last executing test programs: 10m22.895334734s ago: executing program 32 (id=17): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xfc, {"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", 0x1000}}, 0x1006) syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x1, 0x495, &(0x7f0000000540)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000000000008, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x2, 0x0) add_key(&(0x7f0000000480)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) sched_setscheduler(r0, 0x2, &(0x7f0000001040)=0x6) r3 = fsopen(&(0x7f0000000180)='tracefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x1) fchdir(r4) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r5, 0x100, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000440)='.\x00', 0x0, 0x1) read$midi(r6, &(0x7f0000001680)=""/4096, 0x1000) setitimer(0x2, &(0x7f0000001080)={{0x0, 0xea60}, {0x77359400}}, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x7f, &(0x7f0000000080), 0x0) socket$packet(0x11, 0x3, 0x300) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x0, 0xfffffffc, @mcast1, 0x7}, 0x1c) connect$pppl2tp(r7, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r8, 0x4, 0x0, 0x3, 0x40, {0xa, 0x4e22, 0xffff, @ipv4={'\x00', '\xff\xff', @empty}}}}, 0x32) writev(r7, &(0x7f0000000300)=[{&(0x7f0000000740)="fbb9b35314b22f1f4cb47eace766f6b8d03bfe3f8e3a82b50a1b5e9cd2e00a992e1135405731e2df16ff986abe8421811ede024553765aba07523f2657f32a1076fe37b60cb3e811ea80d5d5527a002ffc04ec9ca893f92901cc928140bd0e242f775e4f5305d6e8c0b74d0a41d50ac938a9de44df4eb3988930397bbb20b7bd6ed5fb826b684093", 0x88}, {&(0x7f0000001240)="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", 0x406}, {&(0x7f0000000180)="169ef94ffab6bc99a16d916e5e924d5d57a7edb49fefbd0e8480cad523805c73310d327f5fcb1097ba0bd7578cf40e1aee398f140efb7cf44b3cc8e08054ede08330b03e9eae2fe684e39c31e4147ba3bdda86ce20bfc9d7d6831d2bbefd285ccfbaade4580a0628cfd36f0087d7b3", 0x6f}], 0x3) open_by_handle_at(r6, &(0x7f0000000000)=ANY=[@ANYBLOB='\f\x00\x00\x00Q'], 0x0) 8m8.932624271s ago: executing program 33 (id=323): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x6, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) capset(0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x20004004) recvmmsg(0xffffffffffffffff, &(0x7f0000000800), 0x62, 0x12141, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ppoll(&(0x7f00000002c0)=[{r2, 0x1000}], 0x1, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000040)=0x18) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r2, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) bind$inet(r3, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet(r3, 0x0, 0x40) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000808, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) getpid() 7m19.197844894s ago: executing program 34 (id=423): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="1b0000001a007f029e741683c28f7b331d00"/27, 0x1b}], 0x1}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, 0x0, 0x0) r4 = io_uring_setup(0x387b, &(0x7f0000000240)={0x0, 0xce44, 0x1, 0x0, 0x3b4}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r4, 0x13, &(0x7f0000000200)=[0x40000008], 0x2) syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000059d360205f0501d09288000000010902120001000000000904"], 0x0) 6m24.743339905s ago: executing program 35 (id=532): r0 = userfaultfd(0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)={0x30, r2, 0x309, 0x70bd25, 0x25dfdbfa, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) close(r3) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x80000001}, 0x8) bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000c00)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x4e22, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x9, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@private2, 0x4d3, 0x6c}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3507, 0x1, 0x3, 0x9, 0x2, 0x1, 0x4}]}]}, 0xfc}}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000a40)=@migrate={0xa0, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0xfffe, 0x0, 0x2, 0x1, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x50, 0x11, [{@in=@multicast2=0xfc020000, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@mcast2, @in=@broadcast, 0x6c, 0x1, 0x0, 0x3507, 0x2, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmmsg$inet6(r4, &(0x7f0000002e40)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x1, @loopback}, 0x1c, &(0x7f0000000880)=[{&(0x7f0000001680)='\t', 0x1}, {&(0x7f0000000600)="24a8de85ccaa83afa52959389ed371188b8ad1739e32c4e3e642b2c7c9b95aaf7aec34137e673585aa40f62ea7b49bf9eea987ebb5844d4f45a9a39a0bafdde20d220ff3d400fb6add141b45dedb676875e238b2e212b01489521382c49b0f30842bc2c8d810db6b72dcd4c77265678c186b2d7696c6f14d3f55b829d169635f6b934cea14b8d9e7d00347cac66fb43a7a6b312ab94ba61c47595631c6310bfe11098139b6c7b972ab190470a9d2e275188a5c2e54ba4f73ef82f7cb08aebcf3389880ad4f57e694033ef934c5", 0xcd}, {&(0x7f0000000800)="8dedfdae15f69c159bfb2ca9a4bd5e1f3df6a9fc4527cafdeff151a03b5b5aa728ad0fbd94d389cc02d9971a307e9d5c3c216ddc39b737923a6187dc8f2bbb4ed294a83e72e5d86d29b75ef782a5ee3e7e91e8fda382d97788b34b7c0d050a6375dae9a2546d3f05ada41101a8", 0x6d}], 0x3}}], 0x1, 0x8020) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={r4}) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000140)=@req3={0x516780, 0x8000, 0x9, 0x400, 0x3, 0x10000, 0x7}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f0000000180)={0x0, 0x7, 0x1}, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0xfffff000) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, 0x0) 5m26.565472261s ago: executing program 8 (id=684): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x5, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x8, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x8, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0xa, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x81, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x0, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000b80), 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="a4010000100001002dbd"], 0x1a4}}, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, 0x0}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, 0x0, 0x8004) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x9], 0x25000, 0x304}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000000000010000000000000000000000000a"], 0x28}, 0x1, 0x0, 0x0, 0x20044851}, 0x802) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 5m26.108944357s ago: executing program 36 (id=684): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x5, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x8, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x8, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0xa, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x81, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x0, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000b80), 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="a4010000100001002dbd"], 0x1a4}}, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, 0x0}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, 0x0, 0x8004) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x9], 0x25000, 0x304}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000000000010000000000000000000000000a"], 0x28}, 0x1, 0x0, 0x0, 0x20044851}, 0x802) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 5m15.38439662s ago: executing program 4 (id=709): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x2040400) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x100}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x1c, 0x45, 0x1, 0x80002, 0x25dfdbfd, {0x5}, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x7fff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40288c1}, 0x4008094) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@my=0x0}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000080)={{@local, 0x2}, @local, 0x0, 0x0, 0x5e, 0x200000000000, 0x100000000000006}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r3, 0x7a4, &(0x7f0000000540)={{@local, 0x2}, 0x0, 0x9, 0xffffffff, 0x40}) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x1}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_delroute={0x24, 0x19, 0x1, 0x70bd2b, 0x25dfdbfb, {0x2, 0x10, 0x14, 0x4, 0x3, 0x4, 0xc8, 0x4, 0x1c00}, [@RTA_TABLE={0x8, 0xf, 0x3ff}]}, 0x24}, 0x1, 0x0, 0x0, 0x8885}, 0x24058044) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYRES64=r4], 0x1508}, 0x1, 0x0, 0x0, 0x404c044}, 0x10) writev(r0, &(0x7f0000000040), 0x2) 5m14.692111903s ago: executing program 4 (id=710): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000001c0)={[{@test_dummy_encryption_v1}, {@nodioread_nolock}]}, 0x3, 0x44b, &(0x7f00000004c0)="$eJzs282PU1UbAPDn3k6HlxdwRsQPPtRRNE78mGEAlYULNZq4wMREF7qczAwEKYxhxkQIUTAGV8aYuDcu/Rdc6cYYVyZudW9IiGEDuKq57b1MW9rClJYO9PdLLpxz77lzztN7T3vOPW0AI2sq+yeJ2BoRf0bERD3bXGCq/t/Vy2cXrl0+u5BEtfruP0mt3JXLZxeKosV5W/LMdBqRfpHE7jb1rpw+c3y+Ulk6lednV098NLty+swLx07MH106unRy/6FDBw/MvfzS/hf7EmfWpiu7Pl3es/OtD755+/BXTfG3xNEnU90OPl2t9rm64drWkE7GhtgQ1qUUEdnlKtf6/0SUYu3iTcSbnw+1ccBAVavV6pbOh89VgXtYEs15XR5GRfFBn81/i611EPDq4IYfQ3fptfoEKIv7ar7Vj4xFmpcpt8xv+2kqIt4/9+932RaDeQ4BANDkp2z883y78V8aDzWUuy9fG5qMiPsjYntEPBAROyLiwYha2Ycj4pF11t+6SHLj+Ce92FNgtygb/72Sr201j/+K0V9MlvLctlr85eTIscrSvvw1mY7ypiw/16WOn9/44+tOxxrHf9mW1V+MBfN2XBzb1HzO4vzq/O3E3OjS+YhdY+3iT66vBCQRsTMidvVYx7Fnf9jT6djN4++iD+tM1e8jnqlf/3PREn8h6b4+Ofu/qCztmy3uihv99vuFdzrVf1vx90F2/f/f9v6/Hv9k0rheu7L+Oi789WXHOU2v9/948l4tPZ7v+2R+dfXUXMR4crje6Mb9+9fOLfJF+Sz+6b3t+//2WHsldkdEdhM/GhGPRcTjedufiIgnI2Jvl/h/ff2pD3uPf7Cy+BfXdf3XEuPRuqd9onT8lx+bKp28If5r3a//wVpqOt9zK+9/t9Ku3u5mAAAAuPukEbE1knTmejpNZ2bq35ffEZFWlldWnzuy/PHJxfpvBCYj0uJJ10TD89C5fFpfz5+PiPpXC4rjB/Lnxt+WNtfyMwvLlcVhBw8jbkuH/p/5uzTs1gED5/daMLr0fxhd+j+MLv0fRleb/r95GO0A7rx2n/+fDaEdwJ3X0v8t+8EIMf+H0aX/w+jS/2EkrWyOm/9Ivmui+Es9nn7PJqK8IZoxsESkG6IZGzZRvsv7xfDekwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPrpvwAAAP//9gndaw==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000140)='2', 0x1, 0x8080c61) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) socketpair(0x18, 0x5, 0x3e, &(0x7f0000000100)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 5m12.454912454s ago: executing program 4 (id=716): syz_usb_connect(0x3, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="120110031acf034023040a00d85f010203010902120801"], &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "25fd25990fe381b9", "f511161d94f179ecf85eb61b6a4762eb", "1e59ddbe", "06ed010001809f9b"}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) close(0xffffffffffffffff) sendto$inet6(r0, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x2100e6d4, 0x4) 5m8.746323337s ago: executing program 4 (id=722): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x2000410, &(0x7f0000000080)={[{@nobh}, {@delalloc}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@i_version}, {@nobh}, {@abort}]}, 0xc1, 0x801, &(0x7f00000007c0)="$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") mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0xc0a419, 0x0) syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x1, 0x5531, &(0x7f0000000b00)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='dir0/trace_marker\x00', 0x1, 0x0) write(r1, &(0x7f0000001240)="62f5ff6ccf3d2ec97f0e4bc8a900d2e75067a5109d749cdf1ba00926335fdca4d2df9c6093533dbe86131af765f8be39df30e3e4f257006bf1826c", 0x3b) r2 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) openat$cgroup_pressure(r3, &(0x7f0000000100)='io.pressure\x00', 0x2, 0x0) write$P9_RWRITE(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) 5m5.397704521s ago: executing program 4 (id=728): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) io_setup(0x4, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x34) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') io_submit(0x0, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0xfffe, r0, 0x0, 0x0, 0xf9b4}]) syz_pidfd_open(0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x401, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x1000440, &(0x7f0000001000)={[{@nouser_xattr}, {@nomblk_io_submit}, {@stripe={'stripe', 0x3d, 0x6}}, {@usrjquota}]}, 0x81, 0x5af, &(0x7f0000000940)="$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") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="440f20c0350b000000440f22c0360f09c4217d700c9d0000000028b8010000000f01c166b82e000f00d80f20d835080000000f22d82e0f019885000000b9b1060000b86f8d0000ba0000000066b8b5008ec036363ef3420f51a600000000b9e30b0000b8f233278fba000000000f30", 0x6f}], 0x1, 0x11, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0x1, 0xc, 0x63, 0x200002000001, 0x1000, 0x6, 0x5, 0x0, 0x36ae, 0x5, 0x6, 0x3, 0x400000000, 0x6, 0xf73c], 0x8080000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = dup3(r2, r1, 0x80000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0xffffffffffffff9a, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) 5m2.451313097s ago: executing program 4 (id=733): r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000140)={0x18, 0x2, {0x0, @local}}, 0x1e) close(r2) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x86022, &(0x7f0000000040)=ANY=[@ANYBLOB='nr_inodes=5']) syz_open_dev$tty1(0xc, 0x4, 0x1) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x1, './cgroup.cpu/cgroup.procs\x00'}, 0x6e) setns(0xc9, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002800090026bd7000ffd3df2501000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000811}, 0x480f0) mount(0x0, 0x0, 0x0, 0x44021, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x41, &(0x7f00000000c0)=ANY=[@ANYBLOB="6e617400000000000000000000000000000000000000000000000000000000000200"], 0x44) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f00000005c0)={'broute\x00', 0x6000000, 0x4, 0x88, [0x0, 0x400004, 0x9, 0x8, 0x377, 0x8], 0x0, 0x0, &(0x7f0000000400)=""/136}, &(0x7f0000000580)=0x78) r5 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) 5m0.083481859s ago: executing program 37 (id=733): r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000140)={0x18, 0x2, {0x0, @local}}, 0x1e) close(r2) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x86022, &(0x7f0000000040)=ANY=[@ANYBLOB='nr_inodes=5']) syz_open_dev$tty1(0xc, 0x4, 0x1) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x1, './cgroup.cpu/cgroup.procs\x00'}, 0x6e) setns(0xc9, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002800090026bd7000ffd3df2501000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000811}, 0x480f0) mount(0x0, 0x0, 0x0, 0x44021, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x41, &(0x7f00000000c0)=ANY=[@ANYBLOB="6e617400000000000000000000000000000000000000000000000000000000000200"], 0x44) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f00000005c0)={'broute\x00', 0x6000000, 0x4, 0x88, [0x0, 0x400004, 0x9, 0x8, 0x377, 0x8], 0x0, 0x0, &(0x7f0000000400)=""/136}, &(0x7f0000000580)=0x78) r5 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) 3m23.995270939s ago: executing program 7 (id=901): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000d40), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_io_uring_setup(0x2000249a, &(0x7f0000000080)={0x0, 0x8e1, 0x100, 0x0, 0x3e0}, &(0x7f0000000300), &(0x7f0000000140), &(0x7f0000000240)) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_tcp(0x2, 0x1, 0x0) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000200)="77690addcf", 0x5}], 0x1, 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[], 0x225c}, 0x1, 0x0, 0x0, 0x20004855}, 0x0) splice(r1, 0x0, r3, 0x0, 0x10900, 0xf) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x824c43, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000340), 0x80882) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat(r4, 0x0, 0x70bac0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x21, 0x40000) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x101000, 0x110) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) fcntl$getflags(r5, 0xb) 3m22.313366441s ago: executing program 7 (id=905): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0xa8000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000280)={'ip6tnl0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}}) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffe800000000000000000000000000010ff02000000000000000000000000000189"], 0x340a) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000000c0)={0x7, 0xb, {0xffffffffffffffff}, {}, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x74a01, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x39) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='f2fs\x00', 0x128104a, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x40000022, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[], [], 0x2f}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r4, 0x0, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_buf(r6, 0x1, 0x1f, &(0x7f0000000500)=""/166, &(0x7f0000000680)=0xa6) ioctl$SNDCTL_SEQ_OUTOFBAND(r5, 0x40085112, &(0x7f0000000000)=@l={0x92, 0x6, 0xc0, 0x4, 0x1, 0x4, 0xa}) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0x23, 0xffff, 0x8022ab, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, 0x1c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, 0x0, 0x20000800) 3m21.653592569s ago: executing program 7 (id=907): socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000050)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000090)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000a0)) r0 = socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x1}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000d0)) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r1, &(0x7f0000000200)="58000000140001feffff7f00000000001e000000ffffffff00"/88, 0x58) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000100)={0x3, &(0x7f0000000000)=[{0x93, 0xf, 0x5, 0x81}, {0xbc59, 0x4, 0x3, 0x9}, {0x8, 0x4, 0x7, 0x4}]}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r3, 0x402c5342, &(0x7f0000000080)={0x5, 0x133d7628, 0x0, {0x211f, 0x8001}, 0x7}) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0) splice(r2, 0x0, r3, 0x0, 0x10, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, 0x0) 3m21.310990679s ago: executing program 7 (id=910): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x2000410, &(0x7f0000000080)={[{@nobh}, {@delalloc}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@i_version}, {@nobh}, {@abort}]}, 0xc1, 0x801, &(0x7f00000007c0)="$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") mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0xc0a419, 0x0) syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x1, 0x5531, &(0x7f0000000b00)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='dir0/trace_marker\x00', 0x1, 0x0) write(r1, &(0x7f0000001240)="62f5ff6ccf3d2ec97f0e4bc8a900d2e75067a5109d749cdf1ba00926335fdca4d2df9c6093533dbe86131af765f8be39df30e3e4f257006bf1826c", 0x3b) fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) write$P9_RWRITE(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) 3m19.025541374s ago: executing program 7 (id=915): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000000f01f00660000007f00000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000b00), &(0x7f0000000000), 0x1, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r0, &(0x7f0000000200)="4e5df8f48d464c97e90d9b084bc5d858bbf062ecd11e9c807021cdf159b70cbcc6f61763c1f2aa04893575afdde63a754f9a29eeb7174e9c721c15289defa7dafb432957cca659054c59af2630a8d02bc7e9b0eae584db319de5b0d06a221e9c39615b24dd46000850eb844c50820ae33f64d94d6af1833e82091e2bf8bd7f60e170183ec3c3cd8b15ec36173b6b36493bb5bbe2fa6d7d2c42e759f9ec9829e82259d2a0e5cc7b6a8c3bd1249ccb5baf077aac1be3d30434e1cb9d7375a22c1f826d9c6145889dff91e254358b3444d1e0c8897cf108e771fc4dfe02de8c14ef6be88ddd7a39539a793cc922555d5158e3d7c6ccd5da153eb55a0f9b7d2cb0a1cdbcbb3140e34bbab12be5c2cf89bca92d8c6f071cf3c74e27467e34072d3d0f8a97915ebb7e9c64f885420f91efe77ae80fd48fabd6347636377055b85817faf4619ed34783ca24d7608c2bd134d5aa7663c65c1d08b7b4e4aee1c563887c34b84955e83c5cdc9f9082000000", &(0x7f0000001680)=""/227}, 0x20) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000100)="ac36f6b96219a06aa13f846a27947f53f5af963fcb8f4e9b4c81510333c2b1f8923398b48fb32ac5fa1a547878ff19ee3442b6c13da0956f1751f4e078ae5c1729d81b1b78d67d8f94785e052c2bf0", 0x4f, 0xfffffffffffffffc) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000180)='syzkaller\x00', &(0x7f00000001c0)) 3m16.897017041s ago: executing program 7 (id=921): ioctl$KVM_GET_NR_MMU_PAGES(0xffffffffffffffff, 0xae45, 0x8) r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$NILFS_IOCTL_RESIZE(r0, 0x40086e8b, 0x0) listen(r0, 0x5) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) prlimit64(0x0, 0x4, &(0x7f0000000140)={0xffffffffffffffff, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f000015c000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x29, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r6, 0x4080aebf, &(0x7f0000002bc0)=@vmx={0x103, 0x0, 0x2080, {0x1000, 0x60000, {}, 0x1, 0x3}, {"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", "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"}}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000280)={'\x00', 0x0, 0xbfa2, 0x3, 0x3, 0x4}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r7 = memfd_create(&(0x7f0000000380)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x00\x98S7\xc9\x00\x00\x00\x00\x00\x00\x00\xf3\xff\x00\x00\x00\x00\xdf8\x9c\xc0T\xd2b\x8aL\xdd\x9e\x9d0\xb9\xd8K\x7f\x02\xf0\x19?j\x88l)l\xdbO\x88\r\x9c\xc2\x97m\xe0\xd8\xe4\xaaM4\x92\xca\xd7\x03\x11{\x98-\xb3D\xb8L\a\xdc3\xc8\x19\x9dg\x90\xb5?J\xc8\b=\xc5\b\xd9\x9eG[\xa9\xff]\xdaH\xc1Q\x95T\xfe\x9eRq\xdd[\x90MVb\x122m\xef\xeded#\xaf\xb5\xe3 \x8a\xfa\xf6\xdf\n]KbE\xb7\x9cLL\x93\xe7^\xc7\xde\xd0\xc2\xb5\xfe\v\xc3\xe1\x92[\xdbIq\x81\x00\x9b]\xee\xcbk\"\xdc\x89\x1c\xc3\xa1\x04\xa8\x8fF\xe9y\x0f<\xc0\xac\x06/\x8c\xfcP/\x83\x1f\v\xb8\xf1\xb1T\xdf_\xa1}\xf0)\xb3/_X\x9f\xee\tq\xec\xddG\x82\x95\xfe\x00\x94\xcf\xe1\xbd\x95+\xa4\x95\xf3!\xabu\xe1i\x00\x00\x00\x00', 0x0) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f00000001c0)={r7, 0xfffffffc, 0x100000000, 0xfffffffffffff000}) prlimit64(r1, 0x8, &(0x7f0000000180)={0x200000002005, 0x5}, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r8, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="020000000400000008000000"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000001850000000000020000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffff0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9a) 3m16.037834226s ago: executing program 38 (id=921): ioctl$KVM_GET_NR_MMU_PAGES(0xffffffffffffffff, 0xae45, 0x8) r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$NILFS_IOCTL_RESIZE(r0, 0x40086e8b, 0x0) listen(r0, 0x5) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) prlimit64(0x0, 0x4, &(0x7f0000000140)={0xffffffffffffffff, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f000015c000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x29, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r6, 0x4080aebf, &(0x7f0000002bc0)=@vmx={0x103, 0x0, 0x2080, {0x1000, 0x60000, {}, 0x1, 0x3}, {"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", "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"}}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000280)={'\x00', 0x0, 0xbfa2, 0x3, 0x3, 0x4}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r7 = memfd_create(&(0x7f0000000380)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x00\x98S7\xc9\x00\x00\x00\x00\x00\x00\x00\xf3\xff\x00\x00\x00\x00\xdf8\x9c\xc0T\xd2b\x8aL\xdd\x9e\x9d0\xb9\xd8K\x7f\x02\xf0\x19?j\x88l)l\xdbO\x88\r\x9c\xc2\x97m\xe0\xd8\xe4\xaaM4\x92\xca\xd7\x03\x11{\x98-\xb3D\xb8L\a\xdc3\xc8\x19\x9dg\x90\xb5?J\xc8\b=\xc5\b\xd9\x9eG[\xa9\xff]\xdaH\xc1Q\x95T\xfe\x9eRq\xdd[\x90MVb\x122m\xef\xeded#\xaf\xb5\xe3 \x8a\xfa\xf6\xdf\n]KbE\xb7\x9cLL\x93\xe7^\xc7\xde\xd0\xc2\xb5\xfe\v\xc3\xe1\x92[\xdbIq\x81\x00\x9b]\xee\xcbk\"\xdc\x89\x1c\xc3\xa1\x04\xa8\x8fF\xe9y\x0f<\xc0\xac\x06/\x8c\xfcP/\x83\x1f\v\xb8\xf1\xb1T\xdf_\xa1}\xf0)\xb3/_X\x9f\xee\tq\xec\xddG\x82\x95\xfe\x00\x94\xcf\xe1\xbd\x95+\xa4\x95\xf3!\xabu\xe1i\x00\x00\x00\x00', 0x0) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f00000001c0)={r7, 0xfffffffc, 0x100000000, 0xfffffffffffff000}) prlimit64(r1, 0x8, &(0x7f0000000180)={0x200000002005, 0x5}, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r8, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="020000000400000008000000"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000001850000000000020000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffff0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9a) 2m44.889476033s ago: executing program 0 (id=995): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (rerun: 32) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="020300020c00000027bd7000000000000300060032000000020010000000000000000000000000000200010000000000000005fc0100000003000500000000000a00"], 0x60}, 0x1, 0x7}, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 64) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x6, &(0x7f0000000180)=[{0x7, 0x1, 0x51, 0x888}, {0x7, 0xc, 0x2, 0x7}, {0xfe, 0x4, 0xff, 0x3}, {0x8, 0x5, 0x3, 0x4}, {0x400, 0xa, 0x2, 0x401}, {0x2, 0xff, 0xd, 0x5}]}) (rerun: 64) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r4, 0x4048ae9b, &(0x7f0000000080)={0xe0003, 0x0, {[0x8, 0x4000000002, 0x404, 0xffffffffefffff17, 0xffffffffffffffff, 0x100000000, 0x7, 0x4]}}) (async, rerun: 64) syz_emit_ethernet(0x4e, &(0x7f0000001240)={@multicast, @random="bad4f9431624", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x18, 0x3a, 0xff, @initdev={0xfe, 0x4, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0xfe, '\x00', @loopback}}}}}}, 0x0) (async, rerun: 64) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001100)=ANY=[@ANYBLOB="200000002f000900275ba2ccab9bd07c0a7ffcbd7000fbdbdf25040000000500"], 0x20}, 0x1, 0x0, 0x0, 0x42914}, 0x40000d4) 2m44.042655771s ago: executing program 0 (id=997): mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x59) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x90, r1, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x5, 0x7b}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x19}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1716}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8e1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x6}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x7c}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x80000001}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x31}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xf3c}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xffff}]}, 0x90}}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f0000000200)='./file0/file0\x00', 0x400, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c2) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000000), 0x220000c, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1\x00', 0x8000, 0x5) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0/file0'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x322020, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) 2m43.363718438s ago: executing program 0 (id=999): syz_emit_vhci(&(0x7f0000001000)=ANY=[@ANYBLOB="04e91900212de76ee51ea473dc37230df7c8000140a03bad5c8dfa6753"], 0x10) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x16, 0x11, &(0x7f0000000c80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x23ffd, 0x0, 0x0, 0x0, 0x9}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0xe, 0x0, &(0x7f00000000c0)="00000000000000ce94327fc1a80c", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x7]}, 0x8) syz_emit_vhci(&(0x7f0000000f80)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x5b}, {0x6, [{@any, 0x0, 0x3, 0xf3, "18020d", 0x5dcb, 0x40}, {@none, 0x8, 0x2, 0x1, "db1c2f", 0x745, 0x5}, {@any, 0xc, 0x2, 0x8, "aa5239", 0x4}, {@any, 0x2, 0x3, 0x4, "3c8d70", 0x800, 0x10}, {@none, 0xff, 0x1, 0x0, "530ee1", 0x5, 0x7}, {@any, 0x9, 0x2, 0x1a, "8d2781", 0x400, 0x80}]}}}, 0x5e) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r4, &(0x7f0000000100)='select \n', 0x10) write(r4, &(0x7f0000000180)='file reat /etc/passwd task.uid=0 exec.argv[0]=\"sh\" exec.envp[\"PATH\"]=\"/bin=\n', 0x4c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000008000000bca30000000000002403000020feffff620af0fff8ffffff71a4f2ff000000001f03000000000000e5000500000000002604fdffff02000015010000033800001d13fcff000000007a0af0ff0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2740000000000000000000000000000000000000000000a0009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d2ff8a642ca50934b3fbe44b0abeba9df209566984a29dfc0466e439a94e177b3c4d5f6e92b8176b9d6ddeeeb196fa964217f88e1acc180aaa4"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r3, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) 2m42.521160023s ago: executing program 0 (id=1000): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x2000410, &(0x7f0000000080)={[{@nobh}, {@delalloc}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@i_version}, {@nobh}, {@abort}]}, 0xc1, 0x801, &(0x7f00000007c0)="$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") mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0xc0a419, 0x0) syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x1, 0x5531, &(0x7f0000000b00)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) write$P9_RWRITE(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) 2m39.104067493s ago: executing program 0 (id=1006): mount(&(0x7f0000000000)=@nullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000002c0)='bfs\x00', 0x8080, 0x0) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, r0) 2m37.993302862s ago: executing program 0 (id=1008): r0 = fsopen(&(0x7f0000000080)='omfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x8, 0x300, 0x0, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000bc0)={{0x4000, 0x41000, 0x3, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}, {0x30000, 0x60000, 0xb, 0x0, 0x0, 0x17, 0xf9, 0x6, 0x6, 0x0, 0x4, 0x6}, {0xeeef0000, 0x6000, 0x13, 0x1, 0x0, 0x0, 0x89, 0x0, 0x4, 0xe, 0x1, 0x6}, {0x30000, 0x41000, 0x4, 0x5, 0x0, 0x8, 0x0, 0x20, 0x4, 0x4}, {0xeeef0000, 0x70000, 0x3, 0x0, 0x0, 0x80, 0x8, 0x20, 0x0, 0x6d, 0x1a}, {0xe000, 0x9000, 0x10, 0x0, 0x6, 0x40, 0x0, 0xfe, 0x0, 0x0, 0x84}, {0x30000, 0x200000, 0xd, 0x4, 0x70, 0x0, 0x0, 0x0, 0x3, 0x4}, {0x0, 0x100000, 0x0, 0xfb, 0x0, 0x2, 0x0, 0x2, 0x0, 0xa}, {0x4, 0xffff}, {0x0, 0x7}, 0x3771459b4651a1c4, 0x0, 0xf000, 0x0, 0x0, 0x4000, 0x900, [0xfffffffffffffffc, 0xfffffffffffffffe, 0x0, 0x40]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x6) io_setup(0x6, &(0x7f0000000340)=0x0) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000280)='./file1\x00', 0x804800, &(0x7f0000000340)=ANY=[], 0xf9, 0x1235, &(0x7f0000002a80)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ee, &(0x7f0000000000)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r5 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r4) keyctl$setperm(0x5, r5, 0x0) 2m33.744430838s ago: executing program 39 (id=1008): r0 = fsopen(&(0x7f0000000080)='omfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x8, 0x300, 0x0, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000bc0)={{0x4000, 0x41000, 0x3, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}, {0x30000, 0x60000, 0xb, 0x0, 0x0, 0x17, 0xf9, 0x6, 0x6, 0x0, 0x4, 0x6}, {0xeeef0000, 0x6000, 0x13, 0x1, 0x0, 0x0, 0x89, 0x0, 0x4, 0xe, 0x1, 0x6}, {0x30000, 0x41000, 0x4, 0x5, 0x0, 0x8, 0x0, 0x20, 0x4, 0x4}, {0xeeef0000, 0x70000, 0x3, 0x0, 0x0, 0x80, 0x8, 0x20, 0x0, 0x6d, 0x1a}, {0xe000, 0x9000, 0x10, 0x0, 0x6, 0x40, 0x0, 0xfe, 0x0, 0x0, 0x84}, {0x30000, 0x200000, 0xd, 0x4, 0x70, 0x0, 0x0, 0x0, 0x3, 0x4}, {0x0, 0x100000, 0x0, 0xfb, 0x0, 0x2, 0x0, 0x2, 0x0, 0xa}, {0x4, 0xffff}, {0x0, 0x7}, 0x3771459b4651a1c4, 0x0, 0xf000, 0x0, 0x0, 0x4000, 0x900, [0xfffffffffffffffc, 0xfffffffffffffffe, 0x0, 0x40]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x6) io_setup(0x6, &(0x7f0000000340)=0x0) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000280)='./file1\x00', 0x804800, &(0x7f0000000340)=ANY=[], 0xf9, 0x1235, &(0x7f0000002a80)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ee, &(0x7f0000000000)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r5 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r4) keyctl$setperm(0x5, r5, 0x0) 1m46.887111688s ago: executing program 2 (id=1110): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3f0, 0x0, 0x1f8, 0x1f8, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@arp={@multicast2, @loopback, 0xffffffff, 0xffffffff, 0x7, 0x9, {@mac=@random="3b4c52fb5365", {[0xff, 0x0, 0xff, 0x0, 0xff]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x50, 0x1, 0xe, 0x9cd4, 0x0, 0xffff, 'veth0_to_team\x00', 'ip_vti0\x00', {}, {0xff}, 0x0, 0x202}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x308}}, {{@uncond, 0xc0, 0x110, 0x0, {0x0, 0x1e03}}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @empty, @local, @multicast2, 0x2}}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, 0x0, 0x0, 0x20, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}}, {}, 0x0, 0x0, 0x0, 0x0, 0xfff9, 0x0, 'veth0_to_batadv\x00', 'netpci0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x3f}, 0x8, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) socket$nl_route(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, 0x0, 0x45) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) poll(&(0x7f0000000240)=[{r3}], 0x1, 0x5a) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000100)=0x3) setsockopt$sock_attach_bpf(r1, 0x1, 0x10, &(0x7f0000000100), 0x4) recvmsg$unix(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x21) sendmsg$inet(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000000c0)='c\"', 0x2}], 0x1}, 0x11) recvmsg$unix(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2082) r5 = getpgrp(0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x44ef169bcd112600, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1, 0x26c, &(0x7f0000000c40)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380407b, 0x0, 0x1, 0x0, &(0x7f0000000140)) rename(&(0x7f0000000b40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./bus\x00') r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000680), 0x72080, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000800)={r6, &(0x7f00000006c0)="9162eda53c93412c653e570ff5feacc6f953a6a8434a7bd928686d31fda07e8b4cc67b4cfaed95b67167a8221777082e1645da3c932b1040b57399ee823f7ba875fa97cd546693de430c5134f0a608a1254a782d8dfce3815c268fb3eb291e552bca73b8e25af36a8a673a79c46bcf9382287cfc31c1b0ab13578922a590974503abf65d3348b828dfe6f58d63185985fe978e319509495e908870c56f9528124744ca9e7ec99370d1c236e5b630e631389c2ea0b0075301d775aa9f7b8e685324da77e5dd87e83e4dccdc162aa187c17bd5e86829df85a14565efce7f97bc7d2a02eda425", &(0x7f00000007c0)=@tcp6}, 0x20) sched_setaffinity(r5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/split_huge_pages\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./test_file\x00', 0x42, 0x1ff) 1m38.236230481s ago: executing program 2 (id=1123): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0xe4, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x3}, [@CTA_EXPECT_NAT={0x78, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x6c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x10}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x36}}}}]}]}, @CTA_EXPECT_NAT={0x58, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0xf}]}, @CTA_EXPECT_NAT_TUPLE={0x48, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000001c0)={0x4, 0x9, 0xd, 0x1, 0x7, 0x1, 0x156, 0x100}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x88840, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r4, @ANYBLOB="063bbbb64679b5"], 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000fcdbdf253b00000008000300", @ANYRES32=r5, @ANYBLOB="22003300b020ff001b57797e13426d07f90000005050445050507200011b00006800000027436ecc042cebe0d2217174b3036599fedbb486f63263c8cb4d64e0ac7aedac6c0fea62ae8eb2c94c14c0e598813a580a10fca09245df44e97fb10e261c1f71760b4c197f168b00255896df1cb9ff9ce91a877f17a7f4702abc4f8377db021d0a2ddab13d5fbb35ee39a56377ba73298b5ed56e607460df056b91353ad120bdee85a4ce8ede699bc81a12cdd9694fde275d4d0fa680689b722b5ee81e3f882f83bfd0d0d969350c6fcf8fd888024b8aa9a61537cd"], 0x40}, 0x1, 0x0, 0x0, 0x4018010}, 0x804) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c000c0006"], 0x48}, 0x1, 0x0, 0x0, 0x2c048040}, 0xe800) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) r8 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc2}, &(0x7f0000000200)={0x0, "067b2765609a4d3263bdd7342725d267c212cee0b3ed53d810d07c9c102e33d2cbccfe5b0e501ef47b8b710819ef20cea40f001d4b9bbc03325e9080aa445b5c", 0x14}, 0x48, 0xfffffffffffffffe) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r10 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r10, 0xc0184800, &(0x7f0000000340)={0xe939, r9}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x7, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x20, 0xd, 0x1, 0x0, 0xfffffffd, 0xe661, 0x6, 0x7, 0x5, 0x8, 0x4c74, 0xffff7fff, 0x7, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xffffffff, 0x7, 0x5, 0x80003e, 0x18e, 0x6, 0x6, 0x0, 0x8, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x7, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x2009, 0xfffffffc, 0x573a, 0x0, 0x0, 0x5, 0x2f, 0x8, 0x312, 0x66abcbd2, 0xea4, 0x5, 0x4, 0x1007, 0x7, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4000004, 0x9, 0x8, 0x40, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x200009, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x6, 0x40a, 0x3ff, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x1000515, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6cff, 0x6, 0x38, 0x200, 0x1fd, 0x80, 0x7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x8, 0xcc, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x7ef, 0x2006, 0x80a2cd, 0x4, 0x25], [0xc, 0xbb33, 0x7, 0xb, 0x5, 0x4, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xfffc, 0xa620, 0x1, 0x5, 0x801, 0x2000002, 0x150, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0x10000, 0xf, 0x7e, 0x9, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0xe1c4, 0x0, 0x4, 0x5, 0x7ff, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) keyctl$get_persistent(0x16, 0x0, r8) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0x333, 0x1, 0x0, {0x0, 0x0, 0x0, r7, {0xb}, {0x5, 0x5}, {0x0, 0xe}}}, 0x24}}, 0x0) 1m34.082125049s ago: executing program 2 (id=1129): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0xfe, 0x7fff0006}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0x82000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x20004, r1, 0x80000}) mmap$IORING_OFF_SQ_RING(0xfffff000, 0x3000, 0x1800000, 0x12, r3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000003a000100faff07000400308d010000000c00ec000b"], 0x20}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) init_module(&(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0x9, 0x1, 0xf8, 0x81, 0x0, 0x3e, 0x3ff, 0x291, 0x40, 0xb6, 0x8, 0x4, 0x38, 0x2, 0x1, 0x66fe, 0x24a4}, [{0x7, 0x3, 0x9, 0x118f, 0x8, 0xffffffff, 0x4, 0x7}, {0x6474e551, 0x7793, 0x1, 0x7, 0x0, 0x7, 0xdb6d, 0x7f}], "a6c2ba96f7022c5864cba3c2e37d682ab147e56dfda1d684dd6cf91483c420a7f24401935279a32cde44fc6daa8cbde2ec53420bf9dd2f2d2c1913af4ecc4be9782773481e5a0d05", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x8f8, &(0x7f0000000c40)='/dev/dma_heap/system\x00') openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x400) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) readv(r5, &(0x7f0000000900)=[{&(0x7f0000000740)=""/196, 0xc4}], 0x1) r6 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r6, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x1e) connect$pptp(r6, &(0x7f0000000700)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1f}, 0x94) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246) write$UHID_INPUT(r4, &(0x7f0000001980)={0x21c0, {"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", 0x1000}}, 0x1006) symlink(&(0x7f0000002040)='./file0\x00', 0x0) unlink(&(0x7f00000001c0)='./file0\x00') mount(&(0x7f0000000000)=@rnullb, 0x0, &(0x7f00000000c0)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$udf(&(0x7f0000001080), &(0x7f00000000c0)='./file0\x00', 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB='umask=000000000000,iocharset=cp857,uid=ignore,novrs,\x00'/64], 0x0, 0x1045, &(0x7f0000001140)="$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") 1m31.885109073s ago: executing program 2 (id=1133): syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x80, 0x20000006, 0x20000000, 0x6, 0x5f, 0x9, 0x1005, 0xffff2d37, 0xffffff01, 0x6, 0x10000003, 0x5, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x1, 0x24, 0xb, 0x1, 0x0, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0x1000, 0x0, 0x8071, 0x7, 0x6, 0xffffffff, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x5, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x7, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012d, 0x8004, 0x5, 0xffffffd3, 0x129432e2, 0xc8, 0xf9, 0xe, 0x2be, 0x1, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x5, 0x2f, 0xe, 0x26, 0x3, 0xa7e, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000045, 0x5f31, 0x1000d, 0x4e0, 0x1, 0x4, 0x3, 0x4, 0x9, 0x4, 0xd, 0xffff8001, 0x47, 0x8000, 0x1, 0xfe000000, 0xfffe, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x3, 0x42, 0x8], [0x5, 0x408, 0xe, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x8, 0x4, 0x5, 0x80005, 0x8, 0x1ef, 0x22, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xc, 0xc, 0x2, 0x2, 0x3, 0x2000000b, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x83, 0x3, 0x4, 0x2950bfaf, 0x6, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x4002, 0x3, 0x7fe, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x1, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x40000007, 0x20000b, 0x5, 0x938, 0xfffffbff, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x54, 0x5, 0x3, 0x101, 0x10000, 0x5, 0x7fff, 0xfffe, 0xa620, 0x1, 0x78b, 0x6, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x5, 0x3, 0x7e, 0xa55, 0x9602, 0x7, 0xab, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0xfffffffd, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff343e, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (fail_nth: 3) 1m29.253098873s ago: executing program 2 (id=1136): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0x7fffffffffffffff) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x8, &(0x7f0000000200)=0x40004) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000002340)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000101f2ffffff000000dc272f290fd57a560099c97fb75f43a74825acd74372bd044c31c281b923c5ed8ccb800f9c0383a8abc34181ce9a13bfac4afa20dcf3a4181e927e341a2b0120b4a38d46db0f6498c16a22efdffe52"], 0x14}, 0x1, 0x0, 0x0, 0x844}, 0x800) socket$tipc(0x1e, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r4, &(0x7f0000000240)=[{&(0x7f0000000b00)=""/227, 0xe3}], 0x1, 0x2, 0x6) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r4, 0xc040583f, &(0x7f0000000300)={{@align=0x2, {0x4005, 0x401, 0x1000006, 0x2}}, {{[0x6, 0xb9d4, 0x2734a493, 0x5]}, 0x0, 0x1, 0x8, 0x0, &(0x7f0000000480)=[{{@_ha_fsid={[0x0, 0x6]}, {0x4, 0x9, 0x3, 0x3ff}}, 0xd, 0x0, '.M[+\x00'}, {{@align=0xc, {0x4, 0x6, 0x80000001, 0x5}}, 0x8, 0x0, '/dev/dri/card#\x00'}, {{@align=0x2, {0x1ff, 0x8, 0xd625, 0xff}}, 0x44, 0x0, '++\x00'}, {{@align=0x4, {0x5, 0x5, 0xe43, 0x692}}, 0x80, 0x0, '/dev/dri/card#\x00'}, {{@_ha_fsid={[0x1, 0x7fffffff]}, {0xfffb, 0x4, 0x8000, 0x1}}, 0x9, 0x0, '/dv/IsO\xd5\xef\xda\xd1rd#\x00'/24}, {{@align=0x5, {0xb45d, 0x3, 0x7, 0xc000000000000000}}, 0x2, 0x0, '/dev/dri/card#\x00'}, {{@align=0x5, {0x0, 0xc2, 0x4, 0xffffffffffff08d4}}, 0xfffffff4, 0x0, '/dev/dri/card#\x00'}, {{@align, {0x5, 0x2, 0x4967, 0xfffd}}, 0x4, 0x0, '/dev/dri/card#\x00'}, {{@align=0x666, {0x6, 0x8000, 0x3ff, 0x18c6}}, 0x7, 0x0, '/dev/dri/card#\x00'}, {{@align=0x1, {0x7, 0x103, 0xc, 0xfffffffd}}, 0x2, 0x0, '/dev/dri/card#\x00'}]}}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000440)={0x5, 0x1, 0x7}) socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 1m27.653961657s ago: executing program 2 (id=1140): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2640, 0x9) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newsa={0x144, 0x10, 0x713, 0x70bd26, 0x0, {{@in=@rand_addr=0x64010101, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4e22, 0x0, 0x4e23, 0x3, 0x2, 0x0, 0x0, 0x3a}, {@in6=@remote, 0x0, 0x32}, @in=@remote, {0x0, 0x4, 0x0, 0xa, 0x100006, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffff8}, {0xc, 0x0, 0x2}, 0x70bd29, 0x0, 0x2, 0x1, 0x0, 0x28}, [@algo_auth_trunc={0x4c, 0x14, {{'blake2s-256-arm\x00'}, 0x0, 0xc0}}, @tfcpad={0x8, 0x16, 0x2}]}, 0x144}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[], 0x1ac}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f0000000280)={0x1, 0x0, [{0x80000000, 0xfffffff7, 0x84ca, 0x9, 0x4}]}) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x862b01) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f00000004c0), 0x208e24b) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) r7 = getpid() syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x309, 0xe6, 0xe8, 0xdc, 0x40, 0x5e1, 0x408, 0xa4d6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0xc, 0xb, 0x40, 0x9, "", [{{0x9, 0x4, 0x63, 0xe, 0x2, 0xb9, 0x12, 0xd0, 0x1, [], [{{0x9, 0x5, 0x2, 0x4, 0x8, 0x7, 0x10, 0x1}}, {{0x9, 0x5, 0xd, 0x0, 0x228, 0x7, 0xff, 0xaa}}]}}]}}]}}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}) r8 = syz_pidfd_open(r7, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$FS_IOC_GETVERSION(r8, 0x80087601, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, 0x0, 0x20004004) read$FUSE(r6, &(0x7f00000001c0)={0x2020}, 0x2020) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r5, 0x0) ioctl$PTP_PIN_GETFUNC2(r0, 0xc0603d0f, &(0x7f0000002240)={'\x00', 0x0, 0x1, 0x3}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000019ed8d7578e2c677cc7b959d4c300000000000050"], 0x3c}}, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r10, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) listen(r10, 0x5) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r11, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x1fc}, 0x1c) listen(r11, 0x80000003) 1m24.707959411s ago: executing program 1 (id=1149): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x734}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newtaction={0x58, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x44, 0x1, [@m_bpf={0x40, 0xb, 0x0, 0x0, {{0x8}, {0x4}, {0x16, 0x6, "8c5e889680ea699f0286c6926deecbcf795b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x58}}, 0x20040000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r3, @ANYBLOB="080001"], 0x90}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x400000000000235, 0x0) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000280)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abbb9b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000400000010000000000000070000000008000000000000000a04000000010000000000000e0200000001000000030000000000080200000000303000"], &(0x7f0000000080)=""/1, 0x5c, 0x1, 0x0, 0xb, 0x10000}, 0x28) openat$mice(0xffffffffffffff9c, &(0x7f0000000340), 0x101000) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYRES32=0x0], 0x50) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001080)={&(0x7f0000000f80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x6, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0xf, 0x2}]}, @decl_tag={0x4, 0x0, 0x0, 0x11, 0x1, 0xa}]}, {0x0, [0x5f, 0x0, 0x5f, 0x2e]}}, 0x0, 0x42, 0x0, 0x1, 0x7ea}, 0x28) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$bt_hci(r7, 0x84, 0x82, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x7, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1000}, [@alu={0x4, 0x1, 0x7, 0x4, 0xa, 0xffffffffffffffff, 0x4}, @exit, @map_val={0x18, 0x8, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0xc4}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x20000844) mount(0x0, &(0x7f0000000100)='./configfs\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) 1m15.955808199s ago: executing program 1 (id=1155): openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) io_setup(0x9, &(0x7f0000000340)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1f, 0x3, &(0x7f0000000900)=@raw=[@generic={0x2, 0x0, 0x4, 0x33, 0x7}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$xdp(0x2c, 0x3, 0x0) io_submit(r0, 0x2000000000000211, &(0x7f0000000840)=[&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x8, 0x9, r1, 0x0}]) (fail_nth: 3) 1m14.989407161s ago: executing program 1 (id=1157): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) 1m14.068087544s ago: executing program 1 (id=1158): syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x800718, &(0x7f0000000340)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xb7}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nomblk_io_submit}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x48d, &(0x7f0000000a00)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_SREGS2(r4, 0x4140aecd, &(0x7f0000000140)={{0x50000, 0xd000, 0xf021, 0x89, 0x7f, 0x7, 0x84, 0xff, 0x7, 0x84, 0x80, 0xb}, {0xb000, 0xd000, 0x9, 0x3, 0xfa, 0x7, 0x6, 0x6, 0x1, 0x4, 0xfb, 0x5}, {0xf000, 0x8000000, 0x0, 0x4, 0x10, 0x81, 0x4, 0x13, 0x5, 0x4, 0x92, 0x80}, {0x10000, 0xeeef0000, 0xe, 0x7, 0xbf, 0x40, 0x2, 0x0, 0xfd, 0x29, 0x9, 0x9}, {0x30000, 0xdddd0000, 0xf, 0x9, 0x5, 0x2, 0x7, 0xf1, 0x2, 0x6e, 0x2, 0x8}, {0x4000, 0xdddd1000, 0xe, 0x2, 0xad, 0x42, 0x4, 0x5, 0x5, 0xe, 0x2, 0xa}, {0x58000, 0x165000, 0x0, 0x0, 0xcd, 0x5, 0x5, 0x26, 0x8, 0x6, 0xff, 0x6}, {0x1, 0xf000, 0x0, 0xe, 0x10, 0x40, 0x3, 0x0, 0x7f, 0x1, 0x0, 0x8}, {0x100000, 0x15}, {0x58000, 0xff81}, 0x80000003, 0x0, 0x80a6000, 0x110229, 0x5, 0xec00, 0x8000900, 0x1, [0x6, 0x2, 0xb, 0x3]}) r5 = syz_open_dev$media(&(0x7f00000012c0), 0x66, 0x180502) ioctl$MEDIA_IOC_G_TOPOLOGY(r5, 0xc0487c04, &(0x7f0000002f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000019340)=[{}, {}, {}], 0x0, 0x0, 0x0}) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1333404, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000300), 0x400, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) 1m11.395819815s ago: executing program 40 (id=1140): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2640, 0x9) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newsa={0x144, 0x10, 0x713, 0x70bd26, 0x0, {{@in=@rand_addr=0x64010101, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4e22, 0x0, 0x4e23, 0x3, 0x2, 0x0, 0x0, 0x3a}, {@in6=@remote, 0x0, 0x32}, @in=@remote, {0x0, 0x4, 0x0, 0xa, 0x100006, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffff8}, {0xc, 0x0, 0x2}, 0x70bd29, 0x0, 0x2, 0x1, 0x0, 0x28}, [@algo_auth_trunc={0x4c, 0x14, {{'blake2s-256-arm\x00'}, 0x0, 0xc0}}, @tfcpad={0x8, 0x16, 0x2}]}, 0x144}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[], 0x1ac}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f0000000280)={0x1, 0x0, [{0x80000000, 0xfffffff7, 0x84ca, 0x9, 0x4}]}) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x862b01) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f00000004c0), 0x208e24b) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) r7 = getpid() syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x309, 0xe6, 0xe8, 0xdc, 0x40, 0x5e1, 0x408, 0xa4d6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0xc, 0xb, 0x40, 0x9, "", [{{0x9, 0x4, 0x63, 0xe, 0x2, 0xb9, 0x12, 0xd0, 0x1, [], [{{0x9, 0x5, 0x2, 0x4, 0x8, 0x7, 0x10, 0x1}}, {{0x9, 0x5, 0xd, 0x0, 0x228, 0x7, 0xff, 0xaa}}]}}]}}]}}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}) r8 = syz_pidfd_open(r7, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$FS_IOC_GETVERSION(r8, 0x80087601, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, 0x0, 0x20004004) read$FUSE(r6, &(0x7f00000001c0)={0x2020}, 0x2020) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r5, 0x0) ioctl$PTP_PIN_GETFUNC2(r0, 0xc0603d0f, &(0x7f0000002240)={'\x00', 0x0, 0x1, 0x3}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000019ed8d7578e2c677cc7b959d4c300000000000050"], 0x3c}}, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r10, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) listen(r10, 0x5) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r11, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x1fc}, 0x1c) listen(r11, 0x80000003) 1m10.745771205s ago: executing program 1 (id=1163): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffc000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020) 1m9.445176385s ago: executing program 1 (id=1165): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000004740)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@sndinfo={0x20, 0x84, 0x2, {0x2, 0x200, 0x5, 0x7fffffff}}, @sndrcv={0x30, 0x84, 0x1, {0x8001, 0x7, 0x8006, 0x8, 0x4, 0x3, 0x66985b6c, 0x2}}], 0x50}], 0x1, 0x4020) syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100)={[{@umask={'umask', 0x3d, 0x6}}, {@force}, {@nls={'nls', 0x3d, 'iso8859-13'}}]}, 0x1, 0x5c8, &(0x7f0000000cc0)="$eJzs3c9rFO8ZAPBndpNNNoW4avxRWzBYKKKo2Y3YFgpNi5QcRIRevIZmNcFNlGQtq4eSFv8Qe0hPHnopQunBg+ce/AcCPRYKPYZe8mVmZzerxphokt18/Xzw3XnffWeeeedx5mVnNrABfLNm78fwWiQxe/VOK21vrE83Ntanlzr1iBiJiEL2L4bS6r8jii8iJqNd4ocRkeThkk/t53Xt1YV3d1uX261CXrL1i7tttzdreYmZfJAzBxjv7VfHS7pHmAa93Qk+CLY+73+HuPviIcZmH5JP/F9UIsYiYjSfBzonbuFoR3fwBuYCBAAAgEN0YjM2oxXj/R4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCf57/8neSl06pORdH7/v5S/F3n9WHvT7wEAAAAAAAAAwAG4uBmb0YrxTnsryb7zv5Q1JrLXH8TTWI16rMT1aMVcNKMZK1GNiEpPoFJrrtlcqe5hy9qOW9aO5ngBAAAAAAAA4HvqzzG7/f0/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMgiSi2F5kZaJTr0RhKCJGI6KUrrcW8c9O/Th70+8BAAAAwBE4sRmb0YrxTnsrye75z2b3/aPxNJajGYvRjEbUYz57FtC+6y9srE83Ntanl9Lycdxf/3dfw8giRvvZw857nsrWONPdYjZ+G7+LqzEZ92IlFuMPMRfNqMdk3M5qc5FEJX96UemMc+fxzrzXuve5sZ7PRlKOB7GYje16/D4eRyPmo5AdQ7bO7nv8U5qd5Fe5PeZoPl8mEcmP8iMbDJUsI8PdjEzluU+zcXL3TOzzPPlwT9UodJ9BTRxCzsfyZZrz0YHOea3n7Du7eyYirjX/fnGhsfxo4cHq1cE5pC/0YSamezJx7pvKRCnPRnsW3d9seSnbdjwW4248jvmox8/iVtSyMp0te/N6Zg/XWmF/19pPLueVUxFJub0cEGleT/bktXemq2R9ve9sZ+nUwc9IQxfySjEiGeqOaRB8mIlqTyZO756Jv2ylr6uN5UcrC3NP9ri/n+bLdG4eGai5uZSfvUNZ6/2zI+07vWNfNeub6PYVPuo70+373JVayj/DfRyplvWd27Gvvd35nr6dPuUAMPDGroyVyv8p/6v8svyivFC+M/qbkZ+P/LgUw2+H/lH8W+GvhV8mV+Jl/HH7/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPhyq8+eP5prNOorKioqKt1Kv2cmjsKN5tKTG6vPnl9bXJp7WH9YX745Vaveuln9xc0bDxYb9an2a79HyWHZvuj7PRIAAAAAAAAAAAD24yj+nLTfxwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDxMXs/htciierU9am0vbE+3UhLp769ZiEihtLl/yOKLyImo12i0hMu+dR+XtdeXXh3t3V5O1ahs35xt+32Zi0vMZMPcuYA47396nhJ9wjToLc7waHfvgsAAP//FQYeZg==") syz_mount_image$hfs(&(0x7f0000000080), &(0x7f0000000000)='./file1\x00', 0x1210080, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x7, 0x318, &(0x7f00000004c0)="$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") r1 = syz_usb_connect$uac3(0x3, 0x97, &(0x7f0000000700)=ANY=[@ANYBLOB="12010003000000103d100001400001020301090285000301d8100c080b0102010130020904000000010130000a2401100a00070000000904010000010230000904010101010230000905010920000e00030a2525ffffff7f0c8001090402000001023000090402010101023000172401060080000007000200000000000000064a0900100905820920"], &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f00000012c0)=@lang_id={0x4, 0x3, 0x280a}}, {0x43, &(0x7f0000001300)=@string={0xf, 0x3, "13968285ced1798ce95716323f"}}]}) syz_usb_control_io$uac3(r1, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) io_uring_setup(0x20a7, &(0x7f00000001c0)={0x0, 0xbb2d, 0x8401, 0x3, 0x1f4}) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x80, 0x0, 0x1, 0x0, 0x0) r2 = fanotify_init(0x4, 0x2) fanotify_mark(r2, 0x645, 0x8000020, 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00') 1m7.052352993s ago: executing program 41 (id=1165): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000004740)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@sndinfo={0x20, 0x84, 0x2, {0x2, 0x200, 0x5, 0x7fffffff}}, @sndrcv={0x30, 0x84, 0x1, {0x8001, 0x7, 0x8006, 0x8, 0x4, 0x3, 0x66985b6c, 0x2}}], 0x50}], 0x1, 0x4020) syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100)={[{@umask={'umask', 0x3d, 0x6}}, {@force}, {@nls={'nls', 0x3d, 'iso8859-13'}}]}, 0x1, 0x5c8, &(0x7f0000000cc0)="$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") syz_mount_image$hfs(&(0x7f0000000080), &(0x7f0000000000)='./file1\x00', 0x1210080, &(0x7f0000000800)=ANY=[@ANYBLOB="747970653d54a10fb22c71756965742c696f636861727365743d63703836342c706172743d3078303030303030303030303030303030382c6469725f556d61736b3d303030303030303030303030303030352c6469725f756d61736b3d30303030303030303030303030303030303030303030302c73657373696f6e3d3078303030303030303030303030303030312c6469725f756d61736b3d30303030303030303030303030303030303030313030302c71756965742c756d61736b3d30303030303030303030303030303030303030303030322c00675bbd687b2b0baebf4dee3554bf9a7a4bd30a84607443939611466784437d28b48f9156d24910dec919af3ffb0a725ee567920d0601a67ff73af3b93780f2f83989da4cb4e67bed8e978ec4ee9ad9ff07000041550acd3be2291cdff550795d164e7f5e1fcb136a06e99152b8c2c21b7c7dd2d61200000000000000"], 0x7, 0x318, &(0x7f00000004c0)="$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") r1 = syz_usb_connect$uac3(0x3, 0x97, &(0x7f0000000700)=ANY=[@ANYBLOB="12010003000000103d100001400001020301090285000301d8100c080b0102010130020904000000010130000a2401100a00070000000904010000010230000904010101010230000905010920000e00030a2525ffffff7f0c8001090402000001023000090402010101023000172401060080000007000200000000000000064a0900100905820920"], &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f00000012c0)=@lang_id={0x4, 0x3, 0x280a}}, {0x43, &(0x7f0000001300)=@string={0xf, 0x3, "13968285ced1798ce95716323f"}}]}) syz_usb_control_io$uac3(r1, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) io_uring_setup(0x20a7, &(0x7f00000001c0)={0x0, 0xbb2d, 0x8401, 0x3, 0x1f4}) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x80, 0x0, 0x1, 0x0, 0x0) r2 = fanotify_init(0x4, 0x2) fanotify_mark(r2, 0x645, 0x8000020, 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00') 29.968642292s ago: executing program 3 (id=1218): r0 = syz_open_dev$evdev(0x0, 0x2, 0x860b01) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0xdd, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x82, &(0x7f00000003c0), 0x514) signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x9]}, 0x8, 0x80800) io_setup(0x1, &(0x7f0000000b80)=0x0) io_cancel(r3, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2, 0x8b, 0xffffffffffffffff, &(0x7f0000000300)="fe5486a3e816e498cb00cfa048608209a6eaad19c32b88b266f5f0cf368585cff381a5365ef9ff4f49ef0245842d78477232e104a2763e6d0ad8c087", 0x3c, 0x5, 0x0, 0x2}, &(0x7f0000000540)) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) ioctl$NILFS_IOCTL_RESIZE(r0, 0x40086e8b, &(0x7f0000000000)=0x5) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) set_mempolicy_home_node(&(0x7f00000f9000/0x3000)=nil, 0x3000, 0x0, 0x0) getegid() getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000080)=""/35, &(0x7f00000000c0)=0x23) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x50000, 0x0) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60000, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r6, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) setrlimit(0x7, &(0x7f0000000180)={0x2, 0x95e}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r7}, 0x4) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYRES16=r5], &(0x7f00000001c0)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e0b9547ed387dbe9abc86a457991", 0x0, 0xdeae, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000140)={{0x1, 0x1, 0x18, r4, {0x2, 0x3ff}}, './file0/file0\x00'}) sendmsg$NFT_BATCH(r9, &(0x7f00000008c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000880)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWRULE={0x104, 0x6, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_RULE_USERDATA={0x39, 0x7, 0x1, 0x0, "fcd28102b0657cd11f1306ae0a6fd9301286a4d7af5aa276c14e659216f90b1df46c87d2049cdc246418e82baf5a557ab25043fb24"}, @NFTA_RULE_USERDATA={0xb4, 0x7, 0x1, 0x0, "30c20b7ff3aac3cf5ab336dbfe8c863d56bc866d022ea96eb7c24a9e2b1f6f17b1b04737d9ef857f92f1467d5d718544de5cf8bb23a2e1d1d14d286dc1bac4a48dba03c1b55a8cb5b824e26bae6902d4a1d89b554f892861f9390e042f636357e70c8114919ec4e4ce02bad17cbf03f9132fed83c88ee1a45c540ff31a3fac10af1cf49c1a9b91222b1ab7f223be8fec1af7a0a9ca7011820a31908551f1e33c9f7840f5e26399d6e72642a57748e536"}]}, @NFT_MSG_DELCHAIN={0x34, 0x5, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELSET={0x28, 0xb, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_GC_INTERVAL={0x8}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x3}}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_USERDATA={0x5a, 0x7, 0x1, 0x0, "9e8cd27797b47a1bc90cbfbe51b00f941bc5c778845a5f86849527461daa08cb360dac0dab79130358357836844d8db2340e78858eb70b949dd67faf9522413fd885bf77ff880ebfbf480383deff84c79f8c14c0d1a8"}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x258}, 0x1, 0x0, 0x0, 0x8040}, 0x80) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file0\x00', 0x800810, &(0x7f0000000300)={[{@nossd_spread}, {@nodatasum}, {@compress_force}, {@compress_force}, {@flushoncommit}, {@skip_balance}, {@max_inline={'max_inline', 0x3d, [0x38, 0x31, 0x65]}}, {@nodiscard}]}, 0xfb, 0x510a, &(0x7f000000d000)="$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") r10 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x441, 0x193) ioctl$BTRFS_IOC_ENCODED_WRITE(r10, 0x40809440, &(0x7f0000000580)={0x0, 0x0, 0x440000000002, 0x0, 0x100, 0x800000000000cf56, 0xffffffffffffffff, 0x0, 0x4}) fdatasync(r5) 21.647925752s ago: executing program 9 (id=1226): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0x7fffffffffffffff) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x8, &(0x7f0000000200)=0x40004) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000002340)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000101f2ffffff000000dc272f290fd57a560099c97fb75f43a74825acd74372bd044c31c281b923c5ed8ccb800f9c0383a8abc34181ce9a13bfac4afa20dcf3a4181e927e341a2b0120b4a38d46db0f6498c16a22efdffe52"], 0x14}, 0x1, 0x0, 0x0, 0x844}, 0x800) socket$tipc(0x1e, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r4, &(0x7f0000000240)=[{&(0x7f0000000b00)=""/227, 0xe3}], 0x1, 0x2, 0x6) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r4, 0xc040583f, &(0x7f0000000300)={{@align=0x2, {0x4005, 0x401, 0x1000006, 0x2}}, {{[0x6, 0xb9d4, 0x2734a493, 0x5]}, 0x0, 0x1, 0x8, 0x0, &(0x7f0000000480)=[{{@_ha_fsid={[0x0, 0x6]}, {0x4, 0x9, 0x3, 0x3ff}}, 0xd, 0x0, '.M[+\x00'}, {{@align=0xc, {0x4, 0x6, 0x80000001, 0x5}}, 0x8, 0x0, '/dev/dri/card#\x00'}, {{@align=0x2, {0x1ff, 0x8, 0xd625, 0xff}}, 0x44, 0x0, '++\x00'}, {{@align=0x4, {0x5, 0x5, 0xe43, 0x692}}, 0x80, 0x0, '/dev/dri/card#\x00'}, {{@_ha_fsid={[0x1, 0x7fffffff]}, {0xfffb, 0x4, 0x8000, 0x1}}, 0x9, 0x0, '/dv/IsO\xd5\xef\xda\xd1rd#\x00'/24}, {{@align=0x5, {0xb45d, 0x3, 0x7, 0xc000000000000000}}, 0x2, 0x0, '/dev/dri/card#\x00'}, {{@align=0x5, {0x0, 0xc2, 0x4, 0xffffffffffff08d4}}, 0xfffffff4, 0x0, '/dev/dri/card#\x00'}, {{@align, {0x5, 0x2, 0x4967, 0xfffd}}, 0x4, 0x0, '/dev/dri/card#\x00'}, {{@align=0x666, {0x6, 0x8000, 0x3ff, 0x18c6}}, 0x7, 0x0, '/dev/dri/card#\x00'}, {{@align=0x1, {0x7, 0x103, 0xc, 0xfffffffd}}, 0x2, 0x0, '/dev/dri/card#\x00'}]}}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000440)={0x5, 0x1, 0x7}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) 20.011621276s ago: executing program 9 (id=1228): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_connect(0x1, 0x0, 0x0, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r2, 0x541b, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newsa={0x108, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0xfc, 0x0}, @in6=@rand_addr=' \x01\x00', 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@broadcast, 0x4d8, 0x6c}, @in=@local, {0x0, 0x192, 0x6, 0xffff, 0x8253c, 0x2, 0xfffffffffffffff8, 0x10000000000}, {0xffffffffffffffff, 0x0, 0x800, 0xffffffff}, {0x1, 0x8}, 0x70bd2a, 0x3502, 0x2, 0x1, 0x0, 0x20}, [@replay_thresh={0x8, 0xb, 0x3}, @sa_dir={0x5, 0x21, 0x1}, @iptfs_pkt_size={0x8, 0x29, 0x100}]}, 0x108}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r3 = syz_ublk_setup_io_uring(0x220, &(0x7f0000000340)={0x0, 0x0, 0x80, 0x3, 0xd0}, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r3, 0x18, &(0x7f0000000080)={0xf6, 0xffffffffffffffff, 0x2, {0xfff, 0x7}}, 0x1) syz_create_resource$binfmt(0x0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r4 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) read$FUSE(r4, 0x0, 0x0) unshare(0x2c020400) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x2, 0x3a0, 0x5}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f0000000080), &(0x7f0000000240), 0x401, r5}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000640)={r5, &(0x7f0000000080), &(0x7f0000000540)=""/240}, 0x20) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000070601080000000000000000000100000500010006"], 0x1c}, 0x1, 0x1000000000000}, 0x0) r6 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7dff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000bc0)={0x1, @sdr={0x41416770, 0x66c2}}) sendmsg$NFT_BATCH(r0, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x15c, 0x0, 0xa, 0x101, 0x0, 0x0, {0x3}, [@NFTA_TABLE_USERDATA={0x5, 0x6, '^'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0xfa, 0x6, "15cd161957ea0e75d2fc3635905bbb7f8c8690f450b814dc70182ffc2cf7460585d865614b684cf910d6c3e5e156f25faea17a6ebc909b7f7e26aef6259f354ad24b28b74aae3d1ca761fbe6a5158fd784bf35590426ee5ae07f04d622ed7c526c337706233305384dd91b42da3a722a56413b7047dc3a151b33e8eb823a5c274889cc7a1f1f93a0c345e75617faa23fe22c9fd9a653ba176bd11501012f17541916c823b364dd6276633f29297b0da1e4e02d9c526727024c5915009396084d7cdbeb9e8957ebe9b32de8e8f2cf9a6fe4d539fde67058c4471f7fc4fef1707c3f68d511fb45e3e499f6129c08d7ae408d3fdf767d02"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}, @NFT_MSG_DELOBJ={0x38, 0x14, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x1bc}, 0x1, 0x0, 0x0, 0x44815}, 0x800) 19.92002205s ago: executing program 3 (id=1229): r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x183242) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) 19.548635199s ago: executing program 3 (id=1230): syz_usb_connect(0x5, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000024917720042322023f77010203010902120001000010000904"], 0x0) syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) unshare(0x8060400) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001080)=@newtaction={0x64, 0x30, 0x800, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x3, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x6, 0x2, 0xfffffffc}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000801}, 0x44084) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) r3 = syz_socket_connect_nvme_tcp() r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r4, 0x40505331, &(0x7f0000000180)={{0x0, 0xfa}, {0xfd, 0x8}, 0xf5e0, 0x6, 0x4}) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000200)={0x0, 0x3, 0x2, 0x4}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r5, 0x8, &(0x7f0000000080)=0x7) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0xe00, 0x0) r7 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r7, 0x4c80, &(0x7f0000000600)={0x0, 0x0, "ac06f105d310541258e0a2a0b883eb29e46b4bfb57461914278705b6a55ba904cefb1f00536dfdc9ce9c12d1207f8a3ad1dad7ed0fc16b2ccd00000000000000080000000c0996d78e489e96651d35ca509de7cf52e7578e9ce37700000000000032936e283ae72a84cc5a72f07fef2fec1463729b336e892b5aadc70f51cb4582b7757f779254377a6a42493fb7023b15fb899a2072631f76cd0a59b17031b431163758724ac0df2d95b9c3fbccef0111f1fc6db466c73268e04c38df1f6bf2cc88aa6126229c332b887eb8e67102000631988ad55f281047000000000000000003000000000100", "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"}) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, 0x0) 16.361727802s ago: executing program 3 (id=1233): syz_emit_ethernet(0xb4f, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x0) socket$inet6(0xa, 0x80005, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=@deltclass={0x8c, 0x29, 0x10, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x10, 0x10}, {0x8, 0x10}, {0x2, 0x4}}, [@TCA_RATE={0x6, 0x5, {0xd, 0xe}}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_clsact={0xb}, @tclass_kind_options=@c_qfq={{0x8}, {0x2c, 0x2, [@TCA_QFQ_WEIGHT={0x8}, @TCA_QFQ_LMAX={0x8, 0x2, 0x5}, @TCA_QFQ_LMAX={0x8, 0x2, 0x170}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x9}, @TCA_QFQ_LMAX={0x8, 0x2, 0x3}]}}, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}]}, 0x8c}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x2010080, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x4703, &(0x7f000000c7c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) 14.178969329s ago: executing program 5 (id=1234): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x3c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1000}]}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x7}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xd0}}, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = socket$key(0xf, 0x3, 0x2) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x5c, r4, 0x300, 0xfffffffe, 0x100000, {{0x2}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x1b}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x2c, 0x3, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x23, 0x2, "86df3e6d8fb0ab0e7ab11387dc7cd9963e08000000000000006f361a9e80bd"}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x5c}}, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x3a) syz_mount_image$hfs(&(0x7f00000000c0), &(0x7f0000000200)='./file0\x00', 0x1214482, &(0x7f0000000ac0)={[{@uid}, {@codepage={'codepage', 0x3d, 'maccroatian'}}, {@iocharset={'iocharset', 0x3d, 'macromanian'}}, {@part={'part', 0x3d, 0x1}}, {}, {}, {@part={'part', 0x3d, 0x4}}]}, 0x1, 0x33e, &(0x7f0000000b40)="$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") r6 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES8, @ANYBLOB="79a9"], 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x1a0001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}}) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r8, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r7, 0x40505412, 0x0) r9 = syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) write$P9_RVERSION(r9, &(0x7f0000002200)=ANY=[], 0xfffffcd9) close_range(r6, 0xffffffffffffffff, 0x0) sendmsg$key(r3, &(0x7f0000000180)={0x7, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020100090a000000007fffffff0000000200100000e9000000e9000000000000030005000000000002000000ac1414000000000000000000030006000000000002"], 0x50}}, 0x0) sendmmsg(r3, &(0x7f0000000180), 0x40000000000007b, 0x4004) 13.125161685s ago: executing program 5 (id=1236): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0x7fffffffffffffff) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x8, &(0x7f0000000200)=0x40004) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000002340)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000101f2ffffff000000dc272f290fd57a560099c97fb75f43a74825acd74372bd044c31c281b923c5ed8ccb800f9c0383a8abc34181ce9a13bfac4afa20dcf3a4181e927e341a2b0120b4a38d46db0f6498c16a22efdffe52"], 0x14}, 0x1, 0x0, 0x0, 0x844}, 0x800) socket$tipc(0x1e, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r4, &(0x7f0000000240)=[{&(0x7f0000000b00)=""/227, 0xe3}], 0x1, 0x2, 0x6) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r4, 0xc040583f, &(0x7f0000000300)={{@align=0x2, {0x4005, 0x401, 0x1000006, 0x2}}, {{[0x6, 0xb9d4, 0x2734a493, 0x5]}, 0x0, 0x1, 0x8, 0x0, &(0x7f0000000480)=[{{@_ha_fsid={[0x0, 0x6]}, {0x4, 0x9, 0x3, 0x3ff}}, 0xd, 0x0, '.M[+\x00'}, {{@align=0xc, {0x4, 0x6, 0x80000001, 0x5}}, 0x8, 0x0, '/dev/dri/card#\x00'}, {{@align=0x2, {0x1ff, 0x8, 0xd625, 0xff}}, 0x44, 0x0, '++\x00'}, {{@align=0x4, {0x5, 0x5, 0xe43, 0x692}}, 0x80, 0x0, '/dev/dri/card#\x00'}, {{@_ha_fsid={[0x1, 0x7fffffff]}, {0xfffb, 0x4, 0x8000, 0x1}}, 0x9, 0x0, '/dv/IsO\xd5\xef\xda\xd1rd#\x00'/24}, {{@align=0x5, {0xb45d, 0x3, 0x7, 0xc000000000000000}}, 0x2, 0x0, '/dev/dri/card#\x00'}, {{@align=0x5, {0x0, 0xc2, 0x4, 0xffffffffffff08d4}}, 0xfffffff4, 0x0, '/dev/dri/card#\x00'}, {{@align, {0x5, 0x2, 0x4967, 0xfffd}}, 0x4, 0x0, '/dev/dri/card#\x00'}, {{@align=0x666, {0x6, 0x8000, 0x3ff, 0x18c6}}, 0x7, 0x0, '/dev/dri/card#\x00'}, {{@align=0x1, {0x7, 0x103, 0xc, 0xfffffffd}}, 0x2, 0x0, '/dev/dri/card#\x00'}]}}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000440)={0x5, 0x1, 0x7}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) 11.609174773s ago: executing program 9 (id=1238): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1c3040, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r1) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x104) open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) r2 = io_uring_setup(0x1, &(0x7f0000000000)={0x0, 0x0, 0x3800}) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r2, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x2, &(0x7f0000000200)={&(0x7f0000001000), 0x1000}, &(0x7f0000000300)={&(0x7f0000002000), 0x1000, 0x1}}, 0x1) io_uring_register$IORING_REGISTER_ZCRX_CTRL(r2, 0x24, &(0x7f0000000400)={0x0, 0x1}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 11.240434623s ago: executing program 9 (id=1239): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x48891}, 0x880) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$mtd(0x0, 0x48a99fbe, 0x10b641) ioctl$MTDFILEMODE(r1, 0x4d13, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="19000000040000000400000002000000100000003fcbfdcb45d032ffbd3cf0c4e1e543511795b549b1c1c375dc434a5d327e5597f3", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) syz_usb_connect(0x5, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120110010928fc10ac059102254301020301090212000100004000090484000003e102"], 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x101) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x8000) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000540)={r4, 0x20, &(0x7f0000000500)={&(0x7f00000002c0)=""/222, 0xde, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x13, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@cb_func={0x18, 0xb}, @map_val={0x18, 0x2, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r6 = socket$unix(0x1, 0x3, 0x0) faccessat2(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup\x00', 0x7, 0x1100) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x2002) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000001000)='dns_resolver\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f0000001080)='\x00', 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) request_key(&(0x7f00000010c0)='dns_resolver\x00', &(0x7f0000001100)={'syz', 0x2}, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x20000044) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) close(0x4) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000000)={[{@noauto_da_alloc}, {@errors_remount}, {@nodioread_nolock}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000100)="$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") 11.078732072s ago: executing program 5 (id=1240): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000004000000000000000000800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="20000000010301010000000000000000030000000c0002"], 0x20}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x8202, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x2, &(0x7f0000000400)=ANY=[@ANYBLOB="d3811000a100000095"], &(0x7f0000000040)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x68, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x829}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000001800ffff00000000000000000a000000fe00fd090000000004000880"], 0x20}}, 0x0) r3 = socket$inet6(0xa, 0x3, 0xff) landlock_restrict_self(0xffffffffffffffff, 0x0) sendmmsg$inet6(r3, &(0x7f0000004f00)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @private1}, 0x1c, 0x0}}], 0x1, 0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) mount_setattr(0xffffffffffffff9c, 0x0, 0x800, &(0x7f0000000180)={0x1, 0x70, 0x80000}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001d80), 0x4) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) mount$bpf(0x0, &(0x7f0000000240)='./cgroup/cgroup.procs\x00', &(0x7f00000002c0), 0x2004807, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="6c0000001d00000127bd7000ffdbdf2507000000", @ANYRES32=r4, @ANYBLOB="01002c00340094c439a92149cadcecd6a27e23f2ec9ff9a5e6239702000500010000000000050001000500000004000200050001000000000005000100030000000400020005000c000000000014000100000000"], 0x6c}, 0x1, 0x0, 0x0, 0x4009005}, 0x4000000) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x11, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x51, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffd}, 0x39) 10.398990018s ago: executing program 3 (id=1241): syz_usb_connect(0x3, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="120110031acf034023040a00d85f01020301090212"], 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "25fd25990fe381b9", "f511161d94f179ecf85eb61b6a4762eb", "1e59ddbe", "06ed010001809f9b"}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) close(0xffffffffffffffff) sendto$inet6(r0, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x2100e6d4, 0x4) 8.29549813s ago: executing program 6 (id=1243): syz_usb_connect(0x3, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="120110031acf034023040a00d85f01020301090212"], 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "25fd25990fe381b9", "f511161d94f179ecf85eb61b6a4762eb", "1e59ddbe", "06ed010001809f9b"}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) close(0xffffffffffffffff) sendto$inet6(r0, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x2100e6d4, 0x4) 7.910958932s ago: executing program 8 (id=1166): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000100)='./security\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = open$dir(&(0x7f00000002c0)='./sys\x00', 0x200880, 0x2) openat(r0, &(0x7f00000000c0)='./sys\x00', 0x2, 0x0) socket$inet6(0xa, 0x3, 0x8a) socket$inet6(0xa, 0x800000000000002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x2d, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)={0x1}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x2, 0x0, 0x0, 0xfa, 0x0, 0x8, 0x0, 0x0, 0x3, 0x4, 0x4}, {0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x9, 0x1, 0x0, 0x2}, {0xeda7, 0x4, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x20, 0xff}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x4, 0x1000000000080, 0xfffffffffffffff8, 0x0, 0x2, 0x2004cb, 0x4, 0x100000000000000, 0x0, 0x0, 0xfffffffffffff2eb, 0x2000000000002ff, 0x4, 0x0, 0x4c3], 0x0, 0x200306}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6.930400685s ago: executing program 9 (id=1244): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000001c0)={[{@test_dummy_encryption_v1}, {@nodioread_nolock}]}, 0x3, 0x44b, &(0x7f00000004c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000140)='2', 0x1, 0x8080c61) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) socketpair(0x18, 0x5, 0x3e, &(0x7f0000000100)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 6.168121078s ago: executing program 6 (id=1245): socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x2040400) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x100}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x1c, 0x45, 0x1, 0x80002, 0x25dfdbfd, {0x5}, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x7fff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40288c1}, 0x4008094) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) 5.781147155s ago: executing program 8 (id=1246): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup, 0x11, 0x0, 0x0, &(0x7f0000000040)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0], 0x0}, 0x40) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000002c0)={0x0, 0x3000, 0x10}, 0xc) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={@map=r2, r0, 0xd, 0x3c, 0x0, @void, @void, @void, @value, r1}, 0x20) 5.501892779s ago: executing program 6 (id=1247): syz_ublk_setup_io_uring(0x2be5, &(0x7f0000000200)={0x0, 0x2a2c, 0x1, 0x3, 0x343}, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x7, 0x2080) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='freezer.state\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00000014000800000000000000007f"}}) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfb, 0x200000}, 0xc) connect$unix(r1, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)=ANY=[@ANYBLOB="00010000", @ANYRES16=r3, @ANYBLOB="01000000000000000000010000000c00048005000300020000000800020001000000080001000000000004000880cc00088034"], 0x100}}, 0x0) 5.152830324s ago: executing program 8 (id=1248): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000001c0)={[{@test_dummy_encryption_v1}, {@nodioread_nolock}]}, 0x3, 0x44b, &(0x7f00000004c0)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000140)='2', 0x1, 0x8080c61) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) socketpair(0x18, 0x5, 0x3e, &(0x7f0000000100)) 4.919013799s ago: executing program 5 (id=1249): syz_open_dev$sndctrl(&(0x7f0000000080), 0x200, 0x10002) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x8000) r1 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x14b000) r2 = syz_open_dev$sndpcmp(&(0x7f0000000440), 0x0, 0x40601) syz_usb_connect$uac1(0x4, 0xdc, &(0x7f0000000100)=ANY=[@ANYRESHEX=r2, @ANYRES8=r1, @ANYRESHEX=r2], 0x0) 4.83329825s ago: executing program 6 (id=1250): setuid(0xee01) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) 4.059399518s ago: executing program 6 (id=1251): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000004740)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@sndinfo={0x20, 0x84, 0x2, {0x2, 0x200, 0x5, 0x7fffffff}}, @sndrcv={0x30, 0x84, 0x1, {0x8001, 0x7, 0x8006, 0x8, 0x4, 0x3, 0x66985b6c, 0x2}}], 0x50}], 0x1, 0x4020) syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100)={[{@umask={'umask', 0x3d, 0x6}}, {@force}, {@nls={'nls', 0x3d, 'iso8859-13'}}]}, 0x1, 0x5c8, &(0x7f0000000cc0)="$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") syz_mount_image$hfs(&(0x7f0000000080), &(0x7f0000000000)='./file1\x00', 0x1210080, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x7, 0x318, &(0x7f00000004c0)="$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") r1 = syz_usb_connect$uac3(0x3, 0x97, &(0x7f0000000700)=ANY=[@ANYBLOB="12010003000000103d100001400001020301090285000301d8100c080b0102010130020904000000010130000a2401100a00070000000904010000010230000904010101010230000905010920000e00030a2525ffffff7f0c8001090402000001023000090402010101023000172401060080000007000200000000000000064a0900100905820920"], &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f00000012c0)=@lang_id={0x4, 0x3, 0x280a}}, {0x43, &(0x7f0000001300)=@string={0xf, 0x3, "13968285ced1798ce95716323f"}}]}) syz_usb_control_io$uac3(r1, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) r2 = io_uring_setup(0x20a7, &(0x7f00000001c0)={0x0, 0xbb2d, 0x8401, 0x3, 0x1f4}) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x80, 0x0, 0x1, 0x0, 0x0) r3 = fanotify_init(0x4, 0x2) fanotify_mark(r3, 0x645, 0x8000020, 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00') rmdir(&(0x7f0000000040)='./file0\x00') io_uring_enter(r2, 0x5656, 0x4cbb, 0x40, &(0x7f0000000280)={[0x7fff]}, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt', 0x0, 0x0) 2.672299315s ago: executing program 3 (id=1252): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000004740)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@sndinfo={0x20, 0x84, 0x2, {0x2, 0x200, 0x5, 0x7fffffff}}, @sndrcv={0x30, 0x84, 0x1, {0x8001, 0x7, 0x8006, 0x8, 0x4, 0x3, 0x66985b6c, 0x2}}], 0x50}], 0x1, 0x4020) syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100)={[{@umask={'umask', 0x3d, 0x6}}, {@force}, {@nls={'nls', 0x3d, 'iso8859-13'}}]}, 0x1, 0x5c8, &(0x7f0000000cc0)="$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") syz_mount_image$hfs(&(0x7f0000000080), &(0x7f0000000000)='./file1\x00', 0x1210080, &(0x7f0000000800)=ANY=[@ANYBLOB="747970653d54a10fb22c71756965742c696f636861727365743d63703836342c706172743d3078303030303030303030303030303030382c6469725f556d61736b3d303030303030303030303030303030352c6469725f756d61736b3d30303030303030303030303030303030303030303030302c73657373696f6e3d3078303030303030303030303030303030312c6469725f756d61736b3d30303030303030303030303030303030303030313030302c71756965742c756d61736b3d30303030303030303030303030303030303030303030322c00675bbd687b2b0baebf4dee3554bf9a7a4bd30a84607443939611466784437d28b48f9156d24910dec919af3ffb0a725ee567920d0601a67ff73af3b93780f2f83989da4cb4e67bed8e978ec4ee9ad9ff07000041550acd3be2291cdff550795d164e7f5e1fcb136a06e99152b8c2c21b7c7dd2d61200000000000000"], 0x7, 0x318, &(0x7f00000004c0)="$eJzs3U1rE08cB/Dv7CZp8m/pf20rBY/VgqfS1oPixSLFi2/AgxRrm0LpWkEraEGMnkW8CYJHb55F34JexDegpx7Ek16CB1dmZmcf0tnNQ9tsQr4faJrszsNvdnayMynpgohG1tXVb28vHMgfUQbgArgMOACqQAnAacxWH+zube/59c28glyVQ/4I6JziUJqN3botq8yncoQ8+aqEieQ2OhlBEATf26b61ZdYqDhCj/1DHGAsHJ1qf7XvkZ2Mhm7XaEn0sGiiiYeYLDIcIiIqXnj9d8KrxEQ4f3ccYD6chw/79T81v2kWF8dAiK7/jn4dCHl8/le74vWeWsLJ3nfMKtFWlvWcCOLDXYE+s1IdINqtKlUsTm1r268vNFQBz3AllEg2ox43YRqiZEVb0b/mLGvTHHltzzeu2lCWbVjOiH+66xo//sAre3VrnzuISXwSX8Sa8PAam9H8rxQIeXDU8fFaekrHv5hdomqlp1OlWhmv30+pSs6YHvjwLm5lLeu4VuHKWGxkKaJ1/u6ZOF9WsnNhCumPFXTrlrJbp3JNW3MtR6//WHPNtOaqbZX9+sLGXT/3o5RjY13RiRfihpjDT7zHamL+78jU88gemalRLlTK8MzIbU9JpczoxxQ1gO90NTJJuWbt6HzPcRuXMHn/0f7Ouu/X7xX/xAyVAYlHn4jh6Si3yN+JNKjKJ2UAx1bp3yAIrLtK6EeTy6qpF9/ETd7fWRcN/fJoVaARFWh2rWQnBrACINxi3hF6qf1JlGssLrCj7L9lb6st9hPSRNWHE9JUldrlYqyjkVLrodLrj3fW/Z7eiWjIxJ2O2ZtFB0NFkPMuodd/ifXKonrXkQ9ezmokaFd4osSljBXQlHr8r7MVXFRs5jxx3Dxps+Y6ex4411KjA1Pj09ZivTBODOJfJbv/U4ZYxVfc4uf/RERERERERERERERERERERERERETDpttvI/TydYJ0jQcj+I83iIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiOJnH/X8BVd4ypFH7/X7eD+/+a+1IQUc/+BQAA//8KX2Ch") r1 = syz_usb_connect$uac3(0x3, 0x97, &(0x7f0000000700)=ANY=[@ANYBLOB="12010003000000103d100001400001020301090285000301d8100c080b0102010130020904000000010130000a2401100a00070000000904010000010230000904010101010230000905010920000e00030a2525ffffff7f0c8001090402000001023000090402010101023000172401060080000007000200000000000000064a0900100905820920"], &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f00000012c0)=@lang_id={0x4, 0x3, 0x280a}}, {0x43, &(0x7f0000001300)=@string={0xf, 0x3, "13968285ced1798ce95716323f"}}]}) syz_usb_control_io$uac3(r1, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) io_uring_setup(0x20a7, &(0x7f00000001c0)={0x0, 0xbb2d, 0x8401, 0x3, 0x1f4}) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x80, 0x0, 0x1, 0x0, 0x0) r2 = fanotify_init(0x4, 0x2) fanotify_mark(r2, 0x645, 0x8000020, 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00') rmdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt', 0x0, 0x0) 2.210485388s ago: executing program 8 (id=1253): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r0}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x3, &(0x7f00000003c0)=@framed, &(0x7f0000000000)='GPL\x00', 0xc, 0x1009, &(0x7f0000002500)=""/4105, 0x0, 0x68}, 0x94) (fail_nth: 3) 1.008821553s ago: executing program 6 (id=1254): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x14, &(0x7f0000000a00)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000}}, @printk={@s, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000800)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x40, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) bind$xdp(r3, &(0x7f0000000240)={0x2c, 0xb, r4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0x50, 0x71, 0x10, 0x16}}, &(0x7f0000000480)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0xc}, 0x94) 389.331164ms ago: executing program 8 (id=1255): r0 = open(&(0x7f0000000140)='./bus\x00', 0x14d27e, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000004f80)=[{{&(0x7f0000000280)=@nfc, 0x80, &(0x7f00000004c0)=[{&(0x7f0000001440)=""/4096, 0x1000}, {&(0x7f0000002440)=""/14, 0xe}, {&(0x7f0000002480)=""/92, 0x5c}, {&(0x7f0000002500)=""/93, 0x5d}, {&(0x7f0000000300)=""/185, 0xb9}, {&(0x7f00000003c0)=""/203, 0xcb}], 0x6}, 0x80}, {{0x0, 0x0, 0x0}, 0x8000}], 0x2, 0x10122, 0x0) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="20000000100001070000000000000000030000000c0002"], 0x20}}, 0x4000084) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) write(r0, &(0x7f0000000440)="96", 0x1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x4, 0x2, 0x0, 0xd, 0x1, 0x4, 0x0, 0x0, 0x5, 0x40}, 0xe) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000040)={r3, 0x3, 0x7}, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x84) write$FUSE_NOTIFY_STORE(r4, &(0x7f0000000240)=ANY=[], 0x2b) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./rpc_pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./rpc_pipefs\x00', &(0x7f0000000080)='rpc_pipefs\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./rpc_pipefs/gssd/clntXX/gssd\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) quotactl$Q_QUOTAOFF(0xffffffff80000301, &(0x7f00000000c0)=@filename='./rpc_pipefs\x00', r5, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./rpc_pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) creat(&(0x7f00000001c0)='./rpc_pipefs/gssd/clntXX/gssd\x00', 0x182) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) 389.029647ms ago: executing program 5 (id=1256): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000100)={0x2, 0x400000b4, 0x0, 0x0}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000003c0)={0x1, 0x0, [{0x40000108, 0x0, 0x40}]}) 282.333175ms ago: executing program 9 (id=1257): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) 0s ago: executing program 5 (id=1258): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x6, 0x8a}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) capset(0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x20004004) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, 0x0) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r2, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) sendmsg$inet(r3, 0x0, 0x40) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000808, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000040)) kernel console output (not intermixed with test programs): device loop0): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 11 [ 557.001500][ T5615] EXT4-fs error (device loop0): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 11 [ 557.316244][T10917] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 557.316400][T10917] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 557.316420][T10917] EXT4-fs (loop1): This should not happen!! Data will be lost [ 557.316420][T10917] [ 557.316431][T10917] EXT4-fs (loop1): Total free blocks count 0 [ 557.316442][T10917] EXT4-fs (loop1): Free/Dirty block details [ 557.316453][T10917] EXT4-fs (loop1): free_blocks=2415919104 [ 557.316465][T10917] EXT4-fs (loop1): dirty_blocks=8208 [ 557.316475][T10917] EXT4-fs (loop1): Block reservation details [ 557.316484][T10917] EXT4-fs (loop1): i_reserved_data_blocks=513 [ 557.903799][T10930] loop2: detected capacity change from 0 to 32768 [ 557.929328][T10930] (syz.2.1007,10930,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 557.952104][T10930] (syz.2.1007,10930,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 557.986176][T10930] JBD2: Ignoring recovery information on journal [ 558.043666][T10930] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 561.708402][T10459] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 561.980811][ T9374] ocfs2: Unmounting device (7,2) on (node local) [ 562.061809][ T9107] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 562.229039][ T729] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 562.244559][ T729] EXT4-fs (loop1): This should not happen!! Data will be lost [ 562.244559][ T729] [ 562.255724][ T729] EXT4-fs (loop1): Total free blocks count 0 [ 562.264091][ T729] EXT4-fs (loop1): Free/Dirty block details [ 562.270345][ T729] EXT4-fs (loop1): free_blocks=2415919104 [ 562.277046][ T729] EXT4-fs (loop1): dirty_blocks=6160 [ 562.282662][ T729] EXT4-fs (loop1): Block reservation details [ 562.289363][ T729] EXT4-fs (loop1): i_reserved_data_blocks=385 [ 562.502700][ T729] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 4100 with max blocks 2048 with error 28 [ 562.519316][ T729] EXT4-fs (loop1): This should not happen!! Data will be lost [ 562.519316][ T729] [ 562.676598][ T5623] EXT4-fs warning (device loop1): ext4_evict_inode:196: inode #18: comm syz-executor: data will be lost [ 562.691456][ T5717] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 562.751835][T10952] loop2: detected capacity change from 0 to 1024 [ 562.891211][T10460] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 562.917378][T10460] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 562.930344][T10460] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 562.941942][T10460] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 562.950057][T10460] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 563.066292][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.072841][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.095745][ T5708] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 563.671206][ T5708] usb 3-1: Using ep0 maxpacket: 16 [ 563.690383][ T5708] usb 3-1: unable to get BOS descriptor or descriptor too short [ 563.690465][ T5708] usb 3-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 563.773044][ T5708] usb 3-1: config 1 has an invalid descriptor of length 68, skipping remainder of the config [ 563.773113][ T5708] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 68, changing to 7 [ 563.773132][ T5708] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 17440, setting to 1024 [ 563.826602][ T5708] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.826636][ T5708] usb 3-1: Product: syz [ 563.826707][ T5708] usb 3-1: Manufacturer: 阓薂퇎豹埩㈖ [ 563.826720][ T5708] usb 3-1: SerialNumber: syz [ 564.127025][ T5708] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 564.127651][ T5708] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 564.245567][ T5280] 8021q: adding VLAN 0 to HW filter on device eth1 [ 564.589129][T10968] loop1: detected capacity change from 0 to 512 [ 564.621994][T10968] EXT4-fs (loop1): Test dummy encryption mode enabled [ 564.622023][T10968] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 564.679953][T10968] EXT4-fs (loop1): 1 truncate cleaned up [ 564.700305][T10968] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 565.053514][ T5708] usb 3-1: USB disconnect, device number 9 [ 565.060330][T10460] Bluetooth: hci1: command tx timeout [ 565.064189][ T5837] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 565.941078][ T5717] usb 4-1: unable to get BOS descriptor or descriptor too short [ 565.941158][ T5717] usb 4-1: New USB device found, idVendor=0423, idProduct=000a, bcdDevice=5f.d8 [ 565.962872][ T5717] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 565.962910][ T5717] usb 4-1: can't read configurations, error -71 [ 566.163678][ T5622] udevd[5622]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 566.326216][T10983] loop3: detected capacity change from 0 to 64 [ 566.637991][T10988] loop2: detected capacity change from 0 to 2048 [ 566.668396][T10988] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=2362, location=2362 [ 566.724584][T10988] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 566.742071][T10988] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 566.773965][T10988] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 566.999885][ T30] kauditd_printk_skb: 295 callbacks suppressed [ 566.999918][ T30] audit: type=1800 audit(1787292134.000:532): pid=10988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1017" name=2E02 dev="loop2" ino=1367 res=0 errno=0 [ 567.140842][T10460] Bluetooth: hci1: command tx timeout [ 567.647366][T10998] loop2: detected capacity change from 0 to 128 [ 567.801302][ T5837] usb 10-1: unable to get BOS descriptor or descriptor too short [ 567.801353][ T5837] usb 10-1: New USB device found, idVendor=0423, idProduct=000a, bcdDevice=5f.d8 [ 567.823327][ T5837] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 567.823367][ T5837] usb 10-1: can't read configurations, error -71 [ 568.614178][T11012] loop3: detected capacity change from 0 to 512 [ 568.626294][T11012] EXT4-fs (loop3): Test dummy encryption mode enabled [ 568.635150][T11012] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 568.689251][T11012] EXT4-fs (loop3): 1 truncate cleaned up [ 568.705941][T11012] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 568.757964][ T5280] 8021q: adding VLAN 0 to HW filter on device eth2 [ 569.051020][T11022] overlayfs: missing 'lowerdir' [ 569.153439][T10955] bridge0: port 1(bridge_slave_0) entered blocking state [ 569.153527][T10955] bridge0: port 1(bridge_slave_0) entered disabled state [ 569.153657][T10955] bridge_slave_0: entered allmulticast mode [ 569.184170][T10955] bridge_slave_0: entered promiscuous mode [ 569.198301][T10955] bridge0: port 2(bridge_slave_1) entered blocking state [ 569.199935][T10955] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.200065][T10955] bridge_slave_1: entered allmulticast mode [ 569.223159][T10460] Bluetooth: hci1: command tx timeout [ 569.239368][T10955] bridge_slave_1: entered promiscuous mode [ 569.407548][T10955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 569.439236][T10955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 569.467013][ T5623] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 569.557175][T11027] loop2: detected capacity change from 0 to 512 [ 569.586793][T11027] EXT4-fs (loop2): Test dummy encryption mode enabled [ 569.586828][T11027] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 569.622583][T11027] EXT4-fs (loop2): 1 truncate cleaned up [ 569.653983][T11027] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 569.732626][T10955] team0: Port device team_slave_0 added [ 569.753258][T10955] team0: Port device team_slave_1 added [ 569.970708][T10955] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 569.970736][T10955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 569.970763][T10955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 570.029421][T10955] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 570.029454][T10955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 570.029494][T10955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 571.300269][T10460] Bluetooth: hci1: command tx timeout [ 571.363781][T10955] hsr_slave_0: entered promiscuous mode [ 571.364494][T10955] hsr_slave_1: entered promiscuous mode [ 571.384221][T10955] debugfs: 'hsr0' already exists in 'hsr' [ 571.390662][T10955] Cannot create hsr debugfs directory [ 572.434840][T10459] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 572.912554][T11055] vivid-000: ================= START STATUS ================= [ 572.912610][T11055] vivid-000: Enable Output Cropping: true [ 572.921043][T11055] vivid-000: Enable Output Composing: true [ 572.921059][T11055] vivid-000: Enable Output Scaler: true [ 572.921072][T11055] vivid-000: Tx RGB Quantization Range: Automatic [ 572.921084][T11055] vivid-000: Transmit Mode: HDMI [ 572.921095][T11055] vivid-000: Hotplug Present: 0x00000000 [ 572.921108][T11055] vivid-000: RxSense Present: 0x00000000 [ 572.921119][T11055] vivid-000: EDID Present: 0x00000000 [ 572.935734][T11055] vivid-000: ================== END STATUS ================== [ 573.381294][ T9374] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 573.521840][T11057] loop9: detected capacity change from 0 to 4096 [ 573.522863][T11057] ntfs3: Unknown parameter '18446744073709551615rZpH9Ǿ"-6"qzc'IxHe-' [ 573.580657][ T5280] 8021q: adding VLAN 0 to HW filter on device eth3 [ 573.715915][ T5717] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 573.880608][ T5717] usb 2-1: Using ep0 maxpacket: 8 [ 573.886990][ T5717] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 573.903980][ T5717] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 573.904115][ T5717] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 573.904141][ T5717] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 573.904159][ T5717] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 573.904176][ T5717] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 573.904206][ T5717] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.104780][T11067] loop3: detected capacity change from 0 to 512 [ 574.130627][T11067] EXT4-fs (loop3): Test dummy encryption mode enabled [ 574.130657][T11067] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 574.239178][T11067] EXT4-fs (loop3): 1 truncate cleaned up [ 574.240442][T11067] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 575.069984][T11082] loop2: detected capacity change from 0 to 256 [ 575.368125][T11089] overlayfs: missing 'lowerdir' [ 575.888395][T11100] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 575.951826][T11100] kvm: pic: non byte read [ 575.978011][T11100] kvm: pic: level sensitive irq not supported [ 576.013999][T11100] kvm: pic: non byte read [ 576.627411][T11108] loop9: detected capacity change from 0 to 4096 [ 576.814898][ T5280] 8021q: adding VLAN 0 to HW filter on device eth4 [ 576.995333][T10459] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 578.833499][ T5717] usb 2-1: USB disconnect, device number 25 [ 578.934422][T11122] loop3: detected capacity change from 0 to 2048 [ 579.033672][T10955] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 579.071231][T10955] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 579.080838][T10955] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 579.138754][T11126] loop1: detected capacity change from 0 to 64 [ 579.261668][T11126] MINIX-fs: bad superblock or unable to read bitmaps [ 579.318712][T11126] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1041'. [ 579.592250][T10955] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 579.608118][T10955] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 579.637600][T10955] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 579.651383][T10955] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 579.689818][T10955] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 579.961832][T11151] overlayfs: missing 'lowerdir' [ 580.228573][T11155] loop3: detected capacity change from 0 to 2048 [ 580.229253][T11155] EXT4-fs: Ignoring removed nobh option [ 580.229302][T11155] EXT4-fs: Ignoring removed i_version option [ 580.229315][T11155] EXT4-fs: Ignoring removed nobh option [ 580.296839][T11155] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 580.315518][T11155] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:168: inode #12: comm syz.3.1046: inline data xattr refers to an external xattr inode [ 580.652159][T10955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 580.706745][T11161] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 580.777395][T10955] 8021q: adding VLAN 0 to HW filter on device team0 [ 580.798737][T10459] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 580.847336][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 580.847419][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 580.908525][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 580.908607][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 580.926407][ T5837] usb 2-1: new low-speed USB device number 26 using dummy_hcd [ 581.061150][ T5837] usb 2-1: device descriptor read/64, error -71 [ 581.315074][ T5837] usb 2-1: new low-speed USB device number 27 using dummy_hcd [ 581.450502][ T5837] usb 2-1: device descriptor read/64, error -71 [ 581.460340][ T5717] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 581.561026][ T5837] usb usb2-port1: attempt power cycle [ 582.191596][ T5837] usb 2-1: new low-speed USB device number 28 using dummy_hcd [ 582.224994][ T5837] usb 2-1: device descriptor read/8, error -71 [ 582.460384][ T5837] usb 2-1: new low-speed USB device number 29 using dummy_hcd [ 582.503898][ T5837] usb 2-1: device descriptor read/8, error -71 [ 582.612520][ T5837] usb usb2-port1: unable to enumerate USB device [ 583.479197][T11210] loop2: detected capacity change from 0 to 256 [ 583.491754][T11210] exfat: Unknown parameter ' ' [ 583.686452][T11213] overlayfs: missing 'lowerdir' [ 584.273073][ T5717] usb 10-1: unable to get BOS descriptor or descriptor too short [ 584.273146][ T5717] usb 10-1: New USB device found, idVendor=0423, idProduct=000a, bcdDevice=5f.d8 [ 584.305471][ T5717] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 584.305513][ T5717] usb 10-1: can't read configurations, error -71 [ 584.345904][T10955] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 584.421946][ T10] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 584.479929][T11227] net_ratelimit: 1990 callbacks suppressed [ 584.479966][T11227] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 585.083526][ T5717] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 585.531031][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 585.531082][ T10] usb 2-1: New USB device found, idVendor=0423, idProduct=000a, bcdDevice=5f.d8 [ 585.760028][ T10] usb 2-1: config index 0 descriptor too short (expected 2066, got 18) [ 585.760063][ T10] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 585.760085][ T10] usb 2-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 585.850295][ T5717] usb 10-1: device descriptor read/64, error -71 [ 585.961094][ T5717] usb usb10-port1: attempt power cycle [ 586.007284][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.007323][ T10] usb 2-1: Product: syz [ 586.007342][ T10] usb 2-1: Manufacturer: syz [ 586.007354][ T10] usb 2-1: SerialNumber: syz [ 586.287318][ T6566] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 586.287359][ T6566] EXT4-fs (loop0): This should not happen!! Data will be lost [ 586.287359][ T6566] [ 586.287380][ T6566] EXT4-fs (loop0): Total free blocks count 0 [ 586.287392][ T6566] EXT4-fs (loop0): Free/Dirty block details [ 586.287410][ T6566] EXT4-fs (loop0): free_blocks=2415919104 [ 586.287425][ T6566] EXT4-fs (loop0): dirty_blocks=8208 [ 586.287490][ T6566] EXT4-fs (loop0): Block reservation details [ 586.287501][ T6566] EXT4-fs (loop0): i_reserved_data_blocks=513 [ 586.520551][ T5717] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 586.554995][ T5717] usb 10-1: device descriptor read/8, error -71 [ 587.232859][ T5717] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 587.264256][ T5717] usb 10-1: device descriptor read/8, error -71 [ 587.371058][ T5717] usb usb10-port1: unable to enumerate USB device [ 588.385158][ T10] usb 2-1: USB disconnect, device number 30 [ 588.550980][T10955] veth0_vlan: entered promiscuous mode [ 588.603766][T10955] veth1_vlan: entered promiscuous mode [ 588.789298][T10955] veth0_macvtap: entered promiscuous mode [ 588.844018][T10955] veth1_macvtap: entered promiscuous mode [ 588.945875][T10955] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 588.987718][T10955] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 589.541356][ T10] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 590.566404][T11271] loop2: detected capacity change from 0 to 512 [ 590.626472][ T5861] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.641971][ T5861] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.662729][ T6564] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.675358][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.895470][T10460] Bluetooth: hci4: command 0x0406 tx timeout [ 591.546026][T11264] loop9: detected capacity change from 0 to 512 [ 591.569292][T11264] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 591.623791][T11264] EXT4-fs warning (device loop9): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 591.642584][T11264] EXT4-fs error (device loop9): ext4_validate_block_bitmap:445: comm syz.9.1067: bg 0: block 248: padding at end of block bitmap is not set [ 591.642660][T11264] loop9: lost filesystem error report for type 5 error -117 [ 591.657312][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 591.657340][ C0] EXT4-fs (loop9): last error at time 1787292158: ext4_validate_block_bitmap:445 [ 591.699364][T11264] Quota error (device loop9): write_blk: dquota write failed [ 591.699440][T11264] Quota error (device loop9): qtree_write_dquot: Error -28 occurred while creating quota [ 591.699550][T11264] EXT4-fs error (device loop9): ext4_acquire_dquot:7069: comm syz.9.1067: Failed to acquire dquot type 1 [ 591.699568][T11264] loop9: lost filesystem error report for type 5 error -28 [ 591.800101][T11264] EXT4-fs (loop9): 1 truncate cleaned up [ 591.801894][T11264] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 592.026128][T10817] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 592.026187][T10817] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 592.249732][ T9107] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 592.285321][ T5861] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 592.285350][ T5861] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 592.408753][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 592.408803][ T10] usb 2-1: New USB device found, idVendor=0423, idProduct=000a, bcdDevice=5f.d8 [ 592.436455][ T10] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 592.436501][ T10] usb 2-1: can't read configurations, error -71 [ 592.547080][ T42] Quota error (device loop9): do_check_range: Getting block 0 out of range 1-5 [ 592.624576][ T42] EXT4-fs error (device loop9): ext4_release_dquot:7105: comm kworker/u8:2: Failed to release dquot type 1 [ 592.670291][ T42] loop9: lost filesystem error report for type 5 error -117 [ 592.705638][T11285] loop1: detected capacity change from 0 to 512 [ 592.758803][T11285] EXT4-fs (loop1): Test dummy encryption mode enabled [ 592.758887][T11285] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 592.805153][T11285] EXT4-fs (loop1): 1 truncate cleaned up [ 592.806332][T11285] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 593.250632][T11292] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 593.266477][T11292] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 593.711312][ T5717] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 593.865094][ T5717] usb 3-1: unable to get BOS descriptor or descriptor too short [ 593.865141][ T5717] usb 3-1: New USB device found, idVendor=0423, idProduct=000a, bcdDevice=5f.d8 [ 593.893407][ T5717] usb 3-1: config index 0 descriptor too short (expected 2066, got 18) [ 593.893442][ T5717] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 593.893470][ T5717] usb 3-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 593.934763][ T5717] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.934795][ T5717] usb 3-1: Product: syz [ 593.934814][ T5717] usb 3-1: Manufacturer: syz [ 593.934825][ T5717] usb 3-1: SerialNumber: syz [ 594.225080][T11319] netlink: 'syz.3.1078': attribute type 46 has an invalid length. [ 594.287020][ T5623] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 595.220635][T11329] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 596.612883][T11329] loop1: detected capacity change from 0 to 32768 [ 596.854753][ T5717] usb 3-1: USB disconnect, device number 10 [ 596.863766][T11329] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 596.919657][T11329] XFS (loop1): Ending clean mount [ 596.946825][T11329] XFS (loop1): Quotacheck needed: Please wait. [ 599.128003][T11329] XFS (loop1): Quotacheck: Done. [ 599.186913][ T5623] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 600.857802][T11374] loop9: detected capacity change from 0 to 512 [ 600.877129][T11374] EXT4-fs (loop9): Test dummy encryption mode enabled [ 600.884416][T11374] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 600.934657][T11374] EXT4-fs (loop9): 1 truncate cleaned up [ 600.942421][T11374] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 601.780499][ T5717] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 602.902466][ T9107] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 604.136329][T11417] loop5: detected capacity change from 0 to 2048 [ 604.233323][T11417] Alternate GPT is invalid, using primary GPT. [ 604.242623][T11417] loop5: p2 p3 p7 [ 604.691527][ T5717] usb 2-1: unable to get BOS descriptor or descriptor too short [ 604.691581][ T5717] usb 2-1: New USB device found, idVendor=0423, idProduct=000a, bcdDevice=5f.d8 [ 604.714948][ T5717] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 604.714987][ T5717] usb 2-1: can't read configurations, error -71 [ 605.057502][T11429] FAULT_INJECTION: forcing a failure. [ 605.057502][T11429] name failslab, interval 1, probability 1, space 0, times 0 [ 605.057544][T11429] CPU: 0 UID: 0 PID: 11429 Comm: syz.2.1103 Tainted: G L syzkaller #0 PREEMPT(full) [ 605.057563][T11429] Tainted: [L]=SOFTLOCKUP [ 605.057568][T11429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 605.057576][T11429] Call Trace: [ 605.057581][T11429] [ 605.057587][T11429] dump_stack_lvl+0xe8/0x150 [ 605.057615][T11429] should_fail_ex+0x410/0x560 [ 605.057641][T11429] should_failslab+0xa8/0x100 [ 605.057661][T11429] __kmalloc_cache_noprof+0xa3/0x600 [ 605.057677][T11429] ? tipc_conn_alloc+0x57/0x4a0 [ 605.057781][T11429] ? tipc_conn_alloc+0x57/0x4a0 [ 605.057803][T11429] tipc_conn_alloc+0x57/0x4a0 [ 605.057824][T11429] tipc_topsrv_kern_subscr+0xf8/0x250 [ 605.057843][T11429] ? tipc_own_addr+0x45/0x2a0 [ 605.057862][T11429] ? __pfx_tipc_topsrv_kern_subscr+0x10/0x10 [ 605.057883][T11429] ? tipc_own_addr+0x45/0x2a0 [ 605.057903][T11429] ? __asan_memset+0x22/0x50 [ 605.057923][T11429] tipc_group_create+0x35b/0x4f0 [ 605.057947][T11429] tipc_sk_join+0x25d/0x6a0 [ 605.057968][T11429] ? __pfx_tipc_sk_join+0x10/0x10 [ 605.057988][T11429] ? tipc_setsockopt+0x731/0x9a0 [ 605.058006][T11429] ? __local_bh_enable_ip+0xd6/0x140 [ 605.058028][T11429] tipc_setsockopt+0x73e/0x9a0 [ 605.058051][T11429] ? __pfx_tipc_setsockopt+0x10/0x10 [ 605.058067][T11429] ? aa_sock_opt_perm+0x142/0x1e0 [ 605.058085][T11429] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 605.058112][T11429] ? __pfx_tipc_setsockopt+0x10/0x10 [ 605.058128][T11429] do_sock_setsockopt+0x17c/0x1b0 [ 605.058147][T11429] __x64_sys_setsockopt+0x13d/0x1b0 [ 605.058163][T11429] do_syscall_64+0x166/0x520 [ 605.058190][T11429] ? trace_irq_disable+0x3b/0x140 [ 605.058203][T11429] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.058218][T11429] ? clear_bhb_loop+0x70/0xc0 [ 605.058233][T11429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.058246][T11429] RIP: 0033:0x7fe72879e0d9 [ 605.058259][T11429] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 605.058269][T11429] RSP: 002b:00007fe7295b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 605.058285][T11429] RAX: ffffffffffffffda RBX: 00007fe728a25fa0 RCX: 00007fe72879e0d9 [ 605.058295][T11429] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000006 [ 605.058303][T11429] RBP: 00007fe7295b5090 R08: 0000000000000010 R09: 0000000000000000 [ 605.058311][T11429] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 605.058319][T11429] R13: 00007fe728a26038 R14: 00007fe728a25fa0 R15: 00007ffd4b240608 [ 605.058339][T11429] [ 605.458137][T11427] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 605.538134][ T4985] Alternate GPT is invalid, using primary GPT. [ 605.538264][ T4985] loop5: p2 p3 p7 [ 605.568491][T11437] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 605.568540][T11437] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 605.604487][T11427] kvm: pic: non byte read [ 605.610669][T11427] kvm: pic: level sensitive irq not supported [ 605.613168][T11427] kvm: pic: non byte read [ 606.185091][T11452] loop3: detected capacity change from 0 to 512 [ 606.200827][T11452] EXT4-fs (loop3): Test dummy encryption mode enabled [ 606.201195][T11452] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 606.242090][T11452] EXT4-fs (loop3): 1 truncate cleaned up [ 606.253624][T11452] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 607.394420][ T2247] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 607.439606][ T5622] udevd[5622]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 607.463814][ T5856] udevd[5856]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 607.481224][ T6605] udevd[6605]: inotify_add_watch(7, /dev/loop5p7, 10) failed: No such file or directory [ 608.441354][T11467] loop1: detected capacity change from 0 to 2048 [ 608.442282][T11467] EXT4-fs: Ignoring removed nobh option [ 608.442378][T11467] EXT4-fs: Ignoring removed i_version option [ 608.442392][T11467] EXT4-fs: Ignoring removed nobh option [ 608.492642][T11467] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 608.557285][T11467] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:168: inode #12: comm syz.1.1109: inline data xattr refers to an external xattr inode [ 608.998530][T11467] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 608.998712][T11467] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 608.998733][T11467] EXT4-fs (loop1): This should not happen!! Data will be lost [ 608.998733][T11467] [ 608.998753][T11467] EXT4-fs (loop1): Total free blocks count 0 [ 608.998763][T11467] EXT4-fs (loop1): Free/Dirty block details [ 608.998808][T11467] EXT4-fs (loop1): free_blocks=2415919104 [ 608.998821][T11467] EXT4-fs (loop1): dirty_blocks=8208 [ 608.998831][T11467] EXT4-fs (loop1): Block reservation details [ 608.998846][T11467] EXT4-fs (loop1): i_reserved_data_blocks=513 [ 609.463284][ T2247] usb 6-1: unable to get BOS descriptor or descriptor too short [ 609.464354][ T2247] usb 6-1: New USB device found, idVendor=0423, idProduct=000a, bcdDevice=5f.d8 [ 609.483028][ T2247] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 609.483058][ T2247] usb 6-1: can't read configurations, error -71 [ 609.765105][T10459] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 610.170325][ T2247] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 610.333476][ T2247] usb 6-1: Using ep0 maxpacket: 32 [ 610.340549][ T2247] usb 6-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 610.364126][ T5717] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 610.375557][ T2247] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.375589][ T2247] usb 6-1: Product: syz [ 610.375607][ T2247] usb 6-1: Manufacturer: syz [ 610.375620][ T2247] usb 6-1: SerialNumber: syz [ 610.406462][ T2247] usb 6-1: config 0 descriptor?? [ 610.440835][ T2247] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 610.440934][ T2247] dvb-usb: bulk message failed: -22 (4/0) [ 610.440958][ T2247] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 610.441042][ T2247] dvb-usb: bulk message failed: -22 (5/0) [ 610.441052][ T2247] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 610.498547][ T2247] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 610.518694][ T2247] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 610.565475][ T2247] usb 6-1: media controller created [ 610.641509][ T2247] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 612.641944][T10817] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 612.702522][ T2247] usb 6-1: selecting invalid altsetting 3 [ 612.702550][ T2247] ttusb2: set interface to alts=3 failed [ 613.014539][ T2247] DVB: Unable to find symbol tda10086_attach() [ 613.023650][ T2247] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 613.033133][ T2247] dvb-usb: bulk message failed: -22 (4/0) [ 613.033210][ T2247] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 613.052334][ T2247] dvb-usb: bulk message failed: -22 (5/0) [ 613.052373][ T2247] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 613.052439][ T2247] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 613.242469][ T189] usb 6-1: USB disconnect, device number 13 [ 613.568610][ T5717] usb 4-1: unable to get BOS descriptor or descriptor too short [ 613.568660][ T5717] usb 4-1: New USB device found, idVendor=0423, idProduct=000a, bcdDevice=5f.d8 [ 613.587064][ T5717] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 613.587094][ T5717] usb 4-1: can't read configurations, error -71 [ 613.657512][ T189] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 613.702208][ T5623] EXT4-fs warning (device loop1): ext4_evict_inode:196: inode #18: comm syz-executor: data will be lost [ 613.855191][T11494] FAULT_INJECTION: forcing a failure. [ 613.855191][T11494] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 613.855234][T11494] CPU: 0 UID: 0 PID: 11494 Comm: syz.9.1116 Tainted: G L syzkaller #0 PREEMPT(full) [ 613.855254][T11494] Tainted: [L]=SOFTLOCKUP [ 613.855259][T11494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 613.855267][T11494] Call Trace: [ 613.855272][T11494] [ 613.855278][T11494] dump_stack_lvl+0xe8/0x150 [ 613.855302][T11494] should_fail_ex+0x410/0x560 [ 613.855330][T11494] _copy_to_user+0x31/0xb0 [ 613.855398][T11494] copy_to_sockptr_offset+0x66/0xa0 [ 613.855448][T11494] do_ipv6_getsockopt+0x1e57/0x2510 [ 613.855469][T11494] ? __pfx_do_ipv6_getsockopt+0x10/0x10 [ 613.855495][T11494] ? __lock_acquire+0x6df/0x2e50 [ 613.855514][T11494] ? lock_acquire+0x115/0x350 [ 613.855527][T11494] ? get_pid_task+0x20/0x1f0 [ 613.855546][T11494] ? lock_acquire+0x115/0x350 [ 613.855561][T11494] ipv6_getsockopt+0xbd/0x2c0 [ 613.855576][T11494] ? __pfx_ipv6_getsockopt+0x10/0x10 [ 613.855592][T11494] ? sock_common_getsockopt+0x2d/0xb0 [ 613.855610][T11494] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 613.855628][T11494] do_sock_getsockopt+0x51d/0x7e0 [ 613.855645][T11494] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 613.855667][T11494] ? __fget_files+0x3a2/0x420 [ 613.855685][T11494] ? __fget_files+0x2a/0x420 [ 613.855705][T11494] __x64_sys_getsockopt+0x1a4/0x240 [ 613.855724][T11494] do_syscall_64+0x166/0x520 [ 613.855741][T11494] ? trace_irq_disable+0x3b/0x140 [ 613.855753][T11494] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.855765][T11494] ? clear_bhb_loop+0x70/0xc0 [ 613.855781][T11494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.855793][T11494] RIP: 0033:0x7ff799f9e0d9 [ 613.855806][T11494] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 613.855817][T11494] RSP: 002b:00007ff79ad93028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 613.855833][T11494] RAX: ffffffffffffffda RBX: 00007ff79a225fa0 RCX: 00007ff799f9e0d9 [ 613.855842][T11494] RDX: 0000000000000006 RSI: 0000000000000029 RDI: 0000000000000003 [ 613.855850][T11494] RBP: 00007ff79ad93090 R08: 00002000000001c0 R09: 0000000000000000 [ 613.855858][T11494] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 613.855866][T11494] R13: 00007ff79a226038 R14: 00007ff79a225fa0 R15: 00007ffef5d7bbc8 [ 613.855885][T11494] [ 614.826818][ T5623] EXT4-fs: 15 callbacks suppressed [ 614.826855][ T5623] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 616.583947][T11519] loop1: detected capacity change from 0 to 32768 [ 616.638466][T11519] JBD2: Ignoring recovery information on journal [ 616.679445][T11519] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 617.201547][T11530] loop9: detected capacity change from 0 to 2048 [ 617.202237][T11530] EXT4-fs: Ignoring removed nobh option [ 617.202288][T11530] EXT4-fs: Ignoring removed i_version option [ 617.202300][T11530] EXT4-fs: Ignoring removed nobh option [ 617.263922][T11530] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 617.286334][ T5623] ocfs2: Unmounting device (7,1) on (node local) [ 617.640957][T11530] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 617.641099][T11530] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 617.641119][T11530] EXT4-fs (loop9): This should not happen!! Data will be lost [ 617.641119][T11530] [ 617.641130][T11530] EXT4-fs (loop9): Total free blocks count 0 [ 617.641140][T11530] EXT4-fs (loop9): Free/Dirty block details [ 617.641152][T11530] EXT4-fs (loop9): free_blocks=2415919104 [ 617.641163][T11530] EXT4-fs (loop9): dirty_blocks=8208 [ 617.641173][T11530] EXT4-fs (loop9): Block reservation details [ 617.641182][T11530] EXT4-fs (loop9): i_reserved_data_blocks=513 [ 617.794749][T11536] loop3: detected capacity change from 0 to 512 [ 617.804241][T11536] EXT4-fs (loop3): Test dummy encryption mode enabled [ 617.811215][T11536] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 617.887912][T11536] EXT4-fs (loop3): 1 truncate cleaned up [ 617.889100][T11536] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 618.066189][T10817] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2048 with max blocks 2048 with error 28 [ 618.173614][T10817] EXT4-fs (loop0): This should not happen!! Data will be lost [ 618.173614][T10817] [ 618.173661][T10817] EXT4-fs (loop0): Total free blocks count 0 [ 618.173674][T10817] EXT4-fs (loop0): Free/Dirty block details [ 618.173685][T10817] EXT4-fs (loop0): free_blocks=2415919104 [ 618.173705][T10817] EXT4-fs (loop0): dirty_blocks=6160 [ 618.173716][T10817] EXT4-fs (loop0): Block reservation details [ 618.173730][T10817] EXT4-fs (loop0): i_reserved_data_blocks=385 [ 618.860367][T10817] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 4096 with max blocks 2048 with error 28 [ 618.873464][T10817] EXT4-fs (loop0): This should not happen!! Data will be lost [ 618.873464][T10817] [ 619.322442][T11550] ip_tables: iptables: counters copy to user failed while replacing table [ 619.606475][ T189] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 619.992106][ T189] usb 3-1: Using ep0 maxpacket: 16 [ 620.001796][ T189] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 620.018234][ T189] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 620.018270][ T189] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 620.047903][ T189] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.047937][ T189] usb 3-1: Product: syz [ 620.047956][ T189] usb 3-1: Manufacturer: syz [ 620.047968][ T189] usb 3-1: SerialNumber: syz [ 620.134060][ T189] usb 3-1: 0:2 : does not exist [ 621.697479][ T13] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 621.971426][ T189] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 622.000737][ T5717] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 622.163864][ T9107] EXT4-fs warning (device loop9): ext4_evict_inode:196: inode #18: comm syz-executor: data will be lost [ 622.185085][T10459] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 622.282941][ T189] usb 3-1: USB disconnect, device number 11 [ 623.047733][T11568] Invalid ELF header type: 0 != 1 [ 623.062839][ T5622] udevd[5622]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 623.897881][ T9107] EXT4-fs: 15 callbacks suppressed [ 623.907840][ T9107] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 624.507898][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.507956][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.832758][ T5717] usb 2-1: unable to get BOS descriptor or descriptor too short [ 624.832807][ T5717] usb 2-1: New USB device found, idVendor=0423, idProduct=000a, bcdDevice=5f.d8 [ 624.841428][ T5717] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 624.841459][ T5717] usb 2-1: can't read configurations, error -71 [ 626.221142][T11595] FAULT_INJECTION: forcing a failure. [ 626.221142][T11595] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 626.221186][T11595] CPU: 0 UID: 0 PID: 11595 Comm: syz.2.1133 Tainted: G L syzkaller #0 PREEMPT(full) [ 626.221205][T11595] Tainted: [L]=SOFTLOCKUP [ 626.221210][T11595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 626.221218][T11595] Call Trace: [ 626.221223][T11595] [ 626.221229][T11595] dump_stack_lvl+0xe8/0x150 [ 626.221254][T11595] should_fail_ex+0x410/0x560 [ 626.221278][T11595] _copy_from_user+0x2d/0xb0 [ 626.221293][T11595] do_sys_poll+0x258/0x1110 [ 626.221317][T11595] ? __lock_acquire+0x6df/0x2e50 [ 626.221330][T11595] ? __pfx_do_sys_poll+0x10/0x10 [ 626.221349][T11595] ? lock_acquire+0x115/0x350 [ 626.221420][T11595] ? set_user_sigmask+0xcd/0x1c0 [ 626.221438][T11595] ? __pfx_set_user_sigmask+0x10/0x10 [ 626.221454][T11595] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 626.221479][T11595] __se_sys_ppoll+0x209/0x2b0 [ 626.221494][T11595] ? fput+0xa0/0xd0 [ 626.221510][T11595] ? __pfx___se_sys_ppoll+0x10/0x10 [ 626.221525][T11595] ? __pfx_ksys_write+0x10/0x10 [ 626.221546][T11595] ? __x64_sys_ppoll+0x20/0xc0 [ 626.221562][T11595] do_syscall_64+0x166/0x520 [ 626.221579][T11595] ? trace_irq_disable+0x3b/0x140 [ 626.221592][T11595] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 626.221604][T11595] ? clear_bhb_loop+0x70/0xc0 [ 626.221619][T11595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 626.221632][T11595] RIP: 0033:0x7fe72879e0d9 [ 626.221645][T11595] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 626.221655][T11595] RSP: 002b:00007fe729594028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 626.221671][T11595] RAX: ffffffffffffffda RBX: 00007fe728a26090 RCX: 00007fe72879e0d9 [ 626.221681][T11595] RDX: 0000000000000000 RSI: 20000000000000dc RDI: 00002000000000c0 [ 626.221690][T11595] RBP: 00007fe729594090 R08: 0000000000000000 R09: 0000000000000000 [ 626.221697][T11595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 626.221705][T11595] R13: 00007fe728a26128 R14: 00007fe728a26090 R15: 00007ffd4b240608 [ 626.221725][T11595] [ 626.514781][ T3295] EXT4-fs: 6 callbacks suppressed [ 626.525576][ T3295] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 6144 with max blocks 2048 with error 28 [ 626.539904][ T3295] EXT4-fs (loop0): This should not happen!! Data will be lost [ 626.539904][ T3295] [ 626.539923][ T3295] EXT4-fs (loop0): Total free blocks count 0 [ 626.539931][ T3295] EXT4-fs (loop0): Free/Dirty block details [ 626.539940][ T3295] EXT4-fs (loop0): free_blocks=2415919104 [ 626.539949][ T3295] EXT4-fs (loop0): dirty_blocks=2064 [ 626.539957][ T3295] EXT4-fs (loop0): Block reservation details [ 626.539964][ T3295] EXT4-fs (loop0): i_reserved_data_blocks=129 [ 630.598481][T11647] mtrr: base(0x70756f7267632f2e000) is not aligned on a size(0x2f2e2e2f000) boundary [ 630.745924][T11647] loop1: detected capacity change from 0 to 32768 [ 630.765137][ T9973] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 630.793855][T11647] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1147 (11647) [ 630.815607][T11647] BTRFS info (device loop1 state S): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 630.815643][T11647] BTRFS info (device loop1 state S): using blake2b checksum algorithm [ 630.938226][ T9973] usb 4-1: unable to get BOS descriptor or descriptor too short [ 630.938276][ T9973] usb 4-1: New USB device found, idVendor=0423, idProduct=000a, bcdDevice=5f.d8 [ 630.971798][ T9973] usb 4-1: config index 0 descriptor too short (expected 2066, got 18) [ 630.971832][ T9973] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 630.971856][ T9973] usb 4-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 631.013798][ T9973] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.013831][ T9973] usb 4-1: Product: syz [ 631.013852][ T9973] usb 4-1: Manufacturer: syz [ 631.013864][ T9973] usb 4-1: SerialNumber: syz [ 631.060776][ T1157] BTRFS warning (device loop1 state ES): checksum verify failed on logical 1052672 mirror 1 wanted 0x3226f9dadc896f8f7b9a0be7c609110345c27f6019125c38f3283b3a68e897a5 found 0xbd4b976cd9fa1814a05461e3a8d6527e6af0699630a7a870b913a48450669c6b level 0, ignored [ 631.064706][T11647] BTRFS error (device loop1 state ES): devid 0 uuid a3373a75-1192-444c-9807-48156503709a is missing [ 631.064774][T11647] BTRFS error (device loop1 state ES): failed to read chunk tree: -ENOENT [ 631.180356][T11647] BTRFS error (device loop1 state ES): open_ctree failed: -ENOENT [ 631.200883][ T10] kernel read not supported for file /input/event2 (pid: 10 comm: kworker/0:1) [ 631.243617][ T30] audit: type=1400 audit(1787292198.250:533): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="#(%#{//(@\)//&@},['%%&\#*" pid=11644 comm="syz.9.1146" [ 631.326310][T11646] loop9: detected capacity change from 0 to 128 [ 632.393583][T11646] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 632.393687][T11646] hpfs: filesystem error: improperly stopped [ 632.393701][T11646] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 632.393714][T11646] hpfs: You really don't want any checks? You are crazy... [ 632.393745][T11646] hpfs: Code page index out of array [ 632.393753][T11646] hpfs: code page support is disabled [ 632.459802][T11646] hpfs: hpfs_map_4sectors(): unaligned read [ 632.527109][T11646] hpfs: hpfs_map_4sectors(): unaligned read [ 632.583042][ T2247] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 632.624813][T11646] hpfs: filesystem error: unable to find root dir [ 632.763624][ T2247] usb 6-1: Using ep0 maxpacket: 16 [ 632.778279][ T2247] usb 6-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.09 [ 632.792295][ T2247] usb 6-1: config 73 has an invalid interface number: 24 but max is 0 [ 632.792327][ T2247] usb 6-1: config 73 has no interface number 0 [ 632.792355][ T2247] usb 6-1: config 73 interface 24 has no altsetting 0 [ 632.832759][ T2247] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.832793][ T2247] usb 6-1: Product: syz [ 632.832814][ T2247] usb 6-1: Manufacturer: syz [ 632.832859][ T2247] usb 6-1: SerialNumber: syz [ 633.134537][ T9973] usb 4-1: USB disconnect, device number 9 [ 633.304178][ T2247] go7007 6-1:73.24: probe with driver go7007 failed with error -12 [ 633.325699][ T2247] usb 6-1: USB disconnect, device number 14 [ 635.371799][ T9973] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 638.332526][T11703] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1149'. [ 638.332608][T11703] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1149'. [ 638.396321][T11692] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1149'. [ 638.396366][T11692] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1149'. [ 639.386110][T11713] loop3: detected capacity change from 0 to 32768 [ 639.431626][T11713] (syz.3.1151,11713,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 639.448056][T11713] (syz.3.1151,11713,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 639.481919][T11713] JBD2: Ignoring recovery information on journal [ 639.527491][ T189] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 639.565835][T11713] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 639.711249][ T189] usb 3-1: unable to get BOS descriptor or descriptor too short [ 639.711309][ T189] usb 3-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=a4.d6 [ 639.749752][ T189] usb 3-1: config 12 has an invalid interface number: 99 but max is 0 [ 639.749793][ T189] usb 3-1: config 12 has no interface number 0 [ 639.749836][ T189] usb 3-1: config 12 interface 99 altsetting 14 endpoint 0xD has invalid maxpacket 552, setting to 64 [ 639.749924][ T189] usb 3-1: config 12 interface 99 has no altsetting 0 [ 639.802209][ T189] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.802243][ T189] usb 3-1: Product: syz [ 639.802264][ T189] usb 3-1: Manufacturer: syz [ 639.802275][ T189] usb 3-1: SerialNumber: syz [ 640.511631][T11720] FAULT_INJECTION: forcing a failure. [ 640.511631][T11720] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 640.511674][T11720] CPU: 0 UID: 0 PID: 11720 Comm: syz.1.1155 Tainted: G L syzkaller #0 PREEMPT(full) [ 640.511693][T11720] Tainted: [L]=SOFTLOCKUP [ 640.511699][T11720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 640.511706][T11720] Call Trace: [ 640.511711][T11720] [ 640.511717][T11720] dump_stack_lvl+0xe8/0x150 [ 640.511741][T11720] should_fail_ex+0x410/0x560 [ 640.511765][T11720] _copy_from_user+0x2d/0xb0 [ 640.511779][T11720] io_submit_one+0xd2/0x13d0 [ 640.511825][T11720] ? lockdep_hardirqs_on+0x7b/0x110 [ 640.511843][T11720] ? irqentry_exit+0x218/0x910 [ 640.511862][T11720] ? __pfx_io_submit_one+0x10/0x10 [ 640.511875][T11720] ? lock_acquire+0x115/0x350 [ 640.511896][T11720] ? __might_fault+0xaf/0x130 [ 640.511916][T11720] __se_sys_io_submit+0x195/0x340 [ 640.511944][T11720] ? __pfx___se_sys_io_submit+0x10/0x10 [ 640.511962][T11720] ? ksys_write+0x242/0x270 [ 640.511989][T11720] do_syscall_64+0x166/0x520 [ 640.512006][T11720] ? trace_irq_disable+0x3b/0x140 [ 640.512019][T11720] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.512032][T11720] ? clear_bhb_loop+0x70/0xc0 [ 640.512047][T11720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.512060][T11720] RIP: 0033:0x7fbb6ab9e0d9 [ 640.512073][T11720] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 640.512084][T11720] RSP: 002b:00007fbb6b9a6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 640.512099][T11720] RAX: ffffffffffffffda RBX: 00007fbb6ae25fa0 RCX: 00007fbb6ab9e0d9 [ 640.512109][T11720] RDX: 0000200000000840 RSI: 2000000000000211 RDI: 00007fbb6b985000 [ 640.512118][T11720] RBP: 00007fbb6b9a6090 R08: 0000000000000000 R09: 0000000000000000 [ 640.512126][T11720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 640.512134][T11720] R13: 00007fbb6ae26038 R14: 00007fbb6ae25fa0 R15: 00007ffc41e37d78 [ 640.512153][T11720] [ 640.872323][T10459] ocfs2: Unmounting device (7,3) on (node local) [ 641.461026][ T9973] usb 6-1: unable to get BOS descriptor or descriptor too short [ 641.468993][ T9973] usb 6-1: New USB device found, idVendor=0423, idProduct=000a, bcdDevice=5f.d8 [ 641.483363][ T9973] usb 6-1: unable to read config index 0 descriptor/start: -32 [ 641.483396][ T9973] usb 6-1: chopping to 0 config(s) [ 641.483422][ T9973] usb 6-1: can't read configurations, error -32 [ 641.632346][ T9973] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 641.772702][ T9973] usb 6-1: device descriptor read/64, error -32 [ 641.887527][ T9973] usb usb6-port1: attempt power cycle [ 642.107873][T11736] netlink: 'syz.9.1154': attribute type 1 has an invalid length. [ 642.234121][ T2247] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 642.270838][T11739] loop1: detected capacity change from 0 to 512 [ 642.271868][T11739] EXT4-fs: Ignoring removed nomblk_io_submit option [ 642.360381][T11739] EXT4-fs error (device loop1): ext4_xattr_inode_iget:473: comm syz.1.1158: EA inode 11 has unexpected i_nlink=2 ref_count=1 [ 642.391430][ T2247] usb 4-1: Using ep0 maxpacket: 16 [ 642.402869][ T2247] usb 4-1: New USB device found, idVendor=056a, idProduct=08b1, bcdDevice= 0.00 [ 642.431951][ T2247] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 642.432114][ T2247] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 642.432179][ T2247] usb 4-1: config 0 interface 0 has no altsetting 0 [ 642.432205][ T2247] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.524691][ T2247] usb 4-1: config 0 descriptor?? [ 642.605703][T11739] loop1: lost filesystem error report for type 5 error -117 [ 642.610212][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 642.611835][ C0] EXT4-fs (loop1): initial error at time 1787292209: ext4_xattr_inode_iget:473 [ 642.611926][ C0] EXT4-fs (loop1): last error at time 1787292209: ext4_xattr_inode_iget:473 [ 642.835704][ T189] usb 3-1: no audio or video endpoints found [ 642.889848][ T189] usb 3-1: USB disconnect, device number 12 [ 642.944716][T11739] EXT4-fs (loop1): 1 orphan inode deleted [ 642.946401][T11739] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 643.000037][T11745] netlink: 'syz.9.1154': attribute type 12 has an invalid length. [ 643.000071][T11745] netlink: 'syz.9.1154': attribute type 29 has an invalid length. [ 643.000090][T11745] netlink: 148 bytes leftover after parsing attributes in process `syz.9.1154'. [ 643.126032][ T2247] wacom 0003:056A:08B1.0003: unknown main item tag 0x6 [ 643.634384][ T2247] wacom 0003:056A:08B1.0003: item fetching failed at offset 36/40 [ 643.655585][ T2247] wacom 0003:056A:08B1.0003: parse failed [ 643.655657][ T2247] wacom 0003:056A:08B1.0003: probe with driver wacom failed with error -22 [ 645.355198][ T5623] EXT4-fs error (device loop1): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz-executor: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 645.413811][ T5619] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 645.429868][ T5619] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 645.440268][ T5619] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 645.448323][ T5619] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 645.456128][ T5619] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 645.478249][ T5623] EXT4-fs error (device loop1): ext4_lookup:1787: inode #11: comm syz-executor: unexpected EA_INODE flag [ 645.498031][ T5623] EXT4-fs error (device loop1): ext4_lookup:1787: inode #11: comm syz-executor: unexpected EA_INODE flag [ 645.684992][T11769] loop5: detected capacity change from 0 to 2048 [ 645.696555][T11769] EXT4-fs: Ignoring removed nobh option [ 645.720223][T11769] EXT4-fs: Ignoring removed i_version option [ 645.720255][T11769] EXT4-fs: Ignoring removed nobh option [ 645.769022][T11769] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 646.224149][ T189] usb 4-1: USB disconnect, device number 10 [ 646.232009][T11774] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 646.482886][T10170] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 647.062416][ T5619] Bluetooth: hci0: command 0x0c1a tx timeout [ 647.621811][ T5619] Bluetooth: hci5: command tx timeout [ 648.855679][T10955] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 649.241417][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.388653][T11795] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 649.440909][T11795] kvm: pic: non byte read [ 649.448468][T11795] kvm: pic: level sensitive irq not supported [ 649.448889][T11795] kvm: pic: non byte read [ 649.702054][T10460] Bluetooth: hci5: command tx timeout [ 649.798819][T11806] FAULT_INJECTION: forcing a failure. [ 649.798819][T11806] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 649.798874][T11806] CPU: 0 UID: 0 PID: 11806 Comm: syz.9.1169 Tainted: G L syzkaller #0 PREEMPT(full) [ 649.798893][T11806] Tainted: [L]=SOFTLOCKUP [ 649.798898][T11806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 649.798906][T11806] Call Trace: [ 649.798911][T11806] [ 649.798917][T11806] dump_stack_lvl+0xe8/0x150 [ 649.798941][T11806] should_fail_ex+0x410/0x560 [ 649.798965][T11806] _copy_from_iter+0x1d3/0x1660 [ 649.798985][T11806] ? __alloc_skb+0x27a/0x7a0 [ 649.798999][T11806] ? __alloc_skb+0x27a/0x7a0 [ 649.799013][T11806] ? __alloc_skb+0x27a/0x7a0 [ 649.799026][T11806] ? __pfx__copy_from_iter+0x10/0x10 [ 649.799044][T11806] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 649.799063][T11806] ? __alloc_skb+0x27a/0x7a0 [ 649.799073][T11806] ? __alloc_skb+0x27a/0x7a0 [ 649.799087][T11806] ? netlink_sendmsg+0x650/0xb40 [ 649.799104][T11806] ? skb_put+0x112/0x210 [ 649.799117][T11806] netlink_sendmsg+0x6c0/0xb40 [ 649.799138][T11806] ? __pfx_netlink_sendmsg+0x10/0x10 [ 649.799157][T11806] ? apparmor_socket_sendmsg+0x98/0x360 [ 649.799178][T11806] ? __pfx_netlink_sendmsg+0x10/0x10 [ 649.799192][T11806] sock_sendmsg_nosec+0x13a/0x180 [ 649.799211][T11806] ____sys_sendmsg+0x54e/0x850 [ 649.799227][T11806] ? __pfx_____sys_sendmsg+0x10/0x10 [ 649.799246][T11806] ? import_iovec+0x73/0xa0 [ 649.799261][T11806] ___sys_sendmsg+0x2a5/0x360 [ 649.799274][T11806] ? __lock_acquire+0x6df/0x2e50 [ 649.799290][T11806] ? __pfx____sys_sendmsg+0x10/0x10 [ 649.799323][T11806] ? __fget_files+0x2a/0x420 [ 649.799339][T11806] ? __fget_files+0x3a2/0x420 [ 649.799361][T11806] __x64_sys_sendmsg+0x1b1/0x290 [ 649.799376][T11806] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 649.799402][T11806] do_syscall_64+0x166/0x520 [ 649.799419][T11806] ? trace_irq_disable+0x3b/0x140 [ 649.799431][T11806] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.799444][T11806] ? clear_bhb_loop+0x70/0xc0 [ 649.799459][T11806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.799472][T11806] RIP: 0033:0x7ff799f9e0d9 [ 649.799485][T11806] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 649.799495][T11806] RSP: 002b:00007ff79ad93028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 649.799511][T11806] RAX: ffffffffffffffda RBX: 00007ff79a225fa0 RCX: 00007ff799f9e0d9 [ 649.799521][T11806] RDX: 0000000004004084 RSI: 0000200000000000 RDI: 0000000000000005 [ 649.799529][T11806] RBP: 00007ff79ad93090 R08: 0000000000000000 R09: 0000000000000000 [ 649.799537][T11806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 649.799545][T11806] R13: 00007ff79a226038 R14: 00007ff79a225fa0 R15: 00007ffef5d7bbc8 [ 649.799564][T11806] [ 650.276661][ T5619] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 650.295636][ T5619] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 650.307631][ T5619] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 650.319219][ T5619] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 650.331637][ T5619] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 650.802525][T11819] FAULT_INJECTION: forcing a failure. [ 650.802525][T11819] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 650.802575][T11819] CPU: 0 UID: 0 PID: 11819 Comm: syz.5.1170 Tainted: G L syzkaller #0 PREEMPT(full) [ 650.802595][T11819] Tainted: [L]=SOFTLOCKUP [ 650.802600][T11819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 650.802608][T11819] Call Trace: [ 650.802613][T11819] [ 650.802619][T11819] dump_stack_lvl+0xe8/0x150 [ 650.802644][T11819] should_fail_ex+0x410/0x560 [ 650.802675][T11819] prepare_alloc_pages+0x223/0x600 [ 650.802694][T11819] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 650.802710][T11819] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 650.802726][T11819] ? __pfx_policy_nodemask+0x10/0x10 [ 650.802748][T11819] alloc_pages_mpol+0x21e/0x390 [ 650.802768][T11819] folio_alloc_mpol_noprof+0x39/0x160 [ 650.802786][T11819] swap_cache_alloc_folio+0x2c1/0x990 [ 650.802812][T11819] swap_cache_read_folio+0x44/0x120 [ 650.802832][T11819] swap_cluster_readahead+0x392/0x630 [ 650.802854][T11819] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 650.802876][T11819] ? swap_table_get+0x1e/0x260 [ 650.802896][T11819] ? swap_cache_get_folio+0x2e7/0x2f0 [ 650.802914][T11819] ? mpol_shared_policy_lookup+0x14b/0x1e0 [ 650.802940][T11819] shmem_swapin_folio+0xefb/0x2c80 [ 650.802989][T11819] ? filemap_get_entry+0x374/0x3f0 [ 650.803007][T11819] ? __pfx_shmem_swapin_folio+0x10/0x10 [ 650.803030][T11819] ? smaps_page_accumulate+0x1dc/0x280 [ 650.803051][T11819] shmem_get_folio_gfp+0x3c0/0x16d0 [ 650.803078][T11819] shmem_fault+0x179/0x390 [ 650.803100][T11819] __do_fault+0x138/0x2a0 [ 650.803120][T11819] do_pte_missing+0x684/0x34b0 [ 650.803147][T11819] ? handle_mm_fault+0xf1/0x3750 [ 650.803166][T11819] handle_mm_fault+0x1a53/0x3750 [ 650.803189][T11819] ? handle_mm_fault+0xf1/0x3750 [ 650.803212][T11819] ? __pfx_handle_mm_fault+0x10/0x10 [ 650.803237][T11819] ? __lock_acquire+0x6df/0x2e50 [ 650.803253][T11819] ? lock_mm_and_find_vma+0xa7/0x340 [ 650.803275][T11819] do_user_addr_fault+0x746/0x1340 [ 650.803308][T11819] exc_page_fault+0x6a/0xc0 [ 650.803326][T11819] asm_exc_page_fault+0x26/0x30 [ 650.803339][T11819] RIP: 0010:rep_movs_alternative+0x4a/0xa0 [ 650.803355][T11819] Code: 6b 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 0f 6b 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 650.803369][T11819] RSP: 0018:ffffc9000395f8f8 EFLAGS: 00050202 [ 650.803383][T11819] RAX: ffffffff84db4001 RBX: ffff88805591e000 RCX: 0000000000000ed7 [ 650.803393][T11819] RDX: 0000000000000000 RSI: ffff88805591e000 RDI: 00002000000005c0 [ 650.803402][T11819] RBP: ffffc9000395fa78 R08: ffff88805591eed6 R09: 1ffff1100ab23dda [ 650.803412][T11819] R10: dffffc0000000000 R11: ffffed100ab23ddb R12: dffffc0000000000 [ 650.803424][T11819] R13: 0000000000000000 R14: ffffc9000395fbe0 R15: 0000000000000ed7 [ 650.803438][T11819] ? _copy_to_iter+0x461/0x1810 [ 650.803462][T11819] _copy_to_iter+0x49d/0x1810 [ 650.803490][T11819] ? __pfx__copy_to_iter+0x10/0x10 [ 650.803510][T11819] ? mmput+0xe/0x70 [ 650.803528][T11819] ? m_stop+0x269/0x300 [ 650.803548][T11819] seq_read_iter+0xaae/0xca0 [ 650.803574][T11819] seq_read+0x367/0x480 [ 650.803593][T11819] ? __pfx_seq_read+0x10/0x10 [ 650.803614][T11819] ? rw_verify_area+0x24a/0x4c0 [ 650.803641][T11819] ? __pfx_seq_read+0x10/0x10 [ 650.803654][T11819] vfs_read+0x213/0xa80 [ 650.803675][T11819] ? __pfx___mutex_lock+0x10/0x10 [ 650.803694][T11819] ? __pfx_vfs_read+0x10/0x10 [ 650.803712][T11819] ? __fget_files+0x2a/0x420 [ 650.803732][T11819] ? __fget_files+0x3a2/0x420 [ 650.803747][T11819] ? __fget_files+0x2a/0x420 [ 650.803769][T11819] ksys_read+0x150/0x270 [ 650.803789][T11819] ? __pfx_ksys_read+0x10/0x10 [ 650.803814][T11819] do_syscall_64+0x166/0x520 [ 650.803831][T11819] ? trace_irq_disable+0x3b/0x140 [ 650.803843][T11819] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.803856][T11819] ? clear_bhb_loop+0x70/0xc0 [ 650.803871][T11819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.803883][T11819] RIP: 0033:0x7fd029b9e0d9 [ 650.803896][T11819] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 650.803906][T11819] RSP: 002b:00007fd02a98f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 650.803926][T11819] RAX: ffffffffffffffda RBX: 00007fd029e25fa0 RCX: 00007fd029b9e0d9 [ 650.803935][T11819] RDX: 0000000000002020 RSI: 00002000000005c0 RDI: 0000000000000003 [ 650.803943][T11819] RBP: 00007fd02a98f090 R08: 0000000000000000 R09: 0000000000000000 [ 650.803951][T11819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 650.803959][T11819] R13: 00007fd029e26038 R14: 00007fd029e25fa0 R15: 00007ffe83fc8928 [ 650.803979][T11819] [ 651.339688][ T5717] usb 4-1: new low-speed USB device number 11 using dummy_hcd [ 651.437761][T11820] loop9: detected capacity change from 0 to 1024 [ 651.544127][ T5717] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 651.556368][ T5717] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 651.556404][ T5717] usb 4-1: config 0 has no interface number 0 [ 651.556438][ T5717] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 651.556456][ T5717] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 651.556474][ T5717] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 651.556492][ T5717] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 651.556511][ T5717] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 651.556526][ T5717] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 651.556569][ T5717] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.677493][ T5717] usb 4-1: config 0 descriptor?? [ 651.686208][T11818] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 651.729994][ T5717] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 651.780428][T10460] Bluetooth: hci5: command tx timeout [ 651.975498][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.026239][ T5717] usb 4-1: USB disconnect, device number 11 [ 652.041275][ T5717] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 652.050214][ T9973] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 652.097716][T11831] FAULT_INJECTION: forcing a failure. [ 652.097716][T11831] name failslab, interval 1, probability 1, space 0, times 0 [ 652.097758][T11831] CPU: 0 UID: 0 PID: 11831 Comm: syz.5.1173 Tainted: G L syzkaller #0 PREEMPT(full) [ 652.097777][T11831] Tainted: [L]=SOFTLOCKUP [ 652.097782][T11831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 652.097789][T11831] Call Trace: [ 652.097795][T11831] [ 652.097800][T11831] dump_stack_lvl+0xe8/0x150 [ 652.097833][T11831] should_fail_ex+0x410/0x560 [ 652.097856][T11831] should_failslab+0xa8/0x100 [ 652.097873][T11831] __kmalloc_noprof+0xfe/0x720 [ 652.097891][T11831] ? rcu_is_watching+0x16/0xb0 [ 652.097907][T11831] ? tomoyo_realpath_from_path+0xef/0x640 [ 652.098001][T11831] ? tomoyo_realpath_from_path+0xef/0x640 [ 652.098020][T11831] tomoyo_realpath_from_path+0xef/0x640 [ 652.098040][T11831] ? tomoyo_path_number_perm+0x219/0x5f0 [ 652.098059][T11831] tomoyo_path_number_perm+0x246/0x5f0 [ 652.098080][T11831] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 652.098098][T11831] ? __lock_acquire+0x6df/0x2e50 [ 652.098120][T11831] ? hook_file_ioctl+0x1f2/0x600 [ 652.098158][T11831] ? __fget_files+0x2a/0x420 [ 652.098182][T11831] ? __fget_files+0x2a/0x420 [ 652.098198][T11831] ? __fget_files+0x3a2/0x420 [ 652.098213][T11831] ? __fget_files+0x2a/0x420 [ 652.098232][T11831] security_file_ioctl+0xc3/0x2a0 [ 652.098266][T11831] __se_sys_ioctl+0x47/0x170 [ 652.098281][T11831] do_syscall_64+0x166/0x520 [ 652.098298][T11831] ? trace_irq_disable+0x3b/0x140 [ 652.098310][T11831] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 652.098323][T11831] ? clear_bhb_loop+0x70/0xc0 [ 652.098339][T11831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 652.098351][T11831] RIP: 0033:0x7fd029b9e0d9 [ 652.098365][T11831] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 652.098376][T11831] RSP: 002b:00007fd02a98f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 652.098391][T11831] RAX: ffffffffffffffda RBX: 00007fd029e25fa0 RCX: 00007fd029b9e0d9 [ 652.098401][T11831] RDX: 0000200000000300 RSI: 000000000000890b RDI: 0000000000000003 [ 652.098409][T11831] RBP: 00007fd02a98f090 R08: 0000000000000000 R09: 0000000000000000 [ 652.098417][T11831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 652.098424][T11831] R13: 00007fd029e26038 R14: 00007fd029e25fa0 R15: 00007ffe83fc8928 [ 652.098444][T11831] [ 652.098465][T11831] ERROR: Out of memory at tomoyo_realpath_from_path. [ 652.210278][ T9973] usb 10-1: Using ep0 maxpacket: 16 [ 652.429214][ T9973] usb 10-1: unable to get BOS descriptor or descriptor too short [ 652.429305][ T9973] usb 10-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 652.487549][ T9973] usb 10-1: config 1 has an invalid descriptor of length 68, skipping remainder of the config [ 652.487618][ T9973] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 68, changing to 7 [ 652.487645][ T9973] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 17440, setting to 1024 [ 652.539792][ T9973] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.539824][ T9973] usb 10-1: Product: syz [ 652.539844][ T9973] usb 10-1: Manufacturer: 阓薂퇎豹埩㈖ [ 652.539856][ T9973] usb 10-1: SerialNumber: syz [ 652.580468][T10460] Bluetooth: hci2: command tx timeout [ 652.654062][T11833] tmpfs: Bad value for 'mpol' [ 652.837704][ T9973] usb 10-1: Audio class v2/v3 interfaces need an interface association [ 652.849217][ T9973] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 653.006363][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.296424][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.453578][ T9973] usb 10-1: USB disconnect, device number 10 [ 653.563201][ T189] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 653.733650][ T189] usb 6-1: unable to get BOS descriptor or descriptor too short [ 653.733697][ T189] usb 6-1: New USB device found, idVendor=0423, idProduct=000a, bcdDevice=5f.d8 [ 653.753023][ T189] usb 6-1: config index 0 descriptor too short (expected 2066, got 18) [ 653.753055][ T189] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 653.753076][ T189] usb 6-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 653.799225][ T189] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.799259][ T189] usb 6-1: Product: syz [ 653.799278][ T189] usb 6-1: Manufacturer: syz [ 653.799289][ T189] usb 6-1: SerialNumber: syz [ 653.861879][T10460] Bluetooth: hci5: command tx timeout [ 654.678290][T10460] Bluetooth: hci2: command tx timeout [ 655.034748][T11861] FAULT_INJECTION: forcing a failure. [ 655.034748][T11861] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 655.034792][T11861] CPU: 0 UID: 0 PID: 11861 Comm: syz.3.1178 Tainted: G L syzkaller #0 PREEMPT(full) [ 655.034814][T11861] Tainted: [L]=SOFTLOCKUP [ 655.034819][T11861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 655.034827][T11861] Call Trace: [ 655.034835][T11861] [ 655.034841][T11861] dump_stack_lvl+0xe8/0x150 [ 655.034872][T11861] should_fail_ex+0x410/0x560 [ 655.034895][T11861] _copy_from_user+0x2d/0xb0 [ 655.034910][T11861] video_usercopy+0x359/0x1430 [ 655.035018][T11861] ? hook_file_ioctl+0x1f2/0x600 [ 655.035032][T11861] ? __pfx___video_do_ioctl+0x10/0x10 [ 655.035051][T11861] ? __pfx_video_usercopy+0x10/0x10 [ 655.035073][T11861] ? __fget_files+0x2a/0x420 [ 655.035092][T11861] ? __fget_files+0x2a/0x420 [ 655.035108][T11861] ? __fget_files+0x3a2/0x420 [ 655.035126][T11861] v4l2_ioctl+0x18d/0x1e0 [ 655.035142][T11861] ? __pfx_v4l2_ioctl+0x10/0x10 [ 655.035158][T11861] __se_sys_ioctl+0xfc/0x170 [ 655.035173][T11861] do_syscall_64+0x166/0x520 [ 655.035190][T11861] ? trace_irq_disable+0x3b/0x140 [ 655.035203][T11861] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.035216][T11861] ? clear_bhb_loop+0x70/0xc0 [ 655.035231][T11861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.035244][T11861] RIP: 0033:0x7fac35b9e0d9 [ 655.035257][T11861] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 655.035269][T11861] RSP: 002b:00007fac36984028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 655.035284][T11861] RAX: ffffffffffffffda RBX: 00007fac35e25fa0 RCX: 00007fac35b9e0d9 [ 655.035294][T11861] RDX: 0000200000000140 RSI: 00000000c0405602 RDI: 0000000000000003 [ 655.035302][T11861] RBP: 00007fac36984090 R08: 0000000000000000 R09: 0000000000000000 [ 655.035310][T11861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 655.035318][T11861] R13: 00007fac35e26038 R14: 00007fac35e25fa0 R15: 00007fff55b64b18 [ 655.035337][T11861] [ 655.840585][ T5717] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 655.995593][ T5717] usb 4-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 656.018384][ T5717] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 656.018430][ T5717] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 656.018469][ T5717] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.504296][T11868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 656.504613][T11868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 656.505301][T11868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 656.540922][ T189] usb 6-1: USB disconnect, device number 18 [ 656.556439][T11868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 656.576524][T11868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 656.576827][T11868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 656.577520][T11868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 656.635467][T11868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 656.646284][T11868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 656.698551][T11868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 656.710546][ T13] bridge_slave_1: left allmulticast mode [ 656.710579][ T13] bridge_slave_1: left promiscuous mode [ 656.724392][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 656.740486][T10460] Bluetooth: hci2: command tx timeout [ 656.762000][ T13] bridge_slave_0: left allmulticast mode [ 656.767948][ T13] bridge_slave_0: left promiscuous mode [ 656.768125][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 656.847920][ T2247] usb 4-1: USB disconnect, device number 12 [ 657.387074][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 657.403614][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 657.416261][ T13] bond0 (unregistering): Released all slaves [ 657.777539][T11893] loop9: detected capacity change from 0 to 2048 [ 657.811160][T11893] EXT4-fs: Ignoring removed nobh option [ 657.811216][T11893] EXT4-fs: Ignoring removed i_version option [ 657.811229][T11893] EXT4-fs: Ignoring removed nobh option [ 657.906733][T11893] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 658.007940][T11895] loop3: detected capacity change from 0 to 764 [ 658.087769][T11895] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 658.325538][T11893] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 658.325681][T11893] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 154 with error 28 [ 658.325703][T11893] EXT4-fs (loop9): This should not happen!! Data will be lost [ 658.325703][T11893] [ 658.414565][T11893] EXT4-fs (loop9): Total free blocks count 0 [ 658.461696][T11893] EXT4-fs (loop9): Free/Dirty block details [ 658.468100][T11893] EXT4-fs (loop9): free_blocks=2415919104 [ 658.476148][T11893] EXT4-fs (loop9): dirty_blocks=160 [ 658.483151][T11893] EXT4-fs (loop9): Block reservation details [ 658.489538][T11893] EXT4-fs (loop9): i_reserved_data_blocks=10 [ 658.510265][ T10] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 658.633831][T11764] bridge0: port 1(bridge_slave_0) entered blocking state [ 658.645934][ T10] usb 4-1: device descriptor read/64, error -71 [ 658.654631][T11764] bridge0: port 1(bridge_slave_0) entered disabled state [ 658.662352][T11764] bridge_slave_0: entered allmulticast mode [ 658.676270][T11764] bridge_slave_0: entered promiscuous mode [ 658.767291][ T13] hsr_slave_0: left promiscuous mode [ 658.775609][ T9107] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 658.791394][ T13] hsr_slave_1: left promiscuous mode [ 658.820342][T10460] Bluetooth: hci2: command tx timeout [ 658.828753][ T13] veth1_macvtap: left promiscuous mode [ 658.836193][ T13] veth0_macvtap: left promiscuous mode [ 658.843100][ T13] veth1_vlan: left promiscuous mode [ 658.850994][ T13] veth0_vlan: left promiscuous mode [ 658.900767][ T10] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 659.031528][ T10] usb 4-1: device descriptor read/64, error -71 [ 659.105116][T11919] loop9: detected capacity change from 0 to 2048 [ 659.123754][T11919] EXT4-fs: Ignoring removed nobh option [ 659.135379][T11919] EXT4-fs: Ignoring removed i_version option [ 659.142523][ T10] usb usb4-port1: attempt power cycle [ 659.150601][T11919] EXT4-fs: Ignoring removed nobh option [ 659.175224][T11919] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 659.358679][T11919] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 659.358838][T11919] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 402 with error 28 [ 659.358859][T11919] EXT4-fs (loop9): This should not happen!! Data will be lost [ 659.358859][T11919] [ 659.358870][T11919] EXT4-fs (loop9): Total free blocks count 0 [ 659.358890][T11919] EXT4-fs (loop9): Free/Dirty block details [ 659.358901][T11919] EXT4-fs (loop9): free_blocks=2415919104 [ 659.358913][T11919] EXT4-fs (loop9): dirty_blocks=416 [ 659.358923][T11919] EXT4-fs (loop9): Block reservation details [ 659.358937][T11919] EXT4-fs (loop9): i_reserved_data_blocks=26 [ 659.500361][ T10] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 659.524090][ T10] usb 4-1: device descriptor read/8, error -71 [ 659.761774][ T10] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 659.791527][ T10] usb 4-1: device descriptor read/8, error -71 [ 659.828735][ T729] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 304 with max blocks 98 with error 28 [ 659.904699][ T10] usb usb4-port1: unable to enumerate USB device [ 659.991286][ T13] team0 (unregistering): Port device team_slave_1 removed [ 660.047021][ T13] team0 (unregistering): Port device team_slave_0 removed [ 660.293854][T11764] bridge0: port 2(bridge_slave_1) entered blocking state [ 660.293939][T11764] bridge0: port 2(bridge_slave_1) entered disabled state [ 660.294055][T11764] bridge_slave_1: entered allmulticast mode [ 660.295176][T11764] bridge_slave_1: entered promiscuous mode [ 660.518808][T11764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 660.573955][T11764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 660.699342][T11764] team0: Port device team_slave_0 added [ 660.718274][T11764] team0: Port device team_slave_1 added [ 661.099123][T11764] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 661.109197][T11764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 661.141815][T11764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 661.193781][T11764] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 661.201228][T11764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 661.228047][T11764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 662.422132][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.601593][ T10] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 662.627851][T11808] bridge0: port 1(bridge_slave_0) entered blocking state [ 662.627935][T11808] bridge0: port 1(bridge_slave_0) entered disabled state [ 662.628065][T11808] bridge_slave_0: entered allmulticast mode [ 662.656767][T11808] bridge_slave_0: entered promiscuous mode [ 662.684067][T11764] hsr_slave_0: entered promiscuous mode [ 662.697672][T11764] hsr_slave_1: entered promiscuous mode [ 662.709753][T11764] debugfs: 'hsr0' already exists in 'hsr' [ 662.709791][T11764] Cannot create hsr debugfs directory [ 662.733115][T11808] bridge0: port 2(bridge_slave_1) entered blocking state [ 662.733251][T11808] bridge0: port 2(bridge_slave_1) entered disabled state [ 662.733363][T11808] bridge_slave_1: entered allmulticast mode [ 662.757792][T11808] bridge_slave_1: entered promiscuous mode [ 662.763936][ T10] usb 10-1: Using ep0 maxpacket: 8 [ 662.772093][ T10] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.40 [ 662.784435][ T10] usb 10-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 662.784467][ T10] usb 10-1: config 1 interface 0 has no altsetting 0 [ 662.824567][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.824600][ T10] usb 10-1: Product: 觊ꜿ쾱釛晖ࠊ❀ [ 662.824620][ T10] usb 10-1: Manufacturer:  [ 662.824632][ T10] usb 10-1: SerialNumber:  [ 663.352390][T11808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 663.377087][T11808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 663.596336][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.641307][ T189] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 663.801510][ T189] usb 6-1: Using ep0 maxpacket: 8 [ 663.808518][ T189] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 663.819767][ T189] usb 6-1: config index 0 descriptor too short (expected 74, got 45) [ 663.819892][ T189] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 663.819929][ T189] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 663.819946][ T189] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 663.819967][ T189] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 663.820028][ T189] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 663.820058][ T189] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.975819][T11808] team0: Port device team_slave_0 added [ 664.091170][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.132705][ T189] usb 6-1: GET_CAPABILITIES returned 0 [ 664.132752][ T189] usbtmc 6-1:16.0: can't read capabilities [ 664.257359][T11808] team0: Port device team_slave_1 added [ 664.531625][T11995] loop5: detected capacity change from 0 to 512 [ 664.574375][T11995] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 664.574492][T11995] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 664.624783][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.759031][T11808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 664.759059][T11808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 664.759129][T11808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 664.794782][ T189] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 664.866182][ C0] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 664.963098][T11808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 664.963122][T11808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 664.963150][T11808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 665.001789][ T10] usbhid 10-1:1.0: can't add hid device: -71 [ 665.001889][ T10] usbhid 10-1:1.0: probe with driver usbhid failed with error -71 [ 665.039502][ T189] usb 4-1: New USB device found, idVendor=5109, idProduct=6caa, bcdDevice=38.71 [ 665.049851][T11986] usbtmc 6-1:16.0: Unable to send data, error -71 [ 665.060056][ T189] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 665.060391][ T189] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 665.060413][ T189] usb 4-1: config 0 interface 0 has no altsetting 0 [ 665.108448][ T10] usb 10-1: USB disconnect, device number 11 [ 665.118279][ T189] usb 4-1: New USB device strings: Mfr=232, Product=139, SerialNumber=0 [ 665.118310][ T189] usb 4-1: Product: syz [ 665.118322][ T189] usb 4-1: Manufacturer: syz [ 665.217904][ T189] usb 4-1: config 0 descriptor?? [ 665.751596][T11808] hsr_slave_0: entered promiscuous mode [ 665.765818][T11808] hsr_slave_1: entered promiscuous mode [ 666.735805][T11808] debugfs: 'hsr0' already exists in 'hsr' [ 666.746430][T11808] Cannot create hsr debugfs directory [ 668.692983][ T2247] usb 6-1: USB disconnect, device number 19 [ 668.755763][T10955] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 669.063366][T12018] loop5: detected capacity change from 0 to 1024 [ 669.232033][ T189] hid-generic 0003:5109:6CAA.0004: hidraw0: USB HID v0.00 Device [syz syz] on usb-dummy_hcd.3-1/input0 [ 669.413021][ T9973] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 669.505660][ T189] usb 4-1: USB disconnect, device number 17 [ 669.594137][ T9973] usb 6-1: Using ep0 maxpacket: 16 [ 669.612204][ T9973] usb 6-1: unable to get BOS descriptor or descriptor too short [ 669.612257][ T9973] usb 6-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 669.635817][ T9973] usb 6-1: config 1 has an invalid descriptor of length 68, skipping remainder of the config [ 669.635887][ T9973] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 68, changing to 7 [ 669.635914][ T9973] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 17440, setting to 1024 [ 669.686788][ T9973] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.686828][ T9973] usb 6-1: Product: syz [ 669.686851][ T9973] usb 6-1: Manufacturer: 阓薂퇎豹埩㈖ [ 669.686864][ T9973] usb 6-1: SerialNumber: syz [ 669.859983][T12020] fido_id[12020]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 670.008334][ T9973] usb 6-1: Audio class v2/v3 interfaces need an interface association [ 670.008602][ T9973] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 670.357718][ T9973] usb 6-1: USB disconnect, device number 20 [ 670.527724][ T5622] udevd[5622]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 671.244016][T12029] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1201'. [ 673.701951][ T9973] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 674.199111][ T9973] usb 6-1: New USB device found, idVendor=1b3d, idProduct=0120, bcdDevice=92.75 [ 674.473127][ T9973] usb 6-1: config 0 has an invalid interface number: 100 but max is 0 [ 674.473163][ T9973] usb 6-1: config 0 has an invalid interface descriptor of length 6, skipping [ 674.473186][ T9973] usb 6-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 674.473200][ T9973] usb 6-1: config 0 has no interface number 0 [ 674.473275][ T9973] usb 6-1: config 0 interface 100 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 674.473292][ T9973] usb 6-1: config 0 interface 100 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 674.473310][ T9973] usb 6-1: config 0 interface 100 has no altsetting 0 [ 674.473334][ T9973] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.945699][ T9973] usb 6-1: config 0 descriptor?? [ 674.950900][ T13] bridge_slave_1: left allmulticast mode [ 674.950920][ T13] bridge_slave_1: left promiscuous mode [ 674.951067][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 675.021746][ T13] bridge_slave_0: left allmulticast mode [ 675.028673][ T13] bridge_slave_0: left promiscuous mode [ 675.040647][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 675.308396][T12043] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1204'. [ 675.330479][ T10] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 675.358100][ T9973] usb 6-1: string descriptor 0 read error: -71 [ 675.359293][ T9973] ftdi_sio 6-1:0.100: FTDI USB Serial Device converter detected [ 675.384125][ T9973] ftdi_sio ttyUSB0: unknown device type: 0x9275 [ 675.495023][ T9973] usb 6-1: USB disconnect, device number 21 [ 675.496215][ T9973] ftdi_sio 6-1:0.100: device disconnected [ 675.544205][ T10] usb 10-1: unable to get BOS descriptor or descriptor too short [ 675.544254][ T10] usb 10-1: New USB device found, idVendor=0423, idProduct=000a, bcdDevice=5f.d8 [ 675.569173][ T10] usb 10-1: config index 0 descriptor too short (expected 2066, got 18) [ 675.569207][ T10] usb 10-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 675.569230][ T10] usb 10-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 675.607446][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.607483][ T10] usb 10-1: Product: syz [ 675.607504][ T10] usb 10-1: Manufacturer: syz [ 675.607516][ T10] usb 10-1: SerialNumber: syz [ 676.776523][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 676.794439][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 676.823738][ T13] bond0 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 676.836944][ T13] bond0 (unregistering): Released all slaves [ 677.888275][T12071] ubi0: attaching mtd0 [ 677.894892][T12071] ubi0: scanning is finished [ 677.894938][T12071] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 678.833419][ T10] usb 10-1: USB disconnect, device number 12 [ 678.967581][T12071] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 678.997075][T12070] '|d: renamed from lo (while UP) [ 679.315237][T12078] loop3: detected capacity change from 0 to 1024 [ 679.449796][ T13] hsr_slave_0: left promiscuous mode [ 679.455835][ T13] hsr_slave_1: left promiscuous mode [ 679.456415][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 679.456429][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 679.484003][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 679.484031][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 679.538730][ T13] veth1_macvtap: left promiscuous mode [ 679.546806][ T13] veth0_macvtap: left promiscuous mode [ 679.554285][ T13] veth1_vlan: left promiscuous mode [ 679.561702][ T13] veth0_vlan: left promiscuous mode [ 680.610760][ T10] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 680.833211][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 680.845275][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 680.845323][ T10] usb 4-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 680.868701][ T10] usb 4-1: config 1 has an invalid descriptor of length 68, skipping remainder of the config [ 680.868772][ T10] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 68, changing to 7 [ 680.868800][ T10] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 17440, setting to 1024 [ 680.916363][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.916397][ T10] usb 4-1: Product: syz [ 680.916417][ T10] usb 4-1: Manufacturer: 阓薂퇎豹埩㈖ [ 680.916429][ T10] usb 4-1: SerialNumber: syz [ 681.231807][ T189] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 681.247275][ T10] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 681.256061][ T10] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 681.391008][ T189] usb 10-1: Using ep0 maxpacket: 32 [ 681.397059][ T189] usb 10-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 681.412243][ T189] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.412294][ T189] usb 10-1: Product: syz [ 681.412351][ T189] usb 10-1: Manufacturer: syz [ 681.412364][ T189] usb 10-1: SerialNumber: syz [ 681.447868][ T189] usb 10-1: config 0 descriptor?? [ 681.484420][ T189] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 681.484535][ T189] dvb-usb: bulk message failed: -22 (4/0) [ 681.484558][ T189] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 681.484632][ T189] dvb-usb: bulk message failed: -22 (5/0) [ 681.484643][ T189] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 681.535235][ T189] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 681.547686][ T189] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 681.581434][ T189] usb 10-1: media controller created [ 681.642075][ T189] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 682.626971][ T10] usb 4-1: USB disconnect, device number 18 [ 682.774969][ T189] usb 10-1: selecting invalid altsetting 3 [ 682.775000][ T189] ttusb2: set interface to alts=3 failed [ 682.948079][ T5622] udevd[5622]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 682.989775][ T189] DVB: Unable to find symbol tda10086_attach() [ 682.989801][ T189] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 682.998674][ T189] dvb-usb: bulk message failed: -22 (4/0) [ 682.998689][ T189] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 682.998760][ T189] dvb-usb: bulk message failed: -22 (5/0) [ 682.998768][ T189] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 682.998810][ T189] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 683.192274][ T5717] usb 10-1: USB disconnect, device number 13 [ 683.234984][T12102] loop3: detected capacity change from 0 to 512 [ 683.266995][ T13] team0 (unregistering): Port device team_slave_1 removed [ 683.294235][T12102] FAT-fs (loop3): bogus number of FAT sectors [ 683.294266][T12102] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 683.294291][T12102] FAT-fs (loop3): Can't find a valid FAT filesystem [ 683.301749][ T10] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 683.419599][ T5717] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 683.433556][ T13] team0 (unregistering): Port device team_slave_0 removed [ 685.977432][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.978794][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.227506][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 686.227567][ T10] usb 6-1: New USB device found, idVendor=0423, idProduct=000a, bcdDevice=5f.d8 [ 686.249521][ T10] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 686.249564][ T10] usb 6-1: can't read configurations, error -71 [ 687.068321][T11764] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 687.747090][T11764] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 688.017801][T11764] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 688.031789][ T5619] Bluetooth: hci1: command 0x0406 tx timeout [ 688.540599][T11764] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 688.569949][T11764] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 688.591240][T11764] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 688.605934][T11764] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 688.631059][T11764] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 689.582376][T12125] loop5: detected capacity change from 0 to 32768 [ 690.066262][ T5280] 8021q: adding VLAN 0 to HW filter on device eth5 [ 690.286974][T11764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 690.344237][T11764] 8021q: adding VLAN 0 to HW filter on device team0 [ 690.370515][ T5861] bridge0: port 1(bridge_slave_0) entered blocking state [ 690.370652][ T5861] bridge0: port 1(bridge_slave_0) entered forwarding state [ 690.405886][ T729] bridge0: port 2(bridge_slave_1) entered blocking state [ 690.405971][ T729] bridge0: port 2(bridge_slave_1) entered forwarding state [ 690.593750][ T30] audit: type=1800 audit(1787292257.600:534): pid=12125 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1220" name="file1" dev="loop5" ino=65 res=0 errno=0 [ 692.308379][T12152] loop3: detected capacity change from 0 to 32768 [ 694.839926][T11764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 696.067995][T11808] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 696.117846][T11808] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 696.133157][T11808] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 696.171088][T11808] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 696.197794][T11808] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 696.231969][T11808] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 696.240956][T11808] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 696.369043][T11808] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 696.391376][ T10] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 697.096744][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 697.096799][ T10] usb 6-1: New USB device found, idVendor=0423, idProduct=000a, bcdDevice=5f.d8 [ 697.114498][ T10] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 697.114538][ T10] usb 6-1: can't read configurations, error -71 [ 697.333863][T11808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 697.406670][T11808] 8021q: adding VLAN 0 to HW filter on device team0 [ 697.439439][ T3330] bridge0: port 1(bridge_slave_0) entered blocking state [ 697.439526][ T3330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 697.450474][ T9973] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 697.507821][ T3330] bridge0: port 2(bridge_slave_1) entered blocking state [ 697.507908][ T3330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 697.680760][ T9973] usb 4-1: Using ep0 maxpacket: 32 [ 697.695604][ T9973] usb 4-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 697.729567][ T9973] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.729599][ T9973] usb 4-1: Product: syz [ 697.729621][ T9973] usb 4-1: Manufacturer: syz [ 697.729633][ T9973] usb 4-1: SerialNumber: syz [ 697.768449][ T9973] usb 4-1: config 0 descriptor?? [ 697.788326][ T9973] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 697.805653][ T9973] dvb-usb: bulk message failed: -22 (4/0) [ 697.805682][ T9973] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 697.805759][ T9973] dvb-usb: bulk message failed: -22 (5/0) [ 697.805770][ T9973] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 697.861073][ T9973] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 697.877049][ T9973] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 697.877104][ T9973] usb 4-1: media controller created [ 697.914581][T11808] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 697.967678][ T9973] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 699.070730][ T9973] usb 4-1: selecting invalid altsetting 3 [ 699.070759][ T9973] ttusb2: set interface to alts=3 failed [ 699.239757][T11764] veth0_vlan: entered promiscuous mode [ 699.312503][T11764] veth1_vlan: entered promiscuous mode [ 699.359195][ T9973] DVB: Unable to find symbol tda10086_attach() [ 699.359222][ T9973] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 699.386105][ T9973] dvb-usb: bulk message failed: -22 (4/0) [ 699.386137][ T9973] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 699.386225][ T9973] dvb-usb: bulk message failed: -22 (5/0) [ 699.386237][ T9973] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 699.386278][ T9973] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 699.578277][T11764] veth0_macvtap: entered promiscuous mode [ 699.609544][T11764] veth1_macvtap: entered promiscuous mode [ 699.728573][ T9973] usb 4-1: USB disconnect, device number 19 [ 701.177251][T11764] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 701.229242][T11764] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 701.373800][ T9973] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 701.525001][ T59] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.535788][ T3295] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.535823][ T3295] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.535845][ T3295] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.869251][ T6564] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 701.869283][ T6564] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 702.089306][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 702.089336][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 702.396763][T12240] loop5: detected capacity change from 0 to 64 [ 703.177369][T11808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 704.256756][T12262] loop6: detected capacity change from 0 to 16 [ 704.357359][T12262] erofs (device loop6): mounted with root inode @ nid 36. [ 705.183338][T12279] loop3: detected capacity change from 0 to 32768 [ 705.215196][T12279] (syz.3.1233,12279,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 705.230059][T12279] (syz.3.1233,12279,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 705.264840][T12279] JBD2: Ignoring recovery information on journal [ 705.307923][T12279] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 705.581022][ T189] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 705.613199][T12267] bio_check_eod: 1012 callbacks suppressed [ 705.613242][T12267] syz.6.1237: attempt to access beyond end of device [ 705.613242][T12267] loop6: rw=524288, sector=12296, nr_sectors = 8 limit=16 [ 705.613398][T12267] syz.6.1237: attempt to access beyond end of device [ 705.613398][T12267] loop6: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 705.614230][T12267] syz.6.1237: attempt to access beyond end of device [ 705.614230][T12267] loop6: rw=0, sector=12296, nr_sectors = 8 limit=16 [ 705.701043][T12267] erofs (device loop6): read error -5 @ 0 of nid 89 [ 705.703903][ T30] audit: type=1800 audit(1787292272.710:535): pid=12267 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1237" name="file2" dev="loop6" ino=89 res=0 errno=0 [ 705.753134][ T189] usb 10-1: Using ep0 maxpacket: 16 [ 705.758827][ T189] usb 10-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 705.774960][ T189] usb 10-1: config 0 has an invalid interface number: 132 but max is 0 [ 705.774993][ T189] usb 10-1: config 0 has no interface number 0 [ 705.828146][ T189] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.828230][ T189] usb 10-1: Product: syz [ 705.828251][ T189] usb 10-1: Manufacturer: syz [ 705.828264][ T189] usb 10-1: SerialNumber: syz [ 705.909497][ T189] usb 10-1: config 0 descriptor?? [ 705.956234][ T189] hub 10-1:0.132: bad descriptor, ignoring hub [ 705.956281][ T189] hub 10-1:0.132: probe with driver hub failed with error -5 [ 705.990923][ T189] input: bcm5974 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.132/input/input10 [ 706.019282][T11808] veth0_vlan: entered promiscuous mode [ 706.072068][T11808] veth1_vlan: entered promiscuous mode [ 706.158821][T10459] ocfs2: Unmounting device (7,3) on (node local) [ 706.199368][T11808] veth0_macvtap: entered promiscuous mode [ 706.334109][T11808] veth1_macvtap: entered promiscuous mode [ 706.472530][T11808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 706.539422][T11808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 706.621960][ T6564] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.622535][ T6564] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.631777][ T6564] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.631807][ T6564] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.731571][ T2247] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 706.765094][T12292] loop9: detected capacity change from 0 to 512 [ 706.860993][T12292] EXT4-fs error (device loop9): ext4_validate_block_bitmap:436: comm syz.9.1239: bg 0: block 5: invalid block bitmap [ 706.861034][T12292] loop9: lost filesystem error report for type 5 error -117 [ 706.874782][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 706.874801][ C0] EXT4-fs (loop9): initial error at time 1787292273: ext4_validate_block_bitmap:436 [ 706.874817][ C0] EXT4-fs (loop9): last error at time 1787292273: ext4_validate_block_bitmap:436 [ 706.919197][T12292] EXT4-fs (loop9): Remounting filesystem read-only [ 706.919365][T12292] EXT4-fs (loop9): 2 truncates cleaned up [ 706.920616][T12292] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 707.572514][ T6564] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 707.572545][ T6564] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 707.881153][ T3295] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 707.881183][ T3295] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 708.220279][ T5708] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 709.018622][ T5708] usb 7-1: unable to get BOS descriptor or descriptor too short [ 709.018674][ T5708] usb 7-1: New USB device found, idVendor=0423, idProduct=000a, bcdDevice=5f.d8 [ 709.046801][ T5708] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 709.046842][ T5708] usb 7-1: can't read configurations, error -71 [ 709.177352][ T9107] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 709.279706][T12308] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 709.342723][T12308] kvm: pic: non byte read [ 709.349895][T12308] kvm: pic: level sensitive irq not supported [ 709.351489][T12308] kvm: pic: non byte read [ 710.146233][T12320] loop9: detected capacity change from 0 to 512 [ 710.167620][T12320] EXT4-fs (loop9): Test dummy encryption mode enabled [ 710.181240][T12320] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 710.226240][T12320] EXT4-fs (loop9): 1 truncate cleaned up [ 710.245333][T12320] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 711.272234][T12336] loop8: detected capacity change from 0 to 512 [ 711.288239][T12336] EXT4-fs (loop8): Test dummy encryption mode enabled [ 711.288271][T12336] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 711.347165][T12336] EXT4-fs (loop8): 1 truncate cleaned up [ 711.348725][T12336] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 712.021833][ T2247] usb 4-1: unable to get BOS descriptor or descriptor too short [ 712.021883][ T2247] usb 4-1: New USB device found, idVendor=0423, idProduct=000a, bcdDevice=5f.d8 [ 712.041622][ T2247] usb 4-1: unable to read config index 0 descriptor/start: -32 [ 712.041645][ T2247] usb 4-1: chopping to 0 config(s) [ 712.041676][ T2247] usb 4-1: can't read configurations, error -32 [ 712.171896][ T2247] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 712.298153][T12349] loop6: detected capacity change from 0 to 1024 [ 712.311475][ T2247] usb 4-1: device descriptor read/64, error -32 [ 712.421893][ T2247] usb usb4-port1: attempt power cycle [ 712.761327][ T5708] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 712.769384][ T2247] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 712.793756][ T2247] usb 4-1: device descriptor read/8, error -32 [ 712.943549][ T5708] usb 7-1: Using ep0 maxpacket: 16 [ 712.974252][ T5708] usb 7-1: unable to get BOS descriptor or descriptor too short [ 712.974299][ T5708] usb 7-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 712.995547][ T5708] usb 7-1: config 1 has an invalid descriptor of length 68, skipping remainder of the config [ 712.995612][ T5708] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 68, changing to 7 [ 712.995628][ T5708] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 17440, setting to 1024 [ 713.045729][ T9973] usb 10-1: USB disconnect, device number 14 [ 713.052980][ T5708] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.053000][ T5708] usb 7-1: Product: syz [ 713.053010][ T5708] usb 7-1: Manufacturer: 阓薂퇎豹埩㈖ [ 713.053019][ T5708] usb 7-1: SerialNumber: syz [ 713.372186][ T5708] usb 7-1: Audio class v2/v3 interfaces need an interface association [ 713.384727][ T5708] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 713.686881][T12360] loop3: detected capacity change from 0 to 1024 [ 713.816322][ T5708] usb 7-1: USB disconnect, device number 4 [ 713.906180][T11808] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 714.125993][T12365] FAULT_INJECTION: forcing a failure. [ 714.125993][T12365] name failslab, interval 1, probability 1, space 0, times 0 [ 714.126036][T12365] CPU: 0 UID: 0 PID: 12365 Comm: syz.8.1253 Tainted: G L syzkaller #0 PREEMPT(full) [ 714.126056][T12365] Tainted: [L]=SOFTLOCKUP [ 714.126061][T12365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 714.126068][T12365] Call Trace: [ 714.126074][T12365] [ 714.126080][T12365] dump_stack_lvl+0xe8/0x150 [ 714.126107][T12365] should_fail_ex+0x410/0x560 [ 714.126135][T12365] ? alloc_vmap_area+0x21c/0x1420 [ 714.126155][T12365] should_failslab+0xa8/0x100 [ 714.126172][T12365] ? alloc_vmap_area+0x21c/0x1420 [ 714.126189][T12365] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 714.126211][T12365] ? alloc_vmap_area+0x21c/0x1420 [ 714.126232][T12365] alloc_vmap_area+0x21c/0x1420 [ 714.126258][T12365] ? __pfx_alloc_vmap_area+0x10/0x10 [ 714.126274][T12365] ? __kmalloc_cache_node_noprof+0x3d1/0x620 [ 714.126288][T12365] ? __kmalloc_cache_node_noprof+0x1f7/0x620 [ 714.126301][T12365] ? __get_vm_area_node+0x155/0x2f0 [ 714.126321][T12365] __get_vm_area_node+0x200/0x2f0 [ 714.126343][T12365] __vmalloc_node_range_noprof+0x343/0x1540 [ 714.126362][T12365] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 714.126381][T12365] ? __lock_acquire+0x6df/0x2e50 [ 714.126410][T12365] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 714.126435][T12365] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 714.126449][T12365] __vmalloc_noprof+0xd2/0x120 [ 714.126468][T12365] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 714.126485][T12365] bpf_prog_alloc_no_stats+0x47/0x560 [ 714.126499][T12365] ? bpf_prog_alloc+0x2a/0x1a0 [ 714.126516][T12365] bpf_prog_alloc+0x3c/0x1a0 [ 714.126540][T12365] bpf_prog_load+0x7f8/0x1c20 [ 714.126562][T12365] ? __pfx_bpf_prog_load+0x10/0x10 [ 714.126592][T12365] __sys_bpf+0xd0d/0xd90 [ 714.126611][T12365] ? __pfx___sys_bpf+0x10/0x10 [ 714.126632][T12365] ? __fget_files+0x2a/0x420 [ 714.126660][T12365] ? ksys_write+0x242/0x270 [ 714.126681][T12365] ? __pfx_ksys_write+0x10/0x10 [ 714.126703][T12365] __x64_sys_bpf+0xba/0xd0 [ 714.126718][T12365] do_syscall_64+0x166/0x520 [ 714.126738][T12365] ? trace_irq_disable+0x3b/0x140 [ 714.126751][T12365] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 714.126767][T12365] ? clear_bhb_loop+0x70/0xc0 [ 714.126784][T12365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 714.126798][T12365] RIP: 0033:0x7f118bf9e0d9 [ 714.126812][T12365] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 714.126824][T12365] RSP: 002b:00007f118cdce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 714.126841][T12365] RAX: ffffffffffffffda RBX: 00007f118c225fa0 RCX: 00007f118bf9e0d9 [ 714.126852][T12365] RDX: 0000000000000094 RSI: 0000200000000880 RDI: 0000000000000005 [ 714.126862][T12365] RBP: 00007f118cdce090 R08: 0000000000000000 R09: 0000000000000000 [ 714.126871][T12365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 714.126879][T12365] R13: 00007f118c226038 R14: 00007f118c225fa0 R15: 00007ffc620922c8 [ 714.126900][T12365] [ 714.183895][ T2247] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 714.188808][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 714.288288][T12365] syz.8.1253: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 714.288529][T12365] CPU: 0 UID: 0 PID: 12365 Comm: syz.8.1253 Tainted: G L syzkaller #0 PREEMPT(full) [ 714.288549][T12365] Tainted: [L]=SOFTLOCKUP [ 714.288554][T12365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 714.288562][T12365] Call Trace: [ 714.288568][T12365] [ 714.288573][T12365] dump_stack_lvl+0xe8/0x150 [ 714.288598][T12365] warn_alloc+0x24d/0x270 [ 714.288620][T12365] ? lockdep_hardirqs_on+0x7b/0x110 [ 714.288640][T12365] ? __pfx_warn_alloc+0x10/0x10 [ 714.288658][T12365] ? kfree+0x1c5/0x650 [ 714.288679][T12365] ? __get_vm_area_node+0x219/0x2f0 [ 714.288700][T12365] __vmalloc_node_range_noprof+0x36b/0x1540 [ 714.288719][T12365] ? __lock_acquire+0x6df/0x2e50 [ 714.288745][T12365] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 714.288768][T12365] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 714.288782][T12365] __vmalloc_noprof+0xd2/0x120 [ 714.288800][T12365] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 714.288816][T12365] bpf_prog_alloc_no_stats+0x47/0x560 [ 714.288829][T12365] ? bpf_prog_alloc+0x2a/0x1a0 [ 714.288844][T12365] bpf_prog_alloc+0x3c/0x1a0 [ 714.288859][T12365] bpf_prog_load+0x7f8/0x1c20 [ 714.288886][T12365] ? __pfx_bpf_prog_load+0x10/0x10 [ 714.288914][T12365] __sys_bpf+0xd0d/0xd90 [ 714.288933][T12365] ? __pfx___sys_bpf+0x10/0x10 [ 714.288962][T12365] ? __fget_files+0x2a/0x420 [ 714.288988][T12365] ? ksys_write+0x242/0x270 [ 714.289008][T12365] ? __pfx_ksys_write+0x10/0x10 [ 714.289029][T12365] __x64_sys_bpf+0xba/0xd0 [ 714.289044][T12365] do_syscall_64+0x166/0x520 [ 714.289060][T12365] ? trace_irq_disable+0x3b/0x140 [ 714.289089][T12365] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 714.289103][T12365] ? clear_bhb_loop+0x70/0xc0 [ 714.289118][T12365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 714.289131][T12365] RIP: 0033:0x7f118bf9e0d9 [ 714.289144][T12365] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 714.289155][T12365] RSP: 002b:00007f118cdce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 714.289170][T12365] RAX: ffffffffffffffda RBX: 00007f118c225fa0 RCX: 00007f118bf9e0d9 [ 714.289179][T12365] RDX: 0000000000000094 RSI: 0000200000000880 RDI: 0000000000000005 [ 714.289188][T12365] RBP: 00007f118cdce090 R08: 0000000000000000 R09: 0000000000000000 [ 714.289196][T12365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 714.289204][T12365] R13: 00007f118c226038 R14: 00007f118c225fa0 R15: 00007ffc620922c8 [ 714.289223][T12365] [ 714.289276][T12365] Mem-Info: [ 714.289283][T12365] active_anon:11058 inactive_anon:0 isolated_anon:0 [ 714.289283][T12365] active_file:4379 inactive_file:65851 isolated_file:0 [ 714.289283][T12365] unevictable:0 dirty:349 writeback:0 [ 714.289283][T12365] slab_reclaimable:11607 slab_unreclaimable:102375 [ 714.289283][T12365] mapped:33465 shmem:2403 pagetables:1750 [ 714.289283][T12365] sec_pagetables:0 bounce:0 [ 714.289283][T12365] kernel_misc_reclaimable:0 [ 714.289283][T12365] free:1285542 free_pcp:10694 free_cma:0 [ 714.289317][T12365] Node 0 active_anon:44232kB inactive_anon:0kB active_file:17516kB inactive_file:263196kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:133860kB dirty:1392kB writeback:0kB shmem:9612kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13632kB pagetables:6876kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 714.289351][T12365] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 714.289383][T12365] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 714.289419][T12365] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 714.289442][T12365] Node 0 DMA32 free:1181396kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:44232kB inactive_anon:0kB active_file:17516kB inactive_file:263196kB unevictable:0kB writepending:1392kB zspages:0kB present:3129332kB managed:2546748kB mlocked:0kB bounce:0kB free_pcp:42776kB local_pcp:42776kB free_cma:0kB [ 714.289480][T12365] lowmem_reserve[]: 0 0 0 0 0 [ 714.289501][T12365] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 714.289535][T12365] lowmem_reserve[]: 0 0 0 0 0 [ 714.289556][T12365] Node 1 Normal free:3945412kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 714.289592][T12365] lowmem_reserve[]: 0 0 0 0 0 [ 714.289613][T12365] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 714.289685][T12365] Node 0 DMA32: 2556*4kB (UME) 789*8kB (UME) 1203*16kB (ME) 1215*32kB [ 714.321222][ T5622] udevd[5622]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 714.332661][ T2247] usb 4-1: device descriptor read/64, error -32 [ 714.637981][T12365] (UME) 498*64kB (UME) 179*128kB (UME) 117*256kB (UM) 40*512kB (ME) 10*1024kB (UME) 12*2048kB (UME) 236*4096kB (UM) = 1181352kB [ 714.638059][T12365] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 714.638122][T12365] Node 1 Normal: 1*4kB (M) 4*8kB (UM) 8*16kB (UM) 7*32kB (UM) 9*64kB (UM) 4*128kB (UM) 4*256kB (UM) 5*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 961*4096kB (M) = 3945412kB [ 714.638219][T12365] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 714.638229][T12365] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 714.638240][T12365] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 714.638250][T12365] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 714.638260][T12365] 72404 total pagecache pages [ 714.638265][T12365] 0 pages in swap cache [ 714.638269][T12365] Free swap = 124996kB [ 714.638275][T12365] Total swap = 124996kB [ 714.638280][T12365] 2097051 pages RAM [ 714.638285][T12365] 0 pages HighMem/MovableOnly [ 714.638290][T12365] 428748 pages reserved [ 714.638294][T12365] 0 pages cma reserved [ 715.197612][ T2247] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 715.346524][ T2247] usb 4-1: Using ep0 maxpacket: 16 [ 715.430274][ T2247] usb 4-1: unable to get BOS descriptor or descriptor too short [ 715.430324][ T2247] usb 4-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 715.472418][ T2247] usb 4-1: config 1 has an invalid descriptor of length 68, skipping remainder of the config [ 715.472489][ T2247] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 68, changing to 7 [ 715.472517][ T2247] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 17440, setting to 1024 [ 715.537008][ T2247] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.537042][ T2247] usb 4-1: Product: syz [ 715.537062][ T2247] usb 4-1: Manufacturer: 阓薂퇎豹埩㈖ [ 715.537075][ T2247] usb 4-1: SerialNumber: syz [ 715.925214][ T2247] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 715.938942][ T2247] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 716.026196][ T30] audit: type=1800 audit(1787292283.020:536): pid=12371 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1255" name="bus" dev="tmpfs" ino=40 res=0 errno=0 [ 716.094410][ T9107] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 716.213159][T12371] [ 716.215536][T12371] ====================================================== [ 716.222560][T12371] WARNING: possible circular locking dependency detected [ 716.229718][T12371] syzkaller #0 Tainted: G L [ 716.235875][T12371] ------------------------------------------------------ [ 716.243897][T12371] syz.8.1255/12371 is trying to acquire lock: [ 716.250062][T12371] ffff8880794e3378 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}, at: ima_file_truncate+0xb6/0x170 [ 716.260519][T12371] [ 716.260519][T12371] but task is already holding lock: [ 716.268777][T12371] ffff88804ba72460 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 716.277525][T12371] [ 716.277525][T12371] which lock already depends on the new lock. [ 716.277525][T12371] [ 716.287960][T12371] [ 716.287960][T12371] the existing dependency chain (in reverse order) is: [ 716.296993][T12371] [ 716.296993][T12371] -> #4 (sb_writers#5){.+.+}-{0:0}: [ 716.304666][T12371] sb_start_write+0x4d/0x1d0 [ 716.309792][T12371] mnt_want_write+0x41/0x90 [ 716.314810][T12371] lookup_open+0x1e6/0x1a40 [ 716.319834][T12371] path_openat+0x677/0x1d60 [ 716.324845][T12371] do_file_open+0x23e/0x4a0 [ 716.329871][T12371] filp_open+0x16d/0x1d0 [ 716.334627][T12371] fsg_lun_open+0x6c/0xdf0 [ 716.339715][T12371] fsg_store_file+0x19e/0x400 [ 716.345027][T12371] configfs_write_iter+0x337/0x430 [ 716.350710][T12371] vfs_write+0x612/0xba0 [ 716.355647][T12371] ksys_write+0x150/0x270 [ 716.360580][T12371] do_syscall_64+0x166/0x520 [ 716.365702][T12371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 716.372104][T12371] [ 716.372104][T12371] -> #3 (&common->filesem){++++}-{4:4}: [ 716.379837][T12371] down_read+0x4a/0x330 [ 716.384528][T12371] fsg_show_file+0x2d/0x140 [ 716.389694][T12371] configfs_read_iter+0x2b7/0x620 [ 716.395276][T12371] __kernel_read+0x4ca/0x960 [ 716.400564][T12371] integrity_kernel_read+0x89/0xd0 [ 716.406193][T12371] ima_calc_file_hash+0x451/0x890 [ 716.411863][T12371] ima_collect_measurement+0x51b/0xa00 [ 716.417877][T12371] process_measurement+0x1272/0x1c10 [ 716.423730][T12371] ima_file_check+0xe1/0x130 [ 716.428896][T12371] security_file_post_open+0xb3/0x260 [ 716.434875][T12371] path_openat+0x1485/0x1d60 [ 716.440193][T12371] do_file_open+0x23e/0x4a0 [ 716.445838][T12371] do_sys_openat2+0x115/0x200 [ 716.451041][T12371] __x64_sys_openat+0x138/0x170 [ 716.456408][T12371] do_syscall_64+0x166/0x520 [ 716.461525][T12371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 716.467982][T12371] [ 716.467982][T12371] -> #2 (&p->frag_sem){.+.+}-{4:4}: [ 716.475456][T12371] down_read+0x4a/0x330 [ 716.480154][T12371] configfs_read_iter+0x1cc/0x620 [ 716.485950][T12371] __kernel_read+0x4ca/0x960 [ 716.491251][T12371] integrity_kernel_read+0x89/0xd0 [ 716.497065][T12371] ima_calc_file_hash+0x451/0x890 [ 716.503681][T12371] ima_collect_measurement+0x51b/0xa00 [ 716.509826][T12371] process_measurement+0x1272/0x1c10 [ 716.515925][T12371] ima_file_check+0xe1/0x130 [ 716.521054][T12371] security_file_post_open+0xb3/0x260 [ 716.527045][T12371] path_openat+0x1485/0x1d60 [ 716.532292][T12371] do_file_open+0x23e/0x4a0 [ 716.537313][T12371] do_sys_openat2+0x115/0x200 [ 716.542796][T12371] __x64_sys_openat+0x138/0x170 [ 716.548377][T12371] do_syscall_64+0x166/0x520 [ 716.553704][T12371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 716.560298][T12371] [ 716.560298][T12371] -> #1 (&buffer->mutex){+.+.}-{4:4}: [ 716.567875][T12371] __mutex_lock+0x19d/0x1550 [ 716.573097][T12371] configfs_read_iter+0x70/0x620 [ 716.578991][T12371] __kernel_read+0x4ca/0x960 [ 716.584129][T12371] integrity_kernel_read+0x89/0xd0 [ 716.589792][T12371] ima_calc_file_hash+0x451/0x890 [ 716.595358][T12371] ima_collect_measurement+0x51b/0xa00 [ 716.601349][T12371] process_measurement+0x1272/0x1c10 [ 716.607240][T12371] ima_file_check+0xe1/0x130 [ 716.612378][T12371] security_file_post_open+0xb3/0x260 [ 716.618320][T12371] path_openat+0x1485/0x1d60 [ 716.623438][T12371] do_file_open+0x23e/0x4a0 [ 716.628474][T12371] do_sys_openat2+0x115/0x200 [ 716.633672][T12371] __x64_sys_openat+0x138/0x170 [ 716.639128][T12371] do_syscall_64+0x166/0x520 [ 716.644421][T12371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 716.651118][T12371] [ 716.651118][T12371] -> #0 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}: [ 716.659747][T12371] __lock_acquire+0x15ff/0x2e50 [ 716.665146][T12371] lock_acquire+0x115/0x350 [ 716.670180][T12371] __mutex_lock+0x19d/0x1550 [ 716.675318][T12371] ima_file_truncate+0xb6/0x170 [ 716.680709][T12371] security_file_truncate+0x118/0x240 [ 716.686631][T12371] path_openat+0x1569/0x1d60 [ 716.691739][T12371] do_file_open+0x23e/0x4a0 [ 716.696765][T12371] do_sys_openat2+0x115/0x200 [ 716.702049][T12371] __x64_sys_creat+0x8f/0xc0 [ 716.707168][T12371] do_syscall_64+0x166/0x520 [ 716.712301][T12371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 716.720149][T12371] [ 716.720149][T12371] other info that might help us debug this: [ 716.720149][T12371] [ 716.730819][T12371] Chain exists of: [ 716.730819][T12371] &ima_iint_mutex_key[depth] --> &common->filesem --> sb_writers#5 [ 716.730819][T12371] [ 716.744917][T12371] Possible unsafe locking scenario: [ 716.744917][T12371] [ 716.752382][T12371] CPU0 CPU1 [ 716.757758][T12371] ---- ---- [ 716.763220][T12371] rlock(sb_writers#5); [ 716.767471][T12371] lock(&common->filesem); [ 716.774495][T12371] lock(sb_writers#5); [ 716.781199][T12371] lock(&ima_iint_mutex_key[depth]); [ 716.786697][T12371] [ 716.786697][T12371] *** DEADLOCK *** [ 716.786697][T12371] [ 716.794862][T12371] locks held by syz.8.1255/12371: 1, last CPU#0: [ 716.801377][T12371] #0: ffff88804ba72460 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 716.810526][T12371] [ 716.810526][T12371] stack backtrace: [ 716.816521][T12371] CPU: 0 UID: 0 PID: 12371 Comm: syz.8.1255 Tainted: G L syzkaller #0 PREEMPT(full) [ 716.827473][T12371] Tainted: [L]=SOFTLOCKUP [ 716.831800][T12371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 716.841887][T12371] Call Trace: [ 716.845163][T12371] [ 716.848096][T12371] dump_stack_lvl+0xe8/0x150 [ 716.852687][T12371] print_circular_bug+0x2e2/0x300 [ 716.857711][T12371] check_noncircular+0x12f/0x150 [ 716.862646][T12371] __lock_acquire+0x15ff/0x2e50 [ 716.867494][T12371] ? kasan_quarantine_put+0xbb/0x1f0 [ 716.872775][T12371] lock_acquire+0x115/0x350 [ 716.877266][T12371] ? ima_file_truncate+0xb6/0x170 [ 716.882285][T12371] __mutex_lock+0x19d/0x1550 [ 716.887055][T12371] ? ima_file_truncate+0xb6/0x170 [ 716.892100][T12371] ? ima_file_truncate+0xb6/0x170 [ 716.897137][T12371] ? __pfx___mutex_lock+0x10/0x10 [ 716.902166][T12371] ? apparmor_file_truncate+0x39f/0x470 [ 716.907723][T12371] ? __pfx_apparmor_file_truncate+0x10/0x10 [ 716.914093][T12371] ima_file_truncate+0xb6/0x170 [ 716.919057][T12371] security_file_truncate+0x118/0x240 [ 716.924465][T12371] path_openat+0x1569/0x1d60 [ 716.929123][T12371] do_file_open+0x23e/0x4a0 [ 716.933903][T12371] ? __pfx_do_file_open+0x10/0x10 [ 716.939083][T12371] ? _raw_spin_unlock+0x28/0x50 [ 716.944479][T12371] ? alloc_fd+0x651/0x6c0 [ 716.948845][T12371] do_sys_openat2+0x115/0x200 [ 716.953629][T12371] ? sched_clock+0x41/0x60 [ 716.958129][T12371] ? __pfx_do_sys_openat2+0x10/0x10 [ 716.963561][T12371] ? rcu_is_watching+0x16/0xb0 [ 716.968358][T12371] __x64_sys_creat+0x8f/0xc0 [ 716.972974][T12371] do_syscall_64+0x166/0x520 [ 716.978115][T12371] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 716.984221][T12371] ? clear_bhb_loop+0x70/0xc0 [ 716.988999][T12371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 716.995679][T12371] RIP: 0033:0x7f118bf9e0d9 [ 717.000109][T12371] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 717.019907][T12371] RSP: 002b:00007f118cdce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 717.028349][T12371] RAX: ffffffffffffffda RBX: 00007f118c225fa0 RCX: 00007f118bf9e0d9 [ 717.036312][T12371] RDX: 0000000000000000 RSI: 0000000000000084 RDI: 0000200000000200 [ 717.044635][T12371] RBP: 00007f118c035024 R08: 0000000000000000 R09: 0000000000000000 [ 717.052690][T12371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 717.061107][T12371] R13: 00007f118c226038 R14: 00007f118c225fa0 R15: 00007ffc620922c8 [ 717.069287][T12371] [ 717.146571][ T2247] usb 4-1: USB disconnect, device number 25 [ 717.189069][ T5622] udevd[5622]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 721.873607][ T5280] 8021q: adding VLAN 0 to HW filter on device eth6 [ 722.580309][ T5280] 8021q: adding VLAN 0 to HW filter on device eth7 [ 722.829464][ T5280] 8021q: adding VLAN 0 to HW filter on device eth8 [ 723.079173][ T5280] 8021q: adding VLAN 0 to HW filter on device eth9 [ 723.332810][ T5280] 8021q: adding VLAN 0 to HW filter on device eth10 [ 723.585150][ T5280] 8021q: adding VLAN 0 to HW filter on device eth11 [ 723.839289][ T5280] 8021q: adding VLAN 0 to HW filter on device eth12