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x22, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x10, 0x3}, 0x94) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r0, &(0x7f0000000000), 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'syztnl1\x00', &(0x7f0000000380)={'tunl0\x00', 0x0, 0xa56877f4490a282f, 0x7, 0xfffffff9, 0x40, {{0x7, 0x4, 0x2, 0x7, 0x1c, 0x66, 0x0, 0x2, 0x4, 0x0, @private=0xa010101, @rand_addr=0x64010101, {[@timestamp_prespec={0x44, 0x4, 0x4c, 0x3, 0x7}, @generic={0x7, 0x4, '0x0}) sendto$packet(r7, &(0x7f0000000080)="18", 0x1, 0x8800, &(0x7f00000000c0)={0x11, 0xc, r8, 0x1, 0x0, 0x6, @random="7cbc00de57bd"}, 0x14) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) sendmsg$NL80211_CMD_PROBE_CLIENT(r6, &(0x7f0000000700)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0x88, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x88}, 0x1, 0x0, 0x0, 0x800}, 0x40000) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1f, 0xd, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000fcffffff0000000080000000850000007d00000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70100000000000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000}, 0x94) 7m15.316315891s ago: executing program 2 (id=112): r0 = socket$inet_sctp(0x2, 0x1, 0x84) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x180}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x10}, 0xc) r4 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000000040de28421100000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r6, 0x8905, &(0x7f0000000000)) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000300)={'ni_daq_700\x00', [0x2f00, 0x5, 0xd09c, 0x7, 0x0, 0xfffffffe, 0x20000004, 0x6, 0xffe, 0x9, 0x200110, 0xba1, 0x8, 0x4, 0xfffd, 0x5, 0x5, 0x4000010b, 0x830, 0x30000, 0xffffffff, 0x2, 0x800, 0xe2db, 0x2, 0xd, 0xfffffff8, 0x3, 0xc, 0x5, 0x70f]}) 7m13.266278762s ago: executing program 2 (id=117): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}}, 0x20040084) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 7m13.010515684s ago: executing program 2 (id=118): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x58, 0x0, 0x41000}, 0xd) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r2 = getpgrp(r1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x804400, &(0x7f0000000600)=ANY=[@ANYRES16=r1, @ANYBLOB, @ANYRESHEX, @ANYRESDEC=r2]) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000500)={0x53, 0xffffffffffffffff, 0x80, 0x8, @buffer={0x0, 0xe2, &(0x7f0000000780)=""/226}, &(0x7f00000003c0)="86d39211703f4c01e5ce8f6f4cc7e0acd1151f832e98d98fd6ad50230bd554b2f22ca7a8953c5a50f314a41a75932fdc1774622f524ab90c8ef3957894b9f89c678564927972935de263cc8ddbcde42914b2bea54584e14b3f5089ef6227e996e509fa965c3321dc431cef245cb6aff1cea21fb76d56077496f386e39cf78a93", &(0x7f00000001c0)=""/60, 0x0, 0x18023, 0x1, &(0x7f00000004c0)}) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000001f80)={0xa00000, 0x6, 0x4, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x9b0940, 0x9, '\x00', @p_u16=0x0}}) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000340)="0500000001003f", 0xffffff89) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)=ANY=[], 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c0014800800", @ANYRES8=r5], 0x34}, 0x1, 0x0, 0x0, 0x4048010}, 0x8000) clock_getres(0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 7m11.61878057s ago: executing program 2 (id=121): r0 = syz_io_uring_setup(0x88f, &(0x7f0000000300)={0x0, 0x400aee2, 0x400, 0x1, 0x317}, &(0x7f0000000200), &(0x7f0000000280)) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1b0000001d0001000000000004086aa42d"], 0x30}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb, 0x20}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="a800000000010904000500000000000002000000240001801400018008000100e000000108000200ac1e01010c00028005000100000009002400028014000180080001000000010908000200ac1e00010c000280050001000000000044000f800800014000000006080003400000002b080003400000000808000240000000400800014000000000fb0001400000000708000140000044f10800034000000003080007"], 0xa8}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) io_uring_register$IORING_REGISTER_PBUF_STATUS(r0, 0x1a, &(0x7f0000000040)={0x8}, 0x1) 7m9.973257165s ago: executing program 2 (id=123): socket$unix(0x1, 0x5, 0x0) r0 = gettid() syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(r0, 0x2, 0x0) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x35c, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x4f, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x1298c2, 0x0) ftruncate(r2, 0x200004) 6m54.143435065s ago: executing program 32 (id=123): socket$unix(0x1, 0x5, 0x0) r0 = gettid() syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(r0, 0x2, 0x0) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x35c, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x4f, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x1298c2, 0x0) ftruncate(r2, 0x200004) 3m32.792353625s ago: executing program 1 (id=513): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket(0xa, 0x3, 0x3a) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x8) r2 = syz_mount_image$f2fs(&(0x7f0000010240), &(0x7f0000010280)='./mnt\x00', 0x3200008, &(0x7f00000004c0)=ANY=[@ANYBLOB="746573745f64756d6d795f656e6372797074696f6e2c00f5267ef859bf314a50b3ee082bee149254dc3f5e7aeac83a266dbe5265b18513cf0d6f92c762754d21468964ae812a33c13f4e497ba5c077d4bb56bda51c99fafaa81facb632898549518e9e9d0185f8484b79eca8e1a1f51eaccc719e20a98792740b9423660c95e9bc05b38cd1302b1b17511f5cce9cbea836af9d8e719f37192be3ef4864b661bb15cec3a7f56c569ba11201573195d1e52c313eda8f49268e40b1f45ae26a11bccff6473e0710d9271094ad9908a9249cb6954539"], 0x0, 0x10204, &(0x7f0000010300)="$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") write(0xffffffffffffffff, &(0x7f0000000040), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket(0x2, 0x3, 0xff) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchdir(r7) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f0000000040)=@v1={0x0, @aes128, 0x10, @desc1}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000078c0)=[{{&(0x7f0000000340)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f00000003c0), 0x0, &(0x7f0000000400)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}], 0x20, 0x200088c4}}, {{&(0x7f0000000440)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000640)=[{&(0x7f00000005c0)="86f016186cae0bc4ae3dd34dbcb5420878c4a044ed09d6ec1821b5a90ec22b31e3012f9253af3ae363023590d87fce90654b0e2fa782bfbd88814719128604c03447d303c1dce4961354234645c93a1bf522472a9f96e8d23ee5cdb6cfbf7d9704d94ab412380abdcf70af9da5b2333f1ce1cee821da530cb1ff59d4", 0x7c}], 0x1, &(0x7f0000000700)=[@cred={{0x1c, 0x1, 0x2, {r3}}}, @cred={{0x1c, 0x1, 0x2, {r3}}}, @cred={{0x1c, 0x1, 0x2, {r3, 0xee00}}}], 0x60, 0x20000000}}, {{&(0x7f0000000780)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000a80)=[{&(0x7f00000008c0)="1b4687254069119d7f49535e75804a8509fac62a4ccf638d6d8bdfc0b5d9ad4c3b6095c81ef7ea305c5233b3a1dfa7c0ec0eeb8283bb4c370ad5e847dc6cc3aecde076f3b347391a1aaa97aa3bd6548024f2f4b6702f408898905ef9a5e2e9f1a765dd7d51a79b1ec080b41f902809b032140817d20febfe8e558eab130bbbe0490e73cd339856", 0x87}, {&(0x7f0000000980)}, {&(0x7f00000009c0)="ce2fff0b812de1c825595c357abb367c1f4d3cc5d715654efd39d373dc01c93bde53542bc1f5bc443fbba046a631985ffefb803374ecdb8f985b1192997357e96abf10042b3a717ce42e243e8571d1f34b988b691b7da268b625a3df4410432d12991c0fd72fe0", 0x67}, {&(0x7f0000000a40)="b319f242c14acb09f8c8f2ace739e8e0767b16", 0x13}, {&(0x7f00000063c0)="328294ce0eeda416cf23bc20ae9c1f13776421f6e1b619c51f3942b056a3d7032d8cfc87ddc4c472698423d21b11a32640f3b0a5ba971f05182db4611439fd27ee28dd30379b71249f1f7c3dfd1ce92287d147fe9e6c1427ff8b87ec10378ac7da37c6a957f68922314cbb24e1f65ea1b3ac9026cb2fbafd0e4b66e27d8384c4cd90b4f5591ef974c19ed510f61136d8d04325884d02da277a89d6975c8e11b7e3f98408f808843e901b08bb79196ca69fa3a761493998052aa8097ad3f5545db53bb9f7969936e28efa7789bc014ebe65f520daddda81c5ad0c4ce4f830ef94beac481ef0314349b9be2278daebf28df3da4d92490d1b98574238606b46599308ebe850151ffbcbfb1deefd5949b1fa70dbe65a04c4055aa9e951ed5cc7f7b78d43dc5914a51e7c383309dde091cd25139f3075c0dfe6fa3be63e3acec77ab6fa6ca40b370e541b25073c65b08ff9b92e764324b75ddcdb353d9ec5905c916a6c0cdb41c4c9b8e38b8df813cbd0ed64752673263e1f14810c62a80d5895983d4973999f124eb2764a46563bcac55ff1887c5d956c4dd141addbb880a7a04d0c2c5167187d03730967022267f65533f4a0d4a1eae5755a2cdaafdb897099a994b04fd5bc6a610ca7f028375e097f0960199584c76a63cccf39145f871961691ded6500a208bfa3a61e0a41c7a02ead0ee1fb721f34557f41838c32fe79a426d0e048050e8805515a53f888df9104a5578e891f5d3cf0af94260cb08771b1321bb981df11947641ea89ce27d65e2dbb435019acf7d6b70dd5a1db124eee23bedfbf2fae08a5a185530deeff307c901246bff33596b71f473cfc9b8353aba6132c3cc34452115c73abfef25d4c62b06f09ce8d03bcf8dd8fd81dcd3d4fb6a3d41bf071ae50eb03917e053034c41ffbbbd830f91853363153caa4fea76b75c7ec4e1966ac9431dd7171612918b69c90c3d4de744f0684912b7295efee329f801c0e2c667ef8e06f988b7895d3bd7fce3b5d414176a1eb255e1af2560bb4e28e44d7f0ce8bdde564d78e6d0f25569850393a6013ee4da5e3e61d30f5a29d55b2e5910766036a28b894105c8b48ab18e64ac67488a94f48200a7c035c735cd4e6625b924880b5f673d33e8f9e966c89c06f9810da5cbdec153beef6d5b21f074dc179f098389d281a00c694c354ec39e0b0b1b90dc2f815c139dd95464e6b76d5231b32a8444ab6b3eb425aea99dd9d5ca08407221e481717b61d944fdfba145a68fd4cabe717611659c80b27ab1ee083c9e8ba21e76e30d1fecc64436a038c9ab2b644d50550618a4d78d2e06358fb6e811bc45d8a64f10db9a7ae00efa9132efb2fe1b9b613d03d74b6008e02ba038ce492349f8dbd17f5f0a4ed21a32c52170c84d1dae088ef9e9ba8614992d679417fcc534d64f72ab7a68569268fccf7e55c658bc82b6b5118ed4d20525c98f389a68666a850e8df82e46ebf3814b945c27bfb15494413b054c7fba53abb7ddbdd477cf11610eb18c3430c53ef25afcdf2dd5dfe107d657c90bc5af9379d534eb55ca37562b76cf3a85b8353c6c2ce9160b191f9bf1b4afd671c8dd61e25e06f1c2db2a45105803b6647124f0a720a8ecf785a06e734b3be58013fecbc263ee7d09db816f9a2becf6fecfba41d7599419e63881769298d10b6240bbb6474e7939ee071a97a6bbd70a9c7491456340ffe0f9bbedf09b09cc065b8b89a0c4d525a8237cabde476aef1601592843dddb85dd7a7d503e3f078c0a873f5d522e5c3280eef3c7eea2d17ba436940a708b4079e6590993200e295d59c2807af82dd2c5dbaba3bdadacfb0fc7c8b833c0f84fb191097d2ede4a13158770e5d0493f69388801fbc3c8cea30380e6fba52b0ef9d0b20b4374a7cf4f550f051b01b7845beff062d3d70ed5e224863aeec4f9bd5f2053346640a78ccdf2487b8b80e9c72dab4db262519a30e646b08e41fea4a7bfac7d277c0fa2506fbf30ea4d7b0e577fbcafe68883563a420c9fa47f8159edb2d8ba94a8e504f96cbd9cf3580bff80aaf7af1501c96d9613f4e4a94ba5209d0eabcb7ba121aedc522705bec2234ad34d16c9f94a2e0fd51c7b476834d0779c662acc27f8375a5fcd8c54a2820b92f5bbd3c27bf62f6eb52204abf75d8394025725ddac43411843a8fa108bc3c200b61af76208155f6bc64d4a28f43d7089e2cf05a58ea9bf591ed9fed71338b113eca8888fea2cc717ba1b827481cfb7ea8c048aa9405f0971d15daced4b7d003e48668df8bec0885ae741eadf675bbd7ab443da45c6cb8069c58af3a36b0ce3fac34c87cabbaac0d5b61ac6209f678f12355b79c30d73c6e5eb7bfb93304895aa6c757d70e4e68d70a101fbe361af7c6d69444eea75b6798b2c821b085544030b2f229e3e84dbff007bb89733453894681c69b0f2b8349dcb2245fa76ad76ad977ea4007ea695e641f6e0088b86d3b2da6b8c2a1e4fa9a8a14b1101fb5b66f092eb8ae324a7a967c1863cb47b246cc3d2fc99d5c9fb0d7cb207862d66fca303dad27b9113e4c6eae7d41aa396951d193541b5fbe11de605ea659253a5a47dde355f186739223a8806b3fdfff0203b7c9eff7285f2fd3a5af61f362619b3ef21e646be8569ad184dac434d01e37155fd9b8eb24ce70241e0868444abbd6fe243eb5d7a1f75e974792d54d552bc6b9eddec4a84dd8137ea790ae8db9247067fb0be7b6de38bcec14c8598ef0cd28ee56394944d3778c4699e5cb00600f10e7366f0b95934b1be5cc54f7d411855e72a3dc05a4f75d294c5838bde7e0102ced6226b95c7b7735519dedeb1690678b8ac2b55471b1127eaa64836a1b620e2d8f1e20a4a283c0096c2ffe2f357a0a67aecb0ee45c43587cd8cae513e33c9b7d3205c448de438facbc46b12d60c7ac6b291d3a0d98e470cb51665b73a0b106268b867fc72588fe53b4be5eb06e0d9cbda74f57aab79d49f216984d7d4305292823bde625ad344f1f92ca9101823d21d674783343d6c8c21bcee3081554d6d8db74366b3a68624450c51bdb6d3de6d9feae06c36aa531fae2fa8dd880743bc65f51ca2ca84c314b7ae0f0223266b402416ce5a3cc2f61723dad8332de345dc585f9f23abfb2235e6395cb4859eaae5785cbbfe2b44939f0b8d3ec68ada60f47352db15011ce21a317d659b3996a49ea06a5de857b70f9ab4e71c0fba4aacfc46b14e4687cab49c061e7816e948ada99292455f5b5e9902a1c7105e2c751e5005fa7de7d000e3f2ca53bc9d2a19c5771ef0679868be3ed6f12f699f8d68d073184d50394254d9fced929b585ca7429697461b92c378ac76cf8ed3ed30fc18ec3522cb17d0f58e9e8c38893b1b1488bb770f561edb0c209d4fff65eeb096359acec07b1255bfce8060f897d6049c08e4029ac078a869a267322b123c23493774120dc925bb4f118c41e8a7bf8175f743eca161bb924d0ab611f2090511694c75041348a4a0eb486fc43c1884866ae5295dae5d2aa26e4819383819d338ca4a58455aa0974b956409888ff66c1b602d2d600230b75f95fa63421bf670740538fba5101b1c53c5aa8b598633a1a8a9478f7b2c24e2eac5022d606facc4d6ff49aea806094618a4934ac10e8c6fdb7d9d644720284e422f76c6878fe7387ba81ac845e512c32e3065b23c0afe3840e66f593bb468b5706d7601e793dad20a02c8256f992825dceba4bd0d928ec6e098accf5711d3a95d953b166c18e6ea694eee408ea75baa9cbf351b59145a88b4bd010c4d60942bfbe406db35875e5f001fbc7b4cbb02bceb00e987a28e10fd430412f34e96f343c13523a0bdab7d8f83c1d899c6188fd40665820cbf3e9b192d454b69ec4b968cd21d777a2ca26ca9e9d3d862e0910500d128829d1599e5d0b70727da4335c6d741aeb50229215d7e736f1c93128cb4fb4c12aaa211511e1996ef556d12637a57df59ecce6631b95184ee759fdf1a4fc0ee1d0ae866bd14226371d4c1fb6404249aac439ed7ffc5174a3c7210b71235395b2439a843ed1b10df2046bb3293dd7a8a3dcb2aa9480ab882ede2a61a7a0af07035097c105fbac41aa7bc5ac7b4e8738475fe56742df0ab3bfef8a2b9d4f9b3aa4187f57a18a610f42eb60d40f64fc458db96364ac2a3d7e195302949ada9e680d5e0f46dc0dfbaf652b643b1685dc6358777b916767b51f95be0481619aed4395fd3afe946d688940c7d4f992c275ad02702d1fc251d4bbf52d01a2a676dfc3ca09de862b4887135e2b7db0da109bd6a739fc4c827d60919ee8b39e80c5b8226632af6ead0d0eef46aa2f9448438573856d8bca41a563f82e35459705b082b4317c9a10a8eb64fcc6a17c34e2c34f22f2626431070905cecadda2a2cac0b4fb9feb5cc1ece6be0776769d222f7d984cf45978bb43a6d9f26181bebdb5da0214034c924a0dce9a351ca7d6dd23f6ce5c5726279dbcd2481c364565460c10af12817c0bf64f09dcc28c9533fc2e2133be321081f85515121c91ef6fbe253c97df4ce8dc24138faf4ce40ee6bdda2532a53f6e7c8884892d9bdbe7815dcd98e2ab1ea34855ba54d5beaa61b3769f9b30c7974663fb8d0214fc7825cfbe6f4c6c41a15426be646add208c06f1d8ace9369d0337bd36fb1039890e25df496006df4ce540b3242e925191d3cd1c9d0eb401cb74a13e8a2685064a0cd047901c4583eccca5387eb3f337374ce4d40a506d7ea38ba91e6537728901394ccf854433d061ab1b34bdd0641476414881d5fe3834cee6f00defd7c3cdf4f840a8c5ed7e325a769f7a8ecd253f47e8b752e5f45b58f8b3cf32f565a3e6e91c76a4c7811f04af2d06ac936ffef8803982651b864e595ad6bb698bf3a07d8089ada1a52081b7e601cc94c0c907230420fda399fbfde53abcfe9371a5be17de2a0f6f8e5d8a2d35f6d630828331cbd816a193fdac55d0290b040b8b34c50794ad348c50c63bd6d4df169d0586ee1256e8d8f9df226b91f9fb04b8d2e9a2e8f6738e9a8cb24a5143fb127e9a44f6bf9eb47360f6ce3c6a37c360d21b8ce3b2e750d84f7e37fcf897c9af9fd2f88e0f4712e0cad95392f2865cf9c5fad088ae2d654e867b802f3149ad6a2f49adbe85e82db6fca996df09789ba768b73a31f6b35ff4e7029bb65a9b01965fbbfde5b3149f27d4f00873f2b8c70269bc34301d6d7d2e4e5796760f8a744ee0dae1ca9fad8a99aa878ad142f6129138b49c75cdc35ddc242fdc3b4af945337c5572b1a7f4f726d0d022b9ceab3f7a88d866a3f98585dfba5974fe12e8874e48a14040f4348500ed92842ce6855c1d74ec54cc4d011d7ce7a00e5b6752a617fa5a9411879429e131ba72faf908e5610ff21b980aa34658971f1bb94bdde2d828cc6198eecd045a4c75b1e4f090b1789b032372929b8536d12e8fb1e888db0cb58c6f61a25c48044eef1967c38fdd2cab2dd50c8a886ce29f3925bfd393da82b82965ada83b3357263264b6cd34816aa12b5ae648940e0d005cb0752beeb84ecc96498cc2c9807c91f6b79c82cf3c3f2085410330bfe5e7b8f0358c5fbe5e00801db06b686a5151389fc5151a9b3392b4174d6bcbd8f95a1eefbb5b32ed12464f0819b1ec0e0cdfb22367110931e9532254193fa5a0349fecbd4f5513454bb90855fda6eae23cd7c4aeb4cdf6c5b8ba44ae44272910ab2ac86fb188db138b09b0e4eb4c4d878383986eee68b63e0d0fa3edfb12911042cb86513c29e0fbd47a22d9f93f9c2ba0eaf1931d00f408dc7549cd8b7977", 0x1000}], 0x5, &(0x7f0000000b40)=[@rights={{0x28, 0x1, 0x1, [r4, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r6]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40, 0x40080}}, {{&(0x7f0000000b80)=@file={0x1, './mnt\x00'}, 0x6e, &(0x7f0000000dc0)=[{&(0x7f0000000c00)="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", 0xfb}, {&(0x7f0000000d00)="2a09e6249ed9b72540e9e7ca56bced3e704d60fe4e9acd24de0b316f9b2bdf32a78e36491e6761068f52b42afab38c1c61104816fdd9e5c795ea98ea5c92e84ae8ce4f236a8c392c80f9c58190006cdbc8d226a8ee8565b9482af5703e5f8bfdc8b0e29144bccd0ec8456dae72e09135f4cdd7fe45c71c89", 0x78}, {&(0x7f0000000d80)="86b36b4b4e94de7e5544433b2723d0eafe1e5020d97fb3502e66", 0x1a}], 0x3, &(0x7f0000000e00)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38, 0x24004000}}, {{&(0x7f0000000e40)=@file={0x0, './mnt\x00'}, 0x6e, &(0x7f0000001340)=[{&(0x7f0000000ec0)="033817a25ff224665621f25b75306f94ee6951b16ce9926b05eb036c59e68caa5d26ce87113a1de6028e9e83255480941219aea26a649c07b788e7", 0x3b}, {&(0x7f0000000f00)="df378cb150ce1b6ed0095eebcfd8e9021786b98a448a107bb5c15edc481ea811c55c01e1a06eac2de8ed8b7cee944cb88fd619788542bb3d3e8601f9eccf0665eed92a86b4e53d4cc3127e14328240750c337f07e76391cb106b64a6dc32be33935db4174ba9890b44b718012c0cf998d550bc", 0x73}, {&(0x7f0000000f80)="cee68d2a2b2dbb8bf30938cbc24b3f85eb3aafd93479ac75a19fb33d021973ace46d1c9e333ce20b8a9c49f5c313e04614216287611ed8c60e962aeeaf0b5b518a5d", 0x42}, {&(0x7f0000001000)="1dd2c5ed5096287a9b69deaeedc123cc982ad64e57885d8befba080a8517dda82f0da5", 0x23}, {&(0x7f0000001040)="b1c2e9425dd19eab2233130ffb8e5e9cf9f8284d5931dc32a3c37f80341ecb15df4b4dd4c84be07be09c74f62d16a557e260e36606d84d476d9bde6d7260e6072f5f74a69c46276b76d58f928730203ccf43267f7a25d26dd1d555d3ab818b29dd3717c71f10e01c49b8719517ae390c7d1073a51c4743db15c7a90ee50f5cd61d7b9504c0485860fa034f026e1b081b62acd882d8e2b68b3e7d99912c78d560a8766427f0a8882eb8209b6c1b16f1d1e9ad548ffc53f9", 0xb7}, {&(0x7f0000001100)="e3eb8d07d6948014005f3bc86d84e8b8b9ef4d56d9302874185724823c443271603d28e6e815dd3ede723053842d8ece57a6c86523ec68832bd2fa38d6cffadbc24b25c6ce0c", 0x46}, {&(0x7f0000001180)="28c47bf644aa8552bf37646d2f2bee01752cacbd57bef0240330c829842b618590a084c499be46", 0x27}, {&(0x7f00000011c0)="a52fbca4ca7bffa8c0683f3c230f4c49daa5e15a1a7886c5f9fcb39d8f8e39e2a2d07af598b1251385d9927061d8fbeb6ebccb99f511ae90b443b86f6073d8f800021f3cf6e5b93284ace7d3d29fdcf98b8d71982f6141c08a184c39019681f8e827e390a7bf20143cfe1abed74b6dab80e0651d434d462f05", 0x79}, {&(0x7f0000001300)="bb6c2ddee507ab7921fca7e32ee60e30b10c6a728004", 0x16}], 0x9, &(0x7f0000001440)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r7]}}, @cred={{0x1c, 0x1, 0x2, {r3}}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r1]}}], 0x90, 0x4000004}}, {{&(0x7f0000001500)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000001840)=[{&(0x7f0000001580)="68fe1014cc9ff6d2616adb1dbc0b1e0af3b91ddfa2f73ac08a214eaee5269a23f71f84fedecfc32d04c85357705c209a5cbbd23dd8887d8954a419b937434d01d15dbccc8f8ad1eb5c6a122e29fab549dd3ddb1909812660d3e73124c0bd10adcadf02d1ad2911e083f82c59d78678a890fb770ac2fedff05a6b18ea4aafd58320c3ec0b0344bcadcb76a4022feb5865ebadd79c13f09e48f220a948c0f07f65271c5edfcef828c2f713f39b7176a1f4b2a7f53b5524", 0xb6}, {&(0x7f0000001640)="f0fd44747de09354e616896735cdd70551a3b1944b9db422f22ac720c393c66b1ffa5c590a4c3544987844ce25345ba3c9bd60faf94da9273b912eace74415706fb5147fb0877dc38ed5695cda33c19792a0bd39787d484313a29681728d70f135501747d72f9156e5657f2325cd2dd281697988ce7296eb43c807ec2fdc55b1bf860d717f5910b5dcecbed969f24c1f6722bd9e5f94db8006928d37de7aba942708fed201e96f103c5e3a5add9e7ef1f214fba11645e8b480fc34d8d9b1382630dc36222f2e", 0xc6}, {&(0x7f0000001740)="516e4b61b08906641487f280a121ff0abd6373d3add742d2e3c38fbb344bb2f91d463b2f03527235916bb3666400ad0e2522d4891e51a5084bed5c6059af9dba3f440e37b2b4c8b43afbcc040112f13bb415df861047288d08340ce6db5838663967e6ea59da781939de27025ecfbd92269432db6d1b422ff116dbfa1ba27f0e3ea0866ec69329b7b2db43133df52b6e8a2cb2f4a26486f1147f732807d052f173ddcbd1bddf27a130bab9d8693b6c452aea7bbbc5471192e287e63ac7817c47bafc49a914cd4eea6eda7c711b2865f5443753927f251fd8cc6fa37215", 0xdd}], 0x3, &(0x7f00000006c0)=[@cred={{0x1c, 0x1, 0x2, {r3}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40, 0x1}}, {{&(0x7f00000018c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000001b00)=[{&(0x7f0000001a00)="4821fcfdcb465cb6c3d23ae588b0bdbfe46287dee61639b3988f403e4b1c3a97488b7f6b16dd43ab99a345e818134a32fdce1e311c58faeedb12c921b3d33f5ab585122e3371a9a690ae5201d895672050086537d5e6a01d8e515ddc6407b95d195ccbe1c5e6629b5fadd7ae1658613c13035e0dde154457c820ae0cad81164d9a00b5cd05f3b5bc4bc6649e42d21cfaea3d0f56ba67cb7aa4e27e8350211e46e510d083595ac0270e84e9a9c6f49efc98d208cb392441abd7926a0398ede6f1486e12c0d4c651cee28184e71ccf23c4b2b8599834330c2ae3b4039943c0252b619871dc0c44a1666c8a662bfc91730ce9b624a9c8", 0xf5}], 0x1, &(0x7f0000001c00)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, r0, r1, 0xffffffffffffffff, 0xffffffffffffffff, r7]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r7, r0, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd0, 0x8}}, {{&(0x7f0000001d00)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000004200)=[{&(0x7f0000001d80)="30926fb12b33833b84cf891773e464ab544d0a3b47e342c87c59fc3ee4fc6bf4ff6f7d1c9a308baf389541a63b97e979bea4a24901568bb029468811f51228f8b0d0412ba29ab54031278aec1a03e1357078b2d57095c9f349a4c23331195136a4e972492f7259ae01cf6d5e6cbf6c5bdf014a9cf93d472705fea9a9060c84f576c98d1489f199cd003e9fb45cb1a1ed2c3bde1e4ad9a7cd4d6ea207dc30ec430f7cdccf2d79105fa7976b02f3", 0xad}, {&(0x7f0000001e40)="980c283a1f32954c2cc74ba25e3492053b136bd2971d9f60b1a76380d84b76b187d4e20cfea1dbce0e6bb90ab55bc1118a9b23897621d6c7bcfcdf9c0f57991dc74ac8f7e6d045d7cdc780c59567c74c6a00617243e674ffd70e0fefe7950d229b3523977e1b43ab115774fa7232adfd428d81606b0ffc370cac7aadc464399df15b5907ae9248921385ef2cb8da7d013b98", 0x92}, {&(0x7f0000001f00)="193b0288d6b85ad594192c407b4bc8037d295dc4a3f505a0c506f509bb7cbcfbe97657fc3590ae15f8f5ddbc65977e1ae252a758c0de69dd9b2f8fa2539d3f6195b544acf6b6f9c07055c3b5789e0e4df65e2e552ab966b7b098dee9197d361a96d9929fc40e6412e58cd4955b5669f836fc31fa887486638c538b2de04a71bb3cab758c0728f279821d72c2dd487cb35ec0547a6d77936435ffd6aa7e40fcc839df8982bce7b776762507fd900aa8189adb0927ce79440f55ff979f42b77f434200ca519d4b4d2695b1750382321b28c09906a7e336d4e59dcd3e769125af8ae66feb5ac75c93", 0xe7}, {&(0x7f0000002000)="2cd855c3e6dd80f3ec123aceca7dc2e215e811485a4a6661940e13d4108589290af271c3ce559a10c6933b3da2f4ef4249beaf2c77fb87b9ad2c4dbb69e904715a4314f7c39f3db2f2b0f87474ab80ecf54c3a", 0x53}], 0x4, &(0x7f0000004280)=[@cred={{0x1c}}], 0x20, 0x1}}, {{&(0x7f00000074c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000007700)=[{&(0x7f0000007540)="2cf725c3c3e863", 0x7}, {&(0x7f0000007580)}, {&(0x7f0000007640)}], 0x3, &(0x7f0000007800)=[@rights={{0x2c, 0x1, 0x1, [r1, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r1]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0xa8, 0x4c000}}], 0x9, 0x4042801) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 3m30.49107961s ago: executing program 1 (id=519): r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents(r0, &(0x7f0000000000)=""/61, 0x3d) close(r0) r1 = fanotify_init(0x2, 0x101000) fanotify_mark(r1, 0x1, 0x4800002d, r0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000040)='.\x00', &(0x7f0000000100)={[&(0x7f00000000c0)='\x00']}, &(0x7f0000000180)={[&(0x7f0000000140)='+#]\x00']}, 0xfd76365920ce78a8) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f646973636172642c6261636b67726f756e645f67633d73796e632c6261636b67726f756e645f67633d6f6e2c6e6f757365725f78617474722c6e6f71756f74612c64697361626c655f726f6c6c5f666f72776172642c67635f6d657267652c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c646973636172645f756e69743d73656374696f6e2c636865636b706f696e743d64697361626c652c6e6f696e6c696e655f64656e7472792c00ec6da92d1c80a6c720380e3c2c55bf27596d2776ce408c4bb19b149757508e1c7e919c6c2047023baa412d14fa75c8cac6e5f103e13ea52708af0a7c5da8af4ecb6612"], 0x2, 0x5505, &(0x7f0000002480)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000000}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000010) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x40000, 0x0, 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f00000001c0)=@ccm_128={{0x304}, "ed6d643b5002145f", "fb19f73b60f002f780d1a8e4d9aaefab", "ebe9bd09", "82a067afc89c40ed"}, 0x28) mmap$usbfs(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x6, 0x50, r0, 0x1) syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') 3m19.602607535s ago: executing program 1 (id=534): iopl(0x5) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') preadv(r0, &(0x7f00000014c0)=[{&(0x7f0000000340)=""/191, 0xfffffd90}], 0x1, 0x182, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x47d0, '\x00', 0x0, r0, 0xfffffffd}, 0x50) syz_emit_ethernet(0x2e, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @multicast1}, {0x2001, 0x880b, 0xc, 0x0, @opaque="75d0148a"}}}}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000055a60701000000001000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="00800000000000002194ec6ddc2a76b7020000030000008500000086002835b13fb4019d0000bf910000f3ffffffb6020000000087d30000efd6bc0000b7000000000000009500"/80], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000100)={[{@grpquota}, {@delalloc}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") lchown(&(0x7f00000006c0)='./file0\x00', 0x0, 0xee01) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x22400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000180)={'aio_iiro_16\x00', [0x4e27, 0x1, 0x0, 0x7, 0x6, 0x4, 0x8, 0xa82, 0xf746, 0x4, 0x2000002, 0xb, 0x1d7, 0x6, 0x6, 0x1111, 0x5, 0x10087, 0xffffffff, 0x5, 0x6, 0x17fffe, 0xf23, 0x8686, 0x2080009, 0x40000000, 0x3c, 0x14, 0xf, 0x7, 0xe8]}) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x8, 0x0, 0xca, 0x3ff, 0x5, 0x8, 0x0, 0x0, 0x9f}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000004c0)=0x0) capset(&(0x7f0000000bc0)={0x20080522, r4}, &(0x7f0000000040)={0xfffffffd, 0xa08, 0xff, 0x0, 0x0, 0x5}) iopl(0x9) pipe(0x0) socketpair(0x1, 0x20000000000001, 0x0, 0x0) chown(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) unshare(0x22020600) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) fcntl$notify(r5, 0x402, 0x0) unlinkat(0xffffffffffffff9c, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r7, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0xc}) 3m16.418054989s ago: executing program 1 (id=546): syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000480)='./file0\x00', 0x2018008, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="2f93edc77863113d68e33456dfe3c025878b46bc73df14f991a8f7a341a10f44c05fc1c37ad73b0239a18733e7436f3b54758b4ce59af971d50e53c14277216c0bba6ad052fa7a6d77f0b19c8b2381abc46dfa7e4bc6c37bbab3f908f48d1a6055a6457c5d503502300a69dc517cc08b955df0d19ae4c120c512eceffbf3fc154e4ba08f2497b14e95cfdef1c26e8623eab9941404ca9d84df9a2c44e453a0cfffbf23e5bf1e872ee040a582eda3d84714e82dde4c02836e5f66775f4df1bdcfbc28eb5ced2b332944d3ab2b9efe3cbb2111fe"], 0xfe, 0x4b1, &(0x7f0000001d00)="$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") syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x10, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x11, 0x6fd, &(0x7f0000000ac0)="$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") rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20000800, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa5a01f3c2f1360806000108000604000243b1849c32a1ac1414bbade709000000000000007c1ee74cf952b64d00934b593a04b535886e4ab9bb1eb38726fffa72d5f7e3edf582d7f9cb8b208f75eb89950f0efe10c174d565eb319d069cdfb1a07760"], 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsopen(&(0x7f00000001c0)='ncpfs\x00', 0x0) r4 = fsmount(r3, 0x0, 0xf1) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0286405, &(0x7f0000000000)={0x5, 0xa, {r5}, {0xee01}, 0x5, 0x5}) setpgid(r6, r5) setpgid(0x0, r5) fchdir(r4) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101043, 0x102) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) 3m12.507685128s ago: executing program 1 (id=554): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000040c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r1, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) lseek(0xffffffffffffffff, 0x6, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r3) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x20000820) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x40014) recvfrom(r7, 0x0, 0x0, 0x10140, 0x0, 0x0) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0)={r2}, 0x4) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x84, 0x2c, 0x107, 0x0, 0x25dfdbff, {0x3, 0x7c}, [@nested={0x60, 0x1, 0x0, 0x1, [@nested={0x5c, 0xd3, 0x0, 0x1, [@nested={0x10, 0x12d, 0x0, 0x1, [@typed={0xc, 0xfe, 0x0, 0x0, @u64=0x7fffffff}]}, @typed={0x8, 0xf7c, 0x0, 0x0, @u32=0xe1}, @nested={0x3d, 0xd9, 0x0, 0x1, [@generic="9a62f71f7c155546b2a5ae4555b15e0c760ea5ea63e15d79c663a01f3fca71598ee379dd6e185e760ecd9e833d7545e86d87a38841368c78d0"]}]}]}, @nested={0x10, 0x2, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x16, 0x0, 0x1, [@nested={0x4, 0xe9}]}]}]}]}, 0x84}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r8, 0x4) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r10, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) rt_sigprocmask(0x0, &(0x7f0000000340)={[0x400]}, &(0x7f0000000380), 0x8) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00'}) 3m11.373286704s ago: executing program 1 (id=560): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00001b3000/0x2000)=nil, &(0x7f00001b4000/0x1000)=nil, 0x2000}) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r1, 0x40106f52, &(0x7f0000000940)={0x3, &(0x7f0000000140)=[{0xb, '\x00', @st={0x0, [{0x3, @svalue=0xa4}, {0x3, @svalue=0x7}, {0x2, @svalue=0x2}, {0x2, @uvalue=0x7}]}, 0x7ff}, {0x20, '\x00', @data=0x4, 0x5}, {0xd, '\x00', @buffer={"f335f2a95f26e5c361de6d1c57c700b0bc0dc4a01f00", 0xfffffffffffffeda}, 0x7a7ce1bd}]}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x2, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000180)='./file1\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000100)=0xc) quotactl_fd$Q_SETQUOTA(r4, 0xffffffff80000801, r6, &(0x7f00000000c0)={0x4, 0x2, 0x340000000000000, 0x0, 0x2, 0xb, 0x4, 0x9, 0x7ffffffc}) setsockopt$inet6_int(r3, 0x29, 0x31, &(0x7f0000000100)=0x8000000f, 0x4) sendto$inet(r2, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) r7 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) fchdir(r8) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r8, 0x84, 0x1, &(0x7f0000000180)={r9, 0x453, 0x4, 0x93f4, 0x8, 0x7}, 0x14) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 3m9.801748219s ago: executing program 33 (id=560): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00001b3000/0x2000)=nil, &(0x7f00001b4000/0x1000)=nil, 0x2000}) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r1, 0x40106f52, &(0x7f0000000940)={0x3, &(0x7f0000000140)=[{0xb, '\x00', @st={0x0, [{0x3, @svalue=0xa4}, {0x3, @svalue=0x7}, {0x2, @svalue=0x2}, {0x2, @uvalue=0x7}]}, 0x7ff}, {0x20, '\x00', @data=0x4, 0x5}, {0xd, '\x00', @buffer={"f335f2a95f26e5c361de6d1c57c700b0bc0dc4a01f00", 0xfffffffffffffeda}, 0x7a7ce1bd}]}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x2, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000180)='./file1\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000100)=0xc) quotactl_fd$Q_SETQUOTA(r4, 0xffffffff80000801, r6, &(0x7f00000000c0)={0x4, 0x2, 0x340000000000000, 0x0, 0x2, 0xb, 0x4, 0x9, 0x7ffffffc}) setsockopt$inet6_int(r3, 0x29, 0x31, &(0x7f0000000100)=0x8000000f, 0x4) sendto$inet(r2, &(0x7f0000000900)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9025a01c95d4a068ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a1133e9fa9bf0de6c378bed7b51cb8a07c343aabfda193349b91a5dc81a658cb61fbbfa51ef95abe03381ee2cb8d41da19ea8b96ec68ce17cf57da60f1d04acaf34a643db8d2d5ad2991f306b42744347a0c9e1fe2136b2b3da49032d3a57df1e236222cf6d6fe396aff8e5fe7fff5baa88789b783c12045e2c904a5d118369fdddc3e6e2f24bdbb26df92ac9bf4751c897a87c0223888e36ad14ba6e4d879ff464cac6f13a3a543e067d922e99c50f2fc6391e9c1c82b7195005eafdbb3374200c134cbd0f11739e8c19dd07140686242fea48caf3a1a93b86f35d77f258a2c9ce24cf321068551a584262d7a74a344e428c77c8af755e72904b0ca8a0bb359fb0", 0xffffff5d, 0x12, 0x0, 0x0) r7 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) fchdir(r8) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r8, 0x84, 0x1, &(0x7f0000000180)={r9, 0x453, 0x4, 0x93f4, 0x8, 0x7}, 0x14) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 1m42.906440793s ago: executing program 3 (id=740): epoll_create1(0x0) epoll_create1(0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x20, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r0], 0x24}}, 0x0) (fail_nth: 4) 1m42.105107601s ago: executing program 3 (id=742): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x56, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffb}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f00000001c0), 0x4000, &(0x7f0000000600)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) statfs(&(0x7f0000000040)='./file0\x00', 0x0) getresgid(&(0x7f00000004c0), &(0x7f0000000500)=0x0, &(0x7f0000000540)) mount$fuseblk(&(0x7f0000000180), &(0x7f0000000340)='./file0\x00', &(0x7f0000000400), 0x78c480, &(0x7f00000006c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@default_permissions}, {@max_read={'max_read', 0x3d, 0x4}}, {@allow_other}]}}) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000380)={0x50, 0x0, r3}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000004280)="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", 0x2000, &(0x7f0000004200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x60, 0x0, 0x8, {{0x7, 0xdc5, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x3a}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x37}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x24000840) 1m41.764252983s ago: executing program 3 (id=744): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x2c, r3, 0x1, 0x70bd28, 0x1, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x2c}}, 0x4000080) socket$inet_sctp(0x2, 0x1, 0x84) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x16}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x1f2f, 0x0, 0x0, 0x0, 0x0, 0x23e, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000540)='Q'}, 0x50) r6 = socket(0x1d, 0x2, 0x6) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000000)={0x1d, r8, 0x3}, 0x18) sendmmsg$inet(r6, &(0x7f0000002e00)=[{{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000080)="d171e4c4c55f7973", 0x8}], 0x1}}, {{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000001500)='i', 0x1}], 0x1}}], 0x2, 0x0) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r2) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r6, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002bbd7000ffdbdf250700000014000680060005004e24000008000600120000000800020004000000080004000400000054000680080006000000000008000700", @ANYRES32=r4, @ANYBLOB="06000100e83300000800060008000000060001000a00000014000400fc01000000000000000000000000000114000400fc0000000000000000000000000000000800030008000000080002000100000014000680080006001200000008000700", @ANYRES32=r4, @ANYBLOB], 0xb0}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000000)={0x0, @in={{0x2, 0x20, @empty}}, 0x27c0}, 0x90) 1m39.548446916s ago: executing program 3 (id=753): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x808714, &(0x7f0000000140)={[{@grpid}, {@user_xattr}]}, 0xff, 0x498, &(0x7f0000000440)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x940, 0xd6) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r1 = creat(&(0x7f0000000200)='./file0\x00', 0x0) close(r1) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x2125099, 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000240)={0xf}, 0x4) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000280)='./file0/file0\x00', 0x3) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e24, 0x400, @loopback}, 0x18) close(r0) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x200000, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB="24ff"]) 1m38.4683395s ago: executing program 3 (id=757): syz_init_net_socket$ax25(0x3, 0x5, 0xcb) r0 = socket$key(0xf, 0x3, 0x2) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00'}) ioctl(r0, 0x8b2d, &(0x7f0000000040)) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$packet(0x11, 0x3, 0x300) r2 = landlock_create_ruleset(&(0x7f0000000000)={0x0, 0x3}, 0x1a, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r2, 0x2, &(0x7f0000000080)={0x2, 0x2b7}, 0x0) close(r2) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00\a'], 0x50) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x41}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'vlan1\x00'}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000619b3b4063070120af9c0000000109021b0002000000000904b60000ff81ca00090409"], 0x0) 1m37.828922458s ago: executing program 3 (id=760): syz_init_net_socket$ax25(0x3, 0x5, 0xcb) r0 = socket$key(0xf, 0x3, 0x2) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00'}) ioctl(r0, 0x8b2d, &(0x7f0000000040)) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$packet(0x11, 0x3, 0x300) r2 = landlock_create_ruleset(&(0x7f0000000000)={0x0, 0x3}, 0x1a, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r2, 0x2, &(0x7f0000000080)={0x2, 0x2b7}, 0x0) close(r2) socket$packet(0x11, 0x3, 0x300) pwrite64(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x8) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x41}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000619b3b4063070120af9c0000000109021b0002000000000904b60000ff81ca00090409"], 0x0) 1m37.186765394s ago: executing program 34 (id=760): syz_init_net_socket$ax25(0x3, 0x5, 0xcb) r0 = socket$key(0xf, 0x3, 0x2) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00'}) ioctl(r0, 0x8b2d, &(0x7f0000000040)) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$packet(0x11, 0x3, 0x300) r2 = landlock_create_ruleset(&(0x7f0000000000)={0x0, 0x3}, 0x1a, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r2, 0x2, &(0x7f0000000080)={0x2, 0x2b7}, 0x0) close(r2) socket$packet(0x11, 0x3, 0x300) pwrite64(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x8) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x41}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000619b3b4063070120af9c0000000109021b0002000000000904b60000ff81ca00090409"], 0x0) 5.670660977s ago: executing program 7 (id=1016): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f0000000280)={[{@orlov}]}, 0x82, 0x499, &(0x7f0000000840)="$eJzs3M1vVFUfAODfvf3gffmsigpItEqMjR8tLags3Gg0cYFRowvUVW0LIRRqaE0sIVCNwY2JIdG1ujTxL3DnxqgrExNXujckRNmAxsWYe+demE47dFqnM4V5nmSYc+acO+ecOffMPfccpgF0rcHsnyRia0T8GhE7qtHFGQarT9eunJ3468rZiSQqldf+SPJ8V6+cnSizlsdtKSJDaUT6YVIUstjs/JkT49PTU6eL+MjcyXdGZufPPHH85PixqWNTp8YOHTp4YPTpp8aebEk7s3Zd3XNuZu/uF9+4+NLEkYtv//B1Vt+tRXptO9akf+lLg1nD/6zk6tMejv//p+I2mm014aS3gxVhVXoiIuuuvmz8VyqV8zVpO+KFD1Y4fMs6Vw9YR9m1adMyrxfXxYVKQ8lNU4FbQRKdrgHQGeX1Prv/LR9tnH503OVnqzdAWbuvFY9qSm+kRZ6+uvvbVhqMiCMLf3+ePaIV6xAAACv4eOKzw/H4cvO/NO6pybe92EMZiIg7IuLOiLgrInZGxN0Red57I2JXM4XWbBDUbw0tnf+kl+qytHR3IZv/PVPsbS2e/5WzvxjoKWLb8vb3JUePT0/tLz6ToejblMVHb1LGt8///EmjtNr5X/bIyi/ngkU9LvXWLdBNjs+N55PSFrj8fsSe3vinUqnUtT+5/kEnEbE7Ivas7q23l4Hjj361t1Gmldu/5O1uaMGZUPky4pFq/y9EXftLydL9yf5tN/YnR/4X01P7R8qzYqkff7rwSqPym2//+sj6f/Pi879I+WK+CAy8VbtfOxsNdi63Nizjwm8fNbynWev535+8nn8flduu743PzZ0ejehPDufxRa+P3Ti2jJf5s/YP7ctSyvaXR6b5d1wU/X9fROwt9svuj4gHiro/GBEPRcS+hq2P+P65xmkbof8na/o/ifrzf9e56nPZ//OrDvSc+O6bRuU31/8H89BQ8Ur+/beCZiu49k8OAAAAbh1pvnKTpMPXw2k6PFz9j707Y3M6PTM799jRmXdPTVZXeAaiLy1XunbUrIeOJgvFO1bjY8VacZl+oFg3/rQn8vjwxMz0ZIfbDt1uS4Pxn/m9p9O1A9bdcvtoY8v8oA24/dSP/3Rx9PzL7awM0FZ+rw3da4Xxn7arHkD7uf5D91pu/J+vi9sLgNuT6z90L+MfupfxD92rbvz3xC+dqgnQRmv4Ob/Ahgm8OryaozZFK0uPdIN8CE0Emv97EOsdeHNjVKOJQKe/mQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFrj3wAAAP//dNXrDA==") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) preadv2(r0, &(0x7f0000000200)=[{&(0x7f0000002200)=""/4096, 0x1000}], 0x1, 0x0, 0x401, 0x8) 5.419739855s ago: executing program 7 (id=1020): syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x800000, &(0x7f0000000100)=ANY=[], 0xa, 0x234, &(0x7f0000000900)="$eJzs279rE2Ecx/HPXS7pNdpWrDqIQlGsLjb+mBxE3Tr1H+hU2qjFE6tVsEWwWdRB6OTm4iQIDo4idRMn/wAHwU0pdgg4OfTkzvvR5JLmB5ecpO/X0ueez/Pkee7oJd82iQDsWVc1IUOGCt7BMfvA+riR9ZYA9Ikb/Ny23JgZhgAG282RrHcAIBtb16SXp6Rf1UfzyhXCssCrAL5tStqYfKo1Bbk5JOn1F8mK6oetinTUCnLD1nB9ffFKOh3ON4q14UNbqkjFKN+3IxyWKq7/+GdOhuvv14hGNZb38oMaD9ZfiOYfaVnvWJ2XSAAADBxDU63yXQeYur7olM81zfN+fr5pXvDzCy3yi9HxUNSafTHz4IN7edvLp+bvOAu7bRNAA2YX9//X43E71+L+t5rc//V/JwDov+WV1VtzjuM+lvxG+V7QEzTC/wjEPbnEmFQa4XsObQwO36FMRN5j7OjJJaevTybPPb2zMOONjUnqzYX6jxtqEH2f/ndNoh6zF1e+pnHi558nS8/fvW9n8NsOlzCj37rZjXK1boxMqYfnNZG4C+Ycu73pxprrdrhow6eL+MMBdtrPRAD6rXT/9lJpeWX17GJO0o1yPnzBn/6x6Vf2pZr6Pp/dTgGkLX7Rb5RWEj1u7eHMp8+/q5fePOti5SuSPha7mAgAAAAAAAAAAAAAAOoc0uGstwAAAACgT5Lf/rk7mvZXl7I+RwAAAAAAAAAAAAAAAAAABs3fAAAA///PtQqI") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0xe1c00, 0x0, 0x0, 0x0, &(0x7f0000000000)) 4.109161744s ago: executing program 7 (id=1028): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0xd4, @empty, 0xa09c}, {0xa, 0x2, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x3a}}, r1, 0x40099d}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 3.942918766s ago: executing program 6 (id=1030): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@private2, 0x6, 0x2, 0x3, 0x6, 0x73, 0x3}, &(0x7f00000001c0)=0x20) 3.749624115s ago: executing program 7 (id=1032): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, 0x8, 0x0, 0x0}}, 0x10) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x1c) 3.355667989s ago: executing program 6 (id=1033): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000040)='\b\x00\x00\x00', 0x4}, {0x0}], 0x2) 2.753692085s ago: executing program 7 (id=1036): syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x2004000, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0xfe, 0x1222, &(0x7f00000024c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) ftruncate(r0, 0x6000000) copy_file_range(r0, 0x0, r0, 0x0, 0x9, 0x0) 2.403389504s ago: executing program 5 (id=1039): syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000000840), 0x1, 0x782, &(0x7f0000000880)="$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") r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x400017e) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) 2.068428947s ago: executing program 5 (id=1042): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x101e01, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000340)='./file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x81, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 2.035910169s ago: executing program 6 (id=1043): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa"], 0xcfa4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.748105926s ago: executing program 4 (id=1046): syz_mount_image$exfat(&(0x7f0000000540), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB='utf8,utf8,iocharset=cp862,iocharset=cp864,discard,errors=remount-ro,fmask=00000000000000000007777,gid=', @ANYRESDEC=0x0, @ANYBLOB="2c757466382c616c6c6f775f7574696d653d3030303030303030303030303030303030312c616c6c6f775f7574696d653d30303030303030303030303030303030303030333737372c0002e5cc2c3640db32594e71db"], 0x1, 0x1526, &(0x7f0000000780)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) 1.711388485s ago: executing program 7 (id=1047): getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3b, 0x0, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r3, @ANYBLOB="0800050002"], 0x24}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x30, r5, 0x5, 0x0, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}]}, 0x30}}, 0x0) 1.645459324s ago: executing program 0 (id=1048): r0 = syz_clone(0xa8200780, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3000046, &(0x7f0000000200), 0x11, 0x553, &(0x7f0000001080)="$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") writev(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) pipe(0x0) close(0xffffffffffffffff) r2 = syz_open_procfs(r0, &(0x7f0000000100)='status\x00') pread64(r2, &(0x7f0000000140)=""/25, 0x19, 0x4) 1.580201019s ago: executing program 4 (id=1049): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="18020000fbffffff000000000300000018010000756c6c2500000000002020207b1af8ff00000000bfa1000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000140)={@fallback=r1, r1, 0x2f}, 0x20) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000340)={@cgroup=r0, r1, 0x2f, 0x10, 0x4, @void, @value=r0}, 0x20) 1.394172577s ago: executing program 5 (id=1050): syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x804cd8, &(0x7f00000000c0)=ANY=[@ANYRES8=0x0, @ANYRES32=0x0], 0x3, 0x232, &(0x7f0000000500)="$eJzslb9uE0EQxn97t/HFYKTUVJGwSBqI7UiIMl1egAfAco5g5cwfnyWwZcmGJg00vEQkaioqCiToKRAC0SQFSDRBVEHI6G5nz3dgOzYK3X2SPd/OfjO7e7uzezu8H3rAr+N+gxViKEp8VAoNrCnjOykY+13sSPBFm3ZV/M/FHokNu713Twzt7dWDwG+H3WnEIyZKwVSNJTIs1ta3X6ZEesJgVnlq6rePsx7FRLEDzF7PWRIHZVc67uq4xvV31CDj8eh9GmuKhpjYItMH9WZ/sQvZrv6LOZdTlLR/djljjYOQ1XnOTWalhvwoZT5U8HVilNob/OumLPG/9x1iEm3uzxIztsmQD88mf9WYuBJelPMT7exi81HMJ36a9XQNkctgoa08mniwx4fE4/Q8oa2acPuRraD3x/1GxG4CWzKvHfOTcjKaqPFabrrId1HDEJTLSFmNhq2osQZsdFr3NsJu70qzVd/1d/07tdrmtcqb81KiowE0A7+ylBoiKeohCc6l+iPtZ510pVTEkXZqEqcKmLlpJQKJXb9krGsqHicVm85h8r5KlmcvAJcWN7jMMvBgqFahJtnKRNnccbCL5lYz8Ks6NU84wWE57rjauBvs7KNQoqwcoHFs2CFLSaOGaUTp/c3ryfL3xZbj/+Vk6gdiD8Xat8u+STrO8E1a60Mo8LDe6bTt40W7mvhqBY2wlWRkR0a1r6G9k8se80MtoM2RI0eOHDly5Dhz/A4AAP//Z98fTg==") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xe9) getdents(r0, 0x0, 0xbb) 1.382402477s ago: executing program 0 (id=1051): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x117, &(0x7f0000000400)={0x0, 0x0, 0x10, 0x0, 0x3a2}, &(0x7f00000001c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800"], 0x18}, 0x0, 0x40000, 0x1}) io_uring_enter(r1, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) 1.277354035s ago: executing program 4 (id=1052): syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000000)='./file0\x00', 0x1810882, &(0x7f0000000040)=ANY=[@ANYBLOB="756e695f786c6174653d312c726f6469722c757466383d302c73686f72746e616d653d77696e6e742c757466383d302c757466383d312c756e695f786c6174653d302c696f636861727365743d63703433372c756e695f786c6174653d302c6572726f72733d72656d6f756e742d726f2c757466383d312c757466383d312c73686f72746e616d653d77696e39352c6e66733d6e6f7374616c655f726f2c756e695f786c6174653d312c73686f72746e616d653d77696e39352c646973636172642c004338cb8631b26441e86414f461975e105d02960776fcb7ddfd80b96c1b2ffd13d5cc37784797dbc9e26b7c39310b49940995ce6e6ce1c218890b59506de99e2dd234abcde0be50d3de656741fee78f74e94ee73bd6d7162f0d2a8275e0a6125615ce223c21fe303d561d81b2681dce1c0b7061c5a347b2040e7b6c9210507527467dad005f3e38c47d4daa9d76c69f51ffeb2f81123fe54df14c6c02413e51ba63c35f11"], 0x0, 0x2b9, &(0x7f0000000280)="$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") syz_mount_image$fuse(&(0x7f0000000700), &(0x7f00000000c0)='./file0\x00', 0x30c407a, &(0x7f00000006c0)=ANY=[], 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x60843, 0x15) 1.277090662s ago: executing program 6 (id=1053): memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000000100)='\x00\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='map_files\x00') readlinkat(r0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000540)=""/76, 0x4c) 1.172943376s ago: executing program 5 (id=1054): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r0, 0xc0385720, &(0x7f0000000080)) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf01b}, {0x0}], 0x2) syz_io_uring_submit(0x0, 0x0, 0x0) mincore(&(0x7f000081d000/0x1000)=nil, 0x1000, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$netlink(0x10, 0x3, 0x0) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x20aee4, 0x80, 0x80002, 0xbfe00000}, &(0x7f0000000300)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r3, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x1) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000001c0)="66f7", 0x2}, {&(0x7f0000000300)}], 0x2}], 0x1, 0x0) 1.139429463s ago: executing program 6 (id=1055): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='pvfs2\x00', 0x2a00000, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000600)="878b7cdfd4455cf49da7ba6f280ae012ce80389a2aefe4fd04084554d7015aba5330d1b817d6c08af29938b8a9bc2b83462ddadaad3a3a5c0181a0203e49b12c99ac8757fc317fe672938a06f89c133d"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x44, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 1.025813186s ago: executing program 4 (id=1056): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8400, &(0x7f0000000900)={[{@overriderock}, {@mode={'mode', 0x3d, 0x4}}, {@showassoc}, {@dmode={'dmode', 0x3d, 0x5}}, {@nojoliet}, {@nocompress}, {@iocharset={'iocharset', 0x3d, 'macturkish'}}, {@mode={'mode', 0x3d, 0x2}}]}, 0x0, 0x688, &(0x7f0000000100)="$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") syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') 973.842439ms ago: executing program 5 (id=1057): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x13, 0x0, 0x2) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000001, 0x12, r2, 0x5192f000) 843.536676ms ago: executing program 0 (id=1058): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) writev(r0, &(0x7f0000000040)=[{&(0x7f0000001640)="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", 0xcc7}], 0x1) 729.349709ms ago: executing program 5 (id=1059): openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000240)="ecde", 0x2}], 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="b0"], 0xb0}, 0x0, 0x8400, 0x1}) r0 = syz_io_uring_setup(0x81f, &(0x7f0000000480)={0x0, 0xbe15, 0x10, 0x3, 0x30e}, &(0x7f00000000c0)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x21, 0x0, 0x0) 729.154216ms ago: executing program 4 (id=1060): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 515.151457ms ago: executing program 0 (id=1061): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000020601080000000000000000000000080c00078008000640200000000500010006000000050005000a0000000500040000000000090002"], 0x50}, 0x1, 0x0, 0x0, 0x4010}, 0x20040000) 473.685291ms ago: executing program 4 (id=1062): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_tcp(0x2, 0x1, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0x0, 0x9, 0x0, 0xf, 0x80000002}, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x4f49, 0x4) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r1, 0x0, 0x0, 0x45833af92e4b39ff, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x323800) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000005c0)='fd', 0x0, r2) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x2) mkdirat(r4, &(0x7f0000000040)='./file0\x00', 0x0) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r5, r5) setpgid(0x0, r5) fchdir(r4) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0) 245.96376ms ago: executing program 0 (id=1063): socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x1e, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x6}, 0x50) socket$unix(0x1, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYRES8=r1], 0x10) 104.895593ms ago: executing program 6 (id=1064): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0x10}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000080)="bad330", 0x3, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0xd8, 0x6, @local}, 0x14) 0s ago: executing program 0 (id=1065): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000b80)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(ghash,chacha20)\x00'}, 0x58) kernel console output (not intermixed with test programs): shutting down sockets [ 445.847548][ T9026] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 445.884925][ T9026] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 446.310107][ T9043] loop3: detected capacity change from 0 to 1024 [ 446.359018][ C1] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 447.225914][ T9043] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 447.299270][ T9043] ext4 filesystem being mounted at /123/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 447.615435][ T9043] EXT4-fs error (device loop3): ext4_map_blocks:818: inode #15: comm syz.3.660: lblock 0 mapped to illegal pblock 0 (length 1) [ 447.743857][ T9043] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 447.790188][ T9043] EXT4-fs (loop3): This should not happen!! Data will be lost [ 447.790188][ T9043] [ 447.878706][ T9069] EXT4-fs error (device loop3): ext4_map_blocks:776: inode #15: comm syz.3.660: lblock 0 mapped to illegal pblock 0 (length 1) [ 447.946409][ T5954] usb 7-1: new low-speed USB device number 7 using dummy_hcd [ 448.077821][ T5828] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 448.310969][ T5954] usb 7-1: Invalid ep0 maxpacket: 16 [ 448.446425][ T5954] usb 7-1: new low-speed USB device number 8 using dummy_hcd [ 448.769110][ T9061] loop0: detected capacity change from 0 to 32768 [ 448.796494][ T5954] usb 7-1: Invalid ep0 maxpacket: 16 [ 448.808907][ T5954] usb usb7-port1: attempt power cycle [ 448.822755][ T9061] xfs: Deprecated parameter 'noattr2' [ 448.845265][ T9061] XFS: noattr2 mount option is deprecated. [ 449.084414][ T9061] xfs: Unknown parameter 'mtpt' [ 449.200297][ T1210] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 449.928080][ T5954] usb 7-1: new low-speed USB device number 9 using dummy_hcd [ 449.980216][ T5954] usb 7-1: Invalid ep0 maxpacket: 16 [ 450.117765][ T5954] usb 7-1: new low-speed USB device number 10 using dummy_hcd [ 450.172517][ T5954] usb 7-1: Invalid ep0 maxpacket: 16 [ 450.192788][ T5954] usb usb7-port1: unable to enumerate USB device [ 450.707803][ C0] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 450.744059][ T9104] netlink: 4 bytes leftover after parsing attributes in process `syz.5.671'. [ 450.757713][ T9105] FAULT_INJECTION: forcing a failure. [ 450.757713][ T9105] name failslab, interval 1, probability 0, space 0, times 0 [ 450.780615][ T9104] netlink: 4 bytes leftover after parsing attributes in process `syz.5.671'. [ 450.791727][ T9105] CPU: 1 UID: 0 PID: 9105 Comm: syz.6.670 Tainted: G L syzkaller #0 PREEMPT(full) [ 450.791763][ T9105] Tainted: [L]=SOFTLOCKUP [ 450.791771][ T9105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 450.791783][ T9105] Call Trace: [ 450.791792][ T9105] [ 450.791802][ T9105] dump_stack_lvl+0xe8/0x150 [ 450.791838][ T9105] should_fail_ex+0x412/0x560 [ 450.791879][ T9105] should_failslab+0xa8/0x100 [ 450.791912][ T9105] ? skb_clone+0x212/0x3a0 [ 450.791935][ T9105] kmem_cache_alloc_noprof+0x87/0x650 [ 450.791971][ T9105] skb_clone+0x212/0x3a0 [ 450.792006][ T9105] __netlink_deliver_tap+0x424/0x8b0 [ 450.792054][ T9105] ? netlink_deliver_tap+0x2e/0x1b0 [ 450.792086][ T9105] netlink_deliver_tap+0x19c/0x1b0 [ 450.792119][ T9105] netlink_unicast+0x7e3/0x9b0 [ 450.792155][ T9105] ? __pfx_netlink_unicast+0x10/0x10 [ 450.792186][ T9105] ? netlink_sendmsg+0x650/0xb40 [ 450.792215][ T9105] ? skb_put+0x11b/0x210 [ 450.792250][ T9105] netlink_sendmsg+0x813/0xb40 [ 450.792291][ T9105] ? __pfx_netlink_sendmsg+0x10/0x10 [ 450.792325][ T9105] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 450.792485][ T9105] ? __pfx_aa_file_perm+0x10/0x10 [ 450.792547][ T9105] ? __pfx_netlink_sendmsg+0x10/0x10 [ 450.792578][ T9105] sock_sendmsg_nosec+0x18f/0x1d0 [ 450.792608][ T9105] sock_write_iter+0x302/0x410 [ 450.792637][ T9105] ? __pfx_sock_write_iter+0x10/0x10 [ 450.792674][ T9105] ? bpf_lsm_file_permission+0x9/0x20 [ 450.792711][ T9105] ? security_file_permission+0x75/0x260 [ 450.792795][ T9105] vfs_write+0x61d/0xb90 [ 450.792832][ T9105] ? __pfx_vfs_write+0x10/0x10 [ 450.792871][ T9105] ? __fget_files+0x2a/0x420 [ 450.792905][ T9105] ksys_write+0x150/0x270 [ 450.792937][ T9105] ? __pfx_ksys_write+0x10/0x10 [ 450.792975][ T9105] do_syscall_64+0x14d/0xf80 [ 450.793005][ T9105] ? trace_irq_disable+0x3b/0x150 [ 450.793027][ T9105] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.793050][ T9105] ? clear_bhb_loop+0x40/0x90 [ 450.793077][ T9105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.793102][ T9105] RIP: 0033:0x7fc7f7b9c799 [ 450.793123][ T9105] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 450.793142][ T9105] RSP: 002b:00007fc7f8976028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 450.793165][ T9105] RAX: ffffffffffffffda RBX: 00007fc7f7e15fa0 RCX: 00007fc7f7b9c799 [ 450.793181][ T9105] RDX: 000000000000fe33 RSI: 0000200000000080 RDI: 0000000000000003 [ 450.793194][ T9105] RBP: 00007fc7f8976090 R08: 0000000000000000 R09: 0000000000000000 [ 450.793208][ T9105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 450.793220][ T9105] R13: 00007fc7f7e16038 R14: 00007fc7f7e15fa0 R15: 00007fff031758b8 [ 450.793254][ T9105] [ 451.071107][ T9104] netlink: 4 bytes leftover after parsing attributes in process `syz.5.671'. [ 451.082272][ T9104] netlink: 4 bytes leftover after parsing attributes in process `syz.5.671'. [ 451.093116][ T9104] netlink: 4 bytes leftover after parsing attributes in process `syz.5.671'. [ 451.102181][ T9104] netlink: 4 bytes leftover after parsing attributes in process `syz.5.671'. [ 451.111770][ T9104] netlink: 4 bytes leftover after parsing attributes in process `syz.5.671'. [ 451.121072][ T9104] netlink: 4 bytes leftover after parsing attributes in process `syz.5.671'. [ 451.132700][ T9104] netlink: 4 bytes leftover after parsing attributes in process `syz.5.671'. [ 451.144245][ T9104] netlink: 4 bytes leftover after parsing attributes in process `syz.5.671'. [ 451.467196][ T7908] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 451.638659][ T1210] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 451.646448][ T1210] usb 4-1: can't read configurations, error -71 [ 451.770109][ T7908] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 451.806656][ T7908] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.877244][ T7908] usb 5-1: Product: syz [ 452.487477][ T7908] usb 5-1: Manufacturer: syz [ 452.506910][ T7908] usb 5-1: SerialNumber: syz [ 452.733743][ T7908] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 452.823014][ T9099] loop0: detected capacity change from 0 to 32768 [ 452.893279][ T5905] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 453.002066][ T9099] (syz.0.669,9099,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 453.026751][ T29] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 453.094449][ T9099] (syz.0.669,9099,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 453.226589][ T29] usb 7-1: Using ep0 maxpacket: 32 [ 453.289547][ T29] usb 7-1: config index 0 descriptor too short (expected 35577, got 27) [ 453.337450][ T29] usb 7-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 453.424822][ T29] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 453.478254][ T29] usb 7-1: config 1 has no interface number 0 [ 453.494008][ T29] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 453.586829][ T29] usb 7-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 453.714462][ T29] usb 7-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 453.809957][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.859520][ T9117] PKCS7: Unknown OID: [4] 0.38.107.217331280.32(bad) [ 453.870843][ T9117] PKCS7: Only support pkcs7_signedData type [ 454.036661][ T5905] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 454.081475][ T5905] ath9k_htc: Failed to initialize the device [ 454.087205][ T29] snd_usb_pod 7-1:1.1: Line 6 Pocket POD found [ 454.123109][ T9099] JBD2: Ignoring recovery information on journal [ 454.220565][ T29] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now attached [ 454.342325][ T9099] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 454.381088][ T5905] usb 5-1: ath9k_htc: USB layer deinitialized [ 454.454658][ T9121] loop5: detected capacity change from 0 to 7 [ 454.522121][ T9121] Dev loop5: unable to read RDB block 7 [ 454.539684][ T9121] loop5: unable to read partition table [ 454.585067][ T1210] usb 5-1: USB disconnect, device number 30 [ 454.588276][ T9121] loop5: partition table beyond EOD, truncated [ 454.643626][ T9121] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 454.730766][ T5905] usb 7-1: USB disconnect, device number 11 [ 454.757096][ C0] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 454.775064][ T5905] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now disconnected [ 454.859696][ T5836] ocfs2: Unmounting device (7,0) on (node local) [ 456.415173][ T9137] loop0: detected capacity change from 0 to 4096 [ 456.492214][ T9137] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 456.638516][ T29] usb 4-1: new low-speed USB device number 30 using dummy_hcd [ 456.932293][ T9146] trusted_key: encrypted_key: insufficient parameters specified [ 456.946902][ T9137] ntfs3(loop0): ino=3, ntfs_set_state failed, -22. [ 457.017631][ T9147] overlayfs: failed to clone upperpath [ 457.076742][ T9148] SET target dimension over the limit! [ 457.261307][ T29] usb 4-1: Invalid ep0 maxpacket: 16 [ 457.423933][ T29] usb 4-1: new low-speed USB device number 31 using dummy_hcd [ 457.483634][ T35] ntfs3(loop0): ino=3, ntfs3_write_inode failed, -22. [ 457.506191][ T5836] ntfs3(loop0): ino=3, ntfs_set_state failed, -22. [ 457.530917][ T5836] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 457.560694][ T5836] ntfs3(loop0): ino=3, ntfs_set_state failed, -22. [ 457.600078][ T35] ntfs3(loop0): ino=3, ntfs3_write_inode failed, -22. [ 457.639253][ T29] usb 4-1: Invalid ep0 maxpacket: 16 [ 457.674533][ T29] usb usb4-port1: attempt power cycle [ 458.116465][ T29] usb 4-1: new low-speed USB device number 32 using dummy_hcd [ 459.136661][ T5905] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 460.898128][ T29] usb 4-1: device descriptor read/8, error -71 [ 461.256343][ T5905] usb 1-1: device descriptor read/all, error -71 [ 461.798169][ T9170] __nla_validate_parse: 144 callbacks suppressed [ 461.798185][ T9170] netlink: 56 bytes leftover after parsing attributes in process `syz.3.689'. [ 462.446151][ T9177] netlink: 20 bytes leftover after parsing attributes in process `syz.6.690'. [ 462.617419][ T9177] loop6: detected capacity change from 0 to 1024 [ 463.113219][ T9183] loop0: detected capacity change from 0 to 1024 [ 463.139700][ T9183] hfsplus: Unknown parameter '0x000000000000000001777777777777777777777' [ 465.346458][ T5913] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 465.510814][ T5913] usb 1-1: not running at top speed; connect to a high speed hub [ 465.543143][ T5913] usb 1-1: config 5 has an invalid interface number: 38 but max is 0 [ 465.565634][ T5913] usb 1-1: config 5 has no interface number 0 [ 465.574795][ T5913] usb 1-1: config 5 interface 38 has no altsetting 0 [ 465.594728][ T5913] usb 1-1: New USB device found, idVendor=04dd, idProduct=8006, bcdDevice=ba.57 [ 465.614520][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.641282][ T5913] usb 1-1: Product: syz [ 465.654640][ T5913] usb 1-1: Manufacturer: syz [ 465.667439][ T5913] usb 1-1: SerialNumber: syz [ 465.716410][ T29] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 465.757676][ T24] usb 7-1: new low-speed USB device number 12 using dummy_hcd [ 465.896113][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 465.926524][ T24] usb 7-1: Invalid ep0 maxpacket: 16 [ 465.938714][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 465.971859][ T29] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 465.998615][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.016875][ C1] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 466.030172][ T29] usb 5-1: config 0 descriptor?? [ 466.076516][ T24] usb 7-1: new low-speed USB device number 13 using dummy_hcd [ 466.466393][ T24] usb 7-1: Invalid ep0 maxpacket: 16 [ 466.472347][ T24] usb usb7-port1: attempt power cycle [ 466.720236][ T9203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 466.749496][ T9203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 466.767923][ C1] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 466.846521][ T24] usb 7-1: new low-speed USB device number 14 using dummy_hcd [ 466.908682][ T24] usb 7-1: Invalid ep0 maxpacket: 16 [ 466.935277][ C1] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 466.945171][ C1] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 466.989185][ T29] usbhid 5-1:0.0: can't add hid device: -71 [ 467.009556][ T29] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 467.022391][ C1] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 467.065458][ C1] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 467.077429][ C1] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 467.088907][ T24] usb 7-1: new low-speed USB device number 15 using dummy_hcd [ 467.096887][ T29] usb 5-1: USB disconnect, device number 31 [ 467.167224][ T24] usb 7-1: Invalid ep0 maxpacket: 16 [ 467.185543][ T24] usb usb7-port1: unable to enumerate USB device [ 467.603712][ T5913] usb 1-1: unsupported MDLM descriptors [ 467.642904][ T5913] usb 1-1: USB disconnect, device number 24 [ 468.420766][ T9218] netlink: 56 bytes leftover after parsing attributes in process `syz.0.705'. [ 468.537966][ T9218] overlayfs: bad index found (index=index/00fb210001639800aedf94459c9c5a82b7121f101c341e2f15ed02000000000000, ftype=2000, origin ftype=a000). [ 468.901049][ T9223] netlink: 56 bytes leftover after parsing attributes in process `syz.0.707'. [ 468.966351][ T7908] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 469.032714][ T9223] overlayfs: bad index found (index=index/00fb210001639800aedf94459c9c5a82b7121f101c138cabcdfd02000000000000, ftype=2000, origin ftype=a000). [ 469.144213][ T7908] usb 4-1: config 0 has an invalid interface number: 182 but max is 1 [ 469.185160][ T7908] usb 4-1: config 0 has an invalid interface number: 9 but max is 1 [ 469.221469][ T7908] usb 4-1: config 0 has no interface number 0 [ 469.262795][ T7908] usb 4-1: config 0 has no interface number 1 [ 469.294400][ T7908] usb 4-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=9c.af [ 469.579592][ T7908] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.605723][ T7908] usb 4-1: config 0 descriptor?? [ 470.177496][ T9233] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 471.694178][ T9237] loop0: detected capacity change from 0 to 131072 [ 471.725538][ T9237] F2FS-fs (loop0): Test dummy encryption mode enabled [ 471.833285][ T9237] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 471.851867][ T9237] F2FS-fs (loop0): Mounted with checkpoint version = 753bd00b [ 472.227470][ T7908] usb 4-1: can't set config #0, error -71 [ 472.300133][ T7908] usb 4-1: USB disconnect, device number 34 [ 472.762804][ C0] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 472.959777][ C1] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 473.102423][ T29] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 473.451037][ T29] usb 5-1: not running at top speed; connect to a high speed hub [ 473.494140][ T29] usb 5-1: config 5 has an invalid interface number: 38 but max is 0 [ 473.533454][ T29] usb 5-1: config 5 has no interface number 0 [ 473.550735][ T29] usb 5-1: config 5 interface 38 has no altsetting 0 [ 473.574595][ T29] usb 5-1: New USB device found, idVendor=04dd, idProduct=8006, bcdDevice=ba.57 [ 473.595054][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.616155][ T29] usb 5-1: Product: syz [ 473.627245][ T29] usb 5-1: Manufacturer: syz [ 473.639445][ T29] usb 5-1: SerialNumber: syz [ 474.176490][ T24] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 474.288342][ C1] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 474.336818][ T9244] loop6: detected capacity change from 0 to 32768 [ 474.480659][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 474.527898][ T24] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 474.575065][ T24] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 474.610228][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 474.634188][ T24] usb 4-1: config 1 has no interface number 0 [ 474.663950][ T24] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 474.732926][ T9256] loop0: detected capacity change from 0 to 131072 [ 474.736586][ T24] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 474.758649][ T9256] F2FS-fs (loop0): Test dummy encryption mode enabled [ 474.852239][ T24] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 474.884000][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.897889][ T9256] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 474.918445][ T9256] F2FS-fs (loop0): Mounted with checkpoint version = 753bd00b [ 475.083104][ T24] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 475.203419][ T24] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 475.469782][ T9262] loop5: detected capacity change from 0 to 7 [ 475.479767][ T9262] Dev loop5: unable to read RDB block 7 [ 475.485520][ T9262] loop5: AHDI p4 [ 475.503817][ T9262] loop5: partition table partially beyond EOD, truncated [ 475.625191][ T29] usb 5-1: unsupported MDLM descriptors [ 475.665273][ T29] usb 5-1: USB disconnect, device number 32 [ 475.731555][ C1] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 475.742900][ T24] usb 4-1: USB disconnect, device number 35 [ 475.789516][ T24] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 478.137879][ T9286] loop6: detected capacity change from 0 to 40427 [ 478.155286][ T9286] F2FS-fs (loop6): invalid crc value [ 478.252747][ T9286] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 478.268793][ T9286] F2FS-fs (loop6): Start checkpoint disabled! [ 478.278307][ T9286] F2FS-fs (loop6): f2fs_disable_checkpoint() finish, err:0 [ 478.288572][ T9286] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 479.760258][ T35] kworker/u8:2: attempt to access beyond end of device [ 479.760258][ T35] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 479.803717][ T35] CPU: 1 UID: 0 PID: 35 Comm: kworker/u8:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 479.803752][ T35] Tainted: [L]=SOFTLOCKUP [ 479.803760][ T35] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 479.803773][ T35] Workqueue: writeback wb_workfn (flush-7:6) [ 479.803815][ T35] Call Trace: [ 479.803823][ T35] [ 479.803832][ T35] dump_stack_lvl+0xe8/0x150 [ 479.803867][ T35] f2fs_handle_critical_error+0x37c/0x540 [ 479.803902][ T35] f2fs_write_end_io+0xcdb/0xff0 [ 479.803956][ T35] __submit_merged_bio+0x256/0x700 [ 479.803992][ T35] __submit_merged_write_cond+0x3c9/0x4e0 [ 479.804031][ T35] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 479.804086][ T35] f2fs_write_data_pages+0x2975/0x35e0 [ 479.804163][ T35] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 479.804209][ T35] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 479.804294][ T35] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 479.804351][ T35] ? __lock_acquire+0x6b5/0x2cf0 [ 479.804403][ T35] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 479.804435][ T35] do_writepages+0x32e/0x550 [ 479.804480][ T35] ? reacquire_held_locks+0x104/0x190 [ 479.804512][ T35] ? writeback_sb_inodes+0x477/0x1a20 [ 479.804543][ T35] __writeback_single_inode+0x133/0x11a0 [ 479.804568][ T35] ? do_raw_spin_unlock+0xf5/0x210 [ 479.804598][ T35] writeback_sb_inodes+0x992/0x1a20 [ 479.804650][ T35] ? do_raw_spin_unlock+0xf5/0x210 [ 479.804681][ T35] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 479.804701][ T35] ? do_raw_spin_lock+0x12b/0x2f0 [ 479.804771][ T35] ? rcu_is_watching+0x15/0xb0 [ 479.804814][ T35] wb_writeback+0x456/0xb70 [ 479.804841][ T35] ? queue_io+0x241/0x4a0 [ 479.804872][ T35] ? __pfx_wb_writeback+0x10/0x10 [ 479.804892][ T35] ? do_raw_spin_lock+0x12b/0x2f0 [ 479.804935][ T35] wb_workfn+0x414/0xf50 [ 479.804967][ T35] ? look_up_lock_class+0x57/0x110 [ 479.805008][ T35] ? __pfx_wb_workfn+0x10/0x10 [ 479.805043][ T35] ? do_raw_spin_lock+0x12b/0x2f0 [ 479.805069][ T35] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 479.805120][ T35] ? process_one_work+0x870/0x1720 [ 479.805151][ T35] process_one_work+0x963/0x1720 [ 479.805207][ T35] ? __pfx_process_one_work+0x10/0x10 [ 479.805241][ T35] ? do_raw_spin_lock+0x12b/0x2f0 [ 479.805287][ T35] worker_thread+0xb46/0x1140 [ 479.805350][ T35] kthread+0x388/0x470 [ 479.805375][ T35] ? __pfx_worker_thread+0x10/0x10 [ 479.805401][ T35] ? __pfx_kthread+0x10/0x10 [ 479.805425][ T35] ret_from_fork+0x51e/0xb90 [ 479.805458][ T35] ? __pfx_ret_from_fork+0x10/0x10 [ 479.805485][ T35] ? __switch_to+0xc7d/0x1450 [ 479.805517][ T35] ? __pfx_kthread+0x10/0x10 [ 479.805541][ T35] ret_from_fork_asm+0x1a/0x30 [ 479.805582][ T35] [ 479.892243][ T9297] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 480.096670][ T35] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 480.136342][ T7908] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 480.339002][ T7908] usb 1-1: config 0 has an invalid interface number: 182 but max is 1 [ 480.386376][ T7908] usb 1-1: config 0 has an invalid interface number: 9 but max is 1 [ 480.406767][ T7908] usb 1-1: config 0 has no interface number 0 [ 480.428243][ T7908] usb 1-1: config 0 has no interface number 1 [ 480.462355][ T7908] usb 1-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=9c.af [ 480.490818][ T7908] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.544126][ T7908] usb 1-1: config 0 descriptor?? [ 480.584255][ T9304] binder: 9303:9304 ioctl c0306201 0 returned -14 [ 480.591514][ T7908] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 480.733859][ T9305] binder: 9303:9305 ioctl c0306201 2000000001c0 returned -14 [ 481.057510][ T7908] snd-usb-audio 1-1:0.182: probe with driver snd-usb-audio failed with error -2 [ 481.241299][ T7908] usb 1-1: USB disconnect, device number 25 [ 481.879009][ T9304] binder: 9303:9304 ioctl c0306201 2000000004c0 returned -14 [ 482.116587][ T24] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 482.287556][ T24] usb 4-1: not running at top speed; connect to a high speed hub [ 482.321135][ T24] usb 4-1: config 5 has an invalid interface number: 38 but max is 0 [ 482.362874][ T24] usb 4-1: config 5 has no interface number 0 [ 482.384752][ T24] usb 4-1: config 5 interface 38 has no altsetting 0 [ 482.410553][ T24] usb 4-1: New USB device found, idVendor=04dd, idProduct=8006, bcdDevice=ba.57 [ 482.434812][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.451945][ T9320] loop0: detected capacity change from 0 to 4096 [ 482.466818][ T24] usb 4-1: Product: syz [ 482.500816][ T24] usb 4-1: Manufacturer: syz [ 482.519235][ T24] usb 4-1: SerialNumber: syz [ 482.655442][ T9320] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 482.777683][ T1210] usb 5-1: new low-speed USB device number 33 using dummy_hcd [ 482.838877][ T9327] overlayfs: missing 'lowerdir' [ 483.156782][ T1210] usb 5-1: Invalid ep0 maxpacket: 16 [ 483.559585][ T1210] usb 5-1: new low-speed USB device number 34 using dummy_hcd [ 483.957456][ T10] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 484.046456][ T1210] usb 5-1: Invalid ep0 maxpacket: 16 [ 484.143935][ T24] usb 4-1: unsupported MDLM descriptors [ 484.160987][ T24] usb 4-1: USB disconnect, device number 36 [ 484.163113][ T1210] usb usb5-port1: attempt power cycle [ 484.213601][ T9337] netlink: 20 bytes leftover after parsing attributes in process `syz.5.739'. [ 484.233882][ T10] usb 7-1: config 0 has an invalid interface number: 182 but max is 1 [ 484.254166][ T10] usb 7-1: config 0 has an invalid interface number: 9 but max is 1 [ 484.266147][ T5836] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 484.293066][ T10] usb 7-1: config 0 has no interface number 0 [ 484.299648][ T10] usb 7-1: config 0 has no interface number 1 [ 484.306018][ T10] usb 7-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=9c.af [ 484.316370][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.351142][ T9341] FAULT_INJECTION: forcing a failure. [ 484.351142][ T9341] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 484.369055][ T10] usb 7-1: config 0 descriptor?? [ 484.403324][ T10] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 484.413840][ T9341] CPU: 0 UID: 0 PID: 9341 Comm: syz.3.740 Tainted: G L syzkaller #0 PREEMPT(full) [ 484.413873][ T9341] Tainted: [L]=SOFTLOCKUP [ 484.413880][ T9341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 484.413894][ T9341] Call Trace: [ 484.413903][ T9341] [ 484.413912][ T9341] dump_stack_lvl+0xe8/0x150 [ 484.413947][ T9341] should_fail_ex+0x412/0x560 [ 484.413984][ T9341] _copy_from_iter+0x1d3/0x1670 [ 484.414118][ T9341] ? rcu_is_watching+0x15/0xb0 [ 484.414155][ T9341] ? __pfx__copy_from_iter+0x10/0x10 [ 484.414194][ T9341] ? netlink_sendmsg+0x650/0xb40 [ 484.414223][ T9341] ? skb_put+0x11b/0x210 [ 484.414258][ T9341] netlink_sendmsg+0x6c0/0xb40 [ 484.414296][ T9341] ? __pfx_netlink_sendmsg+0x10/0x10 [ 484.414328][ T9341] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 484.414369][ T9341] ? __pfx_netlink_sendmsg+0x10/0x10 [ 484.414407][ T9341] sock_sendmsg_nosec+0x18f/0x1d0 [ 484.414436][ T9341] ____sys_sendmsg+0x589/0x8c0 [ 484.414466][ T9341] ? __pfx_____sys_sendmsg+0x10/0x10 [ 484.414496][ T9341] ? import_iovec+0x73/0xa0 [ 484.414522][ T9341] ___sys_sendmsg+0x2a5/0x360 [ 484.414549][ T9341] ? __pfx____sys_sendmsg+0x10/0x10 [ 484.414607][ T9341] ? __fget_files+0x2a/0x420 [ 484.414630][ T9341] ? __fget_files+0x3a0/0x420 [ 484.414664][ T9341] __x64_sys_sendmsg+0x1bd/0x2a0 [ 484.414689][ T9341] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 484.414720][ T9341] ? __pfx_ksys_write+0x10/0x10 [ 484.414759][ T9341] do_syscall_64+0x14d/0xf80 [ 484.414782][ T9341] ? trace_irq_disable+0x3b/0x150 [ 484.414804][ T9341] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.414825][ T9341] ? clear_bhb_loop+0x40/0x90 [ 484.414851][ T9341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.414873][ T9341] RIP: 0033:0x7fc5f4d9c799 [ 484.414893][ T9341] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 484.414910][ T9341] RSP: 002b:00007fc5f5bea028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 484.414932][ T9341] RAX: ffffffffffffffda RBX: 00007fc5f5015fa0 RCX: 00007fc5f4d9c799 [ 484.414946][ T9341] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000009 [ 484.414958][ T9341] RBP: 00007fc5f5bea090 R08: 0000000000000000 R09: 0000000000000000 [ 484.414970][ T9341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 484.414981][ T9341] R13: 00007fc5f5016038 R14: 00007fc5f5015fa0 R15: 00007ffff45e3c98 [ 484.415012][ T9341] [ 484.900715][ T1210] usb 5-1: new low-speed USB device number 35 using dummy_hcd [ 484.929197][ T1210] usb 5-1: Invalid ep0 maxpacket: 16 [ 485.077585][ T1210] usb 5-1: new low-speed USB device number 36 using dummy_hcd [ 485.106868][ T10] snd-usb-audio 7-1:0.182: probe with driver snd-usb-audio failed with error -2 [ 485.143322][ T10] usb 7-1: USB disconnect, device number 16 [ 485.357839][ C0] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 485.473498][ T1210] usb 5-1: device descriptor read/8, error -71 [ 485.585258][ T9357] Illegal XDP return value 38 on prog (id 89) dev N/A, expect packet loss! [ 485.598428][ T1210] usb usb5-port1: unable to enumerate USB device [ 485.708718][ T5913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.869956][ T9345] loop0: detected capacity change from 0 to 40427 [ 485.884511][ T9345] F2FS-fs (loop0): invalid crc value [ 485.999867][ T9345] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 486.035122][ T9345] F2FS-fs (loop0): Start checkpoint disabled! [ 486.067159][ T9345] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0 [ 486.082044][ T9345] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 486.097344][ T9369] netlink: 'syz.4.751': attribute type 29 has an invalid length. [ 486.747640][ T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.777647][ T9378] x_tables: duplicate underflow at hook 3 [ 487.787746][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.798037][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.824487][ T9380] loop3: detected capacity change from 0 to 512 [ 487.869217][ T9380] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.753: casefold flag without casefold feature [ 487.939885][ T7724] kworker/u8:16: attempt to access beyond end of device [ 487.939885][ T7724] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 487.944828][ T9380] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 487.955697][ T7724] CPU: 0 UID: 0 PID: 7724 Comm: kworker/u8:16 Tainted: G L syzkaller #0 PREEMPT(full) [ 487.955739][ T7724] Tainted: [L]=SOFTLOCKUP [ 487.955748][ T7724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 487.955762][ T7724] Workqueue: writeback wb_workfn (flush-7:0) [ 487.955804][ T7724] Call Trace: [ 487.955813][ T7724] [ 487.955822][ T7724] dump_stack_lvl+0xe8/0x150 [ 487.955856][ T7724] f2fs_handle_critical_error+0x37c/0x540 [ 487.955892][ T7724] f2fs_write_end_io+0xcdb/0xff0 [ 487.955956][ T7724] __submit_merged_bio+0x256/0x700 [ 487.955992][ T7724] __submit_merged_write_cond+0x3c9/0x4e0 [ 487.956029][ T7724] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 487.956086][ T7724] f2fs_write_data_pages+0x2975/0x35e0 [ 487.956160][ T7724] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 487.956207][ T7724] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 487.956283][ T7724] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 487.956340][ T7724] ? __lock_acquire+0x6b5/0x2cf0 [ 487.956390][ T7724] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 487.956419][ T7724] do_writepages+0x32e/0x550 [ 487.956462][ T7724] ? reacquire_held_locks+0x104/0x190 [ 487.956493][ T7724] ? writeback_sb_inodes+0x477/0x1a20 [ 487.956525][ T7724] __writeback_single_inode+0x133/0x11a0 [ 487.956550][ T7724] ? do_raw_spin_unlock+0xf5/0x210 [ 487.956580][ T7724] writeback_sb_inodes+0x992/0x1a20 [ 487.956630][ T7724] ? __lock_acquire+0x6b5/0x2cf0 [ 487.956667][ T7724] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 487.956688][ T7724] ? do_raw_spin_lock+0x12b/0x2f0 [ 487.956763][ T7724] ? rcu_is_watching+0x15/0xb0 [ 487.956807][ T7724] wb_writeback+0x456/0xb70 [ 487.956834][ T7724] ? queue_io+0x241/0x4a0 [ 487.956867][ T7724] ? __pfx_wb_writeback+0x10/0x10 [ 487.956887][ T7724] ? do_raw_spin_lock+0x12b/0x2f0 [ 487.956931][ T7724] wb_workfn+0x414/0xf50 [ 487.956974][ T7724] ? look_up_lock_class+0x57/0x110 [ 487.957016][ T7724] ? __pfx_wb_workfn+0x10/0x10 [ 487.957052][ T7724] ? do_raw_spin_lock+0x12b/0x2f0 [ 487.957079][ T7724] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 487.957131][ T7724] ? process_one_work+0x870/0x1720 [ 487.957159][ T7724] process_one_work+0x963/0x1720 [ 487.957216][ T7724] ? __pfx_process_one_work+0x10/0x10 [ 487.957243][ T7724] ? do_raw_spin_lock+0x12b/0x2f0 [ 487.957287][ T7724] worker_thread+0xb46/0x1140 [ 487.957350][ T7724] kthread+0x388/0x470 [ 487.957372][ T7724] ? __pfx_worker_thread+0x10/0x10 [ 487.957397][ T7724] ? __pfx_kthread+0x10/0x10 [ 487.957421][ T7724] ret_from_fork+0x51e/0xb90 [ 487.957453][ T7724] ? __pfx_ret_from_fork+0x10/0x10 [ 487.957481][ T7724] ? __switch_to+0xc7d/0x1450 [ 487.957512][ T7724] ? __pfx_kthread+0x10/0x10 [ 487.957536][ T7724] ret_from_fork_asm+0x1a/0x30 [ 487.957576][ T7724] [ 488.036380][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 488.166377][ T7724] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 488.166695][ C1] EXT4-fs (loop3): initial error at time 1772606672: ext4_orphan_get:1391: inode 15 [ 488.255454][ C1] EXT4-fs (loop3): last error at time 1772606672: ext4_orphan_get:1391: inode 15 [ 488.265962][ T9364] loop6: detected capacity change from 0 to 32768 [ 488.272794][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.285013][ T9380] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.753: couldn't read orphan inode 15 (err -117) [ 488.300531][ T9380] loop3: lost filesystem error report for type 5 error -117 [ 488.308225][ T9364] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.749 (9364) [ 488.323478][ T9380] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 488.447753][ T9364] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 488.458924][ T9380] 9p: Bad value for 'rfdno' [ 488.471758][ T9364] BTRFS info (device loop6): using sha256 checksum algorithm [ 488.504590][ T9380] 9p: Bad value for 'wfdno' [ 488.712597][ T6984] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 488.776872][ T9364] BTRFS info (device loop6): enabling ssd optimizations [ 488.800051][ T9364] BTRFS info (device loop6): turning on async discard [ 488.827010][ T9364] BTRFS info (device loop6): enabling free space tree [ 488.851393][ T5913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.964613][ T8555] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 488.997584][ T9405] Bluetooth: MGMT ver 1.23 [ 489.116367][ T1210] usb 5-1: new low-speed USB device number 37 using dummy_hcd [ 489.346669][ T1210] usb 5-1: Invalid ep0 maxpacket: 16 [ 489.522744][ T1210] usb 5-1: new low-speed USB device number 38 using dummy_hcd [ 489.682579][ T3472] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.699290][ T1210] usb 5-1: Invalid ep0 maxpacket: 16 [ 489.726013][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.734537][ T1210] usb usb5-port1: attempt power cycle [ 489.760665][ T3472] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 489.868337][ T9407] bond0: (slave batadv_slave_0): Error: Device can not be enslaved while up [ 489.877697][ T5913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.108811][ T1210] usb 5-1: new low-speed USB device number 39 using dummy_hcd [ 490.125770][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 490.143261][ T1210] usb 5-1: Invalid ep0 maxpacket: 16 [ 490.152138][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 490.167589][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 490.183980][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 490.187542][ T3472] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.219321][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 490.296546][ T1210] usb 5-1: new low-speed USB device number 40 using dummy_hcd [ 490.308115][ T3472] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 490.339131][ T1210] usb 5-1: Invalid ep0 maxpacket: 16 [ 490.358612][ T1210] usb usb5-port1: unable to enumerate USB device [ 490.459028][ T3472] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.486376][ T3472] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 490.641011][ T3472] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.663244][ T3472] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 490.910679][ T5913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.529330][ T9418] chnl_net:caif_netlink_parms(): no params data found [ 492.172102][ T5905] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 492.351105][ T5840] Bluetooth: hci1: command tx timeout [ 492.407248][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.432129][ T3472] bridge_slave_1: left allmulticast mode [ 492.448643][ T3472] bridge_slave_1: left promiscuous mode [ 492.464753][ T3472] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.485248][ T3472] bridge_slave_0: left allmulticast mode [ 492.491179][ T3472] bridge_slave_0: left promiscuous mode [ 492.507604][ T3472] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.530297][ T5905] usb 7-1: not running at top speed; connect to a high speed hub [ 492.553948][ T5905] usb 7-1: config 5 has an invalid interface number: 38 but max is 0 [ 492.574794][ T5905] usb 7-1: config 5 has no interface number 0 [ 492.603197][ T5905] usb 7-1: config 5 interface 38 has no altsetting 0 [ 492.639179][ T5905] usb 7-1: New USB device found, idVendor=04dd, idProduct=8006, bcdDevice=ba.57 [ 492.678198][ T5905] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.708681][ T5905] usb 7-1: Product: Ј [ 492.718464][ T5905] usb 7-1: Manufacturer: 뱉☙è›ï¡®ä¸»æ‡…êµë‚—故䀠닽턡êì¾“êˆ—ç¨¢æ¨–éŠ–ï†´ç›ƒæ·ƒíš¸ï’ƒè¶ˆç³æœ®ï°Œëš”à¶çŽ‰è¬¦ë½å¨‘屟闅臯æ’⻱扪飳쒛ꇌ蹜갸䔤놟ħ嘬ॲ懹멭輀컬ʴ㘼脚箪᧌䢃昸嘪췹慥 [ 492.750901][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.801892][ T5905] usb 7-1: SerialNumber: 䜋뉹থæî©Ù“㽺䄋ꕷ䑳〈䃰崨롦誴éšïŒ¢ë’§ãœáˆ¥â å¬¡é邳ì¸ã™ªî¨ŠíŒ»é¨¢ï™²ë¥•诊䢔㘊ﲥ犢涎èžå¨§ã¸é‘™å¹‘꺂Å㊎宅顈꤮íœå€„䤙ﱃథ㉠싻⑗砌䞑婓İ璟䙴ᩇ癣á®ëšªé¨¾ï½¯è‘£ï©¢Ú”攈᧱íƒç¨—䴵콵ݸ䠇ï™ç¶ï¸“ç§ [ 493.074252][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.084919][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.093984][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.104745][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.339336][ T9438] loop0: detected capacity change from 0 to 32768 [ 493.541407][ T5913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.862162][ T9438] XFS (loop0): Mounting V5 filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 in no-recovery mode. Filesystem will be inconsistent. [ 493.953278][ T5913] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 494.121286][ T3472] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 494.161924][ T5913] usb 5-1: config 0 has an invalid interface number: 182 but max is 1 [ 494.187098][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.201251][ T3472] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 494.211875][ T5913] usb 5-1: config 0 has an invalid interface number: 9 but max is 1 [ 494.235260][ T5913] usb 5-1: config 0 has no interface number 0 [ 494.248891][ T5913] usb 5-1: config 0 has no interface number 1 [ 494.255250][ T5913] usb 5-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=9c.af [ 494.267866][ T5913] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.289654][ T3472] bond0 (unregistering): Released all slaves [ 494.300552][ T5913] usb 5-1: config 0 descriptor?? [ 494.358915][ T5913] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 494.427154][ T5840] Bluetooth: hci1: command tx timeout [ 494.589402][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.613839][ T3472] tipc: Left network mode [ 494.707970][ T5836] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 494.731326][ T5905] usb 7-1: unsupported MDLM descriptors [ 494.811546][ T5905] usb 7-1: USB disconnect, device number 17 [ 494.870622][ T7061] udevd[7061]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.182/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 494.971725][ T9418] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.994713][ T9418] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.014354][ T9418] bridge_slave_0: entered allmulticast mode [ 495.062221][ T9418] bridge_slave_0: entered promiscuous mode [ 495.100996][ T9418] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.111248][ T5913] snd-usb-audio 5-1:0.182: probe with driver snd-usb-audio failed with error -2 [ 495.127319][ T9418] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.141883][ T5913] usb 5-1: USB disconnect, device number 41 [ 495.159006][ T9418] bridge_slave_1: entered allmulticast mode [ 495.199584][ T9418] bridge_slave_1: entered promiscuous mode [ 495.447680][ T9418] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 495.512223][ T9418] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 495.809848][ T3472] hsr_slave_0: left promiscuous mode [ 495.828051][ T3472] hsr_slave_1: left promiscuous mode [ 495.835216][ T3472] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 495.843814][ T3472] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 495.880478][ T3472] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 495.899628][ T3472] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 495.949414][ T9504] net_ratelimit: 3 callbacks suppressed [ 495.949434][ T9504] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.978731][ T3472] veth1_macvtap: left promiscuous mode [ 495.985907][ T3472] veth0_macvtap: left promiscuous mode [ 496.002267][ T3472] veth1_vlan: left promiscuous mode [ 496.018499][ T3472] veth0_vlan: left promiscuous mode [ 496.034982][ T9504] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.085092][ T9504] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.132960][ T9508] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.176300][ T9] usb 5-1: new low-speed USB device number 42 using dummy_hcd [ 496.229101][ T9508] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.239251][ T9508] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.453171][ T9] usb 5-1: Invalid ep0 maxpacket: 16 [ 496.461088][ T9511] netlink: 'syz.6.781': attribute type 4 has an invalid length. [ 496.572452][ T5840] Bluetooth: hci1: command tx timeout [ 496.584354][ T9513] netlink: 'syz.6.781': attribute type 4 has an invalid length. [ 496.667199][ T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.777765][ T9] usb 5-1: new low-speed USB device number 43 using dummy_hcd [ 497.239706][ T9] usb 5-1: Invalid ep0 maxpacket: 16 [ 497.317566][ T9] usb usb5-port1: attempt power cycle [ 497.488675][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.499824][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.686362][ T9] usb 5-1: new low-speed USB device number 44 using dummy_hcd [ 497.706759][ T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.708266][ T9] usb 5-1: Invalid ep0 maxpacket: 16 [ 497.876425][ T9] usb 5-1: new low-speed USB device number 45 using dummy_hcd [ 497.920207][ T9] usb 5-1: Invalid ep0 maxpacket: 16 [ 497.953252][ T9] usb usb5-port1: unable to enumerate USB device [ 498.001905][ T3472] team0 (unregistering): Port device team_slave_1 removed [ 498.036878][ T3472] team0 (unregistering): Port device team_slave_0 removed [ 498.451298][ T9493] geneve0: entered allmulticast mode [ 498.545447][ T9418] team0: Port device team_slave_0 added [ 498.587225][ T5840] Bluetooth: hci1: command tx timeout [ 498.652789][ T9418] team0: Port device team_slave_1 added [ 498.832668][ T9418] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 498.860744][ T9418] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 498.898300][ T9418] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 498.919621][ T9418] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 498.932368][ T9418] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 499.024121][ T9418] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 499.877791][ T9418] hsr_slave_0: entered promiscuous mode [ 499.895032][ T9418] hsr_slave_1: entered promiscuous mode [ 499.937999][ T9418] debugfs: 'hsr0' already exists in 'hsr' [ 499.953372][ T9] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 499.955473][ T9418] Cannot create hsr debugfs directory [ 500.138144][ T9] usb 1-1: not running at top speed; connect to a high speed hub [ 500.160424][ T9] usb 1-1: config 5 has an invalid interface number: 38 but max is 0 [ 500.178488][ T9] usb 1-1: config 5 has no interface number 0 [ 500.193733][ T9] usb 1-1: config 5 interface 38 has no altsetting 0 [ 500.215858][ T9] usb 1-1: New USB device found, idVendor=04dd, idProduct=8006, bcdDevice=ba.57 [ 500.231900][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.272670][ T9] usb 1-1: Product: Ј [ 500.293619][ T9] usb 1-1: Manufacturer: 뱉☙è›ï¡®ä¸»æ‡…êµë‚—故䀠닽턡êì¾“êˆ—ç¨¢æ¨–éŠ–ï†´ç›ƒæ·ƒíš¸ï’ƒè¶ˆç³æœ®ï°Œëš”à¶çŽ‰è¬¦ë½å¨‘屟闅臯æ’⻱扪飳쒛ꇌ蹜갸䔤놟ħ嘬ॲ懹멭輀컬ʴ㘼脚箪᧌䢃昸嘪췹慥 [ 500.385471][ T9] usb 1-1: SerialNumber: 䜋뉹থæî©Ù“㽺䄋ꕷ䑳〈䃰崨롦誴éšïŒ¢ë’§ãœáˆ¥â å¬¡é邳ì¸ã™ªî¨ŠíŒ»é¨¢ï™²ë¥•诊䢔㘊ﲥ犢涎èžå¨§ã¸é‘™å¹‘꺂Å㊎宅顈꤮íœå€„䤙ﱃథ㉠싻⑗砌䞑婓İ璟䙴ᩇ癣á®ëšªé¨¾ï½¯è‘£ï©¢Ú”攈᧱íƒç¨—䴵콵ݸ䠇ï™ç¶ï¸“ç§ [ 501.206349][ T7908] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 501.368429][ T7908] usb 5-1: config 0 has an invalid interface number: 182 but max is 1 [ 501.435786][ T7908] usb 5-1: config 0 has an invalid interface number: 9 but max is 1 [ 501.479071][ T7908] usb 5-1: config 0 has no interface number 0 [ 501.536005][ T7908] usb 5-1: config 0 has no interface number 1 [ 501.565866][ T7908] usb 5-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=9c.af [ 501.610003][ T7908] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.691027][ T7908] usb 5-1: config 0 descriptor?? [ 501.738410][ T7908] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 501.799829][ T9559] netlink: 1256 bytes leftover after parsing attributes in process `syz.5.789'. [ 501.907886][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.918868][ T9] usb 1-1: unsupported MDLM descriptors [ 502.076543][ T9566] loop0: detected capacity change from 0 to 512 [ 502.092242][ T9] usb 1-1: USB disconnect, device number 26 [ 502.099478][ T9563] loop6: detected capacity change from 0 to 64 [ 502.185093][ T9566] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 502.220163][ T9563] minix: block size(59136) > page size(4096) not supported by filesystem [ 502.339981][ T7908] snd-usb-audio 5-1:0.182: probe with driver snd-usb-audio failed with error -2 [ 502.453610][ T7062] udevd[7062]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.182/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 502.806198][ T7908] usb 5-1: USB disconnect, device number 46 [ 502.853145][ T9566] EXT4-fs (loop0): 1 truncate cleaned up [ 503.745300][ T9566] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 503.835250][ T9418] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 503.944048][ T9418] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 503.992293][ T9566] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 504.023654][ T9418] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 504.075837][ T9418] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 504.283761][ T9566] loop0: detected capacity change from 0 to 512 [ 504.404515][ T9566] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.791: bg 0: block 393: padding at end of block bitmap is not set [ 504.550662][ T9566] loop0: lost filesystem error report for type 5 error -117 [ 504.556289][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 504.570331][ C1] EXT4-fs (loop0): initial error at time 1772606689: ext4_validate_block_bitmap:441 [ 504.576772][ T9418] 8021q: adding VLAN 0 to HW filter on device bond0 [ 504.579811][ C1] EXT4-fs (loop0): last error at time 1772606689: ext4_validate_block_bitmap:441 [ 504.663856][ T9566] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 504.703162][ T9566] loop0: lost filesystem error report for type 5 error -117 [ 504.724705][ T9418] 8021q: adding VLAN 0 to HW filter on device team0 [ 504.730435][ T5884] usb 5-1: new low-speed USB device number 47 using dummy_hcd [ 504.776636][ T3537] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.777965][ T9566] EXT4-fs (loop0): 2 truncates cleaned up [ 504.784132][ T3537] bridge0: port 1(bridge_slave_0) entered forwarding state [ 504.851268][ T9566] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 504.916624][ T5884] usb 5-1: Invalid ep0 maxpacket: 16 [ 504.920322][ T3537] bridge0: port 2(bridge_slave_1) entered blocking state [ 504.922677][ T9566] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 504.929203][ T3537] bridge0: port 2(bridge_slave_1) entered forwarding state [ 505.078042][ T9566] Bluetooth: hci0: too big key_count value 9038 [ 505.089037][ T5884] usb 5-1: new low-speed USB device number 48 using dummy_hcd [ 505.256337][ T5884] usb 5-1: Invalid ep0 maxpacket: 16 [ 505.268232][ T5884] usb usb5-port1: attempt power cycle [ 505.772562][ T5884] usb 5-1: new low-speed USB device number 49 using dummy_hcd [ 505.807241][ T5884] usb 5-1: Invalid ep0 maxpacket: 16 [ 506.431284][ T9631] veth0_vlan: entered allmulticast mode [ 506.453070][ T9631] netlink: 4 bytes leftover after parsing attributes in process `syz.5.801'. [ 506.472588][ T5884] usb 5-1: new low-speed USB device number 50 using dummy_hcd [ 506.500581][ T9] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 506.524338][ T9633] veth0_vlan: left allmulticast mode [ 506.527639][ T5884] usb 5-1: Invalid ep0 maxpacket: 16 [ 506.544609][ T5884] usb usb5-port1: unable to enumerate USB device [ 506.979949][ T9418] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 507.036545][ T9637] loop6: detected capacity change from 0 to 32768 [ 507.047968][ T9637] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 507.056254][ T9637] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 507.094508][ T9637] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 507.107259][ T5905] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 507.116316][ T9] usb 1-1: not running at top speed; connect to a high speed hub [ 507.132517][ T5905] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 507.141850][ T9] usb 1-1: config 5 has an invalid interface number: 38 but max is 0 [ 507.169425][ T9] usb 1-1: config 5 has no interface number 0 [ 507.187664][ T9] usb 1-1: config 5 interface 38 has no altsetting 0 [ 507.248070][ T9] usb 1-1: New USB device found, idVendor=04dd, idProduct=8006, bcdDevice=ba.57 [ 507.297112][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.330796][ T9] usb 1-1: Product: Ј [ 507.352704][ T9] usb 1-1: Manufacturer: 뱉☙è›ï¡®ä¸»æ‡…êµë‚—故䀠닽턡êì¾“êˆ—ç¨¢æ¨–éŠ–ï†´ç›ƒæ·ƒíš¸ï’ƒè¶ˆç³æœ®ï°Œëš”à¶çŽ‰è¬¦ë½å¨‘屟闅臯æ’⻱扪飳쒛ꇌ蹜갸䔤놟ħ嘬ॲ懹멭輀컬ʴ㘼脚箪᧌䢃昸嘪췹慥 [ 507.430917][ T9] usb 1-1: SerialNumber: 䜋뉹থæî©Ù“㽺䄋ꕷ䑳〈䃰崨롦誴éšïŒ¢ë’§ãœáˆ¥â å¬¡é邳ì¸ã™ªî¨ŠíŒ»é¨¢ï™²ë¥•诊䢔㘊ﲥ犢涎èžå¨§ã¸é‘™å¹‘꺂Å㊎宅顈꤮íœå€„䤙ﱃథ㉠싻⑗砌䞑婓İ璟䙴ᩇ癣á®ëšªé¨¾ï½¯è‘£ï©¢Ú”攈᧱íƒç¨—䴵콵ݸ䠇ï™ç¶ï¸“ç§ [ 507.480205][ T5905] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 347ms [ 507.496791][ T5905] gfs2: fsid=syz:syz.0: jid=0: Done [ 507.502139][ T9637] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 507.664351][ T9650] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed - function = gfs2_qd_dispose, file = fs/gfs2/quota.c, line = 129 [ 507.704276][ T9650] CPU: 1 UID: 0 PID: 9650 Comm: gfs2_quotad/syz Tainted: G L syzkaller #0 PREEMPT(full) [ 507.704311][ T9650] Tainted: [L]=SOFTLOCKUP [ 507.704319][ T9650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 507.704333][ T9650] Call Trace: [ 507.704342][ T9650] [ 507.704350][ T9650] dump_stack_lvl+0xe8/0x150 [ 507.704388][ T9650] gfs2_assert_warn_i+0x194/0x2c0 [ 507.704421][ T9650] gfs2_qd_dispose+0x466/0x570 [ 507.704459][ T9650] gfs2_quota_sync+0x3cf/0x470 [ 507.704500][ T9650] gfs2_quotad+0x2b9/0x6e0 [ 507.704543][ T9650] ? __pfx_gfs2_quotad+0x10/0x10 [ 507.704574][ T9650] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 507.704611][ T9650] ? __kthread_parkme+0x7a/0x1f0 [ 507.704653][ T9650] kthread+0x388/0x470 [ 507.704677][ T9650] ? __pfx_gfs2_quotad+0x10/0x10 [ 507.704705][ T9650] ? __pfx_kthread+0x10/0x10 [ 507.704729][ T9650] ret_from_fork+0x51e/0xb90 [ 507.704762][ T9650] ? __pfx_ret_from_fork+0x10/0x10 [ 507.704796][ T9650] ? __switch_to+0xc7d/0x1450 [ 507.704825][ T9650] ? __pfx_kthread+0x10/0x10 [ 507.704849][ T9650] ret_from_fork_asm+0x1a/0x30 [ 507.704886][ T9650] [ 507.938320][ T9637] gfs2: fsid=syz:syz.0: found 2 quota changes [ 508.298144][ T9658] dlm: non-version read from control device 90 [ 508.628071][ T9418] veth0_vlan: entered promiscuous mode [ 508.673342][ T9418] veth1_vlan: entered promiscuous mode [ 508.726696][ C0] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 508.803035][ T9418] veth0_macvtap: entered promiscuous mode [ 508.824561][ T9418] veth1_macvtap: entered promiscuous mode [ 508.900518][ T9418] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 508.977827][ T9] usb 1-1: unsupported MDLM descriptors [ 508.990233][ T9] usb 1-1: USB disconnect, device number 27 [ 509.002917][ T9418] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 509.036428][ T5884] usb 7-1: new full-speed USB device number 18 using dummy_hcd [ 509.072165][ T3472] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.089074][ T9670] loop0: detected capacity change from 0 to 256 [ 509.115621][ T3472] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.138050][ T9670] vfat: Bad value for 'uni_xlate' [ 509.178169][ T3472] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.209804][ T3472] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.250161][ T5884] usb 7-1: unable to get BOS descriptor or descriptor too short [ 509.268009][ T5884] usb 7-1: not running at top speed; connect to a high speed hub [ 509.268763][ T9670] block nbd0: server does not support multiple connections per device. [ 509.304087][ T5884] usb 7-1: config 0 has an invalid interface number: 88 but max is 0 [ 509.326377][ T5884] usb 7-1: config 0 has no interface number 0 [ 509.341171][ T5884] usb 7-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 10 [ 509.370595][ T5884] usb 7-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 509.389217][ T9670] block nbd0: shutting down sockets [ 509.413885][ T5884] usb 7-1: config 0 interface 88 has no altsetting 0 [ 509.474911][ T5884] usb 7-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 509.518399][ T5884] usb 7-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 509.540107][ T9675] loop0: detected capacity change from 0 to 2048 [ 509.559013][ T5884] usb 7-1: Product: syz [ 509.576204][ T5884] usb 7-1: Manufacturer: syz [ 509.593646][ T9675] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 509.608701][ T5884] usb 7-1: SerialNumber: syz [ 509.640792][ T9675] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 509.651515][ T5884] usb 7-1: config 0 descriptor?? [ 509.699113][ T3466] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 509.750959][ T3466] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 509.842648][ T3466] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 509.854306][ T3466] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 510.295026][ T9691] hsr0: entered promiscuous mode [ 510.301615][ T9691] netlink: 4 bytes leftover after parsing attributes in process `syz.7.814'. [ 510.378759][ T9693] tmpfs: Bad value for 'mpol' [ 510.501285][ T9691] hsr_slave_0: left promiscuous mode [ 510.538906][ T5884] input: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.88/input/input17 [ 510.573257][ T9691] hsr_slave_1: left promiscuous mode [ 510.606799][ T1210] usb 5-1: new low-speed USB device number 51 using dummy_hcd [ 510.665580][ T5884] usb 7-1: USB disconnect, device number 18 [ 510.705944][ T9691] hsr0 (unregistering): left promiscuous mode [ 510.806308][ T1210] usb 5-1: Invalid ep0 maxpacket: 16 [ 510.949399][ T6526] udevd[6526]: Error opening device "/dev/input/event4": No such file or directory [ 510.954566][ T1210] usb 5-1: new low-speed USB device number 52 using dummy_hcd [ 511.020043][ T7908] hid-generic 0005:0006:5508.0004: hidraw0: BLUETOOTH HID vc3.36 Device [syz0] on aa:aa:aa:aa:aa:aa [ 511.157939][ T1210] usb 5-1: Invalid ep0 maxpacket: 16 [ 511.184182][ T1210] usb usb5-port1: attempt power cycle [ 511.576354][ T1210] usb 5-1: new low-speed USB device number 53 using dummy_hcd [ 511.663167][ T1210] usb 5-1: Invalid ep0 maxpacket: 16 [ 511.816299][ T1210] usb 5-1: new low-speed USB device number 54 using dummy_hcd [ 511.861955][ T1210] usb 5-1: Invalid ep0 maxpacket: 16 [ 511.881155][ T1210] usb usb5-port1: unable to enumerate USB device [ 511.944355][ T6526] udevd[6526]: Unable to EVIOCGABS device "/dev/input/event4" [ 511.955996][ T6526] udevd[6526]: Unable to EVIOCGABS device "/dev/input/event4" [ 512.100031][ T9698] loop0: detected capacity change from 0 to 131072 [ 512.121302][ T9698] F2FS-fs (loop0): Test dummy encryption mode enabled [ 512.209223][ T9698] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 512.221714][ T9698] F2FS-fs (loop0): Mounted with checkpoint version = 753bd00b [ 512.792037][ T9709] loop7: detected capacity change from 0 to 4096 [ 512.932695][ T9709] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512). [ 513.485156][ T9722] ntfs3(loop7): ino=3, ntfs_set_state failed, -22. [ 513.836583][ T7726] ntfs3(loop7): ino=3, ntfs3_write_inode failed, -22. [ 513.857530][ T9418] ntfs3(loop7): ino=3, ntfs_set_state failed, -22. [ 513.867837][ T9418] ntfs3(loop7): Mark volume as dirty due to NTFS errors [ 513.893939][ T9418] ntfs3(loop7): ino=3, ntfs_set_state failed, -22. [ 513.920011][ T7726] ntfs3(loop7): ino=3, ntfs3_write_inode failed, -22. [ 514.359858][ T9] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 514.526410][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 514.544815][ T9] usb 7-1: config index 0 descriptor too short (expected 35577, got 27) [ 514.570663][ T9] usb 7-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 514.600013][ T9] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 514.625935][ T9] usb 7-1: config 1 has no interface number 0 [ 514.644854][ T9] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 514.664792][ T9] usb 7-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 514.699721][ T9] usb 7-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 514.722228][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.792287][ T9] snd_usb_pod 7-1:1.1: Line 6 Pocket POD found [ 515.122958][ T9740] loop7: detected capacity change from 0 to 512 [ 515.225008][ T9740] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 515.536593][ T9740] EXT4-fs error (device loop7): ext4_orphan_get:1417: comm syz.7.825: bad orphan inode 16 [ 515.546807][ T9740] loop7: lost filesystem error report for type 5 error -117 [ 515.553301][ T9740] ext4_test_bit(bit=15, block=4) = 0 [ 515.560763][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 515.560788][ C1] EXT4-fs (loop7): initial error at time 1772606700: ext4_orphan_get:1417 [ 515.560817][ C1] EXT4-fs (loop7): last error at time 1772606700: ext4_orphan_get:1417 [ 515.589876][ T9740] EXT4-fs (loop7): 1 orphan inode deleted [ 515.608013][ T9740] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 515.740185][ T9730] loop5: detected capacity change from 0 to 7 [ 515.757064][ T9] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now attached [ 515.779726][ T9730] Dev loop5: unable to read RDB block 7 [ 515.795436][ T9730] loop5: AHDI p4 [ 515.827157][ T9730] loop5: partition table partially beyond EOD, truncated [ 516.090144][ T9742] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 516.141493][ T9] usb 7-1: USB disconnect, device number 19 [ 516.171337][ T9] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now disconnected [ 516.223718][ T9418] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 519.511377][ T9775] loop7: detected capacity change from 0 to 736 [ 519.575477][ T9771] loop6: detected capacity change from 0 to 4096 [ 519.622614][ T9771] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512). [ 519.982910][ T9784] ntfs3(loop6): ino=3, ntfs_set_state failed, -22. [ 520.784781][ T3537] ntfs3(loop6): ino=3, ntfs3_write_inode failed, -22. [ 520.816584][ T8555] ntfs3(loop6): ino=3, ntfs_set_state failed, -22. [ 520.864150][ T8555] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 520.898757][ T8555] ntfs3(loop6): ino=3, ntfs_set_state failed, -22. [ 521.076687][ T3537] ntfs3(loop6): ino=3, ntfs3_write_inode failed, -22. [ 521.527514][ T10] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 522.066122][ T10] usb 1-1: not running at top speed; connect to a high speed hub [ 522.090124][ T10] usb 1-1: config 5 has an invalid interface number: 38 but max is 0 [ 522.116288][ T10] usb 1-1: config 5 has no interface number 0 [ 522.411613][ T10] usb 1-1: config 5 interface 38 has no altsetting 0 [ 522.495613][ T10] usb 1-1: New USB device found, idVendor=04dd, idProduct=8006, bcdDevice=ba.57 [ 522.587926][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.629251][ T10] usb 1-1: Product: Ј [ 522.646964][ T10] usb 1-1: Manufacturer: 뱉☙è›ï¡®ä¸»æ‡…êµë‚—故䀠닽턡êì¾“êˆ—ç¨¢æ¨–éŠ–ï†´ç›ƒæ·ƒíš¸ï’ƒè¶ˆç³æœ®ï°Œëš”à¶çŽ‰è¬¦ë½å¨‘屟闅臯æ’⻱扪飳쒛ꇌ蹜갸䔤놟ħ嘬ॲ懹멭輀컬ʴ㘼脚箪᧌䢃昸嘪췹慥 [ 522.697105][ T9810] netlink: 20 bytes leftover after parsing attributes in process `syz.4.840'. [ 522.737648][ T10] usb 1-1: SerialNumber: 䜋뉹থæî©Ù“㽺䄋ꕷ䑳〈䃰崨롦誴éšïŒ¢ë’§ãœáˆ¥â å¬¡é邳ì¸ã™ªî¨ŠíŒ»é¨¢ï™²ë¥•诊䢔㘊ﲥ犢涎èžå¨§ã¸é‘™å¹‘꺂Å㊎宅顈꤮íœå€„䤙ﱃథ㉠싻⑗砌䞑婓İ璟䙴ᩇ癣á®ëšªé¨¾ï½¯è‘£ï©¢Ú”攈᧱íƒç¨—䴵콵ݸ䠇ï™ç¶ï¸“ç§ [ 523.608015][ T9822] fuse: Bad value for 'fd' [ 524.022875][ T9825] loop7: detected capacity change from 0 to 40427 [ 524.036141][ T9828] overlayfs: failed to clone upperpath [ 524.513818][ T5144] Bluetooth: hci0: command 0x0406 tx timeout [ 524.590705][ T10] usb 1-1: unsupported MDLM descriptors [ 524.683116][ T9825] F2FS-fs (loop7): invalid crc value [ 524.745730][ T9825] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 524.757510][ T9825] F2FS-fs (loop7): Start checkpoint disabled! [ 524.767040][ T9825] F2FS-fs (loop7): f2fs_disable_checkpoint() finish, err:0 [ 524.777187][ T9825] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 524.812377][ T10] usb 1-1: USB disconnect, device number 28 [ 525.022647][ T3537] kworker/u8:13: attempt to access beyond end of device [ 525.022647][ T3537] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 525.083736][ T3537] CPU: 1 UID: 0 PID: 3537 Comm: kworker/u8:13 Tainted: G L syzkaller #0 PREEMPT(full) [ 525.083773][ T3537] Tainted: [L]=SOFTLOCKUP [ 525.083781][ T3537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 525.083795][ T3537] Workqueue: writeback wb_workfn (flush-7:7) [ 525.083837][ T3537] Call Trace: [ 525.083845][ T3537] [ 525.083854][ T3537] dump_stack_lvl+0xe8/0x150 [ 525.083889][ T3537] f2fs_handle_critical_error+0x37c/0x540 [ 525.083923][ T3537] f2fs_write_end_io+0xcdb/0xff0 [ 525.083976][ T3537] __submit_merged_bio+0x256/0x700 [ 525.084010][ T3537] __submit_merged_write_cond+0x3c9/0x4e0 [ 525.084054][ T3537] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 525.084109][ T3537] f2fs_write_data_pages+0x2975/0x35e0 [ 525.084182][ T3537] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 525.084228][ T3537] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 525.084302][ T3537] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 525.084357][ T3537] ? __lock_acquire+0x6b5/0x2cf0 [ 525.084408][ T3537] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 525.084438][ T3537] do_writepages+0x32e/0x550 [ 525.084480][ T3537] ? reacquire_held_locks+0x104/0x190 [ 525.084511][ T3537] ? writeback_sb_inodes+0x477/0x1a20 [ 525.084542][ T3537] __writeback_single_inode+0x133/0x11a0 [ 525.084567][ T3537] ? do_raw_spin_unlock+0xf5/0x210 [ 525.084596][ T3537] writeback_sb_inodes+0x992/0x1a20 [ 525.084648][ T3537] ? __lock_acquire+0x6b5/0x2cf0 [ 525.084684][ T3537] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 525.084704][ T3537] ? do_raw_spin_lock+0x12b/0x2f0 [ 525.084776][ T3537] ? rcu_is_watching+0x15/0xb0 [ 525.084819][ T3537] wb_writeback+0x456/0xb70 [ 525.084845][ T3537] ? queue_io+0x241/0x4a0 [ 525.084878][ T3537] ? __pfx_wb_writeback+0x10/0x10 [ 525.084896][ T3537] ? do_raw_spin_lock+0x12b/0x2f0 [ 525.084939][ T3537] wb_workfn+0x414/0xf50 [ 525.084972][ T3537] ? look_up_lock_class+0x57/0x110 [ 525.085011][ T3537] ? __pfx_wb_workfn+0x10/0x10 [ 525.085052][ T3537] ? do_raw_spin_lock+0x12b/0x2f0 [ 525.085079][ T3537] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 525.085129][ T3537] ? process_one_work+0x870/0x1720 [ 525.085157][ T3537] process_one_work+0x963/0x1720 [ 525.085213][ T3537] ? __pfx_process_one_work+0x10/0x10 [ 525.085238][ T3537] ? do_raw_spin_lock+0x12b/0x2f0 [ 525.085282][ T3537] worker_thread+0xb46/0x1140 [ 525.085324][ T3537] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 525.085374][ T3537] kthread+0x388/0x470 [ 525.085397][ T3537] ? __pfx_worker_thread+0x10/0x10 [ 525.085423][ T3537] ? __pfx_kthread+0x10/0x10 [ 525.085446][ T3537] ret_from_fork+0x51e/0xb90 [ 525.085478][ T3537] ? __pfx_ret_from_fork+0x10/0x10 [ 525.085513][ T3537] ? __switch_to+0xc7d/0x1450 [ 525.085543][ T3537] ? __pfx_kthread+0x10/0x10 [ 525.085567][ T3537] ret_from_fork_asm+0x1a/0x30 [ 525.085609][ T3537] [ 525.577435][ T3537] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 526.368269][ T9837] loop0: detected capacity change from 0 to 131072 [ 526.392559][ T9837] F2FS-fs (loop0): Test dummy encryption mode enabled [ 526.704056][ T9837] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 526.714518][ T9837] F2FS-fs (loop0): Mounted with checkpoint version = 753bd00b [ 527.705603][ T9859] loop7: detected capacity change from 0 to 2048 [ 527.842262][ T9862] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 527.847600][ T1210] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 528.066646][ T1210] usb 7-1: Using ep0 maxpacket: 32 [ 528.087057][ T1210] usb 7-1: config index 0 descriptor too short (expected 35577, got 27) [ 528.125271][ T1210] usb 7-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 528.158357][ T1210] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 528.188802][ T1210] usb 7-1: config 1 has no interface number 0 [ 528.221550][ T1210] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 528.277411][ T1210] usb 7-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 528.298322][ T797] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 528.329533][ T1210] usb 7-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 528.361953][ T1210] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.460615][ T1210] snd_usb_pod 7-1:1.1: Line 6 Pocket POD found [ 528.496399][ T797] usb 1-1: Using ep0 maxpacket: 32 [ 528.530251][ T797] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 528.552148][ T797] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 528.590713][ T797] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 528.629413][ T797] usb 1-1: config 1 has no interface number 0 [ 528.655116][ T797] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 528.664613][ T1210] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now attached [ 528.683464][ T9873] netlink: 20 bytes leftover after parsing attributes in process `syz.4.852'. [ 528.710976][ T797] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 528.771871][ T797] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 528.804348][ T797] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.841258][ T5884] usb 7-1: USB disconnect, device number 20 [ 528.849703][ T5884] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now disconnected [ 528.905741][ T797] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 529.098611][ C1] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 529.108212][ T797] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 529.120779][ C1] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 529.151977][ T24] usb 8-1: new low-speed USB device number 2 using dummy_hcd [ 529.320035][ T24] usb 8-1: Invalid ep0 maxpacket: 16 [ 529.351338][ T9880] comedi comedi3: comedi_config --init_data is deprecated [ 529.430857][ T9865] loop5: detected capacity change from 0 to 7 [ 529.464307][ T9865] Dev loop5: unable to read RDB block 7 [ 529.497274][ T9865] loop5: AHDI p4 [ 529.516489][ T24] usb 8-1: new low-speed USB device number 3 using dummy_hcd [ 529.529448][ T9865] loop5: partition table partially beyond EOD, truncated [ 529.613097][ C1] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 529.624005][ T5884] usb 1-1: USB disconnect, device number 29 [ 529.694860][ T5884] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 529.756593][ T24] usb 8-1: Invalid ep0 maxpacket: 16 [ 529.858434][ T24] usb usb8-port1: attempt power cycle [ 530.229550][ T9891] fuse: Bad value for 'fd' [ 530.543877][ T9889] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 530.961261][ T24] usb 8-1: new low-speed USB device number 4 using dummy_hcd [ 531.041726][ T24] usb 8-1: Invalid ep0 maxpacket: 16 [ 531.103920][ T9899] loop0: detected capacity change from 0 to 40427 [ 531.117230][ T9899] F2FS-fs (loop0): invalid crc value [ 531.197093][ T9899] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 531.209897][ T9899] F2FS-fs (loop0): Start checkpoint disabled! [ 531.223861][ T9899] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0 [ 531.236341][ T9899] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 531.239902][ T24] usb 8-1: new low-speed USB device number 5 using dummy_hcd [ 531.291291][ T5884] usb 5-1: new low-speed USB device number 55 using dummy_hcd [ 531.339071][ T24] usb 8-1: Invalid ep0 maxpacket: 16 [ 531.378838][ T24] usb usb8-port1: unable to enumerate USB device [ 531.519306][ T5884] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 531.555443][ T5884] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 531.580488][ T12] kworker/u8:0: attempt to access beyond end of device [ 531.580488][ T12] loop0: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 531.601691][ T5884] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 531.645178][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 531.645212][ T12] Tainted: [L]=SOFTLOCKUP [ 531.645220][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 531.645234][ T12] Workqueue: writeback wb_workfn (flush-7:0) [ 531.645274][ T12] Call Trace: [ 531.645282][ T12] [ 531.645291][ T12] dump_stack_lvl+0xe8/0x150 [ 531.645323][ T12] f2fs_handle_critical_error+0x37c/0x540 [ 531.645358][ T12] f2fs_write_end_io+0xcdb/0xff0 [ 531.645411][ T12] __submit_merged_bio+0x256/0x700 [ 531.645447][ T12] f2fs_submit_merged_write+0x284/0x390 [ 531.645478][ T12] ? __pfx_f2fs_submit_merged_write+0x10/0x10 [ 531.645522][ T12] f2fs_sync_node_pages+0x14bf/0x1680 [ 531.645569][ T12] ? __pfx_f2fs_sync_node_pages+0x10/0x10 [ 531.645594][ T12] ? __percpu_counter_sum+0x1c2/0x1e0 [ 531.645661][ T12] ? blk_start_plug+0x51/0x1b0 [ 531.645788][ T12] f2fs_write_node_pages+0x312/0x700 [ 531.645819][ T12] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 531.645858][ T12] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 531.645885][ T12] do_writepages+0x32e/0x550 [ 531.645925][ T12] ? reacquire_held_locks+0x104/0x190 [ 531.645958][ T12] ? writeback_sb_inodes+0x477/0x1a20 [ 531.645988][ T12] __writeback_single_inode+0x133/0x11a0 [ 531.646012][ T12] ? do_raw_spin_unlock+0xf5/0x210 [ 531.646041][ T12] writeback_sb_inodes+0x992/0x1a20 [ 531.646096][ T12] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 531.646125][ T12] ? do_raw_spin_lock+0x12b/0x2f0 [ 531.646191][ T12] ? rcu_is_watching+0x15/0xb0 [ 531.646231][ T12] wb_writeback+0x456/0xb70 [ 531.646256][ T12] ? queue_io+0x241/0x4a0 [ 531.646287][ T12] ? __pfx_wb_writeback+0x10/0x10 [ 531.646305][ T12] ? do_raw_spin_lock+0x12b/0x2f0 [ 531.646345][ T12] wb_workfn+0x414/0xf50 [ 531.646377][ T12] ? look_up_lock_class+0x57/0x110 [ 531.646413][ T12] ? __pfx_wb_workfn+0x10/0x10 [ 531.646449][ T12] ? do_raw_spin_unlock+0xf5/0x210 [ 531.646476][ T12] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 531.646529][ T12] ? process_one_work+0x870/0x1720 [ 531.646562][ T12] process_one_work+0x963/0x1720 [ 531.646612][ T12] ? __pfx_process_one_work+0x10/0x10 [ 531.646637][ T12] ? do_raw_spin_lock+0x12b/0x2f0 [ 531.646678][ T12] worker_thread+0xb46/0x1140 [ 531.646732][ T12] kthread+0x388/0x470 [ 531.646750][ T12] ? __pfx_worker_thread+0x10/0x10 [ 531.646772][ T12] ? __pfx_kthread+0x10/0x10 [ 531.646790][ T12] ret_from_fork+0x51e/0xb90 [ 531.646817][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 531.646838][ T12] ? __switch_to+0xc7d/0x1450 [ 531.646862][ T12] ? __pfx_kthread+0x10/0x10 [ 531.646880][ T12] ret_from_fork_asm+0x1a/0x30 [ 531.646909][ T12] [ 531.974698][ T5884] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 531.984258][ T5884] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.027778][ T12] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 532.036464][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 532.036498][ T12] Tainted: [L]=SOFTLOCKUP [ 532.036506][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 532.036520][ T12] Workqueue: writeback wb_workfn (flush-7:0) [ 532.036560][ T12] Call Trace: [ 532.036568][ T12] [ 532.036576][ T12] dump_stack_lvl+0xe8/0x150 [ 532.036610][ T12] f2fs_handle_critical_error+0x37c/0x540 [ 532.036646][ T12] f2fs_write_end_io+0xcdb/0xff0 [ 532.036694][ T12] __submit_merged_bio+0x256/0x700 [ 532.036728][ T12] f2fs_submit_merged_write+0x284/0x390 [ 532.036759][ T12] ? __pfx_f2fs_submit_merged_write+0x10/0x10 [ 532.036804][ T12] f2fs_sync_node_pages+0x14bf/0x1680 [ 532.036853][ T12] ? __pfx_f2fs_sync_node_pages+0x10/0x10 [ 532.036880][ T12] ? __percpu_counter_sum+0x1c2/0x1e0 [ 532.036950][ T12] ? blk_start_plug+0x51/0x1b0 [ 532.036978][ T12] f2fs_write_node_pages+0x312/0x700 [ 532.037007][ T12] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 532.037051][ T12] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 532.037076][ T12] do_writepages+0x32e/0x550 [ 532.037116][ T12] ? reacquire_held_locks+0x104/0x190 [ 532.037146][ T12] ? writeback_sb_inodes+0x477/0x1a20 [ 532.037176][ T12] __writeback_single_inode+0x133/0x11a0 [ 532.037200][ T12] ? do_raw_spin_unlock+0xf5/0x210 [ 532.037229][ T12] writeback_sb_inodes+0x992/0x1a20 [ 532.037288][ T12] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 532.037308][ T12] ? do_raw_spin_lock+0x12b/0x2f0 [ 532.037389][ T12] ? rcu_is_watching+0x15/0xb0 [ 532.037431][ T12] wb_writeback+0x456/0xb70 [ 532.037458][ T12] ? queue_io+0x241/0x4a0 [ 532.037491][ T12] ? __pfx_wb_writeback+0x10/0x10 [ 532.037510][ T12] ? do_raw_spin_lock+0x12b/0x2f0 [ 532.037553][ T12] wb_workfn+0x414/0xf50 [ 532.037587][ T12] ? look_up_lock_class+0x57/0x110 [ 532.037627][ T12] ? __pfx_wb_workfn+0x10/0x10 [ 532.037667][ T12] ? do_raw_spin_unlock+0xf5/0x210 [ 532.037695][ T12] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 532.037753][ T12] ? process_one_work+0x870/0x1720 [ 532.037780][ T12] process_one_work+0x963/0x1720 [ 532.037837][ T12] ? __pfx_process_one_work+0x10/0x10 [ 532.037863][ T12] ? do_raw_spin_lock+0x12b/0x2f0 [ 532.037909][ T12] worker_thread+0xb46/0x1140 [ 532.037973][ T12] kthread+0x388/0x470 [ 532.037996][ T12] ? __pfx_worker_thread+0x10/0x10 [ 532.038024][ T12] ? __pfx_kthread+0x10/0x10 [ 532.038048][ T12] ret_from_fork+0x51e/0xb90 [ 532.038081][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 532.038108][ T12] ? __switch_to+0xc7d/0x1450 [ 532.038139][ T12] ? __pfx_kthread+0x10/0x10 [ 532.038164][ T12] ret_from_fork_asm+0x1a/0x30 [ 532.038206][ T12] [ 532.038292][ T12] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 532.636863][ T9912] loop6: detected capacity change from 0 to 40427 [ 532.650360][ T5884] hub 5-1:1.0: bad descriptor, ignoring hub [ 532.656409][ T9912] F2FS-fs (loop6): invalid crc value [ 532.661942][ T5884] hub 5-1:1.0: probe with driver hub failed with error -5 [ 532.670492][ T5884] cdc_wdm 5-1:1.0: skipping garbage [ 532.675791][ T5884] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 532.690018][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 532.690050][ T12] Tainted: [L]=SOFTLOCKUP [ 532.690058][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 532.690071][ T12] Workqueue: writeback wb_workfn (flush-7:0) [ 532.690111][ T12] Call Trace: [ 532.690119][ T12] [ 532.690128][ T12] dump_stack_lvl+0xe8/0x150 [ 532.690161][ T12] f2fs_handle_critical_error+0x37c/0x540 [ 532.690198][ T12] f2fs_write_end_io+0xcdb/0xff0 [ 532.690247][ T12] __submit_merged_bio+0x256/0x700 [ 532.690292][ T12] f2fs_submit_merged_write+0x284/0x390 [ 532.690324][ T12] ? __pfx_f2fs_submit_merged_write+0x10/0x10 [ 532.690371][ T12] f2fs_sync_node_pages+0x14bf/0x1680 [ 532.690420][ T12] ? __pfx_f2fs_sync_node_pages+0x10/0x10 [ 532.690446][ T12] ? __percpu_counter_sum+0x1c2/0x1e0 [ 532.690519][ T12] ? blk_start_plug+0x51/0x1b0 [ 532.690546][ T12] f2fs_write_node_pages+0x312/0x700 [ 532.690581][ T12] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 532.690622][ T12] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 532.690648][ T12] do_writepages+0x32e/0x550 [ 532.690691][ T12] ? reacquire_held_locks+0x104/0x190 [ 532.690722][ T12] ? writeback_sb_inodes+0x477/0x1a20 [ 532.690752][ T12] __writeback_single_inode+0x133/0x11a0 [ 532.690777][ T12] ? do_raw_spin_unlock+0xf5/0x210 [ 532.690806][ T12] writeback_sb_inodes+0x992/0x1a20 [ 532.690863][ T12] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 532.690893][ T12] ? do_raw_spin_lock+0x12b/0x2f0 [ 532.690972][ T12] ? rcu_is_watching+0x15/0xb0 [ 532.691022][ T12] wb_writeback+0x456/0xb70 [ 532.691049][ T12] ? queue_io+0x241/0x4a0 [ 532.691082][ T12] ? __pfx_wb_writeback+0x10/0x10 [ 532.691107][ T12] ? do_raw_spin_lock+0x12b/0x2f0 [ 532.691157][ T12] wb_workfn+0x414/0xf50 [ 532.691192][ T12] ? look_up_lock_class+0x57/0x110 [ 532.691232][ T12] ? __pfx_wb_workfn+0x10/0x10 [ 532.691277][ T12] ? do_raw_spin_unlock+0xf5/0x210 [ 532.691305][ T12] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 532.691367][ T12] ? process_one_work+0x870/0x1720 [ 532.691395][ T12] process_one_work+0x963/0x1720 [ 532.691451][ T12] ? __pfx_process_one_work+0x10/0x10 [ 532.691491][ T12] ? do_raw_spin_lock+0x12b/0x2f0 [ 532.691537][ T12] worker_thread+0xb46/0x1140 [ 532.691600][ T12] kthread+0x388/0x470 [ 532.691623][ T12] ? __pfx_worker_thread+0x10/0x10 [ 532.691650][ T12] ? __pfx_kthread+0x10/0x10 [ 532.691674][ T12] ret_from_fork+0x51e/0xb90 [ 532.691709][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 532.691736][ T12] ? __switch_to+0xc7d/0x1450 [ 532.691767][ T12] ? __pfx_kthread+0x10/0x10 [ 532.691791][ T12] ret_from_fork_asm+0x1a/0x30 [ 532.691833][ T12] [ 532.692078][ T12] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 533.041544][ T9912] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 533.053243][ T9912] F2FS-fs (loop6): Start checkpoint disabled! [ 533.060916][ T9912] F2FS-fs (loop6): f2fs_disable_checkpoint() finish, err:0 [ 533.069810][ T9901] FAULT_INJECTION: forcing a failure. [ 533.069810][ T9901] name failslab, interval 1, probability 0, space 0, times 0 [ 533.083695][ T9912] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 533.132484][ T9901] CPU: 1 UID: 0 PID: 9901 Comm: syz.4.859 Tainted: G L syzkaller #0 PREEMPT(full) [ 533.132518][ T9901] Tainted: [L]=SOFTLOCKUP [ 533.132526][ T9901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 533.132539][ T9901] Call Trace: [ 533.132548][ T9901] [ 533.132557][ T9901] dump_stack_lvl+0xe8/0x150 [ 533.132593][ T9901] should_fail_ex+0x412/0x560 [ 533.132631][ T9901] should_failslab+0xa8/0x100 [ 533.132661][ T9901] ? mas_alloc_nodes+0x291/0x350 [ 533.132693][ T9901] kmem_cache_alloc_noprof+0x87/0x650 [ 533.132729][ T9901] mas_alloc_nodes+0x291/0x350 [ 533.132765][ T9901] mas_preallocate+0x2d6/0x640 [ 533.132786][ T9901] ? rcu_is_watching+0x15/0xb0 [ 533.132817][ T9901] ? __pfx_mas_preallocate+0x10/0x10 [ 533.132848][ T9901] ? __mas_set_range+0x12f/0x3c0 [ 533.132926][ T9901] __split_vma+0x318/0xa40 [ 533.132961][ T9901] ? __pfx___split_vma+0x10/0x10 [ 533.132981][ T9901] ? ima_match_policy+0x2146/0x21e0 [ 533.133105][ T9901] ? ima_match_policy+0x112/0x21e0 [ 533.133137][ T9901] vms_gather_munmap_vmas+0x32d/0x1370 [ 533.133183][ T9901] ? mtree_range_walk+0x6f9/0x8b0 [ 533.133211][ T9901] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 533.133254][ T9901] ? mas_find+0xa7d/0xd30 [ 533.133280][ T9901] mmap_region+0x85b/0x2240 [ 533.133315][ T9901] ? tomoyo_check_open_permission+0x1d3/0x470 [ 533.133350][ T9901] ? __pfx_mmap_region+0x10/0x10 [ 533.133378][ T9901] ? __lock_acquire+0x6b5/0x2cf0 [ 533.133411][ T9901] ? __lock_acquire+0x6b5/0x2cf0 [ 533.133505][ T9901] ? arch_get_unmapped_area_topdown+0x264/0xb60 [ 533.133560][ T9901] ? mm_get_unmapped_area+0xd3/0x100 [ 533.133596][ T9901] ? apparmor_capable+0x126/0x170 [ 533.133621][ T9901] ? bpf_lsm_capable+0x9/0x20 [ 533.133645][ T9901] ? security_capable+0x7e/0x2c0 [ 533.133714][ T9901] ? shmem_mapping+0xd/0x50 [ 533.133732][ T9901] ? memfd_check_seals_mmap+0x165/0x200 [ 533.133761][ T9901] do_mmap+0xc39/0x10c0 [ 533.133796][ T9901] ? __pfx_do_mmap+0x10/0x10 [ 533.133815][ T9901] ? down_write_killable+0x180/0x240 [ 533.133846][ T9901] ? __pfx_down_write_killable+0x10/0x10 [ 533.133872][ T9901] ? apparmor_mmap_file+0x2da/0x3e0 [ 533.133902][ T9901] vm_mmap_pgoff+0x2c9/0x4f0 [ 533.133940][ T9901] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 533.133963][ T9901] ? __fget_files+0x2a/0x420 [ 533.133988][ T9901] ? __fget_files+0x3a0/0x420 [ 533.134009][ T9901] ? __fget_files+0x2a/0x420 [ 533.134035][ T9901] ksys_mmap_pgoff+0x51e/0x760 [ 533.134065][ T9901] do_syscall_64+0x14d/0xf80 [ 533.134085][ T9901] ? trace_irq_disable+0x3b/0x150 [ 533.134105][ T9901] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.134127][ T9901] ? clear_bhb_loop+0x40/0x90 [ 533.134153][ T9901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.134173][ T9901] RIP: 0033:0x7f4b48d9c799 [ 533.134194][ T9901] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 533.134211][ T9901] RSP: 002b:00007f4b49d3e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 533.134232][ T9901] RAX: ffffffffffffffda RBX: 00007f4b49015fa0 RCX: 00007f4b48d9c799 [ 533.134245][ T9901] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 00002000001f8000 [ 533.134258][ T9901] RBP: 00007f4b49d3e090 R08: 0000000000000008 R09: 0000000000000000 [ 533.134270][ T9901] R10: 0000000000012012 R11: 0000000000000246 R12: 0000000000000001 [ 533.134281][ T9901] R13: 00007f4b49016038 R14: 00007f4b49015fa0 R15: 00007ffe984a8f38 [ 533.134311][ T9901] [ 533.622912][ T9919] netlink: 20 bytes leftover after parsing attributes in process `syz.7.864'. [ 533.671993][ T7724] kworker/u8:16: attempt to access beyond end of device [ 533.671993][ T7724] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 533.749956][ T7724] CPU: 1 UID: 0 PID: 7724 Comm: kworker/u8:16 Tainted: G L syzkaller #0 PREEMPT(full) [ 533.749990][ T7724] Tainted: [L]=SOFTLOCKUP [ 533.749999][ T7724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 533.750012][ T7724] Workqueue: writeback wb_workfn (flush-7:6) [ 533.750055][ T7724] Call Trace: [ 533.750064][ T7724] [ 533.750072][ T7724] dump_stack_lvl+0xe8/0x150 [ 533.750108][ T7724] f2fs_handle_critical_error+0x37c/0x540 [ 533.750144][ T7724] f2fs_write_end_io+0xcdb/0xff0 [ 533.750197][ T7724] __submit_merged_bio+0x256/0x700 [ 533.750232][ T7724] __submit_merged_write_cond+0x3c9/0x4e0 [ 533.750271][ T7724] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 533.750327][ T7724] f2fs_write_data_pages+0x2975/0x35e0 [ 533.750402][ T7724] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 533.750447][ T7724] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 533.750523][ T7724] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 533.750580][ T7724] ? __lock_acquire+0x6b5/0x2cf0 [ 533.750647][ T7724] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 533.750679][ T7724] do_writepages+0x32e/0x550 [ 533.750723][ T7724] ? reacquire_held_locks+0x104/0x190 [ 533.750765][ T7724] ? writeback_sb_inodes+0x477/0x1a20 [ 533.750796][ T7724] __writeback_single_inode+0x133/0x11a0 [ 533.750821][ T7724] ? do_raw_spin_unlock+0xf5/0x210 [ 533.750851][ T7724] writeback_sb_inodes+0x992/0x1a20 [ 533.750899][ T7724] ? do_raw_spin_unlock+0xf5/0x210 [ 533.750931][ T7724] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 533.750951][ T7724] ? do_raw_spin_lock+0x12b/0x2f0 [ 533.751024][ T7724] ? rcu_is_watching+0x15/0xb0 [ 533.751067][ T7724] wb_writeback+0x456/0xb70 [ 533.751094][ T7724] ? queue_io+0x241/0x4a0 [ 533.751127][ T7724] ? __pfx_wb_writeback+0x10/0x10 [ 533.751146][ T7724] ? do_raw_spin_lock+0x12b/0x2f0 [ 533.751191][ T7724] wb_workfn+0x414/0xf50 [ 533.751224][ T7724] ? look_up_lock_class+0x57/0x110 [ 533.751266][ T7724] ? __pfx_wb_workfn+0x10/0x10 [ 533.751300][ T7724] ? do_raw_spin_lock+0x12b/0x2f0 [ 533.751326][ T7724] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 533.751377][ T7724] ? process_one_work+0x870/0x1720 [ 533.751415][ T7724] process_one_work+0x963/0x1720 [ 533.751473][ T7724] ? __pfx_process_one_work+0x10/0x10 [ 533.751499][ T7724] ? do_raw_spin_lock+0x12b/0x2f0 [ 533.751544][ T7724] worker_thread+0xb46/0x1140 [ 533.751609][ T7724] kthread+0x388/0x470 [ 533.751632][ T7724] ? __pfx_worker_thread+0x10/0x10 [ 533.751660][ T7724] ? __pfx_kthread+0x10/0x10 [ 533.751685][ T7724] ret_from_fork+0x51e/0xb90 [ 533.751718][ T7724] ? __pfx_ret_from_fork+0x10/0x10 [ 533.751798][ T7724] ? __switch_to+0xc7d/0x1450 [ 533.751830][ T7724] ? __pfx_kthread+0x10/0x10 [ 533.751855][ T7724] ret_from_fork_asm+0x1a/0x30 [ 533.751898][ T7724] [ 533.751907][ T7724] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 533.817585][ T5173] usb 5-1: USB disconnect, device number 55 [ 534.056082][ T9919] loop7: detected capacity change from 0 to 1024 [ 534.758357][ T9937] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 534.769536][ T9937] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 534.936326][ T24] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 535.109467][ T24] usb 5-1: config 1 interface 0 has no altsetting 0 [ 535.150837][ T24] usb 5-1: string descriptor 0 read error: -22 [ 535.189021][ T24] usb 5-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.40 [ 535.218542][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.681999][ T9940] loop0: detected capacity change from 0 to 131072 [ 535.708847][ T9940] F2FS-fs (loop0): Test dummy encryption mode enabled [ 535.816411][ T9940] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 535.835849][ T9940] F2FS-fs (loop0): Mounted with checkpoint version = 753bd00b [ 535.894549][ T24] usbhid 5-1:1.0: can't add hid device: -71 [ 535.950080][ T24] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 536.041145][ T24] usb 5-1: USB disconnect, device number 56 [ 536.102908][ T9957] netlink: 'syz.5.871': attribute type 10 has an invalid length. [ 536.142583][ T9957] bridge0: port 3(netdevsim0) entered blocking state [ 536.414563][ T9957] bridge0: port 3(netdevsim0) entered disabled state [ 536.441198][ T9957] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 536.475872][ T9957] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 536.525598][ T9957] bridge0: port 3(netdevsim0) entered blocking state [ 536.534709][ T9957] bridge0: port 3(netdevsim0) entered forwarding state [ 537.551577][ T9950] loop7: detected capacity change from 0 to 32768 [ 537.755024][ T9969] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 537.766156][ T9969] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 537.861803][ T9950] XFS (loop7): Mounting V5 filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 in no-recovery mode. Filesystem will be inconsistent. [ 538.250323][ T9418] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 538.793312][ T9985] netlink: 20 bytes leftover after parsing attributes in process `syz.0.877'. [ 538.901955][ T9987] loop7: detected capacity change from 0 to 256 [ 538.922606][ T9985] loop0: detected capacity change from 0 to 1024 [ 538.940529][ T9987] vfat: Bad value for 'uni_xlate' [ 539.140725][ T9990] loop7: detected capacity change from 0 to 2048 [ 539.184415][ T9990] UDF-fs: error (device loop7): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 539.225261][ T9990] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 539.239116][ T9992] loop6: detected capacity change from 0 to 1024 [ 539.286637][ T9992] hfsplus: bad catalog folder entry [ 540.593507][ T9987] block nbd0: shutting down sockets [ 541.054424][T10001] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 541.067795][T10001] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 542.615129][T10003] uprobe: syz.0.879:10003 failed to unregister, leaking uprobe [ 542.762018][T10003] uprobe: syz.0.879:10003 failed to unregister, leaking uprobe [ 542.764669][T10008] loop6: detected capacity change from 0 to 131072 [ 542.778051][T10003] uprobe: syz.0.879:10003 failed to unregister, leaking uprobe [ 542.787285][T10008] F2FS-fs (loop6): Test dummy encryption mode enabled [ 542.886813][ T5173] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 542.888661][T10008] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 542.912953][T10008] F2FS-fs (loop6): Mounted with checkpoint version = 753bd00b [ 542.959979][T10018] loop7: detected capacity change from 0 to 1024 [ 543.018717][T10018] EXT4-fs: Ignoring removed bh option [ 543.088456][T10018] EXT4-fs: Ignoring removed nobh option [ 543.134866][ T5173] usb 5-1: config 1 interface 0 has no altsetting 0 [ 543.190406][ T5173] usb 5-1: string descriptor 0 read error: -22 [ 543.206967][T10018] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 543.235600][ T5173] usb 5-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.40 [ 543.248299][ T5173] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.564773][T10018] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.885: bg 0: block 144: padding at end of block bitmap is not set [ 543.806647][T10032] netlink: 20 bytes leftover after parsing attributes in process `syz.0.889'. [ 543.950673][T10032] loop0: detected capacity change from 0 to 1024 [ 544.008099][ T9418] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 544.327093][T10037] netlink: 56 bytes leftover after parsing attributes in process `syz.0.892'. [ 544.413840][T10037] overlayfs: bad index found (index=index/00fb210001639800aedf94459c9c5a82b7121f101cf3594844cc03000000000000, ftype=2000, origin ftype=a000). [ 544.477756][ T5173] usbhid 5-1:1.0: can't add hid device: -71 [ 544.495851][ T5173] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 544.531867][ T5173] usb 5-1: USB disconnect, device number 57 [ 544.612229][T10040] loop0: detected capacity change from 0 to 256 [ 544.645181][T10040] vfat: Bad value for 'uni_xlate' [ 544.764256][T10041] loop0: detected capacity change from 0 to 2048 [ 544.787982][T10040] block nbd0: server does not support multiple connections per device. [ 544.812178][T10040] block nbd0: shutting down sockets [ 544.831278][T10041] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 544.860199][T10041] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 545.249296][T10047] netlink: 8 bytes leftover after parsing attributes in process `syz.7.896'. [ 545.278725][T10047] fuse: Unknown parameter 'vd' [ 545.564466][T10053] loop6: detected capacity change from 0 to 4096 [ 545.584215][T10053] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512). [ 545.676839][ T9] usb 1-1: new low-speed USB device number 30 using dummy_hcd [ 545.716563][ T5173] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 545.847310][ T9] usb 1-1: Invalid ep0 maxpacket: 16 [ 545.896335][ T5173] usb 5-1: Using ep0 maxpacket: 32 [ 545.921785][ T5173] usb 5-1: config 0 has an invalid interface number: 253 but max is 0 [ 545.969319][ T5173] usb 5-1: config 0 has no interface number 0 [ 545.987484][ T9] usb 1-1: new low-speed USB device number 31 using dummy_hcd [ 546.171606][T10062] ntfs3(loop6): ino=3, ntfs_set_state failed, -22. [ 546.524174][ T5173] usb 5-1: config 0 interface 253 altsetting 163 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 546.545853][ T5173] usb 5-1: config 0 interface 253 has no altsetting 0 [ 546.559302][ T5173] usb 5-1: New USB device found, idVendor=05ac, idProduct=021a, bcdDevice=b3.e6 [ 546.578318][ T5173] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.596320][ T5173] usb 5-1: Product: syz [ 546.607080][ T5173] usb 5-1: Manufacturer: syz [ 546.611807][ T5173] usb 5-1: SerialNumber: syz [ 546.677365][ T5173] usb 5-1: config 0 descriptor?? [ 546.709212][ T9] usb 1-1: Invalid ep0 maxpacket: 16 [ 546.725461][ T3537] ntfs3(loop6): ino=3, ntfs3_write_inode failed, -22. [ 546.743845][ C0] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 546.754357][ T9] usb usb1-port1: attempt power cycle [ 546.769177][ T8555] ntfs3(loop6): ino=3, ntfs_set_state failed, -22. [ 546.785287][ T8555] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 546.795109][ T8555] ntfs3(loop6): ino=3, ntfs_set_state failed, -22. [ 546.808944][ T3537] ntfs3(loop6): ino=3, ntfs3_write_inode failed, -22. [ 547.014975][ T5173] appletouch 5-1:0.253: Could not find int-in endpoint [ 547.101603][ T5173] appletouch 5-1:0.253: probe with driver appletouch failed with error -5 [ 547.111744][ T9] usb 1-1: new low-speed USB device number 32 using dummy_hcd [ 547.164753][ T5173] usbhid 5-1:0.253: couldn't find an input interrupt endpoint [ 547.174028][T10068] netlink: 20 bytes leftover after parsing attributes in process `syz.7.902'. [ 547.193364][ T9] usb 1-1: Invalid ep0 maxpacket: 16 [ 547.241813][ T5173] usb 5-1: USB disconnect, device number 58 [ 547.312492][T10068] loop7: detected capacity change from 0 to 1024 [ 547.357453][ T9] usb 1-1: new low-speed USB device number 33 using dummy_hcd [ 547.468900][ T9] usb 1-1: Invalid ep0 maxpacket: 16 [ 547.496679][T10072] netlink: 56 bytes leftover after parsing attributes in process `syz.6.903'. [ 547.528740][ T9] usb usb1-port1: unable to enumerate USB device [ 548.209467][T10075] block nbd0: server does not support multiple connections per device. [ 548.256060][T10075] block nbd0: shutting down sockets [ 548.428051][ T5173] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 549.085144][T10087] FAULT_INJECTION: forcing a failure. [ 549.085144][T10087] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 549.158872][ T5173] usb 7-1: config 1 interface 0 has no altsetting 0 [ 549.165844][T10087] CPU: 0 UID: 0 PID: 10087 Comm: syz.7.905 Tainted: G L syzkaller #0 PREEMPT(full) [ 549.165877][T10087] Tainted: [L]=SOFTLOCKUP [ 549.165887][T10087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 549.165900][T10087] Call Trace: [ 549.165909][T10087] [ 549.165919][T10087] dump_stack_lvl+0xe8/0x150 [ 549.165960][T10087] should_fail_ex+0x412/0x560 [ 549.166006][T10087] _copy_from_user+0x2d/0xb0 [ 549.166111][T10087] __sys_sendto+0x292/0x590 [ 549.166147][T10087] ? __pfx___sys_sendto+0x10/0x10 [ 549.166176][T10087] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 549.166213][T10087] ? __fget_files+0x3a0/0x420 [ 549.166246][T10087] ? ksys_write+0x242/0x270 [ 549.166277][T10087] ? __pfx_ksys_write+0x10/0x10 [ 549.166311][T10087] __x64_sys_sendto+0xde/0x100 [ 549.166347][T10087] do_syscall_64+0x14d/0xf80 [ 549.166368][T10087] ? trace_irq_disable+0x3b/0x150 [ 549.166390][T10087] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.166411][T10087] ? clear_bhb_loop+0x40/0x90 [ 549.166438][T10087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.166458][T10087] RIP: 0033:0x7f7852f9c799 [ 549.166478][T10087] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 549.166497][T10087] RSP: 002b:00007f7853df7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 549.166521][T10087] RAX: ffffffffffffffda RBX: 00007f7853216090 RCX: 00007f7852f9c799 [ 549.166538][T10087] RDX: 000000000000fdef RSI: 00002000000003c0 RDI: 0000000000000006 [ 549.166552][T10087] RBP: 00007f7853df7090 R08: 0000200000000600 R09: 0000000000000080 [ 549.166567][T10087] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 549.166580][T10087] R13: 00007f7853216128 R14: 00007f7853216090 R15: 00007ffef909e0b8 [ 549.166614][T10087] [ 549.396376][ T5173] usb 7-1: string descriptor 0 read error: -22 [ 549.402768][ T5173] usb 7-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.40 [ 549.411911][ T5173] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.488921][T10092] netlink: 8 bytes leftover after parsing attributes in process `syz.5.910'. [ 549.636355][ T1210] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 549.719538][T10086] loop0: detected capacity change from 0 to 32768 [ 549.808410][ T1210] usb 5-1: Using ep0 maxpacket: 32 [ 549.823711][ T1210] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 549.859261][ T1210] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 549.878980][ T1210] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.895918][ T1210] usb 5-1: Product: syz [ 549.910225][ T1210] usb 5-1: Manufacturer: syz [ 549.922515][ T1210] usb 5-1: SerialNumber: syz [ 549.943391][T10095] net_ratelimit: 2 callbacks suppressed [ 549.943405][T10095] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 549.967352][ T1210] usb 5-1: config 0 descriptor?? [ 550.002187][ T1210] usb 5-1: bad CDC descriptors [ 550.017701][ T1210] usb 5-1: unsupported MDLM descriptors [ 550.052474][ T5173] usbhid 7-1:1.0: can't add hid device: -71 [ 550.058730][ T5173] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 550.088135][ T5173] usb 7-1: USB disconnect, device number 21 [ 550.248526][T10103] netlink: 'syz.5.913': attribute type 4 has an invalid length. [ 550.304354][T10104] netlink: 8 bytes leftover after parsing attributes in process `syz.4.909'. [ 550.330993][T10106] netlink: 'syz.7.914': attribute type 4 has an invalid length. [ 550.371587][T10106] netlink: 'syz.7.914': attribute type 4 has an invalid length. [ 550.424338][ T24] usb 5-1: USB disconnect, device number 59 [ 550.667733][T10112] block nbd0: server does not support multiple connections per device. [ 550.693112][T10112] block nbd0: shutting down sockets [ 550.740677][T10117] loop6: detected capacity change from 0 to 512 [ 550.796720][T10117] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 550.883338][T10117] EXT4-fs (loop6): 1 truncate cleaned up [ 550.900885][T10117] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 551.070846][T10124] netlink: 56 bytes leftover after parsing attributes in process `syz.0.916'. [ 551.210007][T10124] overlayfs: bad index found (index=index/00fb210001639800aedf94459c9c5a82b7121f101ca58cbf19ef03000000000000, ftype=2000, origin ftype=a000). [ 551.245898][ T24] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 551.417194][ T24] usb 7-1: too many configurations: 154, using maximum allowed: 8 [ 551.455799][ T24] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 551.496624][ T24] usb 7-1: can't read configurations, error -61 [ 551.874087][ T24] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 552.215844][ T5173] usb 8-1: new low-speed USB device number 6 using dummy_hcd [ 552.408625][ T24] usb 7-1: too many configurations: 154, using maximum allowed: 8 [ 552.444223][ T24] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 552.476389][ T5173] usb 8-1: Invalid ep0 maxpacket: 16 [ 552.903769][ T24] usb 7-1: can't read configurations, error -61 [ 552.912770][ T24] usb usb7-port1: attempt power cycle [ 553.082491][ T5173] usb 8-1: new low-speed USB device number 7 using dummy_hcd [ 553.290803][ T24] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 553.322807][ T24] usb 7-1: too many configurations: 154, using maximum allowed: 8 [ 553.381309][ T24] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 553.989510][ T24] usb 7-1: can't read configurations, error -61 [ 554.004529][ T5173] usb 8-1: Invalid ep0 maxpacket: 16 [ 554.046879][ T5173] usb usb8-port1: attempt power cycle [ 554.137629][ T24] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 554.216756][ T8555] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 554.350144][T10142] loop0: detected capacity change from 0 to 2048 [ 554.378271][ T24] usb 7-1: device not accepting address 25, error -71 [ 554.395661][ T24] usb usb7-port1: unable to enumerate USB device [ 554.441885][T10142] UDF-fs: error (device loop0): udf_read_inode: (ino 1312) failed !bh [ 554.456318][ T5173] usb 8-1: new low-speed USB device number 8 using dummy_hcd [ 554.465245][T10142] UDF-fs: Scanning with blocksize 512 failed [ 554.480245][T10144] loop6: detected capacity change from 0 to 16 [ 554.487910][T10144] erofs (device loop6): invalid ishare xattr prefix id 0 [ 554.575140][T10142] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 554.873776][T10147] netlink: 56 bytes leftover after parsing attributes in process `syz.6.925'. [ 554.928650][ T5173] usb 8-1: device descriptor read/8, error -71 [ 554.942096][T10142] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 554.986544][T10142] UDF-fs: Scanning with blocksize 1024 failed [ 555.157311][T10142] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 555.196562][T10142] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 555.214725][T10142] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 555.222553][T10142] UDF-fs: Scanning with blocksize 2048 failed [ 555.245717][T10142] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 555.288710][T10142] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 555.353519][T10142] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 555.410441][T10142] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 555.445913][T10142] UDF-fs: Scanning with blocksize 4096 failed [ 555.477836][T10142] UDF-fs: warning (device loop0): udf_fill_super: No partition found (1) [ 555.790092][T10165] loop6: detected capacity change from 0 to 256 [ 555.828041][T10165] vfat: Bad value for 'uni_xlate' [ 555.907427][ C0] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 555.938772][T10165] block nbd0: server does not support multiple connections per device. [ 555.980710][T10165] block nbd0: shutting down sockets [ 555.982550][T10168] netlink: 56 bytes leftover after parsing attributes in process `syz.4.931'. [ 556.008030][ C0] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 556.017951][T10158] netlink: 8 bytes leftover after parsing attributes in process `syz.5.929'. [ 556.084000][T10158] bridge0: port 3(netdevsim0) entered disabled state [ 556.093661][T10158] bridge0: port 2(bridge_slave_1) entered disabled state [ 556.104379][T10158] bridge0: port 1(bridge_slave_0) entered disabled state [ 556.165088][T10168] overlayfs: bad index found (index=index/00fb2100015f6a127416294276adc3de3f741da119dfd152a28204000000000000, ftype=2000, origin ftype=a000). [ 556.884118][T10170] loop0: detected capacity change from 0 to 131072 [ 556.896754][T10170] F2FS-fs (loop0): Test dummy encryption mode enabled [ 557.030403][T10170] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 557.042114][T10170] F2FS-fs (loop0): Mounted with checkpoint version = 753bd00b [ 557.823690][T10182] netlink: 12 bytes leftover after parsing attributes in process `syz.5.935'. [ 559.246303][ T10] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 559.422792][ T10] usb 8-1: Using ep0 maxpacket: 32 [ 559.446397][ T24] usb 7-1: new low-speed USB device number 26 using dummy_hcd [ 559.446620][ T10] usb 8-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 559.486684][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.494902][ T10] usb 8-1: Product: syz [ 559.499467][ T10] usb 8-1: Manufacturer: syz [ 559.504144][ T10] usb 8-1: SerialNumber: syz [ 559.512534][ T10] usb 8-1: config 0 descriptor?? [ 559.617770][ T24] usb 7-1: Invalid ep0 maxpacket: 16 [ 559.742312][T10201] loop0: detected capacity change from 0 to 256 [ 559.751694][ T10] RobotFuzz Open Source InterFace, OSIF 8-1:0.0: version d4.15 found at bus 008 address 010 [ 559.766291][ T24] usb 7-1: new low-speed USB device number 27 using dummy_hcd [ 559.777635][T10201] vfat: Bad value for 'uni_xlate' [ 559.956408][ T24] usb 7-1: Invalid ep0 maxpacket: 16 [ 559.966097][T10204] loop0: detected capacity change from 0 to 2048 [ 559.971509][ T24] usb usb7-port1: attempt power cycle [ 560.738856][T10201] block nbd0: server does not support multiple connections per device. [ 560.759264][ T9] usb 8-1: USB disconnect, device number 10 [ 561.792964][T10201] block nbd0: shutting down sockets [ 561.804243][T10204] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 561.882224][T10204] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 562.036459][ T24] usb 7-1: new low-speed USB device number 28 using dummy_hcd [ 562.087278][ T24] usb 7-1: device descriptor read/8, error -71 [ 563.386391][T10212] loop0: detected capacity change from 0 to 131072 [ 563.395477][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.407042][T10212] F2FS-fs (loop0): Test dummy encryption mode enabled [ 563.564550][T10212] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 563.584136][T10212] F2FS-fs (loop0): Mounted with checkpoint version = 753bd00b [ 563.758477][T10228] netlink: 12 bytes leftover after parsing attributes in process `syz.7.946'. [ 563.813876][T10228] netlink: 12 bytes leftover after parsing attributes in process `syz.7.946'. [ 564.688313][T10238] loop5: detected capacity change from 0 to 7 [ 564.719315][T10238] Dev loop5: unable to read RDB block 7 [ 564.745484][T10238] loop5: unable to read partition table [ 564.770140][T10238] loop5: partition table beyond EOD, truncated [ 564.793180][T10238] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 564.876869][T10240] netlink: 56 bytes leftover after parsing attributes in process `syz.0.953'. [ 565.041718][T10240] overlayfs: bad index found (index=index/00fb210001639800aedf94459c9c5a82b7121f101ca44266ae2a04000000000000, ftype=2000, origin ftype=a000). [ 565.137912][T10232] loop6: detected capacity change from 0 to 32768 [ 565.148632][T10243] loop7: detected capacity change from 0 to 256 [ 565.182755][T10232] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.951 (10232) [ 565.223958][T10243] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 565.249207][T10232] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 565.308417][T10232] BTRFS info (device loop6): using sha256 checksum algorithm [ 565.415040][T10254] loop0: detected capacity change from 0 to 256 [ 565.491671][T10254] vfat: Bad value for 'uni_xlate' [ 565.580221][T10232] BTRFS info (device loop6): enabling ssd optimizations [ 565.596433][T10232] BTRFS info (device loop6): turning on async discard [ 565.616347][T10232] BTRFS info (device loop6): enabling free space tree [ 565.630552][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 565.630571][ T30] audit: type=1800 audit(1772606750.364:412): pid=10253 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.955" name="file1" dev="loop7" ino=1048648 res=0 errno=0 [ 565.717525][T10243] FAT-fs (loop7): error, corrupted file size (i_pos 196, 2048) [ 565.739303][T10232] fuse: Bad value for 'fd' [ 565.744772][T10254] block nbd0: server does not support multiple connections per device. [ 565.766262][T10243] FAT-fs (loop7): Filesystem has been set read-only [ 565.790579][T10254] block nbd0: shutting down sockets [ 565.851226][T10271] loop0: detected capacity change from 0 to 2048 [ 565.898735][ T8555] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 565.957048][T10271] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 566.001163][T10271] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 567.897665][T10291] netlink: 'syz.0.965': attribute type 10 has an invalid length. [ 568.014837][T10291] team0: Device xfrm0 is of different type [ 568.247612][T10276] loop7: detected capacity change from 0 to 4096 [ 568.291609][T10296] netlink: 56 bytes leftover after parsing attributes in process `syz.4.967'. [ 568.294668][T10276] ntfs3(loop7): Different NTFS sector size (1024) and media sector size (512). [ 568.459820][T10299] overlayfs: bad index found (index=index/00fb2100015f6a127416294276adc3de3f741da119a7201bddba04000000000000, ftype=2000, origin ftype=a000). [ 568.496022][T10276] ntfs3(loop7): Mark volume as dirty due to NTFS errors [ 568.591444][T10298] loop0: detected capacity change from 0 to 4096 [ 568.630780][T10298] NILFS (loop0): mounting unchecked fs [ 568.674729][T10298] NILFS (loop0): recovery required for readonly filesystem [ 568.707435][T10298] NILFS (loop0): write access will be enabled during recovery [ 568.745022][T10298] NILFS (loop0): invalid segment: Checksum error in segment payload [ 568.787137][T10298] NILFS (loop0): trying rollback from an earlier position [ 568.823769][T10302] netlink: 196 bytes leftover after parsing attributes in process `syz.4.969'. [ 568.854491][T10298] NILFS (loop0): norecovery option specified, skipping roll-forward recovery [ 569.681920][ T24] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 569.859369][ T24] usb 1-1: config 0 has an invalid interface number: 114 but max is 2 [ 569.888655][ T24] usb 1-1: config 0 has an invalid descriptor of length 99, skipping remainder of the config [ 569.920051][ T24] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 569.956330][ T24] usb 1-1: config 0 has no interface number 0 [ 569.974238][ T24] usb 1-1: too many endpoints for config 0 interface 114 altsetting 111: 44, using maximum allowed: 30 [ 569.998533][ T24] usb 1-1: config 0 interface 114 altsetting 111 has 0 endpoint descriptors, different from the interface descriptor's value: 44 [ 570.015344][ T24] usb 1-1: config 0 interface 114 has no altsetting 0 [ 570.022560][ T24] usb 1-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 570.033681][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.077790][ T24] usb 1-1: config 0 descriptor?? [ 570.106767][ T9] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 570.256923][T10317] loop7: detected capacity change from 0 to 256 [ 570.268510][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 570.284702][T10317] vfat: Bad value for 'uni_xlate' [ 570.298130][ T9] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 570.317544][ T9] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 570.320559][ T24] usb 1-1: string descriptor 0 read error: -71 [ 570.331026][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 570.363587][ T9] usb 5-1: config 1 has no interface number 0 [ 570.380129][ T9] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 570.384418][ T24] usb 1-1: USB disconnect, device number 34 [ 570.435402][ T9] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 570.468722][ T9] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 570.478074][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.637092][T10317] block nbd0: server does not support multiple connections per device. [ 570.650566][T10317] block nbd0: shutting down sockets [ 570.661280][T10319] loop7: detected capacity change from 0 to 2048 [ 570.675374][T10319] UDF-fs: error (device loop7): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 570.768426][T10324] loop6: detected capacity change from 0 to 512 [ 570.776806][T10324] EXT4-fs: Ignoring removed nomblk_io_submit option [ 570.783496][T10324] EXT4-fs: Conflicting test_dummy_encryption options [ 571.019655][ T9] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 571.119936][T10319] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 571.390670][ T9] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 571.458068][ C0] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 571.506155][ T9] usb 5-1: USB disconnect, device number 60 [ 571.555133][ T9] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 571.859137][T10332] xfrm0 speed is unknown, defaulting to 1000 [ 571.885198][T10332] xfrm0 speed is unknown, defaulting to 1000 [ 572.249346][T10335] netlink: 56 bytes leftover after parsing attributes in process `syz.7.979'. [ 572.343880][T10332] xfrm0 speed is unknown, defaulting to 1000 [ 572.344354][T10334] netlink: 116 bytes leftover after parsing attributes in process `syz.6.977'. [ 572.359783][T10335] overlayfs: bad index found (index=index/00fb2100015dc6771e73734677b699a16596d0aeb1e749e4c2e000000000000000, ftype=2000, origin ftype=a000). [ 573.096026][T10332] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 573.633135][T10332] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 575.006303][ T1210] usb 5-1: new low-speed USB device number 61 using dummy_hcd [ 576.283208][ T1210] usb 5-1: Invalid ep0 maxpacket: 16 [ 576.446347][ T1210] usb 5-1: new low-speed USB device number 62 using dummy_hcd [ 576.939233][T10364] loop7: detected capacity change from 0 to 256 [ 577.027408][T10332] xfrm0 speed is unknown, defaulting to 1000 [ 577.089606][T10332] xfrm0 speed is unknown, defaulting to 1000 [ 577.120887][T10332] xfrm0 speed is unknown, defaulting to 1000 [ 577.124070][T10366] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 577.154447][T10332] xfrm0 speed is unknown, defaulting to 1000 [ 577.518861][T10373] loop0: detected capacity change from 0 to 1024 [ 577.533862][T10373] EXT4-fs: Ignoring removed orlov option [ 577.989963][T10332] xfrm0 speed is unknown, defaulting to 1000 [ 578.007629][T10373] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 578.032814][ T30] audit: type=1800 audit(1772606762.764:413): pid=10370 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.987" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 578.089200][T10369] netlink: 12 bytes leftover after parsing attributes in process `syz.4.986'. [ 578.441818][ T5836] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 578.716001][T10388] loop7: detected capacity change from 0 to 8 [ 578.853009][T10388] SQUASHFS error: xz decompression failed, data probably corrupt [ 578.861159][T10388] SQUASHFS error: Failed to read block 0x108: -5 [ 578.867939][T10388] SQUASHFS error: Unable to read metadata cache entry [106] [ 578.875343][T10388] SQUASHFS error: Unable to read inode 0x11f [ 579.967495][T10410] netlink: 12 bytes leftover after parsing attributes in process `syz.0.999'. [ 580.401822][T10424] loop7: detected capacity change from 0 to 2048 [ 580.501946][T10424] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 580.539854][ T1210] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 580.626325][ T797] usb 7-1: new full-speed USB device number 30 using dummy_hcd [ 580.676839][ T9418] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 580.706297][ T1210] usb 5-1: Using ep0 maxpacket: 32 [ 580.721457][ T1210] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 580.742835][ T1210] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 580.757667][ T1210] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 580.786448][ T1210] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 580.804136][ T1210] usb 5-1: Product: syz [ 580.815434][ T1210] usb 5-1: Manufacturer: syz [ 580.828599][ T1210] usb 5-1: SerialNumber: syz [ 580.838489][T10437] loop0: detected capacity change from 0 to 4096 [ 580.848850][ T797] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 580.853244][ T1210] usb 5-1: config 0 descriptor?? [ 580.878113][T10437] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512). [ 580.892290][ T797] usb 7-1: New USB device found, idVendor=04f2, idProduct=1123, bcdDevice= 0.00 [ 580.920748][ T797] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.959244][T10437] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 580.968667][ T797] usb 7-1: config 0 descriptor?? [ 580.991264][ T797] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 581.018153][T10443] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1013'. [ 581.109302][ T10] usb 5-1: USB disconnect, device number 63 [ 581.243558][T10447] tipc: Failed to remove unknown binding: 66,0,0/2886997007:3434778257/3434778259 [ 581.271612][ T797] usb 7-1: USB disconnect, device number 30 [ 581.283377][T10447] tipc: Failed to remove unknown binding: 66,0,0/2886997007:3434778257/3434778258 [ 581.432617][T10452] loop7: detected capacity change from 0 to 512 [ 581.442836][T10452] EXT4-fs: Ignoring removed orlov option [ 581.472770][T10452] EXT4-fs (loop7): 1 truncate cleaned up [ 581.492068][T10452] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 581.552363][ T30] audit: type=1800 audit(1772606766.284:414): pid=10452 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1016" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 581.659294][ T9418] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 581.832570][T10466] loop7: detected capacity change from 0 to 64 [ 582.023137][T10472] syz.7.1020: attempt to access beyond end of device [ 582.023137][T10472] loop7: rw=8388608, sector=1024, nr_sectors = 2 limit=64 [ 582.272474][T10472] Buffer I/O error on dev loop7, logical block 512, async page read [ 582.340930][T10472] syz.7.1020: attempt to access beyond end of device [ 582.340930][T10472] loop7: rw=8388608, sector=113152, nr_sectors = 2 limit=64 [ 582.492372][T10472] Buffer I/O error on dev loop7, logical block 56576, async page read [ 583.358367][T10495] kAFS: unable to lookup cell '' [ 584.415095][T10504] kvm: kvm [10502]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010006) = 0x8000000000000 [ 584.574626][ T1210] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 584.648831][T10506] loop7: detected capacity change from 0 to 8192 [ 584.722505][T10506] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 584.769131][ T1210] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz0 [ 585.008322][T10519] binder: 10518:10519 ioctl c0306201 200000000480 returned -14 [ 585.513987][T10532] loop0: detected capacity change from 0 to 1024 [ 586.664823][T10568] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1061'. [ 586.805518][T10549] orangefs_mount: mount request failed with -4 [ 586.896363][T10546] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 586.905627][T10546] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 587.016311][T10546] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 587.026925][T10546] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 587.172672][T10546] ================================================================== [ 587.180811][T10546] BUG: KASAN: slab-use-after-free in __list_del_entry_valid_or_report+0x92/0x190 [ 587.190066][T10546] Read of size 8 at addr ffff88807a4ad578 by task syz.7.1047/10546 [ 587.198072][T10546] [ 587.200440][T10546] CPU: 0 UID: 0 PID: 10546 Comm: syz.7.1047 Tainted: G L syzkaller #0 PREEMPT(full) [ 587.200465][T10546] Tainted: [L]=SOFTLOCKUP [ 587.200472][T10546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 587.200482][T10546] Call Trace: [ 587.200490][T10546] [ 587.200498][T10546] dump_stack_lvl+0xe8/0x150 [ 587.200525][T10546] print_report+0xba/0x230 [ 587.200574][T10546] ? __list_del_entry_valid_or_report+0x92/0x190 [ 587.200598][T10546] kasan_report+0x117/0x150 [ 587.200621][T10546] ? do_raw_spin_lock+0x12b/0x2f0 [ 587.200640][T10546] ? __list_del_entry_valid_or_report+0x92/0x190 [ 587.200666][T10546] __list_del_entry_valid_or_report+0x92/0x190 [ 587.200690][T10546] bt_accept_unlink+0x39/0x260 [ 587.200710][T10546] l2cap_sock_teardown_cb+0x17e/0x490 [ 587.200782][T10546] l2cap_chan_del+0xb5/0x610 [ 587.200798][T10546] l2cap_conn_del+0x333/0x5c0 [ 587.200821][T10546] ? __pfx_l2cap_disconn_cfm+0x10/0x10 [ 587.200843][T10546] hci_conn_hash_flush+0x10d/0x260 [ 587.200868][T10546] hci_dev_close_sync+0x821/0x10e0 [ 587.200911][T10546] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 587.200930][T10546] ? do_raw_spin_lock+0x12b/0x2f0 [ 587.200950][T10546] hci_dev_do_close+0x30/0xc0 [ 587.200971][T10546] hci_rfkill_set_block+0x1f4/0x290 [ 587.200989][T10546] ? __pfx_hci_rfkill_set_block+0x10/0x10 [ 587.201007][T10546] rfkill_set_block+0x1d2/0x440 [ 587.201054][T10546] rfkill_fop_write+0x461/0x5a0 [ 587.201069][T10546] ? apparmor_file_permission+0x1f4/0x300 [ 587.201090][T10546] ? __pfx_rfkill_fop_write+0x10/0x10 [ 587.201106][T10546] ? security_kernfs_init_security+0x210/0x270 [ 587.201126][T10546] ? rw_verify_area+0x255/0x4d0 [ 587.201147][T10546] ? __pfx_rfkill_fop_write+0x10/0x10 [ 587.201163][T10546] vfs_write+0x29a/0xb90 [ 587.201187][T10546] ? __pfx_vfs_write+0x10/0x10 [ 587.201210][T10546] ? __fget_files+0x2a/0x420 [ 587.201228][T10546] ? __fget_files+0x2a/0x420 [ 587.201245][T10546] ? __fget_files+0x3a0/0x420 [ 587.201261][T10546] ? __fget_files+0x2a/0x420 [ 587.201281][T10546] ksys_write+0x150/0x270 [ 587.201302][T10546] ? __pfx_ksys_write+0x10/0x10 [ 587.201327][T10546] do_syscall_64+0x14d/0xf80 [ 587.201346][T10546] ? trace_irq_disable+0x3b/0x150 [ 587.201363][T10546] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.201379][T10546] ? clear_bhb_loop+0x40/0x90 [ 587.201397][T10546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.201413][T10546] RIP: 0033:0x7f7852f9c799 [ 587.201437][T10546] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 587.201451][T10546] RSP: 002b:00007f7853e18028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 587.201469][T10546] RAX: ffffffffffffffda RBX: 00007f7853215fa0 RCX: 00007f7852f9c799 [ 587.201481][T10546] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000003 [ 587.201492][T10546] RBP: 00007f7853032bd9 R08: 0000000000000000 R09: 0000000000000000 [ 587.201502][T10546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 587.201511][T10546] R13: 00007f7853216038 R14: 00007f7853215fa0 R15: 00007ffef909e0b8 [ 587.201530][T10546] [ 587.201536][T10546] [ 587.511112][T10546] Allocated by task 9418: [ 587.515444][T10546] kasan_save_track+0x3e/0x80 [ 587.520133][T10546] __kasan_kmalloc+0x93/0xb0 [ 587.524736][T10546] __kmalloc_node_track_caller_noprof+0x4db/0x7b0 [ 587.531161][T10546] pskb_expand_head+0x228/0x1320 [ 587.536113][T10546] netlink_trim+0x1b3/0x2c0 [ 587.540633][T10546] netlink_broadcast_filtered+0xd6/0x1020 [ 587.546407][T10546] nlmsg_notify+0xf0/0x1a0 [ 587.550860][T10546] rtnetlink_event+0x224/0x270 [ 587.555650][T10546] notifier_call_chain+0x1be/0x400 [ 587.560769][T10546] netif_set_mac_address+0x39f/0x4e0 [ 587.566064][T10546] do_setlink+0x9b1/0x4590 [ 587.570499][T10546] rtnl_newlink+0x15a9/0x1be0 [ 587.575232][T10546] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 587.580189][T10546] netlink_rcv_skb+0x232/0x4b0 [ 587.584974][T10546] netlink_unicast+0x80f/0x9b0 [ 587.589779][T10546] netlink_sendmsg+0x813/0xb40 [ 587.594565][T10546] sock_sendmsg_nosec+0x18f/0x1d0 [ 587.599657][T10546] __sys_sendto+0x3ff/0x590 [ 587.604201][T10546] __x64_sys_sendto+0xde/0x100 [ 587.608982][T10546] do_syscall_64+0x14d/0xf80 [ 587.613578][T10546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.619472][T10546] [ 587.621796][T10546] Freed by task 9418: [ 587.625775][T10546] kasan_save_track+0x3e/0x80 [ 587.630456][T10546] kasan_save_free_info+0x46/0x50 [ 587.635483][T10546] __kasan_slab_free+0x5c/0x80 [ 587.640256][T10546] kfree+0x1c1/0x630 [ 587.644154][T10546] skb_release_data+0x6f0/0x940 [ 587.649091][T10546] __kfree_skb+0x5d/0x210 [ 587.653453][T10546] netlink_broadcast_filtered+0xee4/0x1020 [ 587.659282][T10546] nlmsg_notify+0xf0/0x1a0 [ 587.663706][T10546] rtnetlink_event+0x224/0x270 [ 587.668491][T10546] notifier_call_chain+0x1be/0x400 [ 587.673650][T10546] netif_set_mac_address+0x39f/0x4e0 [ 587.678954][T10546] do_setlink+0x9b1/0x4590 [ 587.683386][T10546] rtnl_newlink+0x15a9/0x1be0 [ 587.688073][T10546] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 587.693391][T10546] netlink_rcv_skb+0x232/0x4b0 [ 587.698166][T10546] netlink_unicast+0x80f/0x9b0 [ 587.702938][T10546] netlink_sendmsg+0x813/0xb40 [ 587.707739][T10546] sock_sendmsg_nosec+0x18f/0x1d0 [ 587.712787][T10546] __sys_sendto+0x3ff/0x590 [ 587.717327][T10546] __x64_sys_sendto+0xde/0x100 [ 587.722117][T10546] do_syscall_64+0x14d/0xf80 [ 587.726714][T10546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.732606][T10546] [ 587.734931][T10546] The buggy address belongs to the object at ffff88807a4ad000 [ 587.734931][T10546] which belongs to the cache kmalloc-2k of size 2048 [ 587.748991][T10546] The buggy address is located 1400 bytes inside of [ 587.748991][T10546] freed 2048-byte region [ffff88807a4ad000, ffff88807a4ad800) [ 587.762979][T10546] [ 587.765398][T10546] The buggy address belongs to the physical page: [ 587.771854][T10546] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807a4ab000 pfn:0x7a4a8 [ 587.781929][T10546] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 587.790519][T10546] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 587.799126][T10546] page_type: f5(slab) [ 587.803120][T10546] raw: 00fff00000000240 ffff88801b034000 ffffea000089ec10 ffffea00008dae10 [ 587.811708][T10546] raw: ffff88807a4ab000 0000000800080003 00000000f5000000 0000000000000000 [ 587.820299][T10546] head: 00fff00000000240 ffff88801b034000 ffffea000089ec10 ffffea00008dae10 [ 587.828976][T10546] head: ffff88807a4ab000 0000000800080003 00000000f5000000 0000000000000000 [ 587.837654][T10546] head: 00fff00000000003 ffffea0001e92a01 00000000ffffffff 00000000ffffffff [ 587.846338][T10546] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 587.855019][T10546] page dumped because: kasan: bad access detected [ 587.861477][T10546] page_owner tracks the page as allocated [ 587.867193][T10546] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5828, tgid 5828 (syz-executor), ts 92045632650, free_ts 91809835261 [ 587.888560][T10546] post_alloc_hook+0x231/0x280 [ 587.893337][T10546] get_page_from_freelist+0x23a1/0x2440 [ 587.898900][T10546] __alloc_frozen_pages_noprof+0x18d/0x380 [ 587.904746][T10546] allocate_slab+0x77/0x660 [ 587.909260][T10546] refill_objects+0x331/0x3c0 [ 587.914005][T10546] __pcs_replace_empty_main+0x2cd/0x650 [ 587.919579][T10546] __kmalloc_node_noprof+0x577/0x7c0 [ 587.924881][T10546] qdisc_alloc+0x92/0x9f0 [ 587.929218][T10546] qdisc_create_dflt+0x8e/0x510 [ 587.934086][T10546] dev_activate+0x378/0x1150 [ 587.938684][T10546] __dev_open+0x67a/0x830 [ 587.943018][T10546] __dev_change_flags+0x1f7/0x690 [ 587.948045][T10546] netif_change_flags+0x88/0x1a0 [ 587.952987][T10546] do_setlink+0xf82/0x4590 [ 587.957403][T10546] rtnl_newlink+0x15a9/0x1be0 [ 587.962105][T10546] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 587.967049][T10546] page last free pid 3466 tgid 3466 stack trace: [ 587.973376][T10546] __free_frozen_pages+0xbe2/0xd60 [ 587.978673][T10546] __slab_free+0x263/0x2b0 [ 587.983098][T10546] qlist_free_all+0x97/0x100 [ 587.987696][T10546] kasan_quarantine_reduce+0x148/0x160 [ 587.993190][T10546] __kasan_slab_alloc+0x22/0x80 [ 587.998052][T10546] kmem_cache_alloc_node_noprof+0x384/0x690 [ 588.003959][T10546] __alloc_skb+0x1d0/0x7d0 [ 588.008386][T10546] rtmsg_ifinfo_build_skb+0x84/0x260 [ 588.013680][T10546] rtmsg_ifinfo+0x8c/0x1a0 [ 588.018105][T10546] netif_state_change+0x297/0x3a0 [ 588.023138][T10546] __linkwatch_run_queue+0x572/0x850 [ 588.028434][T10546] linkwatch_event+0x4c/0x60 [ 588.033029][T10546] process_one_work+0x963/0x1720 [ 588.037975][T10546] worker_thread+0xb46/0x1140 [ 588.042681][T10546] kthread+0x388/0x470 [ 588.046753][T10546] ret_from_fork+0x51e/0xb90 [ 588.051354][T10546] [ 588.053676][T10546] Memory state around the buggy address: [ 588.059303][T10546] ffff88807a4ad400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 588.067372][T10546] ffff88807a4ad480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 588.075439][T10546] >ffff88807a4ad500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 588.083607][T10546] ^ [ 588.091590][T10546] ffff88807a4ad580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 588.099657][T10546] ffff88807a4ad600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 588.107728][T10546] ================================================================== [ 588.166853][T10546] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 588.174148][T10546] CPU: 1 UID: 0 PID: 10546 Comm: syz.7.1047 Tainted: G L syzkaller #0 PREEMPT(full) [ 588.185124][T10546] Tainted: [L]=SOFTLOCKUP [ 588.189499][T10546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 588.199568][T10546] Call Trace: [ 588.202879][T10546] [ 588.205930][T10546] vpanic+0x56c/0xa60 [ 588.209940][T10546] ? __pfx_vpanic+0x10/0x10 [ 588.214461][T10546] panic+0xc5/0xd0 [ 588.218198][T10546] ? __pfx_panic+0x10/0x10 [ 588.222626][T10546] ? preempt_schedule_thunk+0x16/0x30 [ 588.228018][T10546] ? __list_del_entry_valid_or_report+0x92/0x190 [ 588.234377][T10546] ? preempt_schedule_thunk+0x16/0x30 [ 588.239762][T10546] ? __list_del_entry_valid_or_report+0x92/0x190 [ 588.246100][T10546] check_panic_on_warn+0x89/0xb0 [ 588.251066][T10546] ? __list_del_entry_valid_or_report+0x92/0x190 [ 588.257432][T10546] end_report+0x73/0x180 [ 588.261695][T10546] ? __list_del_entry_valid_or_report+0x92/0x190 [ 588.268037][T10546] kasan_report+0x128/0x150 [ 588.272553][T10546] ? do_raw_spin_lock+0x12b/0x2f0 [ 588.277584][T10546] ? __list_del_entry_valid_or_report+0x92/0x190 [ 588.283934][T10546] __list_del_entry_valid_or_report+0x92/0x190 [ 588.290114][T10546] bt_accept_unlink+0x39/0x260 [ 588.294931][T10546] l2cap_sock_teardown_cb+0x17e/0x490 [ 588.300419][T10546] l2cap_chan_del+0xb5/0x610 [ 588.305030][T10546] l2cap_conn_del+0x333/0x5c0 [ 588.309777][T10546] ? __pfx_l2cap_disconn_cfm+0x10/0x10 [ 588.315252][T10546] hci_conn_hash_flush+0x10d/0x260 [ 588.320385][T10546] hci_dev_close_sync+0x821/0x10e0 [ 588.325514][T10546] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 588.331074][T10546] ? do_raw_spin_lock+0x12b/0x2f0 [ 588.336118][T10546] hci_dev_do_close+0x30/0xc0 [ 588.340809][T10546] hci_rfkill_set_block+0x1f4/0x290 [ 588.346020][T10546] ? __pfx_hci_rfkill_set_block+0x10/0x10 [ 588.351756][T10546] rfkill_set_block+0x1d2/0x440 [ 588.356619][T10546] rfkill_fop_write+0x461/0x5a0 [ 588.361494][T10546] ? apparmor_file_permission+0x1f4/0x300 [ 588.367225][T10546] ? __pfx_rfkill_fop_write+0x10/0x10 [ 588.372598][T10546] ? security_kernfs_init_security+0x210/0x270 [ 588.378783][T10546] ? rw_verify_area+0x255/0x4d0 [ 588.383644][T10546] ? __pfx_rfkill_fop_write+0x10/0x10 [ 588.389021][T10546] vfs_write+0x29a/0xb90 [ 588.393276][T10546] ? __pfx_vfs_write+0x10/0x10 [ 588.398048][T10546] ? __fget_files+0x2a/0x420 [ 588.402645][T10546] ? __fget_files+0x2a/0x420 [ 588.407251][T10546] ? __fget_files+0x3a0/0x420 [ 588.411998][T10546] ? __fget_files+0x2a/0x420 [ 588.416609][T10546] ksys_write+0x150/0x270 [ 588.420952][T10546] ? __pfx_ksys_write+0x10/0x10 [ 588.425818][T10546] do_syscall_64+0x14d/0xf80 [ 588.430420][T10546] ? trace_irq_disable+0x3b/0x150 [ 588.435452][T10546] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.441525][T10546] ? clear_bhb_loop+0x40/0x90 [ 588.446230][T10546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.452143][T10546] RIP: 0033:0x7f7852f9c799 [ 588.456565][T10546] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 588.476217][T10546] RSP: 002b:00007f7853e18028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 588.484670][T10546] RAX: ffffffffffffffda RBX: 00007f7853215fa0 RCX: 00007f7852f9c799 [ 588.492654][T10546] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000003 [ 588.500664][T10546] RBP: 00007f7853032bd9 R08: 0000000000000000 R09: 0000000000000000 [ 588.508653][T10546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 588.516657][T10546] R13: 00007f7853216038 R14: 00007f7853215fa0 R15: 00007ffef909e0b8 [ 588.524647][T10546] [ 588.528299][T10546] Kernel Offset: disabled [ 588.532642][T10546] Rebooting in 86400 seconds..