last executing test programs: 26.054415801s ago: executing program 2 (id=305): sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x20000044) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56fa8ef1d91a4574758ecefbe1d7a46df6d558ecf1820f", 0x18) r4 = accept4(r1, 0x0, 0x0, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) sendto$inet6(r4, &(0x7f00000002c0)="9b8b5ff782aab00bf0d3898c7498862ceb4b18f88d5b5c4c1d67f78fce12c90909b323e0d56d5b6b02feaec836bf90d036d44545c5de1e448389336bc189105efb9b6561da72fae3f1a083302ec294bc", 0x50, 0x1, &(0x7f0000000340)={0xa, 0x4e24, 0x911, @loopback, 0x6}, 0x1c) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) write$binfmt_misc(r0, &(0x7f0000000240), 0xfffffecc) 17.664019427s ago: executing program 2 (id=318): socket$inet6(0xa, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) rt_sigqueueinfo(0xffffffffffffffff, 0x1f, &(0x7f0000000040)={0x20000001, 0x4000, 0x8}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @func_proto, @struct={0x0, 0x0, 0x0, 0x9, 0x0, 0x2}]}}, &(0x7f0000000280)=""/240, 0x3e, 0xf0, 0x1}, 0x28) r0 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, &(0x7f0000000000)) socket$inet_smc(0x2b, 0x1, 0x0) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) mknod$loop(0x0, 0x6000, 0x0) openat(0xffffffffffffffff, 0x0, 0x400, 0x100) lseek(0xffffffffffffffff, 0x2, 0x893b8993f4d168b9) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0}) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_emit_ethernet(0x72, &(0x7f0000000140)={@broadcast, @random="17043a73dbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@private}, {@local}, {@private}, {@remote}, {@private}]}]}}}}}}}, 0x0) 14.818274542s ago: executing program 2 (id=321): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1d, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @lsm=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 14.069627743s ago: executing program 3 (id=323): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2402, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000}) pipe(&(0x7f0000000340)) pipe(&(0x7f00000000c0)) r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$can_bcm(0x1d, 0x2, 0x2) fsmount(r0, 0x0, 0x0) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x24, @short={0x2, 0xffff, 0xaaa0}}, 0x14, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x4008044}, 0x0) r5 = socket(0x1, 0x5, 0x0) close(r5) sendmsg$inet(r3, &(0x7f0000000800)={0xffffffffffffffff, 0x0, &(0x7f0000000780)=[{&(0x7f0000000380)="ce099d74838a2a86461f3e069326760689c27659a2aa5f4e940dd1c11aa1519647ad32755d819e1c50d8be0f17fe41109893dc12b8e27a58a8f732fb1f8395a7e252becebdff1d6c93e1672404e7069931c0e17507e081e5c2b8da7ef8fd392a12ed9cc0e26b4ea343dbc04a2088ef7b87a77d098e244e94b44cebcb433d92efcb761e7533c321f65abe8769996747628e21d3e52aceb7b059525689a289077a79a2740f4d2c0c17eb3394d616a3bd8907ac250e87", 0xb5}, {&(0x7f0000000500)="05ec1a80c2ef1534c0c5544cbbec06bb5e115b668f407bef74a145b44f851632fc9dc1178e6eded7616d38994c8888e7084aae4e609e82b0b47402f9b6a08dd59aa1a7869b91132d10", 0x49}, {&(0x7f00000006c0)="1c06930ba1b6e01fd5ec011cf27ef4751a8a72029d207ab6512d5cd4062c98917776aa258fc83bc055b74f97d59304b56c93d68d724105d96f3a1e0d18b269d380462461d576624b3c3e51914d", 0x4d}], 0x3, &(0x7f00000007c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}], 0x18}, 0x40004) fanotify_init(0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'virt_wifi0\x00', &(0x7f0000000040)=@ethtool_ts_info={0x1f}}) epoll_create1(0x80000) 14.063610976s ago: executing program 2 (id=324): mprotect(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000005) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x200001, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) preadv(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x3) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'pcmda12\x00', [0x100, 0x80000000, 0x2, 0xa, 0xe, 0x800005, 0x8, 0x3, 0x8, 0xfd, 0x2, 0x1, 0x1, 0x1, 0x3, 0xfd, 0x5, 0x7c, 0x3, 0x40000003, 0x89, 0x10, 0x0, 0x0, 0x0, 0xe66, 0x403, 0x8, 0xa6b5, 0xfffffffe, 0x1]}) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000080)={0x1, 0x4002, 0x3f, 0x1, 0x3f000000, 0x0}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000000000/0x2000)=nil, 0x2000, &(0x7f0000000000)='&\xa7#\x00') 12.385787773s ago: executing program 2 (id=327): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_mount_image$f2fs(&(0x7f0000010240), &(0x7f0000010280)='./mnt\x00', 0x320000a, &(0x7f00000004c0)=ANY=[@ANYBLOB="746573745f64756d6d795f656e6372797074696f6e2c00f5267ef859bf314a50b3ee082bee149254dc3f5e7aeac83a266dbe5265b18513cf0d6f92c762754d21468964ae812a33c13f4e497ba5c077d4bb56bda51c99fafaa81facb632898549518e9e9d0185f8484b79eca8e1a1f51eaccc719e20a98792740b9423660c95e9bc05b38cd1302b1b17511f5cce9cbea836af9d8e719f37192be3ef4864b661bb15cec3a7f56c569ba11201573195d1e52c313eda8f49268e40b1f45ae26a11bccff6473e0710d9271094ad9908a9249cb6954539"], 0x0, 0x10215, &(0x7f0000020540)="$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") ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000380)={0x1, 0x0, &(0x7f0000000280)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETGAMMA(r1, 0xc02064a4, &(0x7f0000000600)={r2, 0x0, &(0x7f00000003c0), 0x0, 0x0}) ptrace$ARCH_SET_GS(0x1e, r0, &(0x7f0000000040), 0x1001) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x2f, 0x44, 0x4, 0x2, 0xa, @private1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x11}}, 0x700, 0x700, 0x9f, 0x4}}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x353, 0x6, 0x88c, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x3, 0xe}, 0x50) r4 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'wlan1\x00', 0x0}) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r3, &(0x7f0000000fc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000f80)=""/13, 0xd}, 0x2}], 0x1, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x46, 0x0, 0x0) setsockopt$inet6_int(r3, 0x29, 0x42, &(0x7f0000000100)=0x5, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) shutdown(r3, 0x1) 12.17733877s ago: executing program 4 (id=329): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x303}, "0e57b3d487e2db32", "a9df7ccffde8899f914d4f2c3e263509", "3c36a51c", "6775c975b6b15e11"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) close(0x3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) socket$nl_generic(0x10, 0x3, 0x10) getrandom(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) fanotify_init(0x200, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000240)=0xc) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x9, 0x3, 0x2bc, 0x130, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1f4, 0xffffffff, 0xffffffff, 0x1f4, 0xffffffff, 0x3, &(0x7f0000000000), {[{{@uncond, 0x0, 0xc8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x24}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x7, 0x1, 0x3, 'snmp_trap\x00', 'syz0\x00', {0x1000}}}}, {{@uncond, 0x0, 0xa4, 0xc4}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x318) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) 12.129088442s ago: executing program 3 (id=330): syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x432300c, 0x0, 0x21, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) lstat(0x0, &(0x7f0000000600)) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000a40)=""/4096, 0x1000) 9.544736724s ago: executing program 0 (id=331): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x4, &(0x7f0000000200)=@raw=[@exit, @ldst={0x0, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @exit], &(0x7f0000000280)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0xc, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x4}, 0x10}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4040080) socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) r1 = mq_open(&(0x7f0000001880)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\x1c`\xbd\xe1e\x80\x7f\xd2&l0\xc1b\xac\x8b\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL%Jw\x99y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3\x05\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xc8\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xc7\xa7\x82\xb9V}`\xb7\xfc@\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5m\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v>\x9b\n0\xb2 h\xad5\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\'/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f9\xce\x1eYV\xa2\xc4\x03PV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x9b\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xd1\x06F\xef\xbd\xeb\xf0\'\f\f\x003\xecp\x18\x9e\x1d\xeaH\xdaQ%+\xf4\xae\xab0\b\x17W\xba\xaf4E\xe62\xefm\xdd+\xb2\x1b:\xc0cc\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x97s\x03`\xba\xf1\xdb\x05\xe5C)\x8f\xbchyL1:\xc2\xea\x8a\xfc\tq\xfa\xec&\xc7\xde\xf4\xf2\xb9\xe1\xa1\x80)1\xbe@Bt\xb7\xce\xc9\xee\xa8v\t\xfa,\xa2\x9a\xa3\\\xfbM\xb5\xfd\xa9\xe3\x9f\xf7\x85\x87w\x1d]& 8\xb5\xba\xea\xad\xa9\xd4V\xf1\xe9\xaaT\xc8\xff\xaf\xef\x91\xca\x9c\x80\xbeYd]\xfb\x1a\x96?\xb6\xd7{X\xa1H\xeb\xce\xd7\xb7\xf7\x15\xd6\x88\x91\xef{\xf8K@\xb6ch\x1e\x16\xd5m@\xa8\x91\xa5\xc5@\xa7\x00\xab\xc5\xc8\xc8\x9c\xe3:\xac\x1eG\xa0e\'/\x15G\x8e\xe5\x16\xd5S ]\xf8\xa1\xa46\x9a\xf0d!\xc8\x81S\xbc\x18\xdf\xa0\xfek\xb0(\xf7\xba5\x8e\xe5A\xd5l\xfbp\xcb\xa8\xf0b\x91\xc4\xd3+)Sy\x81\xe3\r%C\x03enM\xf1\xdf\xe3b\xb7\x9b\f\x82\xb1z\xcf^\x06\xcd\xa2\x96\xe3\xd5\xbd@1\xbe\x02\xad\\\x89\xd0\xe0\xa8\x11\xb4B\\\x14\\\xed5\x9c\xd7n\x8d\xec\xb5\xcc\xf8q', 0x42, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') mq_timedsend(r1, &(0x7f0000000040), 0x0, 0x3, 0x0) close(r1) 9.357351012s ago: executing program 1 (id=332): socket$inet6(0xa, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e1e, 0x19fb, @empty, 0x75c41ba2}, 0x1c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000033c0)={0x53, 0xfffffffe, 0x6, 0x6b, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="1c3513000000", 0x0, 0x0, 0x30520cf7f25f0c64, 0x2, 0x0}) 9.057740458s ago: executing program 1 (id=333): epoll_create1(0x80000) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000022"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000580)=ANY=[@ANYBLOB="201104060000000101", @ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) 8.942776762s ago: executing program 2 (id=334): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1d, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @lsm=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8.897063085s ago: executing program 0 (id=335): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r4, &(0x7f0000001880)=""/4093, 0xffd) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000180)="bbcebf2e9bb51264564aba06d72d2048", 0x10) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x27}, 0x74) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x7, 0x4, 0xa498, 0xb}, 0x50) r6 = syz_open_dev$vim2m(&(0x7f0000000140), 0xffffffffffffffe6, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r6, 0xc02c564a, &(0x7f0000000240)={0x5, 0x33565348, 0x1, @discrete={0x7fff, 0x6991}}) connect$inet6(r5, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r5, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)="82", 0x1}], 0x1}}], 0x1, 0x4400c800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006300)=[{{&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f000000a900)={0x0, 0x0, &(0x7f000000a8c0)={&(0x7f000000a7c0)={0x38, 0x2, 0x1, 0x207, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @broadcast}}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40040}, 0x80) 8.834190804s ago: executing program 3 (id=336): syz_usb_connect(0x2, 0x52, &(0x7f0000000000)=ANY=[@ANYBLOB="120100036ffa680863070120ff2c0102030109024000021109400c0904080601ff8bbd020a240107000d02010205240503"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bind$tipc(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000200)) sendfile(r0, r0, &(0x7f00000002c0)=0x9, 0xc4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) getdents64(r0, &(0x7f0000001e80)=""/4118, 0x1016) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x2, 0x16, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x6}, 0x8}, 0x30) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r0) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x84, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r0}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4004851}, 0x8000) 7.594558205s ago: executing program 0 (id=337): ioctl$IOMMU_IOAS_COPY$syz(0xffffffffffffffff, 0x3b83, &(0x7f0000001ec0)={0x28, 0x10006, 0x0, 0x0, 0xd0c1b, 0xfffffffffffffffb, 0x2, 0x38a517}) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x4b) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x23, &(0x7f0000000000)=0x2, 0x4) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r1, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)=""/127, 0x7f}}], 0x1, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) ioctl$int_out(r0, 0x5460, &(0x7f0000000240)) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 6.489829938s ago: executing program 4 (id=338): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}}, 0x24}}, 0x8000) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x23, &(0x7f0000000040)=""/40, &(0x7f0000000080)=0x28) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x44, r2, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x44}}, 0x0) 6.392794698s ago: executing program 0 (id=339): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000900)={0x0, 0x18, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) 6.009082575s ago: executing program 1 (id=340): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2402, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000}) pipe(&(0x7f0000000340)) pipe(&(0x7f00000000c0)) r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$can_bcm(0x1d, 0x2, 0x2) fsmount(r0, 0x0, 0x0) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x24, @short={0x2, 0xffff, 0xaaa0}}, 0x14, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x4008044}, 0x0) r5 = socket(0x1, 0x5, 0x0) close(r5) sendmsg$inet(r3, &(0x7f0000000800)={0xffffffffffffffff, 0x0, &(0x7f0000000780)=[{&(0x7f0000000380)="ce099d74838a2a86461f3e069326760689c27659a2aa5f4e940dd1c11aa1519647ad32755d819e1c50d8be0f17fe41109893dc12b8e27a58a8f732fb1f8395a7e252becebdff1d6c93e1672404e7069931c0e17507e081e5c2b8da7ef8fd392a12ed9cc0e26b4ea343dbc04a2088ef7b87a77d098e244e94b44cebcb433d92efcb761e7533c321f65abe8769996747628e21d3e52aceb7b059525689a289077a79a2740f4d2c0c17eb3394d616a3bd8907ac250e87", 0xb5}, {&(0x7f0000000500)="05ec1a80c2ef1534c0c5544cbbec06bb5e115b668f407bef74a145b44f851632fc9dc1178e6eded7616d38994c8888e7084aae4e609e82b0b47402f9b6a08dd59aa1a7869b91132d10", 0x49}, {&(0x7f00000006c0)="1c06930ba1b6e01fd5ec011cf27ef4751a8a72029d207ab6512d5cd4062c98917776aa258fc83bc055b74f97d59304b56c93d68d724105d96f3a1e0d18b269d380462461d576624b3c3e51914d", 0x4d}], 0x3, &(0x7f00000007c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}], 0x18}, 0x40004) fanotify_init(0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'virt_wifi0\x00', &(0x7f0000000040)=@ethtool_ts_info={0x1f}}) epoll_create1(0x80000) 5.916717882s ago: executing program 3 (id=341): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0xa8, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x70, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x60, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xc, 0x1, 'physdev\x00'}, @NFTA_MATCH_INFO={0x46, 0x3, "7e6b92c43235dc7e977221f83c3f179e65022fc067b787cd67b6d9983b1bddafbdf6a37da5ed332cd2ee94b31d2ec330ce34cc676c0783a4bcc1e966554b04705820"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, '\''}]}], {0x14, 0x11, 0x20, 0x0, 0x0, {0xa}}}, 0xd0}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$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") syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x20081e, &(0x7f00000001c0)={[{@noinit_itable}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7}}, {@noauto_da_alloc}]}, 0x1, 0x515, &(0x7f0000000240)="$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") quotactl$Q_GETFMT(0xffffffff80000401, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 5.744636361s ago: executing program 4 (id=342): sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x20000044) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56fa8ef1d91a4574758ecefbe1d7a46df6d558ecf1820f", 0x18) r4 = accept4(r1, 0x0, 0x0, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) sendto$inet6(r4, &(0x7f00000002c0)="9b8b5ff782aab00bf0d3898c7498862ceb4b18f88d5b5c4c1d67f78fce12c90909b323e0d56d5b6b02feaec836bf90d036d44545c5de1e448389336bc189105efb9b6561da72fae3f1a083302ec294bc", 0x50, 0x1, &(0x7f0000000340)={0xa, 0x4e24, 0x911, @loopback, 0x6}, 0x1c) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) write$binfmt_misc(r0, &(0x7f0000000240), 0xfffffecc) 5.585784794s ago: executing program 0 (id=343): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100ffffffff000000003900000008000300", @ANYRES32=r2, @ANYBLOB="18005a801400018005000a"], 0x34}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000040)=ANY=[@ANYBLOB="591a1d9a2bdb0180c225000e0800c9928dcc118f3abac94500002c00000000002990780000e000e0000001000000b581cedcbf1a08dae5a01f000500000000000000"], 0x0) (async) syz_emit_ethernet(0x3a, &(0x7f0000000040)=ANY=[@ANYBLOB="591a1d9a2bdb0180c225000e0800c9928dcc118f3abac94500002c00000000002990780000e000e0000001000000b581cedcbf1a08dae5a01f000500000000000000"], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/igmp\x00') recvfrom$rxrpc(r3, &(0x7f00000002c0)=""/232, 0xe8, 0x43, 0x0, 0x0) r4 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="1201000000000010ac054b02000000000001090224000100003000090400000103e6000009210000000122450009058103"], 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x1, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb00c}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_TXQLEN={0x8, 0xd, 0x1002ff}, @IFLA_MASTER={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4c011}, 0x40) (async) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x1, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb00c}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_TXQLEN={0x8, 0xd, 0x1002ff}, @IFLA_MASTER={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4c011}, 0x40) syz_usb_control_io(r4, 0x0, 0x0) (async) syz_usb_control_io(r4, 0x0, 0x0) r6 = getpid() fcntl$lock(r3, 0x24, &(0x7f0000000000)={0x1, 0x0, 0x1, 0x3, r6}) syz_usb_control_io(r4, &(0x7f0000000a40)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="40064500000045240d1adaa3cae546e2c5f437298fe78dc19175aa7b8d6afe2ef6b196de1aaab99b60f44276ce4c9bd640b78c7fb5f66b7397692465"], 0x0, 0x0, 0x0, 0x0}, 0x0) 3.722046847s ago: executing program 4 (id=344): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448c9, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000180)={[{@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@dioread_lock}, {@norecovery}, {@jqfmt_vfsv1}, {@lazytime}, {@noload}, {@usrquota}, {@lazytime}]}, 0xfe, 0x555, &(0x7f0000000980)="$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") r2 = socket(0x14, 0x2, 0x4) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x1, 0x4, 0x40000000000, 0xd, r3}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r4, &(0x7f0000002580)={0x2020}, 0x2020) setsockopt$inet6_tcp_int(r2, 0x6, 0x9, 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f00000001c0)={r5, r5}) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000540)=[{&(0x7f0000000580)='-', 0x1}], 0x1, 0x1) close(r8) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001340)="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", 0x5a7}], 0x1}, 0x8080) setsockopt$sock_attach_bpf(r9, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$tipc(r10, &(0x7f0000001000)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x34040840}, 0x5005) sendmsg$tipc(r9, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x4080) sendmsg$NL80211_CMD_SET_BEACON(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000c80)=ANY=[], 0x220}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) splice(r7, 0x0, r8, 0x0, 0xfffd, 0xa) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, 0x0, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x3b, &(0x7f0000000080)={0x0, 0x10, '\x00', [@generic={0x7, 0x80, "093d5c5eba8bdf8ac8cfedfc5f62a82b7b0f703a1b1ede6f7ae19f96264710299f38c39355f431de19f048e7e7c274084f25d5e9cad4d8214a663bdf2853f936f4d41d6b2d575ebc3508752e2bbbb1c4d70656f40a2f98138b286a149057eacbe796f507f2fa410b6138f106b885132f62d1999db5f15109de515064f9aced8e"}]}, 0x90) 3.437940305s ago: executing program 1 (id=345): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_clone(0x100000, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000026c0)=@deltfilter={0xfd8, 0x2d, 0x400, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x5, 0xffe0}, {0xa, 0x3}, {0x6, 0x5}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_cgroup={{0xb}, {0xfa0, 0x2, [@TCA_CGROUP_ACT={0xf9c, 0x1, [@m_connmark={0xe0, 0x0, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x671, 0x7, 0x7, 0x3}, 0xe57}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xe, 0x7, 0x9, 0x5ff}, 0xe}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xd, 0x10000, 0xffffffffffffffff, 0xc, 0xa00}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x3, 0xffffffffffffffff, 0x5, 0x5854}, 0xfffc}}]}, {0x3d, 0x6, "8603f539b6a7af824d262bf654e2998b1ef3d2c0c3dcff5329f40e2a6613622a8e0c660697488dd9d3852466b5f92790cca8a42cadda0bea24"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_connmark={0x50, 0x14, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x1, 0x20000000, 0x40, 0x2}, 0x8001}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_pedit={0xe68, 0x5, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe38, 0x2, {{{0x1c000000, 0x40, 0x4, 0x7, 0x400}, 0xb1, 0x3, [{0xf7b7, 0x5, 0x9, 0xd, 0xdd, 0x5}]}, [{0x3, 0x2, 0xffffffff, 0x3, 0xd8aa, 0x7}, {0xaa2, 0x6, 0x101, 0x6, 0x2, 0x3}, {0x200000, 0x100, 0x0, 0x5c6, 0x6830, 0x8}, {0x2, 0x311, 0x8, 0x4b, 0x2, 0x8}, {0x7, 0x5, 0x2, 0x212, 0x7, 0xe1}, {0x7, 0x4, 0x8d, 0x1ff, 0x1ff, 0x1000}, {0x200, 0x7, 0xffffffff, 0x9, 0x9}, {0x7, 0xfe4, 0x1, 0x0, 0x624, 0xb513}, {0x8, 0x3, 0x7ff, 0x70, 0x6, 0x8000}, {0xfffffffe, 0x0, 0x3ff, 0xb06, 0x1, 0x6}, {0x5, 0x1, 0xdb, 0x6, 0x2, 0x4}, {0x9, 0x4, 0x519f, 0x5, 0x6, 0x31c4}, {0x7, 0x7, 0x3ff, 0x1, 0x8000, 0x5}, {0x7fffffff, 0x1, 0x5, 0xfe45, 0x5, 0xb}, {0xbd, 0x5f05, 0x8, 0xf, 0x1, 0xa}, {0x0, 0x8000, 0x3, 0x7, 0xd17, 0x7}, {0xae, 0x7, 0x2, 0x2, 0x9}, {0x6, 0x4, 0xa, 0x3, 0x1, 0x3}, {0x2, 0xa502, 0x3, 0xfffffff7, 0x81, 0x1}, {0x80, 0x8, 0x9, 0x0, 0x0, 0x7}, {0x9, 0x4, 0x1400000, 0x9, 0xad, 0x6}, {0xc, 0xffffff00, 0x5, 0x3, 0x3, 0x3}, {0x7, 0x32da135, 0xb, 0x8, 0xa93c, 0x6}, {0x3e, 0x5bce, 0x4, 0x7ff, 0x80000001, 0x32b}, {0xffffffff, 0x9, 0x100, 0x1, 0xfffffffb, 0x9}, {0x10001, 0x1, 0xe0cc, 0x8, 0x9, 0x2}, {0xf7, 0x5, 0x800, 0x8, 0x7f}, {0xdbeb, 0x8, 0x1, 0x1, 0x1, 0x80000}, {0x5, 0x0, 0xbaf9, 0x4, 0x28000000, 0x9}, {0x0, 0x8, 0x6, 0x9, 0x5, 0xfffffff4}, {0xadfe, 0x9, 0x1, 0x4, 0xfaf, 0x81}, {0x800, 0x5, 0x3, 0x5, 0x5, 0x1e4}, {0x6, 0x7, 0x8, 0x8, 0xad38, 0x6}, {0xa, 0x4467, 0x9, 0x5, 0x401, 0x1}, {0x1ff, 0x400, 0x9, 0x80000001, 0x7ff, 0xb6}, {0x1000, 0xffff8001, 0x40, 0x2, 0x800, 0x3}, {0x9, 0xb, 0x5, 0x9, 0x4, 0x9}, {0x0, 0xe, 0x4, 0x4, 0x9, 0x6}, {0x5, 0x4, 0x6, 0xfffffffe, 0x4, 0xfff}, {0x5, 0x0, 0x1, 0x5a48, 0x6, 0xfffffff9}, {0xffffffff, 0x80000000, 0x6d, 0x0, 0x8, 0xe}, {0x9, 0xfffffffa, 0x5, 0x6, 0x8, 0x9}, {0x7fff, 0x3, 0x5, 0x3ff, 0x8, 0x7}, {0x10001, 0x7, 0x2, 0x7ff, 0x9, 0x6}, {0x3, 0x9de, 0x4, 0x11, 0x7, 0x9}, {0x3, 0x9, 0x8f, 0xffffdd1a, 0x10, 0x2}, {0x1, 0xa8a9, 0x1, 0x5, 0x7, 0x401}, {0x4, 0xffff, 0x1000, 0x1, 0x6, 0x1}, {0x2a, 0x0, 0x80000000, 0x0, 0xfc, 0x3}, {0xc55b, 0x5, 0xb, 0x8001, 0x4, 0x1ff}, {0x7, 0x6, 0x0, 0x1d, 0x42f, 0x7}, {0xfffffff8, 0x6, 0x3, 0x2, 0x7, 0x7}, {0x1, 0x2, 0x5, 0x30, 0xfe68, 0x800}, {0x80000000, 0x2, 0x1, 0x8, 0x0, 0xffffffff}, {0x3, 0x6021db75, 0x7fff, 0x1000, 0xc1, 0x1add65aa}, {0x2, 0x7, 0x4, 0x2, 0xe9, 0x986}, {0xba, 0x8, 0x6, 0x401, 0x4, 0x10}, {0x9, 0x7fffffff, 0xb70f, 0x40, 0x3, 0xfffffffe}, {0x4, 0x3, 0x4, 0xd, 0xb24, 0x6}, {0xbf, 0x3, 0xbf6, 0xfffeffff, 0x2, 0x3}, {0x3, 0x6, 0x4, 0x7c6, 0x80000001, 0x1}, {0x58e2, 0x1, 0x4, 0x7, 0x3ff, 0x4}, {0x6, 0xb4, 0xeb, 0x3, 0x6, 0xe}, {0xc, 0x1, 0x3, 0xf, 0x7, 0xdb10ee8a}, {0x3, 0xf, 0x81, 0x420d, 0xa, 0xad78}, {0x2, 0x4, 0xfffffffc, 0x401, 0x4, 0x2}, {0x4, 0x4, 0x3, 0xf908, 0x2, 0x400}, {0x800, 0x6, 0x2, 0x4, 0x8e20, 0x4}, {0x7ae4fc5e, 0x3, 0xf, 0xf87, 0x2, 0x1}, {0x2, 0x7, 0xed7e, 0x4, 0x5, 0xdc}, {0x4, 0x154, 0xfffffe00, 0x3ff80000, 0x2, 0xa}, {0x6, 0x5, 0x3, 0x3a84, 0x0, 0x1}, {0xeea1, 0x9, 0x55de2144, 0x9, 0x80, 0x7cf}, {0x2, 0x6, 0x8, 0x3, 0x0, 0x7fffffff}, {0x1000, 0x7f, 0x8000, 0xfffffffe, 0x8, 0xd1e}, {0x6, 0x2, 0x6c5, 0xd, 0x4, 0x8}, {0x1, 0x5, 0x10000, 0xc, 0x7ff, 0x5}, {0x4, 0x7, 0x264564e6, 0xea, 0x7fff, 0x1}, {0xa, 0x4, 0x2, 0x3, 0x0, 0x7}, {0x84000000, 0x9, 0x2, 0x8000, 0x5, 0x4}, {0x0, 0x2, 0xa483, 0x9, 0x2, 0x6}, {0x22, 0x2, 0x9, 0x1, 0x3, 0x4}, {0x3, 0x3, 0x7fff, 0x0, 0x46, 0x7fffffff}, {0x6, 0x8, 0xffffc000, 0x1ff, 0x8}, {0xe, 0x1, 0x0, 0x9, 0x9, 0x8}, {0x1000, 0x9, 0xffffffff, 0x100, 0x3ff}, {0x80, 0x1, 0x9, 0x6a59, 0x4, 0x3}, {0x8000, 0x0, 0x100, 0x1, 0x0, 0x4}, {0x0, 0x401, 0xbe5e, 0x0, 0x81, 0xd0}, {0x6, 0xa, 0x146e, 0x43d, 0xe, 0xb08}, {0x7ff, 0x0, 0x4, 0x0, 0x7f, 0x1}, {0xfffffff6, 0x5, 0xe, 0xff, 0x7, 0x6}, {0x0, 0x4c, 0x8, 0xfffffffc, 0x2, 0xd42}, {0xff, 0xfffffffc, 0x2, 0x0, 0xb881, 0x6}, {0x3, 0x8, 0xffffffff, 0xfffffbff, 0x1, 0x96e}, {0x5, 0x6, 0x380000, 0x3, 0x7, 0x2}, {0x0, 0x81, 0x3, 0x1, 0x4, 0x4}, {0x0, 0x7, 0x8, 0x5, 0x3, 0x10}, {0x4, 0x6, 0x3, 0xf, 0xf, 0x9}, {0x7fffffff, 0x8000, 0x3ff, 0x8, 0x505, 0xe3e}, {0x9, 0x1, 0x7, 0xd1, 0x8, 0x1}, {0x4, 0x9da, 0x2, 0x7, 0x9d94bae, 0x101}, {0x6, 0x2, 0x7f, 0x13760, 0x10001, 0x9}, {0x3c, 0x0, 0x409, 0x3, 0xfffeffff}, {0x9, 0x7, 0x0, 0xf5, 0xffffffff, 0x7c94}, {0x5, 0x3, 0x1000, 0x5, 0x99, 0x4e}, {0x10, 0x3, 0x8, 0x4516, 0x1, 0xe89c}, {0x21b, 0x9, 0xa, 0x5, 0x7fff}, {0x7f, 0x0, 0x489, 0x1, 0x80000001, 0xe}, {0x5, 0xfffff1f4, 0x7, 0x5, 0x7, 0x9}, {0x4, 0x6, 0x3, 0x5, 0x6, 0x1}, {0xe3e, 0xfffffffd, 0x3, 0x5, 0x8000, 0x2}, {0x101, 0xa2, 0xff, 0xfffffff7, 0x10001, 0x80000000}, {0x14a9, 0x1ff, 0x3, 0x2, 0x7, 0x1}, {0xa82c, 0x570b, 0x9, 0x0, 0x1, 0x5}, {0x2, 0x3, 0x2, 0xffff0000, 0x8, 0x7}, {0x0, 0xd2, 0x1, 0x9, 0x10, 0xfffff000}, {0x5, 0x8, 0x1, 0x0, 0x4, 0x1c5b}, {0x2, 0xffff5a2f, 0x2, 0x5, 0x1, 0x200}, {0x193cfceb, 0x800, 0x3, 0xd, 0x4, 0x5}, {0x8, 0x1fffe, 0x2, 0x9, 0x0, 0xc38c}, {0x9, 0x0, 0x5, 0x4, 0xfffffffd, 0xe0000}, {0xffffffff, 0xec, 0x5, 0x4, 0xc1e7, 0xb64d}, {0x8000, 0x87, 0x7ce, 0x400, 0x0, 0x2d}, {0x9, 0x9, 0x2, 0x18f, 0x3ff, 0x3}, {0x2, 0x5, 0x6, 0xb, 0x7}, {0x81, 0x2, 0x4, 0x0, 0x3, 0x7}, {0x9f8, 0x2, 0x4, 0xe, 0x400, 0x6}], [{0x2}, {0x706c4c185c430530}, {0x1, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x7, 0x1}, {0x3}, {0x4, 0x1}, {0x5, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x1}, {}, {0x1, 0x1}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x1}, {}, {0x1}, {0x5}, {0x0, 0x1}, {0x5}, {0x5}, {0x4}, {}, {0x5, 0x1}, {0x3}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x1}, {0x2}, {0x2}, {0x5}, {0x1, 0x1}, {0x3}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x5}, {0x4}, {0x2}, {}, {0x0, 0x1}, {0x3}, {0x1, 0x1}, {0x3}, {0x7, 0x1}, {0x2, 0x1}, {0x3, 0x2}, {0x4}, {0x5}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x5, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0xec1752f8e3477738, 0x1}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x433dd36a35789fc3}, {}, {0x3}, {0x4, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xfd8}, 0x1, 0x0, 0x0, 0x4040000}, 0x8800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r2 = timerfd_create(0x5, 0x80000) timerfd_gettime(r2, &(0x7f0000000100)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) setpgid(r0, r1) syz_emit_ethernet(0x6e, &(0x7f0000000340)={@random="cf702e8cf675", @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @dev, @dev, [{0x4, 0x1, "703b744dc5c6"}, {0x4, 0x1, "5cadf7451800"}]}}}}}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 3.141339347s ago: executing program 3 (id=346): syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x432300c, 0x0, 0x21, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) lstat(0x0, &(0x7f0000000600)) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000a40)=""/4096, 0x1000) 2.897317105s ago: executing program 1 (id=347): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000280)) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000010d21f076000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000280)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="4024cd"], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r3) 2.19656939s ago: executing program 4 (id=348): r0 = syz_open_procfs(0x0, &(0x7f00000010c0)='net/dev_mcast\x00') read$char_usb(r0, &(0x7f0000000040)=""/4109, 0x100d) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = memfd_create(&(0x7f0000000bc0)='\x9d#jHC\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x01\x83y\xf3\xb2\xe6b$\a\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\b\x00\x00F\xed\xcci\xbb4jQG!y\x87M\x00LR\xa1\x00\x00\x17\x1f$^\xe1\x00\x04\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\xce\xd5O\xcc\b\x9e\x19\x19#\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\t9\x11\xb4h\x89$h\x0ew\x00&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83q\xb6Pr\xda\xb5X\\\xdbD\n\x03G\x00\x04\x00\x01\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xb8\r\t\xff\x06\xe7j\x9f{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x00\x00\x00\x00\x00\x00\x00\x0f\x81\xf3\x05\xa3\x00\x00\xf9\xba\xdc\xed*\x96\x19\x9em\xe9\"\x03\x933P\xbb\xd6\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x046Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10\x00\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x131\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82D\x00\x00\x00\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x8fw\xa9A\xf7m\xeec\xb6\\\xa4T\xeej\xe2\xba\xb2V\xacc\xc6|\xae]\xdb\x10\xb3\x80z\xd5\n\xa3u\xfb\b\x83\xe5\xca;\xe5uH<\x9a\x12\x84(\x9f\xd2\xe1k\x955;J\xa4\x81Lm\x90\x1a\xfdI}\xb0\xa1\xfa9\x17\xd1\xa2\xc7\xca\x98\xaeS\x92Ew`\xd2\x02\xda\xc9\xd4\xea\x02\x1d\xd3\xd5\x81\xdb\xd9~\xd6-:\xee\xe8\t\xf7\xe6\xf1\x88\x86\xb0\x04\x9ep\xb1\x93\x16\xf9\xdb\x15\x8a\xa3h<\xaf\xa0\xb5\xb0\x05ir\xff\xff\xff\xff\x00\x00\x00\x00\x83\x91\xad\x11\xf4\xbcz\x9b\x8bp]o\au\x175I\x1d\xe2\x97\xb6\x06\xdc\x14\x9b>\xd7F\xdb?\xc7%0n/\xf5S\xb5\xe8\xa5\xd1\xddN\xf9ir\xd1r\xf4L\t3\xadDz\\\xf4`\x13\xf7)\x91w\a\xcc+E\xdd\xe9\xdbb\x9c\xff\x98\x03\xb7\x0e=\xba\xa3um\xde\xff$|\xb7\x86j+\x00\x00\x00\x00\x00\x00\x00Z\xef\xd6\xf4\x00\x00\x00\x00\x00\x00\x00\f-\xb1D\x8c\xdf\xf5\xed\x02 \xf2\x11)\a\xa9\xb6>\xebH\xa1\xabj\xfe\x85+\xc9S\r\x9d\xdd9\xe6\xbf\xf6\xc6\xf9\x02\x9f?\xd1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00gm\xa9!)^\xce\xac 3\x16}\x91\x87\x0e\xdc\x1a\x1f\xaf1X&q\xfc\x8c\xa1\x15\xfc\x8b\xbd$\x0f\xfdw\xd3wo^i\xc9\x83\x97/$=q\x19Y!>\xbc:\x01\xe4\xbf\x82\xc5\x0f\x8f;AVp\xe4\xcb\xbbR\x04\xd6\x02R\xf5\xf7\x8e\x18\x92\x17\x9d\x9d\xf2\xe9\xee\xad\x97a\xcc\xf5\x13fU6\xbc\xd1i\x14,G\x19\xb7\xb0\xed\x91\xdfi\x17r\xd1\xbd\x9063Bggi\x10\xed]\r\xce\xf6\xe2Z\xdc-\xbd\xd5H&\x16\xe9UD8g\x90S\x8e\xe4z\xb2}\xa6\xef\xef\x8a.\x93L\xbd\x95\x96\xe3\x9c\xefN\x80z+\xc8\xa5?\xda Zanyx*\xc7Q\x1c\xba\xbf\xd2\xd9\x1f\xd8\xa73\xd36\x9b\x8fbu-\xb0\xb1\x86\x90\xc9[\xf5}\xca\x9c\xdd4k\xcaI\xc9ar\xc3\xf6\xb8;#;\xb54\xdb.\xbd\xebD4\x12Z5\xc0} p\xc1\xf4\xea\x1d+*\xa6\x98\x15\x87\x86o\xf9\xa0\xfb\x13\xbb(\x120\xf3f\xe1\xa1\t\x11n \xd1w\'`\xab4n=\x90f\xf9\xc6\x86\x95\x85)\x93', 0x6) fallocate(r3, 0x0, 0x0, 0x400001) (async) lseek(r3, 0xfffffffffffffffe, 0x3) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000a80)=0x1, 0x4) r4 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000980)={{{@in=@multicast1, @in=@private=0xa010102, 0x4e1f, 0x0, 0x4e23, 0x3, 0x2, 0x20, 0x0, 0x29}, {0x7ff, 0x20000000b, 0x40000000007, 0x68112219, 0x110000000, 0x4, 0x200000003, 0xd}, {0x4, 0xfffffffffffffffd, 0x7}, 0x1, 0x6e6bb3, 0x0, 0x1, 0x6}, {{@in=@multicast1, 0x0, 0x2b}, 0x2, @in=@multicast1, 0x3502, 0x2, 0x0, 0x0, 0x9, 0x4}}, 0xe8) (async) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) (async) r5 = getpid() sched_setaffinity(0x0, 0x0, 0x0) (async) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000580)={[{@min_batch_time={'min_batch_time', 0x3d, 0x2}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@nombcache}, {@quota}, {@quota}]}, 0xff, 0x44b, &(0x7f0000000dc0)="$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") chdir(&(0x7f0000000240)='./file0\x00') (async) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x16a40, 0x0) getdents(r6, 0x0, 0x0) (async) mknod(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4, 0x9) (async) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) io_uring_enter(0xffffffffffffffff, 0x5e40, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r5, &(0x7f0000000000)='fdinfo/3\x00') (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0x3, 0x7fff0000}]}) process_vm_writev(r5, &(0x7f00000005c0)=[{0x0}], 0x1, 0x0, 0x0, 0x0) (async) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001100)=ANY=[@ANYBLOB="3400000008b0a2cfe1178eecc48e5fa2e8a85d4b8f6bed01000000010000000aa5b09e6b62dc78a27259512e740c06be00bc93e45c0b6d670a5c1f96631732546e1c86a7fafedd94eebbfd7881fa933fbff5e5d65c5a79196deb4957949bd0e31e561972b7d6b0756ddf19feabaa03609ebbb108c03d48540a199485216c5b13", @ANYRES16=r2, @ANYBLOB="831028bd7000fcdb9f251600000018000180140002006e657464657673696d300000000000000500040008000000"], 0x34}, 0x1, 0x0, 0x0, 0x4c810}, 0x20000004) (async) preadv(r0, &(0x7f0000002240)=[{&(0x7f0000003d00)=""/4096, 0x1000}], 0x1, 0x29d3, 0x6) mknod$loop(&(0x7f0000000280)='./file0\x00', 0x2480, 0x1) 626.037894ms ago: executing program 3 (id=349): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000040)={0x22, 0x0, [{0xf88e470f, 0xed}, {0xb86, 0x0, 0x2}]}) r1 = openat$kvm(0xffffff9c, 0x0, 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r4, 0x1, 0x42, &(0x7f0000000140), 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x10000, &(0x7f00000003c0)={[{@dmask={'dmask', 0x3d, 0x2}}, {@dmask={'dmask', 0x3d, 0x6}}, {@uid={'uid', 0x3d, 0xee00}}, {@iocharset={'iocharset', 0x3d, 'ascii'}}, {@fmask={'fmask', 0x3d, 0x1}}, {@namecase}, {@fmask={'fmask', 0x3d, 0x9}}, {@namecase}, {@errors_remount}, {@errors_continue}, {@dmask={'dmask', 0x3d, 0x200}}, {@codepage={'codepage', 0x3d, 'macromanian'}}]}, 0x1, 0x1533, &(0x7f0000006800)="$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") r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x115) getdents64(r5, &(0x7f0000000f80)=""/4096, 0x1000) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcmmio\x00', [0x100, 0x3, 0x5, 0x8, 0xe, 0x5, 0x79, 0x3, 0x8000a, 0x2, 0x3, 0x2, 0x7, 0x1, 0x1, 0x200cf, 0xfffffffb, 0x9, 0x3, 0x7fffffff, 0x8b, 0xcaa1, 0x0, 0x20001e58, 0xffffffff, 0xf39e, 0x3, 0x8, 0xa6b5, 0x1, 0xffffffff]}) r6 = socket(0x2, 0x1, 0x0) r7 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r7, 0xab00, r6) ioctl$NBD_CLEAR_SOCK(r7, 0xab04) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) connect$l2tp(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, 0x10) 441.631699ms ago: executing program 1 (id=350): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x80102, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) eventfd2(0xe5c, 0x80000) eventfd2(0x42000006, 0x801) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x2818082, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x7f, 0x2bd, &(0x7f0000000240)="$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") r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$BLKZEROOUT(r3, 0xc0c0128e, &(0x7f0000000240)={0x2000, 0x1000000}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) eventfd2(0xe5c, 0x80000) openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x103902, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) dup(r4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f000000a000/0x1000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r5 = io_uring_setup(0x7f9, &(0x7f0000000040)={0x0, 0xc8df, 0xfc00, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x40, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff1, 0x9}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) socket$inet_sctp(0x2, 0x1, 0x84) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x3a}, @TCA_CAKE_INGRESS={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071043f000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 249.766996ms ago: executing program 0 (id=351): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) statx(0xffffffffffffff9c, &(0x7f0000009880)='./file0\x00', 0x0, 0x10, &(0x7f00000098c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_clone3(&(0x7f0000009c40)={0x40000100, &(0x7f00000099c0), &(0x7f0000009a00)=0x0, &(0x7f0000009a40), {0x15}, &(0x7f0000009a80)=""/83, 0x53, &(0x7f0000009b00)=""/249, &(0x7f0000009c00)=[0x0], 0x1}, 0x58) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000580)={{{@in, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@loopback}}, &(0x7f00000001c0)=0xe8) getresuid(&(0x7f0000000200), &(0x7f0000000280)=0x0, &(0x7f0000000300)) r5 = geteuid() setresuid(r3, r4, r5) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r6, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000080)={0x50, 0x0, r7, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r6, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r6, &(0x7f0000009f00)="99529ca7d265e2dba44891e35e7d5dab7921b730436ecd4e999a25bcf86a25f8f029c0dd50373e90b7cf7779b12ecd4423c5b13cfac186975cd723976f3c747612913029d42517c189364bc59d8ebad53ed1b86f8f66c99b1f9b5b40d78cef1f14f81815d53bdca7fef40607358db69eb8c0b1f6b0942ab4b1ee7ca8deb4eddef06381a3d1c52d6147fc5109c7c607591497a6b2477f60cc881d3219c96bffb34aadec3fa97250713cce17cd536721bf9c40a019531ed0bbad139e26a3d4d39b68ab1bf37cb1a4bd197a8789cb1940cd86d9e56713bc36c7cffd07a311f5bc2e91f16d152eb480645e85ec9b3bf09c7fa140dced0afd55d7b99e90a96e7748e2d0dc09672ac199ce529e631efe1783769819c182ca106f6184bcbb387ed246c43562d74c36ac3a7ec2f0e11f70bad0007c03bb9c0d2dacc2148cce4a4aea327c7319016ad146b52bfae0357f9e892e9bec61a13c93551cfa3d4f4bfa7585c93bb0bef01a9114f3dc54179cf9a57fe88f5cff3403e33c9d09e3e9c2e10f1f16894e1b59e3cad47c1f202cf7b756f2851fc96d09459c9a8d34c19e6a3525cd5001aac5181f57286d0e1e88ce5092c7c76b6abdaebf2c499aa47587b48eb12a2b72548c190b0324ebedb81a63333b6edb25550f859c5ccc404a944ff7f61af8800888192fbd4c8e0e417d1d181b4b335a6f52e0a7dae18397e81e3f747cab7be902ed903bdd6a622f178f9b4244718ee1206237257374d2fd1466ab6135ef7ef4a114ae170eafe9cd78cf9ffc36974cbc4b8003072bed78765a0b9f1240f24dec6a9e46db9bb498d40f727c0cbf8f4a6a49539bd0805caf65d80130d7fb60a69dc7ed890874a17530c042cf33a977d331435d68ef33885f638c777ad49564ca77d8b81ddd853a21cd55d95b627310dd633a4f005853a5506cd8f744c367f3cb6998b0fa97de6bb35b166b0c6408c4e0a38ed26235a88520c38ca97ac8a6dc81e6dc6483d383fa09f198997b8eea1c68c9e3320683c9a02dd89ddc34c241e7294ccc88d6b35762892e8746e558bfbc2251949f2ecb763dad5b975eaf36e2864be6a41d3e20514d32f5d4b6350dc7e3cc3a85428ea98efb3b1edc2a2ec1e618452949cc7e2ba1251990168fee342d4f304b7a7af9162bcbe6b09c75d7420d2c547b4e3cee1836df6eddd5dff73a4e308fcd8eaa7a33e6980a6f8ead03257a37d72d3b265d02fa42f57db877654ed513e31c35e1af0bd28511d6b57cfe07b27cbe9767a534b426dfc3dd257d5899444f34cbf4dc74b9eab2e7e3e1e1a8a6ac5e4359d653506b299a5b7c67b92dc462f1216655f952362a3387ad9966b606d98e8d1b544dc27dc6bc78fd18a446736e25c51143db9886b6c09812d5825b5d9e0932f218ff8bea4d9e1c4df9c9d4eb19336d48163a921c4ff1f0beef26b01b7e8c0d23fb59b84e229eaabb791f2cffc9aa4db75162cbfe4c9ae8d76a5b6bc4bff20e3f8f125b9aadb3e728d7f78d61fd55f46b7f59511b876e6563256686e44f25cf38d393a9b762bada272eba8df28e4086c4cd2fe3c9fab97756fb145373e6ca1991bb1ee6589e49c821ff29f047970819f88f724bd077cd3f0ae463d99b3e53078431e3f9bebabc5289a65479359efe3909186aac60a29f561de8c590988c913c9e693ab8106e8287f6565eee6735f7c88cad7124d1c8d9ff347e97912824088ee954de01c6d8a06447f06899607eadbfd078bc3df506252005749378dbd7399c9eca60b81dc0d88dedec31e5cf6e7b6d6d411958df8f9e0bf4443e8d3bdfe49d05f811d17088024d0629fc8ab8e05e309bf55e8e60d342623765f4e8d2dc4a90291cd4354ff9568c8170e6ea56e028bcf2719595253adb8c84050bb9ce4927a1c1f4560da87d109ceda90bbe45a1717763d8025f1ff40f157185ddf17079da272ae10c4f34162caf4b0d31221a57b3059fd449c87554d968a54b2eebd760dc3263c40d9eedf5905d5699d29706ea6e9e81ff2bf92489a06deffe7e978661f37a88450783e23f107c2bfce000dfc91c5fca49e46d9ea978f215a45984699f0d2503b30a741e13be56b7abe3e5663c0825c3cb04ead44ce97719c4ee6f4cdd3c452775ad7163d5c9034583cc2dbc2b0c04917a3e1aa3d0a8bb6fcf94d7922eb1d543c09185827aeb1b72ae7103ef2c014af2ff4b47fca40fb0e66ddf0264476d7a84e9b8dc551d4c407bdbac6757f7a25bd404b45bec1091696203cc438860131ad5f2fd80e3c45629864dd9f7d302b66fb8fb86735c9a6dcf8b135a273dd2ae9473bc905081be9fcb8f91b1ddba1ac692798dac0b9ccffe0319a779f5e10c65f294b22fe475283b023f9cd890e92c5447b1bc1528255c5af383bc1fb6e72cb9a67215a9e25cde63c89baa8c7125c7e8b748b728d07d9cb66778404f54e6a9e3ae1ae82f3d0ce77199f23f94a01b71b805b476fedbebeb52c83a1b857f23ba438c56a6c4c2a5909f721e6e3d240e4a16455e92220d13022ce7ec0b1365ba4e67aa6ecb324f8826579e12cebdfc0d8af63e83b5e5624d5b791f99093f9a27f7baea9fd10111209c0857a04f07408111063ef34026aee27a3d51b40e53883f9094402534bdd21cc49d7f5593e99cb204cd805bee4add0f82cf4b6dc5da14d6b79fbc68c9ccf7fb5fe774f8879e13079b024a8ad24bf123c420d630837a84ba05abf0ae4dc3fc04f25c7f74ff91d0d609c958642a48551e51b5c0074a56a7da10ce153b08cabea636f8489d8e7b655758a41d7f7474c9d76bf4d54d789bfceaffef139854065de6a94b0275a9626aab99ae838364b1a491e55017e4212b6b01f7a41bc9c215ecd17c49a8610db28c699259c58b81a0e84c45fd8e719c05c48501c49e8a6515044d247f58e4cd0bf22fd6ae31f45339d1f801196d426c52269b1aaffaf18e2a03760bb231cb7cefa6d72f1d7eb6a3bbd65d0914221b8fbf531dbd562eb4a1b28983ac7d83d4813b10b34c9525ba644f61a2c4800d4fe96a7bca63da1041ed73cc57fb9d42f9dfc8ca41d80292bbb311c89b0a0fcee1d88a025a7416863342aea00e6f049cb2ddebd17c5c617ff562a8af0c965cbe8341431a30ea239e4a62aa2b19757a3b0de04229a9907f8610c27b26591405845bf8b5b83706ed18d910c4f68777378366ff565617b19168a04560a32ce5ad64aaef9f4377118c4335b24826cdcde78fb4bdb11498553f56d8dfeb3a482c70cc6580c399b92339cbdb3464fcc7b00e9839fd0d2b8b6db90c56b33593a0048bf7983421f29b1285c81a239045b96a9b0cacd70d6d9853206471f06915efc8d3ec4c50fb13601abc73247a656066fd7b329159b3ce9e3302b4c0d6aec58cb0946a8ee8e7f55f1af604f1edb4d887fa6292dc0ce57705c1a25dc62650c127d11a364b397aefc2fcc3a164bdc53165a461b01de9180c1461b309c75af0911b4cc1b8aa05652b62119c87b4b235c573aa15b1516cddf61efd6a7f8c953fbaaee9c0e800e8f519e1494de850ddb976864088fe0cf90bbc54395078ea2501e8baa84d6807e184105bc2a140b663416496886422643bbf764d406af06e7d086678828defda0b648b25666b7b5ea29e927141740d5be0e61bf25d40b8404ffd3c67bb855b11d4faf82b7b8051615c101c3deb0601a0fa9ecd8b4a95082ccbc8222b0982802dd8430e653d6eea2786dc3a91397135faffdc65a5bae048f5c463b1a6648becce961d39d063d28d1ad6dafcea0b0878379adb16cc0d4cea572abeacd9a168a4fe2e338092b5bc93ecf02ac6ccda03e5b23adf511fdf7a79442093233b79c67d3fdd3c36c96a8f67aa79e4743d99cf963ae6161877f73656eb0314d889f4b8649bbce8a759f90eac6c006197b54b2bbac7c9b237f1e3dc099c62a65481960e6ad697fc66316ac084ba99c60f58bf44ff45f3b2006cbc4196a25f124dfaf247e863a855ef6070deb45219a922dcf2be9bd01c340e1ca5ed7c3ddac9f7a677c5d00610991d21e0751ac8044585b39f3fec5b672a11a9bce32196c2003d01ea50b0f0403e16df188ecbbb74f295f01398363ddfecdb63a49347c912c125670205d7b6be999688df85bb7d5ac12b62b4fdc4eadcc2a9a7897028404f697b007603a0ad588c772952d6670ee870771774ad157c0b9cccd4b2192d835606198ea0c65036ae4e406cdc539ff3aa81fa20b7ab58d6f3abdb69cc1f503d593f7025d2035e7f21db76336efc2843a0dc9bd2eb8794718134ee68fc57d4d2bcc18969d08177f442b87433b48540c661940cf9e2462c53efa310c7e47487deab2ae15b1978ef05aa1e14110943f649d82486f710a39854409e74edcaf06b4a92d3580b9cdabf83c6351657698d3d5af7514f382e75d1c912cded577258603fc9ed002e010747cddf7885d34afc9a84d82696c6660cb5ecafb68b564908fc49c4db6a187d037241a26b1141cf20f2e968a53366db0f60b79cd98cf3c897c50b7b9728e6e7100f99e4d5ed2428dbd285516ca6660777a39b4b2617c1be5b0232d60b9c8099f5daedbf190109439c40b46090985200d6c0501313f3fa4d244864575c275faca47aeff32c7b3e3c59392618562a7c2d4b3af85a37a8847f595352024cb63d3a9085c2a502c6a3248f43c5fc828e636cb634b2d393d853ae2dc9605985cf85c060860a90256c7b574c1e01c320687a2bb0b2d51cc2950c485f2ffa5db0ad7aaf753f543de7f86efb775c6bac2989a33757a28836fd27f9347229a0004bd2e546994c69c678fe5717f613f905d945c072004c3a80e0e54215e19ff9972521890d4e705e429f16fc35fe5a15f2e6b75cd719d38f76b087b62e4b5dcdb35f4baa2bab167150bafb6c69e260ca51004bc826d46b77c3f67eaa08497294868e6d91b7b867e4da62052f4f891677256cfbaf19cf32bad99a7da69d8a66537686f89a58d78c7eeaa99cd38009a1a32582bedc5c718e57b19cd405ae659a89909356a07fcef89384d160fa5ae6683cc379642aea4f0c915f72d679bd521399cb16112f2abdede3001400b4a64d2173e153a68631183679b56b8f389ba889784133453a7e892fd3b092f5040870a3cfd6f982990143e7c0882b4ff4c5d049192d36925a25ae4be441aa30dc7e74398b340c45b52c73ed3b0cd640e3cc9fd4be24e7355f386106f65895f1ee850b2a781d1d1d322ca5a3b0fdb78ce1eda048ece94af25437969c99c58c08f1446ca5541e03987a20fd75283e3e116dc4c9222ab7522e4ccf6da14aef49cac9a6a2cd4aba1c54d49e6da4179a66b84e384cd3da53908579b28c11d525ebdc4dc69074cef8a9ecd3aab98f2858769d656b46141c3a4e69a5ed6c0a732c9ec1fce080eaebf537fa5e17236a44ba9c931f555d193e475ffafd20c53ccbab607c1a15fd06742a64691205eb0d00f7f40e4dd8efb279cf09b2522aac0729a631aacb92d5cfa2ce6bb07385b981890b5916755d5cc3a51c8c36bd2987068cc24fcf73840895469bbb9aff1059601f771afedf0a48d5921103920515b27d7e607951982feba197df8c61600feb3622b9eea13a4db4068728cb98cca76cfae197f6258758490bf41673ee29acd91fd296ec863c646e0ca6a0f0e9de146c663ba13d962964d7c32804fd12a14c1ca7212ad48bdfab469c6570dca562220ecbe7b6b163ed4c9361c5c10bed5c92861b8786ada20a99245d282e4454187ec02adfe354e30647cb10661c85168f7958e3ce69ab48c9455214707a63c9b1167f0845a6bfcce2a96cd53eab430f13cd527f1666290719a47c517cfa22fec2e9916af8aa93c78e567993d7fb8ee60fc4b903b8c67a3658302c5e5f35250c30427e4c055b6c54705bc599861f80b7200d361965ff98c88cc698a2615cadeac4bdfd3d613377cea52d2bbcb7e6b78ac31d4b2c33eaf0b2ed40b963e3cb25c7dfea3ebfe7b4aff2aaaaf184dc80ab649a108e2c830ce7eaea58a263392aa9cd13d7f7bd607dc7c804b19dfa41b3e5a5155201a87311e22062c93896e70f3a5c4b03521300b61cc311ebd5beb9838d0ed207c6bfc99e4392508e95804b10b36024f32e1fe1138e9ee7773f797b2bc6be7416f4e9691ef4c2a8d06af6c8b84bd1e6fd1ba3d3183475ef6c139ccf8dcf37671fbb96a2ab5e0e042f7c4728cf30bcc1a0de28a5024276ceaa194b4926e7f6a97b78bac36e47f832d56a96cd266434d37bcf2c2f57877717d91b1854972f832354acc207a2ee8caace7504e0e6197dd7e64a01c4c67bb2de8acc0cccc6c6bff0b0cbfe345542c5a795dfa48cc0990ab5702574d36494bc44c20f5b324f7c984d986cc8cb40cb2550076d96a069b6688d22171beed2dc5b6ff3ede8fff4c4a9de6d3817357a7ca7d24d87300b4545ebbac8cf7f09ec637a4f4d6bd07673709b6c363a75ccef585610c5f15de7851b5ab53e02a757bfc3caeb9a9a8996beffdc0cfd1201b6cd99cb035584e51a6c15a5d2e17d2f8aa6b41e26809392fac6caed1e02a53dcea8a413203608780dab33315a76eba24d540e4c5b9790420834bc8d4e47bc65ae52a54c0ff308427a8d7aff746aa6589d17514e40fee5d0b3533cf4ad2c5f9d96db9f50bd69ed8c92b860e199a35cf268c66ed13516a3b4b024f62d4b2a656067eece95575bdb4907efc488a9821bc3a9c81dd11b2128b7a01aa7a9ce6e73de3b4e9beced70206f91575baddbcbe5722337953c8016a0f4b62120d776c43b7d1a879b692107954f45acdf8967dcaa994aad4922d4fe093e16c2d0090906f5036af99e50bb09b04e9c9b3b5085abf621297ce203010249cede92e9b66b446b86b43eaaae228dfdd3b4408c12b404bb727f7e969e7da04fc59900112bf8d38af0416dc616e75f167aa1352215f07115a6f4eb6bb5fff6f5c2fc9ab906392036b44090e65fdaf017dc53bc94e0807d679d793df18cc44e6c846d414cef1569530f7692daf91eaaf4ae89fe2522f2c9cf33b6ca508ebcd006bc1a61f0c800553aff9dc7d57200b25ecb83e1e0b8cd29520b63aa649d3f71a62570eee56e03223ddf31f0c04fa686b7f6dd054e7a259d9ba335c2c5b2c508897506c0db7f01878dec1411c33f0af61b81dbcf9ff8bdc0c50044963a79f3ee1462150c6bd03a32dbdfef8d72f0b8b3a395ffb0cc85792e7bc867feb5e312cb64e29e193388e9f173c162f4a1320a6f99ea3795fb77d982605959909a1aa11076fcc779ea6b80ec1bf0edfc2569ec04d15a0bdeebccf3c75393dca5e81663532f8ced12d08e4c2ae6e2954d427c7bf053dc4718f56f453bc88d74045bd2f9747aae9b5298a0de927f1d6b1308f4e1483487f083e71ed09298deb52bb10079b13def7453eb432498069edb5ade70c5c54913684d934a3febf78753ac13300a91f467ff3f6e2f00898f015d08f7739047b321b3eaee5ad8aa7adbf7833f014d8c576a491af9fca6843b327ed513821cb3951b2e67a275225d7af6b382e2f955adaacba5d1fdea2223202dee132b91d5cf381b51da94145255f584a70c5e8d11e06a44afa6599bf3ed0cb61703eba254333af53afac60e54cf6397f9f7302249ab644f0b576c713b15007be1f4f9bb213660bca8a70251472b86669d361ef968f542e81ddbe8f4d2e9cabe8d7bf6a31f14a2cc272963553a424c105e7750437ec5bf316e30ce60b4b0c27ccc1eb27e60f6472fef27654da49905ff9c01b28695310ecd8701aedff25a83da4b7c41995f902bdf249769dcb53a3efa894710dd66ba8745ae2253cc6b75a038183a0bee21226d48239320efad6727093e4f94bbc2fdcc216200d903c32bb9f16dd17d5dac423ae0696f3decc576b8f1fdce63d0532370af7d1e2fa2ca5c5d17bd88f5e3abb4792dac8689ca13752f83d753b06b037bf5a80a3748983790352775685b0414c9d74849fd217e388f904278ddb6b0abdda941b61579c796e2bb77a9bc363b18642c401faa502a31011544111b6eedaa369976c814773d83220a75f31026d6ad0b8b4298ea6062234db232bc435e096e84f740e55bb14d46ae04af0500aa5bb218aff6c76aa8a8e3140a1b0d6638538fd7f30fa8d992e53abf8af2fbc16b9e8a668c1aac72cea1a746ee5f7f3392a4ec8f1d19f2f426b6069b1cd347cbc38bceba96ce5da49198083403143c740c04639cd1089abb34fe812d85921c47437604f684bca44a1eaa965c0a6e1c1fd1f70ee932af3455b36184cc15934cdb3f28959d37d8fc10696f8ec1e4b0c3d1b9ff74a01b796d1bb68954a3768c8bcec741b3b69da892f8922142b16b2cabb469a9906b34216243fac80374c10e178c5fd36440f8d7a8588a9c2510d86ffa8cb68ce8c330d2111c94724e522f04573dad43bce252eb505d29ca9379a6b281519d38b7174f3ae8f185544f3003c936a7e6b23ca97a313aac6a061caa45fda73522f3061767bb4e33dbe4bde390eb0f07225a8aef939cb6ab2ada10c02527281abad394cd4ea9f59467a08b72047cdb75d7b2b98e5b4542554a60f953ac7a4b980f42518eec05ff2c044549cab0cf33eef36dfbabcbc0300009d898862d2194cfcdd9a713c30bbe52291105193656ea5eb830873ac956469d31689cc3c69edb5cb9a6e31ce3e6fb50ddd4e52ef9fdeacfc0db21e1e83e0d8d0a64f17cacb4dc208a893e7fd8ffa86cfc554dfba3d9fd281115eccb4b9d909f2fbf3fbb66bedd7b5db3f6d4f076f5d8fb54f8832896f8ef6f624162f1dd589be7a8e87dd5065708a8b0bfb18a5c2299f5605ac8a11c1add55b2018e6099380a70bee3e0727ca6ec58928fe6eb3147b47401e8d822eebade713b58335787669e5e0de5d328a1067df4cd9124665bb02ee8adfd1b3618374ef167df1f0fe79456f78aee3da4c1bf397e4637b0cf41a0f4a2910efd02b17bf5f3c15b0084b36fa7d4e85a53e5be366b428244eeba7499c3e54397227928e2ff6e583f332d6f7e8cf4d058f379b58a7d03a4bfa454bb4b6d543804b8970e6a9fe8886179eb418a8ce9e509e8433571f7d32378f2e983fa418c8c91760ec9fb20968e7fc23b7c4ac71693b2576ac0f8ce2020ff1e7a7ff24301b48b544fb29a1ca4f2502daded865e488a16dd33ec67b2eee3025cdc5ef90f253c4b5e0a61d51e495b675c5a1d55b4ba3812c5f44cd08487e61d36b0c2dc32d27333a5ee8a0906bfbcd388bd9389d1509912c0471c7b706a5aff880569a3fb11ac5f14d780deb4c1b1afe30fb6b8daf87b27a4ceb869d587a97f2f5af8d819aa47bbf207db68a6ecbbefb1e109ed0bfbbf3b54fba9e79de8fad9c3bcd3e74b8b92ccea3ff5c558c6cd72d78a711fc39df603bd4aa1439dd302258edd2204e52d7f435c6f552b612fbc321bea971195cd4d8bb033e2a779e239164d7eea6d8fd233b0b9b776246564cfcf44b31a83031a2413bf98a398c9f93da243cef9ce73d81bade8ad551fb0ffa75bc874c11d23ac9d7752f22a0f54c3870f3314a83e64332db810da1ebb288e10c4eb9be9ec037317b8f813e68160a887da3f5c0389510a0734b69ef275e19973b169d340610cf2112e9964cc0566b9b690c3feb36c8526491d3a563f0bead2abbcf0665e048aa3f929351b2f89876580633a403250ae3b5244c8c0e996bf888938dfc8920348d88e272e6eadc7c0387ca1dae228bd620ce3975d43b58758d9412d304a227245587065f58c4573ba2557f1d8333ba007709b1239d682f03405b22135757178fb701bbde81d2f8faaa7666c025d8a8bb426dc4b8e61aed79b3b3d3a9b01ee9142772d869677ede166e7a8be8ab84cdd6946b1478ce77ba307213971cfb24c86c344310f279e38d22254bf4caf83c02e715cb0550e615dc9f8dd2400fa749e3527493c15fb454c158e4c0603ae6e962b7890058ec7c10f0618ee274a15bca6ca9fe5bc5f9e7797c0950299912be9c58463c07d667d4bffe8aa590ae43db08512b40f3d265026bef2facdd508984e5f6d2ac7ef573397f14ed2e2ccdcbe5796e60ae64d173814906d1da5a5bfe8a2a4c5d6bb0b3315b878b4877d0c045f6e6cfa0dfc1ea4de7abe26f2b2d8c93299ed1d83f1b7853c756bfa346cd53b008fec169883983fe0f2405777dd85e17b2e4e8b23432c0dc4c386d67b6597184d0b4b95877362304638484cc0951400f66ee8391dd44417c58b3d46a8345a8049fcd70f7b5f4a6f912e2b18760947c74ef2b732b342878d7e7cc99902de87db36469555fbbfe76189f108d6ab31f4727fe4e22d075afaf6cc726ab17a5e1b4ab6c8f29a459da3c4266b5ad8ff55906a190f8b19a3bb92a50df49647c03d5d6106ec07e9300038d059a75b54ac31683ef8e5eee946e1c84d016ee1e7800a92c0a3823b62e0417fe86b191951f65abc0c38c1e0e8f1121a04b62a8a720790560f922804b1b7e7eaa497e1bede6e3d0dcf0312dbf221561958fa1e85a8f99e6fc82f919e78c17d1beda16cfef25fb5d00f7c32df9a51eac76000c988ffdf011564aa0e319764b16a5a7c728a470ff70772fb76c9ada26a0ac073fcbfa12501c2454b19e02d928e3939a40bfff76c002533b3849cdf8016728445131e5f1e292b7d3dc06bb3a3cfff6fabae0b7341694a8938c1d2497cd70b76c337c9a312e96c8f736d7625a535e1906eba53d199221ca60202a65be0f7e530aca10e61fa39c7601d65954e5ed4cab94345c6b89c7f8a0de5c61a7945e1564731b6715331d13263b2961a163382f7c4934d847033860e402f3aadb4f3e6cf47a97a2031401da4d2c8de8c80cdad71b97b4deb2075a02282f958ac6772354e67f097ca693778224b80892490015e7d697fb9107f75cea708178ffec93fb1d44e8493bad1d42c918e661219ea819e0200759037a5a585c0fe074fd407536fe58013f42612c41bfc66e16870d7a9c00ee93a3122b253fecbf5de3837641f4a1376af0f053463413c26c29f9a346318565276856b963da30ba6ab8c4c8ef6cfddc432328586d9d9829895835759bcde0851ae0c838a3927ea63fe5ba793fae94da61cab00fc05f3a265a2da1221bb2b66775ed7ba856b41011652d4984991e56249360ddfc997245ac1547a1c16382d42df383a8d1c852643b24895c422712e79c436fdfffece4ed1c50922d4f25296aaf6b204522086d188bee254f8303b60537ead1195ac5dd301286f0042dd68aa05a70e4beb779aa0b61a316f736b72c9ab7ed860a0908a078f4b8a53f2df0abf993f689de4b02b9138ca5047fb0bfc9ba3b92bff033e36fc9553260b008cef3d147c62d1d3944fd1eaff79bc5a922ec2190907bfda1b51c2c7fb867db1f8e13a37b5e3ae0165e93350b958a239ec1f2b78561cff854b975307b5b5dd23b040602a5a36bd79947ee04c7d0e5e30f9c4c79f7b4e6eada98bfc6c357cdf8939213423f1b21ba26cfc2b2756ea3eb992372db0ab8a7c37d8ae96bf3ed6be873c1891550ef741812032e1ae938326c399ee43a3061602dda006f1b6b620bebb6a5752bee77e8acf9921ebf4d4c8af7eb5e937c65697c0664c594e31a62377a25605051996c474ca322ce8e0e6ef8a7988be", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="d800000000000000f9ffffffffffffff00000000000000000200000000000000020000000000000000010000000000000200000008000000060000000000000009000000000000000000000000000000ff0000000000008003000000000000000000000000000000ffffff7f58000000030000000080000009000000", @ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="010000000400000000000000000000000000200037050000000000002b"], 0x0, 0x0, 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r10, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r11, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback={0x3a00}}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @mcast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000009d40)=[{{&(0x7f0000000540)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000880)=[{&(0x7f00000005c0)="93f7b11828ccff6e596a2af32a7857aa3fd65735ea4cfc8e9eee50af683e5ef11984825d38f0c2", 0x27}, {&(0x7f0000000600)="71eda05cb9fc89edd313bfa92391018c7909f2", 0x13}, {&(0x7f0000000640)="66b392909047dcd7ba2affc5264bec8e546509991d88a04c354aa4677f1cbec5f7dde09073fa6e833c40003bfd890790935fcfcaffc4646239f98047504ce1327ef56dbf805a54b4bcd9950c9f31f40a0f0f238029c50c51951fc49a34756d81bd0cbdbdbcb0ed", 0x67}, {&(0x7f00000006c0)="6573ddb4f012a419c25a1782dbcb9b54d4bab31c54434b27436cc1c497752068757cd33adf3eac0aaa3efe7407a6954247b5e1411d0fc2e1c9d6c47673fd9cf59652ba888bc9c13c781f1d2f7521c4f3e3", 0x51}, {&(0x7f0000000740)="95b9db4faf90657c5256176783ab14eb0427767604f49258b9eee21a26e2bdc2eb4220b15c0664fb4591ac2feb753f4e579b9b9dd632c495fdc0fa02d5c014d97a66c9e4c81145ca806146ff825c30d7f83774fdf5a38fffe9e57fda1ae1cacab9756783725489ee918a0939f55d7c45214bc78b2a4641137bc488efc800d07a0aa33fd75f8afe278b5648b12879176872c4d9fb4f02e48d0a9c83fd712de7b05bb4ca56600abb8a90bd09d2f91ec398461ff0ad399933899650cf6de65ad17eec9610e19141c5aace5f68fee90c2e3daf4450b613e30245242a3b0718", 0xdd}, {&(0x7f0000000840)="c7285b4b5c75c723b3a9258f17ac36231d5c2a50ff", 0x15}], 0x6, &(0x7f0000001000)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50, 0x20000000}}, {{&(0x7f0000001080)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001880)=[{&(0x7f0000001100)="feb258a1e556e5cd20025961edb6b18417c0b5c6349c60f778fb5abc421fe2a830b1ed8c32444f3efa0e7531e7639e5b1381b087e0c824b0c90c9d1389e1be0d3fda37df68476f9504866ca6f40339dfe26f94d45724c7f3b0463ee7d6e6d7fccc456c32318ece9e4c21c8c0ce4bb111f6bfee409f729ef3fe0a15fbb3d30a624e2d58b1a15f6b0ba73882883efb71e25ff886b1d4bcbbe89ed89422d52d2d80c4eca90efcf61b164a2cce5ae108040ce692f582aed368ad95832aed460356385f9a", 0xc2}, {&(0x7f0000001200)="03", 0x1}, {&(0x7f0000001240)="91cde4025aa917841275b19914e5ae52c290c21d810727b0f9c00a9b28500cb7070bc1103689f782d8a9cf7ff344102d30bb7e65750e412e5af8e9e68c4f20285f34784c6e9f4a737ffdf9a8c6489d385fa607987284777ebab55c5879403282dbc00d71c3d659f807ec5bc34ba6e17652a3a89fd9c022693089c271b4faec47eb4d6c2d6b3cdb3b2ccf5f13a198879551cf4f497290b0ce3e12abfad702ff3c70db0e1330d81bf0565b786a04df1a8c8768eb86a11cb87cc1abec444e0056a1396a146f2c5c41e213e90b4cd22b6fca3a38f0a6ffd6a5506222503d01b637ba5ba82546a70ef8cf793ca2c3c2caa4aa40ed", 0xf2}, {&(0x7f0000001340)="39c663e7e019031375e75a59f2690da31d4d470fb991b8f9fffac1b0e55d9c4f9c6c9a72a4e345211a99557d067c112aebf8e263eb087c88e80da17401b4febee641c0e87f69ba75f22523f45febc61d6efeeaab990c84bc4f1dc81bf4aa7d968f20a98e7a9c9a50a5bb5f44c00f00e9f16bcf0d6c489dd617f03a9b71acf0d9727f757b07f22d5fcc6021c6572f7372529192f10a3bc8fdab6a59622b2e0e632d3b8d93cdb4b6f96eb989eeb2bc06faf6a770830546485acf7bfa962c1d2ef6d9", 0xc1}, {&(0x7f0000001440)="e28dbdba43d92801b94f4e25fd2f3a2d488bb569fec9623e4cf4f62e3a9c1c19f35152bb682ff637e12df3dfdeb814e537797505f4667ef8427f0c1da3db3e3cab6d30916116c57200bc6592d2308651277f8ca20774f16f55a53c17056b7ba0c05bf12304a632443824590e31fb652024789f010ab971ea9fdca93eaaafe48b71e7fe989e323970cfe2bd03cbccd4b56b2e3c222288a84ee2a6ee1c55cd9831a29a1026ec41ae9500f70527ae14321f4013b080fef87df006dd910711a16590180771ede2cef8455c82e37ad0f4571e4b86e5716ffa91dc45bca581b4", 0xdd}, {&(0x7f0000001540)="daf1c7171dd4ca8edb779caeaea1ba8b8c767bff96a71930f64b2f8a72756226e05ec0888c5157bba49ee10450d110b939a6d8639bb92ccca958280f486660c3efba3faf5646b5afaa795f320975c8eb7906f3eb42fd81c5862b9f848facf626913151780430d6590756afe438943199b5167210abed9e2d5e875e814a4ff1323e6cce8df8a8ad5c84c5d1", 0x8b}, {&(0x7f0000001600)="7e65ab0c2d1d93cfe16b35de232fb3825e877161795539c4151a0fe583b8377a28212d35aac83c4872278aafa4f7c92eb3b4cf6f42b2097de29bb7ef490b6a9ddc52c25a931020aef294f29d46a1944886d6028535cb195375846c17077c00f3045099959059fb8443fafa5a40cabc90ddd78706fcd89793eef1c70bda137f9e2c85985fad1735e6efbf39590e2bce582f342727c620baf6ebd93ff73520f64283ce6e7d34d779c6ecc86894775384c54d17ab6605a5c4bd8083fb1dcb7ba1da576bfeb7b8eb1ab0a9e1ddb9dd8d6e970996a030ff62a4ccec34828c26962b0030fc6dd98c20f3ff", 0xe8}, {&(0x7f0000001700)="354c88ed0572142772d0b5e9d4ef577dacac5cb1847c3abef3d5cd575ae7fa517af30b35760171b7fdc7954d8a06c39829bd01e7c8689600e6666ebbb7bd57991b02279375b6d48e5ec70bdf02bb73e4ef4277275080db345b124927fbed3740f4074f77e53d9cadb47e97b653f22bb84bab789df969", 0x76}, {&(0x7f0000001780)="873f858b3d14601656b22ce57e7638982d2f8c34f412ddb75d0c9690454906c4291e6040e2d197b6282fe118cfce1fa9859958e47cf0b63e80bc3f00776f48d8a7c51838e6f2b7d0fe46c25bd39bd6df6b17a6710c494a4b0f4748dce3989e91d8759f5699c640a19e7ffc8d66325cc6cfd6bfe43e84587a678b2e2923950c1b2f9609bdfce280b117980b8d26115a2d6118714aba6ba157399c59fdbfabbaffd6", 0xa1}, {&(0x7f0000001840)="a099b0a6bcf4c212486cf5fea32b140c0a9173b1adfd", 0x16}], 0xa, &(0x7f0000003c80)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xd0, 0x20004080}}, {{&(0x7f0000003d80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000004140)=[{&(0x7f0000003e00)="fd0f2689f3bf443ea7bdfbd284fcafa0d611ea9e800d52f186544172940bb98780e4611d9ba6fa0cbf035e1bd751faeff0b8413f0032242cd2ec3456a472c32cdfb7e4101f34be3b690733c599abd11da0587905c73d98f00275b40bda6b4449d1609a8a99bfe83f35e66528a774679ed7efd207b7cff4215f60ae33140147c92ad98ab72d73", 0x86}, {&(0x7f0000003ec0)="295805c1c21d492c71a4aafa6e06259b9215e9a0bf22e6ac929ce709e9a3fec41d29d74f6ef7656c63d86c2bb3a913cff14efda42230dd549f33da01e97840f5493cd0cee15a1253b80360eb2c01c1b6ab1ebcf08b42dee76b765404db678b1ca02d9348e6eeb6102331953782d2b45d1c9ca5d4552202fbd7c4af68114e77c76a902ad3cc738cad4bb18c9843cc0476d8005611719967e91016e80d01f4ef8a14faa99e0fadca287529ab68a33bee5152225e8afea6baeddc268dab6116f4e5d577f7705fe76d47fdb301f835e3b5850a38fdf07826d4d3b2e5ddc920319fb8a751832ad232435e3e", 0xe9}, {&(0x7f0000003fc0)="05e6847f09e7729eaa4298d9acf9f3a7ae69fbcd17d9c3fb37d8e5917e7b7ab595888fb254b2d82ee5121ce5bd79ab01eebbba3c31f8ac67540aa035d7518e2a2f7f23b48292ff0fb5208ef3c632db07aafb9d3e1987c53117cf9321a274c79198611fcde6fa4af4e67003da8e55859ba63746647fd3e1e40a021c188b0de0afdcb7f89ae65010646484b94c88ffa7a69cdeb0cc7d50da430839a82803ea1bf35aa37eb2cd604f6bf8b25dbf9e66e44fe454461aebf622de019e4050c3b399184721c84b3001012f5cf97bc06ca0d286a7175ad2deeadd37", 0xd8}, {&(0x7f00000040c0)="7457c43ac84a41f127c4f69e5110e6e57d6d87a6c03c748a7380ddbcf9a019fce5bd5165ea1c11b8f3fa1ae68fe459b228bf5b1829d212a587de25bfc4999a33501bebfa26ccda3be8016d7e35be64b79c768f9aae73d0f297e51a4c840003b2755ec3", 0x63}], 0x4, &(0x7f0000004380)=[@cred={{0x1c}}], 0x20, 0x86}}, {{&(0x7f00000043c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f00000058c0)=[{&(0x7f0000004440)="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", 0x1000}, {&(0x7f0000005440)="6292c08b42eb5d2f19ef8d7033d73256f8e58e116090a9592503afdb7e2ffd352e2e8eed0dc81917b734", 0x2a}, {&(0x7f0000005480)="08e4351a914d7c96bd4f7381c481b86d6d3b91c64b19ab132390246d92361d2946f11df2c721f657ea9691736b6da3af90a92e45a1f1bfcefe97bec98778e7bbe8d478c94366c26580a4768789970d6a16f0bcabcbb2902a8a38c0ea3f2fc101206ffb468bb361ef9773e47750d1b2e04bb2adcf6fbcc723", 0x78}, {&(0x7f0000005500)="b55f39c32f5b4fc11d674fb92c8aeb2209e42ec5bcfd8cd08b5330eecc8c9dbd920f88bd3ad3222ea0ec829b663168756972ab80d9ce539402eb7cffed91a25fbe6b4c8bc828100082a7c2e2f80dcec935ae8b2702b8c1cb743d547ee52ed4bd906c15476f998a9efa4fa65109d46cfe71f803a4a994b93cff28ca05829bb37378d5c671ee8ffeea0f3e875b402ed0493e0cc863a703d8e5e78552723c31728ec6c885fad15b7f6e479e13223028ea07246f139fe19b518a1c0a7fef464600ddec77156979dd5dd149d516481c01392a08b01dd8cd", 0xd5}, {&(0x7f0000005600)="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", 0xfd}, {&(0x7f0000005700)="00d7c323103619f05fb8f096e0b256ce8fbd0c7a392ba56d54a4130eed9368233ae25c88ffefe03e10a48d6ff23cad6fcddbf842e74504a7ffc759b9f9f3cec62a6f7cadd12e6a0c66935d3f4a57a985494e65cf4bc93386ced615c08a55afde04ddc4cd5c95c784fe97a82a9a9732bd9b6914d4250a77de1ec2a86aca9be50b3a12a446f578bbfbd1b87866", 0x8c}, {&(0x7f00000057c0)="cb0ce1429ad63c0726726da2f9b3a94e67503690547aec06d35f35f2833ba6377bc697cd271e6f3b4d321aa6c83f137854a427c96a48db34d6458fc1cd36c0a961beb23c15f2234c2be2002e3b7e1decf37ae1749772078138f2f309750bbaac8030a759332a798cc9fdfa568adc3151f1723ab09d7b336318fba70d4123976122ca87330352e07f58fc271b9799b9973e53e23048abacba6c36d99fe56a6d01afc14e048cb1eaf605ae23446f0a43c6ca7a4dca3e89e723f01f1431d39757c4179b40b898af0a5973bd846c2a60fe5419152dca4201365956e16f566d97e643788f79ba2389", 0xe6}], 0x7, &(0x7f0000008000)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x100, 0x48040}}, {{&(0x7f0000008100)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000008300)=[{&(0x7f0000008180)="64184cd5e9a9b035af95c6e066deccb3d7e2ee42e3", 0x15}, {&(0x7f00000081c0)="9e82559e64b312edb0f20bb48416870ef516ac7c941104bf0be244d8656121d7bba8e4a0383b1e37a9c69266f9e41fcd096d104cda", 0x35}, {&(0x7f0000008200)="9525bab5ac99473e409f95f76c46a47d61c0b885db538444dd466c136f429c1da117ee5e713722e9c80e972be8249311d43475b40bedcdd4c4c32f58f0e565b00c738afea2ea1aeb64fcb617b4521256bb6b5353974d2e258f83dd3ca413a5232983f29cb5e7afa90b2c1103736200387f35b3beddbcb279be98dde18a462e730f5bec88fc07842f30e316c533af52014e773b9251039d20fe8fa934ebf3eee6a2052f03cc6d6302ff68b161811b2cba1ed8cae2c4d93cdd34ad554e774482cdda499c34726900", 0xc7}], 0x3, &(0x7f0000008480)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r10, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x48, 0x20000000}}, {{&(0x7f0000008500)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000008b00)=[{&(0x7f0000008580)="191b8db945d1f4bffb8d1cb98935aaab505c7dd6498efa061804aaa5a48912ec76216765daeae3966755fac4255ee779611f98d1d403165404d9584e986aea77191b1ecf21e01b962a4d1c19242f8f457328d21c6096c824a068a7f1777434443bcdbecc064cd2f372a5828c124632b40317efba6f7cfbba7160499d63f83606b69b886177ee15125ce74f93c50783a39c8a5e8ae525f9e7f6374560eb165f0f206fb14dab3518833050c0a7a2d88fd146a60a55bf46ce5e5586deebba5ee317a042184a626478d496272f5dec4e7d270a8978998e003759f9b36b0ba4d9909b6608d4afb725", 0xe6}, {&(0x7f0000008680)="d76e8588efe2bf8718574489fd2f4130a9dbbdfc427c39957a34d04779c4702f6be424f19644e6f73073c17b10098ee3f335a6a516156aa0222d1b0d769adb2f26b7df4971a7b3ed28da5822252083d0b52513feb3f73eff9770efa45aff8a11f693d3a0e22a05c9c57a507afea48a8b6fe11e29c7e56b8a26ea2016bcac386223de", 0x82}, {&(0x7f0000008740)="77a7f1a4df604e580222541b30e447f6bb12c2eb7716cfe17ed2ac", 0x1b}, {&(0x7f0000008780)="753d6154cda4286c3769542bb92e20df6f40945e8a7610885efc025561e92a6a38db071de3f2bd5762ccd301eb78da8380e7ef6017ca8bca25d932cb6ccb0c", 0x3f}, {&(0x7f00000087c0)="f987583da43baaf73476d45a32ce04debbb51fb33c6068a6245f3f80770ceb385fdf05f2853471a1ba7fed6925af430f9d719ea42d93f4e35ac9c8906e267b76c06ec9f1fc3521685e8c905c2c27354050325b1a30bf2e3757fa78b830fff1e43222cb9e5099", 0x66}, {&(0x7f0000008840)="6938651691ab63bbc3e066ad5d2be285eae7c5a3f2bf4f0bcdf97949a13f7be41e0f96b685a0bcc84421567ebf226ebea018a8286a53d47236c807fc33ae10c2c53c0cc9828ba807edc8590aba4a31ee6a774fe056432f6f1d325bbc4c1ae63582ac04a530a960b47b70ec74494d52ff7f78d548440ffe8608865c93711f2621a3be08daa2de6d1f42eba1bfc4a335bf46a76d04ecc9b39cf2780784fa462093a32cb669706bde6caf22e19e1b29bf0a905e24eef8d5878158407e3e2185628e1a9684e063224b47804fb74031698a24ebd0ad11c888d2e1e417a9f9edd9c341af50a67b28845e8e", 0xe8}, {&(0x7f0000008940)="3b5e9a9a3df4b3c0ba1876b2685bbcd3b4bec0659051ade4c3d5d98280992a9f4e07be8c366b41a7eb9f808e2343db38ab365a5b23b594c3829f353c88a1482d49901a03eb148af4baa71be5a2c0759518fad02bfca1934d4ece81693e1258f6230aaa49ebf1ebf3ec12f4335bf516a3b12cdf6ab5be1f9c63df0a3a6e6eb4a34b61a61a7047793fd84613d4657e41ea3cee48f1dd8bee5af3720bf56a102e707ca92dcb5e83c79c0a70bd561411e6cb010d1ca6571462d8524ce284c55fddef1d53dbc4f33ffac4f6deaecd333a544a4dd5857eeac3bf7e045d396ae60bce50079c", 0xe2}, {&(0x7f0000008a40)="ef04c1ef193e29692a720d0ea3fd3d8c1063aa3091b07733f9aea3731fc60b8eae7b5d19238e7de5e69e541de556ce11114fe68fbef63268880ff8341d65e4c5cfd225f0af0d3862858cafd4c0a9780c23d466562eae1e00c1e709cb9f1ab525eb4602e9fd16f6aa519244626bf9788f7c70b61cf0e86c18fedaa554463128257559c44c40b2b48b09b1a88f2b2b92b3245702859876aff63c5cc301dd0f65559d84c28f222e150867e8fd458adc8b3980dd30c57803db", 0xb7}], 0x8, &(0x7f00000091c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe8, 0x24008045}}, {{&(0x7f00000092c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000009800)=[{&(0x7f0000009340)="e739a2adb7415d3dc4e5eae15f4b98f67d753382e71ab1173e105c29519231d999cddc20485261a5f705bb8a72f6485e092d0111eaf2f7dcaf881eb10bd2ab63ddcb3334ddb54ac9286aa168fc71bb71b554887a1b63121fb74cbe133eed287e2e91c4a0dd4b52a1d46d49f2ee75953a25e7f4952368e071427b770b38fd5d3ca4f7b588acb5f97e56c09473725fb86cf1e0ef4da17a2e56363994427393faf20bbcd50b2d8bdd0afea05608d3ec0e031c6e4e1cd60cb85093c711d0c739a48025730e935fa4e2560ec140534301e18d8a71164466c4f8f65c93d8bdafdbe84973e82bcf", 0xe4}, {&(0x7f0000009440)="2bfdbc7bd1cd9e67addb46db1f3e67b72b05378944009522a955464c5a71e053eb887e688de27638", 0x28}, {&(0x7f0000009480)="9c3aaad17b9650ff4091c46d0928972c7a29c630394922ab29d9c5e20b32506b36d1651dc313f70b683c2547296f8ebcd5a60569eed5db881317b162c33e154138887101f240cb457890a6b6358051da18c7adbead04b6f31c1204c57e7daaa55fa888f0480b82f8431f8074add657174697b750e73ab49f24b0bf8ea28d96b672c2c3f08d00fa2d05926b351e7b7d28cb5cf78b2bae61c0e1a4a808a8f1e69d1d38256a6d396053536d7191987cfb5ad760e96650b2abaec79ac608d586c82007561cfefabd54db22", 0xc9}, {&(0x7f0000009580)="ae3d22a5a28988dd4a346160e676f599fef36a645cc32d33b8c8f9290433afa16ac1ac8dd429c319587df6036add8e97a700fb89832d10c3e28f4eee91c14b5a83ac39974937f67829ff105d87c7eae157689cc0973c7c4b5356567244174871de001c34b6387cf84012e700aceb484b26d5484e3f5fd27c707e27ef78345d9246aa78b7eeefc9cf3eb626b527d7db3facb2f6845dffe15fd6ec15131d6ea4359e174b86c6a8fbea9640103e82b515", 0xaf}, {&(0x7f0000009640)="0458283089ae2d97c3d25130826af18059caea4f770dbab66a9c95020427a6d3cf06a2e6bf09abe3fa20d31f92d187d783ab3dfb84780b41a6a94641e306ccbd63efeffbc8cad7922d22baff9823447a7d7da8b30b157d517ee84f95bd361ca01d11f24403b734806df6a25a0af08b09b03f708a4e0b3db7684f31d71fbea4872ffbaaaa357b6aeb4407d431163218cc730a1de2d2f219f1518f42d4c32de80d1d4fdcb0fcef6e8592e91a37a2d32bca50c88f002fa576", 0xb7}, {&(0x7f0000009700)="4311b5af1fb947f754f59f3324464a7044ad816af47c1b94a9b03f2667f9fd8f7d5bab9677677414f299c045658fb66747eb45e56744df70ae23301ba8f8973fece351b067ee8382582bc5befd8d4c797aa8fd3f386173d9ff2d9a7784081fd6ea039345a907c291535c50694e85fce22c3cb939a8f8ade8cd50a56d0e62d71733d7e5104f317de253c5ebcd838d39e9c8c7b690dd23d4a987a64bb0058c3252d3798d3ab1db30f03f6ba49915787e837bbacbdcb19ac9e96de9d02f6596414f9b4b62b3e172a6cd7795f4bb449d0bbbbca3", 0xd2}], 0x6, &(0x7f0000009cc0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, r1}}}, @cred={{0x1c, 0x1, 0x2, {r2, r5, r9}}}, @rights={{0x14, 0x1, 0x1, [r10]}}], 0x78, 0x40d4}}], 0x7, 0x8c1) syz_usb_control_io$uac1(r0, 0x0, 0x0) r12 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000000c0)={{{@in=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@loopback}}, &(0x7f00000001c0)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000002c0)={{{@in=@empty, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@loopback}}, &(0x7f00000003c0)=0xe8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x40, &(0x7f0000000440)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r12}, 0x2c, {[{@directio}, {@posixacl}, {@noxattr}, {@debug={'debug', 0x3d, 0x4}}], [{@obj_role={'obj_role', 0x3d, '\\.'}}, {@uid_gt={'uid>', r13}}, {@obj_role={'obj_role', 0x3d, '!.&.+,'}}, {@pcr={'pcr', 0x3d, 0xc}}, {@smackfstransmute={'smackfstransmute', 0x3d, '-'}}, {@uid_eq={'uid', 0x3d, r14}}]}}) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r15) sendmsg$BATADV_CMD_GET_NEIGHBORS(r15, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r16, @ANYBLOB="31032cbd7000fbdbdf250b"], 0x1c}, 0x1, 0x0, 0x0, 0x4008010}, 0x4000000) socket(0x8, 0xa, 0xfffffff7) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000280)={0x0, 0x17, 0x4, "1699d906"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 0s ago: executing program 4 (id=352): socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) userfaultfd(0x801) socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0xfffffffc, 0x1003, 0x4, {0x6, @pix_mp={0x12, 0x5be7, 0xb5315258, 0x6, 0xb, [{0x80000004, 0x7}, {0x7ff, 0x5}, {0x10000001, 0x9}, {0x63d, 0x7fd}, {0x1, 0xb}, {0x7, 0x489aa92e}, {0x5}, {0xff, 0x7}], 0x1, 0xc, 0x2, 0x0, 0x3}}, 0xfffffffd}) socket(0x10, 0x80002, 0x0) socket$key(0xf, 0x3, 0x2) socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x1400000000, 0x9d8}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x2, 0x32}, 0x2, @in6=@private1={0xfc, 0x1, '\x00', 0x4}, 0x0, 0x4}]}]}, 0xfc}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142e08000700e0"], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0xbbe, 0x8, 0xffffffff, 0xfffffffd}, 0x0, 0x0, 0x0) syz_mount_image$exfat(&(0x7f00000009c0), &(0x7f0000000000)='./file1\x00', 0x2000000, &(0x7f0000000300)=ANY=[@ANYBLOB="7574d3a12c757466382c646d61736b3d30303030303030303031303030303030121e1fe24551f9fb7e14df303030303030332c757466382c696f636861727365743d63703836322c7522b4e9703d30303030303030303030303030303030303030303030322c6572726f72733d72656d6f756e742d726f2c757466382c646d61736b3d303030303030303030303030729f730f809a2a833030303030"], 0x1, 0x152b, &(0x7f0000001240)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x80000, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$qrtr(0x2a, 0x2, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) socket(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket(0x2, 0x3, 0x6) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r3, @ANYBLOB='\a'], 0x0) kernel console output (not intermixed with test programs): ined pid=6076 comm="syz.3.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafc8cccdd9 code=0x7ffc0000 [ 127.640606][ T38] audit: type=1326 audit(1777263913.485:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6076 comm="syz.3.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafc8cccdd9 code=0x7ffc0000 [ 127.701211][ T38] audit: type=1326 audit(1777263913.635:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6076 comm="syz.3.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafc8cccdd9 code=0x7ffc0000 [ 127.701400][ T38] audit: type=1326 audit(1777263913.635:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6076 comm="syz.3.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafc8cccdd9 code=0x7ffc0000 [ 127.756953][ T38] audit: type=1326 audit(1777263913.655:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6076 comm="syz.3.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fafc8cccdd9 code=0x7ffc0000 [ 127.909085][ T6079] loop2: detected capacity change from 0 to 512 [ 128.222941][ T6086] loop3: detected capacity change from 0 to 2048 [ 128.356583][ T6089] loop0: detected capacity change from 0 to 512 [ 128.416290][ T6089] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 128.416312][ T6089] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 128.647990][ T6089] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 128.681734][ T6094] loop4: detected capacity change from 0 to 1024 [ 128.706666][ T6094] ext4: Unknown parameter 'dont_measure' [ 128.759133][ T6089] EXT4-fs (loop0): 1 truncate cleaned up [ 128.776473][ T6089] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.931877][ T6086] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 129.095887][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 129.274876][ T6098] loop4: detected capacity change from 0 to 8 [ 130.256608][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 130.260776][ T9] usb 2-1: config 254 has an invalid interface number: 235 but max is 0 [ 130.260805][ T9] usb 2-1: config 254 has no interface number 0 [ 130.260850][ T9] usb 2-1: config 254 interface 235 altsetting 2 has an endpoint descriptor with address 0xE6, changing to 0x86 [ 130.260877][ T9] usb 2-1: config 254 interface 235 altsetting 2 bulk endpoint 0x86 has invalid maxpacket 32 [ 130.260900][ T9] usb 2-1: config 254 interface 235 altsetting 2 endpoint 0x8C has an invalid bInterval 222, changing to 7 [ 130.260927][ T9] usb 2-1: config 254 interface 235 altsetting 2 endpoint 0x8C has invalid maxpacket 33081, setting to 1024 [ 130.260955][ T9] usb 2-1: config 254 interface 235 has no altsetting 0 [ 130.277993][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 130.278025][ T9] usb 2-1: New USB device strings: Mfr=1, Product=251, SerialNumber=3 [ 130.278046][ T9] usb 2-1: Product: syz [ 130.278062][ T9] usb 2-1: Manufacturer: syz [ 130.278077][ T9] usb 2-1: SerialNumber: syz [ 130.326181][ T5954] udevd[5954]: incorrect nilfs2 checksum on /dev/loop3 [ 130.799343][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 130.799665][ T9] usb 2-1: can't set config #254, error -32 [ 130.961749][ T9] usb 2-1: USB disconnect, device number 2 [ 131.004422][ T5945] udevd[5945]: incorrect nilfs2 checksum on /dev/loop3 [ 131.048094][ T6102] loop2: detected capacity change from 0 to 512 [ 131.118598][ T6102] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 131.121048][ T6086] NILFS (loop3): error -4 creating segctord thread [ 131.433811][ T6102] EXT4-fs (loop2): 1 truncate cleaned up [ 132.522364][ T6102] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.604451][ T5825] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.383987][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.386337][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.594488][ T6125] vxfs: WRONG superblock magic 00000000 at 1 [ 133.602031][ T6125] vxfs: WRONG superblock magic 00000000 at 8 [ 133.602105][ T6125] vxfs: can't find superblock. [ 137.510122][ T6128] loop0: detected capacity change from 0 to 256 [ 137.745932][ T5828] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.551711][ T6152] loop1: detected capacity change from 0 to 4096 [ 138.567170][ T6152] ======================================================= [ 138.567170][ T6152] WARNING: The mand mount option has been deprecated and [ 138.567170][ T6152] and is ignored by this kernel. Remove the mand [ 138.567170][ T6152] option from the mount to silence this warning. [ 138.567170][ T6152] ======================================================= [ 138.614902][ T6115] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 138.692173][ T6152] ntfs3(loop1): mft corrupted [ 138.692321][ T6152] ntfs3(loop1): Failed to load $MFT. [ 138.784828][ T6115] usb 5-1: Using ep0 maxpacket: 32 [ 138.787361][ T6115] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 138.787393][ T6115] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.845945][ T6115] usb 5-1: config 0 descriptor?? [ 138.972474][ T6159] Bluetooth: MGMT ver 1.23 [ 139.017277][ T6158] loop0: detected capacity change from 0 to 1024 [ 139.062709][ T6158] ext4: Unknown parameter 'dont_measure' [ 139.236391][ T6115] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 140.388289][ T32] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 140.467605][ T6115] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 140.494137][ T6115] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 140.494239][ T6115] usb 5-1: media controller created [ 140.696203][ T32] usb 3-1: Using ep0 maxpacket: 16 [ 140.698592][ T32] usb 3-1: config 254 has an invalid interface number: 235 but max is 0 [ 140.698619][ T32] usb 3-1: config 254 has no interface number 0 [ 140.698658][ T32] usb 3-1: config 254 interface 235 altsetting 2 has an endpoint descriptor with address 0xE6, changing to 0x86 [ 140.698685][ T32] usb 3-1: config 254 interface 235 altsetting 2 bulk endpoint 0x86 has invalid maxpacket 32 [ 140.698710][ T32] usb 3-1: config 254 interface 235 altsetting 2 endpoint 0x8C has an invalid bInterval 222, changing to 7 [ 140.698736][ T32] usb 3-1: config 254 interface 235 altsetting 2 endpoint 0x8C has invalid maxpacket 33081, setting to 1024 [ 140.698764][ T32] usb 3-1: config 254 interface 235 has no altsetting 0 [ 140.717394][ T32] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 140.717422][ T32] usb 3-1: New USB device strings: Mfr=1, Product=251, SerialNumber=3 [ 140.717442][ T32] usb 3-1: Product: syz [ 140.717456][ T32] usb 3-1: Manufacturer: syz [ 140.717469][ T32] usb 3-1: SerialNumber: syz [ 140.872694][ T6115] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 140.901859][ T6168] FAULT_INJECTION: forcing a failure. [ 140.901859][ T6168] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 140.901918][ T6168] CPU: 1 UID: 0 PID: 6168 Comm: syz.0.54 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 140.901949][ T6168] Tainted: [L]=SOFTLOCKUP [ 140.901957][ T6168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 140.901978][ T6168] Call Trace: [ 140.901990][ T6168] [ 140.901999][ T6168] dump_stack_lvl+0xe8/0x150 [ 140.902029][ T6168] should_fail_ex+0x46b/0x600 [ 140.902070][ T6168] _copy_to_user+0x31/0xb0 [ 140.902105][ T6168] video_usercopy+0xe0a/0x1450 [ 140.902146][ T6168] ? __pfx___video_do_ioctl+0x10/0x10 [ 140.902179][ T6168] ? __pfx_video_usercopy+0x10/0x10 [ 140.902219][ T6168] ? __fget_files+0x2a/0x420 [ 140.902252][ T6168] ? __fget_files+0x2a/0x420 [ 140.902280][ T6168] ? __fget_files+0x3a6/0x420 [ 140.902311][ T6168] v4l2_ioctl+0x190/0x1e0 [ 140.902341][ T6168] ? __pfx_v4l2_ioctl+0x10/0x10 [ 140.902370][ T6168] __se_sys_ioctl+0xff/0x170 [ 140.902404][ T6168] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.902427][ T6168] do_syscall_64+0x15f/0xf80 [ 140.902459][ T6168] ? trace_irq_disable+0x3b/0x140 [ 140.902486][ T6168] ? clear_bhb_loop+0x40/0x90 [ 140.902515][ T6168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.902538][ T6168] RIP: 0033:0x7f395108cdd9 [ 140.902571][ T6168] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.902591][ T6168] RSP: 002b:00007f394f2e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 140.902623][ T6168] RAX: ffffffffffffffda RBX: 00007f3951305fa0 RCX: 00007f395108cdd9 [ 140.902641][ T6168] RDX: 0000200000000380 RSI: 00000000c008561c RDI: 0000000000000003 [ 140.902656][ T6168] RBP: 00007f394f2e6090 R08: 0000000000000000 R09: 0000000000000000 [ 140.902671][ T6168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.902684][ T6168] R13: 00007f3951306038 R14: 00007f3951305fa0 R15: 00007ffed33d7d48 [ 140.902719][ T6168] [ 141.216606][ T6160] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 141.430931][ T6115] az6027: usb out operation failed. (-71) [ 141.464399][ T6115] az6027: usb out operation failed. (-71) [ 141.464424][ T6115] stb0899_attach: Driver disabled by Kconfig [ 141.464435][ T6115] az6027: no front-end attached [ 141.464435][ T6115] [ 141.552120][ T6115] az6027: usb out operation failed. (-71) [ 141.552160][ T6115] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 141.596670][ T6115] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input5 [ 141.654013][ T6115] dvb-usb: schedule remote query interval to 400 msecs. [ 141.654039][ T6115] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 141.752951][ T6115] usb 5-1: USB disconnect, device number 2 [ 142.056547][ T6175] loop4: detected capacity change from 0 to 32768 [ 142.427411][ T6175] JBD2: Ignoring recovery information on journal [ 142.646383][ T6175] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 143.108688][ T6183] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 143.793684][ T32] usbtest 3-1:254.235: Linux gadget zero [ 143.793710][ T32] usbtest 3-1:254.235: high-speed {control in/out bulk-in iso-in} tests (+alt) [ 143.876256][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 144.640687][ T38] kauditd_printk_skb: 69 callbacks suppressed [ 144.640707][ T38] audit: type=1326 audit(1777263930.465:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6156 comm="syz.2.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f052b7ecdd9 code=0x7fc00000 [ 145.376009][ T9] usb 3-1: USB disconnect, device number 2 [ 145.557688][ T6188] loop0: detected capacity change from 0 to 128 [ 145.595391][ T6188] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 145.637077][ T6189] FAULT_INJECTION: forcing a failure. [ 145.637077][ T6189] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 145.637119][ T6189] CPU: 0 UID: 0 PID: 6189 Comm: syz.2.60 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 145.637150][ T6189] Tainted: [L]=SOFTLOCKUP [ 145.637164][ T6189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 145.637178][ T6189] Call Trace: [ 145.637187][ T6189] [ 145.637197][ T6189] dump_stack_lvl+0xe8/0x150 [ 145.637230][ T6189] should_fail_ex+0x46b/0x600 [ 145.637265][ T6189] _copy_from_user+0x2d/0xb0 [ 145.637300][ T6189] ___sys_sendmsg+0x1c6/0x360 [ 145.637322][ T6189] ? __lock_acquire+0x6b5/0x2cf0 [ 145.637359][ T6189] ? __pfx____sys_sendmsg+0x10/0x10 [ 145.637387][ T6189] ? kstrtouint+0x6e/0xe0 [ 145.637440][ T6189] ? __fget_files+0x2a/0x420 [ 145.637469][ T6189] ? __fget_files+0x3a6/0x420 [ 145.637510][ T6189] __sys_sendmmsg+0x282/0x4e0 [ 145.637539][ T6189] ? __pfx___sys_sendmmsg+0x10/0x10 [ 145.637583][ T6189] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 145.637629][ T6189] ? ksys_write+0x248/0x270 [ 145.637667][ T6189] ? __pfx_ksys_write+0x10/0x10 [ 145.637709][ T6189] __x64_sys_sendmmsg+0xa0/0xc0 [ 145.637733][ T6189] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.637759][ T6189] do_syscall_64+0x15f/0xf80 [ 145.637794][ T6189] ? trace_irq_disable+0x3b/0x140 [ 145.637821][ T6189] ? clear_bhb_loop+0x40/0x90 [ 145.637851][ T6189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.637875][ T6189] RIP: 0033:0x7f052b7ecdd9 [ 145.637897][ T6189] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.637916][ T6189] RSP: 002b:00007f0529a46028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 145.637941][ T6189] RAX: ffffffffffffffda RBX: 00007f052ba65fa0 RCX: 00007f052b7ecdd9 [ 145.637959][ T6189] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000005 [ 145.637974][ T6189] RBP: 00007f0529a46090 R08: 0000000000000000 R09: 0000000000000000 [ 145.637989][ T6189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.638002][ T6189] R13: 00007f052ba66038 R14: 00007f052ba65fa0 R15: 00007ffdd9b40c48 [ 145.638039][ T6189] [ 146.863977][ T5829] ocfs2: Unmounting device (7,4) on (node local) [ 146.934335][ T6195] loop3: detected capacity change from 0 to 256 [ 146.942167][ T6115] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 147.271157][ T6198] loop2: detected capacity change from 0 to 1024 [ 147.283545][ T6198] ext4: Unknown parameter 'dont_measure' [ 147.320749][ T6202] loop1: detected capacity change from 0 to 512 [ 147.331147][ T6202] EXT4-fs: Ignoring removed nomblk_io_submit option [ 147.804065][ T6206] loop2: detected capacity change from 0 to 8 [ 148.440764][ T6202] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 148.831960][ T6205] netlink: 48 bytes leftover after parsing attributes in process `syz.0.63'. [ 148.955311][ T6202] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.65: bad orphan inode 131083 [ 148.955547][ T6202] loop1: lost filesystem error report for type 5 error -117 [ 148.968433][ C0] EXT4-fs (loop1): initial error at time 1777263934: ext4_orphan_get:1423 [ 148.968471][ C0] EXT4-fs (loop1): last error at time 1777263934: ext4_orphan_get:1423 [ 149.042713][ T6202] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.180126][ T6202] EXT4-fs error (device loop1): ext4_append:79: inode #2: comm syz.1.65: Logical block already allocated [ 149.404926][ T5916] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 149.648258][ T5916] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 149.648291][ T5916] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 149.648341][ T5916] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 149.735800][ T6226] loop4: detected capacity change from 0 to 512 [ 149.737280][ T6226] EXT4-fs: Ignoring removed orlov option [ 149.772711][ T6226] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 149.773079][ T5916] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 149.773109][ T5916] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.773131][ T5916] usb 4-1: Product: syz [ 149.773156][ T5916] usb 4-1: Manufacturer: syz [ 149.773172][ T5916] usb 4-1: SerialNumber: syz [ 149.802320][ T6226] EXT4-fs error (device loop4): __ext4_iget:5481: inode #2: block 16777216: comm syz.4.69: invalid block [ 149.803126][ T6226] loop4: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 149.804805][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 149.804874][ C0] EXT4-fs (loop4): initial error at time 1777263935: __ext4_iget:5481: inode 2: block 16777216 [ 149.804979][ C0] EXT4-fs (loop4): last error at time 1777263935: __ext4_iget:5481: inode 2: block 16777216 [ 149.915037][ T6226] EXT4-fs (loop4): get root inode failed [ 149.915061][ T6226] EXT4-fs (loop4): mount failed [ 149.941313][ T6226] overlayfs: failed to resolve './file0': -2 [ 150.141009][ T5827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.397653][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 150.554854][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 150.558521][ T9] usb 1-1: config 254 has an invalid interface number: 235 but max is 0 [ 150.558566][ T9] usb 1-1: config 254 has no interface number 0 [ 150.558605][ T9] usb 1-1: config 254 interface 235 altsetting 2 has an endpoint descriptor with address 0xE6, changing to 0x86 [ 150.558632][ T9] usb 1-1: config 254 interface 235 altsetting 2 bulk endpoint 0x86 has invalid maxpacket 32 [ 150.558656][ T9] usb 1-1: config 254 interface 235 altsetting 2 endpoint 0x8C has an invalid bInterval 222, changing to 7 [ 150.558683][ T9] usb 1-1: config 254 interface 235 altsetting 2 endpoint 0x8C has invalid maxpacket 33081, setting to 1024 [ 150.558711][ T9] usb 1-1: config 254 interface 235 has no altsetting 0 [ 150.561415][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 150.561444][ T9] usb 1-1: New USB device strings: Mfr=1, Product=251, SerialNumber=3 [ 150.561466][ T9] usb 1-1: Product: syz [ 150.561480][ T9] usb 1-1: Manufacturer: syz [ 150.561494][ T9] usb 1-1: SerialNumber: syz [ 151.132367][ T6221] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 152.468229][ T38] audit: type=1326 audit(1777263938.375:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6219 comm="syz.0.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f395108cdd9 code=0x7fc00000 [ 152.604623][ T6242] loop1: detected capacity change from 0 to 131072 [ 152.899019][ T6242] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 152.927524][ T6242] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 152.993591][ T9] usbtest 1-1:254.235: couldn't get endpoints, -71 [ 152.993703][ T9] usbtest 1-1:254.235: probe with driver usbtest failed with error -71 [ 153.051429][ T9] usb 1-1: USB disconnect, device number 3 [ 153.901064][ T6251] FAULT_INJECTION: forcing a failure. [ 153.901064][ T6251] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 153.901110][ T6251] CPU: 0 UID: 0 PID: 6251 Comm: syz.0.74 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 153.901141][ T6251] Tainted: [L]=SOFTLOCKUP [ 153.901149][ T6251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 153.901162][ T6251] Call Trace: [ 153.901170][ T6251] [ 153.901179][ T6251] dump_stack_lvl+0xe8/0x150 [ 153.901211][ T6251] should_fail_ex+0x46b/0x600 [ 153.901245][ T6251] _copy_from_user+0x2d/0xb0 [ 153.901279][ T6251] __se_sys_mount+0x18b/0x420 [ 153.901315][ T6251] ? __pfx___se_sys_mount+0x10/0x10 [ 153.901349][ T6251] ? __x64_sys_mount+0x20/0xc0 [ 153.901377][ T6251] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.901415][ T6251] do_syscall_64+0x15f/0xf80 [ 153.901453][ T6251] ? clear_bhb_loop+0x40/0x90 [ 153.901483][ T6251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.901507][ T6251] RIP: 0033:0x7f395108cdd9 [ 153.901527][ T6251] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.901546][ T6251] RSP: 002b:00007f394f2e6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 153.901571][ T6251] RAX: ffffffffffffffda RBX: 00007f3951305fa0 RCX: 00007f395108cdd9 [ 153.901588][ T6251] RDX: 0000200000000180 RSI: 0000200000000300 RDI: 0000000000000000 [ 153.901604][ T6251] RBP: 00007f394f2e6090 R08: 0000200000000340 R09: 0000000000000000 [ 153.901620][ T6251] R10: 0000000002004890 R11: 0000000000000246 R12: 0000000000000001 [ 153.901634][ T6251] R13: 00007f3951306038 R14: 00007f3951305fa0 R15: 00007ffed33d7d48 [ 153.901689][ T6251] [ 154.116849][ T6251] 9p: Bad value for 'wfdno' [ 154.915007][ T6256] loop4: detected capacity change from 0 to 1024 [ 154.953161][ T6256] ext4: Unknown parameter 'dont_measure' [ 156.675048][ T5916] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 156.675105][ T5916] cdc_ncm 4-1:1.0: bind() failure [ 156.881819][ T6257] loop0: detected capacity change from 0 to 256 [ 156.930148][ T5916] usb 4-1: USB disconnect, device number 4 [ 158.179715][ T6280] loop3: detected capacity change from 0 to 256 [ 158.198322][ T6280] exfat: Deprecated parameter 'utf8' [ 158.198507][ T6280] exfat: Deprecated parameter 'namecase' [ 158.199447][ T6280] exfat: Deprecated parameter 'namecase' [ 158.199918][ T6280] exfat: Deprecated parameter 'namecase' [ 158.941434][ T6280] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 159.047927][ T6115] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 159.286223][ T6115] usb 1-1: Using ep0 maxpacket: 8 [ 159.331261][ T6115] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 159.331303][ T6115] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 159.331331][ T6115] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 159.331358][ T6115] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 159.331404][ T6115] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 159.331429][ T6115] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.673436][ T6115] usb 1-1: GET_CAPABILITIES returned 0 [ 159.673481][ T6115] usbtmc 1-1:16.0: can't read capabilities [ 159.724948][ T822] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 159.921914][ T6275] usbtmc 1-1:16.0: usbtmc488_ioctl_trigger returned -71 [ 159.982764][ T822] usb 4-1: Using ep0 maxpacket: 16 [ 159.988530][ T822] usb 4-1: config 254 has an invalid interface number: 235 but max is 0 [ 159.988564][ T822] usb 4-1: config 254 has no interface number 0 [ 159.988614][ T822] usb 4-1: config 254 interface 235 altsetting 2 has an endpoint descriptor with address 0xE6, changing to 0x86 [ 159.988645][ T822] usb 4-1: config 254 interface 235 altsetting 2 bulk endpoint 0x86 has invalid maxpacket 32 [ 159.988675][ T822] usb 4-1: config 254 interface 235 altsetting 2 endpoint 0x8C has an invalid bInterval 222, changing to 7 [ 159.988706][ T822] usb 4-1: config 254 interface 235 altsetting 2 endpoint 0x8C has invalid maxpacket 33081, setting to 1024 [ 159.988737][ T822] usb 4-1: config 254 interface 235 has no altsetting 0 [ 160.035566][ T822] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 160.035600][ T822] usb 4-1: New USB device strings: Mfr=1, Product=251, SerialNumber=3 [ 160.035624][ T822] usb 4-1: Product: syz [ 160.035640][ T822] usb 4-1: Manufacturer: syz [ 160.035657][ T822] usb 4-1: SerialNumber: syz [ 160.234841][ T5929] usb 1-1: USB disconnect, device number 4 [ 160.316020][ T6284] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 160.877248][ T6287] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 160.882959][ T822] usbtest 4-1:254.235: Linux gadget zero [ 160.882986][ T822] usbtest 4-1:254.235: high-speed {control in/out bulk-in iso-in} tests (+alt) [ 161.401779][ T6292] loop1: detected capacity change from 0 to 512 [ 161.431015][ T6292] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 161.854777][ T5818] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 162.182158][ T5818] usb 5-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 162.182291][ T5818] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.182315][ T5818] usb 5-1: Product: syz [ 162.182330][ T5818] usb 5-1: Manufacturer: syz [ 162.182347][ T5818] usb 5-1: SerialNumber: syz [ 162.235733][ T6292] EXT4-fs (loop1): 1 truncate cleaned up [ 162.414732][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 162.434737][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 162.444723][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 162.454705][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 162.464693][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 162.474741][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 162.484742][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 162.494701][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 162.504693][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 163.592290][ T5818] usb 5-1: config 0 descriptor?? [ 165.010328][ T6299] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 165.324876][ T6304] loop2: detected capacity change from 0 to 40427 [ 165.492106][ T6304] F2FS-fs (loop2): invalid crc value [ 165.500668][ T38] audit: type=1326 audit(1777263951.415:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6282 comm="syz.3.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafc8cccdd9 code=0x7fc00000 [ 165.560381][ T6292] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.563514][ T5929] usb 4-1: USB disconnect, device number 5 [ 165.686874][ T38] audit: type=1326 audit(1777263951.545:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6289 comm="syz.4.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bac9acdd9 code=0x7ffc0000 [ 165.686949][ T38] audit: type=1326 audit(1777263951.545:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6289 comm="syz.4.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bac9acdd9 code=0x7ffc0000 [ 165.687002][ T38] audit: type=1326 audit(1777263951.545:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6289 comm="syz.4.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bac9acdd9 code=0x7ffc0000 [ 165.687051][ T38] audit: type=1326 audit(1777263951.545:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6289 comm="syz.4.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bac9acdd9 code=0x7ffc0000 [ 165.687102][ T38] audit: type=1326 audit(1777263951.565:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6289 comm="syz.4.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7f8bac9acdd9 code=0x7ffc0000 [ 165.687153][ T38] audit: type=1326 audit(1777263951.565:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6289 comm="syz.4.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bac9acdd9 code=0x7ffc0000 [ 165.687204][ T38] audit: type=1326 audit(1777263951.565:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6289 comm="syz.4.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bac9acdd9 code=0x7ffc0000 [ 165.687254][ T38] audit: type=1326 audit(1777263951.565:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6289 comm="syz.4.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bac9acdd9 code=0x7ffc0000 [ 165.687305][ T38] audit: type=1326 audit(1777263951.565:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6289 comm="syz.4.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bac9acdd9 code=0x7ffc0000 [ 165.711820][ T6304] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 165.752455][ T6304] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 169.041760][ T5827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.168998][ T6320] process 'syz.0.89' launched './file0' with NULL argv: empty string added [ 170.027522][ T5818] cx82310_eth 5-1:0.0: probe with driver cx82310_eth failed with error -22 [ 170.058015][ T5818] cxacru 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 170.153119][ T6320] FAULT_INJECTION: forcing a failure. [ 170.153119][ T6320] name failslab, interval 1, probability 0, space 0, times 1 [ 170.153161][ T6320] CPU: 0 UID: 0 PID: 6320 Comm: syz.0.89 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 170.153193][ T6320] Tainted: [L]=SOFTLOCKUP [ 170.153201][ T6320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 170.153215][ T6320] Call Trace: [ 170.153224][ T6320] [ 170.153234][ T6320] dump_stack_lvl+0xe8/0x150 [ 170.153268][ T6320] should_fail_ex+0x46b/0x600 [ 170.153304][ T6320] should_failslab+0xa8/0x100 [ 170.153342][ T6320] kmem_cache_alloc_noprof+0x87/0x680 [ 170.153374][ T6320] ? rcu_is_watching+0x15/0xb0 [ 170.153407][ T6320] ? security_file_alloc+0x34/0x310 [ 170.153440][ T6320] security_file_alloc+0x34/0x310 [ 170.153471][ T6320] init_file+0x96/0x2d0 [ 170.153500][ T6320] alloc_empty_file+0x74/0x1d0 [ 170.153529][ T6320] path_openat+0x11b/0x38a0 [ 170.153574][ T6320] ? try_to_take_rt_mutex+0x840/0xb00 [ 170.153602][ T6320] ? arch_stack_walk+0xfb/0x150 [ 170.153646][ T6320] ? __lock_acquire+0x6b5/0x2cf0 [ 170.153683][ T6320] ? __pfx_path_openat+0x10/0x10 [ 170.153723][ T6320] ? kasan_save_track+0x4f/0x80 [ 170.153751][ T6320] ? kasan_save_track+0x3e/0x80 [ 170.153780][ T6320] ? __kasan_slab_alloc+0x6c/0x80 [ 170.153811][ T6320] ? kmem_cache_alloc_noprof+0x33b/0x680 [ 170.153853][ T6320] ? do_raw_spin_lock+0x12b/0x2f0 [ 170.153889][ T6320] do_file_open+0x23e/0x4a0 [ 170.153923][ T6320] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 170.153962][ T6320] ? __pfx_do_file_open+0x10/0x10 [ 170.154003][ T6320] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 170.154055][ T6320] ? alloc_fd+0x64e/0x6c0 [ 170.154096][ T6320] do_sys_openat2+0x113/0x200 [ 170.154128][ T6320] ? __pfx_do_sys_openat2+0x10/0x10 [ 170.154158][ T6320] ? ksys_write+0x248/0x270 [ 170.154196][ T6320] ? __pfx_ksys_write+0x10/0x10 [ 170.154234][ T6320] __x64_sys_openat+0x138/0x170 [ 170.154271][ T6320] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.154296][ T6320] do_syscall_64+0x15f/0xf80 [ 170.154330][ T6320] ? trace_irq_disable+0x3b/0x140 [ 170.154358][ T6320] ? clear_bhb_loop+0x40/0x90 [ 170.154387][ T6320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.154411][ T6320] RIP: 0033:0x7f395104d60e [ 170.154432][ T6320] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 170.154452][ T6320] RSP: 002b:00007f394f2e5ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 170.154476][ T6320] RAX: ffffffffffffffda RBX: 00007f394f2e66c0 RCX: 00007f395104d60e [ 170.154494][ T6320] RDX: 0000000000000002 RSI: 00007f394f2e5f90 RDI: ffffffffffffff9c [ 170.154509][ T6320] RBP: 00007f394f2e6090 R08: 0000000000000000 R09: 0000000000000000 [ 170.154523][ T6320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.154537][ T6320] R13: 00007f3951306038 R14: 00007f3951305fa0 R15: 00007ffed33d7d48 [ 170.154584][ T6320] [ 170.699327][ T5818] usb 5-1: USB disconnect, device number 3 [ 170.812209][ T6331] loop4: detected capacity change from 0 to 512 [ 171.060603][ T6336] netlink: 'syz.0.94': attribute type 21 has an invalid length. [ 171.060681][ T6336] netlink: 'syz.0.94': attribute type 6 has an invalid length. [ 171.060696][ T6336] netlink: 132 bytes leftover after parsing attributes in process `syz.0.94'. [ 171.107551][ T6331] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 171.167788][ T6333] loop1: detected capacity change from 0 to 1024 [ 171.207679][ T6336] netlink: 28 bytes leftover after parsing attributes in process `syz.0.94'. [ 171.327294][ T6333] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 171.359040][ T6333] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 171.439920][ T6333] EXT4-fs (loop1): orphan cleanup on readonly fs [ 171.484572][ T6331] EXT4-fs (loop4): 1 truncate cleaned up [ 171.508584][ T6333] EXT4-fs error (device loop1): ext4_free_blocks:6718: comm syz.1.90: Freeing blocks not in datazone - block = 0, count = 4096 [ 171.508630][ T6333] loop1: lost filesystem error report for type 5 error -117 [ 171.517015][ C0] EXT4-fs (loop1): initial error at time 1777263957: ext4_free_blocks:6718 [ 171.517105][ C0] EXT4-fs (loop1): last error at time 1777263957: ext4_free_blocks:6718 [ 171.603106][ T6331] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.684270][ T6333] EXT4-fs (loop1): 1 orphan inode deleted [ 171.715377][ T6333] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 172.202631][ T6344] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 172.391104][ T5827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.476808][ T5829] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.811035][ T6352] loop2: detected capacity change from 0 to 256 [ 172.811052][ T6346] loop3: detected capacity change from 0 to 32768 [ 173.022951][ T6360] FAULT_INJECTION: forcing a failure. [ 173.022951][ T6360] name failslab, interval 1, probability 0, space 0, times 0 [ 173.022992][ T6360] CPU: 1 UID: 0 PID: 6360 Comm: syz.1.100 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 173.023023][ T6360] Tainted: [L]=SOFTLOCKUP [ 173.023031][ T6360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 173.023044][ T6360] Call Trace: [ 173.023053][ T6360] [ 173.023062][ T6360] dump_stack_lvl+0xe8/0x150 [ 173.023097][ T6360] should_fail_ex+0x46b/0x600 [ 173.023131][ T6360] should_failslab+0xa8/0x100 [ 173.023171][ T6360] __kmalloc_cache_noprof+0x84/0x690 [ 173.023206][ T6360] ? autofs_new_ino+0x53/0x1c0 [ 173.023245][ T6360] autofs_new_ino+0x53/0x1c0 [ 173.023283][ T6360] autofs_lookup+0x581/0xb10 [ 173.023306][ T6360] ? __rt_spin_lock_init+0x3e/0x50 [ 173.023340][ T6360] __lookup_slow+0x2d2/0x440 [ 173.023374][ T6360] ? __pfx___lookup_slow+0x10/0x10 [ 173.023417][ T6360] ? down_read+0x156/0x200 [ 173.023453][ T6360] ? __pfx_down_read+0x10/0x10 [ 173.023490][ T6360] ? lookup_fast+0x1a3/0x5b0 [ 173.023525][ T6360] lookup_slow+0x53/0x70 [ 173.023556][ T6360] path_lookupat+0x3f5/0x8c0 [ 173.023601][ T6360] filename_lookup+0x256/0x5d0 [ 173.023639][ T6360] ? __pfx_filename_lookup+0x10/0x10 [ 173.023701][ T6360] ? __might_fault+0xaf/0x130 [ 173.023748][ T6360] vfs_statx+0xfc/0x200 [ 173.023775][ T6360] ? __pfx_vfs_statx+0x10/0x10 [ 173.023804][ T6360] ? do_getname+0x151/0x250 [ 173.023832][ T6360] __x64_sys_newlstat+0x125/0x1e0 [ 173.023858][ T6360] ? __pfx___x64_sys_newlstat+0x10/0x10 [ 173.023905][ T6360] ? __pfx_ksys_write+0x10/0x10 [ 173.023948][ T6360] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.023973][ T6360] do_syscall_64+0x15f/0xf80 [ 173.024005][ T6360] ? trace_irq_disable+0x3b/0x140 [ 173.024032][ T6360] ? clear_bhb_loop+0x40/0x90 [ 173.024060][ T6360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.024083][ T6360] RIP: 0033:0x7f9796dccdd9 [ 173.024105][ T6360] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.024123][ T6360] RSP: 002b:00007f979501e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000006 [ 173.024147][ T6360] RAX: ffffffffffffffda RBX: 00007f9797045fa0 RCX: 00007f9796dccdd9 [ 173.024164][ T6360] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000001c0 [ 173.024178][ T6360] RBP: 00007f979501e090 R08: 0000000000000000 R09: 0000000000000000 [ 173.024192][ T6360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.024205][ T6360] R13: 00007f9797046038 R14: 00007f9797045fa0 R15: 00007fff9623bd08 [ 173.024242][ T6360] [ 173.989841][ T6346] FAULT_INJECTION: forcing a failure. [ 173.989841][ T6346] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 173.989889][ T6346] CPU: 0 UID: 0 PID: 6346 Comm: syz.3.97 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 173.989922][ T6346] Tainted: [L]=SOFTLOCKUP [ 173.989930][ T6346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 173.989945][ T6346] Call Trace: [ 173.989954][ T6346] [ 173.989964][ T6346] dump_stack_lvl+0xe8/0x150 [ 173.989998][ T6346] should_fail_ex+0x46b/0x600 [ 173.990036][ T6346] prepare_alloc_pages+0x22a/0x6b0 [ 173.990084][ T6346] __alloc_frozen_pages_noprof+0x12f/0x380 [ 173.990114][ T6346] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 173.990144][ T6346] ? __pfx_policy_nodemask+0x10/0x10 [ 173.990181][ T6346] ? unwind_get_return_address+0x4d/0x90 [ 173.990212][ T6346] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 173.990253][ T6346] alloc_pages_mpol+0xd1/0x380 [ 173.990296][ T6346] alloc_pages_noprof+0xd2/0x2f0 [ 173.990338][ T6346] get_free_pages_noprof+0xf/0x80 [ 173.990362][ T6346] jfs_readdir+0x11f7/0x3420 [ 173.990436][ T6346] ? __pfx_jfs_readdir+0x10/0x10 [ 173.990496][ T6346] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 173.990533][ T6346] ? lockdep_hardirqs_on+0x7a/0x110 [ 173.990571][ T6346] ? rwbase_write_lock+0x568/0x730 [ 173.990603][ T6346] ? __pfx_jfs_readdir+0x10/0x10 [ 173.990642][ T6346] wrap_directory_iterator+0x99/0xe0 [ 173.990686][ T6346] iterate_dir+0x3a5/0x580 [ 173.990715][ T6346] __se_sys_getdents64+0xf1/0x280 [ 173.990743][ T6346] ? __pfx___se_sys_getdents64+0x10/0x10 [ 173.990765][ T6346] ? ksys_write+0x248/0x270 [ 173.990799][ T6346] ? __pfx_filldir64+0x10/0x10 [ 173.990833][ T6346] ? __pfx_ksys_write+0x10/0x10 [ 173.990880][ T6346] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.990907][ T6346] do_syscall_64+0x15f/0xf80 [ 173.990942][ T6346] ? trace_irq_disable+0x3b/0x140 [ 173.990971][ T6346] ? clear_bhb_loop+0x40/0x90 [ 173.991000][ T6346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.991030][ T6346] RIP: 0033:0x7fafc8cccdd9 [ 173.991054][ T6346] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.991073][ T6346] RSP: 002b:00007fafc6f1e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 173.991098][ T6346] RAX: ffffffffffffffda RBX: 00007fafc8f45fa0 RCX: 00007fafc8cccdd9 [ 173.991115][ T6346] RDX: 0000000000000ff0 RSI: 0000200000000f80 RDI: 0000000000000004 [ 173.991129][ T6346] RBP: 00007fafc6f1e090 R08: 0000000000000000 R09: 0000000000000000 [ 173.991144][ T6346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.991157][ T6346] R13: 00007fafc8f46038 R14: 00007fafc8f45fa0 R15: 00007fffca89b9a8 [ 173.991195][ T6346] [ 174.000558][ T6346] jfs_readdir: __get_free_page failed! [ 174.036927][ T6372] loop1: detected capacity change from 0 to 40427 [ 174.257188][ T6372] F2FS-fs (loop1): invalid crc value [ 174.259835][ T5818] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 174.425765][ T6372] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 174.453830][ T5818] usb 1-1: Using ep0 maxpacket: 16 [ 174.458479][ T5818] usb 1-1: config 254 has an invalid interface number: 235 but max is 0 [ 174.458532][ T5818] usb 1-1: config 254 has no interface number 0 [ 174.458641][ T5818] usb 1-1: config 254 interface 235 altsetting 2 has an endpoint descriptor with address 0xE6, changing to 0x86 [ 174.458733][ T5818] usb 1-1: config 254 interface 235 altsetting 2 bulk endpoint 0x86 has invalid maxpacket 32 [ 174.458809][ T5818] usb 1-1: config 254 interface 235 altsetting 2 endpoint 0x8C has an invalid bInterval 222, changing to 7 [ 174.458890][ T5818] usb 1-1: config 254 interface 235 altsetting 2 endpoint 0x8C has invalid maxpacket 33081, setting to 1024 [ 174.458970][ T5818] usb 1-1: config 254 interface 235 has no altsetting 0 [ 174.588777][ T5818] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 174.588810][ T5818] usb 1-1: New USB device strings: Mfr=1, Product=251, SerialNumber=3 [ 174.588834][ T5818] usb 1-1: Product: syz [ 174.588850][ T5818] usb 1-1: Manufacturer: syz [ 174.588866][ T5818] usb 1-1: SerialNumber: syz [ 174.590926][ T6372] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 176.121293][ T6371] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 176.158429][ T6379] loop2: detected capacity change from 0 to 1024 [ 176.320592][ T6379] ext4: Unknown parameter 'dont_measure' [ 176.753532][ T6382] loop2: detected capacity change from 0 to 8 [ 177.823127][ T6386] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 178.303659][ T5818] usbtest 1-1:254.235: Linux gadget zero [ 178.303722][ T5818] usbtest 1-1:254.235: high-speed {control in/out bulk-in iso-in} tests (+alt) [ 178.568851][ T38] kauditd_printk_skb: 40 callbacks suppressed [ 178.568868][ T38] audit: type=1326 audit(1777263964.505:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6368 comm="syz.0.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f395108cdd9 code=0x7fc00000 [ 179.008701][ T1767] usb 1-1: USB disconnect, device number 5 [ 179.231816][ T6392] loop2: detected capacity change from 0 to 256 [ 179.235405][ T6392] vfat: Bad value for 'shortname' [ 179.522074][ T6394] binder: BINDER_SET_CONTEXT_MGR already set [ 179.522092][ T6394] binder: 6393:6394 ioctl 4018620d 200000001000 returned -16 [ 179.575674][ T6394] FAULT_INJECTION: forcing a failure. [ 179.575674][ T6394] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 179.575717][ T6394] CPU: 1 UID: 0 PID: 6394 Comm: syz.0.108 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 179.575749][ T6394] Tainted: [L]=SOFTLOCKUP [ 179.575758][ T6394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 179.575771][ T6394] Call Trace: [ 179.575780][ T6394] [ 179.575790][ T6394] dump_stack_lvl+0xe8/0x150 [ 179.575823][ T6394] should_fail_ex+0x46b/0x600 [ 179.575858][ T6394] _copy_from_user+0x2d/0xb0 [ 179.575893][ T6394] binder_ioctl_write_read+0x167/0xa490 [ 179.575934][ T6394] ? is_bpf_text_address+0x26/0x2b0 [ 179.575980][ T6394] ? try_to_take_rt_mutex+0x840/0xb00 [ 179.576012][ T6394] ? __kernel_text_address+0xd/0x30 [ 179.576059][ T6394] ? __lock_acquire+0x6b5/0x2cf0 [ 179.576098][ T6394] ? __pfx_binder_ioctl_write_read+0x10/0x10 [ 179.576138][ T6394] ? stack_depot_save_flags+0x33/0x810 [ 179.576179][ T6394] ? do_raw_spin_lock+0x12b/0x2f0 [ 179.576219][ T6394] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 179.576261][ T6394] ? lockdep_hardirqs_on+0x7a/0x110 [ 179.576295][ T6394] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 179.576330][ T6394] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 179.576358][ T6394] ? reacquire_held_locks+0x104/0x190 [ 179.576392][ T6394] ? rt_spin_lock+0x1e0/0x400 [ 179.576432][ T6394] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 179.576463][ T6394] ? rt_spin_unlock+0x14f/0x200 [ 179.576500][ T6394] ? binder_get_thread+0x177/0x6d0 [ 179.576542][ T6394] binder_ioctl+0x426/0x1b10 [ 179.576576][ T6394] ? tomoyo_path_number_perm+0x219/0x630 [ 179.576608][ T6394] ? tomoyo_path_number_perm+0x219/0x630 [ 179.576642][ T6394] ? do_vfs_ioctl+0x117b/0x1540 [ 179.576677][ T6394] ? __pfx_binder_ioctl+0x10/0x10 [ 179.576711][ T6394] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 179.576785][ T6394] ? __fget_files+0x2a/0x420 [ 179.576818][ T6394] ? __fget_files+0x2a/0x420 [ 179.576845][ T6394] ? __fget_files+0x3a6/0x420 [ 179.576872][ T6394] ? __fget_files+0x2a/0x420 [ 179.576904][ T6394] ? bpf_lsm_file_ioctl+0x9/0x20 [ 179.576931][ T6394] ? __pfx_binder_ioctl+0x10/0x10 [ 179.576966][ T6394] __se_sys_ioctl+0xff/0x170 [ 179.577001][ T6394] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.577025][ T6394] do_syscall_64+0x15f/0xf80 [ 179.577059][ T6394] ? clear_bhb_loop+0x40/0x90 [ 179.577087][ T6394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.577110][ T6394] RIP: 0033:0x7f395108cdd9 [ 179.577131][ T6394] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.577149][ T6394] RSP: 002b:00007f394f2e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 179.577171][ T6394] RAX: ffffffffffffffda RBX: 00007f3951305fa0 RCX: 00007f395108cdd9 [ 179.577188][ T6394] RDX: 0000200000000300 RSI: 00000000c0306201 RDI: 0000000000000004 [ 179.577202][ T6394] RBP: 00007f394f2e6090 R08: 0000000000000000 R09: 0000000000000000 [ 179.577216][ T6394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.577227][ T6394] R13: 00007f3951306038 R14: 00007f3951305fa0 R15: 00007ffed33d7d48 [ 179.577263][ T6394] [ 179.590886][ T6394] binder: 6393:6394 ioctl c0306201 200000000300 returned -14 [ 179.604853][ T5929] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 179.781708][ T5929] usb 3-1: device descriptor read/64, error -71 [ 180.365879][ T5929] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 180.675001][ T5929] usb 3-1: device descriptor read/64, error -71 [ 180.788283][ T5929] usb usb3-port1: attempt power cycle [ 180.796766][ T6406] trusted_key: syz.3.110 sent an empty control message without MSG_MORE. [ 181.094229][ T6413] loop3: detected capacity change from 0 to 256 [ 181.267314][ T6421] netlink: 48 bytes leftover after parsing attributes in process `syz.0.112'. [ 181.295661][ T5929] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 181.373443][ T5929] usb 3-1: device descriptor read/8, error -71 [ 181.897044][ T5929] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 183.172004][ T5929] usb 3-1: device descriptor read/8, error -71 [ 183.542236][ T5929] usb usb3-port1: unable to enumerate USB device [ 184.360829][ T6429] loop2: detected capacity change from 0 to 1024 [ 184.362111][ T6429] ext4: Unknown parameter 'dont_measure' [ 185.667700][ T6438] loop2: detected capacity change from 0 to 8 [ 186.042749][ T6440] loop4: detected capacity change from 0 to 8 [ 186.074945][ T37] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 186.274777][ T37] usb 4-1: Using ep0 maxpacket: 16 [ 186.277478][ T37] usb 4-1: config 254 has an invalid interface number: 235 but max is 0 [ 186.277514][ T37] usb 4-1: config 254 has no interface number 0 [ 186.277559][ T37] usb 4-1: config 254 interface 235 altsetting 2 has an endpoint descriptor with address 0xE6, changing to 0x86 [ 186.277589][ T37] usb 4-1: config 254 interface 235 altsetting 2 bulk endpoint 0x86 has invalid maxpacket 32 [ 186.277617][ T37] usb 4-1: config 254 interface 235 altsetting 2 endpoint 0x8C has an invalid bInterval 222, changing to 7 [ 186.277645][ T37] usb 4-1: config 254 interface 235 altsetting 2 endpoint 0x8C has invalid maxpacket 33081, setting to 1024 [ 186.277673][ T37] usb 4-1: config 254 interface 235 has no altsetting 0 [ 186.279903][ T37] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 186.279930][ T37] usb 4-1: New USB device strings: Mfr=1, Product=251, SerialNumber=3 [ 186.279949][ T37] usb 4-1: Product: syz [ 186.279962][ T37] usb 4-1: Manufacturer: syz [ 186.279976][ T37] usb 4-1: SerialNumber: syz [ 186.416808][ T6445] FAULT_INJECTION: forcing a failure. [ 186.416808][ T6445] name failslab, interval 1, probability 0, space 0, times 0 [ 186.416850][ T6445] CPU: 0 UID: 0 PID: 6445 Comm: syz.1.121 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 186.416880][ T6445] Tainted: [L]=SOFTLOCKUP [ 186.416888][ T6445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 186.416901][ T6445] Call Trace: [ 186.416910][ T6445] [ 186.416919][ T6445] dump_stack_lvl+0xe8/0x150 [ 186.416950][ T6445] should_fail_ex+0x46b/0x600 [ 186.416984][ T6445] should_failslab+0xa8/0x100 [ 186.417022][ T6445] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 186.417054][ T6445] ? __alloc_skb+0x1d0/0x7d0 [ 186.417085][ T6445] ? lockdep_hardirqs_on+0x7a/0x110 [ 186.417129][ T6445] __alloc_skb+0x1d0/0x7d0 [ 186.417167][ T6445] netlink_sendmsg+0x5d4/0xb40 [ 186.417211][ T6445] ? __pfx_netlink_sendmsg+0x10/0x10 [ 186.417258][ T6445] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 186.417301][ T6445] ? aa_sock_msg_perm+0x122/0x200 [ 186.417335][ T6445] ? __pfx_netlink_sendmsg+0x10/0x10 [ 186.417371][ T6445] sock_sendmsg_nosec+0x112/0x150 [ 186.417403][ T6445] ____sys_sendmsg+0x55c/0x870 [ 186.417432][ T6445] ? __pfx_____sys_sendmsg+0x10/0x10 [ 186.417464][ T6445] ? import_iovec+0x73/0xa0 [ 186.417500][ T6445] ___sys_sendmsg+0x2a5/0x360 [ 186.417521][ T6445] ? __lock_acquire+0x6b5/0x2cf0 [ 186.417557][ T6445] ? __pfx____sys_sendmsg+0x10/0x10 [ 186.417618][ T6445] ? __fget_files+0x2a/0x420 [ 186.417645][ T6445] ? __fget_files+0x3a6/0x420 [ 186.417686][ T6445] __x64_sys_sendmsg+0x1c3/0x2a0 [ 186.417712][ T6445] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 186.417746][ T6445] ? __pfx_ksys_write+0x10/0x10 [ 186.417790][ T6445] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.417815][ T6445] do_syscall_64+0x15f/0xf80 [ 186.417847][ T6445] ? trace_irq_disable+0x3b/0x140 [ 186.417874][ T6445] ? clear_bhb_loop+0x40/0x90 [ 186.417903][ T6445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.417926][ T6445] RIP: 0033:0x7f9796dccdd9 [ 186.417947][ T6445] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 186.417966][ T6445] RSP: 002b:00007f979501e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 186.417990][ T6445] RAX: ffffffffffffffda RBX: 00007f9797045fa0 RCX: 00007f9796dccdd9 [ 186.418007][ T6445] RDX: 0000000004008080 RSI: 0000200000000400 RDI: 0000000000000003 [ 186.418021][ T6445] RBP: 00007f979501e090 R08: 0000000000000000 R09: 0000000000000000 [ 186.418035][ T6445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.418048][ T6445] R13: 00007f9797046038 R14: 00007f9797045fa0 R15: 00007fff9623bd08 [ 186.418083][ T6445] [ 186.665786][ T6434] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 186.742942][ T6449] FAULT_INJECTION: forcing a failure. [ 186.742942][ T6449] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 186.742985][ T6449] CPU: 0 UID: 0 PID: 6449 Comm: syz.0.122 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 186.743019][ T6449] Tainted: [L]=SOFTLOCKUP [ 186.743027][ T6449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 186.743043][ T6449] Call Trace: [ 186.743052][ T6449] [ 186.743061][ T6449] dump_stack_lvl+0xe8/0x150 [ 186.743096][ T6449] should_fail_ex+0x46b/0x600 [ 186.743134][ T6449] _copy_from_iter+0x1d3/0x1670 [ 186.743177][ T6449] ? trace_kmem_cache_alloc+0x29/0xe0 [ 186.743223][ T6449] ? __alloc_skb+0x27d/0x7d0 [ 186.743260][ T6449] ? __pfx__copy_from_iter+0x10/0x10 [ 186.743294][ T6449] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 186.743330][ T6449] ? __alloc_skb+0x27d/0x7d0 [ 186.743373][ T6449] ? netlink_sendmsg+0x650/0xb40 [ 186.743411][ T6449] ? skb_put+0x11b/0x210 [ 186.743452][ T6449] netlink_sendmsg+0x6c0/0xb40 [ 186.743502][ T6449] ? __pfx_netlink_sendmsg+0x10/0x10 [ 186.743544][ T6449] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 186.743593][ T6449] ? aa_sock_msg_perm+0x122/0x200 [ 186.743632][ T6449] ? __pfx_netlink_sendmsg+0x10/0x10 [ 186.743670][ T6449] sock_sendmsg_nosec+0x112/0x150 [ 186.743705][ T6449] ____sys_sendmsg+0x55c/0x870 [ 186.743736][ T6449] ? __pfx_____sys_sendmsg+0x10/0x10 [ 186.743771][ T6449] ? import_iovec+0x73/0xa0 [ 186.743809][ T6449] ___sys_sendmsg+0x2a5/0x360 [ 186.743832][ T6449] ? __lock_acquire+0x6b5/0x2cf0 [ 186.743871][ T6449] ? __pfx____sys_sendmsg+0x10/0x10 [ 186.743937][ T6449] ? __fget_files+0x2a/0x420 [ 186.743968][ T6449] ? __fget_files+0x3a6/0x420 [ 186.744011][ T6449] __x64_sys_sendmsg+0x1c3/0x2a0 [ 186.744040][ T6449] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 186.744077][ T6449] ? __pfx_ksys_write+0x10/0x10 [ 186.744120][ T6449] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.744147][ T6449] do_syscall_64+0x15f/0xf80 [ 186.744183][ T6449] ? trace_irq_disable+0x3b/0x140 [ 186.744221][ T6449] ? clear_bhb_loop+0x40/0x90 [ 186.744252][ T6449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.744276][ T6449] RIP: 0033:0x7f395108cdd9 [ 186.744300][ T6449] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 186.744320][ T6449] RSP: 002b:00007f394f2c5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 186.744345][ T6449] RAX: ffffffffffffffda RBX: 00007f3951306090 RCX: 00007f395108cdd9 [ 186.744362][ T6449] RDX: 0000000020008840 RSI: 0000200000000300 RDI: 0000000000000003 [ 186.744378][ T6449] RBP: 00007f394f2c5090 R08: 0000000000000000 R09: 0000000000000000 [ 186.744394][ T6449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.744408][ T6449] R13: 00007f3951306128 R14: 00007f3951306090 R15: 00007ffed33d7d48 [ 186.744446][ T6449] [ 187.522574][ T6440] SQUASHFS error: Unable to read inode 0xa7 [ 187.523939][ T6440] SQUASHFS error: Unable to read inode 0xa7 [ 187.903707][ T6457] binder: BINDER_SET_CONTEXT_MGR already set [ 187.903725][ T6457] binder: 6454:6457 ioctl 4018620d 200000001000 returned -16 [ 187.912229][ T6457] binder: 6454:6457 unknown command 17 [ 187.912254][ T6457] binder: 6454:6457 ioctl c0306201 200000000300 returned -22 [ 188.177838][ T6453] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 189.152967][ T6461] loop2: detected capacity change from 0 to 256 [ 189.376841][ T37] usbtest 4-1:254.235: Linux gadget zero [ 189.376866][ T37] usbtest 4-1:254.235: high-speed {control in/out bulk-in iso-in} tests (+alt) [ 189.467342][ T6461] exfat: Deprecated parameter 'utf8' [ 189.467433][ T6461] exfat: Bad value for 'umask' [ 189.486952][ T38] audit: type=1326 audit(1777263975.425:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6432 comm="syz.3.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafc8cccdd9 code=0x7fc00000 [ 189.978807][ T6466] loop4: detected capacity change from 0 to 64 [ 190.025303][ T37] usb 4-1: USB disconnect, device number 6 [ 190.326180][ T6470] loop2: detected capacity change from 0 to 256 [ 190.371483][ T6475] FAULT_INJECTION: forcing a failure. [ 190.371483][ T6475] name failslab, interval 1, probability 0, space 0, times 0 [ 190.371525][ T6475] CPU: 0 UID: 0 PID: 6475 Comm: syz.3.129 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 190.371552][ T6475] Tainted: [L]=SOFTLOCKUP [ 190.371558][ T6475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 190.371570][ T6475] Call Trace: [ 190.371577][ T6475] [ 190.371585][ T6475] dump_stack_lvl+0xe8/0x150 [ 190.371614][ T6475] should_fail_ex+0x46b/0x600 [ 190.371642][ T6475] should_failslab+0xa8/0x100 [ 190.371674][ T6475] kmem_cache_alloc_noprof+0x87/0x680 [ 190.371703][ T6475] ? __rds_conn_create+0x7cc/0x22e0 [ 190.371729][ T6475] __rds_conn_create+0x7cc/0x22e0 [ 190.371753][ T6475] ? __rds_conn_create+0x2da/0x22e0 [ 190.371791][ T6475] ? __pfx___rds_conn_create+0x10/0x10 [ 190.371814][ T6475] ? rcu_is_watching+0x15/0xb0 [ 190.371850][ T6475] ? __rt_spin_lock_init+0x3e/0x50 [ 190.371872][ T6475] rds_conn_create_outgoing+0x43/0x60 [ 190.371897][ T6475] rds_sendmsg+0xffb/0x2130 [ 190.371934][ T6475] ? __pfx_rds_sendmsg+0x10/0x10 [ 190.371960][ T6475] ? aa_sk_perm+0x703/0x950 [ 190.371994][ T6475] ? __pfx_aa_sk_perm+0x10/0x10 [ 190.372018][ T6475] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 190.372066][ T6475] ? aa_sock_msg_perm+0x122/0x200 [ 190.372095][ T6475] ? __pfx_rds_sendmsg+0x10/0x10 [ 190.372119][ T6475] sock_sendmsg_nosec+0x112/0x150 [ 190.372146][ T6475] ____sys_sendmsg+0x55c/0x870 [ 190.372168][ T6475] ? __pfx_____sys_sendmsg+0x10/0x10 [ 190.372194][ T6475] ? import_iovec+0x73/0xa0 [ 190.372223][ T6475] ___sys_sendmsg+0x2a5/0x360 [ 190.372241][ T6475] ? __lock_acquire+0x6b5/0x2cf0 [ 190.372270][ T6475] ? __pfx____sys_sendmsg+0x10/0x10 [ 190.372315][ T6475] ? __fget_files+0x2a/0x420 [ 190.372338][ T6475] ? __fget_files+0x3a6/0x420 [ 190.372373][ T6475] __x64_sys_sendmsg+0x1c3/0x2a0 [ 190.372393][ T6475] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 190.372420][ T6475] ? __pfx_ksys_write+0x10/0x10 [ 190.372456][ T6475] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.372476][ T6475] do_syscall_64+0x15f/0xf80 [ 190.372507][ T6475] ? clear_bhb_loop+0x40/0x90 [ 190.372531][ T6475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.372551][ T6475] RIP: 0033:0x7fafc8cccdd9 [ 190.372571][ T6475] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 190.372588][ T6475] RSP: 002b:00007fafc6efd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 190.372609][ T6475] RAX: ffffffffffffffda RBX: 00007fafc8f46090 RCX: 00007fafc8cccdd9 [ 190.372625][ T6475] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 190.372636][ T6475] RBP: 00007fafc6efd090 R08: 0000000000000000 R09: 0000000000000000 [ 190.372647][ T6475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.372658][ T6475] R13: 00007fafc8f46128 R14: 00007fafc8f46090 R15: 00007fffca89b9a8 [ 190.372685][ T6475] [ 191.132811][ T6479] loop1: detected capacity change from 0 to 1024 [ 191.145118][ T6479] ext4: Unknown parameter 'dont_measure' [ 192.079891][ T6483] loop1: detected capacity change from 0 to 8 [ 192.516948][ T6482] loop0: detected capacity change from 0 to 131072 [ 192.659463][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 192.665891][ T6482] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 192.709373][ T6482] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 192.815974][ T6464] mmap: syz.4.126 (6464): VmData 25837568 exceed data ulimit 134. Update limits or use boot option ignore_rlimit_data. [ 192.854801][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 192.863076][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 192.883507][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 192.883538][ T9] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 192.883562][ T9] usb 4-1: config 1 has no interface number 0 [ 192.883645][ T9] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 192.921785][ T9] usb 4-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 192.921818][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.921841][ T9] usb 4-1: Product: syz [ 192.921856][ T9] usb 4-1: Manufacturer: syz [ 192.921872][ T9] usb 4-1: SerialNumber: syz [ 193.478687][ T6497] loop1: detected capacity change from 0 to 512 [ 194.250977][ T6497] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #12: comm syz.1.134: missing EA_INODE flag [ 194.251014][ T6497] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 194.419747][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 194.419771][ C1] EXT4-fs (loop1): initial error at time 1777263980: ext4_xattr_inode_iget:441: inode 12 [ 194.419797][ C1] EXT4-fs (loop1): last error at time 1777263980: ext4_xattr_inode_iget:441: inode 12 [ 194.784532][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.808716][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.835020][ T6497] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.134: error while reading EA inode 12 err=-117 [ 194.835057][ T6497] loop1: lost filesystem error report for type 5 error -117 [ 194.913842][ T6497] EXT4-fs (loop1): 1 orphan inode deleted [ 195.144195][ T6509] fuse: Bad value for 'group_id' [ 195.144216][ T6509] fuse: Bad value for 'group_id' [ 195.159675][ T6510] FAULT_INJECTION: forcing a failure. [ 195.159675][ T6510] name failslab, interval 1, probability 0, space 0, times 0 [ 195.159716][ T6510] CPU: 1 UID: 0 PID: 6510 Comm: syz.4.135 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 195.159747][ T6510] Tainted: [L]=SOFTLOCKUP [ 195.159755][ T6510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 195.159768][ T6510] Call Trace: [ 195.159776][ T6510] [ 195.159785][ T6510] dump_stack_lvl+0xe8/0x150 [ 195.159819][ T6510] should_fail_ex+0x46b/0x600 [ 195.159858][ T6510] should_failslab+0xa8/0x100 [ 195.159896][ T6510] __kmalloc_noprof+0xdf/0x7b0 [ 195.159931][ T6510] ? bpf_test_init+0x9f/0x150 [ 195.159971][ T6510] bpf_test_init+0x9f/0x150 [ 195.160009][ T6510] bpf_prog_test_run_xdp+0x529/0x1160 [ 195.160062][ T6510] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 195.160104][ T6510] ? __fget_files+0x2a/0x420 [ 195.160139][ T6510] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 195.160176][ T6510] bpf_prog_test_run+0x2cd/0x340 [ 195.160209][ T6510] __sys_bpf+0x643/0x950 [ 195.160250][ T6510] ? __pfx___sys_bpf+0x10/0x10 [ 195.160280][ T6510] ? rt_mutex_slowunlock+0x1cb/0x300 [ 195.160346][ T6510] ? ksys_write+0x248/0x270 [ 195.160383][ T6510] ? __pfx_ksys_write+0x10/0x10 [ 195.160422][ T6510] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.160448][ T6510] __x64_sys_bpf+0x7c/0x90 [ 195.160475][ T6510] do_syscall_64+0x15f/0xf80 [ 195.160510][ T6510] ? trace_irq_disable+0x3b/0x140 [ 195.160538][ T6510] ? clear_bhb_loop+0x40/0x90 [ 195.160567][ T6510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.160590][ T6510] RIP: 0033:0x7f8bac9acdd9 [ 195.160611][ T6510] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.160632][ T6510] RSP: 002b:00007f8baabdd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 195.160656][ T6510] RAX: ffffffffffffffda RBX: 00007f8bacc26090 RCX: 00007f8bac9acdd9 [ 195.160672][ T6510] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 195.160687][ T6510] RBP: 00007f8baabdd090 R08: 0000000000000000 R09: 0000000000000000 [ 195.160699][ T6510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.160713][ T6510] R13: 00007f8bacc26128 R14: 00007f8bacc26090 R15: 00007ffc93105788 [ 195.160749][ T6510] [ 195.475015][ T9] usb 4-1: USB disconnect, device number 7 [ 195.541234][ T6497] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.571269][ T6491] syz.2.133 (6491) used greatest stack depth: 18592 bytes left [ 196.711736][ T6508] netlink: 132 bytes leftover after parsing attributes in process `syz.3.138'. [ 197.274829][ T5929] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 197.398090][ T5827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.487630][ T5929] usb 3-1: Using ep0 maxpacket: 16 [ 197.491025][ T5929] usb 3-1: config 254 has an invalid interface number: 235 but max is 0 [ 197.491047][ T5929] usb 3-1: config 254 has no interface number 0 [ 197.491081][ T5929] usb 3-1: config 254 interface 235 altsetting 2 has an endpoint descriptor with address 0xE6, changing to 0x86 [ 197.491102][ T5929] usb 3-1: config 254 interface 235 altsetting 2 bulk endpoint 0x86 has invalid maxpacket 32 [ 197.491121][ T5929] usb 3-1: config 254 interface 235 altsetting 2 endpoint 0x8C has an invalid bInterval 222, changing to 7 [ 197.491141][ T5929] usb 3-1: config 254 interface 235 altsetting 2 endpoint 0x8C has invalid maxpacket 33081, setting to 1024 [ 197.491162][ T5929] usb 3-1: config 254 interface 235 has no altsetting 0 [ 197.497708][ T5929] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 197.497801][ T5929] usb 3-1: New USB device strings: Mfr=1, Product=251, SerialNumber=3 [ 197.497862][ T5929] usb 3-1: Product: syz [ 197.498201][ T5929] usb 3-1: Manufacturer: syz [ 197.498248][ T5929] usb 3-1: SerialNumber: syz [ 197.822521][ T6518] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 198.228298][ T6532] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 199.843800][ T38] audit: type=1326 audit(1777263985.775:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6516 comm="syz.2.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f052b7ecdd9 code=0x7fc00000 [ 199.912135][ T5929] usbtest 3-1:254.235: Linux gadget zero [ 199.912154][ T5929] usbtest 3-1:254.235: high-speed {control in/out bulk-in iso-in} tests (+alt) [ 200.063646][ T6537] loop4: detected capacity change from 0 to 256 [ 200.116262][ T6536] loop3: detected capacity change from 0 to 1024 [ 200.117599][ T6536] ext4: Unknown parameter 'dont_measure' [ 200.152154][ T5929] usb 3-1: USB disconnect, device number 7 [ 201.515296][ T6541] loop3: detected capacity change from 0 to 8 [ 201.724539][ T6548] loop4: detected capacity change from 0 to 24 [ 201.812903][ T6543] netlink: 8 bytes leftover after parsing attributes in process `syz.2.145'. [ 202.424070][ T6557] FAULT_INJECTION: forcing a failure. [ 202.424070][ T6557] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 202.424114][ T6557] CPU: 0 UID: 0 PID: 6557 Comm: syz.1.148 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 202.424147][ T6557] Tainted: [L]=SOFTLOCKUP [ 202.424156][ T6557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 202.424171][ T6557] Call Trace: [ 202.424180][ T6557] [ 202.424190][ T6557] dump_stack_lvl+0xe8/0x150 [ 202.424225][ T6557] should_fail_ex+0x46b/0x600 [ 202.424264][ T6557] _copy_to_user+0x31/0xb0 [ 202.424298][ T6557] simple_read_from_buffer+0xe1/0x170 [ 202.424336][ T6557] proc_fail_nth_read+0x1be/0x230 [ 202.424371][ T6557] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 202.424407][ T6557] ? rw_verify_area+0x2ac/0x4e0 [ 202.424442][ T6557] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 202.424475][ T6557] vfs_read+0x212/0xa80 [ 202.424521][ T6557] ? __pfx_vfs_read+0x10/0x10 [ 202.424560][ T6557] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 202.424603][ T6557] ? lockdep_hardirqs_on+0x7a/0x110 [ 202.424639][ T6557] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 202.424676][ T6557] ? mutex_lock_nested+0x152/0x1d0 [ 202.424702][ T6557] ? fdget_pos+0x252/0x320 [ 202.424743][ T6557] ksys_read+0x156/0x270 [ 202.424791][ T6557] ? __pfx_ksys_read+0x10/0x10 [ 202.424832][ T6557] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.424857][ T6557] do_syscall_64+0x15f/0xf80 [ 202.424888][ T6557] ? trace_irq_disable+0x3b/0x140 [ 202.424915][ T6557] ? clear_bhb_loop+0x40/0x90 [ 202.424942][ T6557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.424965][ T6557] RIP: 0033:0x7f9796d8d60e [ 202.424986][ T6557] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 202.425004][ T6557] RSP: 002b:00007f979501dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 202.425027][ T6557] RAX: ffffffffffffffda RBX: 00007f979501e6c0 RCX: 00007f9796d8d60e [ 202.425044][ T6557] RDX: 000000000000000f RSI: 00007f979501e0a0 RDI: 0000000000000003 [ 202.425057][ T6557] RBP: 00007f979501e090 R08: 0000000000000000 R09: 0000000000000000 [ 202.425071][ T6557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 202.425084][ T6557] R13: 00007f9797046038 R14: 00007f9797045fa0 R15: 00007fff9623bd08 [ 202.425118][ T6557] [ 204.352845][ T6570] loop3: detected capacity change from 0 to 512 [ 204.357672][ T6570] ext4: Unknown parameter 'fowner>00000000000000000000' [ 204.752616][ T6573] loop1: detected capacity change from 0 to 512 [ 204.779016][ T6573] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 204.798794][ T5916] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 204.906301][ T6573] EXT4-fs (loop1): 1 truncate cleaned up [ 204.935232][ T5916] usb 4-1: device descriptor read/64, error -71 [ 204.966506][ T6573] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.067146][ T6560] loop4: detected capacity change from 0 to 32768 [ 205.185093][ T5916] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 205.306102][ T6560] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.149 (6560) [ 205.314893][ T5916] usb 4-1: device descriptor read/64, error -71 [ 205.425263][ T5916] usb usb4-port1: attempt power cycle [ 205.775042][ T5916] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 205.807481][ T5916] usb 4-1: device descriptor read/8, error -71 [ 206.065614][ T5916] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 206.101948][ T5916] usb 4-1: device descriptor read/8, error -71 [ 206.102800][ T6560] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 206.102909][ T6560] BTRFS info (device loop4): using sha256 checksum algorithm [ 206.142294][ T6560] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 206.149629][ T6560] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 206.150023][ T6560] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 206.150531][ T6560] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 206.153309][ T6560] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 206.153853][ T6560] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 206.154384][ T6560] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 206.227358][ T5916] usb usb4-port1: unable to enumerate USB device [ 206.255374][ T6560] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 206.255903][ T6560] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 206.256559][ T6560] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 206.315679][ T6560] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 206.456541][ T6560] BTRFS error (device loop4): open_ctree failed: -12 [ 207.044824][ T1767] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 207.104103][ T6603] loop4: detected capacity change from 0 to 256 [ 207.178139][ T1767] usb 1-1: device descriptor read/64, error -71 [ 207.516765][ T1767] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 207.618926][ T6607] loop2: detected capacity change from 0 to 64 [ 207.648677][ T1767] usb 1-1: device descriptor read/64, error -71 [ 207.658601][ T6609] loop4: detected capacity change from 0 to 1024 [ 207.680423][ T6609] ext4: Unknown parameter 'dont_measure' [ 207.755410][ T1767] usb usb1-port1: attempt power cycle [ 208.022184][ T6610] loop3: detected capacity change from 0 to 4096 [ 208.023347][ T6610] ntfs3: Bad value for 'umask' [ 208.710591][ T5827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.100411][ T1767] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 209.115656][ T1767] usb 1-1: device descriptor read/8, error -71 [ 209.358543][ T1767] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 209.375559][ T1767] usb 1-1: device descriptor read/8, error -71 [ 209.488764][ T1767] usb usb1-port1: unable to enumerate USB device [ 209.621162][ T6623] 9p: Bad value for 'rfdno' [ 210.044768][ T6619] loop4: detected capacity change from 0 to 32768 [ 210.044999][ T38] audit: type=1326 audit(1777263995.905:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6599 comm="syz.0.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f395108cdd9 code=0x7fc00000 [ 210.557199][ T38] audit: type=1800 audit(1777263996.475:137): pid=6607 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.158" name="file1" dev="loop2" ino=22 res=0 errno=0 [ 211.024756][ T6629] loop3: detected capacity change from 0 to 40427 [ 211.255833][ T6629] F2FS-fs (loop3): invalid crc value [ 211.421056][ T6629] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 211.449903][ T6629] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 213.506333][ T6649] loop1: detected capacity change from 0 to 512 [ 213.507754][ T6649] ext4: Unknown parameter 'fowner>00000000000000000000' [ 213.680404][ T6651] loop0: detected capacity change from 0 to 512 [ 213.792796][ T6651] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 213.804859][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 213.957381][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 213.957412][ T9] usb 2-1: config 1 has no interface number 0 [ 213.957459][ T9] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.957490][ T9] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 213.957525][ T9] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x8F has invalid maxpacket 55520, setting to 1024 [ 213.957562][ T9] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 1024 [ 213.961074][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 213.961107][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.961127][ T9] usb 2-1: Product: syz [ 213.961141][ T9] usb 2-1: Manufacturer: syz [ 213.961156][ T9] usb 2-1: SerialNumber: syz [ 214.171861][ T6651] EXT4-fs (loop0): 1 truncate cleaned up [ 214.210162][ T6651] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.277936][ T6649] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 216.356440][ T6649] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 216.390877][ T9] cdc_ncm 2-1:1.1: bind() failure [ 216.601490][ T9] usb 2-1: USB disconnect, device number 3 [ 216.866883][ T6661] fuse: Unknown parameter 'L5Ů‹ Z…O÷Ýß‹' [ 216.883070][ T6661] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.172'. [ 217.052463][ T5825] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.171582][ T6665] loop3: detected capacity change from 0 to 256 [ 217.284793][ T5946] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 217.416392][ T5946] usb 5-1: device descriptor read/64, error -71 [ 218.119402][ T6676] loop0: detected capacity change from 0 to 40427 [ 218.320566][ T6676] F2FS-fs (loop0): invalid crc value [ 218.452415][ T6676] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 218.481137][ T6676] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 218.514832][ T5946] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 218.593519][ T6661] loop2: detected capacity change from 0 to 32768 [ 218.647215][ T5946] usb 5-1: device descriptor read/64, error -71 [ 218.755156][ T5946] usb usb5-port1: attempt power cycle [ 219.939078][ T38] audit: type=1326 audit(1777264005.875:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6662 comm="syz.4.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bac9acdd9 code=0x7fc00000 [ 219.973272][ T5946] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 220.134798][ T5946] usb 5-1: device descriptor read/8, error -71 [ 220.182570][ T6661] workqueue: Failed to create a rescuer kthread for wq "ocfs2_wq": -EINTR [ 220.188496][ T6661] (syz.2.172,6661,0):ocfs2_initialize_super:2229 ERROR: status = -12 [ 220.190667][ T6661] (syz.2.172,6661,0):ocfs2_fill_super:1177 ERROR: status = -12 [ 221.192755][ T6690] loop3: detected capacity change from 0 to 2048 [ 221.461727][ T6699] mac80211_hwsim hwsim11 ..ăc¤±: renamed from wlan1 (while UP) [ 221.664555][ T5946] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 221.803823][ T5946] usb 5-1: device descriptor read/8, error -71 [ 222.083510][ T5946] usb usb5-port1: unable to enumerate USB device [ 222.997439][ T6705] loop1: detected capacity change from 0 to 40427 [ 223.020811][ T5843] Bluetooth: hci1: command 0x0406 tx timeout [ 223.021995][ T5832] Bluetooth: hci0: command 0x0406 tx timeout [ 223.022031][ T5832] Bluetooth: hci3: command 0x0406 tx timeout [ 223.022207][ T5842] Bluetooth: hci4: command 0x0406 tx timeout [ 223.022253][ T5842] Bluetooth: hci2: command 0x0406 tx timeout [ 223.022955][ T6705] F2FS-fs (loop1): invalid crc value [ 223.236025][ T6705] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 223.263071][ T6705] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 228.361229][ T6716] loop3: detected capacity change from 0 to 512 [ 228.362418][ T6716] ext4: Unknown parameter 'fowner>00000000000000000000' [ 228.562172][ T6719] loop4: detected capacity change from 0 to 256 [ 228.909972][ T37] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 229.060166][ T37] usb 4-1: device descriptor read/64, error -71 [ 229.494767][ T6730] loop4: detected capacity change from 0 to 40427 [ 229.558361][ T6730] F2FS-fs (loop4): invalid crc value [ 229.698139][ T6730] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 229.704954][ T37] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 229.722938][ T6730] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 230.099333][ T37] usb 4-1: device descriptor read/64, error -71 [ 231.405560][ T37] usb usb4-port1: attempt power cycle [ 231.912792][ T6747] loop2: detected capacity change from 0 to 1024 [ 231.914307][ T6747] ext4: Unknown parameter 'dont_measure' [ 231.987942][ T37] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 232.107352][ T37] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 232.107387][ T37] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.270168][ T37] usb 4-1: config 0 descriptor?? [ 232.291253][ T37] cp210x 4-1:0.0: cp210x converter detected [ 233.368059][ T37] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 233.440804][ T5835] block nbd0: Receive control failed (result -32) [ 233.444015][ T61] block nbd0: Receive control failed (result -32) [ 233.485820][ T6751] nbd0: detected capacity change from 0 to 128 [ 233.783762][ T37] usb 4-1: cp210x converter now attached to ttyUSB0 [ 233.815759][ T5954] block nbd0: Dead connection, failed to find a fallback [ 233.815793][ T5954] block nbd0: shutting down sockets [ 233.815906][ T5954] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 233.816017][ T5954] Buffer I/O error on dev nbd0, logical block 0, async page read [ 233.865529][ T5954] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 233.865567][ T5954] Buffer I/O error on dev nbd0, logical block 0, async page read [ 233.865737][ T5954] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 233.865763][ T5954] Buffer I/O error on dev nbd0, logical block 0, async page read [ 233.865924][ T5954] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 233.865951][ T5954] Buffer I/O error on dev nbd0, logical block 0, async page read [ 233.866138][ T5954] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 233.866164][ T5954] Buffer I/O error on dev nbd0, logical block 0, async page read [ 233.866381][ T5954] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 233.866407][ T5954] Buffer I/O error on dev nbd0, logical block 0, async page read [ 233.866688][ T5954] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 233.866715][ T5954] Buffer I/O error on dev nbd0, logical block 0, async page read [ 233.866877][ T5954] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 233.866904][ T5954] Buffer I/O error on dev nbd0, logical block 0, async page read [ 233.867003][ T5954] ldm_validate_partition_table(): Disk read failed. [ 233.867081][ T5954] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 233.867114][ T5954] Buffer I/O error on dev nbd0, logical block 0, async page read [ 233.867275][ T5954] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 233.867301][ T5954] Buffer I/O error on dev nbd0, logical block 0, async page read [ 233.867711][ T5954] Dev nbd0: unable to read RDB block 0 [ 233.868455][ T5954] nbd0: unable to read partition table [ 234.204331][ T37] usb 4-1: USB disconnect, device number 14 [ 234.975109][ T5954] ldm_validate_partition_table(): Disk read failed. [ 234.975758][ T5954] Dev nbd0: unable to read RDB block 0 [ 235.052251][ T5954] nbd0: unable to read partition table [ 235.962773][ T6774] loop3: detected capacity change from 0 to 256 [ 236.048409][ T37] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 236.416138][ T6780] netlink: 'syz.4.200': attribute type 5 has an invalid length. [ 237.530405][ T6784] loop1: detected capacity change from 0 to 40427 [ 237.552854][ T37] cp210x 4-1:0.0: device disconnected [ 237.587685][ T6784] F2FS-fs (loop1): invalid crc value [ 237.728236][ T6784] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 237.728935][ T6788] loop0: detected capacity change from 0 to 512 [ 237.766147][ T6788] ext4: Unknown parameter 'fowner>00000000000000000000' [ 237.807778][ T6784] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 239.417274][ T5818] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 239.554770][ T5818] usb 1-1: device descriptor read/64, error -71 [ 239.966412][ T5818] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 240.094846][ T5818] usb 1-1: device descriptor read/64, error -71 [ 240.205338][ T5818] usb usb1-port1: attempt power cycle [ 240.366037][ T6786] loop3: detected capacity change from 0 to 32768 [ 240.554945][ T5818] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 240.573125][ T6786] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.201 (6786) [ 240.659459][ T5818] usb 1-1: device descriptor read/8, error -71 [ 240.761458][ T6786] BTRFS error (device loop3): open_ctree failed: -4 [ 241.220328][ T6224] udevd[6224]: incorrect btrfs checksum on /dev/loop3 [ 241.541525][ T5954] udevd[5954]: incorrect btrfs checksum on /dev/loop3 [ 241.634801][ T5818] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 241.638237][ T6821] loop2: detected capacity change from 0 to 256 [ 241.659186][ T5818] usb 1-1: Using ep0 maxpacket: 32 [ 241.671175][ T5818] usb 1-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 241.671209][ T5818] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.671232][ T5818] usb 1-1: Product: syz [ 241.671249][ T5818] usb 1-1: Manufacturer: syz [ 241.671264][ T5818] usb 1-1: SerialNumber: syz [ 241.733299][ T5818] usb 1-1: config 0 descriptor?? [ 241.751013][ T5818] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 242.087008][ T6812] loop1: detected capacity change from 0 to 32768 [ 242.090772][ T6812] OCFS2: ERROR (device loop1): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode #65: signature = NODE01 [ 242.090803][ T6812] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 242.090813][ T6812] OCFS2: File system is now read-only. [ 242.090824][ T6812] (syz.1.206,6812,1):ocfs2_read_locked_inode:599 ERROR: status = -30 [ 242.090958][ T6812] (syz.1.206,6812,1):ocfs2_init_global_system_inodes:444 ERROR: status = -30 [ 242.090981][ T6812] (syz.1.206,6812,1):ocfs2_init_global_system_inodes:476 ERROR: status = -30 [ 242.091003][ T6812] (syz.1.206,6812,1):ocfs2_initialize_super:2198 ERROR: status = -30 [ 242.091097][ T6812] (syz.1.206,6812,1):ocfs2_fill_super:1177 ERROR: status = -30 [ 243.661636][ T6823] loop3: detected capacity change from 0 to 131072 [ 243.724810][ T6823] F2FS-fs (loop3): invalid crc value [ 243.875931][ T6823] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 243.883090][ T6823] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 244.423850][ T5818] gspca_topro: reg_w err -110 [ 244.445361][ T5818] gspca_topro: Sensor soi763a [ 245.007865][ T6841] loop1: detected capacity change from 0 to 40427 [ 245.057226][ T6841] F2FS-fs (loop1): invalid crc value [ 245.217268][ T6841] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 245.241530][ T6841] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 246.575338][ T5818] usb 1-1: USB disconnect, device number 13 [ 246.947922][ T6851] loop4: detected capacity change from 0 to 512 [ 246.969961][ T6851] ext4: Unknown parameter 'fowner>00000000000000000000' [ 248.515497][ T6688] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 248.565910][ T6862] loop2: detected capacity change from 0 to 256 [ 248.677784][ T6860] loop0: detected capacity change from 0 to 4096 [ 249.670331][ T6873] loop4: detected capacity change from 0 to 512 [ 250.835924][ T6860] sctp: [Deprecated]: syz.0.222 (pid 6860) Use of int in max_burst socket option deprecated. [ 250.835924][ T6860] Use struct sctp_assoc_value instead [ 250.979041][ T6885] loop1: detected capacity change from 0 to 256 [ 251.012782][ T6879] loop2: detected capacity change from 0 to 32768 [ 251.014152][ T6879] BTRFS warning: excessive commit interval 65536, use with care [ 251.040302][ T6879] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.228 (6879) [ 251.072936][ T6879] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 251.072971][ T6879] BTRFS info (device loop2): using sha256 checksum algorithm [ 251.084239][ T6885] msdos: Unknown parameter 'nodot' [ 251.324874][ T5917] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 251.507054][ T5917] usb 5-1: Using ep0 maxpacket: 32 [ 251.510926][ T5917] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 251.510957][ T5917] usb 5-1: config 0 has no interface number 0 [ 251.511009][ T5917] usb 5-1: config 0 interface 184 has no altsetting 0 [ 251.548858][ T5917] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 251.548892][ T5917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.548915][ T5917] usb 5-1: Product: syz [ 251.548931][ T5917] usb 5-1: Manufacturer: syz [ 251.548947][ T5917] usb 5-1: SerialNumber: syz [ 251.657549][ T5917] usb 5-1: config 0 descriptor?? [ 251.819959][ T6879] BTRFS info (device loop2): enabling ssd optimizations [ 251.819993][ T6879] BTRFS info (device loop2): enabling free space tree [ 251.820024][ T6879] BTRFS info (device loop2): force zlib compression, level 3 [ 252.251324][ T5917] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 252.251765][ T5917] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 252.342343][ T5917] usb 5-1: USB disconnect, device number 9 [ 252.414729][ T1767] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 252.854730][ T1767] usb 3-1: Using ep0 maxpacket: 16 [ 252.859337][ T1767] usb 3-1: config 254 has an invalid interface number: 235 but max is 0 [ 252.859376][ T1767] usb 3-1: config 254 has no interface number 0 [ 252.859421][ T1767] usb 3-1: config 254 interface 235 altsetting 2 has an endpoint descriptor with address 0xE6, changing to 0x86 [ 252.859450][ T1767] usb 3-1: config 254 interface 235 altsetting 2 bulk endpoint 0x86 has invalid maxpacket 32 [ 252.859476][ T1767] usb 3-1: config 254 interface 235 altsetting 2 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 252.859502][ T1767] usb 3-1: config 254 interface 235 altsetting 2 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 252.859528][ T1767] usb 3-1: config 254 interface 235 altsetting 2 endpoint 0x8F has invalid wMaxPacketSize 0 [ 252.859551][ T1767] usb 3-1: config 254 interface 235 has no altsetting 0 [ 252.862677][ T1767] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 252.862708][ T1767] usb 3-1: New USB device strings: Mfr=1, Product=251, SerialNumber=3 [ 252.866935][ T1767] usb 3-1: Product: syz [ 252.867005][ T1767] usb 3-1: Manufacturer: syz [ 252.867054][ T1767] usb 3-1: SerialNumber: syz [ 253.093862][ T6909] loop4: detected capacity change from 0 to 128 [ 253.182599][ T6909] adfs: Bad value for 'gid' [ 253.182653][ T6909] adfs: Bad value for 'gid' [ 253.280173][ T6909] netlink: 4 bytes leftover after parsing attributes in process `syz.4.230'. [ 254.140464][ T1767] usb 3-1: can't set config #254, error -71 [ 254.901245][ T5828] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 255.084472][ T1767] usb 3-1: USB disconnect, device number 8 [ 255.158628][ T6921] netlink: 64 bytes leftover after parsing attributes in process `syz.0.231'. [ 255.269948][ T6919] loop3: detected capacity change from 0 to 512 [ 255.273370][ T6919] ext4: Unknown parameter 'fowner>00000000000000000000' [ 255.349280][ T6923] loop4: detected capacity change from 0 to 256 [ 255.704807][ T5818] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 255.907447][ T5818] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 255.907480][ T5818] usb 4-1: config 1 has no interface number 0 [ 255.907530][ T5818] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.907561][ T5818] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 255.907600][ T5818] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x8F has invalid maxpacket 55520, setting to 1024 [ 255.907630][ T5818] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 1024 [ 255.930697][ T5818] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 255.930941][ T5818] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.931000][ T5818] usb 4-1: Product: syz [ 255.931057][ T5818] usb 4-1: Manufacturer: syz [ 255.931102][ T5818] usb 4-1: SerialNumber: syz [ 256.109074][ T6931] FAULT_INJECTION: forcing a failure. [ 256.109074][ T6931] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 256.109111][ T6931] CPU: 1 UID: 0 PID: 6931 Comm: syz.4.237 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 256.109137][ T6931] Tainted: [L]=SOFTLOCKUP [ 256.109143][ T6931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 256.109167][ T6931] Call Trace: [ 256.109174][ T6931] [ 256.109182][ T6931] dump_stack_lvl+0xe8/0x150 [ 256.109210][ T6931] should_fail_ex+0x46b/0x600 [ 256.109242][ T6931] _copy_from_user+0x2d/0xb0 [ 256.109275][ T6931] sctp_setsockopt+0x1c4/0x12c0 [ 256.109311][ T6931] ? sock_common_setsockopt+0x36/0xc0 [ 256.109342][ T6931] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 256.109374][ T6931] do_sock_setsockopt+0x17c/0x1b0 [ 256.109417][ T6931] __x64_sys_setsockopt+0x143/0x1b0 [ 256.109468][ T6931] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.109493][ T6931] do_syscall_64+0x15f/0xf80 [ 256.109526][ T6931] ? trace_irq_disable+0x3b/0x140 [ 256.109553][ T6931] ? clear_bhb_loop+0x40/0x90 [ 256.109582][ T6931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.109605][ T6931] RIP: 0033:0x7f8bac9acdd9 [ 256.109626][ T6931] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 256.109645][ T6931] RSP: 002b:00007f8baabdd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 256.109669][ T6931] RAX: ffffffffffffffda RBX: 00007f8bacc26090 RCX: 00007f8bac9acdd9 [ 256.109686][ T6931] RDX: 0000000000000080 RSI: 0000000000000084 RDI: 0000000000000005 [ 256.109699][ T6931] RBP: 00007f8baabdd090 R08: 0000000000000008 R09: 0000000000000000 [ 256.109713][ T6931] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 256.109727][ T6931] R13: 00007f8bacc26128 R14: 00007f8bacc26090 R15: 00007ffc93105788 [ 256.109762][ T6931] [ 256.271975][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.272197][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.587552][ T6919] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 257.982391][ T6934] loop1: detected capacity change from 0 to 256 [ 258.038523][ T6934] exfat: Bad value for 'uid' [ 258.038583][ T6934] exfat: Bad value for 'uid' [ 260.147725][ T5818] cdc_ncm 4-1:1.1: bind() failure [ 260.206537][ T5818] usb 4-1: USB disconnect, device number 15 [ 262.142655][ T6968] loop1: detected capacity change from 0 to 256 [ 263.141921][ T6976] loop4: detected capacity change from 0 to 128 [ 263.166217][ T6976] EXT4-fs (loop4): Test dummy encryption mode enabled [ 263.291109][ T6976] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 263.311159][ T6976] ext4 filesystem being mounted at /58/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 263.685724][ T6989] loop2: detected capacity change from 0 to 512 [ 263.687172][ T6989] ext4: Unknown parameter 'fowner>00000000000000000000' [ 265.078005][ T5829] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 265.087565][ T5917] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 265.277105][ T5929] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 265.304722][ T5917] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 265.304752][ T5917] usb 3-1: config 1 has no interface number 0 [ 265.304798][ T5917] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 265.304828][ T5917] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 265.304864][ T5917] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x8F has invalid maxpacket 55520, setting to 1024 [ 265.304894][ T5917] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 1024 [ 265.383357][ T5917] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 265.383393][ T5917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.383418][ T5917] usb 3-1: Product: syz [ 265.383434][ T5917] usb 3-1: Manufacturer: syz [ 265.383451][ T5917] usb 3-1: SerialNumber: syz [ 265.503060][ T5929] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 265.503111][ T5929] usb 2-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 265.503191][ T5929] usb 2-1: config 0 interface 0 has no altsetting 0 [ 265.543102][ T5929] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 265.543135][ T5929] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 265.543222][ T5929] usb 2-1: Product: syz [ 265.543238][ T5929] usb 2-1: Manufacturer: syz [ 265.543253][ T5929] usb 2-1: SerialNumber: syz [ 265.611493][ T5929] usb 2-1: config 0 descriptor?? [ 265.644241][ T6989] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 265.757928][ T37] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 265.911946][ T6987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.940204][ T6987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.959829][ T37] usb 1-1: Using ep0 maxpacket: 16 [ 265.965917][ T37] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 265.965950][ T37] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.014125][ T37] usb 1-1: config 0 descriptor?? [ 266.047819][ T7002] netlink: 'syz.1.253': attribute type 39 has an invalid length. [ 266.153429][ T37] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 266.258727][ T6989] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 266.314749][ T5917] cdc_ncm 3-1:1.1: bind() failure [ 266.534332][ T9] usb 3-1: USB disconnect, device number 9 [ 267.178073][ T5929] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 267.823237][ T5954] udevd[5954]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 268.025605][ T5903] usb 1-1: USB disconnect, device number 14 [ 268.160859][ T7018] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 268.160895][ T7018] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 268.160937][ T7018] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 268.575160][ T5818] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 268.732365][ T5818] usb 5-1: device descriptor read/64, error -71 [ 268.815280][ T7028] loop0: detected capacity change from 0 to 256 [ 268.974795][ T5818] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 269.105208][ T5818] usb 5-1: device descriptor read/64, error -71 [ 269.121090][ T7030] FAULT_INJECTION: forcing a failure. [ 269.121090][ T7030] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 269.121128][ T7030] CPU: 0 UID: 0 PID: 7030 Comm: syz.3.265 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 269.121155][ T7030] Tainted: [L]=SOFTLOCKUP [ 269.121161][ T7030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 269.121173][ T7030] Call Trace: [ 269.121181][ T7030] [ 269.121189][ T7030] dump_stack_lvl+0xe8/0x150 [ 269.121217][ T7030] should_fail_ex+0x46b/0x600 [ 269.121247][ T7030] _copy_from_user+0x2d/0xb0 [ 269.121277][ T7030] snd_seq_ioctl+0x21d/0x4a0 [ 269.121323][ T7030] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 269.121363][ T7030] ? __fget_files+0x3a6/0x420 [ 269.121386][ T7030] ? __fget_files+0x2a/0x420 [ 269.121411][ T7030] ? bpf_lsm_file_ioctl+0x9/0x20 [ 269.121433][ T7030] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 269.121458][ T7030] __se_sys_ioctl+0xff/0x170 [ 269.121487][ T7030] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.121506][ T7030] do_syscall_64+0x15f/0xf80 [ 269.121533][ T7030] ? trace_irq_disable+0x3b/0x140 [ 269.121556][ T7030] ? clear_bhb_loop+0x40/0x90 [ 269.121579][ T7030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.121596][ T7030] RIP: 0033:0x7fafc8cccdd9 [ 269.121614][ T7030] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 269.121629][ T7030] RSP: 002b:00007fafc6f1e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 269.121650][ T7030] RAX: ffffffffffffffda RBX: 00007fafc8f45fa0 RCX: 00007fafc8cccdd9 [ 269.121663][ T7030] RDX: 0000200000000040 RSI: 00000000402c5342 RDI: 0000000000000004 [ 269.121675][ T7030] RBP: 00007fafc6f1e090 R08: 0000000000000000 R09: 0000000000000000 [ 269.121686][ T7030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 269.121697][ T7030] R13: 00007fafc8f46038 R14: 00007fafc8f45fa0 R15: 00007fffca89b9a8 [ 269.121724][ T7030] [ 269.302536][ T5818] usb usb5-port1: attempt power cycle [ 269.418519][ T5903] usb 2-1: USB disconnect, device number 4 [ 271.354867][ T5818] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 271.884174][ T5818] usb 5-1: device descriptor read/8, error -71 [ 272.019665][ T7063] netlink: 20 bytes leftover after parsing attributes in process `syz.4.273'. [ 273.038812][ T32] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 273.087339][ T7066] loop4: detected capacity change from 0 to 512 [ 273.104232][ T7066] ext4: Unknown parameter 'fowner>00000000000000000000' [ 273.197318][ T32] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 273.197354][ T32] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.253977][ T32] usb 4-1: config 0 descriptor?? [ 273.267779][ T32] cp210x 4-1:0.0: cp210x converter detected [ 274.065600][ T7055] loop1: detected capacity change from 0 to 32768 [ 274.334772][ T5818] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 274.386214][ T5818] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 274.386249][ T5818] usb 5-1: config 1 has no interface number 0 [ 274.386320][ T5818] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.386353][ T5818] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 274.386392][ T5818] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x8F has invalid maxpacket 55520, setting to 1024 [ 274.386424][ T5818] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 1024 [ 274.446766][ T5818] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 274.446800][ T5818] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.446823][ T5818] usb 5-1: Product: syz [ 274.446840][ T5818] usb 5-1: Manufacturer: syz [ 274.446857][ T5818] usb 5-1: SerialNumber: syz [ 274.515999][ T32] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 274.642946][ T32] usb 4-1: cp210x converter now attached to ttyUSB0 [ 274.741923][ T7066] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 274.754804][ T7071] loop0: detected capacity change from 0 to 256 [ 274.778515][ T9] usb 4-1: USB disconnect, device number 16 [ 274.931652][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 275.145281][ T9] cp210x 4-1:0.0: device disconnected [ 275.349850][ T7066] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 275.395561][ T5818] cdc_ncm 5-1:1.1: bind() failure [ 275.610622][ T5818] usb 5-1: USB disconnect, device number 13 [ 279.085734][ T7099] blk_print_req_error: 27 callbacks suppressed [ 279.085759][ T7099] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 279.085790][ T7099] buffer_io_error: 27 callbacks suppressed [ 279.085803][ T7099] Buffer I/O error on dev nbd0, logical block 0, async page read [ 279.132414][ T7099] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 279.132537][ T7099] Buffer I/O error on dev nbd0, logical block 0, async page read [ 279.133059][ T7099] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 279.133145][ T7099] Buffer I/O error on dev nbd0, logical block 0, async page read [ 279.133348][ T7099] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 279.133402][ T7099] Buffer I/O error on dev nbd0, logical block 0, async page read [ 279.231811][ T7099] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 279.231850][ T7099] Buffer I/O error on dev nbd0, logical block 0, async page read [ 279.232041][ T7099] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 279.232067][ T7099] Buffer I/O error on dev nbd0, logical block 0, async page read [ 279.232259][ T7099] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 279.232285][ T7099] Buffer I/O error on dev nbd0, logical block 0, async page read [ 279.232452][ T7099] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 279.232477][ T7099] Buffer I/O error on dev nbd0, logical block 0, async page read [ 279.232572][ T7099] ldm_validate_partition_table(): Disk read failed. [ 279.232647][ T7099] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 279.232673][ T7099] Buffer I/O error on dev nbd0, logical block 0, async page read [ 279.232827][ T7099] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 279.232851][ T7099] Buffer I/O error on dev nbd0, logical block 0, async page read [ 279.233232][ T7099] Dev nbd0: unable to read RDB block 0 [ 279.289662][ T7099] nbd0: unable to read partition table [ 279.497363][ T7108] netlink: 12 bytes leftover after parsing attributes in process `syz.4.288'. [ 279.601601][ T7110] loop2: detected capacity change from 0 to 256 [ 280.321047][ T7108] loop4: detected capacity change from 0 to 2048 [ 280.377347][ T7108] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 280.837100][ T6224] udevd[6224]: incorrect nilfs2 checksum on /dev/loop4 [ 280.967025][ T7118] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 281.102260][ T6224] udevd[6224]: incorrect nilfs2 checksum on /dev/loop4 [ 281.414740][ T5903] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 281.582723][ T5903] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 281.582758][ T5903] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.628084][ T5903] usb 3-1: config 0 descriptor?? [ 281.633999][ T5903] cp210x 3-1:0.0: cp210x converter detected [ 282.051024][ T5903] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 282.207069][ T5903] usb 3-1: cp210x converter now attached to ttyUSB0 [ 282.279209][ T5903] usb 3-1: USB disconnect, device number 10 [ 282.410242][ T5903] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 282.586797][ T5903] cp210x 3-1:0.0: device disconnected [ 282.829279][ T7130] NILFS error (device loop4): __nilfs_read_inode: invalid file type bits in mode 0177777 for inode 12 [ 283.172324][ T7130] Remounting filesystem read-only [ 284.156306][ T7147] loop2: detected capacity change from 0 to 256 [ 284.447027][ T7151] FAULT_INJECTION: forcing a failure. [ 284.447027][ T7151] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 284.447069][ T7151] CPU: 0 UID: 0 PID: 7151 Comm: syz.4.299 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 284.447102][ T7151] Tainted: [L]=SOFTLOCKUP [ 284.447111][ T7151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 284.447125][ T7151] Call Trace: [ 284.447134][ T7151] [ 284.447145][ T7151] dump_stack_lvl+0xe8/0x150 [ 284.447178][ T7151] should_fail_ex+0x46b/0x600 [ 284.447215][ T7151] _copy_to_user+0x31/0xb0 [ 284.447251][ T7151] simple_read_from_buffer+0xe1/0x170 [ 284.447288][ T7151] proc_fail_nth_read+0x1be/0x230 [ 284.447324][ T7151] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 284.447358][ T7151] ? rw_verify_area+0x2ac/0x4e0 [ 284.447390][ T7151] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 284.447423][ T7151] vfs_read+0x212/0xa80 [ 284.447466][ T7151] ? __pfx_vfs_read+0x10/0x10 [ 284.447502][ T7151] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 284.447544][ T7151] ? lockdep_hardirqs_on+0x7a/0x110 [ 284.447579][ T7151] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 284.447615][ T7151] ? mutex_lock_nested+0x152/0x1d0 [ 284.447642][ T7151] ? fdget_pos+0x252/0x320 [ 284.447682][ T7151] ksys_read+0x156/0x270 [ 284.447720][ T7151] ? __pfx_ksys_read+0x10/0x10 [ 284.447764][ T7151] ? __se_sys_rmdir+0xc2/0x140 [ 284.447796][ T7151] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.447822][ T7151] do_syscall_64+0x15f/0xf80 [ 284.447857][ T7151] ? trace_irq_disable+0x3b/0x140 [ 284.447886][ T7151] ? clear_bhb_loop+0x40/0x90 [ 284.447916][ T7151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.447940][ T7151] RIP: 0033:0x7f8bac96d60e [ 284.447963][ T7151] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 284.447983][ T7151] RSP: 002b:00007f8baabdcfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 284.448008][ T7151] RAX: ffffffffffffffda RBX: 00007f8baabdd6c0 RCX: 00007f8bac96d60e [ 284.448025][ T7151] RDX: 000000000000000f RSI: 00007f8baabdd0a0 RDI: 0000000000000003 [ 284.448039][ T7151] RBP: 00007f8baabdd090 R08: 0000000000000000 R09: 0000000000000000 [ 284.448054][ T7151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 284.448067][ T7151] R13: 00007f8bacc26128 R14: 00007f8bacc26090 R15: 00007ffc93105788 [ 284.448101][ T7151] [ 284.735023][ T7147] FAT-fs (loop2): Directory bread(block 64) failed [ 284.735067][ T7147] FAT-fs (loop2): Directory bread(block 65) failed [ 284.735188][ T7147] FAT-fs (loop2): Directory bread(block 66) failed [ 284.735217][ T7147] FAT-fs (loop2): Directory bread(block 67) failed [ 284.735651][ T7147] FAT-fs (loop2): Directory bread(block 68) failed [ 284.735682][ T7147] FAT-fs (loop2): Directory bread(block 69) failed [ 284.735807][ T7147] FAT-fs (loop2): Directory bread(block 70) failed [ 284.735836][ T7147] FAT-fs (loop2): Directory bread(block 71) failed [ 284.735948][ T7147] FAT-fs (loop2): Directory bread(block 72) failed [ 284.735977][ T7147] FAT-fs (loop2): Directory bread(block 73) failed [ 285.553169][ T7162] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 287.219403][ T7171] netlink: 12 bytes leftover after parsing attributes in process `syz.0.306'. [ 287.355964][ T7165] loop4: detected capacity change from 0 to 32768 [ 287.418556][ T7165] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.303 (7165) [ 287.497487][ T7165] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 287.497525][ T7165] BTRFS info (device loop4): using sha256 checksum algorithm [ 288.124454][ T7193] loop1: detected capacity change from 0 to 1024 [ 288.133896][ T7193] EXT4-fs: quotafile must be on filesystem root [ 288.144898][ T7197] Bluetooth: MGMT ver 1.23 [ 288.163955][ T7197] Bluetooth: hci2: invalid length 0, exp 2 for type 2 [ 288.705230][ T32] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 288.854750][ T32] usb 4-1: Using ep0 maxpacket: 32 [ 288.857353][ T32] usb 4-1: config index 0 descriptor too short (expected 53, got 18) [ 288.857385][ T32] usb 4-1: config 5 has an invalid descriptor of length 37, skipping remainder of the config [ 288.857408][ T32] usb 4-1: config 5 has 0 interfaces, different from the descriptor's value: 1 [ 289.117542][ T7187] bridge1: entered promiscuous mode [ 289.123616][ T32] usb 4-1: New USB device found, idVendor=0101, idProduct=0000, bcdDevice=89.53 [ 289.123649][ T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.123673][ T32] usb 4-1: Product: syz [ 289.123688][ T32] usb 4-1: Manufacturer: syz [ 289.123704][ T32] usb 4-1: SerialNumber: syz [ 289.861777][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 289.862221][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 289.862656][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 289.863086][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 289.863506][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 289.865952][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 289.977587][ T32] usb 4-1: USB disconnect, device number 17 [ 290.095675][ T5929] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 290.298484][ T5929] usb 2-1: Using ep0 maxpacket: 32 [ 290.345810][ T5929] usb 2-1: config 0 has an invalid interface number: 247 but max is 0 [ 290.345841][ T5929] usb 2-1: config 0 has no interface number 0 [ 290.383660][ T5929] usb 2-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice= 1.9b [ 290.383702][ T5929] usb 2-1: New USB device strings: Mfr=128, Product=0, SerialNumber=0 [ 290.383727][ T5929] usb 2-1: Manufacturer: syz [ 290.473682][ T5929] usb 2-1: config 0 descriptor?? [ 290.558234][ T7165] BTRFS error (device loop4): open_ctree failed: -4 [ 292.842404][ T7223] loop3: detected capacity change from 0 to 136 [ 293.674953][ T5903] usb 2-1: USB disconnect, device number 5 [ 294.959238][ T7230] loop1: detected capacity change from 0 to 1024 [ 294.960388][ T7230] EXT4-fs: Ignoring removed mblk_io_submit option [ 294.960417][ T7230] EXT4-fs: Ignoring removed oldalloc option [ 295.164889][ T822] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 295.196986][ T7230] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 295.197122][ T7230] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 295.743116][ T7232] tap0: tun_chr_ioctl cmd 1074025677 [ 295.743377][ T7232] tap0: linktype set to 0 [ 295.784808][ T822] usb 4-1: Using ep0 maxpacket: 32 [ 295.786599][ T822] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 295.786621][ T822] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 295.786640][ T822] usb 4-1: config 0 interface 0 has no altsetting 0 [ 295.794309][ T822] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 295.794398][ T822] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.794464][ T822] usb 4-1: Product: syz [ 295.794511][ T822] usb 4-1: Manufacturer: syz [ 295.794541][ T822] usb 4-1: SerialNumber: syz [ 295.861204][ T822] usb 4-1: config 0 descriptor?? [ 296.017807][ T7247] loop4: detected capacity change from 0 to 1024 [ 296.078335][ T7247] ext4: Unknown parameter 'dont_measure' [ 297.683658][ T822] gs_usb 4-1:0.0: Couldn't get device config: (err=-110) [ 297.683709][ T822] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -110 [ 298.317509][ T822] usb 4-1: USB disconnect, device number 18 [ 299.267213][ T38] audit: type=1326 audit(1777264085.195:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7261 comm="syz.2.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f052b7ecdd9 code=0x7ffc0000 [ 299.267277][ T38] audit: type=1326 audit(1777264085.195:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7261 comm="syz.2.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f052b7ecdd9 code=0x7ffc0000 [ 299.267329][ T38] audit: type=1326 audit(1777264085.195:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7261 comm="syz.2.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f052b7edbc9 code=0x7ffc0000 [ 299.267380][ T38] audit: type=1326 audit(1777264085.195:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7261 comm="syz.2.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f052b7a9b3b code=0x7ffc0000 [ 299.267439][ T38] audit: type=1326 audit(1777264085.195:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7261 comm="syz.2.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f052b7ecdd9 code=0x7ffc0000 [ 299.267489][ T38] audit: type=1326 audit(1777264085.195:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7261 comm="syz.2.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f052b7ecdd9 code=0x7ffc0000 [ 299.267540][ T38] audit: type=1326 audit(1777264085.195:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7261 comm="syz.2.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f052b7ecdd9 code=0x7ffc0000 [ 299.267592][ T38] audit: type=1326 audit(1777264085.195:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7261 comm="syz.2.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f052b7ecdd9 code=0x7ffc0000 [ 299.268375][ T38] audit: type=1326 audit(1777264085.205:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7261 comm="syz.2.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f052b7a922c code=0x7ffc0000 [ 299.268436][ T38] audit: type=1326 audit(1777264085.205:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7261 comm="syz.2.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f052b7a928e code=0x7ffc0000 [ 300.226586][ T7244] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 300.494121][ T5827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 301.901445][ T7280] loop2: detected capacity change from 0 to 131072 [ 301.914327][ T7280] F2FS-fs (loop2): Test dummy encryption mode enabled [ 303.036922][ T7280] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 303.066088][ T7280] F2FS-fs (loop2): Mounted with checkpoint version = 753bd00b [ 303.417169][ C1] sd 0:0:1:0: [sda] tag#6564 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 303.417262][ C1] sd 0:0:1:0: [sda] tag#6564 CDB: Write(6) 0a 00 4e 1e 00 00 [ 304.244870][ T5818] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 305.177310][ T5818] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 305.177335][ T5818] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.209787][ T5818] usb 2-1: config 0 descriptor?? [ 305.225640][ T5818] cp210x 2-1:0.0: cp210x converter detected [ 305.303472][ T38] kauditd_printk_skb: 28 callbacks suppressed [ 305.303552][ T38] audit: type=1326 audit(1777264091.235:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7319 comm="syz.0.337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f395108cdd9 code=0x7ffc0000 [ 305.320129][ T38] audit: type=1326 audit(1777264091.255:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7319 comm="syz.0.337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f395108cdd9 code=0x7ffc0000 [ 305.321297][ T38] audit: type=1326 audit(1777264091.255:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7319 comm="syz.0.337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f395108cdd9 code=0x7ffc0000 [ 305.321598][ T38] audit: type=1326 audit(1777264091.255:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7319 comm="syz.0.337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f395108cdd9 code=0x7ffc0000 [ 305.345020][ T5834] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 305.348642][ T38] audit: type=1326 audit(1777264091.285:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7319 comm="syz.0.337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f395108cdd9 code=0x7ffc0000 [ 305.348801][ T38] audit: type=1326 audit(1777264091.285:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7319 comm="syz.0.337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f395108cdd9 code=0x7ffc0000 [ 305.356993][ T38] audit: type=1326 audit(1777264091.295:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7319 comm="syz.0.337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f395108cdd9 code=0x7ffc0000 [ 305.391732][ T38] audit: type=1326 audit(1777264091.315:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7319 comm="syz.0.337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f395108cdd9 code=0x7ffc0000 [ 305.612891][ T5834] usb 4-1: unable to get BOS descriptor or descriptor too short [ 305.613747][ T5834] usb 4-1: not running at top speed; connect to a high speed hub [ 305.637294][ T5834] usb 4-1: config 17 has an invalid interface number: 8 but max is 1 [ 305.637385][ T5834] usb 4-1: config 17 has 1 interface, different from the descriptor's value: 2 [ 305.637410][ T5834] usb 4-1: config 17 has no interface number 0 [ 305.637506][ T5834] usb 4-1: config 17 interface 8 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0 [ 305.637560][ T5834] usb 4-1: config 17 interface 8 has no altsetting 0 [ 305.652988][ T5834] usb 4-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 305.653062][ T5834] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.653087][ T5834] usb 4-1: Product: syz [ 305.653104][ T5834] usb 4-1: Manufacturer: syz [ 305.653156][ T5834] usb 4-1: SerialNumber: syz [ 305.717109][ T38] audit: type=1326 audit(1777264091.315:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7319 comm="syz.0.337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f395108cdd9 code=0x7ffc0000 [ 305.717274][ T38] audit: type=1326 audit(1777264091.655:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7319 comm="syz.0.337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f395108cdd9 code=0x7ffc0000 [ 305.767790][ T5818] cp210x 2-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 305.842676][ T5818] usb 2-1: cp210x converter now attached to ttyUSB0 [ 306.012778][ T5818] usb 2-1: USB disconnect, device number 6 [ 306.260666][ T5818] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 306.401229][ T5818] cp210x 2-1:0.0: device disconnected [ 306.754700][ T5834] usb 4-1: selecting invalid altsetting 0 [ 308.144412][ T7339] loop3: detected capacity change from 0 to 512 [ 308.145472][ T7341] netlink: 8 bytes leftover after parsing attributes in process `syz.0.343'. [ 308.257602][ T7339] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 308.945729][ T7339] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.341: bad orphan inode 131083 [ 308.945769][ T7339] loop3: lost filesystem error report for type 5 error -117 [ 308.987683][ T7339] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 309.224654][ T5903] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 309.251457][ T5834] usb 4-1: USB disconnect, device number 19 [ 309.347183][ T7346] loop4: detected capacity change from 0 to 1024 [ 309.414729][ T5903] usb 1-1: Using ep0 maxpacket: 16 [ 309.416943][ T5903] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.416973][ T5903] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 309.417008][ T5903] usb 1-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 309.417030][ T5903] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.528593][ T5903] usb 1-1: config 0 descriptor?? [ 309.614209][ T5954] udevd[5954]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.8/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 309.861296][ T5826] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.974033][ T7346] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 310.624896][ T822] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 310.669737][ T5829] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.837875][ T822] usb 2-1: Using ep0 maxpacket: 16 [ 310.840444][ T822] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 310.840481][ T822] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 310.840522][ T822] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 310.840547][ T822] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.898875][ T822] usb 2-1: config 0 descriptor?? [ 311.358356][ T822] hid-multitouch 0003:1FD2:6007.0001: unknown main item tag 0x0 [ 311.358405][ T822] hid-multitouch 0003:1FD2:6007.0001: unknown main item tag 0x0 [ 311.358435][ T822] hid-multitouch 0003:1FD2:6007.0001: unknown main item tag 0x0 [ 311.358462][ T822] hid-multitouch 0003:1FD2:6007.0001: unknown main item tag 0x0 [ 311.358493][ T822] hid-multitouch 0003:1FD2:6007.0001: unknown main item tag 0x0 [ 311.812366][ T822] hid-multitouch 0003:1FD2:6007.0001: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.1-1/input0 [ 311.841146][ T822] usb 2-1: USB disconnect, device number 7 [ 312.030884][ T7367] fido_id[7367]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 312.165879][ T7342] netdevsim netdevsim0 netdevsim0: refused to change device tx_queue_len [ 312.166162][ T7342] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 312.252222][ T7357] netdevsim netdevsim0 netdevsim0: refused to change device tx_queue_len [ 312.252249][ T7357] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 312.379549][ T7371] loop3: detected capacity change from 0 to 256 [ 312.383939][ T7371] exfat: Deprecated parameter 'namecase' [ 312.384001][ T7371] exfat: Deprecated parameter 'namecase' [ 312.444500][ T5903] usbhid 1-1:0.0: can't add hid device: -71 [ 312.445108][ T5903] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 312.563915][ T7379] loop1: detected capacity change from 0 to 256 [ 312.632325][ T7371] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 312.653279][ T5903] usb 1-1: USB disconnect, device number 15 [ 312.865248][ T7382] netlink: 8 bytes leftover after parsing attributes in process `syz.4.352'. [ 313.088236][ T5903] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 313.092786][ T7385] [ 313.092798][ T7385] ====================================================== [ 313.092810][ T7385] WARNING: possible circular locking dependency detected [ 313.092830][ T7385] syzkaller #0 Tainted: G L [ 313.092843][ T7385] ------------------------------------------------------ [ 313.092853][ T7385] syz.3.349/7385 is trying to acquire lock: [ 313.092866][ T7385] ffff8880343161d8 (sk_lock-AF_INET){+.+.}-{0:0}, at: inet_shutdown+0x6a/0x390 [ 313.092938][ T7385] [ 313.092938][ T7385] but task is already holding lock: [ 313.092945][ T7385] ffff8880292c2c60 (&nsock->tx_lock){+.+.}-{4:4}, at: sock_shutdown+0x14f/0x260 [ 313.093005][ T7385] [ 313.093005][ T7385] which lock already depends on the new lock. [ 313.093005][ T7385] [ 313.093014][ T7385] [ 313.093014][ T7385] the existing dependency chain (in reverse order) is: [ 313.093023][ T7385] [ 313.093023][ T7385] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 313.093055][ T7385] mutex_lock_nested+0x5a/0x1d0 [ 313.093080][ T7385] nbd_queue_rq+0x37b/0x1100 [ 313.093105][ T7385] blk_mq_dispatch_rq_list+0xa77/0x1910 [ 313.093126][ T7385] __blk_mq_sched_dispatch_requests+0xddb/0x1610 [ 313.093151][ T7385] blk_mq_sched_dispatch_requests+0xda/0x1a0 [ 313.093175][ T7385] blk_mq_run_hw_queue+0x368/0x520 [ 313.093210][ T7385] blk_mq_dispatch_list+0xd1f/0xe20 [ 313.093232][ T7385] blk_mq_flush_plug_list+0x48d/0x570 [ 313.093255][ T7385] __blk_flush_plug+0x3ed/0x4d0 [ 313.093277][ T7385] __submit_bio+0x28d/0x580 [ 313.093299][ T7385] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 313.093336][ T7385] block_read_full_folio+0x7b7/0x830 [ 313.093360][ T7385] filemap_read_folio+0x137/0x3b0 [ 313.093383][ T7385] do_read_cache_folio+0x2bf/0x560 [ 313.093407][ T7385] read_part_sector+0xb8/0x2b0 [ 313.093427][ T7385] adfspart_check_ICS+0xb1/0x960 [ 313.093449][ T7385] bdev_disk_changed+0x817/0x1770 [ 313.093470][ T7385] blkdev_get_whole+0x2e5/0x480 [ 313.093492][ T7385] bdev_open+0x31e/0xcc0 [ 313.093512][ T7385] blkdev_open+0x485/0x620 [ 313.093536][ T7385] do_dentry_open+0x83d/0x13e0 [ 313.093560][ T7385] vfs_open+0x3b/0x350 [ 313.093608][ T7385] path_openat+0x2e43/0x38a0 [ 313.093640][ T7385] do_file_open+0x23e/0x4a0 [ 313.093672][ T7385] do_sys_openat2+0x113/0x200 [ 313.093696][ T7385] __x64_sys_openat+0x138/0x170 [ 313.093728][ T7385] do_syscall_64+0x15f/0xf80 [ 313.093760][ T7385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.093783][ T7385] [ 313.093783][ T7385] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 313.093816][ T7385] mutex_lock_nested+0x5a/0x1d0 [ 313.093840][ T7385] nbd_queue_rq+0xc6/0x1100 [ 313.093866][ T7385] blk_mq_dispatch_rq_list+0xa77/0x1910 [ 313.093887][ T7385] __blk_mq_sched_dispatch_requests+0xddb/0x1610 [ 313.093937][ T7385] blk_mq_sched_dispatch_requests+0xda/0x1a0 [ 313.093960][ T7385] blk_mq_run_hw_queue+0x368/0x520 [ 313.093994][ T7385] blk_mq_dispatch_list+0xd1f/0xe20 [ 313.094016][ T7385] blk_mq_flush_plug_list+0x48d/0x570 [ 313.094038][ T7385] __blk_flush_plug+0x3ed/0x4d0 [ 313.094059][ T7385] __submit_bio+0x28d/0x580 [ 313.094081][ T7385] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 313.094117][ T7385] block_read_full_folio+0x7b7/0x830 [ 313.094141][ T7385] filemap_read_folio+0x137/0x3b0 [ 313.094164][ T7385] do_read_cache_folio+0x2bf/0x560 [ 313.094188][ T7385] read_part_sector+0xb8/0x2b0 [ 313.094208][ T7385] adfspart_check_ICS+0xb1/0x960 [ 313.094229][ T7385] bdev_disk_changed+0x817/0x1770 [ 313.094249][ T7385] blkdev_get_whole+0x2e5/0x480 [ 313.094276][ T7385] bdev_open+0x31e/0xcc0 [ 313.094296][ T7385] blkdev_open+0x485/0x620 [ 313.094319][ T7385] do_dentry_open+0x83d/0x13e0 [ 313.094340][ T7385] vfs_open+0x3b/0x350 [ 313.094361][ T7385] path_openat+0x2e43/0x38a0 [ 313.094392][ T7385] do_file_open+0x23e/0x4a0 [ 313.094422][ T7385] do_sys_openat2+0x113/0x200 [ 313.094445][ T7385] __x64_sys_openat+0x138/0x170 [ 313.094471][ T7385] do_syscall_64+0x15f/0xf80 [ 313.094501][ T7385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.094520][ T7385] [ 313.094520][ T7385] -> #4 (set->srcu){.+.+}-{0:0}: [ 313.094555][ T7385] __synchronize_srcu+0xca/0x300 [ 313.094582][ T7385] elevator_switch+0x1e8/0x7a0 [ 313.094600][ T7385] elevator_change+0x2cc/0x450 [ 313.094618][ T7385] elevator_set_default+0x36c/0x430 [ 313.094639][ T7385] blk_register_queue+0x3e9/0x4e0 [ 313.094661][ T7385] __add_disk+0x677/0xd50 [ 313.094715][ T7385] add_disk_fwnode+0xfb/0x480 [ 313.094742][ T7385] nbd_dev_add+0x72c/0xb50 [ 313.094773][ T7385] nbd_init+0x168/0x1f0 [ 313.094802][ T7385] do_one_initcall+0x250/0x870 [ 313.094828][ T7385] do_initcall_level+0x104/0x190 [ 313.094855][ T7385] do_initcalls+0x59/0xa0 [ 313.094877][ T7385] kernel_init_freeable+0x2a6/0x3e0 [ 313.094902][ T7385] kernel_init+0x1d/0x1d0 [ 313.094931][ T7385] ret_from_fork+0x514/0xb70 [ 313.094952][ T7385] ret_from_fork_asm+0x1a/0x30 [ 313.094977][ T7385] [ 313.094977][ T7385] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 313.095007][ T7385] mutex_lock_nested+0x5a/0x1d0 [ 313.095029][ T7385] elevator_change+0x1b3/0x450 [ 313.095046][ T7385] elevator_set_none+0xb5/0x140 [ 313.095064][ T7385] blk_mq_update_nr_hw_queues+0x607/0x1a80 [ 313.095089][ T7385] nbd_start_device+0x17f/0xb20 [ 313.095114][ T7385] nbd_genl_connect+0x1651/0x1c80 [ 313.095137][ T7385] genl_family_rcv_msg_doit+0x22a/0x330 [ 313.095162][ T7385] genl_rcv_msg+0x61c/0x7a0 [ 313.095183][ T7385] netlink_rcv_skb+0x232/0x4b0 [ 313.095214][ T7385] genl_rcv+0x28/0x40 [ 313.095234][ T7385] netlink_unicast+0x780/0x920 [ 313.095261][ T7385] netlink_sendmsg+0x813/0xb40 [ 313.095293][ T7385] sock_sendmsg_nosec+0x112/0x150 [ 313.095319][ T7385] ____sys_sendmsg+0x55c/0x870 [ 313.095337][ T7385] ___sys_sendmsg+0x2a5/0x360 [ 313.095356][ T7385] __x64_sys_sendmsg+0x1c3/0x2a0 [ 313.095376][ T7385] do_syscall_64+0x15f/0xf80 [ 313.095408][ T7385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.095430][ T7385] [ 313.095430][ T7385] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 313.095468][ T7385] blk_alloc_queue+0x54e/0x690 [ 313.095503][ T7385] __blk_mq_alloc_disk+0x197/0x390 [ 313.095526][ T7385] nbd_dev_add+0x499/0xb50 [ 313.095551][ T7385] nbd_init+0x168/0x1f0 [ 313.095578][ T7385] do_one_initcall+0x250/0x870 [ 313.095602][ T7385] do_initcall_level+0x104/0x190 [ 313.095629][ T7385] do_initcalls+0x59/0xa0 [ 313.095654][ T7385] kernel_init_freeable+0x2a6/0x3e0 [ 313.095679][ T7385] kernel_init+0x1d/0x1d0 [ 313.095699][ T7385] ret_from_fork+0x514/0xb70 [ 313.095719][ T7385] ret_from_fork_asm+0x1a/0x30 [ 313.095745][ T7385] [ 313.095745][ T7385] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 313.095777][ T7385] fs_reclaim_acquire+0x71/0x100 [ 313.095813][ T7385] kmem_cache_alloc_node_noprof+0x4b/0x6e0 [ 313.095846][ T7385] __alloc_skb+0x1d0/0x7d0 [ 313.095879][ T7385] tcp_stream_alloc_skb+0x3f/0x5c0 [ 313.095903][ T7385] tcp_sendmsg_locked+0x134b/0x5370 [ 313.095937][ T7385] tcp_sendmsg+0x2f/0x50 [ 313.095961][ T7385] sock_sendmsg_nosec+0xf9/0x150 [ 313.095986][ T7385] sock_write_iter+0x308/0x410 [ 313.096007][ T7385] vfs_write+0x629/0xba0 [ 313.096036][ T7385] ksys_write+0x156/0x270 [ 313.096066][ T7385] do_syscall_64+0x15f/0xf80 [ 313.096096][ T7385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.096117][ T7385] [ 313.096117][ T7385] -> #0 (sk_lock-AF_INET){+.+.}-{0:0}: [ 313.096148][ T7385] __lock_acquire+0x15a5/0x2cf0 [ 313.096177][ T7385] lock_acquire+0x106/0x350 [ 313.096201][ T7385] lock_sock_nested+0x41/0x130 [ 313.096221][ T7385] inet_shutdown+0x6a/0x390 [ 313.096237][ T7385] nbd_mark_nsock_dead+0x2e9/0x560 [ 313.096259][ T7385] sock_shutdown+0x15e/0x260 [ 313.096280][ T7385] nbd_clear_sock+0x24/0x170 [ 313.096302][ T7385] nbd_ioctl+0x337/0xe40 [ 313.096323][ T7385] blkdev_ioctl+0x5e6/0x750 [ 313.096342][ T7385] __se_sys_ioctl+0xff/0x170 [ 313.096371][ T7385] do_syscall_64+0x15f/0xf80 [ 313.096396][ T7385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.096413][ T7385] [ 313.096413][ T7385] other info that might help us debug this: [ 313.096413][ T7385] [ 313.096420][ T7385] Chain exists of: [ 313.096420][ T7385] sk_lock-AF_INET --> &cmd->lock --> &nsock->tx_lock [ 313.096420][ T7385] [ 313.096448][ T7385] Possible unsafe locking scenario: [ 313.096448][ T7385] [ 313.096454][ T7385] CPU0 CPU1 [ 313.096459][ T7385] ---- ---- [ 313.096465][ T7385] lock(&nsock->tx_lock); [ 313.096476][ T7385] lock(&cmd->lock); [ 313.096489][ T7385] lock(&nsock->tx_lock); [ 313.096502][ T7385] lock(sk_lock-AF_INET); [ 313.096514][ T7385] [ 313.096514][ T7385] *** DEADLOCK *** [ 313.096514][ T7385] [ 313.096519][ T7385] 2 locks held by syz.3.349/7385: [ 313.096529][ T7385] #0: ffff8880275cfa48 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_ioctl+0x133/0xe40 [ 313.096578][ T7385] #1: ffff8880292c2c60 (&nsock->tx_lock){+.+.}-{4:4}, at: sock_shutdown+0x14f/0x260 [ 313.096624][ T7385] [ 313.096624][ T7385] stack backtrace: [ 313.096638][ T7385] CPU: 1 UID: 0 PID: 7385 Comm: syz.3.349 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 313.096665][ T7385] Tainted: [L]=SOFTLOCKUP [ 313.096671][ T7385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 313.096684][ T7385] Call Trace: [ 313.096691][ T7385] [ 313.096699][ T7385] dump_stack_lvl+0xe8/0x150 [ 313.096721][ T7385] print_circular_bug+0x2e1/0x300 [ 313.096753][ T7385] check_noncircular+0x12e/0x150 [ 313.096786][ T7385] __lock_acquire+0x15a5/0x2cf0 [ 313.096812][ T7385] ? clockevents_program_event+0x491/0x630 [ 313.096844][ T7385] ? __pfx_clockevents_program_event+0x10/0x10 [ 313.096878][ T7385] ? inet_shutdown+0x6a/0x390 [ 313.096895][ T7385] lock_acquire+0x106/0x350 [ 313.096924][ T7385] ? inet_shutdown+0x6a/0x390 [ 313.096947][ T7385] ? preempt_schedule_thunk+0x16/0x30 [ 313.096976][ T7385] lock_sock_nested+0x41/0x130 [ 313.096999][ T7385] ? inet_shutdown+0x6a/0x390 [ 313.097018][ T7385] inet_shutdown+0x6a/0x390 [ 313.097037][ T7385] nbd_mark_nsock_dead+0x2e9/0x560 [ 313.097064][ T7385] sock_shutdown+0x15e/0x260 [ 313.097089][ T7385] nbd_clear_sock+0x24/0x170 [ 313.097115][ T7385] nbd_ioctl+0x337/0xe40 [ 313.097140][ T7385] ? __pfx_nbd_ioctl+0x10/0x10 [ 313.097170][ T7385] ? __pfx_nbd_ioctl+0x10/0x10 [ 313.097193][ T7385] blkdev_ioctl+0x5e6/0x750 [ 313.097215][ T7385] ? __pfx_blkdev_ioctl+0x10/0x10 [ 313.097234][ T7385] ? __fget_files+0x2a/0x420 [ 313.097259][ T7385] ? bpf_lsm_file_ioctl+0x9/0x20 [ 313.097280][ T7385] ? __pfx_blkdev_ioctl+0x10/0x10 [ 313.097301][ T7385] __se_sys_ioctl+0xff/0x170 [ 313.097329][ T7385] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.097354][ T7385] do_syscall_64+0x15f/0xf80 [ 313.097380][ T7385] ? trace_irq_disable+0x3b/0x140 [ 313.097402][ T7385] ? clear_bhb_loop+0x40/0x90 [ 313.097424][ T7385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.097442][ T7385] RIP: 0033:0x7fafc8cccdd9 [ 313.097459][ T7385] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 313.097475][ T7385] RSP: 002b:00007fafc6edc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 313.097494][ T7385] RAX: ffffffffffffffda RBX: 00007fafc8f46180 RCX: 00007fafc8cccdd9 [ 313.097508][ T7385] RDX: 0000000000000000 RSI: 000000000000ab04 RDI: 0000000000000008 [ 313.097519][ T7385] RBP: 00007fafc8d62d69 R08: 0000000000000000 R09: 0000000000000000 [ 313.097531][ T7385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 313.097542][ T7385] R13: 00007fafc8f46218 R14: 00007fafc8f46180 R15: 00007fffca89b9a8 [ 313.097564][ T7385] [ 313.109909][ T7385] block nbd3: shutting down sockets [ 313.143200][ T7384] loop4: detected capacity change from 0 to 256 [ 313.235352][ T5903] usb 1-1: Using ep0 maxpacket: 32 [ 313.268870][ T7384] exfat: Unknown parameter 'utÓˇ' [ 313.313272][ T5903] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 313.313369][ T5903] usb 1-1: config 0 has no interface number 0 [ 313.546593][ T5903] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 313.546703][ T5903] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.546763][ T5903] usb 1-1: Product: syz [ 313.546810][ T5903] usb 1-1: Manufacturer: syz [ 313.546857][ T5903] usb 1-1: SerialNumber: syz [ 313.725108][ T5903] usb 1-1: config 0 descriptor?? [ 314.599137][ T7394] tipc: Started in network mode [ 314.599175][ T7394] tipc: Node identity 0000000000003a000000000000000001, cluster identity 4711 [ 314.599215][ T7394] tipc: Enabling of bearer rejected, failed to enable media [ 314.685809][ T822] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 314.814049][ T5903] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 314.814074][ T5903] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 314.844741][ T822] usb 5-1: Using ep0 maxpacket: 16 [ 314.852441][ T822] usb 5-1: config 1 has an invalid descriptor of length 189, skipping remainder of the config [ 314.852476][ T822] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 314.855793][ T822] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 314.855881][ T822] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.855912][ T822] usb 5-1: Product: syz [ 314.855928][ T822] usb 5-1: Manufacturer: syz [ 314.855962][ T822] usb 5-1: SerialNumber: syz [ 314.918600][ T822] usb 5-1: 0:2 : does not exist [ 315.115815][ T822] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 315.160372][ T822] usb 5-1: USB disconnect, device number 14 [ 315.196640][ T5954] udevd[5954]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 315.421936][ T5903] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 315.422094][ T5903] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 315.445858][ T5903] usb 1-1: USB disconnect, device number 16 [ 317.648118][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.648222][ T1335] ieee802154 phy1 wpan1: encryption failed: -22