last executing test programs: 7m9.546981769s ago: executing program 1 (id=773): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2081413, 0x0, 0x1, 0x0, &(0x7f0000000080)) syz_mount_image$ext4(0x0, &(0x7f0000000580)='./file0\x00', 0x19560c0, 0x0, 0x0, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd2a, 0x8000004, {0x0, 0x0, 0x0, r6, {0x0, 0x5}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xff, 0x1, 0xfffd}, {0x6, 0x6a6, 0xffff, 0x5, 0x6, 0x2}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 7m7.356281587s ago: executing program 1 (id=777): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x18) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) 7m4.627719006s ago: executing program 1 (id=784): getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xd296895ede2f911a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{}, 0x0, &(0x7f0000000080)='%ps \x00'}, 0x20) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r2, 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/image_size', 0x2300, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f00000003c0)={0x385200080, 0x0, 0x0, 0x0, {0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, {r3}}, 0x58) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x840, 0x0, 0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0) 7m3.750460035s ago: executing program 1 (id=788): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x5, 0x8, 0xf}, 0x50) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000300)={0x0, 0x80, 0x6}, 0xc) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840), 0xc) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10, 0x0}, 0x300060c1) setrlimit(0xe, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f00000000c0)={@remote, @private0, @empty, 0x40003, 0x40, 0x5, 0x100, 0x0, 0x590043}) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000380)={0x60, 0x0, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x5, &(0x7f0000000340)=[{0x5a717210, 0x6, 0x401}, {0xffffffffffffc6f9, 0x8, 0x3ff}], 0x2, 0x3, 0x6, 0x8, 0x0, 0xb}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={0x18, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@nested={0x4, 0x1e}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x84) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r5, &(0x7f0000003580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x20004804) 6m59.015388987s ago: executing program 1 (id=795): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x1a9882) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x1, 0x1, 0x86, 0x10, 0x20f4, 0xe05a, 0x6c6d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x69, 0x2, 0x0, 0xff, 0x5a, 0xa3}}]}}]}}, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = io_uring_setup(0x7ef8, &(0x7f00000003c0)={0x0, 0xdfb1, 0x2, 0x0, 0x27e}) syz_io_uring_setup(0xbda, &(0x7f0000000340)={0x0, 0xec21, 0x1000, 0x1, 0x40800333, 0x0, r2}, 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00'], 0x54}, 0x1, 0x0, 0x0, 0x40814}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 6m56.524009669s ago: executing program 1 (id=800): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000280), 0x20000, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xd, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r3, 0xc0305710, &(0x7f0000000080)={0x1, 0xfeac, 0x5, 0x1, 0x8}) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r3, 0xc0305710, &(0x7f0000000040)={0x1, 0x7f, 0x1f, 0x0, 0x83}) ioctl$RTC_AIE_ON(r0, 0x7001) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) ptrace(0x10, r4) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x4000080) socket$alg(0x26, 0x5, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$netlink(0x10, 0x3, 0x0) 6m48.97774779s ago: executing program 0 (id=810): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) symlink(0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) keyctl$read(0x2, 0x0, &(0x7f00000000c0)=""/4096, 0x1000) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r3, 0x0, 0x44010) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r4 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x3f}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0xa, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7, 0x0, 0x0, 0x7e5e}}, 0xe8) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x34, r5, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}]}, 0x34}, 0x2, 0x34005}, 0x0) 6m44.931362081s ago: executing program 0 (id=814): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='pids.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r3, 0x0) creat(&(0x7f0000000380)='./bus\x00', 0xbc) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r5, @ANYRES64=r4], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r5, 0x0) ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_dev$loop(&(0x7f0000000180), 0x7, 0x2480) 6m44.375508949s ago: executing program 0 (id=816): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000480)="19dcaca56eb028a80e6c8941d6f01fdbc50c93e74c", 0x15}, {&(0x7f0000000680)="db642faddd0e6771b14d0750d254a232cfa65ba23251f1308384efb9f579c3acfdd141160b8a3f04cb2a8986e2d5f57331a3be8126cc9bcd80068e571268146654a7b6a0311a58c352d93cd7b79982c71a8bbb9600a9ae1f7508cd3fd56fc2b749c1a45420243875137600bdf5001827c54e82aef5278ab81a7242715a532b5cf7be2193714484c75fbaaaad1c2d3a0533b16918c07c83984c050d902aececb687d05d9dec254d089f01530aa693b1a5456a3d3b0d51968107fa48340be469ad87", 0xc1}, {&(0x7f0000000240)="2dd9a3e107fffc29294833c9400bc7bcc25863adfba5adfd36821fe0566a9de122c2398f4e7232edde627269144f596fded1ef3b23632030205b83ceab58c37596bba6d6479585db5181bed145a869d69e1080dfcbf5411a54da47909dd8d85b6663164f7ea6e8c22505000000dd4cc7eae5a64d1572971a2f", 0x79}, {&(0x7f0000000540)="0cb45d42e5597a52e2142be516641886f4464a", 0x13}, {&(0x7f0000000cc0)="1f4ffa7c23f5470cd6e73c5e7be1b40a21618cfb007f3e613410075f0ad9022ada286460a2137409efa4e1be3ce7a2e99b6d0614513597299ee99656dad90f11ed91399b2dcb3101affc9e3e03c3a3c488f2b9cf", 0x54}, {&(0x7f0000001040)="8c30fb2308c0f5a3fccc413ed7e871fdd83404204f3a859c0fa2a41c01ca1b4455d51295fc0cb29af1b683ad33d0ae7d4a07d332f7e22798687d1637f047dcb22827aeb6c6fa92989694a3741db1c7478cf23be260d66f8ad5ecf8e5122a7e6d31fcded7bd02b4cd1b74946b639dac90f2904df70bf368d4406a7573e564b3c9ca875ad5036d51e4fefa870fddd2c41e41ba6eb848725c7652385d4926fb3c30864326aac268c88f03e440498f584cb2cdd1b68f7e0f1fb8153d58", 0xbb}, {&(0x7f0000000f00)="1ba1f777454791dca9824e7d97779aab33fc564a9891fabf2ac114b3ca57a9728096f5333205353f5f76fc7868a826f3ea24f427cc71d1d19c01", 0x3a}, {&(0x7f0000000f40)}], 0x8}, 0x811) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1800010400000000000000008594233c2d76add12defac00ad00000095000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) connect$rxrpc(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x1e, 0x1, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x40040) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x208400, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000003c0), 0x0, 0x0) read$msr(r1, &(0x7f000001b700)=""/102392, 0x18ff8) clock_nanosleep(0x2, 0x1, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40186f40, &(0x7f0000000440)=0x1f) 6m40.130418141s ago: executing program 32 (id=800): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000280), 0x20000, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xd, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r3, 0xc0305710, &(0x7f0000000080)={0x1, 0xfeac, 0x5, 0x1, 0x8}) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r3, 0xc0305710, &(0x7f0000000040)={0x1, 0x7f, 0x1f, 0x0, 0x83}) ioctl$RTC_AIE_ON(r0, 0x7001) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) ptrace(0x10, r4) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x4000080) socket$alg(0x26, 0x5, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$netlink(0x10, 0x3, 0x0) 6m38.477646379s ago: executing program 0 (id=825): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0xa, 0x801, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) r0 = socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x10, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, 0x0, &(0x7f0000000300)) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x2bc3c1f, 0xffffffffffffffff, 0x7, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) 6m36.653826113s ago: executing program 0 (id=828): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) syz_mount_image$squashfs(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x4, &(0x7f0000000280)=ANY=[], 0x2, 0x1b4, &(0x7f0000000640)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r5, 0x0) madvise(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f00000000c0)={0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000880)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x101868f, &(0x7f0000000240), 0xfe, 0x527, &(0x7f0000000280)="$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") prctl$PR_SET_THP_DISABLE(0x29, 0x1) 6m29.767368324s ago: executing program 0 (id=837): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x3, 0x0, &(0x7f0000000480)='syzkaller\x00', 0x5}, 0x94) openat$nullb(0xffffffffffffff9c, 0x0, 0xa4202, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) semctl$GETVAL(0x0, 0x3, 0xc, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000240)={0x80000011}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r2) r4 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r4, 0x54a1) sendmsg$IPSET_CMD_DESTROY(r1, 0x0, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, 0x1, 0x823}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x3}, @IFLA_VLAN_INGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x48}, 0x1, 0x0, 0x0, 0x4044064}, 0x40000) 6m28.034430611s ago: executing program 33 (id=837): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x3, 0x0, &(0x7f0000000480)='syzkaller\x00', 0x5}, 0x94) openat$nullb(0xffffffffffffff9c, 0x0, 0xa4202, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) semctl$GETVAL(0x0, 0x3, 0xc, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000240)={0x80000011}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r2) r4 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r4, 0x54a1) sendmsg$IPSET_CMD_DESTROY(r1, 0x0, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, 0x1, 0x823}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x3}, @IFLA_VLAN_INGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x48}, 0x1, 0x0, 0x0, 0x4044064}, 0x40000) 5m40.099835538s ago: executing program 2 (id=912): pipe2$watch_queue(0x0, 0x80) prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x7, 0x800000000000008a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000200)) setrlimit(0x4, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$alg(0x26, 0x5, 0x0) sendmsg$alg(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) setresgid(0xee00, 0xee01, 0x0) setuid(0xee00) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000007000/0x4000)=nil) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r1, 0xc1004110, &(0x7f0000000000)={0x8, [0x6, 0xffff133a, 0x1], [{0x0, 0xffffffff, 0x0, 0x1}, {0x35, 0x35}, {0x0, 0x100000c}, {0xffffffff}, {0x0, 0x4}, {0x3, 0x200}, {0x0, 0xfffffffd}, {0xfffffff8}, {0x0, 0x82}, {0x1000000, 0x6}, {0x1, 0xffffffff}, {0x3, 0x1, 0x0, 0x0, 0x0, 0x1}], 0xc}) r2 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_ENUMINPUT(r2, 0xc050561a, &(0x7f0000000540)={0x3, "2a123b084c1295533fd0a4bb9ad6ca7be3ced96f00000000000100", 0x0, 0xfffffffe, 0x1, 0x7, 0x4000200}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x24, 0x0, 0x0) 5m37.4077887s ago: executing program 6 (id=839): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03200000ff03e0ff140012800a00010069706f696200000004000280080020007f040000"], 0x3c}}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) syz_clone3(0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r9, {0x0, 0xa}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x22044028}, 0x800) 5m37.228007585s ago: executing program 2 (id=918): socket$netlink(0x10, 0x3, 0x0) syz_mount_image$udf(&(0x7f00000001c0), &(0x7f0000000180)='./file1\x00', 0x1004000, &(0x7f0000000200)=ANY=[@ANYRES16=0x0], 0x1, 0xc34, &(0x7f0000001bc0)="$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") r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000002d40)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) bpf$BPF_PROG_WITH_BTFID_LOAD(0x24, &(0x7f0000000840)=@bpf_tracing={0x1a, 0x0, 0x0, &(0x7f00000006c0)='GPL\x00', 0xfffffffa, 0x0, 0x0, 0x40f00, 0x65, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x6ca5, 0xffffffffffffffff, 0x3, &(0x7f0000000780)=[r0, r0], &(0x7f00000007c0)=[{0x2, 0x1, 0x10}, {0x5, 0x5, 0xfffffffe, 0x3}, {0x4, 0x1, 0x3, 0x9}], 0x10, 0x400}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x536, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0xe9c87a10756735dd) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 5m35.801427808s ago: executing program 2 (id=919): socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc1103000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(&(0x7f0000000180)=@nullb, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000040)='exfat\x00', 0x0, &(0x7f00000001c0)='discard') r4 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000003000/0x3000)=nil, 0x3000, &(0x7f0000000000)='pids.current\x00') keyctl$KEYCTL_WATCH_KEY(0x20, r4, r5, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r3, 0xd0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000080)={0x0, 0x1, r3, 0x2b}) socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) socket$inet_icmp(0x2, 0x2, 0x1) 5m34.473257896s ago: executing program 2 (id=921): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001780)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$inet(r1, 0x0, 0x840) r3 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000000400)='x', 0x1, 0x10, 0x0, 0x0) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000001040)={r5, 0x4, 0x6}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x4}, 0x8) 5m32.823047047s ago: executing program 2 (id=925): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) rt_sigaction(0xd, &(0x7f0000000140)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) r5 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r5, 0x0) socket$unix(0x1, 0x3, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r7, @ANYRES64=r6], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r7, 0x0) ioctl$KVM_X86_SETUP_MCE(r7, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r6, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) 5m32.403975841s ago: executing program 2 (id=927): fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0xfffffd10, &(0x7f0000000200)=0x2000000000006) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), 0x4}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000004c00)=""/102392, 0x18ff8) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000000100000000000000080003000b000000", 0x24) 5m20.320682135s ago: executing program 34 (id=839): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03200000ff03e0ff140012800a00010069706f696200000004000280080020007f040000"], 0x3c}}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) syz_clone3(0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r9, {0x0, 0xa}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x22044028}, 0x800) 5m15.638062859s ago: executing program 35 (id=927): fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0xfffffd10, &(0x7f0000000200)=0x2000000000006) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), 0x4}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000004c00)=""/102392, 0x18ff8) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000000100000000000000080003000b000000", 0x24) 3m26.690131105s ago: executing program 4 (id=1079): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x400}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) close(r1) r4 = socket$inet6(0xa, 0x2, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x84022, &(0x7f0000000840)={[{@nr_inodes={'nr_inodes', 0x3d, [0x65]}}, {@inode32}]}) prctl$PR_GET_SECCOMP(0x15) prctl$PR_GET_SECCOMP(0x15) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000001080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x201488, 0x0, 0x7, 0x0, &(0x7f0000006380)) accept(r4, &(0x7f0000000100)=@ethernet={0x0, @broadcast}, &(0x7f0000000000)=0x80) socket$inet6_sctp(0xa, 0x1, 0x84) 3m25.796622718s ago: executing program 4 (id=1080): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$ndb(0x0, 0x0, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f, 0x1}}, 0x20) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=00000000000000000040000,use', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004300)="e05acff62a41134e0f28a6ba227995b05776c837ab3a066a329e33b775d4586b7a0c48f3471ede96c5e03e1f347acdb576b1b8c75ad4fe76f3ceb2331adb9676968ebcc8bc70b50acd984f9067e2499ec9e28061d978efb1ebbb90d82d973c7b4bdadf6dcf1cd1ba8a4b8882779ab3c5a956791fcf5097ee4b0da8d910938b1edf34fbb493d106ad0270110e14f0c94d02e722ba66bc7e3d90197f4fc676d18723513482dbaa39e68b3a4c0d23f9706f67f76202f16de2f3a40b48a2de184a15f89b2935a65017dbd8783a3d9153c275b72470d0fc15920a659c531d6ca85c36012deb6bf650f9d0a598707c1798a3636b7339a0a5b0a3a62073dbc94eaeecccc58722b8d76d0a447fe0ec7c122ee5d028f5dd17813e62da599f209c621c06c98e0440c008b8678dd65ec6ae2b0b659d6883ff1170ff904db86d0748e8dd1e870c6255ddfc90cbb5aba594c593f64f518d69ab7e02425299303d7d37d5ed28afde8fa2daa4627855dba7c4ab12209d5a836ea0c4592cba568dabd5453382eb5f7e6ce5bd0489b876d4d1dabe18f0440190f5898675bff139d7e8c953abb31383b932a67808cc2a2f67cb714b9a2c8e75f68c21fbe56ecb49f39136b7a0b7b6a53a93f33f9987fb7e7437a0852b9194cb75bb84f3b40f4617ae8ce9a8da6ca74d4e7c737bbc5126b0b8bd0c86f4fb861fea02fd7b8649fb1c0523b30f28a24bd7f58495f29cd2e092f5b6ff29f4de5ce56894fbd9fa78df0fb93efe2192e966e14bc9bd4671b0a2c6873d7750773a8aef7f1d35cad742e64664dcd277b2d604f564fdc519911c0749575c7136226cd68f2ec02a1563c727c1eac916cc426da130ac5c5fd6c0169161c2d7f79fb16b9d8025a6c74e14abccaaf30e5e39806a8b1866cc62e8e238c38036cbcb0abf003861103634409202ffac458605f599ae67db8f4cbd45f72ac9bfd126783135f552dd6639937ff0f77e15ebf8a49fe3d6a7da4fd6faf018b62956957c13ae52537c5ffbb4b2c28f3076468b1d11b018b6af74ff706f17c4babd4987bf9afe98a4b9aa357137d9383b8fb6ca370dd2fdc582aa701e85d926bf3087565231d6089911b2cf578786607ec5849d3d58dd423ff4558092c9a22a1153b787f37c9075555e1d06bc99b95b03bb0862da5be4f8d4718b1c6b892c1ad1138cded558e910553a70699e9d6ac935c227bd3326bfe40f389b16517801826d0ba7a1d74528fa273eca268a74e11423f0ea00e2745abbb7342c846566cf067b38a308babc8a45e607f39b66ddd2e772867cee3e14b3e7dd8844c3651330d15db8aa51d94c98ece900f4443bcbbf8849c3fafd4e5d4e1e5ea4306c081438e1694c59bdafa3b6bf80302b48f09a541dd30db6026ac247303db3facce171b64b48a74a1865db29a15db73f6989f7e5d6b6f39431511246b2ac2873dcdbea3fa5636af6813c83a7fe8b3b7936911a6a47f10823188d0ad18dbf3e4c45c296210e5bfc3abc3dc3836fd60a691005857db271290243709c57fc1ca3ad9a7938550b81b473c66e614fdf7ff35b8e19e60f7616ed19af91e4818c5b2c30f5ff903a3da9c7b7debc5d1b9e41f4a12f122a727a627cc5e6a0f8d81161088a93e4d0e592b7e977287833ec9446a6b44aba303e12ecc19c7fda316f6049db6bf1617f6fefeebcded95f75371fbd6db605ed7b77f8f91ea27468a68e068d1aad50a4118bd619aa85d1f5ee0eb9bbdfcad7335628e3ae1340681ce824204a9997f8aad87c8ce0534482cd748148689ec331002203b94af4ecd11d5b75d80838478c26cfee0fa076c5baaa82483b04898ead705bdb37247956ee25db667ea6668a4f3082332070489da02c3b5d25091e3a00f884265185a28757cdeedb3a1e4a0ada801d4a386fbab0c1de6f35fbb6c7d81fd15370909a387eabd3415f146129647a13f20ccfa69e436ce067ed1a9e0dfb877c85f0b8032e64f5379a9f5a92967533f9b45584ce1a04b962306d2d707e0e462d9d2ce94dbf4c52835c2bc005d1c21fd4e64b0f2578a072d8c442c49bb9450a8fcb49a4b2167912ff1f5946585983087deffee403a0c079ba90a0b644584137c58626afc604ab684650aac5ede8632f3e035da41c511bfb25a62d0a283e35fdd67dc0ef135d428297805b5fd0ad62294531f46171f546c61eb6475fd9fc7c8357e65737d39a741417f8a0a7e035f696c1a83d44837e360592db9ae7afd2ae7be9859f062d274b0862746c9ad804eb1c72aecf6ef9cfbbed33f68f38f25eb493d165f3012c04ec02d42421e2232aa4b30910f9d4fb91b9ba2e7b40ea4fdb60f6957e3afed8cab6d076b2f5ac59ea53bd1e9d944cb53deaa2b8ba097664fca77ab97666c6add05e7556b92d8ad11d19887e83a8ae9dc086bbb4d23cabb3615fdc05e35c61fc3e28315659509df1cbaf449ac909f36c69f5366f1bbe9b3bf9899533f06a6161c986607292a202bfcfeb2508aa18dd993d2d239b32e4f06ba1321d607c154965b9d1f52c940777e69430967d456cafabf236a2f8cea019cc87b350a5bc2aed7f1469ae6cadbcd579864d2194e3bc71e2596c690226b15c86aa0c2aede98cec57c4e752edb6fbe58046ca59546511805a71aa187ce4bcd5399c36eb3f76681a63e5a1d948a9cf98703aebda62c0759477f1be96841d60256bb2d7140fe4481d4d5180df9595fae750da2a9178c89fab47766ae30cd3d8ffcb94eb4b4245ef19ee3d95b89094f528c16ed7289703afd5805e923ce48bb5e451a93ceadbef1443e61b6b59fc13e79ed418dc73cf12b302ff40aa09994374eeabec532bc98b820c21d15f2cd10f755132b12c824a8875387c6682e991dfc01280ce1619c23593659de590b080c7f2eac12ec00704ab8b3bc2052ba9ba6f59a2312b9ebf62c6ea1ec5250435c25215f87350903140a4a12d8e3f8e233f0d63002dbbbd12a7ba9282768dc2b2b9aceb9e45e9da4a2d4a8da83e72bf0cf91bc12324b544a1d6145525dd9cf44199d7448d839bc67b1d33d7da10a9abc08f8f08a894edbd42c1baf8482feb06d68f25c4405a624998bd4c28cb9b845712ba307ca9b9ff56131617ceccd2927ecd57796eb103b6b15dfa12b3e8e9aa2ac8af20cde7877501a98d8b04dbd96d606661066dd80ef55d45fbd5c410d4a0d59ad53cfe3779350e71f109118bccb61121bb8eefced8feaa72c95ed737490c7318e7db86d94eda2ce5f9b04f2308dadbd8a2be6991309a56959c6be4312623a04483bd72a64c210bc6ea600d887aeb3781030a0c4a6ee06f38896bb95688ba5c735180ed50f1fce6c321aa0503f714a000b6e10f22d019e0c5bdbf982bc0a3b15ee59e9c573f77073ac64394f3610f68eca10092a7b7544bc1e643c30017133fec103af1111536ec6b37472157ef7a57186d4b64812ee20f51257d2cdaa19b5508fc40824aeb678c368149387f9083d645c9b616fdf08459aa792897293e7dabfab1144ea74d39a2f0d3632d16ce8a8373717eb83d217250646903207ccd9804e584c12bd98be5096c2a43f21161547f6b2fcf244f12a3c6863a90b45901379a1df5948dba63c34aedb7b877c675dec404acdc0348482502c3e9a886d0829a17c06457a2bb3b6c843285b1aecb4c917d9d586b5b47be2895dad99e620cc824f4d0c577f8b737c20c39c40b77db27e8e72d83c6d220011e7e304c97e281697afe31e077f490f0e632a3fb5125351051543125d7895e86007e0be5527f57f98db8235bfaa3c4d25514ae88d06289261b49013f25326461a5672c0fd975af977d9e9725d14c923decf5b60cb800a267644e0fb5e8dfc734c5b1ba810ff276f24f8fd0608bda3ab335252fbfce4e75c533bf44d2f6a2d14314b5bf24ab3d3dc0794a120379264d2bdfb4111e614b4f68d36f930b4802863bd47dc7b8520f8e95b9673a9bac79dd4e68b7dd9e095d87eb8004f19763459171142145ff6ba160709fa7732579c48bbd4ace904fed83603de20179c6d230b1b098b2800749c1836b222b52da56a2d47dcd9a87e4ea2a2fc3da46b05fb446d1b6e134d5979c43c1e79b00ce0909a020fa2e0377e19bbbeb5c4453a0f04a09242a477bcf0fdf824b58b196d7ee987ed68092c6696cf2dbf942310ebb2d674512a4428e9e194127eb44828f9a812c762460486889d715dc6dc4377e557834f31cab1db1b276a5e3c14618c233ae523f1e3f3c0078fe150354855b3c31d0f333928efff70c7383cf65880420cf7ec307b708307fed0745032cb81891b85d67fb55303a30da8f4b3bedeabddc6bd38d92edeec80aff10f0d29f116cfe31f1b1a96962a713300635329c04977ab606e50b93cb1305f5a82c826febf41318f1ddb7e6fd0eaf37936f6950f841c8853bf1acbb96ba04dcc4fa5a23d8eb8e5b22fea5b5784453d51799442c665df83b45ed6fa99401ceec8e0f62b89fab9fadaa0d51e845fcf2ec20676b3d867304b7f893054490af7a0080bdaacfddd54fee4349e03dff156c9f08ceffa31e3701d333251f7cd4b07c52a9901d4fd32bb01261544c7842df78b420b99645e7c2695fcc6dc4e402ddc0ac039bdaf4129a4ae70b37b1c61ebd47e6cb7d6dfde13e7e972c74b706e8a3ad7fddd50cf581d2055ff5b127695d6f5c8fc67df49aaa56afb789a9fa384125f13d928feea35139cd9153b254c6b39f838c0f0367c5efa13c5fbdcbec5c9f88d7d2ff54aaf8d0c4db4cada8b74ea780d32aa0e66942e936061692182be3c5b21fcd99dfbfd22467d4d3ce3d78e88f1481bc2ed388f0dc3f262a079bdcf41d2f21f1de75202fac6b4f8f9f8a7ee0bdb646ce582f6fd358461fc4266f980f33138c41daa3c8a82088eccb8a2944b6dc432f8149414115f209282945e51e5d0a999d518a32fec37e64e8618879f7d65e088514efed5104ead3fab91c017447a645575a50dba5f28a3a6359a9d591ee2c7eadd08b86e733a6a8723880890d3158e527b4d9a676b02ef0faabff71865c487641c6c104c15178106d878c6cd588b2c6f834a4a2ebb9d129ab28eb7dc6a556f3d868e2765034bb146c7be493d19302b31881a11257ed202bd20d53f05d7b5c96954b55cfb933fcf0945a10b460bf7e276ddb6fa313225b7bee647e8e6d5c1ef68dae19d4cca98f00d3a860602b66b09a1392ad01739a5ddb7117dcb0053e9c31602727101225c627225674aa1e49f3c3abeffada9f5ac76b5f10a2de55951de24b1fb144f4c1eae80e27bc36e5da70e01ff37ca465190180644a27eb9a96a15d6fb4eace5e652176a02d4ef8228bd72df5142351a6f1b08981a5c66eeab943983277c1bb192b668ff25cecae19229da67e2d8e3655c409f597b68260c70c47c5843082d94a94e72fc42ed11eed5a0cc5c9eb57de53947d2823cedbd9e417682b7b19ed3be8d27b3a887795b062c88317a0dc04bd6a62cf05fb78b2955af0514a99e3fe0e0f382c9fc2ff820af6451e0915722162c53b060250890c381ebe2edbb63359643ebd780a32770e78c6af810f341f3e07781ee25c92275ab427de063326239514c6623c9a3a2ee2c80da4c77404607cd208e2e9a273cfff2cf9c6cac6ed4cd6641d8890ce82f229cec11b483db0e4fe70161829bebcdc65351e75eef29d4ec70495415927aa6be603dfb8c5c34f4d2a0afe0bd0700540b8ccd9e0421efb4d449225fe38cf4ea8145e7e1ecdcfda0c1b8a6439b3535a7c853065f665cd28c86fcf4b47ce321edc9ba1bed1a6e4160e62819cc8f9d0914ca7c8f54c6392d9b8d8a9e23e6877e240cf50208b5dc085cbf5932d730dde94314d269f8e4730e72c62ebf1100b423e7c02c0c7b3d579fe738a75bf3d29264bc27009673ebc5fd0d777e2b43d4b738addf5e1c1d084270f5ad6441d10e723331ef5d41d1da2597817968e3c33324fd876bb2c4829921fb5c835ed01e78d0fa88d1f4043693a5cbf592f350505d37efd84845feb77ed38a25df0e98678047f320080972ae011d5ecc9b9cb1aa519fc661c3c909ccf1002844a4f3a9ff21dcb3e861cec427cea26eb765e3d30c532f3c67aead616cca4ed0ef627e3edec6a98e0f0866af49b0019ef8c50104b4e21c17b17b36b0bd5d785c0a46dd5e84dc7327d46c73637602f159900ddc1e6bd3f9afddf45ca54cc7958a6fc0a7e9b93c7e91da8afba0a63238f3847860ebe9403ff3b80e067493d34c55e7562b8b0fb06a2f8c1ddc9cd0f785aa9814cd40aa66ded541de15e647303864b27b5cb7631666f4166b6daf929fbff41fd95bf16994a6f9bc8ce579da13442357cd500f10c392ec78b0c161c99742c03b4d745262d86500e2a981586627350cfe1bcf4710b0824070abca21e1a53a36bfbc12ea7fe8336f741784746abef46f52ad131eafd02ac24c1d1636fa30337251a5f169cdb8c57fa214f2a900af0ee866748661f1a67a6c2c6a6e49ce1939139e45a456c7dbbec8a09be48853cd9b1feeefc6729740dde9de04dd1e0f9c774d387a902174274729e6349a7effd237e63c40bdbccb72e44dab5ac1eab96eb75a6ea8f2f7dd362159131072dd8d733fe9c54d1ea4771e85e7cc0b0455dae0a5c8ece44aeff7e2d247e94639c9a74f48e690c02e89d0377fe3afce5d6abc706dd3e23d19809dfa948b010b6d66556ea81ca3690c3322478dfa1e9ef6de5e4d21b6e9867c611fc4e78abc94bd3c9f112739f8d2996834f54d1137f34ff5442c2432746c37031bc7e9201fdeb7d73a24163fe423fdf3e8e22b655ec159664e905675d8bb80d651d4dda22dfed198d02c2b8ff5b0760fd2aea35e5196193930200b048b59d4e6cf398652a4726925c8a1936ee29cde1bd70fdeeec0aa1e9289711c57ab8ba170c427173fada71e9a1f0fc4cbe23c248f5340db3f9ba4f8c23da230ef4c1013ba0ffaaf5bfc58cc2eb5084f96bcdce7c1ce76c4206189bfbc9d8f1238aed641c39693363762f2cbb1b3433cb01fba42dfbc7b1aa6a46cb9bfcc98a8d8f46cde8a5dc9d74de7fc73aa22420acd949a26c2bd0c8c6f05fcac03a88e622c851454f583623b35f825038ab1aaa3091d05018c2179f473a889219e3414bbbf4eb62333df13ca9eef4dd987358c90d6bdc113aa2972cbff9b7d7e5a76fa182609401567889febe7f2443b338982c3be4328caa199f4b14652ff609b3012fc66cd7a02d8e837bf85f7d2ee7f5061b359104a90e5a74179f6fe7ea44acaf2e8531b05875e041a7f42f6551e89518dd06f04ceaa5140fee9535cc3de18ca42721661d395e23828b07d449e4e09614c8aa753d28215608a56dbb66a929a47fe1beddc6123afad8d4f64cc5602138a289ef1287548d914647d144c3010cb5e3a90753aafebb70703a4f0eb4edbb991f47ed529b219a9fd421782a8a9d73d18e9ac69768791f408ee65af8f78ca3986e878276993c8dc140949f7410c8aee7b57739ffd57e5096ef3c1edc9d242d8ed7d0b5c8f7d4ff37b4ef76a6d4ca8960793508313c751a194ce0dcd0b08e3c3b91f06cb9f158347af1689fa86e9229970ab49bd44bf99da76818f7deb102bffbc575cf53966e247ce3558f77937d822ab74a437c5575dbcbd907199d5b645ee6ee122dc77090960302f8fce044fcb5d19a803b92a95950c262ea117522e6cbe44f5c277d6d7e36890eb7702136dc78abfdc5105f138b9415ee6ed0b4e1f805b3bdb5d0e7aba7d0aaf7c6c100edae89b8496804a7cc9e61d002ba42abb6ada2fdb12f672a15f2f3ef7d23330a5d411195bd2e3caf54d7c29a4ac9e13db64d88c35587059465e59507acd1ed7393f3557b8991116fdbb675f7f4a30acfa0cce3e31b817834a3037a18479aa764a83820f7186460fb96e07adcd529cdf66d0f6dad80260f51d3a9a1ebe213d03b9b71c9c522b4b8bdfe40b06a9da4c722f9a73d43423b456b2464bbb546b0527f71cbe600478169bab6caab15b98d4383552cf0dbf3c4b5208d901873f79901d174410ccd887073c1c9c6091f01c1772123f8354efdd6646d1e5373ef0e7750406b2c9acc1315c9fe1e9b0dba050717ee4f1ed17fc73357150921e5092c8edeb79f25a5b5e142e6813f20871252ebf52752d643a2965058509271b370bf98ef0fe8983a4725d39685647416757b85f87cef3ed7265d67a479d7752dcb3fb78447e6dff107a51365cba79fdf6edba21db2d3b52bf70579a398c36847bb3ec5e8ced0ad82c68c22d422335f73ea5297a95c5263d2403e06b7fb1d30804efd4d535894e0e0fb4747bd77caf3e92fd23d0bc8c73e09374ca42b52fa8c02f1ff3d19d8eaa78ef2ba7b3b1bea75faabf2658cf0a49f59bdd1fc49618fb60260053033184ede8c6a10fbf5f295a8a96553d469b160b17d9dbef52a651afd41fa87a169e5b34c8f3f0299aab066bcfadb07055502432b285f42e369606c4217f10f947fab6bd24889ca0aafad8be5ecbf11462b3a1cfd0c93c80e0a5611d6248a0a4fcc3a2307a7de22d1e301aae233155bd10d11f6b37d89a34c5104049bfe242ceba72e5968ead5ec6ec6b7056c8a1c390f6c6640ec92afbd76fb1072784ad7349ca30b605d6e755f0a21703724394a7681709f7b73aa34f6f44dea15264ef10e86a1079d64f98f6f7bb50bd2e0caca18df8b09a51ca436834ddc235d60fa9500bfb09fbb1dba93c95e1406086f83f6950a0cb9a4cd8ba97333b0de1e658d42469ac93529c596712231f8e0410992d789d326a127bc8c0d901f4dc99b36948c782410052229769f5177b328a6ca68df9e4fc4638cf090d17a4704cf142271418c5a85c7cd292b6fe1ac9e1f2a1858d17e5318d4d75cad3c4e7f2b3d3da458e4581217a07b28ca94043cd0d31d1af5264b8170ef325855a5b5863f01541dd1428cac12793e9080919f6d4b6f9f1255032b44daf64d2ae7b1084384d0d9eb76b7aa18c70b8ce5a174f2a3f73b31f98a9dc329c3f5e1a4ff04c6b85ab3e2eb95f8e265915937b5bad0088c7ab15e2c9cc97707039045758b56f613f58d8100ab0a829c2672e99624494ae81983c23dced6381e718454e714c00d6df6d76f502bc2bc7dd8dd67279418cc4855e33d9250dfd9eff61c98fb06d578d92d1510c1589025dc2bba8208b8d4554d9718bc846666c984ecd7442c60c3437dc9adb4a8bb671cb828ae0a1be34a4db662ef440fce64a6194a296726e7fd6c2b0d2dd52c785d01b26c66b363c6be384471c0e5e60aacb8c1c47751f8c689892ea1ead15f157dc7b567243cc298583e5f37a6bd4ff9d947e2ae56a466f0c27408cdb8b2b7036598aaef45c995b4b1bcb7f110b5c5aa87fdd652e30998796982fcfa0911558395ec8f63e7fc898221d6a9b904951600f1caf077870db43f5e1c59907e4d5c50c9b51e365cf82f4a77c5bccbfaf90b1ce51aef03675e7c45e2bf46f98bfc0d140273dc2ad2e1c25c74ca2edd2efca89aa1432d1c5450125b8a0c19326b0a8c845e657bf69481918a75502de4fff5db8c706fb0e6d0d7263f3b213171f478b71a67257924a8f5ffbf29215783d21d379f50722972cd7c96c4577dfd958155d15214fe704e73effd98092f640b4e376804013028539422407156de850d0cf7797383d0c9c7e7a0c79718003d5748b5393eb3cd8c18f314cd94139f432f4bc82f908533cdaa7c80d0d6d26e1228f8d00a8882b9b07fc6a177d20231e7f42eb40eaa029a1576cd0cd32d7da652d01824077bcf175d7f9540522f38a815aa0e2267588d9ddc6ab5188e45decb68c93091a3607c0d8f158387e0e152bb4a8da4e66fc3c6fde1fb8f4d00f03885b7822a8587abd72c36d10c77e1c7222d24e2bf1992a17c07d586540a0ae2631687cb9197a655fb66690c3b0a0de8808945ba66ffa1e60e0d9623d067fc6f8a233ab53332478d538597fd798f0abfcc97182ff22249f95bce4a07d9f410ae919fd3e0d313a5b12c03f58de66ff5d211e25c791c108ff82ade5be2d59cdb15c6a4759dca915ddf3c07bda00b13018bdb95caea0bf170a15b6cf53a230ef717e1c90233735b9693379e7ef711a367ce42fd7c3ffe25496789342517332a68350a46a3a8da15bfbb63c45f8dc7c5d25db7ab473da177398443857e81bb58d9aa6d97e0bc685e1b40a0704c330e1c0850b9e799207be79508f927fcd5df193b929e0aad5a426990f7c19c50c50427c66a73347fc0937f091c98668f1ece95fa029dcce72977d51a836b6d7e5c93084968ffbca70619eee8700b1a9cc5056b5485ae3d5440b4711b8600fd10fd814cadde2ed11cc6b241464a002fb06ade3ceb7e89fb74462c9abdeb3d88eb9e57eb4f9abbabd23fea5f970417a7fa8a0e78f96b233ec75c6ff89c0068dac52bbafbdc1636f8156a1681acc405b52c65960ad32bac32189c074390c11385dec2b6bad34e95de5e848845adab92a7edf2e60f3c70fda609cb76662a4b98b187b93a739bbe139054b09f5488428b2c8b462e8f5cea5df40290f2dab5ed51cf9e719688ecec4ab1c72b8497efa1746d1bc9b3dff2dabfcb1092f1856f17c2a9a7c37656eb3ec485ffdb0f51149391d6131dd1d8554310c60598e49afad834f5e5255f21c432abb377f54cdf2ea82148d73475214e28346785d797bc4e657d9a2f1f4ce54da741f8caf8262335e284e2f8a04a823de564e553474c39ec1e763700bce1bf030eacaedd345fbe3c3af2120f3fa962ceb2b1427663d791b5936a80b336941c6079f468f92d5c10deab0dfefe9593b76b673a71ad499c5d0fff4a9db2a5f5a0228bcbc884052f973deb905d8cb7b6c66865ee69bf31982ef6d9ae8834d361dce14d535a2025db065f5429f3945d5615886163892e1e41fd34c44949cd97592f1a378027de0e81637c11594609c1808da0cdb64de43a871b2b2640f2642d6c1aae34d83b0b0eb73aedf94ce7c1daeddf8cf684672edaf1ce0c7757f163dae3a4350cef5803a60f1e1f3d5eb277a17d38cc32ca8b6fdf536720ce186e7be6507d720810ce8801be2cc5488c7a6f0e398878ebb2ee530d62b61bf67fd4a7fdc811ecb119e4a6e7c6555685850656cf52dbc2a1da93d8550a7941a8a7716fa348f2cbcd6f58489051bf01c0ad0745b8a1e9a10fb748a9ae9f7897dfa81efc7fe240959a3857385f8be3a8102efb0791e1e01e539b370b8ea57d3b7b747bfce3a206612410c0a9aa9130320d80a912434c5a47048c1ab6901e7806c72fef1f4f59322bbf5a79f444a0eec2397a76ae63a22c5bc76a98c4e65212258f963709c07c54dc36ac15d16d7f34c6becd2de54a3ca98babdbe1068275e18585abd3a1fb4e889ea087d918ce2e791098a3e337926a408e9301f2e8f681c50b700cfc240d2a692516e491b7f4774309953b34372fc5425832d4206079872e4387f2343de66525c63c71b1c9625e7649adcc92f279d51d55fc771f7c8b81c02e8a7a6b2bb6f0170d6e5552882434382163f07ea5e4c5971bff35f530e04ca0247f5bdd27929eee90e2078141cfd2d45a1cc2a1bf47012025fa808b9e849978011e482fb7e851e5efcb02796b6a4ce2b72e8e83bba54670b912668723803b", 0x2000, &(0x7f0000000dc0)={&(0x7f00000002c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0xb, 0x0, 0x2, 0x0, 0x5d6, 0xfffffff8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='system.posix_acl_access\x00', &(0x7f0000000780)=ANY=[@ANYBLOB], 0x4, 0x1) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r2, 0xc01864cd, &(0x7f0000000580)={0x0, 0x0}) r3 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000000)={0xa, @pix_mp={0x9, 0x1, 0x32315659, 0x4, 0x1, [{0x400, 0x10}, {0x5, 0xc}, {0x2, 0x3}, {0x2, 0x3532}, {0x7fff, 0x7}, {0x9, 0xa}, {0x2, 0x1000}, {0x7, 0x401}], 0x0, 0x63, 0x1, 0x0, 0x7}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 3m20.327066927s ago: executing program 4 (id=1086): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0, 0x0, 0x6f2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c757466383d302c636865636b3d7374726963742c646973636172642c757466383d312c757466383d312c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c757466383d312c00ef5c3556"], 0xfd, 0x2a8, &(0x7f0000000280)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FITRIM(r1, 0xc0185879, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r6, 0x4068aea3, &(0x7f0000000000)={0xc0, 0x0, 0x1000}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000000000000014d564b0000000001"]) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000140)=[{0x20, 0xf2, 0x0, 0xfffff038}, {0x40, 0x0, 0x0, 0x67a}, {0x6, 0x27, 0x0, 0x80}]}, 0x10) sendmmsg(r3, &(0x7f0000001c00), 0x400000000000159, 0x40840) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\x00\x00\x00\x00\xd4\xa2\x88\x00\xd1l,'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r8, &(0x7f00000000c0)=""/4096, 0x1000) getdents(r8, 0x0, 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000080)={0x0, 0x8bb5, 0x1, 0x7ffc, 0x8040024e}, &(0x7f0000000140), &(0x7f0000000100)) 3m19.63942264s ago: executing program 4 (id=1087): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000240)={[{@iocharset={'iocharset', 0x3d, 'cp1255'}}, {@gid}, {@gid}, {@shortad}, {@uid}, {}, {@noadinicb}, {@anchor={'anchor', 0x3d, 0x4}}, {@noadinicb}]}, 0x1, 0xc32, &(0x7f0000000e00)="$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") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) link(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000300)='./file1\x00') truncate(&(0x7f0000000040)='./file1\x00', 0x7fff) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1c0002, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x3032}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) mount(0x0, 0x0, 0x0, 0x800000, 0x0) sendmsg$xdp(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = inotify_init() openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/../file0\x00', 0x602000, 0x18) readv(r2, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x18) writev(r0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) socket(0x14, 0x2, 0x4) r3 = open(&(0x7f0000000340)='./file1\x00', 0x145142, 0x0) sendfile(r3, r3, 0x0, 0x800000009) 3m19.230637362s ago: executing program 4 (id=1089): r0 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x100, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) read$msr(r0, &(0x7f00000022c0)=""/4093, 0xffd) bpf$MAP_CREATE(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) mlock(&(0x7f000029e000/0x2000)=nil, 0x2000) munlockall() mincore(&(0x7f0000608000/0x4000)=nil, 0x4000, &(0x7f00000000c0)=""/66) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r5, 0x8935, &(0x7f0000000080)={'veth0_vlan\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) socket$nl_xfrm(0x10, 0x3, 0x6) 3m17.244656492s ago: executing program 4 (id=1091): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000240)=0x3) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='projid_map\x00') writev(r6, &(0x7f0000000240)=[{&(0x7f0000000080)='=', 0x1}], 0x1) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000380)={0xfffffffffffffff7, 0x9, 0x6, 0x0, 0x0, [{{r4}, 0x5}, {{r4}, 0x7ff}, {{}, 0xeab}, {{r3}, 0x1}, {{}, 0x5}, {{}, 0x6}]}) fcntl$dupfd(r2, 0x406, 0xffffffffffffffff) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000000)) read$dsp(r5, &(0x7f0000000300)=""/79, 0x4f) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), 0x4) getsockname$unix(0xffffffffffffffff, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x6, 0xfffffffffffffffd, 0x9, 0x40, 0x2, 0xd, 0x300}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x5, 0x7, 0xffffffffffffff22, 0x2, 0x5, 0x8}, 0x0, 0x0) 2m59.351470442s ago: executing program 36 (id=1091): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000240)=0x3) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='projid_map\x00') writev(r6, &(0x7f0000000240)=[{&(0x7f0000000080)='=', 0x1}], 0x1) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000380)={0xfffffffffffffff7, 0x9, 0x6, 0x0, 0x0, [{{r4}, 0x5}, {{r4}, 0x7ff}, {{}, 0xeab}, {{r3}, 0x1}, {{}, 0x5}, {{}, 0x6}]}) fcntl$dupfd(r2, 0x406, 0xffffffffffffffff) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000000)) read$dsp(r5, &(0x7f0000000300)=""/79, 0x4f) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), 0x4) getsockname$unix(0xffffffffffffffff, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x6, 0xfffffffffffffffd, 0x9, 0x40, 0x2, 0xd, 0x300}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x5, 0x7, 0xffffffffffffff22, 0x2, 0x5, 0x8}, 0x0, 0x0) 9.492280644s ago: executing program 5 (id=1416): syz_mount_image$cramfs(&(0x7f0000000240), &(0x7f00000006c0)='./file1\x00', 0x8080, &(0x7f0000000c40)=ANY=[@ANYRES32=0x0, @ANYBLOB="961335493e171b87c5049661bc7a9dea85b0b96318f3a46c58525ebc3d0eb9ce96ac44b1d9a749f3ab7e759eff20dc0185dafc139ec785c31ae931023ad12b85c435475f8f724c4ee1329bd7bb7bb9e041f690b5cc745f75f91812f706841d08affa58f76342d7042588429261122e77ffb7828fa3d7ff668389ecdf6b9325ad15bc18a8f91df650262caa1ba865c2c41df8ea0ebfa761195cac8427b2bb312c0fa051cda8c0dd0328b36624744332fe1c7211f5565e2068fd28b30a36962cb2dec9ae6c9bed13a01ed3d029661f9550fabf581952c0b5c28f26c0fa94ac0bb7eed7642f514ce5c6b7c71813fd", @ANYBLOB="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", @ANYRESDEC, @ANYRESDEC], 0xfe, 0x14f, &(0x7f0000000ac0)="$eJzszjFLclEcx/Hf4d5HfSqToMCCTGjokph2w5qiNBKE7ELh0lJgNxIUI6Gcwoi2hqDVwQqaxLdgWYulEPYmWpwdi+M1Imhp/32Wy/mec/7nri42NXiBExe6VrKZg0MzlzN3vRtGPLr5Xq2GZbcB6PzYt87fh4F9+VWB9ikg86MT2EulzZlkNi3X7TCgAYj0Y1n2oGxDQJ9sw9bZWVj3tUmgNmI1/Zc212tjKhBxWU3O+7gGpuQ8O4BU2rRbv4d80VcpP6836jH/9N24gvOYb+Jfb++re8wLPTp6O+BWkDCfbhAR8t5boO5/DVTKrWYjvmYsAdD1eQEUgqGW8dKIhQqXULftR8CWAAS+37HB7VETDpwJ4Ko7q/0gnABqpY6RGVwo9d53HCteQOSLyR1Frv8DigYBIiIiIiIiIiIiIiIiIiKiv/oMAAD//2BhXwk=") open(&(0x7f0000000340)='./file3\x00', 0x0, 0xa2) creat(&(0x7f0000000240)='./file2\x00', 0xd) 9.234266972s ago: executing program 5 (id=1418): syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000009740)='./file0\x00', 0x4000000, &(0x7f0000000280)={[{@filestreams}, {@noquota}, {@gqnoenforce}, {@pquota}, {@dax}, {@dax}, {@gqnoenforce}, {@usrquota}, {@largeio}]}, 0x1, 0x97ef, &(0x7f0000012f40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x8040587f, &(0x7f0000000000)={0x1, 0x2, 0x3, 0x100000000}) 6.569278837s ago: executing program 5 (id=1431): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0xa048c5, &(0x7f0000000340)={[{@utf8no}, {@shortname_winnt}, {@rodir}, {@fat=@discard}, {@utf8}, {@shortname_winnt}, {@fat=@tz_utc}, {@numtail}, {@fat=@dos1xfloppy}, {@utf8}, {@fat=@discard}, {@fat=@flush}]}, 0x0, 0x29d, &(0x7f0000000580)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2100) 6.519682616s ago: executing program 3 (id=1432): r0 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000900)={0x1c, &(0x7f00000007c0)={0x20, 0xb, 0x1a, "717008a45f805ca3a9b54fd92ffe2547d52f4ced3f454ab49ada"}, 0x0, 0x0}) 6.445768928s ago: executing program 7 (id=1434): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x30004081) recvmsg(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000a80)=""/20, 0x14}], 0x1}, 0x0) 5.969346093s ago: executing program 7 (id=1437): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$cont(0x9, r0, 0x9, 0xfffffffffffffff9) 5.530140194s ago: executing program 7 (id=1440): syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @random="0020e0ffff07", @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @dev, {[@ssrr={0x89, 0x7, 0x6f, [@broadcast]}, @timestamp={0x44, 0x4, 0xf1, 0x3}, @cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0x39cb, 0x4) shutdown(r2, 0x1) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r5 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f0000000580)={&(0x7f0000000100)=@tipc=@id, 0x80, 0x0, 0x0, &(0x7f0000000340)=ANY=[], 0x220}, 0x0) recvmsg$kcm(r5, &(0x7f0000001740)={0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000005c0)=""/4096, 0x1000}], 0x1}, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0x11) ioctl$TIOCVHANGUP(r4, 0x5437, 0x2) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x7}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x618b37b523276f6c}, 0x20000000) r6 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r6, 0x6b, 0x3, 0x0, &(0x7f0000000040)) 5.455604581s ago: executing program 5 (id=1441): r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./bus\x00', 0x0, &(0x7f0000001600), 0x0, 0x559e, &(0x7f0000005680)="$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") ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0xc4089434, &(0x7f0000000040)={0x1}) 4.271363771s ago: executing program 7 (id=1443): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000030500000000fddbdf2500004000", @ANYRES32=0x0, @ANYBLOB="153f000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) 3.546995369s ago: executing program 3 (id=1447): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x44, 0x20, 0x1, 0x0, 0x0, {0xa, 0x20, 0x40, 0x0, 0x0, 0x0, 0x0, 0x7}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x44}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) 3.527127155s ago: executing program 7 (id=1448): socket(0x10, 0x3, 0x0) userfaultfd(0x1) sched_setaffinity(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r0 = userfaultfd(0x801) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket(0x10, 0x3, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000006c0)={{{@in6=@remote, @in=@dev={0xac, 0x14, 0x14, 0xfc}, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x80}, {0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x200000000000000}, {}, 0x0, 0x6e6bbd, 0x1, 0x0, 0x3}, {{@in6=@rand_addr=' \x01\x00', 0x0, 0x32}, 0x0, @in=@loopback, 0x0, 0x0, 0x2}}, 0xe8) close(r6) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000005200210900000000001cd2001c"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x44) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@mb_optimize_scan}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x4}}]}, 0x1, 0x50f, &(0x7f0000000140)="$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") r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r7, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x6, 0x7fffffff}) syz_io_uring_setup(0x50d0, &(0x7f0000000000)={0x0, 0xfffffffd, 0x4, 0x83, 0x107}, &(0x7f0000000100), &(0x7f0000ff4000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x1000088}, 0x0) 3.151595133s ago: executing program 3 (id=1449): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 3.049065407s ago: executing program 5 (id=1450): syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1210082, &(0x7f00000004c0)={[{@codepage={'codepage', 0x3d, 'cp932'}}, {@creator={'creator', 0x3d, "a4b5bda4"}}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@creator={'creator', 0x3d, "e5cb853d"}}, {@uid}, {@part={'part', 0x3d, 0xe78}}, {@umask={'umask', 0x3d, 0x4}}]}, 0x7, 0x324, &(0x7f0000000140)="$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") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) 2.211134833s ago: executing program 7 (id=1453): r0 = openat$comedi(0xffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000540)={'pcl711\x00', [0x2f00, 0x5, 0xd09d, 0xfff7ffff, 0x6, 0xfffffffe, 0x20000004, 0x6, 0xffe, 0x9, 0x8001, 0x1001, 0xb, 0x1, 0xfffc, 0x4, 0x8, 0x40000009, 0x8, 0x4, 0xf4, 0xffffffff, 0x800, 0xe2db, 0x2, 0xd, 0x7, 0x5, 0x4, 0x80000005, 0x70f]}) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92ff, 0x0, 0x0, 0x4}) 2.140738443s ago: executing program 3 (id=1454): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x18}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1a}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xa, 0x9}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.746289282s ago: executing program 9 (id=1457): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0, 0x0, 0x9}, 0x18) getpgid(0x0) 1.663588662s ago: executing program 5 (id=1458): syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000001000)=ANY=[], 0xfd, 0x61c6, &(0x7f000000ac00)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) chdir(&(0x7f0000000140)='./file0\x00') 1.663433419s ago: executing program 3 (id=1459): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000040)={0x6, 'geneve1\x00', {0x2}, 0x2}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000000)={0x0, 'team_slave_0\x00', {}, 0xfff}) 1.407744648s ago: executing program 9 (id=1461): syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800010, &(0x7f0000001000)={[{@uid_forget}, {@mode={'mode', 0x3d, 0xbe}}, {@volume={'volume', 0x3d, 0x4}}, {@session}, {@gid}, {@utf8}, {@adinicb}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {@unhide}, {}, {@uid_ignore}]}, 0x1, 0xc48, &(0x7f00000013c0)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x1843, 0x0) 1.369906492s ago: executing program 3 (id=1462): syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000) writev(r0, &(0x7f0000003480)=[{&(0x7f00000021c0)="81", 0x1}], 0x1) 1.183665928s ago: executing program 8 (id=1463): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) sendmsg$NFC_CMD_ACTIVATE_TARGET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x24, r1, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 943.654474ms ago: executing program 9 (id=1464): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), r1}}, 0x18) 896.700016ms ago: executing program 8 (id=1465): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000009c0)={0x28, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x80) 607.462971ms ago: executing program 9 (id=1466): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r1, 0x111, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x48891}, 0x8000) 607.194858ms ago: executing program 8 (id=1467): mprotect(&(0x7f0000001000/0x400000)=nil, 0x400000, 0x4) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000) 432.251636ms ago: executing program 8 (id=1468): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0), 0x82000, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000026c0)=0x3d) 393.360802ms ago: executing program 9 (id=1469): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000002000010027bd7000ffdbdf250a00004000000007060000000c001400", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0d0016005e"], 0x30}, 0x1, 0x0, 0x0, 0x24048860}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) 170.812418ms ago: executing program 8 (id=1470): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@RTM_GETMDB={0x18, 0x56, 0xd23}, 0x18}}, 0x4040000) recvfrom$unix(r0, 0x0, 0x0, 0x40000010, 0x0, 0x0) 48.556183ms ago: executing program 8 (id=1471): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x28bd, 0x75, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0xfc, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x17}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x5, "17321748"}]}}, 0x0}, 0x0) 0s ago: executing program 9 (id=1472): syz_usb_connect(0x5, 0x27, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xb7, 0x5c, 0x7f, 0x40, 0x547, 0x201, 0x1164, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa2, 0xcd, 0xd2}}]}}]}}, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000240)={&(0x7f0000000200)=[{0x7, 0x1000, 0x5, &(0x7f0000000400)="d67e66095b"}, {0x9, 0x2001, 0x7, &(0x7f0000000380)="1eb76a17bbeaec"}], 0x2}) kernel console output (not intermixed with test programs): 588.359136][T10018] Call Trace: [ 588.359145][T10018] [ 588.359155][T10018] dump_stack_lvl+0x189/0x250 [ 588.359195][T10018] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 588.359226][T10018] ? __pfx_dump_stack_lvl+0x10/0x10 [ 588.359258][T10018] ? __pfx__printk+0x10/0x10 [ 588.359283][T10018] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 588.359315][T10018] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 588.359364][T10018] warn_alloc+0x214/0x310 [ 588.359399][T10018] ? __pfx_warn_alloc+0x10/0x10 [ 588.359435][T10018] ? kasan_save_track+0x4f/0x80 [ 588.359461][T10018] ? __pfx___schedule+0x10/0x10 [ 588.359490][T10018] ? xskq_create+0x56/0x170 [ 588.359518][T10018] ? xsk_setsockopt+0x4dc/0x8d0 [ 588.359551][T10018] __vmalloc_node_range_noprof+0x134/0x16a0 [ 588.359587][T10018] ? rcu_is_watching+0x15/0xb0 [ 588.359609][T10018] ? trace_irq_disable+0x37/0x110 [ 588.359631][T10018] ? preempt_schedule_irq+0xde/0x150 [ 588.359662][T10018] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 588.359699][T10018] ? irqentry_exit+0x5ba/0x640 [ 588.359731][T10018] ? lockdep_hardirqs_on+0x9c/0x150 [ 588.359766][T10018] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 588.359816][T10018] vmalloc_user_noprof+0xad/0xf0 [ 588.359842][T10018] ? xskq_create+0xbf/0x170 [ 588.359873][T10018] xskq_create+0xbf/0x170 [ 588.359904][T10018] xsk_init_queue+0xb0/0x110 [ 588.359936][T10018] xsk_setsockopt+0x4dc/0x8d0 [ 588.359966][T10018] ? __pfx_xsk_setsockopt+0x10/0x10 [ 588.360003][T10018] ? __pfx_xsk_setsockopt+0x10/0x10 [ 588.360028][T10018] ? __pfx_xsk_setsockopt+0x10/0x10 [ 588.360055][T10018] ? do_sock_setsockopt+0x15e/0x1b0 [ 588.360084][T10018] ? __pfx_xsk_setsockopt+0x10/0x10 [ 588.360109][T10018] do_sock_setsockopt+0x17c/0x1b0 [ 588.360140][T10018] __x64_sys_setsockopt+0x13f/0x1b0 [ 588.360174][T10018] do_syscall_64+0xfa/0xfa0 [ 588.360208][T10018] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.360229][T10018] ? clear_bhb_loop+0x60/0xb0 [ 588.360255][T10018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.360276][T10018] RIP: 0033:0x7f69a418f6c9 [ 588.360296][T10018] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 588.360315][T10018] RSP: 002b:00007f69a5065038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 588.360346][T10018] RAX: ffffffffffffffda RBX: 00007f69a43e6180 RCX: 00007f69a418f6c9 [ 588.360362][T10018] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 588.360375][T10018] RBP: 00007f69a4211f91 R08: 0000000000000004 R09: 0000000000000000 [ 588.360389][T10018] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 588.360403][T10018] R13: 00007f69a43e6218 R14: 00007f69a43e6180 R15: 00007ffcea827a98 [ 588.360440][T10018] [ 588.649229][T10018] Mem-Info: [ 588.652617][T10018] active_anon:58974 inactive_anon:0 isolated_anon:0 [ 588.652617][T10018] active_file:21232 inactive_file:40516 isolated_file:0 [ 588.652617][T10018] unevictable:17163 dirty:244 writeback:0 [ 588.652617][T10018] slab_reclaimable:11501 slab_unreclaimable:100497 [ 588.652617][T10018] mapped:43786 shmem:54144 pagetables:1308 [ 588.652617][T10018] sec_pagetables:0 bounce:0 [ 588.652617][T10018] kernel_misc_reclaimable:0 [ 588.652617][T10018] free:1224186 free_pcp:17595 free_cma:0 [ 588.699092][ T9782] Bluetooth: hci4: command tx timeout [ 588.705689][T10018] Node 0 active_anon:235904kB inactive_anon:0kB active_file:84928kB inactive_file:161864kB unevictable:67116kB isolated(anon):0kB isolated(file):0kB mapped:175156kB dirty:976kB writeback:0kB shmem:215136kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13260kB pagetables:5120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 588.737863][T10018] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 588.768885][T10018] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 588.798951][T10018] lowmem_reserve[]: 0 2493 2494 2494 2494 [ 588.804933][T10018] Node 0 DMA32 free:979236kB boost:0kB min:34216kB low:42768kB high:51320kB reserved_highatomic:0KB free_highatomic:0KB active_anon:235904kB inactive_anon:0kB active_file:84928kB inactive_file:161864kB unevictable:67116kB writepending:976kB zspages:0kB present:3129332kB managed:2553372kB mlocked:0kB bounce:0kB free_pcp:52656kB local_pcp:28496kB free_cma:0kB [ 588.838451][T10018] lowmem_reserve[]: 0 0 1 1 1 [ 588.843186][T10018] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1132kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 588.873149][T10018] lowmem_reserve[]: 0 0 0 0 0 [ 588.878952][T10018] Node 1 Normal free:3902128kB boost:0kB min:55668kB low:69584kB high:83500kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17708kB local_pcp:10832kB free_cma:0kB [ 588.911400][T10018] lowmem_reserve[]: 0 0 0 0 0 [ 588.916327][T10018] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 588.929251][T10018] Node 0 DMA32: 1673*4kB (UME) 480*8kB (UE) 306*16kB (U) 81*32kB (UE) 113*64kB (UE) 105*128kB (UM) 112*256kB (UME) 75*512kB (UME) 37*1024kB (UME) 22*2048kB (UM) 193*4096kB (M) = 979236kB [ 588.948068][T10018] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 588.962198][T10018] Node 1 Normal: 170*4kB (UE) 45*8kB (UME) 44*16kB (UME) 75*32kB (UME) 22*64kB (UME) 6*128kB (UME) 4*256kB (UME) 3*512kB (UM) 2*1024kB (ME) 2*2048kB (UE) 949*4096kB (M) = 3902128kB [ 588.980464][T10018] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 588.991140][T10018] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 589.000508][T10018] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 589.010113][T10018] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 589.019496][T10018] 132297 total pagecache pages [ 589.024266][T10018] 0 pages in swap cache [ 589.028422][T10018] Free swap = 124996kB [ 589.032725][T10018] Total swap = 124996kB [ 589.036887][T10018] 2097051 pages RAM [ 589.040749][T10018] 0 pages HighMem/MovableOnly [ 589.045422][T10018] 426810 pages reserved [ 589.049597][T10018] 0 pages cma reserved [ 590.492791][ T9782] Bluetooth: hci0: command tx timeout [ 590.628007][T10030] erofs (device nbd5): cannot find valid erofs superblock [ 591.891748][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 591.920693][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 592.493611][ T36] hsr_slave_0: left promiscuous mode [ 592.503563][ T36] hsr_slave_1: left promiscuous mode [ 592.767681][ T9782] Bluetooth: hci0: command tx timeout [ 593.463483][ T36] veth1_macvtap: left promiscuous mode [ 593.496919][ T36] veth0_macvtap: left promiscuous mode [ 593.517784][ T36] veth1_vlan: left promiscuous mode [ 594.829112][ T36] team0 (unregistering): Port device vlan0 removed [ 595.010186][ T9782] Bluetooth: hci0: command tx timeout [ 597.259656][T10063] loop5: detected capacity change from 0 to 512 [ 597.303856][T10063] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 598.638350][T10065] loop5: detected capacity change from 0 to 40427 [ 598.711711][T10065] F2FS-fs (loop5): invalid crc value [ 598.803299][T10065] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 598.838559][T10065] F2FS-fs (loop5): Start checkpoint disabled! [ 598.867362][T10065] F2FS-fs (loop5): f2fs_disable_checkpoint() finish, err:0 [ 598.898388][T10065] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 601.481740][ T9960] chnl_net:caif_netlink_parms(): no params data found [ 601.976943][T10098] vivid-001: disconnect [ 602.038941][ T9998] chnl_net:caif_netlink_parms(): no params data found [ 602.241001][ T9960] bridge0: port 1(bridge_slave_0) entered blocking state [ 602.259887][ T9960] bridge0: port 1(bridge_slave_0) entered disabled state [ 602.267327][ T9960] bridge_slave_0: entered allmulticast mode [ 602.655689][ T9960] bridge_slave_0: entered promiscuous mode [ 602.671569][ T36] IPVS: stop unused estimator thread 0... [ 602.679167][ T9960] bridge0: port 2(bridge_slave_1) entered blocking state [ 602.688469][ T9960] bridge0: port 2(bridge_slave_1) entered disabled state [ 602.742344][ T9960] bridge_slave_1: entered allmulticast mode [ 602.819760][ T9960] bridge_slave_1: entered promiscuous mode [ 603.255146][T10093] vivid-001: reconnect [ 604.438243][ T9960] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 604.862914][ T9340] kworker/u8:24: attempt to access beyond end of device [ 604.862914][ T9340] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 604.897079][ T9960] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 605.729699][ T9340] CPU: 0 UID: 0 PID: 9340 Comm: kworker/u8:24 Not tainted syzkaller #0 PREEMPT(full) [ 605.729728][ T9340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 605.729743][ T9340] Workqueue: writeback wb_workfn (flush-7:5) [ 605.729785][ T9340] Call Trace: [ 605.729794][ T9340] [ 605.729803][ T9340] dump_stack_lvl+0x189/0x250 [ 605.729842][ T9340] ? __pfx_dump_stack_lvl+0x10/0x10 [ 605.729874][ T9340] ? __pfx_queue_work_on+0x10/0x10 [ 605.729902][ T9340] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 605.729932][ T9340] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 605.729974][ T9340] f2fs_handle_critical_error+0x37c/0x540 [ 605.730006][ T9340] f2fs_write_end_io+0x94b/0xc10 [ 605.730054][ T9340] __submit_merged_bio+0x256/0x6a0 [ 605.730085][ T9340] __submit_merged_write_cond+0x255/0x530 [ 605.730116][ T9340] f2fs_write_data_pages+0x2756/0x3290 [ 605.730180][ T9340] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 605.730226][ T9340] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 605.730293][ T9340] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 605.730317][ T9340] ? register_lock_class+0x51/0x320 [ 605.730356][ T9340] ? trace_f2fs_writepages+0x7f/0x200 [ 605.730382][ T9340] ? f2fs_write_node_pages+0x478/0x6e0 [ 605.730429][ T9340] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 605.730457][ T9340] do_writepages+0x32e/0x550 [ 605.730484][ T9340] ? reacquire_held_locks+0x127/0x1d0 [ 605.730515][ T9340] ? writeback_sb_inodes+0x3bc/0x1950 [ 605.730551][ T9340] __writeback_single_inode+0x133/0x12f0 [ 605.730590][ T9340] writeback_sb_inodes+0x984/0x1950 [ 605.730616][ T9340] ? lockdep_hardirqs_on+0x9c/0x150 [ 605.730679][ T9340] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 605.730753][ T9340] ? rcu_is_watching+0x15/0xb0 [ 605.730789][ T9340] wb_writeback+0x42b/0xb10 [ 605.730826][ T9340] ? queue_io+0x361/0x590 [ 605.730857][ T9340] ? __pfx_wb_writeback+0x10/0x10 [ 605.730894][ T9340] ? _raw_spin_unlock_irq+0x23/0x50 [ 605.730928][ T9340] wb_workfn+0x3f9/0xef0 [ 605.730969][ T9340] ? __pfx_wb_workfn+0x10/0x10 [ 605.730997][ T9340] ? __lock_acquire+0xab9/0xd20 [ 605.731037][ T9340] ? process_one_work+0x868/0x15e0 [ 605.731071][ T9340] ? _raw_spin_unlock_irq+0x23/0x50 [ 605.731103][ T9340] ? process_one_work+0x868/0x15e0 [ 605.731129][ T9340] process_one_work+0x93a/0x15e0 [ 605.731154][ T9340] ? __lock_acquire+0xab9/0xd20 [ 605.731205][ T9340] ? __pfx_process_one_work+0x10/0x10 [ 605.731242][ T9340] ? assign_work+0x3a1/0x410 [ 605.731275][ T9340] worker_thread+0x9b0/0xee0 [ 605.731356][ T9340] kthread+0x711/0x8a0 [ 605.731381][ T9340] ? __pfx_worker_thread+0x10/0x10 [ 605.731409][ T9340] ? __pfx_kthread+0x10/0x10 [ 605.731432][ T9340] ? _raw_spin_unlock_irq+0x23/0x50 [ 605.731459][ T9340] ? lockdep_hardirqs_on+0x9c/0x150 [ 605.731487][ T9340] ? __pfx_kthread+0x10/0x10 [ 605.731508][ T9340] ret_from_fork+0x599/0xb30 [ 605.731539][ T9340] ? __pfx_ret_from_fork+0x10/0x10 [ 605.731578][ T9340] ? __switch_to_asm+0x39/0x70 [ 605.731597][ T9340] ? __switch_to_asm+0x33/0x70 [ 605.731616][ T9340] ? __pfx_kthread+0x10/0x10 [ 605.731637][ T9340] ret_from_fork_asm+0x1a/0x30 [ 605.731677][ T9340] [ 605.731748][ T9340] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 606.598843][T10136] vivid-007: ================= START STATUS ================= [ 606.607607][T10136] vivid-007: Enable Output Cropping: true [ 606.621031][T10136] vivid-007: Enable Output Composing: true [ 606.651301][T10136] vivid-007: Enable Output Scaler: true [ 606.657466][T10136] vivid-007: Tx RGB Quantization Range: Automatic [ 606.664116][T10136] vivid-007: Transmit Mode: HDMI [ 606.669252][T10136] vivid-007: Hotplug Present: 0x00000000 [ 606.675212][T10136] vivid-007: RxSense Present: 0x00000000 [ 606.681190][T10136] vivid-007: EDID Present: 0x00000000 [ 606.687028][T10136] vivid-007: ================== END STATUS ================== [ 607.128146][ T9960] team0: Port device team_slave_0 added [ 607.136993][T10134] loop3: detected capacity change from 0 to 8 [ 607.143862][T10134] squashfs: Unknown parameter 'euid>00000000000000000000' [ 607.223242][ T9960] team0: Port device team_slave_1 added [ 607.513324][ T9998] bridge0: port 1(bridge_slave_0) entered blocking state [ 607.533380][ T9998] bridge0: port 1(bridge_slave_0) entered disabled state [ 607.567415][ T9998] bridge_slave_0: entered allmulticast mode [ 607.588764][ T9998] bridge_slave_0: entered promiscuous mode [ 609.057640][ T9998] bridge0: port 2(bridge_slave_1) entered blocking state [ 609.145185][ T9998] bridge0: port 2(bridge_slave_1) entered disabled state [ 609.165075][ T9998] bridge_slave_1: entered allmulticast mode [ 609.215664][ T9998] bridge_slave_1: entered promiscuous mode [ 609.420650][T10146] netlink: 'syz.3.1053': attribute type 20 has an invalid length. [ 609.449240][T10146] IPv6: NLM_F_CREATE should be specified when creating new route [ 609.643615][T10146] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 609.651878][T10146] IPv6: NLM_F_CREATE should be set when creating new route [ 609.925264][T10166] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1056'. [ 610.208139][ T7275] IPVS: starting estimator thread 0... [ 610.330008][T10167] IPVS: using max 26 ests per chain, 62400 per kthread [ 611.165481][ T9960] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 611.172499][ T9960] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 611.493278][ T9960] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 611.524464][ T9998] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 612.291236][ T9998] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 612.380309][T10176] binder: 10174:10176 ioctl c0306201 0 returned -14 [ 612.409153][T10183] overlayfs: failed to clone upperpath [ 612.488977][ T9960] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 612.503420][ T9960] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 612.754558][ T9960] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 613.406160][T10192] loop5: detected capacity change from 0 to 512 [ 613.500374][ T9998] team0: Port device team_slave_0 added [ 613.655990][T10192] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 613.699431][T10192] ext4 filesystem being mounted at /55/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 613.768820][T10201] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1063'. [ 613.780276][ T9998] team0: Port device team_slave_1 added [ 614.020671][ T9960] hsr_slave_0: entered promiscuous mode [ 614.031709][T10203] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1063'. [ 614.110515][ T9960] hsr_slave_1: entered promiscuous mode [ 614.452712][ T30] audit: type=1800 audit(1763538349.401:45): pid=10208 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1062" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 614.480036][ T9960] debugfs: 'hsr0' already exists in 'hsr' [ 614.506611][ T9960] Cannot create hsr debugfs directory [ 614.895350][T10216] comedi comedi0: comedi_bond: 3:0 attached, 24 channels from 1 devices [ 614.932724][ T9998] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 614.959499][ T9998] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 614.988749][ T9998] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 615.231216][ T9998] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 615.325549][ T9998] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 615.365404][ T9998] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 615.819349][ T30] audit: type=1326 audit(1763538350.665:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10224 comm="syz.3.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69a418f6c9 code=0x7ffc0000 [ 616.007887][ T30] audit: type=1326 audit(1763538350.665:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10224 comm="syz.3.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69a418f6c9 code=0x7ffc0000 [ 616.462085][ T30] audit: type=1326 audit(1763538350.684:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10224 comm="syz.3.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f69a418f6c9 code=0x7ffc0000 [ 616.499428][ T30] audit: type=1326 audit(1763538350.693:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10224 comm="syz.3.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69a418f6c9 code=0x7ffc0000 [ 616.526530][ T30] audit: type=1326 audit(1763538350.693:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10224 comm="syz.3.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69a418f6c9 code=0x7ffc0000 [ 616.575816][ T30] audit: type=1326 audit(1763538350.693:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10224 comm="syz.3.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f69a418f6c9 code=0x7ffc0000 [ 616.603451][ T30] audit: type=1326 audit(1763538350.693:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10224 comm="syz.3.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69a418f6c9 code=0x7ffc0000 [ 616.699747][ T30] audit: type=1326 audit(1763538350.693:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10224 comm="syz.3.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69a418f6c9 code=0x7ffc0000 [ 616.737545][ T9998] hsr_slave_0: entered promiscuous mode [ 616.752643][ T9998] hsr_slave_1: entered promiscuous mode [ 616.766822][ T9998] debugfs: 'hsr0' already exists in 'hsr' [ 616.772843][ T30] audit: type=1326 audit(1763538350.693:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10224 comm="syz.3.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f69a418f6c9 code=0x7ffc0000 [ 616.796011][ T9998] Cannot create hsr debugfs directory [ 617.592873][ T8941] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 617.655345][ T36] bridge_slave_1: left allmulticast mode [ 617.664202][ T36] bridge_slave_1: left promiscuous mode [ 617.672477][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 617.684714][ T36] bridge_slave_0: left allmulticast mode [ 617.693840][ T36] bridge_slave_0: left promiscuous mode [ 617.702099][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 617.715600][ T36] bridge_slave_1: left allmulticast mode [ 617.721902][ T36] bridge_slave_1: left promiscuous mode [ 617.733488][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 617.744741][ T36] bridge_slave_0: left allmulticast mode [ 617.750449][ T36] bridge_slave_0: left promiscuous mode [ 617.756785][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 617.961517][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 618.757445][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 618.773897][ T36] bond0 (unregistering): Released all slaves [ 619.959217][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 619.983021][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 620.009568][ T36] bond0 (unregistering): Released all slaves [ 620.262175][T10256] overlayfs: missing 'lowerdir' [ 620.373415][T10256] loop3: detected capacity change from 0 to 512 [ 620.388632][T10256] EXT4-fs: Ignoring removed oldalloc option [ 620.506317][T10256] EXT4-fs: Mount option(s) incompatible with ext2 [ 620.519126][ T36] hsr_slave_0: left promiscuous mode [ 620.597076][ T36] hsr_slave_1: left promiscuous mode [ 620.808578][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 621.684883][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 621.811873][T10269] exFAT-fs (loop5): unable to read boot sector [ 621.818409][T10269] exFAT-fs (loop5): failed to read boot sector [ 621.824637][T10269] exFAT-fs (loop5): failed to recognize exfat type [ 622.249930][ T36] hsr_slave_0: left promiscuous mode [ 622.269360][ T36] hsr_slave_1: left promiscuous mode [ 622.284588][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 622.313395][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 622.669559][ T36] team0 (unregistering): Port device team_slave_1 removed [ 622.790587][ T36] team0 (unregistering): Port device team_slave_0 removed [ 623.427126][ T36] team0 (unregistering): Port device team_slave_1 removed [ 623.463635][ T36] team0 (unregistering): Port device team_slave_0 removed [ 624.623745][T10291] sd 0:0:1:0: device reset [ 625.310122][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 625.310144][ T30] audit: type=1326 audit(1763538359.425:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10294 comm="syz.3.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69a418f6c9 code=0x7ffc0000 [ 625.424890][ T30] audit: type=1326 audit(1763538359.461:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10294 comm="syz.3.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f69a418f6c9 code=0x7ffc0000 [ 625.464857][ T30] audit: type=1326 audit(1763538359.471:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10294 comm="syz.3.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69a418f6c9 code=0x7ffc0000 [ 625.636018][ T30] audit: type=1326 audit(1763538359.480:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10294 comm="syz.3.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f69a418f6c9 code=0x7ffc0000 [ 625.759418][ T30] audit: type=1326 audit(1763538359.480:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10294 comm="syz.3.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69a418f6c9 code=0x7ffc0000 [ 625.864533][ T30] audit: type=1326 audit(1763538359.480:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10294 comm="syz.3.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f69a418f6c9 code=0x7ffc0000 [ 625.911107][ T9960] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 625.929634][ T30] audit: type=1326 audit(1763538359.480:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10294 comm="syz.3.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69a418f6c9 code=0x7ffc0000 [ 625.966794][ T30] audit: type=1326 audit(1763538359.480:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10294 comm="syz.3.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f69a418df10 code=0x7ffc0000 [ 625.995660][ T9960] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 626.004813][ T30] audit: type=1326 audit(1763538359.489:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10294 comm="syz.3.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69a418f6c9 code=0x7ffc0000 [ 626.083529][ T9960] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 626.133611][ T9960] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 626.160708][ T30] audit: type=1326 audit(1763538359.489:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10294 comm="syz.3.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f69a418f6c9 code=0x7ffc0000 [ 626.386621][T10319] fuse: Bad value for 'fd' [ 626.438054][ T9998] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 626.467319][ T9998] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 626.503116][ T9998] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 626.524008][ T9998] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 626.851797][ T9960] 8021q: adding VLAN 0 to HW filter on device bond0 [ 627.032634][ T9960] 8021q: adding VLAN 0 to HW filter on device team0 [ 627.054927][ T3014] bridge0: port 1(bridge_slave_0) entered blocking state [ 627.062305][ T3014] bridge0: port 1(bridge_slave_0) entered forwarding state [ 627.998519][ T6839] bridge0: port 2(bridge_slave_1) entered blocking state [ 628.005878][ T6839] bridge0: port 2(bridge_slave_1) entered forwarding state [ 628.068192][ T9960] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 628.078838][ T9960] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 628.173956][ T9998] 8021q: adding VLAN 0 to HW filter on device bond0 [ 629.288159][ T9998] 8021q: adding VLAN 0 to HW filter on device team0 [ 629.334516][ T268] bridge0: port 1(bridge_slave_0) entered blocking state [ 629.341818][ T268] bridge0: port 1(bridge_slave_0) entered forwarding state [ 629.390803][ T6473] bridge0: port 2(bridge_slave_1) entered blocking state [ 629.398189][ T6473] bridge0: port 2(bridge_slave_1) entered forwarding state [ 629.400453][T10348] loop5: detected capacity change from 0 to 1024 [ 629.414707][T10348] EXT4-fs: Ignoring removed i_version option [ 629.435697][T10348] EXT4-fs: inline encryption not supported [ 629.460975][T10348] EXT4-fs (loop5): Test dummy encryption mode enabled [ 629.518618][T10348] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 629.567960][ T9960] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 630.528739][ T8941] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 630.566103][T10350] netlink: 'syz.3.1083': attribute type 1 has an invalid length. [ 630.620279][ T9998] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 632.354420][ T9960] veth0_vlan: entered promiscuous mode [ 633.215151][ T9998] veth0_vlan: entered promiscuous mode [ 634.492967][ T9998] veth1_vlan: entered promiscuous mode [ 634.519443][ T9960] veth1_vlan: entered promiscuous mode [ 634.726675][T10409] loop5: detected capacity change from 0 to 2048 [ 634.736342][T10412] loop3: detected capacity change from 0 to 512 [ 634.743018][ T9998] veth0_macvtap: entered promiscuous mode [ 634.758196][T10409] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 634.791161][ T9960] veth0_macvtap: entered promiscuous mode [ 634.808626][T10412] EXT4-fs (loop3): blocks per group (95) and clusters per group (32768) inconsistent [ 634.840733][ T9998] veth1_macvtap: entered promiscuous mode [ 634.930066][ T9998] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 634.995997][ T9998] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 635.032414][ T9960] veth1_macvtap: entered promiscuous mode [ 636.189048][ T9960] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 636.442985][ T9074] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.494600][T10422] loop3: detected capacity change from 0 to 512 [ 636.518672][T10422] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 636.558144][ T9960] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 636.574881][ T9074] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.615201][T10422] EXT4-fs (loop3): 1 truncate cleaned up [ 636.615672][ T9074] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.646904][ T9074] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.655694][ T9074] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.658662][T10422] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 636.680382][ T9074] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.768523][ T9074] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.792789][ T9074] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.838976][ T3014] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 636.888314][ T3014] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 640.581304][ T5842] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 640.642601][ T3973] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 640.687211][ T3973] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 640.904449][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 640.983158][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 642.022235][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 642.058113][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 643.300378][T10464] SQUASHFS error: Failed to read block 0x0: -5 [ 645.234607][ T5153] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 645.261308][ T5153] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 645.281841][ T5153] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 645.289997][ T5153] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 645.325308][ T5153] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 645.549747][T10472] loop3: detected capacity change from 0 to 16 [ 645.568175][T10472] erofs (device loop3): mounted with root inode @ nid 36. [ 646.460833][T10481] netlink: 'syz.3.1098': attribute type 21 has an invalid length. [ 646.996720][T10477] loop5: detected capacity change from 0 to 32768 [ 647.007787][T10477] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1100 (10477) [ 647.032141][T10477] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 647.042484][T10477] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm [ 647.081582][T10481] netlink: 'syz.3.1098': attribute type 6 has an invalid length. [ 647.089416][T10481] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1098'. [ 647.258636][T10477] BTRFS info (device loop5): enabling ssd optimizations [ 647.267578][T10477] BTRFS info (device loop5): turning on async discard [ 647.274483][T10477] BTRFS info (device loop5): enabling free space tree [ 647.698771][ T9782] Bluetooth: hci2: command tx timeout [ 649.399615][ T1025] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.416220][ T8941] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 649.615132][T10508] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1102'. [ 649.625920][T10508] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1102'. [ 649.950945][ T9782] Bluetooth: hci2: command tx timeout [ 652.312563][ T9782] Bluetooth: hci2: command tx timeout [ 652.874235][ T1025] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.943315][ T5153] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 653.956973][ T1025] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.972965][ T5153] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 653.982635][ T5153] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 654.002903][ T5153] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 654.014153][ T5153] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 654.557638][ T5153] Bluetooth: hci2: command tx timeout [ 655.030429][ T1025] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.247744][T10536] loop8: detected capacity change from 0 to 32768 [ 655.399648][T10536] XFS (loop8): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 656.222676][T10536] XFS (loop8): Ending clean mount [ 656.291109][ T5153] Bluetooth: hci4: command tx timeout [ 656.507425][ T9998] XFS (loop8): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 656.613840][T10469] chnl_net:caif_netlink_parms(): no params data found [ 656.675261][T10576] loop3: detected capacity change from 0 to 1024 [ 657.554227][T10581] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 657.560817][T10581] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 657.567603][T10581] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 657.574184][T10581] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 657.581408][T10581] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 657.587926][T10581] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 657.594752][T10581] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 657.601362][T10581] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 658.057119][ T1025] bridge_slave_1: left allmulticast mode [ 658.079207][T10590] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1113'. [ 658.143876][ T1025] bridge_slave_1: left promiscuous mode [ 658.149855][ T1025] bridge0: port 2(bridge_slave_1) entered disabled state [ 659.129086][ T5153] Bluetooth: hci4: command tx timeout [ 659.147444][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 659.156751][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 659.500243][ T1025] bridge_slave_0: left allmulticast mode [ 659.505967][ T1025] bridge_slave_0: left promiscuous mode [ 659.946037][T10603] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 659.972376][T10603] CIFS mount error: No usable UNC path provided in device string! [ 659.972376][T10603] [ 659.982969][T10603] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 660.257113][ T1025] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.325980][ T5153] Bluetooth: hci4: command tx timeout [ 663.558778][ T5153] Bluetooth: hci4: command tx timeout [ 663.848391][ T1025] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 663.859686][ T1025] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 663.870925][ T1025] bond0 (unregistering): Released all slaves [ 663.909814][T10629] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 663.918497][T10629] batadv_slave_0: entered promiscuous mode [ 664.230146][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 664.230165][ T30] audit: type=1326 audit(1763538395.348:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10634 comm="syz.5.1121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb6678f6c9 code=0x7ffc0000 [ 664.286719][ T30] audit: type=1326 audit(1763538395.348:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10634 comm="syz.5.1121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb6678f6c9 code=0x7ffc0000 [ 664.310334][ T30] audit: type=1326 audit(1763538395.348:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10634 comm="syz.5.1121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fdb6678f6c9 code=0x7ffc0000 [ 664.381915][ T30] audit: type=1326 audit(1763538395.348:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10634 comm="syz.5.1121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb6678f6c9 code=0x7ffc0000 [ 664.406231][ T30] audit: type=1326 audit(1763538395.348:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10634 comm="syz.5.1121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb6678f6c9 code=0x7ffc0000 [ 664.435009][ T30] audit: type=1326 audit(1763538395.348:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10634 comm="syz.5.1121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fdb6678f6c9 code=0x7ffc0000 [ 664.490162][ T30] audit: type=1326 audit(1763538395.348:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10634 comm="syz.5.1121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb6678f6c9 code=0x7ffc0000 [ 664.596896][ T30] audit: type=1326 audit(1763538395.348:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10634 comm="syz.5.1121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb6678f6c9 code=0x7ffc0000 [ 664.693474][T10469] bridge0: port 1(bridge_slave_0) entered blocking state [ 664.742063][T10469] bridge0: port 1(bridge_slave_0) entered disabled state [ 664.754074][ T30] audit: type=1326 audit(1763538395.348:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10634 comm="syz.5.1121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7fdb6678f6c9 code=0x7ffc0000 [ 664.754479][T10469] bridge_slave_0: entered allmulticast mode [ 664.798480][T10469] bridge_slave_0: entered promiscuous mode [ 664.871268][T10469] bridge0: port 2(bridge_slave_1) entered blocking state [ 664.897635][T10469] bridge0: port 2(bridge_slave_1) entered disabled state [ 664.909762][T10469] bridge_slave_1: entered allmulticast mode [ 664.917501][T10469] bridge_slave_1: entered promiscuous mode [ 665.025441][ T30] audit: type=1326 audit(1763538395.348:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10634 comm="syz.5.1121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb6678f6c9 code=0x7ffc0000 [ 665.211325][T10469] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 665.338863][T10469] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 665.709981][ T1025] hsr_slave_0: left promiscuous mode [ 665.737525][ T1025] hsr_slave_1: left promiscuous mode [ 665.776531][ T1025] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 665.799198][ T1025] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 665.838211][ T1025] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 665.856842][ T1025] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 665.947656][ T1025] veth1_macvtap: left promiscuous mode [ 665.977596][ T1025] veth0_macvtap: left promiscuous mode [ 665.999392][ T1025] veth1_vlan: left promiscuous mode [ 666.004750][ T1025] veth0_vlan: left promiscuous mode [ 666.968234][T10657] loop5: detected capacity change from 0 to 64 [ 667.839396][T10661] loop8: detected capacity change from 0 to 2048 [ 667.879961][T10661] udf: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 669.177348][ T1025] team0 (unregistering): Port device team_slave_1 removed [ 669.286372][ T1025] team0 (unregistering): Port device team_slave_0 removed [ 669.394359][T10674] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1128'. [ 670.196880][T10676] Bluetooth: MGMT ver 1.23 [ 671.182441][T10469] team0: Port device team_slave_0 added [ 671.201371][T10469] team0: Port device team_slave_1 added [ 671.543528][T10686] loop5: detected capacity change from 0 to 256 [ 671.584934][T10686] exfat: Deprecated parameter 'namecase' [ 671.635041][T10469] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 671.645960][T10686] exfat: Deprecated parameter 'namecase' [ 671.684205][T10469] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 671.793289][T10686] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xbc8dc3cd, utbl_chksum : 0xe619d30d) [ 671.888731][T10689] vcan0: tx drop: invalid da for name 0xfffffffffffffffe [ 672.506939][T10469] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 672.546954][T10548] chnl_net:caif_netlink_parms(): no params data found [ 672.858271][T10469] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 673.391524][T10469] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 674.463496][T10469] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 676.600614][T10711] loop5: detected capacity change from 0 to 40427 [ 676.820125][T10711] F2FS-fs (loop5): invalid crc value [ 676.914478][T10711] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 676.936681][T10711] F2FS-fs (loop5): Start checkpoint disabled! [ 676.950630][T10711] F2FS-fs (loop5): f2fs_disable_checkpoint() finish, err:0 [ 676.963058][T10711] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 677.859948][T10724] F2FS-fs (loop5): Stopped filesystem due to reason: 0 [ 678.558081][T10720] loop8: detected capacity change from 0 to 4096 [ 678.629793][T10720] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 678.792597][T10730] netlink: 9 bytes leftover after parsing attributes in process `syz.8.1137'. [ 678.866747][ T30] kauditd_printk_skb: 73 callbacks suppressed [ 678.866767][ T30] audit: type=1800 audit(1763538408.860:171): pid=10732 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1137" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 678.976235][T10730] gretap0: entered promiscuous mode [ 679.117634][T10469] hsr_slave_0: entered promiscuous mode [ 679.161667][T10469] hsr_slave_1: entered promiscuous mode [ 679.168725][T10469] debugfs: 'hsr0' already exists in 'hsr' [ 679.191245][T10469] Cannot create hsr debugfs directory [ 679.478597][ T9998] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 679.877701][T10548] bridge0: port 1(bridge_slave_0) entered blocking state [ 679.916042][T10548] bridge0: port 1(bridge_slave_0) entered disabled state [ 679.966931][T10548] bridge_slave_0: entered allmulticast mode [ 680.009132][T10548] bridge_slave_0: entered promiscuous mode [ 680.036153][T10548] bridge0: port 2(bridge_slave_1) entered blocking state [ 680.052846][T10548] bridge0: port 2(bridge_slave_1) entered disabled state [ 680.070301][T10548] bridge_slave_1: entered allmulticast mode [ 680.118286][T10548] bridge_slave_1: entered promiscuous mode [ 682.051819][T10748] mac80211_hwsim hwsim18 wlan0: entered promiscuous mode [ 683.499568][T10548] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 683.795917][T10765] loop5: detected capacity change from 0 to 40427 [ 683.815396][T10765] F2FS-fs (loop5): invalid crc value [ 683.899556][T10765] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 683.910122][T10765] F2FS-fs (loop5): Start checkpoint disabled! [ 683.919019][T10765] F2FS-fs (loop5): f2fs_disable_checkpoint() finish, err:0 [ 683.929664][T10765] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 684.547469][T10548] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 684.838012][ T1025] kworker/u8:6: attempt to access beyond end of device [ 684.838012][ T1025] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 684.903062][ T1025] CPU: 1 UID: 0 PID: 1025 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT(full) [ 684.903093][ T1025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 684.903109][ T1025] Workqueue: writeback wb_workfn (flush-7:5) [ 684.903145][ T1025] Call Trace: [ 684.903154][ T1025] [ 684.903164][ T1025] dump_stack_lvl+0x189/0x250 [ 684.903204][ T1025] ? __pfx_dump_stack_lvl+0x10/0x10 [ 684.903237][ T1025] ? __pfx_queue_work_on+0x10/0x10 [ 684.903265][ T1025] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 684.903296][ T1025] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 684.903342][ T1025] f2fs_handle_critical_error+0x37c/0x540 [ 684.903377][ T1025] f2fs_write_end_io+0x94b/0xc10 [ 684.903431][ T1025] __submit_merged_bio+0x256/0x6a0 [ 684.903465][ T1025] __submit_merged_write_cond+0x255/0x530 [ 684.903500][ T1025] f2fs_write_data_pages+0x2756/0x3290 [ 684.903574][ T1025] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 684.903622][ T1025] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 684.903695][ T1025] ? __lock_acquire+0xab9/0xd20 [ 684.903764][ T1025] ? bpf_trace_run4+0x322/0x4a0 [ 684.903811][ T1025] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 684.903840][ T1025] do_writepages+0x32e/0x550 [ 684.903870][ T1025] ? reacquire_held_locks+0x127/0x1d0 [ 684.903910][ T1025] ? writeback_sb_inodes+0x3bc/0x1950 [ 684.903949][ T1025] __writeback_single_inode+0x133/0x12f0 [ 684.903991][ T1025] writeback_sb_inodes+0x984/0x1950 [ 684.904019][ T1025] ? lockdep_hardirqs_on+0x9c/0x150 [ 684.904089][ T1025] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 684.904178][ T1025] ? rcu_is_watching+0x15/0xb0 [ 684.904212][ T1025] wb_writeback+0x42b/0xb10 [ 684.904253][ T1025] ? queue_io+0x361/0x590 [ 684.904286][ T1025] ? __pfx_wb_writeback+0x10/0x10 [ 684.904326][ T1025] ? _raw_spin_unlock_irq+0x23/0x50 [ 684.904364][ T1025] wb_workfn+0x3f9/0xef0 [ 684.904409][ T1025] ? __pfx_wb_workfn+0x10/0x10 [ 684.904441][ T1025] ? __lock_acquire+0xab9/0xd20 [ 684.904485][ T1025] ? process_one_work+0x868/0x15e0 [ 684.904523][ T1025] ? _raw_spin_unlock_irq+0x23/0x50 [ 684.904557][ T1025] ? process_one_work+0x868/0x15e0 [ 684.904584][ T1025] process_one_work+0x93a/0x15e0 [ 684.904609][ T1025] ? __lock_acquire+0xab9/0xd20 [ 684.904666][ T1025] ? __pfx_process_one_work+0x10/0x10 [ 684.904708][ T1025] ? assign_work+0x3a1/0x410 [ 684.904744][ T1025] worker_thread+0x9b0/0xee0 [ 684.904810][ T1025] kthread+0x711/0x8a0 [ 684.904837][ T1025] ? __pfx_worker_thread+0x10/0x10 [ 684.904866][ T1025] ? __pfx_kthread+0x10/0x10 [ 684.904896][ T1025] ? _raw_spin_unlock_irq+0x23/0x50 [ 684.904925][ T1025] ? lockdep_hardirqs_on+0x9c/0x150 [ 684.904954][ T1025] ? __pfx_kthread+0x10/0x10 [ 684.904976][ T1025] ret_from_fork+0x599/0xb30 [ 684.905009][ T1025] ? __pfx_ret_from_fork+0x10/0x10 [ 684.905054][ T1025] ? __switch_to_asm+0x39/0x70 [ 684.905073][ T1025] ? __switch_to_asm+0x33/0x70 [ 684.905092][ T1025] ? __pfx_kthread+0x10/0x10 [ 684.905115][ T1025] ret_from_fork_asm+0x1a/0x30 [ 684.905162][ T1025] [ 684.905172][ T1025] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 686.511015][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.668727][T10548] team0: Port device team_slave_0 added [ 686.850635][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.989038][T10548] team0: Port device team_slave_1 added [ 687.024680][T10785] loop3: detected capacity change from 0 to 2048 [ 687.043478][T10788] loop5: detected capacity change from 0 to 128 [ 687.131857][T10785] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 688.180571][ T5842] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 688.230199][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.334806][T10548] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 688.359924][T10548] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 688.581732][T10548] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 688.740188][T10548] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 688.747273][T10548] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 688.809058][T10548] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 689.082423][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.867058][T10809] tipc: Started in network mode [ 689.872034][T10809] tipc: Node identity 4, cluster identity 4711 [ 689.878377][T10809] tipc: Node number set to 4 [ 691.677033][T10826] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 691.686217][T10826] overlayfs: missing 'lowerdir' [ 692.700416][T10548] hsr_slave_0: entered promiscuous mode [ 692.756080][T10548] hsr_slave_1: entered promiscuous mode [ 692.862222][T10833] loop5: detected capacity change from 0 to 128 [ 692.898039][T10833] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 692.916139][T10833] ext4 filesystem being mounted at /86/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 693.061190][T10548] debugfs: 'hsr0' already exists in 'hsr' [ 693.108703][T10548] Cannot create hsr debugfs directory [ 693.666356][ T8941] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 695.674129][ T12] bridge_slave_1: left allmulticast mode [ 695.690198][ T12] bridge_slave_1: left promiscuous mode [ 695.724772][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 695.777911][ T12] bridge_slave_0: left allmulticast mode [ 695.789657][T10861] random: crng reseeded on system resumption [ 695.822825][ T12] bridge_slave_0: left promiscuous mode [ 695.839320][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 696.457292][T10842] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 697.100555][T10865] loop5: detected capacity change from 0 to 512 [ 697.178084][T10865] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.1158: inode has both inline data and extents flags [ 697.256323][T10865] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.1158: couldn't read orphan inode 15 (err -117) [ 697.331028][T10865] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 697.925096][T10869] overlayfs: failed to resolve './file0/file1': -2 [ 698.392067][ T8941] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 698.402473][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 698.456373][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 698.527254][ T12] bond0 (unregistering): Released all slaves [ 701.580815][ T12] tipc: Left network mode [ 702.485766][ T30] audit: type=1326 audit(1763538430.616:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10885 comm="syz.8.1162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7738b8f6c9 code=0x7ffc0000 [ 702.514937][ T30] audit: type=1326 audit(1763538430.643:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10885 comm="syz.8.1162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7738b8f6c9 code=0x7ffc0000 [ 703.006067][ T30] audit: type=1326 audit(1763538430.652:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10885 comm="syz.8.1162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7738b8f6c9 code=0x7ffc0000 [ 703.105363][ T30] audit: type=1326 audit(1763538430.652:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10885 comm="syz.8.1162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7738b8f6c9 code=0x7ffc0000 [ 703.205773][ T30] audit: type=1326 audit(1763538430.652:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10885 comm="syz.8.1162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7738b8f6c9 code=0x7ffc0000 [ 703.645349][ T30] audit: type=1326 audit(1763538430.652:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10885 comm="syz.8.1162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f7738b8f6c9 code=0x7ffc0000 [ 704.046443][ T30] audit: type=1326 audit(1763538430.652:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10885 comm="syz.8.1162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7738b8f6c9 code=0x7ffc0000 [ 704.139853][ T30] audit: type=1326 audit(1763538430.652:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10885 comm="syz.8.1162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7738b8f6c9 code=0x7ffc0000 [ 704.208719][ T30] audit: type=1326 audit(1763538430.652:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10885 comm="syz.8.1162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f7738b8f6c9 code=0x7ffc0000 [ 704.393659][ T12] hsr_slave_0: left promiscuous mode [ 704.413009][ T12] hsr_slave_1: left promiscuous mode [ 705.129277][ T30] audit: type=1326 audit(1763538430.652:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10885 comm="syz.8.1162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7738b8f6c9 code=0x7ffc0000 [ 705.134229][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 705.191538][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 705.266020][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 705.323655][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 705.418267][ T10] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 706.025278][T10914] input: syz0 as /devices/virtual/input/input11 [ 706.519074][ T12] veth1_macvtap: left promiscuous mode [ 706.524697][ T12] veth0_macvtap: left promiscuous mode [ 706.537287][ T12] veth1_vlan: left promiscuous mode [ 706.545767][ T12] veth0_vlan: left promiscuous mode [ 706.652254][ T10] usb 4-1: config index 0 descriptor too short (expected 32797, got 29) [ 706.663443][ T10] usb 4-1: config 9 has an invalid descriptor of length 1, skipping remainder of the config [ 706.685115][ T10] usb 4-1: config 9 has 0 interfaces, different from the descriptor's value: 13 [ 706.708265][ T10] usb 4-1: New USB device found, idVendor=2f26, idProduct=4f63, bcdDevice=8d.42 [ 706.744301][ T10] usb 4-1: New USB device strings: Mfr=112, Product=2, SerialNumber=3 [ 706.752740][ T10] usb 4-1: Product: syz [ 706.781150][ T10] usb 4-1: Manufacturer: syz [ 706.785826][ T10] usb 4-1: SerialNumber: syz [ 707.127617][T10923] tmpfs: Bad value for 'mpol' [ 707.905350][ T12] team0 (unregistering): Port device team_slave_1 removed [ 708.014756][ T12] team0 (unregistering): Port device team_slave_0 removed [ 708.061179][ T9782] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 708.096118][ T9782] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 708.113495][ T9782] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 708.168710][ T9782] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 708.183411][ T10] usb 4-1: USB disconnect, device number 5 [ 708.259075][ T9782] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 710.468669][T10469] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 710.505493][ T5153] Bluetooth: hci1: command tx timeout [ 712.724137][ T5153] Bluetooth: hci1: command tx timeout [ 712.841593][T10548] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 713.331068][T10548] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 713.418802][T10548] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 713.686548][T10965] loop3: detected capacity change from 0 to 32768 [ 714.635931][T10971] loop5: detected capacity change from 0 to 131072 [ 714.653309][T10971] f2fs: Unknown parameter '01777777777777777777777' [ 714.967015][ T5153] Bluetooth: hci1: command tx timeout [ 715.238330][T10548] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 717.163129][T10994] CIFS mount error: No usable UNC path provided in device string! [ 717.163129][T10994] [ 717.173325][T10994] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 717.209556][ T5153] Bluetooth: hci1: command tx timeout [ 717.570534][T10997] loop3: detected capacity change from 0 to 2048 [ 717.678554][T10997] NILFS (loop3): invalid segment: Magic number mismatch [ 717.687762][T10997] NILFS (loop3): trying rollback from an earlier position [ 717.706123][T10997] NILFS (loop3): recovery complete [ 717.731529][T11002] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 718.266031][T11008] loop3: detected capacity change from 0 to 512 [ 718.278862][T11008] EXT4-fs: Ignoring removed oldalloc option [ 718.797627][T11008] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: comm syz.3.1177: Parent and EA inode have the same ino 15 [ 718.814114][T11008] EXT4-fs (loop3): 1 orphan inode deleted [ 719.025613][T11008] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 719.947545][T11008] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 720.110550][T10925] chnl_net:caif_netlink_parms(): no params data found [ 721.102979][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 721.126290][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 721.138012][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 721.270564][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 721.278588][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 721.392964][T11023] xt_hashlimit: max too large, truncated to 1048576 [ 721.402702][T11023] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 721.979464][ T9963] Bluetooth: hci0: command 0x0406 tx timeout [ 722.198578][T11038] loop5: detected capacity change from 0 to 512 [ 722.265392][T11038] EXT4-fs: Ignoring removed oldalloc option [ 722.293331][T11038] EXT4-fs: Mount option(s) incompatible with ext2 [ 722.927989][T11046] bridge0: entered promiscuous mode [ 724.377012][T11050] loop3: detected capacity change from 0 to 32768 [ 724.384625][T11050] xfs: Bad value for 'logbufs' [ 724.805196][ T9782] Bluetooth: hci2: command tx timeout [ 725.022098][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 725.028493][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 725.153335][T10925] bridge0: port 1(bridge_slave_0) entered blocking state [ 725.182665][T10925] bridge0: port 1(bridge_slave_0) entered disabled state [ 725.252211][T10925] bridge_slave_0: entered allmulticast mode [ 725.317559][T10925] bridge_slave_0: entered promiscuous mode [ 725.528783][T11063] loop5: detected capacity change from 0 to 128 [ 725.959839][T10925] bridge0: port 2(bridge_slave_1) entered blocking state [ 725.985299][T10925] bridge0: port 2(bridge_slave_1) entered disabled state [ 726.015390][T10925] bridge_slave_1: entered allmulticast mode [ 726.041463][T11063] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 726.054556][T10925] bridge_slave_1: entered promiscuous mode [ 726.061019][T11063] ext4 filesystem being mounted at /103/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 726.122408][ T5908] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 726.344891][T10925] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 726.402865][ T5908] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 726.429325][ T5908] usb 4-1: config 0 interface 0 has no altsetting 0 [ 726.450638][ T5908] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 726.467876][T10925] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 726.481556][ T8941] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 726.493324][ T5908] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 726.515889][ T5908] usb 4-1: Product: syz [ 726.545697][ T5908] usb 4-1: Manufacturer: syz [ 726.573310][ T5908] usb 4-1: SerialNumber: syz [ 726.661607][ T5908] usb 4-1: config 0 descriptor?? [ 726.770273][ T5908] usb 4-1: selecting invalid altsetting 0 [ 726.812572][T11076] o2cb: This node has not been configured. [ 726.819169][T11076] o2cb: Cluster check failed. Fix errors before retrying. [ 726.826531][T11076] (syz.8.1189,11076,0):user_dlm_register:674 ERROR: status = -22 [ 726.834349][T11076] (syz.8.1189,11076,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1" [ 727.006840][ T9782] Bluetooth: hci2: command tx timeout [ 729.257463][ T9782] Bluetooth: hci2: command tx timeout [ 729.321626][ T6021] usb 4-1: USB disconnect, device number 6 [ 729.388972][T10925] team0: Port device team_slave_0 added [ 729.925164][T10925] team0: Port device team_slave_1 added [ 730.228108][T11098] loop8: detected capacity change from 0 to 128 [ 730.461640][T11098] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 730.492836][T11098] ext4 filesystem being mounted at /23/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 731.575654][ T9782] Bluetooth: hci2: command tx timeout [ 732.365463][ T12] bridge_slave_1: left allmulticast mode [ 732.371345][ T12] bridge_slave_1: left promiscuous mode [ 732.377228][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 732.380239][ T9998] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 732.443621][ T12] bridge_slave_0: left allmulticast mode [ 732.449335][ T12] bridge_slave_0: left promiscuous mode [ 732.497684][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 734.126648][T11125] loop3: detected capacity change from 0 to 128 [ 734.166657][T11125] qnx6: superblock #1 checksum error [ 734.267649][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 735.266678][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 735.277393][T11135] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 735.317137][ T12] bond0 (unregistering): Released all slaves [ 735.654482][T11141] loop3: detected capacity change from 0 to 256 [ 735.667233][T11141] vfat: Bad value for 'shortname' [ 736.248632][T10925] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 736.255645][T10925] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 736.418761][T10925] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 736.486064][T11133] bridge0: entered promiscuous mode [ 736.491595][T11133] macvlan2: entered promiscuous mode [ 736.507178][T10925] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 736.514486][T10925] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 736.581194][T10925] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 737.506169][ T9782] Bluetooth: hci5: unexpected event for opcode 0x2006 [ 737.867669][ T12] hsr_slave_0: left promiscuous mode [ 738.074303][ T12] hsr_slave_1: left promiscuous mode [ 738.140077][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 738.742725][T11169] loop8: detected capacity change from 0 to 40427 [ 738.750348][T11169] F2FS-fs: heap/no_heap options were deprecated [ 738.756779][T11169] f2fs: Unknown parameter 'grpjquo‘a' [ 739.015703][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 739.260513][T11175] netlink: 'syz.5.1204': attribute type 11 has an invalid length. [ 739.731533][T11185] loop3: detected capacity change from 0 to 8 [ 739.738779][T11185] cramfs: Unknown parameter '' [ 740.161751][ T12] team0 (unregistering): Port device team_slave_1 removed [ 740.226334][ T12] team0 (unregistering): Port device team_slave_0 removed [ 740.549981][T11025] chnl_net:caif_netlink_parms(): no params data found [ 741.042285][T11196] QAT: failed to copy from user. [ 741.047821][T10925] hsr_slave_0: entered promiscuous mode [ 741.049692][T10925] hsr_slave_1: entered promiscuous mode [ 741.679097][T10925] debugfs: 'hsr0' already exists in 'hsr' [ 741.769659][T10925] Cannot create hsr debugfs directory [ 743.246151][T11216] netlink: 'syz.3.1208': attribute type 10 has an invalid length. [ 743.895265][T11216] tipc: Resetting bearer [ 743.913071][T11216] tipc: Resetting bearer [ 743.949761][T11216] bond0: (slave team0): Enslaving as an active interface with an up link [ 743.993470][T11025] bridge0: port 1(bridge_slave_0) entered blocking state [ 744.000831][T11025] bridge0: port 1(bridge_slave_0) entered disabled state [ 744.013577][T11025] bridge_slave_0: entered allmulticast mode [ 744.043809][T11025] bridge_slave_0: entered promiscuous mode [ 744.105545][T11025] bridge0: port 2(bridge_slave_1) entered blocking state [ 744.132662][T11025] bridge0: port 2(bridge_slave_1) entered disabled state [ 744.154447][T11025] bridge_slave_1: entered allmulticast mode [ 744.176476][T11025] bridge_slave_1: entered promiscuous mode [ 744.422727][T11025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 745.490695][T11025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 749.932356][T11025] team0: Port device team_slave_0 added [ 752.072909][T11025] team0: Port device team_slave_1 added [ 752.094041][T11273] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 752.542462][T11286] loop8: detected capacity change from 0 to 64 [ 752.638812][T11287] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1220'. [ 753.887377][T11289] syz.8.1219: attempt to access beyond end of device [ 753.887377][T11289] loop8: rw=2049, sector=65, nr_sectors = 1 limit=64 [ 753.901971][T11289] Buffer I/O error on dev loop8, logical block 65, lost async page write [ 753.911419][T11289] syz.8.1219: attempt to access beyond end of device [ 753.911419][T11289] loop8: rw=2049, sector=66, nr_sectors = 1 limit=64 [ 753.928020][T11289] Buffer I/O error on dev loop8, logical block 66, lost async page write [ 753.937232][T11289] syz.8.1219: attempt to access beyond end of device [ 753.937232][T11289] loop8: rw=2049, sector=67, nr_sectors = 1 limit=64 [ 753.950638][T11289] Buffer I/O error on dev loop8, logical block 67, lost async page write [ 753.959942][T11289] syz.8.1219: attempt to access beyond end of device [ 753.959942][T11289] loop8: rw=2049, sector=68, nr_sectors = 1 limit=64 [ 753.974728][T11289] Buffer I/O error on dev loop8, logical block 68, lost async page write [ 753.983958][T11289] syz.8.1219: attempt to access beyond end of device [ 753.983958][T11289] loop8: rw=2049, sector=72, nr_sectors = 1 limit=64 [ 753.997505][T11289] Buffer I/O error on dev loop8, logical block 72, lost async page write [ 754.006272][T11289] syz.8.1219: attempt to access beyond end of device [ 754.006272][T11289] loop8: rw=2049, sector=73, nr_sectors = 1 limit=64 [ 754.019768][T11289] Buffer I/O error on dev loop8, logical block 73, lost async page write [ 754.028427][T11289] syz.8.1219: attempt to access beyond end of device [ 754.028427][T11289] loop8: rw=2049, sector=76, nr_sectors = 1 limit=64 [ 754.041751][T11289] Buffer I/O error on dev loop8, logical block 76, lost async page write [ 754.052601][T11289] syz.8.1219: attempt to access beyond end of device [ 754.052601][T11289] loop8: rw=2049, sector=77, nr_sectors = 1 limit=64 [ 754.067887][T11289] Buffer I/O error on dev loop8, logical block 77, lost async page write [ 755.353408][T11296] veth0_to_team: entered promiscuous mode [ 755.360936][T11296] veth0_to_team: entered allmulticast mode [ 755.747774][T11025] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 755.754815][T11025] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 756.653609][T11025] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 756.714171][T11303] veth1_macvtap: left promiscuous mode [ 756.754396][T11025] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 756.790442][T11025] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 756.990023][T11025] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 758.258006][T11025] hsr_slave_0: entered promiscuous mode [ 758.452735][T11025] hsr_slave_1: entered promiscuous mode [ 758.470443][T11025] debugfs: 'hsr0' already exists in 'hsr' [ 758.476218][T11025] Cannot create hsr debugfs directory [ 761.973114][ T61] bridge_slave_1: left allmulticast mode [ 761.991215][ T61] bridge_slave_1: left promiscuous mode [ 762.013285][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 762.931371][ T61] bridge_slave_0: left allmulticast mode [ 762.937102][ T61] bridge_slave_0: left promiscuous mode [ 762.978121][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 764.068708][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 764.150904][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 764.190297][ T61] bond0 (unregistering): Released all slaves [ 764.529837][T10925] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 764.617635][ T61] hsr_slave_0: left promiscuous mode [ 764.646335][ T61] hsr_slave_1: left promiscuous mode [ 764.664705][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 765.721911][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 766.172779][ T61] team0 (unregistering): Port device team_slave_1 removed [ 766.209855][ T61] team0 (unregistering): Port device team_slave_0 removed [ 766.438519][T10925] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 766.653637][T10925] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 767.054695][T10925] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 767.829668][T11386] block device autoloading is deprecated and will be removed. [ 769.971431][ T9] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 770.191549][T11408] loop8: detected capacity change from 0 to 16 [ 770.291985][T11408] erofs (device loop8): mounted with root inode @ nid 36. [ 770.336111][ T9] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 770.352637][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 770.365534][ T9] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 770.903932][ T9] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 770.912174][ T9] usb 4-1: Product: syz [ 770.936795][ T9] usb 4-1: Manufacturer: syz [ 770.941472][ T9] usb 4-1: SerialNumber: syz [ 770.991699][ T9] usb 4-1: config 0 descriptor?? [ 771.025802][ T9] usb 4-1: selecting invalid altsetting 0 [ 771.210894][T10925] 8021q: adding VLAN 0 to HW filter on device bond0 [ 771.291712][T11025] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 771.770255][T11025] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 772.254593][T11025] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 772.292676][T11025] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 772.320160][T10925] 8021q: adding VLAN 0 to HW filter on device team0 [ 773.218454][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 773.225853][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 773.380629][ T778] usb 4-1: USB disconnect, device number 7 [ 773.398433][ T1315] bridge0: port 2(bridge_slave_1) entered blocking state [ 773.405776][ T1315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 773.609472][T11025] 8021q: adding VLAN 0 to HW filter on device bond0 [ 773.661913][T11025] 8021q: adding VLAN 0 to HW filter on device team0 [ 773.711911][ T1867] bridge0: port 1(bridge_slave_0) entered blocking state [ 773.719153][ T1867] bridge0: port 1(bridge_slave_0) entered forwarding state [ 773.774142][ T1867] bridge0: port 2(bridge_slave_1) entered blocking state [ 773.781465][ T1867] bridge0: port 2(bridge_slave_1) entered forwarding state [ 775.035810][ T9963] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 775.049694][ T9963] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 775.060062][ T9963] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 775.072333][ T9963] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 775.084174][ T9963] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 776.331077][T11025] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 776.989873][T10480] bridge_slave_1: left allmulticast mode [ 777.054295][T10480] bridge_slave_1: left promiscuous mode [ 777.088427][T10480] bridge0: port 2(bridge_slave_1) entered disabled state [ 777.150272][T10480] bridge_slave_0: left allmulticast mode [ 777.161801][T10480] bridge_slave_0: left promiscuous mode [ 777.179038][T10480] bridge0: port 1(bridge_slave_0) entered disabled state [ 777.362110][ T9782] Bluetooth: hci1: command tx timeout [ 779.459212][T11475] slcan: can't register candev [ 779.459965][T10480] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 779.489976][T10480] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 779.503115][T10480] bond0 (unregistering): Released all slaves [ 779.614617][ T9963] Bluetooth: hci1: command tx timeout [ 779.626778][T11448] chnl_net:caif_netlink_parms(): no params data found [ 780.623196][T10480] hsr_slave_0: left promiscuous mode [ 780.630882][T10480] hsr_slave_1: left promiscuous mode [ 780.637707][T10480] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 780.651083][T10480] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 780.856889][T10480] team0 (unregistering): Port device team_slave_1 removed [ 780.895495][T10480] team0 (unregistering): Port device team_slave_0 removed [ 781.441009][T11489] vlan2: entered promiscuous mode [ 781.446303][T11489] macvtap0: entered promiscuous mode [ 781.634127][T11500] loop5: detected capacity change from 0 to 256 [ 781.684113][ T5908] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 781.713381][T11500] exFAT-fs (loop5): error, invalid access to FAT free cluster (entry 0x00000005) [ 781.760201][T11500] exFAT-fs (loop5): Filesystem has been set read-only [ 781.793735][T11500] exFAT-fs (loop5): failed to count the number of clusters in root [ 781.815573][T11500] exFAT-fs (loop5): failed to recognize exfat type [ 781.916860][ T9963] Bluetooth: hci1: command 0x040f tx timeout [ 781.955063][T11448] bridge0: port 1(bridge_slave_0) entered blocking state [ 781.969780][T11448] bridge0: port 1(bridge_slave_0) entered disabled state [ 781.998377][T11448] bridge_slave_0: entered allmulticast mode [ 782.011036][T11448] bridge_slave_0: entered promiscuous mode [ 782.041718][ T5908] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 10 [ 782.081867][ T5908] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 782.097497][ T5908] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 782.123546][ T5908] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 782.207360][T11448] bridge0: port 2(bridge_slave_1) entered blocking state [ 782.236706][T11448] bridge0: port 2(bridge_slave_1) entered disabled state [ 782.244329][T11448] bridge_slave_1: entered allmulticast mode [ 782.247015][ T5908] usb 9-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 782.268045][ T5908] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.282256][T11448] bridge_slave_1: entered promiscuous mode [ 782.292043][ T5908] usb 9-1: Product: syz [ 782.296280][ T5908] usb 9-1: Manufacturer: syz [ 782.300927][ T5908] usb 9-1: SerialNumber: syz [ 782.327163][ T5908] usb 9-1: config 0 descriptor?? [ 782.346990][T11494] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 782.365419][ T5908] usb 9-1: ucan: probing device on interface #0 [ 782.372788][T11505] loop5: detected capacity change from 0 to 512 [ 782.380554][ T5908] usb 9-1: ucan: invalid endpoint configuration [ 782.386864][ T5908] usb 9-1: ucan: probe failed; try to update the device firmware [ 782.453543][T11505] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 782.503089][T11505] EXT4-fs error (device loop5): ext4_do_update_inode:5635: inode #15: comm syz.5.1256: corrupted inode contents [ 782.574571][T11505] EXT4-fs error (device loop5): ext4_dirty_inode:6520: inode #15: comm syz.5.1256: mark_inode_dirty error [ 782.598752][T11505] EXT4-fs error (device loop5): ext4_do_update_inode:5635: inode #15: comm syz.5.1256: corrupted inode contents [ 782.618432][T11025] veth0_vlan: entered promiscuous mode [ 782.633875][T11448] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 782.637656][ T5908] usb 9-1: USB disconnect, device number 2 [ 782.645696][T11505] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3000: inode #15: comm syz.5.1256: mark_inode_dirty error [ 782.679577][T11448] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 782.690459][T11505] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3003: inode #15: comm syz.5.1256: mark inode dirty (error -117) [ 782.727207][T11505] EXT4-fs warning (device loop5): ext4_evict_inode:273: xattr delete (err -117) [ 782.760466][T11025] veth1_vlan: entered promiscuous mode [ 782.780539][T11505] EXT4-fs (loop5): 1 orphan inode deleted [ 782.799319][T11505] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 782.821263][T11448] team0: Port device team_slave_0 added [ 782.842928][T11448] team0: Port device team_slave_1 added [ 782.934237][ T8941] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 783.069333][T11448] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 783.114069][T11448] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 783.189915][T11448] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 783.227155][T11448] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 783.250491][T11448] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 783.338907][T11448] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 783.409163][ T9963] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 783.421435][T11519] loop3: detected capacity change from 0 to 16 [ 783.432760][ T9963] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 783.441675][T11519] erofs (device loop3): rootino(nid 36) is not a directory(i_mode 142735) [ 783.456416][ T9963] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 783.475158][ T9963] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 783.483244][ T9963] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 783.772374][T11522] loop8: detected capacity change from 0 to 40427 [ 783.796455][T11522] F2FS-fs (loop8): invalid crc value [ 783.864272][T11522] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 783.879559][T11522] F2FS-fs (loop8): Start checkpoint disabled! [ 783.886912][T11522] F2FS-fs (loop8): f2fs_disable_checkpoint() finish, err:0 [ 783.905659][T11522] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 784.236991][ T9963] Bluetooth: hci1: command 0x040f tx timeout [ 784.824877][T10480] kworker/u8:25: attempt to access beyond end of device [ 784.824877][T10480] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 784.883764][T10480] CPU: 0 UID: 0 PID: 10480 Comm: kworker/u8:25 Not tainted syzkaller #0 PREEMPT(full) [ 784.883787][T10480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 784.883798][T10480] Workqueue: writeback wb_workfn (flush-7:8) [ 784.883824][T10480] Call Trace: [ 784.883832][T10480] [ 784.883839][T10480] dump_stack_lvl+0x189/0x250 [ 784.883868][T10480] ? __pfx_dump_stack_lvl+0x10/0x10 [ 784.883891][T10480] ? __pfx_queue_work_on+0x10/0x10 [ 784.883912][T10480] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 784.883934][T10480] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 784.883966][T10480] f2fs_handle_critical_error+0x37c/0x540 [ 784.883991][T10480] f2fs_write_end_io+0x94b/0xc10 [ 784.884028][T10480] __submit_merged_bio+0x256/0x6a0 [ 784.884052][T10480] __submit_merged_write_cond+0x255/0x530 [ 784.884076][T10480] f2fs_write_data_pages+0x2756/0x3290 [ 784.884131][T10480] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 784.884162][T10480] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 784.884217][T10480] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 784.884235][T10480] ? register_lock_class+0x51/0x320 [ 784.884264][T10480] ? trace_f2fs_writepages+0x7f/0x200 [ 784.884289][T10480] ? f2fs_write_node_pages+0x478/0x6e0 [ 784.884310][T10480] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 784.884340][T10480] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 784.884360][T10480] do_writepages+0x32e/0x550 [ 784.884381][T10480] ? reacquire_held_locks+0x127/0x1d0 [ 784.884403][T10480] ? writeback_sb_inodes+0x3bc/0x1950 [ 784.884431][T10480] __writeback_single_inode+0x133/0x12f0 [ 784.884459][T10480] writeback_sb_inodes+0x984/0x1950 [ 784.884508][T10480] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 784.884567][T10480] ? rcu_is_watching+0x15/0xb0 [ 784.884590][T10480] wb_writeback+0x42b/0xb10 [ 784.884617][T10480] ? queue_io+0x361/0x590 [ 784.884640][T10480] ? __pfx_wb_writeback+0x10/0x10 [ 784.884667][T10480] ? _raw_spin_unlock_irq+0x23/0x50 [ 784.884693][T10480] wb_workfn+0x3f9/0xef0 [ 784.884724][T10480] ? __pfx_wb_workfn+0x10/0x10 [ 784.884745][T10480] ? __lock_acquire+0xab9/0xd20 [ 784.884775][T10480] ? process_one_work+0x868/0x15e0 [ 784.884801][T10480] ? _raw_spin_unlock_irq+0x23/0x50 [ 784.884824][T10480] ? process_one_work+0x868/0x15e0 [ 784.884842][T10480] process_one_work+0x93a/0x15e0 [ 784.884860][T10480] ? __lock_acquire+0xab9/0xd20 [ 784.884900][T10480] ? __pfx_process_one_work+0x10/0x10 [ 784.884928][T10480] ? assign_work+0x3a1/0x410 [ 784.884952][T10480] worker_thread+0x9b0/0xee0 [ 784.884997][T10480] kthread+0x711/0x8a0 [ 784.885015][T10480] ? __pfx_worker_thread+0x10/0x10 [ 784.885035][T10480] ? __pfx_kthread+0x10/0x10 [ 784.885051][T10480] ? _raw_spin_unlock_irq+0x23/0x50 [ 784.885071][T10480] ? lockdep_hardirqs_on+0x9c/0x150 [ 784.885091][T10480] ? __pfx_kthread+0x10/0x10 [ 784.885107][T10480] ret_from_fork+0x599/0xb30 [ 784.885129][T10480] ? __pfx_ret_from_fork+0x10/0x10 [ 784.885159][T10480] ? __switch_to_asm+0x39/0x70 [ 784.885173][T10480] ? __switch_to_asm+0x33/0x70 [ 784.885186][T10480] ? __pfx_kthread+0x10/0x10 [ 784.885201][T10480] ret_from_fork_asm+0x1a/0x30 [ 784.885233][T10480] [ 784.921572][T11448] hsr_slave_0: entered promiscuous mode [ 784.924285][T10480] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 784.929805][T11448] hsr_slave_1: entered promiscuous mode [ 785.239133][T11448] debugfs: 'hsr0' already exists in 'hsr' [ 785.245028][T11448] Cannot create hsr debugfs directory [ 785.316145][T11529] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1262'. [ 785.774437][ T9963] Bluetooth: hci4: command tx timeout [ 786.120410][T11537] binder: 11532:11537 ioctl 4018620d 0 returned -22 [ 786.158253][T11537] binder: 11532:11537 ioctl c0306201 0 returned -14 [ 786.473106][ T9963] Bluetooth: hci1: command 0x040f tx timeout [ 786.653099][T11540] loop5: detected capacity change from 0 to 512 [ 787.810937][T11547] loop5: detected capacity change from 0 to 512 [ 787.860699][T11547] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 787.913091][T11547] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 787.933052][T11547] FAT-fs (loop5): Filesystem has been set read-only [ 787.939936][ T5908] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 788.021966][ T9963] Bluetooth: hci4: command tx timeout [ 788.119480][ T5908] usb 9-1: Using ep0 maxpacket: 16 [ 788.127176][ T5908] usb 9-1: unable to get BOS descriptor or descriptor too short [ 788.143362][ T5908] usb 9-1: config 13 has an invalid interface number: 50 but max is 0 [ 788.153259][ T5908] usb 9-1: config 13 has no interface number 0 [ 788.159508][ T5908] usb 9-1: config 13 interface 50 altsetting 167 bulk endpoint 0x88 has invalid maxpacket 16 [ 788.170521][ T5908] usb 9-1: config 13 interface 50 has no altsetting 0 [ 788.187413][ T5908] usb 9-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 788.196882][ T5908] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 788.211519][ T5908] usb 9-1: Product: syz [ 788.217267][ T5908] usb 9-1: Manufacturer: syz [ 788.222054][ T5908] usb 9-1: SerialNumber: syz [ 788.254814][T11544] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 788.562021][ T5908] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 788.578661][ T5908] usb 9-1: MIDIStreaming interface descriptor not found [ 788.758355][ T5908] usb 9-1: USB disconnect, device number 3 [ 789.457895][T11558] CIFS mount error: No usable UNC path provided in device string! [ 789.457895][T11558] [ 789.468688][T11558] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 789.948268][T11518] chnl_net:caif_netlink_parms(): no params data found [ 790.291084][ T9963] Bluetooth: hci4: command tx timeout [ 790.961741][T11568] loop8: detected capacity change from 0 to 512 [ 791.120769][T11568] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 791.179498][T11568] EXT4-fs error (device loop8): ext4_orphan_get:1391: inode #15: comm syz.8.1270: iget: bad i_size value: 38620345925642 [ 791.278772][T11568] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.1270: couldn't read orphan inode 15 (err -117) [ 791.367196][T11568] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 791.431402][ T1315] bridge_slave_1: left allmulticast mode [ 791.441072][ T1315] bridge_slave_1: left promiscuous mode [ 791.457518][ T1315] bridge0: port 2(bridge_slave_1) entered disabled state [ 791.480088][ T1315] bridge_slave_0: left allmulticast mode [ 791.489063][ T1315] bridge_slave_0: left promiscuous mode [ 791.497544][ T1315] bridge0: port 1(bridge_slave_0) entered disabled state [ 791.510957][ T5908] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 791.585331][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 791.591880][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 792.432287][ T5908] usb 4-1: Using ep0 maxpacket: 8 [ 792.459460][ T5908] usb 4-1: config 0 has an invalid interface number: 172 but max is 2 [ 792.469211][ T5908] usb 4-1: config 0 has an invalid interface number: 234 but max is 2 [ 792.484909][ T5908] usb 4-1: config 0 has no interface number 1 [ 792.495105][ T5908] usb 4-1: config 0 has no interface number 2 [ 792.504825][ T5908] usb 4-1: New USB device found, idVendor=05c6, idProduct=9212, bcdDevice=47.83 [ 792.514600][ T5908] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 792.523363][ T5908] usb 4-1: Product: syz [ 792.527742][ T5908] usb 4-1: Manufacturer: syz [ 792.532755][ T9963] Bluetooth: hci4: command tx timeout [ 792.565105][ T9998] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 792.578579][ T5908] usb 4-1: SerialNumber: syz [ 792.598616][ T5908] usb 4-1: config 0 descriptor?? [ 792.892140][ T5908] usb 4-1: USB disconnect, device number 8 [ 793.221090][T11582] QAT: failed to copy from user cfg_data. [ 793.474397][T11586] loop5: detected capacity change from 0 to 512 [ 793.643574][ T1315] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 794.020254][T11588] loop3: detected capacity change from 0 to 65536 [ 794.053584][ T1315] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 794.066071][ T1315] bond0 (unregistering): Released all slaves [ 794.104038][T11588] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 794.161565][T11588] XFS (loop3): Ending clean mount [ 794.174536][T11588] XFS (loop3): Quotacheck needed: Please wait. [ 794.326123][T11579] netlink: 'syz.8.1272': attribute type 6 has an invalid length. [ 794.336346][T11588] XFS (loop3): Quotacheck: Done. [ 794.736737][T11518] bridge0: port 1(bridge_slave_0) entered blocking state [ 794.759994][T11518] bridge0: port 1(bridge_slave_0) entered disabled state [ 794.778813][T11518] bridge_slave_0: entered allmulticast mode [ 794.978086][T11518] bridge_slave_0: entered promiscuous mode [ 795.402422][ T1315] hsr_slave_0: left promiscuous mode [ 795.409163][ T1315] hsr_slave_1: left promiscuous mode [ 795.422996][ T1315] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 795.435813][ T1315] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 795.502986][ T1315] veth1_vlan: left promiscuous mode [ 795.514968][ T1315] veth0_vlan: left promiscuous mode [ 795.524766][ T5842] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 795.678573][T11606] loop8: detected capacity change from 0 to 64 [ 797.287125][T11615] loop5: detected capacity change from 0 to 256 [ 798.312407][ T1315] team0 (unregistering): Port device team_slave_1 removed [ 798.336168][T10448] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 798.404526][ T1315] team0 (unregistering): Port device team_slave_0 removed [ 798.523960][T10448] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 798.535468][T11623] loop3: detected capacity change from 0 to 40427 [ 798.545717][T10448] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x61, changing to 0x1 [ 798.554300][T11623] F2FS-fs: heap/no_heap options were deprecated [ 798.557901][T10448] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 10 [ 798.576408][T10448] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 798.586181][T10448] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 798.594164][T11623] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 798.619466][T10448] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 798.632199][T11623] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 798.643654][T10448] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 798.655346][T10448] usb 6-1: Manufacturer: syz [ 798.658091][T11623] F2FS-fs (loop3): build fault injection type: 0x0 [ 798.668596][T10448] usb 6-1: config 0 descriptor?? [ 798.695154][T11623] F2FS-fs (loop3): invalid crc value [ 798.916220][T10448] usb 6-1: USB disconnect, device number 2 [ 799.549141][T11629] loop3: detected capacity change from 0 to 2048 [ 799.576847][T11629] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 799.597064][T11518] bridge0: port 2(bridge_slave_1) entered blocking state [ 799.615969][T11518] bridge0: port 2(bridge_slave_1) entered disabled state [ 799.633671][T11518] bridge_slave_1: entered allmulticast mode [ 799.666257][T11518] bridge_slave_1: entered promiscuous mode [ 799.720418][T11631] loop5: detected capacity change from 0 to 2048 [ 799.968277][T11518] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 800.018553][T11518] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 800.071785][T11448] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 800.285360][T11448] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 800.350373][T11645] loop5: detected capacity change from 0 to 22 [ 800.390450][T11645] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 800.424339][T11645] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 800.486515][T11518] team0: Port device team_slave_0 added [ 800.515470][T11651] dlm: non-version read from control device 90 [ 800.523192][T11448] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 800.627348][T11518] team0: Port device team_slave_1 added [ 801.116934][T11448] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 801.616723][T11670] loop5: detected capacity change from 0 to 32768 [ 801.719453][T11518] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 801.726474][T11518] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 801.832631][T11518] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 801.889147][T11518] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 801.919880][T11518] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 802.025119][T11518] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 803.005332][T11518] hsr_slave_0: entered promiscuous mode [ 803.011245][T10448] usb 4-1: new low-speed USB device number 9 using dummy_hcd [ 803.040273][T11518] hsr_slave_1: entered promiscuous mode [ 803.079073][T11518] debugfs: 'hsr0' already exists in 'hsr' [ 803.114503][T11518] Cannot create hsr debugfs directory [ 803.192421][T10448] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 803.228890][T10448] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 803.298501][T10448] usb 4-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 803.348870][T10448] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 803.385194][T10448] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 803.438462][T10448] usb 4-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 803.487282][T10448] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 803.517103][T10448] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 803.544574][T10448] usb 4-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 803.596925][T10448] usb 4-1: string descriptor 0 read error: -22 [ 803.613823][T10448] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 803.634067][T10448] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 803.660264][T10448] adutux 4-1:168.0: interrupt endpoints not found [ 804.778632][ T5908] usb 4-1: USB disconnect, device number 9 [ 805.220616][T11713] loop5: detected capacity change from 0 to 1024 [ 805.353582][T11448] 8021q: adding VLAN 0 to HW filter on device bond0 [ 805.574736][T11448] 8021q: adding VLAN 0 to HW filter on device team0 [ 805.681263][ T1025] bridge0: port 1(bridge_slave_0) entered blocking state [ 805.688658][ T1025] bridge0: port 1(bridge_slave_0) entered forwarding state [ 805.759817][ T1025] bridge0: port 2(bridge_slave_1) entered blocking state [ 805.767101][ T1025] bridge0: port 2(bridge_slave_1) entered forwarding state [ 805.989854][T11448] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 806.012831][T11448] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 806.796965][T11732] vlan0: entered promiscuous mode [ 806.802201][T11732] macvtap0: entered promiscuous mode [ 807.239271][T11518] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 807.324938][T11518] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 807.417807][T11518] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 807.445462][T11518] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 807.500584][T11754] netlink: 'syz.5.1315': attribute type 1 has an invalid length. [ 807.715351][T11448] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 807.964820][T11711] loop8: detected capacity change from 0 to 65536 [ 808.071912][T11711] XFS (loop8): Deprecated V4 format (crc=0) not supported by kernel. [ 808.137884][T11518] 8021q: adding VLAN 0 to HW filter on device bond0 [ 808.208705][T11518] 8021q: adding VLAN 0 to HW filter on device team0 [ 808.255437][ T6843] bridge0: port 1(bridge_slave_0) entered blocking state [ 808.262745][ T6843] bridge0: port 1(bridge_slave_0) entered forwarding state [ 808.397011][ T9340] bridge0: port 2(bridge_slave_1) entered blocking state [ 808.404416][ T9340] bridge0: port 2(bridge_slave_1) entered forwarding state [ 808.702352][T11795] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1326'. [ 808.750870][T11795] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1326'. [ 808.814431][T11795] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1326'. [ 809.239533][T11819] loop8: detected capacity change from 0 to 64 [ 809.247863][T11448] veth0_vlan: entered promiscuous mode [ 809.300881][T11448] veth1_vlan: entered promiscuous mode [ 809.387840][T11819] syz.8.1331: attempt to access beyond end of device [ 809.387840][T11819] loop8: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 809.468758][T11819] Buffer I/O error on dev loop8, logical block 512, async page read [ 809.504230][T11448] veth0_macvtap: entered promiscuous mode [ 809.506539][T11819] syz.8.1331: attempt to access beyond end of device [ 809.506539][T11819] loop8: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 809.576511][T11448] veth1_macvtap: entered promiscuous mode [ 809.590659][T11819] Buffer I/O error on dev loop8, logical block 56576, async page read [ 809.697883][T11448] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 809.798467][T11448] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 809.849371][T10480] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.908109][T10480] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.972116][T10480] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.007183][T10480] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.101373][T11842] C: renamed from team_slave_0 (while UP) [ 810.132386][T11845] loop8: detected capacity change from 0 to 164 [ 810.160446][T11845] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 810.186010][T11842] netlink: 'syz.3.1339': attribute type 3 has an invalid length. [ 810.213485][T11842] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1339'. [ 810.224975][T11842] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 810.238506][T11847] loop5: detected capacity change from 0 to 256 [ 810.293586][T11847] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 810.450891][T11518] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 810.467461][T11852] loop8: detected capacity change from 0 to 8 [ 810.554416][T11852] SQUASHFS error: lzo decompression failed, data probably corrupt [ 810.615314][T11852] SQUASHFS error: Failed to read block 0x144: -5 [ 810.623463][T11855] loop3: detected capacity change from 0 to 764 [ 810.649116][T11852] SQUASHFS error: Unable to read metadata cache entry [142] [ 810.707929][T11852] SQUASHFS error: Unable to read directory block [142:26] [ 810.814047][ T6837] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 810.883544][ T6837] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 811.089122][ T6843] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 811.145885][ T6843] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 811.494085][T11879] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 811.809785][T11884] loop8: detected capacity change from 0 to 2048 [ 812.473130][T11884] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 812.709331][T11897] netlink: 100 bytes leftover after parsing attributes in process `syz.5.1353'. [ 812.746012][ T9998] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 812.791775][T11903] loop7: detected capacity change from 0 to 256 [ 812.862727][T11518] veth0_vlan: entered promiscuous mode [ 812.890858][T11903] FAT-fs (loop7): Directory bread(block 64) failed [ 812.928573][T11903] FAT-fs (loop7): Directory bread(block 65) failed [ 812.955018][T11518] veth1_vlan: entered promiscuous mode [ 812.963910][T11903] FAT-fs (loop7): Directory bread(block 66) failed [ 812.970554][T11903] FAT-fs (loop7): Directory bread(block 67) failed [ 813.032357][T11908] netlink: 'syz.8.1356': attribute type 6 has an invalid length. [ 813.040595][T11903] FAT-fs (loop7): Directory bread(block 68) failed [ 813.047174][T11903] FAT-fs (loop7): Directory bread(block 69) failed [ 813.099282][T11903] FAT-fs (loop7): Directory bread(block 70) failed [ 813.109689][T11903] FAT-fs (loop7): Directory bread(block 71) failed [ 813.142489][T11910] loop3: detected capacity change from 0 to 1024 [ 813.142811][T11518] veth0_macvtap: entered promiscuous mode [ 813.164859][T11903] FAT-fs (loop7): Directory bread(block 72) failed [ 813.194247][T11903] FAT-fs (loop7): Directory bread(block 73) failed [ 813.218823][T11910] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 813.290198][T11518] veth1_macvtap: entered promiscuous mode [ 813.299359][ T5842] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 813.361340][T11518] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 813.446353][T11518] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 813.542847][ T6839] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.575522][ T6839] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.635782][ T6839] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.644626][ T6839] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.802286][T11930] loop3: detected capacity change from 0 to 16 [ 814.143602][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 814.151498][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 814.237396][T11939] loop7: detected capacity change from 0 to 2048 [ 814.290663][T11939] NILFS (loop7): broken superblock, retrying with spare superblock (blocksize = 1024) [ 814.352838][ T6843] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 814.400000][ T6843] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 814.413631][T11946] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 814.743691][T11930] erofs (device loop3): mounted with root inode @ nid 36. [ 814.944801][ T9963] erofs (device loop3): failed to decompress -4045 in[4096, 0] out[9000] [ 814.981451][T11930] erofs (device loop3): failed to decompress -4045 in[4096, 0] out[8192] [ 815.045278][T11930] erofs (device loop3): read error -117 @ 1 of nid 89 [ 815.101762][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 815.101785][ T30] audit: type=1800 audit(1763538534.601:202): pid=11930 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1362" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 815.156955][T11970] loop8: detected capacity change from 0 to 128 [ 815.301199][T11970] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 815.430742][T11975] loop7: detected capacity change from 0 to 1024 [ 815.437847][T11970] hpfs: filesystem error: improperly stopped [ 815.449451][T11975] EXT4-fs: Ignoring removed oldalloc option [ 815.540783][T11975] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 815.565733][T11970] [ 815.568174][T11970] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 815.924380][T11970] hpfs: You really don't want any checks? You are crazy... [ 816.162035][T11975] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 816.201030][T11970] hpfs: hpfs_map_sector(): read error [ 816.229016][T11970] hpfs: code page support is disabled [ 816.261419][T11970] hpfs: hpfs_map_4sectors(): unaligned read [ 816.264376][T11975] EXT4-fs error (device loop7): ext4_map_blocks:819: inode #15: comm syz.7.1377: lblock 0 mapped to illegal pblock 0 (length 1) [ 816.291082][T11970] hpfs: hpfs_map_4sectors(): unaligned read [ 816.297059][T11970] hpfs: filesystem error: unable to find root dir [ 816.339679][T11975] EXT4-fs (loop7): Remounting filesystem read-only [ 816.419538][T11970] hpfs: hpfs_map_4sectors(): unaligned read [ 816.433759][T11448] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 816.477212][T11970] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at aib [ 816.867826][T11994] loop3: detected capacity change from 0 to 256 [ 816.980788][T11994] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x9059ffb0, utbl_chksum : 0xe619d30d) [ 817.287983][ T9963] Bluetooth: hci5: unexpected event for opcode 0x2011 [ 817.312035][T12007] loop8: detected capacity change from 0 to 256 [ 817.388209][T12007] FAT-fs (loop8): Directory bread(block 64) failed [ 817.443863][T12007] FAT-fs (loop8): Directory bread(block 65) failed [ 817.480344][T12007] FAT-fs (loop8): Directory bread(block 66) failed [ 817.545734][T12007] FAT-fs (loop8): Directory bread(block 67) failed [ 817.583010][T12007] FAT-fs (loop8): Directory bread(block 68) failed [ 817.621255][T12007] FAT-fs (loop8): Directory bread(block 69) failed [ 817.633748][T12020] loop5: detected capacity change from 0 to 1024 [ 817.656921][T12007] FAT-fs (loop8): Directory bread(block 70) failed [ 817.667846][T12020] EXT4-fs: Ignoring removed orlov option [ 817.686383][T12020] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869) [ 817.691944][T12007] FAT-fs (loop8): Directory bread(block 71) failed [ 817.717840][T12020] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 817.744851][T12007] FAT-fs (loop8): Directory bread(block 72) failed [ 817.757142][T12020] EXT4-fs (loop5): invalid journal inode [ 817.775956][T12007] FAT-fs (loop8): Directory bread(block 73) failed [ 817.792557][T12020] EXT4-fs (loop5): can't get journal size [ 817.822734][T12025] loop3: detected capacity change from 0 to 1024 [ 817.832275][T12020] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 818.058786][T12025] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 818.082623][ T8941] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 818.092795][T12030] loop8: detected capacity change from 0 to 512 [ 818.125574][T12025] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 818.284838][ T37] hfsplus: b-tree write err: -5, ino 4 [ 818.344064][T12033] loop5: detected capacity change from 0 to 512 [ 818.402941][T12033] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 818.581906][T12033] EXT4-fs (loop5): 1 truncate cleaned up [ 818.742673][T12033] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 819.466835][ T6938] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 819.652632][T12052] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1398'. [ 819.670471][ T8941] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 819.732795][ T6938] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 819.751107][ T6938] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 819.776889][ T6938] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 819.832559][ T6938] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 819.840749][ T6938] usb 4-1: Manufacturer: syz [ 819.911082][ T6938] usb 4-1: config 0 descriptor?? [ 820.091540][ T6938] rc_core: IR keymap rc-hauppauge not found [ 820.115910][ T6938] Registered IR keymap rc-empty [ 820.163313][ T6938] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 820.209745][ T6938] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input12 [ 820.276905][ T6938] usb 4-1: USB disconnect, device number 10 [ 820.312966][T12072] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1404'. [ 820.712267][T12078] loop5: detected capacity change from 0 to 4096 [ 820.763100][T12078] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 820.890956][T12078] ntfs3(loop5): ino=19, mi_enum_attr [ 820.912672][T12078] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 821.011342][T12078] ntfs3(loop5): failed to convert "c46c" to iso8859-7 [ 821.031884][T12078] ntfs3(loop5): ino=20, mi_enum_attr [ 821.165919][T12055] loop8: detected capacity change from 0 to 40427 [ 821.197260][T12055] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 821.205062][T12055] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 821.216050][ T6474] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 821.264019][T12055] F2FS-fs (loop8): invalid crc value [ 821.515690][ T6474] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 821.630157][ T6474] usb 4-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 822.004037][ T6474] usb 4-1: Product: syz [ 822.008308][ T6474] usb 4-1: Manufacturer: syz [ 822.014242][ T6474] usb 4-1: SerialNumber: syz [ 822.061603][ T6474] usb 4-1: config 0 descriptor?? [ 822.075580][ T6474] ch341 4-1:0.0: ch341-uart converter detected [ 822.095124][T12055] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 822.172414][T12055] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 822.213566][T12055] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 822.313000][T12110] loop5: detected capacity change from 0 to 16 [ 822.355130][T12110] cramfs: Error -3 while decompressing! [ 822.369494][T12110] cramfs: ffffffff9994c108(27)->ffff88804a26c000(4096) [ 822.376685][T12110] cramfs: Error -3 while decompressing! [ 822.402997][T12110] cramfs: ffffffff9994c123(16)->ffff888045e1f000(4096) [ 822.436944][T12110] cramfs: Error -3 while decompressing! [ 822.443812][T12110] cramfs: ffffffff9994c108(27)->ffff88804a26c000(4096) [ 822.451271][ T30] audit: type=1800 audit(1763538541.385:203): pid=12110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1416" name="file3" dev="loop5" ino=348 res=0 errno=0 [ 822.485670][ T5954] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 822.540323][ T10] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 822.682097][ T5954] usb 8-1: Using ep0 maxpacket: 8 [ 822.711159][ T5954] usb 8-1: config index 0 descriptor too short (expected 30, got 18) [ 822.725257][ T10] usb 10-1: Using ep0 maxpacket: 16 [ 822.737998][ T5954] usb 8-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 822.755574][ T6474] usb 4-1: failed to send control message: -71 [ 822.765692][ T10] usb 10-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 822.778174][ T6474] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 822.790579][ T5954] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.811200][ T5954] usb 8-1: Product: syz [ 822.815435][ T5954] usb 8-1: Manufacturer: syz [ 822.820650][ T10] usb 10-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 822.842525][ T6474] usb 4-1: USB disconnect, device number 11 [ 822.848826][ T5954] usb 8-1: SerialNumber: syz [ 822.867420][ T10] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 822.883680][ T5954] usb 8-1: config 0 descriptor?? [ 822.920503][ T6474] ch341 4-1:0.0: device disconnected [ 822.936669][ T5954] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 822.945702][ T10] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 822.947281][T12117] loop8: detected capacity change from 0 to 128 [ 822.968001][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.977898][ T5954] usb 8-1: setting power ON [ 822.987092][T12117] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 822.999644][ T5954] dvb-usb: bulk message failed: -22 (2/0) [ 823.008304][ T10] usb 10-1: Product: syz [ 823.013053][ T10] usb 10-1: Manufacturer: syz [ 823.023054][T12117] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 823.033166][ T10] usb 10-1: SerialNumber: syz [ 823.047195][ T5954] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 823.081629][ T5954] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 823.114177][ T5954] usb 8-1: media controller created [ 823.176758][ T5954] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 823.202322][T12105] dvb-usb: bulk message failed: -22 (3/0) [ 823.209183][T12105] dvb-usb: bulk message failed: -22 (3/0) [ 823.309866][ T5954] usb 8-1: selecting invalid altsetting 6 [ 823.319548][ T5954] usb 8-1: digital interface selection failed (-22) [ 823.338981][ T5954] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 823.369820][ T5954] usb 8-1: setting power OFF [ 823.417722][ T5954] dvb-usb: bulk message failed: -22 (2/0) [ 823.424544][ T5954] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 823.438520][T12121] syz_tun: entered promiscuous mode [ 823.461798][T12121] macsec0: entered allmulticast mode [ 823.467208][ T5954] (NULL device *): no alternate interface [ 823.477624][T12121] syz_tun: entered allmulticast mode [ 823.506023][T12121] syz_tun: left allmulticast mode [ 823.519555][T12121] syz_tun: left promiscuous mode [ 823.547083][ T10] usb 10-1: 0:2 : does not exist [ 823.620361][ T5954] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 823.664112][ T5954] usb 8-1: USB disconnect, device number 2 [ 823.673810][T12125] loop3: detected capacity change from 0 to 128 [ 823.705390][T12114] loop5: detected capacity change from 0 to 32768 [ 823.789264][T12114] XFS (loop5): DAX unsupported by block device. Turning off DAX. [ 823.822100][ T6474] usb 10-1: USB disconnect, device number 2 [ 823.829265][T12114] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 823.940032][T12114] XFS (loop5): Ending clean mount [ 823.973975][T12114] XFS (loop5): Quotacheck needed: Please wait. [ 824.043993][ T9340] XFS (loop5): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_cntbt block 0x10 [ 824.094243][ T9340] XFS (loop5): Unmount and run xfs_repair [ 824.111841][ T9340] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 824.147520][ T9340] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 824.198439][ T9340] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10 ................ [ 824.212802][ T9340] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 824.222183][ T9340] 00000030: 00 00 00 00 20 bb 84 11 00 00 04 4e 00 00 00 02 .... ......N.... [ 824.233286][ T9340] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00 ...`............ [ 824.247638][ T9340] 00000050: 00 00 00 00 00 00 07 00 00 00 00 00 00 00 00 00 ................ [ 824.296329][ T9340] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 824.543229][ T9340] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 824.568690][ T9340] XFS (loop5): metadata I/O error in "xfs_btree_read_buf_block+0x290/0x470" at daddr 0x10 len 8 error 74 [ 824.880893][T12114] XFS (loop5): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 825.192209][ T8941] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 825.237785][ T8941] XFS (loop5): Uncorrected metadata errors detected; please run xfs_repair. [ 825.562691][ T6474] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 825.741826][T12168] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 825.748943][T12168] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 825.755736][T12168] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 825.762428][T12168] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 825.793436][ T6474] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 825.805821][T12168] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 825.822742][T12168] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 825.833090][ T6474] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 825.883351][ T6474] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 825.945059][ T6474] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 825.980632][ T6474] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.985763][T12175] loop5: detected capacity change from 0 to 128 [ 826.012261][ T6474] usb 4-1: Product: syz [ 826.016514][ T6474] usb 4-1: Manufacturer: syz [ 826.059671][ T6474] usb 4-1: SerialNumber: syz [ 826.111935][ T6474] usb 4-1: config 0 descriptor?? [ 826.156137][T12158] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 826.203264][T12158] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 826.258228][ T6474] usb 4-1: ucan: probing device on interface #0 [ 826.796447][T12191] can0: slcan on ttyS3. [ 827.244991][T12191] can0 (unregistered): slcan off ttyS3. [ 827.258771][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 827.267056][ T6474] ucan 4-1:0.0: probe with driver ucan failed with error -32 [ 827.392907][ T6474] usb 4-1: USB disconnect, device number 12 [ 827.590458][T12162] loop9: detected capacity change from 0 to 32768 [ 827.680937][T12162] jfs: Unknown parameter 'ÿÿ184467440737095516150xffffffffffffffff0x0000000000000000±ñV?Œù³ßCp~'~8pٻ젌|ž^½Ö(cŸoö—ÈêM ) Çÿÿÿÿÿÿÿÿÿ' [ 827.732407][T12199] batadv0: entered promiscuous mode [ 827.755425][T12199] macvtap1: entered promiscuous mode [ 827.766276][T12199] macvtap1: entered allmulticast mode [ 827.785973][T12199] batadv0: entered allmulticast mode [ 827.807651][T12199] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 827.825539][T12186] loop5: detected capacity change from 0 to 32768 [ 827.845828][T12199] batadv0: left allmulticast mode [ 827.853435][T12186] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1441 (12186) [ 827.869939][T12199] batadv0: left promiscuous mode [ 827.902898][ T6938] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 827.922321][T12186] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 827.955181][T12186] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm [ 828.154602][ T6938] usb 9-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 828.182018][ T6938] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 828.204846][ T6938] usb 9-1: Product: syz [ 828.214182][ T6938] usb 9-1: Manufacturer: syz [ 828.219691][ T6938] usb 9-1: SerialNumber: syz [ 828.269204][ T6938] usb 9-1: config 0 descriptor?? [ 828.284518][T12186] BTRFS info (device loop5): enabling ssd optimizations [ 828.307063][ T6938] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 828.315804][T12186] BTRFS info (device loop5): turning on async discard [ 828.322647][T12186] BTRFS info (device loop5): enabling free space tree [ 828.698964][ T8941] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 828.844344][T12232] loop7: detected capacity change from 0 to 512 [ 829.042936][T12232] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 829.056265][T12232] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 829.268297][ T6938] gspca_sunplus: reg_r err -71 [ 829.273243][ T6938] sunplus 9-1:0.0: probe with driver sunplus failed with error -71 [ 829.331484][ T6938] usb 9-1: USB disconnect, device number 4 [ 829.619477][T11448] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 829.811961][T12246] loop5: detected capacity change from 0 to 64 [ 830.615837][T12269] loop9: detected capacity change from 0 to 2048 [ 830.679821][T12269] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 830.720148][ T9907] usb 4-1: new low-speed USB device number 13 using dummy_hcd [ 830.913741][ T9907] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 830.946787][ T9907] usb 4-1: config 0 has no interface number 0 [ 830.980653][ T9907] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 831.034682][ T9907] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 831.077300][ T9907] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 831.110313][ T9907] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 831.171629][ T9907] usb 4-1: config 0 descriptor?? [ 831.211296][T12266] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 831.258548][ T9907] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 831.483860][T12289] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1469'. [ 831.494145][ T9907] usb 4-1: USB disconnect, device number 13 [ 831.555012][T12289] netlink: 'syz.9.1469': attribute type 22 has an invalid length. [ 831.607573][T12289] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1469'. [ 831.723573][T12262] loop5: detected capacity change from 0 to 32768 [ 831.864055][T12262] ================================================================== [ 831.872397][T12262] BUG: KASAN: slab-out-of-bounds in dtSearch+0x1683/0x21b0 [ 831.879682][T12262] Read of size 1 at addr ffff88805b667df8 by task syz.5.1458/12262 [ 831.887626][T12262] [ 831.890034][T12262] CPU: 1 UID: 0 PID: 12262 Comm: syz.5.1458 Not tainted syzkaller #0 PREEMPT(full) [ 831.890067][T12262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 831.890085][T12262] Call Trace: [ 831.890097][T12262] [ 831.890107][T12262] dump_stack_lvl+0x189/0x250 [ 831.890152][T12262] ? __kasan_check_byte+0x12/0x40 [ 831.890189][T12262] ? __pfx_dump_stack_lvl+0x10/0x10 [ 831.890225][T12262] ? lock_release+0x4b/0x3d0 [ 831.890275][T12262] ? __virt_addr_valid+0x4a5/0x5c0 [ 831.890305][T12262] print_report+0xca/0x240 [ 831.890338][T12262] ? dtSearch+0x1683/0x21b0 [ 831.890373][T12262] kasan_report+0x118/0x150 [ 831.890409][T12262] ? dtSearch+0x1683/0x21b0 [ 831.890449][T12262] dtSearch+0x1683/0x21b0 [ 831.890495][T12262] ? __kmalloc_noprof+0x43e/0x800 [ 831.890536][T12262] jfs_lookup+0x155/0x380 [ 831.890562][T12262] ? __pfx_jfs_lookup+0x10/0x10 [ 831.890585][T12262] ? d_alloc_parallel+0x14ac/0x1610 [ 831.890625][T12262] ? __lock_acquire+0xab9/0xd20 [ 831.890658][T12262] ? __pfx_d_alloc_parallel+0x10/0x10 [ 831.890687][T12262] ? __raw_spin_lock_init+0x45/0x100 [ 831.890716][T12262] ? __init_waitqueue_head+0xa9/0x150 [ 831.890745][T12262] __lookup_slow+0x297/0x3d0 [ 831.890772][T12262] ? __pfx___lookup_slow+0x10/0x10 [ 831.890806][T12262] ? down_read+0x1ad/0x2e0 [ 831.890832][T12262] lookup_slow+0x53/0x70 [ 831.890857][T12262] walk_component+0x2d2/0x400 [ 831.890878][T12262] ? path_lookupat+0x156/0x430 [ 831.890917][T12262] path_lookupat+0x163/0x430 [ 831.890961][T12262] filename_lookup+0x212/0x570 [ 831.891003][T12262] ? __pfx_filename_lookup+0x10/0x10 [ 831.891055][T12262] ? strncpy_from_user+0x150/0x2c0 [ 831.891092][T12262] ? getname_flags+0x1e5/0x540 [ 831.891129][T12262] user_path_at+0x3a/0x60 [ 831.891155][T12262] __se_sys_chdir+0x91/0x280 [ 831.891188][T12262] ? __pfx___se_sys_chdir+0x10/0x10 [ 831.891224][T12262] ? do_syscall_64+0xbe/0xfa0 [ 831.891272][T12262] do_syscall_64+0xfa/0xfa0 [ 831.891309][T12262] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 831.891335][T12262] ? clear_bhb_loop+0x60/0xb0 [ 831.891361][T12262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 831.891385][T12262] RIP: 0033:0x7fdb6678f6c9 [ 831.891409][T12262] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 831.891431][T12262] RSP: 002b:00007fdb6763d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000050 [ 831.891457][T12262] RAX: ffffffffffffffda RBX: 00007fdb669e5fa0 RCX: 00007fdb6678f6c9 [ 831.891477][T12262] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000140 [ 831.891494][T12262] RBP: 00007fdb66811f91 R08: 0000000000000000 R09: 0000000000000000 [ 831.891510][T12262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 831.891525][T12262] R13: 00007fdb669e6038 R14: 00007fdb669e5fa0 R15: 00007fff78e68678 [ 831.891556][T12262] [ 831.891565][T12262] [ 832.176442][T12262] Allocated by task 12262: [ 832.180872][T12262] kasan_save_track+0x3e/0x80 [ 832.185583][T12262] __kasan_slab_alloc+0x6c/0x80 [ 832.190459][T12262] kmem_cache_alloc_lru_noprof+0x36c/0x6e0 [ 832.196304][T12262] jfs_alloc_inode+0x28/0x70 [ 832.200950][T12262] alloc_inode+0x6a/0x1b0 [ 832.205310][T12262] iget_locked+0x135/0x6c0 [ 832.209734][T12262] jfs_iget+0x24/0x470 [ 832.213814][T12262] jfs_fill_super+0x8ad/0xd80 [ 832.218513][T12262] get_tree_bdev_flags+0x40e/0x4d0 [ 832.223642][T12262] vfs_get_tree+0x92/0x2b0 [ 832.228261][T12262] do_new_mount+0x302/0xa10 [ 832.232804][T12262] __se_sys_mount+0x313/0x410 [ 832.237495][T12262] do_syscall_64+0xfa/0xfa0 [ 832.242019][T12262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 832.247961][T12262] [ 832.250295][T12262] The buggy address belongs to the object at ffff88805b666de0 [ 832.250295][T12262] which belongs to the cache jfs_ip of size 2216 [ 832.264038][T12262] The buggy address is located 1904 bytes to the right of [ 832.264038][T12262] allocated 2216-byte region [ffff88805b666de0, ffff88805b667688) [ 832.278980][T12262] [ 832.281502][T12262] The buggy address belongs to the physical page: [ 832.287941][T12262] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5b660 [ 832.296808][T12262] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 832.305516][T12262] memcg:ffff88801faa6f01 [ 832.309869][T12262] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 832.317533][T12262] page_type: f5(slab) [ 832.321553][T12262] raw: 00fff00000000040 ffff88801c3708c0 dead000000000122 0000000000000000 [ 832.330189][T12262] raw: 0000000000000000 00000000800d000d 00000000f5000000 ffff88801faa6f01 [ 832.339147][T12262] head: 00fff00000000040 ffff88801c3708c0 dead000000000122 0000000000000000 [ 832.348195][T12262] head: 0000000000000000 00000000800d000d 00000000f5000000 ffff88801faa6f01 [ 832.357234][T12262] head: 00fff00000000003 ffffea00016d9801 00000000ffffffff 00000000ffffffff [ 832.366448][T12262] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 832.375138][T12262] page dumped because: kasan: bad access detected [ 832.381575][T12262] page_owner tracks the page as allocated [ 832.387306][T12262] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0xd2050(__GFP_RECLAIMABLE|__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 7110, tgid 7109 (syz.3.346), ts 195423381128, free_ts 112241170447 [ 832.409727][T12262] post_alloc_hook+0x234/0x290 [ 832.414615][T12262] get_page_from_freelist+0x2365/0x2440 [ 832.420314][T12262] __alloc_frozen_pages_noprof+0x181/0x370 [ 832.426143][T12262] alloc_pages_mpol+0x232/0x4a0 [ 832.431009][T12262] allocate_slab+0x86/0x3b0 [ 832.435520][T12262] ___slab_alloc+0xf56/0x1990 [ 832.440213][T12262] __slab_alloc+0x65/0x100 [ 832.444738][T12262] kmem_cache_alloc_lru_noprof+0x3fe/0x6e0 [ 832.450581][T12262] jfs_alloc_inode+0x28/0x70 [ 832.455193][T12262] alloc_inode+0x6a/0x1b0 [ 832.459541][T12262] new_inode+0x22/0x170 [ 832.463717][T12262] jfs_fill_super+0x569/0xd80 [ 832.468499][T12262] get_tree_bdev_flags+0x40e/0x4d0 [ 832.473643][T12262] vfs_get_tree+0x92/0x2b0 [ 832.478390][T12262] do_new_mount+0x302/0xa10 [ 832.482929][T12262] __se_sys_mount+0x313/0x410 [ 832.487629][T12262] page last free pid 6083 tgid 6083 stack trace: [ 832.494053][T12262] __free_frozen_pages+0xbc8/0xd30 [ 832.499191][T12262] __put_partials+0x146/0x170 [ 832.504006][T12262] put_cpu_partial+0x1f2/0x2e0 [ 832.508897][T12262] __slab_free+0x288/0x2a0 [ 832.513326][T12262] qlist_free_all+0x97/0x100 [ 832.517935][T12262] kasan_quarantine_reduce+0x148/0x160 [ 832.523423][T12262] __kasan_slab_alloc+0x22/0x80 [ 832.528298][T12262] kmem_cache_alloc_noprof+0x37d/0x700 [ 832.533787][T12262] ptlock_alloc+0x20/0x70 [ 832.538146][T12262] pte_alloc_one+0x7a/0x370 [ 832.542671][T12262] __pte_alloc+0x25/0x1a0 [ 832.547057][T12262] insert_page+0x28f/0x2c0 [ 832.551574][T12262] kcov_mmap+0xc7/0x130 [ 832.556039][T12262] mmap_region+0x14b1/0x1d40 [ 832.560664][T12262] do_mmap+0xc45/0x10d0 [ 832.564948][T12262] vm_mmap_pgoff+0x2a6/0x4d0 [ 832.569555][T12262] [ 832.571887][T12262] Memory state around the buggy address: [ 832.577549][T12262] ffff88805b667c80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 832.585622][T12262] ffff88805b667d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 832.593696][T12262] >ffff88805b667d80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 832.601867][T12262] ^ [ 832.609853][T12262] ffff88805b667e00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 832.618015][T12262] ffff88805b667e80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 832.626088][T12262] ================================================================== [ 832.673745][T12262] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 832.681145][T12262] CPU: 0 UID: 0 PID: 12262 Comm: syz.5.1458 Not tainted syzkaller #0 PREEMPT(full) [ 832.690930][T12262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 832.701309][T12262] Call Trace: [ 832.704914][T12262] [ 832.708273][T12262] dump_stack_lvl+0x99/0x250 [ 832.712941][T12262] ? __asan_memcpy+0x40/0x70 [ 832.717578][T12262] ? __pfx_dump_stack_lvl+0x10/0x10 [ 832.722938][T12262] ? __pfx__printk+0x10/0x10 [ 832.727600][T12262] vpanic+0x237/0x6d0 [ 832.731631][T12262] ? __pfx_vpanic+0x10/0x10 [ 832.736176][T12262] ? preempt_schedule+0xae/0xc0 [ 832.741087][T12262] ? __pfx_preempt_schedule+0x10/0x10 [ 832.746536][T12262] panic+0xb9/0xc0 [ 832.750391][T12262] ? __pfx_panic+0x10/0x10 [ 832.754854][T12262] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 832.760811][T12262] ? dtSearch+0x1683/0x21b0 [ 832.765358][T12262] check_panic_on_warn+0x89/0xb0 [ 832.770318][T12262] ? dtSearch+0x1683/0x21b0 [ 832.774865][T12262] end_report+0x6f/0x160 [ 832.779130][T12262] kasan_report+0x129/0x150 [ 832.783745][T12262] ? dtSearch+0x1683/0x21b0 [ 832.788273][T12262] dtSearch+0x1683/0x21b0 [ 832.792804][T12262] ? __kmalloc_noprof+0x43e/0x800 [ 832.798132][T12262] jfs_lookup+0x155/0x380 [ 832.802624][T12262] ? __pfx_jfs_lookup+0x10/0x10 [ 832.807702][T12262] ? d_alloc_parallel+0x14ac/0x1610 [ 832.812938][T12262] ? __lock_acquire+0xab9/0xd20 [ 832.817913][T12262] ? __pfx_d_alloc_parallel+0x10/0x10 [ 832.823462][T12262] ? __raw_spin_lock_init+0x45/0x100 [ 832.828775][T12262] ? __init_waitqueue_head+0xa9/0x150 [ 832.834178][T12262] __lookup_slow+0x297/0x3d0 [ 832.838824][T12262] ? __pfx___lookup_slow+0x10/0x10 [ 832.844032][T12262] ? down_read+0x1ad/0x2e0 [ 832.848489][T12262] lookup_slow+0x53/0x70 [ 832.852834][T12262] walk_component+0x2d2/0x400 [ 832.857531][T12262] ? path_lookupat+0x156/0x430 [ 832.862325][T12262] path_lookupat+0x163/0x430 [ 832.867026][T12262] filename_lookup+0x212/0x570 [ 832.871816][T12262] ? __pfx_filename_lookup+0x10/0x10 [ 832.877763][T12262] ? strncpy_from_user+0x150/0x2c0 [ 832.882929][T12262] ? getname_flags+0x1e5/0x540 [ 832.888507][T12262] user_path_at+0x3a/0x60 [ 832.892976][T12262] __se_sys_chdir+0x91/0x280 [ 832.897613][T12262] ? __pfx___se_sys_chdir+0x10/0x10 [ 832.902846][T12262] ? do_syscall_64+0xbe/0xfa0 [ 832.907560][T12262] do_syscall_64+0xfa/0xfa0 [ 832.912175][T12262] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 832.918267][T12262] ? clear_bhb_loop+0x60/0xb0 [ 832.923149][T12262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 832.929083][T12262] RIP: 0033:0x7fdb6678f6c9 [ 832.933882][T12262] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 832.953968][T12262] RSP: 002b:00007fdb6763d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000050 [ 832.962409][T12262] RAX: ffffffffffffffda RBX: 00007fdb669e5fa0 RCX: 00007fdb6678f6c9 [ 832.970426][T12262] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000140 [ 832.978423][T12262] RBP: 00007fdb66811f91 R08: 0000000000000000 R09: 0000000000000000 [ 832.986495][T12262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 832.994595][T12262] R13: 00007fdb669e6038 R14: 00007fdb669e5fa0 R15: 00007fff78e68678 [ 833.002600][T12262] [ 833.006034][T12262] Kernel Offset: disabled [ 833.010450][T12262] Rebooting in 86400 seconds..