last executing test programs: 8m43.553978217s ago: executing program 4 (id=609): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000000, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x141, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) r3 = syz_open_dev$vim2m(0x0, 0xe9, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000080)=@mmap={0x0, 0x2, 0x4, 0x8, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'X\x00\b\x00'}}) write(r2, &(0x7f0000000100)='maxtcpc 0x50', 0xc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/i2c/devices/i2c-0/delete_device\x00', 0x1, 0x0) write(r4, &(0x7f0000000280)='0x50', 0x4) 8m40.436287614s ago: executing program 4 (id=618): r0 = socket(0x10, 0x3, 0x0) write(r0, 0x0, 0x0) r1 = fsopen(&(0x7f00000004c0)='ramfs\x00', 0x0) fsmount(r1, 0x0, 0xc) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000080)=@name={0x1e, 0x2, 0x3, {{0x2, 0x3}, 0x2}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x1, 0xffffffff}}, 0x10) bind$tipc(r5, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x8003}}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2, 0xf5ff}, 0x10) sendmsg$tipc(r6, &(0x7f0000000540)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x1, {{0x43, 0x3}, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0) 8m38.966983s ago: executing program 4 (id=624): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x6, 0xe1, 0x200, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x0, 0x8a, 0x79, 0x2, 0x10080, 0xfffffffe, 0x83f4, 0x129, 0x1, 0x16, 0x8, 0xc62d71, 0x401, 0x1, 0x405, 0x0, 0x81, 0x9, 0xf9a6, 0xa9, 0xff, 0x0, 0x2, 0x6, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007b, 0xffffffff, 0x1, 0x2], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0xb, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffff7fff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x3ff], [0x2, 0x4, 0x9, 0xc, 0x0, 0x2e6bf783, 0x80000001, 0x5, 0x40000005, 0x491, 0x9, 0x200026, 0x7f, 0x403, 0x102, 0x1, 0x41, 0x6, 0xee4e, 0x2000104, 0x1, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x9, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x3, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x2, 0x140f1, 0x5396, 0x4, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x80000000, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x2, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x44800}, 0x4004054) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4000800}, 0x4) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x2000000035, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf2, 0xd, 0x7fffffffffffe, 0xcd3, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x28, 0x0, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x4}]}, 0x28}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 8m37.809110895s ago: executing program 4 (id=628): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x190) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000001dc0)={0x50, 0xfffffffffffffffe, r1, {0x7, 0x2b, 0x0, 0x2b418842, 0x206, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}}, 0x50) statx(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file1\x00', 0x1000, 0x100, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x101}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24058041) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/serio/devices/serio0/drvctl\x00', 0x1, 0x0) write(r3, &(0x7f0000000200)='re', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/serio/devices/serio1/drvctl\x00', 0x1, 0x0) write(r4, &(0x7f0000000800)='res', 0x3) 8m37.495684389s ago: executing program 4 (id=633): r0 = socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) capset(0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0900000008000000010000003c00000042000000", @ANYRES32, @ANYBLOB="0000bb000000000000000000000000000000000006df4bf127e81a6908544dbc27cff9f96e3bc3792d00c03e0cd1bf8daa8beb78d25cf75649728dc2f7c46dcae3c517829acb0ebe4a5264c1fe13fa8926774b5b5361839131a17401697d20fc", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003, r4}, 0x38) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000240)={r4, &(0x7f0000000100), &(0x7f0000002240)=""/99}, 0x20) socket$nl_route(0x10, 0x3, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4085}, 0x40000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x2f, 0xfe, 0xa1, 0x3, 0x0, @dev={0xfe, 0x80, '\x00', 0x41}, @mcast2={0xff, 0x3}, 0x8000, 0xba08, 0x7a997c71}}) 8m34.882515207s ago: executing program 4 (id=640): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) eventfd2(0xe5c, 0x80000) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xc0ed4040, &(0x7f0000000340)={[{@noblock_validity}, {@lazytime}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@min_batch_time={'min_batch_time', 0x3d, 0x4a}}, {@nobarrier}, {@mblk_io_submit}, {@bh}, {@journal_async_commit}]}, 0xf5, 0x48b, &(0x7f0000000f40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r5, 0x0, 0xd, &(0x7f0000000340)="04", 0x1) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000200)=0x237a, 0x4) setsockopt$inet6_int(r5, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r5, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r5, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/35, 0x23}, 0x7}], 0x40000cb, 0x12141, 0x0) 8m19.260720014s ago: executing program 32 (id=640): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) eventfd2(0xe5c, 0x80000) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xc0ed4040, &(0x7f0000000340)={[{@noblock_validity}, {@lazytime}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@min_batch_time={'min_batch_time', 0x3d, 0x4a}}, {@nobarrier}, {@mblk_io_submit}, {@bh}, {@journal_async_commit}]}, 0xf5, 0x48b, &(0x7f0000000f40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r5, 0x0, 0xd, &(0x7f0000000340)="04", 0x1) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000200)=0x237a, 0x4) setsockopt$inet6_int(r5, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r5, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r5, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/35, 0x23}, 0x7}], 0x40000cb, 0x12141, 0x0) 8m2.447404484s ago: executing program 0 (id=696): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x74) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r4, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) accept4$inet6(r1, 0x0, 0x0, 0x80800) 8m1.84886223s ago: executing program 0 (id=697): socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}], 0xa8}, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x3e8, 0xf, 0x0, &(0x7f0000000100)="c1df0600000200000000000000a887", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 8m1.065783451s ago: executing program 0 (id=698): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() syz_emit_ethernet(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) lsetxattr$system_posix_acl(&(0x7f00000001c0)='.\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000340)={{}, {}, [], {0x2, 0x2}, [{0x8, 0x4}], {0x2}, {0x2}}, 0x2c, 0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x2) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x50000) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x80, 0x1, 0x4, 0x8001, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x465, 0x0, 0x8, 0x4, 0x0, @broadcast, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x700, 0x20, 0x0, 0x2, {{0x5, 0x4, 0x0, 0x25, 0x14, 0x0, 0x0, 0x1, 0x0, 0x0, @local, @empty}}}}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x300000e, 0x401d031, 0xffffffffffffffff, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) r4 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r4, &(0x7f0000000180)={0x18, 0x2, {0xfffe, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x1e) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@ipv6_getaddr={0x20, 0x16, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@IFA_TARGET_NETNSID={0x8, 0xa, 0x1}]}, 0x20}}, 0x24080) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000000)='./dev\x00', 0x1fe) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0x9c}, [@call={0x25}], {0x95, 0x0, 0xd00}}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x8, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x8000000, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) 7m59.919486868s ago: executing program 0 (id=701): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() syz_emit_ethernet(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) lsetxattr$system_posix_acl(&(0x7f00000001c0)='.\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000340)={{}, {}, [], {0x2, 0x2}, [{0x8, 0x4}], {0x2}, {0x2}}, 0x2c, 0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x2) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x50000) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x80, 0x1, 0x4, 0x8001, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x465, 0x0, 0x8, 0x4, 0x0, @broadcast, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x700, 0x20, 0x0, 0x2, {{0x5, 0x4, 0x0, 0x25, 0x14, 0x0, 0x0, 0x1, 0x0, 0x0, @local, @empty}}}}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x300000e, 0x401d031, 0xffffffffffffffff, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) r4 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r4, &(0x7f0000000180)={0x18, 0x2, {0xfffe, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x1e) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@ipv6_getaddr={0x20, 0x16, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@IFA_TARGET_NETNSID={0x8, 0xa, 0x1}]}, 0x20}}, 0x24080) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mkdir(&(0x7f0000000000)='./dev\x00', 0x1fe) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0x9c}, [@call={0x25}], {0x95, 0x0, 0xd00}}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x8, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x8000000, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) 7m55.435664551s ago: executing program 0 (id=705): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() syz_emit_ethernet(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) lsetxattr$system_posix_acl(&(0x7f00000001c0)='.\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000340)={{}, {}, [], {0x2, 0x2}, [{0x8, 0x4}], {0x2}, {0x2}}, 0x2c, 0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x2) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x50000) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x80, 0x1, 0x4, 0x8001, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x465, 0x0, 0x8, 0x4, 0x0, @broadcast, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x700, 0x20, 0x0, 0x2, {{0x5, 0x4, 0x0, 0x25, 0x14, 0x0, 0x0, 0x1, 0x0, 0x0, @local, @empty}}}}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x300000e, 0x401d031, 0xffffffffffffffff, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) r4 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r4, &(0x7f0000000180)={0x18, 0x2, {0xfffe, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x1e) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@ipv6_getaddr={0x20, 0x16, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@IFA_TARGET_NETNSID={0x8, 0xa, 0x1}]}, 0x20}}, 0x24080) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mkdir(&(0x7f0000000000)='./dev\x00', 0x1fe) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0x9c}, [@call={0x25}], {0x95, 0x0, 0xd00}}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x8, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x8000000, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) 7m51.159358979s ago: executing program 0 (id=709): socket$rds(0x15, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="240000001900000828bd7000fddbdf25021080030002ff04001e000008000500ac14143ec6b973faa11a1170a82e3aee29a808eccc6cb24770264cbcef0f5358f8f2b06ff747e64136c76fc8e4632db8ec3740e1c06feaa69d27bb4ae4fae1419795bc80dcb8c514694301"], 0x24}, 0x1, 0x0, 0x0, 0x48012}, 0x1) r0 = syz_ublk_setup_io_uring(0x2261, &(0x7f0000000300)={0x0, 0xd58c, 0x80, 0x2, 0x30b}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_TIMEOUT={0xb, 0x12, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000000c0), 0x1, 0x40, 0x1}) eventfd2(0x1, 0x80001) r4 = eventfd(0xe467) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, 0x0, 0x42, 0x8) r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0x3b5, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) syz_ublk_setup_queues(r11, r9, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x5, 0x255}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0xaf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x20000000, 0xe4, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x2, 0x2, 0x80000250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20084884) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000080)=r4, 0x1) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x21, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) 7m35.630047979s ago: executing program 33 (id=709): socket$rds(0x15, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="240000001900000828bd7000fddbdf25021080030002ff04001e000008000500ac14143ec6b973faa11a1170a82e3aee29a808eccc6cb24770264cbcef0f5358f8f2b06ff747e64136c76fc8e4632db8ec3740e1c06feaa69d27bb4ae4fae1419795bc80dcb8c514694301"], 0x24}, 0x1, 0x0, 0x0, 0x48012}, 0x1) r0 = syz_ublk_setup_io_uring(0x2261, &(0x7f0000000300)={0x0, 0xd58c, 0x80, 0x2, 0x30b}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_TIMEOUT={0xb, 0x12, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000000c0), 0x1, 0x40, 0x1}) eventfd2(0x1, 0x80001) r4 = eventfd(0xe467) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, 0x0, 0x42, 0x8) r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0x3b5, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) syz_ublk_setup_queues(r11, r9, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x5, 0x255}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0xaf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x20000000, 0xe4, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x2, 0x2, 0x80000250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20084884) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000080)=r4, 0x1) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x21, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) 1m5.237407862s ago: executing program 2 (id=1753): syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000040)=ANY=[], 0x3, 0x617, &(0x7f0000000dc0)="$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") socket$packet(0x11, 0x2, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r4, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000b80)="91f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be6890ee50e997fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b78938a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5e9838379c5a554eb896f7808d5904cd8da06fd5159085c9275f49e775e92fb106c2f10442d500891e58a3f851ff5c85244beacba25d854577d68ca555e88fc249340ab9bdd8680abbbde02b0307ef45cb7bebc905a984c7bbb7bb3c689ef8daa63ca62e496be091cc1c7d4f371acaaec43337aee", 0xf3}, {&(0x7f0000000cc0)="44900001000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b2568635bec8e020b41fb2f8009900000000000000000000000000001c8a9f7956583e26f6f0edc415851d0b8305fe66c2b7", 0xe4}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2090) sendto$inet(r4, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0xffff) 1m4.086048229s ago: executing program 2 (id=1756): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad08009a3fc36e961e1500e4340cd695", 0x10) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000000)=0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e24, 0x2, @private1, 0x8}, 0x1c) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x200840, &(0x7f0000000600)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030332c726573765f6c6576656c3d30303030303030303030303030303030303030362c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c636f686572656e63793d66756c6c2c6e6f61636c2c004c98065b85e5b137d63b2211c62c402045083da9bddc3b0d88d44ecd24ba5288d428197284f332858b83349af2c7646f1e07e91120d7f23ce20389bbc031d81d654f1ca08f61c92d90e6ea478843c1ad942c7c257f9ff5348dd038e947775991ad90f8861dada21d5fa2de7042b5e2cbbcd1ada2b568e375812eb0bc448e68eda4c70cf1d5adf566142ed45924fe72a1eb1a914faf754b9d94bf0fdc1f98c708bd89940b5ef96e328240c39559b35bc83c15c15104f3b3fe1945f0278c34e2399dadcd9776ac659afcbb239569140ab408ad87f15b353941"], 0x5, 0x4445, &(0x7f000000cd00)="$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") syz_mount_image$vfat(&(0x7f0000000200), &(0x7f00000000c0)='./bus\x00', 0x4071, 0x0, 0x1, 0x0, &(0x7f0000000000)) r4 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f000000a000)=[{0x0, 0x0, &(0x7f0000001600)=[{0x0}, {&(0x7f0000000300)="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", 0x1000}, {&(0x7f0000001300)="8260", 0x2}], 0x3, 0x0, 0x0, 0x4000804}], 0x1, 0x240008d0) r5 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) ioctl$USBDEVFS_RESETEP(r5, 0x80045503, &(0x7f0000000080)={0xd}) 1m2.400133136s ago: executing program 2 (id=1762): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) symlink(&(0x7f0000000080)='./file0/../file0/file0\x00', &(0x7f0000000140)='./file0/../file0/file0\x00') write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x28, 0x7fffffff, 0x4069a064, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffec}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000006200)="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", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x90, 0x0, 0xe00, {0x6, 0x3, 0x7, 0x101, 0xc5b, 0x2, {0x4, 0x8000000000000001, 0x8, 0x5, 0x7, 0x3, 0x7, 0xd75, 0x7, 0x703327eea4d9e39a, 0x7fff, r2, r3, 0x7, 0x1aeb9df5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m1.334774299s ago: executing program 2 (id=1766): openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000540), 0x0, 0x180) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f0000000580)) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f00000001c0)=0x1) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x6c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xfffc}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x21}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xe4}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) ioctl$VIDIOC_S_STD(r1, 0x40085618, &(0x7f0000000480)=0x7) 1m0.892856035s ago: executing program 2 (id=1767): syz_mount_image$xfs(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x4800802, &(0x7f0000009a40), 0x0, 0x9864, &(0x7f0000000140)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r0, &(0x7f0000000000)='3', 0x1, 0x4fed0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x128) ioctl$XFS_IOC_SCRUBV_METADATA(r1, 0xc0285840, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xae, 0x1, 0x0, &(0x7f00000099c0)=[{0x8, 0x1ff, 0xffffffff}]}) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/sys/net/vrf/strict_mode\x00', 0x1, 0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$PTRACE_GETSIGMASK(0x420a, r7, 0x8, &(0x7f0000000040)) getsockopt$IP_VS_SO_GET_DESTS(r6, 0x0, 0x484, &(0x7f0000009a80)=""/241, &(0x7f0000009b80)=0xf1) write(r6, 0x0, 0x0) r8 = fsopen(&(0x7f0000000180)='nfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000009bc0)=ANY=[@ANYBLOB="30000000bc6d347c5f5d5e8d5b4fffdd7d57c48a9469dadbe892addc0bbb61014ec524c6dd5e3335b06c7929d08df00ee70cd217ce4974aea6a783fd42434641aa8bdd6f5d3e58feb59591bc66530505ec5ca72be388374119fd5ecc069f275caded968e15238410f47596e2d1b5503e0f7dcb49b2f619e060c7edba8b287da4ec5e947e67d417fd2631ff55f0b35254206d63f9b5b357296b89e46329b02fc973c05b875b9a2b9353c106b4cd00de43a25d447b310f86bf28542afe8878d20240aec737f0e79c26cfed65385de2f1052f609d10024c1896fc70f11fa59ced33aec822accc40802c97", @ANYRES16=r5, @ANYBLOB="01002bbd7000fcdbdf251600000005000400000000000c00018008000100", @ANYRES32=r3, @ANYBLOB="0500030001000000"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x404c004) 1m0.085146649s ago: executing program 2 (id=1773): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x2, &(0x7f0000000000)=0x80000000000003) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x3) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000140)=0x11) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={0x0, 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) read$msr(r3, &(0x7f00000000c0)=""/45, 0x2d) r7 = socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r7, 0x0, 0x0, 0x40008d0, &(0x7f0000000200)={0xa, 0x4e24, 0x36c2, @loopback={0xff00000000000000}, 0x2}, 0x1c) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) write$binfmt_aout(r8, &(0x7f0000000540)=ANY=[], 0xff70) ioctl$TCXONC(r8, 0x540a, 0x2) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000100)) 45.522908274s ago: executing program 5 (id=1807): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x24008084}, 0x20000000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r7, 0x3e, 0xffffffff}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500400086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 45.009059756s ago: executing program 34 (id=1773): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x2, &(0x7f0000000000)=0x80000000000003) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x3) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000140)=0x11) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={0x0, 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) read$msr(r3, &(0x7f00000000c0)=""/45, 0x2d) r7 = socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r7, 0x0, 0x0, 0x40008d0, &(0x7f0000000200)={0xa, 0x4e24, 0x36c2, @loopback={0xff00000000000000}, 0x2}, 0x1c) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) write$binfmt_aout(r8, &(0x7f0000000540)=ANY=[], 0xff70) ioctl$TCXONC(r8, 0x540a, 0x2) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000100)) 44.933780647s ago: executing program 5 (id=1811): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3fd, &(0x7f0000000500)=0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000240)={0x80000011}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000690000/0x7000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000ff1000/0xc000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff3000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r6 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x4001, 0x800000c1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) io_pgetevents(r3, 0x1, 0x1, &(0x7f0000000100)=[{}], 0x0, 0x0) io_submit(r3, 0x1, &(0x7f0000000300)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000001c0)='m', 0xfdfe, 0x400000000000000}]) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @loopback, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x3c) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4040) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000010006ace27bd7000fbdbdf2564d1560c5ed03656044c4a4646dfff3d00000000", @ANYRES32=0x0, @ANYBLOB="8db20200211e0100060003006e657464657673696d3000000000000014001680100001800c00070001000000e300000014001400776c616e3100"/68], 0x5c}, 0x1, 0x0, 0x0, 0x4044085}, 0x48880) 43.130541542s ago: executing program 5 (id=1813): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000140)={'bridge_slave_0\x00', &(0x7f0000000200)=@ethtool_channels={0x2f, 0x3, 0x80, 0x9, 0x7, 0x7, 0x1, 0x8001, 0x1}}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r2, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000027bd7000fddbdf25010000000000000007410000004c00180000000073797a31000000000000000000000000000000000000000000000000c032f8e10000000000000000000000000000000000000000000000000000000000000000000000008226f61ed1bc82f38c8e2c1942732040af66f043f83174da6addcf332ec186c6edfbfd73ace0ba3e35a2b5df48492399686e8375c78f0a0f457851e144"], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8000000) getpeername$netlink(r1, &(0x7f0000000080), &(0x7f0000000100)=0xc) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2e, 0xca, 0x57, 0x8, 0x497, 0xc001, 0x6c24, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x7d, 0x0, 0x0, 0x3b, 0x2b, 0xd7}}]}}]}}, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000340)="2e1221b23bb601c494d3df173e75963d86dd9d90491c3248320000dbb8", 0x1d}, {&(0x7f0000000380)="0400000002e877dac8d405a184feadf99bf2f14bb6ce48505385b9cdfd", 0x1d}], 0x2) setsockopt$inet6_tcp_buf(r5, 0x6, 0x1f, &(0x7f0000000140)="e249a1c415e535a6be41305bbcb28f9c06ff2c3d981bddd626e26423ed0aa608ed0650876fe1446a4e27ee06a1505b2669ab020a8f34d544e36b0f41d1384c0cf63652a63da721ea44b1646955635792a44b855d149996938462d8ee67d2103543f3d5f9f6c5d7ef76969bb80196e3883bb6391d7221afb68fd5aff2d6718554681525646c620fcc938508846d7aa844c1725a33301e85bb3f7dcbe11d71b8a92567538be327864034ecf2345e305837271fc391118c60f00cc3e0a116413af36cb35eb291cf5875439192e5ce4d8feead27d0162ca463879958c91c38c921a22b", 0xe1) 39.286029234s ago: executing program 5 (id=1821): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$exfat(&(0x7f0000000080), &(0x7f0000000000)='./file1\x00', 0x2008802, &(0x7f0000000140)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0x0, @ANYBLOB=',errors=remount-ro,iocharset=macgreek,errors=remount-ro,iocharset=macturkish,keep_last_dots,iocharset=macinuit,fmask=00000000000000000001774,keep_last_dots,gid=', @ANYRESHEX=0xee01, @ANYBLOB="2c646d61736b3d30303030303030303430303030303030303030303030312c6572726f72733d72656d6f756e742d726f2c66756e633d504154485f434845434b2c00d68f80963e992f7a790f2a9437a29f8b4d470ae365120a367f816615bab1a73bcb0b34104466f040377b3f4ab5a9da23044717ccad042e8ceab3e5ee0a02b86bf4f8cd552aad29ee2912615d138189a059cae1a9f0c650f76fbda44cada54fb491e9ccd6856997ae44d04073d95a4780d15efe4ceeca4c12c9682120298580b5e8c054c336f3b7d648880a653348c06c67adacbad7c26ba9e6cb5357"], 0x7, 0x1532, &(0x7f0000004d00)="$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") fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0x0, 0x1000) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000480), 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0d03aebca5e18af170eb75084aee43c77f9000000000000000001393ff0200000000000800010d00002000080000000400004444b544da8fce953390b4b6a17bad4fac5201966758b8cd785a38a76b84dc095803461177da951c9dfce00cc1dff4f8c9aa89e6bded3f9f5edc507bf873ff3080047a50ff3cdaa38b9e4722bc4ad4fdb0f6cbbc677b4af09bc45280e0ccb0f2157c290b388d5eac877291ff11684117b279f67bfe485ef2bd6bfac61e0a61a42c5f25f846637bda7c4ca77ee2252a37fd3701d64b09e59e4a96eebebd54177b1d5abedc9bdc8a053f88e6"], 0x38}}, 0x0) dup3(r1, r2, 0x80000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r6, 0x7b2, &(0x7f00000031c0)={&(0x7f00000021c0)=[0x2, 0x1, 0x9, 0x3, 0x6, 0x4, 0xf, 0x4bc4, 0x5, 0x9, 0x5bf, 0x400, 0x8, 0x1, 0x2, 0x8, 0x452, 0x1, 0x6, 0xff, 0x450, 0x3, 0xcc, 0x5, 0x7fe0000, 0x7f0000, 0x2, 0x1, 0x7f, 0x9, 0x5232, 0x1, 0x7fff, 0x4, 0xffffffc0, 0x6, 0x5, 0x8001, 0xfffffff8, 0x400, 0x0, 0x8, 0x8, 0x101, 0x7fffffff, 0x4, 0x400, 0x5, 0x7fffffff, 0x3, 0x100, 0x40, 0x80000000, 0x3d, 0x6, 0xffffffff, 0x101, 0x7, 0x3ff, 0x0, 0x1, 0x1ff, 0xa3df, 0x7fffffff, 0x4, 0x6, 0x8, 0x1, 0x1, 0x4, 0xe, 0x1, 0x0, 0x6, 0x3ff, 0xb29d, 0x2, 0x10, 0xd, 0x0, 0x80000000, 0x3, 0x800, 0x4, 0x7fff, 0x5b12, 0xfff, 0x3, 0x3ff, 0x1, 0x8, 0x1, 0x4, 0x7, 0x80, 0xfffffffe, 0x4, 0x6, 0x9d, 0x7fffffff, 0x5, 0xb3b, 0xdb, 0x3, 0x8, 0x6, 0x7fffffff, 0x9, 0x2, 0xf4fccb, 0x8001, 0x0, 0x8, 0x9, 0x3, 0x4, 0x80000000, 0x8d, 0x394, 0xa, 0x1, 0xd, 0x16f, 0xff, 0x4, 0x5, 0x7f, 0x1000, 0x6, 0x81, 0x3, 0xb, 0x8, 0x1e3, 0x3, 0x7, 0x1, 0x8, 0xf, 0x7, 0xfbf, 0xd4f, 0xf3, 0x8, 0x0, 0x1, 0x81, 0x8001, 0x80000000, 0x10001, 0x3, 0xfb9, 0x2c08, 0x6, 0x1, 0x9e, 0xff, 0x1, 0x6, 0x9, 0x6, 0xffff, 0x3, 0xfffffff8, 0x4bb4, 0xd, 0x100, 0x7, 0x8, 0x2, 0xffffffff, 0x9, 0x7, 0x5, 0x6, 0x401, 0xaee3, 0x6, 0x6, 0x10000, 0x8001, 0x1, 0x3, 0xffff0000, 0x8, 0x118, 0x96cf, 0x6, 0x53fe, 0x701, 0x7, 0x0, 0x5, 0x2, 0xbea8, 0x0, 0x6, 0x0, 0x7fffffff, 0x2, 0xbc25, 0x6, 0x6, 0x0, 0x0, 0xa77, 0x5, 0x0, 0x33, 0xf, 0x10001, 0x5, 0x0, 0xfffffffb, 0x2, 0x20000001, 0x7, 0x2, 0xc61, 0x4ca, 0xfffff800, 0x5, 0xfffffff8, 0x76b, 0x3, 0x7, 0x8, 0x401, 0xffffff01, 0x800, 0x2, 0x7fffffff, 0xb, 0xffff1376, 0x6, 0x1, 0x6, 0xabe4, 0x7, 0xff, 0xd, 0x6, 0x9, 0xe73, 0x2, 0xd, 0x7, 0x6f8, 0xfffffffa, 0x5, 0xca, 0x5, 0x30a73a41, 0x5, 0x0, 0xffffffff, 0x5, 0x7, 0x6, 0x2, 0x4, 0xd, 0x7ff, 0x3, 0x5, 0xb0, 0x6, 0x800, 0x65db, 0x1000, 0x9, 0x100, 0x4, 0x8000, 0x0, 0x1ff, 0x5, 0x8, 0x9, 0xe9, 0x10, 0x5c, 0x80000000, 0x0, 0x8, 0x8, 0x6, 0x5, 0x3, 0x80, 0xc000000, 0x7f, 0x0, 0x7, 0x2, 0x8, 0x2, 0x4, 0xf, 0x8, 0x7, 0x2, 0xe9d, 0x0, 0x4, 0xc, 0x5, 0x4, 0x800, 0x1, 0x7, 0x9, 0x9, 0x5, 0xfffffff8, 0xa53e, 0x4, 0x7, 0x9, 0x5, 0x8, 0xffffffff, 0x0, 0x0, 0x40, 0x2, 0x7fff, 0x2, 0x47, 0x83, 0x2, 0x101, 0x7f, 0x1, 0x7, 0xb1b5, 0x9, 0x6, 0x0, 0x6, 0x1, 0x0, 0x8001, 0x0, 0x337, 0x8000, 0xfffffffa, 0xffff0000, 0xfffffffc, 0x5, 0x4, 0x4, 0x3, 0x1, 0x4, 0x6, 0x0, 0x10001, 0x7ff, 0x0, 0x9, 0x4, 0x100, 0x8001, 0x7, 0xd, 0x9, 0x56f5, 0x4, 0x2, 0x9, 0x8, 0xfffffae5, 0xffff, 0x2, 0x9, 0x7, 0xfffffff3, 0x5, 0x9, 0x80, 0x5fee, 0x1, 0xe, 0x6, 0x401, 0x9, 0x1ff, 0x3, 0x9, 0x1ff, 0xad9, 0x7, 0x8, 0x1, 0x0, 0x8, 0x2, 0xb0, 0x7fff, 0xb, 0x6, 0xffff, 0x7, 0xdb8, 0x1, 0x6, 0x5, 0x8, 0x59b, 0xff, 0x200, 0x908, 0x2, 0x0, 0x2000000, 0x4, 0xd, 0x7f, 0x5, 0xfffffff9, 0x3, 0xb8e, 0xff, 0xffffff5a, 0x1000, 0x3ff, 0x1ff, 0x8, 0x9, 0xfffffffe, 0x8, 0x8, 0x1ff, 0x2, 0x1, 0xffffffff, 0xfffffff9, 0xb, 0x80000001, 0x7fffffff, 0xfffffff5, 0x498d00, 0x8, 0x8, 0x9, 0x7, 0x2, 0x477, 0x4, 0x9, 0xfab, 0x1, 0x5, 0x4c5, 0x8970, 0x8, 0x9, 0x7ff, 0x80000001, 0xfffff8cf, 0x0, 0x7, 0x7f, 0x0, 0x9, 0xfe, 0x3, 0xe, 0x6, 0x80000000, 0x80000000, 0x2, 0x6, 0xfccf, 0x0, 0x8, 0x80000001, 0x2, 0x2, 0x5, 0x80, 0x3, 0x200, 0x80, 0x170, 0x53, 0x6, 0xfff, 0x81e, 0xa, 0x104, 0xd7, 0x7, 0x100, 0x7, 0x4, 0x5, 0xe000000, 0x4, 0x3, 0x6, 0xd, 0x1, 0xfffffff8, 0x8, 0xffffff8f, 0xff, 0x9, 0x7, 0x1f, 0x9, 0x123a3a61, 0x5, 0xfff, 0x1, 0x6, 0x2, 0xfffffff6, 0xe0, 0x4, 0x61, 0x8, 0x8, 0x0, 0x5, 0x2a, 0x4, 0x64, 0xcc3, 0xffff, 0x3, 0x2, 0x3, 0x5, 0xcd, 0x2, 0x4, 0x401, 0x5e20, 0x8, 0x1000, 0x5c7fbfdc, 0x2, 0xc, 0x8, 0x0, 0x21486ea, 0x9, 0x5d, 0x2d, 0x6, 0x622, 0x3, 0x9, 0x1, 0xfffffd32, 0x8001, 0x1, 0x6, 0x10000, 0xc, 0x80000000, 0x80000000, 0xffff, 0x5, 0x6, 0xd37, 0x4, 0x4, 0x0, 0x1000, 0xffff0000, 0x88ee, 0x894f, 0x9, 0x7, 0xd420, 0x80, 0x5, 0x2, 0x3, 0xd00, 0x7f, 0x59ba, 0x3, 0x401, 0xfff, 0x0, 0x8001, 0x6, 0x40, 0x8001, 0x7, 0x2, 0xd1, 0x80000000, 0x3, 0x7ff, 0xd70, 0xffff, 0x8, 0x80000000, 0xd0a, 0x8, 0x1, 0x5, 0x8000, 0x10, 0x4, 0x6, 0x1, 0x1, 0x81, 0x2, 0x99f, 0x80000000, 0x6, 0x7, 0x3c3, 0x8, 0xf06f, 0x2, 0x7fffffff, 0x4, 0x8f1, 0xfffffff7, 0x2, 0x4, 0x1, 0x401, 0x5, 0x7, 0x10001, 0x0, 0x5, 0x7, 0x0, 0x4, 0x8, 0x82e, 0x3fff8000, 0xd116, 0x7, 0x5, 0x7, 0x80000001, 0x1c2d, 0xf4, 0x4, 0x7, 0x1, 0x0, 0x3, 0x4, 0x81, 0x55, 0x4, 0x7, 0x6, 0x40, 0x0, 0x8, 0x8, 0x7ff, 0x400, 0x3, 0x3, 0x12bc, 0x5, 0x95, 0x4, 0x7, 0x2, 0x100, 0x2, 0x3, 0xfff, 0x10000, 0x1, 0x4, 0xd45e, 0x4, 0xfffffffd, 0x3, 0x2, 0x9, 0xdb4e, 0x7, 0xfff, 0x0, 0x9, 0x2, 0x4084, 0x1, 0x10, 0x4, 0x1, 0x1ff, 0x3, 0xefd, 0x3, 0x3a, 0x2, 0x0, 0x1, 0x0, 0x3, 0x7, 0x3, 0x2, 0xc56, 0x0, 0x0, 0xbf73, 0x388, 0x6, 0x40, 0xf125, 0x7, 0x8, 0xfff, 0x4, 0x4, 0xed0a, 0x1, 0xf, 0xe, 0x400, 0x3, 0x24b, 0x6, 0x80000001, 0x3, 0x7ff, 0x39d3, 0xee, 0x2, 0x7ff, 0x6, 0xff, 0x7fff, 0x2, 0x1, 0x2, 0x5, 0x5, 0xffffffff, 0x6, 0x7, 0x3, 0x4, 0x3, 0x800, 0x2, 0xb, 0x25a1, 0x2, 0x9, 0xffffffff, 0x4, 0x0, 0xfef, 0x5, 0x0, 0x4, 0x1ff, 0x101, 0x8, 0x8001, 0x3, 0x6, 0x8, 0x80, 0x3, 0xbfde, 0x4, 0x5, 0x3, 0x8, 0x5, 0x613d, 0x1, 0x5, 0x800000, 0x7, 0xb, 0x40, 0x4, 0x7f, 0x2, 0x8, 0x1, 0x6, 0x3, 0xffff, 0xb03, 0x4, 0x40, 0xe6, 0x5, 0x5, 0x6, 0x7, 0x8, 0x81, 0x10001, 0x4, 0x2, 0x4, 0x2, 0x1, 0xc, 0x9, 0xfffffff5, 0xcf64, 0xd, 0x4, 0x4, 0x0, 0x0, 0x4, 0x1, 0x6, 0x0, 0x3, 0x2, 0x5a7, 0x9, 0x1275, 0x6, 0x5, 0x1, 0x800, 0x0, 0x0, 0x6, 0xffffffff, 0x4, 0x6, 0x3, 0x4, 0x6, 0x0, 0x8, 0xbd, 0xffff8001, 0x3ff, 0x10001, 0x5, 0xdb, 0x0, 0x800, 0x80000001, 0x6, 0x5, 0x3000, 0x6, 0x7ff8000, 0x8, 0x4, 0x9, 0x5, 0x9, 0x1, 0x10001, 0x5, 0x8000, 0x5, 0x6, 0x8, 0x0, 0x80000000, 0x7, 0x5, 0x6, 0x8, 0x2, 0x0, 0x5, 0x80000000, 0x3, 0x8, 0xcf1, 0x9, 0x4, 0x4, 0x5, 0x3ff, 0xc, 0x3ff, 0xde, 0x1000, 0x5, 0x8001, 0x101, 0xc62, 0x86c8, 0x9, 0x10000, 0x10, 0x8, 0x60, 0x6, 0x9, 0x4, 0x1, 0x0, 0x6, 0xfffffff8, 0x1, 0x2, 0xb, 0x1, 0xe5, 0x7ff, 0x800, 0x5, 0x7fffffff, 0x7, 0x9, 0x2e, 0xd, 0x80, 0x0, 0x81, 0xffffffff, 0x6, 0x6, 0x101, 0x198000, 0x7, 0x1d, 0x8, 0x4, 0x8001, 0x2, 0x7, 0x5, 0xfffffffa, 0xffffffff, 0xffffffdd, 0x4, 0x400, 0x5, 0x2, 0x7, 0x6fc, 0x6, 0x1, 0x90a, 0x5, 0x0, 0x6, 0x200, 0x0, 0x4, 0x9, 0x8c51, 0x40, 0x40, 0x6000, 0x9, 0x6, 0x2, 0x4, 0x400, 0xc95d3e0, 0x81, 0x91c, 0xfffffffa, 0x8000, 0x1000, 0x80, 0x5, 0x2, 0xd, 0x1ad, 0x9, 0x181d5c26, 0x5, 0x7, 0x5, 0x8, 0x0, 0x7a, 0x9, 0x8, 0x6, 0x200, 0x8, 0x9, 0x7, 0x8, 0x8de, 0xfffff801, 0xced, 0x9, 0x1, 0x5, 0x9, 0x3, 0x7, 0xb, 0x2, 0x4, 0x4, 0x9, 0x6, 0xb0, 0x3, 0x5, 0x9, 0x4, 0x9, 0x5, 0x3, 0x1000, 0x81, 0x7, 0x6, 0x4, 0x5, 0x634], 0x2, 0x400, 0xd}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x400, 0x2c0, 0x2c0, 0xfeffffff, 0x218, 0x218, 0x368, 0x368, 0xffffffff, 0x368, 0x368, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010102, @multicast2, 0x0, 0xffffff00, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xc8, 0x100, 0x0, {}, [@common=@addrtype={{0x30}, {0x50, 0xe01, 0x1, 0x1}}, @common=@inet=@socket1={{0x28}, 0x1}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x5, @broadcast, @broadcast, @port=0x4e23, @gre_key=0x40}}}}, {{@uncond, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x600, 0x0, 0x0, 0x0, 0x1], 0x2}}}, @common=@addrtype={{0x30}, {0x1, 0x522, 0x1, 0x1}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x16, @broadcast, @remote, @gre_key=0xff, @port=0x4e20}}}}, {{@ip={@broadcast, @loopback, 0x0, 0x0, 'lo\x00', 'vxcan1\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@loopback, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {0xff}}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x10, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x1b}, @icmp_id=0x64, @gre_key=0x1ff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x460) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r8 = socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, r4, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0xb, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r8, 0x0, 0x0, 0x4000800) r9 = syz_open_procfs(0x0, &(0x7f00000003c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x2, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) 38.228632737s ago: executing program 5 (id=1824): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x2, &(0x7f0000000000)=0x80000000000003) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x3) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000140)=0x11) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={0x0, 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) read$msr(r3, &(0x7f00000000c0)=""/45, 0x2d) r7 = socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r7, 0x0, 0x0, 0x40008d0, &(0x7f0000000200)={0xa, 0x4e24, 0x36c2, @loopback={0xff00000000000000}, 0x2}, 0x1c) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000540)=ANY=[], 0xff70) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)) 28.698546282s ago: executing program 5 (id=1837): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x620a40, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x220) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x605, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYRESOCT=r4, @ANYBLOB="010025bd7000fcfedf2503000000180001801400020073797a5f74756e00000000000000000005000200000000000500050000008000050003", @ANYRES16=r6], 0x44}, 0x1, 0x0, 0x0, 0x20009085}, 0x40040c4) syz_usb_connect(0x0, 0x3b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040ac05a81201000102030109022900010100c0320904000000fffd01"], 0x0) r7 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r7, 0xc100565c, &(0x7f0000000140)={0x200000, 0x6, 0x4, {0xb, @pix={0x6, 0x4, 0x0, 0x5, 0x0, 0x0, 0x6, 0x2, 0x1, 0x1, 0x1, 0x5}}, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r8 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r8, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r9 = syz_open_dev$video(&(0x7f0000000000), 0x3, 0x40) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000003540)={'wlan0\x00'}) connect$inet6(r10, &(0x7f0000000200)={0xa, 0x4e23, 0x1, @private1, 0x5}, 0x1c) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r10, 0xc1105517, &(0x7f0000000500)={{0x8, 0x4, 0xfff, 0xcf, 'syz0\x00', 0x8d23}, 0x3, 0x1a3, 0xff, 0xffffffffffffffff, 0x0, 0x6, 'syz1\x00', &(0x7f00000001c0)}) ioctl$VIDIOC_REQBUFS(r9, 0xc0145608, &(0x7f0000000040)={0x1, 0x2, 0x2}) ioctl$SG_GET_COMMAND_Q(0xffffffffffffffff, 0x2270, 0x0) syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) 27.987449576s ago: executing program 35 (id=1837): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x620a40, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x220) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x605, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYRESOCT=r4, @ANYBLOB="010025bd7000fcfedf2503000000180001801400020073797a5f74756e00000000000000000005000200000000000500050000008000050003", @ANYRES16=r6], 0x44}, 0x1, 0x0, 0x0, 0x20009085}, 0x40040c4) syz_usb_connect(0x0, 0x3b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040ac05a81201000102030109022900010100c0320904000000fffd01"], 0x0) r7 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r7, 0xc100565c, &(0x7f0000000140)={0x200000, 0x6, 0x4, {0xb, @pix={0x6, 0x4, 0x0, 0x5, 0x0, 0x0, 0x6, 0x2, 0x1, 0x1, 0x1, 0x5}}, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r8 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r8, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r9 = syz_open_dev$video(&(0x7f0000000000), 0x3, 0x40) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000003540)={'wlan0\x00'}) connect$inet6(r10, &(0x7f0000000200)={0xa, 0x4e23, 0x1, @private1, 0x5}, 0x1c) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r10, 0xc1105517, &(0x7f0000000500)={{0x8, 0x4, 0xfff, 0xcf, 'syz0\x00', 0x8d23}, 0x3, 0x1a3, 0xff, 0xffffffffffffffff, 0x0, 0x6, 'syz1\x00', &(0x7f00000001c0)}) ioctl$VIDIOC_REQBUFS(r9, 0xc0145608, &(0x7f0000000040)={0x1, 0x2, 0x2}) ioctl$SG_GET_COMMAND_Q(0xffffffffffffffff, 0x2270, 0x0) syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) 11.75661109s ago: executing program 3 (id=1868): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000100)=0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) epoll_create(0x6) r2 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x10000004}) sendto$inet(r1, 0x0, 0x0, 0x54, &(0x7f0000000340)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000009, 0x200000005c832, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, 0x0) ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000693000/0x1000)=nil, 0x1000}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000dc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0xac, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x80, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0x8, 0x1, 'LED\x00'}]}}}, {0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_NG_TYPE={0x8}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xd4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x4000) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e0000000000101040000000000000000020000001c00188008000140a080000008000240000000020800034000000002240001801400018008000100e000000108000200e00000010c0002800500010000000000040016404400108008000140fffff800080002400000000108000140ffff1fc5080001400000068708000140000000"], 0xe0}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1b8, 0x19, 0x1, 0x0, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x36}, 0xfffc, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {0x0, 0x4}}, [@tmpl={0x104, 0x5, [{{@in6=@mcast2, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {{@in6=@empty, 0x0, 0x6c}, 0x0, @in=@local, 0x3507}, {{@in6=@remote, 0x0, 0x33}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x50}, {{@in=@remote, 0x4d5, 0x3c}, 0x0, @in6=@private1, 0x3d01, 0x5, 0x2, 0x0, 0x0, 0x9}]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_open_dev$video(0x0, 0x6, 0x400) close(0x3) r7 = socket(0x10, 0x803, 0x0) write(r7, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7bb0000b00000000000", 0x26) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) 11.295124729s ago: executing program 3 (id=1871): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() syz_emit_ethernet(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) lsetxattr$system_posix_acl(&(0x7f00000001c0)='.\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000340)={{}, {}, [], {0x2, 0x2}, [{0x8, 0x4}], {0x2}, {0x2}}, 0x2c, 0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x2) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x50000) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x80, 0x1, 0x4, 0x8001, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x465, 0x0, 0x8, 0x4, 0x0, @broadcast, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x700, 0x20, 0x0, 0x2, {{0x5, 0x4, 0x0, 0x25, 0x14, 0x0, 0x0, 0x1, 0x0, 0x0, @local, @empty}}}}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x300000e, 0x401d031, 0xffffffffffffffff, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) r4 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r4, &(0x7f0000000180)={0x18, 0x2, {0xfffe, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x1e) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@ipv6_getaddr={0x20, 0x16, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@IFA_TARGET_NETNSID={0x8, 0xa, 0x1}]}, 0x20}}, 0x24080) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mkdir(&(0x7f0000000000)='./dev\x00', 0x1fe) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0x9c}, [@call={0x25}], {0x95, 0x0, 0xd00}}, 0x0, 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x8, '\x00', 0x0, @sock_ops}, 0x94) 10.23771702s ago: executing program 3 (id=1873): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc_mnt/net/rpc/auth.unix.ip/flush\x00', 0x2, 0x0) write(r2, &(0x7f0000000400)='1\n', 0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x2, &(0x7f0000000000)=0x80000000000003) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) clock_gettime(0x6, &(0x7f0000000000)) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fchdir(r7) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x30, r6, 0x1, 0xfffffffd, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xff8e}]}, 0x30}}, 0x20000000) 8.656735649s ago: executing program 3 (id=1874): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x50) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001600010a"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000500), 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000300)=0x91, 0x4) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x800000e}, 0x1c) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) 8.144503391s ago: executing program 1 (id=1876): r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ftruncate(r0, 0x7) 7.420730022s ago: executing program 1 (id=1877): syz_emit_ethernet(0x2e, &(0x7f0000000480)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}, @val={@void, {0x8100, 0x7, 0x0, 0x3}}, {@mpls_uc={0x8847, {[], @ipv4=@icmp={{0x5, 0x4, 0x1, 0x9, 0x1c, 0x68, 0x0, 0x7d, 0x1, 0x0, @broadcast, @private=0xa010102}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0x81}}}}}}, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000001ac0), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0xc4c85513, &(0x7f0000000040)={0x1}) 7.392310587s ago: executing program 1 (id=1878): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x2, &(0x7f0000000000)=0x80000000000003) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x3) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000140)=0x11) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={0x0, 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) write$binfmt_aout(r7, &(0x7f0000000540)=ANY=[], 0xff70) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)) 5.881266362s ago: executing program 1 (id=1879): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000100)=0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) epoll_create(0x6) r2 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x10000004}) sendto$inet(r1, 0x0, 0x0, 0x54, &(0x7f0000000340)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000009, 0x200000005c832, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, 0x0) ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000693000/0x1000)=nil, 0x1000}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000dc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0xac, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x80, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0x8, 0x1, 'LED\x00'}]}}}, {0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_NG_TYPE={0x8}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xd4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x4000) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e0000000000101040000000000000000020000001c00188008000140a080000008000240000000020800034000000002240001801400018008000100e000000108000200e00000010c0002800500010000000000040016404400108008000140fffff800080002400000000108000140ffff1fc5080001400000068708000140000000"], 0xe0}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1b8, 0x19, 0x1, 0x0, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x36}, 0xfffc, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {0x0, 0x4}}, [@tmpl={0x104, 0x5, [{{@in6=@mcast2, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {{@in6=@empty, 0x0, 0x6c}, 0x0, @in=@local, 0x3507}, {{@in6=@remote, 0x0, 0x33}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x50}, {{@in=@remote, 0x4d5, 0x3c}, 0x0, @in6=@private1, 0x3d01, 0x5, 0x2, 0x0, 0x0, 0x9}]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_open_dev$video(0x0, 0x6, 0x400) close(0x3) r7 = socket(0x10, 0x803, 0x0) write(r7, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7bb0000b00000000000", 0x26) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) 5.650011844s ago: executing program 6 (id=1880): ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, &(0x7f0000000000)={0x281}) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x6, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r1, &(0x7f0000001780)=[{{&(0x7f0000000140)={0xa, 0x4e24, 0x8, @empty, 0x22}, 0x1c, 0x0}}], 0x1, 0xc040) mount$nfs4(&(0x7f0000000040)='/', 0x0, 0x0, 0x197841, 0x0) syz_io_uring_setup(0x490d, &(0x7f00000002c0)={0x0, 0xc419, 0x0, 0x3, 0x400010d, 0x0, 0x0}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0xb, 0x4004, @fd_index=0x9, 0xf8, 0x0, 0x0, 0x11, 0x1, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(0xffffffffffffffff, 0x24ca, 0x5515, 0x20, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="830405000000000020001280080001006774700014000280080004000100"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket(0x10, 0x803, 0x2) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, 0x0, 0x4040) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc008561c, &(0x7f0000000200)={0x980901, 0x51, @value=0x3}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r6, 0xc0205648, &(0x7f0000000240)={0x0, 0xdc, 0x100000, r1, 0x0, &(0x7f00000000c0)={0x980924, 0xecb6, '\x00', @p_u16=0x0}}) fallocate(r6, 0x2, 0x5, 0x4b6) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x748c3) syz_open_dev$tty1(0xc, 0x4, 0x2) chdir(&(0x7f0000000140)='./file0\x00') mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x7, &(0x7f0000000000/0x400000)=nil) 5.122923844s ago: executing program 6 (id=1881): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r0, 0xee01, 0x0) keyctl$join(0x1, &(0x7f0000000180)={'syz', 0x2}) capset(&(0x7f0000000080)={0x20071026}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r1, 0x4b71, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e24, 0xc, @private1, 0x1}, 0x1c) socket$inet6_icmp(0xa, 0x2, 0x3a) (async) socket$inet6_icmp(0xa, 0x2, 0x3a) socket$inet6(0xa, 0x3, 0x88) add_key(&(0x7f00000003c0)='id_resolver\x00', &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, r0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x1, 0x0, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) syz_clone3(&(0x7f0000000140)={0x4000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x2}, 0x7a) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1fffffff}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1fffffff}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d03000000000000000000000400000000000000000000000b030000000000000063"], 0x0, 0x52}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d03000000000000000000000400000000000000000000000b030000000000000063"], 0x0, 0x52}, 0x28) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) (async) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) unshare(0x400) (async) unshare(0x400) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="183000000100000000000000030000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000004000000f8ffffffb702000008000000b7030000652b0000850000000600000095"], &(0x7f0000000080)='GPL\x00', 0xa}, 0x94) 5.016752084s ago: executing program 7 (id=1809): ioctl$VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x2, 0x5, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file1\x00', 0x804, &(0x7f0000000500)={[{@shortname_winnt}, {@shortname_lower}, {@utf8}, {@utf8}, {@shortname_mixed}, {@shortname_lower}, {@rodir}, {@shortname_mixed}, {}, {@fat=@codepage={'codepage', 0x3d, '861'}}, {@uni_xlate}, {@uni_xlate}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@shortname_lower}, {@shortname_lower}]}, 0x1, 0x27b, &(0x7f0000000280)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0xbe, 0x0, &(0x7f00000001c0)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x41100, 0x6e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f00000005c0)=0x18) 4.464139914s ago: executing program 6 (id=1882): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$nilfs2(&(0x7f0000000180), &(0x7f0000000a80)='./file2\x00', 0x40c, &(0x7f00000001c0)=ANY=[], 0x1, 0xacd, &(0x7f0000000ac0)="$eJzs3V2IXFcdAPBzZ3c2m2RrpjW12+9oldaP7nbTRFtjm5QGRIQQ8EFoFQxpGmO2UUwpthaMfRBfSgulefIhFV98aVGRti8S+lCK0CKiFHyqRfApQsGHIrQru3vP7Mx/Z7g7m+zOzM7vB3fP3Hvu3P+5s/feuXPvPeckYGTVlv7u2zeZUnrx9RcO3/zSW88tTjnYnKOx9He8ZayeUirK8fGwvPfGltOPPnj6eKe0SHuX/ubxdORS8707U0rn0p50MTXSsw+fH3/31SPvvJxOP3H08NuvbczaryhaXtc3OhgAAPTJ0YsH9l37z7/cePX/XrnlUNrWnJ7Pzxvl+FR5XnyoPFHO58u11D5etAytJsJ84+VQC/ONdZivNU49zDfeJf5EWG69y3zbKuKPtUzrtN4wzPJ23EhFbaZlfDKlNDOz/Js8Lf2unyhmzpyaf/RsnwoKXHH/vTWltMcwasPYAJTBsDTs6mf8hV39PgIBLIv3C1c5F68sXJ7m0sbXFv/SA7XO72/h/iE9m1xONnv7j8Qf7Pi/+fnGxme0bMGt6W9XtaxX3o+myvF4HyE+v9Tr/p+X17wfMdW+/FXCjYlu9xGG5f5Ct3KObXI51qtb+eN2sVXdV6b5c7g/5Jf7wdJWG/+nw/I/Bjr70PX/IRq+NwBlGLIhbV6s64sBWN8eh4U+H3+AwRWfm1so5fz4XF/M31aRP1mRv70if0dF/s6KfBhlf3j8ufR8sXK9K/6m7/V62FRYxCd6LE+8Htlr/Pjcb6/KpdXWGz8+TwwDbeeb5+955KG/Lj//XzT3v4/L7T3/hGqU+9bFsIPE6+rNZ/8b7WFqXea7JhTnqg7zL73e3T5fsXtlOanlOLOqHNP5HctXdHd1m++m9uU3wnzby2EylDeen+wI78vnH/mgONVWmpX1rYf1mAjlyMeVq8s0lgPWI2+P7c//L259tdrMzMptrOlULx49NX/irnI8b6dvjdW3LU6f2+yCA5etW/2fxvL+3/z+mk7t9X+mmtPrtdbjwq6V6UXrcaERpu/tMv3ucjx/z31/bPvS9JnjP5x/5EqvPIy4s08+dfrY/PyJH3sxaC/SuZQGoBheVL74aUppAIpxJV7k48Kx+f4el4CNN/v4Yz+aPfvkU3eeeuzYyRMnT5yZ2z93z7375+a+fO/s0nn9bOvZ/VZ8XBhG18q3f79LAgAAAAAAAAAAAKzVyfdnL/z9ja/8Y7n+/0r9v1z/Pz/5m+v//zLU/w/V/JsPCOd6gLke36r69qGB1YkwX70cPhmWvzvEuTa871Nl2uzHr6z/n8PFdl1zea4L02P7vXm+6TA9tpcyEdogKdIvdrSW7zNl+kyZ/jpB/0x8d3vH6bGfy9jfZt4/8rae26fQLsVwyv+3vDXkdkxy/e9c3zu3V5LbfyiP/5NXd1yqnlAG3WbUK+z3OgKd/ae6/e83/51n3tS2iVvOS9a7jKIf5TYYhmdYcIoGDIjczm6tT/1/5uueOT3zp29MLg55tksPtF/xi+2XwuUY9P4nNzv+D3b2N/4q/e//84qesTUbOl/z8S/0mBdvAK3RgWe++a+WsOmGtcaP/Z/mdqB39xb/a2X8vDa3p7XFX3gpxI83hNbovhB/xxrjr1r/m9YX//4yfv7Y7rhtdfyZjvGXS1zU2ssRrxvn+3/5uvG3Q/yDYf1z2549r/86O2o8VMaHUTYs/cz2ql/9/8blr1d8DmN/OZ4PhPk5h9jfSa/lz89X5O+Ba8Pyi4rvty3Y/+/CzxYWfrVtRLoA/mqZVu0PU+X/NG+PjQ7jtZbxeofPdqsea2BYvaf/X0PW73J0GrZv4LJzZ5Abvx7jqz7f2mB85gsLC31t01eDwv3V78+/378T1h3/Cl2F7ffnXyX2/xvP4WP/vzE/9v/7rZAf+/+N74/968X82P9v/Dxj/78x/7qw3Ng/8HRF/vUV+TdU5N9YkX9TRf7NFfmfrsi/pSL/1or8ayryb6vI/2xF/ue653/YOmtbfrHSrf0dFcv/fEX+Vpfro4zq+sMoi/Xz7P8wOvL9n277/+6KfGB4nX9l7sGHfv+dxnL9/4lV/f8fKsfr5W/nn5Tj8b53ahlfzHujHH8/5A/69Q4YJbH9jPj9fntFPjC88nNe9m8YQUXnFnvi/bZu7VZ1O89nuHyhTL9Ypl8q0zvLdKZMZ8t0rkz3blL52BgP/u6PB54vVn7v7wr5a32ePNYHiu1E3b3G8sTrA70+zx7b8evV5cZfZ3UwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAvqkt/d23b7pI6cXXXzh84c9f/+3ilIPNORpLf8dbxurN96V0V5mOlemF8sVHHzx9vDX9uEyLtDcVqWhOT0cuNSPtTCmdS3vSxdRIzz58fvzdV4+883I6/cTRw2+/tnGfwLJiowMAAABAH/0/AAD//4pwE3k=") r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB="707f893e9db4f3bc4fc06b2c000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000500000014000180060001000a00000008000500010000004800028014000100000000000000000000000000000000010600020050000000080003000200000008000400010000000800050000000000080006000000000005000d0001000000"], 0x70}, 0x1, 0x0, 0x0, 0x4806}, 0x0) 4.38618048s ago: executing program 7 (id=1883): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x210000, &(0x7f0000000a00)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@bsdgroups}, {@dioread_nolock}, {@resgid}, {@noload}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@stripe={'stripe', 0x3d, 0x11}}, {@bh}, {@init_itable}]}, 0x1, 0x56f, &(0x7f0000003780)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x9, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r3, &(0x7f00000002c0), &(0x7f00000002c0)=""/157}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r3, &(0x7f00000000c0), &(0x7f0000000380)=""/75}, 0x20) 2.867425667s ago: executing program 7 (id=1884): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x816) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42792000) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x4000, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0x7) landlock_restrict_self(r2, 0x9) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') 2.834298161s ago: executing program 6 (id=1885): r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ftruncate(r0, 0x7) 2.380990264s ago: executing program 7 (id=1886): syz_open_dev$dvb_dvr(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$dvb_dvr(&(0x7f0000000040), 0x6, 0xd0800) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x202, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) readv(r1, &(0x7f0000000440)=[{&(0x7f0000000100)=""/228, 0xe4}], 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) ioctl$DVB_DVR_DMX_SET_BUFFER_SIZE(r0, 0x6f2d, 0xc) 2.287313254s ago: executing program 8 (id=1838): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000780)={0x0, {{0xa, 0x4e24, 0x6589e3, @mcast1, 0x8}}, {{0xa, 0x4e21, 0x4, @private1, 0xfffffff8}}}, 0x108) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRESDEC, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3], 0x20000600}, 0x1, 0x0, 0x0, 0x4000081}, 0x20004080) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000000)={@local, @empty, @val, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "5f1060", 0x24, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {0x8, 0x88be, 0x86ddffff}}}}}}}, 0x0) 2.122840017s ago: executing program 1 (id=1887): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$f2fs(&(0x7f0000010580), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYRES64=0x0], 0x8, 0x105dc, &(0x7f00000105c0)="$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") r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x400c884}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4004811}, 0x4000000) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1070000080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x145042, 0x2c) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r5, 0x29, 0xb, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x2000, 0x100000b, 0x2013, r4, 0x0) write$cgroup_subtree(r4, 0x0, 0x32600) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000180)=0x1) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000f00001c"], 0x4a) add_key(&(0x7f0000000740)='asymmetric\x00', 0x0, &(0x7f00000001c0)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b05003034313230300603553d030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657930820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a5113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973d773cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04f026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382040100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd50b07fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e25f825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b33e9adbe15aeb4869f8ccc773072f5d7cad6a3bff12bd00"/1391, 0x56f, 0xffffffffffffffff) 2.07527657s ago: executing program 6 (id=1888): mkdirat(0xffffffffffffff9c, 0x0, 0x190) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0]) read$FUSE(r0, 0x0, 0x0) write$FUSE_INIT(r0, 0x0, 0x0) statx(0xffffffffffffff9c, 0x0, 0x1000, 0x100, 0x0) timer_create(0x0, 0x0, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x101}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24058041) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/serio/devices/serio0/drvctl\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='re', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/serio/devices/serio1/drvctl\x00', 0x1, 0x0) write(r3, &(0x7f0000000800)='res', 0x3) 2.001160292s ago: executing program 8 (id=1889): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000140)={0x0, 0xfffffffc, 0x4, 0xfb, 0xfc, "810000000000000000000800000000001c00"}) (async) r2 = syz_open_pts(r1, 0x141601) fcntl$setstatus(r2, 0x4, 0x102800) write(r2, &(0x7f0000000000)="d5", 0xb840c58f) (async, rerun: 64) close_range(r0, 0xffffffffffffffff, 0x0) (rerun: 64) r3 = socket$kcm(0x10, 0x3, 0x0) write$cgroup_subtree(r3, &(0x7f0000001ec0)=ANY=[@ANYBLOB="13120000120091ef04e9befbbd00005c0a"], 0xfe33) (async) recvmsg$kcm(r3, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000039c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000400)=""/211, 0xd3}, {&(0x7f0000000b00)=""/157, 0x9d}, {0x0}, {0x0}], 0x6}, 0x0) 1.75869384s ago: executing program 8 (id=1890): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) setresuid(0x0, r2, r2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000800)={@id={0x2, 0x0, @d}, 0x40, 0x0, '\x00', @a}) 1.254354929s ago: executing program 8 (id=1891): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x2, 0x4, 0x8, 0x100, 0x0, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x14, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020692500000000002022206b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000f00000085000000060000007a0af0ff0000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffbfa300000000000007030000f0ffffffb704000000000000850000000200000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000340)='\x00'/14, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb4, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x9, &(0x7f00000002c0)=@framed={{0x18, 0x8}, [@func, @map_fd={0x18, 0x0, 0x1, 0x0, r2}, @generic={0x5d}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @exit]}, &(0x7f0000000040)='GPL\x00', 0x4}, 0x94) 1.106877862s ago: executing program 3 (id=1892): ioctl$VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x2, 0x5, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file1\x00', 0x804, &(0x7f0000000500)={[{@shortname_winnt}, {@shortname_lower}, {@utf8}, {@utf8}, {@shortname_mixed}, {@shortname_lower}, {@rodir}, {@shortname_mixed}, {}, {@fat=@codepage={'codepage', 0x3d, '861'}}, {@uni_xlate}, {@uni_xlate}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@shortname_lower}, {@shortname_lower}]}, 0x1, 0x27b, &(0x7f0000000280)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0xbe, 0x0, &(0x7f00000001c0)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x41100, 0x6e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f00000005c0)=0x18) 868.403146ms ago: executing program 7 (id=1893): r0 = socket(0x595e7faa011f74ad, 0x80000, 0x40) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'gretap0\x00'}) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0xa) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0x76, &(0x7f0000000180)={0x9, 0x1, 0x0, 0x1001, 0x0, 0x0, 0xffff}, &(0x7f0000000280)=0x20) r3 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r3, 0x1) r4 = open(&(0x7f00000000c0)='.\x00', 0x100000, 0x0) flock(r4, 0x1) flock(r4, 0x2) close_range(r1, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000300)={0x2, 0x4e20, @loopback}, 0x10) r9 = socket$rds(0x15, 0x5, 0x0) bind$rds(r9, &(0x7f0000000400)={0x2, 0x4e21, @loopback}, 0x10) sendmsg$rds(r8, &(0x7f0000000500)={&(0x7f0000000400)={0x2, 0x4e21, @loopback}, 0x10, 0x0}, 0x0) close(r8) close(r9) r10 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_GET_ONE_REG(r10, 0x4010aeab, &(0x7f0000000100)=@other={0x20300202000006a0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r5, 0xc0185502, &(0x7f0000002500)={{0x1, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0xffffffbffffffdfc, 0xfffffffc, 0x2a, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2, 0x0, 0x0, 0x3, 0x43, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x400, 0x1, 0x0, 0x0, 0xffff, 0xfffffffffffffffe, 0x4, 0xffffffff, 0x0, 0x1000, 0x0, 0x4, 0x9c, 0x6, 0x10000, 0x0, 0x0, 0xde4, 0x1, 0x0, 0x0, 0x0, 0x3, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x5691, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7fff, 0x5, 0x3, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x81, 0x0, 0x400000, 0x0, 0x40008, 0x101fc, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8000000000000, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x20000, 0xffffffff, 0x0, 0x0, 0x0, 0xfff, 0xa2, 0x200, 0x0, 0x0, 0xfffffffffffffffc, 0x80, 0xc0ab, 0x0, 0x201, 0x0, 0xfffffffb, 0x0, 0xfffffffc]}) add_key(&(0x7f0000000100)='big_key\x00', 0x0, &(0x7f0000000180)="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", 0x579, 0xffffffffffffffff) ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f0000000700)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) ptrace(0x4207, r11) 278.77165ms ago: executing program 3 (id=1894): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000dc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0x8, 0x1, 'LED\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) close(0x3) 155.185944ms ago: executing program 6 (id=1895): socket$pppoe(0x18, 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_int(r0, 0x0, 0x33, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, &(0x7f0000000300)=0x80000005, 0x4) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000002ac0)={0xf2, 0xf2}, 0x20) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000044402, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000300)='v', 0x34022}], 0x1000000000000364) 146.828402ms ago: executing program 8 (id=1896): ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x16, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="1802000003000000000000000000000085000000a0000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000940)="9782762f86f70000000000000000", 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 17.176734ms ago: executing program 1 (id=1897): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000100)=0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) epoll_create(0x6) r2 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x10000004}) sendto$inet(r1, 0x0, 0x0, 0x54, &(0x7f0000000340)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000009, 0x200000005c832, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000dc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0xac, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x80, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0x8, 0x1, 'LED\x00'}]}}}, {0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_NG_TYPE={0x8}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xd4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x4000) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e0000000000101040000000000000000020000001c00188008000140a080000008000240000000020800034000000002240001801400018008000100e000000108000200e00000010c0002800500010000000000040016404400108008000140fffff800080002400000000108000140ffff1fc5080001400000068708000140000000"], 0xe0}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1b8, 0x19, 0x1, 0x0, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x36}, 0xfffc, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {0x0, 0x4}}, [@tmpl={0x104, 0x5, [{{@in6=@mcast2, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {{@in6=@empty, 0x0, 0x6c}, 0x0, @in=@local, 0x3507}, {{@in6=@remote, 0x0, 0x33}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x50}, {{@in=@remote, 0x4d5, 0x3c}, 0x0, @in6=@private1, 0x3d01, 0x5, 0x2, 0x0, 0x0, 0x9}]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_open_dev$video(0x0, 0x6, 0x400) close(0x3) r7 = socket(0x10, 0x803, 0x0) write(r7, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7bb0000b00000000000", 0x26) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) 0s ago: executing program 7 (id=1898): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc_mnt/net/rpc/auth.unix.ip/flush\x00', 0x2, 0x0) write(r2, &(0x7f0000000400)='1\n', 0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x2, &(0x7f0000000000)=0x80000000000003) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) clock_gettime(0x6, &(0x7f0000000000)) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fchdir(r7) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x30, r6, 0x1, 0xfffffffd, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xff8e}]}, 0x30}}, 0x20000000) bind$bt_sco(0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): FS-fs (loop2): Stopped filesystem due to reason: 3 [ 628.216036][ T32] audit: type=1326 audit(1791088767.465:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12201 comm="syz.1.1604" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcac179e159 code=0x0 [ 628.246843][ T5612] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 628.391159][ T5612] usb 4-1: Using ep0 maxpacket: 8 [ 628.391953][ T5612] usb 4-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 628.395384][ T5612] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 628.395430][ T5612] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.399249][ T5612] usb 4-1: config 0 descriptor?? [ 628.662261][ T5612] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 628.878588][T12209] syzkaller0: entered promiscuous mode [ 628.878614][T12209] syzkaller0: entered allmulticast mode [ 629.104714][T12211] 9p: Bad value for 'wfdno' [ 629.467767][T12221] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1608'. [ 629.467799][T12221] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1608'. [ 629.472013][ T192] usb 4-1: USB disconnect, device number 38 [ 629.672783][T12221] bond1: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 629.692762][T12221] bond1 (unregistering): Released all slaves [ 630.037677][T12238] loop5: detected capacity change from 0 to 256 [ 630.169349][T12233] loop1: detected capacity change from 0 to 512 [ 630.248549][T12233] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 630.248621][T12233] ext4 filesystem being mounted at /329/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 630.332403][T12241] loop6: detected capacity change from 0 to 512 [ 630.388253][T12241] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 630.499453][ T8320] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 631.588943][ T32] audit: type=1326 audit(1791088770.835:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12257 comm="syz.2.1617" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f69a579e159 code=0x0 [ 631.763657][T12265] syzkaller0: entered promiscuous mode [ 631.763681][T12265] syzkaller0: entered allmulticast mode [ 631.797978][ T5607] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 632.431775][ T2017] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 632.761393][T12289] mtrr: base(0xe3b7000) is not aligned on a size(0x0000) boundary [ 632.761498][T12289] mtrr: base(0xe3b7000) is not aligned on a size(0x0000) boundary [ 632.761584][T12289] mtrr: base(0xe3b7000) is not aligned on a size(0x0000) boundary [ 632.761669][T12289] mtrr: base(0xe3b7000) is not aligned on a size(0x0000) boundary [ 632.761754][T12289] mtrr: base(0xe3b7000) is not aligned on a size(0x0000) boundary [ 632.761839][T12289] mtrr: base(0xe3b7000) is not aligned on a size(0x0000) boundary [ 632.761947][T12289] mtrr: base(0xe3b7000) is not aligned on a size(0x0000) boundary [ 632.762032][T12289] mtrr: base(0xe3b7000) is not aligned on a size(0x0000) boundary [ 632.762120][T12289] mtrr: base(0xe3b7000) is not aligned on a size(0x0000) boundary [ 632.762205][T12289] mtrr: base(0xe3b7000) is not aligned on a size(0x0000) boundary [ 632.762292][T12289] mtrr: base(0xe3b7000) is not aligned on a size(0x0000) boundary [ 632.762376][T12289] mtrr: base(0xe3b7000) is not aligned on a size(0x0000) boundary [ 632.762471][T12289] mtrr: base(0xe3b7000) is not aligned on a size(0x0000) boundary [ 632.762561][T12289] mtrr: base(0xe3b7000) is not aligned on a size(0x0000) boundary [ 632.762647][T12289] mtrr: base(0xe3b7000) is not aligned on a size(0x0000) boundary [ 632.762733][T12289] mtrr: base(0xe3b7000) is not aligned on a size(0x0000) boundary [ 632.762820][T12289] mtrr: base(0xe3b7000) is not aligned on a size(0x0000) boundary [ 632.762905][T12289] mtrr: base(0xe3b7000) is not aligned on a size(0x0000) boundary [ 632.762989][T12289] mtrr: base(0xe3b7000) is not aligned on a size(0x0000) boundary [ 632.763073][T12289] mtrr: base(0xe3b7000) is not aligned on a size(0x0000) boundary [ 632.763160][T12289] mtrr: base(0xe3b7000) is not aligned on a size(0x0000) boundary [ 632.763246][T12289] mtrr: base(0xe3b7000) is not aligned on a size(0x0000) boundary [ 632.763331][T12289] mtrr: base(0xe3b7000) is not aligned on a size(0x0000) boundary [ 632.763419][T12289] mtrr: base(0xe3b7000) is not aligned on a size(0x0000) boundary [ 632.763515][T12289] mtrr: base(0xe3b7000) is not aligned on a size(0x0000) boundary [ 632.763601][T12289] mtrr: base(0xe3b7000) is not aligned on a size(0x0000) boundary [ 632.763685][T12289] mtrr: base(0xe3b7000) is not aligned on a size(0x0000) boundary [ 632.763770][T12289] mtrr: base(0xe3b7000) is not aligned on a size(0x0000) boundary [ 632.763858][T12289] mtrr: base(0xe3b7000) is not aligned on a size(0x0000) boundary [ 632.763943][T12289] mtrr: base(0xe3b7000) is not aligned on a size(0x0000) boundary [ 632.764028][T12289] mtrr: base(0xe3b7000) is not aligned on a size(0x0000) boundary [ 632.764113][T12289] mtrr: base(0xe3b7000) is not aligned on a size(0x0000) boundary [ 632.764200][T12289] mtrr: base(0xe3b7000) is not aligned on a size(0x0000) boundary [ 632.764287][T12289] mtrr: base(0xe3b7000) is not aligned on a size(0x0000) boundary [ 632.764373][T12289] mtrr: base(0xe3b7000) is not aligned on a size(0x0000) boundary [ 632.764461][T12289] mtrr: base(0xe3b7000) is not aligned on a size(0x0000) boundary [ 632.764558][T12289] mtrr: base(0xe3b7000) is not aligned on a size(0x0000) boundary [ 632.764644][T12289] mtrr: base(0xe3b7000) is not aligned on a size(0x0000) boundary [ 632.764730][T12289] mtrr: base(0xe3b7000) is not aligned on a size(0x0000) boundary [ 632.764815][T12289] mtrr: base(0xe3b7000) is not aligned on a size(0x0000) boundary [ 632.764902][T12289] mtrr: base(0xe3b7000) is not aligned on a size(0x0000) boundary [ 632.764986][T12289] mtrr: base(0xe3b7000) is not aligned on a size(0x0000) boundary [ 632.765072][T12289] mtrr: base(0xe3b7000) is not aligned on a size(0x0000) boundary [ 632.765158][T12289] mtrr: base(0xe3b7000) is not aligned on a size(0x0000) boundary [ 632.765246][T12289] mtrr: base(0xe3b7000) is not aligned on a size(0x0000) boundary [ 632.765332][T12289] mtrr: base(0xe3b7000) is not aligned on a size(0x0000) boundary [ 632.765418][T12289] mtrr: base(0xe3b7000) is not aligned on a size(0x0000) boundary [ 632.765511][T12289] mtrr: base(0xe3b7000) is not aligned on a size(0x0000) boundary [ 632.765598][T12289] mtrr: base(0xe3b7000) is not aligned on a size(0x0000) boundary [ 632.765685][T12289] mtrr: base(0xe3b7000) is not aligned on a size(0x0000) boundary [ 632.765770][T12289] mtrr: base(0xe3b7000) is not aligned on a size(0x0000) boundary [ 632.765857][T12289] mtrr: base(0xe3b7000) is not aligned on a size(0x0000) boundary [ 632.765944][T12289] mtrr: base(0xe3b7000) is not aligned on a size(0x0000) boundary [ 632.766028][T12289] mtrr: base(0xe3b7000) is not aligned on a size(0x0000) boundary [ 632.766114][T12289] mtrr: base(0xe3b7000) is not aligned on a size(0x0000) boundary [ 632.766199][T12289] mtrr: base(0xe3b7000) is not aligned on a size(0x0000) boundary [ 632.766286][T12289] mtrr: base(0xe3b7000) is not aligned on a size(0x0000) boundary [ 632.766371][T12289] mtrr: base(0xe3b7000) is not aligned on a size(0x0000) boundary [ 632.766455][T12289] mtrr: base(0xe3b7000) is not aligned on a size(0x0000) boundary [ 632.766548][T12289] mtrr: base(0xe3b7000) is not aligned on a size(0x0000) boundary [ 632.766635][T12289] mtrr: base(0xe3b7000) is not aligned on a size(0x0000) boundary [ 632.766720][T12289] mtrr: base(0xe3b7000) is not aligned on a size(0x0000) boundary [ 632.766805][T12289] mtrr: base(0xe3b7000) is not aligned on a size(0x0000) boundary [ 632.766891][T12289] mtrr: base(0xe3b7000) is not aligned on a size(0x0000) boundary [ 632.766978][T12289] mtrr: base(0xe3b7000) is not aligned on a size(0x0000) boundary [ 632.837872][ T2017] usb 6-1: Using ep0 maxpacket: 8 [ 632.854330][ T2017] usb 6-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 632.887802][ T2017] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 632.887835][ T2017] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.987920][ T2017] usb 6-1: config 0 descriptor?? [ 633.233002][T12298] loop2: detected capacity change from 0 to 256 [ 633.536936][T12300] loop6: detected capacity change from 0 to 256 [ 633.549211][ T2017] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 633.549374][T12300] exfat: Unknown parameter './proc' [ 633.554527][T12283] FAULT_INJECTION: forcing a failure. [ 633.554527][T12283] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 633.554556][T12283] CPU: 1 UID: 0 PID: 12283 Comm: syz.5.1622 Tainted: G L syzkaller #0 PREEMPT(full) [ 633.554590][T12283] Tainted: [L]=SOFTLOCKUP [ 633.554598][T12283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 633.554609][T12283] Call Trace: [ 633.554617][T12283] [ 633.554625][T12283] dump_stack_lvl+0xe8/0x150 [ 633.554653][T12283] should_fail_ex+0x3eb/0x540 [ 633.554679][T12283] _copy_to_user+0x31/0xb0 [ 633.554701][T12283] simple_read_from_buffer+0xe1/0x170 [ 633.554727][T12283] proc_fail_nth_read+0x1bb/0x230 [ 633.554753][T12283] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 633.554777][T12283] ? rw_verify_area+0x24a/0x4c0 [ 633.554798][T12283] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 633.554818][T12283] vfs_read+0x213/0xa80 [ 633.554842][T12283] ? __pfx___mutex_lock+0x10/0x10 [ 633.554862][T12283] ? __pfx_vfs_read+0x10/0x10 [ 633.554882][T12283] ? __fget_files+0x2a/0x420 [ 633.554900][T12283] ? __fget_files+0x3a2/0x420 [ 633.554917][T12283] ? __fget_files+0x2a/0x420 [ 633.554939][T12283] ? fdget+0x1ac/0x250 [ 633.554967][T12283] ksys_read+0x150/0x270 [ 633.554989][T12283] ? __pfx_ksys_read+0x10/0x10 [ 633.555020][T12283] do_syscall_64+0x166/0x520 [ 633.555037][T12283] ? trace_irq_disable+0x3b/0x140 [ 633.555055][T12283] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.555074][T12283] ? clear_bhb_loop+0x70/0xc0 [ 633.555096][T12283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.555115][T12283] RIP: 0033:0x7f2f24f5e98e [ 633.555133][T12283] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 633.555149][T12283] RSP: 002b:00007f2f231f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 633.555172][T12283] RAX: ffffffffffffffda RBX: 00007f2f231f66c0 RCX: 00007f2f24f5e98e [ 633.555186][T12283] RDX: 000000000000000f RSI: 00007f2f231f60a0 RDI: 0000000000000004 [ 633.555199][T12283] RBP: 00007f2f231f6090 R08: 0000000000000000 R09: 0000000000000000 [ 633.555211][T12283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 633.555222][T12283] R13: 00007f2f25226038 R14: 00007f2f25225fa0 R15: 00007fff01dd03d8 [ 633.555253][T12283] [ 633.907806][ T5711] usb 6-1: USB disconnect, device number 25 [ 634.894370][T12319] FAULT_INJECTION: forcing a failure. [ 634.894370][T12319] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 634.894415][T12319] CPU: 0 UID: 0 PID: 12319 Comm: syz.6.1631 Tainted: G L syzkaller #0 PREEMPT(full) [ 634.894444][T12319] Tainted: [L]=SOFTLOCKUP [ 634.894452][T12319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 634.894464][T12319] Call Trace: [ 634.894472][T12319] [ 634.894482][T12319] dump_stack_lvl+0xe8/0x150 [ 634.894512][T12319] should_fail_ex+0x3eb/0x540 [ 634.894539][T12319] _copy_to_user+0x31/0xb0 [ 634.894564][T12319] simple_read_from_buffer+0xe1/0x170 [ 634.894592][T12319] proc_fail_nth_read+0x1bb/0x230 [ 634.894618][T12319] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 634.894644][T12319] ? rw_verify_area+0x24a/0x4c0 [ 634.894668][T12319] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 634.894689][T12319] vfs_read+0x213/0xa80 [ 634.894717][T12319] ? __pfx___mutex_lock+0x10/0x10 [ 634.894740][T12319] ? __pfx_vfs_read+0x10/0x10 [ 634.894764][T12319] ? __fget_files+0x2a/0x420 [ 634.894783][T12319] ? __fget_files+0x3a2/0x420 [ 634.894802][T12319] ? __fget_files+0x2a/0x420 [ 634.894827][T12319] ? fdget+0x1ac/0x250 [ 634.894855][T12319] ksys_read+0x150/0x270 [ 634.894878][T12319] ? __pfx_ksys_read+0x10/0x10 [ 634.894910][T12319] do_syscall_64+0x166/0x520 [ 634.894932][T12319] ? trace_irq_disable+0x3b/0x140 [ 634.894950][T12319] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.894970][T12319] ? clear_bhb_loop+0x70/0xc0 [ 634.894993][T12319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.895013][T12319] RIP: 0033:0x7fd4baf5e98e [ 634.895033][T12319] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 634.895051][T12319] RSP: 002b:00007fd4bbf18fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 634.895075][T12319] RAX: ffffffffffffffda RBX: 00007fd4bbf196c0 RCX: 00007fd4baf5e98e [ 634.895090][T12319] RDX: 000000000000000f RSI: 00007fd4bbf190a0 RDI: 0000000000000004 [ 634.895104][T12319] RBP: 00007fd4bbf19090 R08: 0000000000000000 R09: 0000000000000000 [ 634.895116][T12319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 634.895129][T12319] R13: 00007fd4bb226128 R14: 00007fd4bb226090 R15: 00007ffc71f34bc8 [ 634.895165][T12319] [ 635.004634][T12322] syzkaller0: entered promiscuous mode [ 635.004657][T12322] syzkaller0: entered allmulticast mode [ 635.162436][ T48] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 635.321174][ T48] usb 6-1: Using ep0 maxpacket: 8 [ 635.322777][ T48] usb 6-1: New USB device found: idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 635.323697][ T48] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 635.323718][ T48] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 635.323733][ T48] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 635.323746][ T48] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 635.323760][ T48] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 635.323785][ T48] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.337339][ T48] usbtmc 6-1:16.0: probe with driver usbtmc failed with error -22 [ 635.424908][ T32] audit: type=1326 audit(1791088774.675:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12327 comm="syz.6.1635" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd4baf9e159 code=0x0 [ 635.620242][ T32] audit: type=1326 audit(1791088774.865:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12313 comm="syz.5.1630" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2f24f9e159 code=0x0 [ 635.728246][ T48] usb 6-1: USB disconnect, device number 26 [ 635.943323][T12343] syz.1.1637: vmalloc error: size 4503599627370496, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 635.943428][T12343] CPU: 0 UID: 0 PID: 12343 Comm: syz.1.1637 Tainted: G L syzkaller #0 PREEMPT(full) [ 635.943458][T12343] Tainted: [L]=SOFTLOCKUP [ 635.943466][T12343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 635.943496][T12343] Call Trace: [ 635.943505][T12343] [ 635.943515][T12343] dump_stack_lvl+0xe8/0x150 [ 635.943545][T12343] warn_alloc+0x24d/0x270 [ 635.943576][T12343] ? __pfx_warn_alloc+0x10/0x10 [ 635.943612][T12343] ? add_lock_to_list+0xc7/0x100 [ 635.943643][T12343] __vmalloc_node_range_noprof+0x12c/0x16f0 [ 635.943697][T12343] ? lock_acquire+0x115/0x350 [ 635.943733][T12343] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 635.943761][T12343] ? down_write+0x166/0x200 [ 635.943784][T12343] ? __pfx_down_write+0x10/0x10 [ 635.943805][T12343] ? disksize_store+0x121/0x3e0 [ 635.943914][T12343] vzalloc_noprof+0xb2/0xe0 [ 635.943936][T12343] ? disksize_store+0x121/0x3e0 [ 635.943960][T12343] disksize_store+0x121/0x3e0 [ 635.943980][T12343] ? sysfs_kf_write+0x166/0x260 [ 635.944016][T12343] ? __pfx_sysfs_kf_write+0x10/0x10 [ 635.944035][T12343] kernfs_fop_write_iter+0x3a4/0x540 [ 635.944066][T12343] vfs_write+0x612/0xba0 [ 635.944100][T12343] ? __pfx_vfs_write+0x10/0x10 [ 635.944127][T12343] ? __fget_files+0x3a2/0x420 [ 635.944148][T12343] ? __fget_files+0x2a/0x420 [ 635.944175][T12343] ? fdget+0x1ac/0x250 [ 635.944205][T12343] ksys_write+0x150/0x270 [ 635.944231][T12343] ? __pfx_ksys_write+0x10/0x10 [ 635.944269][T12343] do_syscall_64+0x166/0x520 [ 635.944289][T12343] ? trace_irq_disable+0x3b/0x140 [ 635.944309][T12343] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.944332][T12343] ? clear_bhb_loop+0x70/0xc0 [ 635.944357][T12343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.944377][T12343] RIP: 0033:0x7fcac179e159 [ 635.944400][T12343] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 635.944418][T12343] RSP: 002b:00007fcac2601028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 635.944441][T12343] RAX: ffffffffffffffda RBX: 00007fcac1a25fa0 RCX: 00007fcac179e159 [ 635.944457][T12343] RDX: 0000000000000002 RSI: 0000200000000140 RDI: 000000000000000b [ 635.944471][T12343] RBP: 00007fcac183506b R08: 0000000000000000 R09: 0000000000000000 [ 635.944495][T12343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 635.944510][T12343] R13: 00007fcac1a26038 R14: 00007fcac1a25fa0 R15: 00007fffd6a2f0d8 [ 635.944551][T12343] [ 635.945351][T12343] Mem-Info: [ 635.945364][T12343] active_anon:64997 inactive_anon:36172 isolated_anon:0 [ 635.945364][T12343] active_file:2986 inactive_file:59220 isolated_file:0 [ 635.945364][T12343] unevictable:0 dirty:335 writeback:0 [ 635.945364][T12343] slab_reclaimable:12419 slab_unreclaimable:96549 [ 635.945364][T12343] mapped:34751 shmem:94675 pagetables:1547 [ 635.945364][T12343] sec_pagetables:0 bounce:0 [ 635.945364][T12343] kernel_misc_reclaimable:0 [ 635.945364][T12343] free:1204267 free_pcp:15714 free_cma:0 [ 636.148432][T12343] Node 0 active_anon:257384kB inactive_anon:144688kB active_file:11944kB inactive_file:236636kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:138988kB dirty:1360kB writeback:0kB shmem:375784kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12820kB pagetables:5992kB sec_pagetables:12kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 636.148495][T12343] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:244kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:40kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:116kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 636.187585][T12343] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 636.187652][T12343] lowmem_reserve[]: 0 2486 2486 2486 2486 [ 636.187692][T12343] Node 0 DMA32 free:871420kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:256584kB inactive_anon:144688kB active_file:11944kB inactive_file:236636kB unevictable:0kB writepending:1360kB zspages:1392kB present:3129332kB managed:2546540kB mlocked:0kB bounce:0kB free_pcp:58340kB local_pcp:29472kB free_cma:0kB [ 636.187753][T12343] lowmem_reserve[]: 0 0 0 0 0 [ 636.187789][T12343] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 636.187843][T12343] lowmem_reserve[]: 0 0 0 0 0 [ 636.187879][T12343] Node 1 Normal free:3937844kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:244kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:244kB local_pcp:0kB free_cma:0kB [ 636.187935][T12343] lowmem_reserve[]: 0 0 0 0 0 [ 636.187978][T12343] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 636.188126][T12343] Node 0 DMA32: 3824*4kB (UM) 1144*8kB (UM) 1503*16kB (UME) 1096*32kB (UME) 866*64kB (UME) 358*128kB (UME) 110*256kB (UME) 26*512kB (UM) 8*1024kB (ME) 9*2048kB (UM) 151*4096kB (UM) = 871408kB [ 636.188292][T12343] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 636.188394][T12343] Node 1 Normal: 3*4kB (UM) 5*8kB (UM) 8*16kB (UM) 4*32kB (U) 8*64kB (UM) 4*128kB (UM) 1*256kB (M) 2*512kB (M) 1*1024kB (M) 3*2048kB (UM) 959*4096kB (M) = 3937844kB [ 636.188557][T12343] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 636.188574][T12343] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 636.193287][T12343] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 636.193307][T12343] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 636.193323][T12343] 155914 total pagecache pages [ 636.193331][T12343] 0 pages in swap cache [ 636.193338][T12343] Free swap = 124292kB [ 636.193346][T12343] Total swap = 124996kB [ 636.193354][T12343] 2097051 pages RAM [ 636.193362][T12343] 0 pages HighMem/MovableOnly [ 636.193369][T12343] 428800 pages reserved [ 636.193376][T12343] 0 pages cma reserved [ 636.394989][ T32] audit: type=1800 audit(1791088775.635:175): pid=12351 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1638" name="file0" dev="tmpfs" ino=1893 res=0 errno=-22 [ 636.528361][T12349] loop5: detected capacity change from 0 to 256 [ 639.137450][T12378] loop1: detected capacity change from 0 to 256 [ 639.387719][T12384] syzkaller0: entered promiscuous mode [ 639.387744][T12384] syzkaller0: entered allmulticast mode [ 639.707961][T12389] FAULT_INJECTION: forcing a failure. [ 639.707961][T12389] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 639.707995][T12389] CPU: 0 UID: 0 PID: 12389 Comm: syz.1.1649 Tainted: G L syzkaller #0 PREEMPT(full) [ 639.708022][T12389] Tainted: [L]=SOFTLOCKUP [ 639.708030][T12389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 639.708041][T12389] Call Trace: [ 639.708050][T12389] [ 639.708058][T12389] dump_stack_lvl+0xe8/0x150 [ 639.708088][T12389] should_fail_ex+0x3eb/0x540 [ 639.708113][T12389] _copy_from_user+0x2d/0xb0 [ 639.708136][T12389] ___sys_sendmsg+0x1c6/0x360 [ 639.708160][T12389] ? __lock_acquire+0x747/0x2de0 [ 639.708188][T12389] ? __pfx____sys_sendmsg+0x10/0x10 [ 639.708249][T12389] ? __fget_files+0x3a2/0x420 [ 639.708270][T12389] ? __fget_files+0x2a/0x420 [ 639.708301][T12389] __x64_sys_sendmsg+0x1b1/0x290 [ 639.708326][T12389] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 639.708370][T12389] do_syscall_64+0x166/0x520 [ 639.708390][T12389] ? trace_irq_disable+0x3b/0x140 [ 639.708409][T12389] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.708432][T12389] ? clear_bhb_loop+0x70/0xc0 [ 639.708456][T12389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.708477][T12389] RIP: 0033:0x7fcac179e159 [ 639.708498][T12389] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 639.708526][T12389] RSP: 002b:00007fcac2601028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 639.708550][T12389] RAX: ffffffffffffffda RBX: 00007fcac1a25fa0 RCX: 00007fcac179e159 [ 639.708566][T12389] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 639.708579][T12389] RBP: 00007fcac2601090 R08: 0000000000000000 R09: 0000000000000000 [ 639.708593][T12389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 639.708606][T12389] R13: 00007fcac1a26038 R14: 00007fcac1a25fa0 R15: 00007fffd6a2f0d8 [ 639.708639][T12389] [ 639.731401][T12388] FAULT_INJECTION: forcing a failure. [ 639.731401][T12388] name failslab, interval 1, probability 0, space 0, times 0 [ 639.731433][T12388] CPU: 1 UID: 0 PID: 12388 Comm: syz.3.1645 Tainted: G L syzkaller #0 PREEMPT(full) [ 639.731459][T12388] Tainted: [L]=SOFTLOCKUP [ 639.731467][T12388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 639.731478][T12388] Call Trace: [ 639.731486][T12388] [ 639.731494][T12388] dump_stack_lvl+0xe8/0x150 [ 639.731522][T12388] should_fail_ex+0x3eb/0x540 [ 639.731547][T12388] should_failslab+0xa8/0x100 [ 639.731569][T12388] __kmalloc_cache_noprof+0x9e/0x600 [ 639.731588][T12388] ? __fget_files+0x2a/0x420 [ 639.731606][T12388] ? do_mq_timedreceive+0x3c4/0xb10 [ 639.731687][T12388] ? do_mq_timedreceive+0x3c4/0xb10 [ 639.731712][T12388] do_mq_timedreceive+0x3c4/0xb10 [ 639.731739][T12388] ? __pfx_do_mq_timedreceive+0x10/0x10 [ 639.731757][T12388] ? __mutex_unlock_slowpath+0x731/0x900 [ 639.731778][T12388] ? __fget_files+0x2a/0x420 [ 639.731795][T12388] ? __fget_files+0x3a2/0x420 [ 639.731818][T12388] ? fdget+0x1ac/0x250 [ 639.731842][T12388] __x64_sys_mq_timedreceive+0x17a/0x220 [ 639.731865][T12388] ? __pfx___x64_sys_mq_timedreceive+0x10/0x10 [ 639.731897][T12388] do_syscall_64+0x166/0x520 [ 639.731914][T12388] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.731934][T12388] ? clear_bhb_loop+0x70/0xc0 [ 639.731955][T12388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.731974][T12388] RIP: 0033:0x7fe97c99e159 [ 639.731993][T12388] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 639.732017][T12388] RSP: 002b:00007fe97abd5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f3 [ 639.732039][T12388] RAX: ffffffffffffffda RBX: 00007fe97cc26270 RCX: 00007fe97c99e159 [ 639.732053][T12388] RDX: 0000000000000074 RSI: 00002000000001c0 RDI: 0000000000000006 [ 639.732066][T12388] RBP: 00007fe97abd5090 R08: 0000000000000000 R09: 0000000000000000 [ 639.732078][T12388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 639.732090][T12388] R13: 00007fe97cc26308 R14: 00007fe97cc26270 R15: 00007fff97d9fc88 [ 639.732121][T12388] [ 640.025079][T12358] sctp: [Deprecated]: syz.2.1640 (pid 12358) Use of struct sctp_assoc_value in delayed_ack socket option. [ 640.025079][T12358] Use struct sctp_sack_info instead [ 640.094056][T12392] FAULT_INJECTION: forcing a failure. [ 640.094056][T12392] name failslab, interval 1, probability 0, space 0, times 0 [ 640.094088][T12392] CPU: 1 UID: 0 PID: 12392 Comm: syz.6.1650 Tainted: G L syzkaller #0 PREEMPT(full) [ 640.094114][T12392] Tainted: [L]=SOFTLOCKUP [ 640.094121][T12392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 640.094132][T12392] Call Trace: [ 640.094140][T12392] [ 640.094147][T12392] dump_stack_lvl+0xe8/0x150 [ 640.094175][T12392] should_fail_ex+0x3eb/0x540 [ 640.094200][T12392] should_failslab+0xa8/0x100 [ 640.094221][T12392] __kmalloc_cache_noprof+0x9e/0x600 [ 640.094241][T12392] ? futex_lock_pi+0x993/0xab0 [ 640.094262][T12392] ? futex_lock_pi+0x993/0xab0 [ 640.094286][T12392] futex_lock_pi+0x993/0xab0 [ 640.094318][T12392] ? __pfx_futex_lock_pi+0x10/0x10 [ 640.094346][T12392] ? lock_acquire+0x115/0x350 [ 640.094377][T12392] ? get_pid_task+0x20/0x1f0 [ 640.094394][T12392] ? get_pid_task+0x20/0x1f0 [ 640.094415][T12392] ? __pfx_futex_wake_mark+0x10/0x10 [ 640.094458][T12392] do_futex+0x330/0x4e0 [ 640.094483][T12392] ? __pfx_do_futex+0x10/0x10 [ 640.094499][T12392] ? __fget_files+0x3a2/0x420 [ 640.094519][T12392] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 640.094546][T12392] __se_sys_futex+0x3a8/0x450 [ 640.094570][T12392] ? ksys_write+0x242/0x270 [ 640.094589][T12392] ? __pfx___se_sys_futex+0x10/0x10 [ 640.094609][T12392] ? __pfx_ksys_write+0x10/0x10 [ 640.094633][T12392] ? __x64_sys_futex+0x21/0xf0 [ 640.094655][T12392] do_syscall_64+0x166/0x520 [ 640.094672][T12392] ? trace_irq_disable+0x3b/0x140 [ 640.094690][T12392] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.094710][T12392] ? clear_bhb_loop+0x70/0xc0 [ 640.094731][T12392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.094750][T12392] RIP: 0033:0x7fd4baf9e159 [ 640.094769][T12392] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 640.094785][T12392] RSP: 002b:00007fd4bbf3a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 640.094807][T12392] RAX: ffffffffffffffda RBX: 00007fd4bb225fa0 RCX: 00007fd4baf9e159 [ 640.094821][T12392] RDX: 00000000fffffffe RSI: 0000000000000006 RDI: 000020000000cffc [ 640.094834][T12392] RBP: 00007fd4bbf3a090 R08: 0000000000000000 R09: 00000000fffffffc [ 640.094847][T12392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 640.094859][T12392] R13: 00007fd4bb226038 R14: 00007fd4bb225fa0 R15: 00007ffc71f34bc8 [ 640.094890][T12392] [ 640.326136][ T32] audit: type=1326 audit(1791088779.575:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12393 comm="syz.1.1651" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcac179e159 code=0x0 [ 640.509954][T12402] loop6: detected capacity change from 0 to 256 [ 641.341850][T12428] syzkaller0: entered promiscuous mode [ 641.341875][T12428] syzkaller0: entered allmulticast mode [ 641.636627][T12420] loop6: detected capacity change from 0 to 32768 [ 641.716121][T12436] IPv6: NLM_F_CREATE should be specified when creating new route [ 641.742566][T12436] loop3: detected capacity change from 0 to 1024 [ 641.745850][T12436] hfsplus: Bad value for 'uid' [ 642.574736][T12411] loop2: detected capacity change from 0 to 32768 [ 642.724366][T12420] XFS (loop6): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 642.728942][T12411] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 642.959902][T12411] XFS (loop2): Ending clean mount [ 642.985187][T12411] XFS (loop2): Quotacheck needed: Please wait. [ 643.055284][T12420] XFS (loop6): Ending clean mount [ 643.862464][T12411] XFS (loop2): Quotacheck: Done. [ 643.941468][ T2017] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 644.034927][ T5622] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 644.077272][T12443] loop5: detected capacity change from 0 to 32768 [ 644.097030][ T2017] usb 4-1: New USB device found: idVendor=056e, idProduct=00ff, bcdDevice=0.40 [ 644.101868][ T2017] usb 4-1: config 1 interface 0 altsetting 13 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 644.101899][ T2017] usb 4-1: config 1 interface 0 has no altsetting 0 [ 644.115419][ T2017] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.115445][ T2017] usb 4-1: Product: syz [ 644.115458][ T2017] usb 4-1: Manufacturer: syz [ 644.115472][ T2017] usb 4-1: SerialNumber: syz [ 644.154210][T12457] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 644.187928][T12472] loop1: detected capacity change from 0 to 256 [ 644.240618][ T8320] XFS (loop6): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 644.538703][T12443] ERROR: (device loop5): xtSearch: xt_getpage: xtree page corrupt [ 644.538703][T12443] [ 644.538849][T12443] xtLookup: xtSearch returned -5 [ 644.538861][T12443] free_index: error reading directory table [ 644.538871][T12443] ERROR: (device loop5): xtSearch: xt_getpage: xtree page corrupt [ 644.538871][T12443] [ 644.538889][T12443] xtLookup: xtSearch returned -5 [ 644.538897][T12443] free_index: error reading directory table [ 644.538906][T12443] ERROR: (device loop5): xtSearch: xt_getpage: xtree page corrupt [ 644.538906][T12443] [ 644.538923][T12443] xtLookup: xtSearch returned -5 [ 644.538932][T12443] free_index: error reading directory table [ 644.538941][T12443] ERROR: (device loop5): xtSearch: xt_getpage: xtree page corrupt [ 644.538941][T12443] [ 644.538959][T12443] xtLookup: xtSearch returned -5 [ 644.538968][T12443] free_index: error reading directory table [ 644.538976][T12443] ERROR: (device loop5): xtSearch: xt_getpage: xtree page corrupt [ 644.538976][T12443] [ 644.538994][T12443] xtLookup: xtSearch returned -5 [ 644.539003][T12443] free_index: error reading directory table [ 644.539012][T12443] ERROR: (device loop5): xtSearch: xt_getpage: xtree page corrupt [ 644.539012][T12443] [ 644.539030][T12443] xtLookup: xtSearch returned -5 [ 644.539039][T12443] add_index: get/read_metapage failed! [ 644.539049][T12443] ERROR: (device loop5): xtSearch: xt_getpage: xtree page corrupt [ 644.539049][T12443] [ 644.539067][T12443] xtLookup: xtSearch returned -5 [ 644.539075][T12443] free_index: error reading directory table [ 644.539085][T12443] ERROR: (device loop5): xtSearch: xt_getpage: xtree page corrupt [ 644.539085][T12443] [ 644.539103][T12443] xtLookup: xtSearch returned -5 [ 644.539113][T12443] free_index: error reading directory table [ 644.539122][T12443] ERROR: (device loop5): xtSearch: xt_getpage: xtree page corrupt [ 644.539122][T12443] [ 644.539141][T12443] xtLookup: xtSearch returned -5 [ 644.539150][T12443] free_index: error reading directory table [ 644.539159][T12443] ERROR: (device loop5): xtSearch: xt_getpage: xtree page corrupt [ 644.539159][T12443] [ 644.539178][T12443] xtLookup: xtSearch returned -5 [ 644.539186][T12443] free_index: error reading directory table [ 644.679658][T12443] ERROR: (device loop5): xtSearch: xt_getpage: xtree page corrupt [ 644.679658][T12443] [ 644.679715][T12443] xtLookup: xtSearch returned -5 [ 644.679726][T12443] free_index: error reading directory table [ 644.780776][T12443] ERROR: (device loop5): xtSearch: xt_getpage: xtree page corrupt [ 644.780776][T12443] [ 644.780809][T12443] xtLookup: xtSearch returned -5 [ 644.780846][T12443] add_index: get/read_metapage failed! [ 644.843985][ T32] audit: type=1326 audit(1791088784.085:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12474 comm="syz.1.1669" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcac179e159 code=0x0 [ 645.349690][T12483] FAULT_INJECTION: forcing a failure. [ 645.349690][T12483] name failslab, interval 1, probability 0, space 0, times 0 [ 645.349727][T12483] CPU: 0 UID: 0 PID: 12483 Comm: syz.2.1667 Tainted: G L syzkaller #0 PREEMPT(full) [ 645.349755][T12483] Tainted: [L]=SOFTLOCKUP [ 645.349763][T12483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 645.349776][T12483] Call Trace: [ 645.349784][T12483] [ 645.349793][T12483] dump_stack_lvl+0xe8/0x150 [ 645.349823][T12483] should_fail_ex+0x3eb/0x540 [ 645.349849][T12483] should_failslab+0xa8/0x100 [ 645.349870][T12483] ? do_getname+0x2e/0x250 [ 645.349891][T12483] kmem_cache_alloc_noprof+0x9c/0x600 [ 645.349911][T12483] ? __fget_files+0x3a2/0x420 [ 645.349931][T12483] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 645.349951][T12483] ? do_getname+0x2e/0x250 [ 645.349977][T12483] do_getname+0x2e/0x250 [ 645.349994][T12483] ? getname_flags+0x11/0x20 [ 645.350017][T12483] path_listxattrat+0xd9/0x3f0 [ 645.350041][T12483] ? __pfx_path_listxattrat+0x10/0x10 [ 645.350077][T12483] do_syscall_64+0x166/0x520 [ 645.350095][T12483] ? trace_irq_disable+0x3b/0x140 [ 645.350118][T12483] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.350139][T12483] ? clear_bhb_loop+0x70/0xc0 [ 645.350162][T12483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.350182][T12483] RIP: 0033:0x7f69a579e159 [ 645.350203][T12483] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 645.350221][T12483] RSP: 002b:00007f69a6607028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c3 [ 645.350245][T12483] RAX: ffffffffffffffda RBX: 00007f69a5a26090 RCX: 00007f69a579e159 [ 645.350261][T12483] RDX: 00000000fffffdf3 RSI: 0000000000000000 RDI: 0000200000002300 [ 645.350275][T12483] RBP: 00007f69a6607090 R08: 0000000000000000 R09: 0000000000000000 [ 645.350287][T12483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 645.350309][T12483] R13: 00007f69a5a26128 R14: 00007f69a5a26090 R15: 00007fff7bfc05b8 [ 645.350344][T12483] [ 645.514079][T12479] ialloc: diAlloc returned -5! [ 645.780373][ T2017] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 645.798833][ T2017] usb 4-1: USB disconnect, device number 39 [ 645.811532][ T5612] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 645.933124][T12495] syzkaller0: entered promiscuous mode [ 645.933147][T12495] syzkaller0: entered allmulticast mode [ 645.985365][ T5612] usb 7-1: New USB device found: idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 645.986862][ T5612] usb 7-1: config 0 has an invalid interface number: 119 but max is 0 [ 645.986888][ T5612] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 645.986908][ T5612] usb 7-1: config 0 has no interface number 0 [ 645.986952][ T5612] usb 7-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 645.989910][ T5612] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.989934][ T5612] usb 7-1: Product: syz [ 645.989948][ T5612] usb 7-1: Manufacturer: syz [ 645.989961][ T5612] usb 7-1: SerialNumber: syz [ 646.064342][ T5612] usb 7-1: config 0 descriptor?? [ 646.086913][ T5612] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.119/input/input61 [ 646.417219][ T2017] usb 7-1: USB disconnect, device number 15 [ 646.980398][T12503] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1676'. [ 647.181542][T12506] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1677'. [ 647.197219][T12506] FAULT_INJECTION: forcing a failure. [ 647.197219][T12506] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 647.197258][T12506] CPU: 1 UID: 0 PID: 12506 Comm: syz.2.1677 Tainted: G L syzkaller #0 PREEMPT(full) [ 647.197285][T12506] Tainted: [L]=SOFTLOCKUP [ 647.197293][T12506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 647.197304][T12506] Call Trace: [ 647.197312][T12506] [ 647.197321][T12506] dump_stack_lvl+0xe8/0x150 [ 647.197349][T12506] should_fail_ex+0x3eb/0x540 [ 647.197375][T12506] _copy_from_user+0x2d/0xb0 [ 647.197395][T12506] ___sys_sendmsg+0x1c6/0x360 [ 647.197414][T12506] ? __lock_acquire+0x747/0x2de0 [ 647.197439][T12506] ? __pfx____sys_sendmsg+0x10/0x10 [ 647.197494][T12506] ? __fget_files+0x3a2/0x420 [ 647.197512][T12506] ? __fget_files+0x2a/0x420 [ 647.197540][T12506] __x64_sys_sendmsg+0x1b1/0x290 [ 647.197562][T12506] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 647.197602][T12506] do_syscall_64+0x166/0x520 [ 647.197621][T12506] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.197641][T12506] ? clear_bhb_loop+0x70/0xc0 [ 647.197663][T12506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.197682][T12506] RIP: 0033:0x7f69a579e159 [ 647.197701][T12506] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 647.197717][T12506] RSP: 002b:00007f69a6628028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 647.197739][T12506] RAX: ffffffffffffffda RBX: 00007f69a5a25fa0 RCX: 00007f69a579e159 [ 647.197753][T12506] RDX: 0000000000000000 RSI: 0000200000000700 RDI: 0000000000000006 [ 647.197765][T12506] RBP: 00007f69a6628090 R08: 0000000000000000 R09: 0000000000000000 [ 647.197777][T12506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 647.197789][T12506] R13: 00007f69a5a26038 R14: 00007f69a5a25fa0 R15: 00007fff7bfc05b8 [ 647.197819][T12506] [ 647.267714][T12511] loop2: detected capacity change from 0 to 8 [ 647.707699][ T32] audit: type=1326 audit(1791088786.955:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12519 comm="syz.6.1681" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd4baf9e159 code=0x0 [ 647.801618][T12525] SQUASHFS error: Failed to read block 0x4de: -5 [ 647.804505][T12525] SQUASHFS error: Failed to read block 0x4de: -5 [ 647.828892][ T32] audit: type=1800 audit(1791088787.055:179): pid=12525 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1679" name="file1" dev="loop2" ino=5 res=0 errno=-5 [ 648.408671][T12534] syzkaller0: entered promiscuous mode [ 648.408698][T12534] syzkaller0: entered allmulticast mode [ 648.451328][ T5711] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 648.618048][ T5711] usb 2-1: New USB device found: idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 648.625975][ T5711] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 648.626002][ T5711] usb 2-1: Product: syz [ 648.626016][ T5711] usb 2-1: Manufacturer: syz [ 648.626031][ T5711] usb 2-1: SerialNumber: syz [ 648.632656][ T5711] usb 2-1: config 0 descriptor?? [ 648.643968][ T5711] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 649.461326][T12544] can0: slcan on ptm0. [ 650.206038][ T5711] gspca_sunplus: reg_r err -110 [ 650.532430][T12535] syzkaller1: entered promiscuous mode [ 650.532458][T12535] syzkaller1: entered allmulticast mode [ 651.276807][ T192] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 651.306560][ T2017] usb 2-1: USB disconnect, device number 37 [ 651.353308][T12540] can0 (unregistered): slcan off ptm0. [ 651.466139][ T192] usb 7-1: New USB device found: idVendor=044f, idProduct=b65a, bcdDevice=0.00 [ 651.467204][ T192] usb 7-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 651.467236][ T192] usb 7-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 651.467263][ T192] usb 7-1: config 0 interface 0 has no altsetting 0 [ 651.467298][ T192] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.527250][ T192] usb 7-1: config 0 descriptor?? [ 651.773187][ T192] usbhid 7-1:0.0: can't add hid device: -71 [ 651.773301][ T192] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 651.796481][ T192] usb 7-1: USB disconnect, device number 16 [ 652.206728][T12572] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 652.303927][ T2017] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 652.338843][T12557] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 652.451414][ T2017] usb 2-1: Using ep0 maxpacket: 8 [ 652.453498][ T2017] usb 2-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 652.458027][ T2017] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 652.458086][ T2017] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 652.458110][ T2017] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 652.458136][ T2017] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 652.458161][ T2017] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 652.458206][ T2017] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.732193][ T2017] usb 2-1: usb_control_msg returned -32 [ 652.732252][ T2017] usbtmc 2-1:16.0: can't read capabilities [ 652.868226][ T32] audit: type=1326 audit(1791088792.115:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12588 comm="syz.6.1697" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd4baf9e159 code=0x0 [ 653.900948][T12607] syzkaller0: entered promiscuous mode [ 653.908668][T12607] syzkaller0: entered allmulticast mode [ 654.167364][T12624] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1701'. [ 654.255767][T12631] loop5: detected capacity change from 0 to 512 [ 654.267808][T12631] EXT4-fs: test_dummy_encryption requires encrypt feature [ 654.311295][ T5711] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 654.461872][ T5711] usb 4-1: New USB device found: idVendor=05f9, idProduct=ffff, bcdDevice=1.00 [ 654.466223][ T5711] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 654.466280][ T5711] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 654.466304][ T5711] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 654.466328][ T5711] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 654.530286][ T5711] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.530317][ T5711] usb 4-1: Product: syz [ 654.530333][ T5711] usb 4-1: Manufacturer: syz [ 654.530349][ T5711] usb 4-1: SerialNumber: syz [ 654.543659][ T192] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 654.571842][ T5711] usbserial_generic 4-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 654.571870][ T5711] usbserial_generic 4-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 654.571955][ T5711] usbserial_generic 4-1:1.0: generic converter detected [ 654.623982][ T5711] usb 4-1: generic converter now attached to ttyUSB0 [ 654.701067][ T192] usb 6-1: Using ep0 maxpacket: 32 [ 654.701954][ T192] usb 6-1: New USB device found: idVendor=0403, idProduct=6030, bcdDevice=0.00 [ 654.703563][ T192] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 654.703594][ T192] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 654.703632][ T192] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.709230][ T192] usb 6-1: config 0 descriptor?? [ 654.760313][T12629] loop6: detected capacity change from 0 to 32768 [ 654.769341][T12629] BTRFS warning: excessive commit interval 3581, use with care [ 654.779318][ T2017] usb 4-1: USB disconnect, device number 40 [ 654.790186][T12629] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1701 (12629) [ 654.806045][T12623] syzkaller1: entered promiscuous mode [ 654.806070][T12623] syzkaller1: entered allmulticast mode [ 654.835580][ T2017] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 654.836336][ T2017] usbserial_generic 4-1:1.0: device disconnected [ 654.875193][T12629] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 654.875231][T12629] BTRFS info (device loop6): using crc32c checksum algorithm [ 654.915420][T12631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 654.917771][T12631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 655.054723][T12629] BTRFS info (device loop6): enabling ssd optimizations [ 655.054755][T12629] BTRFS info (device loop6): turning on flush-on-commit [ 655.054774][T12629] BTRFS info (device loop6): enabling free space tree [ 655.054794][T12629] BTRFS info (device loop6): force zlib compression, level 3 [ 655.054816][T12629] BTRFS info (device loop6): max_inline set to 4096 [ 655.148751][ T192] hid_parser_main: 14 callbacks suppressed [ 655.148837][ T192] ft260 0003:0403:6030.0008: unknown main item tag 0x0 [ 655.148870][ T192] ft260 0003:0403:6030.0008: unknown main item tag 0x0 [ 655.207775][ T5341] usb 2-1: USB disconnect, device number 38 [ 655.224603][ T8320] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 655.330231][ T192] ft260 0003:0403:6030.0008: chip code: 0000 0000 [ 655.595261][T12659] netlink: 'syz.3.1708': attribute type 4 has an invalid length. [ 655.694612][T12658] loop3: detected capacity change from 0 to 512 [ 656.684239][T12630] ima: policy update failed [ 656.974481][ T2017] usb 6-1: USB disconnect, device number 27 [ 656.985906][ T32] audit: type=1807 audit(1791088795.575:181): UNKNOWN=? res=0 [ 656.985941][ T32] audit: type=1802 audit(1791088795.575:182): pid=12664 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.5.1703" res=0 errno=-22 [ 656.985964][ T32] audit: type=1802 audit(1791088795.935:183): pid=12630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.5.1703" res=0 errno=-22 [ 657.196400][ T192] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 657.351773][ T192] usb 4-1: New USB device found: idVendor=1908, idProduct=1315, bcdDevice=0.00 [ 657.386217][ T192] usb 4-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 657.386252][ T192] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 657.386298][ T192] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 657.398053][ T192] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.398080][ T192] usb 4-1: Product: syz [ 657.398094][ T192] usb 4-1: Manufacturer: syz [ 657.398109][ T192] usb 4-1: SerialNumber: syz [ 657.402052][ T192] usb 4-1: config 0 descriptor?? [ 657.409084][ T192] usb-storage 4-1:0.0: USB Mass Storage device detected [ 657.440700][ T192] usb-storage 4-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 657.550619][T12668] loop6: detected capacity change from 0 to 32768 [ 657.604141][T12668] ocfs2: Slot 0 on device (7,6) was already allocated to this node! [ 657.626304][T12668] JBD2: Ignoring recovery information on journal [ 657.815578][T12675] syzkaller0: entered promiscuous mode [ 657.815606][T12675] syzkaller0: entered allmulticast mode [ 657.850132][T12668] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 658.413750][ T8320] ocfs2: Unmounting device (7,6) on (node local) [ 658.564275][ T192] usb 4-1: USB disconnect, device number 41 [ 658.815535][ T32] audit: type=1326 audit(1791088798.065:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12688 comm="syz.5.1711" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2f24f9e159 code=0x0 [ 658.911105][ T2017] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 659.061223][ T2017] usb 7-1: Using ep0 maxpacket: 16 [ 659.062103][ T2017] usb 7-1: New USB device found: idVendor=1d6b, idProduct=0101, bcdDevice=0.40 [ 659.063800][ T2017] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 659.063824][ T2017] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 659.067733][ T2017] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.067757][ T2017] usb 7-1: Product: syz [ 659.067772][ T2017] usb 7-1: Manufacturer: syz [ 659.067785][ T2017] usb 7-1: SerialNumber: syz [ 659.088684][ T2017] usb 7-1: 0:2 : does not exist [ 659.381998][ T2017] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 659.391207][ T5612] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 659.521213][ T5612] usb 2-1: device descriptor read/64, error -71 [ 659.597672][ T2017] usb 7-1: USB disconnect, device number 17 [ 659.670023][T12710] FAULT_INJECTION: forcing a failure. [ 659.670023][T12710] name failslab, interval 1, probability 0, space 0, times 0 [ 659.670059][T12710] CPU: 0 UID: 0 PID: 12710 Comm: syz.3.1720 Tainted: G L syzkaller #0 PREEMPT(full) [ 659.670088][T12710] Tainted: [L]=SOFTLOCKUP [ 659.670097][T12710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 659.670110][T12710] Call Trace: [ 659.670130][T12710] [ 659.670141][T12710] dump_stack_lvl+0xe8/0x150 [ 659.670174][T12710] should_fail_ex+0x3eb/0x540 [ 659.670203][T12710] should_failslab+0xa8/0x100 [ 659.670229][T12710] __kmalloc_cache_noprof+0x9e/0x600 [ 659.670251][T12710] ? tipc_net+0x45/0x270 [ 659.670328][T12710] ? tipc_sub_subscribe+0x114/0x690 [ 659.670369][T12710] ? tipc_sub_subscribe+0x114/0x690 [ 659.670404][T12710] tipc_sub_subscribe+0x114/0x690 [ 659.670435][T12710] tipc_conn_rcv_sub+0x14f/0x370 [ 659.670464][T12710] tipc_topsrv_kern_subscr+0x188/0x250 [ 659.670487][T12710] ? tipc_own_addr+0x45/0x2a0 [ 659.670511][T12710] ? __pfx_tipc_topsrv_kern_subscr+0x10/0x10 [ 659.670539][T12710] ? tipc_own_addr+0x45/0x2a0 [ 659.670564][T12710] ? __asan_memset+0x22/0x50 [ 659.670589][T12710] tipc_group_create+0x35b/0x4f0 [ 659.670619][T12710] tipc_sk_join+0x25d/0x6a0 [ 659.670646][T12710] ? __pfx_tipc_sk_join+0x10/0x10 [ 659.670665][T12710] ? tipc_setsockopt+0x731/0x9a0 [ 659.670689][T12710] ? __local_bh_enable_ip+0xd6/0x140 [ 659.670725][T12710] tipc_setsockopt+0x73e/0x9a0 [ 659.670753][T12710] ? __pfx_tipc_setsockopt+0x10/0x10 [ 659.670775][T12710] ? aa_sock_opt_perm+0x142/0x1e0 [ 659.670802][T12710] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 659.670823][T12710] ? __pfx_tipc_setsockopt+0x10/0x10 [ 659.670847][T12710] do_sock_setsockopt+0x17c/0x1b0 [ 659.670875][T12710] __x64_sys_setsockopt+0x13d/0x1b0 [ 659.670903][T12710] do_syscall_64+0x166/0x520 [ 659.670924][T12710] ? trace_irq_disable+0x3b/0x140 [ 659.670944][T12710] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 659.670966][T12710] ? clear_bhb_loop+0x70/0xc0 [ 659.670990][T12710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 659.671013][T12710] RIP: 0033:0x7fe97c99e159 [ 659.671034][T12710] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 659.671053][T12710] RSP: 002b:00007fe97d7b0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 659.671079][T12710] RAX: ffffffffffffffda RBX: 00007fe97cc25fa0 RCX: 00007fe97c99e159 [ 659.671096][T12710] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000003 [ 659.671110][T12710] RBP: 00007fe97ca3506b R08: 0000000000000010 R09: 0000000000000000 [ 659.671132][T12710] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 659.671147][T12710] R13: 00007fe97cc26038 R14: 00007fe97cc25fa0 R15: 00007fff97d9fc88 [ 659.671184][T12710] [ 659.763231][ T5612] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 659.805398][T11481] udevd[11481]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 659.824775][T12710] tipc: Subscription rejected, no memory [ 659.894102][ T5612] usb 2-1: device descriptor read/64, error -71 [ 659.995306][T12713] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1722'. [ 660.001486][ T5612] usb usb2-port1: attempt power cycle [ 660.190704][T12718] syzkaller0: entered promiscuous mode [ 660.190730][T12718] syzkaller0: entered allmulticast mode [ 660.341489][ T5612] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 660.364209][ T5612] usb 2-1: device descriptor read/8, error -71 [ 660.421097][ T192] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 660.591072][ T192] usb 4-1: Using ep0 maxpacket: 8 [ 660.592173][ T192] usb 4-1: New USB device found: idVendor=0c45, idProduct=760b, bcdDevice=0.00 [ 660.595071][ T192] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 660.595118][ T192] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 660.595146][ T192] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 660.595169][ T192] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 660.595214][ T192] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.601138][ T5612] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 660.623637][ T5612] usb 2-1: device descriptor read/8, error -71 [ 660.634135][T12733] loop2: detected capacity change from 0 to 64 [ 660.692391][ T192] usb 4-1: config 0 descriptor?? [ 660.710319][T12733] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 660.731556][ T5612] usb usb2-port1: unable to enumerate USB device [ 660.754381][T12733] MINIX-fs warning: remounting unchecked fs, running fsck is recommended [ 660.833141][T12713] loop5: detected capacity change from 0 to 32768 [ 660.902413][T12713] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 660.972970][T12713] XFS (loop5): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 660.998105][T12745] loop6: detected capacity change from 0 to 1024 [ 661.042464][T12745] hfsplus: failed to load root directory [ 661.062363][T12713] XFS (loop5): Starting recovery (logdev: internal) [ 661.107839][T12713] XFS (loop5): Ending recovery (logdev: internal) [ 662.326984][T12713] XFS (loop5): AG 0: Corrupt finobt pointer at level 1 index 0. [ 662.327020][T12713] loop5: lost filesystem error report for type 5 error -117 [ 662.327179][T12713] XFS (loop5): Failed to initialize disk quotas, err -117. [ 662.833953][T12713] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1722'. [ 662.886716][ T192] redragon 0003:0C45:760B.0009: unknown main item tag 0x0 [ 662.886750][ T192] redragon 0003:0C45:760B.0009: unknown main item tag 0x0 [ 662.886778][ T192] redragon 0003:0C45:760B.0009: unknown main item tag 0x0 [ 662.886806][ T192] redragon 0003:0C45:760B.0009: unknown main item tag 0x0 [ 662.886834][ T192] redragon 0003:0C45:760B.0009: unknown main item tag 0x0 [ 662.886851][ T192] redragon 0003:0C45:760B.0009: unknown main item tag 0x0 [ 662.886867][ T192] redragon 0003:0C45:760B.0009: unknown main item tag 0x0 [ 662.886883][ T192] redragon 0003:0C45:760B.0009: unknown main item tag 0x0 [ 662.886899][ T192] redragon 0003:0C45:760B.0009: unknown main item tag 0x0 [ 662.886915][ T192] redragon 0003:0C45:760B.0009: unknown main item tag 0x0 [ 662.960120][ T192] redragon 0003:0C45:760B.0009: hidraw0: USB HID v0.04 Device [HID 0c45:760b] on usb-dummy_hcd.3-1/input0 [ 663.080167][T12719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 663.086923][T12719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 663.102869][ T7943] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 663.103505][ T7943] XFS (loop5): Uncorrected metadata errors detected; please run xfs_repair. [ 663.204936][T12760] loop2: detected capacity change from 0 to 256 [ 663.353981][T12760] FAT-fs (loop2): IO charset cp73· not found [ 663.471273][ T5711] usb 4-1: USB disconnect, device number 42 [ 663.544295][ T32] audit: type=1326 audit(1791088802.795:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12766 comm="syz.5.1732" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2f24f9e159 code=0x0 [ 663.594955][T12772] loop2: detected capacity change from 0 to 512 [ 663.599422][T12772] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 663.642786][T12772] EXT4-fs error (device loop2): ext4_orphan_get:1429: comm syz.2.1733: bad orphan inode 13 [ 663.642820][T12772] loop2: lost filesystem error report for type 5 error -117 [ 663.656808][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 663.656834][ C1] EXT4-fs (loop2): last error at time 1791088802: ext4_orphan_get:1429 [ 663.685507][T12772] ext4_test_bit(bit=12, block=18) = 1 [ 663.685531][T12772] is_bad_inode(inode)=0 [ 663.685540][T12772] NEXT_ORPHAN(inode)=0 [ 663.685549][T12772] max_ino=32 [ 663.685558][T12772] i_nlink=1 [ 663.726363][T12772] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 663.764274][T12772] Quota error (device loop2): do_check_range: Getting block 1536 out of range 0-5 [ 663.803378][T12779] loop6: detected capacity change from 0 to 512 [ 663.869497][T12779] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 663.870398][T12779] ext4 filesystem being mounted at /203/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 663.991729][T12779] fs-verity (loop6, inode 15): Unrecognized descriptor size: 0 bytes [ 664.049557][T12776] EXT4-fs error (device loop2): ext4_validate_block_bitmap:445: comm ext4lazyinit: bg 0: block 248: padding at end of block bitmap is not set [ 664.139614][ T5622] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 664.483651][T12789] syzkaller0: entered promiscuous mode [ 664.483677][T12789] syzkaller0: entered allmulticast mode [ 664.577926][ T8320] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 664.806405][T12798] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1740'. [ 665.801114][ T2017] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 665.953589][ T2017] usb 2-1: Using ep0 maxpacket: 16 [ 665.969191][ T2017] usb 2-1: New USB device found: idVendor=0525, idProduct=a4a8, bcdDevice=0.40 [ 665.982074][ T2017] usb 2-1: config 1 interface 0 altsetting 4 bulk endpoint 0x1 has invalid maxpacket 64 [ 665.982110][ T2017] usb 2-1: config 1 interface 0 altsetting 4 bulk endpoint 0x82 has invalid maxpacket 32 [ 665.982146][ T2017] usb 2-1: config 1 interface 0 has no altsetting 0 [ 665.985479][T12808] loop3: detected capacity change from 0 to 1024 [ 666.026018][ T2017] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.026048][ T2017] usb 2-1: Product: 쀄ï¬ê·»ïŽ¹ïš»å˜¨â‚»é‚낧╔푊è½Þ [ 666.026068][ T2017] usb 2-1: Manufacturer: Я [ 666.026084][ T2017] usb 2-1: SerialNumber: Ћ [ 666.029328][T12808] EXT4-fs: Ignoring removed bh option [ 666.080635][T12808] EXT4-fs (loop3): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 666.092549][T12805] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 666.092703][T12805] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 666.159581][T12808] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 666.884217][T12805] Cannot find del_set index 2 as target [ 667.044952][ T2017] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 43 if 0 alt 4 proto 3 vid 0x0525 pid 0xA4A8 [ 667.055205][ T2017] usb 2-1: USB disconnect, device number 43 [ 667.063985][ T2017] usblp0: removed [ 667.074273][ T5608] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 667.186039][T12816] ptrace attach of "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[7943] was attempted by "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[12816] [ 667.775776][ T32] audit: type=1326 audit(1791088807.025:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12829 comm="syz.5.1748" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2f24f9e159 code=0x0 [ 668.085748][T12839] loop3: detected capacity change from 0 to 256 [ 668.163701][T12828] loop6: detected capacity change from 0 to 2048 [ 668.273433][T12828] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 668.347490][T12828] EXT4-fs error (device loop6): ext4_map_blocks:790: inode #12: block 2: comm syz.6.1746: lblock 0 mapped to illegal pblock 2 (length 1) [ 668.433467][T12850] syzkaller0: entered promiscuous mode [ 668.433493][T12850] syzkaller0: entered allmulticast mode [ 668.500607][ T8320] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 668.548411][T12853] loop2: detected capacity change from 0 to 1024 [ 668.580291][T12853] hfsplus: failed to load root directory [ 669.952324][ T2017] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 670.018776][T12860] loop6: detected capacity change from 0 to 1024 [ 670.027378][T12860] EXT4-fs: Ignoring removed bh option [ 670.043950][T12860] EXT4-fs (loop6): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 670.082722][T12860] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 670.105320][ T2017] usb 2-1: device descriptor read/64, error -71 [ 670.441100][ T2017] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 670.571085][ T2017] usb 2-1: device descriptor read/64, error -71 [ 670.681949][ T2017] usb usb2-port1: attempt power cycle [ 670.725289][T12862] loop2: detected capacity change from 0 to 32768 [ 670.776169][T12873] loop3: detected capacity change from 0 to 32768 [ 670.777962][T12873] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1759 (12873) [ 670.928005][T12873] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 670.928042][T12873] BTRFS info (device loop3): using sha256 checksum algorithm [ 670.953938][ T8320] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 671.029998][ T2017] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 671.059875][ T2017] usb 2-1: device descriptor read/8, error -71 [ 671.133625][T12873] BTRFS info (device loop3): rebuilding free space tree [ 671.136254][T12862] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 671.287855][T12873] BTRFS info (device loop3): turning on flush-on-commit [ 671.287885][T12873] BTRFS info (device loop3): turning on sync discard [ 671.287904][T12873] BTRFS info (device loop3): enabling free space tree [ 671.287922][T12873] BTRFS info (device loop3): force clearing of disk cache [ 671.317620][ T2017] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 671.331818][ T2017] usb 2-1: device descriptor read/8, error -71 [ 671.445864][ T2017] usb usb2-port1: unable to enumerate USB device [ 671.483021][ T5622] ocfs2: Unmounting device (7,2) on (node local) [ 671.491187][ T5341] usb 7-1: new full-speed USB device number 18 using dummy_hcd [ 671.651137][ T5341] usb 7-1: device descriptor read/64, error -71 [ 672.131503][ T5341] usb 7-1: new full-speed USB device number 19 using dummy_hcd [ 672.268455][T12901] loop5: detected capacity change from 0 to 4096 [ 672.272323][ T5341] usb 7-1: device descriptor read/64, error -71 [ 672.289303][T12901] ntfs3(loop5): Different NTFS sector size (1024) and media sector size (512). [ 672.358914][ T5608] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 672.381454][ T5341] usb usb7-port1: attempt power cycle [ 672.700521][T12901] device-mapper: ioctl: only supply one of name or uuid, cmd(4) [ 672.731065][ T5341] usb 7-1: new full-speed USB device number 20 using dummy_hcd [ 672.751851][ T5341] usb 7-1: device descriptor read/8, error -71 [ 672.786599][T12913] syzkaller0: entered promiscuous mode [ 672.786625][T12913] syzkaller0: entered allmulticast mode [ 672.828761][T12909] ntfs3(loop5): ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" ni_find_attr [ 672.829209][T12909] ntfs3(loop5): ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" ni_find_attr [ 673.017466][ T5341] usb 7-1: new full-speed USB device number 21 using dummy_hcd [ 673.032202][ T5341] usb 7-1: device descriptor read/8, error -71 [ 673.134170][ T32] audit: type=1326 audit(1791088812.385:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12916 comm="syz.1.1768" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcac179e159 code=0x0 [ 673.141542][ T5341] usb usb7-port1: unable to enumerate USB device [ 673.249177][T12924] trusted_key: encrypted_key: insufficient parameters specified [ 673.250531][T12915] loop2: detected capacity change from 0 to 32768 [ 673.288412][T12915] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 673.379900][T12915] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 673.432408][T12915] XFS (loop2): Starting recovery (logdev: internal) [ 673.468292][T12915] XFS (loop2): Ending recovery (logdev: internal) [ 674.185963][T12950] comedi comedi4: commands at RT priority not supported in this driver [ 675.474355][T12967] syzkaller0: entered promiscuous mode [ 675.474380][T12967] syzkaller0: entered allmulticast mode [ 675.690081][ T32] audit: type=1326 audit(1791088814.935:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12973 comm="syz.1.1784" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcac179e159 code=0x0 [ 678.171131][T12998] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 682.296216][T13023] syzkaller0: entered promiscuous mode [ 682.296243][T13023] syzkaller0: entered allmulticast mode [ 683.205129][T13034] loop3: detected capacity change from 0 to 256 [ 683.790757][T13040] xt_connbytes: Forcing CT accounting to be enabled [ 683.908182][T13040] loop5: detected capacity change from 0 to 256 [ 684.277470][T13040] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xf9634425, utbl_chksum : 0xe619d30d) [ 685.698630][T13069] loop6: detected capacity change from 0 to 256 [ 685.911694][ T5741] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 685.977782][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.977822][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.071144][ T5711] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 686.085785][ T5741] usb 4-1: New USB device found: idVendor=056e, idProduct=00ff, bcdDevice=0.40 [ 686.089864][ T5741] usb 4-1: config 1 interface 0 altsetting 13 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 686.089896][ T5741] usb 4-1: config 1 interface 0 has no altsetting 0 [ 686.098314][ T5741] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.098339][ T5741] usb 4-1: Product: syz [ 686.098353][ T5741] usb 4-1: Manufacturer: syz [ 686.098367][ T5741] usb 4-1: SerialNumber: syz [ 686.132612][T13065] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 686.224297][ T5711] usb 6-1: New USB device found: idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 686.243953][ T5711] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.243982][ T5711] usb 6-1: Product: syz [ 686.243997][ T5711] usb 6-1: Manufacturer: syz [ 686.244012][ T5711] usb 6-1: SerialNumber: syz [ 686.250412][ T5711] usb 6-1: config 0 descriptor?? [ 686.290575][ T5711] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 686.764208][T13078] loop1: detected capacity change from 0 to 40427 [ 686.785758][T13078] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 686.785787][T13078] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 686.806499][ T5711] gspca_sunplus: reg_r err -32 [ 686.812712][T13078] F2FS-fs (loop1): invalid crc value [ 686.883804][T13078] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 686.904739][T13078] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 686.904771][T13078] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 686.937538][ T5711] usb 6-1: USB disconnect, device number 28 [ 687.254257][T13085] syz.1.1804: attempt to access beyond end of device [ 687.254257][T13085] loop1: rw=10241, sector=53248, nr_sectors = 8 limit=40427 [ 687.722101][ T5607] syz-executor: attempt to access beyond end of device [ 687.722101][ T5607] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 687.741594][ T5607] CPU: 1 UID: 0 PID: 5607 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 687.741631][ T5607] Tainted: [L]=SOFTLOCKUP [ 687.741639][ T5607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 687.741652][ T5607] Call Trace: [ 687.741661][ T5607] [ 687.741672][ T5607] dump_stack_lvl+0xe8/0x150 [ 687.741706][ T5607] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 687.741737][ T5607] f2fs_write_end_bio+0xda7/0x11c0 [ 687.741780][ T5607] __submit_merged_bio+0x258/0x6a0 [ 687.741802][ T5607] ? rcu_is_watching+0x16/0xb0 [ 687.741830][ T5607] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 687.741857][ T5607] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 687.741905][ T5607] f2fs_write_data_pages+0x2a13/0x36e0 [ 687.741966][ T5607] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 687.742003][ T5607] ? is_bpf_text_address+0x292/0x2b0 [ 687.742025][ T5607] ? is_bpf_text_address+0x26/0x2b0 [ 687.742076][ T5607] ? stack_trace_save+0xa9/0x100 [ 687.742099][ T5607] ? __pfx_stack_trace_save+0x10/0x10 [ 687.742143][ T5607] ? lockdep_unlock+0x5c/0xd0 [ 687.742162][ T5607] ? __lock_acquire+0x1511/0x2de0 [ 687.742213][ T5607] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 687.742238][ T5607] do_writepages+0x338/0x560 [ 687.742274][ T5607] ? do_raw_spin_unlock+0xf5/0x200 [ 687.742300][ T5607] filemap_fdatawrite+0x1e9/0x2f0 [ 687.742325][ T5607] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 687.742397][ T5607] ? do_raw_spin_unlock+0xf5/0x200 [ 687.742424][ T5607] f2fs_sync_dirty_inodes+0x471/0x970 [ 687.742471][ T5607] f2fs_write_checkpoint+0x860/0x24d0 [ 687.742531][ T5607] kill_f2fs_super+0x2dc/0x700 [ 687.742559][ T5607] ? rcu_do_enqueue+0x616/0x870 [ 687.742580][ T5607] ? lockdep_hardirqs_on+0x7b/0x110 [ 687.742601][ T5607] ? __pfx_kill_f2fs_super+0x10/0x10 [ 687.742640][ T5607] ? __pfx_call_rcu+0x10/0x10 [ 687.742668][ T5607] ? shrinker_free+0x2a7/0x3b0 [ 687.742695][ T5607] deactivate_locked_super+0xbe/0x110 [ 687.742719][ T5607] cleanup_mnt+0x3d3/0x460 [ 687.742745][ T5607] task_work_run+0x1d9/0x260 [ 687.742767][ T5607] ? __pfx_task_work_run+0x10/0x10 [ 687.742797][ T5607] exit_to_user_mode_loop+0x204/0x770 [ 687.742817][ T5607] ? rcu_is_watching+0x16/0xb0 [ 687.742841][ T5607] do_syscall_64+0x328/0x520 [ 687.742859][ T5607] ? trace_irq_disable+0x3b/0x140 [ 687.742877][ T5607] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 687.742897][ T5607] ? clear_bhb_loop+0x70/0xc0 [ 687.742920][ T5607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 687.742940][ T5607] RIP: 0033:0x7fcac179f397 [ 687.742959][ T5607] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 687.742976][ T5607] RSP: 002b:00007fffd6a2e348 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 687.742999][ T5607] RAX: 0000000000000000 RBX: 00007fcac18344bb RCX: 00007fcac179f397 [ 687.743013][ T5607] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffd6a2e400 [ 687.743024][ T5607] RBP: 00007fffd6a2e400 R08: 00007fffd6a2f400 R09: 00000000ffffffff [ 687.743038][ T5607] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffd6a2f490 [ 687.743051][ T5607] R13: 00007fcac18344bb R14: 00000000000a7ca7 R15: 00007fffd6a2f4d0 [ 687.743084][ T5607] [ 687.744803][ T5607] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 687.766666][ T5612] loop1: lost filesystem error report for type 5 error -108 [ 688.259297][T13091] syzkaller0: entered promiscuous mode [ 688.259326][T13091] syzkaller0: entered allmulticast mode [ 688.463316][T13093] nbd: must specify a size in bytes for the device [ 688.597475][ T5741] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 688.616582][ T5741] usb 4-1: USB disconnect, device number 43 [ 689.191084][ T5711] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 689.444490][ T5611] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 689.481567][ T5611] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 689.520445][T13107] Invalid ELF header magic: != ELF [ 690.071842][ T5711] usb 4-1: New USB device found: idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 690.074888][ T5711] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.074915][ T5711] usb 4-1: Product: syz [ 690.074929][ T5711] usb 4-1: Manufacturer: syz [ 690.074944][ T5711] usb 4-1: SerialNumber: syz [ 690.187161][ T5611] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 690.189631][ T5611] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 690.207485][ T5611] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 690.302440][ T5711] usb 4-1: config 0 descriptor?? [ 690.326386][ T5711] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 690.412608][T13110] batadv0: entered promiscuous mode [ 690.420565][T13110] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 690.434918][T13110] batadv0: left promiscuous mode [ 690.511272][ T5711] gspca_sunplus: reg_r err -32 [ 690.625522][ T5341] usb 4-1: USB disconnect, device number 44 [ 691.184748][ T5711] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 691.351198][ T5711] usb 6-1: Using ep0 maxpacket: 8 [ 691.352029][ T5711] usb 6-1: New USB device found: idVendor=0497, idProduct=c001, bcdDevice=6c.24 [ 691.353385][ T5711] usb 6-1: config 0 has an invalid interface number: 125 but max is 0 [ 691.353412][ T5711] usb 6-1: config 0 has no interface number 0 [ 691.353459][ T5711] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.397629][ T5711] usb 6-1: config 0 descriptor?? [ 691.459371][ T5711] gspca_main: spca501-2.14.0 probing 0497:c001 [ 691.680910][ T5711] gspca_spca501: reg write: error -71 [ 691.680934][ T5711] spca501 6-1:0.125: Reg write failed for 0x02,0x07,0x05 [ 691.694273][ T5711] spca501 6-1:0.125: probe with driver spca501 failed with error -22 [ 691.710205][ T5711] usb 6-1: USB disconnect, device number 29 [ 691.793198][T13124] loop1: detected capacity change from 0 to 32768 [ 691.824150][T13124] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 691.895015][T13124] XFS (loop1): Ending clean mount [ 691.897528][T13124] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 692.213195][T13135] loop3: detected capacity change from 0 to 40427 [ 692.219190][T13135] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 692.219215][T13135] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 692.245039][T13135] F2FS-fs (loop3): invalid crc value [ 692.291512][ T5611] Bluetooth: hci2: command tx timeout [ 692.380520][T13135] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 692.418936][T13135] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 692.418960][T13135] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 692.706640][T13146] syz.3.1815: attempt to access beyond end of device [ 692.706640][T13146] loop3: rw=10241, sector=53248, nr_sectors = 8 limit=40427 [ 693.204587][ T5608] syz-executor: attempt to access beyond end of device [ 693.204587][ T5608] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 693.254079][ T5608] CPU: 0 UID: 0 PID: 5608 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 693.254118][ T5608] Tainted: [L]=SOFTLOCKUP [ 693.254127][ T5608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 693.254140][ T5608] Call Trace: [ 693.254148][ T5608] [ 693.254158][ T5608] dump_stack_lvl+0xe8/0x150 [ 693.254189][ T5608] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 693.254219][ T5608] f2fs_write_end_bio+0xda7/0x11c0 [ 693.254261][ T5608] __submit_merged_bio+0x258/0x6a0 [ 693.254282][ T5608] ? rcu_is_watching+0x16/0xb0 [ 693.254309][ T5608] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 693.254336][ T5608] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 693.254385][ T5608] f2fs_write_data_pages+0x2a13/0x36e0 [ 693.254458][ T5608] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 693.254495][ T5608] ? is_bpf_text_address+0x292/0x2b0 [ 693.254516][ T5608] ? is_bpf_text_address+0x26/0x2b0 [ 693.254566][ T5608] ? stack_trace_save+0xa9/0x100 [ 693.254587][ T5608] ? __pfx_stack_trace_save+0x10/0x10 [ 693.254628][ T5608] ? lockdep_unlock+0x5c/0xd0 [ 693.254645][ T5608] ? __lock_acquire+0x1511/0x2de0 [ 693.254697][ T5608] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 693.254719][ T5608] do_writepages+0x338/0x560 [ 693.254755][ T5608] ? do_raw_spin_unlock+0xf5/0x200 [ 693.254781][ T5608] filemap_fdatawrite+0x1e9/0x2f0 [ 693.254805][ T5608] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 693.254879][ T5608] ? do_raw_spin_unlock+0xf5/0x200 [ 693.254904][ T5608] f2fs_sync_dirty_inodes+0x471/0x970 [ 693.254944][ T5608] f2fs_write_checkpoint+0x860/0x24d0 [ 693.255007][ T5608] kill_f2fs_super+0x2dc/0x700 [ 693.255034][ T5608] ? rcu_do_enqueue+0x616/0x870 [ 693.255055][ T5608] ? lockdep_hardirqs_on+0x7b/0x110 [ 693.255076][ T5608] ? __pfx_kill_f2fs_super+0x10/0x10 [ 693.255116][ T5608] ? __pfx_call_rcu+0x10/0x10 [ 693.255142][ T5608] ? shrinker_free+0x2a7/0x3b0 [ 693.255167][ T5608] deactivate_locked_super+0xbe/0x110 [ 693.255192][ T5608] cleanup_mnt+0x3d3/0x460 [ 693.255218][ T5608] task_work_run+0x1d9/0x260 [ 693.255243][ T5608] ? __pfx_task_work_run+0x10/0x10 [ 693.255274][ T5608] exit_to_user_mode_loop+0x204/0x770 [ 693.255295][ T5608] ? rcu_is_watching+0x16/0xb0 [ 693.255320][ T5608] do_syscall_64+0x328/0x520 [ 693.255339][ T5608] ? trace_irq_disable+0x3b/0x140 [ 693.255357][ T5608] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 693.255378][ T5608] ? clear_bhb_loop+0x70/0xc0 [ 693.255410][ T5608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 693.255431][ T5608] RIP: 0033:0x7fe97c99f397 [ 693.255453][ T5608] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 693.255474][ T5608] RSP: 002b:00007fff97d9eef8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 693.255499][ T5608] RAX: 0000000000000000 RBX: 00007fe97ca344bb RCX: 00007fe97c99f397 [ 693.255514][ T5608] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff97d9efb0 [ 693.255527][ T5608] RBP: 00007fff97d9efb0 R08: 00007fff97d9ffb0 R09: 00000000ffffffff [ 693.255541][ T5608] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff97da0040 [ 693.255554][ T5608] R13: 00007fe97ca344bb R14: 00000000000a92d6 R15: 00007fff97da0080 [ 693.255591][ T5608] [ 693.271606][ T5608] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 693.821105][ T5612] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 693.993320][ T5612] usb 2-1: New USB device found: idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 694.019708][ T5612] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.019729][ T5612] usb 2-1: Product: syz [ 694.019738][ T5612] usb 2-1: Manufacturer: syz [ 694.019748][ T5612] usb 2-1: SerialNumber: syz [ 694.026425][ T5612] usb 2-1: config 0 descriptor?? [ 694.043839][ T5612] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 694.235768][ T5612] gspca_sunplus: reg_r err -32 [ 694.338216][ T5612] usb 2-1: USB disconnect, device number 48 [ 694.375621][ T5611] Bluetooth: hci2: command tx timeout [ 694.503560][T12940] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 694.576934][T13162] loop5: detected capacity change from 0 to 256 [ 694.618134][T13162] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xdbae3f17, utbl_chksum : 0xe619d30d) [ 694.654120][T13158] syzkaller0: entered promiscuous mode [ 694.654148][T13158] syzkaller0: entered allmulticast mode [ 694.749913][T13165] Cannot find set identified by id 0 to match [ 696.051605][T13179] ieee802154 phy0 wpan0: encryption failed: -22 [ 696.334768][T13183] capability: warning: `syz.1.1825' uses 32-bit capabilities (legacy support in use) [ 696.338143][T13183] program syz.1.1825 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 696.456163][ T5611] Bluetooth: hci2: command tx timeout [ 697.846863][T13187] mmap: syz.1.1826 (13187): VmData 37724160 exceed data ulimit 14. Update limits or use boot option ignore_rlimit_data. [ 698.189905][T13190] loop6: detected capacity change from 0 to 40427 [ 698.212774][T13190] F2FS-fs (loop6): Invalid SB checksum offset: 0 [ 698.212801][T13190] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 698.215011][T13190] F2FS-fs (loop6): invalid crc value [ 698.300199][T13190] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 698.315663][T13190] F2FS-fs (loop6): Try to recover 2th superblock, ret: 0 [ 698.315695][T13190] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 698.534479][ T5611] Bluetooth: hci2: command tx timeout [ 699.233465][T13201] syz.6.1827: attempt to access beyond end of device [ 699.233465][T13201] loop6: rw=10241, sector=53248, nr_sectors = 8 limit=40427 [ 700.497838][T13205] nbd0: detected capacity change from 0 to 127 [ 700.657742][ T5611] block nbd0: Receive control failed (result -32) [ 700.665595][ T1987] block nbd0: Dead connection, failed to find a fallback [ 700.665619][ T1987] block nbd0: shutting down sockets [ 700.665692][ T1987] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 700.665720][ T1987] Buffer I/O error on dev nbd0, logical block 0, async page read [ 700.673928][ T1987] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 700.673960][ T1987] Buffer I/O error on dev nbd0, logical block 1, async page read [ 700.674089][ T1987] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 700.674115][ T1987] Buffer I/O error on dev nbd0, logical block 2, async page read [ 700.674214][ T1987] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 700.674238][ T1987] Buffer I/O error on dev nbd0, logical block 3, async page read [ 700.674595][ T1987] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 700.674623][ T1987] Buffer I/O error on dev nbd0, logical block 0, async page read [ 700.674721][ T1987] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 700.674746][ T1987] Buffer I/O error on dev nbd0, logical block 1, async page read [ 700.674842][ T1987] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 700.674867][ T1987] Buffer I/O error on dev nbd0, logical block 2, async page read [ 700.674963][ T1987] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 700.674987][ T1987] Buffer I/O error on dev nbd0, logical block 3, async page read [ 700.675094][ T1987] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 700.675122][ T1987] Buffer I/O error on dev nbd0, logical block 0, async page read [ 700.675234][ T1987] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 700.679736][ T1987] Buffer I/O error on dev nbd0, logical block 1, async page read [ 700.684773][T13086] ldm_validate_partition_table(): Disk read failed. [ 700.689408][T13086] Dev nbd0: unable to read RDB block 0 [ 701.101393][ T8320] syz-executor: attempt to access beyond end of device [ 701.101393][ T8320] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 701.118757][T13086] nbd0: unable to read partition table [ 701.147690][ T7943] syz_tun (unregistering): left allmulticast mode [ 701.149913][ T8320] CPU: 0 UID: 0 PID: 8320 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 701.149945][ T8320] Tainted: [L]=SOFTLOCKUP [ 701.149953][ T8320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 701.149965][ T8320] Call Trace: [ 701.149974][ T8320] [ 701.149983][ T8320] dump_stack_lvl+0xe8/0x150 [ 701.150012][ T8320] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 701.150040][ T8320] f2fs_write_end_bio+0xda7/0x11c0 [ 701.150079][ T8320] __submit_merged_bio+0x258/0x6a0 [ 701.150100][ T8320] ? rcu_is_watching+0x16/0xb0 [ 701.150125][ T8320] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 701.150151][ T8320] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 701.150197][ T8320] f2fs_write_data_pages+0x2a13/0x36e0 [ 701.150255][ T8320] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 701.150274][ T8320] ? is_bpf_text_address+0x26/0x2b0 [ 701.150305][ T8320] ? arch_stack_walk+0xfb/0x150 [ 701.150356][ T8320] ? add_lock_to_list+0xc7/0x100 [ 701.150378][ T8320] ? lockdep_unlock+0x5c/0xd0 [ 701.150394][ T8320] ? __lock_acquire+0x1511/0x2de0 [ 701.150442][ T8320] ? do_raw_spin_lock+0x12b/0x2f0 [ 701.150473][ T8320] ? do_raw_spin_unlock+0xf5/0x200 [ 701.150493][ T8320] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 701.150515][ T8320] do_writepages+0x338/0x560 [ 701.150547][ T8320] ? do_raw_spin_unlock+0xf5/0x200 [ 701.150571][ T8320] filemap_fdatawrite+0x1e9/0x2f0 [ 701.150594][ T8320] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 701.150661][ T8320] ? do_raw_spin_unlock+0xf5/0x200 [ 701.150685][ T8320] f2fs_sync_dirty_inodes+0x471/0x970 [ 701.150722][ T8320] f2fs_write_checkpoint+0x860/0x24d0 [ 701.150787][ T8320] kill_f2fs_super+0x2dc/0x700 [ 701.150812][ T8320] ? rcu_do_enqueue+0x616/0x870 [ 701.150831][ T8320] ? lockdep_hardirqs_on+0x7b/0x110 [ 701.150852][ T8320] ? __pfx_kill_f2fs_super+0x10/0x10 [ 701.150889][ T8320] ? __pfx_call_rcu+0x10/0x10 [ 701.150914][ T8320] ? shrinker_free+0x2a7/0x3b0 [ 701.150937][ T8320] deactivate_locked_super+0xbe/0x110 [ 701.150960][ T8320] cleanup_mnt+0x3d3/0x460 [ 701.150985][ T8320] task_work_run+0x1d9/0x260 [ 701.151008][ T8320] ? __pfx_task_work_run+0x10/0x10 [ 701.151032][ T8320] ? schedule+0x16e/0x2b0 [ 701.151054][ T8320] exit_to_user_mode_loop+0x204/0x770 [ 701.151074][ T8320] ? rcu_is_watching+0x16/0xb0 [ 701.151097][ T8320] do_syscall_64+0x328/0x520 [ 701.151115][ T8320] ? trace_irq_disable+0x3b/0x140 [ 701.151132][ T8320] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 701.151153][ T8320] ? clear_bhb_loop+0x70/0xc0 [ 701.151175][ T8320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 701.151195][ T8320] RIP: 0033:0x7fd4baf9f397 [ 701.151216][ T8320] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 701.151232][ T8320] RSP: 002b:00007ffc71f33e38 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 701.151254][ T8320] RAX: 0000000000000000 RBX: 00007fd4bb0344bb RCX: 00007fd4baf9f397 [ 701.151268][ T8320] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc71f33ef0 [ 701.151281][ T8320] RBP: 00007ffc71f33ef0 R08: 00007ffc71f34ef0 R09: 00000000ffffffff [ 701.151295][ T8320] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc71f34f80 [ 701.151308][ T8320] R13: 00007fd4bb0344bb R14: 00000000000aac73 R15: 00007ffc71f34fc0 [ 701.151341][ T8320] [ 701.158522][T13086] ldm_validate_partition_table(): Disk read failed. [ 701.163491][ T8320] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 701.165220][T13203] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1830'. [ 701.165242][T13203] openvswitch: netlink: Invalid VLAN frame [ 701.165643][T13086] Dev nbd0: unable to read RDB block 0 [ 701.179350][T13086] nbd0: unable to read partition table [ 701.609051][ T1021] dummy0: left allmulticast mode [ 701.609084][ T1021] dummy0: left promiscuous mode [ 701.609352][ T1021] bridge0: port 3(dummy0) entered disabled state [ 701.647827][ T1021] bridge_slave_1: left allmulticast mode [ 701.647859][ T1021] bridge_slave_1: left promiscuous mode [ 701.656854][ T1021] bridge0: port 2(bridge_slave_1) entered disabled state [ 701.699221][ T1021] bridge_slave_0: left allmulticast mode [ 701.699252][ T1021] bridge_slave_0: left promiscuous mode [ 701.704832][ T1021] bridge0: port 1(bridge_slave_0) entered disabled state [ 702.123100][ T1021] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 702.149140][ T1021] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 702.150666][ T1021] bond0 (unregistering): Released all slaves [ 702.496231][T13104] bridge0: port 1(bridge_slave_0) entered blocking state [ 702.496447][T13104] bridge0: port 1(bridge_slave_0) entered disabled state [ 702.496587][T13104] bridge_slave_0: entered allmulticast mode [ 702.498621][T13104] bridge_slave_0: entered promiscuous mode [ 702.504088][T13104] bridge0: port 2(bridge_slave_1) entered blocking state [ 702.504255][T13104] bridge0: port 2(bridge_slave_1) entered disabled state [ 702.504383][T13104] bridge_slave_1: entered allmulticast mode [ 702.506139][T13104] bridge_slave_1: entered promiscuous mode [ 703.242794][T13223] nvme_fabrics: unknown parameter or missing value 't' in ctrl creation request [ 704.117964][T13104] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 704.136127][T13104] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 704.173612][ T1021] hsr_slave_0: left promiscuous mode [ 704.176136][ T1021] hsr_slave_1: left promiscuous mode [ 704.177159][ T1021] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 704.180757][ T1021] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 704.192477][ T2017] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 704.353278][ T2017] usb 2-1: New USB device found: idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 704.360573][ T2017] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 704.360603][ T2017] usb 2-1: Product: syz [ 704.360618][ T2017] usb 2-1: Manufacturer: syz [ 704.360634][ T2017] usb 2-1: SerialNumber: syz [ 704.395094][ T2017] usb 2-1: config 0 descriptor?? [ 704.410193][ T2017] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 704.605300][ T2017] gspca_sunplus: reg_r err -32 [ 704.652674][ T2017] usb 2-1: USB disconnect, device number 49 [ 704.895687][ T1021] team0 (unregistering): Port device team_slave_1 removed [ 704.928639][ T1021] team0 (unregistering): Port device team_slave_0 removed [ 705.621203][ T5270] 8021q: adding VLAN 0 to HW filter on device eth9 [ 705.636368][T13244] syzkaller0: entered promiscuous mode [ 705.636394][T13244] syzkaller0: entered allmulticast mode [ 705.657437][T13104] team0: Port device team_slave_0 added [ 705.816820][T13104] team0: Port device team_slave_1 added [ 705.981285][T13104] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 705.981305][T13104] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 705.981333][T13104] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 705.988373][T13104] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 705.988392][T13104] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 705.988422][T13104] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 705.990701][T13258] sg_write: data in/out 1701604413/136 bytes for SCSI command 0x0-- guessing data in; [ 705.990701][T13258] program syz.1.1840 not setting count and/or reply_len properly [ 706.035934][ T9672] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 706.042696][ T9672] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 706.043652][ T9672] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 706.044539][ T9672] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 706.045203][ T9672] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 706.180357][T13262] loop6: detected capacity change from 0 to 64 [ 706.316601][T13104] hsr_slave_0: entered promiscuous mode [ 706.317771][T13104] hsr_slave_1: entered promiscuous mode [ 706.323179][T13104] debugfs: 'hsr0' already exists in 'hsr' [ 706.323201][T13104] Cannot create hsr debugfs directory [ 706.661315][ T1021] IPVS: stop unused estimator thread 0... [ 706.779138][T13272] netlink: 'syz.6.1836': attribute type 8 has an invalid length. [ 706.779167][T13272] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1836'. [ 706.920029][T13272] veth1_to_team: entered promiscuous mode [ 706.940443][T13272] gretap0: entered promiscuous mode [ 706.962075][T13272] veth1_to_team: left promiscuous mode [ 706.991698][T13266] loop3: detected capacity change from 0 to 32768 [ 707.016584][T13272] gretap0: left promiscuous mode [ 707.114655][T13266] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 707.312510][T13266] XFS (loop3): Metadata corruption detected at xfs_dinode_verify+0x19d/0x1560, inode 0x1800 dinode [ 707.312623][T13266] XFS (loop3): Unmount and run xfs_repair [ 707.312637][T13266] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 707.312657][T13266] 00000000: 49 4e 41 ed 03 01 00 00 00 00 00 00 00 00 00 00 INA............. [ 707.312674][T13266] 00000010: 00 00 00 03 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 707.312691][T13266] 00000020: 1d cd 65 00 00 00 00 00 34 f7 58 68 a5 e2 bf 3d ..e.....4.Xh...= [ 707.312708][T13266] 00000030: 34 f7 58 68 a5 e2 bf 3d 00 00 00 00 00 00 00 4b 4.Xh...=.......K [ 707.312724][T13266] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 707.312740][T13266] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 707.312757][T13266] 00000060: ff ff ff ff f0 42 c1 13 00 00 00 00 00 00 00 07 .....B.......... [ 707.312772][T13266] 00000070: 00 00 00 01 00 00 00 10 00 00 00 00 00 00 00 08 ................ [ 707.312794][T13266] loop3: lost filesystem error report for type 5 error -117 [ 707.312913][T13266] XFS (loop3): Failed to read root inode 0x1800, error 117 [ 707.316215][T13266] XFS (loop3): Metadata I/O Error (0x1) detected at xfs_mountfs+0x132e/0x2380 (fs/xfs/xfs_mount.c:1261). Shutting down filesystem. [ 707.316309][T13266] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 707.316325][T13266] loop3: lost filesystem error report for type 5 error -108 [ 707.631460][T13266] loop3: detected capacity change from 0 to 1024 [ 707.662974][T13266] hfsplus: bad catalog entry used to create inode [ 707.663048][T13266] hfsplus: failed to load root directory [ 707.951174][ T1021] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.149291][ T5611] Bluetooth: hci4: command tx timeout [ 708.163193][T13311] loop3: detected capacity change from 0 to 256 [ 708.227477][T13311] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x2af3664b, utbl_chksum : 0xe619d30d) [ 708.754514][ T5270] 8021q: adding VLAN 0 to HW filter on device eth10 [ 709.791255][T13313] slcan: can't register candev [ 710.291866][ T5611] Bluetooth: hci4: command tx timeout [ 710.599910][ T1021] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.772195][T13322] syzkaller0: entered promiscuous mode [ 710.772221][T13322] syzkaller0: entered allmulticast mode [ 710.775470][ T2017] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 710.858409][ T1021] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.931176][ T2017] usb 4-1: New USB device found: idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 710.938152][ T2017] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 710.938191][ T2017] usb 4-1: Product: syz [ 710.938207][ T2017] usb 4-1: Manufacturer: syz [ 710.938222][ T2017] usb 4-1: SerialNumber: syz [ 710.941834][ T2017] usb 4-1: config 0 descriptor?? [ 710.951395][ T2017] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 711.148788][ T2017] gspca_sunplus: reg_r err -32 [ 711.166992][ T1021] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.190630][ T2017] usb 4-1: USB disconnect, device number 45 [ 711.295428][T13336] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1848'. [ 711.333137][T13104] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 711.342249][T13104] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 711.360374][T13104] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 711.378240][T13104] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 711.393690][T13104] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 711.450537][T13104] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 711.467519][T13104] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 711.478327][T13104] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 711.501060][ T5711] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 711.565396][T13345] nbd1: detected capacity change from 0 to 127 [ 711.582179][ T5611] block nbd1: Receive control failed (result -104) [ 711.673996][ T5711] usb 7-1: New USB device found: idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 711.676169][ T5711] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 711.676214][ T5711] usb 7-1: config 0 interface 0 has no altsetting 0 [ 711.678262][ T5711] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 711.678289][ T5711] usb 7-1: Product: syz [ 711.678305][ T5711] usb 7-1: Manufacturer: syz [ 711.678320][ T5711] usb 7-1: SerialNumber: syz [ 711.682797][ T5711] usb 7-1: config 0 descriptor?? [ 711.690114][ T5711] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 711.702578][ T5711] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 711.704467][ T5711] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 711.704525][ T5711] usb 7-1: media controller created [ 711.735284][ T5711] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 712.250480][T13334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 712.251479][T13334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 712.375946][ T5611] Bluetooth: hci4: command tx timeout [ 713.090142][ T5711] DVB: Unable to find symbol tda10046_attach() [ 713.090161][ T5711] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 713.090176][ T5711] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 713.127197][ T5270] 8021q: adding VLAN 0 to HW filter on device eth11 [ 713.335657][ T1021] bridge_slave_1: left allmulticast mode [ 713.335689][ T1021] bridge_slave_1: left promiscuous mode [ 713.335987][ T1021] bridge0: port 2(bridge_slave_1) entered disabled state [ 713.347220][ T1021] bridge_slave_0: left allmulticast mode [ 713.347248][ T1021] bridge_slave_0: left promiscuous mode [ 713.347522][ T1021] bridge0: port 1(bridge_slave_0) entered disabled state [ 713.532683][ T5711] dvb_usb_m920x 7-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 713.543391][ T5711] usb 7-1: USB disconnect, device number 22 [ 713.940679][ T1021] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 713.954930][ T1021] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 713.956943][ T1021] bond0 (unregistering): Released all slaves [ 714.192161][T13104] 8021q: adding VLAN 0 to HW filter on device bond0 [ 714.279303][T13375] loop6: detected capacity change from 0 to 16 [ 714.391427][T13375] erofs (device loop6): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk! [ 714.399613][T13375] erofs (device loop6): mounted with root inode @ nid 36. [ 714.442728][T13375] erofs (device loop6): unknown algorithm 6 @ pos 167424 for nid 36, please upgrade kernel [ 714.442870][T13375] erofs (device loop6): unknown algorithm 6 @ pos 167424 for nid 36, please upgrade kernel [ 714.442894][T13375] erofs (device loop6): read error -95 @ 40 of nid 36 [ 714.451295][ T5611] Bluetooth: hci4: command tx timeout [ 714.598572][T13375] erofs (device loop6): unknown algorithm 6 @ pos 167424 for nid 36, please upgrade kernel [ 714.598722][T13375] erofs (device loop6): unknown algorithm 6 @ pos 167424 for nid 36, please upgrade kernel [ 714.598745][T13375] erofs (device loop6): read error -95 @ 40 of nid 36 [ 714.740459][T13104] 8021q: adding VLAN 0 to HW filter on device team0 [ 714.781868][ T1021] hsr_slave_0: left promiscuous mode [ 714.786271][ T1021] hsr_slave_1: left promiscuous mode [ 714.815877][ T1021] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 714.815904][ T1021] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 714.823964][ T1021] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 714.824003][ T1021] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 714.891851][T13379] loop1: detected capacity change from 0 to 40427 [ 714.914726][T13379] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 714.914753][T13379] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 714.915996][ T1021] veth1_macvtap: left promiscuous mode [ 714.916032][ T1021] veth0_macvtap: left promiscuous mode [ 714.916132][ T1021] veth1_vlan: left promiscuous mode [ 714.916199][ T1021] veth0_vlan: left promiscuous mode [ 714.940618][T13379] F2FS-fs (loop1): invalid crc value [ 715.061206][T13379] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 715.079480][T13379] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 715.079511][T13379] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 715.457066][T13393] syz.1.1856: attempt to access beyond end of device [ 715.457066][T13393] loop1: rw=10241, sector=53248, nr_sectors = 8 limit=40427 [ 715.799614][T13392] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1858'. [ 715.817157][T13392] netlink: 256 bytes leftover after parsing attributes in process `syz.6.1858'. [ 716.038926][ T5607] syz-executor: attempt to access beyond end of device [ 716.038926][ T5607] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 716.047402][ T5607] CPU: 0 UID: 0 PID: 5607 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 716.047435][ T5607] Tainted: [L]=SOFTLOCKUP [ 716.047443][ T5607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 716.047455][ T5607] Call Trace: [ 716.047464][ T5607] [ 716.047473][ T5607] dump_stack_lvl+0xe8/0x150 [ 716.047502][ T5607] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 716.047530][ T5607] f2fs_write_end_bio+0xda7/0x11c0 [ 716.047568][ T5607] __submit_merged_bio+0x258/0x6a0 [ 716.047588][ T5607] ? rcu_is_watching+0x16/0xb0 [ 716.047614][ T5607] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 716.047639][ T5607] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 716.047685][ T5607] f2fs_write_data_pages+0x2a13/0x36e0 [ 716.047743][ T5607] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 716.047777][ T5607] ? is_bpf_text_address+0x292/0x2b0 [ 716.047797][ T5607] ? is_bpf_text_address+0x26/0x2b0 [ 716.047843][ T5607] ? stack_trace_save+0xa9/0x100 [ 716.047863][ T5607] ? __pfx_stack_trace_save+0x10/0x10 [ 716.047901][ T5607] ? lockdep_unlock+0x5c/0xd0 [ 716.047917][ T5607] ? __lock_acquire+0x1511/0x2de0 [ 716.047968][ T5607] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 716.047990][ T5607] do_writepages+0x338/0x560 [ 716.048022][ T5607] ? do_raw_spin_unlock+0xf5/0x200 [ 716.048046][ T5607] filemap_fdatawrite+0x1e9/0x2f0 [ 716.048069][ T5607] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 716.048136][ T5607] ? do_raw_spin_unlock+0xf5/0x200 [ 716.048160][ T5607] f2fs_sync_dirty_inodes+0x471/0x970 [ 716.048197][ T5607] f2fs_write_checkpoint+0x860/0x24d0 [ 716.048261][ T5607] kill_f2fs_super+0x2dc/0x700 [ 716.048286][ T5607] ? rcu_do_enqueue+0x616/0x870 [ 716.048306][ T5607] ? lockdep_hardirqs_on+0x7b/0x110 [ 716.048326][ T5607] ? __pfx_kill_f2fs_super+0x10/0x10 [ 716.048363][ T5607] ? __pfx_call_rcu+0x10/0x10 [ 716.048388][ T5607] ? shrinker_free+0x2a7/0x3b0 [ 716.048411][ T5607] deactivate_locked_super+0xbe/0x110 [ 716.048434][ T5607] cleanup_mnt+0x3d3/0x460 [ 716.048458][ T5607] task_work_run+0x1d9/0x260 [ 716.048481][ T5607] ? __pfx_task_work_run+0x10/0x10 [ 716.048510][ T5607] exit_to_user_mode_loop+0x204/0x770 [ 716.048530][ T5607] ? rcu_is_watching+0x16/0xb0 [ 716.048554][ T5607] do_syscall_64+0x328/0x520 [ 716.048572][ T5607] ? trace_irq_disable+0x3b/0x140 [ 716.048589][ T5607] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 716.048610][ T5607] ? clear_bhb_loop+0x70/0xc0 [ 716.048632][ T5607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 716.048652][ T5607] RIP: 0033:0x7fcac179f397 [ 716.048673][ T5607] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 716.048689][ T5607] RSP: 002b:00007fffd6a2e348 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 716.048711][ T5607] RAX: 0000000000000000 RBX: 00007fcac18344bb RCX: 00007fcac179f397 [ 716.048725][ T5607] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffd6a2e400 [ 716.048738][ T5607] RBP: 00007fffd6a2e400 R08: 00007fffd6a2f400 R09: 00000000ffffffff [ 716.048751][ T5607] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffd6a2f490 [ 716.048764][ T5607] R13: 00007fcac18344bb R14: 00000000000aebaf R15: 00007fffd6a2f4d0 [ 716.048796][ T5607] [ 716.050773][ T5607] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 716.413992][T13402] loop6: detected capacity change from 0 to 4096 [ 716.415731][T13402] EXT4-fs (loop6): Test dummy encryption mode enabled [ 716.441767][T13402] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 716.681446][ T2017] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 716.794969][T13411] FAULT_INJECTION: forcing a failure. [ 716.794969][T13411] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 716.795023][T13411] CPU: 1 UID: 0 PID: 13411 Comm: syz.3.1861 Tainted: G L syzkaller #0 PREEMPT(full) [ 716.795055][T13411] Tainted: [L]=SOFTLOCKUP [ 716.795063][T13411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 716.795077][T13411] Call Trace: [ 716.795087][T13411] [ 716.795097][T13411] dump_stack_lvl+0xe8/0x150 [ 716.795128][T13411] should_fail_ex+0x3eb/0x540 [ 716.795158][T13411] _copy_to_user+0x31/0xb0 [ 716.795184][T13411] bpf_vlog_reverse_ubuf+0x2e2/0x3e0 [ 716.795247][T13411] bpf_vlog_finalize+0x189/0x3f0 [ 716.795273][T13411] bpf_log_attr_finalize+0x80/0x1e0 [ 716.795295][T13411] ? __pfx_bpf_log_attr_finalize+0x10/0x10 [ 716.795330][T13411] btf_new_fd+0x36c/0xc20 [ 716.795372][T13411] __sys_bpf+0xda7/0xe00 [ 716.795405][T13411] ? __pfx___sys_bpf+0x10/0x10 [ 716.795432][T13411] ? do_futex+0x3e7/0x4e0 [ 716.795488][T13411] ? rcu_is_watching+0x16/0xb0 [ 716.795517][T13411] __x64_sys_bpf+0xba/0xd0 [ 716.795545][T13411] do_syscall_64+0x166/0x520 [ 716.795566][T13411] ? trace_irq_disable+0x3b/0x140 [ 716.795585][T13411] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 716.795608][T13411] ? clear_bhb_loop+0x70/0xc0 [ 716.795642][T13411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 716.795665][T13411] RIP: 0033:0x7fe97c99e159 [ 716.795687][T13411] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 716.795707][T13411] RSP: 002b:00007fe97d78f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 716.795733][T13411] RAX: ffffffffffffffda RBX: 00007fe97cc26090 RCX: 00007fe97c99e159 [ 716.795750][T13411] RDX: 0000000000000028 RSI: 0000200000001b40 RDI: 0000000000000012 [ 716.795765][T13411] RBP: 00007fe97ca3506b R08: 0000000000000000 R09: 0000000000000000 [ 716.795780][T13411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 716.795795][T13411] R13: 00007fe97cc26128 R14: 00007fe97cc26090 R15: 00007fff97d9fc88 [ 716.795831][T13411] [ 716.877819][ T2017] usb 7-1: New USB device found: idVendor=8086, idProduct=0b03, bcdDevice=6c.b9 [ 716.941685][ T2017] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 716.941714][ T2017] usb 7-1: config 220 has 2 interfaces, different from the descriptor's value: 3 [ 716.941775][ T2017] usb 7-1: config 220 interface 1 altsetting 5 endpoint 0x89 has an invalid bInterval 48, changing to 7 [ 716.941803][ T2017] usb 7-1: config 220 interface 1 altsetting 5 endpoint 0x89 has invalid maxpacket 9583, setting to 1024 [ 716.941829][ T2017] usb 7-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 716.941855][ T2017] usb 7-1: config 220 interface 0 has no altsetting 0 [ 716.941874][ T2017] usb 7-1: config 220 interface 1 has no altsetting 0 [ 717.018804][ T2017] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 717.018835][ T2017] usb 7-1: Product: syz [ 717.018850][ T2017] usb 7-1: Manufacturer: syz [ 717.018866][ T2017] usb 7-1: SerialNumber: syz [ 717.089025][ T1021] team0 (unregistering): Port device team_slave_1 removed [ 717.147934][ T1021] team0 (unregistering): Port device team_slave_0 removed [ 718.163054][ T2017] uvcvideo 7-1:220.0: probe with driver uvcvideo failed with error -22 [ 718.186417][ T2017] usb 7-1: USB disconnect, device number 23 [ 718.308216][ T5270] 8021q: adding VLAN 0 to HW filter on device eth12 [ 718.472311][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 718.472437][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 718.486896][T13259] bridge0: port 1(bridge_slave_0) entered blocking state [ 718.487005][T13259] bridge0: port 1(bridge_slave_0) entered disabled state [ 718.487146][T13259] bridge_slave_0: entered allmulticast mode [ 718.495316][T13259] bridge_slave_0: entered promiscuous mode [ 718.513928][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 718.514056][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 718.518399][T13259] bridge0: port 2(bridge_slave_1) entered blocking state [ 718.518504][T13259] bridge0: port 2(bridge_slave_1) entered disabled state [ 718.518627][T13259] bridge_slave_1: entered allmulticast mode [ 718.526715][T13259] bridge_slave_1: entered promiscuous mode [ 718.706354][ T8320] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 718.754878][T13259] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 718.795761][T13259] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 718.822403][ T2017] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 718.903404][T13259] team0: Port device team_slave_0 added [ 718.937625][T13259] team0: Port device team_slave_1 added [ 718.992094][ T2017] usb 4-1: Using ep0 maxpacket: 32 [ 718.992955][ T2017] usb 4-1: New USB device found: idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 718.994427][ T2017] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.998334][ T2017] usb 4-1: config 0 descriptor?? [ 719.099560][T13259] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 719.099581][T13259] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 719.099607][T13259] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 719.142977][T13259] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 719.142994][T13259] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 719.143020][T13259] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 719.154180][ T1021] IPVS: stop unused estimator thread 0... [ 719.210623][ T2017] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 719.223987][ T2017] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 719.225013][ T2017] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 719.225073][ T2017] usb 4-1: media controller created [ 719.272046][ T2017] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 719.464295][T13259] hsr_slave_0: entered promiscuous mode [ 719.467779][T13259] hsr_slave_1: entered promiscuous mode [ 719.471521][T13259] debugfs: 'hsr0' already exists in 'hsr' [ 719.471544][T13259] Cannot create hsr debugfs directory [ 719.827094][T13445] loop6: detected capacity change from 0 to 256 [ 719.838108][T13445] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 720.208770][ T5270] 8021q: adding VLAN 0 to HW filter on device eth13 [ 720.241218][ T2017] stb0899_attach: Driver disabled by Kconfig [ 720.241264][ T2017] az6027: no front-end attached [ 720.241264][ T2017] [ 720.242360][ T2017] az6027: usb out operation failed. (-71) [ 720.242378][ T2017] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 720.244925][ T2017] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input62 [ 720.250107][ T2017] dvb-usb: schedule remote query interval to 400 msecs. [ 720.250142][ T2017] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 720.310155][ T2017] usb 4-1: USB disconnect, device number 46 [ 720.490752][ T2017] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 722.173256][T13259] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 722.191298][T13259] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 722.194211][T13259] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 722.206674][T13259] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 722.213217][T13259] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 722.214028][T13469] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1868'. [ 722.215697][T13469] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1868'. [ 722.244552][T13473] loop1: detected capacity change from 0 to 512 [ 722.257489][T13473] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 722.279119][T13259] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 722.287741][T13259] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 722.328702][T13473] EXT4-fs error (device loop1): ext4_orphan_get:1429: comm syz.1.1870: bad orphan inode 13 [ 722.328738][T13473] loop1: lost filesystem error report for type 5 error -117 [ 722.330979][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 722.331002][ C0] EXT4-fs (loop1): last error at time 1791088861: ext4_orphan_get:1429 [ 722.336387][T13259] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 722.375091][T13473] ext4_test_bit(bit=12, block=18) = 1 [ 722.375112][T13473] is_bad_inode(inode)=0 [ 722.375120][T13473] NEXT_ORPHAN(inode)=0 [ 722.375129][T13473] max_ino=32 [ 722.375137][T13473] i_nlink=1 [ 722.378535][T13473] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 722.480450][T13473] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 722.498415][T13473] EXT4-fs error (device loop1): ext4_validate_block_bitmap:445: comm syz.1.1870: bg 0: block 248: padding at end of block bitmap is not set [ 722.626925][T13473] Quota error (device loop1): write_blk: dquota write failed [ 722.627036][T13473] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 722.627094][T13473] EXT4-fs error (device loop1): ext4_acquire_dquot:7069: comm syz.1.1870: Failed to acquire dquot type 1 [ 723.258326][T13259] 8021q: adding VLAN 0 to HW filter on device bond0 [ 723.305439][ T5607] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 723.395600][T13259] 8021q: adding VLAN 0 to HW filter on device team0 [ 723.442978][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 723.443082][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 723.497802][T10999] bridge0: port 2(bridge_slave_1) entered blocking state [ 723.497925][T10999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 725.059895][T13104] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 726.102706][T13104] veth0_vlan: entered promiscuous mode [ 726.164815][T13104] veth1_vlan: entered promiscuous mode [ 726.260172][T13259] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 726.273918][ T5270] 8021q: adding VLAN 0 to HW filter on device eth14 [ 727.030170][T13544] can0: slcan on ptm0. [ 727.735578][T13541] can0 (unregistered): slcan off ptm0. [ 727.843884][T13104] veth0_macvtap: entered promiscuous mode [ 727.882485][T13104] veth1_macvtap: entered promiscuous mode [ 727.980608][T13104] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 728.013765][T13104] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 728.063575][T10999] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.064891][ T7063] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.064935][ T7063] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.064972][ T7063] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.346562][T10999] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 728.346588][T10999] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 728.465904][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 728.465930][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 728.584942][T13259] veth0_vlan: entered promiscuous mode [ 728.644509][T13259] veth1_vlan: entered promiscuous mode [ 728.777537][T13259] veth0_macvtap: entered promiscuous mode [ 728.799532][T13259] veth1_macvtap: entered promiscuous mode [ 728.909639][T13259] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 728.932366][T13569] loop7: detected capacity change from 0 to 256 [ 728.990789][T13259] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 729.056272][ T1021] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.056323][ T1021] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.056360][ T1021] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.056395][ T1021] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.485831][T13582] loop7: detected capacity change from 0 to 1024 [ 729.500282][T13582] EXT4-fs: Ignoring removed bh option [ 729.522677][T13582] EXT4-fs (loop7): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 729.554267][T13580] loop6: detected capacity change from 0 to 2048 [ 729.569638][T13580] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 729.572911][T13580] NILFS (loop6): invalid segment: Sequence number mismatch [ 729.572934][T13580] NILFS (loop6): unable to fall back to spare super block [ 729.572947][T13580] NILFS (loop6): error -22 while searching super root [ 729.583229][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 729.583248][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 729.639244][T13582] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 730.865477][T13104] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 730.888832][ T7063] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 730.888872][ T7063] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 730.969487][ T5270] 8021q: adding VLAN 0 to HW filter on device eth15 [ 731.463900][T13609] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1879'. [ 731.466467][T13609] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1879'. [ 732.055658][T13632] loop8: detected capacity change from 0 to 128 [ 732.150008][T13632] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 732.169714][T13632] ext4 filesystem being mounted at /2/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 732.593588][ T5270] 8021q: adding VLAN 0 to HW filter on device eth16 [ 732.843946][T13641] loop3: detected capacity change from 0 to 256 [ 732.880195][T13259] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 732.916282][T13622] loop1: detected capacity change from 0 to 131072 [ 732.925344][T13622] F2FS-fs (loop1): invalid crc value [ 733.031907][T13622] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 733.047805][T13622] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 733.110767][ T32] audit: type=1800 audit(1791088872.355:189): pid=13622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1887" name="file2" dev="loop1" ino=8 res=0 errno=-22 [ 733.365250][T13630] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input64 [ 733.433541][T13630] input: failed to attach handler evdev to device input64, error: -4 [ 733.901243][ C1] [ 733.903641][ C1] ================================ [ 733.908834][ C1] WARNING: inconsistent lock state [ 733.913980][ C1] syzkaller #0 Tainted: G L [ 733.920091][ C1] -------------------------------- [ 733.925210][ C1] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage. [ 733.932094][ C1] swapper/1/0 [HC0[0]:SC1[1]:HE1:SE0] takes: [ 733.938097][ C1] ffff88802b106260 (sk_lock-AF_X25){+.?.}-{0:0}, at: x25_kill_by_neigh+0x10d/0x250 [ 733.947568][ C1] {SOFTIRQ-ON-W} state was registered at: [ 733.953315][ C1] lock_acquire+0x115/0x350 [ 733.957933][ C1] lock_sock_nested+0x41/0x100 [ 733.962812][ C1] x25_release+0xa0/0x3d0 [ 733.967300][ C1] __sock_release+0xa0/0x1f0 [ 733.972001][ C1] sock_close+0x1c/0x30 [ 733.976267][ C1] __fput+0x413/0xa50 [ 733.980352][ C1] fput_close_sync+0x11f/0x240 [ 733.985223][ C1] filp_close_sync+0x6e/0xa0 [ 733.989919][ C1] __se_sys_close_range+0xa77/0xef0 [ 733.995220][ C1] do_syscall_64+0x166/0x520 [ 733.999924][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 734.005929][ C1] irq event stamp: 15194812 [ 734.010466][ C1] hardirqs last enabled at (15194812): [] __local_bh_enable_ip+0xd6/0x140 [ 734.020646][ C1] hardirqs last disabled at (15194811): [] __local_bh_enable_ip+0x72/0x140 [ 734.030822][ C1] softirqs last enabled at (15194748): [] __irq_exit_rcu+0xcb/0x220 [ 734.040522][ C1] softirqs last disabled at (15194761): [] __irq_exit_rcu+0xcb/0x220 [ 734.050211][ C1] [ 734.050211][ C1] other info that might help us debug this: [ 734.058282][ C1] Possible unsafe locking scenario: [ 734.058282][ C1] [ 734.065743][ C1] CPU0 [ 734.069041][ C1] ---- [ 734.072337][ C1] lock(sk_lock-AF_X25); [ 734.076696][ C1] [ 734.080163][ C1] lock(sk_lock-AF_X25); [ 734.084738][ C1] [ 734.084738][ C1] *** DEADLOCK *** [ 734.084738][ C1] [ 734.092936][ C1] locks held by swapper/1/0: 1, last CPU#1: [ 734.098821][ C1] #0: ffffffff8ed5a3a0 (rcu_read_lock){....}-{1:3}, at: netif_receive_skb_core+0x33/0x2b0 [ 734.108874][ C1] [ 734.108874][ C1] stack backtrace: [ 734.114755][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 734.125347][ C1] Tainted: [L]=SOFTLOCKUP [ 734.129671][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 734.139748][ C1] Call Trace: [ 734.143023][ C1] [ 734.145865][ C1] dump_stack_lvl+0xe8/0x150 [ 734.150454][ C1] print_usage_bug+0x28c/0x2e0 [ 734.155215][ C1] valid_state+0xbe/0xf0 [ 734.159450][ C1] mark_lock_irq+0x36/0x380 [ 734.163949][ C1] mark_lock+0x117/0x190 [ 734.168182][ C1] __lock_acquire+0x71e/0x2de0 [ 734.172941][ C1] ? kasan_quarantine_put+0xbb/0x1f0 [ 734.178223][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 734.183238][ C1] ? lock_acquire+0x115/0x350 [ 734.187920][ C1] lock_acquire+0x115/0x350 [ 734.192437][ C1] ? x25_kill_by_neigh+0x10d/0x250 [ 734.197570][ C1] ? x25_kill_by_neigh+0x103/0x250 [ 734.202690][ C1] lock_sock_nested+0x41/0x100 [ 734.207467][ C1] ? x25_kill_by_neigh+0x10d/0x250 [ 734.212588][ C1] x25_kill_by_neigh+0x10d/0x250 [ 734.217527][ C1] x25_lapb_receive_frame+0x1b0/0xfb0 [ 734.222910][ C1] ? netif_receive_skb_core+0x33/0x2b0 [ 734.228365][ C1] ? netif_receive_skb_core+0x33/0x2b0 [ 734.233827][ C1] ? __pfx_x25_lapb_receive_frame+0x10/0x10 [ 734.239727][ C1] netif_receive_skb_core+0x2a6/0x2b0 [ 734.245092][ C1] lapbeth_napi_poll+0x42/0x90 [ 734.249901][ C1] __napi_poll+0xaa/0x330 [ 734.254257][ C1] net_rx_action+0x61d/0xf50 [ 734.258854][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 734.263983][ C1] handle_softirqs+0x223/0x840 [ 734.268759][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 734.273517][ C1] __irq_exit_rcu+0xcb/0x220 [ 734.278120][ C1] irq_exit_rcu+0x9/0x30 [ 734.282355][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 734.287996][ C1] [ 734.290947][ C1] [ 734.293903][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 734.299877][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 734.305506][ C1] Code: 4b 85 02 e9 03 18 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 09 1e 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 734.325105][ C1] RSP: 0018:ffffc900001c7e40 EFLAGS: 00000246 [ 734.331181][ C1] RAX: 0000000000e7da87 RBX: ffffffff819c17d0 RCX: 8000000000000001 [ 734.339168][ C1] RDX: 0000000000000001 RSI: ffffffff8e43d4e5 RDI: ffffffff8c6df680 [ 734.347163][ C1] RBP: ffffc900001c7f10 R08: ffff8880b8733e5b R09: 1ffff110170e67cb [ 734.355139][ C1] R10: dffffc0000000000 R11: ffffed10170e67cc R12: 0000000000000000 [ 734.363112][ C1] R13: 1ffff11003cd93e8 R14: 1ffff92000038fd0 R15: dffffc0000000000 [ 734.371091][ C1] ? do_idle+0x2e0/0x540 [ 734.375372][ C1] default_idle+0x9/0x20 [ 734.379615][ C1] default_idle_call+0x72/0xb0 [ 734.384375][ C1] do_idle+0x2e0/0x540 [ 734.388460][ C1] ? __pfx_do_idle+0x10/0x10 [ 734.393049][ C1] cpu_startup_entry+0x43/0x60 [ 734.397832][ C1] start_secondary+0x101/0x110 [ 734.402603][ C1] common_startup_64+0x13e/0x157 [ 734.407564][ C1] [ 734.410657][ C1] BUG: sleeping function called from invalid context at net/core/sock.c:3839 [ 734.410671][ C1] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 0, name: swapper/1 [ 734.410681][ C1] preempt_count: 101, expected: 0 [ 734.410687][ C1] RCU nest depth: 1, expected: 0 [ 734.410694][ C1] INFO: lockdep is turned off. [ 734.410698][ C1] Preemption disabled at: [ 734.410701][ C1] [<0000000000000000>] 0x0 [ 734.410720][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 734.410738][ C1] Tainted: [L]=SOFTLOCKUP [ 734.410743][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 734.410750][ C1] Call Trace: [ 734.410756][ C1] [ 734.410761][ C1] dump_stack_lvl+0xe8/0x150 [ 734.410774][ C1] __might_resched+0x36a/0x4c0 [ 734.410787][ C1] lock_sock_nested+0x56/0x100 [ 734.410800][ C1] x25_kill_by_neigh+0x10d/0x250 [ 734.410813][ C1] x25_lapb_receive_frame+0x1b0/0xfb0 [ 734.410826][ C1] ? netif_receive_skb_core+0x33/0x2b0 [ 734.410842][ C1] ? netif_receive_skb_core+0x33/0x2b0 [ 734.410862][ C1] ? __pfx_x25_lapb_receive_frame+0x10/0x10 [ 734.410885][ C1] netif_receive_skb_core+0x2a6/0x2b0 [ 734.410909][ C1] lapbeth_napi_poll+0x42/0x90 [ 734.410927][ C1] __napi_poll+0xaa/0x330 [ 734.410958][ C1] net_rx_action+0x61d/0xf50 [ 734.410984][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 734.411016][ C1] handle_softirqs+0x223/0x840 [ 734.411032][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 734.411045][ C1] __irq_exit_rcu+0xcb/0x220 [ 734.411055][ C1] irq_exit_rcu+0x9/0x30 [ 734.411065][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 734.411078][ C1] [ 734.411082][ C1] [ 734.411087][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 734.411099][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 734.411113][ C1] Code: 4b 85 02 e9 03 18 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 09 1e 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 734.411124][ C1] RSP: 0018:ffffc900001c7e40 EFLAGS: 00000246 [ 734.411137][ C1] RAX: 0000000000e7da87 RBX: ffffffff819c17d0 RCX: 8000000000000001 [ 734.411145][ C1] RDX: 0000000000000001 RSI: ffffffff8e43d4e5 RDI: ffffffff8c6df680 [ 734.411154][ C1] RBP: ffffc900001c7f10 R08: ffff8880b8733e5b R09: 1ffff110170e67cb [ 734.411163][ C1] R10: dffffc0000000000 R11: ffffed10170e67cc R12: 0000000000000000 [ 734.411171][ C1] R13: 1ffff11003cd93e8 R14: 1ffff92000038fd0 R15: dffffc0000000000 [ 734.411181][ C1] ? do_idle+0x2e0/0x540 [ 734.411194][ C1] default_idle+0x9/0x20 [ 734.411205][ C1] default_idle_call+0x72/0xb0 [ 734.411215][ C1] do_idle+0x2e0/0x540 [ 734.411226][ C1] ? __pfx_do_idle+0x10/0x10 [ 734.411239][ C1] cpu_startup_entry+0x43/0x60 [ 734.411250][ C1] start_secondary+0x101/0x110 [ 734.411260][ C1] common_startup_64+0x13e/0x157 [ 734.411275][ C1] [ 735.293919][T13675] nbd2: detected capacity change from 0 to 127 [ 735.331024][ T5611] block nbd2: Receive control failed (result -32) [ 735.391941][ T1987] block nbd2: Dead connection, failed to find a fallback [ 735.391964][ T1987] block nbd2: shutting down sockets [ 735.391977][ T1987] blk_print_req_error: 110 callbacks suppressed [ 735.391989][ T1987] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 735.392012][ T1987] buffer_io_error: 138 callbacks suppressed [ 735.392086][ T1987] Buffer I/O error on dev nbd2, logical block 0, async page read [ 735.393536][ T1987] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 735.393563][ T1987] Buffer I/O error on dev nbd2, logical block 1, async page read [ 735.394468][ T1987] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 735.394493][ T1987] Buffer I/O error on dev nbd2, logical block 2, async page read [ 735.394565][ T1987] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 735.394589][ T1987] Buffer I/O error on dev nbd2, logical block 3, async page read [ 735.395404][ T1987] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 735.395429][ T1987] Buffer I/O error on dev nbd2, logical block 0, async page read [ 735.395958][ T1987] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 735.395983][ T1987] Buffer I/O error on dev nbd2, logical block 1, async page read [ 735.396919][ T1987] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 735.396944][ T1987] Buffer I/O error on dev nbd2, logical block 2, async page read [ 735.397062][ T1987] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 735.397086][ T1987] Buffer I/O error on dev nbd2, logical block 3, async page read [ 735.397166][ T1987] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 735.397189][ T1987] Buffer I/O error on dev nbd2, logical block 0, async page read [ 735.397765][ T1987] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 735.397789][ T1987] Buffer I/O error on dev nbd2, logical block 1, async page read [ 735.407205][T13086] ldm_validate_partition_table(): Disk read failed. [ 735.412966][T13086] Dev nbd2: unable to read RDB block 0 [ 735.420337][T13086] nbd2: unable to read partition table [ 735.448356][T13086] ldm_validate_partition_table(): Disk read failed. [ 735.455618][T13086] Dev nbd2: unable to read RDB block 0 [ 735.456713][T13086] nbd2: unable to read partition table [ 736.227015][T13692] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1897'. [ 736.227484][T13692] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1897'. [ 741.651581][ T1987] block nbd1: Possible stuck request ffff888026f97000: control (read@0,2048B). Runtime 30 seconds [ 741.651626][ T1987] block nbd1: Possible stuck request ffff888026f971c0: control (read@2048,1024B). Runtime 30 seconds [ 741.651650][ T1987] block nbd1: Possible stuck request ffff888026f97380: control (read@3072,1024B). Runtime 30 seconds