last executing test programs: 4m19.506862978s ago: executing program 2 (id=3): r0 = socket(0x26, 0x6, 0xffffffff) getsockname$packet(r0, 0x0, &(0x7f0000000200)) prctl$PR_CAPBSET_READ(0x17, 0x3ff) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x308b407, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) chdir(&(0x7f00000003c0)='./bus\x00') linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) socket$inet(0x2, 0x3, 0x6010000) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) 4m18.434970961s ago: executing program 2 (id=11): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x2008002, &(0x7f00000000c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1000}}, {@nobarrier}, {@quota}]}, 0x1, 0x560, &(0x7f0000000c00)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) syz_mount_image$exfat(0x0, &(0x7f0000000200)='./file0\x00', 0xe1c00, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000002, 0x31, 0xffffffffffffffff, 0x848ae000) getdents64(r0, &(0x7f0000002540)=""/4096, 0x1000) creat(&(0x7f00000001c0)='./file0\x00', 0x0) 4m17.012269398s ago: executing program 2 (id=17): socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r0 = syz_open_dev$dri(0x0, 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000200)=""/227) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r3, r2, &(0x7f00000000c0)=0x58, 0xa) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000100)={0x3, 'vlan0\x00'}) 4m10.820161203s ago: executing program 2 (id=29): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="980000000b0601020000000000000000030000020500010007000000100007800c00018008000140ac1414430900020073797a31", @ANYBLOB="be6c2a6fe54fd119cdb087984ae8193e0938", @ANYBLOB="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"], 0x98}, 0x1, 0x0, 0x0, 0x4064}, 0x4800) syz_io_uring_setup(0xcad, &(0x7f0000000040)={0x0, 0x297a, 0x200, 0x1, 0x1c0}, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000180)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00006e3000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x1c6c, &(0x7f0000000040)={0x0, 0xaebb, 0xd000, 0x20000a, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x2d, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x69ee, 0xc00, 0x1, 0x11}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r1, 0x80, &(0x7f0000000380)=@in6={0xa, 0x4e20, 0x4, @loopback, 0x5}}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r8 = syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) wait4(r8, 0x0, 0x80000000, 0x0) ptrace(0x10, r8) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0) r9 = getpgid(0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) syz_pidfd_open(r9, 0x0) mount$tmpfs(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f00000001c0), 0x800, 0x0) 4m8.843891591s ago: executing program 2 (id=37): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x3, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20bc}}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x25, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6ff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x50) 4m4.367872317s ago: executing program 2 (id=41): timer_create(0xfffffffd, 0x0, &(0x7f00000011c0)) r0 = socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x1}, 0x1000) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) recvmmsg$unix(r0, &(0x7f0000005000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x4, 0x0, 0x0, 'queue1\x00', 0x1}) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x3, &(0x7f0000000140), 0x1, 0x25f, &(0x7f0000000b00)="$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") mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f00000006c0)={0xfffffffc, 0x3667, 0x0, 'queue0\x00', 0x8001}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000000c0), 0x1, 0x5ae, &(0x7f0000001fc0)="$eJzs3T1sG2UfAPD/ne2mH3nf9JXeV3qBDhVFKlJVJ+kHFKZ2RVSq1AGJBSLHDVWcuIodaKJIpBNLheiAAHUpGwyMIAYGxMLIysLHjFTRCKSmAxg5ttM0dYoT4hji3086+3nuzv7/H989j+9OPjmAvnW4/pBGPBYRF5KIoTXLstFceLix3vLSQuHe0kIhiVrt4s9JJBFxd2mh0Fo/aT4fiIjFiPh/RHyViziWrr7lnlahMjc/OVYqFWea9eHq1JXhytz88ctTYxPFieL0yWefO33m1OnRE6Nr071XW1vLba6t17+/8fb1b164dePjTw4tFt4dS+JsDDaXrW3Hdmp8Jrk4u27+qW4E66Gk1wmwJZlmP693pf/FUGSavb6d2pHX3nqiVRnYqQyBbqkNRNRWrSkCfSDR6aFPtY4D6ue/rWknjz9un2ucgNTjLi8tFN6MVvxs49pE7F05N9n/S/LAmUn9fPPgTibKrrR4LSJGstmH9/+kuf9t3ch2JEhXfXmusaEe3v7p6vgT7cafbPzl/SPWjH/LzfFvuU38zAbj34UOY/z28o8fbBj/2kA83jZ+sho/aRM/jYhXO4x/86XPz2y0rPZhxNFoH78lefT14eFLl0vFkcZj2xhfHD30/Mbtj9i/QfzGNdu9K4msbf+eZk5ph+3/7OtPn1x8RPynjzx6+7f7/PdFxDsdxv/P3Y9e3GjZ7WvJnfpRwGa3fxK5uNVh/GfOHv6uWXTVEAAAAAAAAAAAtlEaEYORpPnVcprm8417eP8b+9NSuVI9dqk8Oz0eK/fKHoxc2vql1VCjntTro83f47bqJ9bVT2aaATP7Vur5Qrk03uO2AwAAAAAAAAAAAAAAAAAAwN/FgXX3//+aWbn/f/3fVQO71cZ/+Q3sdvo/9K8H+3/SszyAnef7H/pWTf+H/qX/Q//S/6F/6f/Qv9r2/307nwew87b4/Z9udx7AznP8DwAAAAAAAAAAAAAAAAAAAAAAAAAAXXHh/Pn6VLu3tFCo18ezc7OT5dePjxcrk/mp2UK+UJ65kp8olydKxXyhPPVn75eUy1dGYnr26nC1WKkOV+bmX5kqz063/lO0mOt6iwAAAAAAAAAAAAAAAAAAAOCfZ3BlStJ8RK5RT9N8PuJfEXEwieTS5VJxJCL+HRHfZnID9fpor5MGAAAAAAAAAAAAAAAAAACAXaYyNz85VioVZ7pXyDZDdfaqH6pdzSe7mZUjYnF706i/46ZflWt+gN3dTH1SyHS4H/Z9oYeDEgAAAAAAAAAAAAAAAAAA9Kn7N/12+orfu5sQAAAAAAAAAAAAAAAAAAAA9KX0pyQi6tPRoacG1y/dkyxnVp4j4o2bF9+7OlatzozW599ZnV99vzn/RC/yBzrV6qdpRNT7MQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBfZW5+cqxUKs5ssTDQwTq9biMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAVvwRAAD//xpwz9M=") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0xd22) sendfile(r2, r2, 0x0, 0xe3aa6ea) truncate(&(0x7f0000000300)='./file1\x00', 0x591) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8000, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x0, 0x305, &(0x7f0000000200)="$eJzs3UtrG1cUwPEzeliSXddalFJKCxcXSkvxYAu666Km2FAqaLGtQhwIjONxIjSWjEYYZEKsRSDbrLPwIssQCIHssgkhW2/yCZI4O2+8ixciE0bzsB4TRSLIj+T/W1hHc8+Zez1zZeNraebwjzubpY20iGhyIt7ISkzi/rOG/Pp879WPy8++8p4rtTi/MpdTKiYil288mH5am/j/8ddPUrKfvXJ4lHuz/8OKyLuV6xJTRVuVHUcZaq1SqbldqPWiXdKV+s8yDdtUxbJtVmt+u7FmmWrDqmxt1ZVRXp8c36qatq2Mcl2VzLqqVVStWlfGNaNYVrquq8lxgYhkwyjW06b1KyzcP3YcOXIcx0k1xHGciOxGECT9x9SnDRbnSdf575vbMznioxwZTsOxkxj4/OPz473+X98d7Pw7u6c0LJyS5Uur/8zn8wtLSqVFNm9vF7YL3qPX/nJCimKJKXtLv602xZ0jPtHcr4t/5xdmVUtWft7c9et3twveL4f5jVb9QVDUVi9B/ZxXrzrrkzJ+Um9KTqbkG4mszwX1EmurH5Nffmqr12VKXlyViliy7s7ktvqbc0r99W++q/9MKw8AAAAAAAAAgItIV6GT9Xst/FdvRtdTrXd8hO0Zd7Ob5yWE6+uzMiXN6PX52cj1/YR8nzjDbxwAAAAAgC+IXd8pGZZlVkcTxO9l+nSRFBE3ELk17Q6m7w6/9Uc8WO9jItLbFO/fRUeQ+d3r7+GSPzAZ5YEKgvQQI4wIgg9rlIzmo6ApI1HJsaEmwMxY5JFPVzUZ6fzpCGSQZEkPPbG1hF3fSQ08tXrKm8GW7yJzHO3j+3EMK+ltkfAM9q/6c6iXwweDdPeBmjnw9mv1+aHxNlziAwAAAHCBtP3hBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAzkj4+X/Nv9P/IBcPC67b39kk/i3iey/J1n2feK77DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAceh8AAP//8yCz0A==") creat(&(0x7f00000000c0)='./mnt\x00', 0x4) timer_delete(0x0) 4m3.607503672s ago: executing program 32 (id=41): timer_create(0xfffffffd, 0x0, &(0x7f00000011c0)) r0 = socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x1}, 0x1000) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) recvmmsg$unix(r0, &(0x7f0000005000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x4, 0x0, 0x0, 'queue1\x00', 0x1}) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x3, &(0x7f0000000140), 0x1, 0x25f, &(0x7f0000000b00)="$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") mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f00000006c0)={0xfffffffc, 0x3667, 0x0, 'queue0\x00', 0x8001}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000000c0), 0x1, 0x5ae, &(0x7f0000001fc0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0xd22) sendfile(r2, r2, 0x0, 0xe3aa6ea) truncate(&(0x7f0000000300)='./file1\x00', 0x591) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8000, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x0, 0x305, &(0x7f0000000200)="$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") creat(&(0x7f00000000c0)='./mnt\x00', 0x4) timer_delete(0x0) 1m35.630277616s ago: executing program 4 (id=412): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xe7c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x8, 0x3, 0x370, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x100, 0x130, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x3d0) sendmsg$NFT_BATCH(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a01010000000000000000010000090900010073797a3100000000380000000b0a03060000000000000000000000080900020073797a31000000000800044000000001040012800900010073797a300000000078000000160a01080000000000000000010000070900010073797a31000000000900020073797a31000000000900020073797a320000000040000380080002400000000608000140000000002c0003801400010070696d726567310000000000000000001400010070696d"], 0xf8}, 0x1, 0x0, 0x0, 0x40}, 0x40000) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x5}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x6, 0x7, 0x1, 0x0, "b1b5"}]}], {0x14}}, 0x84}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x1f, &(0x7f0000000b40)=ANY=[@ANYRES8=r0], &(0x7f00000001c0)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x24, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) open_tree(r1, &(0x7f0000000000)='./file1\x00', 0x1c01) 1m33.180185814s ago: executing program 4 (id=420): r0 = socket(0x10, 0x3, 0x0) socket(0x1d, 0x2, 0x6) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[], 0x50) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x408, 0x100008b}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x15) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x28, 0x1, 0x7, 0x301, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x8000) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x800, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d491009b3426c8928f3d97cb", 0x10) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$int_in(r4, 0x5452, 0x0) sendmsg$kcm(r4, 0x0, 0x0) syz_open_procfs(r1, &(0x7f0000002600)='net/dev_mcast\x00') pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x1000000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0x0, 0xf}, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x404c080) syz_open_dev$evdev(&(0x7f00000000c0), 0x9, 0x20000) 1m29.558771605s ago: executing program 4 (id=428): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="1400def9b1f652d8b6c900001000010000000000000000000000000a24000000060a0904000000000000000002000000040004800900020073797a32000000001400000011"], 0x4c}}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x40488c2}, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, r3, 0x429, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000600)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x30, r3, 0x20, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x30}, 0x1, 0x0, 0x0, 0xfa7dbca717c53032}, 0x4000000) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r6, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x3, 0x3ff, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10000000, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x2, 0x3, 0x2000079, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0xc0000000, 0x0, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], [0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0x100000]}, 0x45c) ioctl$UI_DEV_CREATE(r6, 0x5501) ioctl$UI_GET_SYSNAME(r6, 0x8040552c, &(0x7f0000000500)) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) syz_read_part_table(0x105f, &(0x7f0000008a40)="$eJzszitSBDEUhtE/3U0/HIaFsBg0AgeLoA07YhOsBIHAjM9U5lXjW8yIc0yS+irJDTdVxry/9iXJkmRNnabrPNSSlJbXhyTf/5fSndfH35YzPh/PP2/J7rDr24tzMtWTz6yZ8/XULUPSvulear9t/L+PbfcBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4C7sAwAA///bnhVl") r10 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000340)={'macsec0\x00', 0x0}) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r11, {0xc}, {0xfff3, 0x8}}}, 0x24}}, 0x20040000) 1m27.539311198s ago: executing program 4 (id=433): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x0, &(0x7f0000000280)={[{@noload}, {@resgid}]}, 0x3, 0x44b, &(0x7f00000004c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f0000006e80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) statx(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x100, 0x88c, 0x0) write$FUSE_INIT(r1, &(0x7f0000004300)={0x50, 0x0, r2, {0x7, 0x29, 0x0, 0x1400001, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x50) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x80000000000000a, 0x2, 0x0) socket(0x4000000003c, 0x5, 0x0) syz_fuse_handle_req(r1, &(0x7f0000000000)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004480)={0x90, 0x0, 0x6, {0x3, 0x0, 0x7fffffff, 0x1ffffffffffff, 0xe5, 0xc, {0x1, 0x9, 0x1, 0x1, 0x5, 0x4, 0x8, 0x123, 0x3, 0xa000, 0x0, 0x0, r3, 0x5, 0x2000ffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x100, 0x0) open_by_handle_at(r5, &(0x7f0000000240)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000040), 0x2}], 0x1, 0x0, 0x0, 0x0) futex(&(0x7f0000000040), 0x1, 0x0, 0x0, 0x0, 0x0) 1m25.232272687s ago: executing program 4 (id=437): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r0, r1, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000fbdbdf256700000008000100010000000800c3"], 0x2c}, 0x1, 0x0, 0x0, 0x4000001}, 0xc800) read$FUSE(0xffffffffffffffff, &(0x7f00000005c0)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000700)=@ethtool_flash={0x33, 0xea6, '.\x00'}}) unshare(0x2a020480) unshare(0x40060400) ioctl$COMEDI_RANGEINFO(0xffffffffffffffff, 0x80106408, &(0x7f0000000280)={0x7, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0xd01, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003740)={r6, 0x0, 0x19, 0x1000, &(0x7f00000000c0)="7dd53cbd3194ca5fdf819f26407baee211bc663e897588e401", &(0x7f0000002600)=""/4096, 0x5, 0x0, 0x1b, 0x6f, &(0x7f0000003600)="16c66ad813ddc0658a773fd590c0c56a9103da2dff52ac06df05d1", &(0x7f0000003640)="229659ccd6f855f1bd40fd739fde0cf1ea3f2f73819162675a1ad240b49256c8b5ad664c93136c96f3edc592119ca3df9a80f378d8a74b6a002cad87c687c57201c01f48a4b96bc64e86aafbe22b123676a913d47292c8b81cb7f354a8bbe56b6801d91ea0f5a62faf0660d63f0f20", 0x2, 0x0, 0x3}, 0x50) socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4b, 0x0, &(0x7f00000000c0)) socket$phonet_pipe(0x23, 0x5, 0x2) 1m24.347447351s ago: executing program 4 (id=440): getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) fcntl$setpipe(r4, 0x407, 0x0) write$FUSE_INIT(r4, &(0x7f0000000340)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x28, 0x2, 0xffffffff82048008, 0x0, 0x40, 0x8, 0x0, 0x0, 0x0, 0x104, 0x8}}, 0x50) vmsplice(r4, &(0x7f0000000140), 0x0, 0x0) fcntl$setpipe(r4, 0x407, 0x2000000) accept4$unix(r3, &(0x7f0000001080), &(0x7f0000001100)=0x6e, 0x80000) getdents64(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0x232, 0x0, 0x90, [0x0, 0x200000000300, 0x0, 0x0, 0x200000000330, 0x200000000360], 0x0, 0x0, &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) semctl$GETVAL(0x0, 0x3, 0xc, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002500), 0x2443, 0x0) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r6, 0x3ba0, &(0x7f0000001140)={0x48, 0x4, 0x0, 0x0, 0xfffffeb6, &(0x7f0000000000)="2fd32953ca03f38ccbae7e215a168d2b40da8ca6a586cbb086873c26f05d1cbcfae7e84bf5a822a8e968d6e6c184ec26df9f48d2eab76ff5029676e9ff613acd4e5cf96a0a101e6f6e607e9943d71c012ddf2eae4668b9fda1418a453b827c260d7c8efb22901230e886661e4e837d394cb3d4d46cb1da4a3712e48e050fdbfef6ed510b624d36c1718ca6239234a1f8e55f8acf183927ad6d3f188e63afa579b5e4973d1c0618b706057fb0fb71ee29c8f1e540ac997c938a387dd95ccbbc093f0ad9aaf7c6bd6a682b32b42b832a7d65d1a2e6a161ec1f367c54aed35850c45da14ecde34001ce47c647cb80b40a98aeedba344ab0b15b441011737068481607ddd0a9ea192543232a38c4b0547a28ab3054b50cea3553e97c6c4bd2e3e0076409dcb668e5a4554036dba8a46ff6a52857a9d43184b1afbc997900bb91bf6fb848226e90b8014e68be43102e7e79e0d63acd2b29a2984d97ea6d030392bcdf8d474ee55a69f764708c8ecb1fb35efe63e3a583eaf48e7706076532dc0543857270e521cfad9f14455c8c105d9cb44b5f1543593ba73af42cc894a91d764250ca3f7d636b8b2537745ba7037f5b8cf8c552b534231460510675c22aa5c44bfb142c13c3520be31dbccc29ea1b7e976ff018427cf9618404423d5139746b5ad00c05b4e01f2fdde0827c9116fc9e57000f5f142cd1d410094450080b111694eb6444597e280d804a9c03b160b4f25c40fda791ed04bb450b9622539750d42d7a4756f8bb8068775c098a3ccadfc8a57157e4d493e3787e8cfc77bac0576150799d2f143c06aa521f821628ea00a2993a40d9a491d502c62d25274e1e55227ca9b3008d972e1c2e63fc150bc71991bdfcb91aeef36c26197decacb37e293c7059e64c2e9b2c0c9d78e0dced26b6c92c2225ba42d0d83ea3a1aabb458b71986902a8587f4e695a16a854aa62d8813977702ff8edc3cc2488c778ffa0e386fb829a75544dd7c5364548d86c9310ae22fe97afe80080752d561a30a05b2efaf77d8d5d4123a4c92f22f690e960e46e15633f3096d4cd1947dd4a1f9a0af4c6a1180ce4a79c3132e98b160ec401047cff3f5cdc49840518a5a10b8219dc0e2b70fb9b4bd75188b3c225ae37c8d77e1a7a51934ce93d991c6c88aed95e380f23308d0312a6b2b7d4e447c65243423a7562fafe6658645fecb8059630948a985249b9a11811828faafb46ea585debfe73cf4a28d907b69981637018e06861deabf999220595d156d9117c5ab4c75558ee1fe199b190206020ddbc5a1259dda9b87639e56b4729d289da8d0b5feecb740aea78403c7684a9f001a8ae93c1ad656a3d1905b77ede482dc388f85306cbc097e4fae67d1ad738cc54ad4b503d9e6f16f1a87008940acf2d14419c77bcb0b9cbaf43dca3a09b5f4c03244fbf25937d5ab1652e7eadfa3f583f7e52a6c79e8a4f529add5f99dcc045923b928cd1efa6c9c7fa5489ef0dd711fbc35dd8ac04f78cc3e0ecb38d534be938c668eb89014be9754b5e9800ca5dc9fa4d0a2a6a7435ae7b309c6227d2838be4ee8b165b4e5351094d5e42bfd78d6c6c02a19ae2f43f8baf89b648a9fe864af006dc0cabf53cd3a049927ed1c23601f9c079a31c3340a7516af007da29b4cf579d78d16e88acba3e987fc8c5cc270a72fd3e703a43de4b52b079be10d9fed54f08b233ad0c209786932b41ca0db2c51f65a4c49e89c7f7273ad220a6724b6f474174a50785f4fc073ee132acb603446acd8d283e6355394214cd2b4a64e20ed0b5ec57bd48215135b1eb3522ee04ba63ac78f921fd14b7d22195266c71c664e106f75147ab2485d2ec0f32ad71a1f78bdb13fe1fe19dc9c75fa93d8a6f82046816f3fe33dbfeef09503d2ed7321c7b0c2e56514c6d70614db57cf46ccde4a4a6456da4355e3ad7c6871444ff58046d17fbfc50175fcb52906629a8c7c5f0320e7885bb77f020af874ad58d9a31b148709f3ea4e42910b72533967bbb6bdfa389a79ad7dc2c567034547d97b991fd98161df0bc14a9fd0eb43cffd72c24b8df10082ed2fbd3962704f3c88a409f83f91b3960101eac7ff0e1af6c33f7638f163538450c257d35c1904a3f68f1fc4b5ceba1f53cfa5f7313dea0ef71530dd6e101c4dfe706e81ccc72288014541dedbd9bdc15da2332520cca76ee62b9ccde0562113f3aa7876752d0d8d91305b59e8aedd95afd1c07420980b96a2a09e53df5a4d72c509d8ef78f7138683e475a9d9746048dafafeda7ad32e5f4ddc9377e209f5bee7ce5cac821c67b342aeeac262323f8eb3443bfae8d71a4e7ae20c09e97a8aa87ce3fbd28934de5ef19b69ed7ebf66b5031bf6e7ce39073fe62e0e51be90fd88ac7a63012850383cc96461834daf093d2054c11dad1a1d1b6a5693d1de187a2334c0a67fa075c137fbfafba9125e2b1a310c73a5e45b1bb3c7189c7ea7400f7460b065b7f203a732d3ef62e6588d7afdb62406624862c81511a91a5cca2fa647364c4a719b1ac5d69b43d7b1748df3f35192ae5336e7dece690ed53f23dc54e0fc3e744c9d99ff5b7b86f6b91fd6a06d5dec46e7e8f8ca3f87f855025e5cb627f61831004494761eb16e10d2aa8c232006ab4f3c73aa33e64b3a32a686d4c325b4bf8d13edc5f1e1a17cccdf1e1cc18550f79fa829a435ba2a19bb511072a1a4a32e06745817981d6951fc2b72973bca9a6afdd87f0f2f7227a8939a33f02e96a840dbe5e8634cda2d694fd602818662ad7351791603b7f7738642bbddb1f5d38086487e9a159b515b6fe6eaa35dc83f24babd5ba8b6d86bb46849fec9f9d676d1a00e7eae5908748d6a33a105a133f9c2a351612a454d0efe9a9d5d1ee2f7187b78e96d758daa9180bac8e3ee2c0ea20870dc1b6cdeeab3595d8f65a27510d1230ecc10d386246762730714c0e76255f2e6f6734ab880c29ae1cfe82c735b013fb5bf92f0ed9cc0ce97cd0ac1087c19e79c1f624e3ea36d33f23b7ef2b6ca11a0652d1c03a622453b8d091e7034a620c7f7d4add09524e80d3e3aad354f30c52fd97e04c52721c6ea756393ffee18518663a2271c63ae4ace07a5db75b009f0d4735a76cf8295a356ad426d0e94390991971b46c906b28ab6b0d131e008407e210a1fd3857db6fa966e58a4fe0d40b927bc712145b45416336769c0653e063523209d46808705d9f72e55b8be30bee982c897dca7a598fe929bcbf241f339d07435a489c162720663602deafc2820277d3c969687829914f8148c970c584f4362aef08c812e06d6be44f6a1b3cd9f51eda6a4b06bff49eb700ee1ae54d06bc316589ef876e1fb64b1fdc81875977111253627f7f5b8f2be69e8f4973a675fa256320dba8d14053eb10ba3b00ce6ba1bb44ec863f3d2649b5410cc3ceac525925f3c447247dff0907ef3f75a83e5bc9ea166b1570d9f66b9cf4f87b1f0a6160e79b773f6cb92826fa8deda5057a8e0009c13afde210368d0ed9943c941c1c9fdb91eab090ccae863f7739fff5eb18d9165b0a23987cb37d10451bf69279fa1e3e73e30d948edc1bd683f82dc6790f890a010f90c45bff93d728ab899b8dcc7573a6ebe703fe47fb657e271de73d865e753c5aeca8d7959f59cb61bfb9cf20bb0adb5bb20bc12d3f474df0f3ff4c49773fe200aa9336989cb4ef843c09b9a4470f1ec1543097463d755b3aff75f88ca3e7677c9c93dc3f0f9ff5f5ae70b7cbfec9a1ea39d85905a736922dce2b349195823324d6a8977d76e9c406156352db7ed1a806f9bfa1839d70e5b259d245d2b187945bf8f2ad8a28b823eec23ddeef6ec545109b244aa6035519c5a48ca6cc00daa8929b2257f0fb651e45ddd1721ba8075c92fa3745348946de6a7c40de7f281e59dcc8b9e21a2e5a22220c53e8f76bd6ae3c57760b992225677e5bf573fe1385789555d4ce7289fb51e0b089c7181cd03fa97c88eeb635fdac4f7b72de1d668fe55a57776f27f2667392451d6b44686e163a934384473f053e55b09f8edab337d2ee700d50039176bee9f646dfb09baa48b669b20494380f994b0f2014a83c73989c8cce89263066321a5f1fa89694e642af18b2bbfca645a1d3a570f3b942d2920b52b101eb54297f5c9d94b028c8c0723bede98904e85b392e22523d47f9583cf30db8b3403b9d5fff98a6d80204161183e2671163d54795a5751bb4f001c227c58ff7b4758ca1e562384b01a0f163fb833a6c63aadb0b205a46ab3c13d7edf3e3d2385d8ee9cb52a238299337a41ce2a00045b8ec211e9a97ca4baeb2e28242c4ac306d7635161de39d6656d4e6aefcb8020ffcf56d16e9f6e62a17c822de0b3d8b8dbf7bc40e92e9e3988e7df9f87a95ea2326f6666a9f72873035455bc3783ad20ff70158842135e72a9aac18261be082feea6cd9146eebb0705669bb9dbad97bc5b2976c61ba22e69ded8a1ce35f80a08b16848cae8e4f029da5060bd0412e58f0485a5571a7618d7491afc31d2d441614df4133a21a725ceadd2768aac01ccf248226b8d8df7638dcf6845618199023a4fef0b697d85e7591337be96b92ad17bea62003ca3c43162ce7b3b9a3ad609de9fd5cac1fceb38e6cdd97232487d22cd1e9d994a01235bd9887bae57ff3eda274bbfafecf7dab747efc44bf3977db93aed0e1a5450d5cd4a93a1d772792dee8f6d770cb4fdcc270443256af8e4097da59fff75b8c5cc6c75846c0cf7e710674d0c248c1a3790e2ac117b79c52d4424fcd3e5551898cacc67028a11b0900cfb0dda81926bf037c2a5b29ad3191bc71b4517173682af41f7477887339fa463661697be89518b03695c5bb5319013db6f80fb209ebff41d36c6de10d75220ad572dc38886094c758011b4e44e6960b9d51671870b7f18b11b93c9a79d1b0612acfd3b8ba355223ef964c8533f8efb5a65fadcb2e57e8b1377d1d27c7622b1bab60d3bb4c66a59ee1b409e629854baf00129fd452852b7c6b473e95a557956075bbb5d6d235cdce3587fbdf8012217200a555b5f7985dcf16524d80005bd0bd5a43a411a5283aeb837888993ce09fed21d59c6c6411b1b2150e72e523b9aa127b043d04db037be6a272046b1dadc361433ed25eac131345b138bdf9bcd47ff3d58808ba6073eb2056f874220a235ecdac001d54de3044a3a1e2812f0f5c2e49bf80b046df8a5221da498c3faa524438d2c420e540f7270193cf2443b44b949727da1e0619738b72c804a2b23dd1ed5cdde569de900c82c9af829bc7676a02768e9c3cd4f18426dc3c8110a555168b89dcef826b241cf0750a8c83d7a11657705531753257dde538b3d422243398a45a739ca92e11be0d062b5645b8a947b38fc615f1e107f4a09ed8552566fd5018b22f9a3ddc8faa154306127d7f36992cb196a5a4466b8e70bc44a785c8696cee7ed519eac51570657e01af5f3c52df8dff8b0ad3f81883e0644081eb090848417c3e4dee17987b15b1a43af9be519da0b003b8facd5d7b91bfba303401b8f54b5b868359e95fa58148f50032929a32b53cb6a3d78e202e0c0613e514d7df9e9dc6231980a7a26be619e933904c0f29c34aaca28669a6e370362b55e7dbdf0720d7e6f5187357a2ff3838382c43ce46d1bd0cba8e82045010fef30aac49f9f827732adf0eaf3c1b794551b30a83de505dc2eb466a6b003dcc270ad047d6f0a2530e6865e47e1e561eb9a421b6309955a37acc50d4318ea685650746a48a9f405351e12e2d6198f880b15714f09e37aeb142810252f811e2ce", 0x10}) syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005196c0083d1bbb0111000000000109022400010004000009043c0002b1a92a0009050901ff030c090009050b"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x246, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe0, 0x3, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0xa, 0x6, 0x1, {0x22, 0x664}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x10, 0x16, 0x4}}}}}]}}]}}, 0x0) 1m23.852362738s ago: executing program 33 (id=440): getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) fcntl$setpipe(r4, 0x407, 0x0) write$FUSE_INIT(r4, &(0x7f0000000340)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x28, 0x2, 0xffffffff82048008, 0x0, 0x40, 0x8, 0x0, 0x0, 0x0, 0x104, 0x8}}, 0x50) vmsplice(r4, &(0x7f0000000140), 0x0, 0x0) fcntl$setpipe(r4, 0x407, 0x2000000) accept4$unix(r3, &(0x7f0000001080), &(0x7f0000001100)=0x6e, 0x80000) getdents64(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0x232, 0x0, 0x90, [0x0, 0x200000000300, 0x0, 0x0, 0x200000000330, 0x200000000360], 0x0, 0x0, &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) semctl$GETVAL(0x0, 0x3, 0xc, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002500), 0x2443, 0x0) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r6, 0x3ba0, &(0x7f0000001140)={0x48, 0x4, 0x0, 0x0, 0xfffffeb6, &(0x7f0000000000)="2fd32953ca03f38ccbae7e215a168d2b40da8ca6a586cbb086873c26f05d1cbcfae7e84bf5a822a8e968d6e6c184ec26df9f48d2eab76ff5029676e9ff613acd4e5cf96a0a101e6f6e607e9943d71c012ddf2eae4668b9fda1418a453b827c260d7c8efb22901230e886661e4e837d394cb3d4d46cb1da4a3712e48e050fdbfef6ed510b624d36c1718ca6239234a1f8e55f8acf183927ad6d3f188e63afa579b5e4973d1c0618b706057fb0fb71ee29c8f1e540ac997c938a387dd95ccbbc093f0ad9aaf7c6bd6a682b32b42b832a7d65d1a2e6a161ec1f367c54aed35850c45da14ecde34001ce47c647cb80b40a98aeedba344ab0b15b441011737068481607ddd0a9ea192543232a38c4b0547a28ab3054b50cea3553e97c6c4bd2e3e0076409dcb668e5a4554036dba8a46ff6a52857a9d43184b1afbc997900bb91bf6fb848226e90b8014e68be43102e7e79e0d63acd2b29a2984d97ea6d030392bcdf8d474ee55a69f764708c8ecb1fb35efe63e3a583eaf48e7706076532dc0543857270e521cfad9f14455c8c105d9cb44b5f1543593ba73af42cc894a91d764250ca3f7d636b8b2537745ba7037f5b8cf8c552b534231460510675c22aa5c44bfb142c13c3520be31dbccc29ea1b7e976ff018427cf9618404423d5139746b5ad00c05b4e01f2fdde0827c9116fc9e57000f5f142cd1d410094450080b111694eb6444597e280d804a9c03b160b4f25c40fda791ed04bb450b9622539750d42d7a4756f8bb8068775c098a3ccadfc8a57157e4d493e3787e8cfc77bac0576150799d2f143c06aa521f821628ea00a2993a40d9a491d502c62d25274e1e55227ca9b3008d972e1c2e63fc150bc71991bdfcb91aeef36c26197decacb37e293c7059e64c2e9b2c0c9d78e0dced26b6c92c2225ba42d0d83ea3a1aabb458b71986902a8587f4e695a16a854aa62d8813977702ff8edc3cc2488c778ffa0e386fb829a75544dd7c5364548d86c9310ae22fe97afe80080752d561a30a05b2efaf77d8d5d4123a4c92f22f690e960e46e15633f3096d4cd1947dd4a1f9a0af4c6a1180ce4a79c3132e98b160ec401047cff3f5cdc49840518a5a10b8219dc0e2b70fb9b4bd75188b3c225ae37c8d77e1a7a51934ce93d991c6c88aed95e380f23308d0312a6b2b7d4e447c65243423a7562fafe6658645fecb8059630948a985249b9a11811828faafb46ea585debfe73cf4a28d907b69981637018e06861deabf999220595d156d9117c5ab4c75558ee1fe199b190206020ddbc5a1259dda9b87639e56b4729d289da8d0b5feecb740aea78403c7684a9f001a8ae93c1ad656a3d1905b77ede482dc388f85306cbc097e4fae67d1ad738cc54ad4b503d9e6f16f1a87008940acf2d14419c77bcb0b9cbaf43dca3a09b5f4c03244fbf25937d5ab1652e7eadfa3f583f7e52a6c79e8a4f529add5f99dcc045923b928cd1efa6c9c7fa5489ef0dd711fbc35dd8ac04f78cc3e0ecb38d534be938c668eb89014be9754b5e9800ca5dc9fa4d0a2a6a7435ae7b309c6227d2838be4ee8b165b4e5351094d5e42bfd78d6c6c02a19ae2f43f8baf89b648a9fe864af006dc0cabf53cd3a049927ed1c23601f9c079a31c3340a7516af007da29b4cf579d78d16e88acba3e987fc8c5cc270a72fd3e703a43de4b52b079be10d9fed54f08b233ad0c209786932b41ca0db2c51f65a4c49e89c7f7273ad220a6724b6f474174a50785f4fc073ee132acb603446acd8d283e6355394214cd2b4a64e20ed0b5ec57bd48215135b1eb3522ee04ba63ac78f921fd14b7d22195266c71c664e106f75147ab2485d2ec0f32ad71a1f78bdb13fe1fe19dc9c75fa93d8a6f82046816f3fe33dbfeef09503d2ed7321c7b0c2e56514c6d70614db57cf46ccde4a4a6456da4355e3ad7c6871444ff58046d17fbfc50175fcb52906629a8c7c5f0320e7885bb77f020af874ad58d9a31b148709f3ea4e42910b72533967bbb6bdfa389a79ad7dc2c567034547d97b991fd98161df0bc14a9fd0eb43cffd72c24b8df10082ed2fbd3962704f3c88a409f83f91b3960101eac7ff0e1af6c33f7638f163538450c257d35c1904a3f68f1fc4b5ceba1f53cfa5f7313dea0ef71530dd6e101c4dfe706e81ccc72288014541dedbd9bdc15da2332520cca76ee62b9ccde0562113f3aa7876752d0d8d91305b59e8aedd95afd1c07420980b96a2a09e53df5a4d72c509d8ef78f7138683e475a9d9746048dafafeda7ad32e5f4ddc9377e209f5bee7ce5cac821c67b342aeeac262323f8eb3443bfae8d71a4e7ae20c09e97a8aa87ce3fbd28934de5ef19b69ed7ebf66b5031bf6e7ce39073fe62e0e51be90fd88ac7a63012850383cc96461834daf093d2054c11dad1a1d1b6a5693d1de187a2334c0a67fa075c137fbfafba9125e2b1a310c73a5e45b1bb3c7189c7ea7400f7460b065b7f203a732d3ef62e6588d7afdb62406624862c81511a91a5cca2fa647364c4a719b1ac5d69b43d7b1748df3f35192ae5336e7dece690ed53f23dc54e0fc3e744c9d99ff5b7b86f6b91fd6a06d5dec46e7e8f8ca3f87f855025e5cb627f61831004494761eb16e10d2aa8c232006ab4f3c73aa33e64b3a32a686d4c325b4bf8d13edc5f1e1a17cccdf1e1cc18550f79fa829a435ba2a19bb511072a1a4a32e06745817981d6951fc2b72973bca9a6afdd87f0f2f7227a8939a33f02e96a840dbe5e8634cda2d694fd602818662ad7351791603b7f7738642bbddb1f5d38086487e9a159b515b6fe6eaa35dc83f24babd5ba8b6d86bb46849fec9f9d676d1a00e7eae5908748d6a33a105a133f9c2a351612a454d0efe9a9d5d1ee2f7187b78e96d758daa9180bac8e3ee2c0ea20870dc1b6cdeeab3595d8f65a27510d1230ecc10d386246762730714c0e76255f2e6f6734ab880c29ae1cfe82c735b013fb5bf92f0ed9cc0ce97cd0ac1087c19e79c1f624e3ea36d33f23b7ef2b6ca11a0652d1c03a622453b8d091e7034a620c7f7d4add09524e80d3e3aad354f30c52fd97e04c52721c6ea756393ffee18518663a2271c63ae4ace07a5db75b009f0d4735a76cf8295a356ad426d0e94390991971b46c906b28ab6b0d131e008407e210a1fd3857db6fa966e58a4fe0d40b927bc712145b45416336769c0653e063523209d46808705d9f72e55b8be30bee982c897dca7a598fe929bcbf241f339d07435a489c162720663602deafc2820277d3c969687829914f8148c970c584f4362aef08c812e06d6be44f6a1b3cd9f51eda6a4b06bff49eb700ee1ae54d06bc316589ef876e1fb64b1fdc81875977111253627f7f5b8f2be69e8f4973a675fa256320dba8d14053eb10ba3b00ce6ba1bb44ec863f3d2649b5410cc3ceac525925f3c447247dff0907ef3f75a83e5bc9ea166b1570d9f66b9cf4f87b1f0a6160e79b773f6cb92826fa8deda5057a8e0009c13afde210368d0ed9943c941c1c9fdb91eab090ccae863f7739fff5eb18d9165b0a23987cb37d10451bf69279fa1e3e73e30d948edc1bd683f82dc6790f890a010f90c45bff93d728ab899b8dcc7573a6ebe703fe47fb657e271de73d865e753c5aeca8d7959f59cb61bfb9cf20bb0adb5bb20bc12d3f474df0f3ff4c49773fe200aa9336989cb4ef843c09b9a4470f1ec1543097463d755b3aff75f88ca3e7677c9c93dc3f0f9ff5f5ae70b7cbfec9a1ea39d85905a736922dce2b349195823324d6a8977d76e9c406156352db7ed1a806f9bfa1839d70e5b259d245d2b187945bf8f2ad8a28b823eec23ddeef6ec545109b244aa6035519c5a48ca6cc00daa8929b2257f0fb651e45ddd1721ba8075c92fa3745348946de6a7c40de7f281e59dcc8b9e21a2e5a22220c53e8f76bd6ae3c57760b992225677e5bf573fe1385789555d4ce7289fb51e0b089c7181cd03fa97c88eeb635fdac4f7b72de1d668fe55a57776f27f2667392451d6b44686e163a934384473f053e55b09f8edab337d2ee700d50039176bee9f646dfb09baa48b669b20494380f994b0f2014a83c73989c8cce89263066321a5f1fa89694e642af18b2bbfca645a1d3a570f3b942d2920b52b101eb54297f5c9d94b028c8c0723bede98904e85b392e22523d47f9583cf30db8b3403b9d5fff98a6d80204161183e2671163d54795a5751bb4f001c227c58ff7b4758ca1e562384b01a0f163fb833a6c63aadb0b205a46ab3c13d7edf3e3d2385d8ee9cb52a238299337a41ce2a00045b8ec211e9a97ca4baeb2e28242c4ac306d7635161de39d6656d4e6aefcb8020ffcf56d16e9f6e62a17c822de0b3d8b8dbf7bc40e92e9e3988e7df9f87a95ea2326f6666a9f72873035455bc3783ad20ff70158842135e72a9aac18261be082feea6cd9146eebb0705669bb9dbad97bc5b2976c61ba22e69ded8a1ce35f80a08b16848cae8e4f029da5060bd0412e58f0485a5571a7618d7491afc31d2d441614df4133a21a725ceadd2768aac01ccf248226b8d8df7638dcf6845618199023a4fef0b697d85e7591337be96b92ad17bea62003ca3c43162ce7b3b9a3ad609de9fd5cac1fceb38e6cdd97232487d22cd1e9d994a01235bd9887bae57ff3eda274bbfafecf7dab747efc44bf3977db93aed0e1a5450d5cd4a93a1d772792dee8f6d770cb4fdcc270443256af8e4097da59fff75b8c5cc6c75846c0cf7e710674d0c248c1a3790e2ac117b79c52d4424fcd3e5551898cacc67028a11b0900cfb0dda81926bf037c2a5b29ad3191bc71b4517173682af41f7477887339fa463661697be89518b03695c5bb5319013db6f80fb209ebff41d36c6de10d75220ad572dc38886094c758011b4e44e6960b9d51671870b7f18b11b93c9a79d1b0612acfd3b8ba355223ef964c8533f8efb5a65fadcb2e57e8b1377d1d27c7622b1bab60d3bb4c66a59ee1b409e629854baf00129fd452852b7c6b473e95a557956075bbb5d6d235cdce3587fbdf8012217200a555b5f7985dcf16524d80005bd0bd5a43a411a5283aeb837888993ce09fed21d59c6c6411b1b2150e72e523b9aa127b043d04db037be6a272046b1dadc361433ed25eac131345b138bdf9bcd47ff3d58808ba6073eb2056f874220a235ecdac001d54de3044a3a1e2812f0f5c2e49bf80b046df8a5221da498c3faa524438d2c420e540f7270193cf2443b44b949727da1e0619738b72c804a2b23dd1ed5cdde569de900c82c9af829bc7676a02768e9c3cd4f18426dc3c8110a555168b89dcef826b241cf0750a8c83d7a11657705531753257dde538b3d422243398a45a739ca92e11be0d062b5645b8a947b38fc615f1e107f4a09ed8552566fd5018b22f9a3ddc8faa154306127d7f36992cb196a5a4466b8e70bc44a785c8696cee7ed519eac51570657e01af5f3c52df8dff8b0ad3f81883e0644081eb090848417c3e4dee17987b15b1a43af9be519da0b003b8facd5d7b91bfba303401b8f54b5b868359e95fa58148f50032929a32b53cb6a3d78e202e0c0613e514d7df9e9dc6231980a7a26be619e933904c0f29c34aaca28669a6e370362b55e7dbdf0720d7e6f5187357a2ff3838382c43ce46d1bd0cba8e82045010fef30aac49f9f827732adf0eaf3c1b794551b30a83de505dc2eb466a6b003dcc270ad047d6f0a2530e6865e47e1e561eb9a421b6309955a37acc50d4318ea685650746a48a9f405351e12e2d6198f880b15714f09e37aeb142810252f811e2ce", 0x10}) syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005196c0083d1bbb0111000000000109022400010004000009043c0002b1a92a0009050901ff030c090009050b"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x246, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe0, 0x3, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0xa, 0x6, 0x1, {0x22, 0x664}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x10, 0x16, 0x4}}}}}]}}]}}, 0x0) 25.361033519s ago: executing program 1 (id=572): syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000b00)=ANY=[@ANYBLOB="2400fcff27001ff2ffffff7f009b000085c31298acd41c7d159b6a5a7475345686d51b1a5a9bf2dfde0d50f1b775da407dc94c0c1a75dcfe91d33422352619862b3abd8f081333e4f1e4d42a985981714909182476c4ebe5eca66be41126b21ce357366e83af711d712959fc038c132806c5aae0ce15d5502475e531f3020dd6534fb94fe8697ef271b6fe83e55639b77831b7fb730f99281c681dd090dc2e05d52f411d583dbbdc10d32baf7c3f117c1d3118e6f6f26dead5b015b4ccd3e4f74f58af6dda7e63bcf27568195400c5671ea3fac9b281a03c0e8db663f5c051edae8a08e53da4c959cc5ac8bd3334611a27ff00d8869e568dcab226d858523754a450", @ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x4805}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4dd086d0492082a6d0000000109021b0001000000000904"], 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="200e020000007cdbd61af5b1d61cd0d18f5a3b970b70d817e6e5c328eb2b24152239e9c2b043439ca5be9b785abe067c94180f2f14043cc81696937342daa19c212cdf4afd138e44dd1a92f7ba83dd6a5ffe7e02a15d65b90e10bc1e80ac006250eae2f7a7af920bde652e25d0a3408ec97ebd4c3dc8a629ad234c12b3644b2fcec7bb5c8c00d2165e61dce77dbe760d438dc76e6e417c97a71d7bda2db937af860000000000", @ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2}) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1e, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) r4 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$VFAT_IOCTL_READDIR_SHORT(r4, 0x82307202, &(0x7f0000000680)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x400000008000f28, 0x0) ioctl$int_in(r5, 0x5452, &(0x7f00000001c0)=0x3) r6 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r6, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) recvfrom$llc(r6, &(0x7f0000000340)=""/203, 0xcb, 0x2, 0x0, 0x0) close(0x3) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000000), 0xffffff6a) sendfile(r6, r7, 0x0, 0xffffffff000) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000040000000400000008"], 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r7, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, &(0x7f0000000040)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, &(0x7f0000000640)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x30, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="1b00000000000000ffffffff0080000000040000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="400000bd90262b4d2b542f84758185db000000000000000000550000"], 0x50) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x2b, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="110000001c000100a83d7000fbdbdf2507000000", @ANYRES32=0x0, @ANYBLOB="80008f0a0a00020001125908f2a0000006000500010000000800070004000000"], 0x38}, 0x1, 0x0, 0x0, 0x91}, 0x4040000) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@cgroup, 0x26, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 21.340707476s ago: executing program 1 (id=587): syz_open_dev$evdev(&(0x7f00000000c0), 0x80000000000004, 0x822b01) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfd3fe, 0x2ffffffff}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) syz_open_dev$vim2m(0x0, 0x2000000f5, 0x2) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x8, 0x2}, {0xd, 0x1}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) syz_open_procfs(0x0, 0x0) io_submit(0x0, 0x0, 0x0) 18.715040002s ago: executing program 3 (id=591): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000780)={'filter\x00', 0x5, 0x4, 0x410, 0x0, 0x220, 0x0, 0x328, 0x328, 0x328, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @private, @empty}}}, {{@arp={@multicast1, @private=0xa010100, 0xff, 0xffffffff, 0x4, 0x1, {@empty, {[0xff, 0xff, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@local, {[0xff, 0x0, 0xff, 0x0, 0xff, 0xff]}}, 0xeb35, 0x7, 0xe9, 0x5723, 0x8, 0x9, 'wlan0\x00', 'pimreg0\x00', {0xff}, {0xff}, 0x0, 0x21}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}, @empty, @remote, @private, 0x2}}}, {{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz1\x00', {0xf}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x460) (fail_nth: 2) 17.211745888s ago: executing program 3 (id=592): sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000640)='./file1\x00', 0x0, &(0x7f0000000000)={[{@part={'part', 0x3d, 0x4}}, {@force}, {@nls={'nls', 0x3d, 'maccroatian'}}]}, 0x1, 0x5c8, &(0x7f00000006c0)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xa0380, 0x108) 16.95130974s ago: executing program 3 (id=593): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x45, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x4, 0xc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xc4, 0x0, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\bq\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000001000/0x4000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x400c804) io_uring_setup(0xa, &(0x7f0000000040)={0x0, 0xcaa1, 0xc000, 0x2, 0xc1}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, 0x0) socket(0xa, 0x5, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000240)={'pcl818\x00', [0x100, 0x4, 0x13600, 0x6, 0x80000001, 0x10005, 0x79, 0x3, 0x80008, 0x5, 0x2, 0x1, 0x7, 0x1, 0x6, 0x100, 0x6, 0x9, 0x3, 0x7fffffff, 0xb740, 0xca9f, 0x9, 0x20001e58, 0x8, 0xf39e, 0x3, 0x1539b802, 0x9, 0x1, 0x2]}) 13.543681871s ago: executing program 3 (id=595): unshare(0x62040200) r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={0x0, {0x2, 0x4e24, @multicast1}, {0x2, 0x4e23, @local}, {0x2, 0x4e21, @loopback}, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, 0x1, 0x2, 0x4}) connect$inet(r0, &(0x7f0000000500)={0x2, 0x4e24, @multicast1}, 0x10) syz_init_net_socket$llc(0x1a, 0x3, 0x0) 12.651176706s ago: executing program 0 (id=598): ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setaffinity(0x0, 0x6, &(0x7f0000000400)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b06, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000007c0)=ANY=[@ANYBLOB="12006000", @ANYRES16=r3, @ANYBLOB="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", @ANYRES32=r5, @ANYRES8=r0], 0x28}}, 0x0) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYRES64=r0], 0x7c}, 0x1, 0x0, 0x0, 0x801}, 0x24044814) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r6, 0xffffffffffffffff, 0x7, r7, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff, 0x80000009}) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000005c0)='wg1\x00', 0x10) r8 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r8, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r8, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r8, 0xc02064b6, &(0x7f00000001c0)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r8, 0xc02064b9, &(0x7f0000000380)={&(0x7f0000000240)=[0x0], &(0x7f0000000380), 0x1, r10, 0xcccccccc}) 10.651688552s ago: executing program 0 (id=599): socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r0 = syz_open_dev$dri(0x0, 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000200)=""/227) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r3, r2, &(0x7f00000000c0)=0x58, 0xa) unshare(0x6020400) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000100)={0x3, 'vlan0\x00'}) 10.063684839s ago: executing program 1 (id=600): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000000)={'vlan0\x00', @random="010000201000"}) (fail_nth: 4) 10.062106803s ago: executing program 7 (id=601): r0 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x20, @local, 0x0, 0x20}, 0x80, 0x0}, 0x200480fe) 10.054604705s ago: executing program 6 (id=602): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002a40), r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r1, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000002ec0)={0x14, r2, 0x1, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x2000000, 0x0, 0x4044080}, 0x44080) 9.750485018s ago: executing program 5 (id=603): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x200000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$btrfs(&(0x7f0000000140), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000240)={[{@noenospc_debug}, {@metadata_ratio}, {@discard}]}, 0xfc, 0x559e, &(0x7f000000ac40)="$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") r0 = open(&(0x7f0000000440)='./file1\x00', 0x4242, 0x1df2a23c5997faa6) sendfile(r0, r0, 0x0, 0x7f03) (fail_nth: 2) 9.283807624s ago: executing program 7 (id=604): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000000)=@file={0x1}, 0x6e) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x43, &(0x7f0000000100)={0x0, 0xea60}, 0x10) connect$unix(r1, &(0x7f0000000080)=@file={0x1}, 0x6e) (fail_nth: 2) close(0x3) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x2000c000) r2 = syz_open_dev$vim2m(0x0, 0xffffffffffff3d0b, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) fsopen(0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) dup2(r3, r3) 9.258639408s ago: executing program 1 (id=605): sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000640)='./file1\x00', 0x0, &(0x7f0000000000)={[{@part={'part', 0x3d, 0x4}}, {@force}, {@nls={'nls', 0x3d, 'maccroatian'}}]}, 0x1, 0x5c8, &(0x7f00000006c0)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xa0380, 0x108) 8.64327173s ago: executing program 6 (id=606): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="2400000072a809963f1f470a0706010800000000000000000a00000105000000070000000800064000000006"], 0x24}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x44, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x40000010) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000011}, 0x20000084) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) bind$xdp(0xffffffffffffffff, &(0x7f00000000c0)={0x2c, 0x5, 0x0, 0x16, r2}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000500)=@nat={'nat\x00', 0x1b, 0x5, 0x338, 0x0, 0xa8, 0xffffffff, 0x2c0, 0xa8, 0x3c0, 0x3c0, 0xffffffff, 0x3c0, 0x3c0, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x4, @private=0xa010101, @rand_addr=0x64010102, @icmp_id=0x64, @icmp_id=0x64}}}}, {{@ip={@remote, @multicast2, 0xff, 0xff000000, 'veth0_to_batadv\x00', 'ip6_vti0\x00', {0xff}, {}, 0x5c, 0x1, 0x40}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x1, @multicast2, @dev={0xac, 0x14, 0x14, 0x27}, @icmp_id=0x64, @gre_key=0x4}}}}, {{@ip={@rand_addr=0x64010102, @rand_addr=0x64010100, 0xff, 0xff, 'veth1_to_bond\x00', 'veth1\x00', {}, {0xff}, 0x16, 0x5, 0x1}, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x4, @local, @rand_addr=0x64010100, @gre_key=0x7, @gre_key=0x400}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x24, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @gre_key=0xbea, @gre_key=0x8}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) 8.442869362s ago: executing program 0 (id=607): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create(0xffffdea0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0xa0000008}) epoll_wait(r2, &(0x7f0000000080)=[{}], 0x1, 0xffffff90) close(r0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x48, 0x1, 0x1, 0x3, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}, @CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000814}, 0x20008000) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 8.2915325s ago: executing program 7 (id=608): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000100), 0x4) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x12) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$setown(r1, 0x8, 0x0) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004055) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @rand_addr=0x64010102}, 0x10) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0xbe7, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) 7.767262698s ago: executing program 0 (id=609): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$inet6(0xa, 0x80002, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000040)={'ah\x00'}, &(0x7f0000000140)=0x1e) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000180)={'comedi_parport\x00', [0xd00, 0x1f, 0x6, 0x8000, 0x3, 0xcc7, 0x0, 0x6, 0x5, 0x100ff, 0x2, 0x2, 0x1, 0x2, 0x9, 0x3, 0xbc761c6, 0x9, 0x42, 0x40000003, 0xfff, 0x8, 0x5, 0x2000006, 0x800b, 0x32, 0x5, 0x2, 0xd, 0x2, 0xffffff5c]}) ioctl$COMEDI_SETRSUBD(r2, 0x6410) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r4, r3, 0x25, 0x8}, 0x14) (async) syz_mount_image$squashfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c004f469d0460b10c52b2251664f5cbbd4f9bc86b1f43a632d1649c407dc5c7bc9c0e81b55acf7b9a05865df969474cfa16f7d734285938314e845c9c84b769204188cfa2167852529c803c8608e4ccb070b6a444497689f8e97b5fcb41cb08e1f11868cb5beb23db244c0e84208e37e3d73ac1d0c03ccdf7eb17d20da89e9e2d3b5e9dc0bc08920b0ba3888f7abc03c9f08dfd5c966e6e4a93f028000000000000000000"], 0x1, 0x237, &(0x7f0000000340)="$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") 7.697203239s ago: executing program 7 (id=610): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x20004090) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'bond0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) r5 = socket$igmp6(0xa, 0x3, 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8932, &(0x7f0000000000)={'dummy0\x00'}) setsockopt$inet6_int(r5, 0x29, 0x16, &(0x7f0000000140)=0x5, 0x4) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21, 0x1080}, [@IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x401}, @IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_SLAVE2={0x8, 0x2, r4}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="28000000680001000000000000000000020003000400000008000500", @ANYRES32=r8, @ANYBLOB="08000600ee"], 0x28}}, 0x0) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xcb, &(0x7f0000000040)={0xffffffffffffffff, 0x1, 0x0, r4, 0xd}, 0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @rand_addr=0x640100fe}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000240)={0x0, 0x1c, "f76c3bce3c02df44d23f084dc97ce8198da7559ab215f088147bc6b1"}, &(0x7f0000000300)=0x24) fcntl$setlease(r0, 0x400, 0x4) 7.544550427s ago: executing program 1 (id=611): ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setaffinity(0x0, 0x6, &(0x7f0000000400)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b06, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000007c0)=ANY=[@ANYBLOB="12006000", @ANYRES16=r3, @ANYBLOB="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", @ANYRES32=r5, @ANYRES8=r0], 0x28}}, 0x0) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYRES64=r0], 0x7c}, 0x1, 0x0, 0x0, 0x801}, 0x24044814) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r6, 0xffffffffffffffff, 0x7, r7, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff, 0x80000009}) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000005c0)='wg1\x00', 0x10) r8 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r8, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r8, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r8, 0xc02064b6, &(0x7f00000001c0)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r8, 0xc02064b9, &(0x7f0000000380)={&(0x7f0000000240)=[0x0], &(0x7f0000000380), 0x1, r10, 0xcccccccc}) 7.375477089s ago: executing program 0 (id=612): socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r0 = syz_open_dev$dri(0x0, 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r3, r2, &(0x7f00000000c0)=0x58, 0xa) unshare(0x6020400) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000100)={0x3, 'vlan0\x00'}) 7.356366917s ago: executing program 5 (id=613): chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xc0042, 0x1) close(r0) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, 0x0, 0x0) syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000002800)=ANY=[@ANYBLOB="73686f727461642c756e64656c6574652c73657373696f6e3d30303030000800003030303030303030303139302c6d6f64653d30303030303030303030303030303030303030303030352c726f6f746469723d30303030303030303030303030303030303030352c646d6f64653d30303030303030303030303030303030303030303030362c696f636861727365743d6370313235312c696f636861727365743d6b6f69382d722c6e6f7672732c0084f5b23d82aacbefd1de1daab7394a9b4696461da9ab46f2d71c895d8c"], 0xfc, 0xc41, &(0x7f0000001b80)="$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") open(&(0x7f00000000c0)='.\x00', 0x80, 0x5c) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xf7, 0x485, &(0x7f0000001040)="$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") socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x234a047, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000340)={[{@nfs_export_off}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804051, 0x0, 0x1, 0x0, &(0x7f0000000d40)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)="cb000000150081054e81f782db44b904021f08010a000000040000a118000200ac141414ffff0d1208000f0100810401880016ea1f0006ea7f400303000803600cfab94dcf5c046181d67f6f94007134cf6ee080005c4ab0f45312b3429fa0e408f456211bef32d4760000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd60100730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee", 0xcb}], 0x1, 0x0, 0x0, 0x7400}, 0x44804) syz_mount_image$msdos(&(0x7f00000021c0), &(0x7f0000000f00)='.\x00', 0x3b4a468, &(0x7f00000021c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) rmdir(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a1c0000000000000000000100000a08000a4000000002140000001100010000000000000000000700000a"], 0x44}}, 0x0) open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) 2.63208685s ago: executing program 6 (id=614): syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000000)='./file3\x00', 0x800000, &(0x7f0000000100)=ANY=[], 0xff, 0x234, &(0x7f0000000900)="$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") (async) syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000000)='./file3\x00', 0x800000, &(0x7f0000000100)=ANY=[], 0xff, 0x234, &(0x7f0000000900)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) r1 = open(&(0x7f0000000380)='./file3\x00', 0x26001, 0x60) write$binfmt_register(r1, &(0x7f0000004bc0)={0x3a, 'syz0', 0x3a, 'E', 0x3a, 0x101, 0x3a, '&', 0x3a, '-[:{', 0x3a, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x122) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000080)={0x2, [0x0, 0x0]}, &(0x7f0000000100)=0xc) socket(0x2, 0x80805, 0x0) (async) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000080)={r4, 0x8}, 0x8) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000140)={r2, 0x9, 0x2, 0x4, 0x7ff, 0xf, 0x9, 0x0, {r4, @in={{0x2, 0x4e21, @rand_addr=0x64010102}}, 0xe, 0x3, 0x277, 0x3}}, &(0x7f0000000200)=0xb0) (async) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000140)={r2, 0x9, 0x2, 0x4, 0x7ff, 0xf, 0x9, 0x0, {r4, @in={{0x2, 0x4e21, @rand_addr=0x64010102}}, 0xe, 0x3, 0x277, 0x3}}, &(0x7f0000000200)=0xb0) 2.483770759s ago: executing program 6 (id=615): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0xe5, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xf}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_control(r2, &(0x7f0000000140)='connect aa:aa:aa:aa:aa:10 0', 0xf) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000000700)="e2", 0x1, 0x40000, 0x0, 0x0) sendmmsg$sock(r3, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000180)="b82c", 0xffa0}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000500)="0256", 0x2}], 0x1}}], 0x2, 0x4000080) writev(r1, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 2.333925123s ago: executing program 1 (id=616): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0, {0x7}}, '\x00'}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000f00"/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000500)="e0d6bb4ee2dbd89da573425576ea", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r3, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r4 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r4, 0x11}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[], 0x10) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0}) syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0021afed7fef58d0f131883915dcfa7bae64006098ae8da8a0978dc9546343e2d9991919a0f7166d91d03800695b2f2ed3c045805118b598a8aa4116d901025bc608e21444aded1fb4"], 0x2, 0x1a9, &(0x7f0000000140)="$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") syz_open_dev$media(&(0x7f0000000100), 0x24000003ff, 0x6340) openat$binderfs(0xffffffffffffff9c, &(0x7f00000003c0)='./binderfs2/binder0\x00', 0x806, 0x0) 2.204015728s ago: executing program 3 (id=617): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="180000002f400000000300000000000000000100ffffffffb095000000060000004d081af6beedf37f668ba065b0f15e6d280fd09f999f891002b5ada46c0ec0456a2242a69a96f25520e6a360bac003f4d0419adca831213fd9ba533b474b0e83c1b332ad0da6e9e1b83064ac7fe07e410e4b329a9e67543992917f06777414dbb5bdb56840a79546558d683eb09799dc7a696f89dc791bf33c4b0009e2e75ec844d8755803a13ac70e09a77b31a20756a56e2f2dad6e6fd398b65fd55c7fc46e3cee5417da7d63ff30f43697c4a972"], &(0x7f00000002c0)='GPL\x00', 0xf, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$random(0xffffffffffffff9c, &(0x7f00000007c0), 0x202, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x10010) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xe, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfc4}, 0x94) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r6, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000040)=@usbdevfs_driver={0xf, 0x2c436529, 0x0}) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r9, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0xc, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private, @multicast1}, @address_request={0x11, 0x2}}}}}, 0x0) setsockopt$inet_mreq(r8, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) r10 = socket$kcm(0x10, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, &(0x7f0000000280)=0x1, 0x4) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x40880) 2.089830064s ago: executing program 5 (id=618): ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8010, 0xffffffffffffffff, 0x574e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_io_uring_setup(0x18da, 0x0, 0x0, &(0x7f0000ffe000), 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(r4, 0xf, &(0x7f00000006c0)={0x0, 0x0, 0x0, &(0x7f0000000100), 0x0}, 0x20) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_int(r5, 0x1, 0x28, 0x0, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000dedd02ea000000"], 0x48) r7 = getpid() syz_io_uring_submit$UBLK(0x0, 0x0, 0x0, &(0x7f0000000c00)=@ublk_end_user_recovery_sqe={0x2e, 0x3, 0x0, 0xffffffffffffffff, 0xc0207511, 0x0, 0x0, 0x0, 0x1, 0x7fc, 0x0, 0x0, '\x00', {0x0, 0xffff, 0x0, 0x0, r7}}) syz_io_uring_complete(0x0, 0x0) syz_open_dev$ublk_bdev(&(0x7f0000003000), 0x0, 0x0) syz_io_uring_submit$UBLK(0x0, 0x0, 0x0, &(0x7f0000000f00)=@ublk_stop_dev_sqe={0x2e, 0x0, 0x0, 0xffffffffffffffff}) syz_io_uring_complete(0x0, 0x0) syz_io_uring_submit$UBLK(0x0, 0x0, 0x0, &(0x7f0000001000)=@ublk_del_dev_sqe) r9 = getpgrp(r1) ioctl$UBLK_U_CMD_END_USER_RECOVERY(r8, 0xc0207511, &(0x7f0000000080)={0x0, 0xffff, 0x0, 0x0, r9}) unshare(0xd5fba96d12360969) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r6, @ANYBLOB="0000000002000000b70500000800000085000000aa00000095"], &(0x7f0000000300)='GPL\x00', 0x2}, 0x94) ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0xc400941b, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x2d, 0x0, 0x0) 2.070913141s ago: executing program 0 (id=619): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x26, 0x805, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r4, 0x800448d7, &(0x7f00000000c0)) ptrace(0x10, r3) ptrace$cont(0x7, r3, 0x3, 0x5a80) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 1.955687538s ago: executing program 7 (id=620): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file2\x00', 0x401, &(0x7f0000000000), 0x1, 0xbeb, &(0x7f0000001c00)="$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") symlinkat(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00') readlinkat(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0xfffffffffffffffe, 0xfe9c) 1.778176331s ago: executing program 5 (id=621): socket$inet6(0xa, 0x6, 0x3) (async) r0 = socket$inet6(0xa, 0x6, 0x3) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f00000008c0)=';', 0x1) (async) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f00000008c0)=';', 0x1) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)='G', 0x1}], 0x1}, 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000481c) sendmsg$sock(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000003c0)='oeN', 0x3}], 0x1, &(0x7f0000000100), 0x11}, 0x8805) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xfffffffa}}, './file0\x00'}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={r4}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={r4}, 0x4) ioctl$VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f00000001c0)={0x7fffffff, 0x6, 0x200, "cc84ac00bae8237ac5d9d39a75ffd4566a5ae1f3330e3f2681e4a1418e2c0967", 0x41564e57}) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x16, 0x10, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x100}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0xb6}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x16, 0x10, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x100}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0xb6}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) sendmmsg$inet6(r0, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) (async) sendmmsg$inet6(r0, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f00000028c0)={0x8, 0x0, [{0x5000, 0xe9, &(0x7f00000002c0)=""/233}, {0x30000, 0x7d, &(0x7f00000003c0)=""/125}, {0xdddd1000, 0x1000, &(0x7f0000001600)=""/4096}, {0x100000, 0x11, &(0x7f0000002600)=""/17}, {0xffff1000, 0x3a, &(0x7f0000002640)=""/58}, {0x8000000, 0x9, &(0x7f0000002680)=""/9}, {0x40000, 0x19, &(0x7f0000002700)=""/25}, {0x30000, 0xd3, &(0x7f0000002740)=""/211}]}) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x18, 0x5a, 0x1, 0x0, 0x0, {0x9}, [@typed={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4040}, 0x0) (async) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x18, 0x5a, 0x1, 0x0, 0x0, {0x9}, [@typed={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4040}, 0x0) recvmmsg(r0, &(0x7f0000002080)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x12141, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000008000000050000000000000c020000000000001900f65f00"], 0x0, 0x2c}, 0x28) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) (async) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/184, 0xb8) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000280)={0xea82357aa0d7d8b9, @rand_addr=0x64010102, 0x4e22, 0x3, 'lblcr\x00', 0xa, 0x0, 0x41}, 0x2c) write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000500), r8}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000140)=0x1, r8, 0x0, 0x2, 0x4}}, 0x20) 1.492427878s ago: executing program 6 (id=622): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x30) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r3 = getpid() getpid() write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)={'#! ', './file1/file0', [{}]}, 0x12) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x44, 0x18, 0x1, 0x70bdac, 0x25dfdbfc, {0xa}, [@TCA_ACT_TAB={0x30, 0x1, [{0xc, 0x8d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44010}, 0x20040844) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x3, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) write$cgroup_subtree(r1, 0x0, 0x33fe0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) 1.299650414s ago: executing program 5 (id=623): sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2b1245d, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xa0380, 0x108) 247.94295ms ago: executing program 6 (id=624): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(0xffffffffffffffff, 0x0, 0x80) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000001c00), 0x12) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = memfd_create(&(0x7f00000002c0)='[\v\xdbX\xae[5\xa9\x90\xffc\x1f\x1a\xa9\xfd\xfa\xad\xd1md\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\x9fc\xda\xa9\x83r\xd8\x98\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9r\xc3E\xf8\x92\xb7-\x0e\xcf|\x89\xc2tc\xc9d\x9eI\xbaVf\xd1fs\xd1w6\x8a\xe9_', 0x3) write$binfmt_script(r4, &(0x7f00000005c0)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x204) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r3, 0x0, 0x0) r5 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) openat$vicodec1(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8777, 0x0) write$binfmt_register(r5, &(0x7f00000003c0)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0xa, 0x3a, '*.-*', 0x3a, '', 0x3a, './file0'}, 0x2b) syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e0102030109022400010000"], 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0xffffffffffffffff) 190.855244ms ago: executing program 7 (id=625): r0 = syz_open_procfs$userns(0x0, &(0x7f0000000200)) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000280)={0x7, 0x28, '\x00', 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0]}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc000000190001002bbd70000000000000000000000000000000000000000001fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000100000000000000000000000000000000000000000ffffffffffffffff00000000002000fffffffc00000000000000000000000000000a000000000000feffffffff7f40000200000000000008010000000000000001000000000000004400050000000000000000000000000000000000000000003c00000002000000ffffffff00000000000000000000000006000000040100"/180], 0xfc}}, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000129bd7000ffdbdf18040000001ac290a3da60c7feeaf208000200000000000800030004000000"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x6) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, '\x00', 0x1c}}, 0x1c) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000001c0)={'bond0\x00', &(0x7f00000000c0)=@ethtool_modinfo={0x42, 0x40, 0x80000001}}) 74.168649ms ago: executing program 5 (id=626): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r1 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/fs/binfmt_misc/syz3\x00', 0x2, 0x0) ioctl$NILFS_IOCTL_SET_SUINFO(r1, 0x40186e8d, &(0x7f0000000200)={&(0x7f0000000140)=[{0x9, 0x2, 0x0, {0x4b66f3f, 0x1ff, 0x2}}], 0x1, 0x20, 0x752, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wg0\x00'}) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000001c0)={0x9, 0x2, 0x1}) r3 = mq_open(&(0x7f0000000240)='anchor', 0x40, 0x6c, &(0x7f0000000280)={0xe9d1, 0xb, 0x1, 0x6}) mq_timedsend(r3, &(0x7f00000002c0)="6b8d04b3a57016500e7e4928523eaeba10f7", 0x12, 0x8, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000080)=@mmap={0x0, 0x2, 0x4, 0x8, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'X\x00\b\x00'}}) syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x2000002, &(0x7f0000000400)={[{@iocharset={'iocharset', 0x3d, 'iso8859-3'}}, {@gid}, {@dmode={'dmode', 0x3d, 0x4}}, {@rootdir={'rootdir', 0x3d, 0x1}}, {@uid}, {@gid_forget}, {@rootdir={'rootdir', 0x3d, 0x8000007}}, {@anchor={'anchor', 0x3d, 0x100}}, {@volume={'volume', 0x3d, 0x3}}]}, 0x1, 0xc42, &(0x7f0000000540)="$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") 0s ago: executing program 3 (id=627): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x3b7f, &(0x7f0000000040)={0x0, 0xb050, 0xc000, 0xffffffff, 0x20002f7}) r2 = socket$inet(0x2, 0x80001, 0x84) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r4 = mq_open(&(0x7f0000000140)='batadv_slave_1\x00\xc5kJ\xc2kx\xd7\xb2a\x8e\x81d\x1dv<\xc8K\x96\xec\x14[\x1c,\xff=\xe6b\xf4>\xb8\x1c\xea\xab\xb5\xa5\xe4\xefV\xbc]5\x81(+F\xed\xdbP+\xbf\xf4\x8a\xf0\xa6\xfe\xc5[u\xfb\x1a\xe8\xe9L\b\xded\x16Ai]5\x82JD\xbbe?+\b\x0e\xd3\xb2\x81\xc9\xe2(\fl6\xbc6\x9e\x9c\xb8q3A\xf0\xf8\xf0\x9c^$\xb6', 0x8c2, 0x30, &(0x7f0000000080)={0x8, 0x8, 0x1, 0xc05}) mq_getsetattr(r4, &(0x7f0000000040)={0x0, 0x40, 0x4, 0x7ff}, 0x0) mq_timedreceive(r4, &(0x7f0000000500)=""/4096, 0x1000, 0x6, &(0x7f0000000240)={0x77359400}) madvise(&(0x7f000049f000/0x2000)=nil, 0x2000, 0xf) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x4e20, @local}, 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x4004850) sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) socket$qrtr(0x2a, 0x2, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002140)='./file0\x00', 0x1c0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000340)={0x200000, 0x200000, 0x0, 0x0, 0x5989}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@xino_auto}]}) kernel console output (not intermixed with test programs): 162084][ T7061] ? trace_irq_disable+0x3b/0x140 [ 455.162132][ T7061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.162157][ T7061] RIP: 0033:0x7f6fc1b9ce59 [ 455.162179][ T7061] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 455.162205][ T7061] RSP: 002b:00007f6fc29a0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 455.162232][ T7061] RAX: ffffffffffffffda RBX: 00007f6fc1e15fa0 RCX: 00007f6fc1b9ce59 [ 455.162250][ T7061] RDX: 0000000000000820 RSI: 0000200000000240 RDI: 0000000000000003 [ 455.162266][ T7061] RBP: 00007f6fc29a0090 R08: 0000000000000000 R09: 0000000000000000 [ 455.162283][ T7061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 455.162298][ T7061] R13: 00007f6fc1e16038 R14: 00007f6fc1e15fa0 R15: 00007ffd4d819748 [ 455.162338][ T7061] [ 455.637659][ T7069] tipc: Started in network mode [ 455.642644][ T7069] tipc: Node identity 02205d38212b, cluster identity 4711 [ 455.649948][ T7069] tipc: Enabled bearer , priority 0 [ 455.659889][ T7069] syzkaller0: entered promiscuous mode [ 455.665435][ T7069] syzkaller0: entered allmulticast mode [ 455.675114][ T7069] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 456.385360][ T7072] devpts: Invalid uid '0x00000000ffffffff' [ 456.392794][ T7071] loop6: detected capacity change from 0 to 128 [ 456.426874][ T7071] /dev/loop6: Can't open blockdev [ 456.680828][ T5948] tipc: Node number set to 587947320 [ 456.731629][ T7069] tipc: Resetting bearer [ 456.852011][ T7080] warning: `syz.4.248' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 457.212575][ T7080] loop4: detected capacity change from 0 to 4096 [ 457.226775][ T7080] ntfs3: Unknown parameter 'showíefd' [ 457.601295][ T7068] tipc: Resetting bearer [ 457.792026][ T7068] tipc: Disabling bearer [ 457.825768][ T7091] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20000 [ 458.169749][ T7092] loop3: detected capacity change from 0 to 40427 [ 458.210207][ T7092] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 458.217995][ T7092] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 458.230697][ T7092] F2FS-fs (loop3): invalid crc value [ 458.310187][ T7092] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 458.327502][ T7092] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 458.335174][ T7092] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 458.350038][ T7095] loop5: detected capacity change from 0 to 512 [ 458.360448][ T7095] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 458.394423][ T7095] EXT4-fs (loop5): orphan cleanup on readonly fs [ 458.400944][ T7095] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 458.408985][ T7095] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 458.424163][ T7095] EXT4-fs (loop5): 1 truncate cleaned up [ 458.431951][ T7095] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 458.623224][ T5674] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 458.705667][ T30] audit: type=1800 audit(1780426166.365:14): pid=7106 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.252" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 459.174347][ T7112] netlink: 'syz.0.236': attribute type 5 has an invalid length. [ 459.182221][ T7112] netlink: 12 bytes leftover after parsing attributes in process `syz.0.236'. [ 459.263459][ T7105] xt_hashlimit: size too large, truncated to 1048576 [ 459.315306][ T7105] xt_hashlimit: invalid interval [ 459.352447][ T7117] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.258'. [ 459.547043][ T7120] loop1: detected capacity change from 0 to 1024 [ 459.671162][ T7120] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 460.610581][ T7126] FAULT_INJECTION: forcing a failure. [ 460.610581][ T7126] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 460.627213][ T7126] CPU: 0 UID: 0 PID: 7126 Comm: syz.0.261 Tainted: G L syzkaller #0 PREEMPT(full) [ 460.627251][ T7126] Tainted: [L]=SOFTLOCKUP [ 460.627258][ T7126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 460.627269][ T7126] Call Trace: [ 460.627276][ T7126] [ 460.627284][ T7126] dump_stack_lvl+0xe8/0x150 [ 460.627310][ T7126] should_fail_ex+0x412/0x560 [ 460.627335][ T7126] _copy_to_user+0x31/0xb0 [ 460.627361][ T7126] simple_read_from_buffer+0xe1/0x170 [ 460.627391][ T7126] proc_fail_nth_read+0x1bb/0x230 [ 460.627414][ T7126] ? srso_alias_return_thunk+0x5/0xfbef5 [ 460.627440][ T7126] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 460.627467][ T7126] ? srso_alias_return_thunk+0x5/0xfbef5 [ 460.627489][ T7126] ? rw_verify_area+0x2a6/0x4d0 [ 460.627517][ T7126] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 460.627543][ T7126] vfs_read+0x20c/0xa70 [ 460.627575][ T7126] ? __pfx___mutex_lock+0x10/0x10 [ 460.627596][ T7126] ? __pfx_vfs_read+0x10/0x10 [ 460.627625][ T7126] ? __fget_files+0x2a/0x420 [ 460.627652][ T7126] ? srso_alias_return_thunk+0x5/0xfbef5 [ 460.627674][ T7126] ? __fget_files+0x3a0/0x420 [ 460.627701][ T7126] ? __fget_files+0x2a/0x420 [ 460.627728][ T7126] ? srso_alias_return_thunk+0x5/0xfbef5 [ 460.627754][ T7126] ksys_read+0x150/0x270 [ 460.627784][ T7126] ? __pfx_ksys_read+0x10/0x10 [ 460.627819][ T7126] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.627840][ T7126] do_syscall_64+0x174/0x580 [ 460.627865][ T7126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.627884][ T7126] RIP: 0033:0x7f3f7e55d68e [ 460.627902][ T7126] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 460.627917][ T7126] RSP: 002b:00007f3f7f4bbfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 460.627936][ T7126] RAX: ffffffffffffffda RBX: 00007f3f7f4bc6c0 RCX: 00007f3f7e55d68e [ 460.627950][ T7126] RDX: 000000000000000f RSI: 00007f3f7f4bc0a0 RDI: 0000000000000006 [ 460.627961][ T7126] RBP: 00007f3f7f4bc090 R08: 0000000000000000 R09: 0000000000000000 [ 460.627972][ T7126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 460.627983][ T7126] R13: 00007f3f7e816128 R14: 00007f3f7e816090 R15: 00007fffba529808 [ 460.628012][ T7126] [ 461.965920][ T7120] EXT4-fs (loop1): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 462.129108][ T7120] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #3: block 2: comm syz.1.259: lblock 2 mapped to illegal pblock 2 (length 1) [ 462.181168][ T7120] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 462.186561][ T7120] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 462.195670][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 462.195691][ C0] EXT4-fs (loop1): initial error at time 1780426169: ext4_map_blocks:791: inode 3: block 2 [ 462.195744][ C0] EXT4-fs (loop1): last error at time 1780426169: ext4_map_blocks:791: inode 3: block 2 [ 462.267737][ T7131] loop4: detected capacity change from 0 to 128 [ 462.310776][ T7131] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 462.391303][ T7120] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #3: block 48: comm syz.1.259: lblock 0 mapped to illegal pblock 48 (length 1) [ 462.407257][ T7131] ext4 filesystem being mounted at /44/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 462.465671][ T7133] loop5: detected capacity change from 0 to 2048 [ 462.471298][ T7120] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 462.472945][ T7120] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 462.513481][ T7120] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.259: Failed to acquire dquot type 0 [ 462.538396][ T7120] loop1: lost filesystem error report for type 5 error -117 [ 462.539013][ T7120] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 462.573499][ T7133] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 462.599362][ T7120] loop1: lost filesystem error report for type 5 error -117 [ 462.600173][ T7120] EXT4-fs error (device loop1): ext4_evict_inode:267: inode #11: comm syz.1.259: mark_inode_dirty error [ 462.670745][ T7120] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 462.681275][ T7120] EXT4-fs warning (device loop1): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 462.718520][ T7120] EXT4-fs (loop1): 1 orphan inode deleted [ 462.745740][ T5858] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 462.828123][ T7135] UDF-fs: error (device loop5): udf_read_inode: (ino 1345) failed !bh [ 462.851577][ T7120] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 462.865201][ T7135] UDF-fs: error (device loop5): udf_read_inode: (ino 1345) failed !bh [ 462.876008][ T7135] overlayfs: failed to resolve './file0': -5 [ 463.380690][ T5858] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 463.391129][ T5858] EXT4-fs error (device loop1): ext4_release_dquot:7070: comm kworker/u8:9: Failed to release dquot type 0 [ 463.577731][ T5668] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 463.645301][ T5677] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.703354][ T5677] EXT4-fs error (device loop1): __ext4_get_inode_loc:4885: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 463.754667][ T7140] loop3: detected capacity change from 0 to 2048 [ 463.760241][ T5677] loop1: lost filesystem error report for type 5 error -117 [ 463.766035][ T5677] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 463.838674][ T5677] loop1: lost filesystem error report for type 5 error -117 [ 463.848742][ T5677] EXT4-fs error (device loop1): ext4_quota_off:7318: inode #3: comm syz-executor: mark_inode_dirty error [ 463.969662][ T5834] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 463.995893][ T5677] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 464.093663][ T7144] loop5: detected capacity change from 0 to 512 [ 464.094139][ T7140] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 464.125580][ T7144] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 464.155213][ T7144] EXT4-fs (loop5): orphan cleanup on readonly fs [ 464.161657][ T7144] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 464.171137][ T7144] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 464.197980][ T7144] EXT4-fs (loop5): 1 truncate cleaned up [ 464.206866][ T7144] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 464.213576][ T5834] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 464.234403][ T5834] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 464.365096][ T5834] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 464.378317][ T5834] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 464.387620][ T5834] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.448593][ T5834] usb 7-1: config 0 descriptor?? [ 464.488249][ T7152] loop1: detected capacity change from 0 to 512 [ 464.560985][ T5674] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 466.160165][ T7155] loop4: detected capacity change from 0 to 40427 [ 466.216814][ T7155] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 466.224684][ T7155] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 466.237127][ T7155] F2FS-fs (loop4): invalid crc value [ 466.337990][ T7155] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 466.374144][ T5834] plantronics 0003:047F:FFFF.0002: reserved main item tag 0xd [ 466.381859][ T5834] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 466.389240][ T5834] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 466.397082][ T7152] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #12: comm syz.1.268: missing EA_INODE flag [ 466.408794][ T7155] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 466.408864][ T7152] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 466.415913][ T7155] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 466.419559][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 466.438929][ C1] EXT4-fs (loop1): initial error at time 1780426174: ext4_xattr_inode_iget:441: inode 12 [ 466.448826][ C1] EXT4-fs (loop1): last error at time 1780426174: ext4_xattr_inode_iget:441: inode 12 [ 466.461364][ T5834] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 466.469501][ T7163] loop0: detected capacity change from 0 to 16 [ 466.540883][ T7163] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 466.555962][ T7152] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.268: error while reading EA inode 12 err=-117 [ 466.600568][ T146] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 466.674149][ T5834] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 466.682261][ T5834] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 466.710554][ T7152] loop1: lost filesystem error report for type 5 error -117 [ 466.715217][ T7152] EXT4-fs (loop1): 1 orphan inode deleted [ 466.732907][ T5834] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 467.169941][ T30] audit: type=1800 audit(1780426174.585:15): pid=7167 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.269" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 467.225568][ T5834] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 467.257257][ T7152] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 467.430593][ T146] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 467.507961][ T146] EXT4-fs (loop3): This should not happen!! Data will be lost [ 467.507961][ T146] [ 467.542230][ T146] EXT4-fs (loop3): Total free blocks count 0 [ 467.565185][ T146] EXT4-fs (loop3): Free/Dirty block details [ 467.591743][ T5834] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 467.599717][ T146] EXT4-fs (loop3): free_blocks=2415919504 [ 467.649009][ T146] EXT4-fs (loop3): dirty_blocks=3856 [ 467.686701][ T146] EXT4-fs (loop3): Block reservation details [ 467.708979][ T7175] loop5: detected capacity change from 0 to 512 [ 467.727657][ T5677] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.747120][ T146] EXT4-fs (loop3): i_reserved_data_blocks=241 [ 467.791751][ T5696] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 65793 with max blocks 2048 with error 28 [ 467.832339][ T7175] EXT4-fs (loop5): Test dummy encryption mode enabled [ 467.912443][ T7175] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 468.035002][ T7181] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.273'. [ 468.055008][ T7175] EXT4-fs (loop5): 1 truncate cleaned up [ 468.095137][ T7175] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 468.114284][ T7177] loop0: detected capacity change from 0 to 2048 [ 468.221112][ T7177] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 468.299779][ T5671] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 468.344254][ T7179] loop1: detected capacity change from 0 to 4096 [ 468.861423][ T7172] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 468.874940][ T7172] fscrypt: AES-256-XTS using implementation "xts-aes-vaes-avx2" [ 468.885164][ T7172] 9p: Bad value for 'rfdno' [ 469.109388][ T7185] UDF-fs: error (device loop0): udf_read_inode: (ino 1345) failed !bh [ 469.414528][ T7177] udf: Unknown parameter 'msdos' [ 470.400592][ T5671] EXT4-fs: 7 callbacks suppressed [ 470.400611][ T5671] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.500082][ T5797] usb 7-1: USB disconnect, device number 3 [ 470.883364][ T7197] loop4: detected capacity change from 0 to 128 [ 470.980658][ T7197] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 471.062337][ T5674] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 471.083674][ T7202] trusted_key: encrypted_key: master key parameter 'ÑâÑ.Ý%Ó`b©#Uw}gkXÌ)JK¶Æ§1=o¬‘P΂–‚'~8í‘_LŠáܨ7¹ÈIgñŽ¬¤ä§#‘>ƒ(£¥ˆÓY—ãwA­Ø©a³Qo zl\x‰ßv©Jsé±¥{¡DZW·Ó9+s›SðäøÀ\`|<uƒnÒêÓüBÚëm I½ÀY' is invalid [ 471.122657][ T7197] ext4 filesystem being mounted at /49/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 471.231727][ T30] audit: type=1400 audit(1780426178.915:16): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3A2020203332206B420A5368617265645F436C65616E3A2020202020202020202030206B420A5368617265645F44697274793A2020202020202020203634206B420A507269766174655F436C65616E3A20202020202020202030206B420A507269766174655F44697274793A20202020202020202030206B420A5265666572656E6365643A20202020202020202020203634206B420A416E6F6E796D6F75733A2020202020202020202020202030206B420A4B534D3A2020202020202020202020202020202020202030206B420A4C617A79467265653A pid=7201 comm="syz.0.280" [ 471.522119][ T7208] loop5: detected capacity change from 0 to 512 [ 471.535422][ T7208] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 471.556468][ T7208] EXT4-fs (loop5): orphan cleanup on readonly fs [ 471.565845][ T7208] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 471.573872][ T7208] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 471.592041][ T7202] loop0: detected capacity change from 0 to 512 [ 471.636083][ T7208] EXT4-fs (loop5): 1 truncate cleaned up [ 471.673976][ T7208] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 471.732306][ T7213] netlink: 'syz.6.281': attribute type 10 has an invalid length. [ 471.742414][ T7213] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.749863][ T7213] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.164761][ T5674] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 472.295380][ T5668] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 472.306024][ T7202] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 472.330003][ T7217] netlink: 8 bytes leftover after parsing attributes in process `syz.1.283'. [ 472.608250][ T7220] loop5: detected capacity change from 0 to 40427 [ 472.631923][ T7220] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 472.639766][ T7220] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 472.649259][ T7220] F2FS-fs (loop5): invalid crc value [ 472.716907][ T7202] ext4 filesystem being mounted at /66/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 472.717241][ T7220] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 472.753606][ T7220] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 472.761159][ T7220] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 472.958346][ T30] audit: type=1800 audit(1780426180.635:17): pid=7220 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.285" name="file1" dev="loop5" ino=10 res=0 errno=0 [ 473.087764][ T7230] loop4: detected capacity change from 0 to 512 [ 473.118414][ T7202] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #2: comm syz.0.280: corrupted inode contents [ 473.148770][ T7230] EXT4-fs: Ignoring removed nomblk_io_submit option [ 473.222578][ T7230] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #15: comm syz.4.286: corrupted in-inode xattr: invalid ea_ino [ 473.269330][ T7230] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 473.269571][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 473.285196][ C1] EXT4-fs (loop4): initial error at time 1780426180: ext4_iget_extra_inode:5128: inode 15 [ 473.295158][ C1] EXT4-fs (loop4): last error at time 1780426180: ext4_iget_extra_inode:5128: inode 15 [ 473.330834][ T7202] EXT4-fs error (device loop0): ext4_dirty_inode:6587: inode #2: comm syz.0.280: mark_inode_dirty error [ 473.345014][ T7234] netlink: 212348 bytes leftover after parsing attributes in process `syz.6.288'. [ 473.371002][ T7230] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.286: couldn't read orphan inode 15 (err -117) [ 473.424821][ T7230] loop4: lost filesystem error report for type 5 error -117 [ 473.436068][ T7230] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 473.531376][ T7202] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #2: comm syz.0.280: corrupted inode contents [ 473.595890][ T7202] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #2: comm syz.0.280: mark_inode_dirty error [ 473.627386][ T7230] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #13: comm syz.4.286: corrupted inode contents [ 473.648517][ T7231] EXT4-fs warning (device loop0): ext4_es_cache_extent:1082: inode #2: comm syz.0.280: ES cache extent failed: add [0,1,20,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 473.648517][ T7231] [ 473.672072][ T7236] loop1: detected capacity change from 0 to 2048 [ 473.729186][ T7236] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 473.759062][ T7231] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #2: comm syz.0.280: corrupted inode contents [ 473.788327][ T7230] EXT4-fs error (device loop4): ext4_dirty_inode:6587: inode #13: comm syz.4.286: mark_inode_dirty error [ 473.820775][ T7231] EXT4-fs error (device loop0): ext4_append:88: inode #2: comm syz.0.280: mark_inode_dirty error [ 473.836965][ T7242] loop6: detected capacity change from 0 to 1024 [ 473.867288][ T7239] EXT4-fs error (device loop4): ext4_lookup:1785: inode #14: comm syz.4.286: invalid fast symlink length 39 [ 474.097365][ T7231] EXT4-fs error (device loop0) in ext4_append:100: Corrupt filesystem [ 474.109450][ T7244] UDF-fs: error (device loop1): udf_read_inode: (ino 1345) failed !bh [ 474.199870][ T7245] overlay: ./file1 is not a directory [ 474.986475][ T7249] UDF-fs: error (device loop1): udf_read_inode: (ino 1345) failed !bh [ 474.996682][ T7249] overlayfs: failed to resolve './file0': -5 [ 475.055243][ T7230] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.286: invalid indirect mapped block 234881024 (level 0) [ 475.584664][ T7250] EXT4-fs error (device loop4): __ext4_new_inode:1079: comm syz.4.286: reserved inode found cleared - inode=1 [ 475.610596][ T7230] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #13: comm syz.4.286: corrupted inode contents [ 475.664970][ T7230] EXT4-fs error (device loop4): ext4_truncate:4690: inode #13: comm syz.4.286: mark_inode_dirty error [ 475.681573][ T7230] EXT4-fs error (device loop4) in ext4_setattr:6120: Corrupt filesystem [ 475.704118][ T5669] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 475.919082][ T5668] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 476.039687][ T5811] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 476.131903][ T7260] loop1: detected capacity change from 0 to 4096 [ 476.179719][ T10] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 476.242577][ T5811] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 476.329334][ T5811] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 476.416841][ T5811] usb 7-1: config 0 has no interface number 0 [ 476.556110][ T5811] usb 7-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 476.659600][ T10] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 476.749912][ T5811] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 476.795562][ T10] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 476.825482][ T5811] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 476.872608][ T10] usb 1-1: config 220 has no interface number 2 [ 476.877498][ T5811] usb 7-1: Product: syz [ 476.890182][ T10] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 476.906469][ T5811] usb 7-1: SerialNumber: syz [ 476.951508][ T5811] usb 7-1: config 0 descriptor?? [ 476.952243][ T10] usb 1-1: config 220 interface 0 has no altsetting 0 [ 477.011951][ T5811] usbhid 7-1:0.8: couldn't find an input interrupt endpoint [ 477.026068][ T10] usb 1-1: config 220 interface 76 has no altsetting 0 [ 477.063737][ T10] usb 1-1: config 220 interface 1 has no altsetting 0 [ 477.110712][ T10] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 477.150062][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.166570][ T5673] Bluetooth: hci5: command 0x0406 tx timeout [ 477.172900][ T5690] Bluetooth: hci0: command 0x0406 tx timeout [ 477.180090][ T5690] Bluetooth: hci2: command 0x0406 tx timeout [ 477.183138][ T5688] Bluetooth: hci3: command 0x0406 tx timeout [ 477.190927][ T4944] Bluetooth: hci4: command 0x0406 tx timeout [ 477.208667][ T10] usb 1-1: Product: syz [ 477.215769][ T10] usb 1-1: Manufacturer: syz [ 477.220565][ T10] usb 1-1: SerialNumber: syz [ 477.987342][ T804] usb 7-1: USB disconnect, device number 4 [ 478.021341][ T7258] netlink: 16 bytes leftover after parsing attributes in process `syz.0.295'. [ 478.143001][ T7276] loop0: detected capacity change from 0 to 512 [ 478.158914][ T7278] loop6: detected capacity change from 0 to 128 [ 478.167499][ T7278] FAT-fs (loop6): bogus number of reserved sectors [ 478.175328][ T7278] FAT-fs (loop6): Can't find a valid FAT filesystem [ 478.618753][ T7276] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.295: iget: bad i_size value: 38620345925642 [ 478.674959][ T7276] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 478.678752][ T7276] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.295: couldn't read orphan inode 15 (err -117) [ 478.688017][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 478.688041][ C1] EXT4-fs (loop0): initial error at time 1780426186: ext4_orphan_get:1397: inode 15 [ 478.688081][ C1] EXT4-fs (loop0): last error at time 1780426186: ext4_orphan_get:1397: inode 15 [ 478.876615][ T7276] loop0: lost filesystem error report for type 5 error -117 [ 479.298030][ T7276] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 479.709680][ T5797] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 479.777645][ T10] usb 1-1: selecting invalid altsetting 0 [ 481.839924][ T10] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 481.864581][ T10] uvcvideo 1-1:220.0: No valid video chain found. [ 481.890154][ T5797] usb 7-1: config 0 has an invalid interface number: 41 but max is 0 [ 481.899216][ T7296] loop1: detected capacity change from 0 to 4096 [ 481.916935][ T7294] loop5: detected capacity change from 0 to 1024 [ 482.092360][ T5797] usb 7-1: config 0 has no interface number 0 [ 482.111926][ T5669] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 482.128156][ T10] usb 1-1: selecting invalid altsetting 0 [ 482.141233][ T5797] usb 7-1: config 0 interface 41 has no altsetting 0 [ 482.172038][ T5797] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 482.181204][ T10] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 482.351897][ T10] usb 1-1: USB disconnect, device number 6 [ 482.485552][ T7299] overlay: ./file1 is not a directory [ 482.886212][ T5797] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.898203][ T5797] usb 7-1: Product: syz [ 482.905091][ T5797] usb 7-1: Manufacturer: syz [ 482.909738][ T5797] usb 7-1: SerialNumber: syz [ 483.055335][ T5797] usb 7-1: config 0 descriptor?? [ 483.105357][ T5797] usb 7-1: can't set config #0, error -71 [ 483.161844][ T5797] usb 7-1: USB disconnect, device number 5 [ 483.349060][ T7304] loop0: detected capacity change from 0 to 2048 [ 484.406103][ T7321] loop4: detected capacity change from 0 to 128 [ 484.438718][ T7316] loop0: detected capacity change from 0 to 4096 [ 484.454987][ T7321] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 484.548929][ T7324] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 484.590211][ T7316] NILFS error (device loop0): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 484.677380][ T7316] NILFS (loop0): mounting fs with errors [ 484.749632][ T5835] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 484.925223][ T5835] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 485.272041][ T5835] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 64 [ 485.515696][ T5835] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 64 [ 485.563149][ T7325] comedi comedi3: 8255: I/O base address not correctly aligned [ 485.697905][ T5835] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 485.749705][ T5835] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 485.783317][ T5835] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.977734][ T7332] netlink: 'syz.3.317': attribute type 10 has an invalid length. [ 485.986514][ T7332] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.993825][ T7332] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.201863][ T5835] usb 5-1: GET_CAPABILITIES returned 0 [ 487.209642][ T5835] usbtmc 5-1:16.0: can't read capabilities [ 487.409729][ C1] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 487.424152][ T7321] usbtmc 5-1:16.0: Unable to send data, error -71 [ 487.432121][ T7340] loop3: detected capacity change from 0 to 256 [ 487.454200][ T5835] usb 5-1: USB disconnect, device number 14 [ 487.546620][ T7345] process 'syz.0.319' launched './file2' with NULL argv: empty string added [ 487.561213][ T7344] loop5: detected capacity change from 0 to 1024 [ 487.912220][ T7351] overlay: ./file1 is not a directory [ 488.870846][ T7356] loop1: detected capacity change from 0 to 2048 [ 490.320123][ T7360] program syz.5.324 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 490.329462][ T7360] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 490.689659][ T7356] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 491.073114][ T7369] UDF-fs: error (device loop1): udf_read_inode: (ino 1345) failed !bh [ 491.092533][ T7370] UDF-fs: error (device loop1): udf_read_inode: (ino 1345) failed !bh [ 491.104427][ T7370] overlayfs: failed to resolve './file0': -5 [ 492.695482][ T7389] xt_hashlimit: overflow, try lower: 3/0 [ 492.778554][ T7389] netlink: 24 bytes leftover after parsing attributes in process `syz.1.330'. [ 493.403487][ T7391] loop3: detected capacity change from 0 to 2048 [ 493.446203][ T7391] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 493.611769][ T7397] netlink: 'syz.6.335': attribute type 10 has an invalid length. [ 494.010734][ T7393] loop4: detected capacity change from 0 to 1024 [ 494.237152][ T7391] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 494.324831][ T7393] EXT4-fs: Ignoring removed mblk_io_submit option [ 494.344672][ T7391] UDF-fs: Scanning with blocksize 512 failed [ 494.390864][ T7393] EXT4-fs (loop4): bad geometry: bigalloc file system with non-zero first_data_block [ 494.390864][ T7393] [ 494.422585][ T7391] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 495.896112][ T7403] loop6: detected capacity change from 0 to 1024 [ 496.077911][ T7406] loop3: detected capacity change from 0 to 512 [ 496.175741][ T7406] EXT4-fs: Ignoring removed nobh option [ 496.276084][ T7408] overlay: ./file1 is not a directory [ 496.959125][ T7406] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 497.048083][ T7406] ext4 filesystem being mounted at /47/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 497.454150][ T10] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 497.454632][ T5671] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 497.748126][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 498.177506][ T7415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 498.194218][ T7423] loop3: detected capacity change from 0 to 2048 [ 498.211558][ T7415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 498.226045][ T7426] loop0: detected capacity change from 0 to 17 [ 498.230895][ T7423] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 498.566163][ T7404] loop4: detected capacity change from 0 to 32768 [ 498.775034][ T7428] UDF-fs: error (device loop3): udf_read_inode: (ino 1345) failed !bh [ 498.804568][ T7430] UDF-fs: error (device loop3): udf_read_inode: (ino 1345) failed !bh [ 498.815446][ T7430] overlayfs: failed to resolve './file0': -5 [ 499.078108][ T7427] loop1: detected capacity change from 0 to 2048 [ 499.097431][ T7404] Only 4K block size supported! [ 499.152712][ T7404] Mount JFS Failure: -22 [ 499.189938][ T7404] jfs_mount failed w/return code = -22 [ 499.221677][ T7427] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=2242, location=2242 [ 499.256299][ T7415] loop6: detected capacity change from 0 to 4096 [ 499.279732][ T7427] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 499.346315][ T7427] UDF-fs: Scanning with blocksize 512 failed [ 499.403001][ T7427] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=1986, location=1986 [ 499.427220][ T7438] nftables ruleset with unbound set [ 499.486374][ T7427] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=2242, location=2242 [ 499.535242][ T7415] ntfs3(loop6): Failed to initialize $Extend/$Reparse. [ 499.562126][ T7427] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 499.616854][ T7427] UDF-fs: Scanning with blocksize 1024 failed [ 499.637810][ T7415] netlink: 'syz.6.340': attribute type 1 has an invalid length. [ 499.670459][ T7427] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=1986, location=1986 [ 499.683949][ T7442] netlink: 40 bytes leftover after parsing attributes in process `syz.6.340'. [ 499.721294][ T7427] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=2242, location=2242 [ 499.778522][ T7427] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 499.820287][ T7427] UDF-fs: Scanning with blocksize 2048 failed [ 499.852981][ T7427] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=1986, location=1986 [ 499.898388][ T7427] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=2242, location=2242 [ 499.909861][ T804] usb 6-1: new low-speed USB device number 9 using dummy_hcd [ 499.964252][ T7427] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 499.996927][ T10] usb 7-1: unable to get BOS descriptor or descriptor too short [ 500.011807][ T7427] UDF-fs: Scanning with blocksize 4096 failed [ 500.023561][ T10] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 500.034380][ T7427] UDF-fs: warning (device loop1): udf_fill_super: No partition found (1) [ 500.056025][ T10] usb 7-1: can't read configurations, error -71 [ 500.221187][ T7448] loop3: detected capacity change from 0 to 32768 [ 500.289866][ T804] usb 6-1: device descriptor read/64, error -71 [ 500.457158][ T7448] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 500.509293][ T7448] JBD2: Ignoring recovery information on journal [ 500.703134][ T804] usb 6-1: new low-speed USB device number 10 using dummy_hcd [ 500.793877][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.805074][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 500.846923][ T7448] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 500.971212][ T30] audit: type=1800 audit(1780426208.665:18): pid=7448 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.349" name="file1" dev="loop3" ino=17058 res=0 errno=0 [ 501.003187][ T7454] loop4: detected capacity change from 0 to 164 [ 501.012697][ T7454] iso9660: Unknown parameter 'ch4þÜCÁØeck' [ 501.140313][ T804] usb 6-1: device descriptor read/64, error -71 [ 501.250110][ T804] usb usb6-port1: attempt power cycle [ 502.016532][ T7463] binder: 7461:7463 ioctl c0306201 2000000002c0 returned -14 [ 502.110413][ T804] usb 6-1: new low-speed USB device number 11 using dummy_hcd [ 502.149213][ T7466] loop1: detected capacity change from 0 to 1024 [ 502.162769][ T804] usb 6-1: device descriptor read/8, error -71 [ 503.469368][ T7473] overlay: ./file1 is not a directory [ 504.121487][ T7470] program syz.4.355 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 504.138696][ T7470] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 505.032179][ T804] usb 6-1: new low-speed USB device number 12 using dummy_hcd [ 505.264012][ T5671] ocfs2: Unmounting device (7,3) on (node local) [ 505.379847][ T804] usb 6-1: device descriptor read/8, error -71 [ 505.499944][ T804] usb usb6-port1: unable to enumerate USB device [ 505.562873][ T7480] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 5 out of range (51000000..2150000000) [ 505.596222][ T7480] loop1: detected capacity change from 0 to 128 [ 505.604955][ T7480] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 505.616737][ T7480] hpfs: filesystem error: improperly stopped [ 505.624142][ T7480] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 505.631945][ T7480] hpfs: You really don't want any checks? You are crazy... [ 505.639150][ T7480] hpfs: Code page index out of array [ 505.644508][ T7480] hpfs: code page support is disabled [ 505.655409][ T7480] hpfs: hpfs_map_4sectors(): unaligned read [ 505.662902][ T7480] hpfs: hpfs_map_4sectors(): unaligned read [ 505.668801][ T7480] hpfs: filesystem error: unable to find root dir [ 506.252796][ T7491] wg1 speed is unknown, defaulting to 1000 [ 506.263068][ T7491] wg1 speed is unknown, defaulting to 1000 [ 506.367970][ T7498] unsupported nlmsg_type 40 [ 506.491607][ T7496] fuse: Bad value for 'fd' [ 506.713503][ T7491] wg1 speed is unknown, defaulting to 1000 [ 506.937522][ T7491] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 507.004839][ T7491] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 507.033884][ T7506] loop0: detected capacity change from 0 to 512 [ 507.077972][ T7491] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 507.257141][ T7506] EXT4-fs (loop0): Test dummy encryption mode enabled [ 507.937738][ T7506] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e064e0ad, mo2=0002] [ 508.015847][ T7506] System zones: 1-12 [ 508.022095][ T7491] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 508.107804][ T7491] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 508.191205][ T7506] EXT4-fs (loop0): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 508.479267][ T5669] EXT4-fs (loop0): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 508.522792][ T7491] wg1 speed is unknown, defaulting to 1000 [ 508.604776][ T7491] wg1 speed is unknown, defaulting to 1000 [ 508.642640][ T7491] wg1 speed is unknown, defaulting to 1000 [ 508.709840][ T7522] loop0: detected capacity change from 0 to 1024 [ 508.710064][ T7491] wg1 speed is unknown, defaulting to 1000 [ 508.750286][ T7491] wg1 speed is unknown, defaulting to 1000 [ 508.790348][ T7491] wg1 speed is unknown, defaulting to 1000 [ 508.963021][ T10] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 509.105785][ T7525] overlay: ./file1 is not a directory [ 509.225174][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 509.588055][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 509.663949][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 509.737739][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 509.837393][ T10] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 509.874967][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.883950][ T7533] program syz.5.371 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 509.896692][ T7530] loop4: detected capacity change from 0 to 2048 [ 509.949386][ T7530] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 509.950962][ T10] usb 4-1: config 0 descriptor?? [ 510.054000][ T7535] usb usb8: usbfs: process 7535 (syz.1.370) did not claim interface 0 before use [ 510.144387][ T7540] UDF-fs: error (device loop4): udf_read_inode: (ino 1345) failed !bh [ 510.181959][ T7540] UDF-fs: error (device loop4): udf_read_inode: (ino 1345) failed !bh [ 510.191635][ T7540] overlayfs: failed to resolve './file0': -5 [ 510.871468][ T7547] FAULT_INJECTION: forcing a failure. [ 510.871468][ T7547] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 510.891245][ T7547] CPU: 1 UID: 0 PID: 7547 Comm: syz.5.373 Tainted: G L syzkaller #0 PREEMPT(full) [ 510.891303][ T7547] Tainted: [L]=SOFTLOCKUP [ 510.891313][ T7547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 510.891328][ T7547] Call Trace: [ 510.891337][ T7547] [ 510.891347][ T7547] dump_stack_lvl+0xe8/0x150 [ 510.891381][ T7547] should_fail_ex+0x412/0x560 [ 510.891414][ T7547] copy_fpstate_to_sigframe+0xb1b/0xd60 [ 510.891461][ T7547] ? copy_fpstate_to_sigframe+0x196/0xd60 [ 510.891509][ T7547] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 510.891558][ T7547] ? srso_alias_return_thunk+0x5/0xfbef5 [ 510.891588][ T7547] ? ktime_get+0x1f5/0x220 [ 510.891629][ T7547] ? srso_alias_return_thunk+0x5/0xfbef5 [ 510.891658][ T7547] ? srso_alias_return_thunk+0x5/0xfbef5 [ 510.891688][ T7547] ? clockevents_program_event+0x491/0x630 [ 510.891718][ T7547] ? srso_alias_return_thunk+0x5/0xfbef5 [ 510.891747][ T7547] ? do_raw_spin_unlock+0xf5/0x210 [ 510.891787][ T7547] ? __pfx_clockevents_program_event+0x10/0x10 [ 510.891817][ T7547] ? srso_alias_return_thunk+0x5/0xfbef5 [ 510.891849][ T7547] ? srso_alias_return_thunk+0x5/0xfbef5 [ 510.891878][ T7547] ? fpu__alloc_mathframe+0xac/0x130 [ 510.891922][ T7547] get_sigframe+0x5f7/0x820 [ 510.891970][ T7547] ? __pfx_get_sigframe+0x10/0x10 [ 510.892014][ T7547] ? posixtimer_deliver_signal+0x2ec/0x3f0 [ 510.892051][ T7547] x64_setup_rt_frame+0x160/0xcb0 [ 510.892096][ T7547] ? _raw_spin_unlock_irq+0x23/0x50 [ 510.892135][ T7547] ? srso_alias_return_thunk+0x5/0xfbef5 [ 510.892164][ T7547] ? lockdep_hardirqs_on+0x7a/0x110 [ 510.892189][ T7547] ? srso_alias_return_thunk+0x5/0xfbef5 [ 510.892228][ T7547] ? _raw_spin_unlock_irq+0x2e/0x50 [ 510.892264][ T7547] ? srso_alias_return_thunk+0x5/0xfbef5 [ 510.892293][ T7547] ? get_signal+0x114f/0x1330 [ 510.892326][ T7547] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 510.892377][ T7547] arch_do_signal_or_restart+0x442/0x840 [ 510.892420][ T7547] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 510.892467][ T7547] ? ksys_write+0x242/0x270 [ 510.892516][ T7547] exit_to_user_mode_loop+0xa9/0x680 [ 510.892540][ T7547] ? rcu_is_watching+0x15/0xb0 [ 510.892572][ T7547] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.892599][ T7547] do_syscall_64+0x353/0x580 [ 510.892635][ T7547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.892660][ T7547] RIP: 0033:0x7fabb335d68e [ 510.892683][ T7547] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 510.892704][ T7547] RSP: 002b:00007fabb4316fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 510.892729][ T7547] RAX: 0000000000000001 RBX: 00007fabb43176c0 RCX: 00007fabb335d68e [ 510.892746][ T7547] RDX: 0000000000000001 RSI: 00007fabb4317090 RDI: 0000000000000003 [ 510.892762][ T7547] RBP: 00007fabb4317090 R08: 0000000000000000 R09: 0000000000000000 [ 510.892778][ T7547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 510.892793][ T7547] R13: 00007fabb3616038 R14: 00007fabb3615fa0 R15: 00007ffd5b4ca648 [ 510.892832][ T7547] [ 510.925440][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 511.364398][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 511.365689][ T7556] netlink: 12 bytes leftover after parsing attributes in process `syz.5.375'. [ 511.452071][ T7558] loop5: detected capacity change from 0 to 512 [ 511.487067][ T7558] EXT4-fs: Ignoring removed i_version option [ 511.525855][ T10] usb 4-1: USB disconnect, device number 7 [ 511.541158][ T7558] EXT4-fs: Ignoring removed nobh option [ 511.582449][ T7558] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 511.653302][ T7558] EXT4-fs (loop5): 1 truncate cleaned up [ 511.691805][ T7558] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 511.735652][ T7560] fuse: Bad value for 'fd' [ 511.867589][ T7566] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 512.175161][ T7570] loop4: detected capacity change from 0 to 128 [ 512.529142][ T5674] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 513.448161][ T7576] netlink: 8 bytes leftover after parsing attributes in process `syz.5.380'. [ 513.460834][ T7576] bond0: Unable to set up delay as MII monitoring is disabled [ 513.945120][ T7582] loop3: detected capacity change from 0 to 1024 [ 514.109683][ T5795] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 514.349605][ T5672] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 514.420622][ T5795] usb 6-1: Using ep0 maxpacket: 16 [ 514.549830][ T5795] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 514.658832][ T5795] usb 6-1: config 0 has no interface number 0 [ 514.838887][ T5795] usb 6-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 514.882608][ T5795] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.902711][ T5795] usb 6-1: Product: syz [ 514.906969][ T5795] usb 6-1: Manufacturer: syz [ 514.916892][ T5795] usb 6-1: SerialNumber: syz [ 515.105316][ T5795] usb 6-1: config 0 descriptor?? [ 515.112100][ T7588] syzkaller0: entered promiscuous mode [ 515.143259][ T5672] usb 2-1: Using ep0 maxpacket: 16 [ 515.235822][ T7593] overlay: ./file1 is not a directory [ 515.520060][ T7588] syzkaller0: entered allmulticast mode [ 515.698577][ T5672] usb 2-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 515.708163][ T5672] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.717521][ T5672] usb 2-1: Product: syz [ 515.721818][ T5672] usb 2-1: Manufacturer: syz [ 515.726483][ T5672] usb 2-1: SerialNumber: syz [ 515.738374][ T5672] usb 2-1: config 0 descriptor?? [ 515.749365][ T5672] gspca_main: spca508-2.14.0 probing 041e:4018 [ 515.861153][ T7578] syz_tun: entered allmulticast mode [ 515.911306][ T5795] uvcvideo 6-1:0.105: probe with driver uvcvideo failed with error -22 [ 515.943108][ T5795] usb 6-1: USB disconnect, device number 13 [ 515.953962][ T5672] gspca_spca508: reg_read err -32 [ 515.978131][ T7598] netlink: 'syz.3.386': attribute type 1 has an invalid length. [ 516.025530][ T7580] loop1: detected capacity change from 0 to 256 [ 516.121832][ T804] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 516.150756][ T7580] FAT-fs (loop1): Directory bread(block 64) failed [ 516.166904][ T7580] FAT-fs (loop1): Directory bread(block 65) failed [ 516.199291][ T7580] FAT-fs (loop1): Directory bread(block 66) failed [ 516.230874][ T7580] FAT-fs (loop1): Directory bread(block 67) failed [ 516.232626][ T7601] overlayfs: failed lookup in lower (newroot/84, name='bus', err=-40): overlapping layers [ 516.264464][ T7580] FAT-fs (loop1): Directory bread(block 68) failed [ 516.284872][ T7600] loop0: detected capacity change from 0 to 16 [ 516.291928][ T7580] FAT-fs (loop1): Directory bread(block 69) failed [ 516.303865][ T804] usb 7-1: Using ep0 maxpacket: 16 [ 516.313126][ T7580] FAT-fs (loop1): Directory bread(block 70) failed [ 516.331375][ T804] usb 7-1: config 0 has an invalid interface number: 213 but max is 1 [ 516.349446][ T7600] overlayfs: failed lookup in lower (newroot/84, name='file0', err=-40): overlapping layers [ 516.366934][ T7580] FAT-fs (loop1): Directory bread(block 71) failed [ 516.375656][ T804] usb 7-1: config 0 has no interface number 1 [ 516.392187][ T804] usb 7-1: config 0 interface 0 has no altsetting 0 [ 516.399079][ T7580] FAT-fs (loop1): Directory bread(block 72) failed [ 516.407006][ T7603] loop3: detected capacity change from 0 to 2048 [ 516.411690][ T7600] overlayfs: failed lookup in lower (newroot/84, name='file0', err=-40): overlapping layers [ 516.424435][ T7580] FAT-fs (loop1): Directory bread(block 73) failed [ 516.438993][ T804] usb 7-1: New USB device found, idVendor=413c, idProduct=81d2, bcdDevice=25.e8 [ 516.468120][ T804] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.482089][ T5672] gspca_spca508: reg_read err -110 [ 516.497313][ T7603] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 516.497567][ T5672] gspca_spca508: reg_read err -32 [ 516.510233][ T804] usb 7-1: Product: syz [ 516.537109][ T804] usb 7-1: Manufacturer: syz [ 516.554905][ T7601] overlayfs: failed lookup in lower (newroot/84, name='bus', err=-40): overlapping layers [ 516.570329][ T804] usb 7-1: SerialNumber: syz [ 516.582561][ T5672] gspca_spca508: reg_read err -32 [ 516.610677][ T7605] overlayfs: failed lookup in lower (newroot/84, name='bus', err=-40): overlapping layers [ 516.661648][ T804] usb 7-1: config 0 descriptor?? [ 516.726699][ T7606] UDF-fs: error (device loop3): udf_read_inode: (ino 1345) failed !bh [ 516.769381][ T7606] UDF-fs: error (device loop3): udf_read_inode: (ino 1345) failed !bh [ 516.779046][ T7606] overlayfs: failed to resolve './file0': -5 [ 516.863876][ T7600] evm: overlay not supported [ 517.112674][ T5672] gspca_spca508: reg_read err -110 [ 517.184918][ T5672] gspca_spca508: reg write: error -32 [ 517.239300][ T5672] spca508 2-1:0.0: probe with driver spca508 failed with error -32 [ 517.251373][ T7605] overlayfs: failed lookup in lower (newroot/84, name='bus', err=-40): overlapping layers [ 517.280569][ T804] usb 7-1: can't set config #0, error -71 [ 517.336294][ T5672] usb 2-1: USB disconnect, device number 7 [ 517.446491][ T7613] netlink: 'syz.5.389': attribute type 10 has an invalid length. [ 517.527261][ T804] usb 7-1: USB disconnect, device number 8 [ 517.580070][ T7614] netlink: 'syz.5.389': attribute type 10 has an invalid length. [ 517.686972][ T7613] syz_tun: entered promiscuous mode [ 517.795392][ T7613] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 517.809248][ T7615] loop5: detected capacity change from 0 to 256 [ 517.823041][ T7615] exfat: Deprecated parameter 'utf8' [ 518.252956][ T7615] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x47dfe6af, utbl_chksum : 0xe619d30d) [ 518.682466][ T7608] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 519.940457][ T7614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 519.990824][ T7625] loop6: detected capacity change from 0 to 128 [ 520.004735][ T7614] team0: Port device bond0 added [ 520.066764][ T7625] FAT-fs (loop6): bogus number of reserved sectors [ 520.119798][ T7625] FAT-fs (loop6): Can't find a valid FAT filesystem [ 520.187048][ T7629] loop1: detected capacity change from 0 to 256 [ 520.290793][ T7629] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xdbae3f17, utbl_chksum : 0xe619d30d) [ 520.959843][ T10] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 521.309734][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 521.427901][ T10] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 521.626746][ T10] usb 1-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 521.735310][ T7640] loop6: detected capacity change from 0 to 1024 [ 521.832135][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 521.980230][ T10] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 522.123042][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.439434][ T7644] overlay: ./file1 is not a directory [ 522.966823][ T10] usb 1-1: Product: syz [ 523.058192][ T10] usb 1-1: Manufacturer: syz [ 523.263245][ T10] usb 1-1: SerialNumber: syz [ 523.422042][ T10] usb 1-1: config 0 descriptor?? [ 524.040025][ T10] usb 1-1: can't set config #0, error -71 [ 524.524918][ T7662] loop3: detected capacity change from 0 to 16 [ 524.538135][ T7662] erofs: Unknown parameter '' [ 525.154590][ T10] usb 1-1: USB disconnect, device number 7 [ 525.711067][ T7670] overlay: ./file0 is not a directory [ 526.842242][ T7674] loop3: detected capacity change from 0 to 512 [ 526.849450][ T7674] EXT4-fs: Ignoring removed i_version option [ 526.913810][ T7674] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 526.967376][ T7674] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 527.017147][ T7679] netlink: 8 bytes leftover after parsing attributes in process `syz.1.407'. [ 527.145527][ T7681] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 527.157857][ T7681] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 527.166618][ T7681] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 527.519400][ T7682] wg1 speed is unknown, defaulting to 1000 [ 528.211976][ T7689] xt_cgroup: invalid path, errno=-2 [ 528.483329][ T7689] loop5: detected capacity change from 0 to 4096 [ 528.484384][ T5671] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 528.514617][ T7694] loop4: detected capacity change from 0 to 1024 [ 528.569966][ T7689] NILFS: invalid option "cp=0": invalid checkpoint number 0 [ 528.622590][ T7694] EXT4-fs: Ignoring removed bh option [ 528.735680][ T7694] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 528.825300][ T7698] loop0: detected capacity change from 0 to 1024 [ 529.226876][ T7708] overlay: ./file1 is not a directory [ 531.724799][ T5668] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 531.796635][ T7727] loop0: detected capacity change from 0 to 1024 [ 532.213380][ T7733] loop5: detected capacity change from 0 to 8 [ 532.681909][ T7733] squashfs image failed sanity check [ 532.729789][ T24] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 532.998459][ T7730] netlink: 20 bytes leftover after parsing attributes in process `syz.0.421'. [ 533.011391][ T7734] loop3: detected capacity change from 0 to 2048 [ 533.431862][ T7730] netlink: 276 bytes leftover after parsing attributes in process `syz.0.421'. [ 533.495821][ T7734] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 533.522801][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 533.560837][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 533.613596][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 533.646183][ T24] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 533.667960][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.743652][ T24] usb 1-1: config 0 descriptor?? [ 533.850003][ T7747] UDF-fs: error (device loop3): udf_read_inode: (ino 1345) failed !bh [ 533.875111][ T7747] UDF-fs: error (device loop3): udf_read_inode: (ino 1345) failed !bh [ 533.884420][ T7747] overlayfs: failed to resolve './file0': -5 [ 534.471794][ T7727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 534.559017][ T7727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 534.689811][ T7753] input: syz0 as /devices/virtual/input/input10 [ 534.749468][ T7755] loop6: detected capacity change from 0 to 4096 [ 534.819851][ T10] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 534.842149][ T24] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 535.011892][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 535.037379][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 535.064917][ T7753] netlink: 4 bytes leftover after parsing attributes in process `syz.4.428'. [ 535.072665][ T24] usb 1-1: USB disconnect, device number 8 [ 535.097795][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 535.139841][ T10] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 535.155270][ T7753] veth1_macvtap: left promiscuous mode [ 535.184812][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.199706][ T7757] loop4: detected capacity change from 0 to 8192 [ 535.217160][ T7761] loop3: detected capacity change from 0 to 1024 [ 535.242614][ T7758] fido_id[7758]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 535.244094][ T10] usb 2-1: config 0 descriptor?? [ 535.576231][ T7746] loop5: detected capacity change from 0 to 32768 [ 535.657023][ T7763] overlay: ./file1 is not a directory [ 536.207919][ T7746] ocfs2: Slot 0 on device (7,5) was already allocated to this node! [ 536.295549][ T10] ft260 0003:0403:6030.0004: unknown main item tag 0x0 [ 536.308275][ T10] ft260 0003:0403:6030.0004: unknown main item tag 0x0 [ 536.373280][ T7746] JBD2: Ignoring recovery information on journal [ 536.484403][ T10] ft260 0003:0403:6030.0004: chip code: 0000 0000 [ 536.578194][ T7767] loop6: detected capacity change from 0 to 256 [ 536.635789][ T7767] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 536.657293][ T7746] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 536.684990][ T10] ft260 0003:0403:6030.0004: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.1-1/input0 [ 536.733503][ T7776] loop4: detected capacity change from 0 to 512 [ 536.788622][ T7776] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 536.859454][ T7776] EXT4-fs (loop4): 1 truncate cleaned up [ 536.902373][ T7776] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 537.039830][ T5674] ocfs2: Unmounting device (7,5) on (node local) [ 537.579941][ T5811] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 537.880714][ T5811] usb 7-1: Using ep0 maxpacket: 8 [ 537.952336][ T5811] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 537.987061][ T5811] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 538.030030][ T5811] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 538.076553][ T5811] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 538.100882][ T5811] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 538.128182][ T5811] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 538.173238][ T5811] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 538.226390][ T5811] usb 7-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 538.259429][ T5811] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.297592][ T5811] usb 7-1: Product: syz [ 538.588719][ T7789] loop3: detected capacity change from 0 to 40427 [ 538.606044][ T7789] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 538.613936][ T7789] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 538.627399][ T7789] F2FS-fs (loop3): invalid crc value [ 538.637876][ T5811] usb 7-1: Manufacturer: syz [ 538.682771][ T5811] usb 7-1: SerialNumber: syz [ 538.736010][ T7789] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 538.753505][ T7789] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 538.761179][ T7789] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 538.785730][ T5811] usb 7-1: config 0 descriptor?? [ 538.812677][ T7785] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 538.842448][ T30] audit: type=1800 audit(1780426246.525:19): pid=7796 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.436" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 538.854470][ T5811] ati_remote 7-1:0.0: Initializing ati_remote hardware failed. [ 538.882284][ T10] ft260 0003:0403:6030.0004: failed to retrieve status: -71, no wakeup [ 538.923137][ T10] ft260 0003:0403:6030.0004: failed to retrieve status: -71 [ 538.931550][ T5811] ati_remote 7-1:0.0: probe with driver ati_remote failed with error -5 [ 538.961687][ T10] ft260 0003:0403:6030.0004: failed to reset I2C controller: -71 [ 539.098163][ T7771] loop0: detected capacity change from 0 to 32768 [ 539.113349][ T5811] usb 7-1: USB disconnect, device number 9 [ 539.217901][ T7800] loop1: detected capacity change from 0 to 4096 [ 539.280259][ T7800] ntfs3(loop1): mft corrupted [ 539.296343][ T10] usb 2-1: USB disconnect, device number 8 [ 539.306903][ T7800] ntfs3(loop1): Failed to load $MFT. [ 539.389647][ T7771] find_entry called with index >= next_index [ 539.423688][ T5668] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 539.437739][ T7771] find_entry called with index >= next_index [ 539.463613][ T7771] find_entry called with index >= next_index [ 539.494490][ T7771] find_entry called with index >= next_index [ 539.508057][ T5853] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.524995][ T7771] find_entry called with index >= next_index [ 539.544333][ T7771] add_index: next_index = 0. Resetting! [ 539.570482][ T7771] find_entry called with index >= next_index [ 539.599405][ T7771] find_entry called with index >= next_index [ 539.624915][ T7771] find_entry called with index >= next_index [ 539.643428][ T7771] find_entry called with index >= next_index [ 539.653738][ T7800] netlink: 60 bytes leftover after parsing attributes in process `syz.1.438'. [ 539.680988][ T7801] netlink: 60 bytes leftover after parsing attributes in process `syz.1.438'. [ 539.860784][ T5853] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.904422][ T7802] non-latin1 character 0x3ff found in JFS file name [ 539.929605][ T7802] mount with iocharset=utf8 to access [ 540.053414][ T5853] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.171242][ T7807] loop6: detected capacity change from 0 to 1024 [ 540.444305][ T5853] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.582438][ T7814] overlay: ./file1 is not a directory [ 540.848911][ T5675] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 540.876666][ T5675] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 540.917586][ T5675] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 541.062603][ T5675] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 541.080151][ T5675] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 541.198610][ T7819] netlink: 'syz.3.439': attribute type 4 has an invalid length. [ 543.024992][ T5853] bridge_slave_1: left allmulticast mode [ 543.223330][ T7825] loop6: detected capacity change from 0 to 131072 [ 543.231672][ T5683] Bluetooth: hci0: command tx timeout [ 543.243034][ T10] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 543.284474][ T7825] F2FS-fs (loop6): invalid crc value [ 543.371180][ T5853] bridge_slave_1: left promiscuous mode [ 543.392310][ T7825] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 543.412590][ T7825] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 543.443212][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.517276][ T5853] bridge_slave_0: left allmulticast mode [ 543.551842][ T10] usb 6-1: config 5 has an invalid interface number: 52 but max is 0 [ 543.552327][ T5853] bridge_slave_0: left promiscuous mode [ 543.569271][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.620050][ T10] usb 6-1: config 5 has no interface number 0 [ 543.667182][ T10] usb 6-1: config 5 interface 52 has no altsetting 0 [ 543.727076][ T10] usb 6-1: New USB device found, idVendor=050d, idProduct=0121, bcdDevice=37.9f [ 543.756827][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.769660][ T10] usb 6-1: Product: syz [ 543.780540][ T10] usb 6-1: Manufacturer: syz [ 543.795759][ T10] usb 6-1: SerialNumber: syz [ 543.799010][ T7856] xt_hashlimit: size too large, truncated to 1048576 [ 543.911980][ T5948] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 543.929614][ T5819] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 544.099623][ T7826] loop5: detected capacity change from 0 to 4096 [ 544.133890][ T5948] usb 7-1: unable to get BOS descriptor or descriptor too short [ 544.200683][ T7826] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 544.225480][ T5819] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 544.249311][ T5948] usb 7-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 544.290230][ T5819] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 544.309469][ T5948] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 544.329125][ T5948] usb 7-1: New USB device found, idVendor=1235, idProduct=8004, bcdDevice= 0.40 [ 544.339789][ T5948] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.347923][ T5948] usb 7-1: Product: syz [ 544.352544][ T5948] usb 7-1: Manufacturer: syz [ 544.357922][ T5948] usb 7-1: SerialNumber: syz [ 544.368689][ T5948] usb 7-1: config 0 descriptor?? [ 544.374161][ T5819] usb 1-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=20.a3 [ 544.386932][ T5819] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.395315][ T5819] usb 1-1: Product: syz [ 544.402606][ T5819] usb 1-1: Manufacturer: syz [ 544.407362][ T5819] usb 1-1: SerialNumber: syz [ 544.433259][ T5819] usb 1-1: config 0 descriptor?? [ 544.902728][ T7874] netlink: 4 bytes leftover after parsing attributes in process `syz.1.450'. [ 544.954003][ T7839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 544.976341][ T5853] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 545.003907][ T7839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 545.033380][ T5683] Bluetooth: hci2: Unknown advertising packet type: 0x53 [ 545.033446][ T5683] Bluetooth: hci2: adv larger than maximum supported [ 545.044989][ T5683] Bluetooth: hci2: Malformed LE Event: 0x0d [ 545.178280][ T7839] loop0: detected capacity change from 0 to 128 [ 545.211116][ T5853] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 545.223176][ T7839] vxfs: Unknown parameter 'Núa–¡Î¨ô“ð' [ 545.261386][ T5683] Bluetooth: hci0: command tx timeout [ 545.342930][ T804] usb 1-1: USB disconnect, device number 9 [ 545.373136][ T10] pegasus 6-1:5.52: Missing or invalid endpoints [ 545.387869][ T10] usb 6-1: USB disconnect, device number 14 [ 545.417126][ T5674] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 545.457975][ T5853] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 545.492142][ T5853] bond0 (unregistering): Released all slaves [ 545.560232][ T7874] bridge_slave_1: left allmulticast mode [ 545.600595][ T7874] bridge_slave_1: left promiscuous mode [ 545.628754][ T7874] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.667278][ T7874] bridge_slave_0: left allmulticast mode [ 545.696456][ T7874] bridge_slave_0: left promiscuous mode [ 545.704947][ T24] usb 7-1: USB disconnect, device number 10 [ 545.759769][ T7874] bridge0: port 1(bridge_slave_0) entered disabled state [ 546.166715][ T7886] CUSE: unknown device info "" [ 546.171734][ T7886] CUSE: zero length info key specified [ 546.704460][ T5289] 8021q: adding VLAN 0 to HW filter on device eth5 [ 547.289204][ T7894] loop5: detected capacity change from 0 to 4096 [ 547.319647][ T5683] Bluetooth: hci0: command tx timeout [ 547.958178][ T7909] loop0: detected capacity change from 0 to 1024 [ 548.079622][ T804] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 548.251699][ T804] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 548.296762][ T7812] wg1 speed is unknown, defaulting to 1000 [ 548.319022][ T804] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 548.403918][ T7921] overlay: ./file1 is not a directory [ 549.016103][ T804] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 549.029030][ T804] usb 6-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 549.039397][ T804] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.098262][ T804] usb 6-1: config 0 descriptor?? [ 549.156071][ T7925] netlink: 'syz.1.460': attribute type 1 has an invalid length. [ 549.191334][ T7925] netlink: 16 bytes leftover after parsing attributes in process `syz.1.460'. [ 549.240546][ T5853] hsr_slave_0: left promiscuous mode [ 549.491415][ T5683] Bluetooth: hci0: command tx timeout [ 549.873078][ T7903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 549.881716][ T5853] hsr_slave_1: left promiscuous mode [ 550.100051][ T5853] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 550.300435][ T7903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 550.310468][ T5853] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 550.365733][ T5853] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 550.397992][ T5853] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 550.517669][ T5853] veth0_macvtap: left promiscuous mode [ 550.550485][ T5853] veth1_vlan: left promiscuous mode [ 550.567837][ T5853] veth0_vlan: left promiscuous mode [ 550.607968][ T804] steelseries 0003:1038:1410.0005: missing HID_OUTPUT_REPORT 0 [ 550.861030][ T804] usb 6-1: USB disconnect, device number 15 [ 550.983224][ T7942] loop1: detected capacity change from 0 to 32768 [ 550.990572][ T7942] btrfs: Deprecated parameter 'usebackuproot' [ 550.996743][ T7942] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 551.028648][ T7942] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.466 (7942) [ 551.067407][ T7942] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 551.077599][ T7942] BTRFS info (device loop1): using crc32c checksum algorithm [ 551.246668][ T7943] comedi comedi3: 8255: I/O base address not correctly aligned [ 551.312143][ T6249] BTRFS warning (device loop1): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 551.375328][ T7942] BTRFS error (device loop1): failed to load root extent [ 551.382834][ T7942] BTRFS warning (device loop1): try to load backup roots slot 1 [ 551.402272][ T5700] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 551.639710][ T7942] BTRFS warning (device loop1): couldn't read tree root [ 551.646754][ T7942] BTRFS warning (device loop1): try to load backup roots slot 2 [ 551.672839][ T6251] BTRFS error (device loop1): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 551.780255][ T7952] loop6: detected capacity change from 0 to 1024 [ 551.866354][ T7942] BTRFS warning (device loop1): couldn't read tree root [ 551.874130][ T7942] BTRFS warning (device loop1): try to load backup roots slot 3 [ 551.907806][ T7942] BTRFS info (device loop1): rebuilding free space tree [ 551.947066][ T7942] BTRFS info (device loop1): checking UUID tree [ 551.960000][ T7942] BTRFS info (device loop1): enabling ssd optimizations [ 551.967058][ T7942] BTRFS info (device loop1): turning on async discard [ 551.970431][ T7952] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 551.973904][ T7942] BTRFS info (device loop1): enabling free space tree [ 551.992816][ T7942] BTRFS info (device loop1): force clearing of disk cache [ 552.000066][ T7942] BTRFS info (device loop1): enabling auto defrag [ 552.006490][ T7942] BTRFS info (device loop1): trying to use backup root at mount time [ 552.016213][ T7942] BTRFS info (device loop1): force zlib compression, level 3 [ 552.396502][ T6251] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 552.430359][ T6251] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 180 with error 28 [ 552.683524][ T30] audit: type=1800 audit(1780426260.355:20): pid=7974 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.466" name="bus" dev="loop1" ino=259 res=0 errno=0 [ 553.029468][ T6251] EXT4-fs (loop6): This should not happen!! Data will be lost [ 553.029468][ T6251] [ 553.040237][ T6251] EXT4-fs (loop6): Total free blocks count 0 [ 553.046273][ T6251] EXT4-fs (loop6): Free/Dirty block details [ 553.063810][ T6251] EXT4-fs (loop6): free_blocks=68451041280 [ 553.070001][ T6251] EXT4-fs (loop6): dirty_blocks=192 [ 553.075317][ T6251] EXT4-fs (loop6): Block reservation details [ 553.087548][ T6251] EXT4-fs (loop6): i_reserved_data_blocks=12 [ 553.250157][ T6094] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 553.262271][ T5853] team0 (unregistering): Port device team_slave_1 removed [ 553.310907][ T6094] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 553.322579][ T5853] team0 (unregistering): Port device team_slave_0 removed [ 553.387354][ T5677] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 553.779782][ T7985] loop6: detected capacity change from 0 to 1024 [ 554.052791][ T5289] 8021q: adding VLAN 0 to HW filter on device eth6 [ 554.158941][ T7987] overlay: ./file1 is not a directory [ 556.390341][ T8010] loop6: detected capacity change from 0 to 2048 [ 556.619663][ T5915] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 556.823460][ T5915] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 556.868625][ T5915] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 556.900916][ T5811] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 556.916322][ T5915] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 556.957197][ T5915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.996047][ T5915] usb 4-1: config 0 descriptor?? [ 557.089625][ T5811] usb 1-1: Using ep0 maxpacket: 16 [ 557.124179][ T5811] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 557.139641][ T5811] usb 1-1: config 0 has no interface number 0 [ 557.159054][ T5811] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 557.190563][ T5811] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.229827][ T5811] usb 1-1: Product: syz [ 557.243057][ T7812] bridge0: port 1(bridge_slave_0) entered blocking state [ 557.253365][ T7812] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.261061][ T7812] bridge_slave_0: entered allmulticast mode [ 557.269011][ T7812] bridge_slave_0: entered promiscuous mode [ 557.273802][ T5811] usb 1-1: Manufacturer: syz [ 557.278082][ T7812] bridge0: port 2(bridge_slave_1) entered blocking state [ 557.298873][ T7812] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.314069][ T7812] bridge_slave_1: entered allmulticast mode [ 557.315727][ T5811] usb 1-1: SerialNumber: syz [ 557.332571][ T7812] bridge_slave_1: entered promiscuous mode [ 557.440601][ T8025] comedi comedi3: 8255: I/O base address not correctly aligned [ 557.465542][ T5811] usb 1-1: config 0 descriptor?? [ 558.151007][ T5811] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 558.168283][ T5915] usb 4-1: string descriptor 0 read error: -71 [ 558.194278][ T5915] usb 4-1: USB disconnect, device number 8 [ 558.303316][ T8038] netlink: 96 bytes leftover after parsing attributes in process `syz.5.482'. [ 558.333062][ T8035] loop6: detected capacity change from 0 to 512 [ 558.375682][ T7812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 558.399195][ T8035] EXT4-fs: Mount option(s) incompatible with ext3 [ 558.431260][ T7812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 558.553189][ T5811] gspca_spca1528: reg_w err -71 [ 558.556106][ T7812] team0: Port device team_slave_0 added [ 558.589635][ T804] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 558.598315][ T5811] spca1528 1-1:0.1: probe with driver spca1528 failed with error -71 [ 558.617657][ T7812] team0: Port device team_slave_1 added [ 558.627223][ T5811] usb 1-1: USB disconnect, device number 10 [ 558.762555][ T804] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 558.779133][ T7812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 558.798174][ T804] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 558.833342][ T7812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 558.871731][ T804] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 558.904565][ T7812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 558.932957][ T804] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 558.944407][ T804] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.968035][ T804] usbtmc 6-1:16.0: probe with driver usbtmc failed with error -22 [ 558.981075][ T5289] 8021q: adding VLAN 0 to HW filter on device eth7 [ 558.996224][ T7812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 559.041836][ T7812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 559.110641][ T7812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 559.270948][ T8058] loop1: detected capacity change from 0 to 1024 [ 559.629606][ T8064] overlay: ./file1 is not a directory [ 560.435669][ T7812] hsr_slave_0: entered promiscuous mode [ 560.455497][ T7812] hsr_slave_1: entered promiscuous mode [ 560.487773][ T7812] debugfs: 'hsr0' already exists in 'hsr' [ 560.522300][ T7812] Cannot create hsr debugfs directory [ 560.852381][ T8075] loop1: detected capacity change from 0 to 4096 [ 561.255039][ T5915] usb 6-1: USB disconnect, device number 16 [ 562.900781][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.908708][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.091227][ T8104] loop6: detected capacity change from 0 to 1024 [ 565.098800][ T8105] sctp: [Deprecated]: syz.5.496 (pid 8105) Use of int in max_burst socket option. [ 565.098800][ T8105] Use struct sctp_assoc_value instead [ 565.389659][ T5672] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 565.570546][ T7812] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 565.728225][ T5672] usb 6-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 565.747666][ T5672] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.767519][ T5672] usb 6-1: Product: syz [ 565.792671][ T5672] usb 6-1: Manufacturer: syz [ 565.846535][ T5672] usb 6-1: SerialNumber: syz [ 566.059835][ T7812] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 566.074640][ T7812] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 566.082758][ T5672] usb 6-1: config 0 descriptor?? [ 566.106683][ T7812] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 566.125410][ T5672] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 566.136263][ T7812] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 566.313314][ T7812] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 566.385028][ T7812] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 566.506237][ T7812] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 566.640087][ T5672] gspca_sunplus: reg_r err -110 [ 566.698725][ T8134] loop6: detected capacity change from 0 to 1024 [ 566.982579][ T5915] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 566.984084][ T5289] 8021q: adding VLAN 0 to HW filter on device eth8 [ 567.114803][ T8145] overlay: ./file1 is not a directory [ 567.629601][ T5915] usb 1-1: device descriptor read/64, error -71 [ 567.696990][ T8105] loop5: detected capacity change from 0 to 32768 [ 567.706269][ T8105] BTRFS warning: excessive commit interval 3581, use with care [ 567.767436][ T8105] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.496 (8105) [ 567.874658][ T8105] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 567.905077][ T5915] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 567.923090][ T8105] BTRFS info (device loop5): using crc32c checksum algorithm [ 568.069695][ T5915] usb 1-1: device descriptor read/64, error -71 [ 568.150072][ T8105] BTRFS error (device loop5): open_ctree failed: -4 [ 568.200385][ T5915] usb usb1-port1: attempt power cycle [ 568.225190][ T7812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 568.296713][ T7812] 8021q: adding VLAN 0 to HW filter on device team0 [ 568.340062][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.347277][ T5853] bridge0: port 1(bridge_slave_0) entered forwarding state [ 568.393863][ T5811] usb 6-1: USB disconnect, device number 17 [ 568.399606][ T5834] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 568.425346][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.432583][ T5853] bridge0: port 2(bridge_slave_1) entered forwarding state [ 568.580801][ T5915] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 568.589751][ T5834] usb 7-1: Using ep0 maxpacket: 32 [ 568.606380][ T5834] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 568.621686][ T5915] usb 1-1: device descriptor read/8, error -71 [ 568.657396][ T5834] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 568.712147][ T5834] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 568.767016][ T5834] usb 7-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 568.814124][ T5834] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.853670][ T5834] usb 7-1: config 0 descriptor?? [ 568.892220][ T5915] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 568.930379][ T5915] usb 1-1: device descriptor read/8, error -71 [ 569.071268][ T5915] usb usb1-port1: unable to enumerate USB device [ 569.691987][ T5834] usbhid 7-1:0.0: can't add hid device: -71 [ 569.730661][ T5834] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 570.238367][ T5834] usb 7-1: USB disconnect, device number 11 [ 570.242996][ T5797] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 570.347508][ T8197] loop3: detected capacity change from 0 to 2048 [ 570.423531][ T8197] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 570.451804][ T5797] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 570.466349][ T8203] loop6: detected capacity change from 0 to 1024 [ 570.483238][ T8197] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 570.505457][ T5797] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 570.516127][ T8197] UDF-fs: Scanning with blocksize 512 failed [ 570.706561][ T5797] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 570.814266][ T8205] overlay: ./file1 is not a directory [ 571.363166][ T8197] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 571.410222][ T5797] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.439821][ T5797] usb 1-1: config 0 descriptor?? [ 571.461926][ T5797] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 571.476491][ T5797] dvb-usb: bulk message failed: -22 (3/0) [ 571.536845][ T5797] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 571.557365][ T5797] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 571.565319][ T5797] usb 1-1: media controller created [ 571.576069][ T5797] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 571.666808][ T8198] loop0: detected capacity change from 0 to 128 [ 571.705910][ T5797] dvb-usb: bulk message failed: -22 (6/0) [ 571.728610][ T8198] EXT4-fs (loop0): Test dummy encryption mode enabled [ 571.748673][ T5797] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 571.762448][ T8198] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a806c018, mo2=0042] [ 571.777968][ T8198] System zones: 1-3, 19-19, 35-36 [ 571.794389][ T8198] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 571.810072][ T8198] ext4 filesystem being mounted at /103/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 571.837229][ T5797] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input12 [ 571.917880][ T5797] dvb-usb: schedule remote query interval to 150 msecs. [ 571.947435][ T8198] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 571.969521][ T5797] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 572.006765][ T8198] EXT4-fs: Remounting fs w/o journal so ignoring data_err option [ 572.012267][ T8213] dvb-usb: bulk message failed: -22 (2/0) [ 572.048424][ T8198] EXT4-fs: user quota file already specified [ 572.134850][ T5797] dvb-usb: bulk message failed: -22 (1/0) [ 572.161641][ T5797] dvb-usb: error while querying for an remote control event. [ 572.397269][ T8186] bond0: entered promiscuous mode [ 572.408596][ T8186] bond_slave_0: entered promiscuous mode [ 572.418955][ T8186] bond_slave_1: entered promiscuous mode [ 572.429149][ T8186] bond0: left promiscuous mode [ 572.435318][ T8186] bond_slave_0: left promiscuous mode [ 572.444105][ T5797] dvb-usb: bulk message failed: -22 (1/0) [ 572.450266][ T8220] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 572.458317][ T8186] bond_slave_1: left promiscuous mode [ 572.459164][ T5797] dvb-usb: error while querying for an remote control event. [ 572.569589][ T10] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 572.741859][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 572.764360][ T10] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 572.777453][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.807590][ T10] usb 2-1: Product: syz [ 572.817178][ T10] usb 2-1: Manufacturer: syz [ 572.827213][ T10] usb 2-1: SerialNumber: syz [ 572.871400][ T10] usb 2-1: config 0 descriptor?? [ 572.871726][ T5915] dvb-usb: bulk message failed: -22 (1/0) [ 572.885215][ T5915] dvb-usb: error while querying for an remote control event. [ 572.900116][ T5672] usb 1-1: USB disconnect, device number 15 [ 572.953504][ T5669] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 572.970157][ T10] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 573.198681][ T5672] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 573.671247][ T5672] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 573.856074][ T5672] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 573.871557][ T10] ssu100 2-1:0.0: probe with driver ssu100 failed with error -71 [ 573.894758][ T5672] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 573.910935][ T10] usb 2-1: USB disconnect, device number 9 [ 573.927164][ T5672] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.944168][ T5672] usb 1-1: Product: syz [ 573.948631][ T5672] usb 1-1: Manufacturer: syz [ 573.966394][ T5672] usb 1-1: SerialNumber: syz [ 574.011533][ T5672] usb 1-1: config 0 descriptor?? [ 574.048647][ T5672] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 574.071926][ T5672] usb 1-1: Detected FT232R [ 574.238904][ T8228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 574.271968][ T8228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 574.280035][ T8233] loop3: detected capacity change from 0 to 32768 [ 574.338546][ T5672] ftdi_sio ttyUSB0: Unable to read latency timer: -121 [ 574.390081][ T8233] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 574.551473][ T5672] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 574.565639][ T8233] JBD2: Ignoring recovery information on journal [ 574.594993][ T5672] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 574.658468][ T5672] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 574.734810][ T5672] usb 1-1: USB disconnect, device number 16 [ 574.791285][ T8233] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 574.800618][ T5672] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 574.819385][ T5672] ftdi_sio 1-1:0.0: device disconnected [ 575.717687][ T7812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 577.411811][ T5671] ocfs2: Unmounting device (7,3) on (node local) [ 577.473352][ T8293] loop1: detected capacity change from 0 to 1024 [ 579.466486][ T8311] netlink: 8 bytes leftover after parsing attributes in process `syz.6.534'. [ 579.530839][ T5915] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 582.826548][ T8292] bond0: entered promiscuous mode [ 582.831683][ T8292] bond_slave_0: entered promiscuous mode [ 582.837504][ T8292] bond_slave_1: entered promiscuous mode [ 582.847698][ T8292] bond0: left promiscuous mode [ 582.852559][ T8292] bond_slave_0: left promiscuous mode [ 582.858140][ T8292] bond_slave_1: left promiscuous mode [ 583.041353][ T5915] usb 1-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 583.069591][ T5915] usb 1-1: too many endpoints for config 1 interface 0 altsetting 0: 65, using maximum allowed: 30 [ 583.101326][ T5915] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 65 [ 583.132192][ T5915] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 583.151532][ T5915] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 583.172461][ T5915] usb 1-1: SerialNumber: syz [ 583.404559][ T5915] usb-storage 1-1:1.0: USB Mass Storage device detected [ 583.432298][ T5915] usb-storage 1-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 583.525192][ T5915] usb 1-1: USB disconnect, device number 17 [ 583.698696][ T8314] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 583.711734][ T8314] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 583.722351][ T8314] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 583.923313][ T8316] wg1 speed is unknown, defaulting to 1000 [ 584.025426][ T8330] loop5: detected capacity change from 0 to 256 [ 584.057152][ T7812] veth0_vlan: entered promiscuous mode [ 584.063059][ T8330] exfat: Deprecated parameter 'namecase' [ 584.099166][ T8330] exfat: Deprecated parameter 'namecase' [ 584.803954][ T8330] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 584.925425][ T7812] veth1_vlan: entered promiscuous mode [ 585.857345][ T8341] loop0: detected capacity change from 0 to 131072 [ 585.864980][ T8341] XFS (loop0): sunit and swidth must be specified together [ 586.507532][ T8345] loop3: detected capacity change from 0 to 1024 [ 586.648554][ T8349] loop2: detected capacity change from 0 to 1 [ 586.665621][ T8349] Dev loop2: unable to read RDB block 1 [ 586.681412][ T8349] loop2: AHDI p1 p2 [ 586.690913][ T8349] loop2: partition table partially beyond EOD, truncated [ 586.708644][ T8349] loop2: p1 start 1818582900 is beyond EOD, truncated [ 587.297565][ T7812] veth0_macvtap: entered promiscuous mode [ 587.365937][ T7812] veth1_macvtap: entered promiscuous mode [ 587.571228][ T8372] comedi comedi1: dt2801: I/O base address or length out of range [ 587.681662][ T8375] loop1: detected capacity change from 0 to 1024 [ 588.531733][ T7812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 588.622128][ T7812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 588.743886][ T57] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.753033][ T8381] loop1: detected capacity change from 0 to 16 [ 588.813335][ T57] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.882614][ T57] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.941484][ T57] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.968986][ T8385] loop5: detected capacity change from 0 to 1024 [ 588.995861][ T8381] erofs (device loop1): mounted with root inode @ nid 36. [ 589.140152][ T5683] erofs (device loop1): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 9000 [ 589.267492][ T8381] erofs (device loop1): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 9000 [ 589.912607][ T8381] erofs (device loop1): read error -117 @ 2 of nid 89 [ 589.946505][ T30] audit: type=1800 audit(1780426297.635:21): pid=8381 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.547" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 590.059055][ T8381] syz.1.547 (8381) used greatest stack depth: 18824 bytes left [ 590.429692][ T8409] netlink: 'syz.3.552': attribute type 10 has an invalid length. [ 590.493471][ T8411] netlink: 'syz.3.552': attribute type 10 has an invalid length. [ 590.621881][ T8412] loop3: detected capacity change from 0 to 256 [ 590.633612][ T8412] exfat: Deprecated parameter 'utf8' [ 590.759055][ T8412] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x47dfe6af, utbl_chksum : 0xe619d30d) [ 591.336309][ T8405] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 592.410849][ T8393] bond0: entered promiscuous mode [ 592.415996][ T8393] bond_slave_0: entered promiscuous mode [ 592.422074][ T8393] bond_slave_1: entered promiscuous mode [ 592.427937][ T8393] bridge0: entered promiscuous mode [ 592.444553][ T8393] batadv0: entered promiscuous mode [ 592.567930][ T8409] syz_tun: entered promiscuous mode [ 592.639014][ T8409] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 592.749452][ T8411] 8021q: adding VLAN 0 to HW filter on device bond0 [ 592.778537][ T8411] team0: Port device bond0 added [ 593.210418][ T8430] loop0: detected capacity change from 0 to 512 [ 593.211952][ T5858] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 593.247134][ T8430] EXT4-fs: Ignoring removed orlov option [ 593.258591][ T5858] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 593.325821][ T8430] EXT4-fs (loop0): Test dummy encryption mode enabled [ 593.377311][ T8430] EXT4-fs (loop0): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 593.412145][ T5858] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 593.477417][ T5858] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 593.623698][ T8430] EXT4-fs (loop0): re-mounted 00000005-0000-0000-0000-000000000000. [ 593.669345][ T30] audit: type=1326 audit(1780426301.355:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8421 comm="syz.6.554" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f572739ce59 code=0x0 [ 593.997640][ T5669] EXT4-fs (loop0): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 594.252663][ T8451] loop7: detected capacity change from 0 to 2048 [ 594.380610][ T8451] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 594.599834][ T5834] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 594.728578][ T8463] UDF-fs: error (device loop7): udf_read_inode: (ino 1345) failed !bh [ 594.749831][ T8464] UDF-fs: error (device loop7): udf_read_inode: (ino 1345) failed !bh [ 594.760970][ T8464] overlayfs: failed to resolve './file0': -5 [ 594.904181][ T5834] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 594.997174][ T5834] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.259827][ T10] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 595.432616][ T5834] usb 1-1: config 0 descriptor?? [ 595.503174][ T5834] cp210x 1-1:0.0: cp210x converter detected [ 595.549599][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 595.609845][ T10] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 595.657061][ T10] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 595.724035][ T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 595.764319][ T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 595.806757][ T10] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 595.845565][ T10] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 595.858236][ T8477] loop7: detected capacity change from 0 to 1024 [ 595.867712][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.122717][ T8483] loop1: detected capacity change from 0 to 1024 [ 596.144349][ T8483] EXT4-fs: Ignoring removed bh option [ 596.169417][ T5834] usb 1-1: cp210x converter now attached to ttyUSB0 [ 596.407718][ T10] usb 6-1: usb_control_msg returned -32 [ 596.441806][ T5834] usb 1-1: USB disconnect, device number 18 [ 596.554108][ T10] usbtmc 6-1:16.0: can't read capabilities [ 596.768519][ T5834] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 596.862661][ T8483] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 596.865787][ T5834] cp210x 1-1:0.0: device disconnected [ 597.220397][ T5677] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 597.547532][ T8501] netlink: 20 bytes leftover after parsing attributes in process `syz.3.568'. [ 598.373385][ T5834] usb 6-1: USB disconnect, device number 18 [ 598.879604][ T5795] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 599.039601][ T5795] usb 2-1: Using ep0 maxpacket: 8 [ 599.052864][ T5795] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 599.084733][ T5795] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 599.111112][ T5795] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.138293][ T5795] usb 2-1: config 0 descriptor?? [ 599.176549][ T5795] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 600.273144][ T5795] gspca_vc032x: reg_w err -110 [ 600.301346][ T5795] vc032x 2-1:0.0: probe with driver vc032x failed with error -110 [ 600.679154][ T8537] loop6: detected capacity change from 0 to 2048 [ 600.742167][ T8537] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 600.742881][ T8543] loop5: detected capacity change from 0 to 64 [ 600.787171][ T8547] loop3: detected capacity change from 0 to 64 [ 600.822502][ T8547] hfs: Unknown parameter '00000000000000000000000' [ 600.835439][ T8543] hfs: Unknown parameter '00000000000000000000000' [ 601.294427][ T8550] UDF-fs: error (device loop6): udf_read_inode: (ino 1345) failed !bh [ 601.316659][ T8550] UDF-fs: error (device loop6): udf_read_inode: (ino 1345) failed !bh [ 601.325807][ T8550] overlayfs: failed to resolve './file0': -5 [ 602.468283][ T8559] loop5: detected capacity change from 0 to 64 [ 602.504690][ T8559] hfs: Unknown parameter '00000000000000000000000' [ 602.536178][ T5915] usb 2-1: USB disconnect, device number 10 [ 602.764727][ T8559] loop5: detected capacity change from 0 to 32768 [ 602.796627][ T8559] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.581 (8559) [ 602.812547][ T8559] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 602.822738][ T8559] BTRFS info (device loop5): using sha256 checksum algorithm [ 602.861067][ T8568] loop3: detected capacity change from 0 to 64 [ 602.988329][ T8564] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 602.999256][ T8564] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 603.088065][ T8568] hfs: Unknown parameter '00000000000000000000000' [ 603.150896][ T8559] BTRFS info (device loop5): enabling ssd optimizations [ 603.157915][ T8559] BTRFS info (device loop5): turning on async discard [ 603.166472][ T8559] BTRFS info (device loop5): enabling free space tree [ 603.671500][ T8595] FAULT_INJECTION: forcing a failure. [ 603.671500][ T8595] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 603.685924][ T8595] CPU: 0 UID: 0 PID: 8595 Comm: syz.5.581 Tainted: G L syzkaller #0 PREEMPT(full) [ 603.685957][ T8595] Tainted: [L]=SOFTLOCKUP [ 603.685965][ T8595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 603.685976][ T8595] Call Trace: [ 603.685984][ T8595] [ 603.685991][ T8595] dump_stack_lvl+0xe8/0x150 [ 603.686017][ T8595] should_fail_ex+0x412/0x560 [ 603.686043][ T8595] copy_folio_from_iter_atomic+0x44c/0x1ad0 [ 603.686065][ T8595] ? srso_alias_return_thunk+0x5/0xfbef5 [ 603.686087][ T8595] ? __folio_batch_add_and_move+0x78b/0xc50 [ 603.686116][ T8595] ? __pfx_lru_add+0x10/0x10 [ 603.686160][ T8595] ? srso_alias_return_thunk+0x5/0xfbef5 [ 603.686188][ T8595] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 603.686216][ T8595] ? srso_alias_return_thunk+0x5/0xfbef5 [ 603.686237][ T8595] ? lock_and_cleanup_extent_if_need+0x2d2/0x520 [ 603.686275][ T8595] btrfs_buffered_write+0xca7/0x16a0 [ 603.686325][ T8595] ? __pfx_btrfs_buffered_write+0x10/0x10 [ 603.686358][ T8595] ? srso_alias_return_thunk+0x5/0xfbef5 [ 603.686385][ T8595] btrfs_do_write_iter+0x30b/0x840 [ 603.686410][ T8595] ? srso_alias_return_thunk+0x5/0xfbef5 [ 603.686441][ T8595] ? __pfx_btrfs_do_write_iter+0x10/0x10 [ 603.686467][ T8595] ? srso_alias_return_thunk+0x5/0xfbef5 [ 603.686498][ T8595] vfs_write+0x61d/0xb90 [ 603.686535][ T8595] ? __pfx_vfs_write+0x10/0x10 [ 603.686572][ T8595] ? __fget_files+0x2a/0x420 [ 603.686599][ T8595] ? srso_alias_return_thunk+0x5/0xfbef5 [ 603.686626][ T8595] ksys_write+0x150/0x270 [ 603.686656][ T8595] ? __pfx_ksys_write+0x10/0x10 [ 603.686692][ T8595] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.686712][ T8595] do_syscall_64+0x174/0x580 [ 603.686739][ T8595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.686758][ T8595] RIP: 0033:0x7fabb339ce59 [ 603.686775][ T8595] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 603.686789][ T8595] RSP: 002b:00007fabb42d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 603.686808][ T8595] RAX: ffffffffffffffda RBX: 00007fabb3616180 RCX: 00007fabb339ce59 [ 603.686822][ T8595] RDX: 0000000000032600 RSI: 00002000000005c0 RDI: 0000000000000007 [ 603.686834][ T8595] RBP: 00007fabb42d5090 R08: 0000000000000000 R09: 0000000000000000 [ 603.686845][ T8595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 603.686856][ T8595] R13: 00007fabb3616218 R14: 00007fabb3616180 R15: 00007ffd5b4ca648 [ 603.686885][ T8595] [ 604.209664][ T8568] loop3: detected capacity change from 0 to 32768 [ 604.289907][ T8568] BTRFS info: device /dev/loop3 (7:3) using temp-fsid c349a0fc-ed85-4c56-aafa-2e0360890283 [ 604.300142][ T8568] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.586 (8568) [ 604.375789][ T8568] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 604.385962][ T8568] BTRFS info (device loop3): using sha256 checksum algorithm [ 604.711595][ T8568] BTRFS info (device loop3): enabling ssd optimizations [ 604.718614][ T8568] BTRFS info (device loop3): turning on async discard [ 604.725515][ T8568] BTRFS info (device loop3): enabling free space tree [ 604.950187][ T5698] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.015953][ T8619] netlink: 4 bytes leftover after parsing attributes in process `syz.1.587'. [ 605.511974][ T5671] BTRFS info (device loop3): last unmount of filesystem c349a0fc-ed85-4c56-aafa-2e0360890283 [ 605.596239][ T5674] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 606.101124][ T8632] FAULT_INJECTION: forcing a failure. [ 606.101124][ T8632] name failslab, interval 1, probability 0, space 0, times 0 [ 606.161280][ T8632] CPU: 0 UID: 0 PID: 8632 Comm: syz.3.591 Tainted: G L syzkaller #0 PREEMPT(full) [ 606.161319][ T8632] Tainted: [L]=SOFTLOCKUP [ 606.161329][ T8632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 606.161344][ T8632] Call Trace: [ 606.161354][ T8632] [ 606.161364][ T8632] dump_stack_lvl+0xe8/0x150 [ 606.161398][ T8632] should_fail_ex+0x412/0x560 [ 606.161432][ T8632] should_failslab+0xa8/0x100 [ 606.161460][ T8632] __kvmalloc_node_noprof+0x178/0x8a0 [ 606.161500][ T8632] ? srso_alias_return_thunk+0x5/0xfbef5 [ 606.161530][ T8632] ? xt_alloc_table_info+0x40/0xb0 [ 606.161571][ T8632] xt_alloc_table_info+0x40/0xb0 [ 606.161601][ T8632] do_arpt_set_ctl+0x90a/0x1050 [ 606.161649][ T8632] ? srso_alias_return_thunk+0x5/0xfbef5 [ 606.161679][ T8632] ? __mutex_trylock_common+0x158/0x260 [ 606.161718][ T8632] ? __pfx___mutex_trylock_common+0x10/0x10 [ 606.161753][ T8632] ? __pfx_do_arpt_set_ctl+0x10/0x10 [ 606.161791][ T8632] ? srso_alias_return_thunk+0x5/0xfbef5 [ 606.161821][ T8632] ? rcu_is_watching+0x15/0xb0 [ 606.161851][ T8632] ? srso_alias_return_thunk+0x5/0xfbef5 [ 606.161881][ T8632] ? trace_contention_end+0x3d/0x140 [ 606.161923][ T8632] ? srso_alias_return_thunk+0x5/0xfbef5 [ 606.161964][ T8632] ? srso_alias_return_thunk+0x5/0xfbef5 [ 606.161993][ T8632] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 606.162020][ T8632] ? nf_setsockopt+0x3a/0x290 [ 606.162050][ T8632] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 606.162085][ T8632] ? __pfx___mutex_lock+0x10/0x10 [ 606.162113][ T8632] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 606.162150][ T8632] ? __pfx_aa_sk_perm+0x10/0x10 [ 606.162185][ T8632] ? srso_alias_return_thunk+0x5/0xfbef5 [ 606.162224][ T8632] nf_setsockopt+0x26f/0x290 [ 606.162258][ T8632] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 606.162303][ T8632] do_sock_setsockopt+0x17c/0x1b0 [ 606.162348][ T8632] __x64_sys_setsockopt+0x13d/0x1b0 [ 606.162392][ T8632] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.162420][ T8632] do_syscall_64+0x174/0x580 [ 606.162445][ T8632] ? trace_irq_disable+0x3b/0x140 [ 606.162491][ T8632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.162517][ T8632] RIP: 0033:0x7fa4d3f9ce59 [ 606.162540][ T8632] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 606.162560][ T8632] RSP: 002b:00007fa4d4e36028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 606.162586][ T8632] RAX: ffffffffffffffda RBX: 00007fa4d4215fa0 RCX: 00007fa4d3f9ce59 [ 606.162604][ T8632] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 606.162619][ T8632] RBP: 00007fa4d4e36090 R08: 0000000000000460 R09: 0000000000000000 [ 606.162635][ T8632] R10: 0000200000000780 R11: 0000000000000246 R12: 0000000000000001 [ 606.162651][ T8632] R13: 00007fa4d4216038 R14: 00007fa4d4215fa0 R15: 00007fff8b2de938 [ 606.162691][ T8632] [ 606.980135][ T5915] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 607.166469][ T5915] usb 6-1: Using ep0 maxpacket: 8 [ 607.175875][ T5915] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 607.191134][ T5915] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 607.215937][ T5915] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 607.246829][ T5915] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 607.289803][ T5795] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 607.305498][ T5915] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 607.341939][ T5915] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 607.373777][ T5915] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.511021][ T5795] usb 4-1: Using ep0 maxpacket: 8 [ 607.530380][ T5795] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 196, changing to 11 [ 607.560464][ T5795] usb 4-1: config 0 interface 0 has no altsetting 0 [ 607.619956][ T5795] usb 4-1: New USB device found, idVendor=5543, idProduct=0045, bcdDevice= 0.00 [ 607.643499][ T5915] usb 6-1: usb_control_msg returned -32 [ 607.661028][ T5915] usbtmc 6-1:16.0: can't read capabilities [ 607.669163][ T5795] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.712068][ T5795] usb 4-1: config 0 descriptor?? [ 607.882321][ T8642] loop7: detected capacity change from 0 to 2048 [ 607.917380][ T8642] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 608.058588][ T8643] UDF-fs: error (device loop7): udf_read_inode: (ino 1345) failed !bh [ 608.079061][ T8643] UDF-fs: error (device loop7): udf_read_inode: (ino 1345) failed !bh [ 608.092045][ T8643] overlayfs: failed to resolve './file0': -5 [ 609.032564][ T8645] genirq: Flags mismatch irq 4. 00200000 (pcl818) vs. 00200080 (ttyS0) [ 610.150774][ T5795] usb 4-1: string descriptor 0 read error: -71 [ 610.569949][ T30] audit: type=1326 audit(1780426318.245:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8634 comm="syz.5.589" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabb339ce59 code=0x7fc00000 [ 610.786481][ T5795] uclogic 0003:5543:0045.0006: failed retrieving string descriptor #200: -71 [ 610.795748][ T5795] uclogic 0003:5543:0045.0006: failed retrieving pen parameters: -71 [ 610.803972][ T5795] uclogic 0003:5543:0045.0006: failed probing pen v2 parameters: -71 [ 610.812160][ T5795] uclogic 0003:5543:0045.0006: failed probing parameters: -71 [ 610.819812][ T5795] uclogic 0003:5543:0045.0006: probe with driver uclogic failed with error -71 [ 610.832222][ T5795] usb 4-1: USB disconnect, device number 9 [ 610.937679][ T5834] usb 6-1: USB disconnect, device number 19 [ 611.078363][ T8608] bond0: entered promiscuous mode [ 611.090336][ T8608] bond_slave_0: entered promiscuous mode [ 611.096406][ T8608] bond_slave_1: entered promiscuous mode [ 611.102551][ T8608] bridge0: entered promiscuous mode [ 611.112186][ T8608] batadv0: entered promiscuous mode [ 611.125111][ T8608] debugfs: 'hsr1' already exists in 'hsr' [ 611.139612][ T8608] Cannot create hsr debugfs directory [ 611.157796][ T5698] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.233544][ T8619] team0 (unregistering): Port device team_slave_0 removed [ 611.284809][ T8619] team0 (unregistering): Port device team_slave_1 removed [ 611.371607][ T5698] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.389170][ T5698] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.837027][ T8648] wg1 speed is unknown, defaulting to 1000 [ 614.230952][ T8666] FAULT_INJECTION: forcing a failure. [ 614.230952][ T8666] name failslab, interval 1, probability 0, space 0, times 0 [ 614.243726][ T8666] CPU: 0 UID: 0 PID: 8666 Comm: syz.1.600 Tainted: G L syzkaller #0 PREEMPT(full) [ 614.243752][ T8666] Tainted: [L]=SOFTLOCKUP [ 614.243759][ T8666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 614.243770][ T8666] Call Trace: [ 614.243778][ T8666] [ 614.243786][ T8666] dump_stack_lvl+0xe8/0x150 [ 614.243813][ T8666] should_fail_ex+0x412/0x560 [ 614.243838][ T8666] should_failslab+0xa8/0x100 [ 614.243860][ T8666] __kmalloc_cache_noprof+0x88/0x660 [ 614.243889][ T8666] ? __hw_addr_create+0x60/0x250 [ 614.243912][ T8666] __hw_addr_create+0x60/0x250 [ 614.243935][ T8666] __hw_addr_add_ex+0x1c2/0x520 [ 614.243959][ T8666] dev_uc_add+0xa1/0x120 [ 614.243982][ T8666] vlan_dev_set_mac_address+0x1af/0x420 [ 614.244013][ T8666] netif_set_mac_address+0x317/0x4e0 [ 614.244049][ T8666] ? __pfx_netif_set_mac_address+0x10/0x10 [ 614.244080][ T8666] ? srso_alias_return_thunk+0x5/0xfbef5 [ 614.244102][ T8666] ? down_write+0x16d/0x200 [ 614.244137][ T8666] dev_set_mac_address_user+0x137/0x270 [ 614.244171][ T8666] dev_ioctl+0x7b4/0x1150 [ 614.244205][ T8666] sock_do_ioctl+0x23e/0x320 [ 614.244231][ T8666] ? __pfx_sock_do_ioctl+0x10/0x10 [ 614.244251][ T8666] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 614.244291][ T8666] sock_ioctl+0x5c6/0x7f0 [ 614.244315][ T8666] ? __pfx_sock_ioctl+0x10/0x10 [ 614.244337][ T8666] ? __fget_files+0x2a/0x420 [ 614.244361][ T8666] ? __fget_files+0x3a0/0x420 [ 614.244383][ T8666] ? __fget_files+0x2a/0x420 [ 614.244409][ T8666] ? srso_alias_return_thunk+0x5/0xfbef5 [ 614.244431][ T8666] ? srso_alias_return_thunk+0x5/0xfbef5 [ 614.244454][ T8666] ? __pfx_sock_ioctl+0x10/0x10 [ 614.244475][ T8666] __se_sys_ioctl+0xfc/0x170 [ 614.244505][ T8666] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 614.244525][ T8666] do_syscall_64+0x174/0x580 [ 614.244544][ T8666] ? trace_irq_disable+0x3b/0x140 [ 614.244577][ T8666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 614.244597][ T8666] RIP: 0033:0x7f6fc1b9ce59 [ 614.244614][ T8666] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 614.244629][ T8666] RSP: 002b:00007f6fc29a0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 614.244647][ T8666] RAX: ffffffffffffffda RBX: 00007f6fc1e15fa0 RCX: 00007f6fc1b9ce59 [ 614.244661][ T8666] RDX: 0000200000000000 RSI: 0000000000008924 RDI: 0000000000000004 [ 614.244673][ T8666] RBP: 00007f6fc29a0090 R08: 0000000000000000 R09: 0000000000000000 [ 614.244684][ T8666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 614.244695][ T8666] R13: 00007f6fc1e16038 R14: 00007f6fc1e15fa0 R15: 00007ffd4d819748 [ 614.244724][ T8666] [ 614.874068][ T8673] loop5: detected capacity change from 0 to 32768 [ 614.901907][ T8673] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.603 (8673) [ 614.964960][ T8674] FAULT_INJECTION: forcing a failure. [ 614.964960][ T8674] name failslab, interval 1, probability 0, space 0, times 0 [ 614.994395][ T8673] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 615.005945][ T8673] BTRFS info (device loop5): using sha256 checksum algorithm [ 615.015063][ T8674] CPU: 1 UID: 0 PID: 8674 Comm: syz.7.604 Tainted: G L syzkaller #0 PREEMPT(full) [ 615.015100][ T8674] Tainted: [L]=SOFTLOCKUP [ 615.015109][ T8674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 615.015124][ T8674] Call Trace: [ 615.015134][ T8674] [ 615.015144][ T8674] dump_stack_lvl+0xe8/0x150 [ 615.015176][ T8674] should_fail_ex+0x412/0x560 [ 615.015207][ T8674] should_failslab+0xa8/0x100 [ 615.015235][ T8674] __kmalloc_noprof+0xe8/0x760 [ 615.015271][ T8674] ? tomoyo_encode2+0x27f/0x530 [ 615.015304][ T8674] ? srso_alias_return_thunk+0x5/0xfbef5 [ 615.015334][ T8674] tomoyo_encode2+0x27f/0x530 [ 615.015371][ T8674] tomoyo_check_unix_address+0x3d9/0x7f0 [ 615.015409][ T8674] ? tomoyo_check_unix_address+0x167/0x7f0 [ 615.015438][ T8674] ? __pfx_tomoyo_check_unix_address+0x10/0x10 [ 615.015478][ T8674] ? srso_alias_return_thunk+0x5/0xfbef5 [ 615.015502][ T8674] ? srso_alias_return_thunk+0x5/0xfbef5 [ 615.015531][ T8674] tomoyo_socket_connect_permission+0x1b1/0x290 [ 615.015571][ T8674] security_socket_connect+0xc0/0x280 [ 615.015594][ T8674] __sys_connect+0x24a/0x450 [ 615.015626][ T8674] ? __pfx___sys_connect+0x10/0x10 [ 615.015664][ T8674] ? __pfx_ksys_write+0x10/0x10 [ 615.015697][ T8674] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.015717][ T8674] __x64_sys_connect+0x7a/0x90 [ 615.015746][ T8674] do_syscall_64+0x174/0x580 [ 615.015765][ T8674] ? trace_irq_disable+0x3b/0x140 [ 615.015805][ T8674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.015824][ T8674] RIP: 0033:0x7ff8c079ce59 [ 615.015841][ T8674] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 615.015856][ T8674] RSP: 002b:00007ff8c15ef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 615.015874][ T8674] RAX: ffffffffffffffda RBX: 00007ff8c0a15fa0 RCX: 00007ff8c079ce59 [ 615.015888][ T8674] RDX: 000000000000006e RSI: 0000200000000080 RDI: 0000000000000004 [ 615.015900][ T8674] RBP: 00007ff8c15ef090 R08: 0000000000000000 R09: 0000000000000000 [ 615.015914][ T8674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 615.015925][ T8674] R13: 00007ff8c0a16038 R14: 00007ff8c0a15fa0 R15: 00007ffc23ede248 [ 615.015954][ T8674] [ 615.700747][ T8673] BTRFS info (device loop5): enabling ssd optimizations [ 615.707765][ T8673] BTRFS info (device loop5): turning on sync discard [ 615.714482][ T8673] BTRFS info (device loop5): enabling free space tree [ 615.751236][ T8698] syz_tun: entered allmulticast mode [ 615.763528][ T30] audit: type=1800 audit(1780426323.445:24): pid=8673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.603" name="file1" dev="loop5" ino=260 res=0 errno=0 [ 615.764301][ T8673] FAULT_INJECTION: forcing a failure. [ 615.764301][ T8673] name failslab, interval 1, probability 0, space 0, times 0 [ 615.796572][ T8673] CPU: 1 UID: 0 PID: 8673 Comm: syz.5.603 Tainted: G L syzkaller #0 PREEMPT(full) [ 615.796607][ T8673] Tainted: [L]=SOFTLOCKUP [ 615.796615][ T8673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 615.796630][ T8673] Call Trace: [ 615.796639][ T8673] [ 615.796648][ T8673] dump_stack_lvl+0xe8/0x150 [ 615.796681][ T8673] should_fail_ex+0x412/0x560 [ 615.796715][ T8673] should_failslab+0xa8/0x100 [ 615.796742][ T8673] __kmalloc_noprof+0xe8/0x760 [ 615.796787][ T8673] ? alloc_pipe_info+0x1fc/0x4d0 [ 615.796826][ T8673] ? __kmalloc_cache_noprof+0x15b/0x660 [ 615.796867][ T8673] alloc_pipe_info+0x1fc/0x4d0 [ 615.796911][ T8673] splice_direct_to_actor+0xa08/0xc70 [ 615.796952][ T8673] ? kstrtouint+0x6e/0xe0 [ 615.796995][ T8673] ? __pfx_direct_splice_actor+0x10/0x10 [ 615.797031][ T8673] ? __pfx_aa_file_perm+0x10/0x10 [ 615.797061][ T8673] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 615.797107][ T8673] do_splice_direct+0x195/0x290 [ 615.797145][ T8673] ? __pfx_do_splice_direct+0x10/0x10 [ 615.797179][ T8673] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 615.797223][ T8673] ? srso_alias_return_thunk+0x5/0xfbef5 [ 615.797253][ T8673] ? rw_verify_area+0x255/0x4d0 [ 615.797287][ T8673] ? srso_alias_return_thunk+0x5/0xfbef5 [ 615.797322][ T8673] do_sendfile+0x535/0x7d0 [ 615.797351][ T8673] ? __pfx_vfs_write+0x10/0x10 [ 615.797394][ T8673] ? __pfx_do_sendfile+0x10/0x10 [ 615.797424][ T8673] ? __fget_files+0x3a0/0x420 [ 615.797468][ T8673] __se_sys_sendfile64+0x144/0x1a0 [ 615.797499][ T8673] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 615.797534][ T8673] ? srso_alias_return_thunk+0x5/0xfbef5 [ 615.797564][ T8673] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.797591][ T8673] do_syscall_64+0x174/0x580 [ 615.797616][ T8673] ? trace_irq_disable+0x3b/0x140 [ 615.797663][ T8673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.797688][ T8673] RIP: 0033:0x7fabb339ce59 [ 615.797710][ T8673] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 615.797730][ T8673] RSP: 002b:00007fabb4317028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 615.797756][ T8673] RAX: ffffffffffffffda RBX: 00007fabb3615fa0 RCX: 00007fabb339ce59 [ 615.797774][ T8673] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 615.797795][ T8673] RBP: 00007fabb4317090 R08: 0000000000000000 R09: 0000000000000000 [ 615.797811][ T8673] R10: 0000000000007f03 R11: 0000000000000246 R12: 0000000000000001 [ 615.797826][ T8673] R13: 00007fabb3616038 R14: 00007fabb3615fa0 R15: 00007ffd5b4ca648 [ 615.797864][ T8673] [ 616.081670][ T8696] loop1: detected capacity change from 0 to 1024 [ 617.247381][ T5674] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 619.213519][ T8725] overlay: ./file0 is not a directory [ 621.327394][ T8727] loop6: detected capacity change from 0 to 64 [ 621.350421][ T8727] minix: Unknown parameter '' [ 621.407132][ T8709] bond0: entered promiscuous mode [ 621.432196][ T8709] bond_slave_0: entered promiscuous mode [ 621.447182][ T8709] bond_slave_1: entered promiscuous mode [ 621.460397][ T8709] batadv0: entered promiscuous mode [ 621.466881][ T8709] debugfs: 'hsr1' already exists in 'hsr' [ 621.472974][ T8709] Cannot create hsr debugfs directory [ 622.081134][ T8735] syz_tun: entered allmulticast mode [ 622.225906][ T8735] bond0: entered promiscuous mode [ 622.237669][ T8735] bond_slave_0: entered promiscuous mode [ 622.272304][ T8735] bond_slave_1: entered promiscuous mode [ 622.285196][ T8741] loop7: detected capacity change from 0 to 4096 [ 622.308436][ T8735] bridge0: entered promiscuous mode [ 622.357479][ T8741] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 623.571398][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.643525][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 623.753680][ T7812] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 624.028369][ T8765] ================================================================== [ 624.036484][ T8765] BUG: KASAN: slab-use-after-free in dvb_device_open+0xc4/0x350 [ 624.044152][ T8765] Read of size 8 at addr ffff88802c1d7018 by task syz.5.626/8765 [ 624.051882][ T8765] [ 624.054219][ T8765] CPU: 0 UID: 0 PID: 8765 Comm: syz.5.626 Tainted: G L syzkaller #0 PREEMPT(full) [ 624.054254][ T8765] Tainted: [L]=SOFTLOCKUP [ 624.054264][ T8765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 624.054279][ T8765] Call Trace: [ 624.054288][ T8765] [ 624.054299][ T8765] dump_stack_lvl+0xe8/0x150 [ 624.054329][ T8765] print_address_description+0x55/0x1e0 [ 624.054356][ T8765] ? dvb_device_open+0xc4/0x350 [ 624.054391][ T8765] print_report+0x58/0x70 [ 624.054413][ T8765] kasan_report+0x117/0x150 [ 624.054436][ T8765] ? srso_alias_return_thunk+0x5/0xfbef5 [ 624.054468][ T8765] ? dvb_device_open+0xc4/0x350 [ 624.054509][ T8765] dvb_device_open+0xc4/0x350 [ 624.054543][ T8765] ? do_raw_spin_unlock+0xf5/0x210 [ 624.054583][ T8765] chrdev_open+0x4cd/0x5e0 [ 624.054610][ T8765] ? __pfx_chrdev_open+0x10/0x10 [ 624.054635][ T8765] ? srso_alias_return_thunk+0x5/0xfbef5 [ 624.054665][ T8765] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 624.054707][ T8765] ? __pfx_chrdev_open+0x10/0x10 [ 624.054731][ T8765] do_dentry_open+0x822/0x13a0 [ 624.054768][ T8765] vfs_open+0x3b/0x340 [ 624.054803][ T8765] ? path_openat+0x2df0/0x3860 [ 624.054842][ T8765] path_openat+0x2e08/0x3860 [ 624.054887][ T8765] ? srso_alias_return_thunk+0x5/0xfbef5 [ 624.054917][ T8765] ? __pfx_stack_trace_save+0x10/0x10 [ 624.054959][ T8765] ? stack_depot_save_flags+0x33/0x810 [ 624.054994][ T8765] ? __pfx_path_openat+0x10/0x10 [ 624.055029][ T8765] ? __x64_sys_openat+0x138/0x170 [ 624.055062][ T8765] ? srso_alias_return_thunk+0x5/0xfbef5 [ 624.055092][ T8765] ? __lock_acquire+0x6b5/0x2cf0 [ 624.055125][ T8765] do_file_open+0x23e/0x4a0 [ 624.055165][ T8765] ? __pfx_do_file_open+0x10/0x10 [ 624.055216][ T8765] ? _raw_spin_unlock+0x28/0x50 [ 624.055253][ T8765] ? srso_alias_return_thunk+0x5/0xfbef5 [ 624.055282][ T8765] ? alloc_fd+0x64b/0x6c0 [ 624.055318][ T8765] do_sys_openat2+0x113/0x200 [ 624.055351][ T8765] ? __pfx_do_sys_openat2+0x10/0x10 [ 624.055382][ T8765] ? exc_page_fault+0x6a/0xc0 [ 624.055408][ T8765] ? srso_alias_return_thunk+0x5/0xfbef5 [ 624.055437][ T8765] ? do_user_addr_fault+0xc6f/0x1340 [ 624.055465][ T8765] __x64_sys_openat+0x138/0x170 [ 624.055498][ T8765] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.055524][ T8765] do_syscall_64+0x174/0x580 [ 624.055549][ T8765] ? trace_irq_disable+0x3b/0x140 [ 624.055591][ T8765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.055616][ T8765] RIP: 0033:0x7fabb335d68e [ 624.055637][ T8765] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 624.055659][ T8765] RSP: 002b:00007fabb4316b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 624.055684][ T8765] RAX: ffffffffffffffda RBX: 00007fabb43176c0 RCX: 00007fabb335d68e [ 624.055703][ T8765] RDX: 0000000000040002 RSI: 00007fabb4316c00 RDI: ffffffffffffff9c [ 624.055722][ T8765] RBP: 00007fabb4316c00 R08: 0000000000000000 R09: 0000000000000000 [ 624.055738][ T8765] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 624.055754][ T8765] R13: 00007fabb3616038 R14: 00007fabb3615fa0 R15: 00007ffd5b4ca648 [ 624.055791][ T8765] [ 624.055799][ T8765] [ 624.364744][ T8765] Allocated by task 1: [ 624.368802][ T8765] kasan_save_track+0x3e/0x80 [ 624.373485][ T8765] __kasan_kmalloc+0x93/0xb0 [ 624.378087][ T8765] __kmalloc_cache_noprof+0x31c/0x660 [ 624.383460][ T8765] dvb_register_device+0x2fd/0x21e0 [ 624.388655][ T8765] dvb_register_frontend+0x61b/0x920 [ 624.393934][ T8765] vidtv_bridge_probe+0x9aa/0xf80 [ 624.398954][ T8765] platform_probe+0xf9/0x190 [ 624.403529][ T8765] really_probe+0x267/0xaf0 [ 624.408024][ T8765] __driver_probe_device+0x1ef/0x380 [ 624.413295][ T8765] driver_probe_device+0x4f/0x240 [ 624.418312][ T8765] __driver_attach+0x34c/0x640 [ 624.423065][ T8765] bus_for_each_dev+0x23b/0x2c0 [ 624.427912][ T8765] bus_add_driver+0x345/0x670 [ 624.432583][ T8765] driver_register+0x23a/0x320 [ 624.437339][ T8765] vidtv_bridge_init+0x28/0x50 [ 624.442100][ T8765] do_one_initcall+0x250/0x870 [ 624.446855][ T8765] do_initcall_level+0x104/0x190 [ 624.451789][ T8765] do_initcalls+0x59/0xa0 [ 624.456110][ T8765] kernel_init_freeable+0x2a6/0x3e0 [ 624.461300][ T8765] kernel_init+0x1d/0x1d0 [ 624.465628][ T8765] ret_from_fork+0x514/0xb70 [ 624.470208][ T8765] ret_from_fork_asm+0x1a/0x30 [ 624.474967][ T8765] [ 624.477270][ T8765] Freed by task 8436: [ 624.481230][ T8765] kasan_save_track+0x3e/0x80 [ 624.485908][ T8765] kasan_save_free_info+0x46/0x50 [ 624.490923][ T8765] __kasan_slab_free+0x5c/0x80 [ 624.495685][ T8765] kfree+0x1c5/0x640 [ 624.499570][ T8765] dvb_device_open+0x2cd/0x350 [ 624.504331][ T8765] chrdev_open+0x4cd/0x5e0 [ 624.508735][ T8765] do_dentry_open+0x822/0x13a0 [ 624.513493][ T8765] vfs_open+0x3b/0x340 [ 624.517551][ T8765] path_openat+0x2e08/0x3860 [ 624.522137][ T8765] do_file_open+0x23e/0x4a0 [ 624.526637][ T8765] do_sys_openat2+0x113/0x200 [ 624.531305][ T8765] __x64_sys_openat+0x138/0x170 [ 624.536167][ T8765] do_syscall_64+0x174/0x580 [ 624.540745][ T8765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.546630][ T8765] [ 624.548935][ T8765] The buggy address belongs to the object at ffff88802c1d7000 [ 624.548935][ T8765] which belongs to the cache kmalloc-256 of size 256 [ 624.562976][ T8765] The buggy address is located 24 bytes inside of [ 624.562976][ T8765] freed 256-byte region [ffff88802c1d7000, ffff88802c1d7100) [ 624.576683][ T8765] [ 624.578995][ T8765] The buggy address belongs to the physical page: [ 624.585388][ T8765] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802c1d7000 pfn:0x2c1d6 [ 624.595439][ T8765] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 624.603924][ T8765] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 624.612410][ T8765] page_type: f5(slab) [ 624.616382][ T8765] raw: 00fff00000000240 ffff88813fe17b40 ffffea0000c9d210 ffffea0001e72710 [ 624.624951][ T8765] raw: ffff88802c1d7000 000000080010000f 00000000f5000000 0000000000000000 [ 624.633526][ T8765] head: 00fff00000000240 ffff88813fe17b40 ffffea0000c9d210 ffffea0001e72710 [ 624.642186][ T8765] head: ffff88802c1d7000 000000080010000f 00000000f5000000 0000000000000000 [ 624.650849][ T8765] head: 00fff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff [ 624.659508][ T8765] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 624.668163][ T8765] page dumped because: kasan: bad access detected [ 624.674574][ T8765] page_owner tracks the page as allocated [ 624.680275][ T8765] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 10921506546, free_ts 0 [ 624.699985][ T8765] post_alloc_hook+0x22d/0x280 [ 624.704761][ T8765] get_page_from_freelist+0x2593/0x2610 [ 624.710319][ T8765] __alloc_frozen_pages_noprof+0x18d/0x380 [ 624.716130][ T8765] allocate_slab+0x77/0x660 [ 624.720629][ T8765] refill_objects+0x339/0x3d0 [ 624.725300][ T8765] __pcs_replace_empty_main+0x321/0x720 [ 624.730840][ T8765] __kmalloc_cache_noprof+0x392/0x660 [ 624.736212][ T8765] bus_add_driver+0x162/0x670 [ 624.740890][ T8765] driver_register+0x23a/0x320 [ 624.745653][ T8765] usb_register_driver+0x1e4/0x390 [ 624.750759][ T8765] do_one_initcall+0x250/0x870 [ 624.755520][ T8765] do_initcall_level+0x104/0x190 [ 624.760453][ T8765] do_initcalls+0x59/0xa0 [ 624.765560][ T8765] kernel_init_freeable+0x2a6/0x3e0 [ 624.770764][ T8765] kernel_init+0x1d/0x1d0 [ 624.775107][ T8765] ret_from_fork+0x514/0xb70 [ 624.779687][ T8765] page_owner free stack trace missing [ 624.785036][ T8765] [ 624.787342][ T8765] Memory state around the buggy address: [ 624.792954][ T8765] ffff88802c1d6f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 624.801005][ T8765] ffff88802c1d6f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 624.809051][ T8765] >ffff88802c1d7000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 624.817098][ T8765] ^ [ 624.821935][ T8765] ffff88802c1d7080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 624.829986][ T8765] ffff88802c1d7100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 624.838031][ T8765] ================================================================== [ 625.540591][ T8765] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 625.547843][ T8765] CPU: 0 UID: 0 PID: 8765 Comm: syz.5.626 Tainted: G L syzkaller #0 PREEMPT(full) [ 625.558615][ T8765] Tainted: [L]=SOFTLOCKUP [ 625.562928][ T8765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 625.572977][ T8765] Call Trace: [ 625.576251][ T8765] [ 625.579177][ T8765] vpanic+0x56c/0xa60 [ 625.583168][ T8765] ? __pfx_vpanic+0x10/0x10 [ 625.587679][ T8765] ? __pfx___schedule+0x10/0x10 [ 625.592554][ T8765] panic+0xc5/0xd0 [ 625.596277][ T8765] ? __pfx_panic+0x10/0x10 [ 625.600698][ T8765] ? preempt_schedule_thunk+0x16/0x30 [ 625.606086][ T8765] ? srso_alias_return_thunk+0x5/0xfbef5 [ 625.611731][ T8765] ? dvb_device_open+0xc4/0x350 [ 625.616600][ T8765] check_panic_on_warn+0x89/0xb0 [ 625.621548][ T8765] ? dvb_device_open+0xc4/0x350 [ 625.626410][ T8765] end_report+0x73/0x170 [ 625.630669][ T8765] ? dvb_device_open+0xc4/0x350 [ 625.635532][ T8765] kasan_report+0x128/0x150 [ 625.640036][ T8765] ? srso_alias_return_thunk+0x5/0xfbef5 [ 625.645675][ T8765] ? dvb_device_open+0xc4/0x350 [ 625.650549][ T8765] dvb_device_open+0xc4/0x350 [ 625.655239][ T8765] ? do_raw_spin_unlock+0xf5/0x210 [ 625.660365][ T8765] chrdev_open+0x4cd/0x5e0 [ 625.664778][ T8765] ? __pfx_chrdev_open+0x10/0x10 [ 625.669705][ T8765] ? srso_alias_return_thunk+0x5/0xfbef5 [ 625.675331][ T8765] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 625.681661][ T8765] ? __pfx_chrdev_open+0x10/0x10 [ 625.686591][ T8765] do_dentry_open+0x822/0x13a0 [ 625.691382][ T8765] vfs_open+0x3b/0x340 [ 625.695446][ T8765] ? path_openat+0x2df0/0x3860 [ 625.700210][ T8765] path_openat+0x2e08/0x3860 [ 625.704812][ T8765] ? srso_alias_return_thunk+0x5/0xfbef5 [ 625.710439][ T8765] ? __pfx_stack_trace_save+0x10/0x10 [ 625.715814][ T8765] ? stack_depot_save_flags+0x33/0x810 [ 625.721268][ T8765] ? __pfx_path_openat+0x10/0x10 [ 625.726204][ T8765] ? __x64_sys_openat+0x138/0x170 [ 625.731223][ T8765] ? srso_alias_return_thunk+0x5/0xfbef5 [ 625.736847][ T8765] ? __lock_acquire+0x6b5/0x2cf0 [ 625.741790][ T8765] do_file_open+0x23e/0x4a0 [ 625.746297][ T8765] ? __pfx_do_file_open+0x10/0x10 [ 625.751346][ T8765] ? _raw_spin_unlock+0x28/0x50 [ 625.756199][ T8765] ? srso_alias_return_thunk+0x5/0xfbef5 [ 625.761821][ T8765] ? alloc_fd+0x64b/0x6c0 [ 625.766151][ T8765] do_sys_openat2+0x113/0x200 [ 625.770821][ T8765] ? __pfx_do_sys_openat2+0x10/0x10 [ 625.776013][ T8765] ? exc_page_fault+0x6a/0xc0 [ 625.780678][ T8765] ? srso_alias_return_thunk+0x5/0xfbef5 [ 625.786302][ T8765] ? do_user_addr_fault+0xc6f/0x1340 [ 625.791580][ T8765] __x64_sys_openat+0x138/0x170 [ 625.796429][ T8765] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.802487][ T8765] do_syscall_64+0x174/0x580 [ 625.807068][ T8765] ? trace_irq_disable+0x3b/0x140 [ 625.812098][ T8765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.817983][ T8765] RIP: 0033:0x7fabb335d68e [ 625.822388][ T8765] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 625.841985][ T8765] RSP: 002b:00007fabb4316b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 625.850392][ T8765] RAX: ffffffffffffffda RBX: 00007fabb43176c0 RCX: 00007fabb335d68e [ 625.858351][ T8765] RDX: 0000000000040002 RSI: 00007fabb4316c00 RDI: ffffffffffffff9c [ 625.866310][ T8765] RBP: 00007fabb4316c00 R08: 0000000000000000 R09: 0000000000000000 [ 625.874268][ T8765] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 625.882229][ T8765] R13: 00007fabb3616038 R14: 00007fabb3615fa0 R15: 00007ffd5b4ca648 [ 625.890200][ T8765] [ 625.893457][ T8765] Kernel Offset: disabled [ 625.897768][ T8765] Rebooting in 86400 seconds..