last executing test programs: 3m31.573018102s ago: executing program 4 (id=35): r0 = socket(0x28, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_current(r4, &(0x7f0000000440)=ANY=[@ANYBLOB='changeprofile ://&'], 0x17) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) syz_clone3(&(0x7f00000008c0)={0x14860000, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f0000000280)=[r5], 0x1}, 0x58) r7 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r7, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r7, 0xffffffff) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r8, 0xaf01, 0x0) ioctl$FS_IOC_GETFLAGS(r8, 0x80086601, &(0x7f0000000040)) socket$nl_netfilter(0x10, 0x3, 0xc) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x1}], 0x1}}], 0x1, 0x8000) accept4$unix(r7, 0x0, 0x0, 0x80800) r9 = syz_open_dev$audion(&(0x7f0000000140), 0xffffffffffffffff, 0x490000) sendmsg$IPSET_CMD_TEST(r9, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)={0xfc, 0xb, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}, @IPSET_ATTR_ADT={0x48, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x33}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x2}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x2}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}}]}, @IPSET_ATTR_DATA={0x74, 0x7, 0x0, 0x1, [@IPSET_ATTR_COMMENT={0x6, 0x1a, '-\x00'}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x8}, @IPSET_ATTR_COMMENT={0x15, 0x1a, '/dev/vhost-vsock\x00'}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x6}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x1}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xffffffffffff7fff}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}]}, @IPSET_ATTR_LINENO={0xffffffffffffff83, 0x9, 0x1, 0x0, 0xad7}]}, 0xfc}, 0x1, 0x0, 0x0, 0x8010}, 0x4000000) 3m30.057480229s ago: executing program 4 (id=38): socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000240)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f00000004c0)='./file0\x00') r0 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) mount$9p_xen(0x0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x1021002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000340)={0xd, 0x200200090}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() r3 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r3, 0x29, 0x11, &(0x7f0000fcb000), 0x4) sched_setscheduler(r2, 0x1, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000600)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) openat$audio(0xffffffffffffff9c, 0x0, 0xa0100, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$binfmt_register(r7, &(0x7f0000000500)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x6, 0x3a, '@', 0x3a, '\\\x9e\xbd\x1d\r6\xea\x12+(\x03z', 0x3a, './file0', 0x3a, [0x43]}, 0x35) r8 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r8, &(0x7f0000003f40)=[{&(0x7f0000000000)=@in={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)="1c", 0x1}], 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000084000000000000001fc7"], 0x18, 0x48060}], 0x1, 0x200000d0) accept4$inet(r8, 0x0, 0x0, 0x80000) r9 = epoll_create1(0x80000) fcntl$dupfd(r6, 0x406, r9) 3m25.157673211s ago: executing program 4 (id=47): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x200000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCSPGRP(r4, 0x5410, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r4, 0xc1105518, &(0x7f00000003c0)={{0x2, 0x3, 0x1673c94a, 0x8, '\x00', 0x7}, 0x3, 0x20, 0x5, r1, 0x2, 0x6, 'syz1\x00', &(0x7f0000000140)=['bridge\x00', ')\\#\x00'], 0xb}) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, &(0x7f0000000780)=""/106, &(0x7f0000000380), &(0x7f0000000000), 0x80, 0xffffffffffffffff, 0x0, 0x7}, 0x38) r5 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) (fail_nth: 6) 3m23.433615639s ago: executing program 4 (id=50): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x7c}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000240)={[{@delalloc}, {@nogrpid}, {@nouid32}, {@init_itable}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@noauto_da_alloc}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") close(0xffffffffffffffff) syz_mount_image$iso9660(&(0x7f0000000380), &(0x7f00000000c0)='./file0\x00', 0x204818, &(0x7f0000000900)={[{@map_off}, {@check_strict}, {@cruft}, {@map_off}, {@unhide}, {@session={'session', 0x3d, 0x5}}, {@map_off}, {@mode={'mode', 0x3d, 0x483}}]}, 0x1, 0x544, &(0x7f0000001000)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x2020) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = gettid() syz_open_procfs(r2, &(0x7f0000000040)='timerslack_ns\x00') r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000401e04012800000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x7, {[@main=@item_012={0x1, 0x0, 0xb, 'S'}, @global=@item_4={0x3, 0x1, 0x7, "76dac36b"}]}}, 0x0}, 0x0) 3m18.504658089s ago: executing program 4 (id=59): sysinfo(0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[], 0x0, 0x8e, 0x0, 0x1, 0xa}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000480)={r0, 0x0, 0x0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000200)={@loopback={0xffffffffffff0000}, 0x10200000, 0x0, 0xff, 0x9, 0x6, 0xfffe}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) fcntl$getown(r2, 0x9) io_setup(0x6, 0x0) r3 = memfd_secret(0x80000) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) syz_open_procfs(0x0, 0x0) sendmsg$key(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=ANY=[@ANYBLOB="020100000e000000000000000000000005000600000000000a0000000000000000000000000000000000000000000000000000000000000005000500000000000a00000000000000fe8092d59736ee0f2c880000000000bb0000000000ebff00020013"], 0x70}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r5, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000002c0)="9e", 0x1, 0x20040141, &(0x7f0000000040)={0xa, 0x4e23, 0x10000, @loopback, 0xe}, 0x1c) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) 3m16.343065083s ago: executing program 4 (id=65): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0xc) syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) socket(0x1e, 0x4, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x2000000) 3m15.557325516s ago: executing program 32 (id=65): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0xc) syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) socket(0x1e, 0x4, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x2000000) 14.174090923s ago: executing program 2 (id=520): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010, 0x1, 0x39d}, &(0x7f0000000040)=0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r2 = syz_open_dev$video4linux(&(0x7f0000000000), 0x100000, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x40000) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$VIDIOC_ENUMAUDIO(r3, 0xc0345641, &(0x7f0000000040)={0x0, "eaf716300d6494e1cff7c67783b0d0c45678ef69fd4795732cb34e8fc696d5a6", 0x1, 0x1}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r2, 0xc040564a, &(0x7f00000000c0)={0x0, 0x0, 0x1014, 0xfffffff9, 0x0, 0x0, 0x268}) 13.808311883s ago: executing program 6 (id=521): openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) setreuid(0xee01, 0xee00) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x10, &(0x7f0000000440), 0x4) sendmsg$inet(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)}, 0x200048c1) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40002002) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x24004004) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000062102000100000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00]'], 0x54}, 0x1, 0x0, 0x0, 0x280608c0}, 0x0) sendmsg(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)='x', 0x1}], 0x1}, 0x4) r6 = syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0) preadv(r6, &(0x7f0000000740)=[{&(0x7f0000000540)=""/113, 0x71}, {0x0}], 0x2, 0x8, 0x10) r7 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r7, 0x0) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r8, &(0x7f0000000f80)=""/4096, 0x1000) 13.010056789s ago: executing program 2 (id=523): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000000)=0xffffff7e, 0x4) bind$inet(r0, &(0x7f0000000400)={0x2, 0xfffc, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2a, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000001400b59527bd7020ffdbdf250a40c000", @ANYRES32=r7, @ANYBLOB="14000100fe8800000000000000000000000001010800080042010000e1b7e124e7fbb2ac834b01e61d2b2e18e4fa9fd013aee85e36682334f92638a7244c0cc39c0ecf146f2df04e111f96e2c760fc8420b57d209cfe6bc4c7346640c5c0ca13be7ec6bbcf428cad4a633d5d5ad0d706b50361e5e567ec86c2669543eb023ea3e7fdb0cf21540e1819b25aa4bf84f950e159d07126b8c948f370e5b4e8a52f192eef5f791883a9d5798b3c480f727f796b087a2a7a8649"], 0x34}, 0x1, 0x0, 0x0, 0x2004c041}, 0x400c0c0) write$binfmt_misc(r4, &(0x7f0000000000), 0xfffffecc) splice(r3, 0x0, r5, 0x0, 0x8001, 0xd) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r8, @ANYRES32=r8], 0x44}}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={0x0, 0x0}) prlimit64(r10, 0x5, &(0x7f00000000c0)={0x9, 0x100000001}, &(0x7f0000000100)) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0xffff, 0xc, 0x8, 0x182}, {0x7ff, 0x4, 0x1, 0xa}]}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001e61e410b1134200557b0102030109021b0001000000000904000001cf28fc000905822fe9"], 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x20000, 0x9) ftruncate(r12, 0x6000000) syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x1600008, &(0x7f0000000280)=ANY=[@ANYBLOB='nodecompose,umask=00000000000000000000001,force,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c6e6c733d6b6f69382d752c6e6f6465636f6d706f73652c626172726965722c00b5bc0399f6a1646077740e7583c9e85969f9d1ee730064af2f02e42576c7edfd819512d13c62582460a10a37c7b9c8630d3ab79e019bd6ab66125eb52ecd4a48d549172897321857e29f1c8e22cb6aa2f5e62be41f2a375dd3d2719c49a5b79f314d14bd408569f11192cd0a4a49f516cd5ff9466b8c1a60e274f9f1459d6b7e29aa883cd459b017d54d1feeaa95625faba41ed5684573e0822868bbfe1e3d7dd0bce195b672dc5721b83d168f3f9254dfd339dc08ab77f61c70df5792a4bb510853e7015da4037d58b52cd91b5e3cfe49c5d043370109a247a7577115461d851aba8f322f7b536a3c3241213a6a881e8f721f14d2c4a61ca77c42e4e4e155ce8b291e34a8934a86bb34de6d9a2f6f4847e5"], 0x3, 0x632, &(0x7f0000000800)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) copy_file_range(r12, 0x0, r12, &(0x7f00000004c0)=0x100, 0x9, 0x0) ioctl$KDGKBTYPE(r12, 0x4b33, &(0x7f0000000200)) sched_setaffinity(r10, 0x8, &(0x7f0000000240)=0xd) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r11, 0xc0182101, &(0x7f00000001c0)={r9, 0x3, 0xd}) 11.798391444s ago: executing program 6 (id=526): mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 11.221899358s ago: executing program 6 (id=527): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x64004044) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x1) sendmmsg$inet6(r1, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0x4}], 0x1}}], 0x2, 0x1c000) 10.998924441s ago: executing program 1 (id=529): mbind(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x1, 0x0, 0x734d, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000000)=0x1, 0x83, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4000) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) syz_emit_vhci(&(0x7f0000000280)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) syz_open_dev$MSR(&(0x7f0000000040), 0x9, 0x0) 9.842927414s ago: executing program 3 (id=531): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) syz_clone3(&(0x7f0000000280)={0x41030080, &(0x7f00000000c0)=0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140), {0xd}, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=""/81, &(0x7f0000000240)=[r0], 0x1}, 0x58) getpgid(r0) r2 = syz_open_procfs(r0, &(0x7f0000000040)='net/dev\x00') ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r1, 0xf505, 0x0) lseek(r2, 0x3, 0x0) getdents64(r2, &(0x7f0000003440)=""/92, 0x5c) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000002000/0x3000)=nil, 0x3000}, 0x1}) 8.773660914s ago: executing program 1 (id=532): syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x94, &(0x7f0000003280)=ANY=[@ANYRES32=0x0], 0x1, 0xd99, &(0x7f0000006900)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) setreuid(0xee01, 0xee00) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x10, &(0x7f0000000440), 0x4) sendmsg$inet(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d0", 0x59}], 0x1}, 0x200048c1) recvmsg(r2, 0x0, 0x40002002) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x24004004) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000062102000100000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00]'], 0x54}, 0x1, 0x0, 0x0, 0x280608c0}, 0x0) sendmsg(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)='x', 0x1}], 0x1}, 0x4) r7 = syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0) preadv(r7, &(0x7f0000000740)=[{&(0x7f0000000540)=""/113, 0x71}, {0x0}], 0x2, 0x8, 0x10) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f00000001c0)=""/33) getdents64(r0, 0xfffffffffffffffe, 0x29) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000009c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x80, &(0x7f0000000100)=@nfc={0x27, 0x0, 0x1, 0x5}, 0x0, 0x0, 0x1}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/\x00et/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44\x8cm\xa0\x8dN\xd4\xa2\x88\x00\xd1l,'}, 0xff0a) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r9) r10 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r10, 0x0) r11 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r11, &(0x7f0000000f80)=""/4096, 0x1000) io_uring_enter(0xffffffffffffffff, 0x780, 0x0, 0xc, 0x0, 0x0) 8.505730383s ago: executing program 2 (id=534): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x468480, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) fsopen(&(0x7f0000000100)='efivarfs\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000abb000/0x1000)=nil, 0x1000, 0x0, 0x102000200032, 0xffffffffffffffff, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x43, &(0x7f0000abaff9)={0x77359400}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 8.463271905s ago: executing program 0 (id=535): r0 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r0, 0x852ac000) unshare(0x24060400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r1, 0x8008f512, &(0x7f0000002440)) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x18}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000029c0)=ANY=[@ANYBLOB="60000000000201040000000000000000020000ff23000200ac1e00010c00028005000100000000002400038014000180080001000000000008000200ac1414000c00028005000100000000000400018000000000000000000000000000000000cdf53bc3f8f24c3470e680dc0000a290b708eb1d7bff42ef97c928db4b3207566016c0ed33b1c56ae37bce4052dc7c6f5c508d7d5e8c1ac4079e8ecdc2b9566305b9d93a85b11b69a2c2311d3e59ae2899245b15ff248d494e832fdcf39eb3f0a126608d9e07fabbe8488952"], 0x60}}, 0x0) fallocate(r1, 0x41, 0x0, 0x3fe) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x7, 0x174d, {0x0}, {0xee00}, 0x9, 0x5ce6}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x16, &(0x7f00000026c0)={[{@journal_checksum}, {@nogrpid}, {@dax_never}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@user_xattr}, {@noblock_validity}, {@nomblk_io_submit}, {@nolazytime}, {@grpid}, {@nomblk_io_submit}]}, 0x0, 0x4f5, &(0x7f0000002c40)="$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") r4 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) syz_clone(0x104000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f0000002680)={&(0x7f0000002580), 0xc, &(0x7f0000002640)={&(0x7f0000002600)={0x1c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4005}, 0x20000001) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r5 = syz_io_uring_setup(0x315f, &(0x7f0000000200)={0x0, 0xcfca, 0x1040, 0xfffffffd, 0x1000001}, &(0x7f0000000100), &(0x7f0000000040)) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r5, 0xc, 0x0, 0x0) ioctl$IMCTRLREQ(r1, 0x80044945, &(0x7f0000002480)={0x400a, 0x3, 0x3, 0xffffc005}) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) fcntl$setown(r0, 0x8, r3) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x19d3, 0x4) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) recvmmsg(r6, &(0x7f0000004f80)=[{{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000002b00)=""/152, 0x98}], 0x1}, 0x10}], 0x1, 0x20, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20040800, &(0x7f0000000180)={0xa, 0x4e24, 0x8041, @ipv4={'\x00', '\xff\xff', @local}, 0x627bcafb}, 0x1c) recvmmsg(r0, &(0x7f00000023c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/66, 0x42}], 0x2, &(0x7f00000011c0)=""/92, 0x5c}, 0xc}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001240)=""/205, 0xcd}, {&(0x7f0000001340)=""/4096, 0x1000}], 0x2, &(0x7f0000002340)=""/72, 0x48}, 0x3}], 0x2, 0x40000000, 0x0) 8.368518419s ago: executing program 3 (id=536): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @remote}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @private0}], 0x2c) (fail_nth: 3) 8.268465672s ago: executing program 6 (id=537): socket(0x400000000010, 0x3, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, 0x0, 0x340440f1) setsockopt$sock_attach_bpf(r0, 0x1, 0x12, &(0x7f00000007c0), 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r1}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) ppoll(&(0x7f0000000500)=[{}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpeername(0xffffffffffffffff, 0x0, &(0x7f0000000340)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x39) r5 = socket(0x10, 0x80002, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) ioctl$TIOCMIWAIT(r6, 0x545c, 0x200000000000300) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ff81000000000000000000be7ba9bd"], 0x1c}}, 0x4000000) recvmmsg$unix(r5, &(0x7f00000032c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) 8.069355371s ago: executing program 1 (id=538): openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) setreuid(0xee01, 0xee00) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x10, &(0x7f0000000440), 0x4) sendmsg$inet(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)}, 0x200048c1) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40002002) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x24004004) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000062102000100000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00]'], 0x54}, 0x1, 0x0, 0x0, 0x280608c0}, 0x0) sendmsg(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)='x', 0x1}], 0x1}, 0x4) r6 = syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0) preadv(r6, &(0x7f0000000740)=[{&(0x7f0000000540)=""/113, 0x71}, {0x0}], 0x2, 0x8, 0x10) r7 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r7, 0x0) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r8, &(0x7f0000000f80)=""/4096, 0x1000) 7.657809609s ago: executing program 3 (id=539): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 7.304565041s ago: executing program 3 (id=540): syz_mount_image$iso9660(&(0x7f0000000780), &(0x7f0000000000)='./file0\x00', 0x21488b, &(0x7f0000000100)=ANY=[@ANYBLOB='map=acorn,sbsector=0x0000000000000000,uid=', @ANYRESDEC=0x0, @ANYBLOB="0000b18eb07a9dbec07d91edf772ce16e8f4545927e1e38533740c5b1da10b839e273fa468d364205a63adda5262cda8e690d1049c884d79e243210c733da8adfb6db6f3b3464aca805a08f3cacf9bce83fd7888eb1f09a8a7f55959926a7fc0ac27fd519bccdcfda872f5036561697524e41311c104625541e5813f59723a93937459c71151e933b1336955d87ece53534c57842af04b6669c71c3bd22895f4233899b168d36e849302af060f3fc513037a650e0100fe30ac79b938156478bc40add08ab493adc2140a5193909ac1f22216a92158df65", @ANYRES8=0x0, @ANYRES8, @ANYRES64=0x0], 0x1, 0x65b, &(0x7f00000017c0)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) fcntl$setlease(r0, 0x400, 0x0) mq_open(0x0, 0x2, 0x28, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280), 0x42000, 0x0) read$FUSE(r2, &(0x7f0000002600)={0x2020}, 0x2020) 7.295336487s ago: executing program 1 (id=541): r0 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) getpid() sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)={0x68, 0x1, 0x2, 0x101, 0x0, 0x0, {0xa}, [@CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_MASTER={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @private=0xa010100}}}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x3}]}, 0x68}}, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000500)={[{@debug}, {@delalloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {@test_dummy_encryption}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}]}, 0x1, 0xbb4, &(0x7f00000017c0)="$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") syz_mount_image$exfat(0x0, &(0x7f00000002c0)='./file1\x00', 0x1161808, 0x0, 0x0, 0x0, &(0x7f00000002c0)) chdir(&(0x7f00000003c0)='./bus\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000240)='uid_map\x00') writev(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)='4', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000340)={{0x2, 0x0, 0x0, 0x0, 0xee01, 0x8, 0x1}, 0x0, 0x0, 0x8, 0x3, 0x4, 0x33, 0x1, 0xf9e4, 0x5, 0x5, 0xffffffffffffffff}) msgctl$IPC_INFO(0x0, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000044c0)={&(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4620, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f00000001c0)={0x0, 0x3d, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x1a000}}, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) 6.836165352s ago: executing program 6 (id=542): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001d00)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x10) r4 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000100)=""/24, 0x18}, {0x0, 0x63}], 0x2, 0x0, 0x20) 6.350326777s ago: executing program 2 (id=544): prlimit64(0x0, 0x5, &(0x7f0000000140)={0x2000000000008, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000c00)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000b80)=""/4104, 0x1008}, {0x0}], 0x2}, 0x7}], 0x1, 0x40000021, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f00000034c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0xcac) r8 = socket(0x2a, 0x2, 0x0) getsockname$packet(r8, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_TARGET={0x8, 0x1, 0x8}]}}]}, 0x38}}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) fchown(0xffffffffffffffff, r6, r7) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="020000000100040000000000040004000000000008000000", @ANYRES32=r7], 0x2c, 0x2) sendmsg$unix(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000740), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000000f0000001fd8789b5fac00", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r3, @ANYRES32, @ANYRES32=r1, @ANYRES32=r3, @ANYRES32=r1, @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00'], 0x70, 0x4000}, 0x8000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r11 = syz_open_dev$vim2m(0x0, 0x9, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r11, 0xc0405602, &(0x7f0000000a80)={0x4000, 0xd, 0x0, "134600cea4dd512d97d4188cbf770637bc747721f37af54dd1dc03030096c337"}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x1080, &(0x7f0000000480)={'trans=tcp,', {'port', 0x3d, 0x40000000004e23}, 0x2c, {[{@noxattr}, {@noextend}, {@cache_none}, {@directio}, {@cachetag={'cachetag', 0x3d, 'pie\x00'}}, {@noextend}], [{@euid_eq}, {@fowner_gt={'fowner>', r6}}, {@subj_type={'subj_type', 0x3d, '$'}}, {@euid_gt}, {@measure}, {@seclabel}, {@smackfstransmute={'smackfstransmute', 0x3d, 'GPL\x00'}}]}}) unlinkat(0xffffffffffffff9c, 0x0, 0x200) sched_getscheduler(r0) 4.879883894s ago: executing program 1 (id=545): openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r1 = syz_clone(0x200000, &(0x7f0000001480)="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", 0xf78, &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)="1733ba6eb19bab42382ee5caf0b62994871d80df6f1e7d52131f6cd916c62a10772788f1c76f382b068b289cf7f58e63f987652a64c738a6575278470f3128834cbbf02db21734edd597bb4501d3dfb6348193c1408af1546968c41751a97b2954f15580e3") syz_open_procfs(r1, &(0x7f0000000440)='net/anycast6\x00') write$UHID_CREATE(r0, &(0x7f0000000a00)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000500)=""/18, 0x12, 0x5, 0x4, 0x1000, 0x0, 0xc04}}, 0x120) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) eventfd2(0x5, 0x80001) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x15, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f000000040b2100000095f5758483"], 0x0}, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="200146"], 0x0}) syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000c80)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[], 0x1, 0xc4d, &(0x7f0000001b40)="$eJzs3V1sXGdaB/DnnWMndsqyU9qmXbpIsxSxaZoE56OtUVrkbIy1K0VtVMcLNyCP40kY1R67trNKK1gFCbgBQVCRVsAFuUHigovcIKEVQhE3iwRIEajSIpAItI1WQoBXsLBiJYzOzDv22BvXbr6cNL/fbvKfc+Y9M++Z9jlzpprnTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEV/46RNDh9NOzwIAuJ9eG39j6Kj3fwB4pJzx+R8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgK2lKOKtSPHe2HKabC93DJxqti5cnBgdu/VmgylSVKJojy//DBw+cvTYiy+9PNzNj97+bvtMvD5+5kTt5Nzs/EJjcbExXZtoNc/OTTe2/Qh3uv1G+9svQG32zQvT584t1o4cOrru7ovVm7sf21s9Pvzsgee7YydGx8bGe8b09d/2s3+fdPceik+QXVHEFyPFNw5+K9UjohJ3XgtbHDvutcHoK+uvvRMTo2PtHZlp1ltL5Z2pkkf1RVR7Nhrp1sh9qMU7MhJxqfznVE54f7l74/P1hfrUTKN2ur6w1FxqzrVSpTPbcn+qUYnhFDEfEcvFTk+eB01/FPFqpLj5veU0FRFFtw5eeG38jaGjm2/Ydx8nucnTV4uI6/EQ1Cw8oHZHEb8dKd6dHIqzua7aZfNBxOfLfCXirTKvpbicl1N5gBiO+Lb3E3io9UURfxMp5tJymu7Wfvu88tSXa19qnZvrGds9r3zoPx/cT85NeIANRBFT7TP+5XT7/7ELAAAAAAAAAAAAALg/ivh6pLg6uy/NR29PabN1vnamPjXT+VZw97v/tbzVysrKSjV1spZzKOdIztM5J3PO57yU83LOKzmv5ryW83rOGzmXc0YlP3/OWs6hnCM5T+eczDmf81LOyzmvdLLb0bhyLa+/nvNGzuWcoe8JAAAAAAAAAAAAAAAAAACAu2wwiviNSPHvv/+V9u9KR/t36T99fPjkqU/1/mb8M1s8Tjn2UER8Pbb3m7y78m+Np0r5v7u/X8DWBqKIr+bf//vlnZ4MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwQKhEEb8SKb72neUUKSJGIiajkzeKnZ4dAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFDanYp4NVL87O+OrK7ri4jU/n/HvvKvYzFS5HyizFdi5HA7KyMnyhyIOLQD8wdu3+Lb77xZn5lpLLjhhhturN7Y6SMTAAAAAAAAAAAAAAAAADzCUhF/Hyl+8veWUzUiLlZv7n5sb/X48LMHni+iaF8EIPWOf338zInaybnZ+YXG4mJjujbRap6dm25s9+kGTjVbFy5OjI7dk53Z0uA9nv/gwMm5+bcXmud/YemW9+8ZODG1uLRQP3vru2Mw+iKGetfsb094YnSsPemZZr3V3jRVNplgX0RtuzvDI29PKuJ/I8V7B78Zj+d1+fof/Z2lter/w19cW/rhvvW5+q9j+/jx6ePDJ/c8t53babsT3d8uvLIQxsZ7VvflWf5Qz7pqnte2HxseUWX9vxApfv6PitStoVz/P9BZKlbH/s9X12rq+IZctUP1/0TPuuP5qNXfFzGwNDvf/3TEwOLb7xxsztbPN843WseOvPzS8LGXXzz2Uv+uiIFzzZnG0Nqtbb92AAAAAAAAAAAAAAAAAHCv9KcivhApfunv/nK1bzz3/32qs7TW/9fb/7tvw+P0Xjdgs9u37PXboq+vV/mcKRXxVKR49s+eac83xR4973Cb9qQivlvW0/QX0+fyulz/ubP/1vV/aUOu2qH+38d71l3Kx4n/iBSP/8Ez8bme48TG7t5y3F9Eiqkf+WweF7vKcd3H6/REdxqDy7FfiRTvn14/tts3/cTa2MPb3S3YSWX9z0aKf/itv40fzevWX//j1vW/Z0Ou2qH6f7J3nyJi8e133qzPzDQWFrf9UsAjp6z/X48Uf/0n34zn8rqPuv5P9zo/+55bn4PdQTtU/0/1rKvmef3Yx3wtAAAAAAAAAAAA4GGxJxXxT5Hiz//0QDqY123n+7/TG3LVDn3/7+meddPrvv97725s+0UGAIAHRH8q4icixR9Pf5C6vbGb9v++stb/M7rxxL19Tv+D7T7/j3Wu/zH6/8vnTKmI/8t9vUNb9PX+eKT4tZ86kMelveW4ke50238PvDbXOnhiZmbubH2pPjXTqI3P1882ym33R4p//bfP5m0r7T7fbn90pzd4rSf4dyLFz33YHdvpCe72Uj65NvZwOfZgpPju++vHdvuunlobe6Qc+5uRYuy/bz1279rYo+XYf4wU//lurTt2Tzm2+3nu6bWxh87OzXzfRzYAAAAAAAAAAAAAAAAAAAB2Xn8qIkWKaz9zZbU3fv31v7rXAVh//a+N7tXv/1fvzm4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwEMhRRH/FSneG1tON4pyuWPgVLN14eLE6NitNxtMkaISRXt8+Wfg8JGjx1586eXhbn709nfbZ+L18TMnaifnZucXGouLjenaRKt5dm66se1HuL3ti03v2d9+AWqzb16YPndusXbk0NF1d1+s3tz92N7q8eFnDzzfHTsxOjY23jOmr3/bs99SunsPxSfIrijiryLFNw5+K/1zEVGJ266FVVscO+61wegr66+9ExOjY+0dmWnWW0vlnamSR/VFVHs2GunWyH2oxTsyEnEpIirlhPeXuzc+X1+oT800aqfrC0vNpeZcK1U6sy33pxqVGE4R8xGxvPnRikdUfxRxLVLc/N5y+pei84bWroMXXht/Y+jo5hv23cdJbvL01SLiejwENQsPqN1RxJOR4t3JoXi/6NRVu2w+iPh8ma9EvFXmtRSX83IqDxDDEd/2fgIPtb4o4nSkmEvL6YMi1377vPLUl2tfap2b6xnbPa986D8f3E/OTXiADUQRH7bP+JfTh97PAQAAAAAAAAAAAOABV8SrkeLq7L7U7g9d7Sltts7XztSnZjpf6+9+97+Wt1pZWVmppk7Wcg7lHMl5Oudkzvmcl3Jeznkl59Wc13Jez3mjnbvbjYnlclTy8+es5RzKOZLzdM7JnPM5L+W8nPNKzqs5r+W8nvNGzuWcH9H1DwAAAAAAAAAAAAAAAAAAd6QSRfxqpPjad5bTStH5fdnJ6OSN9X2uu3ZqjsC98f8BAAD//3zgG/w=") setrlimit(0x1, &(0x7f0000000140)={0x9, 0xffffffffffffffff}) ioctl$HIDIOCGUSAGES(r4, 0xd01c4813, 0x0) 4.693494746s ago: executing program 5 (id=546): clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) futex(&(0x7f0000000000)=0x1, 0x2, 0x0, &(0x7f0000000080)={r0, r1+60000000}, &(0x7f00000000c0)=0x1, 0x1) r2 = mq_open(&(0x7f0000000100)='\x00', 0x800, 0x1, &(0x7f0000000140)={0x0, 0x5, 0xffffffff, 0x100}) mq_timedreceive(r2, &(0x7f0000000180)=""/214, 0xd6, 0x4, &(0x7f0000000280)={0x0, 0x989680}) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x328000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000340)={0x6, r2, 0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000300)='mm_page_alloc\x00', r3, 0x0, 0x400}, 0x18) (async) bind$pptp(r3, &(0x7f00000003c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) (async) socket$key(0xf, 0x3, 0x2) (async, rerun: 64) mq_timedsend(r3, &(0x7f0000000400)="1f3c7303f711af31f89ced29902f314671f0e4c8f945150978d2042962961172e3740434f6a702d1017b219acaebaed82ec03d046453bbadd31927c9e6069a827726845684f643", 0x47, 0xe, &(0x7f0000000480)) (async, rerun: 64) getsockopt$MRT(r3, 0x0, 0xcf, &(0x7f00000004c0), &(0x7f0000000500)=0x4) r4 = add_key(&(0x7f0000000540)='big_key\x00', &(0x7f0000000580)={'syz', 0x2}, &(0x7f00000005c0)="a80089258303be2ee3e7401342a97263301625e27d94f61ea8abd32c2274e3d555d9e3dd7319cd85da9b2149c39aff68b84ad7fbaee927e6b50e6909fc3a94558711f00272ad083f180c315fd73d42fc8936fecd0570eacaa6ae81026b4b781e17771607eee53305ab3b26ffa3c92fae943c4761c2bfaa3fe27f0f135b757a0e9b38dcc813d7aebd15f4c4e95687c0b6293a7aa26a109b9a6354410abdfa76719bbba0eaa95652b72d22b30921e5ef2cb5e2", 0xb2, 0xfffffffffffffffc) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000680)='syzkaller\x00', 0x0) (async) io_setup(0x6, &(0x7f00000006c0)=0x0) io_pgetevents(r5, 0x100, 0x2, &(0x7f0000000700)=[{}, {}], 0x0, &(0x7f0000000780)={&(0x7f0000000740)={[0x3]}, 0x8}) (async) r6 = openat(r3, &(0x7f00000007c0)='./file0\x00', 0x3c041, 0x44) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x12) (async) quotactl_fd$Q_SYNC(r6, 0xffffffff80000101, 0x0, 0x0) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000880)={'syztnl2\x00', &(0x7f0000000800)={'ip6_vti0\x00', 0x0, 0x4, 0x7f, 0xff, 0x2, 0x40, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, 0x10, 0x40, 0xfffeffff, 0x1}}) (rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xe, 0x5, 0x0, 0x5, 0x20108, r6, 0x81f5, '\x00', r7, 0xffffffffffffffff, 0x0, 0x2, 0x4}, 0x50) keyctl$dh_compute(0x17, &(0x7f0000000940)={r4, r4, r4}, &(0x7f0000000980)=""/84, 0x54, &(0x7f0000000b00)={&(0x7f0000000a00)={'sha512-ssse3\x00'}, &(0x7f0000000a40)="b0f749bb3219b92e82f059bcba1bad10b8107cf4f2901f8cb99bb83642835e450f721c853552cc7164eeb2dff91dd73d16a36b5575e5b6a5ec099eff7cf522b64675ee44b56b6b7d47479ae2d2fcd5cddb6fe2983969cf54ecca143d0c0a710fcaff2321209f4564383a625e7c0e5bdffec0d12e9fd8dcf4ffa12c9073d71833ad490d737854071b67dba402ffb354b8ea1ec85748cf85b487bf", 0x9a}) (async) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa, 0x20010, r6, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x100, &(0x7f0000000b40)=0xfffffffd, 0x0, 0x4) (async) ioctl$AUTOFS_IOC_READY(r6, 0x9360, 0x1) ioctl$PTP_EXTTS_REQUEST(r3, 0x40103d02, &(0x7f0000000b80)={0xffffffdc, 0x5}) (async) syz_memcpy_off$IO_URING_METADATA_FLAGS(r8, 0x0, &(0x7f0000000bc0), 0x0, 0x4) (async, rerun: 32) recvfrom$netrom(r6, &(0x7f0000000c00)=""/53, 0x35, 0x40010001, &(0x7f0000000c40)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x2}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x48) (rerun: 32) ioctl$EVIOCGBITSW(r6, 0x80404525, &(0x7f0000000cc0)=""/215) (async, rerun: 32) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000dc0), 0x501000, 0x0) (rerun: 32) ioctl$PPPIOCATTCHAN(r9, 0x40047438, &(0x7f0000000e00)) 4.24698457s ago: executing program 0 (id=547): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) r2 = dup(r1) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0x20) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000200)={0x2, 0x7, 0x0, 0x2, 0x1, 0x4, 0x7f, 0x8, 0xc3, 0x81, 0x8, 0x81, 0x9}, 0xe) r3 = syz_open_dev$sg(&(0x7f0000000fc0), 0x0, 0x5) ioctl$SG_IO(r3, 0x2285, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000340)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000780)="aa1d484e243103000000f7c08bfcd111fbdf23ea32db0e8f21d5bc27bd8063067a0689fff2a41cfbf0e9d85e44751170", 0x30}], 0x2) ioctl$SG_GET_REQUEST_TABLE(r3, 0x2286, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.995774846s ago: executing program 5 (id=548): r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000400)=ANY=[@ANYBLOB="01000000000000000a004e9fdecf66fa2000010000ff0500000000000000000000000000010000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000003f8ea1d300000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000010000"], 0x90) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @remote}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @private0}], 0x2c) 3.955260722s ago: executing program 0 (id=549): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x64004044) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x1) sendmmsg$inet6(r1, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0x4}], 0x1}}], 0x2, 0x1c000) 3.645691689s ago: executing program 5 (id=550): syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x94, &(0x7f0000003280)=ANY=[@ANYRES32=0x0], 0x1, 0xd99, &(0x7f0000006900)="$eJzs3UtvXNUdAPBzx544LxqHmMZN09glpbiP2CRYpbsaKV2gSqgSnwClgYYa+ghdgIKUsOi2kRAfoIh9F31mgRSxSsWmVb8AYtVNipBoG1UCI9vnjMf/zOjOOLbH4/n9pDtn7v2fe88587hz575OAkZWY+1xcXG6SuntW29dvDcz/r/VKTOtHLNrj+N5bCml1GzNl9JkWN7SxHr62SfXLrWnn+e0ShdSlarW9PTs3da8R1JK19Nsup0m03Mfn7z50gfPLL934saJi2/M3dmZ1gMAwGi596N3f/m3x3947fj/f39mKU20ppft86U8fjRv9y9V6+M5af0PqNrSqm28OBDyjeehEfKNdcjXXk4z5BvvUv6BsNxml3wTNeWPtU3r1G4YZhv/46vG/KbxRmN+fv0/+aoPxw5U869cWX7h6oAqCmy7T2fyLj6DwTByw8qxQa+BANbF44b3uR73LDyY1tLGeyv/7tONzvPDNtjtz7/yh6v8d29Y47B99uunqbSrfI+O5vF4HGE8zNfv978sLx6PaPZYz27HEYbl+EK3eo7tcj22qlv94+div/paTsvrcCbE278/8T0dlvcY6Oye/f8Gw8gOK4NeAQF7VjxvbiUr8XheX4xP1MQP1sQP1cQP18SP1MRhlP3h1d+mm9XG//z4n77f/WFlP9tDOf1Sn/WJ+yP7LT+e99uvBy0/nk8Me9rcf09/+uvbf4/n/38ezv8/m39LJ/MKouwvjPvVW+f+hwuDG13yPRyq81CH/GvPpzbnq6Y2lpPa1jP31WN683zHuuU7vTnfZMh3OG+LHAz1jdsnh8N8ZfujrFfL6zUe2tsM7TgQ6lHemeM5PRjac7xbu8KO7AMhXzMPJ0K7pkK7HgnzfTm0q5re3K64/7zU52SYHo+TlHzhbbvvdym+F/G6jEdz+mZO38np+zn9qEO5o6h8Hrud/18+n9OpWb1wZfnyE3m8fE7vjDUnVqef3+V6Aw+u1+t/ptPm63+OtqY3G+3rhWMb06v29cJkmH6hy/Qn83j5Pfvp2KG16fOXfr78k+1uPIy4q6+9/rPnl5cv/8oTTzzxpPVk0GsmYKctvPryLxauvvb6uSsvP//i5Rcvv3L+ie9/78mnnlpcWNuqX2jftgf2l40f/UHXBAAAAAAAAAAAAOhZdajz5JzW3d+2XE9erk+P18czHMr7Vj4N5T4G5frPbvd1KddvHt+FOrL9duNyokG3Eejs3+7/azCM7LCy4i7+wN4w6P7/yn0PS3r03D+Prw4l292nN68v4/0L4UHs9f7nlL+/+v9r9X/V8/ov9Jg1ubVy/3jv0D/aik2nei0/tr/cB3aqv/L/lMsvrXks9Vb+yu9C+fFGpT36cyj/cI/l39f+01sr/y+5/PKyzZ3ttfz1GleNzfWI+43LfQDjfuPir6H95d5+fbd/ix213crlwygbln4m+zUs/X92U5Zb1oN59dw6Tlfuvx37O+i3/uW+3+V34JGw/Krm903/n8Otrv/P8vlb0P8n7DsfOv5nMIzssLKyMtCuT0a135W9YtCv/6C3IQdd/qBf/zqx/8/4fyn2/xnjsf/PGI/9f8Z47F8rxmP/n/H1jP1/xvjJsNzYP+h0TfwrNfFTNfGv1sRP18Tj/7cYn62Jn6mJz9TEH66JP1oTP1sT/0ZN/LGa+OM18bma+H739ZyOavthlMV+I33/YXSU4z/dvv9TNXFgeMV+neP3+5s1cWB4lfM8fL9hBFWd79gR97eX/bhv5vSdnL6f0492rILshm/l9Ns5/U5Ov5vTczmdz+lCTvUNOdx+869TZ25WG+f5HQvxXs8njdcDxPvEnO+xPvH4XL/ns57ssZydKn+Ll4MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADI3G2uPi4nSV0tu33rr4n6kf/Hh1ykwrx+za43geW0opNVNKVR4fD8u7PrGefvbJtUud0ipdWHss4+nZu615j6zOn2bT7TSZnvv45M2XPnhm+b0TN05cfGPuzs60HgAAAEbDFwEAAP//ManlwQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) setreuid(0xee01, 0xee00) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x10, &(0x7f0000000440), 0x4) sendmsg$inet(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d0", 0x59}], 0x1}, 0x200048c1) recvmsg(r2, 0x0, 0x40002002) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x24004004) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000062102000100000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00]'], 0x54}, 0x1, 0x0, 0x0, 0x280608c0}, 0x0) sendmsg(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)='x', 0x1}], 0x1}, 0x4) r7 = syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0) preadv(r7, &(0x7f0000000740)=[{&(0x7f0000000540)=""/113, 0x71}, {0x0}], 0x2, 0x8, 0x10) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f00000001c0)=""/33) getdents64(r0, 0xfffffffffffffffe, 0x29) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000009c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x80, &(0x7f0000000100)=@nfc={0x27, 0x0, 0x1, 0x5}, 0x0, 0x0, 0x1}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/\x00et/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44\x8cm\xa0\x8dN\xd4\xa2\x88\x00\xd1l,'}, 0xff0a) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r9) r10 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r10, 0x0) r11 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r11, &(0x7f0000000f80)=""/4096, 0x1000) io_uring_enter(0xffffffffffffffff, 0x780, 0x0, 0xc, 0x0, 0x0) 3.030410112s ago: executing program 5 (id=551): sysinfo(0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[], 0x0, 0x8e, 0x0, 0x1, 0xa}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000480)={r0, 0x0, 0x0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000200)={@loopback={0xffffffffffff0000}, 0x10200000, 0x0, 0xff, 0x9, 0x6, 0xfffe}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) fcntl$getown(r2, 0x9) io_setup(0x6, 0x0) r3 = memfd_secret(0x80000) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) syz_open_procfs(0x0, &(0x7f0000000440)='projid_map\x00') sendmsg$key(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=ANY=[@ANYBLOB="020100000e000000000000000000000005000600000000000a0000000000000000000000000000000000000000000000000000000000000005000500000000000a00000000000000fe8092d59736ee0f2c880000000000"], 0x70}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r5, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000002c0)="9e", 0x1, 0x20040141, &(0x7f0000000040)={0xa, 0x4e23, 0x10000, @loopback, 0xe}, 0x1c) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) 2.825461786s ago: executing program 0 (id=552): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 2.646535082s ago: executing program 3 (id=553): openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) setreuid(0xee01, 0xee00) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x10, &(0x7f0000000440), 0x4) sendmsg$inet(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)}, 0x200048c1) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40002002) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x24004004) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000062102000100000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00]'], 0x54}, 0x1, 0x0, 0x0, 0x280608c0}, 0x0) sendmsg(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)='x', 0x1}], 0x1}, 0x4) r6 = syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0) preadv(r6, &(0x7f0000000740)=[{&(0x7f0000000540)=""/113, 0x71}, {0x0}], 0x2, 0x8, 0x10) r7 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r7, 0x0) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r8, &(0x7f0000000f80)=""/4096, 0x1000) 2.038838145s ago: executing program 0 (id=554): socket(0x400000000010, 0x3, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, 0x0, 0x340440f1) setsockopt$sock_attach_bpf(r0, 0x1, 0x12, &(0x7f00000007c0), 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r1}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) ppoll(&(0x7f0000000500)=[{}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpeername(0xffffffffffffffff, 0x0, &(0x7f0000000340)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x39) r5 = socket(0x10, 0x80002, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) ioctl$TIOCMIWAIT(r6, 0x545c, 0x200000000000300) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ff81000000000000000000be7ba9bd"], 0x1c}}, 0x4000000) recvmmsg$unix(r5, &(0x7f00000032c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) 1.988880967s ago: executing program 6 (id=555): syz_usb_connect$printer(0x2, 0x0, 0x0, &(0x7f00000009c0)={0x0, 0x0, 0x5, 0x0}) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x80000000, 0x9, 0x31363553, 0x0, 0x3, [{0x4, 0x5}, {0x6, 0x7f36}, {0x8, 0x6f}, {0x3, 0x1000f}, {0xa, 0xff}, {0x6, 0x589}, {0x8, 0x7}, {0x10041, 0x8}], 0xc, 0x8, 0x2, 0x1, 0x5}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_int(r0, 0x0, 0x22, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_mount_image$udf(&(0x7f00000004c0), &(0x7f0000000a40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='noadinicb,partition=00000000000000000005,noadinicb,mode=00000000000000000003324,gid=', @ANYRESDEC=0x0, @ANYBLOB="2c766f6c756d653d303030303030303030303030302c0000000000000000501cb5d7c12e5184d12ef849f01234cc0632d887ab83b9a499f253a549724d60457bb58a75adb74f3af03ad3ce885b137f28e47a314f31f232c3a9f530c68d8ba34bf01945e243cbc23403afab131b58d3a2aa1eaa6e0a7c462f6b7050c665746acc89d02bf21ece3866519a7826f4e18fda118954b3c6e9738bfb06d6c52c8d07"], 0x1, 0x489, &(0x7f0000000580)="$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") setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) truncate(&(0x7f0000000080)='./file1\x00', 0x400000f000) symlink(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019a00)=""/102376, 0x18fe8) r3 = socket$kcm(0x10, 0x2, 0x4) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4004090) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="d800000010008104685fa3aa7143a0f8c81ded0b25000000e8fe09", 0x1b}], 0x1}, 0x20000880) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xfe33) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$sock_linger(r5, 0x1, 0x3d, &(0x7f00000001c0)={0x1}, 0x8) sendmmsg$sock(r5, &(0x7f0000001a00)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)='\x00\x00\x00\x00', 0x4}], 0x1, &(0x7f0000000200)=[@txtime={{0x18, 0x1, 0x3d, 0x3}}], 0x18}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000000400)="dd5d9cfb04c4795a1ea539e6b9a2745aa911c025683feaa4b57b95d6348a56ea74f1db8721ea11a5ceb05eba00922b84b8bac3a8f9471c22c6", 0x39}, {&(0x7f00000011c0)="3b2816defaa8a339911c6b45cb7ea747b23e044ec96feeedc50aa721c9ea25e8aa3c2b3092000db22bfd4071cf20162b5869951e1f31192e640f2c12df13ac6a4cc7d27398902de72296f458b355dd36919bc4115ef9301c3bd5e9ca591fb48bf123fab9a2f8743fdd024058c3c7883df93ad7b1df35d184978a0e856f40243b5bfd7a8da3361ef28cff96ff77cd34f68ce482c13828fcaa83d41489fc56cb153c80f91c37c9f6b170a7cfc52a3134b282b769a2a0fe13920d0b4d", 0xbb}, {&(0x7f0000001140)="edb57eab933d5228891307cc80cb198776db1286900e20ef70a29739776b350446303cc5e10a9ead585527ae32e8de5b3764c73e61a74d88462b91ddd0053c6a5362add86a828b400e31685b794bf4be7984ff51db23d5bd4b64cd81", 0x5c}, {&(0x7f0000001080)="1942b52a170bc190bc93f1c3b17f8e24d1995c5e8fff6e3be5d26d6a9e1abc5be242b4d10e7e4e1792c1c8d0d95b3669b267f6a704e4ff8e4520d0e9651ef5d93b8fb383938cf55899b20f00f03a2ab52fa75e4f5860d50a0973d26b159df51753c0c945d67d7d0b78532802cd9e29cafc809d532179a4703991d32518015788eb90c07a4fe9fcfed08679", 0x8b}, {&(0x7f0000001280)="ec33ff46f4eaea666ae15af27bc63f641de3c876b33add31caba5d0ba1100fddaa368d4673d6b2b0d260e04b9d99af59ff975958d2070f4044a401ba20120d79172649b3cb998038624b7a1af562b0116ca1aadeb39620ce2508f807fb9c711c6130b8781bd36599f870d1e85c1e19da631a160fa91890ccde6a4e260105eb2a3fbb653e22379279da2bef8a786bfd83c9280023fc5cc983051fc3a9b7df6a59248d954c9c563ce2b1ebdfe3cf30e77ce61a2d7c3d3c6fcd107f016dbfd349867907cc1e0b710d3dc5d1f2d270e1f3d9de3ef8b7e0bd4275459c40a39158c847a6902cf596eab8", 0xe7}], 0x5, &(0x7f0000001400)=[@txtime={{0x18, 0x1, 0x3d, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x7}}], 0xc0}}], 0x2, 0x20000000) socket$phonet_pipe(0x23, 0x5, 0x2) r6 = syz_pidfd_open(0xffffffffffffffff, 0x0) r7 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000003b80), 0x4000) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000003bc0)='./binderfs2/custom1\x00', 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003c00)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r12 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) getgroups(0x1, &(0x7f0000005c40)=[0xffffffffffffffff]) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005d80)=[{{&(0x7f0000000b40)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e, &(0x7f00000000c0)=[{&(0x7f0000000bc0)="ad049d52ae061ac62f7ddb36e9f363ba24755f667b3fd81be3002c61d30d04a0774470e1c01b5578799ed4e26bdb5342e1a921e59f038a4f9766d37063022e4d1060e3d6325102a4358e00f4d1c6a1df26f6911d3f8711ea5bdbfa14f5fe9734340a57ae85787a31ad379afc883ed26679d020df4bc67e94bc4a94441f90f088c8c592217f95199040ce9d5b594ddc19aeaf924ceea7b92d647c70fe3be586646e8af17687662515e2f27008ab25318c0f71c555e134ec160134eb94a4e6f0a5b8aaf3997d8205e025d47b23750f470143848d33538a89", 0xd7}, {&(0x7f0000000cc0)="ab6804d796246afdce59311f1795cf0a5f0658af49dce4ad74bd400891c0fcad3cd80a66bb0ffcad3b19c501870e70917f0ea63ad5dbc01ac534c89d1362d815fea33356e4a31f875a2aec6e81474b7bf21811c3cb21cd097550dda86b2a53b71ff5953cad84dbf0123b9adf2ef1e9f50d234a29cda2a8bfbfd7f9337eecae81bcce15f6c19c124ce80a6d241e24a0fa047d61d65dd4bbdbab3377a90c0db2413967d1b7db80b2fd4abf0b9ce1acbb92a993af746b74ade4ccb09027b4c076079f72a963a1197f618eed1ba55caecf729e1838bd48621c1044ee54888c8d7646b115cb03b0a3869e", 0xe8}], 0x2, &(0x7f0000000e00)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x24, 0x1, 0x1, [r3, r2, r0, r1, r0]}}, @rights={{0x10}}], 0x98, 0x40088c1}}, {{&(0x7f0000000ec0)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e, &(0x7f0000001040)=[{&(0x7f0000000f40)="54beecc7beb6df60299651c73e8c", 0xe}, {&(0x7f0000000f80)}, {&(0x7f0000000fc0)="eeb45b023fab5bc9bba3bc093c51f9e99e989ad9df868f2ac20a3336dee6c0ef1cfc0c74f576d4efb0fd630aadf9227a314b100019bbc4fd5750235ea954624d7e65a6498a4aa0707c1832dc40655a9796b7", 0x52}], 0x3, &(0x7f0000001500)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [r4, r1, r0, r2, r1]}}, @rights={{0x18, 0x1, 0x1, [r0, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [r4, r1]}}, @rights={{0x1c, 0x1, 0x1, [r0, r1, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r8, r0, r2]}}, @rights={{0x1c, 0x1, 0x1, [r2, r4, r1]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r7]}}], 0x110, 0x20000800}}, {{&(0x7f0000001640)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000016c0)="47b9be3c0bae65a25d159b7739e80ef42488c83aa7de7bf45420e28abe0c3fc25c7f4b3e7fabe99bfc1d9eff389aeef3e177f266de84fb5dae457512c7396c8c8e65388fb2918cc43c21d6884cf5250786eb85a66a53f278aa57d7d56751feb6c9108fabcf3e72f08d17ea015f1613610fd07d68ee0ba5d8779111837640318f049c844a3846df235cb4529c8fdbf5fbb8d43aa937e627dd932b4d010cba6450dc4ae6c26f7f868dc1", 0xa9}, {&(0x7f0000001780)="c7268014b3998c0f6aa5a502c2f19580dfce11e88a0b830ad6d4b60c5d98a488abc84b94cc9b067fd2449b4d237f23a0b9843bc119a860ea9f745226497073cd46570a5d888350a1d5a28e60d64cfb3eaf81e781243b3c501533be60a0ea9ad3b36b705a95a58a4894a7e025ee3f50e094754dc7b545c8e53969bc7c6fe199dac6177dd47e54cce2ca163d432b67461c88d277addf30b0347ab41e81d1bf125e4b76b18eb357b057d76b6f3852b574143466127cc3fb", 0xb6}, {&(0x7f0000001840)="d8c3b2dcc8c6f8797cda48c595e6248b98aa39326b409f5f91c31f80cf4ef6daff437040b4cb61f2090818715416cfc39a8a74603b39efdae780130685ff75fb5c5f234ba1d2a923ff1ef86946130155b9750f2d7bf26a3a7471076ed5ea73f7355a9fe112ac81c069fab33380b0f65ad9d73af47f6844aa52d262f738f7d11effffc9753a3554684a2adf509fcb0aa2d6ceef6df14457de50e94fb1f39712c83252ff9527bf6a33c32546a0b2228815e43319ef6a5a90c8900f84e7d83d97084b4eb9028d2c591806de542a84", 0xcd}, {&(0x7f0000001940)="352bfd45c1acbb6077978c4853c9ffda9d67bc547252b5f821decede4e31e9af58d795ce43b4c865f220f9477294bc063d0dcc4ded2dadfc425a37058b354c1549cc18d3bf538405b93e37c810d466cf7433", 0x52}], 0x4, &(0x7f0000005c80)=[@rights={{0x1c, 0x1, 0x1, [r1, 0xffffffffffffffff, r12]}}, @rights={{0x20, 0x1, 0x1, [r1, r4, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r11, r9, r10}}}, @rights={{0x24, 0x1, 0x1, [r6, r7, r0, r2, r2]}}, @rights={{0x2c, 0x1, 0x1, [r3, r8, r0, r1, r0, r2, r1]}}, @cred={{0x1c, 0x1, 0x2, {r11, 0x0, r13}}}], 0xd8, 0x8000}}], 0x3, 0x2015) 1.930884656s ago: executing program 2 (id=556): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_DESC={0x10, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x5fffffff}]}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x74}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) (fail_nth: 6) 1.929612805s ago: executing program 5 (id=557): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = fcntl$dupfd(r0, 0x406, r0) getsockname$packet(r1, 0x0, &(0x7f00000000c0)) socket$nl_route(0x10, 0x3, 0x0) socket$rxrpc(0x21, 0x2, 0xa) syz_io_uring_setup(0x496, &(0x7f0000000400)={0x0, 0x717e, 0x100, 0x14, 0x150}, &(0x7f0000000140)=0x0, &(0x7f0000000200)) syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@random="493f6b6e24d9", @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "bb0e9e", 0x18, 0x0, 0x0, @remote, @private0, {[@routing={0x0, 0x2, 0x1, 0x5, 0x0, [@mcast2]}]}}}}}, 0x0) syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000040)='./file2\x00', 0x1008800, &(0x7f0000000140)=ANY=[@ANYRES8=0x0, @ANYRES8, @ANYRES64, @ANYRES8, @ANYBLOB="d18b23efc38a810426350acaa05c59b76e82c3490c8f64cea6a62b2112c308ef54431a32359f7e32542a6f9b7976a6e5aef19be798a16c153ef1178088284ad7f41fdc0752e93d452bb2a75412c50797de146c2405fc73c3b7840ccc54696d4281ea4c15584fcef9615ad5c664506d108839c73ef1f3240c78c8cef2f53ab6a476c5c0268201bfef2735de3a514f6382dbda886591d1cb52ed66bceebcbff2da5623059da05415fa3de0ff7b2ece8b880a8e", @ANYRES8, @ANYRES32], 0x1, 0x1ec, &(0x7f0000000240)="$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") symlink(&(0x7f0000000080)='./file2\x00', &(0x7f0000000100)='./bus\x00') syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) statx(0xffffffffffffffff, &(0x7f0000000480)='.\x02\x00', 0x6000, 0x200, &(0x7f0000001240)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000001340)=ANY=[@ANYRES8]) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) r4 = syz_mount_image$ext4(&(0x7f0000000880)='ext2\x00', &(0x7f0000000000)='./file2\x00', 0x21000e, &(0x7f0000000380), 0x1, 0x531, &(0x7f0000001380)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$cgroup_ro(r3, &(0x7f0000000240)='cpuacct.usage_percpu\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x5, [@var={0x2, 0x0, 0x0, 0x11, 0x3, 0xffffffff}, @const={0x0, 0x0, 0x0, 0x2}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x5f, 0x61]}}, 0x0, 0x45}, 0x20) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, &(0x7f0000000040)={0x100000000, r4, 0x17, {0x9, 0x80}, 0x2}, 0x1) r6 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x8000, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote, 0x7}, 0x1c) sendto$inet6(r6, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbdd", 0xce, 0xc001, 0x0, 0x0) setsockopt$inet6_mtu(r6, 0x29, 0x17, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0x82, &(0x7f0000000040)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @remote, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x80}}]}]}}}}}}}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) symlink(&(0x7f0000000580)='.\x02/file1\x00', &(0x7f00000002c0)='.\x02\x00') 613.685867ms ago: executing program 2 (id=558): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001800), 0x2, 0x0) read$FUSE(r1, &(0x7f0000001840)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c73d8a0870272091776c010203030902120001000000000904"], 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket(0x40000000015, 0x805, 0x0) r5 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) socket$pppoe(0x18, 0x1, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r11, 0x21eae}}, 0x20}}, 0x0) write$FUSE_INIT(r1, &(0x7f0000001080)={0x50, 0x0, r2, {0x7, 0x2b, 0x80, 0x44020, 0x0, 0x2a6, 0x7, 0x6284, 0x0, 0x0, 0x1, 0x7}}, 0x50) r12 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r12, 0x4020565a, &(0x7f0000000240)={0x5, 0x9, 0x3}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESOCT=r3, @ANYBLOB="2c00e5dda20c6cfb8f25165ab207eebe792e019f82e5960f9c199525ced40c1aceaee9146b3aad286123ae2dcbbcb534cbecb67bcb553eb32decaccbde5e70"]) gettid() 557.867685ms ago: executing program 0 (id=559): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="10000000f1000000021000000000000000000010"], 0x0) 22.480738ms ago: executing program 5 (id=560): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) read$FUSE(0xffffffffffffffff, &(0x7f0000001640)={0x2020, 0x0, 0x0, 0x0}, 0x2020) llistxattr(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000440), 0x0) statx(0xffffffffffffffff, &(0x7f0000000280)='./file1\x00', 0x4000, 0x10, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = geteuid() r3 = geteuid() mount$binder(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000240), 0x22d0440, &(0x7f0000000600)=ANY=[@ANYBLOB='max=00000000000000000003,max=00000000000000000000,max=00000000000000000000,stats=global,stats=global,stats=global,stats=global,fowner=', @ANYRESDEC=r0, @ANYBLOB=',apaise,euid=', @ANYRESDEC=r1, @ANYBLOB=',permit_directio,obj_role=overlay\x00,uid>', @ANYRESDEC=r2, @ANYBLOB=',fowner=', @ANYRESDEC=r3, @ANYBLOB=',silent,obj_user=(,\x00']) r4 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r4, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) linkat(r4, &(0x7f0000000380)='./file1\x00', r4, &(0x7f00000003c0)='./bus\x00', 0x1000) rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x0) 702.692µs ago: executing program 1 (id=561): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) r2 = dup(r1) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0x20) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000200)={0x2, 0x7, 0x0, 0x2, 0x1, 0x4, 0x7f, 0x8, 0xc3, 0x81, 0x8, 0x81, 0x9}, 0xe) r3 = syz_open_dev$sg(&(0x7f0000000fc0), 0x0, 0x5) ioctl$SG_IO(r3, 0x2285, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000340)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000780)="aa1d484e243103000000f7c08bfcd111fbdf23ea32db0e8f21d5bc27bd8063067a0689fff2a41cfbf0e9d85e44751170", 0x30}], 0x2) ioctl$SG_GET_REQUEST_TABLE(r3, 0x2286, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 3 (id=562): ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0x7}}, './file0\x00'}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback=r1, r2, 0x2f}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000001c0)={0x0, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000480)={@cgroup=r2, r2, 0x2f, 0x2028, 0x4, @void, @void, @value=r3}, 0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)={@fallback, 0xffffffffffffffff, 0x31, 0x0, r1}, 0x20) r4 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r4, &(0x7f0000000340)=""/200, 0xc8, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) openat$cgroup_ro(r5, &(0x7f00000002c0)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x17d4}}, 0x0) pipe2(&(0x7f0000000040), 0x0) timer_create(0x8, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)=0x0) timer_settime(r6, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_settime(r6, 0x0, &(0x7f0000000280)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000440)) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000600)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r5, @ANYBLOB="05", @ANYRES16=r5, @ANYRES8, @ANYRES32=r4, @ANYRES16=r0], 0x0) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) r8 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) write$snapshot(r8, &(0x7f0000001600)="9d", 0x1) pwritev2(r8, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x3000, 0x3) open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x2) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x5, 0x9, 0x3}}, 0x30) kernel console output (not intermixed with test programs): 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.128457][ T9] hid-generic 0005:0004:1000.000A: hidraw0: BLUETOOTH HID v0.00 Device [syz1] on syz1 [ 180.138442][ T6870] loop1: detected capacity change from 0 to 256 [ 180.229079][ T5168] usb 3-1: config 0 descriptor?? [ 180.358730][ T6873] loop3: detected capacity change from 0 to 256 [ 180.392718][ T6870] FAT-fs (loop1): Directory bread(block 64) failed [ 180.421865][ T6873] exfat: Deprecated parameter 'namecase' [ 180.433096][ T6870] FAT-fs (loop1): Directory bread(block 65) failed [ 180.439929][ T6870] FAT-fs (loop1): Directory bread(block 66) failed [ 180.495497][ T6876] netlink: 766 bytes leftover after parsing attributes in process `syz.6.203'. [ 180.503359][ T6873] exfat: Unknown parameter 'erl°rs' [ 180.548622][ T6870] FAT-fs (loop1): Directory bread(block 67) failed [ 180.646032][ T6870] FAT-fs (loop1): Directory bread(block 68) failed [ 180.753121][ T6870] FAT-fs (loop1): Directory bread(block 69) failed [ 180.831748][ T6870] FAT-fs (loop1): Directory bread(block 70) failed [ 180.880919][ T6873] loop3: detected capacity change from 0 to 32768 [ 180.892314][ T6870] FAT-fs (loop1): Directory bread(block 71) failed [ 180.911730][ T6873] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.202 (6873) [ 180.948323][ T6873] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 180.959033][ T6873] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm [ 180.994040][ T5168] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 181.008366][ T6870] FAT-fs (loop1): Directory bread(block 72) failed [ 181.045976][ T6870] FAT-fs (loop1): Directory bread(block 73) failed [ 181.196001][ T6873] BTRFS info (device loop3): enabling ssd optimizations [ 181.205626][ T6873] BTRFS info (device loop3): enabling free space tree [ 181.212415][ T6873] BTRFS info (device loop3): use lzo compression, level 1 [ 181.313904][ T6873] futex_wake_op: syz.3.202 tries to shift op by -1; fix this program [ 181.489730][ T6838] loop2: detected capacity change from 0 to 2048 [ 181.933221][ T6838] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 181.994077][ T6838] UDF-fs: Scanning with blocksize 512 failed [ 182.000373][ T6912] netlink: 8 bytes leftover after parsing attributes in process `syz.6.206'. [ 182.103653][ T6838] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 182.294115][ T6914] loop5: detected capacity change from 0 to 4096 [ 182.331114][ T6912] netdevsim netdevsim6 netdevsim2: entered promiscuous mode [ 182.394693][ T6919] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 182.431321][ T6031] usb 3-1: reset high-speed USB device number 11 using dummy_hcd [ 182.546267][ T6912] netdevsim netdevsim6 netdevsim2: left promiscuous mode [ 183.081701][ T5839] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 183.275454][ T6921] loop1: detected capacity change from 0 to 32768 [ 183.313189][ T6923] netlink: 8 bytes leftover after parsing attributes in process `syz.5.208'. [ 183.414284][ T6921] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 183.536639][ T6921] XFS (loop1): Ending clean mount [ 183.559451][ T6921] XFS (loop1): Quotacheck needed: Please wait. [ 183.682199][ T6923] mac80211_hwsim hwsim9 wlan0: entered promiscuous mode [ 183.709701][ T6921] XFS (loop1): Quotacheck: Done. [ 183.837271][ T6923] mac80211_hwsim hwsim9 wlan0: left promiscuous mode [ 184.031691][ T6020] usb 3-1: USB disconnect, device number 11 [ 184.240838][ T6940] loop6: detected capacity change from 0 to 164 [ 184.284427][ T6940] rock: directory entry would overflow storage [ 184.293317][ T6940] rock: sig=0x66, size=4, remaining=3 [ 184.347495][ T6941] netlink: 'syz.2.210': attribute type 4 has an invalid length. [ 185.125812][ T5838] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 186.806805][ T6962] FAULT_INJECTION: forcing a failure. [ 186.806805][ T6962] name failslab, interval 1, probability 0, space 0, times 0 [ 186.990213][ T6962] CPU: 0 UID: 0 PID: 6962 Comm: syz.0.216 Not tainted syzkaller #0 PREEMPT(full) [ 186.990245][ T6962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 186.990259][ T6962] Call Trace: [ 186.990269][ T6962] [ 186.990279][ T6962] dump_stack_lvl+0x189/0x250 [ 186.990314][ T6962] ? __pfx____ratelimit+0x10/0x10 [ 186.990340][ T6962] ? __pfx_dump_stack_lvl+0x10/0x10 [ 186.990388][ T6962] ? __pfx__printk+0x10/0x10 [ 186.990418][ T6962] ? __pfx___might_resched+0x10/0x10 [ 186.990449][ T6962] should_fail_ex+0x414/0x560 [ 186.990493][ T6962] should_failslab+0xa8/0x100 [ 186.990533][ T6962] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 186.990569][ T6962] ? __alloc_skb+0x112/0x2d0 [ 186.990603][ T6962] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.990636][ T6962] __alloc_skb+0x112/0x2d0 [ 186.990670][ T6962] __ip_append_data+0x2dae/0x40c0 [ 186.990713][ T6962] ? rt_is_expired+0x1c/0x2d0 [ 186.990757][ T6962] ? __pfx_raw_getfrag+0x10/0x10 [ 186.990814][ T6962] ? ipv4_mtu+0x23/0x5c0 [ 186.990850][ T6962] ? __pfx___ip_append_data+0x10/0x10 [ 186.990884][ T6962] ? ipv4_mtu+0x4b2/0x5c0 [ 186.990905][ T6962] ? ipv4_mtu+0x23/0x5c0 [ 186.990929][ T6962] ? __pfx_ipv4_mtu+0x10/0x10 [ 186.990952][ T6962] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.990972][ T6962] ? ip_setup_cork+0x577/0x9a0 [ 186.990995][ T6962] ? lockdep_hardirqs_on+0x9c/0x150 [ 186.991018][ T6962] ip_append_data+0x10e/0x190 [ 186.991048][ T6962] ? __pfx_raw_getfrag+0x10/0x10 [ 186.991076][ T6962] raw_sendmsg+0x13d8/0x18b0 [ 186.991117][ T6962] ? __pfx_raw_sendmsg+0x10/0x10 [ 186.991147][ T6962] ? count_memcg_event_mm+0x21/0x260 [ 186.991181][ T6962] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.991201][ T6962] ? aa_sk_perm+0x81e/0x950 [ 186.991234][ T6962] ? __pfx_aa_sk_perm+0x10/0x10 [ 186.991259][ T6962] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.991278][ T6962] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 186.991301][ T6962] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.991320][ T6962] ? sock_rps_record_flow+0x19/0x410 [ 186.991339][ T6962] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.991358][ T6962] ? inet_sendmsg+0x2f4/0x370 [ 186.991373][ T6962] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.991392][ T6962] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.991416][ T6962] __sock_sendmsg+0x19c/0x270 [ 186.991438][ T6962] ____sys_sendmsg+0x52d/0x830 [ 186.991467][ T6962] ? __pfx_____sys_sendmsg+0x10/0x10 [ 186.991500][ T6962] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.991519][ T6962] ? import_iovec+0x74/0xa0 [ 186.991547][ T6962] ___sys_sendmsg+0x21f/0x2a0 [ 186.991574][ T6962] ? __pfx____sys_sendmsg+0x10/0x10 [ 186.991610][ T6962] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.991655][ T6962] ? __fget_files+0x2a/0x420 [ 186.991670][ T6962] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.991690][ T6962] ? __fget_files+0x3a0/0x420 [ 186.991716][ T6962] __sys_sendmmsg+0x227/0x430 [ 186.991746][ T6962] ? __pfx___sys_sendmmsg+0x10/0x10 [ 186.991769][ T6962] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 186.991814][ T6962] ? ksys_write+0x22a/0x250 [ 186.991843][ T6962] ? __pfx_ksys_write+0x10/0x10 [ 186.991867][ T6962] ? rcu_is_watching+0x15/0xb0 [ 186.991893][ T6962] __x64_sys_sendmmsg+0xa0/0xc0 [ 186.991920][ T6962] do_syscall_64+0xfa/0x3b0 [ 186.991940][ T6962] ? lockdep_hardirqs_on+0x9c/0x150 [ 186.991959][ T6962] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.991976][ T6962] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.991995][ T6962] ? exc_page_fault+0x9f/0xf0 [ 186.992016][ T6962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.992033][ T6962] RIP: 0033:0x7fa19958eec9 [ 186.992049][ T6962] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.992063][ T6962] RSP: 002b:00007fa19a497038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 186.992082][ T6962] RAX: ffffffffffffffda RBX: 00007fa1997e5fa0 RCX: 00007fa19958eec9 [ 186.992094][ T6962] RDX: 0000000004000095 RSI: 0000200000005240 RDI: 0000000000000003 [ 186.992106][ T6962] RBP: 00007fa19a497090 R08: 0000000000000000 R09: 0000000000000000 [ 186.992117][ T6962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.992127][ T6962] R13: 00007fa1997e6038 R14: 00007fa1997e5fa0 R15: 00007ffd3ebe7a58 [ 186.992154][ T6962] [ 187.734138][ T6958] loop2: detected capacity change from 0 to 32768 [ 188.139926][ T6958] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 188.757522][ T6982] loop6: detected capacity change from 0 to 32768 [ 188.784179][ T6958] workqueue: Failed to create a rescuer kthread for wq "xfs-cil/loop2": -EINTR [ 188.789930][ T6958] XFS (loop2): log mount failed [ 188.886816][ T6982] [ 188.886816][ T6982] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 188.886816][ T6982] [ 188.924404][ T6980] ERROR: (device loop6): diWrite: ixpxd invalid [ 188.924404][ T6980] [ 188.935423][ T6980] ERROR: (device loop6): remounting filesystem as read-only [ 188.942766][ T6980] ERROR: (device loop6): txCommit: [ 188.942766][ T6980] [ 188.957990][ T6980] Invalid ELF header type: 3 != 1 [ 189.597439][ T24] hid_parser_main: 8 callbacks suppressed [ 189.597468][ T24] hid-generic 0005:0004:1000.000C: unknown main item tag 0x0 [ 189.640270][ T24] hid-generic 0005:0004:1000.000C: unknown main item tag 0x0 [ 189.696687][ T24] hid-generic 0005:0004:1000.000C: unknown main item tag 0x0 [ 189.757369][ T24] hid-generic 0005:0004:1000.000C: unknown main item tag 0x0 [ 189.905473][ T24] hid-generic 0005:0004:1000.000C: unknown main item tag 0x0 [ 189.913110][ T24] hid-generic 0005:0004:1000.000C: unknown main item tag 0x0 [ 189.993291][ T6020] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 190.077499][ T24] hid-generic 0005:0004:1000.000C: unknown main item tag 0x0 [ 190.310674][ T24] hid-generic 0005:0004:1000.000C: unknown main item tag 0x0 [ 190.345756][ T24] hid-generic 0005:0004:1000.000C: unknown main item tag 0x0 [ 190.447491][ T6020] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.979699][ T7014] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 192.814725][ T24] hid-generic 0005:0004:1000.000C: unknown main item tag 0x0 [ 193.770388][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.809797][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.867238][ T6020] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.884076][ T24] hid-generic 0005:0004:1000.000C: hidraw0: BLUETOOTH HID v0.00 Device [syz1] on syz1 [ 193.898337][ T6020] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 193.913852][ T6020] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 193.923157][ T6020] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.128646][ T7022] loop5: detected capacity change from 0 to 164 [ 194.527518][ T6020] usb 2-1: config 0 descriptor?? [ 194.718012][ T7019] loop6: detected capacity change from 0 to 4096 [ 194.728879][ T7022] rock: directory entry would overflow storage [ 194.753803][ T6020] usb 2-1: can't set config #0, error -71 [ 194.759749][ T7022] rock: sig=0x66, size=4, remaining=3 [ 194.806384][ T7024] netlink: 'syz.0.227': attribute type 4 has an invalid length. [ 194.834365][ T6020] usb 2-1: USB disconnect, device number 5 [ 194.944706][ T7023] fido_id[7023]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 195.064485][ T7032] warning: `syz.1.230' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 195.242841][ T7034] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 196.063510][ T7042] netlink: 8 bytes leftover after parsing attributes in process `syz.6.226'. [ 196.163174][ T7045] loop5: detected capacity change from 0 to 256 [ 196.181771][ T7047] loop2: detected capacity change from 0 to 256 [ 196.203403][ T7042] mac80211_hwsim hwsim14 wlan0: entered promiscuous mode [ 196.228540][ T7045] exfat: Deprecated parameter 'namecase' [ 196.258421][ T7042] mac80211_hwsim hwsim14 wlan0: left promiscuous mode [ 196.276531][ T7045] exfat: Unknown parameter 'erl°rs' [ 196.588845][ T7045] loop5: detected capacity change from 0 to 32768 [ 196.603246][ T7045] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.232 (7045) [ 196.623610][ T7045] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 196.633866][ T7045] BTRFS info (device loop5): using crc32c (crc32c-lib) checksum algorithm [ 196.673346][ T7047] FAT-fs (loop2): Directory bread(block 64) failed [ 196.693508][ T7047] FAT-fs (loop2): Directory bread(block 65) failed [ 196.700167][ T7047] FAT-fs (loop2): Directory bread(block 66) failed [ 196.745558][ T7047] FAT-fs (loop2): Directory bread(block 67) failed [ 196.752238][ T7047] FAT-fs (loop2): Directory bread(block 68) failed [ 196.865003][ T7045] BTRFS info (device loop5): enabling ssd optimizations [ 196.872005][ T7045] BTRFS info (device loop5): enabling free space tree [ 196.879097][ T7045] BTRFS info (device loop5): use lzo compression, level 1 [ 196.925198][ T7047] FAT-fs (loop2): Directory bread(block 69) failed [ 196.932209][ T7047] FAT-fs (loop2): Directory bread(block 70) failed [ 196.974196][ T7045] futex_wake_op: syz.5.232 tries to shift op by -1; fix this program [ 197.024291][ T7047] FAT-fs (loop2): Directory bread(block 71) failed [ 197.030995][ T7047] FAT-fs (loop2): Directory bread(block 72) failed [ 197.115804][ T7047] FAT-fs (loop2): Directory bread(block 73) failed [ 197.197425][ T7074] loop3: detected capacity change from 0 to 1024 [ 198.067194][ T5837] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 198.414006][ T7054] loop0: detected capacity change from 0 to 40427 [ 198.437303][ T7054] f2fs: Unknown parameter 'active_lL3äNh>°]²á¶L /éogs' [ 198.555492][ T7050] loop1: detected capacity change from 0 to 32768 [ 198.646232][ T7050] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.235 (7050) [ 198.785973][ T7050] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 198.854862][ T6020] hid_parser_main: 8 callbacks suppressed [ 198.854888][ T6020] hid-generic 0005:0004:1000.000D: unknown main item tag 0x0 [ 198.871815][ T7050] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 198.924924][ T6020] hid-generic 0005:0004:1000.000D: unknown main item tag 0x0 [ 198.932383][ T6020] hid-generic 0005:0004:1000.000D: unknown main item tag 0x0 [ 198.983013][ T6020] hid-generic 0005:0004:1000.000D: unknown main item tag 0x0 [ 198.994281][ T6020] hid-generic 0005:0004:1000.000D: unknown main item tag 0x0 [ 199.001781][ T6020] hid-generic 0005:0004:1000.000D: unknown main item tag 0x0 [ 199.012424][ T6020] hid-generic 0005:0004:1000.000D: unknown main item tag 0x0 [ 199.024475][ T6020] hid-generic 0005:0004:1000.000D: unknown main item tag 0x0 [ 199.032594][ T6020] hid-generic 0005:0004:1000.000D: unknown main item tag 0x0 [ 199.040718][ T6020] hid-generic 0005:0004:1000.000D: unknown main item tag 0x0 [ 199.123035][ T24] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 199.151752][ T6020] hid-generic 0005:0004:1000.000D: hidraw0: BLUETOOTH HID v0.00 Device [syz1] on syz1 [ 199.201477][ T7112] netlink: 4 bytes leftover after parsing attributes in process `syz.5.243'. [ 199.355748][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.399653][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.444177][ T7050] BTRFS error (device loop1): open_ctree failed: -4 [ 199.454787][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 199.529455][ T24] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 199.603225][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.617032][ T7122] loop5: detected capacity change from 0 to 164 [ 199.677913][ T24] usb 4-1: config 0 descriptor?? [ 199.729804][ T7122] rock: directory entry would overflow storage [ 199.763128][ T7122] rock: sig=0x66, size=4, remaining=3 [ 200.270919][ T24] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 201.146041][ T7096] loop3: detected capacity change from 0 to 2048 [ 201.479278][ T7096] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 201.487732][ T24] usb 4-1: reset high-speed USB device number 5 using dummy_hcd [ 201.502060][ T7096] UDF-fs: Scanning with blocksize 512 failed [ 201.618164][ T7096] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 201.803229][ T6021] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 202.092634][ T7156] loop5: detected capacity change from 0 to 256 [ 202.168319][ T7156] FAT-fs (loop5): Directory bread(block 64) failed [ 202.195277][ T7156] FAT-fs (loop5): Directory bread(block 65) failed [ 202.199811][ T7125] loop0: detected capacity change from 0 to 32768 [ 202.226702][ T7156] FAT-fs (loop5): Directory bread(block 66) failed [ 202.246854][ T7156] FAT-fs (loop5): Directory bread(block 67) failed [ 202.258614][ T7159] loop2: detected capacity change from 0 to 64 [ 202.271244][ T7156] FAT-fs (loop5): Directory bread(block 68) failed [ 202.311144][ T7156] FAT-fs (loop5): Directory bread(block 69) failed [ 202.324015][ T7125] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 202.335017][ T7159] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 202.357923][ T7156] FAT-fs (loop5): Directory bread(block 70) failed [ 202.400281][ T7156] FAT-fs (loop5): Directory bread(block 71) failed [ 202.464298][ T7156] FAT-fs (loop5): Directory bread(block 72) failed [ 202.473340][ T7156] FAT-fs (loop5): Directory bread(block 73) failed [ 202.496022][ T7125] XFS (loop0): Ending clean mount [ 202.526889][ T7125] XFS (loop0): Quotacheck needed: Please wait. [ 202.548744][ T7168] netlink: 'syz.2.254': attribute type 1 has an invalid length. [ 202.568717][ T7168] netlink: 144 bytes leftover after parsing attributes in process `syz.2.254'. [ 202.616258][ T6031] usb 4-1: USB disconnect, device number 5 [ 202.619087][ T7152] loop1: detected capacity change from 0 to 32768 [ 202.651246][ T7125] XFS (loop0): Quotacheck: Done. [ 202.654531][ T7168] netlink: 'syz.2.254': attribute type 1 has an invalid length. [ 202.712913][ T7152] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 202.751309][ T7152] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 203.006485][ T5836] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 203.081033][ T7180] loop6: detected capacity change from 0 to 1024 [ 203.103149][ T7152] XFS (loop1): Ending clean mount [ 203.177970][ T7152] XFS (loop1): Quotacheck needed: Please wait. [ 203.539366][ T7152] XFS (loop1): Quotacheck: Done. [ 203.984668][ T5838] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 204.297917][ T9] IPVS: starting estimator thread 0... [ 204.444267][ T7191] IPVS: using max 24 ests per chain, 57600 per kthread [ 205.558191][ T7198] loop1: detected capacity change from 0 to 128 [ 205.575985][ T7198] EXT4-fs (loop1): Test dummy encryption mode enabled [ 205.680846][ T7198] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 205.735245][ T7198] ext4 filesystem being mounted at /49/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 205.757221][ T7181] loop3: detected capacity change from 0 to 32768 [ 206.722807][ T5838] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 206.796184][ T5844] hid_parser_main: 8 callbacks suppressed [ 206.796210][ T5844] hid-generic 0005:0004:1000.000F: unknown main item tag 0x0 [ 206.838360][ T7186] loop6: detected capacity change from 0 to 32768 [ 206.909224][ T5844] hid-generic 0005:0004:1000.000F: unknown main item tag 0x0 [ 206.909296][ T7186] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.260 (7186) [ 206.960442][ T5844] hid-generic 0005:0004:1000.000F: unknown main item tag 0x0 [ 207.021105][ T5844] hid-generic 0005:0004:1000.000F: unknown main item tag 0x0 [ 207.043110][ T5168] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 207.183113][ T5844] hid-generic 0005:0004:1000.000F: unknown main item tag 0x0 [ 207.213094][ T5844] hid-generic 0005:0004:1000.000F: unknown main item tag 0x0 [ 207.220529][ T5844] hid-generic 0005:0004:1000.000F: unknown main item tag 0x0 [ 207.313094][ T5844] hid-generic 0005:0004:1000.000F: unknown main item tag 0x0 [ 207.323461][ T5844] hid-generic 0005:0004:1000.000F: unknown main item tag 0x0 [ 207.348363][ T5844] hid-generic 0005:0004:1000.000F: unknown main item tag 0x0 [ 207.371068][ T5168] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.407871][ T5168] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.444595][ T5844] hid-generic 0005:0004:1000.000F: hidraw0: BLUETOOTH HID v0.00 Device [syz1] on syz1 [ 207.458506][ T5168] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 207.515924][ T5168] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 207.579647][ T5168] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.649855][ T5168] usb 4-1: config 0 descriptor?? [ 207.693290][ T7220] cgroup: Name too long [ 208.169726][ T5168] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 208.244358][ T7205] loop2: detected capacity change from 0 to 32768 [ 208.386013][ T7205] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 208.644244][ T7205] XFS (loop2): Ending clean mount [ 208.701209][ T7205] XFS (loop2): Quotacheck needed: Please wait. [ 208.805599][ T7236] loop0: detected capacity change from 0 to 64 [ 208.824604][ T7234] loop3: detected capacity change from 0 to 2048 [ 208.850562][ T7205] XFS (loop2): Quotacheck: Done. [ 208.911017][ T7236] FAULT_INJECTION: forcing a failure. [ 208.911017][ T7236] name failslab, interval 1, probability 0, space 0, times 0 [ 208.945392][ T7234] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 208.976818][ T7236] CPU: 1 UID: 0 PID: 7236 Comm: syz.0.270 Not tainted syzkaller #0 PREEMPT(full) [ 208.976862][ T7236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 208.976877][ T7236] Call Trace: [ 208.976886][ T7236] [ 208.976896][ T7236] dump_stack_lvl+0x189/0x250 [ 208.976934][ T7236] ? __pfx____ratelimit+0x10/0x10 [ 208.976962][ T7236] ? __pfx_dump_stack_lvl+0x10/0x10 [ 208.976994][ T7236] ? __pfx__printk+0x10/0x10 [ 208.977021][ T7236] ? __pfx___might_resched+0x10/0x10 [ 208.977047][ T7236] ? srso_alias_return_thunk+0x5/0xfbef5 [ 208.977083][ T7236] should_fail_ex+0x414/0x560 [ 208.977130][ T7236] should_failslab+0xa8/0x100 [ 208.977172][ T7236] __kmalloc_noprof+0xcb/0x4f0 [ 208.977208][ T7236] ? tomoyo_encode+0x28b/0x550 [ 208.977240][ T7236] tomoyo_encode+0x28b/0x550 [ 208.977274][ T7236] tomoyo_realpath_from_path+0x58d/0x5d0 [ 208.977320][ T7236] tomoyo_path2_perm+0x265/0x680 [ 208.977354][ T7236] ? srso_alias_return_thunk+0x5/0xfbef5 [ 208.977380][ T7236] ? validate_chain+0x897/0x2140 [ 208.977408][ T7236] ? tomoyo_path2_perm+0x235/0x680 [ 208.977447][ T7236] ? __pfx_tomoyo_path2_perm+0x10/0x10 [ 208.977534][ T7236] ? srso_alias_return_thunk+0x5/0xfbef5 [ 208.977574][ T7236] tomoyo_path_rename+0x141/0x190 [ 208.977602][ T7236] ? __d_lookup+0x6df/0x780 [ 208.977634][ T7236] ? __pfx_tomoyo_path_rename+0x10/0x10 [ 208.977672][ T7236] ? srso_alias_return_thunk+0x5/0xfbef5 [ 208.977700][ T7236] ? hfs_revalidate_dentry+0xb1/0x200 [ 208.977737][ T7236] security_path_rename+0x250/0x490 [ 208.977773][ T7236] do_renameat2+0x52b/0xa50 [ 208.977832][ T7236] ? __pfx_do_renameat2+0x10/0x10 [ 208.977884][ T7236] ? srso_alias_return_thunk+0x5/0xfbef5 [ 208.977920][ T7236] ? getname_flags+0x1e5/0x540 [ 208.977952][ T7236] __x64_sys_renameat2+0xce/0xe0 [ 208.977978][ T7236] do_syscall_64+0xfa/0x3b0 [ 208.978006][ T7236] ? lockdep_hardirqs_on+0x9c/0x150 [ 208.978031][ T7236] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.978054][ T7236] ? srso_alias_return_thunk+0x5/0xfbef5 [ 208.978081][ T7236] ? exc_page_fault+0x9f/0xf0 [ 208.978109][ T7236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.978132][ T7236] RIP: 0033:0x7fa19958eec9 [ 208.978153][ T7236] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.978173][ T7236] RSP: 002b:00007fa19a497038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 208.978198][ T7236] RAX: ffffffffffffffda RBX: 00007fa1997e5fa0 RCX: 00007fa19958eec9 [ 208.978216][ T7236] RDX: 0000000000000004 RSI: 0000200000000240 RDI: 0000000000000004 [ 208.978232][ T7236] RBP: 00007fa19a497090 R08: 0000000000000000 R09: 0000000000000000 [ 208.978248][ T7236] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 208.978263][ T7236] R13: 00007fa1997e6038 R14: 00007fa1997e5fa0 R15: 00007ffd3ebe7a58 [ 208.978303][ T7236] [ 208.978340][ T7236] ERROR: Out of memory at tomoyo_realpath_from_path. [ 208.994084][ T7234] UDF-fs: Scanning with blocksize 512 failed [ 209.371477][ T7234] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 209.491921][ T7219] loop5: detected capacity change from 0 to 32768 [ 209.618826][ T7219] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 209.750065][ T7219] XFS (loop5): Ending clean mount [ 209.805551][ T7219] XFS (loop5): Quotacheck needed: Please wait. [ 209.931561][ T7219] XFS (loop5): Quotacheck: Done. [ 209.989765][ T5840] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 210.233172][ T5168] usb 4-1: USB disconnect, device number 6 [ 210.367601][ T30] audit: type=1326 audit(1759289016.716:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7217 comm="syz.5.268" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efc45f8eec9 code=0x0 [ 211.153189][ T5837] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 212.257784][ T7261] loop6: detected capacity change from 0 to 256 [ 212.415998][ T7261] exfat: Deprecated parameter 'namecase' [ 212.463895][ T7261] exfat: Unknown parameter 'erl°rs' [ 212.826490][ T7261] loop6: detected capacity change from 0 to 32768 [ 212.839465][ T7261] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.277 (7261) [ 212.907939][ T7261] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 212.918248][ T7261] BTRFS info (device loop6): using crc32c (crc32c-lib) checksum algorithm [ 212.945630][ T7272] loop5: detected capacity change from 0 to 164 [ 213.003180][ T24] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 213.027574][ T7272] rock: directory entry would overflow storage [ 213.068446][ T7272] rock: sig=0x66, size=4, remaining=3 [ 213.079270][ T7261] BTRFS info (device loop6): enabling ssd optimizations [ 213.086471][ T7261] BTRFS info (device loop6): enabling free space tree [ 213.093427][ T7261] BTRFS info (device loop6): use lzo compression, level 1 [ 213.169926][ T7290] loop3: detected capacity change from 0 to 64 [ 213.218677][ T7261] futex_wake_op: syz.6.277 tries to shift op by -1; fix this program [ 213.248945][ T24] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 213.298548][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.396412][ T24] usb 3-1: Product: syz [ 213.430157][ T7290] FAULT_INJECTION: forcing a failure. [ 213.430157][ T7290] name failslab, interval 1, probability 0, space 0, times 0 [ 213.492824][ T24] usb 3-1: Manufacturer: syz [ 213.501777][ T24] usb 3-1: SerialNumber: syz [ 213.522739][ T7290] CPU: 0 UID: 0 PID: 7290 Comm: syz.3.282 Not tainted syzkaller #0 PREEMPT(full) [ 213.522772][ T7290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 213.522787][ T7290] Call Trace: [ 213.522797][ T7290] [ 213.522808][ T7290] dump_stack_lvl+0x189/0x250 [ 213.522844][ T7290] ? __pfx____ratelimit+0x10/0x10 [ 213.522878][ T7290] ? __pfx_dump_stack_lvl+0x10/0x10 [ 213.522909][ T7290] ? __pfx__printk+0x10/0x10 [ 213.522942][ T7290] ? __pfx___might_resched+0x10/0x10 [ 213.522968][ T7290] ? srso_alias_return_thunk+0x5/0xfbef5 [ 213.523004][ T7290] should_fail_ex+0x414/0x560 [ 213.523051][ T7290] should_failslab+0xa8/0x100 [ 213.523092][ T7290] __kmalloc_noprof+0xcb/0x4f0 [ 213.523126][ T7290] ? kfree+0x4d/0x440 [ 213.523155][ T7290] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 213.523189][ T7290] tomoyo_realpath_from_path+0xe3/0x5d0 [ 213.523218][ T7290] ? tomoyo_domain+0xd9/0x130 [ 213.523251][ T7290] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 213.523287][ T7290] tomoyo_path_number_perm+0x1e8/0x5a0 [ 213.523328][ T7290] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 213.523412][ T7290] ? srso_alias_return_thunk+0x5/0xfbef5 [ 213.523450][ T7290] ? srso_alias_return_thunk+0x5/0xfbef5 [ 213.523477][ T7290] ? seqcount_lockdep_reader_access+0x174/0x1c0 [ 213.523535][ T7290] ? __pfx_current_check_access_path+0x10/0x10 [ 213.523563][ T7290] ? d_alloc_parallel+0x2f0/0x15e0 [ 213.523597][ T7290] tomoyo_path_mknod+0x142/0x190 [ 213.523631][ T7290] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 213.523666][ T7290] ? srso_alias_return_thunk+0x5/0xfbef5 [ 213.523702][ T7290] security_path_mknod+0x17e/0x3a0 [ 213.523735][ T7290] path_openat+0xd56/0x3830 [ 213.523765][ T7290] ? arch_stack_walk+0xfc/0x150 [ 213.523839][ T7290] ? __pfx_path_openat+0x10/0x10 [ 213.523878][ T7290] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.523928][ T7290] do_filp_open+0x1fa/0x410 [ 213.523958][ T7290] ? __lock_acquire+0xab9/0xd20 [ 213.523984][ T7290] ? __pfx_do_filp_open+0x10/0x10 [ 213.524043][ T7290] ? _raw_spin_unlock+0x28/0x50 [ 213.524066][ T7290] ? srso_alias_return_thunk+0x5/0xfbef5 [ 213.524093][ T7290] ? alloc_fd+0x64c/0x6c0 [ 213.524145][ T7290] do_sys_openat2+0x121/0x1c0 [ 213.524178][ T7290] ? __pfx_do_sys_openat2+0x10/0x10 [ 213.524210][ T7290] ? ksys_write+0x22a/0x250 [ 213.524247][ T7290] ? __pfx_ksys_write+0x10/0x10 [ 213.524280][ T7290] ? rcu_is_watching+0x15/0xb0 [ 213.524312][ T7290] __x64_sys_openat+0x138/0x170 [ 213.524348][ T7290] do_syscall_64+0xfa/0x3b0 [ 213.524378][ T7290] ? lockdep_hardirqs_on+0x9c/0x150 [ 213.524405][ T7290] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.524429][ T7290] ? srso_alias_return_thunk+0x5/0xfbef5 [ 213.524456][ T7290] ? exc_page_fault+0x9f/0xf0 [ 213.524485][ T7290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.524509][ T7290] RIP: 0033:0x7fd208b8eec9 [ 213.524530][ T7290] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 213.524551][ T7290] RSP: 002b:00007fd2099e9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 213.524576][ T7290] RAX: ffffffffffffffda RBX: 00007fd208de5fa0 RCX: 00007fd208b8eec9 [ 213.524594][ T7290] RDX: 000000000000275a RSI: 0000200000000180 RDI: ffffffffffffff9c [ 213.524612][ T7290] RBP: 00007fd2099e9090 R08: 0000000000000000 R09: 0000000000000000 [ 213.524627][ T7290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.524642][ T7290] R13: 00007fd208de6038 R14: 00007fd208de5fa0 R15: 00007ffeda3f3448 [ 213.524680][ T7290] [ 213.865627][ C0] vkms_vblank_simulate: vblank timer overrun [ 214.181995][ T7290] ERROR: Out of memory at tomoyo_realpath_from_path. [ 214.274617][ T24] usb 3-1: config 0 descriptor?? [ 214.349858][ T24] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 214.579400][ T24] gspca_sunplus: reg_r err -71 [ 214.593245][ T24] usb 3-1: USB disconnect, device number 12 [ 214.633411][ T6031] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 214.701235][ T6280] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 214.824371][ T6031] usb 6-1: Using ep0 maxpacket: 8 [ 214.858004][ T7308] loop0: detected capacity change from 0 to 256 [ 214.884453][ T6031] usb 6-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 214.938730][ T7308] exfat: Deprecated parameter 'namecase' [ 214.942983][ T6031] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.067995][ T7308] exfat: Unknown parameter 'erl°rs' [ 215.224988][ T6031] usb 6-1: config 0 descriptor?? [ 215.424074][ T7309] netlink: 'syz.3.285': attribute type 4 has an invalid length. [ 215.811673][ T7308] loop0: detected capacity change from 0 to 32768 [ 215.828922][ T6031] hid_parser_main: 8 callbacks suppressed [ 215.828942][ T6031] logitech 0003:046D:C294.0011: unknown main item tag 0x0 [ 215.871475][ T6031] logitech 0003:046D:C294.0011: item fetching failed at offset 3/5 [ 215.879615][ T7308] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.287 (7308) [ 215.923194][ T7308] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 215.933493][ T7308] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm [ 215.952168][ T6031] logitech 0003:046D:C294.0011: parse failed [ 215.969231][ T6031] logitech 0003:046D:C294.0011: probe with driver logitech failed with error -22 [ 216.019638][ T7296] netlink: 92 bytes leftover after parsing attributes in process `syz.5.283'. [ 216.293053][ T6031] usb 6-1: USB disconnect, device number 4 [ 216.343162][ T7308] BTRFS info (device loop0): enabling ssd optimizations [ 216.350187][ T7308] BTRFS info (device loop0): enabling free space tree [ 216.357066][ T7308] BTRFS info (device loop0): use lzo compression, level 1 [ 216.401017][ T7315] loop6: detected capacity change from 0 to 4096 [ 216.433140][ T5845] Bluetooth: hci3: command 0x0406 tx timeout [ 216.435118][ T5852] Bluetooth: hci4: command 0x0406 tx timeout [ 216.440128][ T5845] Bluetooth: hci0: command 0x0406 tx timeout [ 216.445265][ T5851] Bluetooth: hci2: command 0x0406 tx timeout [ 216.486264][ T7308] futex_wake_op: syz.0.287 tries to shift op by -1; fix this program [ 216.527312][ T7315] ntfs3(loop6): Different NTFS sector size (2048) and media sector size (512). [ 217.168402][ T7315] ntfs3(loop6): failed to convert name for inode 1. [ 217.179282][ T24] hid-generic 0005:0004:1000.0012: unknown main item tag 0x0 [ 217.239915][ T7315] ntfs3(loop6): failed to convert name for inode a. [ 217.274740][ T24] hid-generic 0005:0004:1000.0012: unknown main item tag 0x0 [ 217.355952][ T24] hid-generic 0005:0004:1000.0012: unknown main item tag 0x0 [ 217.452836][ T24] hid-generic 0005:0004:1000.0012: unknown main item tag 0x0 [ 217.472760][ T5836] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 217.488742][ T6031] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 217.497413][ T24] hid-generic 0005:0004:1000.0012: unknown main item tag 0x0 [ 217.522384][ T24] hid-generic 0005:0004:1000.0012: unknown main item tag 0x0 [ 217.558271][ T24] hid-generic 0005:0004:1000.0012: unknown main item tag 0x0 [ 217.813039][ T24] hid-generic 0005:0004:1000.0012: unknown main item tag 0x0 [ 217.833277][ T24] hid-generic 0005:0004:1000.0012: unknown main item tag 0x0 [ 218.554882][ T24] hid-generic 0005:0004:1000.0012: hidraw0: BLUETOOTH HID v0.00 Device [syz1] on syz1 [ 218.573405][ T6031] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.586663][ T6031] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.596928][ T6031] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 218.610352][ T6031] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 218.620250][ T6031] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.631392][ T6031] usb 4-1: config 0 descriptor?? [ 219.086383][ T6031] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 220.393165][ T6031] usb 4-1: reset high-speed USB device number 7 using dummy_hcd [ 221.222107][ T7358] loop6: detected capacity change from 0 to 32768 [ 221.276148][ T7358] (syz.6.294,7358,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 221.329999][ T6021] usb 4-1: USB disconnect, device number 7 [ 221.343425][ T7358] (syz.6.294,7358,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 221.492594][ T7358] JBD2: Ignoring recovery information on journal [ 221.646769][ T7358] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 221.878058][ T6280] ocfs2: Unmounting device (7,6) on (node local) [ 221.901682][ T7377] loop3: detected capacity change from 0 to 32768 [ 221.952215][ T7377] btrfs: Deprecated parameter 'usebackuproot' [ 221.983336][ T7377] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 222.024482][ T7377] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.300 (7377) [ 222.066112][ T7386] FAULT_INJECTION: forcing a failure. [ 222.066112][ T7386] name failslab, interval 1, probability 0, space 0, times 0 [ 222.133261][ T7386] CPU: 0 UID: 0 PID: 7386 Comm: syz.6.303 Not tainted syzkaller #0 PREEMPT(full) [ 222.133295][ T7386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 222.133310][ T7386] Call Trace: [ 222.133320][ T7386] [ 222.133331][ T7386] dump_stack_lvl+0x189/0x250 [ 222.133369][ T7386] ? __pfx____ratelimit+0x10/0x10 [ 222.133396][ T7386] ? __pfx_dump_stack_lvl+0x10/0x10 [ 222.133428][ T7386] ? __pfx__printk+0x10/0x10 [ 222.133458][ T7386] ? __pfx___might_resched+0x10/0x10 [ 222.133490][ T7386] should_fail_ex+0x414/0x560 [ 222.133536][ T7386] should_failslab+0xa8/0x100 [ 222.133577][ T7386] kmem_cache_alloc_noprof+0x73/0x3c0 [ 222.133624][ T7386] ? ptlock_alloc+0x20/0x70 [ 222.133665][ T7386] ptlock_alloc+0x20/0x70 [ 222.133701][ T7386] pte_alloc_one+0x7d/0x170 [ 222.133734][ T7386] __pte_alloc+0x25/0x1a0 [ 222.133765][ T7386] __handle_mm_fault+0x49b3/0x5440 [ 222.133819][ T7386] ? __pfx___handle_mm_fault+0x10/0x10 [ 222.133872][ T7386] ? srso_alias_return_thunk+0x5/0xfbef5 [ 222.133900][ T7386] ? find_vma+0xe7/0x160 [ 222.133934][ T7386] ? __pfx_find_vma+0x10/0x10 [ 222.133973][ T7386] handle_mm_fault+0x40a/0x8e0 [ 222.134021][ T7386] do_user_addr_fault+0x764/0x1390 [ 222.134066][ T7386] exc_page_fault+0x76/0xf0 [ 222.134095][ T7386] asm_exc_page_fault+0x26/0x30 [ 222.134118][ T7386] RIP: 0010:_copy_from_user+0x75/0xb0 [ 222.134152][ T7386] Code: fd eb 49 48 b8 00 f0 ff ff ff 7f 00 00 49 39 c7 4c 0f 47 f8 4c 89 f7 89 de e8 77 9f 9e fd 0f 01 cb 4c 89 f7 48 89 d9 4c 89 fe a4 0f 1f 00 49 89 cf 0f 01 ca 31 ff 48 89 ce e8 a6 1e 3b fd 4d [ 222.134172][ T7386] RSP: 0018:ffffc9000d077d80 EFLAGS: 00050297 [ 222.134194][ T7386] RAX: 00007ffffffff001 RBX: 0000000000000004 RCX: 0000000000000004 [ 222.134210][ T7386] RDX: 0000000000000001 RSI: 00002000000003c0 RDI: ffffc9000d077e00 [ 222.134227][ T7386] RBP: ffffc9000d077e68 R08: 0000000000000003 R09: 0000000000000004 [ 222.134243][ T7386] R10: dffffc0000000000 R11: fffff52001a0efc0 R12: ffff88805377f8c0 [ 222.134261][ T7386] R13: ffffc9000d077e00 R14: ffffc9000d077e00 R15: 00002000000003c0 [ 222.134306][ T7386] do_sock_getsockopt+0x17d/0x450 [ 222.134344][ T7386] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 222.134376][ T7386] ? do_syscall_64+0x80/0x3b0 [ 222.134407][ T7386] ? srso_alias_return_thunk+0x5/0xfbef5 [ 222.134434][ T7386] ? ksys_write+0x1e1/0x250 [ 222.134476][ T7386] __x64_sys_getsockopt+0x1a5/0x250 [ 222.134508][ T7386] ? do_syscall_64+0x80/0x3b0 [ 222.134538][ T7386] ? do_syscall_64+0x80/0x3b0 [ 222.134571][ T7386] do_syscall_64+0xfa/0x3b0 [ 222.134598][ T7386] ? lockdep_hardirqs_on+0x9c/0x150 [ 222.134632][ T7386] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.134655][ T7386] ? srso_alias_return_thunk+0x5/0xfbef5 [ 222.134681][ T7386] ? exc_page_fault+0x9f/0xf0 [ 222.134710][ T7386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.134733][ T7386] RIP: 0033:0x7f4c8dd8eec9 [ 222.134752][ T7386] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 222.134772][ T7386] RSP: 002b:00007f4c8ec54038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 222.134795][ T7386] RAX: ffffffffffffffda RBX: 00007f4c8dfe5fa0 RCX: 00007f4c8dd8eec9 [ 222.134813][ T7386] RDX: 000000000000001c RSI: 0000000000000006 RDI: 0000000000000003 [ 222.134827][ T7386] RBP: 00007f4c8ec54090 R08: 00002000000003c0 R09: 0000000000000000 [ 222.134844][ T7386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 222.134858][ T7386] R13: 00007f4c8dfe6038 R14: 00007f4c8dfe5fa0 R15: 00007fff07d4abb8 [ 222.134896][ T7386] [ 222.543036][ T7379] loop1: detected capacity change from 0 to 40427 [ 222.654168][ T7379] F2FS-fs (loop1): invalid crc value [ 222.677795][ T7377] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 222.713672][ T7373] loop5: detected capacity change from 0 to 40427 [ 222.727682][ T7377] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm [ 222.736307][ T7377] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 222.754233][ T7373] F2FS-fs (loop5): build fault injection rate: 14 [ 222.761183][ T7373] F2FS-fs (loop5): build fault injection type: 0x3bfe8c [ 222.836624][ T7373] F2FS-fs (loop5): invalid crc value [ 222.963767][ C1] F2FS-fs (loop5): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60 [ 223.025504][ C0] F2FS-fs (loop5): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60 [ 223.042649][ T59] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 223.084147][ T7377] BTRFS error (device loop3): failed to load root extent [ 223.091250][ T7377] BTRFS warning (device loop3): try to load backup roots slot 1 [ 223.107242][ T3935] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 223.125255][ T7377] BTRFS warning (device loop3): couldn't read tree root [ 223.132232][ T7377] BTRFS warning (device loop3): try to load backup roots slot 2 [ 223.237152][ T59] BTRFS error (device loop3): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 223.243806][ T7413] loop2: detected capacity change from 0 to 256 [ 223.283081][ T7377] BTRFS warning (device loop3): couldn't read tree root [ 223.290082][ T7377] BTRFS warning (device loop3): try to load backup roots slot 3 [ 223.358768][ T7379] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 223.394153][ T7373] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 223.416285][ T7373] F2FS-fs (loop5): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x157/0x4f0 [ 223.436617][ T7377] BTRFS info (device loop3): rebuilding free space tree [ 223.450029][ T7379] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 223.498897][ T7413] FAT-fs (loop2): Directory bread(block 64) failed [ 223.534708][ T7377] BTRFS info (device loop3): disabling free space tree [ 223.541686][ T7377] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 223.555442][ T7413] FAT-fs (loop2): Directory bread(block 65) failed [ 223.573978][ T7413] FAT-fs (loop2): Directory bread(block 66) failed [ 223.580580][ T7413] FAT-fs (loop2): Directory bread(block 67) failed [ 223.606041][ T7413] FAT-fs (loop2): Directory bread(block 68) failed [ 223.623324][ T7377] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 223.641117][ T7413] FAT-fs (loop2): Directory bread(block 69) failed [ 223.672732][ T7413] FAT-fs (loop2): Directory bread(block 70) failed [ 223.708211][ T7413] FAT-fs (loop2): Directory bread(block 71) failed [ 223.730785][ T7377] BTRFS info (device loop3): setting nodatasum [ 223.739533][ T7413] FAT-fs (loop2): Directory bread(block 72) failed [ 223.803258][ T7377] BTRFS info (device loop3): setting nodatacow [ 223.820975][ T7377] BTRFS info (device loop3): enabling ssd optimizations [ 223.855523][ T7377] BTRFS info (device loop3): turning off barriers [ 223.864635][ T7413] FAT-fs (loop2): Directory bread(block 73) failed [ 223.923192][ T7377] BTRFS info (device loop3): turning on sync discard [ 223.959073][ T7377] BTRFS info (device loop3): enabling disk space caching [ 224.193751][ T7377] BTRFS info (device loop3): force clearing of disk cache [ 224.372832][ T7377] BTRFS info (device loop3): enabling auto defrag [ 224.592829][ T7377] BTRFS info (device loop3): trying to use backup root at mount time [ 224.663349][ T7377] BTRFS info (device loop3): max_inline set to 0 [ 224.880809][ T5839] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 225.159780][ T7409] loop6: detected capacity change from 0 to 32768 [ 225.291510][ T7409] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 225.631688][ T7409] XFS (loop6): Ending clean mount [ 225.696123][ T5844] hid_parser_main: 9 callbacks suppressed [ 225.696147][ T5844] hid-generic 0005:0004:1000.0014: unknown main item tag 0x0 [ 225.728313][ T7409] XFS (loop6): Quotacheck needed: Please wait. [ 225.808509][ T5844] hid-generic 0005:0004:1000.0014: unknown main item tag 0x0 [ 225.855968][ T5168] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 225.873451][ T7409] XFS (loop6): Quotacheck: Done. [ 225.883384][ T5844] hid-generic 0005:0004:1000.0014: unknown main item tag 0x0 [ 225.891095][ T5844] hid-generic 0005:0004:1000.0014: unknown main item tag 0x0 [ 225.934914][ T7409] netlink: 'syz.6.305': attribute type 1 has an invalid length. [ 225.963141][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 225.970803][ T5844] hid-generic 0005:0004:1000.0014: unknown main item tag 0x0 [ 225.996841][ T7409] nbd: couldn't find device at index 20 [ 226.003019][ T6020] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 226.017060][ T5844] hid-generic 0005:0004:1000.0014: unknown main item tag 0x0 [ 226.060518][ T5844] hid-generic 0005:0004:1000.0014: unknown main item tag 0x0 [ 226.133078][ T5168] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 226.174012][ T5844] hid-generic 0005:0004:1000.0014: unknown main item tag 0x0 [ 226.258508][ T5168] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.263677][ T6020] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 226.453978][ T6020] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.454457][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.518451][ T5844] hid-generic 0005:0004:1000.0014: unknown main item tag 0x0 [ 226.573028][ T7452] netlink: 'syz.5.311': attribute type 4 has an invalid length. [ 226.670064][ T6020] usb 2-1: config 0 descriptor?? [ 226.687892][ T5844] hid-generic 0005:0004:1000.0014: unknown main item tag 0x0 [ 226.698923][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.718525][ T5844] hid-generic 0005:0004:1000.0014: hidraw0: BLUETOOTH HID v0.00 Device [syz1] on syz1 [ 226.734652][ T5168] usb 3-1: config 0 descriptor?? [ 226.769101][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 226.812718][ T6280] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 226.839766][ T9] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 226.913034][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.003131][ T9] usb 4-1: config 0 descriptor?? [ 227.493100][ T9] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 227.527266][ T7460] loop5: detected capacity change from 0 to 256 [ 227.546567][ T7460] exfat: Deprecated parameter 'namecase' [ 227.594162][ T7460] exfat: Unknown parameter 'erl°rs' [ 228.205886][ T7460] futex_wake_op: syz.5.320 tries to shift op by -1; fix this program [ 228.252331][ T7437] loop3: detected capacity change from 0 to 2048 [ 228.316338][ T7437] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 228.354108][ T7437] UDF-fs: Scanning with blocksize 512 failed [ 228.885467][ T7437] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 228.902391][ T5168] pegasus 3-1:0.0: probe with driver pegasus failed with error -71 [ 229.003835][ T5168] usb 3-1: USB disconnect, device number 13 [ 229.164118][ T6020] pegasus 2-1:0.0: probe with driver pegasus failed with error -71 [ 229.193283][ T6020] usb 2-1: USB disconnect, device number 7 [ 229.363013][ T6031] usb 4-1: reset high-speed USB device number 8 using dummy_hcd [ 229.744455][ T7469] loop6: detected capacity change from 0 to 8192 [ 230.407850][ T7469] msdos: Unknown parameter 'noWots' [ 230.513528][ T5939] usb 4-1: USB disconnect, device number 8 [ 230.616308][ T7483] loop5: detected capacity change from 0 to 256 [ 230.747029][ T7483] FAT-fs (loop5): Directory bread(block 64) failed [ 230.813077][ T7483] FAT-fs (loop5): Directory bread(block 65) failed [ 230.819748][ T7483] FAT-fs (loop5): Directory bread(block 66) failed [ 230.885981][ T7483] FAT-fs (loop5): Directory bread(block 67) failed [ 230.892647][ T7483] FAT-fs (loop5): Directory bread(block 68) failed [ 230.967565][ T7483] FAT-fs (loop5): Directory bread(block 69) failed [ 231.023228][ T7483] FAT-fs (loop5): Directory bread(block 70) failed [ 231.029795][ T7483] FAT-fs (loop5): Directory bread(block 71) failed [ 231.127254][ T7483] FAT-fs (loop5): Directory bread(block 72) failed [ 231.148818][ T7483] FAT-fs (loop5): Directory bread(block 73) failed [ 231.207067][ T7491] loop3: detected capacity change from 0 to 164 [ 231.293147][ T7491] rock: directory entry would overflow storage [ 231.339668][ T7491] rock: sig=0x66, size=4, remaining=3 [ 231.382199][ T7483] netlink: 'syz.5.325': attribute type 1 has an invalid length. [ 231.447717][ T7483] netlink: 4 bytes leftover after parsing attributes in process `syz.5.325'. [ 231.723025][ T5939] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 231.998617][ T5939] usb 6-1: Using ep0 maxpacket: 8 [ 232.033510][ T5939] usb 6-1: unable to get BOS descriptor or descriptor too short [ 232.112280][ T5939] usb 6-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 232.151636][ T5939] usb 6-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 232.183078][ T5939] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.207711][ T5939] usb 6-1: Product: syz [ 232.222495][ T5939] usb 6-1: Manufacturer: syz [ 232.246265][ T5939] usb 6-1: SerialNumber: syz [ 232.317897][ T7473] loop2: detected capacity change from 0 to 32768 [ 232.414940][ T7473] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 232.443712][ T7473] workqueue: Failed to create a rescuer kthread for wq "xfs-log/loop2": -EINTR [ 232.444360][ T7473] XFS (loop2): log mount failed [ 232.503492][ T6031] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 232.529141][ T7483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.670977][ T7483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.756985][ T5939] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 232.861735][ T7509] loop1: detected capacity change from 0 to 1024 [ 232.886305][ T6031] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 232.923760][ T6031] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.966066][ T5939] snd-usb-audio 6-1:12.0: probe with driver snd-usb-audio failed with error -2 [ 232.978084][ T6031] usb 4-1: config 0 descriptor?? [ 232.996507][ T7516] netlink: 40 bytes leftover after parsing attributes in process `syz.2.337'. [ 233.001721][ T5939] usb 6-1: USB disconnect, device number 5 [ 233.272431][ T6051] udevd[6051]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:12.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 234.649564][ T7527] loop6: detected capacity change from 0 to 512 [ 234.674731][ T24] hid_parser_main: 8 callbacks suppressed [ 234.674756][ T24] hid-generic 0005:0004:1000.0016: unknown main item tag 0x0 [ 234.719333][ T7528] loop5: detected capacity change from 0 to 512 [ 234.736296][ T24] hid-generic 0005:0004:1000.0016: unknown main item tag 0x0 [ 234.786389][ T24] hid-generic 0005:0004:1000.0016: unknown main item tag 0x0 [ 234.794136][ T7528] EXT4-fs: Ignoring removed bh option [ 234.820961][ T24] hid-generic 0005:0004:1000.0016: unknown main item tag 0x0 [ 234.840588][ T6031] pegasus 4-1:0.0: probe with driver pegasus failed with error -110 [ 234.863112][ T7528] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 234.873337][ T24] hid-generic 0005:0004:1000.0016: unknown main item tag 0x0 [ 234.880744][ T24] hid-generic 0005:0004:1000.0016: unknown main item tag 0x0 [ 234.919888][ T24] hid-generic 0005:0004:1000.0016: unknown main item tag 0x0 [ 234.937812][ T7528] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c12c, mo2=0002] [ 234.947145][ T5939] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 235.020153][ T24] hid-generic 0005:0004:1000.0016: unknown main item tag 0x0 [ 235.030642][ T7528] System zones: 1-12 [ 235.043567][ T5168] usb 4-1: USB disconnect, device number 9 [ 235.107319][ T24] hid-generic 0005:0004:1000.0016: unknown main item tag 0x0 [ 235.293302][ T7528] EXT4-fs error (device loop5): ext4_iget_extra_inode:5104: inode #15: comm syz.5.340: corrupted in-inode xattr: e_value size too large [ 235.337868][ T5939] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.364102][ T24] hid-generic 0005:0004:1000.0016: unknown main item tag 0x0 [ 235.388753][ T5939] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.429797][ T7528] EXT4-fs (loop5): Remounting filesystem read-only [ 235.442534][ T24] hid-generic 0005:0004:1000.0016: hidraw0: BLUETOOTH HID v0.00 Device [syz1] on syz1 [ 235.461984][ T5939] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 235.494658][ T7528] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 235.537096][ T5939] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 235.572731][ T5939] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.640234][ T5939] usb 3-1: config 0 descriptor?? [ 235.743072][ T9] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 235.949883][ T9] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 236.004787][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.042001][ T9] usb 1-1: Product: syz [ 236.052198][ T9] usb 1-1: Manufacturer: syz [ 236.088319][ T9] usb 1-1: SerialNumber: syz [ 236.107634][ T5939] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 236.154263][ T9] usb 1-1: config 0 descriptor?? [ 236.161598][ T7545] loop3: detected capacity change from 0 to 4096 [ 236.293239][ T7547] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 236.413701][ T9] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 236.448220][ T7548] netlink: 8 bytes leftover after parsing attributes in process `syz.3.346'. [ 236.516696][ T7548] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 236.592614][ T7548] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 236.833357][ T7529] loop2: detected capacity change from 0 to 2048 [ 236.926246][ T7529] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 236.969337][ T7529] UDF-fs: Scanning with blocksize 512 failed [ 237.017545][ T7529] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 237.034350][ T9] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 237.089885][ T9] usb 1-1: USB disconnect, device number 8 [ 237.842887][ T7557] loop1: detected capacity change from 0 to 8192 [ 237.850471][ T7557] msdos: Unknown parameter 'noWots' [ 238.186737][ T24] usb 3-1: USB disconnect, device number 14 [ 238.191826][ T7557] loop1: detected capacity change from 0 to 32768 [ 238.297724][ T7561] loop0: detected capacity change from 0 to 256 [ 238.382693][ T7561] exfat: Deprecated parameter 'namecase' [ 238.400962][ T7561] exfat: Unknown parameter 'erl°rs' [ 238.419461][ T7563] netlink: 40 bytes leftover after parsing attributes in process `syz.3.351'. [ 238.716531][ T7565] loop2: detected capacity change from 0 to 2048 [ 238.781951][ T7565] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 238.913720][ T7561] futex_wake_op: syz.0.350 tries to shift op by -1; fix this program [ 239.587830][ T7577] loop6: detected capacity change from 0 to 256 [ 239.869427][ T7581] loop2: detected capacity change from 0 to 256 [ 239.925372][ T7577] FAT-fs (loop6): Directory bread(block 64) failed [ 239.937349][ T7581] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 239.943789][ T7577] FAT-fs (loop6): Directory bread(block 65) failed [ 240.001293][ T7577] FAT-fs (loop6): Directory bread(block 66) failed [ 240.032085][ T7577] FAT-fs (loop6): Directory bread(block 67) failed [ 240.048092][ T7581] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 240.089616][ T7577] FAT-fs (loop6): Directory bread(block 68) failed [ 240.120350][ T7577] FAT-fs (loop6): Directory bread(block 69) failed [ 240.136212][ T7588] loop3: detected capacity change from 0 to 4096 [ 240.142778][ T7577] FAT-fs (loop6): Directory bread(block 70) failed [ 240.164574][ T7577] FAT-fs (loop6): Directory bread(block 71) failed [ 240.193065][ T5168] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 240.206790][ T7577] FAT-fs (loop6): Directory bread(block 72) failed [ 240.228702][ T7577] FAT-fs (loop6): Directory bread(block 73) failed [ 240.302380][ T7591] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 240.327695][ T7590] loop0: detected capacity change from 0 to 1024 [ 240.401015][ T7592] netlink: 8 bytes leftover after parsing attributes in process `syz.3.360'. [ 240.404643][ T5168] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 240.437579][ T7592] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 240.455624][ T5168] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.506439][ T5168] usb 2-1: config 0 descriptor?? [ 240.589539][ T7592] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 241.077998][ T24] hid_parser_main: 8 callbacks suppressed [ 241.078027][ T24] hid-generic 0005:0004:1000.0018: unknown main item tag 0x0 [ 241.130183][ T5837] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.162562][ T24] hid-generic 0005:0004:1000.0018: unknown main item tag 0x0 [ 241.185977][ T24] hid-generic 0005:0004:1000.0018: unknown main item tag 0x0 [ 241.222534][ T24] hid-generic 0005:0004:1000.0018: unknown main item tag 0x0 [ 241.252361][ T24] hid-generic 0005:0004:1000.0018: unknown main item tag 0x0 [ 241.537795][ T6031] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 242.296242][ T5168] pegasus 2-1:0.0: probe with driver pegasus failed with error -71 [ 242.353269][ T5168] usb 2-1: USB disconnect, device number 8 [ 242.372879][ T7613] netlink: 40 bytes leftover after parsing attributes in process `syz.6.368'. [ 242.987428][ T7620] FAULT_INJECTION: forcing a failure. [ 242.987428][ T7620] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 243.114425][ T7620] CPU: 0 UID: 0 PID: 7620 Comm: syz.6.370 Not tainted syzkaller #0 PREEMPT(full) [ 243.114460][ T7620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 243.114476][ T7620] Call Trace: [ 243.114486][ T7620] [ 243.114497][ T7620] dump_stack_lvl+0x189/0x250 [ 243.114534][ T7620] ? __pfx____ratelimit+0x10/0x10 [ 243.114563][ T7620] ? __pfx_dump_stack_lvl+0x10/0x10 [ 243.114594][ T7620] ? __pfx__printk+0x10/0x10 [ 243.114629][ T7620] ? srso_alias_return_thunk+0x5/0xfbef5 [ 243.114672][ T7620] should_fail_ex+0x414/0x560 [ 243.114719][ T7620] prepare_alloc_pages+0x213/0x610 [ 243.114757][ T7620] __alloc_frozen_pages_noprof+0x123/0x370 [ 243.114785][ T7620] ? srso_alias_return_thunk+0x5/0xfbef5 [ 243.114817][ T7620] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 243.114854][ T7620] ? srso_alias_return_thunk+0x5/0xfbef5 [ 243.114884][ T7620] ? srso_alias_return_thunk+0x5/0xfbef5 [ 243.114912][ T7620] ? policy_nodemask+0x27c/0x720 [ 243.114957][ T7620] alloc_pages_mpol+0x232/0x4a0 [ 243.115003][ T7620] alloc_pages_noprof+0xa9/0x190 [ 243.115044][ T7620] pte_alloc_one+0x21/0x170 [ 243.115078][ T7620] __do_fault+0xd1/0x390 [ 243.115106][ T7620] __handle_mm_fault+0x1847/0x5440 [ 243.115141][ T7620] ? srso_alias_return_thunk+0x5/0xfbef5 [ 243.115190][ T7620] ? __pfx___handle_mm_fault+0x10/0x10 [ 243.115225][ T7620] ? srso_alias_return_thunk+0x5/0xfbef5 [ 243.115269][ T7620] ? srso_alias_return_thunk+0x5/0xfbef5 [ 243.115297][ T7620] ? mtree_load+0x100/0x700 [ 243.115328][ T7620] ? __pfx_mtree_load+0x10/0x10 [ 243.115356][ T7620] ? __pfx___might_resched+0x10/0x10 [ 243.115387][ T7620] handle_mm_fault+0x40a/0x8e0 [ 243.115436][ T7620] __get_user_pages+0x1699/0x2ce0 [ 243.115514][ T7620] faultin_page_range+0x240/0x8d0 [ 243.115550][ T7620] ? __asan_memset+0x22/0x50 [ 243.115581][ T7620] ? blk_start_plug+0x6f/0x1b0 [ 243.115611][ T7620] madvise_do_behavior+0x2e7/0x550 [ 243.115664][ T7620] ? __pfx_madvise_do_behavior+0x10/0x10 [ 243.115710][ T7620] ? srso_alias_return_thunk+0x5/0xfbef5 [ 243.115737][ T7620] ? rcu_is_watching+0x15/0xb0 [ 243.115765][ T7620] ? srso_alias_return_thunk+0x5/0xfbef5 [ 243.115792][ T7620] ? __mmap_lock_do_trace_acquire_returned+0x85/0x1e0 [ 243.115835][ T7620] ? srso_alias_return_thunk+0x5/0xfbef5 [ 243.115868][ T7620] do_madvise+0x1bc/0x270 [ 243.115908][ T7620] ? __pfx_do_madvise+0x10/0x10 [ 243.115976][ T7620] ? __pfx_ksys_write+0x10/0x10 [ 243.116011][ T7620] ? rcu_is_watching+0x15/0xb0 [ 243.116045][ T7620] __x64_sys_madvise+0xa7/0xc0 [ 243.116086][ T7620] do_syscall_64+0xfa/0x3b0 [ 243.116114][ T7620] ? lockdep_hardirqs_on+0x9c/0x150 [ 243.116141][ T7620] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.116163][ T7620] ? srso_alias_return_thunk+0x5/0xfbef5 [ 243.116191][ T7620] ? exc_page_fault+0x9f/0xf0 [ 243.116220][ T7620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.116245][ T7620] RIP: 0033:0x7f4c8dd8eec9 [ 243.116265][ T7620] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 243.116286][ T7620] RSP: 002b:00007f4c8ec54038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 243.116311][ T7620] RAX: ffffffffffffffda RBX: 00007f4c8dfe5fa0 RCX: 00007f4c8dd8eec9 [ 243.116329][ T7620] RDX: 0000000000000017 RSI: 0000000000c00304 RDI: 0000200000000000 [ 243.116346][ T7620] RBP: 00007f4c8ec54090 R08: 0000000000000000 R09: 0000000000000000 [ 243.116362][ T7620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 243.116377][ T7620] R13: 00007f4c8dfe6038 R14: 00007f4c8dfe5fa0 R15: 00007fff07d4abb8 [ 243.116416][ T7620] [ 243.470984][ C0] vkms_vblank_simulate: vblank timer overrun [ 243.817843][ T24] hid-generic 0005:0004:1000.0018: unknown main item tag 0x0 [ 243.937057][ T24] hid-generic 0005:0004:1000.0018: unknown main item tag 0x0 [ 243.945334][ T24] hid-generic 0005:0004:1000.0018: unknown main item tag 0x0 [ 243.952874][ T24] hid-generic 0005:0004:1000.0018: unknown main item tag 0x0 [ 243.960527][ T24] hid-generic 0005:0004:1000.0018: unknown main item tag 0x0 [ 243.973485][ T24] hid-generic 0005:0004:1000.0018: hidraw0: BLUETOOTH HID v0.00 Device [syz1] on syz1 [ 243.988785][ T7623] loop1: detected capacity change from 0 to 256 [ 244.026900][ T7623] exfat: Deprecated parameter 'namecase' [ 244.032814][ T7623] exfat: Unknown parameter 'erl°rs' [ 244.399789][ T7623] loop1: detected capacity change from 0 to 32768 [ 244.408647][ T7623] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.371 (7623) [ 244.425634][ T7623] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 244.435815][ T7623] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm [ 244.532444][ T7626] fido_id[7626]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 244.619147][ T7623] BTRFS info (device loop1): enabling ssd optimizations [ 244.626430][ T7623] BTRFS info (device loop1): enabling free space tree [ 244.633307][ T7623] BTRFS info (device loop1): use lzo compression, level 1 [ 244.649699][ T7623] futex_wake_op: syz.1.371 tries to shift op by -1; fix this program [ 245.526735][ T7656] loop2: detected capacity change from 0 to 256 [ 245.540372][ T7655] loop3: detected capacity change from 0 to 1024 [ 245.590231][ T7657] loop0: detected capacity change from 0 to 4096 [ 246.185723][ T5838] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 246.247062][ T7656] FAT-fs (loop2): Directory bread(block 64) failed [ 246.290015][ T7656] FAT-fs (loop2): Directory bread(block 65) failed [ 246.297086][ T7659] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 246.355946][ T7656] FAT-fs (loop2): Directory bread(block 66) failed [ 246.362518][ T7656] FAT-fs (loop2): Directory bread(block 67) failed [ 246.380005][ T7656] FAT-fs (loop2): Directory bread(block 68) failed [ 246.471361][ T7656] FAT-fs (loop2): Directory bread(block 69) failed [ 246.507290][ T7663] netlink: 8 bytes leftover after parsing attributes in process `syz.0.378'. [ 246.630760][ T7656] FAT-fs (loop2): Directory bread(block 70) failed [ 246.683471][ T7656] FAT-fs (loop2): Directory bread(block 71) failed [ 246.746813][ T7656] FAT-fs (loop2): Directory bread(block 72) failed [ 246.807127][ T7656] FAT-fs (loop2): Directory bread(block 73) failed [ 247.033239][ T24] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 247.193456][ T7672] Device name cannot be null; rc = [-22] [ 247.352737][ T24] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 247.389948][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.496082][ T24] usb 4-1: config 0 descriptor?? [ 248.153247][ T5940] hid_parser_main: 8 callbacks suppressed [ 248.153267][ T5940] hid-generic 0005:0004:1000.0019: unknown main item tag 0x0 [ 248.176338][ T5940] hid-generic 0005:0004:1000.0019: unknown main item tag 0x0 [ 248.183810][ T5940] hid-generic 0005:0004:1000.0019: unknown main item tag 0x0 [ 248.193816][ T5940] hid-generic 0005:0004:1000.0019: unknown main item tag 0x0 [ 248.201211][ T5940] hid-generic 0005:0004:1000.0019: unknown main item tag 0x0 [ 248.250077][ T5940] hid-generic 0005:0004:1000.0019: unknown main item tag 0x0 [ 248.278071][ T5940] hid-generic 0005:0004:1000.0019: unknown main item tag 0x0 [ 248.298336][ T5940] hid-generic 0005:0004:1000.0019: unknown main item tag 0x0 [ 248.340084][ T5940] hid-generic 0005:0004:1000.0019: unknown main item tag 0x0 [ 248.398366][ T5940] hid-generic 0005:0004:1000.0019: unknown main item tag 0x0 [ 248.463111][ T5168] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 248.905444][ T7691] loop5: detected capacity change from 0 to 2048 [ 248.922885][ T7691] udf: Unknown parameter 'nÁvrs' [ 249.503450][ T5940] hid-generic 0005:0004:1000.0019: hidraw0: BLUETOOTH HID v0.00 Device [syz1] on syz1 [ 249.642462][ T24] pegasus 4-1:0.0: probe with driver pegasus failed with error -110 [ 250.148908][ T24] usb 4-1: USB disconnect, device number 10 [ 250.268558][ T7694] loop2: detected capacity change from 0 to 8192 [ 250.320449][ T7694] msdos: Unknown parameter 'noWots' [ 250.354530][ T7704] FAULT_INJECTION: forcing a failure. [ 250.354530][ T7704] name failslab, interval 1, probability 0, space 0, times 0 [ 250.470680][ T7704] CPU: 1 UID: 0 PID: 7704 Comm: syz.5.393 Not tainted syzkaller #0 PREEMPT(full) [ 250.470716][ T7704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 250.470731][ T7704] Call Trace: [ 250.470743][ T7704] [ 250.470753][ T7704] dump_stack_lvl+0x189/0x250 [ 250.470794][ T7704] ? __pfx____ratelimit+0x10/0x10 [ 250.470823][ T7704] ? __pfx_dump_stack_lvl+0x10/0x10 [ 250.470855][ T7704] ? __pfx__printk+0x10/0x10 [ 250.470882][ T7704] ? __pfx___might_resched+0x10/0x10 [ 250.470908][ T7704] ? srso_alias_return_thunk+0x5/0xfbef5 [ 250.470946][ T7704] should_fail_ex+0x414/0x560 [ 250.470992][ T7704] should_failslab+0xa8/0x100 [ 250.471034][ T7704] __kmalloc_node_track_caller_noprof+0xcc/0x4e0 [ 250.471072][ T7704] ? smb3_parse_devname+0x158/0x7a0 [ 250.471095][ T7704] ? smb3_parse_devname+0x16b/0x7a0 [ 250.471118][ T7704] ? srso_alias_return_thunk+0x5/0xfbef5 [ 250.471145][ T7704] ? rcu_is_watching+0x15/0xb0 [ 250.471177][ T7704] kstrndup+0x80/0x160 [ 250.471209][ T7704] smb3_parse_devname+0x16b/0x7a0 [ 250.471232][ T7704] ? srso_alias_return_thunk+0x5/0xfbef5 [ 250.471270][ T7704] smb3_fs_context_parse_param+0x3f1f/0x79a0 [ 250.471302][ T7704] ? __pfx___mutex_lock+0x10/0x10 [ 250.471334][ T7704] ? __pfx_smb3_fs_context_parse_param+0x10/0x10 [ 250.471367][ T7704] ? srso_alias_return_thunk+0x5/0xfbef5 [ 250.471395][ T7704] ? static_key_count+0x41/0x70 [ 250.471430][ T7704] ? srso_alias_return_thunk+0x5/0xfbef5 [ 250.471464][ T7704] vfs_parse_fs_param+0x1a9/0x420 [ 250.471494][ T7704] __se_sys_fsconfig+0x78e/0x8d0 [ 250.471534][ T7704] ? __pfx___se_sys_fsconfig+0x10/0x10 [ 250.471562][ T7704] ? ksys_write+0x22a/0x250 [ 250.471602][ T7704] ? __pfx_ksys_write+0x10/0x10 [ 250.471644][ T7704] ? rcu_is_watching+0x15/0xb0 [ 250.471677][ T7704] ? srso_alias_return_thunk+0x5/0xfbef5 [ 250.471705][ T7704] ? __x64_sys_fsconfig+0x20/0xc0 [ 250.471739][ T7704] do_syscall_64+0xfa/0x3b0 [ 250.471768][ T7704] ? lockdep_hardirqs_on+0x9c/0x150 [ 250.471795][ T7704] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.471818][ T7704] ? srso_alias_return_thunk+0x5/0xfbef5 [ 250.471846][ T7704] ? exc_page_fault+0x9f/0xf0 [ 250.471875][ T7704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.471899][ T7704] RIP: 0033:0x7efc45f8eec9 [ 250.471920][ T7704] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.471941][ T7704] RSP: 002b:00007efc46e62038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 250.471967][ T7704] RAX: ffffffffffffffda RBX: 00007efc461e5fa0 RCX: 00007efc45f8eec9 [ 250.471986][ T7704] RDX: 0000200000000200 RSI: 0000000000000001 RDI: 0000000000000003 [ 250.472002][ T7704] RBP: 00007efc46e62090 R08: 0000000000000000 R09: 0000000000000000 [ 250.472017][ T7704] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.472033][ T7704] R13: 00007efc461e6038 R14: 00007efc461e5fa0 R15: 00007fffd000aee8 [ 250.472071][ T7704] [ 250.472306][ T7704] CIFS: VFS: Unable to allocate memory for devname [ 251.256108][ T5168] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 251.999272][ T5168] usb 7-1: can't read configurations, error -71 [ 252.135702][ T7717] netlink: 8 bytes leftover after parsing attributes in process `syz.1.396'. [ 252.174358][ T7716] loop0: detected capacity change from 0 to 164 [ 252.239209][ T7716] rock: directory entry would overflow storage [ 252.268274][ T7717] netdevsim netdevsim1 netdevsim3: entered promiscuous mode [ 252.419028][ T7723] netlink: 'syz.2.398': attribute type 4 has an invalid length. [ 252.537093][ T7716] rock: sig=0x66, size=4, remaining=3 [ 252.765841][ T7717] netdevsim netdevsim1 netdevsim3: left promiscuous mode [ 253.351206][ T7725] loop5: detected capacity change from 0 to 512 [ 253.444626][ T7725] EXT4-fs: Ignoring removed bh option [ 253.477819][ T7728] loop3: detected capacity change from 0 to 256 [ 253.493030][ T7725] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 253.511914][ T7728] exfat: Deprecated parameter 'utf8' [ 253.554954][ T7728] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xf6efbb19, utbl_chksum : 0xe619d30d) [ 253.620463][ T7725] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c12c, mo2=0002] [ 253.672509][ T7725] System zones: 1-12 [ 253.741465][ T7725] EXT4-fs error (device loop5): ext4_iget_extra_inode:5104: inode #15: comm syz.5.400: corrupted in-inode xattr: e_value size too large [ 253.798021][ T7738] loop1: detected capacity change from 0 to 256 [ 253.812606][ T7738] exfat: Deprecated parameter 'namecase' [ 253.843711][ T7725] EXT4-fs (loop5): Remounting filesystem read-only [ 253.862862][ T7738] exfat: Unknown parameter 'erl°rs' [ 253.877515][ T7725] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 254.862738][ T7738] futex_wake_op: syz.1.405 tries to shift op by -1; fix this program [ 255.099962][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.110034][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.547875][ T7763] loop3: detected capacity change from 0 to 4096 [ 256.600145][ T5837] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.783438][ T7765] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 257.143387][ T5858] Bluetooth: hci1: command 0x0406 tx timeout [ 257.447684][ T7771] netlink: 8 bytes leftover after parsing attributes in process `syz.3.409'. [ 257.534895][ T7771] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 257.548005][ T9] hid_parser_main: 8 callbacks suppressed [ 257.548035][ T9] hid-generic 0005:0004:1000.001A: unknown main item tag 0x0 [ 257.564306][ T7771] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 257.593047][ T9] hid-generic 0005:0004:1000.001A: unknown main item tag 0x0 [ 257.625981][ T9] hid-generic 0005:0004:1000.001A: unknown main item tag 0x0 [ 257.653111][ T5939] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 257.661602][ T9] hid-generic 0005:0004:1000.001A: unknown main item tag 0x0 [ 257.693277][ T9] hid-generic 0005:0004:1000.001A: unknown main item tag 0x0 [ 257.731824][ T9] hid-generic 0005:0004:1000.001A: unknown main item tag 0x0 [ 257.808276][ T9] hid-generic 0005:0004:1000.001A: unknown main item tag 0x0 [ 257.901756][ T9] hid-generic 0005:0004:1000.001A: unknown main item tag 0x0 [ 257.923482][ T5168] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 257.998101][ T9] hid-generic 0005:0004:1000.001A: unknown main item tag 0x0 [ 258.090715][ T9] hid-generic 0005:0004:1000.001A: unknown main item tag 0x0 [ 258.228620][ T7778] loop6: detected capacity change from 0 to 8192 [ 258.243812][ T7778] msdos: Unknown parameter 'noWots' [ 258.360575][ T5939] usb 6-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 258.391234][ T9] hid-generic 0005:0004:1000.001A: hidraw0: BLUETOOTH HID v0.00 Device [syz1] on syz1 [ 258.537602][ T5168] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.647508][ T7778] loop6: detected capacity change from 0 to 32768 [ 259.937824][ T5168] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.031986][ T5168] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 260.105029][ T5168] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 260.156610][ T5168] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.434717][ T5939] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.744464][ T5168] usb 3-1: config 0 descriptor?? [ 261.087696][ T5168] usb 3-1: can't set config #0, error -71 [ 261.117480][ T5939] usb 6-1: config 0 descriptor?? [ 261.124050][ T5939] usb 6-1: can't set config #0, error -71 [ 261.130580][ T5168] usb 3-1: USB disconnect, device number 16 [ 261.150395][ T5939] usb 6-1: USB disconnect, device number 6 [ 261.492612][ T7782] fido_id[7782]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 261.535969][ T7789] netlink: 8 bytes leftover after parsing attributes in process `syz.2.417'. [ 261.751413][ T7788] netlink: 'syz.0.416': attribute type 4 has an invalid length. [ 262.092098][ T7793] loop5: detected capacity change from 0 to 1024 [ 263.236681][ T7802] loop0: detected capacity change from 0 to 256 [ 263.264453][ T7802] exfat: Deprecated parameter 'namecase' [ 263.270198][ T7802] exfat: Unknown parameter 'erl°rs' [ 263.421561][ T7810] loop3: detected capacity change from 0 to 512 [ 263.755358][ T7810] EXT4-fs: Ignoring removed bh option [ 263.805404][ T7802] futex_wake_op: syz.0.421 tries to shift op by -1; fix this program [ 264.014687][ T7810] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 264.320619][ T7810] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c12c, mo2=0002] [ 264.395022][ T7810] System zones: 1-12 [ 264.430912][ T7810] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.423: corrupted in-inode xattr: e_value size too large [ 264.719665][ T7810] EXT4-fs (loop3): Remounting filesystem read-only [ 264.729959][ T7810] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 266.658895][ T7837] loop0: detected capacity change from 0 to 4096 [ 266.757405][ T7846] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 266.761685][ T5940] hid_parser_main: 8 callbacks suppressed [ 266.761707][ T5940] hid-generic 0005:0004:1000.001B: unknown main item tag 0x0 [ 266.817514][ T7845] loop5: detected capacity change from 0 to 256 [ 266.828491][ T5839] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.867327][ T5940] hid-generic 0005:0004:1000.001B: unknown main item tag 0x0 [ 266.907228][ T5939] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 266.916885][ T7847] netlink: 8 bytes leftover after parsing attributes in process `syz.0.431'. [ 266.918799][ T5940] hid-generic 0005:0004:1000.001B: unknown main item tag 0x0 [ 266.972589][ T5940] hid-generic 0005:0004:1000.001B: unknown main item tag 0x0 [ 266.989184][ T5940] hid-generic 0005:0004:1000.001B: unknown main item tag 0x0 [ 267.024804][ T5940] hid-generic 0005:0004:1000.001B: unknown main item tag 0x0 [ 267.028412][ T7845] FAT-fs (loop5): Directory bread(block 64) failed [ 267.036604][ T5940] hid-generic 0005:0004:1000.001B: unknown main item tag 0x0 [ 267.047349][ T5168] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 267.051370][ T7847] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 267.102660][ T7845] FAT-fs (loop5): Directory bread(block 65) failed [ 267.111252][ T5940] hid-generic 0005:0004:1000.001B: unknown main item tag 0x0 [ 267.166364][ T5939] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 267.169826][ T5940] hid-generic 0005:0004:1000.001B: unknown main item tag 0x0 [ 267.223002][ T7845] FAT-fs (loop5): Directory bread(block 66) failed [ 267.229887][ T7845] FAT-fs (loop5): Directory bread(block 67) failed [ 267.235708][ T7847] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 267.547213][ T5940] hid-generic 0005:0004:1000.001B: unknown main item tag 0x0 [ 267.560041][ T5940] hid-generic 0005:0004:1000.001B: hidraw0: BLUETOOTH HID v0.00 Device [syz1] on syz1 [ 267.566031][ T5939] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.571176][ T7845] FAT-fs (loop5): Directory bread(block 68) failed [ 267.584669][ T7845] FAT-fs (loop5): Directory bread(block 69) failed [ 267.591372][ T7845] FAT-fs (loop5): Directory bread(block 70) failed [ 267.591552][ T5168] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.603230][ T7850] netlink: 'syz.3.433': attribute type 4 has an invalid length. [ 267.618425][ T7845] FAT-fs (loop5): Directory bread(block 71) failed [ 267.626895][ T5168] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 267.653213][ T5168] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 267.667440][ T7845] FAT-fs (loop5): Directory bread(block 72) failed [ 267.674250][ T5168] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 267.696722][ T5168] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.705356][ T5939] usb 3-1: config 0 descriptor?? [ 267.731524][ T5168] usb 2-1: config 0 descriptor?? [ 267.749344][ T7845] FAT-fs (loop5): Directory bread(block 73) failed [ 268.156098][ T7858] netlink: 8 bytes leftover after parsing attributes in process `syz.3.435'. [ 268.469504][ T7857] loop0: detected capacity change from 0 to 8192 [ 268.482447][ T7857] msdos: Unknown parameter 'noWots' [ 268.610259][ T5168] plantronics 0003:047F:FFFF.001C: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 269.259838][ T7858] netdevsim netdevsim3 netdevsim3: entered promiscuous mode [ 269.924185][ T7843] loop1: detected capacity change from 0 to 2048 [ 269.939018][ T7858] netdevsim netdevsim3 netdevsim3: left promiscuous mode [ 270.291698][ T5939] pegasus 3-1:0.0: probe with driver pegasus failed with error -71 [ 271.264224][ T7871] loop6: detected capacity change from 0 to 1024 [ 271.330049][ T5844] usb 2-1: USB disconnect, device number 9 [ 271.641169][ T7857] loop0: detected capacity change from 0 to 32768 [ 272.888970][ T5939] usb 3-1: USB disconnect, device number 17 [ 273.505838][ T7857] read_mapping_page failed! [ 273.583229][ T7857] diRead: diIAGRead returned -5 [ 273.617604][ T7880] loop5: detected capacity change from 0 to 256 [ 273.854082][ T7880] exfat: Deprecated parameter 'namecase' [ 273.859814][ T7880] exfat: Unknown parameter 'erl°rs' [ 274.943587][ T7880] loop5: detected capacity change from 0 to 32768 [ 274.951655][ T7880] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.440 (7880) [ 274.965940][ T7875] fido_id[7875]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 274.995750][ T7880] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 275.006127][ T7880] BTRFS info (device loop5): using crc32c (crc32c-lib) checksum algorithm [ 275.587750][ T7880] BTRFS info (device loop5): enabling ssd optimizations [ 275.594837][ T7880] BTRFS info (device loop5): enabling free space tree [ 275.601711][ T7880] BTRFS info (device loop5): use lzo compression, level 1 [ 275.734588][ T7911] loop3: detected capacity change from 0 to 512 [ 275.742185][ T7911] EXT4-fs: Ignoring removed bh option [ 275.756782][ T7880] futex_wake_op: syz.5.440 tries to shift op by -1; fix this program [ 275.985081][ T7911] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 276.471167][ T7911] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c12c, mo2=0002] [ 276.536207][ T7913] loop0: detected capacity change from 0 to 4096 [ 276.553248][ T7911] System zones: 1-12 [ 276.651875][ T7911] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.445: corrupted in-inode xattr: e_value size too large [ 276.865973][ T7925] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 276.882529][ T7911] EXT4-fs (loop3): Remounting filesystem read-only [ 276.912333][ T5837] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 276.933576][ T7911] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 277.065485][ T7926] netlink: 'syz.6.448': attribute type 4 has an invalid length. [ 277.398645][ T7928] netlink: 8 bytes leftover after parsing attributes in process `syz.0.446'. [ 277.773362][ T7931] netlink: 112 bytes leftover after parsing attributes in process `syz.6.450'. [ 277.813820][ T7934] loop1: detected capacity change from 0 to 256 [ 277.910688][ T7934] FAT-fs (loop1): Directory bread(block 64) failed [ 277.983338][ T7934] FAT-fs (loop1): Directory bread(block 65) failed [ 277.990002][ T7934] FAT-fs (loop1): Directory bread(block 66) failed [ 278.073010][ T7934] FAT-fs (loop1): Directory bread(block 67) failed [ 278.079684][ T7934] FAT-fs (loop1): Directory bread(block 68) failed [ 278.143119][ T7934] FAT-fs (loop1): Directory bread(block 69) failed [ 278.175135][ T7934] FAT-fs (loop1): Directory bread(block 70) failed [ 278.211055][ T7934] FAT-fs (loop1): Directory bread(block 71) failed [ 278.242600][ T7934] FAT-fs (loop1): Directory bread(block 72) failed [ 278.286094][ T7934] FAT-fs (loop1): Directory bread(block 73) failed [ 278.311336][ T5949] hid_parser_main: 8 callbacks suppressed [ 278.311360][ T5949] hid-generic 0005:0004:1000.001D: unknown main item tag 0x0 [ 278.323023][ T5168] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 278.377063][ T5949] hid-generic 0005:0004:1000.001D: unknown main item tag 0x0 [ 278.403080][ T5949] hid-generic 0005:0004:1000.001D: unknown main item tag 0x0 [ 278.430028][ T5949] hid-generic 0005:0004:1000.001D: unknown main item tag 0x0 [ 278.458468][ T5949] hid-generic 0005:0004:1000.001D: unknown main item tag 0x0 [ 278.491878][ T5949] hid-generic 0005:0004:1000.001D: unknown main item tag 0x0 [ 278.495447][ T5168] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 278.537172][ T5949] hid-generic 0005:0004:1000.001D: unknown main item tag 0x0 [ 278.542991][ T5168] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.570515][ T5949] hid-generic 0005:0004:1000.001D: unknown main item tag 0x0 [ 278.579404][ T6031] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 278.609828][ T5949] hid-generic 0005:0004:1000.001D: unknown main item tag 0x0 [ 278.636644][ T5168] usb 1-1: config 0 descriptor?? [ 278.653612][ T5949] hid-generic 0005:0004:1000.001D: unknown main item tag 0x0 [ 278.713771][ T5949] hid-generic 0005:0004:1000.001D: hidraw0: BLUETOOTH HID v0.00 Device [syz1] on syz1 [ 278.756201][ T6031] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.794611][ T6031] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.823002][ T6031] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 278.866269][ T6031] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 278.922989][ T6031] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.985169][ T6031] usb 7-1: config 0 descriptor?? [ 279.205097][ T5839] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.570888][ T7952] loop3: detected capacity change from 0 to 1024 [ 280.399690][ T6031] plantronics 0003:047F:FFFF.001E: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 280.585456][ T5168] pegasus 1-1:0.0: probe with driver pegasus failed with error -110 [ 281.015817][ T7939] loop6: detected capacity change from 0 to 2048 [ 281.063235][ T7939] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 281.183386][ T7939] UDF-fs: Scanning with blocksize 512 failed [ 281.283311][ T9] usb 7-1: reset high-speed USB device number 5 using dummy_hcd [ 281.420532][ T5168] usb 1-1: USB disconnect, device number 9 [ 281.751848][ T7960] loop2: detected capacity change from 0 to 8192 [ 281.765812][ T7960] msdos: Unknown parameter 'noWots' [ 283.444081][ T7960] loop2: detected capacity change from 0 to 32768 [ 284.564042][ T7939] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 284.901026][ T7971] loop3: detected capacity change from 0 to 256 [ 285.471314][ T7971] exfat: Deprecated parameter 'namecase' [ 285.495536][ T7975] netlink: 8 bytes leftover after parsing attributes in process `syz.5.460'. [ 285.580805][ T7971] exfat: Unknown parameter 'erl°rs' [ 285.787397][ T7975] netdevsim netdevsim5 netdevsim3: entered promiscuous mode [ 285.797480][ T7975] netdevsim netdevsim5 netdevsim3: left promiscuous mode [ 286.122003][ T7971] futex_wake_op: syz.3.462 tries to shift op by -1; fix this program [ 286.483597][ T5940] usb 7-1: USB disconnect, device number 5 [ 286.618401][ T7980] netlink: 112 bytes leftover after parsing attributes in process `syz.0.466'. [ 287.312581][ T7985] netlink: 'syz.1.463': attribute type 4 has an invalid length. [ 287.462836][ T7991] loop3: detected capacity change from 0 to 256 [ 287.657501][ T7991] FAT-fs (loop3): Directory bread(block 64) failed [ 287.698035][ T7991] FAT-fs (loop3): Directory bread(block 65) failed [ 287.738121][ T7991] FAT-fs (loop3): Directory bread(block 66) failed [ 287.766280][ T7988] loop2: detected capacity change from 0 to 4096 [ 287.780088][ T7991] FAT-fs (loop3): Directory bread(block 67) failed [ 287.831556][ T7991] FAT-fs (loop3): Directory bread(block 68) failed [ 287.866782][ T7991] FAT-fs (loop3): Directory bread(block 69) failed [ 288.043167][ T7991] FAT-fs (loop3): Directory bread(block 70) failed [ 288.049750][ T7991] FAT-fs (loop3): Directory bread(block 71) failed [ 288.422712][ T7991] FAT-fs (loop3): Directory bread(block 72) failed [ 288.439151][ T7991] FAT-fs (loop3): Directory bread(block 73) failed [ 288.457107][ T8003] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 288.486512][ T8000] loop5: detected capacity change from 0 to 512 [ 288.709184][ T8000] EXT4-fs: Ignoring removed bh option [ 288.769415][ T8000] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 288.798709][ T8004] netlink: 8 bytes leftover after parsing attributes in process `syz.2.464'. [ 288.857270][ T8000] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c12c, mo2=0002] [ 288.888527][ T8000] System zones: 1-12 [ 288.913685][ T8000] EXT4-fs error (device loop5): ext4_iget_extra_inode:5104: inode #15: comm syz.5.469: corrupted in-inode xattr: e_value size too large [ 288.957582][ T8004] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 288.995840][ T8004] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 289.086180][ T8000] EXT4-fs (loop5): Remounting filesystem read-only [ 289.138710][ T8000] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 290.363003][ T6020] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 290.394406][ T8022] loop6: detected capacity change from 0 to 1024 [ 290.850482][ T6020] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 290.883395][ T6020] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.927624][ T6020] usb 4-1: config 0 descriptor?? [ 291.231044][ T8032] loop6: detected capacity change from 0 to 164 [ 291.771163][ T8033] loop1: detected capacity change from 0 to 8192 [ 291.787553][ T8033] msdos: Unknown parameter 'noWots' [ 291.817953][ T5837] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.009370][ T5939] hid_parser_main: 8 callbacks suppressed [ 292.009408][ T5939] hid-generic 0005:0004:1000.001F: unknown main item tag 0x0 [ 292.203664][ T5939] hid-generic 0005:0004:1000.001F: unknown main item tag 0x0 [ 292.312627][ T5939] hid-generic 0005:0004:1000.001F: unknown main item tag 0x0 [ 292.412046][ T5939] hid-generic 0005:0004:1000.001F: unknown main item tag 0x0 [ 292.493357][ T5939] hid-generic 0005:0004:1000.001F: unknown main item tag 0x0 [ 292.586624][ T5939] hid-generic 0005:0004:1000.001F: unknown main item tag 0x0 [ 292.664439][ T5939] hid-generic 0005:0004:1000.001F: unknown main item tag 0x0 [ 292.737493][ T5939] hid-generic 0005:0004:1000.001F: unknown main item tag 0x0 [ 292.778206][ T5939] hid-generic 0005:0004:1000.001F: unknown main item tag 0x0 [ 292.862198][ T5939] hid-generic 0005:0004:1000.001F: unknown main item tag 0x0 [ 293.188216][ T6020] pegasus 4-1:0.0: probe with driver pegasus failed with error -110 [ 293.223287][ T6031] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 293.269468][ T5939] hid-generic 0005:0004:1000.001F: hidraw0: BLUETOOTH HID v0.00 Device [syz1] on syz1 [ 293.344205][ T8032] rock: directory entry would overflow storage [ 293.365165][ T5154] Bluetooth: hci5: command 0x0406 tx timeout [ 293.417344][ T8032] rock: sig=0x66, size=4, remaining=3 [ 294.764224][ T8038] loop5: detected capacity change from 0 to 256 [ 294.808361][ T8033] loop1: detected capacity change from 0 to 32768 [ 294.813518][ T6021] usb 4-1: USB disconnect, device number 11 [ 294.859218][ T8038] exfat: Deprecated parameter 'namecase' [ 294.895903][ T8038] exfat: Unknown parameter 'erl°rs' [ 295.053660][ T8042] netlink: 8 bytes leftover after parsing attributes in process `syz.6.481'. [ 295.210307][ T8038] loop5: detected capacity change from 0 to 32768 [ 295.218364][ T6031] usb 3-1: device not accepting address 18, error -71 [ 295.225533][ T8038] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.480 (8038) [ 295.261399][ T8038] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 295.273544][ T8038] BTRFS info (device loop5): using crc32c (crc32c-lib) checksum algorithm [ 295.744119][ T8042] netdevsim netdevsim6 netdevsim3: entered promiscuous mode [ 295.855968][ T8042] netdevsim netdevsim6 netdevsim3: left promiscuous mode [ 295.877610][ T8045] netlink: 'syz.3.482': attribute type 4 has an invalid length. [ 295.904472][ T8058] netlink: 112 bytes leftover after parsing attributes in process `syz.0.485'. [ 295.980380][ T8053] fido_id[8053]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 296.065661][ T8038] BTRFS info (device loop5): enabling ssd optimizations [ 296.066211][ T8070] loop2: detected capacity change from 0 to 256 [ 296.072663][ T8038] BTRFS info (device loop5): enabling free space tree [ 296.088462][ T8038] BTRFS info (device loop5): use lzo compression, level 1 [ 296.180223][ T8038] futex_wake_op: syz.5.480 tries to shift op by -1; fix this program [ 296.216646][ T8070] FAT-fs (loop2): Directory bread(block 64) failed [ 296.403109][ T8070] FAT-fs (loop2): Directory bread(block 65) failed [ 296.584332][ T8070] FAT-fs (loop2): Directory bread(block 66) failed [ 296.591092][ T8070] FAT-fs (loop2): Directory bread(block 67) failed [ 296.780188][ T8070] FAT-fs (loop2): Directory bread(block 68) failed [ 296.832825][ T8070] FAT-fs (loop2): Directory bread(block 69) failed [ 296.881216][ T8070] FAT-fs (loop2): Directory bread(block 70) failed [ 297.143619][ T8070] FAT-fs (loop2): Directory bread(block 71) failed [ 297.461925][ T8070] FAT-fs (loop2): Directory bread(block 72) failed [ 297.683397][ T8070] FAT-fs (loop2): Directory bread(block 73) failed [ 298.109806][ T5837] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 299.109659][ T8096] loop3: detected capacity change from 0 to 164 [ 299.211582][ T8096] rock: directory entry would overflow storage [ 299.239034][ T8097] loop6: detected capacity change from 0 to 512 [ 299.284457][ T8096] rock: sig=0x66, size=4, remaining=3 [ 299.325614][ T8097] EXT4-fs: Ignoring removed bh option [ 299.432542][ T8097] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 299.708874][ T8097] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c12c, mo2=0002] [ 299.719769][ T8097] System zones: 1-12 [ 299.807589][ T8097] EXT4-fs error (device loop6): ext4_iget_extra_inode:5104: inode #15: comm syz.6.492: corrupted in-inode xattr: e_value size too large [ 299.898276][ T8097] EXT4-fs (loop6): Remounting filesystem read-only [ 299.962480][ T8097] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 299.969597][ T9] hid_parser_main: 8 callbacks suppressed [ 299.969624][ T9] hid-generic 0005:0004:1000.0020: unknown main item tag 0x0 [ 300.137704][ T9] hid-generic 0005:0004:1000.0020: unknown main item tag 0x0 [ 300.145844][ T9] hid-generic 0005:0004:1000.0020: unknown main item tag 0x0 [ 300.154058][ T9] hid-generic 0005:0004:1000.0020: unknown main item tag 0x0 [ 300.162139][ T9] hid-generic 0005:0004:1000.0020: unknown main item tag 0x0 [ 300.181558][ T9] hid-generic 0005:0004:1000.0020: unknown main item tag 0x0 [ 300.196607][ T9] hid-generic 0005:0004:1000.0020: unknown main item tag 0x0 [ 300.214233][ T9] hid-generic 0005:0004:1000.0020: unknown main item tag 0x0 [ 300.221948][ T9] hid-generic 0005:0004:1000.0020: unknown main item tag 0x0 [ 300.250019][ T5168] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 300.258243][ T5940] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 300.310636][ T9] hid-generic 0005:0004:1000.0020: unknown main item tag 0x0 [ 300.320286][ T8113] netlink: 8 bytes leftover after parsing attributes in process `syz.5.488'. [ 300.351088][ T9] hid-generic 0005:0004:1000.0020: hidraw0: BLUETOOTH HID v0.00 Device [syz1] on syz1 [ 300.585171][ T5168] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 300.610814][ T5940] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 300.620137][ T5168] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 300.620997][ T8113] netdevsim netdevsim5 netdevsim3: entered promiscuous mode [ 300.630428][ T5940] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.634364][ T5940] usb 3-1: config 0 descriptor?? [ 300.663038][ T5168] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 300.679488][ T8113] netdevsim netdevsim5 netdevsim3: left promiscuous mode [ 300.712842][ T5168] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 300.741776][ T5168] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.797852][ T5168] usb 1-1: config 0 descriptor?? [ 301.326252][ T5168] plantronics 0003:047F:FFFF.0021: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 303.240194][ T8129] netlink: 104 bytes leftover after parsing attributes in process `syz.1.500'. [ 303.263316][ T5940] pegasus 3-1:0.0: probe with driver pegasus failed with error -110 [ 303.288158][ T8102] loop0: detected capacity change from 0 to 2048 [ 304.131418][ T5940] usb 3-1: USB disconnect, device number 20 [ 304.184955][ T9] usb 1-1: reset high-speed USB device number 10 using dummy_hcd [ 304.244296][ C0] raw-gadget.1 gadget.0: ignoring, device is not running [ 304.928417][ T6280] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.932791][ T8131] loop2: detected capacity change from 0 to 256 [ 304.964686][ T9] usb 1-1: device descriptor read/64, error -32 [ 304.972570][ T8134] netlink: 8 bytes leftover after parsing attributes in process `syz.3.502'. [ 305.012777][ T8134] netdevsim netdevsim3 netdevsim3: entered promiscuous mode [ 305.023839][ T8131] exfat: Deprecated parameter 'namecase' [ 305.042365][ T8131] exfat: Unknown parameter 'erl°rs' [ 305.116404][ T8134] netdevsim netdevsim3 netdevsim3: left promiscuous mode [ 305.470554][ T8131] loop2: detected capacity change from 0 to 32768 [ 305.525562][ T8131] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.501 (8131) [ 305.809296][ T8131] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 305.821161][ T8131] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm [ 306.246657][ T5932] usb 1-1: USB disconnect, device number 10 [ 307.091009][ T8131] BTRFS info (device loop2): enabling ssd optimizations [ 307.098147][ T8131] BTRFS info (device loop2): enabling free space tree [ 307.105063][ T8131] BTRFS info (device loop2): use lzo compression, level 1 [ 307.177330][ T8131] futex_wake_op: syz.2.501 tries to shift op by -1; fix this program [ 307.856948][ T8178] loop3: detected capacity change from 0 to 164 [ 307.925848][ T8178] rock: directory entry would overflow storage [ 308.021802][ T8176] loop0: detected capacity change from 0 to 2048 [ 308.027521][ T8178] rock: sig=0x66, size=4, remaining=3 [ 308.054152][ T8176] udf: Unknown parameter 'nŒ“éY' [ 308.116142][ T30] audit: type=1326 audit(1759289114.466:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8173 comm="syz.0.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19958eec9 code=0x7ffc0000 [ 308.149572][ T8176] netlink: 44 bytes leftover after parsing attributes in process `syz.0.510'. [ 308.171474][ T30] audit: type=1326 audit(1759289114.486:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8173 comm="syz.0.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19958eec9 code=0x7ffc0000 [ 308.176372][ T5840] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 308.200808][ T30] audit: type=1326 audit(1759289114.486:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8173 comm="syz.0.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fa19958eec9 code=0x7ffc0000 [ 308.743083][ T30] audit: type=1326 audit(1759289114.486:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8173 comm="syz.0.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19958eec9 code=0x7ffc0000 [ 308.801729][ T30] audit: type=1326 audit(1759289114.496:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8173 comm="syz.0.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fa19958eec9 code=0x7ffc0000 [ 308.832098][ T30] audit: type=1326 audit(1759289114.496:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8173 comm="syz.0.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19958eec9 code=0x7ffc0000 [ 308.857147][ T30] audit: type=1326 audit(1759289114.496:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8173 comm="syz.0.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa19958eec9 code=0x7ffc0000 [ 308.879697][ T30] audit: type=1326 audit(1759289114.496:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8173 comm="syz.0.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19958eec9 code=0x7ffc0000 [ 308.913669][ T30] audit: type=1326 audit(1759289114.496:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8173 comm="syz.0.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa19958eec9 code=0x7ffc0000 [ 309.046063][ T30] audit: type=1326 audit(1759289114.496:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8173 comm="syz.0.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19958eec9 code=0x7ffc0000 [ 309.203764][ T6021] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 309.355296][ T6021] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 309.462398][ T6021] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.508187][ T6021] usb 1-1: config 0 descriptor?? [ 309.630990][ T8195] netlink: 8 bytes leftover after parsing attributes in process `syz.2.511'. [ 309.657132][ T8195] netdevsim netdevsim2 netdevsim3: entered promiscuous mode [ 309.897881][ T8195] netdevsim netdevsim2 netdevsim3: left promiscuous mode [ 310.098273][ T8198] loop6: detected capacity change from 0 to 8192 [ 310.108765][ T8198] msdos: Unknown parameter 'noWots' [ 311.275965][ T6021] pegasus 1-1:0.0: probe with driver pegasus failed with error -71 [ 311.651506][ T8198] loop6: detected capacity change from 0 to 32768 [ 311.994329][ T8200] loop3: detected capacity change from 0 to 512 [ 312.001849][ T8200] EXT4-fs: Ignoring removed bh option [ 312.015846][ T6021] usb 1-1: USB disconnect, device number 11 [ 312.188920][ T8200] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 312.298552][ T8200] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c12c, mo2=0002] [ 312.308645][ T8200] System zones: 1-12 [ 312.339912][ T8200] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.516: corrupted in-inode xattr: e_value size too large [ 312.386730][ T6021] hid_parser_main: 8 callbacks suppressed [ 312.386756][ T6021] hid-generic 0005:0004:1000.0022: unknown main item tag 0x0 [ 312.400352][ T8200] EXT4-fs (loop3): Remounting filesystem read-only [ 312.662974][ T6021] hid-generic 0005:0004:1000.0022: unknown main item tag 0x0 [ 312.686457][ T6021] hid-generic 0005:0004:1000.0022: unknown main item tag 0x0 [ 312.696006][ T8200] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 312.712979][ T6021] hid-generic 0005:0004:1000.0022: unknown main item tag 0x0 [ 312.720386][ T6021] hid-generic 0005:0004:1000.0022: unknown main item tag 0x0 [ 313.395614][ T6021] hid-generic 0005:0004:1000.0022: unknown main item tag 0x0 [ 313.413282][ T6021] hid-generic 0005:0004:1000.0022: unknown main item tag 0x0 [ 313.420724][ T6021] hid-generic 0005:0004:1000.0022: unknown main item tag 0x0 [ 313.443024][ T5949] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 313.464353][ T8223] netlink: 8 bytes leftover after parsing attributes in process `syz.6.521'. [ 313.483662][ T6021] hid-generic 0005:0004:1000.0022: unknown main item tag 0x0 [ 313.500627][ T6021] hid-generic 0005:0004:1000.0022: unknown main item tag 0x0 [ 313.523822][ T8223] netdevsim netdevsim6 netdevsim3: entered promiscuous mode [ 313.534407][ T8223] netdevsim netdevsim6 netdevsim3: left promiscuous mode [ 313.579381][ T6021] hid-generic 0005:0004:1000.0022: hidraw0: BLUETOOTH HID v0.00 Device [syz1] on syz1 [ 313.635602][ T5949] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 313.651465][ T5839] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.293576][ T5949] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 314.303415][ T5949] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 314.317511][ T5949] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 314.326591][ T5949] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.400140][ T8237] loop3: detected capacity change from 0 to 164 [ 314.404187][ T5949] usb 1-1: config 0 descriptor?? [ 314.550077][ T8237] rock: directory entry would overflow storage [ 314.597489][ T8237] rock: sig=0x66, size=4, remaining=3 [ 314.637546][ T5939] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 314.870202][ T5939] usb 3-1: Using ep0 maxpacket: 16 [ 314.898499][ T8241] RDS: rds_bind could not find a transport for fe88::2, load rds_tcp or rds_rdma? [ 314.909073][ T5939] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 315.087908][ T5939] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 315.112029][ T5949] plantronics 0003:047F:FFFF.0023: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 315.176635][ T5939] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.212462][ T5939] usb 3-1: Product: syz [ 315.250308][ T5939] usb 3-1: Manufacturer: syz [ 315.283483][ T5939] usb 3-1: SerialNumber: syz [ 315.311663][ T5939] usb 3-1: config 0 descriptor?? [ 315.392459][ T5939] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 315.918048][ T8256] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 316.427304][ T8225] loop2: detected capacity change from 0 to 1024 [ 316.543485][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.549915][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.565470][ T36] usb 3-1: Failed to submit usb control message: -110 [ 316.572579][ T36] usb 3-1: unable to send the bmi data to the device: -110 [ 316.593098][ T9] usb 1-1: reset high-speed USB device number 12 using dummy_hcd [ 316.626197][ T36] usb 3-1: unable to get target info from device [ 316.643327][ T36] usb 3-1: could not get target info (-110) [ 316.649550][ T36] usb 3-1: could not probe fw (-110) [ 316.912094][ T8225] hfsplus: failed to load root directory [ 316.962989][ T5939] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 317.860935][ T5940] usb 3-1: USB disconnect, device number 21 [ 317.875000][ T5939] usb 6-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 317.933429][ T5939] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.948187][ T8265] loop1: detected capacity change from 0 to 4096 [ 317.970810][ T5939] usb 6-1: config 0 descriptor?? [ 318.103008][ T8274] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 318.299645][ T8277] FAULT_INJECTION: forcing a failure. [ 318.299645][ T8277] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 318.408046][ T8277] CPU: 1 UID: 0 PID: 8277 Comm: syz.3.536 Not tainted syzkaller #0 PREEMPT(full) [ 318.408084][ T8277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 318.408101][ T8277] Call Trace: [ 318.408110][ T8277] [ 318.408121][ T8277] dump_stack_lvl+0x189/0x250 [ 318.408160][ T8277] ? __pfx____ratelimit+0x10/0x10 [ 318.408188][ T8277] ? __pfx_dump_stack_lvl+0x10/0x10 [ 318.408220][ T8277] ? __pfx__printk+0x10/0x10 [ 318.408258][ T8277] should_fail_ex+0x414/0x560 [ 318.408304][ T8277] _copy_to_user+0x31/0xb0 [ 318.408341][ T8277] simple_read_from_buffer+0xe1/0x170 [ 318.408385][ T8277] proc_fail_nth_read+0x1b3/0x220 [ 318.408421][ T8277] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 318.408455][ T8277] ? srso_alias_return_thunk+0x5/0xfbef5 [ 318.408485][ T8277] ? rw_verify_area+0x2a6/0x4d0 [ 318.408518][ T8277] ? __lock_acquire+0xab9/0xd20 [ 318.408539][ T8277] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 318.408572][ T8277] vfs_read+0x200/0xa30 [ 318.408605][ T8277] ? fdget_pos+0x247/0x320 [ 318.408634][ T8277] ? __pfx___mutex_lock+0x10/0x10 [ 318.408665][ T8277] ? __pfx_vfs_read+0x10/0x10 [ 318.408701][ T8277] ? __fget_files+0x2a/0x420 [ 318.408728][ T8277] ? srso_alias_return_thunk+0x5/0xfbef5 [ 318.408756][ T8277] ? __fget_files+0x3a0/0x420 [ 318.408778][ T8277] ? __fget_files+0x2a/0x420 [ 318.408806][ T8277] ? srso_alias_return_thunk+0x5/0xfbef5 [ 318.408838][ T8277] ksys_read+0x145/0x250 [ 318.408876][ T8277] ? __pfx_ksys_read+0x10/0x10 [ 318.408917][ T8277] ? do_syscall_64+0xbe/0x3b0 [ 318.408957][ T8277] do_syscall_64+0xfa/0x3b0 [ 318.408985][ T8277] ? lockdep_hardirqs_on+0x9c/0x150 [ 318.409012][ T8277] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.409035][ T8277] ? srso_alias_return_thunk+0x5/0xfbef5 [ 318.409061][ T8277] ? exc_page_fault+0x9f/0xf0 [ 318.409091][ T8277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.409114][ T8277] RIP: 0033:0x7fd208b8d8dc [ 318.409135][ T8277] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 318.409156][ T8277] RSP: 002b:00007fd2099e9030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 318.409181][ T8277] RAX: ffffffffffffffda RBX: 00007fd208de5fa0 RCX: 00007fd208b8d8dc [ 318.409199][ T8277] RDX: 000000000000000f RSI: 00007fd2099e90a0 RDI: 0000000000000004 [ 318.409215][ T8277] RBP: 00007fd2099e9090 R08: 0000000000000000 R09: 0000000000000000 [ 318.409231][ T8277] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 318.409247][ T8277] R13: 00007fd208de6038 R14: 00007fd208de5fa0 R15: 00007ffeda3f3448 [ 318.409286][ T8277] [ 318.464610][ T5932] usb 1-1: USB disconnect, device number 12 [ 318.771799][ T8286] netlink: 8 bytes leftover after parsing attributes in process `syz.1.538'. [ 319.422176][ T8297] loop3: detected capacity change from 0 to 164 [ 319.569754][ T8297] rock: directory entry would overflow storage [ 319.590034][ T8297] rock: sig=0x66, size=4, remaining=3 [ 319.642635][ T8295] loop1: detected capacity change from 0 to 4096 [ 319.651548][ T5939] pegasus 6-1:0.0: probe with driver pegasus failed with error -71 [ 319.694927][ T5939] usb 6-1: USB disconnect, device number 7 [ 319.709468][ T8295] EXT4-fs: Ignoring removed mblk_io_submit option [ 319.782395][ T8295] EXT4-fs (loop1): Test dummy encryption mode enabled [ 320.167146][ T8295] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0083] [ 320.284862][ T8295] System zones: 0-5 [ 320.328539][ T8295] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 320.398939][ T5858] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 320.411415][ T8305] loop5: detected capacity change from 0 to 16 [ 320.413313][ T5858] CPU: 0 UID: 0 PID: 5858 Comm: kworker/u9:9 Not tainted syzkaller #0 PREEMPT(full) [ 320.413341][ T5858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 320.413357][ T5858] Workqueue: hci2 hci_rx_work [ 320.413400][ T5858] Call Trace: [ 320.413409][ T5858] [ 320.413419][ T5858] dump_stack_lvl+0x189/0x250 [ 320.413458][ T5858] ? __pfx_dump_stack_lvl+0x10/0x10 [ 320.413490][ T5858] ? __pfx__printk+0x10/0x10 [ 320.413520][ T5858] ? srso_alias_return_thunk+0x5/0xfbef5 [ 320.413548][ T5858] ? kernfs_path_from_node+0x250/0x290 [ 320.413579][ T5858] ? kernfs_path_from_node+0x2f/0x290 [ 320.413616][ T5858] sysfs_create_dir_ns+0x259/0x280 [ 320.413650][ T5858] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 320.413683][ T5858] ? do_raw_spin_unlock+0x122/0x240 [ 320.413729][ T5858] kobject_add_internal+0x59f/0xb40 [ 320.413775][ T5858] kobject_add+0x155/0x220 [ 320.413805][ T5858] ? srso_alias_return_thunk+0x5/0xfbef5 [ 320.413840][ T5858] ? __pfx_kobject_add+0x10/0x10 [ 320.413872][ T5858] ? srso_alias_return_thunk+0x5/0xfbef5 [ 320.413899][ T5858] ? _raw_spin_unlock+0x28/0x50 [ 320.413921][ T5858] ? srso_alias_return_thunk+0x5/0xfbef5 [ 320.413953][ T5858] ? srso_alias_return_thunk+0x5/0xfbef5 [ 320.413980][ T5858] ? get_device_parent+0x366/0x3a0 [ 320.414020][ T5858] device_add+0x408/0xb50 [ 320.414057][ T5858] hci_conn_add_sysfs+0xd5/0x1e0 [ 320.414098][ T5858] le_conn_complete_evt+0xf39/0x1500 [ 320.414144][ T5858] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 320.414174][ T5858] ? srso_alias_return_thunk+0x5/0xfbef5 [ 320.414201][ T5858] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 320.414229][ T5858] ? __asan_memcpy+0x40/0x70 [ 320.414267][ T5858] ? srso_alias_return_thunk+0x5/0xfbef5 [ 320.414295][ T5858] ? skb_pull_data+0xfb/0x200 [ 320.414340][ T5858] hci_le_conn_complete_evt+0x187/0x450 [ 320.414376][ T5858] hci_event_packet+0x78f/0x1200 [ 320.414418][ T5858] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 320.414448][ T5858] ? __pfx_hci_event_packet+0x10/0x10 [ 320.414487][ T5858] ? kcov_remote_start+0x4d3/0x7f0 [ 320.414521][ T5858] ? srso_alias_return_thunk+0x5/0xfbef5 [ 320.414548][ T5858] ? lockdep_hardirqs_on+0x30/0x150 [ 320.414577][ T5858] ? srso_alias_return_thunk+0x5/0xfbef5 [ 320.414604][ T5858] ? hci_send_to_monitor+0xe2/0x570 [ 320.414638][ T5858] hci_rx_work+0x46a/0xe80 [ 320.414692][ T5858] ? process_scheduled_works+0x9ef/0x17b0 [ 320.414721][ T5858] process_scheduled_works+0xae1/0x17b0 [ 320.414782][ T5858] ? __pfx_process_scheduled_works+0x10/0x10 [ 320.414816][ T5858] ? srso_alias_return_thunk+0x5/0xfbef5 [ 320.414853][ T5858] worker_thread+0x8a0/0xda0 [ 320.414883][ T5858] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 320.414918][ T5858] ? __kthread_parkme+0x7b/0x200 [ 320.414958][ T5858] kthread+0x711/0x8a0 [ 320.414993][ T5858] ? __pfx_worker_thread+0x10/0x10 [ 320.415018][ T5858] ? __pfx_kthread+0x10/0x10 [ 320.415046][ T5858] ? srso_alias_return_thunk+0x5/0xfbef5 [ 320.415077][ T5858] ? _raw_spin_unlock_irq+0x23/0x50 [ 320.415100][ T5858] ? srso_alias_return_thunk+0x5/0xfbef5 [ 320.415127][ T5858] ? lockdep_hardirqs_on+0x9c/0x150 [ 320.415150][ T5858] ? __pfx_kthread+0x10/0x10 [ 320.415183][ T5858] ret_from_fork+0x439/0x7d0 [ 320.415214][ T5858] ? __pfx_ret_from_fork+0x10/0x10 [ 320.415248][ T5858] ? __switch_to_asm+0x39/0x70 [ 320.415281][ T5858] ? __switch_to_asm+0x33/0x70 [ 320.415312][ T5858] ? __pfx_kthread+0x10/0x10 [ 320.415345][ T5858] ret_from_fork_asm+0x1a/0x30 [ 320.415399][ T5858] [ 320.415432][ T5858] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 320.774040][ T5858] Bluetooth: hci2: failed to register connection device [ 321.602674][ T5838] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.001871][ T5932] hid_parser_main: 8 callbacks suppressed [ 322.001897][ T5932] hid-generic 0005:0004:1000.0024: unknown main item tag 0x0 [ 322.073044][ T5932] hid-generic 0005:0004:1000.0024: unknown main item tag 0x0 [ 322.091245][ T5932] hid-generic 0005:0004:1000.0024: unknown main item tag 0x0 [ 322.123976][ T5932] hid-generic 0005:0004:1000.0024: unknown main item tag 0x0 [ 322.160484][ T5932] hid-generic 0005:0004:1000.0024: unknown main item tag 0x0 [ 322.185856][ T5932] hid-generic 0005:0004:1000.0024: unknown main item tag 0x0 [ 322.213644][ T5932] hid-generic 0005:0004:1000.0024: unknown main item tag 0x0 [ 322.231633][ T5932] hid-generic 0005:0004:1000.0024: unknown main item tag 0x0 [ 322.251751][ T5932] hid-generic 0005:0004:1000.0024: unknown main item tag 0x0 [ 322.273027][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 322.319249][ T5932] hid-generic 0005:0004:1000.0024: unknown main item tag 0x0 [ 322.357778][ T5932] hid-generic 0005:0004:1000.0024: hidraw0: BLUETOOTH HID v0.00 Device [syz1] on syz1 [ 322.516864][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 322.583238][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 322.640886][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 322.719306][ T9] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 322.770201][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.823387][ T5858] Bluetooth: hci2: command 0x0406 tx timeout [ 322.830798][ T9] usb 2-1: config 0 descriptor?? [ 323.092019][ T8332] loop5: detected capacity change from 0 to 4096 [ 323.193705][ T8333] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 323.356046][ T9] plantronics 0003:047F:FFFF.0025: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 324.366431][ T8337] netlink: 'syz.5.551': attribute type 4 has an invalid length. [ 324.413894][ T8318] loop1: detected capacity change from 0 to 2048 [ 324.500667][ T8343] netlink: 8 bytes leftover after parsing attributes in process `syz.3.553'. [ 324.540321][ T8318] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 324.571845][ T8343] netdevsim netdevsim3 netdevsim3: entered promiscuous mode [ 324.584100][ T8318] UDF-fs: Scanning with blocksize 512 failed [ 324.620311][ T8318] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 324.622123][ T8343] netdevsim netdevsim3 netdevsim3: left promiscuous mode [ 324.664352][ T8348] loop6: detected capacity change from 0 to 128 [ 324.705050][ T8350] FAULT_INJECTION: forcing a failure. [ 324.705050][ T8350] name failslab, interval 1, probability 0, space 0, times 0 [ 324.724061][ T8350] CPU: 0 UID: 0 PID: 8350 Comm: syz.2.556 Not tainted syzkaller #0 PREEMPT(full) [ 324.724098][ T8350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 324.724114][ T8350] Call Trace: [ 324.724124][ T8350] [ 324.724134][ T8350] dump_stack_lvl+0x189/0x250 [ 324.724173][ T8350] ? __pfx____ratelimit+0x10/0x10 [ 324.724202][ T8350] ? __pfx_dump_stack_lvl+0x10/0x10 [ 324.724234][ T8350] ? __pfx__printk+0x10/0x10 [ 324.724265][ T8350] ? __pfx___might_resched+0x10/0x10 [ 324.724290][ T8350] ? srso_alias_return_thunk+0x5/0xfbef5 [ 324.724326][ T8350] should_fail_ex+0x414/0x560 [ 324.724374][ T8350] should_failslab+0xa8/0x100 [ 324.724416][ T8350] kmem_cache_alloc_noprof+0x73/0x3c0 [ 324.724452][ T8350] ? skb_clone+0x212/0x3a0 [ 324.724494][ T8350] skb_clone+0x212/0x3a0 [ 324.724527][ T8350] ? nfnetlink_rcv+0x486/0x2520 [ 324.724556][ T8350] nfnetlink_rcv+0x4b4/0x2520 [ 324.724582][ T8350] ? srso_alias_return_thunk+0x5/0xfbef5 [ 324.724610][ T8350] ? __dev_queue_xmit+0x1d79/0x3b50 [ 324.724648][ T8350] ? srso_alias_return_thunk+0x5/0xfbef5 [ 324.724687][ T8350] ? __dev_queue_xmit+0x27b/0x3b50 [ 324.724737][ T8350] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 324.724780][ T8350] ? srso_alias_return_thunk+0x5/0xfbef5 [ 324.724808][ T8350] ? ref_tracker_free+0x63a/0x7d0 [ 324.724835][ T8350] ? srso_alias_return_thunk+0x5/0xfbef5 [ 324.724862][ T8350] ? __asan_memcpy+0x40/0x70 [ 324.724892][ T8350] ? __pfx_ref_tracker_free+0x10/0x10 [ 324.724916][ T8350] ? __skb_clone+0x63/0x7a0 [ 324.724962][ T8350] ? srso_alias_return_thunk+0x5/0xfbef5 [ 324.724995][ T8350] ? __skb_clone+0x483/0x7a0 [ 324.725036][ T8350] ? srso_alias_return_thunk+0x5/0xfbef5 [ 324.725064][ T8350] ? skb_clone+0x246/0x3a0 [ 324.725102][ T8350] ? srso_alias_return_thunk+0x5/0xfbef5 [ 324.725129][ T8350] ? __netlink_deliver_tap+0x807/0x850 [ 324.725160][ T8350] ? netlink_deliver_tap+0x2e/0x1b0 [ 324.725191][ T8350] ? srso_alias_return_thunk+0x5/0xfbef5 [ 324.725236][ T8350] netlink_unicast+0x82f/0x9e0 [ 324.725272][ T8350] ? __pfx_netlink_unicast+0x10/0x10 [ 324.725300][ T8350] ? srso_alias_return_thunk+0x5/0xfbef5 [ 324.725327][ T8350] ? skb_put+0x11b/0x210 [ 324.725357][ T8350] ? srso_alias_return_thunk+0x5/0xfbef5 [ 324.725389][ T8350] netlink_sendmsg+0x805/0xb30 [ 324.725431][ T8350] ? __pfx_netlink_sendmsg+0x10/0x10 [ 324.725464][ T8350] ? srso_alias_return_thunk+0x5/0xfbef5 [ 324.725492][ T8350] ? aa_sock_msg_perm+0xf1/0x1d0 [ 324.725519][ T8350] ? srso_alias_return_thunk+0x5/0xfbef5 [ 324.725546][ T8350] ? srso_alias_return_thunk+0x5/0xfbef5 [ 324.725575][ T8350] ? __pfx_netlink_sendmsg+0x10/0x10 [ 324.725605][ T8350] __sock_sendmsg+0x21c/0x270 [ 324.725634][ T8350] ____sys_sendmsg+0x505/0x830 [ 324.725676][ T8350] ? __pfx_____sys_sendmsg+0x10/0x10 [ 324.725719][ T8350] ? srso_alias_return_thunk+0x5/0xfbef5 [ 324.725747][ T8350] ? import_iovec+0x74/0xa0 [ 324.725785][ T8350] ___sys_sendmsg+0x21f/0x2a0 [ 324.725823][ T8350] ? __pfx____sys_sendmsg+0x10/0x10 [ 324.725865][ T8350] ? srso_alias_return_thunk+0x5/0xfbef5 [ 324.725926][ T8350] ? __fget_files+0x2a/0x420 [ 324.725957][ T8350] ? srso_alias_return_thunk+0x5/0xfbef5 [ 324.725984][ T8350] ? __fget_files+0x3a0/0x420 [ 324.726020][ T8350] __x64_sys_sendmsg+0x19b/0x260 [ 324.726058][ T8350] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 324.726104][ T8350] ? __pfx_ksys_write+0x10/0x10 [ 324.726148][ T8350] ? do_syscall_64+0xbe/0x3b0 [ 324.726183][ T8350] do_syscall_64+0xfa/0x3b0 [ 324.726210][ T8350] ? lockdep_hardirqs_on+0x9c/0x150 [ 324.726237][ T8350] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.726260][ T8350] ? srso_alias_return_thunk+0x5/0xfbef5 [ 324.726288][ T8350] ? exc_page_fault+0x9f/0xf0 [ 324.726317][ T8350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.726341][ T8350] RIP: 0033:0x7f87cb18eec9 [ 324.726363][ T8350] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 324.726384][ T8350] RSP: 002b:00007f87cc0e9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 324.726409][ T8350] RAX: ffffffffffffffda RBX: 00007f87cb3e5fa0 RCX: 00007f87cb18eec9 [ 324.726428][ T8350] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 324.726444][ T8350] RBP: 00007f87cc0e9090 R08: 0000000000000000 R09: 0000000000000000 [ 324.726459][ T8350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 324.726474][ T8350] R13: 00007f87cb3e6038 R14: 00007f87cb3e5fa0 R15: 00007ffe5f024278 [ 324.726512][ T8350] [ 325.185196][ T8348] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 325.214292][ T8353] loop5: detected capacity change from 0 to 64 [ 325.651340][ T8348] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 326.473119][ T8348] netlink: 184 bytes leftover after parsing attributes in process `syz.6.555'. [ 326.482444][ T8348] team_slave_0: entered allmulticast mode [ 326.612271][ T5932] usb 2-1: USB disconnect, device number 10 [ 326.623023][ T8365] ------------[ cut here ]------------ [ 326.628526][ T8365] WARNING: CPU: 1 PID: 8365 at fs/nsfs.c:493 nsfs_fh_to_dentry+0xc56/0xd50 [ 326.637313][ T8365] Modules linked in: [ 326.641490][ T8365] CPU: 1 UID: 0 PID: 8365 Comm: syz.0.559 Not tainted syzkaller #0 PREEMPT(full) [ 326.650812][ T8365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 326.661003][ T8365] RIP: 0010:nsfs_fh_to_dentry+0xc56/0xd50 [ 326.666853][ T8365] Code: 64 24 40 e9 41 f8 ff ff e8 f7 2d 7b ff 90 0f 0b 90 e9 64 f6 ff ff e8 e9 2d 7b ff 90 0f 0b 90 e9 ab f6 ff ff e8 db 2d 7b ff 90 <0f> 0b 90 e9 f3 f6 ff ff e8 cd 2d 7b ff 45 31 e4 4c 8b 7c 24 08 e9 [ 326.686672][ T8365] RSP: 0018:ffffc9001331fa40 EFLAGS: 00010287 [ 326.692840][ T8365] RAX: ffffffff8242e7b5 RBX: 00000000effffffd RCX: 0000000000080000 [ 326.701637][ T8365] RDX: ffffc900047f2000 RSI: 0000000000000040 RDI: 0000000000000041 [ 326.710619][ T8365] RBP: ffffc9001331fb10 R08: ffffffff8f5cac37 R09: 1ffffffff1eb9586 [ 326.719330][ T8365] R10: dffffc0000000000 R11: fffffbfff1eb9587 R12: ffffffff8242dc9c [ 326.727340][ T8365] R13: dffffc0000000000 R14: ffff8880278e86d4 R15: 0000000000000000 [ 326.735345][ T8365] FS: 00007fa19a4976c0(0000) GS:ffff88812647e000(0000) knlGS:0000000000000000 [ 326.746067][ T8365] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 326.752666][ T8365] CR2: 0000200000000040 CR3: 0000000078ac3000 CR4: 0000000000350ef0 [ 326.761500][ T8365] Call Trace: [ 326.764861][ T8365] [ 326.767799][ T8365] ? __pfx_nsfs_fh_to_dentry+0x10/0x10 [ 326.773325][ T8365] exportfs_decode_fh_raw+0x178/0x6e0 [ 326.778887][ T8365] ? __pfx_vfs_dentry_acceptable+0x10/0x10 [ 326.784768][ T8365] ? __pfx_exportfs_decode_fh_raw+0x10/0x10 [ 326.790722][ T8365] ? srso_alias_return_thunk+0x5/0xfbef5 [ 326.796437][ T8365] do_handle_to_path+0xa4/0x1a0 [ 326.801307][ T8365] do_handle_open+0x6b4/0x8f0 [ 326.806734][ T8365] ? __pfx_do_handle_open+0x10/0x10 [ 326.811959][ T8365] ? srso_alias_return_thunk+0x5/0xfbef5 [ 326.818286][ T8365] ? rcu_is_watching+0x15/0xb0 [ 326.823125][ T8365] ? do_syscall_64+0xbe/0x3b0 [ 326.827821][ T8365] do_syscall_64+0xfa/0x3b0 [ 326.832332][ T8365] ? lockdep_hardirqs_on+0x9c/0x150 [ 326.837587][ T8365] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.843697][ T8365] ? srso_alias_return_thunk+0x5/0xfbef5 [ 326.849416][ T8365] ? exc_page_fault+0x9f/0xf0 [ 326.854242][ T8365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.860275][ T8365] RIP: 0033:0x7fa19958eec9 [ 326.864804][ T8365] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 326.884538][ T8365] RSP: 002b:00007fa19a497038 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 326.893041][ T8365] RAX: ffffffffffffffda RBX: 00007fa1997e5fa0 RCX: 00007fa19958eec9 [ 326.901040][ T8365] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 326.909891][ T8365] RBP: 00007fa199611f91 R08: 0000000000000000 R09: 0000000000000000 [ 326.918889][ T8365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 326.927035][ T8365] R13: 00007fa1997e6038 R14: 00007fa1997e5fa0 R15: 00007ffd3ebe7a58 [ 326.935115][ T8365] [ 326.938145][ T8365] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 326.945428][ T8365] CPU: 1 UID: 0 PID: 8365 Comm: syz.0.559 Not tainted syzkaller #0 PREEMPT(full) [ 326.954626][ T8365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 326.964705][ T8365] Call Trace: [ 326.967998][ T8365] [ 326.970945][ T8365] dump_stack_lvl+0x99/0x250 [ 326.975572][ T8365] ? __asan_memcpy+0x40/0x70 [ 326.980179][ T8365] ? __pfx_dump_stack_lvl+0x10/0x10 [ 326.985400][ T8365] ? __pfx__printk+0x10/0x10 [ 326.990013][ T8365] ? srso_alias_return_thunk+0x5/0xfbef5 [ 326.995754][ T8365] vpanic+0x281/0x750 [ 326.999758][ T8365] ? __pfx__printk+0x10/0x10 [ 327.004360][ T8365] ? __pfx_vpanic+0x10/0x10 [ 327.008881][ T8365] ? srso_alias_return_thunk+0x5/0xfbef5 [ 327.014541][ T8365] ? is_bpf_text_address+0x26/0x2b0 [ 327.019774][ T8365] ? srso_alias_return_thunk+0x5/0xfbef5 [ 327.025436][ T8365] panic+0xb9/0xc0 [ 327.029178][ T8365] ? __pfx_panic+0x10/0x10 [ 327.033638][ T8365] __warn+0x31b/0x4b0 [ 327.037644][ T8365] ? nsfs_fh_to_dentry+0xc56/0xd50 [ 327.042778][ T8365] ? nsfs_fh_to_dentry+0xc56/0xd50 [ 327.047906][ T8365] report_bug+0x2be/0x4f0 [ 327.052249][ T8365] ? nsfs_fh_to_dentry+0xc56/0xd50 [ 327.057372][ T8365] ? nsfs_fh_to_dentry+0xc56/0xd50 [ 327.062494][ T8365] ? nsfs_fh_to_dentry+0xc58/0xd50 [ 327.067613][ T8365] handle_bug+0x84/0x160 [ 327.071869][ T8365] exc_invalid_op+0x1a/0x50 [ 327.076384][ T8365] asm_exc_invalid_op+0x1a/0x20 [ 327.081228][ T8365] RIP: 0010:nsfs_fh_to_dentry+0xc56/0xd50 [ 327.086940][ T8365] Code: 64 24 40 e9 41 f8 ff ff e8 f7 2d 7b ff 90 0f 0b 90 e9 64 f6 ff ff e8 e9 2d 7b ff 90 0f 0b 90 e9 ab f6 ff ff e8 db 2d 7b ff 90 <0f> 0b 90 e9 f3 f6 ff ff e8 cd 2d 7b ff 45 31 e4 4c 8b 7c 24 08 e9 [ 327.106547][ T8365] RSP: 0018:ffffc9001331fa40 EFLAGS: 00010287 [ 327.112632][ T8365] RAX: ffffffff8242e7b5 RBX: 00000000effffffd RCX: 0000000000080000 [ 327.120601][ T8365] RDX: ffffc900047f2000 RSI: 0000000000000040 RDI: 0000000000000041 [ 327.128569][ T8365] RBP: ffffc9001331fb10 R08: ffffffff8f5cac37 R09: 1ffffffff1eb9586 [ 327.136536][ T8365] R10: dffffc0000000000 R11: fffffbfff1eb9587 R12: ffffffff8242dc9c [ 327.144506][ T8365] R13: dffffc0000000000 R14: ffff8880278e86d4 R15: 0000000000000000 [ 327.152480][ T8365] ? nsfs_fh_to_dentry+0x13c/0xd50 [ 327.157593][ T8365] ? nsfs_fh_to_dentry+0xc55/0xd50 [ 327.162726][ T8365] ? __pfx_nsfs_fh_to_dentry+0x10/0x10 [ 327.168197][ T8365] exportfs_decode_fh_raw+0x178/0x6e0 [ 327.173577][ T8365] ? __pfx_vfs_dentry_acceptable+0x10/0x10 [ 327.179389][ T8365] ? __pfx_exportfs_decode_fh_raw+0x10/0x10 [ 327.185317][ T8365] ? srso_alias_return_thunk+0x5/0xfbef5 [ 327.190958][ T8365] do_handle_to_path+0xa4/0x1a0 [ 327.195812][ T8365] do_handle_open+0x6b4/0x8f0 [ 327.200490][ T8365] ? __pfx_do_handle_open+0x10/0x10 [ 327.205694][ T8365] ? srso_alias_return_thunk+0x5/0xfbef5 [ 327.211321][ T8365] ? rcu_is_watching+0x15/0xb0 [ 327.216087][ T8365] ? do_syscall_64+0xbe/0x3b0 [ 327.220767][ T8365] do_syscall_64+0xfa/0x3b0 [ 327.225273][ T8365] ? lockdep_hardirqs_on+0x9c/0x150 [ 327.230486][ T8365] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.236548][ T8365] ? srso_alias_return_thunk+0x5/0xfbef5 [ 327.242176][ T8365] ? exc_page_fault+0x9f/0xf0 [ 327.246848][ T8365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.252772][ T8365] RIP: 0033:0x7fa19958eec9 [ 327.257181][ T8365] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 327.276786][ T8365] RSP: 002b:00007fa19a497038 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 327.285209][ T8365] RAX: ffffffffffffffda RBX: 00007fa1997e5fa0 RCX: 00007fa19958eec9 [ 327.293181][ T8365] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 327.301145][ T8365] RBP: 00007fa199611f91 R08: 0000000000000000 R09: 0000000000000000 [ 327.309106][ T8365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 327.317082][ T8365] R13: 00007fa1997e6038 R14: 00007fa1997e5fa0 R15: 00007ffd3ebe7a58 [ 327.325081][ T8365] [ 327.328194][ T8365] Kernel Offset: disabled [ 327.332500][ T8365] Rebooting in 86400 seconds..