last executing test programs: 7.892642778s ago: executing program 3 (id=566): syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010102cab4c508720c14008a570102030109022400010b00e0090904f405021df452080905030300000508810905"], &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="850000007e0000009500000000200000de3cc524b60c191de90cc19ffcc7beb2c66c9fa037c6c60cf84fedcdc714ec4031f80a075fd674ddad111770a806b4710ffcc0da2bfcf7047243bc1173644f7cc09e41cb0052509310b4ee59dfb59b6ca9774bc9c351ca9929b8748a113751a8481b"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x80) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000440)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000001c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc01c64b9, &(0x7f0000000280)={0x0, 0x0, 0x0, r3, 0xeeeeeeee}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000080)={0x9000000a}) 7.727507275s ago: executing program 0 (id=568): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r1 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) syz_mount_image$hfsplus(&(0x7f0000000140), &(0x7f0000000a40)='./file2\x00', 0x810084, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYRESHEX, @ANYRES8, @ANYRESDEC, @ANYRESOCT=0x0, @ANYRES64=0x0, @ANYRES8], 0x5, 0x686, &(0x7f00000001c0)="$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") renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file5\x00', 0x0) write$FUSE_STATFS(r0, &(0x7f0000005f00)={0x60, 0x0, 0x0, {{0xfffffffffffffffd, 0x17, 0x4, 0x4, 0x8, 0xfffffc00, 0x1, 0x8}}}, 0x60) fadvise64(r0, 0x0, 0x60, 0x4) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x67f1, 0x5d9f, 0x3, 0x1c96, 0x4, 0xabe, 0x5, {0x0, @in={{0x2, 0x4e21, @multicast1}}, 0x7, 0x0, 0x81, 0x92, 0x2}}, &(0x7f0000000040)=0xb0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000240)={r2, @in6={{0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0x44}, 0x8}}, 0x100, 0x4b1, 0x1, 0x3, 0x5}, &(0x7f00000001c0)=0x98) r3 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_int(r3, 0x0, 0xb, &(0x7f0000000080)=0x6e, 0x4) sendmsg$inet(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000002100)="0800a9fc0da6b30a", 0xffe3}], 0x1, &(0x7f0000001d00)=ANY=[@ANYBLOB="30000000000000000000000007000000890704ac1414aa0011000000000000000000000001"], 0x30}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0xa4, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x10, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x4, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}]}]}, 0xa4}}, 0x0) 7.200919088s ago: executing program 0 (id=571): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000140)=0x100, 0x4) bind$bt_hci(r0, &(0x7f00000002c0)={0x1f, 0x3, 0x4}, 0x6) recvmmsg(r0, &(0x7f00000001c0)=[{{0x0, 0xfffffffffffffd81, 0x0, 0x0, 0x0, 0x5f}, 0x8}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48c05}, 0x4040150) r3 = syz_usb_connect$hid(0x6, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000010ac0100000001000000010902240001000000000904000001030000000921ffff000122050009058103"], 0x0) r4 = syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file3\x00', 0x4080, &(0x7f00000001c0)=ANY=[], 0x2, 0xc4e, &(0x7f00000018c0)="$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") rename(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240)='./file1\x00') syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/oops_count', 0x96c00, 0x26) fcntl$F_SET_FILE_RW_HINT(r5, 0x40e, &(0x7f0000000080)=0x4) finit_module(r5, 0x0, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f0000000b80)=ANY=[@ANYBLOB="6c4efc40e0c1050ca39183b0697f6b211141051f9c80428c45fddeabb7945742ccaa9a606fdaab372fc88ef3632c70acfad09b5eeb563c34e86582dde328b8bb5dcc772a96303e984ebc0fd9f981281c77f9d59cd461e3bf9887c1afff5e295b330dd8f1b4cc36a9ced35181e14e", @ANYRESOCT=r0, @ANYRES64=r3, @ANYRES64=r0, @ANYRES8, @ANYRES64=r4], 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000940)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090780000"], 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NL80211_CMD_JOIN_IBSS(r6, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="276735e13a8988bd2ec4d9dc61342d5782e5b87a21080eafa0a5539a6a77aeef96bd7ed4510179a5adadd56d149508282ac64ff79a78d5b7cd", @ANYRES8, @ANYRESHEX, @ANYRES16=r2, @ANYBLOB="08002700020000000800a100a9040000050034006e000000080026006c090000"], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000000, &(0x7f00000003c0)={[{@nolazytime}, {@orlov}, {@acl}, {@norecovery}, {@usrquota}, {@quota}]}, 0x1, 0x513, &(0x7f0000000c40)="$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") r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r9, 0x405c5503, &(0x7f0000000440)={{0x2, 0x7f, 0x0, 0x25}, 'syz1\x00', 0x2f}) ioctl$UI_SET_EVBIT(r9, 0x40045564, 0x12) ioctl$UI_DEV_CREATE(r9, 0x5501) write$uinput_user_dev(r8, &(0x7f00000004c0)={'syz0\x00', {0x7, 0x3, 0x1, 0x9}, 0x7, [0x4, 0x6, 0x804, 0xe9a2, 0x1, 0xfffffffd, 0xa9ba, 0xc1f, 0x1, 0x7f5d, 0x3, 0x0, 0x5, 0x10000, 0x2, 0x3, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x3, 0x3, 0x9, 0xfff, 0x8a0, 0x6, 0x8001, 0x33b5, 0x6, 0xfffffffc, 0x0, 0x9, 0xb, 0xcc, 0x8, 0x80, 0x8000, 0x5, 0x5, 0xfffffffd, 0x8, 0xb, 0x5, 0xffff8001, 0x6, 0x3, 0x80000000, 0x1, 0x9, 0x7, 0x0, 0x5, 0xfff, 0x1, 0x7fe, 0x7fff, 0x10000, 0x2, 0x8], [0x2, 0x1, 0x10000, 0x100, 0xc, 0x9, 0x5, 0x4, 0x9, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x7, 0x8, 0x5, 0xcc, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0x5, 0x80000001, 0x4, 0x0, 0x4, 0x6, 0x7, 0x9, 0x4, 0x1, 0x5, 0x5, 0xfffffb66, 0xfb5, 0x2, 0x4, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x8, 0x6f, 0x80b, 0x7, 0x6, 0x525ba681, 0x4f74, 0x7, 0x1, 0x1, 0x7, 0x0, 0x6, 0x10000, 0x1306, 0x8b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x43, 0x4, 0xfffffffb, 0x7aa, 0x10, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x7fffffff, 0x1, 0x1, 0x4, 0x8, 0xfffffffa, 0x9, 0x9, 0x6, 0x7f, 0x5, 0xa3, 0x3, 0x2, 0x9f, 0x3, 0x4c, 0x3, 0x5, 0x2, 0xd21e, 0x9, 0x13, 0xfffffffd, 0x2, 0xfff, 0x6, 0x100, 0x7c83, 0xd, 0x1, 0x4, 0xf, 0xa0000000, 0x47, 0x7, 0x0, 0x11, 0x3, 0xfff, 0x27, 0x7, 0x8000, 0x7ff, 0x12, 0x2, 0x10001, 0x1, 0x0, 0x6, 0x71d, 0xf], [0x81, 0x3, 0x10, 0x4e26, 0x3, 0x40, 0xfffffff3, 0x7, 0x4, 0x1, 0x3, 0x5, 0x56, 0xc28, 0x9, 0x40, 0x5, 0xa, 0x79a, 0x101, 0x9, 0x6, 0xc41f, 0x80000001, 0x8b6, 0xffffffff, 0x0, 0x0, 0x6a, 0x48000, 0x0, 0x0, 0x1000, 0x10, 0xd, 0x6, 0x8000, 0x53, 0x78d, 0x4, 0x1, 0xffffb027, 0xfffffff8, 0x9, 0x7, 0x7, 0x109, 0x7, 0x7, 0x4, 0x0, 0xb, 0x400, 0x8, 0x0, 0x8, 0x7, 0x9a33247, 0x8, 0x0, 0x1, 0x8001, 0xfffffff7, 0x5]}, 0x45c) r10 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x2341) ioctl$CEC_S_MODE(r10, 0x40046109, &(0x7f0000000180)=0xf0) close_range(r1, 0xffffffffffffffff, 0x0) 5.444369814s ago: executing program 3 (id=578): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x11}}, 0x2006}, 0x1c) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000bc0)={0x44, r0, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x28, 0x33, @assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x5da}, @device_b, @device_a, @random="8ce14ad6abf0", {0x1, 0xd50}}, 0x8000, 0xc1, {0x0, 0x6, @default_ap_ssid}, @void, @void}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x40) syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) syz_mount_image$exfat(&(0x7f0000000140), &(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, &(0x7f0000000d00)=ANY=[@ANYBLOB='iocharset=macinuit,umask=00000000000000000000011,namecase=1,discard,allow_utime=00000000000000000051165,errors=remount-ro,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c6572726f72733d72656d6f756e742d726f2c646973636172642c6572726f72733d636f6e74696e75652c00f2c9556a18a270828e22ef7b1e507ea0f39210a0c52433f4907bdeee35d1c695ac5ee0bbbc8185a23cfdb2a2838e74361ff855df9a6091fc7f140431a79cf8c6d84fd0dbec8878ab5e7f73c44e826ea7110d57a130e3ce93cc4fcd5c9a147794acf0286a39c6327ddaa3103b7e25c8b0e292e08719931e21a55c36a935968904eb1275080751f4337040f5240321563496bb48be6f02baec639eb0094a6d713784d64c54477ce506ad9872dfe130d3eb40364141db4074a31df89f332c702e0cf2a7677c7216f7e2cf50b6005054c25f47f668ba1a93ad449474d45fa364066a5c77a086bd636a22967a6163e56f44aba1e04cf9511a67b0df0a7004bdc8ed802d6d7b4acf0ddc482ab9b433ed0cafe825ee84ec7439e0422e60fee1164e6257fd484041b538caf67706d0e3ef0fc22d8065e3870eff87222c9f07b86ef16578cfd50e112638302c318b293c3aad890ae1285784348f4e3084e3755f0755bba92e5c9824bfdabe1fbd12e64a0de351f933fc29bfa617a9eb2b25b490eb38c35308cffc48206a4c29c73d86583c256471db37b3cd726c3da81bb2fa71978755b3bc360186ed9c0f80e5a6", @ANYRES8], 0x3, 0x1510, &(0x7f0000003640)="$eJzs3AuYTlX7MPD7XmvtMSQ9TXIY1lr35kkOyyRJDklySJIkSXJKSJrklYTEkFPSkITkMCSHISSHiUnjfD4fkyRpkiSnnJL1XVN83t7qe//v/+17/a//3L/r2pd1P2vfa6/93M9h7W1mvusytGbjWtUaEhH8W/DXf5IAIBYABgLAdQAQAEC5uHJxWf05JSb9ewdhf61HUq/2DNjVxPXP3rj+2RvXP3vj+mdvXP/sjeufvXH9szeuP2PZ2ebpBa/nLftufP8/O+Pv//9FMkuP/Wpt6Ru7/gspXP/sjev/v1bwX9mJ65+9cf2zN65/9sb1zw5y/GkP1z974/ozlp1d7fvPvF3d7Wq//hhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMZQ9n/RUKAC63r/a8GGOMMcYYY4wx9tfxOa72DBhjjDHGGGOMMfb/H4IACQoCiIEcEAs5IRcIALgW8sB1EIHrIQ5ugLxwI+SD/FAACkI8FILCoMGABYIQikBRiMJNUAxuhuJQAkpCKXBQGhLgFigDt0JZuA3Kwe1QHu6AClARKkFluBOqwF1QFe6GanAPVIcaUBNqwb1QG+6DOnA/1IUHoB48CPXhIWgAD0NDeAQawaPQGB6DJvA4NIVm0BxaQMv/Vv5L0ANehp7QC5KgN/SBV6Av9IP+MAAGwqswCF6DwfA6JMMQGApvwDB4E4bDWzACRsIoeBtGwzswBsbCOBgPKTABJsK7MAneg8kwBabCNEiF6TAD3oeZMAtmwwcwBz6EuTAP5sMCSIOPYCEsgnT4GBbDJ5ABS2ApLIPlsAJWwipYDWtgLayD9bABNsIm2AxbYCtsg+2wA3bCLtgNn8Ie+Az2wuewD774F/PP/EN+VwQEFChQocIYjMFYjMVcmAtzY27Mg3kwghGMwzjMi3kxH+bDAlgA4zEeC2NhNGiQkLAIFsEoRrEYFsPiWBxLYkl06DABE7AM3oplsSyWw3JYHstjBayIFbEyVsYqWAWrYlWshtWwOlbHmlgT78V7sTfWwTpYF+tiPax3+fYUNsSG2AgbYWNsjE2wCTbFptgcm2NLbImtsBW2xtbYFttiO2yH7bE9JmIidsAO2BE7YifshJ2xM3bBLtgVu2E3fCkH4Mv4MvbC6qI39sE+2BeTc/THATgAX8VB+Bq+hq9jMg7BofgGvoFv4nA8jSNwJI7CUVhFvINjcCySGI8pmIITcSJOwkk4GafgFJyGqTgdZ+AMnImzcBZ+gHPwQ/wQ5+E8XIBpmIYLcRGmYzouxjOYgUtwKS7D5bgCl+MqXI2rcC2uw7W4ATfgJtyEW3ALbsNtuAN34C5UAPgpfoafYTLuw324H/fjATyAB/EgZmImHsJDeBgP4xE8gkfxKB7D43gCj+MpPIWn8QyexbN4Hs/jBXwh/ptGu0qsSQaRRQklYkSMiBWxIpfIJXKL3CKPyCMiIiLiRJzIK/KKfCKfKCAKiHgRLwqLwsIII0iEMQAgoiIqioliorgoLkqKksIJJxJEgigjyoiyoqwoJ24X5cUdooKoKNq4yqKyqCLauqriblFNVBPVRQ1RU9QStURtUVvUEXVEXVFX1BP1RH3xkGggemN/fERkVaaxGIJNxFBsKpoJeekTrJUYjq1FG9FWPCVG4ghsL1q5RPGs6CDGYEfxNzEWnxedxXjsIl4UXUU30V28JHqI1q6n6CUmY2/RR0zDvqKf6C8GiJlYQ3yAc3LWFK+LZDFEDBVviAX4phgu3hIjxEgxSrwtRot3xBgxVowT40WKmCAminfFJPGemCymiKlimkgV08UM8b6YKWaJ2eIDMUd8KOaKeWK+WCDSxEdioVgk0sXHYrH4RGSIJWKpWCaWixVipVglVos1Yq1YJ9aLDWKj2CQ2iy1iq9gmtosdYqfYJXaLT8Ue8ZnYKz4X+8QXYr/4UhwQX4mD4muRKb4Rh8S34rD4ThwR34uj4gdxTBwXJ8RJcUr8KE6LM+KsOCfOi5/EBfGzuCi8AIlSSCmVDGSMzCFjZU6ZS14jc8vg0rN7vYyTN8i88kaZT+aXBWRBGS8LycJSSyOtJBnKIrKojMqbZDF5sywuS8iSspR0srRMkLfIMvJWWVbeJsvJ22V5eYesICvKSrKyvFNWkXdJiPx6jOqyhqwpa8l7ZW15n6wj75d15QOynnxQ1pcPyQbyYdlQPiIbyUdlY/mYbCIfl01lM9lctpAt5ROylXxStpZtZFv5lGwnn5bt5TMyUT4rO0h/6SXyvOwsX5Bd5Iuyq+wmu8uf5UXpZU/ZSwL0ln3kK7Kv7Cf7ywFyoHxVDpKvycHydZksh8ih8g05TL4ph8u35Ag5Uo6Sb8vR8h05Ro6V4+R4mSInyInyXTlJvicnyylyqpwmU+V02f/SSLOl/Kf57/5B/uBfjr5JbpZb5Fa5TW6XO+ROuUvulrvlHrlH7pV75T65T+6X++UBeUAelAdlpsyUh+QheVgelkfkEXlUHpXH5HF5Tp6Up+SP8rQ8I8/Ic/K8PC8vXHoOQKESSiqlAhWjcqhYlVPlUteo3OpalUddpyLqehWnblB51Y0qn8qvCqiCKl4VUoWVVkZZRSpURVRRFVU34aUXjCqpSimnSqsEdcu/kq+KqZtVcVXiN/mX55f0J/NrqVqqVqqVaq1aq7aqrWqn2qn2qr1KVImqg+qgOqqOqpPqpDqrzqqL6qK6qq6qu+queqgeqqfqqZJUkuqjXlF9VT/VXw1QA9WrapAapAarwSpZJauhaqgapoap4Wq4GqFGqFFqlBqtRqsxaowap8apFJWiJqqJapKapCaryWqqmqpSVaqaoWaomWqmmq1mqzlqjpqr5qr5ar5KU2lqoVqo0lW6WqwWqwy1RC1Ry9QytUKtUKvUKrVGrVHr1Dq1QW1QGWqz2qy2qq1qu9qudqqdarfarfaoPWqv2qv2qX1qv9qvDqgD6qA6qDJVpjqkDqnD6rA6oo6oo+qoOqaOqRPqhDqlTqnT6rQ6q86q8+q8uqAuqIvqYtayLxCBCFSggpggJogNYoNcQa4gd5A7yBPkCSJBJIgL4oK8wY1BviB/UCAoGMQHhYLCgQ5MYANxqejR4KagWHBzUDwoEZQMSgUuKB0kBLcEZYJbg7LBbUG54PagfHBHUCGoGFQKKgd3BlWCu4Kqwd1BteCeoHpQI6gZ1AruDWoH9wV1gvuDusEDQb3gwaB+8FDQIHg4aBg8EjQKHg0aB48FTYLHg6ZBs6B50CJo+ZeO7/3p/E+6nrqXTtK9dR/9iu6r++n+eoAeqF/Vg/RrerB+XSfrIXqofkMP02/q4fotPUKP1KP023q0fkeP0WP1OD1ep+gJeqJ+V0/S7+nJeoqeqqfpVD1dz9Dv65l6lp6tP9Bz9Id6rp6n5+sFOk1/pBfqRTpdf6wX6090hl6il+plerleoVfqVXq1XqPX6nV6vd6gN+pNerPeorfqbXq73qF36l16t/5U79Gf6b36c71Pf6H36y/1Af2VPqi/1pn6G31If6sP6+/0Ef29Pqp/0Mf0cX1Cn9Sn9I/6tD6jz+pz+rz+SV/QP+uL2mct7rO+3o0yysSYGBNrYk0uk8vkNrlNHpPHREzExJk4k9fkNflMPlPAFDDxJt4UNoVNFjJkipgiJmqippgpZoqb4qakKWmccSbBJJgypowpa8qacqacKW/KmwqmgqlkKpk7zZ3mLnOXudvcbe4x95gapoapZWqZ2qa2qWPqmLqmrqln6pn6pr5pYBqYhqahaWQamcamsWlimpimpqlpbpqblqalaWVamdamtWlr2pp2pp1pb9qbRJNoOpgOpqPpaDqZTqaz6Wy6mC6mq+lqupvupofpYXqanibJJJk+po/pa/qa/qa/GWgGmkFmkBlsBptkk2yGmqFmmBlmhpvhZoQZaUZlLVTNO2aMGWvGmfEmxaSYiWaimWQmmclmsplqpppUk2pmmBlmpplpZpvZZo6ZY+aauWa+mW/STJpZaBaadJNuFpvFJsNkmKVmqVlulpuVZqVZbVabtWatWQ/rzUaz0Ww2m81Ws9VsN9vNTrPT7Da7zR6zx+w1e80+s8/sN/vNAXPAHDQHTabJNIfMIXPYHDZHzBFz1Bw1x8wxc8KcMKfMKXPanDZnzVlz3uS/9H3pTazNaXPZa2xue63NY6+z/xgXsAVtvC1kC1tt89n8v4mNtba4LWFL2lLW2dI2wd7yu7iCrWgr2cr2TlvF3mWr/i6ube+zdez9tq59wNay9/4mrmcftPXtY7YBIoBtZhvZFraxfcw2sY/bpraZbW5b2Hb2advePmMT7bO2g33ud/FCu8iutmvsWrvO7rGf2bP2nD1sv7Pn7U+2p+1lB9pX7SD7mh1sX7fJdsjv4lH2bTvavmPH2LF2nB3/u3iqnWZT7XQ7w75vZ9pZv4vT7Ed2jk23c+08O98u+CXOmlO6/dgutp/YDLvELrXL7HK7wq60q/7vXJfZDXaj3WR320/tVrvNbrc77E6765c46zz22s/tPvuFPWS/tQfsV/agPWIz7Te/xFnnd8R+b4/aH+wxe9yesCftKfujPW3P/HL+Wed+0v5sL1pvgZCAJCkKKIZyUCzlpFx0DeWmaykPXUcRup7i6AbKSzdSPspPBaggxVMhKkyaDFkiCqkIFaUo3USX1+klqRQ5Kk0JdAuVoVupLN1G5eh2Kk93UAWqSJWoMt1JVeguqkp3UzW6h6pTDapJteheqk33UR26n+rSA1SPHqT69BA1oIepIT1CjehRakyPURN6nJpSM2pOLaglPUGt6ElqTW2oLT1F7ehpak/PUCI9Sx3oOepIf6NO9Dx1pheoC71IXakbdaeXqAe9TD2pFyVRb+pDr1Bf6kf9aQANpFdpEL1Gg+l1SqYhNJTeoGH0Jg2nt2gEjaRR9DaNpndoDI2lcTSeUmgCTaR3aRK9R5NpCk2laZRK02kGvU8zaRbNpg9oDn1Ic2kezacFlEYf0UJaROn0MS2mTyiDltBSWkbLaQWtpFW0mtbQWlpH62kDbaRNtJm20FbaRttpB+2kXbSbPqU99Bntpc9pH31B++lLOkBf0UH6mjLpGzpE39Jh+o6O0Pe+F/1Ax+g4naCTdIp+pNN0hs7SOTpPP9EF+pkukicIMRShDFUYhDFhjjA2zBnmCq8Jc4fXhnnC68JIeH0YF94Q5g1vDPOF+cMCYcEwPiwUFg51aEIbUhiGRcKiYTS8KSwW3hwWD0uEJcNSoQtLhwnhLWGZ8NawbHhbWC68PSwf3hFWCCuGjz1QObwzrBLeFVYN7w6rhfeE1cMaYc2wVnhvWDu8L6wT3h/WDR8Iy4YPhvXDh8IG4cNhw/CRsFH4aNg4fCxsEj4eNg2bhc3DFmHL8ImwVfhk2DpsE7YNnwrbhU+H7cNnwsTw2bBD+Nwv/Q8u+vP+pLB32Cd8JXwl9P5+OT+6IJoW/Si6MLoomh79OLo4+kk0I7okujS6LLo8uiK6Mroqujq6Jro2ui66ProhujG6Kep9rRzg0AknnXKBi3E5XKzL6XK5a1xud63L465zEXe9i3M3uLzuRpfP5XcFXEEX7wq5wk4746wjF7oirqiLuptcMXezK+5KuJKulHOutEtwLVxL19K1ck+61q6Na+ueck+5p93T7hn3jHvWdXDPuY7ub66Te951di+4F9yLrqvr5rq7l1wPNyHPr+/JJNfH9XF9XV/X3/V3A91AN8gNcoPdYJfskt1QN9QNc8PccDfcjXAj3Cg3yo12o90YN8aNc+NciktxE91EN8lNcpPdZDfVTXWpLtXNcDPcTDfTVZn161Hmurluvpvv0lyaW+iy1ozpbrFb7DJchlvqlrrlbrlb6Va61W61W+vWuvVuvdvoNrrNbrPb6ra67W672+l2ut1ut9vjr/t1ULfP7Xf73QF3wB10X7tM94075L51h9137oj73h11P7hj7rg74U66U+5Hd9qdcWfdOXfe/eQuuJ/dReddSmRCZGLk3cikyHuRyZEpkamRaZHUyPTIjMj7kZmRWZHZkQ8icyIfRuZG5kXmRxZE0iIfRRZGFkXSIx9HFkc+iWRElkSWRpZFlkdWRLwvtDX0RXxRH/U3+WL+Zl/cl/AlfSnvfGmf4G/xZfytvqy/zZfzt/vy/g5fwVf0lfzjvqlv5pv7Fr6lf8K38k/61r6Nb+uf8u380769f8Yn+md9B/+c7+j/5jv5531n/4Lv4l/0XX03392/5Hv4l31P38sn+d6+j3/F9/X9fH8/wA/0r/pB/jU/2L/uk/0QP9S/4Yf5N/1w/5Yf4Uf6UTFv+9GXL5FhvE/xE/xE/66f5N/zk/0UP9VP86l+up/h3/cz/Sw/23/g5/gP/Vw/z8/3C3ya/8gv9It8uv/YL/af+Ay/5PJNZb/Sr/Kr/Rq/1q/z6/0Gv9Fv8pv9Fr/Vb/Pb/Q6/0+/yu/2nfo//zO/1n/t9/gu/33/pD/iv/EH/tc/03/hD/lt/2H/nj/jv/VH/gz/mj/sT/qQ/5X/0p/0Zf9af8+f9T/6C/9lf5N9ZY4wxxhj7L5lwpSn+qL/3Hzym/m7nPgBw7baCmX/fn7WiXJ/v13Y/Ed8uAgDP9uryyOWtevWkpKRL+2ZICIrOA7j8P0FZYuBKvATawtOQCG2gzB/Ov5/odp7+yfjR2wFy/V1OLFyJr4z/5Z+M/8RToxaWD8/G/T/GnwdQvOiVnJxwJV4CbbOeLmgDZf9k/Pyt/sn8c36VAtD673Jyw5X4yvwT4El4DhJ/sydjjDHGGGOMMfarfqJSp8vXn5d/4vOPrs/j1ZWcHHAl/mfX54wxxhhjjDHGGLv6nu/W/ZknEhPbdPrXG1X/W1nc+J/a8B7g8iMKAP7NAQH+42ex5T9yrORLb51/7Fp+zgfwP6OUf0XjKn8wMcYYY4wxxv5yVxb9v31cXa0JMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhj2dB/4s+JXe1zZIwxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxq62/xMAAP//AZwOMw==") openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x28c100, 0x80) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000c80)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000080)="240000004e0025000307f4f9002304000a04f55f08000100020100020800038005000000", 0x24) 3.960279499s ago: executing program 0 (id=588): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000000)) ioctl$KVM_SET_SREGS2(r2, 0x4140aecd, &(0x7f0000000300)={{0xe566c797b7515b9, 0xffff1000, 0x0, 0x9, 0x7f, 0x7, 0x81, 0xff, 0x0, 0x84, 0x0, 0xb}, {0xd000, 0xd000, 0x10, 0x3, 0x1, 0x7, 0x6, 0x6, 0x1, 0x6, 0xfa, 0x5}, {0xf000, 0x4, 0x4, 0x4, 0x10, 0x81, 0x4, 0x13, 0x5, 0x4, 0x92, 0x80}, {0x10000, 0xf000, 0x10, 0x7, 0x1, 0x40, 0x2, 0x0, 0xfd, 0x29, 0x9, 0x9}, {0xeeee8000, 0x1000, 0xf, 0x9, 0x5, 0xa, 0x7, 0xf1, 0x2, 0x6e, 0x1, 0x8}, {0x2, 0xdddd1000, 0xe, 0x2, 0xad, 0x2, 0x5, 0x5, 0x1, 0xc, 0x6, 0xa}, {0xeeee8000, 0x10000, 0xb, 0x9, 0xcd, 0x5, 0x5, 0x26, 0x8, 0x6, 0x4, 0x6}, {0x80b6004, 0xf000, 0x4, 0xe, 0x13, 0x40, 0x3, 0x0, 0x7f, 0x1, 0x0, 0x8}, {0x100000, 0x5}, {0x80a0000, 0xbf81}, 0x80000003, 0x0, 0xffff1000, 0x240431, 0x5, 0xa800, 0x8000000, 0x0, [0x6, 0x2, 0x7, 0x7]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r4, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe54, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffe2b, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe81, 0x0, 0x0, 0x0, 0xe9, 0x8, 0x0, 0x0}}, 0x10) 3.656915092s ago: executing program 2 (id=589): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000c0000000500000001000084010000000a000000030000000000080000000000000000010500000020000000000000000000000300000000020000000200000000000000006100302e616161610061"], 0x0, 0x64}, 0x28) 3.314941166s ago: executing program 4 (id=590): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x40010) 3.138876994s ago: executing program 2 (id=592): r0 = syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x20048a, &(0x7f00000001c0)={[{@grpjquota}, {@noinit_itable}, {@abort}, {@bsdgroups}]}, 0x12, 0x51a, &(0x7f0000001200)="$eJzs3U9sI1cZAPBvJsnam6ZNCj0AKnQphQWt1k68bVT1QjlVCFVC9MhhGxInimLHUeyUJuwhe+SORCVOcOLMAYkDUk/ckTjAjUs5IBVYgRokJFx5bGedP06sbGJv499PGvnNvLG/93Y071mfN/MCGFu3ImI/Im5ExLsRMds5nnS2eLO9tc775NGD5YNHD5aTaDbf+WeS1beORc97Wp7pfGY+In7wVsSPkmNB/xRR393bWKpUytudQ8VGdatY3927u15dWiuvlTdLpcWFxfnX771WurS+vlT9zcc3I+L3v/vyR3/c/9ZPWs2a6dT19uMytbs+dRinZTIivncVwUZgotOfGxd584XexGVKI+JzEfFydv/PxkR2NY86epm+PcTWAQBXodmcjeZs7z4AcN2lWQ4sSQudXMBMpGmh0M7hvRDTaaVWb9xZre1srrRzZXMxla6uV8rznVzhXEwlq+uT5YWs3N2vlEvH9u9FxPMR8bPczWy/sFyrrIzyiw8AjLFnjs3//8m1538A4JrLPy7mRtkOAGB48qNuAAAwdOZ/ABg/5n8AGD/mfwAYP+Z/ABg/5n8AGCvff/vt1tY86Dz/euW93Z2N2nt3V8r1jUJ1Z7mwXNveKqzVamvZM3uq531epVbbWng1dt4vNsr1RrG+u3e/WtvZbNzPnut9vzw1lF4BAGd5/qUP/5JExP4bN7Mtep73f+5c/eJVtw64SumoGwCMzMSoGwCMzMnVvoBxIR8P4+v/zWYzetbujYiHh6Weh4H2/S9CHwwUJrVuKDx9bn/xCfL/wGea/D+Mr4vl/32Xh+tA/h/GV7OZWPMfAMaMHD+QnFPf+/v/fLNnZ7Df/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBamsm2JC101gKfiTQtFCKejYi5mEpW1yvl+Yh4LiL+nJvKtfYXIsK6QQDwWZb+Pems/3V79pWZ47U3cv/NZa8R8eNfvPPz95caje2FiBvJvw6PNz7oHC+Nov0AwHm683R3Hu/65NGD5e42zPZ8/J324qKtuAedrV0zGZPZaz7LNUz/O+nst7W+r0xcQvz9hxHxhdP6n2S5kbnOyqfH47diPzvU+OmR+GlW135t/Vt8/hLaAuPmw9b48+Zp918at7LX0+//fDZCPbnu+HdwYvxLD8e/iT7j361BY7z6h++eONicbdc9jPjSZMRB98N7xp9u/KRP/FcGjP/XF7/ycr+65i8jbsdp/U+OxCo2qlvF+u7e3fXq0lp5rbxZKi0uLM6/fu+1UjHLURe7meqT/vHGnef6xW/1f7pP/Pw5/f/6gP3/1f/e/eFXz4j/za+dfv1fOCN+a078xoDxl6Z/m+9X14q/0qf/513/OwPG/+hveysDngoADEF9d29jqVIpbz95IX/mOellhBigkETsX3GIx4Xcr3/61vkn54bWngsWol/VxNPSwmtTyD0dzRigMOqRCbhqj2/6UbcEAAAAAAAAAAAAAADoZxh/TjTqPgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB9fRoAAP//j4/W2A==") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) ftruncate(0xffffffffffffffff, 0xc17a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./file2\x00', 0x181482, 0x0) r2 = accept$unix(r1, &(0x7f0000000240), &(0x7f0000000180)=0x6e) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000600)={{0x1, 0x1, 0x18, r1, {0xee01, 0xffffffffffffffff}}, './file1\x00'}) r4 = syz_clone(0x211000, &(0x7f0000000640)="b5436ea08f982dc5e99db5fe25ed3dc1072b5c170c6f1b931327fd0480d509a6bf2ed99b6a983d5696e3f362c833477b52d81f129adfc0362d254312538e4d7a50beda0fcfd2e0ca8b36654618f64dace6a2db707f9858ae2d27926e07df35dd0d8691dd17774d6f1b8d27e8a8a89188f2eb168fed348c91534c02759ecb6e79826de51a12d93a048131", 0x8a, &(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)="d30e57d53ae8ae4cd96e4f998cc38178685015cc3776fc992595ece64af5f7751c2db05266ae2b510af5f2a16cf963898be6de92f798e4c43cdcacef8143f7e7cfa2663ad8b97f53b96c3e8f7fdf8df842521a3af98869f63d8982063386d6af41faf612949c6a656096fc4f511ba8402193d8c54181df8f66bee0ab62428d2c9f2332d721730ef102a2a84233ed6126765d6a1b15cc16aa3b199665a57945b389473f385c12b9fbf2afde6155782a1127792a318bdd2b8d11c7328e6cf4ebe3ccece131e8229d2dbcc6d46f1f244ac72279ec6d401779c019c90fdb9bdee7b8e2757d6798bbd3c91493344cc76ce88ef0f0") fstat(r1, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000940)='./file1\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000a00)=0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000a40)={{0x1, 0x1, 0x18, r1, {0xee01}}, './file1\x00'}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000e40)={0x0}, &(0x7f0000000e80)=0xc) r10 = geteuid() getresgid(&(0x7f0000000ec0), &(0x7f0000000f00), &(0x7f0000000f40)=0x0) r12 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000f80), 0x505000, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000010c0)=0x0) r14 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r14, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) sendmsg$nl_generic(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)={0x40, 0x43, 0x107, 0xfffffffe, 0x25dfdbfc, {0x2, 0x7c}, [@nested={0x4, 0x145}, @nested={0x28, 0x1, 0x0, 0x1, [@nested={0x8, 0x1c, 0x0, 0x1, [@nested={0x4, 0x109}]}, @typed={0x8, 0x26, 0x0, 0x0, @uid=r15}, @typed={0x14, 0x9c, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0x40}}, 0xc000) fstat(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r2, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000002c0)="dc8e5366e9912cd99741caca225c5db767c3a266e39a2d931069daa8fcfa280d054138a39e1ca1ee1e572bc8ecea7bb07f4ae8f96f2409838cdfafcc9e1b68a8f7394acd3a7237f2635f01cfb0457fcde70e6066108b6160110bc7e5358a73499da41153c0af953921fc1eee1e6106dad9e59b116dcc3f3399f8711a26c789d34761ddb04ecbe01925215099d44388732cde0df43d0e7c01e9eb72dc8f8474635ba4e5849246664f6431f4b0e20a1e37b3cbe906bee281713c3ecaae8fea0e4d1d1fab04", 0xc4}, {&(0x7f0000000400)="fb1fbb935c48447bdb3f3257ce3eec7e32b7e43a92aeec4eecff2da20f61d101966d11a56e70467cc49fdf33494cab9c987b554ea8870dce7cfb89a552525b5370880eb8c4224d0047ef10250672322803dc0257f2317e60d0b467b5e7d7aa0f942dfb22c7d0a13ab9195a4b64383e24ebdf13e4834520ef7c5b55395945dd95f70dfd16cf0ecd57438df686ac0b221fe696bdcb82621310156e04c47077387dde54c4eb4d240c274911661db585c6692eb6538a2156454524fee2461ec4b0f7e9108b526dfe2d53ce35c6c6a0ba9852e46dd1df53adf7018e54981462dc60f51f9431d7e4a84a7682ecb0bf26746d9d", 0xf0}, {&(0x7f0000000500)="4c37377cbcfe58505b670847b8dfaef873173662e6c3656105c36c612b9c8a75fa8f58575f575751dbe7d1aafcb76994f014e44bd282ace97599ce8ea9559d2c346c2f3768c13de2eac60f17b6ad4be15d497e43352c5671a1d67e7d62b152beca95be2841fec0249521d8a3820373ba2a8201ad8d95de69067e1436c964562bb54e7022ab16c32bcf8213b9eb59dca983e723257070be36398b8a216f8a2b00198eaca79233d2e05c6f3e37fc", 0xad}], 0x3, &(0x7f0000000a80)=[@rights={{0x20, 0x1, 0x1, [r0, r0, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r5, r6}}}, @cred={{0x1c, 0x1, 0x2, {r7, r8, 0xee00}}}], 0x60, 0x58000}}, {{&(0x7f0000000b00)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000e00)=[{&(0x7f0000000c40)="243eb8675f3499c95f5659c3fae550ef3d1f518886076c0d885433cb430262f1419a6d3b0e50147d439ffd6ad61fe9ff82fbfccfc26d201a445809301c29f8634439fef28932c2f0f0820184b0fcc8bf3e2e2f07c5a5a3d03c54e154f5acaefa4c351c16799d7e96ec88ecf6bd76977556c32dc5e98bbd0dd5236fb45f3af3989d2e862f355d220299e2678dec1b3c96", 0x90}, {&(0x7f0000000b80)="6251eaca30bbcfb1c1386bb34956fdf90d8686477539c6a554307a47c9dd0637465434c5c7c01924f6112af1b11a3f575a8ad36efad9e440fb7dd406f1", 0x3d}, {&(0x7f0000000d00)="e016cb193c4b14896515bcd64ab3d7f9a85cdf7d6bfa5439057682cbfecad07553be699fdcc898ad2717485e525bdfbd70a3018798f0614e5c224453f58cbe634e54467e8fc1d47287744c4cfe1a8f2a467a2874657111df1aaad5fafad506d749e8fdd158742a6e9fd111f7a37ed5b5680e51ecffa83c9b5b4b562381cc3a7687758f6549c79fc4fb7bc3916429a38fc60314f6be787c75752dbbed30d9db9cdaf62400c0231927102995970b8448c6cf6e2cbeaa6efb99cd1f7b4fc0af476a9f", 0xc1}, {&(0x7f0000000bc0)="9c474c", 0x3}], 0x4, &(0x7f0000000fc0)=[@cred={{0x1c, 0x1, 0x2, {r9, r10, r11}}}, @rights={{0x30, 0x1, 0x1, [r0, r0, r0, r1, r1, r1, r12, r1]}}, @rights={{0x1c, 0x1, 0x1, [r1, r0, r0]}}], 0x70, 0x8080}}, {{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000001040)="bdc03639fc8185c2663e44df8c4fc572e8c95c2b3226872d2a1e10e2b07648fdd10ba844558daeb79ff587bf4b036aaa6f7e", 0x32}], 0x1, &(0x7f0000001180)=[@rights={{0x18, 0x1, 0x1, [r0, r0]}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @rights={{0x20, 0x1, 0x1, [r1, r1, r1, r0]}}, @cred={{0x1c, 0x1, 0x2, {r13, r15, r16}}}], 0x70, 0xc000}}], 0x3, 0x4040084) ftruncate(r1, 0x0) r17 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r17, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r17, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000002a00)=""/4082, 0xff2}], 0x1}, 0x0) recvmsg$kcm(r17, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x2) recvmsg$kcm(r17, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 3.138047384s ago: executing program 4 (id=593): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newnexthop={0x20, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0x4}, @NHA_FDB={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x8812, &(0x7f00000003c0)={[{@nodiscard}, {@errors_remount}]}, 0x0, 0x5ee, &(0x7f0000000600)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000180)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000b40], 0x0, 0x0, &(0x7f0000000b40)=[{0xfffff9, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0xee01, 0x1000) 3.046003118s ago: executing program 1 (id=594): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000002a00)=""/4082, 0xff2}, {&(0x7f0000000240)=""/205, 0xcd}], 0x2}, 0x0) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x2) recvmsg$kcm(r0, 0x0, 0x0) 2.992597s ago: executing program 0 (id=595): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c0000003b000701000000000000000001000000040000000c00018008000f00ac1414bb080002"], 0x2c}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x3}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r2, 0x0, 0x0}, 0x10) 2.964594262s ago: executing program 3 (id=596): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3000003, 0x200000006c833, 0xffffffffffffffff, 0xfffff000) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='cubic', 0x9) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x801, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r4 = socket$qrtr(0x2a, 0x2, 0x0) r5 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r4, 0x0, 0x0}) io_uring_enter(r5, 0x3498, 0x969, 0x0, 0x0, 0x0) 2.940416233s ago: executing program 0 (id=597): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r2, 0x7b1, &(0x7f0000000180)={&(0x7f0000000b40)=[0x1, 0x4, 0x1000000, 0x9, 0x1, 0x0, 0x200, 0xffffffff, 0x2, 0x8, 0x401, 0x200, 0x9f, 0x3, 0x4, 0x8, 0x0, 0x8, 0x58, 0x2, 0x0, 0x7, 0xc7, 0x2, 0x100, 0x6, 0x80, 0x0, 0x1, 0x5, 0x1, 0x2, 0x4000000, 0x3, 0xd7a, 0x26380de6, 0x3, 0x5, 0xfffffffc, 0x6a5a, 0x400, 0x5, 0x4, 0x4, 0x8, 0xffffffff, 0x1344, 0x80, 0x7fffffff, 0x8000, 0x6, 0x68, 0x3, 0x3, 0x10, 0x8, 0xfffffffb, 0x9f78, 0x4, 0xb, 0x0, 0x5, 0x2, 0x1, 0x98, 0x2ca0f0d7, 0xe, 0x1, 0x10001, 0x6, 0x8, 0x0, 0x5, 0x7ff, 0x5, 0x0, 0x0, 0x7fff, 0x1, 0xc30, 0x5, 0x16, 0x0, 0x7ff, 0x1, 0x497, 0x7, 0x7fffffff, 0x900000, 0x1ff, 0x2, 0xa, 0x0, 0xd, 0x4, 0x9c, 0x9, 0xe1d, 0x5, 0x401, 0x7fffffff, 0x6, 0x6, 0x4, 0x9, 0xfffffffb, 0x9, 0x2, 0x5, 0x1ff, 0xa3c, 0x7, 0x4, 0xb, 0x9, 0x6, 0x504c79ab, 0x4, 0x2, 0x3, 0x7, 0xc7c3, 0x1, 0x55, 0x0, 0x7, 0x7, 0x3, 0x2b1, 0x21cf, 0x40, 0x6, 0x4, 0x5, 0x1, 0x9, 0x6, 0x100, 0x1, 0x2, 0x4, 0xfb, 0x1, 0x4, 0x6, 0x0, 0x4, 0xb59, 0xf09c, 0x0, 0x1, 0x7, 0xbf5, 0x9, 0x6, 0x7f, 0x8, 0x849, 0x5, 0x3, 0x80000001, 0x2, 0x8, 0x5, 0x7, 0x9f1, 0x0, 0x80, 0xfffffffd, 0xffff, 0xa0, 0x8, 0x3, 0x6, 0x7, 0xfffffffd, 0x800, 0x9, 0x0, 0xe, 0x5, 0x4, 0x3, 0x0, 0x2, 0x4, 0x3, 0xa72, 0x1, 0x3, 0x0, 0x1ff, 0x400, 0x0, 0x6, 0x5, 0xe5, 0x6, 0x8, 0x0, 0x1a05f007, 0x7, 0xfffffffa, 0x1800000, 0xffffffff, 0x0, 0x7, 0x8, 0xfffffffc, 0x7, 0x3, 0x9, 0x7fffffff, 0x51e, 0x1, 0x4, 0x7ff, 0x2, 0x8, 0xc, 0xfdb, 0xa, 0x4, 0x0, 0x4, 0x0, 0x7fff, 0xe0426a9, 0x3, 0x6a, 0xc5d9, 0x9, 0xb, 0x3e6, 0xffff, 0xe2, 0x1, 0xe97, 0xff, 0x7fffffff, 0x9, 0x6, 0x5, 0x10, 0xfffffffd, 0x54, 0x240000, 0x6, 0x4, 0x4, 0xb63a, 0x5, 0x401, 0x0, 0x5, 0x11e9, 0x9, 0xe, 0x0, 0x4, 0x6, 0x8001, 0x3, 0xa, 0x3, 0x2, 0xfffffffb, 0xb07f, 0xc3be, 0x1, 0x8, 0xf87, 0x7389, 0x2, 0xfff, 0xb, 0x5, 0x33f, 0x10, 0x6, 0x9, 0x7ff, 0x0, 0x6, 0x0, 0x7, 0x7, 0x3, 0x9, 0xa, 0x0, 0x2, 0x6, 0xfffffff8, 0x2cd2, 0x2000000, 0x5, 0x8, 0x80000000, 0x9, 0x7, 0x6, 0x6, 0x101, 0x2, 0xffffff85, 0x6, 0x7ff, 0x9, 0x0, 0x3, 0x4, 0x6, 0x6, 0x9, 0x2, 0x80000000, 0x4, 0xfff, 0xcf03, 0x3, 0xd, 0x4, 0x1, 0xc57, 0x200, 0x7, 0x10001, 0x8, 0x20befd74, 0x8001, 0x2, 0x0, 0x3, 0x6, 0x401, 0x5, 0x1, 0xc4, 0x12000, 0x5, 0x1, 0x7, 0x7537, 0x2, 0x40, 0x766, 0x9, 0x5, 0x0, 0x3, 0x9, 0x6, 0x8, 0x4, 0x4be, 0x4, 0x4, 0x9, 0x9, 0x8, 0x5, 0x5, 0xfffffffa, 0x894a, 0x2, 0x41, 0xba9, 0x8, 0x101, 0x3b, 0x296, 0x5, 0x6, 0x6, 0x81, 0xbdb, 0x4, 0x7fff, 0x979b, 0x6, 0x10, 0x4, 0xb1, 0x81, 0x1, 0x0, 0xa, 0x0, 0xbb, 0x9, 0x0, 0x860, 0x2, 0x6, 0x7, 0xeacf, 0x8, 0x7, 0x101, 0x3, 0x9, 0xe, 0x5, 0x3, 0x5ce, 0x0, 0x4, 0xe, 0xfffffff8, 0x0, 0x10001, 0x100, 0x8, 0x2, 0xe, 0xf1c, 0x3, 0x5, 0x51d, 0x7, 0x8, 0xa0a, 0x5, 0x4, 0x5, 0x8, 0xfffffff8, 0x3, 0xffffffff, 0x2, 0x3, 0xfffffff9, 0x6, 0xd9, 0x6f5c, 0x40, 0x5, 0x5, 0x8, 0x3, 0x7, 0x3, 0x0, 0x8, 0xffffffff, 0x1ff, 0x7fff, 0x92d, 0x18000, 0x1, 0x8, 0x7, 0x9, 0xd, 0xd0cb, 0x4, 0x80, 0x5, 0x7f, 0x6, 0x7, 0xff, 0x80000000, 0x0, 0x0, 0x7, 0x200, 0x7, 0x4, 0xffff7a6d, 0xfffffffe, 0x5, 0x9, 0x1, 0x2, 0x7fff, 0x6bf8, 0x5, 0x0, 0x7, 0x6, 0x2, 0x10000, 0x400, 0x9, 0x7, 0x5, 0xe, 0x8, 0x98, 0x1, 0xfffffff0, 0x10b7, 0x3318, 0x10001, 0x3, 0xb3, 0x4, 0x3, 0x4ebb, 0x5, 0x1, 0xa, 0x1, 0xfffffffd, 0x7, 0x2404, 0x10, 0x6, 0xedf, 0x4, 0x4, 0x48c10000, 0x3, 0xf, 0x8001, 0x0, 0x4, 0x4, 0x7fff, 0x8, 0x0, 0xebac, 0x1ff00, 0xffffffff, 0xe3, 0x8000, 0xd4d, 0x8001, 0x5b7, 0x8ffd, 0x2, 0x1, 0x6, 0xfffffffd, 0x8c5a, 0xc, 0x0, 0x7ff, 0xe2, 0x8, 0x8, 0x88bd, 0x5, 0x2, 0x7, 0x8, 0x6, 0x7, 0x0, 0x1015, 0x2, 0x0, 0x6, 0x9, 0x0, 0x5, 0x6, 0x9, 0x8000, 0x8, 0xffffffff, 0x3, 0x7, 0x3, 0x4, 0x6, 0x1b2, 0x401, 0x7, 0x0, 0x0, 0x3, 0x0, 0x8, 0x1, 0xf9, 0xf, 0x2, 0x6, 0x101, 0x1, 0xfffffff7, 0x2, 0x40, 0x7f, 0x3, 0x7, 0x1, 0xfffffff8, 0x80000001, 0x4, 0x1, 0x6, 0x0, 0x400, 0x80000000, 0x1, 0x6, 0x0, 0xfffffff9, 0x8d, 0x5, 0x5, 0x3, 0x200, 0x8000, 0x6, 0x80000001, 0x8, 0x5, 0x0, 0x5, 0x4, 0x40, 0x7, 0x435, 0x1cbfcf64, 0x1, 0x3, 0x3, 0x4e, 0x9, 0x401, 0x2, 0x0, 0x4, 0xffffffff, 0x97, 0x0, 0x4c9, 0x8, 0xfffffff7, 0x8, 0x2, 0x0, 0x4, 0x6, 0x8, 0x401, 0x40, 0x76cd, 0x8, 0x5, 0x8, 0x6, 0x9, 0x0, 0x4, 0x6, 0x8, 0x5, 0x4264, 0x7, 0x9, 0x6, 0x401, 0x3f, 0x3, 0x0, 0x8, 0x400, 0x9, 0x200, 0x2, 0x0, 0x9fd5, 0x4, 0x5, 0x7f, 0xdd8d, 0x6, 0x29a, 0x10001, 0xc, 0xf, 0x8001, 0x9, 0x2, 0x79, 0x0, 0xffff, 0x47c, 0x2, 0xfffffffe, 0x7, 0x8, 0xcf7, 0x3ff, 0x1, 0x100, 0x800, 0xfff, 0x10, 0x80, 0x9, 0xfffffffb, 0x3, 0x5, 0x0, 0x1, 0x4, 0x7, 0x2, 0x7c, 0xb, 0x4, 0x4, 0x40, 0x1, 0xeb, 0x6, 0x5, 0x0, 0xfffffffc, 0x10000, 0x7, 0x0, 0x2, 0xc37, 0x2, 0x605d0062, 0x5fe7, 0x1c, 0x101, 0x588, 0x9, 0x4, 0x80, 0x5, 0xdc7, 0x3ff, 0x6, 0x101, 0x9, 0xe, 0x2, 0x100, 0x5, 0x5, 0xe, 0x5, 0x2, 0xa, 0x7, 0x7, 0x4, 0xffffffff, 0x5, 0x2, 0x0, 0xfffffff8, 0x2, 0x80, 0x7, 0xf256, 0x81, 0x6a8, 0x3f, 0xc, 0x6, 0x7fffffff, 0xfffffff7, 0x9, 0xb, 0x3, 0x4, 0x1000, 0x0, 0x25f500, 0x7, 0x2, 0x1, 0x9, 0x0, 0x40, 0x6, 0x4, 0x6, 0x21360, 0x4, 0x6, 0x14f, 0x2, 0x9, 0x0, 0x8, 0x1, 0x4, 0x93, 0x5d, 0x3, 0x1000, 0x7f, 0x6f9, 0xf, 0x7fff, 0x3, 0x80000000, 0x7, 0x1, 0x10, 0x1, 0xb600f07, 0xf5, 0x5, 0xfa2b, 0x1, 0xe95, 0x6, 0x8942, 0x80000001, 0x3d53, 0x2, 0x2eb2, 0x1f, 0x7, 0x1, 0xcbc, 0x4, 0xff, 0x6, 0x1, 0xb5, 0x9, 0x40, 0x0, 0xd, 0x3, 0x9, 0x7, 0x9, 0x84, 0x3, 0x80, 0x4, 0x0, 0x7ff, 0x8, 0x3, 0x8, 0x7, 0x8, 0x200, 0x2, 0xb, 0xfffffff7, 0x7fffffff, 0x0, 0x2, 0x2, 0xa244, 0x2, 0x7, 0x8, 0x101, 0x1, 0x4, 0xd7e, 0x8, 0x7fffffff, 0x0, 0xcde5, 0x8, 0xfa5a, 0xd, 0x0, 0x7, 0x4, 0x2, 0xfffff001, 0x80000000, 0xb320, 0x490ed0a1, 0x6, 0x1, 0x5, 0x7, 0xffffffff, 0x101, 0xa, 0x9, 0x2, 0xa731, 0x2, 0x9, 0x4, 0x8, 0x6a, 0x80, 0x6, 0x8, 0x7, 0x3, 0x4, 0x84, 0x0, 0xfff, 0x4, 0x38cb7136, 0x5, 0x0, 0x7ff, 0x6, 0x775, 0x400, 0x3, 0x4, 0x5, 0x2, 0x6, 0x7fff, 0x4, 0x485, 0xdbbc, 0x6, 0x3, 0x0, 0x7, 0x7, 0x7f, 0x4, 0x80000000, 0x3473, 0x8, 0x80, 0xf, 0xc9, 0x4626, 0x7ff, 0x3, 0xf0, 0x5, 0x0, 0xd, 0x0, 0x6, 0x2d, 0x40, 0x6, 0xe00000, 0x7, 0x10, 0xfffffff7, 0x7, 0x5, 0xb, 0x4a8, 0xa697, 0x1, 0x5, 0x8, 0x0, 0x0, 0x0, 0x5, 0x442, 0x4, 0x8, 0x5, 0x5, 0x7, 0x4, 0x9, 0x7, 0xffffffff, 0x1d, 0x5, 0x8, 0x8000, 0x3, 0x4, 0x7, 0x9, 0x40, 0x0, 0xa, 0x9, 0xffff, 0x0, 0x3, 0x2, 0x8, 0x7fffffff, 0x5, 0x3, 0x88b2, 0x80000001, 0x4, 0x5, 0xff, 0x14f6, 0x9, 0x7c6, 0x3, 0xfffffff2, 0x20000, 0x1, 0x5, 0x6009, 0xb8, 0x9, 0x6, 0x5, 0x9, 0x1, 0xc81, 0x2, 0x0, 0x80000000, 0x6, 0x2, 0x6, 0xc5e9, 0x2a2, 0x100, 0x5, 0x1, 0x80, 0x1, 0x9, 0x8, 0x3ff], 0x2, 0x400, 0x5}) syz_io_uring_setup(0x239, &(0x7f0000000ac0)={0x0, 0x1ffff5, 0x8, 0x0, 0xd3}, 0x0, 0x0) 2.892576745s ago: executing program 1 (id=598): socket$l2tp6(0xa, 0x2, 0x73) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x1c000) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000"], 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x4004000) recvmmsg(r1, &(0x7f0000000b80)=[{{&(0x7f0000000780)=@xdp, 0x80, 0x0}, 0xfe000000}], 0x1, 0xfc0, 0x0) 1.917635747s ago: executing program 1 (id=599): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x1, 0x0, 0x7ffffe39}]}) munlockall() sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000000a499d0000000000000000020000010900010073797a310000000008000240000000030400060014000000110001"], 0x54}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x20, 0x7, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x4000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xffe0, 0xf}, {0xffff, 0xb}, {0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x18}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x1, 0x0, 0x7ffffe39}]}) (async) munlockall() (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000000a499d0000000000000000020000010900010073797a310000000008000240000000030400060014000000110001"], 0x54}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x20, 0x7, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x4000) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) (async) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xffe0, 0xf}, {0xffff, 0xb}, {0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x18}, 0x40) (async) 1.808045572s ago: executing program 4 (id=600): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a74000000060a010400000000000000000200000048000480440001800a0001006d61746368000000340002800900010074696d65000000001c00030007682c020b7b37f27f5120007f51012449f4e34e860200eb08000240000000000900010073797a30000000000900020073797a32"], 0x9c}, 0x1, 0x0, 0x800000000000000, 0x4000000}, 0x0) 1.715910126s ago: executing program 2 (id=601): r0 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x9309, 0x8, 0x2, 0x5c9}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_JOIN_FILTERS(r3, 0x65, 0x2, 0x0, &(0x7f0000000040)) io_submit(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x81, 0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x5, 0x0, 0xa724cb62bba12f70}]) getsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000040), &(0x7f00000000c0)=0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = syz_open_dev$sg(&(0x7f00000001c0), 0x0, 0x109002) ioctl$SCSI_IOCTL_SYNC(r4, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="020901060200000029bd70000000c000"], 0x10}}, 0x40) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, 0xfffffffffffffffd) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) fsmount(r6, 0x0, 0x8) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0xc, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800, 0x2b4f3574d7c1da4b}) io_uring_enter(r0, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x2, 0x0) timer_create(0xfffffffd, 0x0, &(0x7f00000011c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x77359400}, {0x77359400}}, 0x0) timer_delete(0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket(0x40000000015, 0x5, 0x0) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000001c0)=ANY=[], 0x2, 0x5505, &(0x7f0000002480)="$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") r7 = fanotify_init(0x1a, 0x800) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0xa8) fanotify_mark(r7, 0x441, 0x4800001a, r8, 0x0) r9 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') openat$binfmt(0xffffffffffffff9c, r9, 0x41, 0x1ff) lsetxattr(&(0x7f0000000000)='.\x00', &(0x7f00000001c0)=@known='system.advise\x00', 0x0, 0x0, 0x0) 1.714912246s ago: executing program 0 (id=602): pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x1, 0x80000001}, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$btrfs(&(0x7f0000000080), &(0x7f0000000380)='./bus\x00', 0x8, &(0x7f0000000780)={[{@barrier}, {@autodefrag}, {@fatal_errors_bug}, {@discard_sync}, {@clear_cache}, {@commit}, {@max_inline={'max_inline', 0x3d, [0x30, 0x38, 0x31, 0x39]}}, {@barrier}, {@nospace_cache}]}, 0x2, 0x55ae, &(0x7f0000005600)="$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") socket$nl_route(0x10, 0x3, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x50009405, &(0x7f0000000180)) r1 = socket$inet(0x2, 0x2, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x2001, 0x0) write$sequencer(r2, &(0x7f0000000240)=[@t={0x81, 0x8, 0x2, 0xf9}], 0x8) r3 = socket(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x8d0) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='timerslack_ns\x00') writev(r5, &(0x7f0000000080)=[{&(0x7f0000002dc0)='3', 0x1}], 0x1) mprotect(&(0x7f000076d000/0x4000)=nil, 0x4000, 0x1000007) sendmsg$inet(r1, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x2400, @rand_addr=0x64010101}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f00000004c0)="1ed8b7f9d457", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000810b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x0) 1.352672642s ago: executing program 2 (id=603): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000040)={0x1, 0x0, {0x29, 0x1, 0x2, 0x12, 0x0, 0xffff, 0x1, 0x7d, 0xffffffffffffffff}}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000011000500040000000000000007000000", @ANYRES32=r3, @ANYBLOB="000000000a00000014001a80100005800c000280080001"], 0x34}}, 0x0) 1.352416772s ago: executing program 4 (id=604): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x30040043}, 0x240008c4) 1.347907892s ago: executing program 1 (id=605): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0xf, &(0x7f0000000400)=[{&(0x7f0000000440)="2e00000012008188e6b62aa73772cc9f1ba1f848430000005e1406020000000004000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000180)="a0", 0x1}, {&(0x7f0000000240)="94", 0x1}], 0x2}, 0xd0a0) sendmsg$kcm(r0, &(0x7f00000005c0)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000400)="ba7f", 0x2}], 0x9}, 0x0) 1.285589955s ago: executing program 2 (id=606): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, 0xffffffffffffffff, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fsopen(0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, &(0x7f00000001c0)=0x6, 0x4) fchdir(r4) lseek(0xffffffffffffffff, 0x1, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000c0000000400000001000084010000000a0000000300000000000000000000004c0000010500000020000000000000000000000300000000020000000200000000000000006100302e616161610061"], 0x0, 0x64}, 0x28) 1.196383449s ago: executing program 4 (id=607): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x11}}, 0x2006}, 0x1c) r3 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000bc0)={0x44, r0, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x28, 0x33, @assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x5da}, @device_b, @device_a, @random="8ce14ad6abf0", {0x1, 0xd50}}, 0x8000, 0xc1, {0x0, 0x6, @default_ap_ssid}, @void, @void}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x40) syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) syz_mount_image$exfat(&(0x7f0000000140), &(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, &(0x7f0000000d00)=ANY=[@ANYBLOB='iocharset=macinuit,umask=00000000000000000000011,namecase=1,discard,allow_utime=00000000000000000051165,errors=remount-ro,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c6572726f72733d72656d6f756e742d726f2c646973636172642c6572726f72733d636f6e74696e75652c00f2c9556a18a270828e22ef7b1e507ea0f39210a0c52433f4907bdeee35d1c695ac5ee0bbbc8185a23cfdb2a2838e74361ff855df9a6091fc7f140431a79cf8c6d84fd0dbec8878ab5e7f73c44e826ea7110d57a130e3ce93cc4fcd5c9a147794acf0286a39c6327ddaa3103b7e25c8b0e292e08719931e21a55c36a935968904eb1275080751f4337040f5240321563496bb48be6f02baec639eb0094a6d713784d64c54477ce506ad9872dfe130d3eb40364141db4074a31df89f332c702e0cf2a7677c7216f7e2cf50b6005054c25f47f668ba1a93ad449474d45fa364066a5c77a086bd636a22967a6163e56f44aba1e04cf9511a67b0df0a7004bdc8ed802d6d7b4acf0ddc482ab9b433ed0cafe825ee84ec7439e0422e60fee1164e6257fd484041b538caf67706d0e3ef0fc22d8065e3870eff87222c9f07b86ef16578cfd50e112638302c318b293c3aad890ae1285784348f4e3084e3755f0755bba92e5c9824bfdabe1fbd12e64a0de351f933fc29bfa617a9eb2b25b490eb38c35308cffc48206a4c29c73d86583c256471db37b3cd726c3da81bb2fa71978755b3bc360186ed9c0f80e5a6", @ANYRES8], 0x3, 0x1510, &(0x7f0000003640)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x28c100, 0x80) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000c80)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000080)="240000004e0025000307f4f9002304000a04f55f08000100020100020800038005000000", 0x24) 1.039692135s ago: executing program 1 (id=608): r0 = socket(0x10, 0x80002, 0x0) syz_mount_image$hfs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYRESOCT, @ANYRESHEX, @ANYRES8, @ANYRESOCT], 0x1, 0x282, &(0x7f0000000180)="$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") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='kmem_cache_free\x00', r1}, 0x18) syz_emit_ethernet(0x0, 0x0, 0x0) r2 = open(&(0x7f0000000080)='./file1\x00', 0x145142, 0x19) read$FUSE(r2, &(0x7f0000001480)={0x2020}, 0x2020) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYBLOB="37d5d7"], 0x48}}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 293.589628ms ago: executing program 2 (id=609): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000580)='./file0\x00', 0x2000006, &(0x7f0000000440)={[{@uni_xlateno}, {@uni_xlateno}, {@utf8}, {@uni_xlate}, {@fat=@gid}, {@shortname_lower}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'macroman'}}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp1250'}}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'euc-jp'}}, {@shortname_mixed}, {@shortname_lower}, {@uni_xlateno}]}, 0x25, 0x365, &(0x7f0000000640)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x14) getdents64(r0, &(0x7f0000001280)=""/4089, 0xff9) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000005740)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000500)='mm_lru_activate\x00', r2}, 0x18) write$cgroup_int(r1, &(0x7f0000000200), 0x43451) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000a40)={'syz1\x00', {0x0, 0x0, 0x6}, 0x0, [0x0, 0x0, 0x0, 0x4, 0x1, 0x0, 0x401, 0x0, 0x4, 0x20008001, 0x2000, 0x0, 0x0, 0x0, 0x80, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x90, 0x801, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x3, 0x0, 0x0, 0x5, 0x7], [0x0, 0x3, 0x6, 0x0, 0x0, 0x5, 0x3, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x6189fbd8, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0x0, 0x9e2b, 0x0, 0xfffffffd, 0x5, 0x7aae62b1, 0x100000, 0x0, 0x40002, 0xffffffff, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0xfd5], [0x0, 0x0, 0x0, 0xd1, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x3, 0x7, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x8000000, 0x8, 0x0, 0x0, 0x9b, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x4bdf, 0x2, 0xf152, 0x0, 0x10000, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff9bf, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x1, 0x0, 0x6, 0x8, 0x0, 0x735, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c) r3 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r4, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='memory.events\x00', 0x100002, 0x0) write$cgroup_int(r5, &(0x7f0000000200), 0x43451) 158.586034ms ago: executing program 3 (id=610): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0xf, &(0x7f0000000400)=[{&(0x7f0000000440)="2e00000012008188e6b62aa73772cc9f1ba1f848430000005e1406020000000004000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a00", @ANYRESOCT], 0xb8}}, 0x20040014) r1 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r1, &(0x7f0000000440)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000180)="a0", 0x1}, {&(0x7f0000000240)="94", 0x1}], 0x2}, 0xd0a0) sendmsg$kcm(r1, &(0x7f00000005c0)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000400)="ba7f", 0x2}], 0x9}, 0x0) 150.266954ms ago: executing program 4 (id=611): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x14, &(0x7f0000000380)={[{@jqfmt_vfsv0}, {@data_err_ignore}, {@jqfmt_vfsv1}, {@init_itable}, {@lazytime}]}, 0xfe, 0x25f, &(0x7f0000000640)="$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") r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0xf, 0x8, 0x0, 0x14, 0x0, 0x2, 0x25dfdbfe, [@sadb_address={0x5, 0x5, 0x32, 0x0, 0x0, @in6={0xa, 0x4e20, 0xe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x19}}, 0x9}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev={0xfe, 0x80, '\x00', 0x18}}}, @sadb_address={0x5, 0x6, 0x0, 0x20, 0x0, @in6={0xa, 0x4e21, 0xe28, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}}]}, 0xa0}}, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20000000020000000b"], 0x8840) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x4, 0x313201) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x1010, r1, 0x637bc000) 62.900358ms ago: executing program 3 (id=612): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x45}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x2300, 0x0, 0x0, 0x0, 0x0, 0xdc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 24.017109ms ago: executing program 3 (id=613): getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x18) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) readv(r3, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/135, 0x87}], 0x1) 0s ago: executing program 1 (id=614): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) (fail_nth: 3) kernel console output (not intermixed with test programs): ready [ 57.381501][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.389794][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.522517][ T4278] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.526830][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.535927][ T4278] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.547755][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.549375][ T1278] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.880515][ T1278] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.232888][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.246410][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.256475][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.360260][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.368287][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.390408][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.400559][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.421996][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.480478][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.629868][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 58.663623][ T4315] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 58.683981][ T4315] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 58.695295][ T4315] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 58.789851][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 58.825729][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 58.839453][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 58.848590][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 58.857736][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 58.866844][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 58.876178][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 58.879833][ T4293] Bluetooth: hci2: command 0x0419 tx timeout [ 58.889252][ T26] Bluetooth: hci1: command 0x0419 tx timeout [ 58.927474][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 58.970543][ T26] Bluetooth: hci3: command 0x0419 tx timeout [ 59.029749][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #100!!! [ 59.489158][ T4293] Bluetooth: hci0: command 0x0419 tx timeout [ 59.495662][ T4293] Bluetooth: hci4: command 0x0419 tx timeout [ 59.615676][ T4329] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.9'. [ 59.648542][ T4320] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.9'. [ 59.703814][ T4328] ODEBUG: Out of memory. ODEBUG disabled [ 60.582784][ T4328] Set syz1 is full, maxelem 65536 reached [ 61.238787][ T4340] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.15'. [ 61.837363][ T4354] loop3: detected capacity change from 0 to 256 [ 62.611218][ T4356] serio: Serial port ttyS3 [ 63.310308][ T4354] exfat: Deprecated parameter 'namecase' [ 63.448944][ T4354] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 63.490709][ T4352] netlink: 'syz.3.20': attribute type 3 has an invalid length. [ 63.598477][ T4360] hub 8-0:1.0: USB hub found [ 63.750964][ T4360] hub 8-0:1.0: 1 port detected [ 63.815373][ T4371] capability: warning: `syz.0.27' uses deprecated v2 capabilities in a way that may be insecure [ 63.859966][ T4373] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.25'. [ 63.875290][ T4371] 9pnet: p9_fd_create_tcp (4371): problem connecting socket to 127.0.0.1 [ 64.294752][ T4369] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.25'. [ 64.499303][ T4380] 9pnet: p9_fd_create_tcp (4380): problem connecting socket to 127.0.0.1 [ 64.665404][ T4182] FS-Cache: Duplicate cookie detected [ 64.671066][ T4182] FS-Cache: O-cookie c=00000007 [p=00000006 fl=222 nc=0 na=1] [ 64.678524][ T4182] FS-Cache: O-cookie d=ffffffff8c533c40{AFS.cell} n=ffff88807e2a9800 [ 64.686685][ T4182] FS-Cache: O-key=[1] '28' [ 64.691123][ T4182] FS-Cache: N-cookie c=00000008 [p=00000006 fl=2 nc=0 na=1] [ 64.698411][ T4182] FS-Cache: N-cookie d=ffffffff8c533c40{AFS.cell} n=ffff88802302c000 [ 64.706511][ T4182] FS-Cache: N-key=[1] '28' [ 64.868148][ T4386] netlink: 'syz.1.31': attribute type 1 has an invalid length. [ 64.901442][ T4386] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.31'. [ 66.062475][ T4397] serio: Serial port ttyS3 [ 66.226903][ T4404] netlink: 'syz.2.38': attribute type 1 has an invalid length. [ 66.274186][ T4404] netlink: 'syz.2.38': attribute type 4 has an invalid length. [ 66.298671][ T4404] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.38'. [ 66.423486][ T4413] loop2: detected capacity change from 0 to 64 [ 66.526466][ T4413] hfs: hfs: Invalid key length: 94 [ 67.382781][ T4420] loop0: detected capacity change from 0 to 256 [ 68.876429][ T4195] hfs: node 4:3 still has 1 user(s)! [ 68.880331][ T4420] exfat: Deprecated parameter 'namecase' [ 68.902788][ T4420] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 68.954645][ T4418] netlink: 'syz.0.43': attribute type 3 has an invalid length. [ 69.726045][ T4436] netlink: 'syz.1.48': attribute type 3 has an invalid length. [ 71.283569][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.290103][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 73.191229][ T4469] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.59'. [ 73.209870][ T4468] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.59'. [ 73.410987][ T4471] 9pnet: p9_fd_create_tcp (4471): problem connecting socket to 127.0.0.1 [ 73.510375][ T4473] loop0: detected capacity change from 0 to 64 [ 73.611108][ T4473] hfs: hfs: Invalid key length: 94 [ 74.414601][ T4185] hfs: node 4:3 still has 1 user(s)! [ 74.874143][ T4488] loop1: detected capacity change from 0 to 256 [ 75.550193][ T4488] exfat: Deprecated parameter 'namecase' [ 75.562005][ T4488] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 75.585948][ T4487] netlink: 'syz.1.65': attribute type 3 has an invalid length. [ 76.390485][ T2855] cfg80211: failed to load regulatory.db [ 76.630741][ T4499] netlink: 8 bytes leftover after parsing attributes in process `syz.0.71'. [ 76.648883][ T4499] netlink: 8 bytes leftover after parsing attributes in process `syz.0.71'. [ 76.658867][ T4499] netlink: 8 bytes leftover after parsing attributes in process `syz.0.71'. [ 76.985245][ T4377] Set syz1 is full, maxelem 65536 reached [ 77.179115][ T4515] netlink: 8 bytes leftover after parsing attributes in process `syz.2.74'. [ 77.189346][ T4515] netlink: 8 bytes leftover after parsing attributes in process `syz.2.74'. [ 77.198927][ T4515] netlink: 8 bytes leftover after parsing attributes in process `syz.2.74'. [ 77.274309][ T4519] netlink: 8 bytes leftover after parsing attributes in process `syz.4.75'. [ 77.290177][ T4519] netlink: 8 bytes leftover after parsing attributes in process `syz.4.75'. [ 78.201902][ T4522] 9pnet: p9_fd_create_tcp (4522): problem connecting socket to 127.0.0.1 [ 80.077968][ T4537] netlink: 'syz.3.82': attribute type 1 has an invalid length. [ 80.149647][ T4537] __nla_validate_parse: 4 callbacks suppressed [ 80.149663][ T4537] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.82'. [ 80.826196][ T4546] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.84'. [ 81.019809][ T4544] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.84'. [ 81.039844][ T4553] serio: Serial port ttyS3 [ 82.197841][ T4579] netlink: 8 bytes leftover after parsing attributes in process `syz.3.96'. [ 82.214898][ T4579] netlink: 8 bytes leftover after parsing attributes in process `syz.3.96'. [ 82.225290][ T4579] netlink: 8 bytes leftover after parsing attributes in process `syz.3.96'. [ 84.287134][ T4591] netlink: 'syz.0.99': attribute type 1 has an invalid length. [ 84.310638][ T4591] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.99'. [ 85.646010][ T4608] serio: Serial port ttyS3 [ 85.745851][ T4606] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.104'. [ 85.827502][ T4604] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.104'. [ 86.930908][ T4624] serio: Serial port ttyS3 [ 87.683169][ T4643] loop2: detected capacity change from 0 to 64 [ 87.773856][ T4643] hfs: hfs: Invalid key length: 94 [ 88.628252][ T4648] loop3: detected capacity change from 0 to 64 [ 88.647592][ T4195] hfs: node 4:3 still has 1 user(s)! [ 88.761426][ T4648] hfs: hfs: Invalid key length: 94 [ 89.748476][ T4621] hub 8-0:1.0: USB hub found [ 89.805396][ T4621] hub 8-0:1.0: 1 port detected [ 89.901841][ T4659] hub 8-0:1.0: USB hub found [ 90.059871][ T4659] hub 8-0:1.0: 1 port detected [ 90.739822][ T4676] serio: Serial port ttyS3 [ 91.430343][ T4680] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.129'. [ 91.620038][ T4181] hfs: node 4:3 still has 1 user(s)! [ 91.704270][ T4688] serio: Serial port ttyS3 [ 92.358356][ T4691] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.133'. [ 92.374618][ T4693] loop3: detected capacity change from 0 to 64 [ 92.614064][ T4693] hfs: hfs: Invalid key length: 94 [ 93.352796][ T4181] hfs: node 4:3 still has 1 user(s)! [ 93.640511][ T4710] netlink: 28 bytes leftover after parsing attributes in process `syz.1.139'. [ 93.833964][ T4709] hub 8-0:1.0: USB hub found [ 93.839612][ T4710] netlink: 28 bytes leftover after parsing attributes in process `syz.1.139'. [ 93.862430][ T4709] hub 8-0:1.0: 1 port detected [ 93.947956][ T4714] loop3: detected capacity change from 0 to 256 [ 94.634997][ T4710] device bond0 entered promiscuous mode [ 94.653905][ T4710] device bond_slave_0 entered promiscuous mode [ 94.680191][ T4714] exfat: Deprecated parameter 'namecase' [ 94.704885][ T4710] device bond_slave_1 entered promiscuous mode [ 94.730183][ T4714] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 94.762647][ T4710] device bond0 left promiscuous mode [ 94.768387][ T4710] device bond_slave_0 left promiscuous mode [ 94.808360][ T4710] device bond_slave_1 left promiscuous mode [ 94.877582][ T4713] netlink: 'syz.3.140': attribute type 3 has an invalid length. [ 95.033774][ T4718] loop1: detected capacity change from 0 to 64 [ 95.063042][ T4720] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.143'. [ 95.150739][ T4718] hfs: unable to parse mount options [ 95.376401][ T4725] loop1: detected capacity change from 0 to 64 [ 95.440573][ T4727] serio: Serial port ttyS3 [ 96.177642][ T4725] hfs: hfs: Invalid key length: 94 [ 96.204226][ T4730] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 96.754613][ T4180] hfs: node 4:3 still has 1 user(s)! [ 96.792826][ T4258] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 97.019636][ T4258] usb 4-1: device descriptor read/64, error -71 [ 97.237265][ T4738] loop1: detected capacity change from 0 to 4096 [ 97.299546][ T4258] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 97.325832][ T4742] loop2: detected capacity change from 0 to 64 [ 97.334864][ T4738] ntfs: (device loop1): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 97.477601][ T4738] ntfs: (device loop1): ntfs_read_locked_inode(): $DATA attribute is missing. [ 97.501768][ T4742] hfs: hfs: Invalid key length: 94 [ 97.616867][ T4258] usb 4-1: device descriptor read/64, error -71 [ 97.659543][ T4738] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 97.705629][ T4738] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 98.275960][ T4258] usb usb4-port1: attempt power cycle [ 98.317491][ T4738] ntfs: volume version 3.1. [ 98.325987][ T4195] hfs: node 4:3 still has 1 user(s)! [ 98.473305][ T4738] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 98.515073][ T4738] ntfs: (device loop1): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 98.659296][ T4738] ntfs: (device loop1): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 98.699525][ T4258] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 98.746415][ T4748] loop2: detected capacity change from 0 to 256 [ 99.975754][ T4738] ntfs: (device loop1): ntfs_read_locked_index_inode(): $INDEX_ROOT attribute is missing. [ 100.000183][ T4748] exfat: Deprecated parameter 'namecase' [ 100.015670][ T4748] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 100.030394][ T4738] ntfs: (device loop1): ntfs_read_locked_index_inode(): Failed with error code -2 while reading index inode (mft_no 0x0, name_len 2. [ 100.044288][ T4738] ntfs: (device loop1): load_and_init_quota(): Failed to load $Quota/$Q index. [ 100.083209][ T4747] netlink: 'syz.2.152': attribute type 3 has an invalid length. [ 100.259803][ T4258] usb 4-1: device not accepting address 4, error -71 [ 100.393665][ T4754] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.154'. [ 100.397625][ T4755] FAULT_INJECTION: forcing a failure. [ 100.397625][ T4755] name failslab, interval 1, probability 0, space 0, times 1 [ 100.469366][ T4752] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.154'. [ 100.516823][ T4755] CPU: 0 PID: 4755 Comm: syz.3.155 Not tainted syzkaller #0 [ 100.524157][ T4755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 100.534231][ T4755] Call Trace: [ 100.537510][ T4755] [ 100.540428][ T4755] dump_stack_lvl+0x168/0x230 [ 100.545103][ T4755] ? show_regs_print_info+0x20/0x20 [ 100.550286][ T4755] ? load_image+0x3b0/0x3b0 [ 100.554797][ T4755] ? __might_sleep+0xf0/0xf0 [ 100.559369][ T4755] ? __lock_acquire+0x7c60/0x7c60 [ 100.564387][ T4755] should_fail+0x38c/0x4c0 [ 100.568798][ T4755] should_failslab+0x5/0x20 [ 100.573294][ T4755] slab_pre_alloc_hook+0x51/0xc0 [ 100.578219][ T4755] kmem_cache_alloc_node_trace+0x4a/0x300 [ 100.583921][ T4755] ? __get_vm_area_node+0x119/0x2d0 [ 100.589103][ T4755] __get_vm_area_node+0x119/0x2d0 [ 100.594111][ T4755] __vmalloc_node_range+0xef/0x8b0 [ 100.599207][ T4755] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 100.604745][ T4755] ? end_current_label_crit_section+0x170/0x170 [ 100.610987][ T4755] ? __lock_acquire+0x7c60/0x7c60 [ 100.616020][ T4755] ? __lock_acquire+0x13ad/0x7c60 [ 100.621037][ T4755] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 100.626568][ T4755] __vmalloc+0x76/0x80 [ 100.630630][ T4755] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 100.636162][ T4755] bpf_prog_alloc_no_stats+0x36/0x2c0 [ 100.641549][ T4755] bpf_prog_alloc+0x1a/0x1e0 [ 100.646122][ T4755] bpf_prog_load+0x7b3/0x1550 [ 100.650792][ T4755] ? map_freeze+0x350/0x350 [ 100.655280][ T4755] ? __might_fault+0xb7/0x110 [ 100.660065][ T4755] ? __might_fault+0xb3/0x110 [ 100.664728][ T4755] ? bpf_lsm_bpf+0x5/0x10 [ 100.669039][ T4755] ? security_bpf+0x7a/0xa0 [ 100.673547][ T4755] __sys_bpf+0x4c2/0x670 [ 100.677783][ T4755] ? bpf_link_show_fdinfo+0x340/0x340 [ 100.683151][ T4755] ? vtime_user_exit+0x2dc/0x400 [ 100.688076][ T4755] __x64_sys_bpf+0x78/0x90 [ 100.692479][ T4755] do_syscall_64+0x4c/0xa0 [ 100.696880][ T4755] ? clear_bhb_loop+0x30/0x80 [ 100.701539][ T4755] ? clear_bhb_loop+0x30/0x80 [ 100.706201][ T4755] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 100.712104][ T4755] RIP: 0033:0x7f55e5a6f749 [ 100.716529][ T4755] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.736219][ T4755] RSP: 002b:00007f55e3cd6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 100.744623][ T4755] RAX: ffffffffffffffda RBX: 00007f55e5cc5fa0 RCX: 00007f55e5a6f749 [ 100.752586][ T4755] RDX: 0000000000000080 RSI: 0000200000000300 RDI: 0000000000000005 [ 100.760542][ T4755] RBP: 00007f55e3cd6090 R08: 0000000000000000 R09: 0000000000000000 [ 100.768502][ T4755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.776464][ T4755] R13: 00007f55e5cc6038 R14: 00007f55e5cc5fa0 R15: 00007ffd654ad888 [ 100.784516][ T4755] [ 100.937391][ T4761] loop1: detected capacity change from 0 to 64 [ 101.003487][ T4755] syz.3.155: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 101.003809][ T4755] CPU: 1 PID: 4755 Comm: syz.3.155 Not tainted syzkaller #0 [ 101.003827][ T4755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 101.003836][ T4755] Call Trace: [ 101.003842][ T4755] [ 101.003850][ T4755] dump_stack_lvl+0x168/0x230 [ 101.003881][ T4755] ? rcu_lock_release+0x5/0x20 [ 101.003902][ T4755] ? show_regs_print_info+0x20/0x20 [ 101.003918][ T4755] ? load_image+0x3b0/0x3b0 [ 101.003943][ T4755] warn_alloc+0x20e/0x2f0 [ 101.003979][ T4755] ? zone_watermark_ok_safe+0x240/0x240 [ 101.004003][ T4755] ? __get_vm_area_node+0x2b5/0x2d0 [ 101.004026][ T4755] __vmalloc_node_range+0x2b1/0x8b0 [ 101.004042][ T4755] ? end_current_label_crit_section+0x170/0x170 [ 101.004059][ T4755] ? __lock_acquire+0x7c60/0x7c60 [ 101.004076][ T4755] ? __lock_acquire+0x13ad/0x7c60 [ 101.004098][ T4755] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 101.004118][ T4755] __vmalloc+0x76/0x80 [ 101.004131][ T4755] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 101.004150][ T4755] bpf_prog_alloc_no_stats+0x36/0x2c0 [ 101.004170][ T4755] bpf_prog_alloc+0x1a/0x1e0 [ 101.004189][ T4755] bpf_prog_load+0x7b3/0x1550 [ 101.004228][ T4755] ? map_freeze+0x350/0x350 [ 101.004242][ T4755] ? __might_fault+0xb7/0x110 [ 101.004277][ T4755] ? __might_fault+0xb3/0x110 [ 101.004291][ T4755] ? bpf_lsm_bpf+0x5/0x10 [ 101.004305][ T4755] ? security_bpf+0x7a/0xa0 [ 101.004321][ T4755] __sys_bpf+0x4c2/0x670 [ 101.004336][ T4755] ? bpf_link_show_fdinfo+0x340/0x340 [ 101.004361][ T4755] ? vtime_user_exit+0x2dc/0x400 [ 101.004383][ T4755] __x64_sys_bpf+0x78/0x90 [ 101.004397][ T4755] do_syscall_64+0x4c/0xa0 [ 101.004412][ T4755] ? clear_bhb_loop+0x30/0x80 [ 101.004427][ T4755] ? clear_bhb_loop+0x30/0x80 [ 101.004448][ T4755] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 101.004462][ T4755] RIP: 0033:0x7f55e5a6f749 [ 101.004478][ T4755] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.004489][ T4755] RSP: 002b:00007f55e3cd6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 101.004506][ T4755] RAX: ffffffffffffffda RBX: 00007f55e5cc5fa0 RCX: 00007f55e5a6f749 [ 101.004516][ T4755] RDX: 0000000000000080 RSI: 0000200000000300 RDI: 0000000000000005 [ 101.004525][ T4755] RBP: 00007f55e3cd6090 R08: 0000000000000000 R09: 0000000000000000 [ 101.004535][ T4755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.004544][ T4755] R13: 00007f55e5cc6038 R14: 00007f55e5cc5fa0 R15: 00007ffd654ad888 [ 101.004566][ T4755] [ 101.004590][ T4755] Mem-Info: [ 101.004604][ T4755] active_anon:290 inactive_anon:5651 isolated_anon:0 [ 101.004604][ T4755] active_file:4689 inactive_file:36509 isolated_file:0 [ 101.004604][ T4755] unevictable:2816 dirty:160 writeback:0 [ 101.004604][ T4755] slab_reclaimable:20233 slab_unreclaimable:99732 [ 101.004604][ T4755] mapped:29669 shmem:1651 pagetables:622 bounce:0 [ 101.004604][ T4755] kernel_misc_reclaimable:0 [ 101.004604][ T4755] free:1382737 free_pcp:14524 free_cma:0 [ 101.004643][ T4755] Node 0 active_anon:1128kB inactive_anon:22096kB active_file:18552kB inactive_file:146036kB unevictable:9728kB isolated(anon):0kB isolated(file):0kB mapped:118676kB dirty:640kB writeback:0kB shmem:4528kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11428kB pagetables:2488kB all_unreclaimable? no [ 101.004683][ T4755] Node 1 active_anon:32kB inactive_anon:508kB active_file:204kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2076kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 101.004719][ T4755] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 101.004761][ T4755] lowmem_reserve[]: 0 2541 2542 2542 2542 [ 101.004791][ T4755] Node 0 DMA32 free:1607392kB min:34800kB low:43500kB high:52200kB reserved_highatomic:0KB active_anon:1128kB inactive_anon:22096kB active_file:18552kB inactive_file:146036kB unevictable:9728kB writepending:640kB present:3129332kB managed:2609000kB mlocked:8192kB bounce:0kB free_pcp:42352kB local_pcp:21668kB free_cma:0kB [ 101.004835][ T4755] lowmem_reserve[]: 0 0 0 0 0 [ 101.004886][ T4755] Node 0 Normal free:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:916kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 101.004928][ T4755] lowmem_reserve[]: 0 0 0 0 0 [ 101.004959][ T4755] Node 1 Normal free:3908196kB min:55088kB low:68860kB high:82632kB reserved_highatomic:0KB active_anon:32kB inactive_anon:508kB active_file:204kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:15744kB local_pcp:3720kB free_cma:0kB [ 101.005000][ T4755] lowmem_reserve[]: 0 0 0 0 0 [ 101.005035][ T4755] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 101.005146][ T4755] Node 0 DMA32: 166*4kB (UM) 251*8kB (ME) 81*16kB (UME) 55*32kB (UME) 14*64kB (UE) 54*128kB (UME) 22*256kB (UME) 4*512kB (UM) 3*1024kB (UME) 3*2048kB (UME) 385*4096kB (M) = 1607392kB [ 101.005306][ T4755] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 101.005395][ T4755] Node 1 Normal: 63*4kB (UME) 27*8kB (UME) 17*16kB (UME) 58*32kB (UE) 19*64kB (UE) 11*128kB (UE) 8*256kB (UME) 3*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 950*4096kB (M) = 3908196kB [ 101.005561][ T4755] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 101.005583][ T4755] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 101.005598][ T4755] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 101.005613][ T4755] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 101.005627][ T4755] 42850 total pagecache pages [ 101.005638][ T4755] 0 pages in swap cache [ 101.005645][ T4755] Swap cache stats: add 0, delete 0, find 0/0 [ 101.005656][ T4755] Free swap = 124996kB [ 101.005663][ T4755] Total swap = 124996kB [ 101.005670][ T4755] 2097051 pages RAM [ 101.005676][ T4755] 0 pages HighMem/MovableOnly [ 101.005683][ T4755] 410814 pages reserved [ 101.005689][ T4755] 0 pages cma reserved [ 101.006409][ T4763] loop4: detected capacity change from 0 to 128 [ 101.084015][ T4761] hfs: hfs: Invalid key length: 94 [ 101.914713][ T4774] netlink: 68 bytes leftover after parsing attributes in process `syz.2.160'. [ 102.129707][ T4777] netlink: 32 bytes leftover after parsing attributes in process `syz.3.162'. [ 102.161829][ T4763] EXT4-fs: error -4 creating inode table initialization thread [ 102.308794][ T4763] EXT4-fs (loop4): mount failed [ 102.478995][ T4782] loop4: detected capacity change from 0 to 22 [ 102.528842][ T4180] hfs: node 4:3 still has 1 user(s)! [ 102.542804][ T4782] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 102.558229][ T4782] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 102.646224][ T4786] netlink: 'syz.2.166': attribute type 29 has an invalid length. [ 102.696509][ T4782] netlink: 'syz.4.164': attribute type 11 has an invalid length. [ 102.701085][ T4786] netlink: 'syz.2.166': attribute type 29 has an invalid length. [ 102.770818][ T4787] netlink: 'syz.2.166': attribute type 29 has an invalid length. [ 102.796166][ T4789] netlink: 'syz.2.166': attribute type 29 has an invalid length. [ 102.830266][ T4786] netlink: 'syz.2.166': attribute type 29 has an invalid length. [ 102.905822][ T4792] FAULT_INJECTION: forcing a failure. [ 102.905822][ T4792] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 102.981187][ T4792] CPU: 0 PID: 4792 Comm: syz.4.168 Not tainted syzkaller #0 [ 102.988494][ T4792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 102.998535][ T4792] Call Trace: [ 103.001802][ T4792] [ 103.004719][ T4792] dump_stack_lvl+0x168/0x230 [ 103.009426][ T4792] ? show_regs_print_info+0x20/0x20 [ 103.014634][ T4792] ? load_image+0x3b0/0x3b0 [ 103.019216][ T4792] ? __lock_acquire+0x7c60/0x7c60 [ 103.024223][ T4792] ? vfs_write+0x84d/0xd00 [ 103.028630][ T4792] should_fail+0x38c/0x4c0 [ 103.033039][ T4792] _copy_from_user+0x2e/0x170 [ 103.037704][ T4792] __sys_bpf+0x21b/0x670 [ 103.041979][ T4792] ? bpf_link_show_fdinfo+0x340/0x340 [ 103.047346][ T4792] ? vtime_user_exit+0x2dc/0x400 [ 103.052276][ T4792] __x64_sys_bpf+0x78/0x90 [ 103.056682][ T4792] do_syscall_64+0x4c/0xa0 [ 103.061084][ T4792] ? clear_bhb_loop+0x30/0x80 [ 103.065751][ T4792] ? clear_bhb_loop+0x30/0x80 [ 103.070418][ T4792] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 103.076298][ T4792] RIP: 0033:0x7f1d959ec749 [ 103.080704][ T4792] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.100297][ T4792] RSP: 002b:00007f1d93c53038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 103.108697][ T4792] RAX: ffffffffffffffda RBX: 00007f1d95c42fa0 RCX: 00007f1d959ec749 [ 103.116657][ T4792] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 103.124614][ T4792] RBP: 00007f1d93c53090 R08: 0000000000000000 R09: 0000000000000000 [ 103.132570][ T4792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.140529][ T4792] R13: 00007f1d95c43038 R14: 00007f1d95c42fa0 R15: 00007ffd760067f8 [ 103.148497][ T4792] [ 103.247561][ T4798] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.170'. [ 103.277499][ T4796] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.170'. [ 103.467124][ T4804] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.173'. [ 103.494829][ T25] kauditd_printk_skb: 1 callbacks suppressed [ 103.494844][ T25] audit: type=1326 audit(1765178363.305:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4799 comm="syz.3.171" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f55e5a6f749 code=0x0 [ 103.523800][ T4704] Set syz1 is full, maxelem 65536 reached [ 103.546019][ T4807] netlink: 'syz.3.171': attribute type 1 has an invalid length. [ 103.574145][ T4807] netlink: 4 bytes leftover after parsing attributes in process `syz.3.171'. [ 103.610825][ T4811] loop4: detected capacity change from 0 to 64 [ 103.622596][ T4809] FAULT_INJECTION: forcing a failure. [ 103.622596][ T4809] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 103.635881][ T4813] FAULT_INJECTION: forcing a failure. [ 103.635881][ T4813] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 103.659919][ T4813] CPU: 1 PID: 4813 Comm: syz.0.176 Not tainted syzkaller #0 [ 103.667242][ T4813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 103.677301][ T4813] Call Trace: [ 103.680583][ T4813] [ 103.683509][ T4813] dump_stack_lvl+0x168/0x230 [ 103.688182][ T4813] ? show_regs_print_info+0x20/0x20 [ 103.693371][ T4813] ? load_image+0x3b0/0x3b0 [ 103.697869][ T4813] ? __lock_acquire+0x7c60/0x7c60 [ 103.702981][ T4813] ? vfs_write+0x84d/0xd00 [ 103.707447][ T4813] should_fail+0x38c/0x4c0 [ 103.711889][ T4813] _copy_from_user+0x2e/0x170 [ 103.716580][ T4813] __sys_bpf+0x21b/0x670 [ 103.720837][ T4813] ? bpf_link_show_fdinfo+0x340/0x340 [ 103.726239][ T4813] ? vtime_user_exit+0x2dc/0x400 [ 103.731339][ T4813] __x64_sys_bpf+0x78/0x90 [ 103.735727][ T4811] hfs: hfs: Invalid key length: 94 [ 103.735865][ T4813] do_syscall_64+0x4c/0xa0 [ 103.745463][ T4813] ? clear_bhb_loop+0x30/0x80 [ 103.750240][ T4813] ? clear_bhb_loop+0x30/0x80 [ 103.754934][ T4813] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 103.760841][ T4813] RIP: 0033:0x7f997de75749 [ 103.765259][ T4813] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.784865][ T4813] RSP: 002b:00007f997c0dc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 103.793290][ T4813] RAX: ffffffffffffffda RBX: 00007f997e0cbfa0 RCX: 00007f997de75749 [ 103.801257][ T4813] RDX: 0000000000000080 RSI: 0000200000000100 RDI: 0000000000000005 [ 103.809228][ T4813] RBP: 00007f997c0dc090 R08: 0000000000000000 R09: 0000000000000000 [ 103.817190][ T4813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.825159][ T4813] R13: 00007f997e0cc038 R14: 00007f997e0cbfa0 R15: 00007fff2e9b7778 [ 103.833138][ T4813] [ 103.836173][ T4809] CPU: 0 PID: 4809 Comm: syz.2.174 Not tainted syzkaller #0 [ 103.843468][ T4809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 103.853513][ T4809] Call Trace: [ 103.856782][ T4809] [ 103.859702][ T4809] dump_stack_lvl+0x168/0x230 [ 103.864365][ T4809] ? show_regs_print_info+0x20/0x20 [ 103.869544][ T4809] ? load_image+0x3b0/0x3b0 [ 103.874049][ T4809] ? __lock_acquire+0x7c60/0x7c60 [ 103.879058][ T4809] ? vfs_write+0x84d/0xd00 [ 103.883468][ T4809] should_fail+0x38c/0x4c0 [ 103.887880][ T4809] _copy_from_user+0x2e/0x170 [ 103.892575][ T4809] __sys_bpf+0x21b/0x670 [ 103.896810][ T4809] ? bpf_link_show_fdinfo+0x340/0x340 [ 103.902171][ T4809] ? vtime_user_exit+0x2dc/0x400 [ 103.907099][ T4809] __x64_sys_bpf+0x78/0x90 [ 103.911495][ T4809] do_syscall_64+0x4c/0xa0 [ 103.915923][ T4809] ? clear_bhb_loop+0x30/0x80 [ 103.920582][ T4809] ? clear_bhb_loop+0x30/0x80 [ 103.925382][ T4809] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 103.931359][ T4809] RIP: 0033:0x7f48f919c749 [ 103.935766][ T4809] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.955353][ T4809] RSP: 002b:00007f48f7403038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 103.963756][ T4809] RAX: ffffffffffffffda RBX: 00007f48f93f2fa0 RCX: 00007f48f919c749 [ 103.971715][ T4809] RDX: 0000000000000010 RSI: 0000200000000400 RDI: 000000000000000a [ 103.979673][ T4809] RBP: 00007f48f7403090 R08: 0000000000000000 R09: 0000000000000000 [ 103.987632][ T4809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.995592][ T4809] R13: 00007f48f93f3038 R14: 00007f48f93f2fa0 R15: 00007ffea5e915d8 [ 104.003561][ T4809] [ 104.167380][ T4814] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 104.295350][ T4823] Zero length message leads to an empty skb [ 104.510740][ T4193] hfs: node 4:3 still has 1 user(s)! [ 104.698185][ T4832] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.182'. [ 105.270824][ T4830] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.182'. [ 105.317953][ T4834] loop4: detected capacity change from 0 to 1764 [ 105.748318][ T4851] serio: Serial port ttyS3 [ 106.397051][ T4855] FAULT_INJECTION: forcing a failure. [ 106.397051][ T4855] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 106.414306][ T4855] CPU: 0 PID: 4855 Comm: syz.4.189 Not tainted syzkaller #0 [ 106.421609][ T4855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 106.431648][ T4855] Call Trace: [ 106.434909][ T4855] [ 106.437849][ T4855] dump_stack_lvl+0x168/0x230 [ 106.442515][ T4855] ? show_regs_print_info+0x20/0x20 [ 106.447697][ T4855] ? load_image+0x3b0/0x3b0 [ 106.452267][ T4855] ? __lock_acquire+0x7c60/0x7c60 [ 106.457272][ T4855] ? vfs_write+0x84d/0xd00 [ 106.461673][ T4855] should_fail+0x38c/0x4c0 [ 106.466074][ T4855] _copy_from_user+0x2e/0x170 [ 106.470737][ T4855] __sys_bpf+0x21b/0x670 [ 106.475012][ T4855] ? bpf_link_show_fdinfo+0x340/0x340 [ 106.480385][ T4855] ? vtime_user_exit+0x2dc/0x400 [ 106.485303][ T4855] __x64_sys_bpf+0x78/0x90 [ 106.489699][ T4855] do_syscall_64+0x4c/0xa0 [ 106.494092][ T4855] ? clear_bhb_loop+0x30/0x80 [ 106.498748][ T4855] ? clear_bhb_loop+0x30/0x80 [ 106.503407][ T4855] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 106.509279][ T4855] RIP: 0033:0x7f1d959ec749 [ 106.513674][ T4855] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.533257][ T4855] RSP: 002b:00007f1d93c53038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 106.541652][ T4855] RAX: ffffffffffffffda RBX: 00007f1d95c42fa0 RCX: 00007f1d959ec749 [ 106.549692][ T4855] RDX: 0000000000000090 RSI: 0000200000000840 RDI: 0000000000000005 [ 106.557646][ T4855] RBP: 00007f1d93c53090 R08: 0000000000000000 R09: 0000000000000000 [ 106.565595][ T4855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.573546][ T4855] R13: 00007f1d95c43038 R14: 00007f1d95c42fa0 R15: 00007ffd760067f8 [ 106.581620][ T4855] [ 106.590336][ T4293] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 106.647634][ T4857] loop3: detected capacity change from 0 to 64 [ 106.700548][ T4857] hfs: hfs: Invalid key length: 94 [ 106.824362][ T4861] loop2: detected capacity change from 0 to 64 [ 106.915182][ T4861] hfs: hfs: Invalid key length: 94 [ 107.060745][ T4293] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.081227][ T4293] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.094886][ T4293] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 107.105303][ T4293] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.752280][ T4293] usb 1-1: config 0 descriptor?? [ 107.791221][ T4181] hfs: node 4:3 still has 1 user(s)! [ 107.805530][ T4195] hfs: node 4:3 still has 1 user(s)! [ 107.928576][ T4868] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.196'. [ 108.041224][ T4871] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.195'. [ 108.057750][ T4870] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.195'. [ 108.327213][ T4293] hid-steam 0003:28DE:1142.0001: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 108.356565][ T4293] hid-steam 0003:28DE:1142.0002: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 108.441834][ T4293] hid-steam 0003:28DE:1142.0001: Steam wireless receiver connected [ 108.566532][ T4885] udc-core: couldn't find an available UDC or it's busy [ 108.665627][ T4886] serio: Serial port ttyS3 [ 108.677471][ T4885] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 109.643587][ T4898] loop1: detected capacity change from 0 to 64 [ 109.716881][ T4898] hfs: hfs: Invalid key length: 94 [ 109.799354][ T4875] loop2: detected capacity change from 0 to 32768 [ 109.878624][ T4875] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.198 (4875) [ 109.934264][ T4875] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 109.944614][ T4875] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 109.955005][ T4875] BTRFS info (device loop2): use zstd compression, level 3 [ 109.962565][ T4875] BTRFS info (device loop2): using free space tree [ 109.969322][ T4875] BTRFS info (device loop2): has skinny extents [ 110.227874][ T4875] BTRFS info (device loop2): enabling ssd optimizations [ 110.317997][ T4293] usb 1-1: USB disconnect, device number 2 [ 110.350170][ T4293] hid-steam 0003:28DE:1142.0001: Steam wireless receiver disconnected [ 110.508875][ T4931] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.209'. [ 110.550333][ T4180] hfs: node 4:3 still has 1 user(s)! [ 110.573858][ T4926] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.209'. [ 110.597382][ T4932] FAULT_INJECTION: forcing a failure. [ 110.597382][ T4932] name failslab, interval 1, probability 0, space 0, times 0 [ 110.639737][ T4932] CPU: 0 PID: 4932 Comm: syz.2.198 Not tainted syzkaller #0 [ 110.647063][ T4932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 110.657126][ T4932] Call Trace: [ 110.660414][ T4932] [ 110.663352][ T4932] dump_stack_lvl+0x168/0x230 [ 110.668043][ T4932] ? show_regs_print_info+0x20/0x20 [ 110.673246][ T4932] ? load_image+0x3b0/0x3b0 [ 110.677758][ T4932] ? __might_sleep+0xf0/0xf0 [ 110.682358][ T4932] ? __lock_acquire+0x7c60/0x7c60 [ 110.687397][ T4932] should_fail+0x38c/0x4c0 [ 110.691820][ T4932] should_failslab+0x5/0x20 [ 110.696317][ T4932] slab_pre_alloc_hook+0x51/0xc0 [ 110.701248][ T4932] ? getname_flags+0xb5/0x500 [ 110.705918][ T4932] kmem_cache_alloc+0x3d/0x290 [ 110.710674][ T4932] getname_flags+0xb5/0x500 [ 110.715165][ T4932] user_path_at_empty+0x2a/0x190 [ 110.720087][ T4932] __se_sys_mount+0x297/0x3c0 [ 110.724751][ T4932] ? __x64_sys_mount+0xc0/0xc0 [ 110.729497][ T4932] ? lockdep_hardirqs_on+0x94/0x140 [ 110.734679][ T4932] ? __x64_sys_mount+0x1c/0xc0 [ 110.739429][ T4932] do_syscall_64+0x4c/0xa0 [ 110.743828][ T4932] ? clear_bhb_loop+0x30/0x80 [ 110.748488][ T4932] ? clear_bhb_loop+0x30/0x80 [ 110.753146][ T4932] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 110.759026][ T4932] RIP: 0033:0x7f48f919c749 [ 110.763426][ T4932] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.783018][ T4932] RSP: 002b:00007f48f73e2038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 110.791419][ T4932] RAX: ffffffffffffffda RBX: 00007f48f93f3090 RCX: 00007f48f919c749 [ 110.799375][ T4932] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000000 [ 110.807329][ T4932] RBP: 00007f48f73e2090 R08: 0000000000000000 R09: 0000000000000000 [ 110.815283][ T4932] R10: 0000000000000c22 R11: 0000000000000246 R12: 0000000000000001 [ 110.823237][ T4932] R13: 00007f48f93f3128 R14: 00007f48f93f3090 R15: 00007ffea5e915d8 [ 110.831202][ T4932] [ 111.295848][ T4945] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 111.362738][ T4930] loop3: detected capacity change from 0 to 32768 [ 111.634098][ T4952] serio: Serial port ttyS3 [ 112.358272][ T4930] XFS (loop3): Mounting V5 Filesystem [ 112.511373][ T4930] XFS (loop3): Ending clean mount [ 112.533151][ T4930] XFS (loop3): Quotacheck needed: Please wait. [ 112.593903][ T4930] XFS (loop3): Quotacheck: Done. [ 113.272462][ T4971] loop4: detected capacity change from 0 to 64 [ 113.359268][ T4971] hfs: hfs: Invalid key length: 94 [ 113.539312][ T4974] loop2: detected capacity change from 0 to 512 [ 113.705305][ T4974] EXT4-fs (loop2): Test dummy encryption mode enabled [ 113.718260][ T4974] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 113.758362][ T4974] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 113.799228][ T4974] EXT4-fs (loop2): 1 truncate cleaned up [ 113.802901][ T4181] XFS (loop3): Unmounting Filesystem [ 113.810561][ T4974] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,journal_ioprio=0x0000000000000006,max_dir_size_kb=0x0000000000000006,,errors=continue. Quota mode: none. [ 113.833273][ T4983] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 113.926410][ T4986] hub 8-0:1.0: USB hub found [ 113.956996][ T4986] hub 8-0:1.0: 1 port detected [ 114.069041][ T25] audit: type=1326 audit(1765178373.875:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4981 comm="syz.1.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f735ee4f749 code=0x7ffc0000 [ 114.206039][ T25] audit: type=1326 audit(1765178373.905:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4981 comm="syz.1.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f735ee4f749 code=0x7ffc0000 [ 114.237447][ T4193] hfs: node 4:3 still has 1 user(s)! [ 114.291249][ T25] audit: type=1326 audit(1765178373.905:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4981 comm="syz.1.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f735ee4f749 code=0x7ffc0000 [ 114.459479][ T25] audit: type=1326 audit(1765178373.905:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4981 comm="syz.1.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f735ee4f749 code=0x7ffc0000 [ 114.726046][ T5007] serio: Serial port ttyS3 [ 115.328196][ T25] audit: type=1326 audit(1765178373.915:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4981 comm="syz.1.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f735ee4f749 code=0x7ffc0000 [ 115.552564][ T25] audit: type=1326 audit(1765178373.955:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4981 comm="syz.1.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f735ee4f749 code=0x7ffc0000 [ 115.601716][ T25] audit: type=1326 audit(1765178373.995:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4981 comm="syz.1.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f735ee4f749 code=0x7ffc0000 [ 115.624155][ T25] audit: type=1326 audit(1765178373.995:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4981 comm="syz.1.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f735ee4f749 code=0x7ffc0000 [ 115.651098][ T5014] serio: Serial port ttyS3 [ 116.328615][ T25] audit: type=1326 audit(1765178374.015:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4981 comm="syz.1.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f735ee4f749 code=0x7ffc0000 [ 116.457714][ T25] audit: type=1326 audit(1765178374.015:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4981 comm="syz.1.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f735ee4f749 code=0x7ffc0000 [ 116.535668][ T5024] loop2: detected capacity change from 0 to 64 [ 116.696440][ T5024] hfs: hfs: Invalid key length: 94 [ 117.420639][ T4195] hfs: node 4:3 still has 1 user(s)! [ 118.044550][ T5047] serio: Serial port ttyS3 [ 118.775367][ T5042] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 119.074349][ T5065] loop4: detected capacity change from 0 to 64 [ 119.105628][ T5070] loop2: detected capacity change from 0 to 64 [ 119.192478][ T5065] hfs: hfs: Invalid key length: 94 [ 119.204975][ T5070] hfs: hfs: Invalid key length: 94 [ 119.913607][ T4193] hfs: node 4:3 still has 1 user(s)! [ 119.994868][ T4195] hfs: node 4:3 still has 1 user(s)! [ 120.225277][ T5085] loop0: detected capacity change from 0 to 512 [ 120.348975][ T5088] loop2: detected capacity change from 0 to 256 [ 120.396565][ T5088] exfat: Deprecated parameter 'namecase' [ 120.948577][ T5088] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 120.967932][ T5083] netlink: 'syz.2.255': attribute type 3 has an invalid length. [ 120.983691][ T5085] EXT4-fs (loop0): Unrecognized mount option "seclabel" or missing value [ 122.268334][ T5108] netlink: 'syz.3.264': attribute type 29 has an invalid length. [ 122.279203][ T5108] netlink: 'syz.3.264': attribute type 29 has an invalid length. [ 122.297291][ T5108] netlink: 'syz.3.264': attribute type 29 has an invalid length. [ 122.309626][ T5108] netlink: 'syz.3.264': attribute type 29 has an invalid length. [ 122.680569][ T5110] netlink: 'syz.3.264': attribute type 29 has an invalid length. [ 122.877702][ T5117] loop2: detected capacity change from 0 to 64 [ 122.938765][ T5091] loop0: detected capacity change from 0 to 32768 [ 123.016560][ T5117] hfs: hfs: Invalid key length: 94 [ 123.027010][ T5091] ea_get: invalid extended attribute [ 123.160364][ T5091] ffff888060d5b170: 04 00 00 00 .... [ 123.496692][ T5125] netlink: 12 bytes leftover after parsing attributes in process `syz.4.269'. [ 124.431443][ T4195] hfs: node 4:3 still has 1 user(s)! [ 124.539618][ T5129] loop1: detected capacity change from 0 to 512 [ 124.598817][ T5129] EXT4-fs (loop1): Unrecognized mount option "euid<00000000000000000000" or missing value [ 125.058236][ T5149] loop4: detected capacity change from 0 to 1024 [ 125.316717][ T5155] serio: Serial port ttyS3 [ 125.748358][ T5149] ======================================================= [ 125.748358][ T5149] WARNING: The mand mount option has been deprecated and [ 125.748358][ T5149] and is ignored by this kernel. Remove the mand [ 125.748358][ T5149] option from the mount to silence this warning. [ 125.748358][ T5149] ======================================================= [ 125.900946][ T5149] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 125.925323][ T5162] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.284'. [ 126.160304][ T5171] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.287'. [ 126.180709][ T5170] syz.2.288 sent an empty control message without MSG_MORE. [ 126.247880][ T5173] loop0: detected capacity change from 0 to 64 [ 126.354098][ T5141] loop3: detected capacity change from 0 to 32768 [ 126.373583][ T25] kauditd_printk_skb: 1 callbacks suppressed [ 126.373598][ T25] audit: type=1326 audit(1765178386.185:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5148 comm="syz.4.280" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1d959ec749 code=0x0 [ 126.561772][ T5173] hfs: hfs: Invalid key length: 94 [ 127.719429][ C1] sched: RT throttling activated [ 127.839644][ T5181] loop2: detected capacity change from 0 to 64 [ 128.160730][ T4185] hfs: node 4:3 still has 1 user(s)! [ 128.222493][ T5181] hfs: hfs: Invalid key length: 94 [ 128.318807][ T5185] FAULT_INJECTION: forcing a failure. [ 128.318807][ T5185] name failslab, interval 1, probability 0, space 0, times 0 [ 128.444244][ T5185] CPU: 1 PID: 5185 Comm: syz.0.291 Not tainted syzkaller #0 [ 128.451657][ T5185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 128.461712][ T5185] Call Trace: [ 128.464987][ T5185] [ 128.467912][ T5185] dump_stack_lvl+0x168/0x230 [ 128.472598][ T5185] ? show_regs_print_info+0x20/0x20 [ 128.477791][ T5185] ? load_image+0x3b0/0x3b0 [ 128.482296][ T5185] ? __might_sleep+0xf0/0xf0 [ 128.486888][ T5185] ? __lock_acquire+0x7c60/0x7c60 [ 128.491927][ T5185] should_fail+0x38c/0x4c0 [ 128.496358][ T5185] should_failslab+0x5/0x20 [ 128.500862][ T5185] slab_pre_alloc_hook+0x51/0xc0 [ 128.505803][ T5185] __kmalloc+0x6b/0x330 [ 128.509959][ T5185] ? bpf_test_init+0xf8/0x1b0 [ 128.514639][ T5185] ? __lock_acquire+0x7c60/0x7c60 [ 128.519674][ T5185] bpf_test_init+0xf8/0x1b0 [ 128.524205][ T5185] bpf_prog_test_run_skb+0x181/0x1180 [ 128.529585][ T5185] ? __fget_files+0x40f/0x480 [ 128.534274][ T5185] ? cpu_online+0x60/0x60 [ 128.538610][ T5185] bpf_prog_test_run+0x31e/0x390 [ 128.543556][ T5185] __sys_bpf+0x535/0x670 [ 128.547815][ T5185] ? bpf_link_show_fdinfo+0x340/0x340 [ 128.553213][ T5185] ? vtime_user_exit+0x2dc/0x400 [ 128.558170][ T5185] __x64_sys_bpf+0x78/0x90 [ 128.562601][ T5185] do_syscall_64+0x4c/0xa0 [ 128.567027][ T5185] ? clear_bhb_loop+0x30/0x80 [ 128.571713][ T5185] ? clear_bhb_loop+0x30/0x80 [ 128.576403][ T5185] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 128.582302][ T5185] RIP: 0033:0x7f997de75749 [ 128.586723][ T5185] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.606333][ T5185] RSP: 002b:00007f997c0dc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 128.614762][ T5185] RAX: ffffffffffffffda RBX: 00007f997e0cbfa0 RCX: 00007f997de75749 [ 128.622747][ T5185] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 128.630732][ T5185] RBP: 00007f997c0dc090 R08: 0000000000000000 R09: 0000000000000000 [ 128.638712][ T5185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.646691][ T5185] R13: 00007f997e0cc038 R14: 00007f997e0cbfa0 R15: 00007fff2e9b7778 [ 128.654685][ T5185] [ 129.128379][ T4195] hfs: node 4:3 still has 1 user(s)! [ 129.209734][ T5195] serio: Serial port ttyS3 [ 129.875471][ T5202] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.300'. [ 130.961472][ T5219] loop3: detected capacity change from 0 to 8192 [ 131.070485][ T5219] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 131.089801][ T5219] REISERFS (device loop3): using ordered data mode [ 131.107650][ T5219] reiserfs: using flush barriers [ 131.182682][ T5231] serio: Serial port ttyS3 [ 131.652724][ T5219] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 131.758852][ T5219] REISERFS (device loop3): checking transaction log (loop3) [ 131.868088][ T5219] REISERFS (device loop3): Using r5 hash to sort names [ 131.918414][ T5219] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 131.932318][ T5225] Can't find ip_set type hash:n [ 131.960738][ T5219] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 3633, free_space(entry_count) 2 [ 131.976336][ T5219] REISERFS error (device loop3): vs-5150 search_by_key: invalid format found in block 532. Fsck? [ 132.019898][ T5219] REISERFS (device loop3): Remounting filesystem read-only [ 132.052549][ T5238] serio: Serial port ttyS3 [ 132.620076][ T5236] loop2: detected capacity change from 0 to 64 [ 132.711753][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.718153][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.728297][ T5236] hfs: unable to parse mount options [ 132.872243][ T5250] netlink: 72 bytes leftover after parsing attributes in process `syz.0.316'. [ 133.030486][ T5254] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.318'. [ 133.094874][ T5253] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.318'. [ 133.205917][ T5261] loop2: detected capacity change from 0 to 64 [ 133.435657][ T5268] loop0: detected capacity change from 0 to 64 [ 133.525042][ T5271] serio: Serial port ttyS3 [ 134.230863][ T5261] hfs: hfs: Invalid key length: 94 [ 134.384679][ T5275] hub 8-0:1.0: USB hub found [ 134.423242][ T5268] hfs: hfs: Invalid key length: 94 [ 134.658393][ T4185] hfs: node 4:3 still has 1 user(s)! [ 134.801717][ T4195] hfs: node 4:3 still has 1 user(s)! [ 134.820359][ T5275] hub 8-0:1.0: 1 port detected [ 135.188516][ T5293] loop0: detected capacity change from 0 to 64 [ 135.241136][ T5293] hfs: hfs: Invalid key length: 94 [ 135.257970][ T5289] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 136.128914][ T4185] hfs: node 4:3 still has 1 user(s)! [ 136.211611][ T5302] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.332'. [ 136.242102][ T5299] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.332'. [ 136.258933][ T5297] loop3: detected capacity change from 0 to 4096 [ 136.406851][ T5297] ntfs: volume version 3.1. [ 136.743155][ T5312] process 'syz.2.335' launched './file0' with NULL argv: empty string added [ 137.167027][ T5319] netlink: 'syz.3.339': attribute type 29 has an invalid length. [ 137.196052][ T5319] netlink: 'syz.3.339': attribute type 29 has an invalid length. [ 137.216636][ T5319] netlink: 'syz.3.339': attribute type 29 has an invalid length. [ 137.242125][ T5319] netlink: 'syz.3.339': attribute type 29 has an invalid length. [ 138.510616][ T5333] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.342'. [ 138.838023][ T5337] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 138.852805][ T5336] loop3: detected capacity change from 0 to 4096 [ 138.955269][ T5336] ntfs: (device loop3): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 139.029753][ T5336] ntfs: (device loop3): ntfs_read_locked_inode(): $DATA attribute is missing. [ 139.038689][ T5336] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 139.085736][ T5336] ntfs: (device loop3): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 139.181455][ T5336] ntfs: volume version 3.1. [ 139.324639][ T5336] ntfs: (device loop3): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 139.412857][ T5338] hub 8-0:1.0: USB hub found [ 139.418261][ T5338] hub 8-0:1.0: 1 port detected [ 139.424164][ T5336] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x40 as bad. Run chkdsk. [ 139.510745][ T5343] serio: Serial port ttyS3 [ 140.440611][ T5347] serio: Serial port ttyS3 [ 141.253828][ T5353] FAULT_INJECTION: forcing a failure. [ 141.253828][ T5353] name failslab, interval 1, probability 0, space 0, times 0 [ 141.346157][ T5353] CPU: 0 PID: 5353 Comm: syz.1.348 Not tainted syzkaller #0 [ 141.353468][ T5353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 141.363516][ T5353] Call Trace: [ 141.366794][ T5353] [ 141.369731][ T5353] dump_stack_lvl+0x168/0x230 [ 141.374419][ T5353] ? show_regs_print_info+0x20/0x20 [ 141.374955][ T5352] loop3: detected capacity change from 0 to 1024 [ 141.379627][ T5353] ? load_image+0x3b0/0x3b0 [ 141.379652][ T5353] ? __might_sleep+0xf0/0xf0 [ 141.379668][ T5353] ? __lock_acquire+0x7c60/0x7c60 [ 141.400053][ T5353] should_fail+0x38c/0x4c0 [ 141.404482][ T5353] should_failslab+0x5/0x20 [ 141.408980][ T5353] slab_pre_alloc_hook+0x51/0xc0 [ 141.413958][ T5353] kmem_cache_alloc_node_trace+0x4a/0x300 [ 141.419696][ T5353] ? __get_vm_area_node+0x119/0x2d0 [ 141.424880][ T5353] __get_vm_area_node+0x119/0x2d0 [ 141.429887][ T5353] __vmalloc_node_range+0xef/0x8b0 [ 141.435067][ T5353] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 141.440680][ T5353] ? end_current_label_crit_section+0x170/0x170 [ 141.446904][ T5353] ? __lock_acquire+0x7c60/0x7c60 [ 141.451913][ T5353] ? __lock_acquire+0x13ad/0x7c60 [ 141.456951][ T5353] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 141.462497][ T5353] __vmalloc+0x76/0x80 [ 141.466554][ T5353] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 141.472189][ T5353] bpf_prog_alloc_no_stats+0x36/0x2c0 [ 141.477550][ T5353] bpf_prog_alloc+0x1a/0x1e0 [ 141.482124][ T5353] bpf_prog_load+0x7b3/0x1550 [ 141.486873][ T5353] ? map_freeze+0x350/0x350 [ 141.491376][ T5353] ? __might_fault+0xb7/0x110 [ 141.496040][ T5353] ? __might_fault+0xb3/0x110 [ 141.500698][ T5353] ? bpf_lsm_bpf+0x5/0x10 [ 141.505012][ T5353] ? security_bpf+0x7a/0xa0 [ 141.509495][ T5353] __sys_bpf+0x4c2/0x670 [ 141.513721][ T5353] ? bpf_link_show_fdinfo+0x340/0x340 [ 141.519082][ T5353] ? vtime_user_exit+0x2dc/0x400 [ 141.524006][ T5353] __x64_sys_bpf+0x78/0x90 [ 141.528406][ T5353] do_syscall_64+0x4c/0xa0 [ 141.532797][ T5353] ? clear_bhb_loop+0x30/0x80 [ 141.537454][ T5353] ? clear_bhb_loop+0x30/0x80 [ 141.542105][ T5353] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 141.547980][ T5353] RIP: 0033:0x7f735ee4f749 [ 141.552593][ T5353] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.572178][ T5353] RSP: 002b:00007f735d0b6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 141.580684][ T5353] RAX: ffffffffffffffda RBX: 00007f735f0a5fa0 RCX: 00007f735ee4f749 [ 141.588635][ T5353] RDX: 0000000000000080 RSI: 0000200000000100 RDI: 0000000000000005 [ 141.596705][ T5353] RBP: 00007f735d0b6090 R08: 0000000000000000 R09: 0000000000000000 [ 141.604669][ T5353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.612625][ T5353] R13: 00007f735f0a6038 R14: 00007f735f0a5fa0 R15: 00007ffe022258c8 [ 141.620588][ T5353] [ 141.742945][ T5362] netlink: 'syz.0.351': attribute type 29 has an invalid length. [ 141.752999][ T5352] EXT4-fs (loop3): inline encryption not supported [ 141.789136][ T5362] netlink: 'syz.0.351': attribute type 29 has an invalid length. [ 141.820464][ T5352] EXT4-fs (loop3): orphan cleanup on readonly fs [ 141.830686][ T5364] netlink: 'syz.0.351': attribute type 29 has an invalid length. [ 141.859618][ T5353] syz.1.348: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 141.913716][ T5362] netlink: 'syz.0.351': attribute type 29 has an invalid length. [ 141.921544][ T5352] EXT4-fs (loop3): 1 truncate cleaned up [ 141.931664][ T5353] CPU: 0 PID: 5353 Comm: syz.1.348 Not tainted syzkaller #0 [ 141.939202][ T5353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 141.949263][ T5353] Call Trace: [ 141.952529][ T5353] [ 141.955883][ T5353] dump_stack_lvl+0x168/0x230 [ 141.960631][ T5353] ? rcu_lock_release+0x5/0x20 [ 141.965382][ T5353] ? show_regs_print_info+0x20/0x20 [ 141.970556][ T5353] ? load_image+0x3b0/0x3b0 [ 141.975045][ T5353] warn_alloc+0x20e/0x2f0 [ 141.979649][ T5353] ? zone_watermark_ok_safe+0x240/0x240 [ 141.985177][ T5353] ? __get_vm_area_node+0x2b5/0x2d0 [ 141.990369][ T5353] __vmalloc_node_range+0x2b1/0x8b0 [ 141.995563][ T5353] ? end_current_label_crit_section+0x170/0x170 [ 142.001781][ T5353] ? __lock_acquire+0x7c60/0x7c60 [ 142.006782][ T5353] ? __lock_acquire+0x13ad/0x7c60 [ 142.011783][ T5353] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 142.017322][ T5353] __vmalloc+0x76/0x80 [ 142.021367][ T5353] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 142.026889][ T5353] bpf_prog_alloc_no_stats+0x36/0x2c0 [ 142.032242][ T5353] bpf_prog_alloc+0x1a/0x1e0 [ 142.036811][ T5353] bpf_prog_load+0x7b3/0x1550 [ 142.041473][ T5353] ? map_freeze+0x350/0x350 [ 142.045954][ T5353] ? __might_fault+0xb7/0x110 [ 142.050874][ T5353] ? __might_fault+0xb3/0x110 [ 142.055527][ T5353] ? bpf_lsm_bpf+0x5/0x10 [ 142.059834][ T5353] ? security_bpf+0x7a/0xa0 [ 142.064312][ T5353] __sys_bpf+0x4c2/0x670 [ 142.068532][ T5353] ? bpf_link_show_fdinfo+0x340/0x340 [ 142.073886][ T5353] ? vtime_user_exit+0x2dc/0x400 [ 142.078807][ T5353] __x64_sys_bpf+0x78/0x90 [ 142.083314][ T5353] do_syscall_64+0x4c/0xa0 [ 142.087705][ T5353] ? clear_bhb_loop+0x30/0x80 [ 142.092449][ T5353] ? clear_bhb_loop+0x30/0x80 [ 142.097211][ T5353] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 142.103079][ T5353] RIP: 0033:0x7f735ee4f749 [ 142.107472][ T5353] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.127056][ T5353] RSP: 002b:00007f735d0b6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 142.135457][ T5353] RAX: ffffffffffffffda RBX: 00007f735f0a5fa0 RCX: 00007f735ee4f749 [ 142.143410][ T5353] RDX: 0000000000000080 RSI: 0000200000000100 RDI: 0000000000000005 [ 142.151386][ T5353] RBP: 00007f735d0b6090 R08: 0000000000000000 R09: 0000000000000000 [ 142.159335][ T5353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.167310][ T5353] R13: 00007f735f0a6038 R14: 00007f735f0a5fa0 R15: 00007ffe022258c8 [ 142.175268][ T5353] [ 142.207524][ T5353] Mem-Info: [ 142.212731][ T5352] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug_want_extra_isize=0x00000000000000ca,noauto_da_alloc,inlinecrypt,,errors=continue. Quota mode: writeback. [ 142.287634][ T5369] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.352'. [ 142.305774][ T5366] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.352'. [ 142.477864][ T5373] loop0: detected capacity change from 0 to 512 [ 142.541656][ T5353] active_anon:330 inactive_anon:8966 isolated_anon:0 [ 142.541656][ T5353] active_file:4907 inactive_file:36951 isolated_file:0 [ 142.541656][ T5353] unevictable:768 dirty:292 writeback:0 [ 142.541656][ T5353] slab_reclaimable:20446 slab_unreclaimable:100230 [ 142.541656][ T5353] mapped:33246 shmem:4923 pagetables:650 bounce:0 [ 142.541656][ T5353] kernel_misc_reclaimable:0 [ 142.541656][ T5353] free:1381434 free_pcp:10658 free_cma:0 [ 142.584200][ T5353] Node 0 active_anon:1288kB inactive_anon:39056kB active_file:19424kB inactive_file:147804kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:136584kB dirty:1168kB writeback:0kB shmem:21316kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11600kB pagetables:2600kB all_unreclaimable? no [ 142.616213][ T4259] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 142.628041][ T5353] Node 1 active_anon:32kB inactive_anon:508kB active_file:204kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2076kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 142.683165][ T5353] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 142.717497][ T5353] lowmem_reserve[]: 0 2541 2542 2542 2542 [ 142.723756][ T5353] Node 0 DMA32 free:1592584kB min:34800kB low:43500kB high:52200kB reserved_highatomic:0KB active_anon:1372kB inactive_anon:45860kB active_file:19436kB inactive_file:147804kB unevictable:1536kB writepending:1176kB present:3129332kB managed:2609000kB mlocked:0kB bounce:0kB free_pcp:26716kB local_pcp:21316kB free_cma:0kB [ 142.759974][ T5353] lowmem_reserve[]: 0 0 0 0 0 [ 142.764854][ T5353] Node 0 Normal free:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:916kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 142.795817][ T5378] serio: Serial port ttyS3 [ 143.180747][ T5353] lowmem_reserve[]: 0 0 0 0 0 [ 143.220575][ T5353] Node 1 Normal free:3911248kB min:55088kB low:68860kB high:82632kB reserved_highatomic:0KB active_anon:32kB inactive_anon:508kB active_file:204kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:12724kB local_pcp:980kB free_cma:0kB [ 143.398372][ T5353] lowmem_reserve[]: 0 0 0 0 0 [ 143.409717][ T5353] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 143.478004][ T5353] Node 0 DMA32: 2*4kB (UM) 142*8kB (UM) 259*16kB (UM) 179*32kB (UME) 46*64kB (UME) 43*128kB (UME) 37*256kB (UM) 12*512kB (UM) 11*1024kB (UM) 3*2048kB (ME) 376*4096kB (M) = 1592584kB [ 143.499600][ T4259] usb 4-1: Using ep0 maxpacket: 8 [ 143.508223][ T5382] loop0: detected capacity change from 0 to 64 [ 143.565553][ T5382] hfs: hfs: Invalid key length: 94 [ 143.570954][ T5353] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 143.715341][ T4259] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 145.093359][ T4259] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.111813][ T5353] Node 1 Normal: 110*4kB (UME) 31*8kB (UME) 18*16kB (UME) 108*32kB (UE) 26*64kB (UME) 15*128kB (UE) 7*256kB (UME) 4*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 950*4096kB (M) = 3911248kB [ 145.210004][ T4259] usb 4-1: can't set config #252, error -71 [ 145.248574][ T4259] usb 4-1: USB disconnect, device number 6 [ 145.288172][ T5353] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 145.354490][ T4185] hfs: node 4:3 still has 1 user(s)! [ 145.374391][ T5353] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 145.427974][ T5353] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 145.438407][ T5353] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 145.483625][ T5353] 46785 total pagecache pages [ 145.488370][ T5353] 0 pages in swap cache [ 145.499561][ T5353] Swap cache stats: add 0, delete 0, find 0/0 [ 145.505854][ T5353] Free swap = 124996kB [ 145.558865][ T5353] Total swap = 124996kB [ 145.570005][ T25] audit: type=1326 audit(1765178405.385:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5391 comm="syz.0.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f997de75749 code=0x7ffc0000 [ 145.571500][ T5353] 2097051 pages RAM [ 145.649903][ T25] audit: type=1326 audit(1765178405.385:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5391 comm="syz.0.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f997de75749 code=0x7ffc0000 [ 145.681449][ T5400] netlink: 'syz.2.363': attribute type 29 has an invalid length. [ 145.689732][ T5353] 0 pages HighMem/MovableOnly [ 145.699875][ T5353] 410814 pages reserved [ 145.706060][ T5400] netlink: 'syz.2.363': attribute type 29 has an invalid length. [ 145.717464][ T5353] 0 pages cma reserved [ 145.728309][ T5400] netlink: 'syz.2.363': attribute type 29 has an invalid length. [ 145.772642][ T25] audit: type=1326 audit(1765178405.385:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5391 comm="syz.0.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f997de75749 code=0x7ffc0000 [ 145.779988][ T5400] netlink: 'syz.2.363': attribute type 29 has an invalid length. [ 145.857989][ T25] audit: type=1326 audit(1765178405.385:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5391 comm="syz.0.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f997de75749 code=0x7ffc0000 [ 145.886678][ T25] audit: type=1326 audit(1765178405.385:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5391 comm="syz.0.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f997de75749 code=0x7ffc0000 [ 145.915380][ T25] audit: type=1326 audit(1765178405.385:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5391 comm="syz.0.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f997de75749 code=0x7ffc0000 [ 145.944347][ T25] audit: type=1326 audit(1765178405.405:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5391 comm="syz.0.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f997de75749 code=0x7ffc0000 [ 146.022115][ T5406] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.366'. [ 146.040502][ T25] audit: type=1326 audit(1765178405.415:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5391 comm="syz.0.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f997de75749 code=0x7ffc0000 [ 146.102765][ T5408] loop2: detected capacity change from 0 to 764 [ 146.109500][ T25] audit: type=1326 audit(1765178405.415:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5391 comm="syz.0.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f997de75749 code=0x7ffc0000 [ 146.182108][ T5408] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 146.206082][ T25] audit: type=1326 audit(1765178405.415:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5391 comm="syz.0.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f997de75749 code=0x7ffc0000 [ 147.237614][ T5402] loop0: detected capacity change from 0 to 32768 [ 147.259519][ T4231] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 147.462918][ T4598] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by udevd (4598) [ 148.309783][ T4231] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 148.403051][ T4231] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 148.428573][ T4231] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 16 [ 149.306994][ T5451] loop1: detected capacity change from 0 to 1024 [ 149.356704][ T4231] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 149.367832][ T4231] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 149.375910][ T4231] usb 3-1: SerialNumber: syz [ 149.403050][ T4231] usb 3-1: can't set config #1, error -71 [ 149.417587][ T4231] usb 3-1: USB disconnect, device number 2 [ 150.301730][ T5451] hfsplus: unable to load nls mapping "Þkoi8-u" [ 150.318777][ T5451] hfsplus: unable to parse mount options [ 150.416561][ T5467] loop4: detected capacity change from 0 to 128 [ 150.500335][ T5467] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 150.519309][ T5467] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.530541][ T4963] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 150.568235][ T5468] hub 8-0:1.0: USB hub found [ 150.574397][ T5468] hub 8-0:1.0: 1 port detected [ 150.574865][ T5451] netlink: 40 bytes leftover after parsing attributes in process `syz.1.377'. [ 150.627532][ T4429] udevd[4429]: incorrect ext4 checksum on /dev/loop4 [ 150.644938][ T5467] EXT4-fs warning (device loop4): ext4_dirblock_csum_set:427: inode #2: comm syz.4.382: No space for directory leaf checksum. Please run e2fsck -D. [ 150.799514][ T4963] usb 4-1: Using ep0 maxpacket: 32 [ 150.951172][ T4963] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 150.959201][ T4963] usb 4-1: config 0 has no interface number 0 [ 150.989479][ T4963] usb 4-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 151.019474][ T4963] usb 4-1: config 0 interface 1 has no altsetting 0 [ 151.594270][ T5480] loop2: detected capacity change from 0 to 40427 [ 151.602311][ T4963] usb 4-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 151.611631][ T4963] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.619690][ T4963] usb 4-1: Product: syz [ 151.623847][ T4963] usb 4-1: Manufacturer: syz [ 151.628427][ T4963] usb 4-1: SerialNumber: syz [ 151.654208][ T4963] usb 4-1: config 0 descriptor?? [ 151.666774][ T5480] F2FS-fs (loop2): invalid crc value [ 151.712346][ T5480] F2FS-fs (loop2): Found nat_bits in checkpoint [ 151.757487][ T5480] F2FS-fs (loop2): Start checkpoint disabled! [ 151.799876][ T5480] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 151.880988][ T25] kauditd_printk_skb: 7 callbacks suppressed [ 151.881002][ T25] audit: type=1326 audit(1765178411.695:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5484 comm="syz.4.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d959ec749 code=0x7ffc0000 [ 151.961151][ T25] audit: type=1326 audit(1765178411.695:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5484 comm="syz.4.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1d959ec749 code=0x7ffc0000 [ 152.034344][ T25] audit: type=1326 audit(1765178411.695:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5484 comm="syz.4.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d959ec749 code=0x7ffc0000 [ 152.135571][ T4963] cx231xx 4-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 152.155195][ T25] audit: type=1326 audit(1765178411.695:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5484 comm="syz.4.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1d959ec749 code=0x7ffc0000 [ 152.199282][ T4318] attempt to access beyond end of device [ 152.199282][ T4318] loop2: rw=2049, want=45104, limit=40427 [ 152.212309][ T4963] cx231xx 4-1:0.1: Failed to read PCB config [ 152.219321][ T4963] cx231xx: probe of 4-1:0.1 failed with error -71 [ 152.235034][ T4963] usb 4-1: USB disconnect, device number 7 [ 152.244548][ T25] audit: type=1326 audit(1765178411.695:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5484 comm="syz.4.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d959ec749 code=0x7ffc0000 [ 152.295932][ T25] audit: type=1326 audit(1765178411.695:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5484 comm="syz.4.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f1d959ec749 code=0x7ffc0000 [ 152.369352][ T25] audit: type=1326 audit(1765178411.845:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5484 comm="syz.4.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d959ec749 code=0x7ffc0000 [ 152.407843][ T25] audit: type=1326 audit(1765178411.845:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5484 comm="syz.4.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d959ec749 code=0x7ffc0000 [ 152.443389][ T5500] loop1: detected capacity change from 0 to 128 [ 153.040002][ T5500] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 153.128325][ T5500] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 153.182469][ T5508] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.393'. [ 153.219571][ T5507] netlink: 28 bytes leftover after parsing attributes in process `syz.4.394'. [ 153.229635][ T5507] netlink: 28 bytes leftover after parsing attributes in process `syz.4.394'. [ 153.243340][ T25] audit: type=1800 audit(1765178413.055:40): pid=5500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.392" name="file2" dev="loop1" ino=105 res=0 errno=0 [ 153.270406][ T5507] device bond0 entered promiscuous mode [ 153.314682][ T5507] device bond_slave_0 entered promiscuous mode [ 153.355793][ T5507] device bond_slave_1 entered promiscuous mode [ 153.407477][ T5507] device bond0 left promiscuous mode [ 153.407495][ T5507] device bond_slave_0 left promiscuous mode [ 153.407629][ T5507] device bond_slave_1 left promiscuous mode [ 153.446719][ T5513] loop2: detected capacity change from 0 to 4096 [ 153.450158][ T5501] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (192) [ 153.570425][ T5513] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 153.587415][ T5522] FAULT_INJECTION: forcing a failure. [ 153.587415][ T5522] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 153.636626][ T5522] CPU: 0 PID: 5522 Comm: syz.4.398 Not tainted syzkaller #0 [ 153.643970][ T5522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 153.654022][ T5522] Call Trace: [ 153.657291][ T5522] [ 153.660203][ T5522] dump_stack_lvl+0x168/0x230 [ 153.664893][ T5522] ? show_regs_print_info+0x20/0x20 [ 153.670077][ T5522] ? load_image+0x3b0/0x3b0 [ 153.674563][ T5522] ? __lock_acquire+0x7c60/0x7c60 [ 153.679574][ T5522] should_fail+0x38c/0x4c0 [ 153.684010][ T5522] _copy_from_user+0x2e/0x170 [ 153.688674][ T5522] bpf_test_init+0x136/0x1b0 [ 153.693255][ T5522] bpf_prog_test_run_xdp+0x1ae/0x920 [ 153.698532][ T5522] ? dev_put+0x70/0x70 [ 153.702599][ T5522] ? dev_put+0x70/0x70 [ 153.706646][ T5522] bpf_prog_test_run+0x31e/0x390 [ 153.711672][ T5522] __sys_bpf+0x535/0x670 [ 153.715911][ T5522] ? bpf_link_show_fdinfo+0x340/0x340 [ 153.721305][ T5522] ? vtime_user_exit+0x2dc/0x400 [ 153.726252][ T5522] __x64_sys_bpf+0x78/0x90 [ 153.730658][ T5522] do_syscall_64+0x4c/0xa0 [ 153.735057][ T5522] ? clear_bhb_loop+0x30/0x80 [ 153.739715][ T5522] ? clear_bhb_loop+0x30/0x80 [ 153.744404][ T5522] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 153.750284][ T5522] RIP: 0033:0x7f1d959ec749 [ 153.754699][ T5522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.774308][ T5522] RSP: 002b:00007f1d93c53038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 153.782710][ T5522] RAX: ffffffffffffffda RBX: 00007f1d95c42fa0 RCX: 00007f1d959ec749 [ 153.790792][ T5522] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 153.798767][ T5522] RBP: 00007f1d93c53090 R08: 0000000000000000 R09: 0000000000000000 [ 153.806744][ T5522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.814707][ T5522] R13: 00007f1d95c43038 R14: 00007f1d95c42fa0 R15: 00007ffd760067f8 [ 153.822688][ T5522] [ 153.844573][ T5513] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 153.890943][ T4259] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 154.039972][ T4195] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 154.165003][ T25] audit: type=1326 audit(1765178413.975:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5526 comm="syz.4.401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d959ec749 code=0x7ffc0000 [ 154.302587][ T5535] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 154.309650][ T4259] usb 2-1: config 0 has an invalid interface number: 106 but max is 0 [ 154.321659][ T5536] hub 8-0:1.0: USB hub found [ 154.335827][ T5536] hub 8-0:1.0: 1 port detected [ 154.340868][ T4259] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 154.380704][ T4259] usb 2-1: config 0 has no interface number 0 [ 154.405150][ T4259] usb 2-1: config 0 interface 106 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 216 [ 154.435137][ T4259] usb 2-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 154.475691][ T4259] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 154.505278][ T4259] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.537796][ T4259] usb 2-1: config 0 descriptor?? [ 154.581336][ T5501] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 154.641071][ T4259] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 154.943389][ T4965] usb 2-1: USB disconnect, device number 2 [ 154.949831][ T9] usb 2-1: Failed to submit usb control message: -71 [ 154.965348][ T9] usb 2-1: unable to send the bmi data to the device: -71 [ 154.972862][ T9] usb 2-1: unable to get target info from device [ 154.979527][ T9] usb 2-1: could not get target info (-71) [ 154.986983][ T9] usb 2-1: could not probe fw (-71) [ 155.149018][ T5545] loop2: detected capacity change from 0 to 256 [ 155.584182][ T5553] loop4: detected capacity change from 0 to 8 [ 155.878933][ T5563] netlink: 184040 bytes leftover after parsing attributes in process `syz.1.410'. [ 155.998321][ T5570] loop4: detected capacity change from 0 to 512 [ 156.008298][ T5571] loop3: detected capacity change from 0 to 64 [ 156.110764][ T5571] hfs: hfs: Invalid key length: 94 [ 156.148444][ T5570] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 156.160301][ T5578] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.416'. [ 156.171226][ T5570] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.364434][ T5582] loop1: detected capacity change from 0 to 64 [ 156.413730][ T5582] hfs: hfs: Invalid key length: 94 [ 156.546245][ T5549] loop2: detected capacity change from 0 to 40427 [ 156.603053][ T5549] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 157.335740][ T4180] hfs: node 4:3 still has 1 user(s)! [ 157.339728][ T5549] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 157.342694][ T4181] hfs: node 4:3 still has 1 user(s)! [ 157.349382][ T5549] F2FS-fs (loop2): build fault injection attr: rate: 17008, type: 0x1ffff [ 157.378261][ T5588] hub 8-0:1.0: USB hub found [ 157.389809][ T5549] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x5 [ 157.398914][ T5588] hub 8-0:1.0: 1 port detected [ 157.439563][ T5549] F2FS-fs (loop2): invalid crc value [ 157.507852][ T5549] F2FS-fs (loop2): Found nat_bits in checkpoint [ 157.724572][ T5549] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 157.736966][ T5549] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 157.963982][ T5607] netlink: 72 bytes leftover after parsing attributes in process `syz.3.424'. [ 158.051495][ T5608] loop2: detected capacity change from 0 to 2048 [ 158.172576][ T5608] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 158.226849][ T5608] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 158.269770][ T5616] hub 8-0:1.0: USB hub found [ 158.276756][ T5608] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 158.359581][ T5608] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 158.435594][ T5608] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1) [ 158.444449][ T5616] hub 8-0:1.0: 1 port detected [ 159.257619][ T5621] loop0: detected capacity change from 0 to 1024 [ 159.437943][ T5627] loop2: detected capacity change from 0 to 4096 [ 159.444844][ T5628] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 159.522389][ T5627] __ntfs_error: 15 callbacks suppressed [ 159.522403][ T5627] ntfs: (device loop2): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 159.572815][ T5627] ntfs: (device loop2): ntfs_read_locked_inode(): $DATA attribute is missing. [ 159.633388][ T5627] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 159.651912][ T5630] loop0: detected capacity change from 0 to 64 [ 159.698805][ T5627] ntfs: (device loop2): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 159.776581][ T5627] ntfs: volume version 3.1. [ 159.798549][ T5630] hfs: hfs: Invalid key length: 94 [ 159.950392][ T5627] ntfs: (device loop2): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 159.973416][ T5627] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x40 as bad. Run chkdsk. [ 160.604997][ T4185] hfs: node 4:3 still has 1 user(s)! [ 160.739398][ T5623] loop1: detected capacity change from 0 to 40427 [ 160.806402][ T5623] F2FS-fs (loop1): invalid crc value [ 160.823593][ T5623] F2FS-fs (loop1): Found nat_bits in checkpoint [ 160.894300][ T5637] loop2: detected capacity change from 0 to 64 [ 160.995607][ T5637] hfs: hfs: Invalid key length: 94 [ 161.011188][ T5623] F2FS-fs (loop1): Start checkpoint disabled! [ 161.048423][ T5623] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 161.645317][ T5639] loop0: detected capacity change from 0 to 32768 [ 161.672348][ T5639] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.434 (5639) [ 161.729568][ T5639] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 161.735497][ T5647] netlink: 12 bytes leftover after parsing attributes in process `syz.3.437'. [ 161.751153][ T4195] hfs: node 4:3 still has 1 user(s)! [ 161.758239][ T5639] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 161.775266][ T5639] BTRFS info (device loop0): use zstd compression, level 3 [ 161.785888][ T5639] BTRFS info (device loop0): using free space tree [ 161.814335][ T5639] BTRFS info (device loop0): has skinny extents [ 161.869575][ T4965] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 161.962985][ T5668] netlink: 'syz.2.439': attribute type 29 has an invalid length. [ 161.974818][ T5668] netlink: 'syz.2.439': attribute type 29 has an invalid length. [ 161.982857][ T5639] BTRFS info (device loop0): enabling ssd optimizations [ 161.987904][ T5668] netlink: 'syz.2.439': attribute type 29 has an invalid length. [ 162.006603][ T5668] netlink: 'syz.2.439': attribute type 29 has an invalid length. [ 162.095861][ T5668] netlink: 'syz.2.439': attribute type 29 has an invalid length. [ 162.169064][ T5647] loop3: detected capacity change from 0 to 32768 [ 162.188501][ T5647] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.437 (5647) [ 162.249953][ T4965] usb 2-1: config 0 has an invalid interface number: 9 but max is 0 [ 162.266735][ T4965] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 162.311090][ T4965] usb 2-1: config 0 has no interface number 0 [ 162.492257][ T4965] usb 2-1: New USB device found, idVendor=0421, idProduct=0302, bcdDevice=45.e8 [ 162.502278][ T4965] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.513192][ T4965] usb 2-1: config 0 descriptor?? [ 162.554882][ T5647] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 162.926604][ T5623] loop1: detected capacity change from 0 to 128 [ 163.236859][ T5647] BTRFS info (device loop3): using free space tree [ 163.243685][ T5647] BTRFS info (device loop3): has skinny extents [ 163.272677][ T4965] rndis_wlan 2-1:0.9: More than one union descriptor, skipping ... [ 163.282315][ T4965] usb 2-1: bad CDC descriptors [ 163.290512][ T4965] rndis_host 2-1:0.9: More than one union descriptor, skipping ... [ 163.298458][ T4965] usb 2-1: bad CDC descriptors [ 163.305889][ T5623] hpfs: bad mount options. [ 163.323150][ T4965] cdc_acm 2-1:0.9: More than one union descriptor, skipping ... [ 163.338933][ T5687] loop4: detected capacity change from 0 to 4096 [ 163.352200][ T5693] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.443'. [ 163.494098][ T4963] usb 2-1: USB disconnect, device number 3 [ 163.695872][ T5714] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 163.721908][ T5716] netlink: 12 bytes leftover after parsing attributes in process `syz.2.448'. [ 163.745914][ T5647] BTRFS info (device loop3): enabling ssd optimizations [ 163.777405][ T5681] NILFS error (device loop4): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 163.789834][ T5716] netlink: 12 bytes leftover after parsing attributes in process `syz.2.448'. [ 163.799119][ T5716] netlink: 20 bytes leftover after parsing attributes in process `syz.2.448'. [ 163.848775][ T25] audit: type=1800 audit(1765178423.655:57): pid=5647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.437" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 163.913627][ T5681] Remounting filesystem read-only [ 164.013061][ T5716] netlink: 20 bytes leftover after parsing attributes in process `syz.2.448'. [ 165.009061][ T5751] Set syz1 is full, maxelem 65536 reached [ 165.050889][ T5749] loop2: detected capacity change from 0 to 4096 [ 165.365161][ T5749] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 165.449970][ T5749] ntfs3: loop2: Failed to load $Extend. [ 165.573493][ T25] audit: type=1800 audit(1765178425.385:58): pid=5749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.456" name="file1" dev="loop2" ino=30 res=0 errno=0 [ 165.906557][ T5783] FAULT_INJECTION: forcing a failure. [ 165.906557][ T5783] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 165.920017][ T5783] CPU: 0 PID: 5783 Comm: syz.3.466 Not tainted syzkaller #0 [ 165.927295][ T5783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 165.937472][ T5783] Call Trace: [ 165.940755][ T5783] [ 165.943691][ T5783] dump_stack_lvl+0x168/0x230 [ 165.948380][ T5783] ? show_regs_print_info+0x20/0x20 [ 165.953584][ T5783] ? load_image+0x3b0/0x3b0 [ 165.958077][ T5783] ? workingset_activation+0x606/0x760 [ 165.963619][ T5783] ? mark_page_accessed+0xce5/0x12b0 [ 165.968912][ T5783] should_fail+0x38c/0x4c0 [ 165.973323][ T5783] copy_page_from_iter_atomic+0x436/0x1520 [ 165.979132][ T5783] ? pipe_zero+0x370/0x370 [ 165.983556][ T5783] ? shmem_write_begin+0xcd/0x1a0 [ 165.988592][ T5783] generic_perform_write+0x2ff/0x530 [ 165.994000][ T5783] ? atime_needs_update+0x780/0x780 [ 165.999203][ T5783] ? grab_cache_page_write_begin+0xa0/0xa0 [ 166.004998][ T5783] ? file_remove_privs+0x590/0x590 [ 166.010103][ T5783] ? read_lock_is_recursive+0x10/0x10 [ 166.015466][ T5783] ? preempt_count_add+0x8d/0x190 [ 166.020484][ T5783] ? rwsem_write_trylock+0x12f/0x1b0 [ 166.025761][ T5783] ? clear_nonspinnable+0x60/0x60 [ 166.030867][ T5783] __generic_file_write_iter+0x25f/0x4e0 [ 166.036496][ T5783] generic_file_write_iter+0xa6/0x1b0 [ 166.042050][ T5783] vfs_write+0x712/0xd00 [ 166.046291][ T5783] ? file_end_write+0x250/0x250 [ 166.051154][ T5783] ? __fget_files+0x40f/0x480 [ 166.055889][ T5783] ? mutex_lock_nested+0x17/0x20 [ 166.060828][ T5783] ? __fdget_pos+0x2bf/0x370 [ 166.065410][ T5783] ? ksys_write+0x71/0x250 [ 166.069822][ T5783] ksys_write+0x14d/0x250 [ 166.074142][ T5783] ? __ia32_sys_read+0x80/0x80 [ 166.079039][ T5783] ? lockdep_hardirqs_on+0x94/0x140 [ 166.084237][ T5783] do_syscall_64+0x4c/0xa0 [ 166.088643][ T5783] ? clear_bhb_loop+0x30/0x80 [ 166.093309][ T5783] ? clear_bhb_loop+0x30/0x80 [ 166.097985][ T5783] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 166.103870][ T5783] RIP: 0033:0x7f55e5a6f749 [ 166.108278][ T5783] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.127874][ T5783] RSP: 002b:00007f55e3cd6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 166.136279][ T5783] RAX: ffffffffffffffda RBX: 00007f55e5cc5fa0 RCX: 00007f55e5a6f749 [ 166.144242][ T5783] RDX: 0000000000043451 RSI: 0000200000000200 RDI: 0000000000000008 [ 166.152238][ T5783] RBP: 00007f55e3cd6090 R08: 0000000000000000 R09: 0000000000000000 [ 166.160203][ T5783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.168274][ T5783] R13: 00007f55e5cc6038 R14: 00007f55e5cc5fa0 R15: 00007ffd654ad888 [ 166.176336][ T5783] [ 166.323746][ T5787] loop4: detected capacity change from 0 to 256 [ 166.390084][ T5787] exfat: Deprecated parameter 'namecase' [ 166.424139][ T5787] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 166.441988][ T5786] netlink: 'syz.4.463': attribute type 3 has an invalid length. [ 169.540428][ T5825] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.479'. [ 169.575349][ T5819] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.479'. [ 169.695267][ T5835] FAULT_INJECTION: forcing a failure. [ 169.695267][ T5835] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 169.751268][ T5835] CPU: 1 PID: 5835 Comm: syz.2.485 Not tainted syzkaller #0 [ 169.758611][ T5835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 169.768677][ T5835] Call Trace: [ 169.771979][ T5835] [ 169.774919][ T5835] dump_stack_lvl+0x168/0x230 [ 169.779613][ T5835] ? show_regs_print_info+0x20/0x20 [ 169.784823][ T5835] ? load_image+0x3b0/0x3b0 [ 169.789345][ T5835] ? __lock_acquire+0x7c60/0x7c60 [ 169.791989][ T5839] netlink: 'syz.4.487': attribute type 29 has an invalid length. [ 169.794393][ T5835] ? bpf_test_run+0x778/0x7d0 [ 169.794422][ T5835] should_fail+0x38c/0x4c0 [ 169.794447][ T5835] _copy_to_user+0x2e/0x130 [ 169.807266][ T5840] loop1: detected capacity change from 0 to 8 [ 169.811245][ T5835] bpf_test_finish+0x1ac/0x2d0 [ 169.811278][ T5835] ? convert_skb_to___skb+0x360/0x360 [ 169.811296][ T5835] ? _copy_from_user+0x111/0x170 [ 169.811314][ T5835] ? bpf_test_init+0x171/0x1b0 [ 169.811328][ T5835] ? xdp_convert_buff_to_md+0x154/0x1e0 [ 169.811346][ T5835] bpf_prog_test_run_xdp+0x638/0x920 [ 169.811371][ T5835] ? dev_put+0x70/0x70 [ 169.811407][ T5835] ? dev_put+0x70/0x70 [ 169.811423][ T5835] bpf_prog_test_run+0x31e/0x390 [ 169.811444][ T5835] __sys_bpf+0x535/0x670 [ 169.811462][ T5835] ? bpf_link_show_fdinfo+0x340/0x340 [ 169.811486][ T5835] ? vtime_user_exit+0x2dc/0x400 [ 169.811508][ T5835] __x64_sys_bpf+0x78/0x90 [ 169.811523][ T5835] do_syscall_64+0x4c/0xa0 [ 169.811539][ T5835] ? clear_bhb_loop+0x30/0x80 [ 169.811555][ T5835] ? clear_bhb_loop+0x30/0x80 [ 169.811572][ T5835] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 169.811588][ T5835] RIP: 0033:0x7f48f919c749 [ 169.811605][ T5835] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.811618][ T5835] RSP: 002b:00007f48f7403038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 169.811636][ T5835] RAX: ffffffffffffffda RBX: 00007f48f93f2fa0 RCX: 00007f48f919c749 [ 169.811648][ T5835] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 169.811658][ T5835] RBP: 00007f48f7403090 R08: 0000000000000000 R09: 0000000000000000 [ 169.811667][ T5835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.811676][ T5835] R13: 00007f48f93f3038 R14: 00007f48f93f2fa0 R15: 00007ffea5e915d8 [ 169.811699][ T5835] [ 169.980148][ C1] vkms_vblank_simulate: vblank timer overrun [ 170.003024][ T5839] netlink: 'syz.4.487': attribute type 29 has an invalid length. [ 170.078882][ T5841] netlink: 'syz.4.487': attribute type 29 has an invalid length. [ 170.106869][ T5842] netlink: 'syz.4.487': attribute type 29 has an invalid length. [ 170.309012][ T5832] Illegal XDP return value 2775880245, expect packet loss! [ 170.425876][ T5836] loop3: detected capacity change from 0 to 32768 [ 170.940178][ T5836] (syz.3.486,5836,1):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options [ 171.022500][ T5836] (syz.3.486,5836,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 171.110349][ T5858] netlink: 'syz.2.488': attribute type 29 has an invalid length. [ 171.118778][ T5858] netlink: 'syz.2.488': attribute type 29 has an invalid length. [ 171.127900][ T5858] netlink: 'syz.2.488': attribute type 29 has an invalid length. [ 171.136388][ T5858] netlink: 'syz.2.488': attribute type 29 has an invalid length. [ 171.144580][ T5858] netlink: 'syz.2.488': attribute type 29 has an invalid length. [ 171.172441][ T5860] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.490'. [ 172.251349][ T5883] netlink: 72 bytes leftover after parsing attributes in process `syz.1.497'. [ 172.292424][ T5884] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 172.300140][ T5884] IPv6: NLM_F_CREATE should be set when creating new route [ 172.381630][ T5888] loop1: detected capacity change from 0 to 64 [ 172.482979][ T5888] hfs: hfs: Invalid key length: 94 [ 173.362013][ T4180] hfs: node 4:3 still has 1 user(s)! [ 173.443881][ T5899] netlink: 'syz.0.502': attribute type 29 has an invalid length. [ 173.506521][ T5877] loop4: detected capacity change from 0 to 32768 [ 173.525443][ T5900] hub 8-0:1.0: USB hub found [ 173.602203][ T5900] hub 8-0:1.0: 1 port detected [ 173.608981][ T5877] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.495 (5877) [ 173.627719][ T5904] loop1: detected capacity change from 0 to 256 [ 173.660167][ T5904] exfat: Deprecated parameter 'namecase' [ 173.686635][ T5877] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 173.699021][ T5904] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 173.745894][ T5877] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 173.887998][ T5877] BTRFS info (device loop4): use zstd compression, level 3 [ 173.943174][ T5911] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 173.972055][ T5877] BTRFS info (device loop4): using free space tree [ 173.978665][ T5877] BTRFS info (device loop4): has skinny extents [ 174.151646][ T5735] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 175.020735][ T5877] BTRFS error (device loop4): open_ctree failed: -12 [ 175.089695][ T5735] usb 2-1: config 0 has an invalid interface number: 37 but max is 0 [ 175.113530][ T5735] usb 2-1: config 0 has no interface number 0 [ 175.120455][ T5735] usb 2-1: config 0 interface 37 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 175.136039][ T5943] loop0: detected capacity change from 0 to 64 [ 175.138448][ T5944] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.506'. [ 175.309718][ T5735] usb 2-1: New USB device found, idVendor=0bb4, idProduct=0a6e, bcdDevice=2a.55 [ 175.326837][ T5943] hfs: hfs: Invalid key length: 94 [ 175.334436][ T5735] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.519608][ T5735] usb 2-1: Product: syz [ 175.523815][ T5735] usb 2-1: Manufacturer: syz [ 176.100810][ T21] Bluetooth: hci2: command 0x0406 tx timeout [ 176.106919][ T21] Bluetooth: hci1: command 0x0406 tx timeout [ 176.128932][ T21] Bluetooth: hci4: command 0x0406 tx timeout [ 176.176958][ T5735] usb 2-1: SerialNumber: syz [ 176.193516][ T5950] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.508'. [ 176.198219][ T5734] Bluetooth: hci0: command 0x0406 tx timeout [ 176.210367][ T5735] usb 2-1: config 0 descriptor?? [ 176.218913][ T5734] Bluetooth: hci3: command 0x0406 tx timeout [ 176.229801][ T5913] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 176.258273][ T5735] ipaq 2-1:0.37: PocketPC PDA converter detected [ 176.300250][ T5735] usb 2-1: active config #0 != 1 ?? [ 176.328442][ T5955] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 176.348519][ T4185] hfs: node 4:3 still has 1 user(s)! [ 176.389229][ T5954] loop4: detected capacity change from 0 to 512 [ 176.460876][ T5957] loop0: detected capacity change from 0 to 64 [ 176.539300][ T5954] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 176.592548][ T5957] hfs: unable to parse mount options [ 176.600284][ T5954] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 176.660697][ T5954] EXT4-fs (loop4): 1 truncate cleaned up [ 176.671871][ T5954] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota="errors=continue,grpquota,data_err=ignore,grpjquota="nodiscard,usrquota,nodelalloc,journal_dev=0x0000000000000006,norecovery,,errors=continue. Quota mode: writeback. [ 176.723569][ T5961] loop3: detected capacity change from 0 to 256 [ 176.760058][ T5961] exfat: Deprecated parameter 'namecase' [ 176.771408][ T5961] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 176.787920][ T5961] validate_nla: 6 callbacks suppressed [ 176.787930][ T5961] netlink: 'syz.3.511': attribute type 3 has an invalid length. [ 176.891482][ T5963] loop0: detected capacity change from 0 to 128 [ 176.898680][ T5965] FAULT_INJECTION: forcing a failure. [ 176.898680][ T5965] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 176.911919][ T5965] CPU: 1 PID: 5965 Comm: syz.3.514 Not tainted syzkaller #0 [ 176.919195][ T5965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 176.929230][ T5965] Call Trace: [ 176.932525][ T5965] [ 176.935448][ T5965] dump_stack_lvl+0x168/0x230 [ 176.940110][ T5965] ? show_regs_print_info+0x20/0x20 [ 176.945393][ T5965] ? load_image+0x3b0/0x3b0 [ 176.949884][ T5965] ? workingset_activation+0x606/0x760 [ 176.955364][ T5965] ? mark_page_accessed+0xce5/0x12b0 [ 176.960805][ T5965] should_fail+0x38c/0x4c0 [ 176.965227][ T5965] copy_page_from_iter_atomic+0x436/0x1520 [ 176.971029][ T5965] ? pipe_zero+0x370/0x370 [ 176.975450][ T5965] ? shmem_write_begin+0xcd/0x1a0 [ 176.980456][ T5965] generic_perform_write+0x2ff/0x530 [ 176.985728][ T5965] ? grab_cache_page_write_begin+0xa0/0xa0 [ 176.991514][ T5965] ? file_remove_privs+0x590/0x590 [ 176.996605][ T5965] ? read_lock_is_recursive+0x10/0x10 [ 177.001959][ T5965] ? preempt_count_add+0x8d/0x190 [ 177.006971][ T5965] ? rwsem_write_trylock+0x12f/0x1b0 [ 177.012239][ T5965] ? clear_nonspinnable+0x60/0x60 [ 177.017277][ T5965] __generic_file_write_iter+0x25f/0x4e0 [ 177.022980][ T5965] generic_file_write_iter+0xa6/0x1b0 [ 177.028331][ T5965] vfs_write+0x712/0xd00 [ 177.032644][ T5965] ? file_end_write+0x250/0x250 [ 177.037481][ T5965] ? __fget_files+0x40f/0x480 [ 177.042169][ T5965] ? mutex_lock_nested+0x17/0x20 [ 177.047086][ T5965] ? __fdget_pos+0x2bf/0x370 [ 177.051662][ T5965] ? ksys_write+0x71/0x250 [ 177.056058][ T5965] ksys_write+0x14d/0x250 [ 177.060374][ T5965] ? __ia32_sys_read+0x80/0x80 [ 177.065207][ T5965] ? lockdep_hardirqs_on+0x94/0x140 [ 177.070391][ T5965] do_syscall_64+0x4c/0xa0 [ 177.074828][ T5965] ? clear_bhb_loop+0x30/0x80 [ 177.079664][ T5965] ? clear_bhb_loop+0x30/0x80 [ 177.084321][ T5965] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 177.090215][ T5965] RIP: 0033:0x7f55e5a6f749 [ 177.094638][ T5965] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.114227][ T5965] RSP: 002b:00007f55e3cd6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 177.122632][ T5965] RAX: ffffffffffffffda RBX: 00007f55e5cc5fa0 RCX: 00007f55e5a6f749 [ 177.130591][ T5965] RDX: 0000000000043451 RSI: 0000200000000200 RDI: 0000000000000008 [ 177.138674][ T5965] RBP: 00007f55e3cd6090 R08: 0000000000000000 R09: 0000000000000000 [ 177.146680][ T5965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.154675][ T5965] R13: 00007f55e5cc6038 R14: 00007f55e5cc5fa0 R15: 00007ffd654ad888 [ 177.162655][ T5965] [ 177.269984][ T5764] usb 2-1: USB disconnect, device number 4 [ 177.298598][ T5969] loop1: detected capacity change from 0 to 512 [ 178.106836][ T5963] netlink: 16 bytes leftover after parsing attributes in process `syz.0.512'. [ 178.248855][ T5969] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 178.297281][ T5969] EXT4-fs (loop1): group descriptors corrupted! [ 178.965639][ T5978] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.517'. [ 179.182807][ T5987] FAULT_INJECTION: forcing a failure. [ 179.182807][ T5987] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 179.266338][ T5987] CPU: 1 PID: 5987 Comm: syz.0.521 Not tainted syzkaller #0 [ 179.273860][ T5987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 179.283934][ T5987] Call Trace: [ 179.287214][ T5987] [ 179.290129][ T5987] dump_stack_lvl+0x168/0x230 [ 179.294789][ T5987] ? show_regs_print_info+0x20/0x20 [ 179.299986][ T5987] ? load_image+0x3b0/0x3b0 [ 179.304474][ T5987] ? __lock_acquire+0x7c60/0x7c60 [ 179.309484][ T5987] should_fail+0x38c/0x4c0 [ 179.313897][ T5987] _copy_from_user+0x2e/0x170 [ 179.318555][ T5987] __copy_msghdr_from_user+0xaf/0x5e0 [ 179.324080][ T5987] ? verify_lock_unused+0x140/0x140 [ 179.329347][ T5987] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 179.334618][ T5987] ___sys_sendmsg+0x156/0x260 [ 179.339368][ T5987] ? __sys_sendmsg+0x250/0x250 [ 179.344116][ T5987] ? vfs_write+0x84d/0xd00 [ 179.348518][ T5987] ? __fdget+0x18b/0x210 [ 179.352749][ T5987] __se_sys_sendmsg+0x190/0x250 [ 179.357609][ T5987] ? __x64_sys_sendmsg+0x80/0x80 [ 179.362547][ T5987] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 179.368514][ T5987] ? lockdep_hardirqs_on+0x94/0x140 [ 179.373782][ T5987] do_syscall_64+0x4c/0xa0 [ 179.378178][ T5987] ? clear_bhb_loop+0x30/0x80 [ 179.382836][ T5987] ? clear_bhb_loop+0x30/0x80 [ 179.387495][ T5987] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 179.393366][ T5987] RIP: 0033:0x7f997de75749 [ 179.397776][ T5987] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.417393][ T5987] RSP: 002b:00007f997c0dc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 179.425789][ T5987] RAX: ffffffffffffffda RBX: 00007f997e0cbfa0 RCX: 00007f997de75749 [ 179.433749][ T5987] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 179.441713][ T5987] RBP: 00007f997c0dc090 R08: 0000000000000000 R09: 0000000000000000 [ 179.449785][ T5987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.457784][ T5987] R13: 00007f997e0cc038 R14: 00007f997e0cbfa0 R15: 00007fff2e9b7778 [ 179.465768][ T5987] [ 179.732172][ T5995] loop0: detected capacity change from 0 to 1024 [ 179.737797][ T5997] FAULT_INJECTION: forcing a failure. [ 179.737797][ T5997] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 179.824449][ T5997] CPU: 1 PID: 5997 Comm: syz.4.525 Not tainted syzkaller #0 [ 179.831771][ T5997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 179.841817][ T5997] Call Trace: [ 179.845081][ T5997] [ 179.847996][ T5997] dump_stack_lvl+0x168/0x230 [ 179.852665][ T5997] ? show_regs_print_info+0x20/0x20 [ 179.857845][ T5997] ? load_image+0x3b0/0x3b0 [ 179.862367][ T5997] ? __lock_acquire+0x7c60/0x7c60 [ 179.867383][ T5997] should_fail+0x38c/0x4c0 [ 179.871800][ T5997] _copy_from_user+0x2e/0x170 [ 179.876515][ T5997] __copy_msghdr_from_user+0xaf/0x5e0 [ 179.881892][ T5997] ? verify_lock_unused+0x140/0x140 [ 179.887110][ T5997] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 179.892404][ T5997] ___sys_sendmsg+0x156/0x260 [ 179.897083][ T5997] ? __sys_sendmsg+0x250/0x250 [ 179.901840][ T5997] ? vfs_write+0x84d/0xd00 [ 179.906250][ T5997] ? __fdget+0x18b/0x210 [ 179.910502][ T5997] __se_sys_sendmsg+0x190/0x250 [ 179.915354][ T5997] ? __x64_sys_sendmsg+0x80/0x80 [ 179.920273][ T5997] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 179.926247][ T5997] ? lockdep_hardirqs_on+0x94/0x140 [ 179.931441][ T5997] do_syscall_64+0x4c/0xa0 [ 179.935838][ T5997] ? clear_bhb_loop+0x30/0x80 [ 179.940500][ T5997] ? clear_bhb_loop+0x30/0x80 [ 179.945162][ T5997] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 179.951067][ T5997] RIP: 0033:0x7f1d959ec749 [ 179.955469][ T5997] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.975504][ T5997] RSP: 002b:00007f1d93c53038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 179.983905][ T5997] RAX: ffffffffffffffda RBX: 00007f1d95c42fa0 RCX: 00007f1d959ec749 [ 179.991861][ T5997] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000003 [ 179.999815][ T5997] RBP: 00007f1d93c53090 R08: 0000000000000000 R09: 0000000000000000 [ 180.007771][ T5997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.015724][ T5997] R13: 00007f1d95c43038 R14: 00007f1d95c42fa0 R15: 00007ffd760067f8 [ 180.023692][ T5997] [ 180.118528][ T6002] loop2: detected capacity change from 0 to 512 [ 180.147133][ T6002] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 180.203839][ T5980] loop3: detected capacity change from 0 to 32768 [ 180.204729][ T6002] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.526: iget: bad i_size value: 360287970189639680 [ 180.244348][ T6002] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.526: couldn't read orphan inode 15 (err -117) [ 180.323041][ T6002] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 180.434216][ T6002] EXT4-fs error (device loop2): ext4_get_first_dir_block:3605: inode #12: block 13: comm syz.2.526: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=12, rec_len=0, size=4096 fake=1 [ 180.541120][ T6002] EXT4-fs error (device loop2): ext4_get_first_dir_block:3608: inode #12: comm syz.2.526: directory missing '.' [ 180.674317][ T5980] JBD2: Ignoring recovery information on journal [ 180.812722][ T6017] serio: Serial port ttyS3 [ 181.561664][ T6016] hub 8-0:1.0: USB hub found [ 181.566471][ T6016] hub 8-0:1.0: 1 port detected [ 181.959841][ T5980] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 182.556616][ T6030] netlink: 'syz.2.533': attribute type 10 has an invalid length. [ 182.573238][ T6035] loop4: detected capacity change from 0 to 64 [ 182.609766][ T5980] ocfs2: Unmounting device (7,3) on (node local) [ 182.662924][ T6030] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.716518][ T6030] device bridge_slave_1 left promiscuous mode [ 182.736092][ T6030] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.767697][ T6035] hfs: hfs: Invalid key length: 94 [ 182.831310][ T6030] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 183.611883][ T4193] hfs: node 4:3 still has 1 user(s)! [ 184.695022][ T6060] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.542'. [ 184.727588][ T6058] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.542'. [ 184.745561][ T6066] netlink: 16162 bytes leftover after parsing attributes in process `syz.3.545'. [ 184.772136][ T6068] loop2: detected capacity change from 0 to 16 [ 184.864373][ T6068] erofs: (device loop2): mounted with root inode @ nid 36. [ 184.937796][ T6076] netlink: 8 bytes leftover after parsing attributes in process `syz.3.549'. [ 184.966842][ T6076] netlink: 8 bytes leftover after parsing attributes in process `syz.3.549'. [ 185.974964][ T6083] loop4: detected capacity change from 0 to 256 [ 185.998620][ T6089] loop2: detected capacity change from 0 to 64 [ 186.036000][ T6092] netlink: 84 bytes leftover after parsing attributes in process `syz.1.556'. [ 186.051881][ T6092] loop1: detected capacity change from 0 to 512 [ 186.161291][ T6092] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 186.175881][ T6089] hfs: hfs: Invalid key length: 94 [ 186.245933][ T6092] EXT4-fs error (device loop1): ext4_init_orphan_info:619: comm syz.1.556: orphan file block 0: bad magic [ 186.335326][ T6097] loop4: detected capacity change from 0 to 256 [ 186.366778][ T6098] loop0: detected capacity change from 0 to 256 [ 186.382435][ T6092] EXT4-fs (loop1): mount failed [ 186.564440][ T6098] exfat: Deprecated parameter 'namecase' [ 186.905145][ T25] audit: type=1800 audit(1765178446.715:59): pid=6097 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.557" name="bus" dev="loop4" ino=1048604 res=0 errno=0 [ 186.947542][ T6098] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 187.021377][ T4195] hfs: node 4:3 still has 1 user(s)! [ 187.097515][ T6103] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.558'. [ 187.121106][ T6102] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.558'. [ 187.211059][ T6098] netlink: 'syz.0.550': attribute type 3 has an invalid length. [ 187.545795][ T6092] syz.1.556 (6092) used greatest stack depth: 20000 bytes left [ 187.709167][ T6118] hub 8-0:1.0: USB hub found [ 187.714185][ T6118] hub 8-0:1.0: 1 port detected [ 188.067773][ T6116] loop1: detected capacity change from 0 to 32768 [ 188.870696][ T6116] XFS (loop1): Mounting V5 Filesystem [ 188.977074][ T6116] XFS (loop1): Ending clean mount [ 189.042084][ T6116] XFS (loop1): Quotacheck needed: Please wait. [ 189.189940][ T6116] XFS (loop1): Quotacheck: Done. [ 189.299092][ T6142] loop0: detected capacity change from 0 to 1024 [ 189.475678][ T6141] netlink: 'syz.0.568': attribute type 2 has an invalid length. [ 189.501244][ T4180] XFS (loop1): Unmounting Filesystem [ 189.509584][ T4964] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 189.799498][ T4964] usb 4-1: Using ep0 maxpacket: 8 [ 189.844177][ T6150] loop0: detected capacity change from 0 to 2048 [ 189.913626][ T6150] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 190.015195][ T4964] usb 4-1: unable to get BOS descriptor or descriptor too short [ 190.067849][ T6152] netlink: 'syz.1.570': attribute type 29 has an invalid length. [ 190.085372][ T6152] netlink: 'syz.1.570': attribute type 29 has an invalid length. [ 190.113441][ T6152] netlink: 'syz.1.570': attribute type 29 has an invalid length. [ 190.122545][ T6152] netlink: 'syz.1.570': attribute type 29 has an invalid length. [ 190.129793][ T4964] usb 4-1: config 11 has an invalid interface number: 244 but max is 0 [ 190.148953][ T4964] usb 4-1: config 11 has no interface number 0 [ 190.176005][ T4964] usb 4-1: config 11 interface 244 altsetting 5 endpoint 0x3 has invalid wMaxPacketSize 0 [ 190.186537][ T4964] usb 4-1: config 11 interface 244 altsetting 5 has an invalid endpoint with address 0x0, skipping [ 190.197831][ T4964] usb 4-1: config 11 interface 244 has no altsetting 0 [ 190.245953][ T6155] overlayfs: unrecognized mount option "smackfsdef=^ð" or missing value [ 190.310732][ T5734] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 190.320677][ T6155] overlayfs: unrecognized mount option "smackfsdef=^ð" or missing value [ 190.334232][ T6155] overlayfs: unrecognized mount option "smackfsdef=^ð" or missing value [ 190.353665][ T6155] overlayfs: unrecognized mount option "smackfsdef=^ð" or missing value [ 190.367636][ T6155] overlayfs: unrecognized mount option "smackfsdef=^ð" or missing value [ 190.389827][ T4964] usb 4-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=57.8a [ 190.404222][ T6155] overlayfs: unrecognized mount option "smackfsdef=^ð" or missing value [ 190.413981][ T4964] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.424013][ T4964] usb 4-1: Product: syz [ 190.428278][ T4964] usb 4-1: Manufacturer: syz [ 190.433756][ T4964] usb 4-1: SerialNumber: syz [ 190.463469][ T6155] overlayfs: unrecognized mount option "smackfsdef=^ð" or missing value [ 190.499707][ T5734] usb 1-1: device descriptor read/64, error -71 [ 190.522468][ T6155] overlayfs: unrecognized mount option "smackfsdef=^ð" or missing value [ 190.541227][ T6155] overlayfs: unrecognized mount option "smackfsdef=^ð" or missing value [ 190.558341][ T6155] overlayfs: unrecognized mount option "smackfsdef=^ð" or missing value [ 190.574023][ T6160] FAULT_INJECTION: forcing a failure. [ 190.574023][ T6160] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 190.596226][ T6155] overlayfs: unrecognized mount option "smackfsdef=^ð" or missing value [ 190.614655][ T6155] overlayfs: unrecognized mount option "smackfsdef=^ð" or missing value [ 190.619602][ T6160] CPU: 0 PID: 6160 Comm: syz.1.574 Not tainted syzkaller #0 [ 190.630312][ T6160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 190.640357][ T6160] Call Trace: [ 190.643623][ T6160] [ 190.646532][ T6160] dump_stack_lvl+0x168/0x230 [ 190.651200][ T6160] ? show_regs_print_info+0x20/0x20 [ 190.656380][ T6160] ? load_image+0x3b0/0x3b0 [ 190.660858][ T6160] ? __lock_acquire+0x7c60/0x7c60 [ 190.665864][ T6160] should_fail+0x38c/0x4c0 [ 190.670270][ T6160] _copy_from_user+0x2e/0x170 [ 190.674946][ T6160] __copy_msghdr_from_user+0x448/0x5e0 [ 190.680385][ T6160] ? verify_lock_unused+0x140/0x140 [ 190.685566][ T6160] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 190.690855][ T6160] ___sys_sendmsg+0x156/0x260 [ 190.695541][ T6160] ? __sys_sendmsg+0x250/0x250 [ 190.700306][ T6160] ? vfs_write+0x84d/0xd00 [ 190.704726][ T6160] ? __fdget+0x18b/0x210 [ 190.708974][ T6160] __se_sys_sendmsg+0x190/0x250 [ 190.713833][ T6160] ? __x64_sys_sendmsg+0x80/0x80 [ 190.718777][ T6160] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 190.724769][ T6160] ? lockdep_hardirqs_on+0x94/0x140 [ 190.729976][ T6160] do_syscall_64+0x4c/0xa0 [ 190.734374][ T6160] ? clear_bhb_loop+0x30/0x80 [ 190.739026][ T6160] ? clear_bhb_loop+0x30/0x80 [ 190.743675][ T6160] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 190.749541][ T6160] RIP: 0033:0x7f735ee4f749 [ 190.753934][ T6160] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.773782][ T6160] RSP: 002b:00007f735d0b6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 190.782202][ T6160] RAX: ffffffffffffffda RBX: 00007f735f0a5fa0 RCX: 00007f735ee4f749 [ 190.790185][ T6160] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000003 [ 190.798148][ T6160] RBP: 00007f735d0b6090 R08: 0000000000000000 R09: 0000000000000000 [ 190.806096][ T6160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.814045][ T6160] R13: 00007f735f0a6038 R14: 00007f735f0a5fa0 R15: 00007ffe022258c8 [ 190.822038][ T6160] [ 190.823507][ T4964] peak_usb 4-1:11.244 can0: unable to request usb[type=0 value=1] err=-71 [ 190.837421][ T6155] overlayfs: unrecognized mount option "smackfsdef=^ð" or missing value [ 190.855406][ T4964] peak_usb 4-1:11.244: unable to read PCAN-USB X6 firmware info (err -71) [ 190.887484][ T6155] overlayfs: unrecognized mount option "smackfsdef=^ð" or missing value [ 190.915639][ T6155] overlayfs: unrecognized mount option "smackfsdef=^ð" or missing value [ 190.944876][ T6155] overlayfs: unrecognized mount option "smackfsdef=^ð" or missing value [ 190.957849][ T6155] overlayfs: unrecognized mount option "smackfsdef=^ð" or missing value [ 190.969522][ T5734] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 190.993843][ T6155] overlayfs: unrecognized mount option "smackfsdef=^ð" or missing value [ 191.003058][ T4964] peak_usb: probe of 4-1:11.244 failed with error -71 [ 191.013230][ T6164] loop1: detected capacity change from 0 to 4096 [ 191.018743][ T4964] usb 4-1: USB disconnect, device number 8 [ 191.059011][ T6164] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 191.129902][ T6166] netlink: 'syz.2.577': attribute type 29 has an invalid length. [ 191.142161][ T6166] netlink: 'syz.2.577': attribute type 29 has an invalid length. [ 191.150965][ T6164] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 191.153133][ T6166] netlink: 'syz.2.577': attribute type 29 has an invalid length. [ 191.169608][ T5734] usb 1-1: device descriptor read/64, error -71 [ 191.187033][ T6166] netlink: 'syz.2.577': attribute type 29 has an invalid length. [ 191.200432][ T6166] netlink: 'syz.2.577': attribute type 29 has an invalid length. [ 191.309678][ T5734] usb usb1-port1: attempt power cycle [ 191.672609][ T6172] loop3: detected capacity change from 0 to 256 [ 191.708534][ T6172] exfat: Deprecated parameter 'namecase' [ 191.729541][ T5734] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 191.807715][ T6177] loop4: detected capacity change from 0 to 512 [ 191.829885][ T5734] usb 1-1: device descriptor read/8, error -71 [ 191.836235][ T4180] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 191.856952][ T6172] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 191.916049][ T6177] fscrypt (loop4, inode 2): Error -61 getting encryption context [ 191.925887][ T6177] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -61 [ 191.934235][ T6177] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #13: comm syz.4.581: iget: bad i_size value: 12154757448730 [ 191.948014][ T6177] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.581: couldn't read orphan inode 13 (err -117) [ 191.966166][ T6177] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,nojournal_checksum,noload,noinit_itable,usrjquota=,grpjquota=.subj_type=á[]*:[,,errors=continue. Quota mode: writeback. [ 192.020869][ T6177] fscrypt (loop4, inode 2): Error -61 getting encryption context [ 192.041352][ T6177] fscrypt (loop4, inode 2): Error -61 getting encryption context [ 192.054523][ T6177] fscrypt (loop4, inode 2): Error -61 getting encryption context [ 192.109536][ T5734] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 192.129915][ T6182] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.582'. [ 192.169931][ T6181] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.582'. [ 192.241706][ T5734] usb 1-1: device descriptor read/8, error -71 [ 192.297150][ T6187] loop1: detected capacity change from 0 to 1764 [ 192.369699][ T5734] usb usb1-port1: unable to enumerate USB device [ 192.521596][ T6191] serio: Serial port ttyS3 [ 192.573283][ T6193] syz.2.587 uses obsolete (PF_INET,SOCK_PACKET) [ 193.667958][ T6210] loop2: detected capacity change from 0 to 512 [ 193.693095][ T6209] loop4: detected capacity change from 0 to 1024 [ 193.765938][ T6214] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 193.845826][ T6209] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodiscard,errors=remount-ro,. Quota mode: writeback. [ 193.862749][ T6210] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,noinit_itable,abort,bsdgroups,,errors=continue. Quota mode: writeback. [ 193.862853][ T6210] ext4 filesystem being mounted at /141/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.077499][ T6226] netlink: 8 bytes leftover after parsing attributes in process `syz.1.598'. [ 194.090480][ T6226] netlink: 8 bytes leftover after parsing attributes in process `syz.1.598'. [ 194.768960][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.775340][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.808753][ T6231] validate_nla: 9 callbacks suppressed [ 194.808772][ T6231] netlink: 'syz.2.592': attribute type 29 has an invalid length. [ 194.834306][ T6230] EXT4-fs error (device loop4): ext4_get_inode_usage:834: inode #2: comm syz.4.593: corrupted in-inode xattr [ 194.869942][ T6230] EXT4-fs (loop4): Remounting filesystem read-only [ 194.911000][ T6231] netlink: 'syz.2.592': attribute type 29 has an invalid length. [ 194.967937][ T6236] netlink: 4 bytes leftover after parsing attributes in process `syz.1.599'. [ 194.977055][ T25] audit: type=1800 audit(1765178454.785:60): pid=6228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.592" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 194.996426][ C1] vkms_vblank_simulate: vblank timer overrun [ 195.342740][ T6242] loop0: detected capacity change from 0 to 32768 [ 195.443500][ T6242] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.602 (6242) [ 195.494664][ T6242] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 195.503944][ T6242] BTRFS info (device loop0): enabling auto defrag [ 195.510576][ T6242] BTRFS info (device loop0): turning on sync discard [ 195.517274][ T6242] BTRFS info (device loop0): force clearing of disk cache [ 195.524524][ T6242] BTRFS info (device loop0): using default commit interval 30s [ 195.532400][ T6242] BTRFS info (device loop0): max_inline at 0 [ 195.538410][ T6242] BTRFS info (device loop0): disabling free space tree [ 195.545373][ T6242] BTRFS info (device loop0): has skinny extents [ 195.958052][ T6263] loop1: detected capacity change from 0 to 64 [ 196.255164][ T6273] loop4: detected capacity change from 0 to 256 [ 196.330187][ T6273] exfat: Deprecated parameter 'namecase' [ 196.388883][ T6273] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 196.418592][ T6271] netlink: 'syz.4.607': attribute type 3 has an invalid length. [ 196.446846][ T25] audit: type=1800 audit(1765178456.255:61): pid=6263 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.608" name="file1" dev="loop1" ino=21 res=0 errno=0 [ 196.500924][ T6263] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.510240][ T6263] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.518945][ T6263] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.527719][ T6263] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.629169][ T6278] loop2: detected capacity change from 0 to 256 [ 196.658316][ T6242] BTRFS info (device loop0): enabling ssd optimizations [ 196.682731][ T6242] BTRFS info (device loop0): clearing free space tree [ 196.690196][ T6242] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 196.700616][ T6242] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 196.784312][ T6278] FAT-fs (loop2): Directory bread(block 64) failed [ 196.792045][ T4300] ------------[ cut here ]------------ [ 196.795757][ T6278] FAT-fs (loop2): Directory bread(block 65) failed [ 196.805791][ T6291] loop4: detected capacity change from 0 to 128 [ 196.817680][ T6278] FAT-fs (loop2): Directory bread(block 66) failed [ 196.844767][ T6278] FAT-fs (loop2): Directory bread(block 67) failed [ 196.866851][ T6278] FAT-fs (loop2): Directory bread(block 68) failed [ 196.891261][ T6278] FAT-fs (loop2): Directory bread(block 69) failed [ 196.901258][ T4300] kernel BUG at fs/hfs/inode.c:447! [ 196.947103][ T6278] FAT-fs (loop2): Directory bread(block 70) failed [ 196.959503][ T4300] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 196.965614][ T4300] CPU: 0 PID: 4300 Comm: kworker/u4:7 Not tainted syzkaller #0 [ 196.973425][ T4300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 196.983480][ T4300] Workqueue: writeback wb_workfn (flush-7:1) [ 196.989577][ T4300] RIP: 0010:hfs_write_inode+0x964/0x970 [ 196.995132][ T4300] Code: 8e ff e9 13 fe ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 5e fe ff ff 4c 89 f7 e8 16 f7 8e ff e9 51 fe ff ff e8 7c 8e 4a ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 55 41 57 41 56 41 54 53 48 89 [ 197.014825][ T4300] RSP: 0018:ffffc90002f4f3c0 EFLAGS: 00010293 [ 197.020895][ T4300] RAX: ffffffff822d3d94 RBX: ffff88802798dc98 RCX: ffff888028cc1dc0 [ 197.028873][ T4300] RDX: 0000000000000000 RSI: ffffffff8c2e05a0 RDI: 0000000000000000 [ 197.036881][ T4300] RBP: ffffc90002f4f550 R08: ffff888028cc1dc0 R09: 0000000000000003 [ 197.041911][ T6278] FAT-fs (loop2): Directory bread(block 71) failed [ 197.044857][ T4300] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000 [ 197.044872][ T4300] R13: 1ffff920005e9e7c R14: 0000000000000000 R15: ffff88802798dc58 [ 197.044884][ T4300] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 197.052062][ T6278] FAT-fs (loop2): Directory bread(block 72) failed [ 197.059319][ T4300] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 197.059336][ T4300] CR2: 00007f8be2efe000 CR3: 000000002526a000 CR4: 00000000003506f0 [ 197.059350][ T4300] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 197.059360][ T4300] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 197.068750][ T6278] FAT-fs (loop2): Directory bread(block 73) failed [ 197.076420][ T4300] Call Trace: [ 197.076428][ T4300] [ 197.076436][ T4300] ? hfs_inode_write_fork+0x1a0/0x1a0 [ 197.076460][ T4300] ? __writeback_single_inode+0x471/0xda0 [ 197.137236][ T4300] ? __rwlock_init+0x140/0x140 [ 197.142006][ T4300] ? __lock_acquire+0x7c60/0x7c60 [ 197.147033][ T4300] __writeback_single_inode+0x6c3/0xda0 [ 197.152677][ T4300] writeback_sb_inodes+0x9fe/0x1610 [ 197.157913][ T4300] ? queue_io+0x550/0x550 [ 197.162242][ T4300] ? rcu_is_watching+0x11/0xa0 [ 197.167000][ T4300] wb_writeback+0x443/0xb90 [ 197.171493][ T4300] ? rcu_lock_release+0x20/0x20 [ 197.176331][ T4300] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 197.182329][ T4300] ? _raw_spin_unlock_irq+0x1f/0x40 [ 197.187513][ T4300] wb_workfn+0x423/0xe60 [ 197.191768][ T4300] ? inode_wait_for_writeback+0x200/0x200 [ 197.197655][ T4300] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 197.203621][ T4300] ? read_lock_is_recursive+0x10/0x10 [ 197.208975][ T4300] ? try_to_wake_up+0x6cf/0x1050 [ 197.213897][ T4300] ? _raw_spin_unlock_irq+0x1f/0x40 [ 197.219102][ T4300] process_one_work+0x863/0x1000 [ 197.224048][ T4300] ? worker_detach_from_pool+0x240/0x240 [ 197.229660][ T4300] ? lockdep_hardirqs_off+0x70/0x100 [ 197.234929][ T4300] ? _raw_spin_lock_irq+0xab/0xe0 [ 197.239946][ T4300] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 197.245297][ T4300] ? wq_worker_running+0x97/0x170 [ 197.250302][ T4300] worker_thread+0xaa8/0x12a0 [ 197.254966][ T4300] kthread+0x436/0x520 [ 197.259017][ T4300] ? rcu_lock_release+0x20/0x20 [ 197.263849][ T4300] ? kthread_blkcg+0xd0/0xd0 [ 197.268419][ T4300] ret_from_fork+0x1f/0x30 [ 197.272820][ T4300] [ 197.275884][ T4300] Modules linked in: [ 197.288780][ T4300] ---[ end trace bf0e08d77b90e397 ]--- [ 197.500851][ T6291] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv0,data_err=ignore,jqfmt=vfsv1,init_itable,lazytime,,errors=continue. Quota mode: none. [ 197.520897][ T4300] RIP: 0010:hfs_write_inode+0x964/0x970 [ 197.558722][ T6278] attempt to access beyond end of device [ 197.558722][ T6278] loop2: rw=2049, want=1764, limit=256 [ 197.714978][ T4300] Code: 8e ff e9 13 fe ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 5e fe ff ff 4c 89 f7 e8 16 f7 8e ff e9 51 fe ff ff e8 7c 8e 4a ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 55 41 57 41 56 41 54 53 48 89 [ 197.739984][ T6291] ext4 filesystem being mounted at /105/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.775340][ T6278] attempt to access beyond end of device [ 197.775340][ T6278] loop2: rw=2049, want=1808, limit=256 [ 197.787006][ T6278] loop6: detected capacity change from 0 to 7 [ 197.793960][ T6278] loop6: [CUMANA/ADFS] p1 [ADFS] p1 [ 197.799475][ T6278] loop6: partition table partially beyond EOD, truncated [ 197.806673][ T6278] loop6: p1 size 262016 extends beyond EOD, truncated [ 197.814554][ T4300] RSP: 0018:ffffc90002f4f3c0 EFLAGS: 00010293 [ 197.820705][ T4300] RAX: ffffffff822d3d94 RBX: ffff88802798dc98 RCX: ffff888028cc1dc0 [ 197.829045][ T4300] RDX: 0000000000000000 RSI: ffffffff8c2e05a0 RDI: 0000000000000000 [ 197.837215][ T4300] RBP: ffffc90002f4f550 R08: ffff888028cc1dc0 R09: 0000000000000003 [ 197.845589][ T6291] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:406: inode #2: comm syz.4.611: No space for directory leaf checksum. Please run e2fsck -D. [ 197.857656][ T6278] attempt to access beyond end of device [ 197.857656][ T6278] loop2: rw=2049, want=1764, limit=256 [ 197.861916][ T6291] EXT4-fs error (device loop4): __ext4_find_entry:1696: inode #2: comm syz.4.611: checksumming directory block 0 [ 197.884098][ T4300] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000 [ 197.892531][ T4300] R13: 1ffff920005e9e7c R14: 0000000000000000 R15: ffff88802798dc58 [ 197.902015][ T4300] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 197.913860][ T4300] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 197.922154][ T4300] CR2: 0000001b3230fff8 CR3: 0000000063458000 CR4: 00000000003506f0 [ 197.932311][ T4300] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 197.940913][ T4300] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 197.953386][ T4300] Kernel panic - not syncing: Fatal exception [ 197.959824][ T4300] Kernel Offset: disabled [ 197.964160][ T4300] Rebooting in 86400 seconds..