last executing test programs: 3m3.635650439s ago: executing program 4 (id=315): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1e, 0x0, &(0x7f0000000440), 0x0, 0x4df, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) semop(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x1008a, &(0x7f00000000c0)={[{@nomblk_io_submit}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@mblk_io_submit}, {@grpjquota, 0x22}, {@errors_continue}, {@errors_remount}, {@jqfmt_vfsv1}]}, 0xfe, 0x455, &(0x7f0000000fc0)="$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") ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064d1, &(0x7f0000000040)={0x1, 0x0, &(0x7f00000000c0)=[0x0]}) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, &(0x7f0000000140)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0x1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)='%+9llu \x00'}, 0x20) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r7, &(0x7f00000006c0)=[{&(0x7f0000000140)=""/197, 0xc5}], 0x1, 0x70, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000500)={0xe, 0x0}, 0x8) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x81}}]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x1000, &(0x7f0000000c80)=""/4096, 0x40f00, 0x61}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x9, 0x1a, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0xdd0a, 0x0, 0x0, 0x0, 0x5}, [@map_idx_val={0x18, 0x2, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, @generic={0x7, 0xf, 0x7, 0xb608, 0x2}, @map_val={0x18, 0x3, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa5}}, @ldst={0x3, 0x2, 0x5, 0x8, 0xb, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0xc8}, @map_fd={0x18, 0xb, 0x1, 0x0, r6}]}, &(0x7f0000000440)='syzkaller\x00', 0x4, 0x25, &(0x7f00000004c0)=""/37, 0x41100, 0x60, '\x00', 0x0, @fallback=0x1, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r8, r4, 0x6, &(0x7f0000000540)=[r3, r9, r1], &(0x7f0000000580)=[{0x3, 0x1, 0x3}, {0x0, 0x1, 0x4, 0x5}, {0x2, 0x3, 0x7, 0x4}, {0xfffffffc, 0x2, 0x8, 0xb}, {0x13, 0x1, 0xa, 0xc}, {0x4, 0x1, 0x5, 0x9}], 0x10, 0xffffffa9}, 0x94) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100000000000000000010"], 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x804818, &(0x7f0000000100)={[{@nojoliet}, {@check_strict}, {@hide}, {@iocharset={'iocharset', 0x3d, 'macgreek'}}, {}, {@check_relaxed}, {@check_relaxed}, {@nocompress}]}, 0x2, 0x553, &(0x7f0000000b00)="$eJzs3dtuE0kawPGvQ7JYXim7WlYIRQGKsCsFKZi2DUYWV73tslNgd1vdbZRcoYg4KMKBFWGlTW7Y3LAz0sxDMJfzEPNGaB5hRn1wjj4AOU70/1lQ5e5y1deO1Z8qcVcLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQy63ZdtGSpvE6S2o4txb4rb2n2auPbJB7B4oR44pY8T/J5eRGuunG3/d2X4//m5PZ9Nms5OIiJ9t/vv7XJ9cmJ/qvHxHwV/npG3va3Np+vdLrdd+dVCAX0M2rw/c1tGdC37SchlYm9FW1UrEfLNZDVTdNHS6HkW4pN9BO5Adq3r2nitVqWenCst/xGjWnqfsbH98v2XZFPS20tROEvvfgaSF0F02zabxG0ibeHbd5HH8Qn5lIRdppKbW23uuWxx1A3Kj4JY1K4xqV7FKpWCyVipVH1UePbXvyyAb7EDnS4uQ+tPhjOsGzN3A8E1n+l6YY8aQjS6IGPlypSSC+tIbsz/Tz/z8f6JHj7s///Sx/Y2/3jCT5/1b67Naw/D8klrN7bMqWbMtrWZGe9KQr7849orN9NESLJ0ZC8cVIS5xki8q2KKlKRSpiywtZlPpU/EOsi5GmaAllWUKJRCefKFcC0eJIJL4EomReXLknSopSlaqURYmWgiyLLx3xpCE1cZJe1mQ9ed/LoqxhMe42Kg49jHz/c9eV0oijJf/j+E7y9A0cy2/9/A8AAAAAAC4tK/ntezz/n5KbSa1umto+77AAAAAAAMAJSv7yPxsXybezborF/B8AAAAAgMvGSq6xs0QkL7fT2ppYyeVS/BIAAAAAAIBLIvn7/624SNZAuS3W7nIpzP8BAAAAALgkvhu7xn7Yvmr98qsEwZS10176h7WRrM3rbFxJX3flcI9RfcaazjpJikpaTE66etbKpY12F8H8nBVr4+Kw9gJwdgP439cEcG1SfpA7aZs7q2m5mu35SzpKvm6auuD6zSdFcZzpiUgvRf95s/5fSQ7/e681beVkvdctvHzbW01i2Yl72dnIFlA8so7iiFjeJ+stJNdcDDziqeRCjGzcvCVr672u3V66mvXsbEyklYmDI36YHjHmR5lLW81lK97m+3vSMXPxmMXCsKPPoige88g/yt20zd35u2kxIIrSuChK+6MY/F4cP4ryuCjKx4wCAM7L2pgsZMmRvPsNZ7lvy+7yldn9o8ynbeZnkhPr5MyAM7o97oxuHzO7/XzkHkjDcmw87o+Hsuqn+AWfho4bNktW/BZeeb/xb7m+ubV9f31j5VX3VfdNqVSu2A9t+1FJppLDyApyDwBggP332LEG5v+xd+GxHmaz6p3Ds+os4/1t9ysFBXkpb6Unq7KQXG2QfONgYK/5fV9DWBgza80naTK9w8vCiFndn5KrHPr9lka2PRhD+Sx+FAAAnJm5MXn4S/L/wph598FcPnp2nN93tzYAAHA6dPDZykf/t4LAtF8Uq9WiEy1qFfjuMxWYWkMr40U6cBcdr6FVO/Aj3/WbceW5qelQhZ122w8iVfcD1fZDs5QsH6iyW7+HuuV4kXHDdlM7oVau70WOG6maCV3V7vyracJFHSQvDtvaNXXjOpHxPRX6ncDVBaVCrfc1NDXtRaZu4qqn2oFpOUFOPfebnZZWNR26gWlHftphfyzj1f2glXRbOO83GwCAC2Jza/v1Sq/XfXeKlYED5878UAEAQGZMlgYAAAAAAAAAAAAAAAAAAAAAABfAWVz/R+WSV/pLQV+UeKicQGXsqePDqZ+cAJyq3wMAAP//5sZO5Q==") open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000180)=ANY=[@ANYBLOB="20000000020000001d"], 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r7, &(0x7f00000007c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x44000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x44, r11, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4400c}, 0x0) 3m2.22360548s ago: executing program 4 (id=319): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1e7d, 0x2dbe, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x5, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x9, 0x1, 0x1, {0x22, 0x2c}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x7f, 0x7, 0xff}}}}}]}}]}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, '/'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x64}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) getdents64(0xffffffffffffffff, &(0x7f0000001f40)=""/4123, 0x101b) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_CHANNEL(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040050}, 0x8000) mkdir(0x0, 0x8e) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) waitid(0x2, 0xffffffffffffffff, 0x0, 0x8, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x4, 0x88}, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1f, &(0x7f0000000400)=""/4096, &(0x7f0000001400)=0x1000) 2m58.801196134s ago: executing program 4 (id=326): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x92c0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x8, 0x2, 0x4}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) shutdown(0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x3d6d9000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfff}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) syz_fuse_handle_req(r4, &(0x7f00000083c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b275e6017bab5e7e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f40000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ec000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002e8f76650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_pgetevents(0x0, 0xa5, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100"], 0x128}, 0x0) truncate(&(0x7f0000000040)='./file1\x00', 0x10) r6 = add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000040)='asymmetric\x00', &(0x7f0000000080)=@chain) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405668, &(0x7f0000000100)={0x3, 0x21, 0x2, 0x4000}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) 2m57.010423152s ago: executing program 4 (id=329): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x2, 0x20002f7}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) umount2(&(0x7f0000000300)='./file0\x00', 0x4) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) getrlimit(0xe, &(0x7f00000001c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file1\x00', 0x2800000, &(0x7f0000000380)=ANY=[], 0x2, 0x5505, &(0x7f000000cf00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183b41, 0x12b) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000340)=0xfffffff9) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000240)=0x0) rt_tgsigqueueinfo(0x0, r1, 0x30, &(0x7f0000000280)={0x3b, 0x2f1c, 0x7}) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x9, 0x800800}) mknod(&(0x7f000001f480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000, 0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) 2m55.342805203s ago: executing program 4 (id=333): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x6c, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e1d, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x0, @private0, 0xe}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x6c}}, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$sock_timeval(r2, 0x1, 0x42, &(0x7f00000000c0), &(0x7f0000000140)=0x10) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r4 = syz_open_dev$hidraw(&(0x7f0000000000), 0x5, 0x800) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r4, 0x5000943a, &(0x7f0000000440)={{r3}, r5, 0x10, @unused=[0x400, 0x2, 0x1, 0xfffffffffffffc01], @name="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"}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) fchownat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0xffffffffffffffff, 0xee01, 0x1000) 2m51.890963372s ago: executing program 4 (id=340): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x20}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_MSR_FEATURE_INDEX_LIST(r0, 0x4018aee3, &(0x7f0000000080)) r1 = socket(0x15, 0x5, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x2710}, 0x10) recvmsg(r1, &(0x7f0000003780)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000300)=0x7) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r3, 0x2) syz_emit_ethernet(0x56, &(0x7f0000000040)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x5, 0x4}]}}}}}}}}, 0x0) syz_emit_ethernet(0x96, &(0x7f0000000200)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x60, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x18, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x2, 0x98ca}, @fastopen={0x22, 0xe, "0800000000000000709626b6"}, @timestamp={0x8, 0xa, 0x4, 0xad}, @md5sig={0x13, 0x12, "8098cf093cc9cd7b8ec814f9bcfdfea9"}, @sack={0x5, 0x16, [0x1, 0xfffffffe, 0x3, 0x6, 0x1]}]}}}}}}}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x0, 0x122, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x801, 0xfffffffd, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x4}, @IFLA_PROTO_DOWN={0x5}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r1, 0xc0109428, &(0x7f00000000c0)={0x3, 0xffffffffffffffff}) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000005200030d26bd7000fbdbdf251c08000038e43d4132fa7e8ba107f6bcc9c875ce3a66d70456ff43403e61"], 0x14}, 0x1, 0x0, 0x0, 0x8000800}, 0x8014) 2m51.247848168s ago: executing program 32 (id=340): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x20}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_MSR_FEATURE_INDEX_LIST(r0, 0x4018aee3, &(0x7f0000000080)) r1 = socket(0x15, 0x5, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x2710}, 0x10) recvmsg(r1, &(0x7f0000003780)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000300)=0x7) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r3, 0x2) syz_emit_ethernet(0x56, &(0x7f0000000040)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x5, 0x4}]}}}}}}}}, 0x0) syz_emit_ethernet(0x96, &(0x7f0000000200)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x60, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x18, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x2, 0x98ca}, @fastopen={0x22, 0xe, "0800000000000000709626b6"}, @timestamp={0x8, 0xa, 0x4, 0xad}, @md5sig={0x13, 0x12, "8098cf093cc9cd7b8ec814f9bcfdfea9"}, @sack={0x5, 0x16, [0x1, 0xfffffffe, 0x3, 0x6, 0x1]}]}}}}}}}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x0, 0x122, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x801, 0xfffffffd, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x4}, @IFLA_PROTO_DOWN={0x5}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r1, 0xc0109428, &(0x7f00000000c0)={0x3, 0xffffffffffffffff}) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000005200030d26bd7000fbdbdf251c08000038e43d4132fa7e8ba107f6bcc9c875ce3a66d70456ff43403e61"], 0x14}, 0x1, 0x0, 0x0, 0x8000800}, 0x8014) 34.704451483s ago: executing program 2 (id=591): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000380)={0x1, 0x3, 0x1000, 0x72, &(0x7f0000000240)="2e2f425233f94057b3e9c3bc35b8eb73bcd3a3a21cc124387dc510690a2f021833e44f86013d47bdbf00c104488c8ba0486141e4912079143f07373c47b5b6f5f6ff04ee4a9091885594c186f5eff035c14b59b4b8f25e37394cd5b146b222764715bd0fee930f4620942392e74395c20608", 0x3b, 0x0, &(0x7f00000002c0)="c6bd57f6ca13a9879ee2a0cbca4f36de0574e0389cd833af0615e9bca0b010e3f7c0168773a2a41980dc937cce2a2c6cb537d5c11aa4af8d204763"}) listen(r0, 0x0) syz_emit_ethernet(0x9a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa00001434238286dd600a843500640601000000000000ffe8000000000000002838f7ac6488b07b000000000000a599aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="90020000907800001e0c060008000000000000000303d72204914f080a00000004000000a9051a00000001fffffffe000000030000000600000001000100010516000078e50000000000000005fffffffe80000000000000"], 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = syz_open_dev$vivid(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000140)=@mmap={0x5, 0x9, 0x4, 0x4, 0x7c832da6, {}, {0x1, 0x0, 0x0, 0xc, 0xa, 0x39, "0000fcff"}, 0x4}) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2008}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x25}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}, @NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xcc}}, 0x20000041) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002880)={0xffffffffffffffff, 0xe0, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0], 0x0, 0x67, &(0x7f0000000540)=[{}, {}], 0x10, 0x10, &(0x7f0000000580), &(0x7f0000000640), 0x8, 0xd3, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f0000000700)=ANY=[@ANYRES32=r0, @ANYRES16=r4, @ANYRES64=r0], &(0x7f0000000340)='syzkaller\x00', 0x84, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0xdc}, 0x94) setsockopt$inet6_int(r1, 0x29, 0x4, &(0x7f0000000000)=0x10000005, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x6, 0x4, 0x2}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r9 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f00000028c0)={[0x7, 0xa, 0x5, 0x9, 0xeb72, 0x0, 0x6, 0xffffffff, 0x4, 0x2, 0x1, 0x6, 0x1, 0x60, 0x2, 0x3], 0x58000, 0x1000c0}) ioctl$IOCTL_VMCI_VERSION2(r8, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r8, 0x7a0, &(0x7f0000000180)={@hyper, 0x1}) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xcb, &(0x7f0000000400)={0x0, 0x1, 0x1, r4, 0x80000001}, 0xc) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r8, 0x7cb, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003b00)={r7, 0x0, 0x1000, 0xc2, &(0x7f0000002980)="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", &(0x7f0000003980)=""/194, 0x80000000, 0x0, 0x3d, 0x23, &(0x7f0000003a80)="eb0a3871ef5a3db621e21ad752cd61921995236e169ae5bdb2d340735f80581950217a4e61d8d39892f517a18bdec6bc004248c2cd0be19b0351488abb", &(0x7f0000003ac0)="bac1b0f8a200f21928f45b84b347d3366c6d6a94a8cf546e3abedd7284e4e5739a191d", 0x2, 0x0, 0xd}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x10, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto$inet6(r1, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1000649, &(0x7f0000000600), 0x1, 0x60d, &(0x7f0000000800)="$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") syz_fuse_handle_req(r1, &(0x7f0000000780)="70506b20e530555fc65eaa6e370c35bda9060897d5cabb86cd89488b8da3842e5a78d0d2e936448bbe5f8f9228b3bbfa4ffbbf9d416b8ef13e35a8f743ff1df3b8451ac9671acdb2f803e768d29e16628c31d376537c85c1e6a063664dabcb0fc7296dd476306ae4992b0595c06b6a340187fb735368a986ee4912329ceb2ebcd8ea6438c372dfe7808bf3253f4ac43ad96e868dbf4c8385b7dfb4d121b81ed04f90df1d892c5ac3c6243337eacfc093216d20fbf5b05060c2c5b43d75a0c91dc4658d1d5a2f69598ba764d7e06367e418a4228b88a579be3eba0392a1571338c789e528d5a8288dea1da8dfbc85581d7075812171ab8a3c144011a6b56b5495c9f3ec27551f929011b290f02571cf0a926102e14b13e37fa855089788c6ae2711bcbcaa34eece1dc038292be69ff2cd7bc71f8cdb844e8633d26a7a09738d2a20bdff2cb6dd35cefb6b63bdcb71e9ddc287b73ebef34ced2b40df08a1aec42ac10012f4197673cf14ca0c76df7c98f70bfb17081ccb364056b1bdc56adbdae9fe245ed0042246be43588cfc88565e76f5c074cb58f5224c617b3f3ff12a4fa777b88697da770b63c30222fb9adefa3eff8276eed9e9a6185a9331472c3f7aad6342346d61e4b83a6d78b2224469a22d89ebe00f4898206502b7bfe9b36d39410465a6e7990aa6a9c5532c19ca638e66508f305d6d411750d87fa8e56c500e082919d4132644f6d9892f7d5acf880eea3d16039591901e4a662078453d926c5a645dac4f5e0db02288f332a80c1ecff0e61d45e822a1f574f65bfb3720e326eccbbb758dfd2fb33071133dba47fb855c1483b49089328bde85e50f45a307e3592d2ea89c6f1353134cd5ae1615d76c6e31c998e8bfd4fd40585c56991a64aaf36fdbcd003e6057f59fe643e67825d62ae4bdc2a03b921485f4ec4fd0fba54916bb0f89dbe625a81b4f48e312dd088ddbd84a2eda145f38f10427696fa765eec2676c56ed1f43ce3f445f28f2b297747c355eb588d60a6ba6837faa4e0e72267a18ee23a382287fa1f1f5ddff3477a712b08bf266331d8f5d8979254dd1e834ddf730adb98ac705de750cb692b52de32f754a14c9c476a5b99e3d6cf3fb98a6d24fca335dc5faeaa9f1caf859a8a57785ff86e834f5d7ccefdd8c86d3ff1f57977acb461a904a2edf919e3ab8bd780096624cdde638876cc77182baf2259b904e5001aa0aaf1cc39d9016d635b6721175ba3010f3b05292fb69546c37dcc4fe7d2aee74ccd68df2be7982873c380c3126ba8f68a8858ce78ac80a604c5a0650f7e7e4ea787d71610ff158a91b41e4820c9e734d48cf3313d35b2e5184c1a1334edcea3f4850872f4dbb109e49eb405df9bd7e7473b9568424f0022593cd8d8072a1932eb9aa1cc9aeff107b33a46de81b3b8cb97c99a574e01c3135ce29831f1eca3623cdde3e805360ab75bf2ccc2634606e1e87a330e05f71a753e3d22fda4672aab775ae7cb013325060b05c9dc62fbe30da7cf6e660ed60b1b4acc6e2e77ceaa66e823f9b81924309a550378e85a727aa29b35ba89b075f3a84a708cb802aaf3660032b2f60f5f7efdd897b3486ce6554963b9bcd6729bd095b14c723cc76d367806e0161741bef9cfc7855acb4e49b6fd7966ecc02e91974baa8205ef9fce2301c65d839bd599e05c4a747e063647a9c7474ab084fe7f4009d4c23243db03a4710bd5b22475fa80944675b2d0f651874d3ff1d4ec888a911a9b8ad9633cdd58b7fb3d4104b230a34e89eb8a4b7643063336a4cbea1bd9b4fe077d8ee83a42ac568a0a141c0c329004312d7b75ff769f910372c1730847aca1b1c251b8e8da0b65b3dcb717025bf9a99057b47ac0fa527328d8019233492dc9e6f238318df1de2d35ca4758752e23db1e8236ef49707dc0ca19fcef90b0c685777386c6c7dd8d463b47b6186111416cd39d4ebfbf674c400247ad1e9ff3263e2d8222107d69999b25c36857659f4b56204b93fa8ccfdbb9b7546ce5052a77570fc98ac432eafe18a68e19cab9487542c772120f55b49bf1654ed44002fdb58f8ea43d82eb36525a623906ea6e0fdca3554be359af8e04a3ac00fee1eb1b31540212b5aab39538d40aa8c0f0c420a314ee2c4dfbded5c3d33053fbc9a132e6b8043a4089b9f491adbb1dbadce9316446a215b5bfa2217780d37d4b5141bf27b8505b30a063be2a94261bf5b64ec941814075c82154c0c152a14934f956127e42d6792fbba4da3d4e0ddaa49c822440e0f43dc0c9e536cd75e6c011856a483180cdb6c438cbfce2baaeae01f225ab7812783435fa0ccebf65b07e55cc0f8b867f9a069ae326da12c3aafa12be41b5093143f76e951c5067316a8429772d70aa86229e6a1bb93726b3eda11c760935b4cc6a78b1e546bd8d995e6117ca40bcf0cfb3442a24aa592a9c342844d39f81eb9e2731ecaa69408fc6142f1f79864e959defd788bab6d5f61b83c2184090d4db08d96cedf3e47a92b23af768ff825b7c4d96e41bddb9f1d78a30c3efd153819f213c823076d163cbd8e87ba2a95c294b3918e46990b35692735695a1c14bc2537e2e133c3701eafb5a85faf87e30dfe3ed0c29d8f4fead78bc8fe24df73a0950f83e60b4a60eab0d63e2d9b4c0663712485e83260b0c918d47800adc2dc80a4c72ae492cc3af6b9df62d60110a49c25d29e4d9ed2ed41834734267855817f92516d74e715bed895d3babac9c45f76f7ef0238c28ec86fa8d9d0ba1ec9e95515bb918597db39c3707e0cdda90bd26cfcb2c3ff13f79b2c3f3c8d1147978db8219c46cf203e98bf6993ce3e136d4d6c5c0191049525a0402eba5897c768508c1a4c5e983c2057a929fbd7ff0a72d6b083beac2642120dee293393054b2223807ae43cfa8f3619255f34cd90503f2cf09111dc56a151bbd33be3e11ff6600a938dc90850c3e191ec80a4e8455878cec8d265580d3bdefdc3abf05f356ebbcaee3f4c2095a15a7dab280b9008babff2a10b165327efa6eaa9058c8719da69df1ca8dc46e1432d82c842260c4db5c2ddcefb2accdeef98081c9ffb40213266fc39b439d9facfb31ff957ae5bc8750eb6a864bfb80070a16261ac75b0640391e6a3850732de4461e235470646d2d3756d6c6d2196fdc8249b07ee1a69edfdcb6589ed2436075eb4c487239b43726d079045201b3caf7e52ab39eba4426f69f7889d00714007eee7eba6b444639b2e3a405b357c76453af8b3c91467d6e8c66a0632fd49653844977de6c7be1aa481f02df28d76197e9cdadbabce237751de8a374ba97385fb2048e6c4d09c25d2178ec4f4ec6cc780db6f4ff14d39e00ac961861b7860fb27ed7926a6eecfa0d5c467e181b319bb62527cfa9b24cc17ce06cff70b931fdf762f5cbc266694134144702c73d0396a8d7a4e62ecf078906669ca7f0205de0bffa15fb7b8d2475af0a91674fb7785fb778a1f9ef6851fac80a7e8ae4cb8e7a6c34ad08b1338eba24cb00af558c80bf0643ef42bfb09c007f494b0f51233980629c9031a55e750f16bfda1688a5c8c71d4d94bf548ce58c2bbc8ee8722968d9024c53c2a400da55f0b33c86e808c02a90396b656948084fe816417905517c6020e2073bb2448214580f399d702e4c1487930dfc4bd2254d0613c0fa84e8fd34539bc3599453e9d618abe2bf7934c3b771a21c188147e2934ed3b681bde414a0504a1331879ec2438eb7ca01209da25863e39fa674fda82d4ecf8e8e85c65f0134a986ba159d0f15c680e33c0891d707580c8ea2ff80947b40aa24e03ba3dd9892d6e0b3ae291d8bee8df389251685eec47de9f2262a9327cc9ab7405b348981a9cd208cbc7021628673f9a89ba620b0f956a3579919fc0047db68f279d340eec3391c1bd6d21160dbdb6717ff13c0076f5c1d120ba51287223d1fadb1dc435874188f9454cf62a2037c97e97ece24f8d00c5289ed7b6be09639d1a6bf488bfe1ed6478ec9e9ac656d2f7d284fe77aec4cb32bc7ba93eb20e424c5923c5261ac8a62df467e75965c73d69cc54c86acc83c48c686f84e9810cca8247c9f7048c4365010c673c58e2c463277bc4505ab78f3ffd55fc2de1c20dfe5683d210523f5dcad6b6e02f0ef42656dc25da75d27f6eb0247317707c47423bf3457e6afca26b96c8aeae00952e1acb986643f027055a659dbdfd881b72e2884a65540bb16485d9c004451132490841318df6b9cc03fa6d19cca4ef931ae52f3637a61dd941813ef1275be026b30249ede203f8d79e9b6681f4adade6b17c7787367485d048001854788af201ac181c3a45f553a2bfad116126f0cb6ca3abc82078cb50d48812d8d0513bd6c2590bba6d937233ff78241fe28f73f55ea2bbea82ede5b7967dd88ece4d1262f92f1d0ce4b4e3805198efa2f2233d353f1b218f2cf0eeeb56faf04801b7a97d29488d4092f1c855faad90d91c58a1e7c15764287ab8d1dc175cc5b0b3b879454f264300982d85b7d19bb98daa9a740384de56626585746a4917b82be6beb8550dded20167ead8caa674bc8c5750c22d29c91b5634b345843a2c09fb98b536e9ad535d5f285c6f2e3137a3bfd428532093073500291ae95ca9e04e93d8bb2674e0f082f362f7c0c38d4fc24929211f6428dabda498f19d40d261cc0a72bcd63f86a4995caf1a87dde3bc8fdeb777db33247e76c49040f93debbd5c7f1a2ceef2e1950aeb62aa332e5be31d7d0d4ae2db96c7d7c14a9531a742ebabb6e09ffd950b6c5f725c01df22b80c729a60ee07638b6c53ef07bfd1a8b5d8d9779b386f33606053eb0ec3dcd13be4fbb6709f8e603c33ab2a5bfee55015db9bf45208f63cae17295bfbffb6488bdb27f86d2e61b7f75d698f59bcf2acd19a42e6821181cd684b1cbf2fba4ede36ccdc45945542a2d71aa8554830e2dd57e9d9be99bf8d1b10ed2c43d2f804a03cca6c065195e317acba52b3e3fb6cc26d8e027976b4586215ba5d11250490bbdb18907306f02ba3bc222b7538e161bd65f8e68af8d821b59343a5560bdbe1c4452cc76ac86f45f2b1692de4c103263842699550e3fd880e7c2cc0a75286f9c541e62a754cbe1c810cc7c4412308c70c6fdd220fa4692a088e9810c4a44d8e0846de522daa8e4de44788e4e6a8d186af6ab825c612eae1090fa3888d35fd13746763ea3a9e8c03dbd60b287364d913b1594dbdcc07ab7650b947ed19bece32e5c939fb7d84c5fe55de6902ab48e1b74cc5636af6457f915be7156a4d433d3c4345c13c350abf47c1e88adb48b01da5a4d82714ddfc3dd26cea645b3b461186dc8be8c2f6173aa64e727416a7fba3d41bfd017b1fbfcbda323eefbaebe068b23e5d261cac14eab7dc406b1cc296996fd9d393447631bf4539818f24936011ac073122853edbba064a7eaf99d90951601cf14f285f20fe59f2460fc8554031315770e5296a79361e1c15b12deac23be2a2a5907903307233fc718fba2738e4cb555c32274c31c4ce53e34c3da8b6418e606a13e9c4ea81ced389e1e494012fae6a6bfa97dc3dee1d0688856819cd2e3afe32c3e204678c7ee471e0f68a1e97076f9477cbcb16ea860d18900938afef7574d175f0db1d825b0ac23ddc5ead27036f5937fdcae54ce31cc83a05710d15e5f21b1e39d86d79f3a7213b76e90c8deee088d3dd857d8a9d0e9f968fb6392c629cb826dc15ff0d7655669bd011a6b1eb5ff724fae94e2183d290a77f14a7d31583d8a00d9ebe96b820275c2b4b7ce478a6a6b0d9d8cc74611d542ae46dc343ef04f10be11ffd69d61638abf36bd20ef19ce65d567af4031605ac98c2ab50adf39fe5725f9f1ed19833d672c352ef52f7bdbb360380f35c16f01f9d04f3089aa1314e42bc1f245279619688a249839705d38d317db13430747f3cb6c5a6982768f0d4014a7adac6fc9933482dba9fc7f47ce55d392fc3830e8bab35211993e6a4774cb786703441f315a62855ad853df7bc5323a39a6a6a67a292a624843034d76e287efe10b4c656f2c050c83a6e208a4d550659d7647055c9b34aafdac3203e482e45a0e531f3db57568db04d846b112bd5b3a461dafd6355bf684719f25dfeb0c2611b3f69df7c6ae7faf5c251e3165a4515d5175d0557a1ab02a5db69228951cdbb8dd5169fe04c81af652b7e4a1f7aecb401f859a4b7488b4e52ef0ea629ee9e627d1645cf3554f56784a31403eb51c6011f738ad6add99ff23459ec5e2ccb51ffad35403996977f44306505b5a2d254d48198da2b9df8112f62ac9ae3b3f623b5909daf8d22ba8e040c05d7ca7ed9d6fd6cc3b1f8e2114b6032eff5826a9a0c5f6169a1f780801a665d5afe5f3b00a97304b8340294d662e3d10bee139e62cf3ce88d1c393df083773a26b4de9e4368bf5b3cfed2cdde77286a9569a91fbc10380ac164e355c6aaaad4cd71cb8fd3c0fa10b6cfb801f3e85fc5603cfae0e3a0c68fc1e3360725929bc7f440f6cd57e8c02b008c4cfc44a4ec6c02d837d532797eed429150ad79dc21ecb16858031225aa400b60b4ae80e310659e57e0e6d8a1c9c90006d0fa1ee45b5ff9a0fa062113984bcc37c8a1c5fc747b2b762a87c4f1d4a0de0942f7d536ca3eb13e6404d27b2ad779a9a256eac163b1f4a8f4b993dd35f37f01b041d6a3049b34ba8b809a547a2f85a0c693cf5351b05db3cb69644b359c8a954a2bb8830eb32242ed4025d110e054c6b7e7a01d1f5a66f49f918a436693280bae642a5f052c54a2f3e72b934ced1cbd90b879a7481dd34e1ccf7345b33a3502fb6b0126a5e2095d5d2605194967ce45736e01fcccc468b31642dc8a476a45f7c3cda71c3d0c4b9e34b634064360f92b4bd89acbb720f7281864f5d5e7d0e0c7e23ebc956c27db2362842b38d35652b2e61a61c38cfbafd1a7a13258c58f71fe3b0c040e945dea0a690cbc8b452aa4fe6925b9862b7452579eabc9822ed7b5abb33289c0f137cd0f8d85ccd9c6ecfee361e3a2d7dba6a8d3c8b5d18d0900ee188aefd899268e2f3ec86fa548df2e4c23b8f8cc24f6f3aadbe47a1efcd2907455d61b8836d7f5c5609f1c30666ba926614223cbabb8689f806eb892247e46208e5d4f67e44e845f1b9772e55ec5fe6d53a8a6755ac2b1c63856ea0be124e99daae04b477eb34ef59dccf5a570b177eb2ee50cb6615995d88cc7f833647ab309c6c5f388675926c2c7ef17ec508eff9e478c99308aed49fb5f3c968571eed17d33693b5c1106ddd4d6c75bccb53023ceb295c1b6e4ff029085421e95634394bb3608adc40b985a6d7a607a612c687b5f29ff2ff464d4f59ae4eb4cac821a060eda058eb8554e20b54824f59389ae2f6401a7f8d7752df30f05e5c0fe4ac7097d4f91dac0c3c48c0e00d6dada7ccd1460a3c60ad3e9ffc5e61024a0106e11df341d1dd6dc2884f094a4e2058db6489ec73cf79c17fdb2036cf0e7630e040749b26958175995ea69a604854134bdfcf8f0c2e54810cb95422d54d42a4f1b5144ff1d957f4a7af6f76c52b9f03f8510aa8a643daf9f992f1002c1063141db0d3b0c365a9e90c5157bd7c5ccecc94444cf7ac0ae6511a7c2c01b6158795b53e3b70a4dabb6f935b742ecef46682ad15f0b8f0eebe2e2a52fd92bf1a63ba080ef6526ca1e96e85cc6095feeab4738dfca12da2ea409a991d0000e84bd3d05a896ae7322f7a74b31711f93ce9a2053f0e3143259b29f5a70754649cdac1acb7a598ff7473f638e449c0816718910f9d2a01abb646af39d4cbf735eb6a108329f0c3f139bafcb196746e9d04f1ce02b5599b5dd9e43d75d089dd647334fab88bc8efd4a7b6f805c08348012fa75b33cd4f0052d134cfaef353b923d6fb957ce3dbdea117ab2bee2375ac581f5c37a722e499e67b81662a3416da0d251ccd7ed11158500607fc5e6768ef571a1dd3798ad84349d4e59254a492db4fc467e5f10488a655ed710154a5f2c21dbb2d33ed82052500bb3f42011bbe77e7b42da51494ebbfcb56f5a336196f42477f8e74cab51f7db940cd7d5f841f19e9527e6dfacb292d3d99f212d7103b792c7fd9baa8d94a835f5ffbc2832387a6c7ed065209142c160479b950fb1614e491d102979cffb9e28418c08f6488d472d8d59901e733c675b50c4112ffe36a72deebe3003359b1b6c6913cba32fed5ce0cebc9cc963465ca78fe32cfc2cac28521f6c29e33437ecf2fef17346f689fc4485f7ba74fe03dd6d55bfee0dbeb3c14a93134994d49c521d8dd88585a7e1fd40d5a696d3e9840e7ebb858ff28a27320245b4575a8e35b0ddc2f7fc96c2997afbe55804ec3b9ff6379ef566b3bb34b2d4b88187b31c0d407a28442021e1dfa25975b0dd23592964516ea1323f9b07b253d0343219d759f94561f21ff9cd90a7f6e67e2a2827b98d0411eeaa679a0dbdc8646213af23f1820d94870533d533c3d3f42077f6fd704cb282a1b6b55de97b675bc5388ff2f04d516f337e78b4e03b7a3bc34cc9fabf61c5f26023f0520e96a71b39a1c8fd3e4f418af4cdbac0ce36b5b2abfb35accb498f8f61ba16d4a00cf0af69dcefb9465a8e014283876ca2f27120cc86f45e8ec6e3393e55018a929213b50f08b3469e1d99d2bfb28b5a7e271f00351c7b34e0db65b93ca39eedeecbcd90f287c2298239ec1cff5dedfb28fe79369560df171c33fa583177599ff71a8cf55a0c40c02ca5244aeaf055e9f7c7ef4372d855f0d9f751f5da0202593ba5244f392b5052a3c7cc0a8403d58008a785a49d0b1f2beddff9a6e0b806705c851897c3b5c3d5acee2a526b13f4b1c7c2ba0fe2c124f7ae56e0e5a49d4f9201559f86c85e4f164fc1576676c2c8714468f6a9361681deaeed03c0c966df0ea805b273220ff71bf19bf5d1ca351b3243ad2cce01184e7a901228e0ab223ebe7861fdb34d5689ca54003f8f4b89ec4f4f0d8bc014896d317ba6a22a965134e9bbec0f82494656f0fdb7087041359d8fd2bf1f6d452e7bf0adfa6d5de3eeb1c201ac15de31385116504d457984e0d38c4ace998a2cbbea08852ac9cf49fb8a99237a1ee65f789517030f32eccb786de39b3b9f84afce0a449e9afae338f8af08ab415a038c07acf143f7852a7b60a9e3567b7acae60c14d46021835199778efdb20bed3afbf89a55dbcaa1f0a2777b9fea576a719baff063cce38c20b91fce28639b7a3b9695de3138287e2405c67e2f355bca5063ecb7797ba130f998b55dcf2397392adc4feedbd7f34ef5e0c2346fb69eeb309e4a37b1a9f5ade37b31cf28ef0c118fe1b13b3ffc9ea6afe6def771824b551e2a4453f9160782e04501e6d6cab66950f8a37c5e7ecc16d5a80e0614253527d3ce13401652c2aa68933287ac2679da590e0d2cba3fee84622b9eae80f8b65ec1da67e51d60dfdca6339bb574993a7e03661b753063142b0c52d1682c8c959bea6c54d623dee7497141cd030075aff1af8c6314a861386cb995c4522d2fcb428f20073b8dcda9b0c2cd194d97ae240b6d51a835960e4c3d82af8672b6fc2c41829adb0fb789d522d368fb1772b9774cc57ddc701c08f02e77100e08c5ef53deed14ec86b7298a1e5927071fbad459ab037bb43e5b4047abb4fd6e366677a83cd636fb7adbbad1992faee63290f5cf36afe66120e39fd34818f76fe396eaaa1cf45106a8e996dd834b4d3571f8c621d21e7c7a5ba3bb6d6df9a20e722a3ec1609f6779812a4b828ddf3c871dae19d7a949e2c62e32b14793749dae64cb595247dc715d88bdcc67cf3084695c26e1f669ab176431391d9f6e282f20eb058124fa928cd44cf0d7063ec15d86ba23189c18e430c344d3dbe6578aa6df5cd5c0951c36de0853c2a3cf964fa8468653da45a974c8721e8bdb122235a2a0a6976648ae38283bb1bbc1d81c867e392096311a12a1fa2ff313c6bbc1ee4bd6deb3ae59fbfc9388200fb603d3676fc017b3074a576af5c1decaaeafb499b9d0eb75354f24911090899f7cc499452c8b6ce97164e238cfd05156a55cc23ca729861de75f40d25fd6c4edc62cf40138c598473265e6b38a2f38e11214028912cc64a7549172350a34f3d644eb6705ae00dd95c277eb3cef5555591e9a786ea270f7d34d050847941978d7285f2b0ea66dd754d86be2298dac9c855b7317b60f7cdbde72371494f06a5e4741a080b42916f6b6bceb75f3360932cbbdeddbe7cf639bdf59406fe6f870d99796854febbd2e8b834e9bee2a440ac392b12832c1ed56c67f09380684dbad8f7f6bb7b956d057153fd2e44b14549e6c15cfece46e57e665ac2bcc047ff5d153d1fb0f2c03bc4ed754629f09885fa830824722bd692cc1ed477e4ada7872314fab735f7281b306689a9a41bc7539462798ebba4748cc9f426815b3e67d14de87da2cc72f2b38be9c3f943425beafcff3cddef5a30510408b889a1053fa9f11e7616b306e299031863900ff95eeea488f341df0a06474e566543eff4e22386a310f2bb7c92654d400eca284b4eea8b5fd18ab7077227e8903c1fef45f332f36963262dfbf65eb8175a2004455900e4b0e19b5ae9a22c29b4135771c8adc6cb8337d4d4bcd186eed12b5b7028951ad27a28bde29f9ed9921fae5d595775f87ccc78ffa8159b72a497da77573e41de80ce7ad1ed9e0e876bc5c9664cc77d8e8a08e431b0eae42f5120a7e4844b135433aa52eb8539ad2e2192397ea7ed5e791b26bd452dd7265afb215c88c28bea2ea91bd2abe95951422599ecee2487ae5b1eb01e8700841c581ec3674822854e0ac07f24e96edb67a0117714a999030b946d0dfaad0b15c13c527f492d2f27b48bc7edb951120ca27f97ba6bb882590a67f73e70cf8b636cdf0e0ced8b821371df389c0d66bedf47050daf1e84ce35613c56ca3c444a072b0e817d03627e4a7ea626717a9476468d1315028c934737a60c5022153051cb449239f3104ad63587932c2125118c6b96f8865c05fbac04a1e6b25ffcaea0a389f5a7076d250b8bf040c24522303123768330628efdf8908d4884654294e9e8d09ff6d721881d9bfaee11b6c4c30f7f57ea691f264beb72aaaa51dd13bb4073e57016e9c7133d8a91af154451cfc849e5fbc75321f0092ad9a507a1028e277eb666c379970b32e5dce831d00d1d5557799ace799624187a84ab200d8ed5ec2f172c8d86bd3e9a2189061775226cd8e1a88d4b36e73ddac6aee790b2a4ef583a27d2e611541fd449acaeca60cd3c63ffe026c3249e38c9e9e4cfc7b64ec9e9b182c2fec1a861c71a205e3b93a81b9e8a583f1739f6b477adf47fb49c983dab58ef902b78929c9c96164a955363e43a580292e89f47003fb8590e463d13d09e1ec0e43895163e46eaff2d3683daa3b622db7295e3274c7b0ebee3ba357b402c27722eaa8a82934351a1620966009d8e8c14fa540a3e9350cb52c661599ba98fd0f646bb846aa674809d8d148a8b065adf4d779fb547107aa3830e7b9e4409d553bc9a9391da792e5af96a738282f01c2606222c9cefd3d2b07466f11601be083976cabb765e1a6f3bceb85572f9040f895d48bec7055", 0x2000, &(0x7f0000008ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$uac3(0x6, 0xc3, &(0x7f0000000140)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x3020, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb1, 0x3, 0x1, 0xff, 0xc0, 0x10, {0x8, 0xb, 0x0, 0x2, 0x1, 0x1, 0x30, 0x7}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0x4d, 0x7}, [@feature_unit={0x5, 0x24, 0x7, 0x4, 0x2}, @feature_unit={0x15, 0x24, 0x7, 0x2, 0x4, [0xe, 0x1, 0x2, 0x6]}, @feature_unit={0x1d, 0x24, 0x7, 0x1, 0x2, [0x9, 0x8, 0x1, 0x6, 0x3, 0x1]}, @power_domain={0xc, 0x24, 0x10, 0xf3, 0xfff7, 0x0, 0x6, "821f8d"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x40, 0xd4, 0x4, {0xa, 0x25, 0x25, 0x6, 0x1, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x210, 0xfa, 0xa, 0x2, {0xa, 0x25, 0x25, 0x0, 0x5, 0x9}}}}}}}}]}}, 0x0) 27.407478278s ago: executing program 2 (id=599): syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000fd3f0000000000000900000085003614f07c1a4499af09a76a00"/46], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) (async) syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000100)='./bus\x00', 0x1210080, &(0x7f0000002fc0)=ANY=[@ANYBLOB="63726561746f723d519051972c63726561746f723daa34aaf62c696f636861727365743d6370313235312c63726561746f723d0de07c342c636f6465706167653d63703837342c6469725f756d61736b3d30303030303030303030303030303030303030303030302c6469725f756d61736b3d30303030303030303030303030303030303030303030302c6469725f756d61736b3d30303030303030303030303030303030303030313030302c7569643d", @ANYRESHEX=0x0, @ANYBLOB='00000000000000000000026,\x00\x00\x00\x00\x00\x00\x00\x00'], 0x7, 0x318, &(0x7f00000004c0)="$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") rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000007000000000000000080001f850000007500000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0xb, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xe) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) syz_mount_image$exfat(0x0, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1094c3, 0x0, 0x0, 0x0, &(0x7f0000000000)) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) getsockopt$inet_buf(r2, 0x118, 0x1, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x400, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000840), 0x7fb643, 0x0) connect$unix(r4, &(0x7f0000000280)=@file={0x1, './bus\x00'}, 0x6e) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x38, 0x0, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) (async) accept$alg(r7, 0x0, 0x0) 25.570170138s ago: executing program 2 (id=604): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(r1, 0xc040564a, &(0x7f0000000140)={0xffffffff, 0x4, @value=0x100f}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@getneigh={0x0, 0x1e, 0x200, 0x70bd2d, 0x25dfdbfc, {}, ["", "", ""]}, 0x47}, 0x1, 0x0, 0x0, 0x44}, 0x20084084) 23.098482304s ago: executing program 2 (id=608): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x2, 0x20002f7}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) umount2(&(0x7f0000000300)='./file0\x00', 0x4) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) getrlimit(0xe, &(0x7f00000001c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file1\x00', 0x2800000, &(0x7f0000000380)=ANY=[], 0x2, 0x5505, &(0x7f000000cf00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183b41, 0x12b) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000340)=0xfffffff9) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000240)=0x0) rt_tgsigqueueinfo(0x0, r1, 0x30, &(0x7f0000000280)={0x3b, 0x2f1c, 0x7}) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x9, 0x800800}) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) 21.711235341s ago: executing program 2 (id=609): r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000280)={'syz', 0x2}, &(0x7f0000000480)="2f77abd63ebfe7dbf2f6bfd198b30957f888d4114bbe8a57a5fdc09f903c1d7b5fa8f24db0fdafe48b0405a97cdb0826dc0000000000a1cc5ec9c66a9914a800bdaf69416b535f3c35d8950367b47dec292546c56079060001ee9c74cdc83c4ce9b1e4ef329334b3efedd1e50100000041173086073cae790d486b0881febbce71d1a2331f3a6bf67b9317d0d37ab63d65c6b2d66e6b46ab901d4189a4fc154b6a735a11f844838e0a94cd0815a700"/185, 0xb9, 0xffffffffffffffff) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}}, 0x0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r2 = add_key$user(&(0x7f0000000240), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="d4fad93978741039ed0f8496ba122cf933b2c09b9872748445e9ac6563d4e262ef2b3c5660a9a9122a1485cb7b3c6b8b8d6277c6959537687091923d88e2c93498069c48bfa2f21a9a1f0335cf0610ef585b7d6d6a8fe8d23c73ba459590876c080d0e85f715a9f8ee6543dd9528161aea34ea60c7d3534114997798034d85e2492ea6edf0553040a1f795b6ee4204b1900c9fae22368d7451e8436f0acf6d113c9f463eb69b9f0ac4bdc8206ee97b", 0xaf, r1) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r2, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 18.902689725s ago: executing program 2 (id=619): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x40010, r0, 0xffffd000) madvise(&(0x7f00000a8000/0x3000)=nil, 0x3000, 0xd) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x84, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x7, 0x400}, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8c, 0x8200) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000100)={0x11, 0x0, 0x0}) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f00000003c0)={0x20, 0x0, 0x0}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) vmsplice(r1, &(0x7f00000000c0)=[{0x0}], 0x1, 0x1) prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ffc000/0x1000)=nil) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1830000009010000000000000373d7055bf52f9b69000000"], &(0x7f0000000180)='syzkaller\x00', 0x1, 0x99, &(0x7f0000000240)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(r3, 0xc, 0x0, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000080)=0x7) brk(0x800000000002) 18.421697695s ago: executing program 33 (id=619): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x40010, r0, 0xffffd000) madvise(&(0x7f00000a8000/0x3000)=nil, 0x3000, 0xd) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x84, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x7, 0x400}, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8c, 0x8200) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000100)={0x11, 0x0, 0x0}) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f00000003c0)={0x20, 0x0, 0x0}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) vmsplice(r1, &(0x7f00000000c0)=[{0x0}], 0x1, 0x1) prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ffc000/0x1000)=nil) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1830000009010000000000000373d7055bf52f9b69000000"], &(0x7f0000000180)='syzkaller\x00', 0x1, 0x99, &(0x7f0000000240)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(r3, 0xc, 0x0, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000080)=0x7) brk(0x800000000002) 18.086883431s ago: executing program 3 (id=624): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000006600)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404}], [@TCA_POLICE_RATE={0x404}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE64={0xc}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0) unshare(0x1f50a564327a9fd7) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000ec0)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="030300400000fedbdf250c00000008000300", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x8050}, 0x4000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r3) sendmsg$nl_generic(r3, &(0x7f0000000940)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000900)={&(0x7f00000006c0)={0x224, 0x16, 0x200, 0x70bd28, 0x25dfdbfc, {0xa}, [@nested={0xca, 0x84, 0x0, 0x1, [@generic="24c8aa20eb46b048df9bb7e595245c7c91e0cd66654fc8f76c0cba0915674bf4c712e3fd22ad94c73d1fe05e00c05853797817235e2316e3796bf6699ab0e60a860103fce653625fb0bead5650a96f4752a3cfadefec44b377219a098d5843b0b6664806fc73d13c743ce280c85eab35aefe2156c83c2da85a9cfb3f8a4dcd943be5d8f56479ad28f0d67ce679e992ddf201e4fa3540900ceaa7490a4d2c2d8b5fb83346e6853ccb91947440c844ce62515ef21beeb42bafe0fe23a5f20dc799153a8d723115"]}, @generic="683b1f4749802aecfb760459357e94077e61034567d4d5950fc32e41001c09dd25a1c345bba1f095136d5a9e29cb324cd712ccfdf58253628a02a9412cb9afea94104111a91865b8f8c34c8709fd97b8f7cea4bc9dc2c961fc64bc67f124e9692541aabce6dbb52d079bcd854c055b47c23fa6969ad972a6cda22b600b2b239c2c63515db49b6100a27f7371e19fc45aa5a4c33465351e1d6b437523620f3ca0c482a94bc922d03839300ca4f9e0f9c7814a15b81b5fd83ab3ec7d885571fc4b428c97e8033e14b6dc45746bbbf21a4cf89f6804418cd9761bd8dbc09e4278ff0859ce9a09b29d24987852e9de60650f211cddf1", @generic="ce2e97f73470a853e8d9faf1f5ad01eea1ba6b74d058b48e48299102463527ab33fba87b2f730ba02c59f65403e78fdff55420d479c5817a5017b6", @typed={0x4, 0x6d}, @generic="6c3bffdd45d4df4fb7f0b5a26fb9823d3a"]}, 0x224}, 0x1, 0x0, 0x0, 0x10851}, 0x24048891) r7 = io_uring_setup(0x60fa, &(0x7f0000000240)={0x0, 0x692e, 0x800, 0x0, 0x1c8, 0x0, r1}) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r7, 0x10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000000)=""/79, 0x4f}, {&(0x7f0000000e80)=""/4096, 0x1000}, {&(0x7f0000000100)=""/158, 0x9e}, {&(0x7f0000000540)=""/185, 0xb9}, {&(0x7f0000000600)=""/153, 0x99}, {&(0x7f00000009c0)=""/223, 0xdf}], 0x0, 0x7}, 0x20) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYRES16=r6], 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x20008040) 13.731548066s ago: executing program 0 (id=626): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000001, 0x5d031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') r1 = memfd_create(&(0x7f0000000140)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\xe3l\x87\\\x15Hd~\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bI\xd8\x1c\xe8\x9bYS%\x1d\x10\x86\xa0\v\xea\xd9\x89\xda\xa7Wd\xa4Eu\x8csm\xa1.\xd1\xb2I\x1a\xb2\xfdA\x98\x16\xca\x83y\xf9\x1a\xe7\x06h\av\xa8\xd8\xceY\xc0\xe6v\xb5\xf5\x9d\xbe\xa58\xb42\xd8V$\xe6\xc8\x1c\xaf\x8e\xa1\xefa\xb1/\xee1=\xbfM\xeaw\f\xa2\x87\x1c(\x1a-\xeb\xfbV\xeb4\xd4C]\xc7{t\xf9\xd5`IZ\x03H\xd9\x86\xe12N\x1f\xd8{\xf5z@\xe0\x00\x00\x00\x00', 0x0) mmap(&(0x7f00001d1000/0x3000)=nil, 0x3000, 0x1800006, 0x11, r1, 0xbc4cd000) read$FUSE(r0, &(0x7f0000000640)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000004880)={0x2020}, 0x2020) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="636865636b706f696e743d64697361626c652c6261636b67726f756e645f67633d73796e632c61636c2c616c6c6f635f6d6f64653d72657573652c696e6c696e655f78617474722c6e6f666c7573685f6d657267652c6d6f64653d6c66732c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c6167655f657874656e745f63616368652c646973636172642c6e6f696e6c696e655f64656e7472792c008bfb3c1e4b1b12ae77c937da8858"], 0x1, 0x5505, &(0x7f0000002480)="$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") r2 = open(&(0x7f0000000100)='./file1\x00', 0x84242, 0x1df2a23c5997fa7f) pwrite64(0xffffffffffffffff, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) sendfile(r2, r2, 0x0, 0x7f03) 13.678104385s ago: executing program 5 (id=627): getrandom(&(0x7f0000000300)=""/142, 0x8e, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x2, 0x2d, &(0x7f0000000c40)={{0x12, 0x1, 0x300, 0x40, 0xef, 0x20, 0x8, 0x1c40, 0x534, 0xcbd6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0xfa, 0xf, 0x10, 0x10, "", [{{0x9, 0x4, 0x75, 0x5, 0x1, 0xff, 0x5d, 0x74, 0x8, [], [{{0x9, 0x5, 0x5, 0x10, 0x40, 0x9, 0x7f, 0x2}}]}}]}}]}}, &(0x7f0000001e00)={0x0, 0x0, 0x0, 0x0}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x10001}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x20004000) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x273, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9, 0xc0, 0xd, "", [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x1, 0x1, 0x6, {0x9, 0x21, 0x8001, 0xfa, 0x1, {0x22, 0x267}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x6, 0xff, 0x3}}}}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x2, 0x4, 0xc, 0xff, 0x4}, 0x8, &(0x7f00000000c0)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x8, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x40b}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x4c7b}}, {0x54, &(0x7f0000000200)=@string={0x54, 0x3, "72df1b669d768da2731d3c00a4168b69c25616566873dbe89656a49e46245f8eedf1a9736fbf42e058ca036237e166e3390196e1dcf74d5faa55033c5aff6f2970677b942f1dc87375e82dfc08dffae47724"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x447}}, {0x49, &(0x7f00000003c0)=@string={0x49, 0x3, "45ca8326b8e66c780c7f800bec547015a6a24b2290f8fda0f5f8aba2a7dfd8bf1b3ad54598a4dea272f6d71c92914242b4a84da4256cfdbf64988a4427561da138ef21b3d6ab6f"}}, {0x28, &(0x7f0000000440)=@string={0x28, 0x3, "7dc22d5fd9b5a60bd6b8d0913836ab1f71dbf710435e695ffbe9c78619f14822abaf128f57ff"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x2801}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x1407}}]}) 12.690347315s ago: executing program 3 (id=629): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x8, 0xfff8, 0x1000000}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) 12.620508124s ago: executing program 0 (id=630): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) preadv(r0, &(0x7f0000001240), 0x0, 0x7ffd, 0x42) 12.507089664s ago: executing program 3 (id=631): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x8000000004) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fchownat(0xffffffffffffff9c, 0x0, 0xee01, 0x0, 0x1000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r4 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs2/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r6, 0x4) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000140)={0x100, r5}, 0x0) landlock_restrict_self(r4, 0x0) writev(r1, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e210e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'ip_vti0\x00', 0x0, 0x0, 0x7, 0xb, 0xe3fa, {{0x16, 0x4, 0x1, 0x1, 0x58, 0x66, 0x0, 0xf7, 0x29, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x24, 0xea, 0x0, 0x9, [0x5, 0x2, 0x7, 0xc, 0xa39, 0x9, 0xc, 0x7]}, @cipso={0x86, 0x13, 0x2, [{0x0, 0x3, "d7"}, {0x5, 0x2}, {0x5, 0x4, "6ad5"}, {0x6, 0x4, "9c42"}]}, @ssrr={0x89, 0xb, 0x27, [@multicast1, @dev={0xac, 0x14, 0x14, 0x13}]}]}}}}}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x70, r7, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xb}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x15}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x70}}, 0x0) 12.060326761s ago: executing program 1 (id=632): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r0) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @loopback, 0x1, "0d5011f02b7fab96e0aa834d3a9e7cfc12178ac0ab1e6227c2b6ddaa5effda90", 0x5, 0x16, 0xfffffffe, 0xff}, 0x3c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_int(r2, 0x29, 0x1a, 0x0, &(0x7f0000000040)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffe, 0x6, 0x0, @scatter={0x1, 0x3, &(0x7f00000006c0)=[{0x0}]}, &(0x7f0000000240)="008d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), r1) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000400", @ANYRES16=r4, @ANYBLOB="010029bd7000fbdbdf2502000000090001007666617400000000"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x804) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x24403}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@ifindex=r6, 0x33, 0x0, 0x2, &(0x7f0000000000)=[0x0], 0x1, 0x0, &(0x7f0000000200)=[0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0]}, 0x40) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000340), 0x101000, 0x0) write$cgroup_int(r7, &(0x7f0000000380)=0xe3, 0x12) r8 = socket(0xa, 0x1, 0x0) getsockopt(r8, 0x1, 0x2f, &(0x7f0000001940)=""/6, &(0x7f0000000040)=0x6) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r8, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x54, 0x0, 0x8, 0x301, 0x0, 0x0, {0x7}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8847}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88fb}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@setlink={0x40, 0x13, 0x331, 0x70bd27, 0x24dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x247d0, 0x46001}, [@IFLA_IFNAME={0x14, 0x3, 'dummy0\x00'}, @IFLA_VF_PORTS={0x4}, @IFLA_MTU={0x8, 0x4, 0xb}]}, 0x40}}, 0x4040010) unshare(0x22020600) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) 11.595251587s ago: executing program 5 (id=633): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x902, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @mcast1, 0x20000002}, 0x1c) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xc4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x1c, r5, 0x331, 0x70bd2c, 0x25dfdbfb, {0xb}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008010}, 0x4000000) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000500)=0x0, &(0x7f0000000540)=0x4) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000600)={&(0x7f00000009c0)=ANY=[@ANYBLOB="54cd0b736d19ae2200d7f4", @ANYRES16=r5, @ANYBLOB="000129bd7000ffdbdf250c000000080031007600000005002d00000000000500370001000000080031000400000008003b0001000100080034000200000008000300", @ANYRES32=r7, @ANYBLOB="0500300000000000"], 0x54}, 0x1, 0x0, 0x0, 0x4004800}, 0x40) r8 = syz_open_dev$vbi(&(0x7f00000000c0), 0x2, 0x2) ioctl$VIDIOC_G_PARM(r8, 0xc0cc5615, &(0x7f0000000380)={0x2, @capture={0x0, 0x1, {0x4, 0x4b}, 0xc, 0x401}}) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000002f000000d4030000200000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x1, 0xc3, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0xfffffff8}, 0x10}, 0x94) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="000104000000000000000b0000000e00ef4f2c5f7464657673696d0000ffff0002006a6574ff657673696d6e616d65000000"], 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x48000) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000580)={{0x1, 0x1, 0x18}, './file0\x00'}) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r12 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x105c00, 0x0) sendmsg$nl_generic(r12, &(0x7f0000000980)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f0000000700)={0x20c, 0x30, 0x100, 0x70bd28, 0x25dfdbfc, {0x17}, [@nested={0x8, 0x68, 0x0, 0x1, [@nested={0x4, 0x4a}]}, @typed={0x8, 0x112, 0x0, 0x0, @fd=r0}, @nested={0x10, 0x38, 0x0, 0x1, [@typed={0xc, 0x12d, 0x0, 0x0, @u64=0x9}]}, @typed={0x8, 0x127, 0x0, 0x0, @u32=0xc42}, @typed={0x8, 0x71, 0x0, 0x0, @ipv4=@empty}, @generic="0704c79cbfcc5841b63f923fc7f532c9038b6b0ca9f97fa19e09a275d69c844366424c8ac1a42a009d52a0eeba491dec693bbf9fd3a2a6df0892e96b3ee86c47b43ea394604e9f0712b6dfbda3f7c2b769317ca865f68e0acb69fb0e2f41c98f0f9f071a10cf232fd195c269c5c2bc56e54691953e2ff6f06e09c638632e9e59298edd82c048ac308d6d5bb6853219b2584f918415453b7b838e8bfe7e68d2f07043ca1db7babe1b545f3110bf84017e2a0c4c7574f0978ccb6d3ef316a99d86ac84fd01a3c65f25d3bdd641a2fb90ecc395b9a60312d68e06ce0592919b41f11dbfcf94", @generic="26fe38add2c7caefa6a2db1301bf3a86a2c90dcdb440a67d13783fdcb1eeb1d24403702a9317696eaee867313c52443b38900ce4f2066c89df9ad5d9b991d115cc41368d43f5f572001658abd9537f6ef0aa77b7e0ead3eb5095091324834db5ec15be751034e54b9344fe4dde0e3353600fd290b2cadfd5b9dafd95e115857d3b9424fafacc", @nested={0x5a, 0xf5, 0x0, 0x1, [@typed={0xe, 0x83, 0x0, 0x0, @str='firstname\x00'}, @nested={0x4, 0xbe}, @generic="52faed76aaf317adfce96c586ce6d0cd10b519c052c71829d637471e0662f1c5cafcbd15ca13d82093b1c4f8e6fdecc79001", @nested={0x4, 0x15d}, @typed={0x4, 0x3e}, @nested={0x4, 0x10b}, @typed={0x4, 0xea}]}]}, 0x20c}, 0x1, 0x0, 0x0, 0x4000850}, 0x10) ioctl$KVM_CHECK_EXTENSION(r11, 0xae03, 0x62) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000005c0)={@private2, 0x1c00000, 0x0, 0x1, 0x4, 0xa}, &(0x7f0000000a40)=0x20) socket$packet(0x11, 0x2, 0x300) r13 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) fsync(r13) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, r10, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x404}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x52}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 11.443071265s ago: executing program 1 (id=634): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000000)={0x80, 0x40000105, 0x0, 0x0}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x80001, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x4) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x234, 0x0, 0x8}]}) 10.932357238s ago: executing program 1 (id=635): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create1(0x80000) r2 = fcntl$dupfd(r0, 0x0, r0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x10000014}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x4, 0x7f, 0x2, 0x1, 0x7f, 0x6, 0xfffffff9, 0xfffffff2, 0x5f, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x24000, 0xe661, 0x4, 0x9, 0x3, 0x7fff, 0x7, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x10103, 0x0, 0x5, 0x3c, 0x91, 0x6, 0xfffffffd, 0x3, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x8, 0x12f, 0x8000, 0x10, 0x8, 0x129432e2, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffe, 0x7, 0x0, 0x10007, 0x5, 0x2f, 0xb98, 0x312, 0x78, 0x7, 0xa, 0x6, 0x4000, 0x8000, 0x9, 0x400, 0x1, 0x6, 0xfffffffd, 0x8, 0x1005, 0x7ff, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0xe, 0x80004, 0x1, 0x7, 0xb, 0x9, 0x48c93690, 0x3, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x1, 0x7fff, 0x6, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x85, 0x6, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d6, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0xbb2f, 0x3, 0x8, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x8ad, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x4, 0x5, 0xffffffff, 0x7ffffffe, 0x5, 0x8, 0x100c8, 0x3, 0x4, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x27, &(0x7f0000000000)=""/114}, 0xa8) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x44084) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000300000000000000fcffffff85800000c40000019500"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r2) 10.83630838s ago: executing program 5 (id=636): r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x6000, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000ffffffff4400000008000300", @ANYRES32=r4, @ANYBLOB="1400238005000e000100000005007785718d1d0000000000"], 0x30}, 0x1, 0x0, 0x0, 0x20000010}, 0x44000) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x1a, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)={0x0}) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000200)={0x16, 0x98, 0xfa00, {&(0x7f00000001c0)={0xffffffffffffffff}, 0x2, 0xffffffffffffffff, 0x0, 0x1, @in6={0xa, 0x4e20, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}}}, 0xa0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r6, &(0x7f00000002c0)={0x11, 0x10, 0xfa00, {&(0x7f0000000180), r7}}, 0x18) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000100)={r5}) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x8, '\t\x00'}, @local=@item_4={0x3, 0x2, 0x0, "112000"}, @main=@item_4={0x3, 0x0, 0xb, "7488dffc"}]}}, 0x0}, 0x0) 10.06753395s ago: executing program 1 (id=637): r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x94000, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)={{}, {0x1, 0x7}, [{0x2, 0x4}], {0x4, 0x5}, [], {0x20, 0x3}, {0x20, 0x7}}, 0x2c, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000002c0)='veth1_to_bridge\x00', 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x20, &(0x7f0000000180)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000280)=0x10) keyctl$session_to_parent(0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xa, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff0000000071107400000000009500000000000000"], &(0x7f0000000480)='GPL\x00'}, 0x80) keyctl$session_to_parent(0x12) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_STATION(r5, 0x0, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x6}, 0x28) setresuid(0xee00, 0xee01, 0xee01) ioctl$XFS_IOC_FSGETXATTRA(r6, 0x801c582d, &(0x7f0000000200)) openat$ptp0(0xffffffffffffff9c, 0x0, 0x141000, 0x0) io_setup(0xe, 0x0) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@dev, @in6=@mcast2}}, {{@in6=@local}, 0x0, @in=@dev}}, &(0x7f0000000180)=0xe8) 8.4666762s ago: executing program 0 (id=638): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61126200000000006113500000000000bf200000000000001500000008ffffffbd0301000000000095000000000000006916790000000000bf67000000000000a406000007ff07006706000002000000070600000ee60000bf050000000000002e720000000000006507000002000000070700004c0000001f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x8000000000000001, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000180)={0xa0, 0x19, 0x1, {0x148, {0x8}, 0x8b, 0x0, 0x0, 0xff, 0x5, 0x84, 0xbf43, 0x20000008000007, 0x4, 0x400000000008, 0x2, 0x2, 0xfffffffffffffffc, 0x4, 0x6, 0x8000000000408, 0x4, 0x6}}, 0xa0) r2 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x2) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r2, 0x5393, &(0x7f00000001c0)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@setlink={0x50, 0x13, 0x5, 0x70bd27, 0x25dfdbbd, {0x0, 0x0, 0x0, 0x0, 0x13920, 0x40601}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_vlan\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x3, 0x1600000}}]}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x3df}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x48000) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x6000000, &(0x7f0000000040)={[{@data_err_ignore}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@i_version}, {@min_batch_time={'min_batch_time', 0x3d, 0x1d}}]}, 0x1, 0x47a, &(0x7f00000006c0)="$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") 8.361231944s ago: executing program 1 (id=639): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000001, 0x5d031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') r1 = memfd_create(&(0x7f0000000140)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\xe3l\x87\\\x15Hd~\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bI\xd8\x1c\xe8\x9bYS%\x1d\x10\x86\xa0\v\xea\xd9\x89\xda\xa7Wd\xa4Eu\x8csm\xa1.\xd1\xb2I\x1a\xb2\xfdA\x98\x16\xca\x83y\xf9\x1a\xe7\x06h\av\xa8\xd8\xceY\xc0\xe6v\xb5\xf5\x9d\xbe\xa58\xb42\xd8V$\xe6\xc8\x1c\xaf\x8e\xa1\xefa\xb1/\xee1=\xbfM\xeaw\f\xa2\x87\x1c(\x1a-\xeb\xfbV\xeb4\xd4C]\xc7{t\xf9\xd5`IZ\x03H\xd9\x86\xe12N\x1f\xd8{\xf5z@\xe0\x00\x00\x00\x00', 0x0) mmap(&(0x7f00001d1000/0x3000)=nil, 0x3000, 0x1800006, 0x11, r1, 0xbc4cd000) read$FUSE(r0, &(0x7f0000000640)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000004880)={0x2020}, 0x2020) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="636865636b706f696e743d64697361626c652c6261636b67726f756e645f67633d73796e632c61636c2c616c6c6f635f6d6f64653d72657573652c696e6c696e655f78617474722c6e6f666c7573685f6d657267652c6d6f64653d6c66732c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c6167655f657874656e745f63616368652c646973636172642c6e6f696e6c696e655f64656e7472792c008bfb3c1e4b1b12ae77c937da8858"], 0x1, 0x5505, &(0x7f0000002480)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7f03) 7.02773313s ago: executing program 1 (id=640): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_msg}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="08000000040000000400000007"], 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@fallback=r1, 0x16, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)=r3}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000480)={r4, &(0x7f0000000440)}, 0x20) setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000100)=0xc6, 0x4) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = dup(r7) ioctl$KVM_SET_VAPIC_ADDR(r8, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$UI_SET_PHYS(r8, 0x4008556c, &(0x7f0000000000)='syz0\x00') bind$inet6(r0, &(0x7f0000000200)={0xa, 0xe22, 0x0, @empty, 0x1}, 0x1c) syz_emit_ethernet(0xd2, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffbfff00000000000086dd600489f1009c1100fc010000000000000025030000000000ff02000000000000000000000000000100000e22"], 0x0) 6.830978307s ago: executing program 5 (id=641): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000080), &(0x7f00000000c0)=0x4) futex(&(0x7f0000000100)=0x1, 0x8, 0x1, 0x0, 0x0, 0x4) r1 = socket$rds(0x15, 0x5, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) poll(&(0x7f0000000140)=[{r0, 0x80}, {r2, 0x8000}, {r0, 0x208}, {r2, 0x1018}, {r1, 0xd7c45a81aa2c0aea}], 0x5, 0x1) r3 = socket$netlink(0x10, 0x3, 0x5) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000280)="390000001300090468fe0700000000001000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r4, 0x400, 0x0) close(0x3) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000240)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030001332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1) 5.629805744s ago: executing program 3 (id=642): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804410, &(0x7f0000000080), 0x2, 0x246, &(0x7f0000000400)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBMODE(r3, 0x4b45, &(0x7f0000000000)) r4 = dup(r3) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d, 0x0, 0xd6e}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) msgget$private(0x0, 0x0) r5 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$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") keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_load={'load ', 'default', 0x20, 'trusted:', 's}z', 0x20, 0x3ff}, 0x2f, 0xfffffffffffffffa) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r6, 0x7ab, &(0x7f0000000280)={&(0x7f0000000780)={{@host}, {@my=0x0, 0x800000}, 0x10fe8, "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"}, 0x418}) syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240)) chdir(&(0x7f00000003c0)='./bus\x00') r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x4000, 0x83) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r7, 0x800c6613, &(0x7f0000000900)=@v1={0x0, @aes128, 0x0, @auto="e4c858f988c79593"}) syz_mount_image$vfat(&(0x7f0000000f40), &(0x7f0000001980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f00000002c0)) openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) 5.598752579s ago: executing program 0 (id=643): r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000280)={'syz', 0x2}, &(0x7f0000000480)="2f77abd63ebfe7dbf2f6bfd198b30957f888d4114bbe8a57a5fdc09f903c1d7b5fa8f24db0fdafe48b0405a97cdb0826dc0000000000a1cc5ec9c66a9914a800bdaf69416b535f3c35d8950367b47dec292546c56079060001ee9c74cdc83c4ce9b1e4ef329334b3efedd1e50100000041173086073cae790d486b0881febbce71d1a2331f3a6bf67b9317d0d37ab63d65c6b2d66e6b46ab901d4189a4fc154b6a735a11f844838e0a94cd0815a700"/185, 0xb9, 0xffffffffffffffff) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}}, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, 0x0, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 5.295354437s ago: executing program 5 (id=644): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x40) fcntl$setlease(r0, 0x400, 0x0) fcntl$setown(r0, 0x8, 0x0) fcntl$setlease(r0, 0x400, 0x2) r1 = syz_mount_image$fuse(&(0x7f0000001140), &(0x7f0000001180)='./file1\x00', 0x8, &(0x7f00000011c0)={{}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {}, 0x2c, {[{@allow_other}], [{@appraise}, {@smackfsfloor={'smackfsfloor', 0x3d, ')!).'}}]}}, 0x1, 0x0, &(0x7f0000001280)="c5f3b58a6e2ccbac3ec854ef6360bd3b697f1b8139a9d776faf53a591a4516f42d4c2376aa9887647258e96d121c47d599edcbaff48c87c31b6be3f718f0832a1b409ca4deb889ddceb1e88c37ee85d9c91086d3a571a80b7a1c133c7f1c6cea4989141985788028d1e1163f3ce6b0cf6d9b05d3f0927d066e467a709afecfbdc33d4caa9ca875b33a9fc1e3f84e9645f0b0818850293b7c7d") fanotify_mark(r0, 0x10, 0x1002, r1, &(0x7f0000001340)='./file0/file2\x00') r2 = creat(&(0x7f0000000180)='./file0\x00', 0x1d98dc20460a4655) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300001a, 0x204031, r2, 0xec776000) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x121d01, 0x82) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x200000087}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r3 = gettid() exit(0x800) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000100001000090455070103490200090582030004"], 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0x40, &(0x7f0000000000)=ANY=[]) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) ioprio_set$pid(0x2, r3, 0x4000) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) r5 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r5, 0x84, 0x72, &(0x7f0000000000)=""/4078, &(0x7f0000001000)=0xfee) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f0000000140)={[{@nossd_spread}, {@nodatacow}, {@enospc_debug}, {@nossd}, {@nodatasum}, {@autodefrag}, {@user_subvol_rm}, {@max_inline={'max_inline', 0x3d, [0x54, 0x33, 0x78, 0x39, 0x65, 0x36]}}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) openat(r0, &(0x7f0000001380)='./file0/file1\x00', 0x1, 0x40) ioctl$BTRFS_IOC_QGROUP_CREATE(r6, 0xc400941b, &(0x7f0000000000)={0x1, 0x690000}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000001100)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x1c, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0xfef2941943dd90a2) 3.871655205s ago: executing program 3 (id=645): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0xc850) sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010800040000000000000b00000008000300", @ANYRES32=r5, @ANYBLOB="0a000600080211000001000030005080110001004abee33908f8eef16f162471f400000005000200020000000800030005ac0f"], 0x58}}, 0x0) sendmsg$NL80211_CMD_GET_INTERFACE(r4, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x14, r3, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x4040011) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000014ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}, 0x1, 0x0, 0x0, 0x48800}, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffef, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x23f, 0x0, &(0x7f0000000180)="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", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3}, 0x50) r6 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet(0x2, 0x5, 0x1) connect$pppl2tp(r7, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r8, {0x2, 0x4e24, @empty}, 0x4, 0x0, 0x4}}, 0x2e) ioctl$FIBMAP(r6, 0x1, &(0x7f0000000040)=0x85) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r9 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x80000000002) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x73, 0x2, 0x2, 0x4002804c4, 0x9, 0x8000000000000000, 0xc595, 0x0, 0x4, 0xefffffffffffffff, 0x2000000000000000, 0x5, 0x8d], 0xeeee8000, 0x2002d3}) ioctl$KVM_RUN(r10, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x42282, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) syz_emit_vhci(&(0x7f00000023c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_conn_param_update_rsp={{0x13, 0x1, 0x2}, {0x2}}}}, 0xf) 3.254709721s ago: executing program 0 (id=646): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create1(0x80000) r2 = fcntl$dupfd(r0, 0x0, r0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x10000014}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x4, 0x7f, 0x2, 0x1, 0x7f, 0x6, 0xfffffff9, 0xfffffff2, 0x5f, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x24000, 0xe661, 0x4, 0x9, 0x3, 0x7fff, 0x7, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x10103, 0x0, 0x5, 0x3c, 0x91, 0x6, 0xfffffffd, 0x3, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x8, 0x12f, 0x8000, 0x10, 0x8, 0x129432e2, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffe, 0x7, 0x0, 0x10007, 0x5, 0x2f, 0xb98, 0x312, 0x78, 0x7, 0xa, 0x6, 0x4000, 0x8000, 0x9, 0x400, 0x1, 0x6, 0xfffffffd, 0x8, 0x1005, 0x7ff, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0xe, 0x80004, 0x1, 0x7, 0xb, 0x9, 0x48c93690, 0x3, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x1, 0x7fff, 0x6, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x85, 0x6, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d6, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0xbb2f, 0x3, 0x8, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x8ad, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x4, 0x5, 0xffffffff, 0x7ffffffe, 0x5, 0x8, 0x100c8, 0x3, 0x4, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x27, &(0x7f0000000000)=""/114}, 0xa8) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x44084) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000300000000000000fcffffff85800000c40000019500"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r2) 1.334685524s ago: executing program 0 (id=647): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYRESHEX], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x60}, 0x94) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a00)=ANY=[@ANYBLOB="98000000", @ANYRES16=r2, @ANYBLOB="010000000000000000000100000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5424c0008804800008024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff200009801c000080060001000200000008000200e000000105000300000000001400020077673000"/146], 0x98}}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) syz_clone(0x8040000, 0x0, 0xfc61, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) rseq(&(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x5, 0x7, 0x44, 0x9}, 0x2}, 0x20, 0x1, 0x0) getresgid(0x0, 0x0, 0x0) pidfd_getfd(r4, r0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB="04000000", @ANYRES16=r6, @ANYBLOB="010000000000000000002c00000008005800000000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300ffffffff"], 0x44}}, 0x0) sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x3f, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000011008188040f46ec0800b9cca7480ef421000000e3bd6efb440013030e001b000d000008ba8000001201", 0x2e}], 0x1}, 0x4044) 1.122607025s ago: executing program 5 (id=648): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) r2 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f00000002c0)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r2, 0x0, 0x0) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x4, 0x2, 0x3951}, 0x1c) r3 = epoll_create1(0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="12000000010000000800000002"], 0x50) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r5, &(0x7f0000001d00)={0x2020}, 0x2020) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fallocate(r0, 0x8, 0xc, 0x7fffffffffffffff) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000002140)={0x50, 0x0, r7}, 0x50) read$FUSE(0xffffffffffffffff, &(0x7f0000002900)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) fstat(r1, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000a00)={0x0, 0x0, 0x0}, &(0x7f0000000a40)=0xc) statx(0xffffffffffffff9c, &(0x7f0000000ac0)='./file0\x00', 0x2400, 0x10, &(0x7f0000000b00)) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f00000001c0)=@proc={0x10, 0x0, 0x25dfdbfd, 0x40000600}, 0xc, &(0x7f0000000240), 0x0, &(0x7f0000000c80)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r8, r9, r10}}}, @rights={{0x10}}], 0x50, 0x40000}, 0x44800) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000005940)={@val={0x0, 0x1}, @val={0x6, 0x0, 0x6, 0x0, 0xc}, @ipv4=@generic={{0x6, 0x4, 0x2, 0x2, 0x18, 0x66, 0x0, 0xb, 0x89, 0x0, @rand_addr=0x64010102, @broadcast, {[@ra={0x94, 0x4}]}}}}, 0x26) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000040)={0xc0000007}) close_range(r1, r1, 0x0) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000140)={0x0, 0x0, {0x9, 0x7, 0x10, 0x1f, 0x9, 0xff, 0x2, 0x70, 0xffffffffffffffff}}) sendmsg$kcm(r0, 0x0, 0x0) 0s ago: executing program 3 (id=649): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) r3 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r3, &(0x7f0000000000)={0xa0000001}) r7 = timerfd_create(0x8, 0x0) timerfd_settime(r7, 0x3, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) read(r7, &(0x7f0000002100)=""/66, 0x42) epoll_pwait2(r6, &(0x7f0000000540)=[{}], 0x1, 0x0, 0x0, 0x0) close_range(r2, r4, 0x0) r8 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r8, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f8, 0x400, 0x70bd29, 0x25dfdbff, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40010}, 0x4041) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYRESDEC=r0, @ANYRESOCT=r0, @ANYBLOB="fab0817dbcb5f31a70001280110001006272696467b678736c6176650000000858000580050019a103000000050005000000000005000ca100000000050007000000000005000a110000000005000800fc8577c9835f2a75a279771a31ff0000040018000500060001000000060002000100000005001e00000000000500010003000000140003006272696467655f736c6176655f30cd896779d7bb8b79a54f872fe1fb39afcecbe2e30ae4ee50fd6af100bd68f88a070000000000000000000000000000000043333e9a023f2342c6de5a8459a2f719c1d88fcd9203ddedd8db93450aa018abc21950ba3741ed2ca5099781f3491d4b437698dbd3eaf89a894f118aecbb2315e61842ebf493846ce65e6932517d240e821978e0a04157865e9492af79fc45274d94f8fad56b9a7496731ad2d7b5cd91ce18f9066df3e01ef34169bc65f07c35e968d557f29cf894d4faecd022c0951b502e75004544e3b65c59305d604fdfd0ccd256021b9595ad7f814c4eba12469ed46e21b029cf74bb30ac272d4046c22a50fd176155699f550933a6142ae8d91c9b71665871100e334860d425a878a7b02e1a0f6a38e51eb58d954e2dd74a7e206e2c43a1100a6a5dcef9256cfab76b4e142d9e360568a794c02ee885d77331e5c2da98acf8b9a0a132302217e1d87158c23302d612a019be510b4cf816584bc8c6d58b898d8562f054c0302070fd404e351e65d8e1f97a40daa785cdca4c86ce91cb4ced836b1b3c8ce6133b6c65705f8f7b1bce6fc0494c0d837b6ec2e2fcb502d371c7d5552e621026733da34e48c0a1e8c7389af375202fd66466737466c42a73a0c22e10ff06d9375e5c6661ccbddb9dc300c2db647cba85e6c9cbd85203c5ad6948a6d3404974a5e795a710d72fbf1d3ad2e3b2f17191c6a6a818665975a553d6cb6967119c2c629f2bee915d398cf24fd3f3ed9d018eb4b9c737246649435e3c5b3e4a9ea9f0346554e79971e3348a849f114a3e9a3010664e04d04a8a9fa41c3982426532a22ad323b34d7c807f44e6d22536b708d18182381946dfb3c1902f8fbff5b2cf2168cca54a65142f82579e1df94b918558d536119afb4a"], 0xa4}, 0x1, 0x0, 0x0, 0x24044898}, 0x4040) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000cc0)=@newtaction={0x7c, 0x30, 0xb, 0x5, 0x0, {}, [{0x68, 0x1, [@m_ct={0x64, 0x1, 0x0, 0x0, {{0x7}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0xffffffff, 0x0, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @local}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @multicast2}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e22}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8091}, 0x40) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x11, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@btf_id={0x18, 0x6, 0x3, 0x0, 0x1}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='GPL\x00', 0xfffffff9, 0x73, &(0x7f00000002c0)=""/115, 0x41100, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x3, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000380)=[0x1, 0x1, r5, 0x1, 0xffffffffffffffff, 0x1, 0x1], &(0x7f00000003c0)=[{0x4, 0x4, 0x4, 0x1}, {0x4, 0x2, 0x8, 0x5}, {0x3, 0x1, 0xb, 0x2}], 0x10, 0x5}, 0x94) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000880)=r10, 0x4) kernel console output (not intermixed with test programs): ] audit: type=1800 audit(1779654712.762:11): pid=7335 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.379" name="file1" dev="loop2" ino=1048643 res=0 errno=0 [ 294.501989][ T7351] loop1: detected capacity change from 0 to 256 [ 294.804685][ T7350] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 295.400950][ T3380] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.494791][ T3394] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.649507][ T3394] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.718486][ T5757] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 295.872741][ T5757] usb 3-1: Using ep0 maxpacket: 32 [ 295.884627][ T5757] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.884706][ T5757] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.884747][ T5757] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 295.884772][ T5757] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.962340][ T1573] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.963693][ T7153] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.999827][ T7153] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.002423][ T7153] bridge_slave_0: entered allmulticast mode [ 296.026167][ T7153] bridge_slave_0: entered promiscuous mode [ 296.038808][ T7153] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.041424][ T7153] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.043546][ T7153] bridge_slave_1: entered allmulticast mode [ 296.069700][ T5728] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 296.117642][ T5757] usb 3-1: config 0 descriptor?? [ 296.183731][ T7153] bridge_slave_1: entered promiscuous mode [ 296.243476][ T5728] usb 2-1: Using ep0 maxpacket: 16 [ 296.270202][ T5728] usb 2-1: config 0 interface 0 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 296.270242][ T5728] usb 2-1: config 0 interface 0 has no altsetting 0 [ 296.270280][ T5728] usb 2-1: New USB device found, idVendor=093a, idProduct=8001, bcdDevice= 0.00 [ 296.270306][ T5728] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.367491][ T7361] netlink: 128 bytes leftover after parsing attributes in process `syz.2.388'. [ 296.367517][ T7361] netlink: 20 bytes leftover after parsing attributes in process `syz.2.388'. [ 296.389639][ T5728] usb 2-1: config 0 descriptor?? [ 296.647966][ T7377] loop3: detected capacity change from 0 to 8 [ 296.663939][ T5757] ft260 0003:0403:6030.0004: unknown main item tag 0x0 [ 296.664147][ T5757] ft260 0003:0403:6030.0004: unknown main item tag 0x0 [ 296.858462][ T5757] ft260 0003:0403:6030.0004: chip code: 0000 0000 [ 297.003205][ T5728] hid-generic 0003:093A:8001.0005: unknown main item tag 0x2 [ 297.003245][ T5728] hid-generic 0003:093A:8001.0005: unknown main item tag 0x0 [ 297.003275][ T5728] hid-generic 0003:093A:8001.0005: unknown main item tag 0x0 [ 297.003301][ T5728] hid-generic 0003:093A:8001.0005: unknown main item tag 0x0 [ 297.003329][ T5728] hid-generic 0003:093A:8001.0005: unknown main item tag 0x0 [ 297.003356][ T5728] hid-generic 0003:093A:8001.0005: unknown main item tag 0x0 [ 297.177733][ T5728] hid-generic 0003:093A:8001.0005: hidraw0: USB HID v0.80 Device [HID 093a:8001] on usb-dummy_hcd.1-1/input0 [ 297.375653][ T5728] usb 2-1: USB disconnect, device number 24 [ 297.776805][ T7384] fido_id[7384]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 297.856090][ T5757] ft260 0003:0403:6030.0004: failed to retrieve system status [ 297.898839][ T5757] ft260 0003:0403:6030.0004: probe with driver ft260 failed with error -71 [ 298.829668][ T60] Bluetooth: hci0: unexpected event for opcode 0x0057 [ 299.006506][ T7419] netlink: 20 bytes leftover after parsing attributes in process `syz.3.398'. [ 299.199042][ T7153] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 299.295015][ T5279] 8021q: adding VLAN 0 to HW filter on device eth1 [ 299.415729][ T5757] usb 3-1: USB disconnect, device number 14 [ 299.448666][ T5728] usb 4-1: new low-speed USB device number 17 using dummy_hcd [ 299.501357][ T7153] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 299.638398][ T5728] usb 4-1: Invalid ep0 maxpacket: 64 [ 299.675510][ T7426] loop1: detected capacity change from 0 to 8 [ 299.781925][ T5728] usb 4-1: new low-speed USB device number 18 using dummy_hcd [ 299.978515][ T5750] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 300.009030][ T5728] usb 4-1: Invalid ep0 maxpacket: 64 [ 300.010653][ T5728] usb usb4-port1: attempt power cycle [ 301.248329][ T5750] usb 1-1: Using ep0 maxpacket: 16 [ 301.267257][ T5750] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 301.267280][ T5750] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.548885][ T5750] usb 1-1: config 0 descriptor?? [ 301.568304][ T5728] usb 4-1: new low-speed USB device number 19 using dummy_hcd [ 301.577886][ T5750] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 301.597604][ T5728] usb 4-1: Invalid ep0 maxpacket: 64 [ 301.788533][ T5728] usb 4-1: new low-speed USB device number 20 using dummy_hcd [ 302.050646][ T5728] usb 4-1: device descriptor read/8, error -71 [ 302.150279][ T2382] hsr_slave_0: left promiscuous mode [ 302.159094][ T5728] usb usb4-port1: unable to enumerate USB device [ 302.261899][ T2382] hsr_slave_1: left promiscuous mode [ 302.264774][ T2382] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 302.342619][ T2382] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 302.422621][ T2382] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 302.422653][ T2382] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 302.868891][ T5750] gspca_sonixj: reg_w1 err -110 [ 302.888431][ T5750] sonixj 1-1:0.0: probe with driver sonixj failed with error -110 [ 302.961727][ T7428] loop0: detected capacity change from 0 to 4096 [ 303.019023][ T7428] EXT4-fs: inline encryption not supported [ 303.019116][ T7428] ext4: Unknown parameter 'fowner' [ 303.389590][ T2382] veth1_macvtap: left promiscuous mode [ 303.389797][ T2382] veth0_macvtap: left promiscuous mode [ 304.382994][ T2382] veth1_vlan: left promiscuous mode [ 304.384365][ T2382] veth0_vlan: left promiscuous mode [ 304.989878][ T7453] fuse: Bad value for 'fd' [ 305.930114][ T5742] usb 1-1: USB disconnect, device number 17 [ 306.075282][ T7460] loop2: detected capacity change from 0 to 8 [ 306.218791][ T7459] loop0: detected capacity change from 0 to 1764 [ 306.257089][ T7459] iso9660: Unknown parameter 'ÿ00000000000000000000' [ 306.655275][ T7464] loop0: detected capacity change from 0 to 128 [ 306.672420][ T7464] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 306.695498][ T7464] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 306.735878][ T7466] netlink: 20 bytes leftover after parsing attributes in process `syz.2.415'. [ 308.233170][ T60] Bluetooth: hci0: unexpected event for opcode 0xffff [ 310.543830][ T7477] FAULT_INJECTION: forcing a failure. [ 310.543830][ T7477] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 310.543870][ T7477] CPU: 0 UID: 0 PID: 7477 Comm: syz.3.417 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 310.543900][ T7477] Tainted: [L]=SOFTLOCKUP [ 310.543907][ T7477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 310.543922][ T7477] Call Trace: [ 310.543930][ T7477] [ 310.543940][ T7477] dump_stack_lvl+0xe8/0x150 [ 310.543974][ T7477] should_fail_ex+0x46b/0x600 [ 310.544009][ T7477] _copy_to_user+0x31/0xb0 [ 310.544034][ T7477] simple_read_from_buffer+0xe1/0x170 [ 310.544064][ T7477] proc_fail_nth_read+0x1be/0x230 [ 310.544095][ T7477] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 310.544125][ T7477] ? rw_verify_area+0x2ac/0x4e0 [ 310.544151][ T7477] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 310.544179][ T7477] vfs_read+0x212/0xa80 [ 310.544214][ T7477] ? __pfx_vfs_read+0x10/0x10 [ 310.544244][ T7477] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 310.544268][ T7477] ? lockdep_hardirqs_on+0x7a/0x110 [ 310.544290][ T7477] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 310.544311][ T7477] ? mutex_lock_nested+0x152/0x1d0 [ 310.544340][ T7477] ? fdget_pos+0x252/0x320 [ 310.544372][ T7477] ksys_read+0x156/0x270 [ 310.544402][ T7477] ? __pfx_ksys_read+0x10/0x10 [ 310.544429][ T7477] ? __pfx_v4l2_ioctl+0x10/0x10 [ 310.544467][ T7477] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.544492][ T7477] do_syscall_64+0x15f/0x560 [ 310.544514][ T7477] ? trace_irq_disable+0x3b/0x140 [ 310.544539][ T7477] ? clear_bhb_loop+0x40/0x90 [ 310.544570][ T7477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.544592][ T7477] RIP: 0033:0x7fd716e5d68e [ 310.544612][ T7477] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 310.544631][ T7477] RSP: 002b:00007fd7150f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 310.544653][ T7477] RAX: ffffffffffffffda RBX: 00007fd7150f66c0 RCX: 00007fd716e5d68e [ 310.544670][ T7477] RDX: 000000000000000f RSI: 00007fd7150f60a0 RDI: 0000000000000004 [ 310.544684][ T7477] RBP: 00007fd7150f6090 R08: 0000000000000000 R09: 0000000000000000 [ 310.544697][ T7477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 310.544711][ T7477] R13: 00007fd717116038 R14: 00007fd717115fa0 R15: 00007ffce3c68058 [ 310.544754][ T7477] [ 311.689272][ T7485] netlink: 12 bytes leftover after parsing attributes in process `syz.3.422'. [ 311.689361][ T7485] netlink: 'syz.3.422': attribute type 2 has an invalid length. [ 311.723233][ T7487] netlink: 4 bytes leftover after parsing attributes in process `syz.1.423'. [ 312.011109][ T7489] fuse: Bad value for 'fd' [ 312.652493][ T2382] team0 (unregistering): Port device team_slave_1 removed [ 312.745471][ T2382] team0 (unregistering): Port device team_slave_0 removed [ 313.310451][ T7153] team0: Port device team_slave_0 added [ 313.523841][ T7502] loop0: detected capacity change from 0 to 512 [ 313.524844][ T7502] EXT4-fs: Ignoring removed nomblk_io_submit option [ 313.524909][ T7502] EXT4-fs: Ignoring removed mblk_io_submit option [ 313.566538][ T7502] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 313.566573][ T7502] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 313.600772][ T7153] team0: Port device team_slave_1 added [ 313.738681][ T7502] EXT4-fs (loop0): 1 truncate cleaned up [ 313.743282][ T7502] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 313.770889][ T7502] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 313.918219][ T7502] EXT4-fs (loop0): Remounting filesystem read-only [ 314.116722][ T7508] loop2: detected capacity change from 0 to 128 [ 314.136448][ T7508] omfs: Bad value for 'umask' [ 314.206812][ T5625] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.223383][ T7153] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 314.223397][ T7153] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 314.223419][ T7153] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 314.328685][ T7153] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 314.328704][ T7153] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 314.328735][ T7153] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 315.066297][ T7153] hsr_slave_0: entered promiscuous mode [ 315.103197][ T7153] hsr_slave_1: entered promiscuous mode [ 315.115820][ T7153] debugfs: 'hsr0' already exists in 'hsr' [ 315.115855][ T7153] Cannot create hsr debugfs directory [ 315.369830][ T7538] loop2: detected capacity change from 0 to 512 [ 315.377530][ T7538] ext4: block size(8192) > page size(4096) is only supported with CONFIG_TRANSPARENT_HUGEPAGE [ 315.377558][ T7538] EXT4-fs (loop2): bad block size 8192 [ 316.074351][ T7547] loop1: detected capacity change from 0 to 32768 [ 316.075594][ T7547] btrfs: Deprecated parameter 'usebackuproot' [ 316.075615][ T7547] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 316.079749][ T7547] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.436 (7547) [ 316.277580][ T7547] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 316.277618][ T7547] BTRFS info (device loop1): using crc32c checksum algorithm [ 316.401160][ T7548] loop2: detected capacity change from 0 to 40427 [ 316.419336][ T7548] F2FS-fs (loop2): invalid crc value [ 316.595964][ T7548] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 316.662970][ T7548] F2FS-fs (loop2): f2fs_disable_checkpoint starts, unusable: 0 [ 316.663002][ T7548] F2FS-fs (loop2): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 316.664440][ T7548] F2FS-fs (loop2): Start checkpoint disabled! [ 316.737180][ T12] BTRFS warning (device loop1): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 316.737342][ T7547] BTRFS error (device loop1): failed to load root extent [ 316.737380][ T7547] BTRFS warning (device loop1): try to load backup roots slot 1 [ 316.739100][ T1134] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 316.739238][ T7547] BTRFS warning (device loop1): couldn't read tree root [ 316.739260][ T7547] BTRFS warning (device loop1): try to load backup roots slot 2 [ 316.763501][ T7548] F2FS-fs (loop2): f2fs_disable_checkpoint finishes, err:0 [ 316.776324][ T12] BTRFS error (device loop1): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 316.776463][ T7547] BTRFS warning (device loop1): couldn't read tree root [ 316.776484][ T7547] BTRFS warning (device loop1): try to load backup roots slot 3 [ 316.827465][ T7548] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 316.869697][ T7547] BTRFS info (device loop1): rebuilding free space tree [ 317.055549][ T37] audit: type=1800 audit(1779654736.282:12): pid=7548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.435" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 317.118365][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.118475][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.217383][ T7547] BTRFS info (device loop1): checking UUID tree [ 317.218781][ T7547] BTRFS info (device loop1): enabling ssd optimizations [ 317.218807][ T7547] BTRFS info (device loop1): turning on async discard [ 317.218824][ T7547] BTRFS info (device loop1): enabling free space tree [ 317.218842][ T7547] BTRFS info (device loop1): force clearing of disk cache [ 317.218859][ T7547] BTRFS info (device loop1): enabling auto defrag [ 317.218876][ T7547] BTRFS info (device loop1): trying to use backup root at mount time [ 317.218897][ T7547] BTRFS info (device loop1): use lzo compression, level 1 [ 317.510584][ T7577] syz.2.435: attempt to access beyond end of device [ 317.510584][ T7577] loop2: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 317.575441][ T7573] syz.2.435: attempt to access beyond end of device [ 317.575441][ T7573] loop2: rw=2049, sector=77824, nr_sectors = 8 limit=40427 [ 317.611232][ T7573] syz.2.435: attempt to access beyond end of device [ 317.611232][ T7573] loop2: rw=2049, sector=77832, nr_sectors = 8 limit=40427 [ 317.615678][ T7573] syz.2.435: attempt to access beyond end of device [ 317.615678][ T7573] loop2: rw=2049, sector=77840, nr_sectors = 8 limit=40427 [ 317.619493][ T7573] syz.2.435: attempt to access beyond end of device [ 317.619493][ T7573] loop2: rw=2049, sector=77848, nr_sectors = 8 limit=40427 [ 317.717748][ T7573] syz.2.435: attempt to access beyond end of device [ 317.717748][ T7573] loop2: rw=2049, sector=77856, nr_sectors = 8 limit=40427 [ 317.833353][ T7573] syz.2.435: attempt to access beyond end of device [ 317.833353][ T7573] loop2: rw=2049, sector=77864, nr_sectors = 8 limit=40427 [ 317.833974][ T7573] syz.2.435: attempt to access beyond end of device [ 317.833974][ T7573] loop2: rw=2049, sector=77872, nr_sectors = 8 limit=40427 [ 317.898540][ T7573] syz.2.435: attempt to access beyond end of device [ 317.898540][ T7573] loop2: rw=2049, sector=77880, nr_sectors = 8 limit=40427 [ 318.931717][ T1134] kworker/u8:9: attempt to access beyond end of device [ 318.931717][ T1134] loop2: rw=1, sector=77888, nr_sectors = 8 limit=40427 [ 319.090761][ T7583] loop0: detected capacity change from 0 to 4096 [ 319.246326][ T7583] ntfs3(loop0): Primary boot: invalid bytes per index 0(0). [ 319.290255][ T7583] ntfs3(loop0): try to read out of volume at offset 0x1ffe00 [ 319.551314][ T5623] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 319.630195][ T5279] 8021q: adding VLAN 0 to HW filter on device eth2 [ 320.526811][ T7603] loop3: detected capacity change from 0 to 128 [ 320.570196][ T7601] loop1: detected capacity change from 0 to 512 [ 320.570995][ T7601] EXT4-fs: Ignoring removed mblk_io_submit option [ 320.636063][ T7601] EXT4-fs error (device loop1): ext4_iget_extra_inode:5128: inode #15: comm syz.1.439: corrupted in-inode xattr: e_value size too large [ 320.636103][ T7601] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 320.641290][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 320.641316][ C0] EXT4-fs (loop1): initial error at time 1779654739: ext4_iget_extra_inode:5128: inode 15 [ 320.641460][ C0] EXT4-fs (loop1): last error at time 1779654739: ext4_iget_extra_inode:5128: inode 15 [ 320.643914][ T7601] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.439: couldn't read orphan inode 15 (err -117) [ 320.643997][ T7601] loop1: lost filesystem error report for type 5 error -117 [ 320.723337][ T7603] EXT4-fs (loop3): Test dummy encryption mode enabled [ 320.958116][ T7601] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 321.176848][ T7603] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 321.206283][ T7603] ext4 filesystem being mounted at /92/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 322.539708][ T7153] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 322.565289][ T5623] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.662036][ T7153] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 322.686438][ T7153] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 322.867667][ T7153] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 322.884994][ T7153] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 322.912318][ T7618] loop0: detected capacity change from 0 to 1024 [ 322.913516][ T7618] ext4: Unknown parameter 'fscontext' [ 323.028695][ T7153] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 323.034063][ T7153] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 323.120751][ T7153] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 323.202409][ T1134] bio_check_eod: 60 callbacks suppressed [ 323.202432][ T1134] kworker/u8:9: attempt to access beyond end of device [ 323.202432][ T1134] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 323.235676][ T1134] CPU: 1 UID: 0 PID: 1134 Comm: kworker/u8:9 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 323.235711][ T1134] Tainted: [L]=SOFTLOCKUP [ 323.235718][ T1134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 323.235731][ T1134] Workqueue: writeback wb_workfn (flush-7:2) [ 323.235766][ T1134] Call Trace: [ 323.235774][ T1134] [ 323.235783][ T1134] dump_stack_lvl+0xe8/0x150 [ 323.235811][ T1134] f2fs_stop_checkpoint+0x3ef/0x5d0 [ 323.235846][ T1134] f2fs_write_end_io+0x1274/0x1740 [ 323.235884][ T1134] __submit_merged_bio+0x256/0x6a0 [ 323.235915][ T1134] f2fs_submit_page_write+0x2354/0x24f0 [ 323.235957][ T1134] ? f2fs_allocate_data_block+0x2c93/0x4130 [ 323.235988][ T1134] ? __pfx_f2fs_submit_page_write+0x10/0x10 [ 323.236016][ T1134] ? __f2fs_is_valid_blkaddr+0xd2d/0x1570 [ 323.236047][ T1134] do_write_page+0x40f/0xab0 [ 323.236072][ T1134] f2fs_outplace_write_data+0x11a/0x220 [ 323.236096][ T1134] f2fs_do_write_data_page+0x123b/0x16f0 [ 323.236133][ T1134] ? __pfx_f2fs_do_write_data_page+0x10/0x10 [ 323.236167][ T1134] ? __lock_acquire+0x6b5/0x2d10 [ 323.236191][ T1134] ? __lock_acquire+0x6b5/0x2d10 [ 323.236229][ T1134] f2fs_write_single_data_page+0x976/0x1880 [ 323.236270][ T1134] ? __pfx_f2fs_write_single_data_page+0x10/0x10 [ 323.236313][ T1134] ? folio_clear_dirty_for_io+0x1d4/0x700 [ 323.236340][ T1134] ? folio_clear_dirty_for_io+0x1d4/0x700 [ 323.236358][ T1134] ? folio_clear_dirty_for_io+0x56a/0x700 [ 323.236394][ T1134] ? folio_clear_dirty_for_io+0x1d4/0x700 [ 323.236416][ T1134] f2fs_write_data_pages+0x1a42/0x34f0 [ 323.236478][ T1134] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 323.236518][ T1134] ? __lock_acquire+0x6b5/0x2d10 [ 323.236576][ T1134] ? __lock_acquire+0x6b5/0x2d10 [ 323.236635][ T1134] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 323.236669][ T1134] do_writepages+0x32e/0x550 [ 323.236690][ T1134] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 323.236716][ T1134] ? reacquire_held_locks+0x104/0x190 [ 323.236743][ T1134] ? rt_spin_lock+0x1e0/0x400 [ 323.236776][ T1134] __writeback_single_inode+0x133/0x10e0 [ 323.236800][ T1134] ? rt_spin_unlock+0x160/0x200 [ 323.236828][ T1134] writeback_sb_inodes+0x97f/0x1980 [ 323.236877][ T1134] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 323.236926][ T1134] ? __pfx_rt_spin_lock+0x10/0x10 [ 323.236947][ T1134] ? rt_spin_unlock+0x14f/0x200 [ 323.236978][ T1134] wb_writeback+0x445/0xb00 [ 323.236999][ T1134] ? queue_io+0x251/0x440 [ 323.237023][ T1134] ? __pfx_wb_writeback+0x10/0x10 [ 323.237054][ T1134] wb_workfn+0x3fd/0xf20 [ 323.237079][ T1134] ? look_up_lock_class+0x57/0x110 [ 323.237101][ T1134] ? trace_hrtimer_start+0x82/0x200 [ 323.237134][ T1134] ? __pfx_wb_workfn+0x10/0x10 [ 323.237175][ T1134] ? do_raw_spin_lock+0x12b/0x2f0 [ 323.237198][ T1134] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 323.237220][ T1134] ? process_one_work+0x8be/0x1630 [ 323.237253][ T1134] ? process_one_work+0x8be/0x1630 [ 323.237296][ T1134] ? process_one_work+0x8be/0x1630 [ 323.237321][ T1134] process_one_work+0x98b/0x1630 [ 323.237365][ T1134] ? __pfx_process_one_work+0x10/0x10 [ 323.237389][ T1134] ? do_raw_spin_lock+0x12b/0x2f0 [ 323.237422][ T1134] worker_thread+0xb49/0x1140 [ 323.237462][ T1134] kthread+0x388/0x470 [ 323.237483][ T1134] ? __pfx_worker_thread+0x10/0x10 [ 323.237499][ T1134] ? __pfx_kthread+0x10/0x10 [ 323.237521][ T1134] ret_from_fork+0x514/0xb70 [ 323.237547][ T1134] ? __pfx_ret_from_fork+0x10/0x10 [ 323.237569][ T1134] ? __switch_to+0xc79/0x1410 [ 323.237591][ T1134] ? __pfx_kthread+0x10/0x10 [ 323.237613][ T1134] ret_from_fork_asm+0x1a/0x30 [ 323.237656][ T1134] [ 323.617852][ T1134] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 323.803073][ T7630] loop1: detected capacity change from 0 to 512 [ 323.870511][ T7630] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 323.870926][ T7630] EXT4-fs (loop1): orphan cleanup on readonly fs [ 323.981234][ T7603] EXT4-fs (loop3): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 324.073722][ T7630] Quota error (device loop1): find_block_dqentry: Quota for id 0 referenced but not present [ 324.073904][ T7630] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 324.073929][ T7630] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.447: Failed to acquire dquot type 1 [ 324.073953][ T7630] loop1: lost filesystem error report for type 5 error -5 [ 324.078266][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 324.078292][ C1] EXT4-fs (loop1): initial error at time 1779654743: ext4_acquire_dquot:7034 [ 324.078320][ C1] EXT4-fs (loop1): last error at time 1779654743: ext4_acquire_dquot:7034 [ 324.250236][ T7630] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.447: bg 0: block 40: padding at end of block bitmap is not set [ 324.250280][ T7630] loop1: lost filesystem error report for type 5 error -117 [ 324.356621][ T7630] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 324.356656][ T7630] loop1: lost filesystem error report for type 5 error -117 [ 324.388880][ T7630] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #16: comm syz.1.447: data will be lost [ 324.389224][ T7630] EXT4-fs (loop1): 1 truncate cleaned up [ 324.395889][ T7630] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 324.458337][ T32] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 324.535490][ T5628] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 324.670738][ T32] usb 1-1: Using ep0 maxpacket: 32 [ 324.672657][ T32] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 324.672715][ T32] usb 1-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice= 0.00 [ 324.672740][ T32] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.747769][ T32] usb 1-1: config 0 descriptor?? [ 324.998968][ T32] usb 1-1: string descriptor 0 read error: -71 [ 325.053676][ T5279] 8021q: adding VLAN 0 to HW filter on device eth3 [ 325.336162][ T5623] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.359884][ T32] usb 1-1: USB disconnect, device number 18 [ 326.781256][ T7153] 8021q: adding VLAN 0 to HW filter on device bond0 [ 327.087801][ T7153] 8021q: adding VLAN 0 to HW filter on device team0 [ 327.188077][ T1141] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.731491][ T1141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 328.467272][ T7673] loop0: detected capacity change from 0 to 512 [ 328.493055][ T7673] udf: Unknown parameter '/dev/ptmx' [ 328.527276][ T3394] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.527450][ T3394] bridge0: port 2(bridge_slave_1) entered forwarding state [ 328.647756][ T7678] netlink: 4472 bytes leftover after parsing attributes in process `syz.3.459'. [ 328.647785][ T7678] netlink: 4472 bytes leftover after parsing attributes in process `syz.3.459'. [ 328.795435][ T7680] loop2: detected capacity change from 0 to 1764 [ 329.310330][ T7687] netlink: 8 bytes leftover after parsing attributes in process `syz.3.461'. [ 329.315275][ T7687] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.317272][ T7687] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.361838][ T7695] loop9: detected capacity change from 0 to 7 [ 329.607839][ T7695] Dev loop9: unable to read RDB block 7 [ 329.607872][ T7695] loop9: AHDI p3 [ 329.607903][ T7695] loop9: partition table partially beyond EOD, truncated [ 329.738534][ T7703] loop0: detected capacity change from 0 to 64 [ 329.831395][ T7709] netlink: 48 bytes leftover after parsing attributes in process `syz.3.464'. [ 330.659442][ T7722] netlink: 12 bytes leftover after parsing attributes in process `syz.3.466'. [ 330.659468][ T7722] netlink: 'syz.3.466': attribute type 1 has an invalid length. [ 331.336457][ T5631] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 331.387488][ T7733] loop2: detected capacity change from 0 to 16 [ 331.445088][ T5631] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 331.496648][ T5631] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 331.552636][ T5631] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 331.554444][ T5631] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 331.846180][ T5279] 8021q: adding VLAN 0 to HW filter on device eth4 [ 334.254090][ T5631] Bluetooth: hci5: command tx timeout [ 335.018548][ T7733] erofs (device loop2): failed to read inode meta block (nid: 36): -4 [ 335.266652][ T7753] loop1: detected capacity change from 0 to 40427 [ 335.285888][ T7753] F2FS-fs (loop1): invalid crc value [ 335.440561][ T7753] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 335.450758][ T7753] F2FS-fs (loop1): f2fs_disable_checkpoint starts, unusable: 0 [ 335.450791][ T7753] F2FS-fs (loop1): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 335.450822][ T7753] F2FS-fs (loop1): Start checkpoint disabled! [ 335.537456][ T7753] F2FS-fs (loop1): f2fs_disable_checkpoint finishes, err:0 [ 335.548395][ T7753] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 335.594921][ T37] audit: type=1800 audit(1779654754.822:13): pid=7753 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.474" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 336.898352][ T5631] Bluetooth: hci5: command tx timeout [ 337.263965][ T7771] xt_l2tp: invalid flags combination: c [ 337.386755][ T3394] kworker/u8:18: attempt to access beyond end of device [ 337.386755][ T3394] loop1: rw=1, sector=77824, nr_sectors = 3272 limit=40427 [ 337.445509][ T3394] kworker/u8:18: attempt to access beyond end of device [ 337.445509][ T3394] loop1: rw=1, sector=81096, nr_sectors = 448 limit=40427 [ 337.523785][ T7773] UHID_CREATE from different security context by process 350 (syz.2.480), this is not allowed. [ 337.647965][ T3394] kworker/u8:18: attempt to access beyond end of device [ 337.647965][ T3394] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 337.648021][ T3394] CPU: 1 UID: 0 PID: 3394 Comm: kworker/u8:18 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 337.648043][ T3394] Tainted: [L]=SOFTLOCKUP [ 337.648049][ T3394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 337.648059][ T3394] Workqueue: writeback wb_workfn (flush-7:1) [ 337.648090][ T3394] Call Trace: [ 337.648095][ T3394] [ 337.648103][ T3394] dump_stack_lvl+0xe8/0x150 [ 337.648127][ T3394] f2fs_stop_checkpoint+0x3ef/0x5d0 [ 337.648177][ T3394] f2fs_write_end_io+0x1274/0x1740 [ 337.648223][ T3394] __submit_merged_bio+0x256/0x6a0 [ 337.648252][ T3394] f2fs_submit_merged_write+0x284/0x390 [ 337.648279][ T3394] ? __pfx_f2fs_submit_merged_write+0x10/0x10 [ 337.648314][ T3394] f2fs_sync_node_pages+0x11fe/0x13c0 [ 337.648356][ T3394] ? __pfx_f2fs_sync_node_pages+0x10/0x10 [ 337.648379][ T3394] ? __percpu_counter_sum+0x1c2/0x1e0 [ 337.648424][ T3394] ? blk_start_plug+0x51/0x1b0 [ 337.648445][ T3394] f2fs_write_node_pages+0x312/0x700 [ 337.648466][ T3394] ? __lock_acquire+0x6b5/0x2d10 [ 337.648491][ T3394] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 337.648523][ T3394] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 337.648546][ T3394] do_writepages+0x32e/0x550 [ 337.648564][ T3394] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 337.648586][ T3394] ? reacquire_held_locks+0x104/0x190 [ 337.648608][ T3394] ? rt_spin_lock+0x1e0/0x400 [ 337.648637][ T3394] __writeback_single_inode+0x133/0x10e0 [ 337.648656][ T3394] ? rt_spin_unlock+0x160/0x200 [ 337.648679][ T3394] writeback_sb_inodes+0x97f/0x1980 [ 337.648709][ T3394] ? lockdep_hardirqs_on+0x7a/0x110 [ 337.648731][ T3394] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 337.648778][ T3394] ? rcu_is_watching+0x15/0xb0 [ 337.648808][ T3394] wb_writeback+0x445/0xb00 [ 337.648828][ T3394] ? queue_io+0x251/0x440 [ 337.648849][ T3394] ? __pfx_wb_writeback+0x10/0x10 [ 337.648877][ T3394] wb_workfn+0x3fd/0xf20 [ 337.648897][ T3394] ? look_up_lock_class+0x57/0x110 [ 337.648914][ T3394] ? trace_hrtimer_start+0x82/0x200 [ 337.648942][ T3394] ? __pfx_wb_workfn+0x10/0x10 [ 337.648967][ T3394] ? do_raw_spin_lock+0x12b/0x2f0 [ 337.648987][ T3394] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 337.649006][ T3394] ? process_one_work+0x8be/0x1630 [ 337.649032][ T3394] ? process_one_work+0x8be/0x1630 [ 337.649065][ T3394] ? process_one_work+0x8be/0x1630 [ 337.649089][ T3394] process_one_work+0x98b/0x1630 [ 337.649129][ T3394] ? __pfx_process_one_work+0x10/0x10 [ 337.649152][ T3394] ? do_raw_spin_lock+0x12b/0x2f0 [ 337.649182][ T3394] worker_thread+0xb49/0x1140 [ 337.649204][ T3394] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 337.649231][ T3394] kthread+0x388/0x470 [ 337.649251][ T3394] ? __pfx_worker_thread+0x10/0x10 [ 337.649265][ T3394] ? __pfx_kthread+0x10/0x10 [ 337.649285][ T3394] ret_from_fork+0x514/0xb70 [ 337.649308][ T3394] ? __pfx_ret_from_fork+0x10/0x10 [ 337.649333][ T3394] ? __switch_to+0xc79/0x1410 [ 337.649353][ T3394] ? __pfx_kthread+0x10/0x10 [ 337.649373][ T3394] ret_from_fork_asm+0x1a/0x30 [ 337.649408][ T3394] [ 337.662616][ T3394] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 337.785528][ T3394] CPU: 1 UID: 0 PID: 3394 Comm: kworker/u8:18 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 337.785609][ T3394] Tainted: [L]=SOFTLOCKUP [ 337.785631][ T3394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 337.785671][ T3394] Workqueue: writeback wb_workfn (flush-7:1) [ 337.785784][ T3394] Call Trace: [ 337.785806][ T3394] [ 337.785827][ T3394] dump_stack_lvl+0xe8/0x150 [ 337.785949][ T3394] f2fs_stop_checkpoint+0x3ef/0x5d0 [ 337.786063][ T3394] f2fs_write_end_io+0x1274/0x1740 [ 337.786179][ T3394] __submit_merged_bio+0x256/0x6a0 [ 337.786281][ T3394] f2fs_submit_merged_write+0x284/0x390 [ 337.786345][ T3394] ? __pfx_f2fs_submit_merged_write+0x10/0x10 [ 337.786457][ T3394] f2fs_sync_node_pages+0x11fe/0x13c0 [ 337.786592][ T3394] ? __pfx_f2fs_sync_node_pages+0x10/0x10 [ 337.786672][ T3394] ? __percpu_counter_sum+0x1c2/0x1e0 [ 337.786847][ T3394] ? blk_start_plug+0x51/0x1b0 [ 337.786927][ T3394] f2fs_write_node_pages+0x312/0x700 [ 337.787005][ T3394] ? __lock_acquire+0x6b5/0x2d10 [ 337.787087][ T3394] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 337.787197][ T3394] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 337.787283][ T3394] do_writepages+0x32e/0x550 [ 337.787362][ T3394] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 337.787449][ T3394] ? reacquire_held_locks+0x104/0x190 [ 337.787528][ T3394] ? rt_spin_lock+0x1e0/0x400 [ 337.787622][ T3394] __writeback_single_inode+0x133/0x10e0 [ 337.787691][ T3394] ? rt_spin_unlock+0x160/0x200 [ 337.787771][ T3394] writeback_sb_inodes+0x97f/0x1980 [ 337.787921][ T3394] ? lockdep_hardirqs_on+0x7a/0x110 [ 337.788003][ T3394] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 337.788151][ T3394] ? rcu_is_watching+0x15/0xb0 [ 337.788219][ T3394] wb_writeback+0x445/0xb00 [ 337.788291][ T3394] ? queue_io+0x251/0x440 [ 337.788365][ T3394] ? __pfx_wb_writeback+0x10/0x10 [ 337.788461][ T3394] wb_workfn+0x3fd/0xf20 [ 337.788542][ T3394] ? look_up_lock_class+0x57/0x110 [ 337.788603][ T3394] ? trace_hrtimer_start+0x82/0x200 [ 337.788719][ T3394] ? __pfx_wb_workfn+0x10/0x10 [ 337.788802][ T3394] ? do_raw_spin_lock+0x12b/0x2f0 [ 337.788882][ T3394] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 337.788949][ T3394] ? process_one_work+0x8be/0x1630 [ 337.789039][ T3394] ? process_one_work+0x8be/0x1630 [ 337.789152][ T3394] ? process_one_work+0x8be/0x1630 [ 337.789235][ T3394] process_one_work+0x98b/0x1630 [ 337.789367][ T3394] ? __pfx_process_one_work+0x10/0x10 [ 337.789401][ T3394] ? do_raw_spin_lock+0x12b/0x2f0 [ 337.789541][ T3394] worker_thread+0xb49/0x1140 [ 337.789636][ T3394] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 337.789730][ T3394] kthread+0x388/0x470 [ 337.789803][ T3394] ? __pfx_worker_thread+0x10/0x10 [ 337.789875][ T3394] ? __pfx_kthread+0x10/0x10 [ 337.789948][ T3394] ret_from_fork+0x514/0xb70 [ 337.790031][ T3394] ? __pfx_ret_from_fork+0x10/0x10 [ 337.790105][ T3394] ? __switch_to+0xc79/0x1410 [ 337.790177][ T3394] ? __pfx_kthread+0x10/0x10 [ 337.790251][ T3394] ret_from_fork_asm+0x1a/0x30 [ 337.790371][ T3394] [ 337.874451][ T3394] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 338.504653][ T7774] usb usb7: usbfs: process 7774 (syz.0.481) did not claim interface 0 before use [ 338.620951][ T7778] loop0: detected capacity change from 0 to 4096 [ 338.623572][ T7778] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 338.775214][ T7778] ntfs3(loop0): ino=19, mi_enum_attr [ 338.775261][ T7778] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 338.928347][ T5631] Bluetooth: hci5: command tx timeout [ 339.595487][ T7785] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.664073][ T7785] bridge_slave_1: left promiscuous mode [ 339.664408][ T7785] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.771927][ T7791] loop0: detected capacity change from 0 to 1764 [ 341.113665][ T5631] Bluetooth: hci5: command tx timeout [ 341.474839][ T7802] loop3: detected capacity change from 0 to 40427 [ 341.612077][ T7802] F2FS-fs (loop3): invalid crc value [ 342.630931][ T7829] loop0: detected capacity change from 0 to 40427 [ 342.634267][ T7829] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 342.634293][ T7829] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 342.751345][ T7829] F2FS-fs (loop0): invalid crc value [ 342.886862][ T7829] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 342.899855][ T7829] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 342.899891][ T7829] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 342.993076][ T7802] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 343.062622][ T7832] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 343.493726][ T7841] loop2: detected capacity change from 0 to 40427 [ 343.998555][ T37] audit: type=1800 audit(2000000003.450:14): pid=7844 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.494" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 344.372326][ T7802] F2FS-fs (loop3): f2fs_disable_checkpoint starts, unusable: 0 [ 344.372355][ T7802] F2FS-fs (loop3): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 344.372387][ T7802] F2FS-fs (loop3): Start checkpoint disabled! [ 344.390098][ T7841] F2FS-fs (loop2): invalid crc value [ 344.579419][ T7841] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 344.595260][ T7841] F2FS-fs (loop2): f2fs_disable_checkpoint starts, unusable: 0 [ 344.595292][ T7841] F2FS-fs (loop2): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 344.595323][ T7841] F2FS-fs (loop2): Start checkpoint disabled! [ 344.746893][ T7841] F2FS-fs (loop2): f2fs_disable_checkpoint finishes, err:0 [ 344.763152][ T7841] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 344.917881][ T37] audit: type=1800 audit(2000000004.860:15): pid=7841 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.496" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 344.998064][ T7802] F2FS-fs (loop3): f2fs_disable_checkpoint finishes, err:0 [ 345.137736][ T7841] syz.2.496: attempt to access beyond end of device [ 345.137736][ T7841] loop2: rw=2049, sector=77824, nr_sectors = 8 limit=40427 [ 345.141944][ T7841] syz.2.496: attempt to access beyond end of device [ 345.141944][ T7841] loop2: rw=2049, sector=77832, nr_sectors = 8 limit=40427 [ 345.142567][ T7841] syz.2.496: attempt to access beyond end of device [ 345.142567][ T7841] loop2: rw=2049, sector=77840, nr_sectors = 8 limit=40427 [ 345.142959][ T7841] syz.2.496: attempt to access beyond end of device [ 345.142959][ T7841] loop2: rw=2049, sector=77848, nr_sectors = 8 limit=40427 [ 345.143403][ T7841] syz.2.496: attempt to access beyond end of device [ 345.143403][ T7841] loop2: rw=2049, sector=77856, nr_sectors = 8 limit=40427 [ 345.144960][ T7841] syz.2.496: attempt to access beyond end of device [ 345.144960][ T7841] loop2: rw=2049, sector=77864, nr_sectors = 8 limit=40427 [ 345.145374][ T7841] syz.2.496: attempt to access beyond end of device [ 345.145374][ T7841] loop2: rw=2049, sector=77872, nr_sectors = 8 limit=40427 [ 345.145797][ T7841] syz.2.496: attempt to access beyond end of device [ 345.145797][ T7841] loop2: rw=2049, sector=77880, nr_sectors = 8 limit=40427 [ 345.602218][ T13] kworker/u8:1: attempt to access beyond end of device [ 345.602218][ T13] loop0: rw=1, sector=77824, nr_sectors = 4096 limit=40427 [ 345.664196][ T1573] kworker/u8:13: attempt to access beyond end of device [ 345.664196][ T1573] loop2: rw=1, sector=77888, nr_sectors = 3720 limit=40427 [ 345.720761][ T57] CPU: 0 UID: 0 PID: 57 Comm: kworker/u8:3 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 345.720799][ T57] Tainted: [L]=SOFTLOCKUP [ 345.720808][ T57] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 345.720823][ T57] Workqueue: writeback wb_workfn (flush-7:2) [ 345.720866][ T57] Call Trace: [ 345.720876][ T57] [ 345.720885][ T57] dump_stack_lvl+0xe8/0x150 [ 345.720920][ T57] f2fs_stop_checkpoint+0x3ef/0x5d0 [ 345.720958][ T57] f2fs_write_end_io+0x1274/0x1740 [ 345.721007][ T57] __submit_merged_bio+0x256/0x6a0 [ 345.721048][ T57] __submit_merged_write_cond+0x3c9/0x4e0 [ 345.721092][ T57] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 345.721150][ T57] f2fs_write_data_pages+0x287e/0x34f0 [ 345.721227][ T57] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 345.721282][ T57] ? cfg80211_inform_single_bss_data+0xba3/0x1b80 [ 345.721357][ T57] ? __lock_acquire+0x6b5/0x2d10 [ 345.721429][ T57] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 345.721468][ T57] do_writepages+0x32e/0x550 [ 345.721496][ T57] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 345.721527][ T57] ? reacquire_held_locks+0x104/0x190 [ 345.721560][ T57] ? rt_spin_lock+0x1e0/0x400 [ 345.721603][ T57] __writeback_single_inode+0x133/0x10e0 [ 345.721639][ T57] ? rt_spin_unlock+0x160/0x200 [ 345.721675][ T57] writeback_sb_inodes+0x97f/0x1980 [ 345.721721][ T57] ? lockdep_hardirqs_on+0x7a/0x110 [ 345.721754][ T57] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 345.721823][ T57] ? rcu_is_watching+0x15/0xb0 [ 345.721868][ T57] wb_writeback+0x445/0xb00 [ 345.721896][ T57] ? queue_io+0x251/0x440 [ 345.721927][ T57] ? __pfx_wb_writeback+0x10/0x10 [ 345.721968][ T57] wb_workfn+0x3fd/0xf20 [ 345.721999][ T57] ? look_up_lock_class+0x57/0x110 [ 345.722023][ T57] ? trace_hrtimer_start+0x82/0x200 [ 345.722062][ T57] ? __pfx_wb_workfn+0x10/0x10 [ 345.722099][ T57] ? do_raw_spin_lock+0x12b/0x2f0 [ 345.722127][ T57] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 345.722155][ T57] ? process_one_work+0x8be/0x1630 [ 345.722192][ T57] ? process_one_work+0x8be/0x1630 [ 345.722241][ T57] ? process_one_work+0x8be/0x1630 [ 345.722275][ T57] process_one_work+0x98b/0x1630 [ 345.722335][ T57] ? __pfx_process_one_work+0x10/0x10 [ 345.722369][ T57] ? do_raw_spin_lock+0x12b/0x2f0 [ 345.722414][ T57] worker_thread+0xb49/0x1140 [ 345.722447][ T57] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 345.722488][ T57] kthread+0x388/0x470 [ 345.722516][ T57] ? __pfx_worker_thread+0x10/0x10 [ 345.722536][ T57] ? __pfx_kthread+0x10/0x10 [ 345.722565][ T57] ret_from_fork+0x514/0xb70 [ 345.722599][ T57] ? __pfx_ret_from_fork+0x10/0x10 [ 345.722630][ T57] ? __switch_to+0xc79/0x1410 [ 345.722666][ T57] ? __pfx_kthread+0x10/0x10 [ 345.722696][ T57] ret_from_fork_asm+0x1a/0x30 [ 345.722748][ T57] [ 345.754553][ T57] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 346.648311][ T6791] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 346.838239][ T6791] usb 2-1: Using ep0 maxpacket: 8 [ 346.849970][ T6791] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 346.882917][ T6791] usb 2-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40 [ 346.882952][ T6791] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.882975][ T6791] usb 2-1: Product: syz [ 346.882990][ T6791] usb 2-1: Manufacturer: syz [ 346.883006][ T6791] usb 2-1: SerialNumber: syz [ 347.534496][ T7864] loop3: detected capacity change from 0 to 2048 [ 347.960841][ T7866] loop2: detected capacity change from 0 to 32768 [ 347.992941][ T7864] loop3: p2 < > p4 [ 348.022454][ T7864] loop3: p4 size 8192 extends beyond EOD, truncated [ 348.119865][ T7866] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 349.289843][ T6791] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input20 [ 349.525677][ T4969] bcm5974 2-1:1.0: could not read from device [ 349.658347][ T5728] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 349.662517][ T4969] bcm5974 2-1:1.0: could not read from device [ 350.017641][ T4969] bcm5974 2-1:1.0: could not read from device [ 350.192147][ T6791] usb 2-1: USB disconnect, device number 25 [ 350.252252][ T5622] ocfs2: Unmounting device (7,2) on (node local) [ 350.399981][ T7894] loop1: detected capacity change from 0 to 256 [ 350.460849][ T7894] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 350.532677][ T7897] loop0: detected capacity change from 0 to 1024 [ 350.564975][ T5816] udevd[5816]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 350.598997][ T6889] udevd[6889]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 350.716064][ T7894] Process accounting resumed [ 351.207776][ T7894] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779264) [ 351.207815][ T7894] FAT-fs (loop1): Filesystem has been set read-only [ 351.250594][ T7910] loop3: detected capacity change from 0 to 64 [ 351.287198][ T7897] hfsplus: xattr search failed [ 351.330276][ T7897] hfsplus: xattr search failed [ 351.393466][ T7910] netlink: 4 bytes leftover after parsing attributes in process `syz.3.508'. [ 351.393496][ T7910] netlink: 5 bytes leftover after parsing attributes in process `syz.3.508'. [ 351.400323][ T7908] loop2: detected capacity change from 0 to 32768 [ 351.408014][ T37] audit: type=1800 audit(2000000011.230:16): pid=7897 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.497" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 351.408798][ T7908] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.504 (7908) [ 351.458369][ T7908] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 351.458404][ T7908] BTRFS info (device loop2): using sha256 checksum algorithm [ 351.458451][ T7908] BTRFS error (device loop2): superblock checksum mismatch [ 351.458595][ T7908] BTRFS error (device loop2): open_ctree failed: -22 [ 351.575323][ T32] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779264) [ 351.887557][ T7907] loop2: detected capacity change from 0 to 256 [ 351.895035][ T7907] exfat: Deprecated parameter 'utf8' [ 351.895103][ T7907] exfat: Deprecated parameter 'namecase' [ 351.895212][ T7907] exfat: Deprecated parameter 'namecase' [ 351.895237][ T7907] exfat: Deprecated parameter 'utf8' [ 352.050737][ T37] audit: type=1326 audit(2000000011.990:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7909 comm="syz.3.508" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd716e9ce59 code=0x7ffc0000 [ 352.050793][ T37] audit: type=1326 audit(2000000011.990:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7909 comm="syz.3.508" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd716e9ce59 code=0x7ffc0000 [ 352.050834][ T37] audit: type=1326 audit(2000000011.990:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7909 comm="syz.3.508" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd716e9ce59 code=0x7ffc0000 [ 352.050874][ T37] audit: type=1326 audit(2000000011.990:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7909 comm="syz.3.508" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd716e5d68e code=0x7ffc0000 [ 352.097450][ T37] audit: type=1326 audit(2000000012.040:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7909 comm="syz.3.508" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd716e9ce59 code=0x7ffc0000 [ 352.097843][ T37] audit: type=1326 audit(2000000012.040:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7909 comm="syz.3.508" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd716e9ce59 code=0x7ffc0000 [ 352.098253][ T37] audit: type=1326 audit(2000000012.040:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7909 comm="syz.3.508" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fd716e9ce59 code=0x7ffc0000 [ 352.129808][ T7907] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0x6a70c931, utbl_chksum : 0xe619d30d) [ 352.130234][ T7907] exFAT-fs (loop2): failed to test first cluster bit of root dir(5) [ 352.154325][ T7911] syz.3.508 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 352.154773][ T37] audit: type=1326 audit(2000000012.100:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7909 comm="syz.3.508" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd716e9ce59 code=0x7ffc0000 [ 352.154827][ T37] audit: type=1326 audit(2000000012.100:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7909 comm="syz.3.508" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd716e9ce59 code=0x7ffc0000 [ 352.409250][ T44] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 352.548312][ T44] usb 4-1: device descriptor read/64, error -71 [ 352.908427][ T44] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 353.089476][ T1141] bridge_slave_1: left allmulticast mode [ 353.089514][ T1141] bridge_slave_1: left promiscuous mode [ 353.089839][ T1141] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.208292][ T44] usb 4-1: device descriptor read/64, error -71 [ 353.318754][ T44] usb usb4-port1: attempt power cycle [ 353.362174][ T7923] af_packet: tpacket_rcv: packet too big, clamped from 572 to 4294967272. macoff=96 [ 353.473606][ T1141] bridge_slave_0: left allmulticast mode [ 353.473639][ T1141] bridge_slave_0: left promiscuous mode [ 353.473866][ T1141] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.749997][ T44] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 353.781205][ T44] usb 4-1: device descriptor read/8, error -71 [ 354.022891][ T44] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 354.042855][ T44] usb 4-1: device descriptor read/8, error -71 [ 354.089854][ T7921] loop0: detected capacity change from 0 to 40427 [ 354.149292][ T44] usb usb4-port1: unable to enumerate USB device [ 354.199732][ T7921] F2FS-fs (loop0): invalid crc value [ 354.747462][ T7921] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 355.069773][ T7921] F2FS-fs (loop0): f2fs_disable_checkpoint starts, unusable: 0 [ 355.069835][ T7921] F2FS-fs (loop0): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 355.069884][ T7921] F2FS-fs (loop0): Start checkpoint disabled! [ 355.269162][ T7947] loop3: detected capacity change from 0 to 256 [ 355.392465][ T7947] FAT-fs (loop3): Directory bread(block 64) failed [ 355.392530][ T7947] FAT-fs (loop3): Directory bread(block 65) failed [ 355.392636][ T7947] FAT-fs (loop3): Directory bread(block 66) failed [ 355.392662][ T7947] FAT-fs (loop3): Directory bread(block 67) failed [ 355.392870][ T7947] FAT-fs (loop3): Directory bread(block 68) failed [ 355.392896][ T7947] FAT-fs (loop3): Directory bread(block 69) failed [ 355.393024][ T7947] FAT-fs (loop3): Directory bread(block 70) failed [ 355.393046][ T7947] FAT-fs (loop3): Directory bread(block 71) failed [ 355.393243][ T7947] FAT-fs (loop3): Directory bread(block 72) failed [ 355.393268][ T7947] FAT-fs (loop3): Directory bread(block 73) failed [ 355.643772][ T7921] F2FS-fs (loop0): f2fs_disable_checkpoint finishes, err:0 [ 355.663077][ T7921] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 355.989508][ T7953] loop2: detected capacity change from 0 to 4096 [ 356.060031][ T1141] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 356.183933][ T1141] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 356.317531][ T1141] bond0 (unregistering): Released all slaves [ 356.551217][ T7956] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.515'. [ 356.734820][ T7947] netlink: 24 bytes leftover after parsing attributes in process `syz.3.512'. [ 356.734846][ T7947] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 356.791951][ T7728] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.792310][ T7728] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.792647][ T7728] bridge_slave_0: entered allmulticast mode [ 356.828098][ T7728] bridge_slave_0: entered promiscuous mode [ 356.845240][ T7728] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.845655][ T7728] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.846002][ T7728] bridge_slave_1: entered allmulticast mode [ 356.871297][ T7728] bridge_slave_1: entered promiscuous mode [ 356.943376][ T7728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 356.964470][ T7728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 357.232826][ T7728] team0: Port device team_slave_0 added [ 357.247083][ T7728] team0: Port device team_slave_1 added [ 357.680778][ T7969] NILFS error (device loop2): nilfs_readdir: zero-length directory entry [ 357.685347][ T7970] netlink: 44 bytes leftover after parsing attributes in process `syz.2.516'. [ 357.897902][ T37] kauditd_printk_skb: 41 callbacks suppressed [ 357.897949][ T37] audit: type=1326 audit(2000000017.840:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7966 comm="syz.3.518" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd716e9ce59 code=0x0 [ 358.177198][ T37] audit: type=1326 audit(2000000018.060:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7966 comm="syz.3.518" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd716e9ce59 code=0x0 [ 359.772373][ T7728] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 359.772394][ T7728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 359.772425][ T7728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 360.099585][ T7953] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 360.099841][ T7953] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 360.099865][ T7953] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 360.668326][ T1141] hsr_slave_0: left promiscuous mode [ 360.758724][ T1141] hsr_slave_1: left promiscuous mode [ 360.762821][ T1141] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 360.802437][ T1141] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 361.419141][ T1141] team0 (unregistering): Port device team_slave_1 removed [ 361.469205][ T1141] team0 (unregistering): Port device team_slave_0 removed [ 361.692489][ T7728] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 361.692509][ T7728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 361.692543][ T7728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 361.723558][ T5279] 8021q: adding VLAN 0 to HW filter on device eth5 [ 362.027820][ T7999] loop0: detected capacity change from 0 to 1024 [ 362.108714][ T7999] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 362.237768][ T8009] netlink: 92 bytes leftover after parsing attributes in process `syz.0.525'. [ 362.280013][ T8009] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 362.322279][ T8010] netlink: 1688 bytes leftover after parsing attributes in process `syz.1.528'. [ 362.622744][ T7728] hsr_slave_0: entered promiscuous mode [ 362.633442][ T7728] hsr_slave_1: entered promiscuous mode [ 362.640767][ T7728] debugfs: 'hsr0' already exists in 'hsr' [ 362.640852][ T7728] Cannot create hsr debugfs directory [ 362.760995][ T8014] fuse: Bad value for 'fd' [ 365.898065][ T8029] loop2: detected capacity change from 0 to 512 [ 366.400616][ T8029] EXT4-fs: Ignoring removed nomblk_io_submit option [ 366.406310][ T8029] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 366.416278][ T8029] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (21801!=33349) [ 366.416310][ T8029] EXT4-fs (loop2): group descriptors corrupted! [ 366.837693][ T5625] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.284071][ T8041] netlink: 10 bytes leftover after parsing attributes in process `syz.3.535'. [ 367.284102][ T8041] netlink: 10 bytes leftover after parsing attributes in process `syz.3.535'. [ 367.566288][ T8041] loop3: detected capacity change from 0 to 4096 [ 367.653882][ T8047] loop0: detected capacity change from 0 to 2048 [ 368.245411][ T8057] netlink: 1688 bytes leftover after parsing attributes in process `syz.1.538'. [ 368.336737][ T8047] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 368.526533][ T8041] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 369.854416][ T5279] 8021q: adding VLAN 0 to HW filter on device eth6 [ 370.756295][ T8041] ntfs3(loop3): ino=1a, mi_enum_attr [ 370.756574][ T8041] ntfs3(loop3): ino=1a, mi_enum_attr [ 370.756595][ T8041] ntfs3(loop3): Failed to initialize $Extend/$Reparse. [ 370.788096][ T8075] netlink: 8 bytes leftover after parsing attributes in process `syz.2.541'. [ 371.758491][ T44] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 371.908341][ T44] usb 2-1: Using ep0 maxpacket: 16 [ 371.915406][ T44] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 371.915437][ T44] usb 2-1: config 0 has no interface number 0 [ 371.915485][ T44] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 371.915525][ T44] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 371.918740][ T44] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 371.918771][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.918794][ T44] usb 2-1: Product: syz [ 371.918810][ T44] usb 2-1: Manufacturer: syz [ 371.918826][ T44] usb 2-1: SerialNumber: syz [ 372.068600][ T44] usb 2-1: config 0 descriptor?? [ 372.069976][ T8090] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 372.070129][ T8090] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 372.181735][ T8103] faux_driver vgem: [drm] Unknown color mode 6; guessing buffer size. [ 372.299033][ T8105] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 372.299141][ T8105] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 372.373643][ T44] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 372.373889][ T44] asix 2-1:0.34: probe with driver asix failed with error -32 [ 372.828043][ T8118] loop3: detected capacity change from 0 to 1024 [ 372.871003][ T8118] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 372.871150][ T8118] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 372.917580][ T37] audit: type=1800 audit(2000000032.860:69): pid=8118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.551" name="file0" dev="loop3" ino=19 res=0 errno=0 [ 372.918398][ T8118] FAULT_INJECTION: forcing a failure. [ 372.918398][ T8118] name failslab, interval 1, probability 0, space 0, times 0 [ 372.918441][ T8118] CPU: 0 UID: 0 PID: 8118 Comm: syz.3.551 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 372.918472][ T8118] Tainted: [L]=SOFTLOCKUP [ 372.918480][ T8118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 372.918498][ T8118] Call Trace: [ 372.918525][ T8118] [ 372.918665][ T8118] dump_stack_lvl+0xe8/0x150 [ 372.918766][ T8118] should_fail_ex+0x46b/0x600 [ 372.918799][ T8118] should_failslab+0xa8/0x100 [ 372.918830][ T8118] __kmalloc_cache_noprof+0x84/0x690 [ 372.918858][ T8118] ? alloc_pipe_info+0xe8/0x4d0 [ 372.918920][ T8118] alloc_pipe_info+0xe8/0x4d0 [ 372.918953][ T8118] splice_direct_to_actor+0xa19/0xc80 [ 372.918985][ T8118] ? kstrtouint+0x6e/0xe0 [ 372.919014][ T8118] ? __pfx_direct_splice_actor+0x10/0x10 [ 372.919046][ T8118] ? __pfx_aa_file_perm+0x10/0x10 [ 372.919074][ T8118] ? __lock_acquire+0x6b5/0x2d10 [ 372.919100][ T8118] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 372.919137][ T8118] do_splice_direct+0x19b/0x2a0 [ 372.919165][ T8118] ? __pfx_do_splice_direct+0x10/0x10 [ 372.919190][ T8118] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 372.919224][ T8118] ? rw_verify_area+0x25b/0x4e0 [ 372.919256][ T8118] do_sendfile+0x547/0x7e0 [ 372.919278][ T8118] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 372.919314][ T8118] ? __pfx_do_sendfile+0x10/0x10 [ 372.919350][ T8118] __se_sys_sendfile64+0x144/0x1a0 [ 372.919390][ T8118] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 372.919435][ T8118] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.919461][ T8118] do_syscall_64+0x15f/0x560 [ 372.919485][ T8118] ? trace_irq_disable+0x3b/0x140 [ 372.919513][ T8118] ? clear_bhb_loop+0x40/0x90 [ 372.919542][ T8118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.919566][ T8118] RIP: 0033:0x7fd716e9ce59 [ 372.919618][ T8118] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 372.919639][ T8118] RSP: 002b:00007fd7150f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 372.919692][ T8118] RAX: ffffffffffffffda RBX: 00007fd717115fa0 RCX: 00007fd716e9ce59 [ 372.919710][ T8118] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 372.919725][ T8118] RBP: 00007fd7150f6090 R08: 0000000000000000 R09: 0000000000000000 [ 372.919740][ T8118] R10: 0000000000007f03 R11: 0000000000000246 R12: 0000000000000001 [ 372.919754][ T8118] R13: 00007fd717116038 R14: 00007fd717115fa0 R15: 00007ffce3c68058 [ 372.919790][ T8118] [ 373.334753][ T5628] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 373.337555][ T44] usb 2-1: USB disconnect, device number 26 [ 373.998014][ T8116] loop0: detected capacity change from 0 to 32768 [ 374.399124][ T8116] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 374.487694][ T8128] netlink: 56 bytes leftover after parsing attributes in process `syz.2.552'. [ 374.487725][ T8128] netlink: 56 bytes leftover after parsing attributes in process `syz.2.552'. [ 374.487755][ T8128] netlink: 30 bytes leftover after parsing attributes in process `syz.2.552'. [ 374.527340][ T8116] XFS (loop0): Ending clean mount [ 377.803259][ T8173] loop2: detected capacity change from 0 to 40427 [ 377.805212][ T8173] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 377.805238][ T8173] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 377.814984][ T8173] F2FS-fs (loop2): invalid crc value [ 377.952522][ T8173] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 377.998260][ T8173] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 377.998293][ T8173] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 378.652827][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.652942][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.736635][ T37] audit: type=1800 audit(2000000038.390:70): pid=8187 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.562" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 378.886062][ T5625] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 380.407142][ T8178] loop1: detected capacity change from 0 to 32768 [ 380.434339][ T8178] btrfs: Deprecated parameter 'usebackuproot' [ 380.434369][ T8178] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 380.730568][ T8199] loop3: detected capacity change from 0 to 4096 [ 380.765199][ T8178] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.563 (8178) [ 382.447050][ T8178] BTRFS error (device loop1): open_ctree failed: -4 [ 382.538306][ T44] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 382.773299][ T44] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 382.773333][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.773355][ T44] usb 1-1: Product: syz [ 382.773370][ T44] usb 1-1: Manufacturer: syz [ 382.773384][ T44] usb 1-1: SerialNumber: syz [ 383.669199][ T32] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 383.882770][ T7728] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 383.899209][ T32] usb 2-1: Using ep0 maxpacket: 16 [ 383.996012][ T32] usb 2-1: config 0 interface 0 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 383.996106][ T32] usb 2-1: config 0 interface 0 has no altsetting 0 [ 383.996142][ T32] usb 2-1: New USB device found, idVendor=093a, idProduct=8001, bcdDevice= 0.00 [ 383.996167][ T32] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.145763][ T32] usb 2-1: config 0 descriptor?? [ 384.183890][ T7728] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 384.262426][ T7728] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 384.464173][ T44] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 384.464243][ T44] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 384.575901][ T32] hid-generic 0003:093A:8001.0006: unknown main item tag 0x2 [ 384.575940][ T32] hid-generic 0003:093A:8001.0006: unknown main item tag 0x0 [ 384.575966][ T32] hid-generic 0003:093A:8001.0006: unknown main item tag 0x0 [ 384.575992][ T32] hid-generic 0003:093A:8001.0006: unknown main item tag 0x0 [ 384.576019][ T32] hid-generic 0003:093A:8001.0006: unknown main item tag 0x0 [ 384.576045][ T32] hid-generic 0003:093A:8001.0006: unknown main item tag 0x0 [ 384.747930][ T44] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 384.747993][ T44] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 384.804445][ T7728] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 384.821173][ T7728] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 384.867145][ T32] hid-generic 0003:093A:8001.0006: hidraw0: USB HID v0.80 Device [HID 093a:8001] on usb-dummy_hcd.1-1/input0 [ 384.981436][ T44] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 385.020490][ T7728] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 385.022760][ T32] usb 2-1: USB disconnect, device number 27 [ 385.051150][ T7728] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 385.055047][ T44] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 385.118404][ T44] usb 1-1: USB disconnect, device number 19 [ 385.272059][ T7728] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 385.834541][ T8210] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 385.834889][ T8210] block device autoloading is deprecated and will be removed. [ 386.971980][ T7728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 387.035776][ T7728] 8021q: adding VLAN 0 to HW filter on device team0 [ 387.065328][ T2228] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.065506][ T2228] bridge0: port 1(bridge_slave_0) entered forwarding state [ 387.167377][ T1040] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.167559][ T1040] bridge0: port 2(bridge_slave_1) entered forwarding state [ 388.046319][ T7728] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 388.766552][ T7728] veth0_vlan: entered promiscuous mode [ 388.807105][ T7728] veth1_vlan: entered promiscuous mode [ 388.877632][ T7728] veth0_macvtap: entered promiscuous mode [ 388.891050][ T7728] veth1_macvtap: entered promiscuous mode [ 388.931461][ T7728] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 388.962244][ T7728] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 388.984372][ T1141] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.984652][ T1141] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.984693][ T1141] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.984730][ T1141] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.061498][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.061522][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.691812][ T60] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 390.721087][ T60] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 390.726128][ T60] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 390.754509][ T60] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 390.798365][ T60] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 391.901057][ T13] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.297928][ T13] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.642958][ T13] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.752786][ T8280] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.753104][ T8280] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.753313][ T8280] bridge_slave_0: entered allmulticast mode [ 392.755828][ T8280] bridge_slave_0: entered promiscuous mode [ 392.767458][ T8280] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.783718][ T8280] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.784669][ T8280] bridge_slave_1: entered allmulticast mode [ 392.804408][ T8280] bridge_slave_1: entered promiscuous mode [ 392.995626][ T13] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.088372][ T5631] Bluetooth: hci2: command tx timeout [ 393.118050][ T8280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 393.144452][ T8280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 393.198883][ T8280] team0: Port device team_slave_0 added [ 393.203435][ T8280] team0: Port device team_slave_1 added [ 393.250983][ T8280] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 393.251002][ T8280] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 393.251034][ T8280] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 393.273998][ T8280] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 393.274016][ T8280] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 393.274048][ T8280] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 393.450815][ T8280] hsr_slave_0: entered promiscuous mode [ 393.454467][ T8280] hsr_slave_1: entered promiscuous mode [ 393.456294][ T8280] debugfs: 'hsr0' already exists in 'hsr' [ 393.456312][ T8280] Cannot create hsr debugfs directory [ 394.199107][ T13] bridge_slave_1: left allmulticast mode [ 394.199135][ T13] bridge_slave_1: left promiscuous mode [ 394.199354][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.309878][ T13] bridge_slave_0: left allmulticast mode [ 394.309908][ T13] bridge_slave_0: left promiscuous mode [ 394.310110][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.170007][ T5631] Bluetooth: hci2: command tx timeout [ 395.229107][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 395.289031][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 395.331163][ T13] bond0 (unregistering): Released all slaves [ 396.308719][ T5279] 8021q: adding VLAN 0 to HW filter on device eth5 [ 397.248503][ T5631] Bluetooth: hci2: command tx timeout [ 397.338995][ T13] hsr_slave_0: left promiscuous mode [ 397.378320][ T13] hsr_slave_1: left promiscuous mode [ 397.379489][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 397.379516][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 397.419519][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 397.419555][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 397.500558][ T13] veth1_macvtap: left promiscuous mode [ 397.500663][ T13] veth0_macvtap: left promiscuous mode [ 397.500951][ T13] veth1_vlan: left promiscuous mode [ 397.501157][ T13] veth0_vlan: left promiscuous mode [ 398.369725][ T13] team0 (unregistering): Port device team_slave_1 removed [ 398.430127][ T13] team0 (unregistering): Port device team_slave_0 removed [ 399.329163][ T5631] Bluetooth: hci2: command tx timeout [ 399.412787][ T8280] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 399.531823][ T8280] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 399.545102][ T8280] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 399.612509][ T8280] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 399.613752][ T8280] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 399.663860][ T8280] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 399.706260][ T8280] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 399.724324][ T8280] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 400.030310][ T8280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 400.064737][ T8280] 8021q: adding VLAN 0 to HW filter on device team0 [ 400.087431][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.087629][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 400.138616][ T1040] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.187118][ T1040] bridge0: port 2(bridge_slave_1) entered forwarding state [ 400.727459][ T8280] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 400.945798][ T5631] Bluetooth: hci4: unexpected event for opcode 0x200a [ 400.954414][ T5631] Bluetooth: hci4: unexpected event for opcode 0x200a [ 401.268420][ T822] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 401.422282][ T8280] veth0_vlan: entered promiscuous mode [ 401.439280][ T822] usb 4-1: Using ep0 maxpacket: 16 [ 401.456497][ T822] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 401.456532][ T822] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 401.456557][ T822] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 401.456601][ T822] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 401.456626][ T822] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.542021][ T822] usb 4-1: config 0 descriptor?? [ 401.750718][ T8280] veth1_vlan: entered promiscuous mode [ 402.006135][ T822] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 402.006176][ T822] microsoft 0003:045E:07DA.0007: unknown main item tag 0x4 [ 402.006366][ T822] microsoft 0003:045E:07DA.0007: ignoring exceeding usage max [ 402.011904][ T822] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 402.012009][ T822] microsoft 0003:045E:07DA.0007: unknown main item tag 0x4 [ 402.012090][ T822] microsoft 0003:045E:07DA.0007: item fetching failed at offset 33/34 [ 402.014572][ T822] microsoft 0003:045E:07DA.0007: parse failed [ 402.014862][ T822] microsoft 0003:045E:07DA.0007: probe with driver microsoft failed with error -22 [ 402.154858][ T823] usb 4-1: USB disconnect, device number 26 [ 402.252065][ T822] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 402.391612][ T8280] veth0_macvtap: entered promiscuous mode [ 402.416757][ T8280] veth1_macvtap: entered promiscuous mode [ 402.481649][ T822] usb 2-1: Using ep0 maxpacket: 16 [ 402.504893][ T822] usb 2-1: config index 0 descriptor too short (expected 65, got 36) [ 402.504953][ T822] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 402.504973][ T822] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 55, changing to 9 [ 402.504993][ T822] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 8496, setting to 1024 [ 402.505012][ T822] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 402.505043][ T822] usb 2-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 402.505059][ T822] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.595137][ T822] usb 2-1: config 0 descriptor?? [ 402.665634][ T822] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input22 [ 402.668106][ T8280] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 402.791439][ T8280] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 402.908349][ T5728] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 403.017520][ T1040] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.068428][ T5728] usb 1-1: Using ep0 maxpacket: 16 [ 403.085732][ T5728] usb 1-1: config 0 interface 0 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 403.085869][ T5728] usb 1-1: config 0 interface 0 has no altsetting 0 [ 403.085896][ T5728] usb 1-1: New USB device found, idVendor=093a, idProduct=8001, bcdDevice= 0.00 [ 403.085913][ T5728] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.170825][ T1040] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.182115][ T1040] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.190153][ T1040] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.198466][ T5728] usb 1-1: config 0 descriptor?? [ 403.290570][ T822] usb 2-1: USB disconnect, device number 28 [ 403.290673][ C1] pxrc 2-1:0.0: pxrc_usb_irq - usb_submit_urb failed with result: -19 [ 403.903911][ T5728] hid-generic 0003:093A:8001.0008: unknown main item tag 0x2 [ 403.903947][ T5728] hid-generic 0003:093A:8001.0008: unknown main item tag 0x0 [ 403.903972][ T5728] hid-generic 0003:093A:8001.0008: unknown main item tag 0x0 [ 403.903997][ T5728] hid-generic 0003:093A:8001.0008: unknown main item tag 0x0 [ 403.904035][ T5728] hid-generic 0003:093A:8001.0008: unknown main item tag 0x0 [ 403.904060][ T5728] hid-generic 0003:093A:8001.0008: unknown main item tag 0x0 [ 404.396924][ T5728] hid-generic 0003:093A:8001.0008: hidraw0: USB HID v0.80 Device [HID 093a:8001] on usb-dummy_hcd.0-1/input0 [ 404.503260][ T5728] usb 1-1: USB disconnect, device number 20 [ 405.236089][ T8418] loop2: detected capacity change from 0 to 40427 [ 405.254348][ T8418] F2FS-fs (loop2): invalid crc value [ 405.389950][ T8418] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 405.397815][ T8418] F2FS-fs (loop2): f2fs_disable_checkpoint starts, unusable: 0 [ 405.397849][ T8418] F2FS-fs (loop2): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 405.397880][ T8418] F2FS-fs (loop2): Start checkpoint disabled! [ 405.407171][ T8425] fido_id[8425]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 405.681679][ T8418] F2FS-fs (loop2): f2fs_disable_checkpoint finishes, err:0 [ 405.687430][ T8418] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 405.740479][ T37] audit: type=1800 audit(2000000065.680:71): pid=8418 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.585" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 405.850506][ T8418] bio_check_eod: 3 callbacks suppressed [ 405.850558][ T8418] syz.2.585: attempt to access beyond end of device [ 405.850558][ T8418] loop2: rw=2049, sector=77824, nr_sectors = 8 limit=40427 [ 405.851376][ T8418] syz.2.585: attempt to access beyond end of device [ 405.851376][ T8418] loop2: rw=2049, sector=77832, nr_sectors = 8 limit=40427 [ 405.852100][ T8418] syz.2.585: attempt to access beyond end of device [ 405.852100][ T8418] loop2: rw=2049, sector=77840, nr_sectors = 8 limit=40427 [ 405.852593][ T8418] syz.2.585: attempt to access beyond end of device [ 405.852593][ T8418] loop2: rw=2049, sector=77848, nr_sectors = 8 limit=40427 [ 405.853094][ T8418] syz.2.585: attempt to access beyond end of device [ 405.853094][ T8418] loop2: rw=2049, sector=77856, nr_sectors = 8 limit=40427 [ 405.853597][ T8418] syz.2.585: attempt to access beyond end of device [ 405.853597][ T8418] loop2: rw=2049, sector=77864, nr_sectors = 8 limit=40427 [ 405.854083][ T8418] syz.2.585: attempt to access beyond end of device [ 405.854083][ T8418] loop2: rw=2049, sector=77872, nr_sectors = 8 limit=40427 [ 405.856231][ T8418] syz.2.585: attempt to access beyond end of device [ 405.856231][ T8418] loop2: rw=2049, sector=77880, nr_sectors = 8 limit=40427 [ 406.588323][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 406.588347][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.688440][ T5750] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 406.724508][ T1141] kworker/u8:10: attempt to access beyond end of device [ 406.724508][ T1141] loop2: rw=1, sector=77888, nr_sectors = 2080 limit=40427 [ 406.838690][ T5750] usb 1-1: Using ep0 maxpacket: 32 [ 406.840428][ T1141] kworker/u8:10: attempt to access beyond end of device [ 406.840428][ T1141] loop2: rw=1, sector=79968, nr_sectors = 1640 limit=40427 [ 406.874440][ T5750] usb 1-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 406.874473][ T5750] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.874494][ T5750] usb 1-1: Product: syz [ 406.874509][ T5750] usb 1-1: Manufacturer: syz [ 406.874525][ T5750] usb 1-1: SerialNumber: syz [ 406.877404][ T1141] CPU: 1 UID: 0 PID: 1141 Comm: kworker/u8:10 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 406.877464][ T1141] Tainted: [L]=SOFTLOCKUP [ 406.877479][ T1141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 406.877505][ T1141] Workqueue: writeback wb_workfn (flush-7:2) [ 406.877565][ T1141] Call Trace: [ 406.877574][ T1141] [ 406.877584][ T1141] dump_stack_lvl+0xe8/0x150 [ 406.877618][ T1141] f2fs_stop_checkpoint+0x3ef/0x5d0 [ 406.877659][ T1141] f2fs_write_end_io+0x1274/0x1740 [ 406.877711][ T1141] __submit_merged_bio+0x256/0x6a0 [ 406.877754][ T1141] __submit_merged_write_cond+0x3c9/0x4e0 [ 406.877800][ T1141] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 406.877864][ T1141] f2fs_write_data_pages+0x287e/0x34f0 [ 406.877947][ T1141] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 406.878001][ T1141] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 406.878077][ T1141] ? __lock_acquire+0x6b5/0x2d10 [ 406.878125][ T1141] ? __lock_acquire+0x6b5/0x2d10 [ 406.878185][ T1141] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 406.878223][ T1141] do_writepages+0x32e/0x550 [ 406.878251][ T1141] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 406.878288][ T1141] ? reacquire_held_locks+0x104/0x190 [ 406.878319][ T1141] ? rt_spin_lock+0x1e0/0x400 [ 406.878363][ T1141] __writeback_single_inode+0x133/0x10e0 [ 406.878390][ T1141] ? rt_spin_unlock+0x160/0x200 [ 406.878424][ T1141] writeback_sb_inodes+0x97f/0x1980 [ 406.878473][ T1141] ? lockdep_hardirqs_on+0x7a/0x110 [ 406.878507][ T1141] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 406.878584][ T1141] ? rcu_is_watching+0x15/0xb0 [ 406.878629][ T1141] wb_writeback+0x445/0xb00 [ 406.878658][ T1141] ? queue_io+0x251/0x440 [ 406.878691][ T1141] ? __pfx_wb_writeback+0x10/0x10 [ 406.878736][ T1141] wb_workfn+0x3fd/0xf20 [ 406.878766][ T1141] ? look_up_lock_class+0x57/0x110 [ 406.878792][ T1141] ? trace_hrtimer_start+0x82/0x200 [ 406.878835][ T1141] ? __pfx_wb_workfn+0x10/0x10 [ 406.878872][ T1141] ? do_raw_spin_lock+0x12b/0x2f0 [ 406.878902][ T1141] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 406.878931][ T1141] ? process_one_work+0x8be/0x1630 [ 406.878969][ T1141] ? process_one_work+0x8be/0x1630 [ 406.879020][ T1141] ? process_one_work+0x8be/0x1630 [ 406.879053][ T1141] process_one_work+0x98b/0x1630 [ 406.879118][ T1141] ? __pfx_process_one_work+0x10/0x10 [ 406.879151][ T1141] ? do_raw_spin_lock+0x12b/0x2f0 [ 406.879199][ T1141] worker_thread+0xb49/0x1140 [ 406.879257][ T1141] kthread+0x388/0x470 [ 406.879293][ T1141] ? __pfx_worker_thread+0x10/0x10 [ 406.879314][ T1141] ? __pfx_kthread+0x10/0x10 [ 406.879343][ T1141] ret_from_fork+0x514/0xb70 [ 406.879376][ T1141] ? __pfx_ret_from_fork+0x10/0x10 [ 406.879406][ T1141] ? __switch_to+0xc79/0x1410 [ 406.879436][ T1141] ? __pfx_kthread+0x10/0x10 [ 406.879466][ T1141] ret_from_fork_asm+0x1a/0x30 [ 406.879519][ T1141] [ 407.202000][ T1141] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 407.265043][ T5750] usb 1-1: config 0 descriptor?? [ 407.288230][ T32] loop2: lost filesystem error report for type 5 error -108 [ 407.304854][ T5750] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 407.305415][ T5750] dvb-usb: bulk message failed: -22 (4/0) [ 407.305437][ T5750] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 407.305585][ T5750] dvb-usb: bulk message failed: -22 (5/0) [ 407.305603][ T5750] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 407.616050][ T5750] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 407.635338][ T5750] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 407.635478][ T5750] usb 1-1: media controller created [ 407.754819][ T5750] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 407.770613][ T1134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.770659][ T1134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.129220][ T5750] usb 1-1: selecting invalid altsetting 3 [ 408.129243][ T5750] ttusb2: set interface to alts=3 failed [ 408.228727][ T8448] loop3: detected capacity change from 0 to 512 [ 408.274438][ T8448] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 408.274588][ T8448] ext4 filesystem being mounted at /129/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 408.867969][ T5750] DVB: Unable to find symbol tda10086_attach() [ 408.868064][ T5750] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 408.883398][ T5750] dvb-usb: bulk message failed: -22 (4/0) [ 408.883421][ T5750] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 408.883528][ T5750] dvb-usb: bulk message failed: -22 (5/0) [ 408.883542][ T5750] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 408.883602][ T5750] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 408.956891][ T5750] usb 1-1: USB disconnect, device number 21 [ 408.959070][ T5631] Bluetooth: hci4: SCO packet for unknown connection handle 100 [ 409.138742][ T5750] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 409.295914][ T5628] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.626806][ T8458] loop2: detected capacity change from 0 to 1024 [ 409.673925][ T8458] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 409.704694][ T8458] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 409.705142][ T8458] EXT4-fs (loop2): orphan cleanup on readonly fs [ 410.113299][ T8462] loop5: detected capacity change from 0 to 40427 [ 410.158329][ T8458] EXT4-fs error (device loop2): __ext4_get_inode_loc:4885: comm syz.2.591: Invalid inode table block 0 in block_group 0 [ 410.158448][ T8458] loop2: lost filesystem error report for type 5 error -117 [ 410.179738][ C0] EXT4-fs (loop2): initial error at time 2000000070: __ext4_get_inode_loc:4885 [ 410.179773][ C0] EXT4-fs (loop2): last error at time 2000000070: __ext4_get_inode_loc:4885 [ 410.325844][ T8462] F2FS-fs (loop5): invalid crc value [ 410.447909][ T8462] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 410.555355][ T8462] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 410.658376][ T8462] F2FS-fs (loop5): Inconsistent segment (8) type [1, 0] in SSA and SIT [ 410.658496][ T8462] CPU: 1 UID: 0 PID: 8462 Comm: syz.5.343 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 410.658530][ T8462] Tainted: [L]=SOFTLOCKUP [ 410.658540][ T8462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 410.658554][ T8462] Call Trace: [ 410.658563][ T8462] [ 410.658574][ T8462] dump_stack_lvl+0xe8/0x150 [ 410.658612][ T8462] f2fs_stop_checkpoint+0x3ef/0x5d0 [ 410.658652][ T8462] do_garbage_collect+0x1502/0x6dd0 [ 410.658680][ T8462] ? __lock_acquire+0x6b5/0x2d10 [ 410.658735][ T8462] ? do_raw_spin_lock+0x12b/0x2f0 [ 410.658779][ T8462] ? lockdep_hardirqs_on+0x7a/0x110 [ 410.658829][ T8462] ? __pfx_do_garbage_collect+0x10/0x10 [ 410.658876][ T8462] ? __lock_acquire+0x6b5/0x2d10 [ 410.658911][ T8462] ? do_raw_spin_lock+0x12b/0x2f0 [ 410.658951][ T8462] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 410.658976][ T8462] ? lockdep_hardirqs_on+0x7a/0x110 [ 410.658999][ T8462] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 410.659023][ T8462] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 410.659065][ T8462] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 410.659088][ T8462] ? lockdep_hardirqs_on+0x7a/0x110 [ 410.659112][ T8462] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 410.659139][ T8462] f2fs_gc+0xcca/0x24d0 [ 410.659198][ T8462] ? __pfx_f2fs_gc+0x10/0x10 [ 410.659284][ T8462] f2fs_expand_inode_data+0x656/0xb20 [ 410.659331][ T8462] ? __pfx_f2fs_expand_inode_data+0x10/0x10 [ 410.659367][ T8462] ? __pfx_inode_dio_wait+0x10/0x10 [ 410.659407][ T8462] ? mnt_put_write_access_file+0xc6/0x100 [ 410.659440][ T8462] ? file_update_time_flags+0x406/0x4b0 [ 410.659475][ T8462] f2fs_fallocate+0x4e8/0x980 [ 410.659514][ T8462] vfs_fallocate+0x672/0x7f0 [ 410.659555][ T8462] ? __pfx_vfs_fallocate+0x10/0x10 [ 410.659600][ T8462] file_ioctl+0x5cb/0x870 [ 410.659635][ T8462] ? __pfx_file_ioctl+0x10/0x10 [ 410.659682][ T8462] ? kasan_quarantine_put+0xbb/0x1f0 [ 410.659718][ T8462] ? tomoyo_path_number_perm+0x219/0x630 [ 410.659754][ T8462] ? tomoyo_path_number_perm+0x219/0x630 [ 410.659793][ T8462] do_vfs_ioctl+0xc29/0x1540 [ 410.659829][ T8462] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 410.659882][ T8462] ? do_futex+0x333/0x420 [ 410.659939][ T8462] ? __fget_files+0x2a/0x420 [ 410.659972][ T8462] ? __fget_files+0x2a/0x420 [ 410.659995][ T8462] ? __fget_files+0x3a6/0x420 [ 410.660020][ T8462] ? __fget_files+0x2a/0x420 [ 410.660049][ T8462] ? bpf_lsm_file_ioctl+0x9/0x20 [ 410.660093][ T8462] __se_sys_ioctl+0x82/0x170 [ 410.660125][ T8462] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.660151][ T8462] do_syscall_64+0x15f/0x560 [ 410.660174][ T8462] ? trace_irq_disable+0x3b/0x140 [ 410.660201][ T8462] ? clear_bhb_loop+0x40/0x90 [ 410.660231][ T8462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.660255][ T8462] RIP: 0033:0x7fe57e02ce59 [ 410.660279][ T8462] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 410.660300][ T8462] RSP: 002b:00007fe57c265028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 410.660325][ T8462] RAX: ffffffffffffffda RBX: 00007fe57e2a6090 RCX: 00007fe57e02ce59 [ 410.660343][ T8462] RDX: 0000200000000040 RSI: 0000000040305828 RDI: 0000000000000004 [ 410.660358][ T8462] RBP: 00007fe57e0c2d6f R08: 0000000000000000 R09: 0000000000000000 [ 410.660373][ T8462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 410.660387][ T8462] R13: 00007fe57e2a6128 R14: 00007fe57e2a6090 R15: 00007fffbd8d99e8 [ 410.660426][ T8462] [ 410.660435][ T8462] F2FS-fs (loop5): Stopped filesystem due to reason: 4 [ 411.110704][ T8458] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 411.110728][ T8458] loop2: lost filesystem error report for type 5 error -117 [ 411.111087][ T8458] EXT4-fs error (device loop2): ext4_quota_write:7423: inode #3: comm syz.2.591: mark_inode_dirty error [ 411.111178][ T8458] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 411.113081][ T8458] Quota error (device loop2): write_blk: dquota write failed [ 411.113186][ T8458] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 411.113268][ T8458] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.591: Failed to acquire dquot type 0 [ 411.113285][ T8458] loop2: lost filesystem error report for type 5 error -117 [ 411.116668][ T8458] EXT4-fs error (device loop2): __ext4_get_inode_loc:4885: comm syz.2.591: Invalid inode table block 0 in block_group 0 [ 411.116693][ T8458] loop2: lost filesystem error report for type 5 error -117 [ 411.119566][ T8458] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 411.119635][ T8458] loop2: lost filesystem error report for type 5 error -117 [ 411.120982][ T8458] EXT4-fs error (device loop2): ext4_ext_truncate:4557: inode #15: comm syz.2.591: mark_inode_dirty error [ 411.121093][ T8458] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 411.129857][ T8458] EXT4-fs error (device loop2): __ext4_get_inode_loc:4885: comm syz.2.591: Invalid inode table block 0 in block_group 0 [ 411.129894][ T8458] loop2: lost filesystem error report for type 5 error -117 [ 411.254527][ T8458] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 411.254621][ T8458] loop2: lost filesystem error report for type 5 error -117 [ 411.305085][ T8458] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 411.305166][ T8458] loop2: lost filesystem error report for type 5 error -117 [ 411.344208][ T8458] EXT4-fs error (device loop2): __ext4_get_inode_loc:4885: comm syz.2.591: Invalid inode table block 0 in block_group 0 [ 411.344238][ T8458] loop2: lost filesystem error report for type 5 error -117 [ 411.352916][ T8458] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 411.404664][ T8458] EXT4-fs error (device loop2): ext4_truncate:4690: inode #15: comm syz.2.591: mark_inode_dirty error [ 411.404700][ T8458] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 411.406112][ T8458] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 411.451588][ T8458] EXT4-fs (loop2): 1 truncate cleaned up [ 411.454427][ T8458] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 413.559709][ T5622] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.078341][ T6540] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 414.084572][ T8476] loop0: detected capacity change from 0 to 40427 [ 414.114735][ T8476] F2FS-fs (loop0): invalid crc value [ 414.262355][ T8476] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 414.314741][ T8480] loop2: detected capacity change from 0 to 64 [ 414.333619][ T6540] usb 2-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 414.333660][ T6540] usb 2-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 414.333677][ T6540] usb 2-1: Product: syz [ 414.333689][ T6540] usb 2-1: Manufacturer: syz [ 414.333701][ T6540] usb 2-1: SerialNumber: syz [ 414.389820][ T8476] F2FS-fs (loop0): f2fs_disable_checkpoint starts, unusable: 0 [ 414.389853][ T8476] F2FS-fs (loop0): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 414.389886][ T8476] F2FS-fs (loop0): Start checkpoint disabled! [ 414.442266][ T8476] F2FS-fs (loop0): f2fs_disable_checkpoint finishes, err:0 [ 414.446802][ T8476] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 414.480212][ T37] audit: type=1800 audit(2000000074.430:72): pid=8476 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.600" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 414.533225][ T6540] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 414.775705][ T68] bio_check_eod: 1 callbacks suppressed [ 414.775725][ T68] kworker/u8:4: attempt to access beyond end of device [ 414.775725][ T68] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 414.775780][ T68] CPU: 1 UID: 0 PID: 68 Comm: kworker/u8:4 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 414.775811][ T68] Tainted: [L]=SOFTLOCKUP [ 414.775819][ T68] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 414.775834][ T68] Workqueue: writeback wb_workfn (flush-7:0) [ 414.775876][ T68] Call Trace: [ 414.775885][ T68] [ 414.775895][ T68] dump_stack_lvl+0xe8/0x150 [ 414.775929][ T68] f2fs_stop_checkpoint+0x3ef/0x5d0 [ 414.775966][ T68] f2fs_write_end_io+0x1274/0x1740 [ 414.776016][ T68] __submit_merged_bio+0x256/0x6a0 [ 414.776058][ T68] __submit_merged_write_cond+0x3c9/0x4e0 [ 414.776100][ T68] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 414.776160][ T68] f2fs_write_data_pages+0x287e/0x34f0 [ 414.776236][ T68] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 414.776287][ T68] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 414.776358][ T68] ? __lock_acquire+0x6b5/0x2d10 [ 414.776406][ T68] ? __lock_acquire+0x6b5/0x2d10 [ 414.776460][ T68] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 414.776499][ T68] do_writepages+0x32e/0x550 [ 414.776526][ T68] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 414.776556][ T68] ? reacquire_held_locks+0x104/0x190 [ 414.776587][ T68] ? rt_spin_lock+0x1e0/0x400 [ 414.776629][ T68] __writeback_single_inode+0x133/0x10e0 [ 414.776657][ T68] ? rt_spin_unlock+0x160/0x200 [ 414.776693][ T68] writeback_sb_inodes+0x97f/0x1980 [ 414.776745][ T68] ? lockdep_hardirqs_on+0x7a/0x110 [ 414.776778][ T68] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 414.776848][ T68] ? rcu_is_watching+0x15/0xb0 [ 414.776895][ T68] wb_writeback+0x445/0xb00 [ 414.776922][ T68] ? queue_io+0x251/0x440 [ 414.776954][ T68] ? __pfx_wb_writeback+0x10/0x10 [ 414.776998][ T68] wb_workfn+0x3fd/0xf20 [ 414.777026][ T68] ? look_up_lock_class+0x57/0x110 [ 414.777050][ T68] ? __pfx___resched_curr+0x10/0x10 [ 414.777089][ T68] ? __pfx_wb_workfn+0x10/0x10 [ 414.777128][ T68] ? do_raw_spin_unlock+0xf5/0x210 [ 414.777162][ T68] ? process_one_work+0x8be/0x1630 [ 414.777199][ T68] ? process_one_work+0x8be/0x1630 [ 414.777248][ T68] ? process_one_work+0x8be/0x1630 [ 414.777281][ T68] process_one_work+0x98b/0x1630 [ 414.777342][ T68] ? __pfx_process_one_work+0x10/0x10 [ 414.777375][ T68] ? do_raw_spin_lock+0x12b/0x2f0 [ 414.777419][ T68] worker_thread+0xb49/0x1140 [ 414.777471][ T68] kthread+0x388/0x470 [ 414.777502][ T68] ? __pfx_worker_thread+0x10/0x10 [ 414.777520][ T68] ? __pfx_kthread+0x10/0x10 [ 414.777549][ T68] ret_from_fork+0x514/0xb70 [ 414.777582][ T68] ? __pfx_ret_from_fork+0x10/0x10 [ 414.777611][ T68] ? __switch_to+0xc79/0x1410 [ 414.777640][ T68] ? __pfx_kthread+0x10/0x10 [ 414.777670][ T68] ret_from_fork_asm+0x1a/0x30 [ 414.777729][ T68] [ 414.898448][ T68] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 415.438037][ T8477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 415.454218][ T8477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 415.543941][ T8485] netlink: 32 bytes leftover after parsing attributes in process `syz.1.601'. [ 415.793541][ T6540] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 415.793589][ T6540] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 417.429847][ T823] usb 2-1: USB disconnect, device number 29 [ 418.525476][ T8502] loop2: detected capacity change from 0 to 40427 [ 418.573149][ T8502] F2FS-fs (loop2): invalid crc value [ 418.702907][ T8502] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 418.729963][ T8502] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 418.775432][ T8502] F2FS-fs (loop2): Inconsistent segment (8) type [1, 0] in SSA and SIT [ 418.775538][ T8502] CPU: 1 UID: 0 PID: 8502 Comm: syz.2.608 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 418.775570][ T8502] Tainted: [L]=SOFTLOCKUP [ 418.775578][ T8502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 418.775591][ T8502] Call Trace: [ 418.775600][ T8502] [ 418.775610][ T8502] dump_stack_lvl+0xe8/0x150 [ 418.775646][ T8502] f2fs_stop_checkpoint+0x3ef/0x5d0 [ 418.775685][ T8502] do_garbage_collect+0x1502/0x6dd0 [ 418.775715][ T8502] ? __lock_acquire+0x6b5/0x2d10 [ 418.775762][ T8502] ? do_raw_spin_lock+0x12b/0x2f0 [ 418.775804][ T8502] ? lockdep_hardirqs_on+0x7a/0x110 [ 418.775851][ T8502] ? __pfx_do_garbage_collect+0x10/0x10 [ 418.775897][ T8502] ? __lock_acquire+0x6b5/0x2d10 [ 418.775931][ T8502] ? do_raw_spin_lock+0x12b/0x2f0 [ 418.775970][ T8502] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 418.775995][ T8502] ? lockdep_hardirqs_on+0x7a/0x110 [ 418.776017][ T8502] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 418.776040][ T8502] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 418.776080][ T8502] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 418.776104][ T8502] ? lockdep_hardirqs_on+0x7a/0x110 [ 418.776126][ T8502] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 418.776153][ T8502] f2fs_gc+0xcca/0x24d0 [ 418.776218][ T8502] ? __pfx_f2fs_gc+0x10/0x10 [ 418.776305][ T8502] f2fs_expand_inode_data+0x656/0xb20 [ 418.776353][ T8502] ? __pfx_f2fs_expand_inode_data+0x10/0x10 [ 418.776389][ T8502] ? __pfx_inode_dio_wait+0x10/0x10 [ 418.776425][ T8502] ? mnt_put_write_access_file+0xc6/0x100 [ 418.776459][ T8502] ? file_update_time_flags+0x406/0x4b0 [ 418.776498][ T8502] f2fs_fallocate+0x4e8/0x980 [ 418.776529][ T8502] vfs_fallocate+0x672/0x7f0 [ 418.776567][ T8502] ? __pfx_vfs_fallocate+0x10/0x10 [ 418.776613][ T8502] file_ioctl+0x5cb/0x870 [ 418.776639][ T8502] ? __pfx_file_ioctl+0x10/0x10 [ 418.776672][ T8502] ? kasan_quarantine_put+0xbb/0x1f0 [ 418.776697][ T8502] ? tomoyo_path_number_perm+0x219/0x630 [ 418.776726][ T8502] ? tomoyo_path_number_perm+0x219/0x630 [ 418.776754][ T8502] do_vfs_ioctl+0xc29/0x1540 [ 418.776779][ T8502] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 418.776812][ T8502] ? do_futex+0x333/0x420 [ 418.776851][ T8502] ? __fget_files+0x2a/0x420 [ 418.776870][ T8502] ? __fget_files+0x2a/0x420 [ 418.776886][ T8502] ? __fget_files+0x3a6/0x420 [ 418.776902][ T8502] ? __fget_files+0x2a/0x420 [ 418.776922][ T8502] ? bpf_lsm_file_ioctl+0x9/0x20 [ 418.776948][ T8502] __se_sys_ioctl+0x82/0x170 [ 418.776970][ T8502] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.776988][ T8502] do_syscall_64+0x15f/0x560 [ 418.777004][ T8502] ? trace_irq_disable+0x3b/0x140 [ 418.777023][ T8502] ? clear_bhb_loop+0x40/0x90 [ 418.777043][ T8502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.777059][ T8502] RIP: 0033:0x7fc33cf3ce59 [ 418.777075][ T8502] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 418.777089][ T8502] RSP: 002b:00007fc33b196028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 418.777106][ T8502] RAX: ffffffffffffffda RBX: 00007fc33d1b5fa0 RCX: 00007fc33cf3ce59 [ 418.777118][ T8502] RDX: 0000200000000040 RSI: 0000000040305828 RDI: 0000000000000004 [ 418.777129][ T8502] RBP: 00007fc33cfd2d6f R08: 0000000000000000 R09: 0000000000000000 [ 418.777139][ T8502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 418.777149][ T8502] R13: 00007fc33d1b6038 R14: 00007fc33d1b5fa0 R15: 00007ffe8a84de98 [ 418.777175][ T8502] [ 418.777208][ T8502] F2FS-fs (loop2): Stopped filesystem due to reason: 4 [ 419.774202][ T8514] netlink: 164 bytes leftover after parsing attributes in process `syz.1.610'. [ 419.833988][ T8518] netlink: 4 bytes leftover after parsing attributes in process `syz.1.610'. [ 419.881684][ T37] audit: type=1400 audit(2000000079.770:73): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=8516 comm="syz.3.611" [ 420.336050][ T8525] loop5: detected capacity change from 0 to 8 [ 420.576925][ T8525] netlink: 'syz.5.606': attribute type 1 has an invalid length. [ 420.576953][ T8525] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 420.670307][ T8529] loop3: detected capacity change from 0 to 40427 [ 420.727642][ T8529] F2FS-fs (loop3): invalid crc value [ 420.851727][ T8529] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 420.864349][ T8529] F2FS-fs (loop3): f2fs_disable_checkpoint starts, unusable: 0 [ 420.864379][ T8529] F2FS-fs (loop3): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 420.864410][ T8529] F2FS-fs (loop3): Start checkpoint disabled! [ 420.889587][ T8529] F2FS-fs (loop3): f2fs_disable_checkpoint finishes, err:0 [ 420.892020][ T8529] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 421.000098][ T37] audit: type=1800 audit(2000000080.940:74): pid=8529 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.613" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 421.171529][ T57] kworker/u8:3: attempt to access beyond end of device [ 421.171529][ T57] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 421.171612][ T57] CPU: 1 UID: 0 PID: 57 Comm: kworker/u8:3 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 421.171641][ T57] Tainted: [L]=SOFTLOCKUP [ 421.171649][ T57] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 421.171663][ T57] Workqueue: writeback wb_workfn (flush-7:3) [ 421.171703][ T57] Call Trace: [ 421.171712][ T57] [ 421.171720][ T57] dump_stack_lvl+0xe8/0x150 [ 421.171755][ T57] f2fs_stop_checkpoint+0x3ef/0x5d0 [ 421.171794][ T57] f2fs_write_end_io+0x1274/0x1740 [ 421.171837][ T57] __submit_merged_bio+0x256/0x6a0 [ 421.171878][ T57] __submit_merged_write_cond+0x3c9/0x4e0 [ 421.171919][ T57] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 421.171976][ T57] f2fs_write_data_pages+0x287e/0x34f0 [ 421.172053][ T57] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 421.172103][ T57] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 421.172171][ T57] ? __lock_acquire+0x6b5/0x2d10 [ 421.172217][ T57] ? __lock_acquire+0x6b5/0x2d10 [ 421.172270][ T57] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 421.172307][ T57] do_writepages+0x32e/0x550 [ 421.172332][ T57] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 421.172364][ T57] ? reacquire_held_locks+0x104/0x190 [ 421.172398][ T57] ? rt_spin_lock+0x1e0/0x400 [ 421.172439][ T57] __writeback_single_inode+0x133/0x10e0 [ 421.172468][ T57] ? rt_spin_unlock+0x160/0x200 [ 421.172500][ T57] writeback_sb_inodes+0x97f/0x1980 [ 421.172543][ T57] ? lockdep_hardirqs_on+0x7a/0x110 [ 421.172584][ T57] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 421.172654][ T57] ? rcu_is_watching+0x15/0xb0 [ 421.172695][ T57] wb_writeback+0x445/0xb00 [ 421.172723][ T57] ? queue_io+0x251/0x440 [ 421.172756][ T57] ? __pfx_wb_writeback+0x10/0x10 [ 421.172798][ T57] wb_workfn+0x3fd/0xf20 [ 421.172828][ T57] ? look_up_lock_class+0x57/0x110 [ 421.172853][ T57] ? trace_hrtimer_start+0x82/0x200 [ 421.172893][ T57] ? __pfx_wb_workfn+0x10/0x10 [ 421.172927][ T57] ? do_raw_spin_lock+0x12b/0x2f0 [ 421.172955][ T57] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 421.172984][ T57] ? process_one_work+0x8be/0x1630 [ 421.173020][ T57] ? process_one_work+0x8be/0x1630 [ 421.173075][ T57] ? process_one_work+0x8be/0x1630 [ 421.173109][ T57] process_one_work+0x98b/0x1630 [ 421.173168][ T57] ? __pfx_process_one_work+0x10/0x10 [ 421.173201][ T57] ? do_raw_spin_lock+0x12b/0x2f0 [ 421.173244][ T57] worker_thread+0xb49/0x1140 [ 421.173276][ T57] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 421.173316][ T57] kthread+0x388/0x470 [ 421.173345][ T57] ? __pfx_worker_thread+0x10/0x10 [ 421.173365][ T57] ? __pfx_kthread+0x10/0x10 [ 421.173394][ T57] ret_from_fork+0x514/0xb70 [ 421.173427][ T57] ? __pfx_ret_from_fork+0x10/0x10 [ 421.173457][ T57] ? __switch_to+0xc79/0x1410 [ 421.173485][ T57] ? __pfx_kthread+0x10/0x10 [ 421.173514][ T57] ret_from_fork_asm+0x1a/0x30 [ 421.173572][ T57] [ 421.391028][ T57] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 421.650191][ T32] fserror_report: 2 callbacks suppressed [ 421.650297][ T32] loop3: lost filesystem error report for type 5 error -108 [ 424.319099][ T60] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 424.412495][ T60] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 424.414620][ T60] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 424.417300][ T60] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 424.470849][ T8555] sch_tbf: burst 32852 is lower than device lo mtu (65550) ! [ 424.524526][ T60] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 427.100560][ T5631] Bluetooth: hci0: command tx timeout [ 427.669989][ T8577] loop0: detected capacity change from 0 to 40427 [ 427.690298][ T8577] F2FS-fs (loop0): invalid crc value [ 427.787991][ T32] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 427.806654][ T8577] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 427.885112][ T8577] F2FS-fs (loop0): f2fs_disable_checkpoint starts, unusable: 0 [ 427.885144][ T8577] F2FS-fs (loop0): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 427.885175][ T8577] F2FS-fs (loop0): Start checkpoint disabled! [ 427.947684][ T8577] F2FS-fs (loop0): f2fs_disable_checkpoint finishes, err:0 [ 427.957454][ T8577] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 427.989260][ T37] audit: type=1800 audit(2000000087.940:75): pid=8577 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.626" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 428.051676][ T32] usb 6-1: unable to get BOS descriptor or descriptor too short [ 428.053276][ T32] usb 6-1: not running at top speed; connect to a high speed hub [ 428.057820][ T32] usb 6-1: config 250 has an invalid interface number: 117 but max is 0 [ 428.057850][ T32] usb 6-1: config 250 has no interface number 0 [ 428.057900][ T32] usb 6-1: config 250 interface 117 has no altsetting 0 [ 428.126875][ T32] usb 6-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=cb.d6 [ 428.126899][ T32] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.126913][ T32] usb 6-1: Product: syz [ 428.126924][ T32] usb 6-1: Manufacturer: syz [ 428.126934][ T32] usb 6-1: SerialNumber: syz [ 428.423693][ T8580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 428.424357][ T8580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 428.467404][ T57] kworker/u8:3: attempt to access beyond end of device [ 428.467404][ T57] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 428.467456][ T57] CPU: 1 UID: 0 PID: 57 Comm: kworker/u8:3 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 428.467480][ T57] Tainted: [L]=SOFTLOCKUP [ 428.467487][ T57] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 428.467497][ T57] Workqueue: writeback wb_workfn (flush-7:0) [ 428.467531][ T57] Call Trace: [ 428.467538][ T57] [ 428.467546][ T57] dump_stack_lvl+0xe8/0x150 [ 428.467574][ T57] f2fs_stop_checkpoint+0x3ef/0x5d0 [ 428.467603][ T57] f2fs_write_end_io+0x1274/0x1740 [ 428.467635][ T57] __submit_merged_bio+0x256/0x6a0 [ 428.467665][ T57] __submit_merged_write_cond+0x3c9/0x4e0 [ 428.467696][ T57] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 428.467738][ T57] f2fs_write_data_pages+0x287e/0x34f0 [ 428.467765][ T57] ? preempt_schedule_thunk+0x16/0x40 [ 428.467815][ T57] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 428.467853][ T57] ? cfg80211_inform_single_bss_data+0xba3/0x1b80 [ 428.467923][ T57] ? __lock_acquire+0x6b5/0x2d10 [ 428.467959][ T57] ? unwind_next_frame+0xa6/0x2550 [ 428.468007][ T57] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 428.468055][ T57] do_writepages+0x32e/0x550 [ 428.468078][ T57] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 428.468104][ T57] ? reacquire_held_locks+0x104/0x190 [ 428.468135][ T57] ? rt_spin_lock+0x1e0/0x400 [ 428.468169][ T57] __writeback_single_inode+0x133/0x10e0 [ 428.468193][ T57] ? rt_spin_unlock+0x160/0x200 [ 428.468221][ T57] writeback_sb_inodes+0x97f/0x1980 [ 428.468256][ T57] ? lockdep_hardirqs_on+0x7a/0x110 [ 428.468282][ T57] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 428.468342][ T57] ? rcu_is_watching+0x15/0xb0 [ 428.468384][ T57] wb_writeback+0x445/0xb00 [ 428.468411][ T57] ? queue_io+0x251/0x440 [ 428.468439][ T57] ? __pfx_wb_writeback+0x10/0x10 [ 428.468478][ T57] wb_workfn+0x3fd/0xf20 [ 428.468505][ T57] ? look_up_lock_class+0x57/0x110 [ 428.468526][ T57] ? trace_hrtimer_start+0x82/0x200 [ 428.468564][ T57] ? __pfx_wb_workfn+0x10/0x10 [ 428.468599][ T57] ? do_raw_spin_lock+0x12b/0x2f0 [ 428.468626][ T57] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 428.468653][ T57] ? process_one_work+0x8be/0x1630 [ 428.468688][ T57] ? process_one_work+0x8be/0x1630 [ 428.468735][ T57] ? process_one_work+0x8be/0x1630 [ 428.468767][ T57] process_one_work+0x98b/0x1630 [ 428.468825][ T57] ? __pfx_process_one_work+0x10/0x10 [ 428.468858][ T57] ? do_raw_spin_lock+0x12b/0x2f0 [ 428.468916][ T57] worker_thread+0xb49/0x1140 [ 428.468949][ T57] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 428.468989][ T57] kthread+0x388/0x470 [ 428.469016][ T57] ? __pfx_worker_thread+0x10/0x10 [ 428.469036][ T57] ? __pfx_kthread+0x10/0x10 [ 428.469062][ T57] ret_from_fork+0x514/0xb70 [ 428.469095][ T57] ? __pfx_ret_from_fork+0x10/0x10 [ 428.469124][ T57] ? __switch_to+0xc79/0x1410 [ 428.469150][ T57] ? __pfx_kthread+0x10/0x10 [ 428.469177][ T57] ret_from_fork_asm+0x1a/0x30 [ 428.469224][ T57] [ 428.482288][ T57] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 428.523082][ T32] i2c-tiny-usb 6-1:250.117: version cb.d6 found at bus 006 address 002 [ 428.530804][ T32] (null): failure setting delay to 10us [ 428.531011][ T32] i2c-tiny-usb 6-1:250.117: probe with driver i2c-tiny-usb failed with error -5 [ 429.116854][ T32] usb 6-1: USB disconnect, device number 2 [ 429.169639][ T5631] Bluetooth: hci0: command tx timeout [ 431.315206][ T32] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 431.315385][ T5631] Bluetooth: hci0: command tx timeout [ 432.451969][ T32] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 432.452006][ T32] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 432.452038][ T32] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 432.452081][ T32] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 432.452105][ T32] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.532604][ T32] usb 6-1: config 0 descriptor?? [ 433.005998][ T8627] loop0: detected capacity change from 0 to 512 [ 433.007090][ T8627] EXT4-fs: Ignoring removed i_version option [ 433.049718][ T8625] netlink: 'syz.0.638': attribute type 12 has an invalid length. [ 433.049741][ T8625] netlink: 'syz.0.638': attribute type 29 has an invalid length. [ 433.049754][ T8625] netlink: 148 bytes leftover after parsing attributes in process `syz.0.638'. [ 433.393318][ T5631] Bluetooth: hci0: command tx timeout [ 433.435117][ T8629] loop1: detected capacity change from 0 to 40427 [ 433.446121][ T8627] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 222 vs 220 free clusters [ 433.503857][ T8629] F2FS-fs (loop1): invalid crc value [ 433.561660][ C1] EXT4-fs (loop0): initial error at time 2000000093: ext4_mb_generate_buddy:1317 [ 433.561697][ C1] EXT4-fs (loop0): last error at time 2000000093: ext4_mb_generate_buddy:1317 [ 433.645907][ T8629] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 433.669594][ T8629] F2FS-fs (loop1): f2fs_disable_checkpoint starts, unusable: 0 [ 433.669617][ T8629] F2FS-fs (loop1): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 433.669640][ T8629] F2FS-fs (loop1): Start checkpoint disabled! [ 433.724576][ T8629] F2FS-fs (loop1): f2fs_disable_checkpoint finishes, err:0 [ 433.730694][ T8629] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 434.117807][ T8627] EXT4-fs (loop0): Remounting filesystem read-only [ 434.118062][ T8627] EXT4-fs warning (device loop0): ext4_evict_inode:270: couldn't mark inode dirty (err -30) [ 434.139404][ T8627] EXT4-fs (loop0): 1 orphan inode deleted [ 434.441922][ T32] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 434.588678][ T148] kworker/u8:6: attempt to access beyond end of device [ 434.588678][ T148] loop1: rw=1, sector=77824, nr_sectors = 3720 limit=40427 [ 434.593325][ T32] usb 6-1: USB disconnect, device number 3 [ 434.632190][ T1040] kworker/u8:8: attempt to access beyond end of device [ 434.632190][ T1040] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 434.632235][ T1040] CPU: 1 UID: 0 PID: 1040 Comm: kworker/u8:8 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 434.632257][ T1040] Tainted: [L]=SOFTLOCKUP [ 434.632263][ T1040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 434.632274][ T1040] Workqueue: writeback wb_workfn (flush-7:1) [ 434.632304][ T1040] Call Trace: [ 434.632310][ T1040] [ 434.632316][ T1040] dump_stack_lvl+0xe8/0x150 [ 434.632344][ T1040] f2fs_stop_checkpoint+0x3ef/0x5d0 [ 434.632378][ T1040] f2fs_write_end_io+0x1274/0x1740 [ 434.632410][ T1040] __submit_merged_bio+0x256/0x6a0 [ 434.632438][ T1040] __submit_merged_write_cond+0x3c9/0x4e0 [ 434.632467][ T1040] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 434.632507][ T1040] f2fs_write_data_pages+0x287e/0x34f0 [ 434.632560][ T1040] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 434.632595][ T1040] ? __lock_acquire+0x6b5/0x2d10 [ 434.632644][ T1040] ? __lock_acquire+0x6b5/0x2d10 [ 434.632675][ T1040] ? unwind_next_frame+0xa6/0x2550 [ 434.632715][ T1040] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 434.632741][ T1040] do_writepages+0x32e/0x550 [ 434.632759][ T1040] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 434.632781][ T1040] ? reacquire_held_locks+0x104/0x190 [ 434.632804][ T1040] ? rt_spin_lock+0x1e0/0x400 [ 434.632832][ T1040] __writeback_single_inode+0x133/0x10e0 [ 434.632851][ T1040] ? rt_spin_unlock+0x160/0x200 [ 434.632877][ T1040] writeback_sb_inodes+0x97f/0x1980 [ 434.632906][ T1040] ? lockdep_hardirqs_on+0x7a/0x110 [ 434.632928][ T1040] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 434.632975][ T1040] ? rcu_is_watching+0x15/0xb0 [ 434.633005][ T1040] wb_writeback+0x445/0xb00 [ 434.633023][ T1040] ? queue_io+0x251/0x440 [ 434.633062][ T1040] ? __pfx_wb_writeback+0x10/0x10 [ 434.633089][ T1040] wb_workfn+0x3fd/0xf20 [ 434.633108][ T1040] ? look_up_lock_class+0x57/0x110 [ 434.633125][ T1040] ? trace_hrtimer_start+0x82/0x200 [ 434.633151][ T1040] ? __pfx_wb_workfn+0x10/0x10 [ 434.633174][ T1040] ? do_raw_spin_lock+0x12b/0x2f0 [ 434.633193][ T1040] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 434.633212][ T1040] ? process_one_work+0x8be/0x1630 [ 434.633237][ T1040] ? process_one_work+0x8be/0x1630 [ 434.633269][ T1040] ? process_one_work+0x8be/0x1630 [ 434.633292][ T1040] process_one_work+0x98b/0x1630 [ 434.633331][ T1040] ? __pfx_process_one_work+0x10/0x10 [ 434.633353][ T1040] ? do_raw_spin_lock+0x12b/0x2f0 [ 434.633387][ T1040] worker_thread+0xb49/0x1140 [ 434.633421][ T1040] kthread+0x388/0x470 [ 434.633439][ T1040] ? __pfx_worker_thread+0x10/0x10 [ 434.633453][ T1040] ? __pfx_kthread+0x10/0x10 [ 434.633472][ T1040] ret_from_fork+0x514/0xb70 [ 434.633494][ T1040] ? __pfx_ret_from_fork+0x10/0x10 [ 434.633514][ T1040] ? __switch_to+0xc79/0x1410 [ 434.633533][ T1040] ? __pfx_kthread+0x10/0x10 [ 434.633552][ T1040] ret_from_fork_asm+0x1a/0x30 [ 434.633587][ T1040] [ 434.654551][ T1040] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 434.984978][ T8627] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 435.479677][ T8643] loop3: detected capacity change from 0 to 128 [ 435.682153][ T8643] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 435.686208][ T8643] ext4 filesystem being mounted at /139/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 435.826365][ T8637] fido_id[8637]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 435.864112][ T8647] fuse: Bad value for 'fd' [ 435.910675][ T5625] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.118283][ T823] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 437.274756][ T823] usb 6-1: Using ep0 maxpacket: 32 [ 437.276759][ T823] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 437.276779][ T823] usb 6-1: config 0 has no interface number 0 [ 437.276832][ T823] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 437.276852][ T823] usb 6-1: config 0 interface 85 has no altsetting 0 [ 437.307534][ T823] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 437.307620][ T823] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.307674][ T823] usb 6-1: Product: syz [ 437.307717][ T823] usb 6-1: Manufacturer: syz [ 437.307767][ T823] usb 6-1: SerialNumber: syz [ 437.369521][ T5628] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 437.481432][ T823] usb 6-1: config 0 descriptor?? [ 439.602881][ T8659] netlink: 4 bytes leftover after parsing attributes in process `syz.3.645'. [ 439.702258][ T823] appletouch 6-1:0.85: Failed to request geyser raw mode [ 439.702431][ T823] appletouch 6-1:0.85: probe with driver appletouch failed with error -5 [ 439.970884][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.970993][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.007587][ T823] usb 6-1: USB disconnect, device number 4 [ 440.135207][ T8669] program syz.3.645 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 440.153525][ T5631] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 440.304215][ T8663] netlink: 8 bytes leftover after parsing attributes in process `syz.3.645'. [ 440.304263][ T8659] tipc: Started in network mode [ 440.304297][ T8659] tipc: Node identity ac1414aa, cluster identity 4711 [ 440.808297][ T8659] tipc: Enabled bearer , priority 10 [ 441.894368][ T5742] tipc: Node number set to 2886997162 [ 442.194724][ T8677] ================================================================== [ 442.194724][ T8677] ================================================================== [ 442.194737][ T8677] BUG: KASAN: slab-use-after-free in clear_tfile_check_list+0x114/0x380 [ 442.194768][ T8677] Read of size 8 at addr ffff88803cd86aa8 by task syz.3.649/8677 [ 442.194782][ T8677] [ 442.194794][ T8677] CPU: 1 UID: 0 PID: 8677 Comm: syz.3.649 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 442.194816][ T8677] Tainted: [L]=SOFTLOCKUP [ 442.194822][ T8677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 442.194832][ T8677] Call Trace: [ 442.194838][ T8677] [ 442.194845][ T8677] dump_stack_lvl+0xe8/0x150 [ 442.194867][ T8677] print_address_description+0x55/0x1e0 [ 442.194889][ T8677] ? clear_tfile_check_list+0x114/0x380 [ 442.194910][ T8677] print_report+0x58/0x70 [ 442.194929][ T8677] kasan_report+0x117/0x150 [ 442.194950][ T8677] ? clear_tfile_check_list+0x114/0x380 [ 442.194975][ T8677] clear_tfile_check_list+0x114/0x380 [ 442.194997][ T8677] ? clear_tfile_check_list+0x22/0x380 [ 442.195020][ T8677] do_epoll_ctl_file+0x8fd/0xed0 [ 442.195040][ T8677] ? do_epoll_ctl_file+0xac3/0xed0 [ 442.195060][ T8677] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 442.195081][ T8677] ? __fget_files+0x3a6/0x420 [ 442.195097][ T8677] ? __fget_files+0x2a/0x420 [ 442.195117][ T8677] __se_sys_epoll_ctl+0x14e/0x210 [ 442.195138][ T8677] ? __pfx___se_sys_epoll_ctl+0x10/0x10 [ 442.195161][ T8677] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.195178][ T8677] do_syscall_64+0x15f/0x560 [ 442.195195][ T8677] ? trace_irq_disable+0x3b/0x140 [ 442.195214][ T8677] ? clear_bhb_loop+0x40/0x90 [ 442.195232][ T8677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.195248][ T8677] RIP: 0033:0x7fd716e9ce59 [ 442.195269][ T8677] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 442.195283][ T8677] RSP: 002b:00007fd7150d5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 442.195300][ T8677] RAX: ffffffffffffffda RBX: 00007fd717116090 RCX: 00007fd716e9ce59 [ 442.195313][ T8677] RDX: 0000000000000005 RSI: 0000000000000001 RDI: 0000000000000008 [ 442.195323][ T8677] RBP: 00007fd716f32d6f R08: 0000000000000000 R09: 0000000000000000 [ 442.195333][ T8677] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 442.195343][ T8677] R13: 00007fd717116128 R14: 00007fd717116090 R15: 00007ffce3c68058 [ 442.195366][ T8677] [ 442.195371][ T8677] [ 442.195375][ T8677] Allocated by task 8676: [ 442.195443][ T8677] kasan_save_track+0x3e/0x80 [ 442.195460][ T8677] __kasan_slab_alloc+0x6c/0x80 [ 442.195477][ T8677] kmem_cache_alloc_noprof+0x33b/0x680 [ 442.195494][ T8677] ep_insert+0x512/0x1820 [ 442.195511][ T8677] do_epoll_ctl_file+0x8bb/0xed0 [ 442.195529][ T8677] __se_sys_epoll_ctl+0x14e/0x210 [ 442.195547][ T8677] do_syscall_64+0x15f/0x560 [ 442.195561][ T8677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.195576][ T8677] [ 442.195579][ T8677] Freed by task 8675: [ 442.195586][ T8677] kasan_save_track+0x3e/0x80 [ 442.195601][ T8677] kasan_save_free_info+0x46/0x50 [ 442.195624][ T8677] __kasan_slab_free+0x5c/0x80 [ 442.195639][ T8677] kmem_cache_free+0x187/0x6c0 [ 442.195657][ T8677] eventpoll_release_file+0xc2/0x240 [ 442.195674][ T8677] __fput+0x83c/0xa70 [ 442.195687][ T8677] task_work_run+0x1d9/0x270 [ 442.195706][ T8677] exit_to_user_mode_loop+0xf3/0x4d0 [ 442.195724][ T8677] do_syscall_64+0x33e/0x560 [ 442.195738][ T8677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.195753][ T8677] [ 442.195759][ T8677] The buggy address belongs to the object at ffff88803cd86aa0 [ 442.195759][ T8677] which belongs to the cache ep_head of size 16 [ 442.195772][ T8677] The buggy address is located 8 bytes inside of [ 442.195772][ T8677] freed 16-byte region [ffff88803cd86aa0, ffff88803cd86ab0) [ 442.195788][ T8677] [ 442.195792][ T8677] The buggy address belongs to the physical page: [ 442.195820][ T8677] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88803cd86b20 pfn:0x3cd86 [ 442.195838][ T8677] memcg:ffff888064a2e801 [ 442.195846][ T8677] flags: 0x80000000000200(workingset|node=0|zone=1) [ 442.195862][ T8677] page_type: f5(slab) [ 442.195876][ T8677] raw: 0080000000000200 ffff888020ad5dc0 ffffea0000db4c50 ffff88801ab8a088 [ 442.195890][ T8677] raw: ffff88803cd86b20 0000000800800052 00000000f5000000 ffff888064a2e801 [ 442.195899][ T8677] page dumped because: kasan: bad access detected [ 442.195909][ T8677] page_owner tracks the page as allocated [ 442.195915][ T8677] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4994, tgid 4994 (udevd), ts 46085369688, free_ts 39738640843 [ 442.195942][ T8677] post_alloc_hook+0x1f9/0x250 [ 442.195957][ T8677] get_page_from_freelist+0x265c/0x26e0 [ 442.195977][ T8677] __alloc_frozen_pages_noprof+0x18d/0x380 [ 442.195997][ T8677] allocate_slab+0x74/0x5e0 [ 442.196018][ T8677] refill_objects+0x33c/0x3d0 [ 442.196038][ T8677] __pcs_replace_empty_main+0x373/0x720 [ 442.196061][ T8677] kmem_cache_alloc_noprof+0x433/0x680 [ 442.196077][ T8677] ep_insert+0x512/0x1820 [ 442.196093][ T8677] do_epoll_ctl_file+0x8bb/0xed0 [ 442.196109][ T8677] __se_sys_epoll_ctl+0x14e/0x210 [ 442.196126][ T8677] do_syscall_64+0x15f/0x560 [ 442.196140][ T8677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.196186][ T8677] page last free pid 4996 tgid 4996 stack trace: [ 442.196198][ T8677] __free_frozen_pages+0x10af/0x1190 [ 442.196225][ T8677] __slab_free+0x252/0x2a0 [ 442.196242][ T8677] qlist_free_all+0x99/0x100 [ 442.196260][ T8677] kasan_quarantine_reduce+0x148/0x160 [ 442.196275][ T8677] __kasan_slab_alloc+0x22/0x80 [ 442.196291][ T8677] kmem_cache_alloc_noprof+0x33b/0x680 [ 442.196307][ T8677] mas_dup_build+0x155/0x1210 [ 442.196323][ T8677] __mt_dup+0x197/0x2c0 [ 442.196337][ T8677] dup_mmap+0x41b/0x1d70 [ 442.196354][ T8677] copy_mm+0x11a/0x480 [ 442.196366][ T8677] copy_process+0x1e30/0x43d0 [ 442.196388][ T8677] kernel_clone+0x2d7/0x940 [ 442.196402][ T8677] __x64_sys_clone+0x1b6/0x230 [ 442.196416][ T8677] do_syscall_64+0x15f/0x560 [ 442.196429][ T8677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.196444][ T8677] [ 442.196447][ T8677] Memory state around the buggy address: [ 442.196455][ T8677] ffff88803cd86980: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 442.196466][ T8677] ffff88803cd86a00: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 442.196476][ T8677] >ffff88803cd86a80: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 442.196484][ T8677] ^ [ 442.196492][ T8677] ffff88803cd86b00: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 442.196502][ T8677] ffff88803cd86b80: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 442.196510][ T8677] ================================================================== [ 442.203755][ T8677] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 442.203822][ T8677] CPU: 1 UID: 0 PID: 8677 Comm: syz.3.649 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 442.203903][ T8677] Tainted: [L]=SOFTLOCKUP [ 442.203933][ T8677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 442.203987][ T8677] Call Trace: [ 442.204014][ T8677] [ 442.204049][ T8677] vpanic+0x56c/0xa60 [ 442.204147][ T8677] ? __pfx_vpanic+0x10/0x10 [ 442.204219][ T8677] ? __pfx___schedule+0x10/0x10 [ 442.204318][ T8677] panic+0xc5/0xd0 [ 442.204389][ T8677] ? __pfx_panic+0x10/0x10 [ 442.204461][ T8677] ? preempt_schedule_thunk+0x16/0x40 [ 442.204530][ T8677] ? clear_tfile_check_list+0x114/0x380 [ 442.204603][ T8677] check_panic_on_warn+0x89/0xb0 [ 442.204632][ T8677] ? clear_tfile_check_list+0x114/0x380 [ 442.204661][ T8677] end_report+0x73/0x170 [ 442.204701][ T8677] ? clear_tfile_check_list+0x114/0x380 [ 442.204773][ T8677] kasan_report+0x128/0x150 [ 442.204845][ T8677] ? clear_tfile_check_list+0x114/0x380 [ 442.204927][ T8677] clear_tfile_check_list+0x114/0x380 [ 442.205007][ T8677] ? clear_tfile_check_list+0x22/0x380 [ 442.205081][ T8677] do_epoll_ctl_file+0x8fd/0xed0 [ 442.205151][ T8677] ? do_epoll_ctl_file+0xac3/0xed0 [ 442.205223][ T8677] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 442.205297][ T8677] ? __fget_files+0x3a6/0x420 [ 442.205369][ T8677] ? __fget_files+0x2a/0x420 [ 442.205444][ T8677] __se_sys_epoll_ctl+0x14e/0x210 [ 442.205516][ T8677] ? __pfx___se_sys_epoll_ctl+0x10/0x10 [ 442.205596][ T8677] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.205655][ T8677] do_syscall_64+0x15f/0x560 [ 442.205708][ T8677] ? trace_irq_disable+0x3b/0x140 [ 442.205773][ T8677] ? clear_bhb_loop+0x40/0x90 [ 442.205835][ T8677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.205893][ T8677] RIP: 0033:0x7fd716e9ce59 [ 442.205944][ T8677] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 442.205987][ T8677] RSP: 002b:00007fd7150d5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 442.206049][ T8677] RAX: ffffffffffffffda RBX: 00007fd717116090 RCX: 00007fd716e9ce59 [ 442.206090][ T8677] RDX: 0000000000000005 RSI: 0000000000000001 RDI: 0000000000000008 [ 442.206122][ T8677] RBP: 00007fd716f32d6f R08: 0000000000000000 R09: 0000000000000000 [ 442.206159][ T8677] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 442.206211][ T8677] R13: 00007fd717116128 R14: 00007fd717116090 R15: 00007ffce3c68058 [ 442.206244][ T8677] [ 442.206888][ T8677] Kernel Offset: disabled