last executing test programs: 3m13.350101985s ago: executing program 1 (id=489): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f0000000340)={[{@treelog}, {@nodatacow}, {@max_inline={'max_inline', 0x3d, [0x6d, 0x25, 0x78, 0x65, 0x65, 0x36]}}, {@nodatasum}, {@noautodefrag}, {@nobarrier}, {@compress_force}, {@noautodefrag}, {@ref_verify}, {@noenospc_debug}, {@clear_cache}, {@noacl}, {@ssd}, {@nobarrier}, {@max_inline={'max_inline', 0x3d, [0x38, 0x6d, 0x35, 0x35, 0x32, 0x36]}}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$eJzs3U+IVWUfB/Dnzp1x5lVw7isEtsoikGrh4CYioqtMUFF0y8VgBE4tgnThJEi0EMQW/Vt4S4paSK6kFsksjKA2LqQwArehYS7cKAaSi3Yac8957pz7HO+5d0ZtTD8fmTnnOb/zPOe5l7O43+uccwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACEEF74/bNDVfVT16bPnJtp7jywZebyvul1p0OodbbX8vqOrc++8ua2HS9OxA6zL2fLRqPfkFnX81ljVc/GhX69P6+HEMaSAer58pk1pVGLq3vKA1a6fnH30U17mxuPH27Xr146e7L80lkwsdITWCn5eXVh8Vxqdn6PJHt024VTr9Zzimb90xPuX3kRAMCSTLU6i+7H0fwjbre9P60n7WbSbift+AmhXWwsRzbuqn7z3JDWV2iezSwqjPedZ1LP3/9uu5X2T9pJ1FjCPHt3zSPNRL95ziX1lZonAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJ3kkbdHH6qqn7o2febcTHPngS0zl/dNrzsdQqOzvZaVa6vfP9z869utxw78uPmr4xeef6ye94vL0cLO4be48sRkCG8UKhfisBfXhtDqLXSa4cty4a3OynOxAAAAwN3k/s7vkW47i4NjPe1aJ03WOv+iLCxev7j76Ka9zY3HD7frVy+dPbn88Vp9xmvecLxuu7H4UysE4xh/0/EW63HXPaVxqqUjpnn+8fNTf1f1L+X/RnX+j++c/A8AAMDNkP/TcaoNyv/fvfbHJ1X9S/l/Q88hS/k/zjjm/5GwvPwPAAAAd7Lbnf+bpXGqDcr/4y+NfV3Vv5T/p4bL/6PFaceNv8YJ75oMYWrQ1AEAAIA+4v+7L361EPN69s1BmtefevTguarxSvm/OVz+H7ulrwoAAAC4GUe+2P5wVb2U/1vD5f/x2zprAAAAYCne+XDig6p6Kf/PDpf/V+fL/MqHrNNP8a8QDk2GMLGwMpcVfg7tp7sFAAAA4BaJOf3PT3f+ULVfKf/PVd//P97pIF7/33P/v9L1/4VCdte/J90YAAAAgHtR+Xr+eHv87MkF/Z6/P+z1/w/87+CrVccv5f/9w+X/enF5K5//BwAAAMvwX3v+3/bSONUG3f//vo/e/aWqfyn/t4fL/3G5pvjyTtRq2fvz3mQI6xdW8rsJfhMPtyspzI8VCh2tpMe22CMvzI8XCh1zSY/NkyE8uLCyPyn8PxbaSeHK2rxwJCmcjoX8fOgWjiWFE/FM+3xtPt208H0s5BdYzMcrKNZ0L4lIelzt12OhcMMeZ7sHBwAAuKfE8Jxn2bHeZkij7Hxt0A6rB+0wMmiH+qAdRpMd0h37bQ+zvYW4vX1m49Ke/39kuPwf34pV2aLf9f8hXv+fP9ewe/3/bCw0ksJ8LLTSOwa04jGysPtxPEajlfe4sr5bAAAAgLta/F6gvsLzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP5h715j5KruA4CffY734fVCUoXQKNkkNY6beL22gUQtVdaUqhEpzbqhoCqi2NhrsnjBjm1KjEJkbCIaIShtkJIPRRhFUc0HqBWISAoIFymOUHlEVEUBBAqtIQoipSQRaYIUqtl7z+ydc3cefqzx0t9P8s6Z+Z/nnYfn3HvnXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+P/h4Feu+dtm8Ud/e96zL1w8fsWetRe/et15pz4ZwsTM4x1ZuKP/xtvHf373uffseWD1HfcdPv+jvXm5PB4Gqn868zs3xFoPLw7h/o4QutPAisEs0JPfH4z1vW8whFPCbKBWYrI/K5E2HL7fF8K+MBuoVfW9vhAGC4ELn3rk4Zuridv6QlgaQqikbTxfydroSwNn9GaB/jSwtTsL/OqtTC3w3c4sAMcsvhlqL/oDE/UZhucu1+D113PcOvb2SofXFRPDjfP9bO08d6qgN31g4pietlJ1zIvS2+Ogd9sCeLeVtvOtnrbiF6n8G8pbs6FK6Nw0uXnD1dM74yOdYXS0q1FN8/Q8P/P6lzYeSXrBvA5jB4aPy+vwlieW3t21/ILH71ux9OX9H9v7yrF280eFTVpMz7dKyF9zC+Z5jMZ9niyAt1/pW9KIL10hhM2f/73PNIuX5v/Dzef/8eUcbzvrcsda3xzK5ubxkcGYeG0om5sDAADAgrEQ9ppuHX3oE83qK83/R9o7/h8P+eeT+Wy0B0MYn0nsXRLCaTOPZ4G7YnOXLQnhgzOpifrA2iRwMIT3ziSW16pKSiyKJUaSwE+G8sB4EjgUAxNJ4FsxcGsSuCEGDiSBjTFwMAmcGwNhqn4cvz+Uj6PtQF8MrM824oF4FsIvhmJrybZ6rlYVAADAcZLPDnvq7xbOdTjWDHF6eaCvVYZ4BnbDDJWkhnQGW5tWNayhu1UNna1qqI17d/Phl2ruaFVz6TSMjvoMt//ybz4bmijN/8eaz/8rc3Sko3T8P4R1M39j7s48Ml2Lr5+oywAAAAAcg4H/ffGbzeKl+f94e+f/x30iXYXM4bG4G2LLkhDG6gNZtX9YDmRHvQfyAAAAACwEtePxtWPhU/ltdop2Op8u5584wvzxwP/4nPl7Dz64vll/S/P/ifbO/++vv806cSj24mtLQlhUCPwg9rIamDESAz/+ZH0gH/+huAFuilXlJybUqropllgfA2NJYF+jEj+slTitPpA/WbXG99bGMZWXKAQAAADghIu7A+Jx+Xj+/4d+s/qaZuVK8//1R3b+/8w8uHR6//RACCu7Q+hKfxjwWH+2MGAMDHbkiYf6s7q60qqu7w/hnOrA0qpezNf/707XGHyqL6sqBk770P7Xz6gmvtkXwspi4OnP3XlWNbEzCdQa/8u+ED5QHW3a+HcWZY33pI1/fVEI7y8EalVdtiiEamO9aVWPVPLrGKRV/XMlhHcVArWqzq6EsCsAsEDF/0o3FR/csevaLRumpye3z2Mi7sPvC5unpidHN26d3lRp0KdNSZ/rljG6vjymdq9881y+RNFF964bbCdd+53gWLGtfD9+6cTB/H78LtQzM87VPXV316RD/siHy02EwjepRkPunOch9xcrmX0SS/XH/L1hICy6esfk9tEvbti5c/uq7G+72Vdnf+NhpmxbrUq3Vf9cfWvj5dFwtazE0W6rZcVKVu68ctvKHbuuXTF15YbLJy+fvGrV2avHzhxbM/bxM1dWRzWW/W0x1GVzVZ0M9a072xzXcRzq6d2FSk7Ep4aEhMRCS2wdWNb0/+TS/H9b8/l//NSJn/z5+gyNjv8Px8P82eOzh/nXx8C+do//Dzc6ml87MWAkCeyOgd0O8wMAAPDOECf5cW9m3Cv90+XfeblZudL8f3d7v/8/Tuv/15auP7/RMv/LY4mxRuv/p8v819b/391o/f90mf/a+v/73ob1/6+uBZJN8gvr/wMAAO8EJ279/5bL+6cXCChlaLm8f3qBgFKGlsv4t3uBgCNe///5//yr/w5NlOb/t7Y3/7dwPwAAAJw8vvxn1/xOs3hp/r+vvfn/iV//LzQ6/3+kUWCi0cKA1v8DAABggWq0/t/wjf2XNitXmv8faG/+H0+76KzLHWt9cyhb0y6ka9q9NlT7yQAAAAAsDJ1hdLSnzbx1K6OuPfo2n8mXAm2WLnrxTw4f2fn/B9ub/9f9LuOWJ5be3bX8gsffvG/F0pf3f2zvK7PH/wEAAID50+5+CQAAAAAAAAAAAAAA4O334n/sWdMsXvr9f1g383ij3//H6/7F3xe8uy53rLX1+n/5/Qs/fc+umSULHxsK4cPFwJY9W04J+bX5lxUDD1+y/D3VxJ60xIMvnPtSNXFpGvjUilPfqCbOSQLr4yKJ700D8aqKbyxOAnF5xX9PA3F7HEgDvXngq4uzcXSk2+qng9m26ki31bODISwpBGrb6v7BrI2OdIC3JYHaAL+QBuIA/zwPdKa9umcg61UMDMaidwxkvQIA4KQVvwX2hM1T05Nj8St8vD29u/42qluy7PpytR1tNv9cvjTZRfeuG2wn3ZV+F5291nhPqFSHsKr0dbWYpWNmlMenlhab7t0NhtxqtbfOBuVSR7rpehuPqC8b0ejGrdObeloOfE3rLKu7W2ZZVZrsFLN0zmzSNmppoy9tjKjNbdNGl+P9zjA62pXk+oMYHA51Wr0i2v29fnGdv0avgmKeqw7v/VWz+krz/+H25v+V4rjeyC8GsDteWe/vlljmHwAAAObXV9f++hvx32dvfPTpZnlL8/+R9ub/cQ9Wfig429txMF7/f++SEGYurT+cBe6KzV22JIQPzqQmYonsgvrnxxJjWeCuuMNkeSyxfqK+qkUxcCAJ/GQoDxxMAodiIN9LsT/ku3L+fiiEs2ZS6+pLbIslhpPAZ2JgJAmMxsBYElgcA+NJ4NXFeWAiCfxbDISp+m117+J8WwEAAByJfJ7VU383pPO8A92tMnS0ytDfKkNnqwyVVhkajSLe/3bM0JOcvNJRyNST1tqX1FLKEC+Gf8T9KmUIP6zPmRYsNR3PP6idb9BRn+GBT3RXQhOl+f9Ye/P//vrbrPVDcf4/e/2/LPCD2L2vxVPHR2Lgx5+sD+Q7Bg7Fye5Ntaom8hL5pP2mWGI8BkaSwLYYGE8C69flgX3vqQ/kM+1a43trjU/lJQoBAAAAOOHiDoK4mybO/+/Y8ZWBZuVK8//x9ub/sb2BYmM3xFoPLw7h/o7Z3tQCKwazQNyPMRh/Hv++wRBOKezgqJWY7M9K9CYNh+/3Zb9Q702r+l5f9uODeP/Cpx55+OZq4ra+EJYW9r7U2ni+krXRlwbO6M0C/Wlga3cWiHt+aoHvdmYBOGa1vYLxBZWf6lIzPHe5Bq+/d8o1QdPhlfaBzpFvrt9czZfSDtd8n2rNkT1tTfffctyU3h4HvdsW4rtt2Lut+EUq/4by1myoEjo3TW7ecPX0zvhI8ZesJfP0PBd/pdpO+ji8DncffW9bq6QdGEs+PsbmLjf367AjVnfLE0vv7lp+weP3rVj68v6P7X2l7W40EH8o/Mh1/zr4o8LmnW+VkL/mFtznyYTPk4X438CIpy2EsO7Vr9/ULF6a/0+0N//vTm5n/DpuzB1LQvhIYeM+Fjf/Hy/JPgcLgexT8l3lQHbI/b+GGn5yAgAAwPFW291R218wld9mJ4Sn8+Ry/okjzB/3V4zPmb/dfvf/9SVLm8VL8//1zef/i5JuOv7v+D/zxPH/OZ3su6IXpQ/sPqZd0aXqmBeO/8/pZH+3Of4/J8f/Hf+fi+P/LTj+P6eT/WkrfUva5ktXCOHlP3ro2Wbx0vx/W3vzf+v/zb1oX239v/WN1v/b1mj9v93W/wMAAOZVg4Xm0nleafW+UoZ09b5ShpYLBLZcYtD6f0e8/t9Lpz//m9BEaf6/u735f3w5DBRbXyjr/42sa1DVrTGwzcKAAAAAnIwa7SAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg7fXAP/zPpmbxR3973rMvXDx+xZ61F7963XmnPhnC1MzjHVm4o//G28d/fve59+x5YPUd9x0+/6OVvFxPfvu7dbljrW8OhbCv8MhgTLw2VL0zG7jw0/fs6q4mHhsK4cPFwJY9W06pJr41FMKyYuDhS5a/p5rYk5Z48IVzX6omLk0Dn1px6hvVxDl5oCPt7j8uzrrbkXb35sUhLCkEat29YnF9VbU2/jQPdKZt/NNg1kYMDMai3xjM2oiB6VhialEIK7tD6EqrerSSVdWVVvUvlayqrrSqL1dCOCeE0J1W9UJvVlV3OvIne7OqYuC0D+1//YxqYl9vCCuLgac/d+dZ1cQXkkCt8b/oDeED1ZdM2vi3e7LGe9LGb+sJ4f0hhN60xC+7sxK9aYkXu0N4VyFQa/zz3SHsCrwjxA+fuk+0Hbuu3bJhenpy+zwmevO2+sLmqenJ0Y1bpzdVkj410lFIv3X90Y/9ude/tLF6e9G96wbbSXfn5Xpmury6p+7umpO997Ff/cVKZp+PUv0xf28YCIuu3jG5ffSLG3bu3L4q+9tu9tXZ3648mm2rVQtlWy0rVrJy55XbVu7Yde2KqSs3XD55+eRVq85ePXbm2Jqxj5+5sjqqsezv8RjqnSd+qKd3Fyo5ER8AEhISCy3RWffpNnayf5CXvujPdrQnVGY+oEvTimKWjplRHo9Brz3KER/N95SWI1pVmjiUsqyeI8v19VnWlCYTs7X0ZVlmvteVJofFxjpnNmm83xlGR7sabYfh+rvFzfuzY9i8z+Sbrt00AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP/HDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwA8cCAAAAAML8rcPo2QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgEsBAAD//+erI4o=") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_int(r1, &(0x7f0000000000)=0x8, 0x12) close(r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) splice(r0, 0x0, r1, &(0x7f00000002c0)=0x87ffffe, 0x6, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = socket(0x1000000000000010, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x29}, 0x48) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000000)=r5, 0x4) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='.\x00', &(0x7f0000002280)='vxfs\x00', 0x8000, 0x0) mq_unlink(&(0x7f0000000040)='\x7f+\x04\x94NjN|\xe6\xa5\xe32\xde\xbb\x1a\xff\xa8\xdeJ\xd4gy\nZeW\x83\xf80\xfa\xb6\x83sP\xb7\xd7\x887\f\xb81\xa8\x92\ne\xfd\x89\x88J\x9b\xedpq\xf2\xb4\x84\xc8\x03\xf7\x14sawo\x8b\xb3J\xaa\x850.W\xd3\xe2\xf5\xf1\xf8\xc2~V\\\xe9\xa8[\x9f\x8d*\xe1\xa3\xe5*\xd1\xf2\xb8\'R\xaaW\x03V>-\x01\xc9\x1d75\xba\x03r\x99\x82\x13\v\xc9Z\xe3\xfaL\x05\xf8\x8b\x10\x06\xc8\v1DW\xc7n\x1f\xe1\xb4\xd0\x11\xf3\x14\xbe\xf5\xc0\b\x1f\xb8\v\xdc5d5\x95\x99N^\x8f\xd2\xf4b~c\x0f\xbe,\f\xa9\x06\x92R\xe1w\"\xd9\xa0^|\x90\v\xdfe\x03\xcf\n\xcb>\xd0\x04D-\x8d\x7fs\xdcq\xe5\xc7\xbeqR\x8e\xb2o\xf8\x15\xbd\xdcK\x8d\b\b}\x1c\x9e\x95f\xf1\xc1\xff\xe3\xac\xfe0\x1a\xcd\xfc\b}\x96p\xb8C\xa9\xda\xfc\xf9\x84\xff5\xdcB\b\xe5\x03<\xc4nc\xc9\xe6\xaa\r\x8b\xca\x1f\x82\xa0\xdd`t\xbe\x91\xea:\xec\xdd\xed[\x9d\xa1\xff\x8f\x85b\xa3\xbb\xa6\xc4\xbb\x92\xc0\xa3\xe1\xed@\xd6a\x05\xb9\x13O\x84\x0ea,j\xce\xaew\xcf\xa4E\xe4a\xf3w\xe7\xf5dG\x8d\x15I\xfc\xdak\xb0c!\x1a\t$\x8a\xbe\x14\x0eK\xa2\x94,:\xa6\xd6\xc017uZ\xba\x0f+\xc4X,~\x8fW\x84\xe0T\xfdF\x05Q\f\xf0\t\x9a\xa4\x1e`\x9d\bv\xc3T\xe8`\t\xa0\x93]J\xe0j2\x93I\xad\x1d\x00\xb1\xe5\x17\xb8\xc3%P\x89I=\x89d\x17\fM\xba\a\xea\x04\xe3hQS\xe0\xd0\xeb\xfa\xaa\x93z!\xf6\xd0y\xb2') sendmsg(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="5500000018007fd500fe01b2a4a280930a06000000a843089100fe800c00080008001100080000002d000f009b2c136ef75afb83de448daa72540d8302d2c55327c43ab82286ef1fdd20642383656d4d2449155037", 0x55}], 0x1}, 0x0) 3m9.317080689s ago: executing program 1 (id=501): bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xc, 0xe, &(0x7f00000024c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x511, 0x0, 0x0, 0x40f00, 0x2a, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x12) ioctl$SNDCTL_DSP_GETBLKSIZE(r0, 0xc0045004, 0x0) r1 = syz_io_uring_setup(0x239, &(0x7f0000000680)={0x0, 0x405e5, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000500)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x31a0}}) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0xfffffffffffffe7a) 3m6.402895999s ago: executing program 1 (id=508): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000004a00010000000000200000000a000000d06bc2e352"], 0x24}}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @private1}, 0x1c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="020000000400e432e2ad779718cb000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000006c0)={r3}, 0x4) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r3, 0x0}, 0x20) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0xd5) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x21000, &(0x7f0000000080)=ANY=[]) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000240)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x8000202, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x3ffffffc}}, 0x50) syz_fuse_handle_req(r4, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x20000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) fcntl$lock(r7, 0x6, &(0x7f0000000200)={0x2, 0x1, 0x0, 0x2, r6}) syz_fuse_handle_req(r4, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000b00)={&(0x7f0000000100)={0x50, 0x0, 0x8, {0x7, 0x2b, 0x80000000, 0x4100000, 0xfff7, 0xf, 0x7, 0xcba, 0x0, 0x0, 0x10, 0x80}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap$xdp(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x9, 0x11, r0, 0x100000000) 3m5.041585462s ago: executing program 1 (id=510): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="1805000000000000000000000000000018010000646c6c2500000000002020207b1af0ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001801000020696c2500000000002020207b0af8ff00000000bd000000000000000700000000feffffb702000008000000b703000000000000850000001900000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYRESDEC=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d0001000000000004086aa42d"], 0x30}}, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000340)={{0xffffffff, 0x0, 0x0, 0xffffbffc, 'syz0\x00'}, 0x2, 0x2, 0x7, 0x0, 0x0, 0xff, 'syz1\x00', 0x0}) socket(0x22, 0x3, 0x1) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x808003, &(0x7f0000000000), 0x3, 0x4e9, &(0x7f00000000c0)="$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") r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$binfmt_register(r4, &(0x7f0000000000)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x7, 0x3a, 'M', 0x3a, 'M', 0x3a, './file2', 0x3a, [0x46]}, 0x2a) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) socket$inet6_udp(0xa, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@cgroup=r5, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 3m4.007589864s ago: executing program 1 (id=515): syz_usb_connect$cdc_ecm(0x3, 0x74, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x62, 0x1, 0x1, 0x9, 0x20, 0x2, [{{0x9, 0x4, 0x0, 0x4, 0x3, 0x2, 0x6, 0x0, 0x4, {{0x8, 0x24, 0x6, 0x0, 0x0, "89483c"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x5, 0xd391, 0x7050, 0xff}, [@acm={0x4, 0x24, 0x2, 0xf}, @obex={0x5, 0x24, 0x15, 0xfffc}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x2}, @mbim_extended={0x8, 0x24, 0x1c, 0x9, 0x9, 0x4}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x68}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x7, 0xc9, 0x9}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xa1, 0x4, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x85, 0x7, 0x4}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x180, 0x8, 0xc, 0x3, 0x20, 0x9}, 0x4c, &(0x7f0000000100)={0x5, 0xf, 0x4c, 0x6, [@ssp_cap={0x10, 0x10, 0xa, 0x5, 0x1, 0x1, 0xf000, 0x1, [0xc0c0]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x2, 0x1, 0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x80, "12b0810ebc2f280294987fbe7e80aa2a"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x41, 0x40, 0xf9, 0x4, 0x1}, @wireless={0xb, 0x10, 0x1, 0x4, 0x2, 0x6, 0xd1, 0x27, 0xff}]}, 0x3, [{0x33, &(0x7f0000000180)=@string={0x33, 0x3, "12a8e8973afbe5d5d910803de16dfce5fca417864bf1b84a7b5cf873fd92909b33a77d955c49c5603b47c4b285896fcb8e"}}, {0x57, &(0x7f00000001c0)=@string={0x57, 0x3, "f909fe0e9cc19736c9adf9ffaf747a7a499dd92e624b5d13104f518d5552f5cab5614dd38b8f5edae91edc52aba1e523826cc8fb4872382678e47b17aaf2b045edc57ac4ff6c8efc401cfe04f224f60cb06e3755d9"}}, {0xb, &(0x7f0000000240)=@string={0xb, 0x3, "51c080a44a0d77d125"}}]}) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff, 0x34, 0x0, @val=@tracing={0x0, 0xffffffffffffff9d}}, 0x17) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff, 0x34, 0x0, @val=@tracing={0x0, 0xffffffffffffff9d}}, 0x17) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYRES16=r0], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='ntfs3\x00', 0x2208004, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) (async) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x1e, 0x61, 0xe4, 0x10, 0x13b1, 0x42, 0x7b55, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xcf, 0x28, 0xfc, 0x0, [], [{{0x9, 0x5, 0x1, 0x3, 0x40}}]}}]}}]}}, 0x0) (async) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x1e, 0x61, 0xe4, 0x10, 0x13b1, 0x42, 0x7b55, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xcf, 0x28, 0xfc, 0x0, [], [{{0x9, 0x5, 0x1, 0x3, 0x40}}]}}]}}]}}, 0x0) 3m3.061732269s ago: executing program 1 (id=519): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x20, 0x2c, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@nested={0xc, 0x16, 0x0, 0x1, [@typed={0x8, 0x72, 0x0, 0x0, @ipv4=@loopback}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4c01d}, 0x20000000) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r0) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r1, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x90) 3m1.101509044s ago: executing program 32 (id=519): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x20, 0x2c, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@nested={0xc, 0x16, 0x0, 0x1, [@typed={0x8, 0x72, 0x0, 0x0, @ipv4=@loopback}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4c01d}, 0x20000000) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r0) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r1, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x90) 2m0.154785132s ago: executing program 4 (id=691): r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0xfffffffffffffffe) 1m59.369292258s ago: executing program 4 (id=694): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000140)='./file1\x00', 0x8c0, &(0x7f0000000380)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c6572726f72733d72656d6f756e742d726f2c61636c2c00a9b504852143b698d2e379891a0dde7f9adfca8cbec85bf8e749e04e", @ANYRES32=0x0], 0x11, 0x4459, &(0x7f0000008900)="$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") mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r0 = open(&(0x7f0000000100)='./file1\x00', 0x109042, 0x88) fallocate(r0, 0x10, 0x700001f, 0x7000000) 1m57.854181091s ago: executing program 4 (id=699): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) unshare(0x22020600) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)={0x20, 0x12, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x142, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}]}, 0x20}], 0x1}, 0x0) connect$unix(r1, 0x0, 0x0) r3 = socket(0x1e, 0x800, 0x1) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x1c) listen(r3, 0x0) r4 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c) r5 = accept4$nfc_llcp(r3, 0x0, 0x0, 0x0) sendmsg$tipc(r4, &(0x7f0000000640)={&(0x7f0000000300), 0x10, &(0x7f0000000500)=[{&(0x7f0000000340)='Z', 0x1}], 0x1}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3c}}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @loopback}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r7, 0x84, 0x65, &(0x7f0000000040)=[@in6={0xa, 0x4e20, 0x2, @private2, 0xffffff81}], 0x1c) dup2(r6, r5) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r8, 0x1, &(0x7f0000000280)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) sendto$inet6(r0, &(0x7f00000001c0)="7611cdbc01f09d79718bb4ae051218d26a1c2ff0b9584575ba3e1c2041efc7818287852062fcf62edf72329af067484e8592faaac6f3718f94addcec559682bd6c9ecd34b3f849a254309887686fb87f03da3ff4b8b4fd9051327f85ae868c2621993afb092853f5effe189e1849e87c8db670d59d0a3c0adc3e56f5a926de632873029764ffe3eff75e55201a5d578b04db068b9940910f0785669950300db5aea78a9f2ba79498159fc2ce05a1c72549d36788958add08", 0xb8, 0x6041605, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1m54.964075122s ago: executing program 4 (id=704): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x4000, &(0x7f0000000400)=ANY=[], 0x6, 0xc3c, &(0x7f0000000e00)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x800, 0x0, 0x0, 0x0, &(0x7f0000000180)) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f0000000000)={0x0, 0x5c, &(0x7f0000000200)={&(0x7f0000000080)={0x50, r2, 0x852dd6c070cd7e4d, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x2}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}]}, 0x50}, 0x4, 0x700000002000000, 0x0, 0x10}, 0x0) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)={0x50, r2, 0x95e4c6af43b44057, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_CHANNEL={0x5}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x4}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x2}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x6}]}, 0x50}}, 0x40000) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000001100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}], [], 0x2c}) 1m53.568445135s ago: executing program 4 (id=708): r0 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x2810800, &(0x7f0000000680)={[{@shortname_win95}, {@shortname_winnt}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'cp862'}}, {@fat=@codepage={'codepage', 0x3d, '1250'}}, {@rodir}, {@shortname_winnt}, {@utf8no}, {@numtail}, {@shortname_winnt}, {@uni_xlateno}, {@utf8no}, {@rodir}, {@uni_xlate}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@utf8no}]}, 0x25, 0x336, &(0x7f0000000100)="$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") r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = socket(0x840000000002, 0x3, 0xff) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0x7f, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x2}, 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000480), &(0x7f0000000600)}, 0x20) r6 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000980)={'tunl0\x00', &(0x7f0000000900)={'tunl0\x00', 0x0, 0x20, 0x20, 0x5, 0x10, {{0x10, 0x4, 0x1, 0x4, 0x40, 0x66, 0x0, 0xe, 0x4, 0x0, @private=0xa010101, @empty, {[@timestamp_prespec={0x44, 0x2c, 0xe5, 0x3, 0x8, [{@remote, 0x1}, {@multicast2, 0x1}, {@local, 0x5}, {@multicast1, 0x9}, {@broadcast, 0x4}]}]}}}}}) r8 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa300000000000007030000f1feffff720a03fef8ffffff71a400fe0000000071101000000000001d300200000000004704000001ed00d20f030000000000001d440000000000006b0a00fe0000000072030000000a0000b500f9ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616276fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a26048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdec86f9b1eb93d491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f806694d461b76a58d88cf0f520310a1e80dc18cde9ad662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a090f3b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) fsconfig$FSCONFIG_SET_BINARY(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x0) r10 = openat$cgroup_subtree(r9, &(0x7f0000000100), 0x2, 0x0) r11 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c80)=@bpf_ext={0x1c, 0x19, &(0x7f0000000b40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x2dc}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000}}, @generic={0x2, 0x0, 0x5, 0x4, 0x6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000a80)='GPL\x00', 0xfffffc00, 0x1000, &(0x7f0000001f80)=""/4096, 0x88baa9632f0fed3d, 0x30, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000ac0)={0x2, 0xc, 0x6410, 0x8}, 0x10, 0xeb, 0xffffffffffffffff, 0x0, &(0x7f0000000c40)=[0xffffffffffffffff], 0x0, 0x10, 0x8000}, 0x94) r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000d40)={0xffffffffffffffff, 0x5, 0x8}, 0xc) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="7e09003b7a9c4c9dbf8cf8440000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="030000000400"/28], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000e80)={{0x1, 0xffffffffffffffff}, &(0x7f0000000e00), &(0x7f0000000e40)='%pI4 \x00'}, 0x20) setsockopt$sock_timeval(r2, 0x1, 0x43, &(0x7f0000000f40), 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000002f80)={0x16, 0x1b, &(0x7f0000000780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@alu={0x4, 0x1, 0x6, 0x4, 0x5, 0xfffffffffffffffc}, @map_val={0x18, 0x7, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x6}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000880)='syzkaller\x00', 0x6, 0x8, &(0x7f00000008c0)=""/8, 0x41100, 0xc, '\x00', r7, @flow_dissector, r9, 0x8, &(0x7f00000009c0)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000a00)={0x2, 0xb, 0xff, 0xfa7f4f5}, 0x10, 0x0, r11, 0x2, &(0x7f0000000ec0)=[r12, r13, r14], &(0x7f0000000f00)=[{0x4, 0x3, 0xd, 0x4}, {0x1, 0x1, 0x2, 0x8}], 0x10, 0x3}, 0x94) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) sendmmsg$inet(r2, &(0x7f0000000a40)=[{{&(0x7f0000000180)={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000b00)="933698590830bfbddf4a4f8972ad60ce054bb806", 0x14}], 0x1}}], 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003040)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r12, 0xd000943d, &(0x7f0000003240)={0xb1f6acc, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x5, "33b6efdfcb516f"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r10, 0xd000943e, &(0x7f0000004240)={r15, r16, "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", "6e991d1e6885c81d2eb0edef74c5687ca0e97049084ef3b9b93b609561f6c8e63dc5ed694b2b606191d1c885647694f3788f3caced35e6c4fc9dbafbb55dac70f12d826e9334e621956e9a5f1876fb26954c72d769d90d9c835c7f27ce3d2b33b270d7bf7ae7116b3334e3f9f93211840897ffa0ce863cac67d5e2cd7ea28a0fddcf06d443fe9e018479968617ff0f46fac759b0c2dcbe3dd1744275665a24cd827c9492e6c9c53142466d16ba5dc8404aaea8b7ef94f3bbdec6b5a31bbc64c11fdcdb98849efd7ff0408df41a410e86b7627370fafbc4afffce2668221c3fa7c82766f98ed8b546679d0916c5888943fc6178a0093fcb82ddb162f24664307c928414890d440d96b4f56438eb67e0f1b30cc66db2bfd5ff949231bcf6adfd23afef33fc7b528d12d53df17cd6b15810ad6393ca9691ee54f7a62b773835168e8d40396c0f6a4839d90c21a203046152e625e4724d5f8655ac8600289021ebcebef99c8a072a17db4e892dd612c451acf161505fe1801a8da2c712d189f2c217c387d1156abfa324408dc5d5c072567728639de8e82fc44504337efc2a0a6f48cc96e85a08716a6619aaf1e692429f33b7a6b635a97cec1575678eaf4a5def93bd41dd99247fa36b84a7fe7add676382a1e17fd73d9b5b08645f67c6169aab22cf632a8266aec9fadbd9899622ecc1711453de61016e9a04e2c80b707cd5beea5b46baa87e924b143bde443777dc3ad8a7906eeb39783604a292550d8805868cf363f39963048d0aa241df2cc6903eb23850c26ec63b865a5ac8c374264c2b3b9e27166290cfece421faadeb1986538c3d49e79f36906fd072b0e9b28a6a7ad0eb04434cf7157cb505997674eef99e8cb82f43a4d8fae4d117ae1f8eccdbab8f71decb9c8a42e1ac5f6b4d77481ee53aa7ff33bf4b50849fc2fb887a326de248a5abd2311cce515ab49e929673253105953f6d5233160eedc298d1c024be7652a38e66301cbbe81f49586088e15be2f82abde2ac1f612c0a4166757c1c68764051a7b5c3d5db9ce081fae67fc625e1a5ea2814ed5f24eb9a6f1e4ff0f147b943eea9e5c42bc69fdc4b4fdec5ce4516089803feaa3d714e2adaf08260f3dc9d5ab48329f38937f827442f876f4e968c3dee67d3ed9527b38cd8c9a90249063706d99e4950477b81eef763df89fdaf8f279c16c720a15b51c99683ecf4504902e61052d3f5e3442624c5d7e8d4196b5c2edcb171f60ccc15114737556d22ec1d4e7beb2bbef7650dba0f092af53f25ec58f205a9622d7896d9538ae286ac5eac737be16b432a938a5dace39e8c7f94bfc86d891d1f90a324fde0b4c722b85ef3f0fe32c9747d4bf25c77f06ee484756b67b3f4ee47b137498be75c2aea7aa473a57ffcd24d6cc3856d98063c35ef73df9fa4ef8f9df29a20a01300f7108a356eae3cd2821c5ec98b05446104e132917a71e9a4de8f4117db1543d9fe2923bdd8d349769d222ae0ddd3d2d96b5fc7565e3e3b345a668ee53f5c86acf69e0afab95ba119e93a9c5e228e66625fcbef0a774c5ab8004bbee18063b703d35b5fbb9aea6d57bf46b2ed708da8dabb64d08b22aa767f3e0c6e1a48c9b71ae471da9ff74f91cf4bd5fa99d7b75227631cfd609e559e3e5af1f97ec06782d27e50426b608a7f096739311a5db8d30176fb0cffeaeabd6381a1d49a63fc0d959629f7f965abcdb1d615350d582a965729b51c57ebac1f41d6a26f611c0a0a967e3bbf2f05dc467f90788992e4a8f635d373095fde1ba4b3bc1e9ef063476921816ea3d2bb844a7620ac6c43f4d43fa6966a36bb3a03eda924b5336db74e9d162128a0a9e31e004fd4fb4a2937256ea461df8505b503902c22bd8357eb1e39475687c73e96b0e5f0f730422ac5c0576c2cbcc3ec9fa383b506485f88f992acb5525112a94e65f63f7c2b115ebecbb396c9a2a075c333ee6b02fcb800174b7d2a3aae406ee5d72ea072c84366418df93f8a330866dde6b765bde0fdae25af80fb2aad22356778f4e88fa16d7b6db8ca615b7b00d192fca04729089483e4f33cc0f5c7450fe6fb3d905865e5fabe29d4f66aaf945327415d3ea7e2e24a1ea061ecc44ca139a566974affce087c1c2b13358cbe60ab88f8e1efe1bef1206c3733d9bc7fd2b5d35afc0ff7e6b1284d102b07ad0003629b290e6895b1509041d58906c84fc92aac3935b61ea20026c92e3e0cfaa59e0b109713ee97853394b41f81988fdc83f8aa35ff63798e8109c58325767d45fba7dd3b9f758eeaca62cbd8c04e7db7f2319adc7606d26511ea8d3ef3b19784e28d1a3809d5cebd43ed7301a5b1bfec6078490da98c8e2ddc96d4e924e88a02059fac210b880600ad82c3c739efdd952dc1c17fffa09f5a3e1f3d8c11e0c719b79a82c130f4334e83eede25bb9ebdba379bbc0054608edbf504108ccef724c65267b95d7a7b9cc77f2ec47643b868444f8ca3b911a814a27bb90271c8c509c1ad408e43a5f23bf94cc8e49efe9286ce29c0350801492813d84fd93f38a9d5c97fbca090bd7db1cb8015255ba6c130a4fa680d68dae47dcbbfa8bad82cb3bce5a6b4d6cb7a0c598e031d30d4c5bc48b9d5a3e85716a3672118173cab55550b983c62134fe9bc82177fe5502ea4a6e42018b72b28b1c021fa2ebe370b7e57b9b3732d3588869abc06d2c9382b5414d9372ec5ab1a88ded019e77a12e1a6079144f1157cd939cc491184c8b40e307b7052409c4f921103b9492b72431b3465aca082cd64453406e9ffe238b2ea416432dac206007801ac1f45ac41ba92bb84415d2ffaceab6c565c46dc0d508db709a66434383ee7fdec44e02ec0bbbdb5ceec70aa2d725a1fcf881151a168826cf2722cf714b8832c3493a974ba81af00590e87a0bcbdd6502a52bd96bc4315ff2e711ad865b7dd2116e396c63f3ef9511071c5f822aa6aa782c65f16de491bc5f0ff5e1e4c1b6e1579db610b20484409517aa8655e9cca46f8625841844f708511d5dd4e0fbd105fe0a33340ccf57c3552a7e882b3e039904772718a6f93c11147a782dd1f666b3fa43dbc2c9cf876384eba78433e5cbe091f6304ae9b9a947a36e3153d9c4b7b3db35bcb1a4a4bda84adc16bf91dd7ef089fed83abf64b0469b11c9ed21ca9da4c076bfbe96f76a59bd8e91467dd3e0a4dd06a623220435f447b71a1d679087838fa8339dcb0f67576410bab04e1594a7004edf163f188f4ac92641a316cac72fabf29c7308e2d7a63340c2ac679d6e9775f82179753df3d4ebd1445225dbc1136de0548c2a648110d24f4c48291c33259bddd62c48ab581b2ba55c1519bdcbc13bb244218184f12e1ceb2ac9ead8fc0605172282aefbe47d68f1fa4699a679d136f0b3aa81ac3871a5bda549aeea07a8e10ab244865289b3d66f7a150901bbb1e0d12311a4548bf74cd2d4d37b3eae178983241da5c70bd338008901c2b96736270407c1ceb47efe986ce1f7851ec3438bfcbdab06b78f08069ced923254588b029991b41e302ca5c236490cc08a52f75080d3dc4219acaba751017da13f7c6e81eea51dd4402ea66d6c063b752524244820c080191be27f0e7944b4753746b4d294d1863a70cbc5a5833e6e796b2e178e3be0bffe2786fdf950ecf30c6f2d79697a42e5951e59ac28f1b4440f10828689224e2551234ff1bb38829fcc079c01e9d9e0b227f476b509f2a00eec4f5fb8b9bcc75e3819bbc0553faa9c15730bcf4f4fbe6e2ab9fbfa0e417bf602771b7c7662ca1f6eb30c3b68b75b3ba52ccc19171a67163865f7aabaf2cefc3fbfbc33de46c280f64610db0732c4b9a5321ff5a53f93d6122a0790eae286defb8f6dc6cc4c882006b5bcc00be631d2e35624b14dbf30ba7a5e7ae422751518d035fd5cf229b248bd5a4131203a642af3373e4d4b2c539dabc98d21974ed545637d200e54c2398ed77d87c2049ebfeff02ce90f59f4d26524d6b42d5b1528e691e437c0a3badf90fafab766d77f706039171fee8e3dea77b75881448c8a975ac6ed13fa700fad74f9cb129163330f1bd48694123eccc00934b87aa41265e8c0b550be9c40c8e01fdab74f4fdb4b95c6d9b36f0bab562fd0411fcfef0117dc0239741a81b770b923ac1e8ed7cb52a391c1d39a795cdaeee483ffd3de7ab4ff8447e84257f6fd46bfc1908113401707d8a9fb70e7e622685415f7642db6220caf92a148251cd7b232d206977092d5292085655094b77ff719cc4f37528db13fe0bcfb0f05bbfff3b71cf40241439c8a2e2a9be7de3e253b669d39518e13f51ddf59914eb7c07f39f964a79cb5222050980ecab347126c83f833466c203ee68644fec360650c17afd91ca3debaba38b76b3afa7f3a6a457eedc11790899d207c40ea8c1e706f621a3c91540428959df8489a435b95e9252d81b528617ffd696e844108aaec32ff4cd9251737791d572a5e07fc159131225f2a80a67ce4d319ba0f21f7caed478c162e07d80db93fee1ad87166fd73fc0a664e41f5caa7d98fa6a2b2546a13abab003017c3f18f070d44cb9be3ea3c21d7af7ea438559b05e015e41809a43aa4bd80a06dc1b7b95d50ce1222ae609764cb45dcfccdf0a5c20edb3b9790d1d6f7819f65ccc88aa019e8ece50d7914262023163c2d049ecd340298c9ddd6cfc62500a631bcae1458c0d8beb3117996e3f764455c236c3877a7b8ff4c276c817f93aa8c8abde016780660b979ab1374be243cd21a379798013fdf418791385761642c9e2c481258c0b3f14b6f7828c9599cb2ffb5f61e85ab777ad35bb5ba51b05812a3f4ff4cea661ebd496ea13a1804e1056471afd944829e463dbc424fccc94c00b34a25481d54545379e31641e6591b3203cd86991c9a33d748d1c585617d73a97f501954973ddae8ab8b29466698d06ba434f8826813e4efde0a2c4a803af511f78a25f37830d69ba6efa787055f90d49dc1c02da0c8d1296307963d2018082dfee1fb7ba5cc0865a09d0f221a3eb1e676135590a6f555196d34cd5fd11b1366d2d7dcbe27dee44beb32b54eceb5e89d54cc3910cbca8add88415459aeb3cba9a72752caeccb5cc0e984a1880148ff8ab458d9e542942946517674ba2920be27f3ff0e39d8dbadc9fd6c2389068586af932b6599a07cb5d1d0a500b6d099c8d6bc545d92d3b7cbc812d2166901641cdc0ad74b6b6d195ca5024822119f141c80ee71257e940ecb55a178a6b18a370ecafe8461b5c1aa74c094546f24b245bb356e95219ab1b2282c1fe315112b4a92a12b34788ad494a7496cec83c43299982d34c95c200b857b1f4de60631dbc15d444c782092d85b4a80aad8e762645ceba6f2a599dde6e0b6fc01e47e83b12c226e6c30e7c6237f4bbf0852f16945c"}) symlinkat(&(0x7f0000000080)='./file0\x00', r0, &(0x7f0000000440)='./file0\x00') process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x4, 0xfdff) 1m52.429533695s ago: executing program 4 (id=711): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet(0x2, 0x3, 0xd) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x9007}, 0x4) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x5}, 0x4) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0x80, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_tunnel_key={0x68, 0x1, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xd, @rand_addr=0x64010100}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast2}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r5, @ANYBLOB="08002700851600000a00180000000000000000001c005a"], 0x4c}}, 0x4000804) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f00000000c0)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r7, 0x3ba0, &(0x7f0000000180)={0x48, 0xa, r8, 0x0, r9}) 1m49.584482107s ago: executing program 33 (id=711): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet(0x2, 0x3, 0xd) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x9007}, 0x4) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x5}, 0x4) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0x80, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_tunnel_key={0x68, 0x1, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xd, @rand_addr=0x64010100}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast2}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r5, @ANYBLOB="08002700851600000a00180000000000000000001c005a"], 0x4c}}, 0x4000804) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f00000000c0)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r7, 0x3ba0, &(0x7f0000000180)={0x48, 0xa, r8, 0x0, r9}) 1m19.920728404s ago: executing program 2 (id=788): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYBLOB="fea8"], 0x48}}, 0x0) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000280)='./bus\x00', 0x2000898, &(0x7f0000000400)={[{@barrier}, {@skip_balance}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@compress_force_algo={'compress-force', 0x3d, 'zstd'}}, {@noflushoncommit}, {@usebackuproot}, {@max_inline={'max_inline', 0x3d, [0x34, 0x37, 0x74, 0x6d]}}, {@thread_pool={'thread_pool', 0x3d, 0x6}}, {@ssd_spread}]}, 0x1, 0x55ae, &(0x7f0000005600)="$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") r2 = socket$kcm(0x10, 0x2, 0x0) setrlimit(0xd, &(0x7f0000000000)={0x9, 0xb}) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001c40)="d80000001c0081064e81f782db44b9040a1d08041100000000020aa1180002000600142603600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516", 0x5d}, {&(0x7f0000001d00)="0092e9a7e64c32c40a81fa0f64bd9906f29b6a0aa0e850e7eb26dd111c83b33cf6f3f5bfdf52e23faac8580b58c35613a51fec2e1500747c8a72eb20d3d6b9e4e75d266a5440ad6fa037d9055e6a4a6760575b9459419cfc252cb04e3a624aaaa02bf155303808bcb8ec989fd7db312bb9807d1efe0dab699418e3", 0x7b}], 0x2, 0x0, 0x0, 0x7400}, 0x40000) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file2\x00', 0xc0202, 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000008c0), 0xfecc) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) ftruncate(0xffffffffffffffff, 0xc17a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file3\x00', 0x8c0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x1, 0x442a, &(0x7f0000008940)="$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") listen(0xffffffffffffffff, 0x1000) r4 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) socketpair(0x1, 0x100000005, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r6, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0xa00, 0x640, 0x1, 0x2800, 0xd59f83, 0x19f2, 0x3f, 0x19ef, 0x3, 0x3, 0x27fc, 0x2800, 0x2, 0xba3, 0x2, 0x38, {0x8, 0xffffffff}, 0xd0, 0x9}}) pwrite64(r5, &(0x7f0000000140)='3', 0x1, 0xfeca) readv(r4, &(0x7f0000000180)=[{&(0x7f0000000a00)=""/4096, 0x1000}, {0x0, 0xf1}], 0x2) 1m15.47331985s ago: executing program 2 (id=800): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc50c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x10}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB='@\n\a'], 0x0, 0x0, 0x0, 0x0}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$poke(0x21, r1, 0x0, 0x0) 1m9.756048233s ago: executing program 2 (id=819): r0 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) close(0xffffffffffffffff) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f0000000001000000000000", 0x1c) 1m5.39506939s ago: executing program 2 (id=822): syz_io_uring_setup(0xa86, &(0x7f0000000200)={0x0, 0x4661, 0x80, 0x5, 0x345}, &(0x7f0000000b40), &(0x7f0000000b80)) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000300)='./file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) 1m3.173090907s ago: executing program 2 (id=826): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)={0x20, r1, 0x801, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x24008000}, 0x8000) 1m2.403218195s ago: executing program 2 (id=830): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x800000000004) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0) writev(r3, &(0x7f0000000840)=[{0x0}], 0x1) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x3, 0x8, 0x2, 0xb}, 0x0, &(0x7f0000000280)={0x3ff, 0x0, 0x0, 0x400d, 0x0, 0x9, 0x466}, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) semtimedop(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) r5 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) write$binfmt_format(r5, &(0x7f0000000100)='-1\x00', 0x2) listen(r4, 0x0) sendmmsg$inet6(r4, 0x0, 0x0, 0x10) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) 58.453029755s ago: executing program 34 (id=830): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x800000000004) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0) writev(r3, &(0x7f0000000840)=[{0x0}], 0x1) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x3, 0x8, 0x2, 0xb}, 0x0, &(0x7f0000000280)={0x3ff, 0x0, 0x0, 0x400d, 0x0, 0x9, 0x466}, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) semtimedop(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) r5 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) write$binfmt_format(r5, &(0x7f0000000100)='-1\x00', 0x2) listen(r4, 0x0) sendmmsg$inet6(r4, 0x0, 0x0, 0x10) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) 51.097357381s ago: executing program 0 (id=845): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000", @ANYBLOB], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='pids.current\x00', 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r3, &(0x7f00000002c0)=ANY=[], 0x138) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f0000000480)={'filter\x00', 0xb001, 0x2, 0x3c8, 0x0, 0x1f8, 0x1f8, 0x2e0, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @dev={0xac, 0x14, 0x14, 0x21}, @dev={0xac, 0x14, 0x14, 0x15}, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) request_key(0x0, 0x0, 0x0, 0xffffffffffffffff) 44.159470651s ago: executing program 0 (id=849): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue0\x00', 0x200000}) bind$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mq_notify(0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x14) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x2, 0x2, 0x44, 0x0, 0xd}) 38.145496416s ago: executing program 0 (id=852): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) preadv(r0, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000180)=""/64, 0x40}], 0x2, 0x0, 0xb) 37.513695017s ago: executing program 0 (id=856): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, &(0x7f0000000240)=""/165, 0x0, 0xa5, 0x1, 0x3}, 0x28) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380), 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xa0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xe, 0xa, &(0x7f0000000040)=@raw=[@cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffffa}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}], 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_skb=0x5, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x0, 0x2, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x2, 0x6c}, 0x0, @in=@empty, 0x0, 0x5, 0x0, 0xb7}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x60) syz_io_uring_submit(0x0, 0x0, 0x0) r3 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x59c4, 0x8, 0x1000, 0x5cc}, 0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x0, 0x0}, 0x10) io_uring_enter(r3, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) setsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f0000000000), 0x4) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) 24.753574944s ago: executing program 0 (id=869): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0xca000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000880)={"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"}) 23.960397252s ago: executing program 0 (id=871): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), 0x4, r5}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000500)={0x200, 0x1, &(0x7f0000000180)=[r8], &(0x7f0000000200), &(0x7f0000000580)=[r7], &(0x7f0000000040)}) 22.649142545s ago: executing program 5 (id=873): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000340)={0xd, 0x200200090}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4, 0x0, 0x8}, 0x18) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r6 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r7 = add_key$keyring(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r6, 0xffffffffffffffff, r7, 0x0) r8 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r8, 0x84, 0x81, &(0x7f0000000080)=""/4074, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port1\x00', 0xe3, 0x1b1c27, 0x0, 0x1, 0x0, 0x0, 0x5}) r9 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r10 = dup3(r0, r9, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000100)={@link_local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00@\x00', 0x18, 0x3a, 0xff, @private0, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0xfc, '\x00', @dev}}}}}}, 0x0) pwritev2(r5, &(0x7f0000001700)=[{&(0x7f0000000580)="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", 0xec0}, {&(0x7f0000000480)}, {&(0x7f0000001580)="532c33c67bc50f8647a03745393e7cfe0d49186f21144d1cf50919b561e23b99723297d6f13904a1c46dc786ec830210e00ca35eb6a4d885e02fc5d3390dea602c233303a893f52ff5ca42538f29f9c7ec0c433e2aa54b0dbcf7cdd52f45c5ba4d902c9a2254c660ecaf77df39bd3356a6190cb8cd0b228b049f", 0x7a}, {&(0x7f0000000140)="f7da2908ba098883640696de8ff3a9482cfa9436", 0x14}, {&(0x7f0000001640)="430580773258e556370a921c2aa165c05541482b863835567a97108a93a4d24b2bbbb4600c15cfb9a3f61cc5e1514ad9f2699b2d3b949149653dab0e0859c70f34f20527499574c943df9ffe9cd149ebbbac42a1693acfb97ee82bd5a2892be59c779921a311912f0fb2bef51ca84882366ebba4d6201126c3dc8b43406f8f3fc82744916089d13dc65d2336c8d728fe7937", 0x92}], 0x5, 0x2, 0x98, 0x12) read$FUSE(r10, &(0x7f0000006240)={0x2020}, 0x2020) socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_open_procfs(0x0, &(0x7f0000000380)='net/wireless\x00') preadv(r11, 0x0, 0x0, 0x4, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 19.875589988s ago: executing program 3 (id=877): r0 = fsopen(0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x208, 0x1ffe0000000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, 0x0, &(0x7f0000000040)='xfs\x00', 0x808c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r4 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000140)={0x100, r5}, 0x0) landlock_restrict_self(r4, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) 19.706828326s ago: executing program 5 (id=878): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYRES8, @ANYRES64, @ANYBLOB="44a837b4012918a47d0187", @ANYRES16, @ANYRESOCT=r0], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x0, &(0x7f0000000100)}) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="5245434c45560a50484f4e454f55540a535045414b455220274344272030303030303030303030303030303030303030300a4449474954414c32202706b86e65204361707455726527203030303030303430303030"], 0xb8) sched_getparam(r1, &(0x7f0000000540)) r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/asound/card1/oss_mixer\x00', 0x0, 0x0) dup3(r5, r4, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) writev(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x437, 0x2, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_PER_PORT={0x5, 0x2d, 0x3}]}}}]}, 0x3c}}, 0x0) 16.569759386s ago: executing program 5 (id=879): socket(0x10, 0x803, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_setup(0x9, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x40, @private1={0xfc, 0x1, '\x00', 0xa}, 0xae3e}, 0x1c) rename(0x0, &(0x7f0000000100)='./file0\x00') sendmmsg$inet6(r2, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e1f, 0x3, 'lc\x00', 0x4, 0x81, 0x5}, {@rand_addr=0x64010102, 0x4e26, 0x1, 0xcb, 0x12d5c, 0x12d5c}}, 0x44) 16.501818327s ago: executing program 6 (id=880): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_connect(0x1, 0x2d, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20048010, 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r1, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) ioctl$KVM_GET_MP_STATE(0xffffffffffffffff, 0x8004ae98, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040)=0x2) 13.27144297s ago: executing program 6 (id=881): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = syz_io_uring_setup(0x4ed, &(0x7f0000000140)={0x0, 0xfec9, 0x0, 0x0, 0x20024c}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0xdb4, 0xd070, 0x0, 0x0, 0x0) 12.617522452s ago: executing program 6 (id=882): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) timer_create(0x3, &(0x7f0000000100)={0x0, 0x2e, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000140)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_open_dev$sndpcmc(&(0x7f0000000d00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r1, 0x4122, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_mptcp(0xa, 0x1, 0x106) close_range(r0, 0xffffffffffffffff, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x2c, 0x0, 0x6a98047402e98331, 0x1000000, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x4886) socket$packet(0x11, 0x2, 0x300) r5 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r5, &(0x7f0000000180), 0x10) 11.91055764s ago: executing program 3 (id=883): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x400004, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6821, 0x8}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x4}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x50}}, 0x8000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prlimit64(0x0, 0x9, &(0x7f0000000000)={0xfffffffffffffffb, 0xfffffffffffffffb}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x2c, r4, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_PAGE={0x5}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0xb}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x40044) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r3) 9.794216851s ago: executing program 5 (id=884): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x208, 0x1ffe0000000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) 9.721686001s ago: executing program 6 (id=885): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x0, 0x0}) r4 = openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x2002, 0x0) write$proc_mixer(r4, 0x0, 0xb8) sched_getparam(r1, &(0x7f0000000540)) r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/asound/card1/oss_mixer\x00', 0x0, 0x0) dup3(r5, r4, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r6, 0x0, 0x0) connect$inet(r6, 0x0, 0x0) writev(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x437, 0x2, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_PER_PORT={0x5, 0x2d, 0x3}]}}}]}, 0x3c}}, 0x0) 5.365893197s ago: executing program 35 (id=871): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), 0x4, r5}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000500)={0x200, 0x1, &(0x7f0000000180)=[r8], &(0x7f0000000200), &(0x7f0000000580)=[r7], &(0x7f0000000040)}) 5.298521364s ago: executing program 5 (id=887): r0 = syz_mount_image$btrfs(&(0x7f00000051c0), &(0x7f0000005200)='./file0\x00', 0x1204408, &(0x7f00000000c0)={[{@compress_force}, {@clear_cache}, {@nodatasum}, {@compress}, {}, {@space_cache_v1}]}, 0x0, 0x51ab, &(0x7f000000a440)="$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") ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000001c80)={0x2, 0x0, {0x0, @usage=0x1, 0x0, 0x1, 0x8, 0x7, 0x800, 0x335, 0x18, @usage=0xfffffffffffffffb, 0x5, 0x8000, [0x3, 0x2, 0x0, 0x8, 0xe, 0x8]}, {0x2, @struct={0x9, 0x2}, 0x0, 0x3, 0x0, 0x3e, 0x10000, 0x1ff, 0x0, @struct={0x1000, 0x7}, 0x8, 0x3ff, [0xffffffffffffffff, 0x4b04, 0x4, 0x6f, 0xb704, 0x9]}, {0x0, @struct={0x0, 0x1ff}, 0x0, 0x1ff, 0xffffffff, 0x9, 0x6, 0x0, 0x420, @usage=0x2, 0x3ff, 0x2, [0x7, 0x400000000000008, 0xeb8, 0x2, 0x5dfb, 0xbc63]}, {0xbd3, 0x9, 0x40020000001}}) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x1) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./bus\x00', 0x141842, 0x12b) mount$bind(0x0, 0x0, 0x0, 0x891018, 0x0) 5.209151578s ago: executing program 3 (id=888): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f0000000040)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x0, 0x0}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) ioctl$DMA_BUF_SET_NAME_A(0xffffffffffffffff, 0x40086203, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r5, r4, &(0x7f0000002080)=0x64, 0x23b) 2.893874156s ago: executing program 3 (id=889): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) fanotify_init(0x200, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x102, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000280)={0x79, 0x0, 0xbf0}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0xc4fc27d37f13a39, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f0000000340)=0x4, 0x12) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'vlan0\x00', 0x800004}, 0x18) 2.453352499s ago: executing program 6 (id=890): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) 1.830926864s ago: executing program 3 (id=891): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f0000000280)={0x10001, {{0x2, 0x4e24, @multicast1}}, {{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}}}, 0x108) 1.617835984s ago: executing program 5 (id=892): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) r1 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x3, {0x7ffe, 0x1000, 0x4, 0x2}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x18000, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, 0x0) r7 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) pselect6(0x40, &(0x7f0000000400), &(0x7f0000000000)={0x1f}, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_SELECTION(r7, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x3, {0x8000, 0x1000, 0x4, 0x2}}) 1.005785754s ago: executing program 3 (id=893): syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f0000000080)='./file1\x00', 0x220c480, &(0x7f0000000000)=ANY=[], 0x1, 0x27f, &(0x7f0000000940)="$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") truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x641, 0x1c3) truncate(&(0x7f0000000040)='./file2\x00', 0x80003) write$P9_RREADLINK(r0, &(0x7f0000000000)={0x10, 0x17, 0x1, {0x7, './file2'}}, 0x10) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000000)=0x10000) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000080)=0x2) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r1, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, &(0x7f0000000040)) 0s ago: executing program 6 (id=894): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x40400, 0x0) ioctl$TCSETS2(r3, 0x402c542b, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000001840)=0xf) kernel console output (not intermixed with test programs): 67295 subj=unconfined pid=7984 comm="syz.4.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e9178e929 code=0x7ffc0000 [ 528.639740][ T6723] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 528.669698][ T3658] hsr_slave_0: left promiscuous mode [ 528.674341][ T6723] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 528.687002][ T6723] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 528.723048][ T7986] XFS (loop2): Ending clean mount [ 528.743637][ T7986] XFS (loop2): Quotacheck needed: Please wait. [ 528.760681][ T3658] hsr_slave_1: left promiscuous mode [ 528.769500][ T3658] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 528.777256][ T3658] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 528.805388][ T30] audit: type=1326 audit(1751057610.434:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7984 comm="syz.4.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=74 compat=0 ip=0x7f9e9178e929 code=0x7ffc0000 [ 528.832462][ T30] audit: type=1326 audit(1751057610.434:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7984 comm="syz.4.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e9178e929 code=0x7ffc0000 [ 528.848609][ T7985] EXT4-fs error (device loop4): ext4_lookup:1787: inode #15: comm syz.4.526: iget: bad extended attribute block 8388352 [ 528.856800][ T30] audit: type=1326 audit(1751057610.524:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7984 comm="syz.4.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9e9178e929 code=0x7ffc0000 [ 528.890685][ T30] audit: type=1326 audit(1751057610.524:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7984 comm="syz.4.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e9178e929 code=0x7ffc0000 [ 528.915281][ T7986] XFS (loop2): Quotacheck: Done. [ 528.927630][ T30] audit: type=1326 audit(1751057610.564:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7984 comm="syz.4.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9e9178e929 code=0x7ffc0000 [ 528.972065][ T3658] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 528.980084][ T3658] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 529.016508][ T7985] EXT4-fs (loop4): Remounting filesystem read-only [ 529.029303][ T8002] loop3: detected capacity change from 0 to 512 [ 529.047477][ T30] audit: type=1326 audit(1751057610.774:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7984 comm="syz.4.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e9178e929 code=0x7ffc0000 [ 529.070480][ T30] audit: type=1326 audit(1751057610.774:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7984 comm="syz.4.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e9178e929 code=0x7ffc0000 [ 529.104788][ T8002] EXT4-fs warning (device loop3): ext4_multi_mount_protect:292: Invalid MMP block in superblock [ 529.147528][ T3658] veth1_macvtap: left promiscuous mode [ 529.147694][ T8003] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 529.154276][ T3658] veth0_macvtap: left promiscuous mode [ 529.154628][ T3658] veth1_vlan: left promiscuous mode [ 529.154885][ T3658] veth0_vlan: left promiscuous mode [ 529.279235][ T5795] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 529.704065][ T5793] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 530.324954][ T3658] team0 (unregistering): Port device team_slave_1 removed [ 530.405469][ T3658] team0 (unregistering): Port device team_slave_0 removed [ 531.070448][ T6723] Bluetooth: hci4: command tx timeout [ 531.241024][ T5851] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 531.286389][ T8018] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gre0, syncid = 3, id = 0 [ 531.419139][ T5851] usb 5-1: Using ep0 maxpacket: 8 [ 531.500015][ T5851] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 531.509706][ T5851] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.518035][ T5851] usb 5-1: Product: syz [ 531.522651][ T5851] usb 5-1: Manufacturer: syz [ 531.527527][ T5851] usb 5-1: SerialNumber: syz [ 531.694521][ T5851] usb 5-1: config 0 descriptor?? [ 531.839105][ T7998] chnl_net:caif_netlink_parms(): no params data found [ 531.911945][ T8012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 532.000498][ T8012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 532.035029][ T8012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 532.044787][ T8012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 532.055073][ T8021] loop3: detected capacity change from 0 to 2048 [ 532.093799][ T8021] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 96: 0x25 != 0x13 [ 532.105957][ T8021] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 532.145039][ T8012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 532.155438][ T8012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 532.168522][ T8021] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 532.193101][ T8012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 532.203496][ T8012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 532.292383][ T8012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 532.303774][ T8012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 532.529151][ T5851] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 532.628614][ T8021] 9pnet_fd: Insufficient options for proto=fd [ 532.805227][ T5851] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 532.825417][ T8035] loop0: detected capacity change from 0 to 16 [ 532.857323][ T5851] usb 5-1: USB disconnect, device number 9 [ 532.886272][ T8035] erofs (device loop0): mounted with root inode @ nid 36. [ 532.965327][ T8035] erofs (device loop0): big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 532.977465][ T8035] erofs (device loop0): big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 532.988450][ T8035] erofs (device loop0): read error -117 @ 72 of nid 36 [ 533.149958][ T5087] Bluetooth: hci4: command tx timeout [ 533.740672][ T7998] bridge0: port 1(bridge_slave_0) entered blocking state [ 533.748475][ T7998] bridge0: port 1(bridge_slave_0) entered disabled state [ 533.756557][ T7998] bridge_slave_0: entered allmulticast mode [ 533.766661][ T7998] bridge_slave_0: entered promiscuous mode [ 533.955102][ T7998] bridge0: port 2(bridge_slave_1) entered blocking state [ 533.963334][ T7998] bridge0: port 2(bridge_slave_1) entered disabled state [ 533.971431][ T7998] bridge_slave_1: entered allmulticast mode [ 533.981834][ T7998] bridge_slave_1: entered promiscuous mode [ 534.070411][ T37] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 534.093577][ T8045] FAULT_INJECTION: forcing a failure. [ 534.093577][ T8045] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 534.107474][ T8045] CPU: 1 UID: 0 PID: 8045 Comm: syz.2.541 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(undef) [ 534.107643][ T8045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 534.107737][ T8045] Call Trace: [ 534.107794][ T8045] [ 534.107848][ T8045] __dump_stack+0x26/0x30 [ 534.108038][ T8045] dump_stack_lvl+0x1df/0x270 [ 534.108234][ T8045] dump_stack+0x1e/0x25 [ 534.108407][ T8045] should_fail_ex+0x7dc/0x8a0 [ 534.108613][ T8045] should_fail+0x2a/0x40 [ 534.108780][ T8045] should_fail_usercopy+0x2e/0x40 [ 534.108965][ T8045] _copy_to_user+0x35/0x120 [ 534.109139][ T8045] simple_read_from_buffer+0x1b2/0x340 [ 534.109377][ T8045] proc_fail_nth_read+0x1d2/0x2c0 [ 534.109557][ T8045] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 534.109730][ T8045] vfs_read+0x279/0xf00 [ 534.109916][ T8045] ? stack_depot_save_flags+0x35/0x7b0 [ 534.110085][ T8045] ? do_sock_setsockopt+0x508/0x820 [ 534.110235][ T8045] ? kmsan_get_metadata+0xfb/0x160 [ 534.110451][ T8045] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 534.110681][ T8045] __x64_sys_read+0x1fb/0x4d0 [ 534.110910][ T8045] x64_sys_call+0x39db/0x3db0 [ 534.111124][ T8045] do_syscall_64+0xd9/0x210 [ 534.111280][ T8045] ? irqentry_exit+0x16/0x60 [ 534.111486][ T8045] ? clear_bhb_loop+0x40/0x90 [ 534.111657][ T8045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.111818][ T8045] RIP: 0033:0x7f792978d33c [ 534.111933][ T8045] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 534.112068][ T8045] RSP: 002b:00007f792a5dc030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 534.112215][ T8045] RAX: ffffffffffffffda RBX: 00007f79299b5fa0 RCX: 00007f792978d33c [ 534.112325][ T8045] RDX: 000000000000000f RSI: 00007f792a5dc0a0 RDI: 0000000000000004 [ 534.112433][ T8045] RBP: 00007f792a5dc090 R08: 0000000000000000 R09: 0000000000000000 [ 534.112531][ T8045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 534.112622][ T8045] R13: 0000000000000000 R14: 00007f79299b5fa0 R15: 00007ffc0a0c2c88 [ 534.112761][ T8045] [ 534.431508][ T8047] loop3: detected capacity change from 0 to 1024 [ 534.832691][ T37] usb 5-1: Using ep0 maxpacket: 32 [ 534.898161][ T7998] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 534.943378][ T37] usb 5-1: unable to get BOS descriptor or descriptor too short [ 534.962162][ T37] usb 5-1: config 7 has an invalid interface number: 187 but max is 0 [ 534.970909][ T37] usb 5-1: config 7 has no interface number 0 [ 534.977463][ T37] usb 5-1: config 7 interface 187 has no altsetting 0 [ 534.981858][ T7998] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 535.019760][ T37] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 535.025293][ T8047] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 535.029392][ T37] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.029536][ T37] usb 5-1: Product: syz [ 535.029647][ T37] usb 5-1: Manufacturer: syz [ 535.064956][ T37] usb 5-1: SerialNumber: syz [ 535.140317][ T8047] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: inode #11: comm syz.3.540: missing EA_INODE flag [ 535.171129][ T8047] EXT4-fs (loop3): Remounting filesystem read-only [ 535.178523][ T8047] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 535.229570][ T5087] Bluetooth: hci4: command tx timeout [ 535.331996][ T7998] team0: Port device team_slave_0 added [ 535.373142][ T7998] team0: Port device team_slave_1 added [ 535.436723][ T37] usb 5-1: Limiting number of CPorts to U8_MAX [ 535.445158][ T37] usb 5-1: Not enough endpoints found in device, aborting! [ 535.620749][ T7998] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 535.628126][ T7998] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 535.656555][ T7998] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 535.684628][ T7998] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 535.692445][ T7998] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 535.719203][ T7998] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 535.799893][ T8039] loop4: detected capacity change from 0 to 1024 [ 535.836620][ T8039] ext4: Unknown parameter 'euid' [ 535.951261][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 536.003090][ T8039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 536.013317][ T8039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 536.055335][ T37] usb 5-1: USB disconnect, device number 10 [ 536.094970][ T7998] hsr_slave_0: entered promiscuous mode [ 536.105697][ T7998] hsr_slave_1: entered promiscuous mode [ 536.115090][ T7998] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 536.123100][ T7998] Cannot create hsr debugfs directory [ 536.406476][ T8061] loop3: detected capacity change from 0 to 64 [ 536.502987][ T8061] Trying to free block not in datazone [ 536.584187][ T8061] netlink: 8 bytes leftover after parsing attributes in process `syz.3.544'. [ 536.587609][ T8063] FAULT_INJECTION: forcing a failure. [ 536.587609][ T8063] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 536.612800][ T8063] CPU: 1 UID: 0 PID: 8063 Comm: syz.0.545 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(undef) [ 536.612970][ T8063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 536.613061][ T8063] Call Trace: [ 536.613115][ T8063] [ 536.613169][ T8063] __dump_stack+0x26/0x30 [ 536.613364][ T8063] dump_stack_lvl+0x1df/0x270 [ 536.613555][ T8063] dump_stack+0x1e/0x25 [ 536.613719][ T8063] should_fail_ex+0x7dc/0x8a0 [ 536.613916][ T8063] should_fail+0x2a/0x40 [ 536.614070][ T8063] should_fail_usercopy+0x2e/0x40 [ 536.614258][ T8063] _copy_to_user+0x35/0x120 [ 536.614435][ T8063] simple_read_from_buffer+0x1b2/0x340 [ 536.614663][ T8063] proc_fail_nth_read+0x1d2/0x2c0 [ 536.614847][ T8063] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 536.615023][ T8063] vfs_read+0x279/0xf00 [ 536.615221][ T8063] ? stack_depot_save_flags+0x35/0x7b0 [ 536.615387][ T8063] ? kmsan_get_metadata+0xfb/0x160 [ 536.615592][ T8063] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 536.615820][ T8063] __x64_sys_read+0x1fb/0x4d0 [ 536.616049][ T8063] x64_sys_call+0x39db/0x3db0 [ 536.616245][ T8063] do_syscall_64+0xd9/0x210 [ 536.616404][ T8063] ? irqentry_exit+0x16/0x60 [ 536.616605][ T8063] ? clear_bhb_loop+0x40/0x90 [ 536.616773][ T8063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.616940][ T8063] RIP: 0033:0x7fea9d18d33c [ 536.617055][ T8063] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 536.617195][ T8063] RSP: 002b:00007fea9df52030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 536.617349][ T8063] RAX: ffffffffffffffda RBX: 00007fea9d3b5fa0 RCX: 00007fea9d18d33c [ 536.617459][ T8063] RDX: 000000000000000f RSI: 00007fea9df520a0 RDI: 0000000000000008 [ 536.617558][ T8063] RBP: 00007fea9df52090 R08: 0000000000000000 R09: 0000000000000000 [ 536.617656][ T8063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 536.617749][ T8063] R13: 0000000000000000 R14: 00007fea9d3b5fa0 R15: 00007ffd585c9518 [ 536.617890][ T8063] [ 537.001716][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 537.009824][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 537.160010][ T7998] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 537.190673][ T7998] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 537.311766][ T5087] Bluetooth: hci4: command tx timeout [ 537.326243][ T7998] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 537.401010][ T7998] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 537.776476][ T8072] loop2: detected capacity change from 0 to 64 [ 538.034870][ T8074] Trying to free block not in datazone [ 538.158141][ T8072] netlink: 8 bytes leftover after parsing attributes in process `syz.2.548'. [ 538.236942][ T8080] loop4: detected capacity change from 0 to 16 [ 538.290746][ T8080] erofs (device loop4): mounted with root inode @ nid 36. [ 538.390959][ T8080] erofs (device loop4): big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 538.402015][ T8080] erofs (device loop4): big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 538.413210][ T8080] erofs (device loop4): read error -117 @ 72 of nid 36 [ 538.480843][ T8083] netlink: 'syz.3.549': attribute type 11 has an invalid length. [ 538.571646][ T7998] 8021q: adding VLAN 0 to HW filter on device bond0 [ 539.600623][ T8089] FAULT_INJECTION: forcing a failure. [ 539.600623][ T8089] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 539.614593][ T8089] CPU: 0 UID: 0 PID: 8089 Comm: syz.0.553 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(undef) [ 539.614769][ T8089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 539.614862][ T8089] Call Trace: [ 539.614917][ T8089] [ 539.614974][ T8089] __dump_stack+0x26/0x30 [ 539.615162][ T8089] dump_stack_lvl+0x1df/0x270 [ 539.615359][ T8089] dump_stack+0x1e/0x25 [ 539.615527][ T8089] should_fail_ex+0x7dc/0x8a0 [ 539.615739][ T8089] should_fail+0x2a/0x40 [ 539.615904][ T8089] should_fail_usercopy+0x2e/0x40 [ 539.616091][ T8089] _copy_to_user+0x35/0x120 [ 539.616266][ T8089] simple_read_from_buffer+0x1b2/0x340 [ 539.616489][ T8089] proc_fail_nth_read+0x1d2/0x2c0 [ 539.616672][ T8089] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 539.616852][ T8089] vfs_read+0x279/0xf00 [ 539.617038][ T8089] ? stack_depot_save_flags+0x35/0x7b0 [ 539.617211][ T8089] ? kmsan_get_metadata+0xfb/0x160 [ 539.617421][ T8089] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 539.617651][ T8089] __x64_sys_read+0x1fb/0x4d0 [ 539.617883][ T8089] x64_sys_call+0x39db/0x3db0 [ 539.618085][ T8089] do_syscall_64+0xd9/0x210 [ 539.618241][ T8089] ? irqentry_exit+0x16/0x60 [ 539.618442][ T8089] ? clear_bhb_loop+0x40/0x90 [ 539.618610][ T8089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.618782][ T8089] RIP: 0033:0x7fea9d18d33c [ 539.618888][ T8089] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 539.619022][ T8089] RSP: 002b:00007fea9df52030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 539.619170][ T8089] RAX: ffffffffffffffda RBX: 00007fea9d3b5fa0 RCX: 00007fea9d18d33c [ 539.619282][ T8089] RDX: 000000000000000f RSI: 00007fea9df520a0 RDI: 0000000000000003 [ 539.619379][ T8089] RBP: 00007fea9df52090 R08: 0000000000000000 R09: 0000000000000000 [ 539.619476][ T8089] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 539.619568][ T8089] R13: 0000000000000000 R14: 00007fea9d3b5fa0 R15: 00007ffd585c9518 [ 539.619709][ T8089] [ 540.471525][ T7998] 8021q: adding VLAN 0 to HW filter on device team0 [ 540.622954][ T3867] bridge0: port 1(bridge_slave_0) entered blocking state [ 540.630815][ T3867] bridge0: port 1(bridge_slave_0) entered forwarding state [ 540.702567][ T3867] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.710377][ T3867] bridge0: port 2(bridge_slave_1) entered forwarding state [ 541.351609][ T8103] netlink: 'syz.2.559': attribute type 7 has an invalid length. [ 541.360072][ T8103] netlink: 'syz.2.559': attribute type 8 has an invalid length. [ 541.670117][ T5851] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 541.880393][ T5851] usb 5-1: Using ep0 maxpacket: 32 [ 541.941856][ T5851] usb 5-1: unable to get BOS descriptor or descriptor too short [ 542.067541][ T5851] usb 5-1: config 7 has an invalid interface number: 187 but max is 0 [ 542.076546][ T5851] usb 5-1: config 7 has no interface number 0 [ 542.083581][ T5851] usb 5-1: config 7 interface 187 has no altsetting 0 [ 542.378997][ T8104] loop0: detected capacity change from 0 to 32768 [ 542.379103][ T5851] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 542.388508][ T8104] XFS: noikeep mount option is deprecated. [ 542.395169][ T5851] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.409729][ T5851] usb 5-1: Product: syz [ 542.414177][ T5851] usb 5-1: Manufacturer: syz [ 542.419136][ T5851] usb 5-1: SerialNumber: syz [ 542.610783][ T8104] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 542.807245][ T5851] usb 5-1: Limiting number of CPorts to U8_MAX [ 542.818526][ T5851] usb 5-1: Not enough endpoints found in device, aborting! [ 543.186191][ T8104] XFS (loop0): Ending clean mount [ 543.193007][ T7998] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 543.202263][ T8097] loop4: detected capacity change from 0 to 1024 [ 543.207224][ T8104] XFS (loop0): Quotacheck needed: Please wait. [ 543.235839][ T8097] ext4: Unknown parameter 'euid' [ 543.314193][ T8104] XFS (loop0): Quotacheck: Done. [ 543.380666][ T30] audit: type=1800 audit(1751057625.084:66): pid=8104 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.558" name="bus" dev="loop0" ino=9290 res=0 errno=0 [ 543.401716][ T30] audit: type=1800 audit(1751057625.094:67): pid=8104 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.558" name="bus" dev="loop0" ino=9290 res=0 errno=0 [ 543.432760][ T8097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 543.442611][ T8097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 543.525059][ T5851] usb 5-1: USB disconnect, device number 11 [ 543.560518][ T8104] netlink: 20 bytes leftover after parsing attributes in process `syz.0.558'. [ 543.585400][ T8104] netlink: 'syz.0.558': attribute type 13 has an invalid length. [ 543.976848][ T8104] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.985623][ T8104] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.254875][ T8104] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 544.290259][ T8104] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 544.453036][ T8126] loop2: detected capacity change from 0 to 32768 [ 544.557333][ T8126] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.563 (8126) [ 544.574278][ T8104] veth0_macvtap: left allmulticast mode [ 544.636957][ T8126] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 544.648000][ T8126] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 544.658388][ T8126] BTRFS info (device loop2): using free-space-tree [ 544.691521][ T8104] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.701041][ T8104] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.710528][ T8104] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.719895][ T8104] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.005570][ T5805] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 545.145776][ T8126] netlink: 14528 bytes leftover after parsing attributes in process `syz.2.563'. [ 545.446264][ T8149] loop3: detected capacity change from 0 to 16 [ 545.514322][ T8149] erofs (device loop3): mounted with root inode @ nid 36. [ 545.545277][ T5795] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 545.665190][ T8149] erofs (device loop3): big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 545.676638][ T8149] erofs (device loop3): big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 545.687936][ T8149] erofs (device loop3): read error -117 @ 72 of nid 36 [ 546.879932][ T8157] FAULT_INJECTION: forcing a failure. [ 546.879932][ T8157] name failslab, interval 1, probability 0, space 0, times 0 [ 546.893361][ T8157] CPU: 1 UID: 0 PID: 8157 Comm: syz.4.568 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(undef) [ 546.893534][ T8157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 546.893626][ T8157] Call Trace: [ 546.893680][ T8157] [ 546.893735][ T8157] __dump_stack+0x26/0x30 [ 546.893924][ T8157] dump_stack_lvl+0x1df/0x270 [ 546.894121][ T8157] dump_stack+0x1e/0x25 [ 546.894288][ T8157] should_fail_ex+0x7dc/0x8a0 [ 546.894497][ T8157] should_failslab+0x15b/0x200 [ 546.894716][ T8157] __kmalloc_noprof+0x182/0x1310 [ 546.894874][ T8157] ? video_usercopy+0x260/0x1f70 [ 546.895018][ T8157] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 546.895225][ T8157] ? kmsan_get_metadata+0xfb/0x160 [ 546.895452][ T8157] video_usercopy+0x260/0x1f70 [ 546.895626][ T8157] ? __pfx___video_do_ioctl+0x10/0x10 [ 546.895781][ T8157] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 546.896006][ T8157] ? do_vfs_ioctl+0x17c3/0x3720 [ 546.896212][ T8157] ? kmsan_get_metadata+0xfb/0x160 [ 546.896422][ T8157] ? __pfx_video_ioctl2+0x10/0x10 [ 546.896569][ T8157] video_ioctl2+0x46/0x60 [ 546.896712][ T8157] v4l2_ioctl+0x1b8/0x200 [ 546.896923][ T8157] ? __pfx_v4l2_ioctl+0x10/0x10 [ 546.897122][ T8157] __se_sys_ioctl+0x23c/0x400 [ 546.897323][ T8157] __x64_sys_ioctl+0x97/0xe0 [ 546.897523][ T8157] x64_sys_call+0x1ebe/0x3db0 [ 546.897723][ T8157] do_syscall_64+0xd9/0x210 [ 546.897879][ T8157] ? irqentry_exit+0x16/0x60 [ 546.898078][ T8157] ? clear_bhb_loop+0x40/0x90 [ 546.898247][ T8157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.898418][ T8157] RIP: 0033:0x7f9e9178e929 [ 546.898531][ T8157] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 546.898666][ T8157] RSP: 002b:00007f9e92656038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 546.898816][ T8157] RAX: ffffffffffffffda RBX: 00007f9e919b5fa0 RCX: 00007f9e9178e929 [ 546.898928][ T8157] RDX: 00002000000005c0 RSI: 00000000c0d05605 RDI: 0000000000000003 [ 546.899029][ T8157] RBP: 00007f9e92656090 R08: 0000000000000000 R09: 0000000000000000 [ 546.899124][ T8157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 546.899215][ T8157] R13: 0000000000000000 R14: 00007f9e919b5fa0 R15: 00007fff6b485bb8 [ 546.899356][ T8157] [ 548.021579][ T7998] veth0_vlan: entered promiscuous mode [ 548.153457][ T7998] veth1_vlan: entered promiscuous mode [ 548.395911][ T8163] loop2: detected capacity change from 0 to 2048 [ 548.442667][ T7998] veth0_macvtap: entered promiscuous mode [ 548.474782][ T8165] FAULT_INJECTION: forcing a failure. [ 548.474782][ T8165] name failslab, interval 1, probability 0, space 0, times 0 [ 548.488062][ T8165] CPU: 1 UID: 0 PID: 8165 Comm: syz.3.570 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(undef) [ 548.488233][ T8165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 548.488324][ T8165] Call Trace: [ 548.488376][ T8165] [ 548.488426][ T8165] __dump_stack+0x26/0x30 [ 548.488608][ T8165] dump_stack_lvl+0x1df/0x270 [ 548.488806][ T8165] dump_stack+0x1e/0x25 [ 548.488971][ T8165] should_fail_ex+0x7dc/0x8a0 [ 548.489179][ T8165] should_failslab+0x15b/0x200 [ 548.489398][ T8165] kmem_cache_alloc_noprof+0xf0/0xec0 [ 548.489553][ T8165] ? security_file_alloc+0x7a/0x6e0 [ 548.489759][ T8165] ? kmsan_get_metadata+0xfb/0x160 [ 548.489962][ T8165] ? kmsan_get_metadata+0xfb/0x160 [ 548.490203][ T8165] security_file_alloc+0x7a/0x6e0 [ 548.490403][ T8165] init_file+0x91/0x330 [ 548.490578][ T8165] alloc_empty_file+0x165/0x5b0 [ 548.490744][ T8165] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 548.490955][ T8165] alloc_file_pseudo+0x1de/0x400 [ 548.491158][ T8165] __shmem_file_setup+0x46c/0x590 [ 548.491328][ T8165] shmem_file_setup+0x61/0x80 [ 548.491480][ T8165] __se_sys_memfd_create+0x844/0x11f0 [ 548.491686][ T8165] __x64_sys_memfd_create+0x78/0xb0 [ 548.491878][ T8165] x64_sys_call+0x15be/0x3db0 [ 548.492078][ T8165] do_syscall_64+0xd9/0x210 [ 548.492225][ T8165] ? irqentry_exit+0x16/0x60 [ 548.492409][ T8165] ? clear_bhb_loop+0x40/0x90 [ 548.492560][ T8165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.492705][ T8165] RIP: 0033:0x7f7997d8e929 [ 548.492807][ T8165] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 548.492928][ T8165] RSP: 002b:00007f7998b2fe18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 548.493056][ T8165] RAX: ffffffffffffffda RBX: 00000000000098b9 RCX: 00007f7997d8e929 [ 548.493157][ T8165] RDX: 00007f7998b2fef0 RSI: 0000000000000000 RDI: 00007f7997e114cc [ 548.493249][ T8165] RBP: 000020000001c300 R08: 00007f7998b2fbb7 R09: 00007f7998b2fe40 [ 548.493343][ T8165] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000009740 [ 548.493431][ T8165] R13: 00007f7998b2fef0 R14: 00007f7998b2feb0 R15: 0000200000000180 [ 548.493561][ T8165] [ 548.810039][ T7998] veth1_macvtap: entered promiscuous mode [ 548.924318][ T7998] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 548.955316][ T7998] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 548.976481][ T7998] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.989857][ T7998] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.000172][ T7998] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.010236][ T7998] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.252547][ T8163] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 549.536159][ T30] audit: type=1804 audit(1751057631.254:68): pid=8163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.567" name="/newroot/120/file2/cgroup.controllers" dev="loop2" ino=18 res=1 errno=0 [ 549.543403][ T8163] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.567: bg 0: block 234: padding at end of block bitmap is not set [ 549.611282][ T8163] EXT4-fs (loop2): Remounting filesystem read-only [ 550.017507][ T5795] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 550.579782][ T5852] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 550.633435][ T8204] loop4: detected capacity change from 0 to 16 [ 550.658421][ T8204] erofs (device loop4): mounted with root inode @ nid 36. [ 550.757163][ T8204] erofs (device loop4): big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 550.768353][ T8204] erofs (device loop4): big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 550.770887][ T5852] usb 4-1: Using ep0 maxpacket: 32 [ 550.779274][ T8204] erofs (device loop4): read error -117 @ 72 of nid 36 [ 550.810806][ T5852] usb 4-1: unable to get BOS descriptor or descriptor too short [ 550.891621][ T5852] usb 4-1: config 7 has an invalid interface number: 187 but max is 0 [ 550.900527][ T5852] usb 4-1: config 7 has no interface number 0 [ 550.906920][ T5852] usb 4-1: config 7 interface 187 has no altsetting 0 [ 551.034117][ T5852] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 551.044060][ T5852] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.052654][ T5852] usb 4-1: Product: syz [ 551.057084][ T5852] usb 4-1: Manufacturer: syz [ 551.062118][ T5852] usb 4-1: SerialNumber: syz [ 551.419347][ T5852] usb 4-1: Limiting number of CPorts to U8_MAX [ 551.427940][ T5852] usb 4-1: Not enough endpoints found in device, aborting! [ 551.817482][ T8190] loop3: detected capacity change from 0 to 1024 [ 551.875193][ T8190] ext4: Unknown parameter 'euid' [ 552.057483][ T8190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 552.067335][ T8190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 552.199309][ T5852] usb 4-1: USB disconnect, device number 19 [ 553.162110][ T8224] loop0: detected capacity change from 0 to 2048 [ 555.675925][ T8236] loop2: detected capacity change from 0 to 2048 [ 555.769666][ T8236] EXT4-fs (loop2): invalid inodes per group: 1 [ 555.769666][ T8236] [ 556.119814][ T8236] loop2: detected capacity change from 0 to 128 [ 556.231392][ T8236] EXT4-fs: Ignoring removed nobh option [ 556.237653][ T8236] EXT4-fs: inline encryption not supported [ 556.457795][ T8236] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 556.593530][ T8236] ext4 filesystem being mounted at /125/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 556.791994][ T30] audit: type=1800 audit(1751057638.444:69): pid=8236 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.588" name="file2" dev="loop2" ino=12 res=0 errno=0 [ 557.586798][ T8264] loop3: detected capacity change from 0 to 16 [ 557.723836][ T5795] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 557.739992][ T8264] erofs (device loop3): mounted with root inode @ nid 36. [ 557.824633][ T8264] erofs (device loop3): big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 557.835927][ T8264] erofs (device loop3): big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 557.846922][ T8264] erofs (device loop3): read error -117 @ 72 of nid 36 [ 558.180972][ T3658] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 558.189553][ T3658] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 558.386848][ T4368] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 558.403419][ T4368] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 558.539280][ T5852] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 558.641850][ T5849] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 558.725987][ T5852] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 558.737956][ T5852] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 558.748358][ T5852] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 558.758019][ T5852] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.833356][ T5852] usb 5-1: config 0 descriptor?? [ 558.850312][ T5849] usb 1-1: Using ep0 maxpacket: 32 [ 558.865347][ T5849] usb 1-1: unable to get BOS descriptor or descriptor too short [ 558.890152][ T5849] usb 1-1: config 7 has an invalid interface number: 187 but max is 0 [ 558.899209][ T5849] usb 1-1: config 7 has no interface number 0 [ 558.905604][ T5849] usb 1-1: config 7 interface 187 has no altsetting 0 [ 558.956192][ T5849] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 558.965848][ T5849] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.974470][ T5849] usb 1-1: Product: syz [ 558.979038][ T5849] usb 1-1: Manufacturer: syz [ 558.983914][ T5849] usb 1-1: SerialNumber: syz [ 559.239036][ T8285] FAULT_INJECTION: forcing a failure. [ 559.239036][ T8285] name failslab, interval 1, probability 0, space 0, times 0 [ 559.252829][ T8285] CPU: 0 UID: 0 PID: 8285 Comm: syz.5.521 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(undef) [ 559.252999][ T8285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 559.253088][ T8285] Call Trace: [ 559.253143][ T8285] [ 559.253201][ T8285] __dump_stack+0x26/0x30 [ 559.253394][ T8285] dump_stack_lvl+0x1df/0x270 [ 559.253590][ T8285] dump_stack+0x1e/0x25 [ 559.253759][ T8285] should_fail_ex+0x7dc/0x8a0 [ 559.253966][ T8285] should_failslab+0x15b/0x200 [ 559.254188][ T8285] __kmalloc_noprof+0x182/0x1310 [ 559.254348][ T8285] ? tomoyo_file_ioctl+0x3d/0x50 [ 559.254542][ T8285] ? tomoyo_realpath_from_path+0xeb/0x9f0 [ 559.254728][ T8285] ? __msan_warning+0x1b/0x30 [ 559.254904][ T8285] ? filter_irq_stacks+0x13f/0x190 [ 559.255054][ T8285] ? kmsan_get_metadata+0xfb/0x160 [ 559.255282][ T8285] tomoyo_realpath_from_path+0xeb/0x9f0 [ 559.255483][ T8285] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 559.255705][ T8285] ? __srcu_read_lock+0x5e/0xd0 [ 559.255900][ T8285] tomoyo_path_number_perm+0x1d0/0x7d0 [ 559.256066][ T8285] ? stack_depot_save_flags+0x35/0x7b0 [ 559.256270][ T8285] ? kmsan_get_metadata+0xfb/0x160 [ 559.256474][ T8285] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 559.256741][ T8285] tomoyo_file_ioctl+0x3d/0x50 [ 559.256937][ T8285] security_file_ioctl+0x141/0x590 [ 559.257167][ T8285] __se_sys_ioctl+0xbb/0x400 [ 559.257373][ T8285] __x64_sys_ioctl+0x97/0xe0 [ 559.257568][ T8285] x64_sys_call+0x1ebe/0x3db0 [ 559.257764][ T8285] do_syscall_64+0xd9/0x210 [ 559.257920][ T8285] ? irqentry_exit+0x16/0x60 [ 559.258121][ T8285] ? clear_bhb_loop+0x40/0x90 [ 559.258318][ T8285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.258483][ T8285] RIP: 0033:0x7f969b58e929 [ 559.258599][ T8285] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 559.258733][ T8285] RSP: 002b:00007f969c3d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 559.258879][ T8285] RAX: ffffffffffffffda RBX: 00007f969b7b5fa0 RCX: 00007f969b58e929 [ 559.258990][ T8285] RDX: 0000200000000180 RSI: 000000004020ae46 RDI: 0000000000000005 [ 559.259095][ T8285] RBP: 00007f969c3d7090 R08: 0000000000000000 R09: 0000000000000000 [ 559.259191][ T8285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 559.259289][ T8285] R13: 0000000000000000 R14: 00007f969b7b5fa0 R15: 00007ffdc5b9f698 [ 559.259429][ T8285] [ 559.511573][ T8285] ERROR: Out of memory at tomoyo_realpath_from_path. [ 559.530598][ T5849] usb 1-1: Limiting number of CPorts to U8_MAX [ 559.538936][ T5849] usb 1-1: Not enough endpoints found in device, aborting! [ 559.718571][ T8290] sctp: [Deprecated]: syz.3.601 (pid 8290) Use of int in max_burst socket option. [ 559.718571][ T8290] Use struct sctp_assoc_value instead [ 559.883919][ T8269] loop0: detected capacity change from 0 to 1024 [ 559.907922][ T8269] ext4: Unknown parameter 'euid' [ 559.930306][ T8270] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 559.998651][ T8269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 560.008419][ T8269] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 560.043528][ T5849] usb 4-1: new low-speed USB device number 20 using dummy_hcd [ 560.048518][ T5851] usb 1-1: USB disconnect, device number 13 [ 560.096365][ T8295] netlink: 60 bytes leftover after parsing attributes in process `syz.2.603'. [ 560.115539][ T8292] netlink: 60 bytes leftover after parsing attributes in process `syz.2.603'. [ 560.235363][ T5849] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 560.248519][ T5849] usb 4-1: can't read configurations, error -61 [ 560.409740][ T5849] usb 4-1: new low-speed USB device number 21 using dummy_hcd [ 560.593235][ T5849] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 560.602152][ T5849] usb 4-1: can't read configurations, error -61 [ 560.610303][ T5849] usb usb4-port1: attempt power cycle [ 561.135125][ T8300] loop2: detected capacity change from 0 to 1024 [ 561.650432][ T5851] usb 5-1: USB disconnect, device number 12 [ 561.749770][ T8298] loop5: detected capacity change from 0 to 32768 [ 561.776085][ T8298] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.604 (8298) [ 561.833527][ T8298] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 561.845686][ T8298] BTRFS info (device loop5): using crc32c (crc32c-x86_64) checksum algorithm [ 561.855723][ T8298] BTRFS info (device loop5): disk space caching is enabled [ 561.864099][ T8298] BTRFS warning (device loop5): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 561.963131][ T5849] usb 4-1: new low-speed USB device number 22 using dummy_hcd [ 562.026081][ T5849] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 562.034315][ T5849] usb 4-1: can't read configurations, error -61 [ 562.107579][ T8298] BTRFS info (device loop5): rebuilding free space tree [ 562.141160][ T8298] BTRFS info (device loop5): disabling free space tree [ 562.155211][ T8298] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 562.165722][ T8298] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 562.195994][ T5849] usb 4-1: new low-speed USB device number 23 using dummy_hcd [ 562.230471][ T5849] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 562.238450][ T5849] usb 4-1: can't read configurations, error -61 [ 562.249208][ T5849] usb usb4-port1: unable to enumerate USB device [ 562.340087][ T7998] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 562.435890][ T8322] loop2: detected capacity change from 0 to 16 [ 562.493152][ T8322] erofs (device loop2): mounted with root inode @ nid 36. [ 562.541402][ T8322] erofs (device loop2): big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 562.552688][ T8322] erofs (device loop2): big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 562.563693][ T8322] erofs (device loop2): read error -117 @ 72 of nid 36 [ 562.684842][ T8325] loop4: detected capacity change from 0 to 256 [ 563.394600][ T8328] loop0: detected capacity change from 0 to 2048 [ 563.491821][ T8328] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 563.633206][ T8336] loop4: detected capacity change from 0 to 256 [ 564.012316][ T8336] FAT-fs (loop4): Directory bread(block 64) failed [ 564.019432][ T8336] FAT-fs (loop4): Directory bread(block 65) failed [ 564.026475][ T8336] FAT-fs (loop4): Directory bread(block 66) failed [ 564.036933][ T8336] FAT-fs (loop4): Directory bread(block 67) failed [ 564.045074][ T8336] FAT-fs (loop4): Directory bread(block 68) failed [ 564.052096][ T8336] FAT-fs (loop4): Directory bread(block 69) failed [ 564.059343][ T8336] FAT-fs (loop4): Directory bread(block 70) failed [ 564.066172][ T8336] FAT-fs (loop4): Directory bread(block 71) failed [ 564.073440][ T8336] FAT-fs (loop4): Directory bread(block 72) failed [ 564.080475][ T8336] FAT-fs (loop4): Directory bread(block 73) failed [ 564.410256][ T8341] loop2: detected capacity change from 0 to 1024 [ 564.479314][ T5851] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 564.503394][ T8341] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 564.519786][ T8346] loop5: detected capacity change from 0 to 512 [ 564.528299][ T8344] loop3: detected capacity change from 0 to 512 [ 564.550445][ T8346] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 564.582534][ T8344] EXT4-fs: Mount option(s) incompatible with ext2 [ 564.652348][ T5851] usb 1-1: Using ep0 maxpacket: 16 [ 564.690367][ T5851] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 564.699168][ T5851] usb 1-1: config 1 has no interface number 0 [ 564.705755][ T5851] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 564.716224][ T5851] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 564.726687][ T5851] usb 1-1: config 1 interface 105 has no altsetting 0 [ 564.799941][ T5851] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 564.809927][ T5851] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.818299][ T5851] usb 1-1: Product: syz [ 564.824435][ T5851] usb 1-1: Manufacturer: syz [ 564.830111][ T5851] usb 1-1: SerialNumber: syz [ 564.923498][ T8338] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 564.951103][ T8338] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 564.976269][ T5795] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 565.401000][ T8355] loop4: detected capacity change from 0 to 512 [ 565.448740][ T8338] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 565.493184][ T8338] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 565.517280][ T8355] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 565.531255][ T8355] ext4 filesystem being mounted at /128/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 565.973120][ T8364] loop3: detected capacity change from 0 to 2048 [ 566.022925][ T8364] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 566.151814][ T5851] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 566.164393][ T5851] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 566.297900][ T5851] aqc111 1-1:1.105 eth5: register 'aqc111' at usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 20:fc:94:45:3a:41 [ 566.364771][ T5793] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 566.377495][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 566.418450][ T5851] usb 1-1: USB disconnect, device number 14 [ 566.427803][ T5851] aqc111 1-1:1.105 eth5: unregister 'aqc111' usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 566.529480][ T5851] aqc111 1-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 566.539801][ T5851] aqc111 1-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 566.550339][ T5851] aqc111 1-1:1.105 eth5 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 566.764616][ T8373] loop3: detected capacity change from 0 to 16 [ 566.788191][ T8372] FAULT_INJECTION: forcing a failure. [ 566.788191][ T8372] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 566.807811][ T8372] CPU: 0 UID: 0 PID: 8372 Comm: syz.4.624 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(undef) [ 566.807990][ T8372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 566.808078][ T8372] Call Trace: [ 566.808130][ T8372] [ 566.808192][ T8372] __dump_stack+0x26/0x30 [ 566.808373][ T8372] dump_stack_lvl+0x1df/0x270 [ 566.808569][ T8372] dump_stack+0x1e/0x25 [ 566.808759][ T8372] should_fail_ex+0x7dc/0x8a0 [ 566.808974][ T8372] should_fail+0x2a/0x40 [ 566.809132][ T8372] should_fail_usercopy+0x2e/0x40 [ 566.809315][ T8372] _copy_to_user+0x35/0x120 [ 566.809469][ T8372] simple_read_from_buffer+0x1b2/0x340 [ 566.809685][ T8372] proc_fail_nth_read+0x1d2/0x2c0 [ 566.809866][ T8372] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 566.810058][ T8372] vfs_read+0x279/0xf00 [ 566.810238][ T8372] ? stack_depot_save_flags+0x35/0x7b0 [ 566.810403][ T8372] ? kmsan_get_metadata+0xfb/0x160 [ 566.810596][ T8372] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 566.810827][ T8372] __x64_sys_read+0x1fb/0x4d0 [ 566.811064][ T8372] x64_sys_call+0x39db/0x3db0 [ 566.811251][ T8372] do_syscall_64+0xd9/0x210 [ 566.811401][ T8372] ? irqentry_exit+0x16/0x60 [ 566.811592][ T8372] ? clear_bhb_loop+0x40/0x90 [ 566.811757][ T8372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.811924][ T8372] RIP: 0033:0x7f9e9178d33c [ 566.812031][ T8372] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 566.812163][ T8372] RSP: 002b:00007f9e92656030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 566.812301][ T8372] RAX: ffffffffffffffda RBX: 00007f9e919b5fa0 RCX: 00007f9e9178d33c [ 566.812402][ T8372] RDX: 000000000000000f RSI: 00007f9e926560a0 RDI: 0000000000000003 [ 566.812495][ T8372] RBP: 00007f9e92656090 R08: 0000000000000000 R09: 0000000000000000 [ 566.812588][ T8372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 566.812677][ T8372] R13: 0000000000000000 R14: 00007f9e919b5fa0 R15: 00007fff6b485bb8 [ 566.812810][ T8372] [ 567.026727][ T8373] erofs (device loop3): mounted with root inode @ nid 36. [ 567.119889][ T8373] erofs (device loop3): big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 567.131327][ T8373] erofs (device loop3): big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 567.142291][ T8373] erofs (device loop3): read error -117 @ 72 of nid 36 [ 568.470058][ T8379] loop3: detected capacity change from 0 to 32768 [ 568.485735][ T8379] Mount JFS Failure: -22 [ 568.490362][ T8379] jfs_mount failed w/return code = -22 [ 569.496385][ T8392] loop3: detected capacity change from 0 to 512 [ 569.686359][ T8392] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 570.401099][ T8407] loop2: detected capacity change from 0 to 16 [ 570.442492][ T8407] erofs (device loop2): mounted with root inode @ nid 36. [ 570.507234][ T8407] erofs (device loop2): big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 570.519231][ T8407] erofs (device loop2): big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 570.530818][ T8407] erofs (device loop2): read error -117 @ 72 of nid 36 [ 570.685284][ T8409] loop4: detected capacity change from 0 to 16 [ 570.848502][ T8414] loop5: detected capacity change from 0 to 256 [ 570.978712][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 571.046702][ T8414] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 571.560070][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 572.033947][ T8420] loop0: detected capacity change from 0 to 2048 [ 572.076387][ T8420] nilfs2: Bad value for 'cp' [ 572.385863][ T8430] netlink: 20 bytes leftover after parsing attributes in process `syz.3.645'. [ 572.904680][ T8436] loop0: detected capacity change from 0 to 256 [ 572.947069][ T8436] vfat: Bad value for 'uni_xlate' [ 573.220350][ T5849] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 573.429111][ T5849] usb 6-1: Using ep0 maxpacket: 16 [ 573.463035][ T5849] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 573.474004][ T5849] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 573.511239][ T8443] loop3: detected capacity change from 0 to 512 [ 573.534703][ T5849] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 573.544496][ T5849] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.552960][ T5849] usb 6-1: Product: syz [ 573.560256][ T5849] usb 6-1: Manufacturer: syz [ 573.565155][ T5849] usb 6-1: SerialNumber: syz [ 573.605963][ T8443] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 573.895083][ T5849] usb 6-1: 0:2 : does not exist [ 573.972189][ T5849] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 574.152146][ T5849] usb 6-1: USB disconnect, device number 2 [ 574.964173][ T30] audit: type=1326 audit(1751057656.674:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8456 comm="syz.3.654" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7997d8e929 code=0x0 [ 575.117188][ T8455] loop0: detected capacity change from 0 to 1024 [ 575.923497][ T8471] loop2: detected capacity change from 0 to 256 [ 575.984724][ T8471] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 575.997048][ T8471] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 576.055270][ T8475] FAULT_INJECTION: forcing a failure. [ 576.055270][ T8475] name failslab, interval 1, probability 0, space 0, times 0 [ 576.068655][ T8475] CPU: 0 UID: 0 PID: 8475 Comm: syz.4.660 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(undef) [ 576.068831][ T8475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 576.068922][ T8475] Call Trace: [ 576.068976][ T8475] [ 576.069029][ T8475] __dump_stack+0x26/0x30 [ 576.069225][ T8475] dump_stack_lvl+0x1df/0x270 [ 576.069416][ T8475] dump_stack+0x1e/0x25 [ 576.069587][ T8475] should_fail_ex+0x7dc/0x8a0 [ 576.069789][ T8475] should_failslab+0x15b/0x200 [ 576.070009][ T8475] kmem_cache_alloc_noprof+0xf0/0xec0 [ 576.070170][ T8475] ? getname_kernel+0x88/0x640 [ 576.070329][ T8475] ? kmsan_get_metadata+0xfb/0x160 [ 576.070536][ T8475] ? kmsan_get_metadata+0xfb/0x160 [ 576.070756][ T8475] getname_kernel+0x88/0x640 [ 576.070920][ T8475] ? _raw_read_unlock+0x38/0x50 [ 576.071130][ T8475] kern_path+0x3e/0x3b0 [ 576.071288][ T8475] ? kmsan_get_metadata+0xfb/0x160 [ 576.071492][ T8475] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 576.071717][ T8475] tomoyo_mount_permission+0xcec/0xfe0 [ 576.071936][ T8475] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 576.072200][ T8475] ? kmsan_get_metadata+0xfb/0x160 [ 576.072422][ T8475] tomoyo_sb_mount+0x4e/0x70 [ 576.072626][ T8475] security_sb_mount+0x169/0x630 [ 576.072816][ T8475] path_mount+0x103/0x1e90 [ 576.073036][ T8475] ? user_path_at+0x32d/0x3d0 [ 576.073228][ T8475] __se_sys_mount+0x6eb/0x7d0 [ 576.073456][ T8475] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 576.073679][ T8475] __x64_sys_mount+0xe4/0x150 [ 576.073901][ T8475] x64_sys_call+0xfa7/0x3db0 [ 576.074107][ T8475] do_syscall_64+0xd9/0x210 [ 576.074256][ T8475] ? irqentry_exit+0x16/0x60 [ 576.074457][ T8475] ? clear_bhb_loop+0x40/0x90 [ 576.074618][ T8475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.074778][ T8475] RIP: 0033:0x7f9e9178e929 [ 576.074893][ T8475] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 576.075025][ T8475] RSP: 002b:00007f9e92656038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 576.075176][ T8475] RAX: ffffffffffffffda RBX: 00007f9e919b5fa0 RCX: 00007f9e9178e929 [ 576.075286][ T8475] RDX: 0000200000000000 RSI: 0000200000000040 RDI: 0000200000000140 [ 576.075394][ T8475] RBP: 00007f9e92656090 R08: 0000000000000000 R09: 0000000000000000 [ 576.075487][ T8475] R10: 0000000000010008 R11: 0000000000000246 R12: 0000000000000002 [ 576.075575][ T8475] R13: 0000000000000001 R14: 00007f9e919b5fa0 R15: 00007fff6b485bb8 [ 576.075712][ T8475] [ 576.082529][ T8471] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 576.125646][ T8472] loop5: detected capacity change from 0 to 2048 [ 576.533024][ T8478] netlink: 14528 bytes leftover after parsing attributes in process `syz.3.661'. [ 576.571834][ T8472] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 576.584725][ T8472] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 576.606335][ T8477] loop3: detected capacity change from 0 to 512 [ 576.885138][ T8472] fs-verity: sha512 using implementation "sha512-generic" [ 577.054000][ T8472] fs-verity (loop5, inode 13): Error -4 building Merkle tree [ 577.103648][ T5849] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 577.186431][ T7998] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 577.215252][ T8488] loop4: detected capacity change from 0 to 512 [ 577.278294][ T8488] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 577.357615][ T5849] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 577.368594][ T5849] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 577.382109][ T5849] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 577.395424][ T5849] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 577.408215][ T5849] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 577.507677][ T8491] netlink: 16 bytes leftover after parsing attributes in process `syz.3.666'. [ 577.528724][ T5849] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 577.529387][ T5851] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 577.538296][ T5849] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 577.558303][ T5849] usb 3-1: Product: syz [ 577.563815][ T5849] usb 3-1: Manufacturer: syz [ 577.568705][ T5849] usb 3-1: SerialNumber: syz [ 577.614986][ T5849] usb 3-1: config 0 descriptor?? [ 577.737208][ T8491] sctp: [Deprecated]: syz.3.666 (pid 8491) Use of struct sctp_assoc_value in delayed_ack socket option. [ 577.737208][ T8491] Use struct sctp_sack_info instead [ 577.795678][ T8491] netlink: 8 bytes leftover after parsing attributes in process `syz.3.666'. [ 577.814251][ T5851] usb 1-1: Using ep0 maxpacket: 16 [ 577.849487][ T5849] radio-si470x 3-1:0.0: DeviceID=0x6465 ChipID=0x7669 [ 577.863366][ T5851] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 577.877022][ T5851] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 577.887312][ T5851] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 577.901609][ T8491] loop3: detected capacity change from 0 to 256 [ 577.926102][ T8491] vfat: Unknown parameter '00000000000000000000044' [ 577.993189][ T5851] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 578.002963][ T5851] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.011550][ T5851] usb 1-1: Product: syz [ 578.015984][ T5851] usb 1-1: Manufacturer: syz [ 578.021423][ T5851] usb 1-1: SerialNumber: syz [ 578.041551][ T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 578.057010][ T5849] radio-si470x 3-1:0.0: software version 100, hardware version 101 [ 578.260074][ T5849] radio-si470x 3-1:0.0: submitting int urb failed (-90) [ 578.279785][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 578.291396][ T9] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 578.375813][ T5851] usb 1-1: 2:1 : format type 0 is detected, processed as PCM [ 578.396219][ T5851] usb 1-1: failed to enable PITCH for EP 0x82 [ 578.416943][ T5851] usb 1-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 578.425903][ T9] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 578.435538][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.444115][ T9] usb 6-1: Product: syz [ 578.448587][ T9] usb 6-1: Manufacturer: syz [ 578.453678][ T9] usb 6-1: SerialNumber: syz [ 578.636118][ T5851] usb 1-1: USB disconnect, device number 15 [ 578.680707][ T8485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 578.690931][ T8485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 578.772280][ T5849] radio-si470x 3-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 578.786857][ T5849] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -22 [ 578.858638][ T5849] usb 3-1: USB disconnect, device number 20 [ 578.892246][ T8499] loop4: detected capacity change from 0 to 1024 [ 579.719074][ T9] cdc_ncm 6-1:1.0: bind() failure [ 579.793504][ T9] cdc_ncm 6-1:1.1: probe with driver cdc_ncm failed with error -71 [ 579.825160][ T9] cdc_mbim 6-1:1.1: probe with driver cdc_mbim failed with error -71 [ 579.847635][ T9] usbtest 6-1:1.1: probe with driver usbtest failed with error -71 [ 579.900254][ T9] usb 6-1: USB disconnect, device number 3 [ 580.569425][ T5849] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 580.755490][ T8525] netlink: 24 bytes leftover after parsing attributes in process `syz.0.678'. [ 580.776208][ T5849] usb 5-1: Using ep0 maxpacket: 32 [ 580.802714][ T8526] loop3: detected capacity change from 0 to 512 [ 580.804295][ T5849] usb 5-1: config 0 has an invalid interface number: 219 but max is 0 [ 580.817791][ T5849] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 580.831452][ T5849] usb 5-1: config 0 has no interface number 0 [ 580.837831][ T5849] usb 5-1: config 0 interface 219 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 580.878525][ T8526] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 580.990288][ T5849] usb 5-1: New USB device found, idVendor=0582, idProduct=ecd6, bcdDevice=6b.1b [ 580.999981][ T5849] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.008323][ T5849] usb 5-1: Product: syz [ 581.013112][ T5849] usb 5-1: Manufacturer: syz [ 581.018040][ T5849] usb 5-1: SerialNumber: syz [ 581.124525][ T5849] usb 5-1: config 0 descriptor?? [ 581.520313][ T8534] loop2: detected capacity change from 0 to 1024 [ 581.555755][ T8529] loop5: detected capacity change from 0 to 4096 [ 581.564674][ T8535] netlink: 12 bytes leftover after parsing attributes in process `syz.0.680'. [ 581.691179][ T8538] bridge1: port 1(ip6gretap1) entered blocking state [ 581.698506][ T8538] bridge1: port 1(ip6gretap1) entered disabled state [ 581.706434][ T8538] ip6gretap1: entered allmulticast mode [ 581.717233][ T8538] ip6gretap1: entered promiscuous mode [ 583.291312][ T8541] loop3: detected capacity change from 0 to 32768 [ 583.530987][ T8541] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 583.531169][ T8541] allowing incompatible features above 0.0: (unknown version) [ 583.531269][ T8541] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 583.577184][ T8541] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0 [ 583.585849][ T8541] bcachefs (loop3): initializing new filesystem [ 583.611739][ T8541] bcachefs (loop3): going read-write [ 583.658497][ T8541] bcachefs (loop3): marking superblocks [ 583.721528][ T8541] bcachefs (loop3): initializing freespace [ 583.751422][ T8541] bcachefs (loop3): done initializing freespace [ 583.773112][ T8541] bcachefs (loop3): reading snapshots table [ 583.779621][ T8541] bcachefs (loop3): reading snapshots done [ 583.914902][ T8541] bcachefs (loop3): done starting filesystem [ 584.130574][ T5849] usb 5-1: USB disconnect, device number 13 [ 584.157118][ T8562] fuse: Bad value for 'fd' [ 584.176690][ T30] audit: type=1800 audit(1751057665.904:71): pid=8541 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.682" name="file1" dev="loop3" ino=4098 res=0 errno=0 [ 585.416288][ T8569] loop4: detected capacity change from 0 to 32768 [ 585.425210][ T8569] btrfs: Deprecated parameter 'usebackuproot' [ 585.431774][ T8569] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 585.448529][ T8569] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.687 (8569) [ 585.516932][ T8569] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 585.527838][ T8569] BTRFS info (device loop4): using sha256 (sha256-x86_64) checksum algorithm [ 585.543074][ T8569] BTRFS info (device loop4): using free-space-tree [ 585.704766][ T8572] loop5: detected capacity change from 0 to 64 [ 585.714214][ T8572] minix: Unknown parameter '' [ 585.834273][ T8581] FAULT_INJECTION: forcing a failure. [ 585.834273][ T8581] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 585.834560][ T8581] CPU: 1 UID: 0 PID: 8581 Comm: syz.2.689 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(undef) [ 585.834709][ T8581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 585.834792][ T8581] Call Trace: [ 585.834839][ T8581] [ 585.834890][ T8581] __dump_stack+0x26/0x30 [ 585.835060][ T8581] dump_stack_lvl+0x1df/0x270 [ 585.835236][ T8581] dump_stack+0x1e/0x25 [ 585.835385][ T8581] should_fail_ex+0x7dc/0x8a0 [ 585.835574][ T8581] should_fail+0x2a/0x40 [ 585.835719][ T8581] should_fail_usercopy+0x2e/0x40 [ 585.835886][ T8581] _copy_from_user+0x33/0x100 [ 585.836038][ T8581] ___sys_sendmsg+0x11b/0x3b0 [ 585.836192][ T8581] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 585.836562][ T8581] ? __rcu_read_unlock+0x6d/0xd0 [ 585.836739][ T8581] ? __fget_files+0x3b4/0x4a0 [ 585.836882][ T8581] ? __fget_files+0x3b9/0x4a0 [ 585.837035][ T8581] ? kmsan_get_metadata+0xfb/0x160 [ 585.837247][ T8581] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 585.837471][ T8581] __x64_sys_sendmsg+0x211/0x3e0 [ 585.837647][ T8581] ? fput+0x113/0x160 [ 585.837818][ T8581] ? kmsan_get_metadata+0xfb/0x160 [ 585.838017][ T8581] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 585.838222][ T8581] ? kmsan_get_metadata+0xfb/0x160 [ 585.838438][ T8581] x64_sys_call+0x32fb/0x3db0 [ 585.838640][ T8581] do_syscall_64+0xd9/0x210 [ 585.838794][ T8581] ? irqentry_exit+0x16/0x60 [ 585.839013][ T8581] ? clear_bhb_loop+0x40/0x90 [ 585.839181][ T8581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.839347][ T8581] RIP: 0033:0x7f792978e929 [ 585.839460][ T8581] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 585.839604][ T8581] RSP: 002b:00007f792a5dc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 585.839751][ T8581] RAX: ffffffffffffffda RBX: 00007f79299b5fa0 RCX: 00007f792978e929 [ 585.839863][ T8581] RDX: 0000000000000020 RSI: 0000200000000140 RDI: 0000000000000003 [ 585.839959][ T8581] RBP: 00007f792a5dc090 R08: 0000000000000000 R09: 0000000000000000 [ 585.840057][ T8581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 585.840147][ T8581] R13: 0000000000000000 R14: 00007f79299b5fa0 R15: 00007ffc0a0c2c88 [ 585.840295][ T8581] [ 585.899639][ T4368] BTRFS warning (device loop4): checksum verify failed on logical 5337088 mirror 1 wanted 0x600fa3b1bb0a61280b917c5e63cfb6d5f3303add0c7f49b39e428b009781bffd found 0xb0ae585742fb9a2192b73126353536d44c8d8b30f3bbebc2f2fc1c9093110d91 level 0 [ 585.900212][ T8569] BTRFS error (device loop4): failed to load root extent [ 585.900409][ T8569] BTRFS warning (device loop4): try to load backup roots slot 1 [ 585.956077][ T4368] BTRFS warning (device loop4): checksum verify failed on logical 5320704 mirror 1 wanted 0x3a96b260394a7399f18798ce453684459093f28a490b1793d7ea697f0b0df10a found 0x7f01c4af1fb2152f3830c55a52923d68d0275fe73b6fa7c7a1e3d865522068d9 level 0 [ 585.956626][ T8569] BTRFS error (device loop4): failed to load root free space [ 585.956828][ T8569] BTRFS warning (device loop4): try to load backup roots slot 2 [ 585.960906][ T4368] BTRFS error (device loop4): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 585.961278][ T8569] BTRFS warning (device loop4): couldn't read tree root [ 585.961397][ T8569] BTRFS warning (device loop4): try to load backup roots slot 3 [ 585.974052][ T4368] BTRFS warning (device loop4): checksum verify failed on logical 5242880 mirror 1 wanted 0x8d90b910ec13d95ec17ddbe87d1d5dca5d3dff1259e90cf51f7cd4ff39170caa found 0xa210a3171865c86c83c6902dcf663f66ee92d8210dba1b42a2170ab2de4331e8 level 0 [ 585.974553][ T8569] BTRFS warning (device loop4): couldn't read tree root [ 585.994171][ T8569] BTRFS error (device loop4): open_ctree failed: -5 [ 586.807783][ T5792] bcachefs (loop3): shutting down [ 586.807862][ T5792] bcachefs (loop3): going read-only [ 586.807981][ T5792] bcachefs (loop3): finished waiting for writes to stop [ 586.820174][ T5792] bcachefs (loop3): flushing journal and stopping allocators, journal seq 7 [ 587.507882][ T5792] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 7 [ 587.541624][ T5792] bcachefs (loop3): clean shutdown complete, journal seq 8 [ 587.544232][ T5792] bcachefs (loop3): marking filesystem clean [ 587.723323][ T5792] bcachefs (loop3): shutdown complete [ 588.557997][ T8599] loop4: detected capacity change from 0 to 32768 [ 588.669558][ T8599] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 588.698162][ T8599] (syz.4.694,8599,0):ocfs2_clear_journal_error:1147 ERROR: File system error -318767104 recorded in journal 0. [ 588.716981][ T8599] (syz.4.694,8599,0):ocfs2_clear_journal_error:1149 ERROR: File system on device loop4 needs checking. [ 588.755122][ T8599] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 588.877298][ T8602] loop2: detected capacity change from 0 to 4096 [ 589.024485][ T5793] ocfs2: Unmounting device (7,4) on (node local) [ 589.198158][ T8607] loop5: detected capacity change from 0 to 128 [ 589.205858][ T8602] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 589.251549][ T8607] vfat: Unknown parameter 'ㅗ$cmLckPO?׎FvPm ;`' [ 589.385346][ T8602] ntfs3(loop2): Failed to load $Extend (-22). [ 589.392238][ T8602] ntfs3(loop2): Failed to initialize $Extend. [ 589.459066][ T8607] loop5: detected capacity change from 0 to 1024 [ 590.190089][ T4368] hfsplus: b-tree write err: -5, ino 4 [ 591.546511][ T8619] loop5: detected capacity change from 0 to 32768 [ 591.555871][ T8619] XFS: noikeep mount option is deprecated. [ 591.733735][ T8622] loop0: detected capacity change from 0 to 32768 [ 591.743066][ T8622] XFS: ikeep mount option is deprecated. [ 591.766530][ T8619] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 591.882814][ T8622] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 592.189412][ T8622] XFS (loop0): Ending clean mount [ 592.221782][ T8622] XFS (loop0): Quotacheck needed: Please wait. [ 592.293163][ T8622] XFS (loop0): Quotacheck: Done. [ 592.382997][ T8640] loop4: detected capacity change from 0 to 2048 [ 592.411324][ T8619] XFS (loop5): Ending clean mount [ 592.423794][ T8619] XFS (loop5): Quotacheck needed: Please wait. [ 592.441581][ T8640] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 96: 0x25 != 0x13 [ 592.452569][ T8640] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 592.555440][ T8619] XFS (loop5): Quotacheck: Done. [ 592.571801][ T8640] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 592.668655][ T30] audit: type=1800 audit(1751057674.394:72): pid=8619 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.702" name="bus" dev="loop5" ino=9290 res=0 errno=0 [ 592.724394][ T5805] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 592.832135][ T7998] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 592.977474][ T8640] overlayfs: upper fs needs to support d_type. [ 593.019646][ T8640] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 593.027091][ T8640] overlayfs: failed to set xattr on upper [ 593.035461][ T8640] overlayfs: ...falling back to redirect_dir=nofollow. [ 593.043438][ T8640] overlayfs: ...falling back to index=off. [ 593.049660][ T8640] overlayfs: ...falling back to uuid=null. [ 593.329027][ T8642] loop3: detected capacity change from 0 to 512 [ 593.356098][ T5793] UDF-fs: error (device loop4): udf_read_inode: (ino 1317) failed !bh [ 593.377048][ T8642] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 593.411318][ T5793] UDF-fs: error (device loop4): udf_read_inode: (ino 1317) failed !bh [ 594.306622][ T3867] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.557947][ T3867] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.632419][ T8649] loop2: detected capacity change from 0 to 4096 [ 594.734029][ T3867] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.803314][ T8656] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 594.878571][ T3867] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.040301][ T5849] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 595.151364][ T3867] bridge_slave_1: left allmulticast mode [ 595.158255][ T3867] bridge0: port 2(bridge_slave_1) entered disabled state [ 595.177050][ T3867] bridge_slave_0: left allmulticast mode [ 595.183146][ T3867] bridge_slave_0: left promiscuous mode [ 595.190731][ T3867] bridge0: port 1(bridge_slave_0) entered disabled state [ 595.289361][ T5849] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 595.300932][ T5849] usb 4-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 595.310513][ T5849] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.361037][ T5849] usb 4-1: config 0 descriptor?? [ 596.026698][ T3867] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 596.141459][ T3867] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 596.174794][ T3867] bond0 (unregistering): Released all slaves [ 596.424950][ T3867] tipc: Disabling bearer [ 596.431815][ T3867] tipc: Left network mode [ 596.474769][ T5849] usbhid 4-1:0.0: can't add hid device: -71 [ 596.482268][ T5849] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 596.572969][ T5849] usb 4-1: USB disconnect, device number 24 [ 596.873890][ T3867] hsr_slave_0: left promiscuous mode [ 596.894815][ T3867] hsr_slave_1: left promiscuous mode [ 596.911428][ T3867] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 596.919360][ T3867] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 596.931840][ T3867] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 596.939851][ T3867] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 596.966534][ T3867] veth1_macvtap: left promiscuous mode [ 596.973053][ T3867] veth0_macvtap: left promiscuous mode [ 596.979358][ T3867] veth1_vlan: left promiscuous mode [ 596.984992][ T3867] veth0_vlan: left promiscuous mode [ 598.589616][ T8671] loop5: detected capacity change from 0 to 32768 [ 598.599144][ T8671] XFS: noikeep mount option is deprecated. [ 598.614315][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 598.621159][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 598.789671][ T8667] loop0: detected capacity change from 0 to 40427 [ 598.961044][ T8671] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 599.043090][ T8667] F2FS-fs (loop0): build fault injection rate: 771 [ 599.061263][ T8667] F2FS-fs (loop0): invalid crc value [ 599.313127][ T8672] loop3: detected capacity change from 0 to 32768 [ 599.322525][ T8672] XFS: noikeep mount option is deprecated. [ 599.406852][ T8672] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 599.437092][ T8667] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 600.083076][ T3867] team0 (unregistering): Port device team_slave_1 removed [ 600.122259][ T3867] team0 (unregistering): Port device team_slave_0 removed [ 600.165316][ T8672] XFS (loop3): Ending clean mount [ 600.178632][ T8672] XFS (loop3): Quotacheck needed: Please wait. [ 600.379397][ T8671] XFS (loop5): Ending clean mount [ 600.394262][ T8671] XFS (loop5): Quotacheck needed: Please wait. [ 600.414046][ T5087] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 600.496944][ T5087] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 600.534692][ T5087] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 600.544891][ T8671] XFS (loop5): Quotacheck: Done. [ 600.558119][ T8672] XFS (loop3): Quotacheck: Done. [ 600.654651][ T30] audit: type=1800 audit(1751057682.314:73): pid=8672 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.716" name="bus" dev="loop3" ino=9290 res=0 errno=0 [ 600.749775][ T5087] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 600.784469][ T5087] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 600.832795][ T7998] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 600.974237][ T5792] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 601.928726][ T8701] loop2: detected capacity change from 0 to 512 [ 602.013482][ T8701] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 602.102413][ T8694] chnl_net:caif_netlink_parms(): no params data found [ 602.924749][ T5087] Bluetooth: hci1: command tx timeout [ 603.173106][ T8712] 9pnet_fd: p9_fd_create_tcp (8712): problem connecting socket to 127.0.0.1 [ 603.321687][ T8710] netlink: 8 bytes leftover after parsing attributes in process `syz.0.717'. [ 603.331211][ T8710] netlink: 4 bytes leftover after parsing attributes in process `syz.0.717'. [ 603.493624][ T8710] loop0: detected capacity change from 0 to 128 [ 603.664653][ T8710] FAT-fs (loop0): bogus number of reserved sectors [ 603.671700][ T8710] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 603.681618][ T8710] FAT-fs (loop0): Can't find a valid FAT filesystem [ 603.746757][ T8694] bridge0: port 1(bridge_slave_0) entered blocking state [ 603.754739][ T8694] bridge0: port 1(bridge_slave_0) entered disabled state [ 603.767917][ T8694] bridge_slave_0: entered allmulticast mode [ 603.779279][ T8694] bridge_slave_0: entered promiscuous mode [ 603.908958][ T8694] bridge0: port 2(bridge_slave_1) entered blocking state [ 603.916634][ T8694] bridge0: port 2(bridge_slave_1) entered disabled state [ 603.924720][ T8694] bridge_slave_1: entered allmulticast mode [ 603.934704][ T8694] bridge_slave_1: entered promiscuous mode [ 604.016679][ T8732] netlink: 8 bytes leftover after parsing attributes in process `syz.2.724'. [ 604.167370][ T8694] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 604.216802][ T8694] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 604.255036][ T8728] netlink: 5 bytes leftover after parsing attributes in process `syz.5.723'. [ 604.381968][ T9] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 604.614011][ T8694] team0: Port device team_slave_0 added [ 604.698001][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 604.709419][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 604.718954][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.739094][ T8694] team0: Port device team_slave_1 added [ 604.821653][ T9] usb 4-1: config 0 descriptor?? [ 604.986926][ T8694] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 604.991243][ T5087] Bluetooth: hci1: command tx timeout [ 604.999620][ T8694] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 605.030404][ T8694] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 606.052791][ T8743] loop2: detected capacity change from 0 to 32768 [ 606.063206][ T8743] XFS: noikeep mount option is deprecated. [ 606.078628][ T8694] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 606.086072][ T8694] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 606.114260][ T8694] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 606.143273][ T8743] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 606.194074][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 606.200919][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 606.217260][ T9] usb 4-1: USB disconnect, device number 25 [ 606.369042][ T8694] hsr_slave_0: entered promiscuous mode [ 606.382005][ T8694] hsr_slave_1: entered promiscuous mode [ 606.657239][ T8760] loop5: detected capacity change from 0 to 512 [ 606.740555][ T8760] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 606.786926][ T8743] XFS (loop2): Ending clean mount [ 606.801780][ T8743] XFS (loop2): Quotacheck needed: Please wait. [ 606.868722][ T8743] XFS (loop2): Quotacheck: Done. [ 606.944554][ T30] audit: type=1800 audit(1751057688.664:74): pid=8743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.728" name="bus" dev="loop2" ino=9290 res=0 errno=0 [ 607.070040][ T5087] Bluetooth: hci1: command tx timeout [ 607.184678][ T5795] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 607.252015][ T8762] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 607.693861][ T8694] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 607.750416][ T8694] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 607.827044][ T8694] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 607.901536][ T8694] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 608.070544][ T8775] netlink: 5 bytes leftover after parsing attributes in process `syz.3.736'. [ 608.721968][ T9] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 608.934842][ T9] usb 6-1: config 0 has an invalid interface number: 106 but max is 0 [ 608.943872][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 608.954493][ T9] usb 6-1: config 0 has no interface number 0 [ 608.961079][ T9] usb 6-1: config 0 interface 106 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 43 [ 608.971505][ T9] usb 6-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 608.988194][ T9] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 608.998665][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.046490][ T9] usb 6-1: config 0 descriptor?? [ 609.065353][ T8777] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 609.083936][ T8694] 8021q: adding VLAN 0 to HW filter on device bond0 [ 609.141449][ T9] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 609.159969][ T5087] Bluetooth: hci1: command tx timeout [ 609.176428][ T5876] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 609.332944][ T8777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 609.342723][ T8777] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 609.371509][ T8694] 8021q: adding VLAN 0 to HW filter on device team0 [ 609.436607][ T5876] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 609.448273][ T5876] usb 1-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 609.457950][ T5876] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.503343][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 609.506663][ T3891] usb 6-1: Failed to submit usb control message: -71 [ 609.510968][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 609.518017][ T3891] usb 6-1: unable to send the bmi data to the device: -71 [ 609.533308][ T3891] usb 6-1: unable to get target info from device [ 609.540110][ T3891] usb 6-1: could not get target info (-71) [ 609.546236][ T3891] usb 6-1: could not probe fw (-71) [ 609.559921][ T5852] usb 6-1: USB disconnect, device number 4 [ 609.628044][ T5876] usb 1-1: config 0 descriptor?? [ 609.676800][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 609.684519][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 610.133552][ T5849] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 610.336451][ T5849] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 610.348021][ T5849] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 610.470453][ T5849] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 610.480094][ T5849] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 610.488421][ T5849] usb 3-1: SerialNumber: syz [ 610.851194][ T5849] usb 3-1: 0:2 : does not exist [ 610.856536][ T5849] usb 3-1: unit 255 not found! [ 611.124594][ T5849] usb 3-1: USB disconnect, device number 21 [ 611.306526][ T8802] loop5: detected capacity change from 0 to 1024 [ 611.544329][ T8802] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 611.615637][ T8800] loop3: detected capacity change from 0 to 32768 [ 611.633584][ T5876] usbhid 1-1:0.0: can't add hid device: -71 [ 611.640454][ T5876] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 611.680514][ T5876] usb 1-1: USB disconnect, device number 16 [ 611.837947][ T8800] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 611.838124][ T8800] allowing incompatible features above 0.0: (unknown version) [ 611.838224][ T8800] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 611.887929][ T8800] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0 [ 611.896584][ T8800] bcachefs (loop3): initializing new filesystem [ 611.916517][ T8800] bcachefs (loop3): going read-write [ 611.938707][ T8800] bcachefs (loop3): marking superblocks [ 612.002222][ T8800] bcachefs (loop3): initializing freespace [ 612.031844][ T8800] bcachefs (loop3): done initializing freespace [ 612.053935][ T8800] bcachefs (loop3): reading snapshots table [ 612.064235][ T8800] bcachefs (loop3): reading snapshots done [ 612.081379][ T7998] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 612.124596][ T8819] loop0: detected capacity change from 0 to 512 [ 612.173671][ T8800] bcachefs (loop3): done starting filesystem [ 612.242474][ T8819] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 612.350975][ T30] audit: type=1800 audit(1751057694.084:75): pid=8800 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.742" name="file1" dev="loop3" ino=4098 res=0 errno=0 [ 612.625961][ T8694] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 612.846139][ T8822] syzkaller0: entered promiscuous mode [ 612.852284][ T8822] syzkaller0: entered allmulticast mode [ 613.459575][ T5792] bcachefs (loop3): shutting down [ 613.464909][ T5792] bcachefs (loop3): going read-only [ 613.470766][ T5792] bcachefs (loop3): finished waiting for writes to stop [ 613.529425][ T5792] bcachefs (loop3): flushing journal and stopping allocators, journal seq 4 [ 613.667635][ T5792] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 4 [ 613.721921][ T5792] bcachefs (loop3): clean shutdown complete, journal seq 5 [ 613.763742][ T5792] bcachefs (loop3): marking filesystem clean [ 613.928348][ T5792] bcachefs (loop3): shutdown complete [ 614.199093][ T30] audit: type=1326 audit(1751057695.924:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8840 comm="syz.5.750" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f969b58e929 code=0x0 [ 614.243620][ T8832] ALSA: seq fatal error: cannot create timer (-19) [ 614.785077][ T8848] loop0: detected capacity change from 0 to 512 [ 614.888615][ T8848] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 614.902262][ T8848] ext4 filesystem being mounted at /167/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 615.108889][ T8694] veth0_vlan: entered promiscuous mode [ 615.186634][ T8694] veth1_vlan: entered promiscuous mode [ 615.516208][ T8694] veth0_macvtap: entered promiscuous mode [ 615.612841][ T8694] veth1_macvtap: entered promiscuous mode [ 615.740880][ T8852] loop2: detected capacity change from 0 to 4096 [ 615.778455][ T8694] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 615.816555][ T8852] ntfs3(loop2): ino=2, mi_enum_attr [ 615.823279][ T8852] ntfs3(loop2): Failed to load $LogFile (-22). [ 615.874982][ T8694] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 615.942859][ T8694] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.955814][ T8694] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.966435][ T8694] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.975718][ T8694] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.188274][ T8852] Bluetooth: MGMT ver 1.23 [ 617.204739][ T8866] loop5: detected capacity change from 0 to 512 [ 617.322290][ T8866] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 617.823595][ T8867] loop2: detected capacity change from 0 to 4096 [ 617.889980][ T8867] EXT4-fs (loop2): unsupported descriptor size 1344 [ 618.281902][ T8874] loop3: detected capacity change from 0 to 2048 [ 618.294781][ T8874] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 618.337949][ T8874] syz.3.749: attempt to access beyond end of device [ 618.337949][ T8874] loop3: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 618.362238][ T8874] FAULT_INJECTION: forcing a failure. [ 618.362238][ T8874] name failslab, interval 1, probability 0, space 0, times 0 [ 618.363977][ T8876] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 618.375357][ T8874] CPU: 0 UID: 0 PID: 8874 Comm: syz.3.749 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(undef) [ 618.375521][ T8874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 618.375624][ T8874] Call Trace: [ 618.375687][ T8874] [ 618.375746][ T8874] __dump_stack+0x26/0x30 [ 618.375980][ T8874] dump_stack_lvl+0x1df/0x270 [ 618.376197][ T8874] dump_stack+0x1e/0x25 [ 618.376394][ T8874] should_fail_ex+0x7dc/0x8a0 [ 618.376613][ T8874] should_failslab+0x15b/0x200 [ 618.376859][ T8874] kmem_cache_alloc_noprof+0xf0/0xec0 [ 618.377035][ T8874] ? security_file_alloc+0x7a/0x6e0 [ 618.377265][ T8874] ? kmsan_get_metadata+0xfb/0x160 [ 618.377488][ T8874] ? kmsan_get_metadata+0xfb/0x160 [ 618.377725][ T8874] security_file_alloc+0x7a/0x6e0 [ 618.377987][ T8874] init_file+0x91/0x330 [ 618.378178][ T8874] alloc_empty_file+0x165/0x5b0 [ 618.378375][ T8874] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 618.378621][ T8874] path_openat+0xa1/0x6760 [ 618.378837][ T8874] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 618.379065][ T8874] ? kmsan_get_metadata+0xfb/0x160 [ 618.379296][ T8874] ? do_sys_openat2+0x1bb/0x2f0 [ 618.379496][ T8874] ? filter_irq_stacks+0x13f/0x190 [ 618.379681][ T8874] ? stack_depot_save_flags+0x35/0x7b0 [ 618.379883][ T8874] ? kmsan_get_metadata+0xfb/0x160 [ 618.380112][ T8874] ? kmsan_get_metadata+0xfb/0x160 [ 618.380341][ T8874] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 618.380557][ T8874] ? kmsan_get_metadata+0xfb/0x160 [ 618.380786][ T8874] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 618.381040][ T8874] do_filp_open+0x280/0x660 [ 618.381335][ T8874] do_sys_openat2+0x1bb/0x2f0 [ 618.381553][ T8874] __x64_sys_open+0x219/0x2c0 [ 618.381778][ T8874] x64_sys_call+0x18ec/0x3db0 [ 618.382022][ T8874] do_syscall_64+0xd9/0x210 [ 618.382207][ T8874] ? irqentry_exit+0x16/0x60 [ 618.382432][ T8874] ? clear_bhb_loop+0x40/0x90 [ 618.382623][ T8874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.382804][ T8874] RIP: 0033:0x7f7997d8e929 [ 618.382938][ T8874] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 618.383090][ T8874] RSP: 002b:00007f7998b30038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 618.383253][ T8874] RAX: ffffffffffffffda RBX: 00007f7997fb5fa0 RCX: 00007f7997d8e929 [ 618.383377][ T8874] RDX: 0000000000000040 RSI: 0000000000141242 RDI: 0000200000000140 [ 618.383488][ T8874] RBP: 00007f7998b30090 R08: 0000000000000000 R09: 0000000000000000 [ 618.383597][ T8874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 618.383700][ T8874] R13: 0000000000000000 R14: 00007f7997fb5fa0 R15: 00007ffd96f14068 [ 618.383885][ T8874] [ 618.852790][ T5805] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 619.062882][ T8883] loop3: detected capacity change from 0 to 64 [ 619.191273][ T5852] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 619.229731][ T8886] netlink: 2 bytes leftover after parsing attributes in process `syz.5.761'. [ 619.391307][ T5852] usb 3-1: Using ep0 maxpacket: 8 [ 619.476092][ T5852] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 619.485847][ T5852] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.495216][ T5852] usb 3-1: Product: syz [ 619.499788][ T5852] usb 3-1: Manufacturer: syz [ 619.504659][ T5852] usb 3-1: SerialNumber: syz [ 619.612063][ T5852] usb 3-1: config 0 descriptor?? [ 619.869458][ T5852] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 619.983881][ T8894] loop5: detected capacity change from 0 to 128 [ 620.018274][ T30] audit: type=1326 audit(1751057701.744:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8893 comm="syz.0.763" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fea9d18e929 code=0x0 [ 620.065596][ T8894] vfat: Unknown parameter 'ㅗ$cmLckPO?׎FvPm ;`' [ 620.287001][ T8894] loop5: detected capacity change from 0 to 1024 [ 620.672640][ T12] hfsplus: b-tree write err: -5, ino 4 [ 620.733243][ T8881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 620.742934][ T8881] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 621.120755][ T5852] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 621.184914][ T5852] usb 3-1: USB disconnect, device number 22 [ 621.358022][ T8912] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 621.432277][ T8911] loop3: detected capacity change from 0 to 512 [ 621.462923][ T8911] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 621.779883][ T8918] FAULT_INJECTION: forcing a failure. [ 621.779883][ T8918] name failslab, interval 1, probability 0, space 0, times 0 [ 621.797116][ T8918] CPU: 1 UID: 0 PID: 8918 Comm: syz.0.769 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(undef) [ 621.797285][ T8918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 621.797376][ T8918] Call Trace: [ 621.797430][ T8918] [ 621.797486][ T8918] __dump_stack+0x26/0x30 [ 621.797675][ T8918] dump_stack_lvl+0x1df/0x270 [ 621.797879][ T8918] dump_stack+0x1e/0x25 [ 621.798045][ T8918] should_fail_ex+0x7dc/0x8a0 [ 621.798246][ T8918] should_failslab+0x15b/0x200 [ 621.798461][ T8918] kmem_cache_alloc_noprof+0xf0/0xec0 [ 621.798617][ T8918] ? alloc_empty_file+0x10d/0x5b0 [ 621.798806][ T8918] ? kmsan_get_metadata+0xfb/0x160 [ 621.799003][ T8918] ? kmsan_get_metadata+0xfb/0x160 [ 621.799219][ T8918] alloc_empty_file+0x10d/0x5b0 [ 621.799385][ T8918] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 621.799599][ T8918] alloc_file_pseudo+0x1de/0x400 [ 621.799802][ T8918] __shmem_file_setup+0x46c/0x590 [ 621.799952][ T8918] shmem_file_setup+0x61/0x80 [ 621.800121][ T8918] __se_sys_memfd_create+0x844/0x11f0 [ 621.800319][ T8918] __x64_sys_memfd_create+0x78/0xb0 [ 621.800492][ T8918] x64_sys_call+0x15be/0x3db0 [ 621.800684][ T8918] do_syscall_64+0xd9/0x210 [ 621.800840][ T8918] ? irqentry_exit+0x16/0x60 [ 621.801032][ T8918] ? clear_bhb_loop+0x40/0x90 [ 621.801192][ T8918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.801350][ T8918] RIP: 0033:0x7fea9d18e929 [ 621.801457][ T8918] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 621.801586][ T8918] RSP: 002b:00007fea9df51e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 621.801746][ T8918] RAX: ffffffffffffffda RBX: 000000000000968d RCX: 00007fea9d18e929 [ 621.801858][ T8918] RDX: 00007fea9df51ef0 RSI: 0000000000000000 RDI: 00007fea9d2114cc [ 621.801960][ T8918] RBP: 000020000001c300 R08: 00007fea9df51bb7 R09: 00007fea9df51e40 [ 621.802065][ T8918] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000009640 [ 621.802161][ T8918] R13: 00007fea9df51ef0 R14: 00007fea9df51eb0 R15: 0000200000000480 [ 621.802305][ T8918] [ 622.372267][ T8924] loop0: detected capacity change from 0 to 128 [ 622.437539][ T8924] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 622.487705][ T8924] ext4 filesystem being mounted at /172/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 622.559071][ T8931] loop5: detected capacity change from 0 to 16 [ 622.600650][ T8931] erofs (device loop5): mounted with root inode @ nid 36. [ 622.753188][ T8931] erofs (device loop5): big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 622.764615][ T8931] erofs (device loop5): big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 622.775662][ T8931] erofs (device loop5): read error -117 @ 72 of nid 36 [ 622.859313][ T5805] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 623.109679][ T8938] loop2: detected capacity change from 0 to 1024 [ 623.211320][ T8938] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 623.389280][ T5876] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 623.636609][ T5876] usb 4-1: config 0 has an invalid interface number: 237 but max is 0 [ 623.645370][ T5876] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 623.656242][ T5876] usb 4-1: config 0 has no interface number 0 [ 623.662792][ T5876] usb 4-1: config 0 interface 237 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 623.753114][ T5795] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 623.784149][ T5876] usb 4-1: New USB device found, idVendor=1410, idProduct=9011, bcdDevice=42.6b [ 623.793909][ T5876] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.802455][ T5876] usb 4-1: Product: syz [ 623.806904][ T5876] usb 4-1: Manufacturer: syz [ 623.812060][ T5876] usb 4-1: SerialNumber: syz [ 623.982862][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 623.992003][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 624.076652][ T5876] usb 4-1: config 0 descriptor?? [ 624.127628][ T5876] qmi_wwan 4-1:0.237: probe with driver qmi_wwan failed with error -22 [ 624.310154][ T5876] usb 4-1: USB disconnect, device number 26 [ 624.437779][ T3891] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 624.446956][ T3891] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 624.571624][ T8945] FAULT_INJECTION: forcing a failure. [ 624.571624][ T8945] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 624.585604][ T8945] CPU: 1 UID: 0 PID: 8945 Comm: syz.2.777 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(undef) [ 624.585772][ T8945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 624.585863][ T8945] Call Trace: [ 624.585915][ T8945] [ 624.585970][ T8945] __dump_stack+0x26/0x30 [ 624.586154][ T8945] dump_stack_lvl+0x1df/0x270 [ 624.586349][ T8945] dump_stack+0x1e/0x25 [ 624.586516][ T8945] should_fail_ex+0x7dc/0x8a0 [ 624.586718][ T8945] should_fail+0x2a/0x40 [ 624.586866][ T8945] should_fail_usercopy+0x2e/0x40 [ 624.587039][ T8945] _copy_from_user+0x33/0x100 [ 624.587218][ T8945] ___sys_sendmsg+0x11b/0x3b0 [ 624.587384][ T8945] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 624.587633][ T8945] ? __rcu_read_unlock+0x6d/0xd0 [ 624.587797][ T8945] ? __fget_files+0x3b4/0x4a0 [ 624.587943][ T8945] ? __fget_files+0x3b9/0x4a0 [ 624.588094][ T8945] ? kmsan_get_metadata+0xfb/0x160 [ 624.588292][ T8945] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 624.588506][ T8945] __x64_sys_sendmsg+0x211/0x3e0 [ 624.588673][ T8945] ? fput+0x113/0x160 [ 624.588825][ T8945] ? kmsan_get_metadata+0xfb/0x160 [ 624.589021][ T8945] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 624.589231][ T8945] ? kmsan_get_metadata+0xfb/0x160 [ 624.589451][ T8945] x64_sys_call+0x32fb/0x3db0 [ 624.589659][ T8945] do_syscall_64+0xd9/0x210 [ 624.589814][ T8945] ? irqentry_exit+0x16/0x60 [ 624.590008][ T8945] ? clear_bhb_loop+0x40/0x90 [ 624.590176][ T8945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.590339][ T8945] RIP: 0033:0x7f792978e929 [ 624.590451][ T8945] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 624.590580][ T8945] RSP: 002b:00007f792a5bb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 624.590725][ T8945] RAX: ffffffffffffffda RBX: 00007f79299b6080 RCX: 00007f792978e929 [ 624.590835][ T8945] RDX: 0000000000000000 RSI: 0000200000000d80 RDI: 0000000000000004 [ 624.590928][ T8945] RBP: 00007f792a5bb090 R08: 0000000000000000 R09: 0000000000000000 [ 624.591023][ T8945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 624.591111][ T8945] R13: 0000000000000001 R14: 00007f79299b6080 R15: 00007ffc0a0c2c88 [ 624.591247][ T8945] [ 624.851427][ T30] audit: type=1326 audit(1751057706.574:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8941 comm="syz.0.776" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fea9d18e929 code=0x0 [ 625.115215][ T8948] loop6: detected capacity change from 0 to 512 [ 625.194126][ T8948] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 625.343486][ T8948] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 625.356883][ T8948] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 625.437153][ T8957] loop3: detected capacity change from 0 to 256 [ 625.447480][ T8957] vfat: Unknown parameter 'shortn' [ 625.454385][ T8954] FAULT_INJECTION: forcing a failure. [ 625.454385][ T8954] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 625.468008][ T8954] CPU: 0 UID: 0 PID: 8954 Comm: syz.2.778 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(undef) [ 625.468172][ T8954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 625.468263][ T8954] Call Trace: [ 625.468324][ T8954] [ 625.468379][ T8954] __dump_stack+0x26/0x30 [ 625.468565][ T8954] dump_stack_lvl+0x1df/0x270 [ 625.468760][ T8954] dump_stack+0x1e/0x25 [ 625.468922][ T8954] should_fail_ex+0x7dc/0x8a0 [ 625.469123][ T8954] should_fail+0x2a/0x40 [ 625.469288][ T8954] should_fail_usercopy+0x2e/0x40 [ 625.469476][ T8954] _copy_to_user+0x35/0x120 [ 625.469642][ T8954] simple_read_from_buffer+0x1b2/0x340 [ 625.469863][ T8954] proc_fail_nth_read+0x1d2/0x2c0 [ 625.470042][ T8954] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 625.470212][ T8954] vfs_read+0x279/0xf00 [ 625.470408][ T8954] ? stack_depot_save_flags+0x35/0x7b0 [ 625.470582][ T8954] ? kmsan_get_metadata+0xfb/0x160 [ 625.470793][ T8954] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 625.471020][ T8954] __x64_sys_read+0x1fb/0x4d0 [ 625.471247][ T8954] x64_sys_call+0x39db/0x3db0 [ 625.471450][ T8954] do_syscall_64+0xd9/0x210 [ 625.471602][ T8954] ? irqentry_exit+0x16/0x60 [ 625.471799][ T8954] ? clear_bhb_loop+0x40/0x90 [ 625.471966][ T8954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.472127][ T8954] RIP: 0033:0x7f792978d33c [ 625.472237][ T8954] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 625.472379][ T8954] RSP: 002b:00007f792a5dc030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 625.472520][ T8954] RAX: ffffffffffffffda RBX: 00007f79299b5fa0 RCX: 00007f792978d33c [ 625.472631][ T8954] RDX: 000000000000000f RSI: 00007f792a5dc0a0 RDI: 0000000000000004 [ 625.472726][ T8954] RBP: 00007f792a5dc090 R08: 0000000000000000 R09: 0000000000000000 [ 625.472821][ T8954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 625.472912][ T8954] R13: 0000000000000000 R14: 00007f79299b5fa0 R15: 00007ffc0a0c2c88 [ 625.473051][ T8954] [ 625.752117][ T8955] loop5: detected capacity change from 0 to 512 [ 625.793994][ T8955] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 626.111549][ T8694] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 626.417004][ T8970] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ULvyآDUDw}z [ 627.195494][ T8984] loop0: detected capacity change from 0 to 16 [ 627.296220][ T8984] erofs (device loop0): mounted with root inode @ nid 36. [ 627.461663][ T8984] erofs (device loop0): big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 627.473215][ T8984] erofs (device loop0): big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 627.484362][ T8984] erofs (device loop0): read error -117 @ 72 of nid 36 [ 627.966477][ T8981] loop2: detected capacity change from 0 to 32768 [ 627.976220][ T8981] btrfs: Deprecated parameter 'usebackuproot' [ 627.982897][ T8981] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 628.082061][ T30] audit: type=1326 audit(1751057709.774:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8986 comm="syz.5.791" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f969b58e929 code=0x0 [ 628.163109][ T8981] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.788 (8981) [ 628.780177][ T8981] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 628.792452][ T8981] BTRFS info (device loop2): using sha256 (sha256-x86_64) checksum algorithm [ 628.804268][ T8981] BTRFS info (device loop2): using free-space-tree [ 628.812453][ T5852] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 628.999432][ T30] audit: type=1326 audit(1751057710.714:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8994 comm="syz.6.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b3258e929 code=0x7ffc0000 [ 629.072261][ T5852] usb 4-1: Using ep0 maxpacket: 32 [ 629.122338][ T5852] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 629.132338][ T5852] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.201162][ T8981] BTRFS info (device loop2): rebuilding free space tree [ 629.255707][ T30] audit: type=1326 audit(1751057710.774:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8994 comm="syz.6.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7f8b3258e929 code=0x7ffc0000 [ 629.281699][ T30] audit: type=1326 audit(1751057710.774:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8994 comm="syz.6.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b3258e929 code=0x7ffc0000 [ 629.305596][ T30] audit: type=1326 audit(1751057710.784:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8994 comm="syz.6.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f8b3258e929 code=0x7ffc0000 [ 629.328647][ T30] audit: type=1326 audit(1751057710.844:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8994 comm="syz.6.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b3258e929 code=0x7ffc0000 [ 629.351870][ T30] audit: type=1326 audit(1751057710.844:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8994 comm="syz.6.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b3258e929 code=0x7ffc0000 [ 629.461648][ T5852] usb 4-1: config 0 descriptor?? [ 629.491322][ T8981] netlink: 132 bytes leftover after parsing attributes in process `syz.2.788'. [ 629.724653][ T5852] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 629.737958][ T5852] usb 4-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 629.748686][ T5852] usb 4-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 630.158467][ T9016] loop6: detected capacity change from 0 to 7 [ 630.238616][ T9016] Dev loop6: unable to read RDB block 7 [ 630.245127][ T9016] loop6: unable to read partition table [ 630.325717][ T9016] loop6: partition table beyond EOD, truncated [ 630.332671][ T9016] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 630.479650][ T9019] loop0: detected capacity change from 0 to 512 [ 630.582908][ T9019] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 631.684387][ T5795] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 632.014844][ T9023] loop5: detected capacity change from 0 to 32768 [ 632.114967][ T9023] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 632.160265][ T30] audit: type=1800 audit(1751057713.894:86): pid=9023 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.799" name="file1" dev="loop5" ino=17058 res=0 errno=0 [ 632.254653][ T9023] kvm: user requested TSC rate below hardware speed [ 632.774651][ T7998] ocfs2: Unmounting device (7,5) on (node local) [ 633.277100][ T9040] loop0: detected capacity change from 0 to 16 [ 633.285478][ T30] audit: type=1326 audit(1751057715.004:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9037 comm="syz.6.805" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8b3258e929 code=0x0 [ 633.331467][ T9040] erofs (device loop0): mounted with root inode @ nid 36. [ 633.414072][ T9040] erofs (device loop0): big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 633.425405][ T9040] erofs (device loop0): big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 633.436487][ T9040] erofs (device loop0): read error -117 @ 72 of nid 36 [ 634.560111][ T5849] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 634.563829][ T9047] loop6: detected capacity change from 0 to 512 [ 634.638220][ T9047] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 634.648333][ T9047] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 634.723188][ T9047] EXT4-fs (loop6): warning: checktime reached, running e2fsck is recommended [ 634.762585][ T9047] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 634.817326][ T9047] System zones: 0-2, 18-18, 34-34 [ 634.846474][ T9047] EXT4-fs error (device loop6): ext4_orphan_get:1393: inode #15: comm syz.6.807: iget: bad i_size value: 360287970189639680 [ 634.915597][ T9047] EXT4-fs error (device loop6): ext4_orphan_get:1398: comm syz.6.807: couldn't read orphan inode 15 (err -117) [ 635.010220][ T9047] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 635.336620][ T5849] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 635.348259][ T5849] usb 3-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 635.358066][ T5849] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.428091][ T5849] usb 3-1: config 0 descriptor?? [ 635.532466][ T8694] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 635.942225][ T5849] logitech 0003:046D:C50C.000D: unknown main item tag 0x0 [ 635.952183][ T5849] logitech 0003:046D:C50C.000D: unknown main item tag 0x0 [ 635.960448][ T5849] logitech 0003:046D:C50C.000D: unknown main item tag 0x0 [ 635.967992][ T5849] logitech 0003:046D:C50C.000D: unknown main item tag 0x0 [ 635.975889][ T5849] logitech 0003:046D:C50C.000D: unknown main item tag 0x0 [ 635.983860][ T5849] logitech 0003:046D:C50C.000D: unknown main item tag 0x0 [ 635.991616][ T5849] logitech 0003:046D:C50C.000D: unknown main item tag 0x0 [ 636.200132][ T5849] logitech 0003:046D:C50C.000D: hidraw0: USB HID v0.00 Device [HID 046d:c50c] on usb-dummy_hcd.2-1/input0 [ 636.280872][ T9063] loop3: detected capacity change from 0 to 512 [ 636.345521][ T9063] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 636.371143][ T9065] loop0: detected capacity change from 0 to 128 [ 636.392384][ T9065] vfat: Unknown parameter 'ㅗ$cmLckPO?׎FvPm ;`' [ 636.768360][ T5849] usb 3-1: USB disconnect, device number 23 [ 637.215546][ T9074] netlink: 108 bytes leftover after parsing attributes in process `syz.0.816'. [ 637.821585][ T9075] loop5: detected capacity change from 0 to 2048 [ 638.413905][ T9086] loop0: detected capacity change from 0 to 256 [ 638.446913][ T9075] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 638.512736][ T9086] exfat: Deprecated parameter 'utf8' [ 638.518566][ T9086] exfat: Deprecated parameter 'namecase' [ 638.525706][ T9086] exfat: Deprecated parameter 'namecase' [ 638.531940][ T9086] exfat: Deprecated parameter 'utf8' [ 638.572968][ T9082] loop3: detected capacity change from 0 to 4096 [ 638.604604][ T9090] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 638.853234][ T9086] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0x5270ca8d, utbl_chksum : 0xe619d30d) [ 639.021639][ T9075] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 639.032446][ T9086] exFAT-fs (loop0): start_clu is invalid cluster(0x400) [ 640.466341][ T9082] ntfs3(loop3): Failed to read $UpCase (-4). [ 643.543521][ T9099] warning: `syz.5.824' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 644.465773][ T3658] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.891660][ T3658] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.035493][ T9112] syz.6.827: attempt to access beyond end of device [ 645.035493][ T9112] nbd6: rw=0, sector=0, nr_sectors = 1 limit=0 [ 645.317845][ T3658] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.531080][ T3658] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.174303][ T3658] bridge_slave_1: left allmulticast mode [ 646.180425][ T3658] bridge_slave_1: left promiscuous mode [ 646.187294][ T3658] bridge0: port 2(bridge_slave_1) entered disabled state [ 646.320348][ T3658] bridge_slave_0: left allmulticast mode [ 646.326448][ T3658] bridge_slave_0: left promiscuous mode [ 646.333430][ T3658] bridge0: port 1(bridge_slave_0) entered disabled state [ 647.526332][ T3658] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 647.545855][ T3658] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 647.570657][ T3658] bond0 (unregistering): Released all slaves [ 647.784046][ T3658] tipc: Disabling bearer [ 647.790180][ T3658] tipc: Left network mode [ 647.835113][ T3658] IPVS: stopping master sync thread 6390 ... [ 648.228598][ T3658] hsr_slave_0: left promiscuous mode [ 648.243361][ T3658] hsr_slave_1: left promiscuous mode [ 648.251738][ T3658] batman_adv: batadv0: Interface deactivated: dummy0 [ 648.259061][ T3658] batman_adv: batadv0: Removing interface: dummy0 [ 648.272618][ T3658] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 648.284714][ T3658] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 648.296982][ T3658] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 648.304969][ T3658] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 648.339843][ T3658] veth1_macvtap: left promiscuous mode [ 648.345682][ T3658] veth0_macvtap: left promiscuous mode [ 648.351920][ T3658] veth1_vlan: left promiscuous mode [ 648.357622][ T3658] veth0_vlan: left promiscuous mode [ 649.320635][ T3658] team0 (unregistering): Port device team_slave_1 removed [ 649.352215][ T3658] team0 (unregistering): Port device team_slave_0 removed [ 649.510816][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 649.591797][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 649.631472][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 649.642699][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 649.808391][ T9121] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 650.184580][ T5797] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 650.205040][ T5797] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 650.216546][ T5797] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 650.232751][ T5797] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 650.258434][ T5797] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 651.631930][ T5797] Bluetooth: hci4: command 0x0406 tx timeout [ 651.748676][ T9128] chnl_net:caif_netlink_parms(): no params data found [ 652.369296][ T5797] Bluetooth: hci2: command tx timeout [ 654.430135][ T5797] Bluetooth: hci2: command tx timeout [ 656.046892][ T9161] syzkaller0: entered promiscuous mode [ 656.052951][ T9161] syzkaller0: entered allmulticast mode [ 656.072276][ T9128] bridge0: port 1(bridge_slave_0) entered blocking state [ 656.083044][ T9128] bridge0: port 1(bridge_slave_0) entered disabled state [ 656.092695][ T9128] bridge_slave_0: entered allmulticast mode [ 656.102725][ T9128] bridge_slave_0: entered promiscuous mode [ 656.158239][ T9128] bridge0: port 2(bridge_slave_1) entered blocking state [ 656.166405][ T9128] bridge0: port 2(bridge_slave_1) entered disabled state [ 656.176918][ T9128] bridge_slave_1: entered allmulticast mode [ 656.187124][ T9128] bridge_slave_1: entered promiscuous mode [ 656.929308][ T5797] Bluetooth: hci2: command tx timeout [ 658.989541][ T5797] Bluetooth: hci2: command tx timeout [ 659.846122][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 659.854420][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 660.640877][ T9170] loop3: detected capacity change from 0 to 4096 [ 661.005153][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 661.210002][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 662.032840][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 662.679993][ T9128] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 662.715082][ T9128] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 662.929864][ T9170] NILFS (loop3): error -4 creating segctord thread [ 663.081015][ T9128] team0: Port device team_slave_0 added [ 663.101567][ T9128] team0: Port device team_slave_1 added [ 665.824114][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 667.732754][ T5849] IPVS: starting estimator thread 0... [ 667.762548][ T9128] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 667.777730][ T9128] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 667.805176][ T9128] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 668.320770][ T9184] IPVS: using max 192 ests per chain, 9600 per kthread [ 668.343671][ T9128] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 668.356579][ T9128] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 668.383415][ T9128] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 668.913877][ T9128] hsr_slave_0: entered promiscuous mode [ 668.924614][ T9128] hsr_slave_1: entered promiscuous mode [ 668.933729][ T9128] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 668.942163][ T9128] Cannot create hsr debugfs directory [ 669.979519][ T9201] loop6: detected capacity change from 0 to 1024 [ 672.799994][ T9201] hfsplus: failed to load attributes file [ 673.610410][ T9128] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 673.661525][ T9128] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 673.690805][ T9128] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 673.740988][ T9128] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 673.994582][ T9223] loop6: detected capacity change from 0 to 8 [ 674.034987][ T9223] squashfs: Unknown parameter '' [ 674.094675][ T9223] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 674.146844][ T9223] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 674.785966][ T9223] loop6: detected capacity change from 0 to 2048 [ 674.872500][ T9223] Dev loop6: RDB in block 1 has bad checksum [ 675.344151][ T9128] 8021q: adding VLAN 0 to HW filter on device bond0 [ 675.436351][ T9128] 8021q: adding VLAN 0 to HW filter on device team0 [ 675.606470][ T4226] bridge0: port 1(bridge_slave_0) entered blocking state [ 675.614203][ T4226] bridge0: port 1(bridge_slave_0) entered forwarding state [ 675.761933][ T4226] bridge0: port 2(bridge_slave_1) entered blocking state [ 675.769736][ T4226] bridge0: port 2(bridge_slave_1) entered forwarding state [ 682.559500][ T5844] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 682.748650][ T5844] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 682.762269][ T5844] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 682.772923][ T5844] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 682.782504][ T5844] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 682.861343][ T9128] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 682.915612][ T9260] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 682.949438][ T5844] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 683.065022][ T9267] loop3: detected capacity change from 0 to 256 [ 683.260837][ T5844] usb 6-1: USB disconnect, device number 5 [ 683.272997][ T9267] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 683.569580][ T9267] syz.3.870: attempt to access beyond end of device [ 683.569580][ T9267] loop3: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 683.583554][ T9267] gfs2: error -5 reading superblock [ 686.204076][ T9283] loop3: detected capacity change from 0 to 4096 [ 686.393771][ T9283] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 687.132994][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 687.245497][ T9293] loop6: detected capacity change from 0 to 128 [ 688.472443][ T9298] ALSA: mixer_oss: invalid index 40000 [ 690.525002][ T5852] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 690.541540][ T5852] dvb_usb_az6027 4-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 690.563112][ T5852] usb 4-1: USB disconnect, device number 27 [ 690.691656][ T9128] veth0_vlan: entered promiscuous mode [ 690.843146][ T9128] veth1_vlan: entered promiscuous mode [ 692.418691][ T9128] veth0_macvtap: entered promiscuous mode [ 692.470615][ T9128] veth1_macvtap: entered promiscuous mode [ 692.814394][ T9128] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 693.004970][ T9128] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 693.123618][ T9128] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.134107][ T9128] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.143659][ T9128] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.152865][ T9128] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.344906][ T9342] syz.3.888 (9342): drop_caches: 2 [ 704.601169][ T9348] IPVS: sync thread started: state = MASTER, mcast_ifn = vlan0, syncid = 8388612, id = 0 [ 704.768073][ T9350] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.925733][ T9350] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.129320][ T9350] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.266142][ T5087] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 705.296494][ T9350] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.325756][ T5087] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 705.340805][ T5087] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 705.362449][ T5087] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 705.378432][ T5087] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 705.586858][ T9350] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.620204][ T9350] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.653068][ T9350] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.686066][ T9350] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.554706][ T9361] loop3: detected capacity change from 0 to 64 [ 706.916920][ T9361] ===================================================== [ 706.925103][ T9361] BUG: KMSAN: uninit-value in hfs_find_set_zero_bits+0x74d/0xb60 [ 706.933617][ T9361] hfs_find_set_zero_bits+0x74d/0xb60 [ 706.939581][ T9361] hfs_vbm_search_free+0x13c/0x5b0 [ 706.944940][ T9361] hfs_extend_file+0x6a5/0x1b00 [ 706.950422][ T9361] hfs_get_block+0x435/0x1150 [ 706.955413][ T9361] __block_write_begin_int+0xa73/0x3030 [ 706.961660][ T9361] cont_write_begin+0x10e1/0x1bc0 [ 706.966922][ T9361] hfs_write_begin+0x85/0x130 [ 706.972126][ T9361] cont_write_begin+0x35d/0x1bc0 [ 706.977295][ T9361] hfs_write_begin+0x85/0x130 [ 706.988198][ T9361] hfs_file_truncate+0x1d6/0xe60 [ 706.995276][ T9361] hfs_inode_setattr+0x964/0xaa0 [ 707.000693][ T9361] notify_change+0x1990/0x1aa0 [ 707.005711][ T9361] do_truncate+0x28f/0x310 [ 707.010577][ T9361] vfs_truncate+0x921/0x9d0 [ 707.015365][ T9361] do_sys_truncate+0x103/0x240 [ 707.020632][ T9361] __x64_sys_truncate+0x74/0xb0 [ 707.025780][ T9361] x64_sys_call+0x321f/0x3db0 [ 707.030897][ T9361] do_syscall_64+0xd9/0x210 [ 707.035625][ T9361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 707.041967][ T9361] [ 707.044423][ T9361] Uninit was created at: [ 707.049171][ T9361] __kmalloc_cache_noprof+0x7f7/0xed0 [ 707.054785][ T9361] hfs_mdb_get+0x1cc8/0x2a90 [ 707.060137][ T9361] hfs_fill_super+0x3d0/0xb80 [ 707.065050][ T9361] get_tree_bdev_flags+0x6e6/0x920 [ 707.070618][ T9361] get_tree_bdev+0x38/0x50 [ 707.075313][ T9361] hfs_get_tree+0x35/0x40 [ 707.080091][ T9361] vfs_get_tree+0xb3/0x5c0 [ 707.090759][ T9361] do_new_mount+0x738/0x1610 [ 707.095640][ T9361] path_mount+0x6db/0x1e90 [ 707.102302][ T9361] __se_sys_mount+0x6eb/0x7d0 [ 707.107279][ T9361] __x64_sys_mount+0xe4/0x150 [ 707.112450][ T9361] x64_sys_call+0xfa7/0x3db0 [ 707.117330][ T9361] do_syscall_64+0xd9/0x210 [ 707.122227][ T9361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 707.128371][ T9361] [ 707.131066][ T9361] CPU: 0 UID: 0 PID: 9361 Comm: syz.3.893 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(undef) [ 707.143575][ T9361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 707.154781][ T9361] ===================================================== [ 707.162202][ T9361] Disabling lock debugging due to kernel taint [ 707.168531][ T9361] Kernel panic - not syncing: kmsan.panic set ... [ 707.175168][ T9361] CPU: 0 UID: 0 PID: 9361 Comm: syz.3.893 Tainted: G B 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(undef) [ 707.189035][ T9361] Tainted: [B]=BAD_PAGE [ 707.193347][ T9361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 707.203619][ T9361] Call Trace: [ 707.207051][ T9361] [ 707.210134][ T9361] __dump_stack+0x26/0x30 [ 707.214739][ T9361] dump_stack_lvl+0x53/0x270 [ 707.219594][ T9361] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 707.225726][ T9361] dump_stack+0x1e/0x25 [ 707.230159][ T9361] panic+0x4bd/0xd50 [ 707.234397][ T9361] kmsan_report+0x31c/0x320 [ 707.239197][ T9361] ? __msan_warning+0x1b/0x30 [ 707.244147][ T9361] ? hfs_find_set_zero_bits+0x74d/0xb60 [ 707.249953][ T9361] ? hfs_vbm_search_free+0x13c/0x5b0 [ 707.255503][ T9361] ? hfs_extend_file+0x6a5/0x1b00 [ 707.260807][ T9361] ? hfs_get_block+0x435/0x1150 [ 707.265921][ T9361] ? __block_write_begin_int+0xa73/0x3030 [ 707.271940][ T9361] ? cont_write_begin+0x10e1/0x1bc0 [ 707.277371][ T9361] ? hfs_write_begin+0x85/0x130 [ 707.282523][ T9361] ? cont_write_begin+0x35d/0x1bc0 [ 707.287874][ T9361] ? hfs_write_begin+0x85/0x130 [ 707.293009][ T9361] ? hfs_file_truncate+0x1d6/0xe60 [ 707.298415][ T9361] ? hfs_inode_setattr+0x964/0xaa0 [ 707.303824][ T9361] ? notify_change+0x1990/0x1aa0 [ 707.309053][ T9361] ? do_truncate+0x28f/0x310 [ 707.313927][ T9361] ? vfs_truncate+0x921/0x9d0 [ 707.318890][ T9361] ? do_sys_truncate+0x103/0x240 [ 707.324122][ T9361] ? __x64_sys_truncate+0x74/0xb0 [ 707.329470][ T9361] ? x64_sys_call+0x321f/0x3db0 [ 707.334621][ T9361] ? do_syscall_64+0xd9/0x210 [ 707.339543][ T9361] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 707.345882][ T9361] ? __block_write_begin_int+0xa73/0x3030 [ 707.351926][ T9361] ? cont_write_begin+0x10e1/0x1bc0 [ 707.357364][ T9361] ? hfs_write_begin+0x85/0x130 [ 707.362518][ T9361] ? cont_write_begin+0x35d/0x1bc0 [ 707.367868][ T9361] ? hfs_write_begin+0x85/0x130 [ 707.372976][ T9361] ? hfs_file_truncate+0x1d6/0xe60 [ 707.378370][ T9361] ? hfs_inode_setattr+0x964/0xaa0 [ 707.383749][ T9361] ? notify_change+0x1990/0x1aa0 [ 707.388931][ T9361] ? do_truncate+0x28f/0x310 [ 707.393771][ T9361] ? vfs_truncate+0x921/0x9d0 [ 707.398712][ T9361] ? do_sys_truncate+0x103/0x240 [ 707.403952][ T9361] ? __x64_sys_truncate+0x74/0xb0 [ 707.409244][ T9361] ? x64_sys_call+0x321f/0x3db0 [ 707.414355][ T9361] ? do_syscall_64+0xd9/0x210 [ 707.419251][ T9361] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 707.425560][ T9361] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 707.431640][ T9361] ? kfree+0x121/0xec0 [ 707.435905][ T9361] ? filter_irq_stacks+0x49/0x190 [ 707.441139][ T9361] ? stack_depot_save_flags+0x35/0x7b0 [ 707.446821][ T9361] ? kmsan_get_metadata+0xfb/0x160 [ 707.452197][ T9361] __msan_warning+0x1b/0x30 [ 707.456937][ T9361] hfs_find_set_zero_bits+0x74d/0xb60 [ 707.462546][ T9361] ? kmsan_get_metadata+0xfb/0x160 [ 707.467909][ T9361] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 707.473987][ T9361] hfs_vbm_search_free+0x13c/0x5b0 [ 707.479348][ T9361] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 707.485439][ T9361] hfs_extend_file+0x6a5/0x1b00 [ 707.490551][ T9361] ? __mark_inode_dirty+0x371/0x1090 [ 707.496086][ T9361] hfs_get_block+0x435/0x1150 [ 707.501014][ T9361] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 707.507369][ T9361] ? kmsan_get_metadata+0xfb/0x160 [ 707.512761][ T9361] __block_write_begin_int+0xa73/0x3030 [ 707.518599][ T9361] ? kmsan_get_metadata+0xfb/0x160 [ 707.524007][ T9361] ? __pfx_hfs_get_block+0x10/0x10 [ 707.529405][ T9361] cont_write_begin+0x10e1/0x1bc0 [ 707.534634][ T9361] ? kmsan_get_metadata+0xfb/0x160 [ 707.539998][ T9361] ? kmsan_get_metadata+0xfb/0x160 [ 707.545394][ T9361] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 707.551504][ T9361] hfs_write_begin+0x85/0x130 [ 707.556423][ T9361] ? __pfx_hfs_get_block+0x10/0x10 [ 707.561782][ T9361] ? __pfx_hfs_write_begin+0x10/0x10 [ 707.567325][ T9361] cont_write_begin+0x35d/0x1bc0 [ 707.572530][ T9361] hfs_write_begin+0x85/0x130 [ 707.577452][ T9361] ? __pfx_hfs_get_block+0x10/0x10 [ 707.582823][ T9361] hfs_file_truncate+0x1d6/0xe60 [ 707.588009][ T9361] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 707.594334][ T9361] ? up_read+0x6a/0xf0 [ 707.598644][ T9361] ? truncate_setsize+0x13d/0x1c0 [ 707.603916][ T9361] hfs_inode_setattr+0x964/0xaa0 [ 707.609127][ T9361] ? __pfx_hfs_inode_setattr+0x10/0x10 [ 707.614847][ T9361] ? __pfx_hfs_inode_setattr+0x10/0x10 [ 707.620567][ T9361] notify_change+0x1990/0x1aa0 [ 707.625616][ T9361] do_truncate+0x28f/0x310 [ 707.630311][ T9361] vfs_truncate+0x921/0x9d0 [ 707.635107][ T9361] do_sys_truncate+0x103/0x240 [ 707.640137][ T9361] __x64_sys_truncate+0x74/0xb0 [ 707.645259][ T9361] x64_sys_call+0x321f/0x3db0 [ 707.650272][ T9361] do_syscall_64+0xd9/0x210 [ 707.654978][ T9361] ? irqentry_exit+0x16/0x60 [ 707.659818][ T9361] ? clear_bhb_loop+0x40/0x90 [ 707.664711][ T9361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 707.670810][ T9361] RIP: 0033:0x7f7997d8e929 [ 707.675393][ T9361] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 707.695239][ T9361] RSP: 002b:00007f7998b30038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 707.703976][ T9361] RAX: ffffffffffffffda RBX: 00007f7997fb5fa0 RCX: 00007f7997d8e929 [ 707.712322][ T9361] RDX: 0000000000000000 RSI: 0000000003000000 RDI: 0000200000000900 [ 707.720479][ T9361] RBP: 00007f7997e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 707.728622][ T9361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 707.736766][ T9361] R13: 0000000000000000 R14: 00007f7997fb5fa0 R15: 00007ffd96f14068 [ 707.744965][ T9361] [ 707.748524][ T9361] Kernel Offset: disabled [ 707.752959][ T9361] Rebooting in 86400 seconds..