last executing test programs: 9m17.743995139s ago: executing program 1 (id=923): socket$packet(0x11, 0x3, 0x300) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1300000005000000100000005f74000088000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = semget$private(0x0, 0x2, 0x2) mount$9p_unix(&(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000500), 0xa0040, &(0x7f0000000780)=ANY=[@ANYBLOB="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"]) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)=@o_path={&(0x7f0000000340)='./cgroup\x00', 0x0, 0x4010}, 0x18) semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000000)) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./cgroup\x00', &(0x7f00000004c0)='hpfs\x00', 0xc4, 0x0) 9m16.545424731s ago: executing program 1 (id=927): r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$int_out(r0, 0x5460, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x20000000000000cc) read$FUSE(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = openat$dsp1(0xffffffffffffff9c, 0x0, 0x20080, 0x0) dup2(r2, r2) syz_usb_connect(0x1, 0x2d, 0x0, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r4, 0x0, 0x2001) sendmmsg$inet(r3, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000002c0)="91199893b794f675ec88239fef317c764ee3a8ecbdc2a8c32d46f77944d1de9f924d05d3566b8eb8f5750393c669559d05543efa2927ef0d2b10e3d4f8541f34e1c7c8ca2d1e811f67f3dc50fdd469af72a49e684e28a364f5da124dff2b55a5536aa670b82da70bf0f19cd420371848ddc41d65649fde307c1971599f2fec84845e32bb2b6ebda099de12e8b64842024389524a1c5a97608000d1030d99e2a6e23a0bc8", 0xa4}, {&(0x7f0000000380)="11a68683394e1541cc444dff7adf30f079408cb066a6f8f4d33c4f11850de78c586d1a2ccff92e8e83fb82e447d9b88de42182e9e8c97415f41ef8a504215a2b2fdb1404c9659fdb988d0f527c3675cf2b", 0x51}, {&(0x7f0000000400)="875ad17d55c11f1ea6ec6cd17661afc73209e32142961e4660591bf3ca40d05a507ac0b0e71f7ed4c63f52a003cc8102f20dc6e33b5dc6de64ac815cf87867507cc072f0cb762aa5deb8731a699d3c7c69f85266ba51eb244f20129de491adaeb0c2d2eb13c1f215ddff92b05148f0ad513018b14798e45e55ecb916d4dd89f2df7e33c470998f325bf453f929d86196", 0x90}, {&(0x7f00000004c0)="1273dd9951adeaefffe3c4957c86dbff8693adf2202b620b3aec000cf330bb7249", 0x21}, {&(0x7f0000000500)="4167c4fd9ea8b423c01e798bbd631e888a04e31e6865a2d55b31833b82989759c0f3241bb5ebe979636a5f22244112d95d11a07cb172724ec37ef9faaf227d64f5190c9d82dfe194b2cf6d77e917e513170fa1e8e4c82dd9898b4ad23e677261595ec62844104d7ca15aa7eec90685ad92f2cd5b745910e47d703315a0d1d3a6d143575da2604e54bb1ddb295e590a1392770befa52aaf1651d375682bcf94e5da4ea37e1cde1d2a80890d896cfe4d08801bc50d9bc08480de2b2710b694ff7fb5bda12cd8a8cb8dc18bf0c265b71aef50ec0ee22e1968a4f3487d8487026bc2b721692064dcfdd1b6b6aec3e8da3d0ab7d3cc51e2db33c169e6354ea425fbfc1bc39057e64d3aff3749d60edcf0a50fe0e973b5ee3a7cd45ad967564fdbc9832869346037dabe420448b5089ab553c2c87e94befac8d3a0c2a56ca2ab778c2f34f571217c837580e8a524db35baea8024482bb32306182faaf39bb1c4e992c4440889e274952ed3d17d5e87224fec8048e6b7344270e046ab2fdda270ad4e5f651fd6eede5d42d9599265520d45d6f500fd733372a62ab4f496b56839b0d6418961a3b6016c26409daba4f2beeceeb38cc6ba75f57e8ee45d8a6c2ecc031c9469d937b9d7db91ded158ebd7f7d512d445f4104130a429ce7fce52d3fec37df953fc6e6adaa781b820b4bb6d4ffd2c10a16f9583890118793bae09157d3ac5625ad8e66a367488e2722bb82161661711d91a5540a92e3de7506861875575d40465cda28989cbc46fb3d80c2bc7e96afbde1cbd2e89103c55bde669c77b774ea570b26e93a1be5e50269ea5f3355869ac5a9701ac0e7d8f69b0a3186e118c6e2ce8e946c95bd729d94d237e5915e2711cc82826f147176a8a0555b9e11fb9a8ad736d016d202cea43b10a5102e48387ab70069b876051ac0557528c14748aa9cc0e0d9bf512533bdc83610d9f801ec4ed512a4a877e2f45b0cbe87ee25a314d481153eefe8643fb2f3e0478353552b0ae863635ab12e7bf0e4f046e8ba9cb7ce3189d52b2a27ff9e4eb5bf8b12d09d610705eec149589bdd38c951de63de4e3065e45eeb261a72c980349387514cb42467e1fe5812abaf4670e993c6fb561e5cccf7a472ee874bbfe73412bc63f706424f174afd1a3f16fb8b8305d932d33ab211d473d210b87e2f20b6ba951a2b98206793c04516fd57fc7365cec4a1831548470ebefe7f9487cc7b287b2f45eb69b4e165b9f3404d8ac84b2b57ace34de669a85fd885ecb055a6fd2ba5d5396737c702c082bfb35f3ccace91eacfc7a71b2bca1e228170ad6d194aa7c2dc2cf5f0bce153ac1befb2b82e6cf1f12d28812e309f5da0dbe1cad03172d296fa13247b1952ec988316f668aa65e1ca7e9e383b115ce5c25130955c118a0b4567bd180c07ce18bd0c459cc33ed7ba1c43262034a60711315ed81bbc95b7e3088dbd22b976fcd18bae330f08c89236f770478305fac20b5d9bd5cbc98c5c0f9713345c7362bc0e0bc78d212433bcdc6142989bc6ab82160df897825aa906d739dac905a434c90b2cbc72223011ea11480278b681cdcdf5fa63ac5f8b8f1f3ef7d4eb02f422e9fc52b98163630cd2f130f076a33bb011bb8e42800c9475f5cbee042b79fda44b6432b126f085a17553b82d9cae519ec239a9cccb99444f24b8f11e255e31e0d53a28e36949a3f8238c2ea3f4e3d8cf3b85b031c962504d00a4e7928b5fa2fab311bcc54d68738086ce70a8e5bdaf425033036a85e59aa3bb1b01f8b6c6a2e221c69e48565b55a196b2dc9cb067b4ccf8a7c81e31795a8b74e8940455126f19c8bbb9b941cc66c9443fd13e20c2074a9c3bc1740262c1fcb8e9ca5ac5729dfe6e25561eba41ccae8ca2e851affc1ab4ec912925ef7ccf72e97c577413260ccda170d75741336f837258a59da907460a2917f652c6e4ebc0467da8a95f2ceae9afcc4e0d1f4b95fc68b2f5e32af96fb12a8e7f3140dd235a30e5ad94e78cf58ad75ca8a871a70820090ba510e7563c0f78cf364369a51fa6683ff8d24924ceb922927eb0ba1395b7a4f37d92913a9688ef8428a887f1161f10aeab749f5ea8ca24e579008f542a9b785841dae071b94b5a8ba79985930f60ac2c93aa002d84b212e2e2b6c9c2a0694595dad99fd1f27d0044481ef5b364a059599ef982a114a61094b3b7d0f9a7b78d7615cc8573430e676987ab7421fde9abeb29e4529beb6a2724bed86a7b1d27ee73585892f083fad4307696a4166356b9c20a9579bbf3e8cda9ad7ec2b2bb973d05cf8d9457dc03eee2cfbf630dd917768ae652c0627e32ebb4c62951dfbd8e074dfdf02c5517ace50d5813c8d8d7f1fc0fc63a4fae5c2bcf26560c627500e03692384630be287790d545403adc500ef732d66e269b8b051aa57bb865a9b709c7a0426188daf29caf1d062b104592b4f6acc86895956d8085424dba0bfafdf900419f2227db1eca75b338091d23da2067566c6d54de1604bf8d4cce8a0b4484c4645a305861bc46ebccafbe500e01d51236b40027d1b2c7a72937b15899bb982c880d83ed6b70502bd0d68d2a2146a85c6518a11c386df610243ec513e7a284a81c841f9201ee3b9d3a8f44cdf52ec842e07c1f2f35e2a5b17278dce1f9b7fa09866ecb0d2e78fc8095b7dee81d3e308fd10a1490036194bfa89c118bd9c72d4747b90724d7bd0a7ead28c89c23cc6667c1a8b362ca5385d24b2c1265957764a4e46176365a5348bcf85c457921e7fa6c9e165b6c4d8bd9e8782c96839a5fd2679cd08f656ca5b41d00f8429d517a0d776049918e73b4a258fd2a1576b6420b67fc9ff3520556881ef4838e973f552edebde686af1d55e6172e5bb9b01543d32c0c7753b380dd9ed3f5c0b663a9b1bcb4bd36a365172aeee96a8d69c1e5c5b6c88fc9453ace6aa24bdfc1cfa27ea8cc36c80cace296259545a4e155d154ccbf00ae4ff912c583c871b7cdb46813584ea14bb6943d16b3f12e8fe149076e5e646e1dca0bf121a2e2fa09816e9056aa1143988ff17c21c49981445d98d88fd4bba6a59d9f97d301d90e3754103389b36308713c1ba31031e42f2d759343a95bbae9c01a3bb3e6b537b658d1c028c8ec3126bf79db223a3320e25a671ef834c924f02c1bbab338517accb8378f945cb1d65d4dff90f1e3af8168e33a5a124aef715b656075f6a62099afa110f2fe5eb83e0b3e36df91be2125be6500e5f3a81f8bc116f42734c784f6bb6c7e968610243b06026a9def4e85f8344fae36602aa3795cf71ecf7e57a3da0bef859daf649abc6390e86edaa84eefe48999ddba9067b90dd5ea2477f150ab588dadfe79ab7524157d1b94c738ca3345ce8657bfac981cb30b7c0f05f96dafcdce3e41471943609b121de1eda3e95a1c31bada084beec699512c7d5cec71e06a57c177ca1f383120bf46a9c805c9220d3d0c6807d60e6b7f9c80de1d815bdf1ebe62338862719eab55ef4971a69c76aa2f25c3c9d0c2e5c7857a86f9ab26c3c6aa395f2c366548f60a40abbe14dd011358d9b3695b8a091e16552478aeee1e2e91abd67deeb15732f428c3304a2bf2e4cbb3768875b35d126ca46d29e506ee1e0aba7a17eba27c19d7626064c0a17d7ee7f2f220e5e28bd7d691dffa84f2a2f92c924b87da382ae9a688ad4322fa0cc72604fc43e17002b8f3844a7431205de46818310d0fcf4676f45c9941dde767c9a4376e13cd7e91308cc0df25a4c79e390674fa0161695cc9e9bee12620d8571a4b3800370cd01bf0546758a048563539edf15d58b108159ea5fe0f038281c7855bbd92cc86de38df60b8597f4bce4ae9cae1647b5024bfb73630cdf4d1827a5f0ff779a1e6c6efbc6561d06b249986703b9dc61a63e2068e4786e6a8be34a808143301ef00f21bee8399d88ecffddb4867790d4d1cbe827a5a220834ba831d3ba424ff8fc9a99b175d2feca9f581e24bb69bdc4f64a6ea0c9c37d6976d15e9388519a2bed100a2a8358215a8b63b6e25a677875ee2bc3fd9c77783b39a166b863376b496775b83804a2c7f5363cca9ade819034afc2f7b40ffc316089556dec2e55e1bd92c9b905d6b1b9160d6c492d4384acd7e380874939b1ab02dbbacfbedd74cd524b4eab643e8b92d38d9fae446afd8d774d1c933bce8c341f0ff283acec3bbbbfdb06a15eb88ca6600542dda45334a374e31bae", 0xba7}], 0x5}}], 0x300, 0x0) 9m13.331353981s ago: executing program 1 (id=930): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) getpid() r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCSFEATURE(r1, 0xc0404806, 0x0) 9m12.269242278s ago: executing program 1 (id=935): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x3c, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40800}, 0x40000) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r2, 0x0, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x40) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000800)) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x628}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x3c, r2, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x10}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000a40), 0xffffffffffffffff) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "04f154f4b775b7d8edd68e58a1ee3e72"}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x440a1) syz_emit_ethernet(0xcf, &(0x7f0000000d00)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @remote, @val={@val={0x88a8, 0x0, 0x1, 0x2}, {0x8100, 0x6, 0x0, 0x3}}, {@mpls_mc={0x8848, {[{0x9, 0x0, 0x1}, {0x9}, {0x81}, {0x6, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0xe}, {0x7}, {0x101}, {0x4}, {0x8, 0x0, 0x1}], @ipv4=@tipc={{0x1b, 0x4, 0x0, 0x30, 0x91, 0x64, 0x0, 0x0, 0x6, 0x0, @multicast1, @multicast1, {[@timestamp={0x44, 0x18, 0x30, 0x0, 0x0, [0x3, 0x4, 0xab38, 0x7ff, 0x8]}, @ssrr={0x89, 0x13, 0xe8, [@broadcast, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x13}, @local]}, @end, @end, @timestamp={0x44, 0x1c, 0x17, 0x0, 0x0, [0x3, 0x3, 0x9, 0x5, 0x8, 0x5]}, @end, @rr={0x7, 0xb, 0x6a, [@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast]}]}}, @payload_direct={{{{0x25, 0x0, 0x1, 0x1, 0x0, 0x8, 0x3, 0x2, 0x4, 0x0, 0x2, 0x1, 0x2, 0x3, 0x6, 0x8, 0x2, 0x4e20, 0x4e21}, 0x1, 0x3}}, [0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000e80)={0xa0, r3, 0x8, 0x70bd28, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x8c, 0x8, 0x0, 0x1, [{0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x32347a72}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x72}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x371b2017}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1a529cd9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x18cb1dde}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xaa}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6a}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x23}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xba}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x54}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6dc37b35}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x32df8d58}]}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x24048050}, 0x4008801) 9m10.851172419s ago: executing program 1 (id=938): syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f00000000c0)='./file1\x00', 0x8488, &(0x7f0000000780), 0xfe, 0x10fd, &(0x7f0000001140)="$eJzs2T9rFEEYBvBnds8/3cqmXwQtLCQknF8ghcK1ttqIpDJVrlL8OH4cTWUf0msRsF9Zb/dO5UTwTm1+PzjmvYd9Z2fKmQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMZsmnkhxUSTtlVZKSdN3F4ipJN+V33tdVSp6eLpaPz+dPlknqb4+XZ0kZuoa2tMf3brfzdt4et48OTu5/WL5+8+rF2dnp+ThNSZfL6/1vpYzrAQAAAH7U76z5z+8HAAAAfmdvFwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf6hvNnU7FVWSknTdxeIqSbel78Y/Wh8AAACwu5Iqz5tt+eoaYONhPjZlnQ/jlzLUR3m3pR8AAAD4pf7WWHz/fb3c3JzHH2S2PpcP2d3Mcni4+j8O+XyS1EmOfpr88vrty+lX+vpv7wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgK/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAAAAAPYKAAD///F61s8=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.stat\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, r1) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) io_setup(0x6, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, 0x0, 0x0) setsockopt$sock_int(r4, 0x1, 0x8, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171, 0x0, 0x0, 0x3a}}], 0x400000000000172, 0x4001c00) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000280)='vxcan1\x00') write$binfmt_script(r0, &(0x7f0000000080), 0xfea7) ftruncate(r0, 0xf88) 9m5.515412952s ago: executing program 1 (id=944): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'veth1_virt_wifi\x00', &(0x7f0000000040)=@ethtool_eee={0x44, 0x1, 0x3, 0x400, 0x3, 0x7, 0x15ac, 0xf, [0x4, 0x8]}}) syz_open_procfs(0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x8, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0xa, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x6, 0x5, 0x4, 0x0, 0x7, 0x3c57, 0x0, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x5, 0x7, 0x83, 0x9, 0x4c74, 0x0, 0x242, 0x2, 0xe, 0x0, 0x400, 0x7, 0x17, 0x21, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x85, 0x6, 0xffff8001, 0x3ff, 0x83, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0x388000, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2b, 0xe, 0x312, 0x78, 0xea4, 0x0, 0xfff, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0xff, 0x0, 0x1000ff, 0x5, 0x1000005, 0x5f31, 0xf, 0xd86, 0x2, 0x4, 0x8, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0xbc2, 0x1, 0xfe000000, 0x8, 0x2, 0x200004, 0x9, 0x3, 0x3, 0x9, 0x4, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x1, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x3, 0x5, 0x800000, 0x1ef, 0x8, 0x8, 0x86, 0x3, 0x3038, 0xff, 0xb, 0x2, 0x2, 0x2, 0x7, 0x20000008, 0x4, 0x16d01, 0x6, 0x38, 0x800003, 0x600, 0x80, 0xbf7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x4a9, 0x5, 0x6, 0xac8, 0x5, 0x7, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x3, 0x5, 0x1b, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x80000000], [0x9, 0xbb33, 0xa, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x3, 0x10000, 0x9, 0x7fff, 0xffff, 0xa620, 0x1, 0x7, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x10000016, 0xffffffff, 0x80000000, 0x5, 0xffffffff, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xae, 0x8, 0x6, 0x226, 0x3, 0x100, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x8, 0x4, 0x5, 0x40b1e, 0xd7, 0x200, 0xffff3441, 0x4]}, 0x45c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @ptr={0x0, 0x0, 0x0, 0x10, 0x4}, @func={0x4, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52}, 0x20) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x40, 0x107, 0xfffffefe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x6, 0xc, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 8m49.920234401s ago: executing program 32 (id=944): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'veth1_virt_wifi\x00', &(0x7f0000000040)=@ethtool_eee={0x44, 0x1, 0x3, 0x400, 0x3, 0x7, 0x15ac, 0xf, [0x4, 0x8]}}) syz_open_procfs(0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x8, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0xa, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x6, 0x5, 0x4, 0x0, 0x7, 0x3c57, 0x0, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x5, 0x7, 0x83, 0x9, 0x4c74, 0x0, 0x242, 0x2, 0xe, 0x0, 0x400, 0x7, 0x17, 0x21, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x85, 0x6, 0xffff8001, 0x3ff, 0x83, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0x388000, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2b, 0xe, 0x312, 0x78, 0xea4, 0x0, 0xfff, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0xff, 0x0, 0x1000ff, 0x5, 0x1000005, 0x5f31, 0xf, 0xd86, 0x2, 0x4, 0x8, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0xbc2, 0x1, 0xfe000000, 0x8, 0x2, 0x200004, 0x9, 0x3, 0x3, 0x9, 0x4, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x1, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x3, 0x5, 0x800000, 0x1ef, 0x8, 0x8, 0x86, 0x3, 0x3038, 0xff, 0xb, 0x2, 0x2, 0x2, 0x7, 0x20000008, 0x4, 0x16d01, 0x6, 0x38, 0x800003, 0x600, 0x80, 0xbf7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x4a9, 0x5, 0x6, 0xac8, 0x5, 0x7, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x3, 0x5, 0x1b, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x80000000], [0x9, 0xbb33, 0xa, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x3, 0x10000, 0x9, 0x7fff, 0xffff, 0xa620, 0x1, 0x7, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x10000016, 0xffffffff, 0x80000000, 0x5, 0xffffffff, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xae, 0x8, 0x6, 0x226, 0x3, 0x100, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x8, 0x4, 0x5, 0x40b1e, 0xd7, 0x200, 0xffff3441, 0x4]}, 0x45c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @ptr={0x0, 0x0, 0x0, 0x10, 0x4}, @func={0x4, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52}, 0x20) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x40, 0x107, 0xfffffefe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x6, 0xc, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 6m46.239847514s ago: executing program 3 (id=1206): r0 = socket$inet(0x2, 0x3, 0x5) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r0, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) connect$inet(r0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x1f4, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x40) 6m45.196991749s ago: executing program 3 (id=1210): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/5, 0x1c000, 0x800, 0x8, 0x2}, 0x1c) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f00000000c0)=0x100, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) bind$xdp(r1, &(0x7f00000001c0)={0x2c, 0x0, r3}, 0x10) socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'team0\x00'}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x100000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000005}, 0x0, 0x0) 6m44.643494823s ago: executing program 3 (id=1211): r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$int_out(r0, 0x5460, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x20000000000000cc) read$FUSE(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = openat$dsp1(0xffffffffffffff9c, 0x0, 0x20080, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x1, 0x2d, 0x0, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) connect$tipc(r3, &(0x7f0000003100)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10) sendmmsg$inet(r3, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000002c0)="91199893b794f675ec88239fef317c764ee3a8ecbdc2a8c32d46f77944d1de9f924d05d3566b8eb8f5750393c669559d05543efa2927ef0d2b10e3d4f8541f34e1c7c8ca2d1e811f67f3dc50fdd469af72a49e684e28a364f5da124dff2b55a5536aa670b82da70bf0f19cd420371848ddc41d65649fde307c1971599f2fec84845e32bb2b6ebda099de12e8b64842024389524a1c5a97608000d1030d99e2a6e23a0bc8", 0xa4}, {&(0x7f0000000380)="11a68683394e1541cc444dff7adf30f079408cb066a6f8f4d33c4f11850de78c586d1a2ccff92e8e83fb82e447d9b88de42182e9e8c97415f41ef8a504215a2b2fdb1404c9659fdb988d0f527c3675cf2b", 0x51}, {&(0x7f0000000400)="875ad17d55c11f1ea6ec6cd17661afc73209e32142961e4660591bf3ca40d05a507ac0b0e71f7ed4c63f52a003cc8102f20dc6e33b5dc6de64ac815cf87867507cc072f0cb762aa5deb8731a699d3c7c69f85266ba51eb244f20129de491adaeb0c2d2eb13c1f215ddff92b05148f0ad513018b14798e45e55ecb916d4dd89f2df7e33c470998f325bf453f929d86196", 0x90}, {&(0x7f00000004c0)="1273dd9951adeaefffe3c4957c86dbff8693adf2202b620b3aec000cf330bb7249", 0x21}, {&(0x7f0000000500)="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", 0xba7}], 0x5}}], 0x300, 0x0) 6m38.693329322s ago: executing program 3 (id=1221): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$int_out(0xffffffffffffffff, 0x5460, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x20000000000000cc) read$FUSE(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_usb_connect(0x1, 0x2d, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r2, 0x0, 0x2001) connect$tipc(r1, &(0x7f0000003100)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10) sendmmsg$inet(r1, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000002c0)="91199893b794f675ec88239fef317c764ee3a8ecbdc2a8c32d46f77944d1de9f924d05d3566b8eb8f5750393c669559d05543efa2927ef0d2b10e3d4f8541f34e1c7c8ca2d1e811f67f3dc50fdd469af72a49e684e28a364f5da124dff2b55a5536aa670b82da70bf0f19cd420371848ddc41d65649fde307c1971599f2fec84845e32bb2b6ebda099de12e8b64842024389524a1c5a97608000d1030d99e2a6e23a0bc8", 0xa4}, {&(0x7f0000000380)="11a68683394e1541cc444dff7adf30f079408cb066a6f8f4d33c4f11850de78c586d1a2ccff92e8e83fb82e447d9b88de42182e9e8c97415f41ef8a504215a2b2fdb1404c9659fdb988d0f527c3675cf2b", 0x51}, {&(0x7f0000000400)="875ad17d55c11f1ea6ec6cd17661afc73209e32142961e4660591bf3ca40d05a507ac0b0e71f7ed4c63f52a003cc8102f20dc6e33b5dc6de64ac815cf87867507cc072f0cb762aa5deb8731a699d3c7c69f85266ba51eb244f20129de491adaeb0c2d2eb13c1f215ddff92b05148f0ad513018b14798e45e55ecb916d4dd89f2df7e33c470998f325bf453f929d86196", 0x90}, {&(0x7f00000004c0)="1273dd9951adeaefffe3c4957c86dbff8693adf2202b620b3aec000cf330bb7249", 0x21}, {&(0x7f0000000500)="4167c4fd9ea8b423c01e798bbd631e888a04e31e6865a2d55b31833b82989759c0f3241bb5ebe979636a5f22244112d95d11a07cb172724ec37ef9faaf227d64f5190c9d82dfe194b2cf6d77e917e513170fa1e8e4c82dd9898b4ad23e677261595ec62844104d7ca15aa7eec90685ad92f2cd5b745910e47d703315a0d1d3a6d143575da2604e54bb1ddb295e590a1392770befa52aaf1651d375682bcf94e5da4ea37e1cde1d2a80890d896cfe4d08801bc50d9bc08480de2b2710b694ff7fb5bda12cd8a8cb8dc18bf0c265b71aef50ec0ee22e1968a4f3487d8487026bc2b721692064dcfdd1b6b6aec3e8da3d0ab7d3cc51e2db33c169e6354ea425fbfc1bc39057e64d3aff3749d60edcf0a50fe0e973b5ee3a7cd45ad967564fdbc9832869346037dabe420448b5089ab553c2c87e94befac8d3a0c2a56ca2ab778c2f34f571217c837580e8a524db35baea8024482bb32306182faaf39bb1c4e992c4440889e274952ed3d17d5e87224fec8048e6b7344270e046ab2fdda270ad4e5f651fd6eede5d42d9599265520d45d6f500fd733372a62ab4f496b56839b0d6418961a3b6016c26409daba4f2beeceeb38cc6ba75f57e8ee45d8a6c2ecc031c9469d937b9d7db91ded158ebd7f7d512d445f4104130a429ce7fce52d3fec37df953fc6e6adaa781b820b4bb6d4ffd2c10a16f9583890118793bae09157d3ac5625ad8e66a367488e2722bb82161661711d91a5540a92e3de7506861875575d40465cda28989cbc46fb3d80c2bc7e96afbde1cbd2e89103c55bde669c77b774ea570b26e93a1be5e50269ea5f3355869ac5a9701ac0e7d8f69b0a3186e118c6e2ce8e946c95bd729d94d237e5915e2711cc82826f147176a8a0555b9e11fb9a8ad736d016d202cea43b10a5102e48387ab70069b876051ac0557528c14748aa9cc0e0d9bf512533bdc83610d9f801ec4ed512a4a877e2f45b0cbe87ee25a314d481153eefe8643fb2f3e0478353552b0ae863635ab12e7bf0e4f046e8ba9cb7ce3189d52b2a27ff9e4eb5bf8b12d09d610705eec149589bdd38c951de63de4e3065e45eeb261a72c980349387514cb42467e1fe5812abaf4670e993c6fb561e5cccf7a472ee874bbfe73412bc63f706424f174afd1a3f16fb8b8305d932d33ab211d473d210b87e2f20b6ba951a2b98206793c04516fd57fc7365cec4a1831548470ebefe7f9487cc7b287b2f45eb69b4e165b9f3404d8ac84b2b57ace34de669a85fd885ecb055a6fd2ba5d5396737c702c082bfb35f3ccace91eacfc7a71b2bca1e228170ad6d194aa7c2dc2cf5f0bce153ac1befb2b82e6cf1f12d28812e309f5da0dbe1cad03172d296fa13247b1952ec988316f668aa65e1ca7e9e383b115ce5c25130955c118a0b4567bd180c07ce18bd0c459cc33ed7ba1c43262034a60711315ed81bbc95b7e3088dbd22b976fcd18bae330f08c89236f770478305fac20b5d9bd5cbc98c5c0f9713345c7362bc0e0bc78d212433bcdc6142989bc6ab82160df897825aa906d739dac905a434c90b2cbc72223011ea11480278b681cdcdf5fa63ac5f8b8f1f3ef7d4eb02f422e9fc52b98163630cd2f130f076a33bb011bb8e42800c9475f5cbee042b79fda44b6432b126f085a17553b82d9cae519ec239a9cccb99444f24b8f11e255e31e0d53a28e36949a3f8238c2ea3f4e3d8cf3b85b031c962504d00a4e7928b5fa2fab311bcc54d68738086ce70a8e5bdaf425033036a85e59aa3bb1b01f8b6c6a2e221c69e48565b55a196b2dc9cb067b4ccf8a7c81e31795a8b74e8940455126f19c8bbb9b941cc66c9443fd13e20c2074a9c3bc1740262c1fcb8e9ca5ac5729dfe6e25561eba41ccae8ca2e851affc1ab4ec912925ef7ccf72e97c577413260ccda170d75741336f837258a59da907460a2917f652c6e4ebc0467da8a95f2ceae9afcc4e0d1f4b95fc68b2f5e32af96fb12a8e7f3140dd235a30e5ad94e78cf58ad75ca8a871a70820090ba510e7563c0f78cf364369a51fa6683ff8d24924ceb922927eb0ba1395b7a4f37d92913a9688ef8428a887f1161f10aeab749f5ea8ca24e579008f542a9b785841dae071b94b5a8ba79985930f60ac2c93aa002d84b212e2e2b6c9c2a0694595dad99fd1f27d0044481ef5b364a059599ef982a114a61094b3b7d0f9a7b78d7615cc8573430e676987ab7421fde9abeb29e4529beb6a2724bed86a7b1d27ee73585892f083fad4307696a4166356b9c20a9579bbf3e8cda9ad7ec2b2bb973d05cf8d9457dc03eee2cfbf630dd917768ae652c0627e32ebb4c62951dfbd8e074dfdf02c5517ace50d5813c8d8d7f1fc0fc63a4fae5c2bcf26560c627500e03692384630be287790d545403adc500ef732d66e269b8b051aa57bb865a9b709c7a0426188daf29caf1d062b104592b4f6acc86895956d8085424dba0bfafdf900419f2227db1eca75b338091d23da2067566c6d54de1604bf8d4cce8a0b4484c4645a305861bc46ebccafbe500e01d51236b40027d1b2c7a72937b15899bb982c880d83ed6b70502bd0d68d2a2146a85c6518a11c386df610243ec513e7a284a81c841f9201ee3b9d3a8f44cdf52ec842e07c1f2f35e2a5b17278dce1f9b7fa09866ecb0d2e78fc8095b7dee81d3e308fd10a1490036194bfa89c118bd9c72d4747b90724d7bd0a7ead28c89c23cc6667c1a8b362ca5385d24b2c1265957764a4e46176365a5348bcf85c457921e7fa6c9e165b6c4d8bd9e8782c96839a5fd2679cd08f656ca5b41d00f8429d517a0d776049918e73b4a258fd2a1576b6420b67fc9ff3520556881ef4838e973f552edebde686af1d55e6172e5bb9b01543d32c0c7753b380dd9ed3f5c0b663a9b1bcb4bd36a365172aeee96a8d69c1e5c5b6c88fc9453ace6aa24bdfc1cfa27ea8cc36c80cace296259545a4e155d154ccbf00ae4ff912c583c871b7cdb46813584ea14bb6943d16b3f12e8fe149076e5e646e1dca0bf121a2e2fa09816e9056aa1143988ff17c21c49981445d98d88fd4bba6a59d9f97d301d90e3754103389b36308713c1ba31031e42f2d759343a95bbae9c01a3bb3e6b537b658d1c028c8ec3126bf79db223a3320e25a671ef834c924f02c1bbab338517accb8378f945cb1d65d4dff90f1e3af8168e33a5a124aef715b656075f6a62099afa110f2fe5eb83e0b3e36df91be2125be6500e5f3a81f8bc116f42734c784f6bb6c7e968610243b06026a9def4e85f8344fae36602aa3795cf71ecf7e57a3da0bef859daf649abc6390e86edaa84eefe48999ddba9067b90dd5ea2477f150ab588dadfe79ab7524157d1b94c738ca3345ce8657bfac981cb30b7c0f05f96dafcdce3e41471943609b121de1eda3e95a1c31bada084beec699512c7d5cec71e06a57c177ca1f383120bf46a9c805c9220d3d0c6807d60e6b7f9c80de1d815bdf1ebe62338862719eab55ef4971a69c76aa2f25c3c9d0c2e5c7857a86f9ab26c3c6aa395f2c366548f60a40abbe14dd011358d9b3695b8a091e16552478aeee1e2e91abd67deeb15732f428c3304a2bf2e4cbb3768875b35d126ca46d29e506ee1e0aba7a17eba27c19d7626064c0a17d7ee7f2f220e5e28bd7d691dffa84f2a2f92c924b87da382ae9a688ad4322fa0cc72604fc43e17002b8f3844a7431205de46818310d0fcf4676f45c9941dde767c9a4376e13cd7e91308cc0df25a4c79e390674fa0161695cc9e9bee12620d8571a4b3800370cd01bf0546758a048563539edf15d58b108159ea5fe0f038281c7855bbd92cc86de38df60b8597f4bce4ae9cae1647b5024bfb73630cdf4d1827a5f0ff779a1e6c6efbc6561d06b249986703b9dc61a63e2068e4786e6a8be34a808143301ef00f21bee8399d88ecffddb4867790d4d1cbe827a5a220834ba831d3ba424ff8fc9a99b175d2feca9f581e24bb69bdc4f64a6ea0c9c37d6976d15e9388519a2bed100a2a8358215a8b63b6e25a677875ee2bc3fd9c77783b39a166b863376b496775b83804a2c7f5363cca9ade819034afc2f7b40ffc316089556dec2e55e1bd92c9b905d6b1b9160d6c492d4384acd7e380874939b1ab02dbbacfbedd74cd524b4eab643e8b92d38d9fae446afd8d774d1c933bce8c341f0ff283acec3bbbbfdb06a15eb88ca6600542dda45334a374e31b", 0xba6}], 0x5}}], 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) 6m35.031055932s ago: executing program 3 (id=1229): r0 = syz_open_dev$sg(0x0, 0x0, 0x8002) add_key$fscrypt_v1(&(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x0, "bc410887c39b93ba733c40a6ebe73ed8cc4963e8d949bb4ff67c823dd18c8706c7973608f8f9fec843aad0da96bd888c8ff6ba75008e76ef31b000b31301b9f7", 0x3b}, 0x48, 0xffffffffffffffff) socket$key(0xf, 0x3, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000100)={&(0x7f0000000040)=[0x0, 0x0], 0x2}) r5 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt$sock_buf(r5, 0x1, 0x1c, 0x0, &(0x7f00000000c0)) r6 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r6, 0xc0205647, &(0x7f0000000200)={0x9b0000, 0x1, 0x800, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0xa10906, 0xfffffffb, '\x00', @value=0x80000001}}) r7 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r7, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0xf2, @tick=0x1b, {0x6f}, {}, @raw32={[0x9, 0xfa83, 0x5a7]}}, {0x6, 0x0, 0xfe, 0x40, @tick=0xffffff00, {0x9, 0x30}, {0xa, 0x9}, @result={0x6, 0x4005}}], 0x38) 6m30.988572698s ago: executing program 3 (id=1235): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x84, @local, 0x15, 0x3, 'sh\x00', 0x19, 0x5, 0x71}, 0x2c) r2 = socket$kcm(0xa, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e24, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xc, 0x2}}, 0x44) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)={0x1c, 0x1a, 0x1, 0x0, 0x0, "", [@typed={0xa, 0x3ffc, 0x0, 0x0, @str=':*^${\x00'}]}, 0x1c}], 0x1}, 0x0) 6m15.1134958s ago: executing program 33 (id=1235): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x84, @local, 0x15, 0x3, 'sh\x00', 0x19, 0x5, 0x71}, 0x2c) r2 = socket$kcm(0xa, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e24, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xc, 0x2}}, 0x44) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)={0x1c, 0x1a, 0x1, 0x0, 0x0, "", [@typed={0xa, 0x3ffc, 0x0, 0x0, @str=':*^${\x00'}]}, 0x1c}], 0x1}, 0x0) 14.493718709s ago: executing program 0 (id=2224): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r0, 0x18000000000002a0, 0x12, 0x0, &(0x7f0000000140)="b9fb0307683a06000000000000007c45335f", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(r2, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r3, &(0x7f00000002c0)='./file0\x00', 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x90, r1, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5000000000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x14}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000000}, 0x8010) syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f00000000c0)='./file1\x00', 0x8488, &(0x7f0000000440), 0xfe, 0x10fd, &(0x7f0000001140)="$eJzs2T9rFEEYBvBnds8/3cqmXwQtLCQknF8ghcK1ttqIpDJVrlL8OH4cTWUf0msRsF9Zb/dO5UTwTm1+PzjmvYd9Z2fKmQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMZsmnkhxUSTtlVZKSdN3F4ipJN+V33tdVSp6eLpaPz+dPlknqb4+XZ0kZuoa2tMf3brfzdt4et48OTu5/WL5+8+rF2dnp+ThNSZfL6/1vpYzrAQAAAH7U76z5z+8HAAAAfmdvFwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf6hvNnU7FVWSknTdxeIqSbel78Y/Wh8AAACwu5Iqz5tt+eoaYONhPjZlnQ/jlzLUR3m3pR8AAAD4pf7WWHz/fb3c3JzHH2S2PpcP2d3Mcni4+j8O+XyS1EmOfpr88vrty+lX+vpv7wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgK/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAAAAAPYKAAD///F61s8=") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x1204001, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x2, 0x3, 0x78, 0x65, 0x0, 0x72, 0x6, 0x0, @remote, @remote, {[@end, @cipso={0x86, 0x6, 0x1}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}]}}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x10, 0x6071, 0x0, 0xe6, {[@sack_perm={0x4, 0x2}]}}, {"4456fde85200000000000055a7e7345593615dff58dafe1e3e42e19509bee808a2bd723f7e786a3010cfc813bcf331ea0a710f7239c57eccd7438cab"}}}}}}, 0x0) 12.316274983s ago: executing program 0 (id=2230): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=@base={0xb, 0x5, 0x7, 0x9, 0x1}, 0x50) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, 0x0, &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x3, 0x0) socket$kcm(0x21, 0x7, 0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/5, 0x1c000, 0x800, 0x8, 0x2}, 0x1c) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f00000000c0)=0x100, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) bind$xdp(r2, &(0x7f00000001c0)={0x2c, 0x0, r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000005}, 0x0, 0x0) 11.190012333s ago: executing program 0 (id=2234): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x8, 0x9, 0x7, 0x0, 0x2, 0x6, 0x2, 0x8, 0x2, 0x0, 0x0, 0x0, 0x7, 0x6, 0x1, 0x7], 0xeeee0000, 0x28344}) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x74, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wlan1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_bond\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x4044001}, 0x20000040) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10.980700682s ago: executing program 0 (id=2235): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000140)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@errors_continue}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}, {@stripe={'stripe', 0x3d, 0x3}}, {@bsdgroups}, {@oldalloc}]}, 0x3, 0x460, &(0x7f0000000780)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x2020) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000005c0), 0x40100, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) ioctl$TIOCMBIC(r3, 0x5417, &(0x7f0000000000)) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x2}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5}, @IFLA_GRE_ENCAP_SPORT={0x6}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0xe677}]}}}]}, 0x4c}}, 0x20000010) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYRES8=r1], 0x48) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[], 0x119) 9.826236932s ago: executing program 0 (id=2241): fstat(0xffffffffffffffff, &(0x7f0000000100)) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000002c0)=0xa0000) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x8bcef8dcf390cf56, 0x0, {0x7, 0x1f, 0x0, 0x10000001, 0x0, 0x60b, 0x4, 0x0, 0x0, 0x0, 0x40, 0x7}}, 0x50) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x49}) write$sndseq(r1, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick=0xfffffffc, {}, {0x4}, @raw32}], 0x1c) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x8000, 0x700, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x67, 0x0, 0x0, 0x29, 0x0, @empty, @empty}}}}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f0000000040)={{@host, 0x2}, 0x800008, 0x6, 0xc, 0x83, 0xf101, 0xa, 0x8, 0xff}) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'veth0_vlan\x00', 0x0}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = dup(r4) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000500)=@assoc_value={0x0, 0xa886}, 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e20, @empty}}, 0x0, 0x6}, 0x90) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r4, &(0x7f0000000180)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x40043) r7 = dup(r4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) r8 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x16, 0x4, &(0x7f00000005c0)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c000000130001002dbd7000fbdbdf2520000000", @ANYRES32=r3, @ANYBLOB="00080000800000000a000100aaaaaaaaaa320000"], 0x2c}, 0x1, 0x0, 0x0, 0x3404c045}, 0x10) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000580)='./file0\x00', 0x204490, &(0x7f00000000c0)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2}}]}, 0x1, 0x542, &(0x7f00000005c0)="$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") ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000b40)={{0x84, 0x9}, 0x0, 0xb4b, 0x3, {0x7f, 0x3}, 0x8, 0x5}) 8.0304356s ago: executing program 5 (id=2246): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0}) syz_mount_image$minix(&(0x7f0000000180), &(0x7f0000000540)='./file2\x00', 0x200000, &(0x7f0000000580)=ANY=[], 0xbe, 0x1c5, &(0x7f0000000300)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x10040d0, 0x0, 0x0, 0x0, 0x0) truncate(&(0x7f0000000040)='./file1\x00', 0x40006) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x543440, 0x9a) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000005c0)}], 0x1}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x148}}], 0x1, 0x810) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000600)=""/83, 0x53}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) setns(r7, 0x80) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r8, &(0x7f00000021c0)={0x2020}, 0x2020) 7.816779719s ago: executing program 0 (id=2247): unshare(0x2c060000) unshare(0x8040100) 7.81599422s ago: executing program 2 (id=2248): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316a00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000500000095"], &(0x7f0000000180)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f00000000c0)='./file1\x00', 0x8488, &(0x7f0000000780), 0xfe, 0x10fd, &(0x7f0000001140)="$eJzs2T9rFEEYBvBnds8/3cqmXwQtLCQknF8ghcK1ttqIpDJVrlL8OH4cTWUf0msRsF9Zb/dO5UTwTm1+PzjmvYd9Z2fKmQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMZsmnkhxUSTtlVZKSdN3F4ipJN+V33tdVSp6eLpaPz+dPlknqb4+XZ0kZuoa2tMf3brfzdt4et48OTu5/WL5+8+rF2dnp+ThNSZfL6/1vpYzrAQAAAH7U76z5z+8HAAAAfmdvFwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf6hvNnU7FVWSknTdxeIqSbel78Y/Wh8AAACwu5Iqz5tt+eoaYONhPjZlnQ/jlzLUR3m3pR8AAAD4pf7WWHz/fb3c3JzHH2S2PpcP2d3Mcni4+j8O+XyS1EmOfpr88vrty+lX+vpv7wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgK/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAAAAAPYKAAD///F61s8=") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.stat\x00', 0x275a, 0x0) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000006c0)='.\x00', 0x1a4243c, &(0x7f0000000700)=ANY=[@ANYRES16, @ANYRESDEC, @ANYRESHEX, @ANYRESDEC, @ANYBLOB="b1f1563f8cf9b3df43707e277e3870d9bbeca08c7c9e5ebdd62801631c9f6ff697c8ea4da0047f1529a0c7", @ANYRES8, @ANYRES64, @ANYRES8=0x0, @ANYRES64, @ANYRES8], 0x0, 0x0, &(0x7f0000000080)) pwritev(r1, &(0x7f00000005c0)=[{&(0x7f0000000180)='\f', 0x1}], 0x1, 0x1, 0xb45f) 7.638929097s ago: executing program 34 (id=2247): unshare(0x2c060000) unshare(0x8040100) 7.410501507s ago: executing program 4 (id=2251): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x40, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x48084) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x11}, 0x20000000) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r6, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)=""/230, 0xe6}, {&(0x7f00000004c0)=""/168, 0xa8}, {&(0x7f0000000900)=""/106, 0x6a}, {&(0x7f00000000c0)=""/26, 0xfe4b}], 0x4}, 0x2000000}], 0x2, 0x101, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x800, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3104, 0x1b400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8}]}}}]}, 0x3c}}, 0x0) 7.200429146s ago: executing program 2 (id=2252): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1, 0x441f, &(0x7f0000008940)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) fsetxattr(r1, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000080)='@\x00', 0x3c8, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x5, @loopback, 0xa}}, 0x0, 0x0, 0x22, 0x0, "bb353738cb473fc7c9f1cf53b6a7b4e23602a3c364ca41d6e5615445244740bd4c0b42a21d7214bf92594925208a0e2f964e654dc534a6324d4993fcf19b2df3ee818a118a7c49462189316d556d2ccd"}, 0xd8) sendto$inet6(r0, &(0x7f00000000c0)="e9", 0x1, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) shutdown(r0, 0x2) syz_mount_image$reiserfs(&(0x7f0000001100), &(0x7f0000001140)='./file0\x00', 0x0, &(0x7f0000000000)={[{@noacl}, {@hash_r5}]}, 0x1, 0x10ef, &(0x7f00000011c0)="$eJzs2LGKE0EcBvBvNukjc/0iaGEhxx3xBa5QSGNhbSPHVV51qZR7HB9HUtmH9KYI2CtrslEkIJLFwPH7wTIzHzv/mSlnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ1x8rUkZ01S+6xJUpK2XcxWSdo+f/R51KTkzc1s/vJu+mq+/S1d1qR0s36O6+WTWqd1Wi/ri7Orp3X+4eP7d7e3N3e7MiVtlpv767xeD3qUbu3RoBUBAADgYfh+tMmJ1wcAAAD+ZrCHBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAB1L7TJClJ2y5mqyTtabcFAAAAHKmkydvJoXz7DPDL83yZlH3etd9K17/IpwPzAQAAgH9TfruPP8t4fy/vsscZ5/x8O941WV8loyQXf9RZbu6v+6/8zwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPCDHTgWAAAAABDmb51GxwYAAAAAAAAAAAAAAMBUAQAA//8i09S3") r2 = accept$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000140)=0x1c) getsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f0000000240)=""/187, &(0x7f0000000580)=0xbb) io_uring_setup(0x400, &(0x7f00000005c0)={0x0, 0xcb7c, 0x1000, 0x2, 0x362}) 6.020841647s ago: executing program 4 (id=2254): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1, 0x441f, &(0x7f0000008940)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x83, &(0x7f0000000080)={'filter\x00', 0x0, 0x0, 0x90, [], 0x0, 0x0, 0x20001100}, &(0x7f0000000100)=0x108) fsetxattr(r0, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000080)='@\x00', 0x3c8, 0x0) 5.413322474s ago: executing program 2 (id=2255): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x1b, &(0x7f0000000600)=ANY=[@ANYBLOB="85100000fd", @ANYRESOCT=0x0, @ANYBLOB="00000000fc1ccaf300000000b7080000ce0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000001185b0000010000000000000000000000186900000b0000000000000000000000000000000000000000184400000300"/125, @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c"], &(0x7f0000000300)='syzkaller\x00', 0x3, 0x0, &(0x7f0000000500), 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0xb, 0x1, 0x7c5e}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0xa2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xfd12}}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x188}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x440300, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f0, 0x0, 0xc8, 0x8, 0x1c0, 0x5803, 0x320, 0x2e8, 0x2e8, 0x320, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1}}, @common=@inet=@socket3={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x13}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) syz_mount_image$sysv(&(0x7f0000000080), &(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x83, &(0x7f0000001780)=ANY=[], 0x21, 0x9e89, &(0x7f0000014040)="$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") 5.240858441s ago: executing program 4 (id=2256): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000010000004200000040"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setrlimit(0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_usb_connect(0x3, 0x40, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000008c0)=@delsa={0x3c, 0x11, 0x1, 0x70bd25, 0x25dfdbfe, {@in=@broadcast, 0x4d4, 0x0, 0x3c}, [@srcaddr={0x14, 0xd, @in=@broadcast}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24044821}, 0x0) 4.729972203s ago: executing program 5 (id=2258): syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000500)='./file0\x00', 0x2800082, &(0x7f0000000540)=ANY=[], 0x11, 0x6c1, &(0x7f000000abc0)="$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") creat(&(0x7f0000000000)='./file1\x00', 0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r0, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e20, 0x0, @loopback, 0x10006}}, 0x0, 0x0, 0x47, 0x0, "09be2271b78506e6dd938d324c415acd403a4480fd1afa34432bcdfa64d957e93efafd27ad06a6f589bb643f167cf0fcd370239aaa93f6ded3c5032c96ead0cdc68474d402ab73e482db7ec1e0a57489"}, 0xd8) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000240)='./file0\x00', 0x8c0, &(0x7f0000000100)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c696e74722c6e6f61636c2c001967b9b8a6cdd636d75428f2c5e8054d01858eef552755576e749526b36860cf2511040d1ce5a743ffd83d29d1ba3a54a59d8c7aa249f08d3c8c6d04ac105d67934db6190d59f2323b55a5a4"], 0x1, 0x445e, &(0x7f00000054c0)="$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") name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000700), 0x400) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200a00) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0xf, @loopback, 0x5}, 0x1c) openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$F2FS_IOC_RESIZE_FS(0xffffffffffffffff, 0x4008f510, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000002300)=[{{&(0x7f0000000480)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000540)=""/194, 0xc2}, {&(0x7f0000000640)=""/114, 0x72}, {&(0x7f00000000c0)=""/39, 0x27}], 0x3, &(0x7f00000006c0)=""/157, 0x9d}, 0x30}, {{&(0x7f0000000780)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000800)=""/77, 0x4d}, {&(0x7f0000000400)=""/17, 0x11}], 0x2, &(0x7f00000008c0)=""/6, 0x6}, 0x9}, {{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000000900)=""/42, 0x2a}, {&(0x7f0000000940)=""/48, 0xfffffe35}, {&(0x7f0000000980)=""/22, 0x16}, {&(0x7f00000009c0)=""/216, 0xd8}, {&(0x7f0000000ac0)=""/150, 0x96}, {&(0x7f0000000b80)=""/4096, 0x1000}], 0x6, &(0x7f0000001c00)=""/237, 0xed}, 0x100000}, {{&(0x7f0000001d00)=@l2tp6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @remote}}, 0x80, &(0x7f0000002180)=[{&(0x7f0000001d80)=""/90, 0x5a}, {&(0x7f0000001e00)=""/239, 0xef}, {&(0x7f0000001f00)=""/38, 0x26}, {&(0x7f0000001f40)=""/217, 0xd9}, {&(0x7f0000002040)=""/90, 0x5a}, {&(0x7f00000020c0)=""/151, 0x97}], 0x6, &(0x7f0000002200)=""/249, 0xf9}, 0x40}], 0x4, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 00000000000000004p93\x00'], 0x2a, 0x0) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f0000002400), &(0x7f0000000440), &(0x7f0000002400), 0x0, r4) keyctl$read(0xb, r4, &(0x7f0000000240)=""/112, 0x349b7f55) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x9, @loopback, 0x1}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffff1, @empty, 0x2}, 0x1c) open(&(0x7f0000000180)='./file1\x00', 0x185102, 0x4) 4.237293705s ago: executing program 2 (id=2259): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x8, 0x9, 0x7, 0x0, 0x2, 0x6, 0x2, 0x8, 0x2, 0x0, 0x0, 0x0, 0x7, 0x6, 0x1, 0x7], 0xeeee0000, 0x28344}) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x54, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wlan1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4044001}, 0x20000040) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.999249275s ago: executing program 2 (id=2260): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = syz_open_procfs(0x0, 0x0) read$FUSE(r0, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r2 = syz_open_procfs(0x0, 0x0) read$FUSE(r2, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r3 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r3, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x80, 0x34325241, 0x3, [0x2], [0x80ffff, 0x0, 0x0, 0x8], [0x5], [0x400000000000003]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)={0x54, 0x0, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_KEYS={0x24, 0x51, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "a3446ceb1c5a6525e8f56e2add"}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4010}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e09200000000000010902240001000000000904000901030001000921050000"], 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000000140)=[@request_death={0x400c630e, 0x1}], 0x0, 0x0, 0x0}) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r6, &(0x7f0000000000), 0x6) 3.507296097s ago: executing program 5 (id=2261): r0 = syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000500)='./file0\x00', 0x2800082, &(0x7f0000000540)=ANY=[], 0x11, 0x6c1, &(0x7f000000abc0)="$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") creat(&(0x7f0000000000)='./file1\x00', 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r1, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c00000000010104000000000000000002000000240001801400018008000100e000000108000200000000000c00028005000100000000002c0002800c0002800506a96f953e6da59a090001000000000014000180080001007f00000108000200ac141400060003400000008ecc5271dc44db323c060c59fcb77c6d5b4c98c593ac"], 0x6c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="38004200020109040000009aa130f000020000002400018014000180080059500100e000000108000200000000010c000280050001000000"], 0x38}}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x0, 0x0, 0x47, 0x0, "09be2271b78506e6dd938d324c415acd403a4480fd1afa34432bcdfa64d957e93efafd27ad06a6f589bb643f167cf0fcd370239aaa93f6ded3c5032c96ead0cdc68474d402ab73e482db7ec1e0a57489"}, 0xd8) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0xf, @loopback, 0x5}, 0x1c) openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$F2FS_IOC_RESIZE_FS(0xffffffffffffffff, 0x4008f510, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r6 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, r6, &(0x7f0000000240)=""/112, 0x349b7f55) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x9, @loopback, 0x1}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffff1, @empty, 0x2}, 0x1c) dup(r0) open(&(0x7f0000000180)='./file1\x00', 0x185102, 0x4) 2.319625019s ago: executing program 6 (id=2263): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x40, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x48084) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x11}, 0x20000000) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r6, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)=""/230, 0xe6}, {&(0x7f00000004c0)=""/168, 0xa8}, {&(0x7f0000000900)=""/106, 0x6a}, {&(0x7f00000000c0)=""/26, 0xfe4b}], 0x4}, 0x2000000}], 0x2, 0x101, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x800, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3104, 0x1b400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8}]}}}]}, 0x3c}}, 0x0) 2.317146299s ago: executing program 5 (id=2264): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) accept(r0, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x80) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x9, 0x0, 0x0, 0x0, 0xfd], 0x0, [0x8, 0x6, 0x3c, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) 1.736556814s ago: executing program 4 (id=2265): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(0x0, 0x0) syz_open_procfs(0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000000)={0x15, 0x1, 0x10000, 0xe0a, 0x7c, "3fbc9627ffffffedb903e7bfffff00005c00", 0x8, 0x5}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xff) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x1, 0x0, 0x1000, {}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "cbfc0b9af540340c"}}, 0x48}, 0x1, 0x0, 0x0, 0x8040}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="02"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./bus\x00', 0xe, &(0x7f0000000540)={[{@init_itable}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000300)='./bus\x00') ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r3, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @d}}) readlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080)=""/29, 0x1d) 1.393675349s ago: executing program 5 (id=2266): syz_mount_image$xfs(&(0x7f0000000540), &(0x7f0000009640)='./file0\x00', 0x200800, &(0x7f0000001340)={[{@lazytime}, {@uqnoenforce}, {@swalloc}, {@filestreams}, {@grpquota}, {@allocsize={'allocsize', 0x3d, [0x30, 0x39, 0x6d]}}, {@gquota}], [{@flag='nomand'}]}, 0x4, 0x967e, &(0x7f000001c300)="$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") r0 = socket$inet6_udp(0xa, 0x2, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) unshare(0x64000600) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x41, 0x3, 0x200, 0x0, 0x19, 0x7a, 0xb0, 0x0, 0x168, 0x1f0, 0x1f0, 0x168, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @loopback, 0x0, 0x0, 'wlan1\x00', 'veth1_to_bridge\x00', {}, {}, 0x1d}, 0x0, 0x70, 0xb0, 0x0, {0x0, 0xffffffffa0028000}}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "c4078287ad3ba56be24b73b2d025ce7e4384c45e4d0086dddf24bdd8dff3"}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x25}, 0xffffff00, 0xffffff00, 'batadv_slave_0\x00', 'rose0\x00', {0xff}, {0xff}, 0x4, 0x0, 0x41}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x260) close_range(r0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x80042, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r2) sendmsg$TIPC_CMD_DISABLE_BEARER(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r3, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {}, {0x10, 0x13, @l2={'ib', 0x3a, 'vlan0\x00'}}}, ["", "", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x4050010}, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) pwritev2(r2, 0x0, 0x0, 0x7, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0xa, 0x8, 0x2}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r4, &(0x7f0000000300), 0x0}, 0x20) creat(&(0x7f0000000300)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x40, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.events\x00', 0x0, 0x0) r6 = open(&(0x7f0000000000)='./file1\x00', 0x109042, 0x0) fallocate(r6, 0x20, 0x0, 0x7000000) 1.384582429s ago: executing program 2 (id=2267): setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000080), 0x4) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040), 0x4) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) syz_usb_connect(0x3, 0x4ac, &(0x7f0000000600)={{0x12, 0x1, 0x250, 0x1, 0x12, 0x82, 0x20, 0xdf6, 0x3b, 0x466a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x49a, 0x2, 0x38, 0x7, 0x0, 0x6, [{{0x9, 0x4, 0xa2, 0x94, 0xe, 0xef, 0x7c, 0xab, 0x1, [@generic={0x5c, 0x4, "b8914ff0634841b916b59f3a2fa5717c49f130b440f0c817606a32bcd294d59672fa7c1c75d50d1c51e5f03f3dc97cbc198377cf3734284a822e6b5eebc890bd271bb3f32b90341eda5e66da265aaf1611efc5a04d46d8528f10"}, @cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "fefc32abc0"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x3514, 0x9}, {0x6, 0x24, 0x1a, 0x7, 0x10}, [@acm={0x4, 0x24, 0x2, 0xc}]}], [{{0x9, 0x5, 0xe, 0x0, 0x400, 0x7f, 0x0, 0x0, [@generic={0x79, 0xc, "310edfa8ffb4b854c905529d7d536b37e4ac6556ff4479f2b54bf1e832c7abf6be67b0d44488724d1899cb7051e5edf28d93b1ab588465e54cfc19e121147e986f13ef3cf765f41a8fc9d92e9ff79647c40d628c1437cfe2a656cbb301f9906f20e54411d5dac53842c37381f7894ef9c7dc77c7597f41"}]}}, {{0x9, 0x5, 0x0, 0x4, 0x10, 0x5, 0x9, 0x84, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x2}]}}, {{0x9, 0x5, 0x9, 0x14, 0x10, 0xd, 0x5, 0x89, [@generic={0xa2, 0xf, "f16f38e3d9a3a91d1b50681ff32daa2d51dd556d3fa25622b689921afebb26cee7c6f82b8a9ac4873cbadb99a19c106619a3db82cd72017e4d104a44e1333b59e1270a98abf089535021565255870100e52167faeb0444c0fbf66532341c8f34b20aa39d266fea69461a0fb92f2c30ab941a3440c5bdf1bd92596bd2dfd88c8d8a3238bb18dbd57c6bf27b3be99270eca54cf1326e00167eb34dad63dc97d5f7"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0x7, 0xc, 0x3, [@generic={0xb0, 0x21, "1b31e5c8094f3d9ba45dfde0b46a13f98bd4a92e5366fdc5271385f8ae1af0fde21e2a32d4a6a3305b5d3291375ce1079c167dc03c1727cb1b897d6f931a2406b019507a2cbb2e5a9316fd8cbe04198bebd60433dd3bf5aecef91a875a4463cd1b0d8de92e7446995bcd2e0425cb1a72b8cce84167730019000bbe78bc804dd802a38cd81e65f42b3f174cb5f1c1a569222d937aa018b3c3a9899b91cd236fce23043b315e7bf07bdffce5eaf08b"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x200, 0xa, 0x7b, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9f}]}}, {{0x9, 0x5, 0x9, 0x3, 0x3f7, 0x9, 0x0, 0x97}}, {{0x9, 0x5, 0x1, 0x0, 0x40, 0xf7, 0xe5, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xf, 0xef0}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x0, 0x8001}]}}, {{0x9, 0x5, 0x3, 0x10, 0x3ff, 0xa9, 0xd7, 0x1}}, {{0x9, 0x5, 0x2, 0x0, 0x8, 0x2, 0x9, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x29c}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x0, 0x7}]}}, {{0x9, 0x5, 0x9, 0x10, 0x200, 0x75, 0x9, 0x8, [@generic={0x8d, 0x16, "0b465583e85f61c3b8daa3e97ac656d251e756f4e19396059dbe72158a4ea1c6a7df7df420823c65101eb26c566ff4c9bbcbbfdb291f4d4952cc4f3490a15fdafc8944d8c55554550c70e9c0a20edf02f28d958f4af9d2dfd47ae01e564b7ca105b1800e1f1c21428d1f2de0b9c7e578858bcfcaa0be3442611f3abe2d485c00fa20cbd079003c1719b3eb"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0x9, 0x7, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xcd, 0xffff}, @generic={0x75, 0x5, "ece55f48f9b5ec8c9f4fccd15e8e0d467894e99baf88d22f8169d8a79f487eec283bd7621fd3d771a722d2ef896a069710274ab3e59062b579181e9634a7f913d60e1a76f683023226b32b91f9600d2bda6a59be19beddb333b9a0cf65b7e1b2402bfed11667dd322c330f35bae1eceb0179ed"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x400, 0x6, 0x2, 0x2, [@generic={0x1b, 0x21, "c9c7c1ce21e1c25524bbc1ff3ebc097c8198bad8fe1488d827"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x10, 0x1, 0xa, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xe8, 0x1}]}}, {{0x9, 0x5, 0xe, 0x0, 0x3ff, 0x6, 0x1, 0xdc}}]}}, {{0x9, 0x4, 0xf0, 0x5, 0x1, 0xed, 0x68, 0xb4, 0x8, [@uac_as={[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0xa, 0x2, 0x6, 0x5, "642adc08f39c1ad3"}]}, @uac_control={{0xa, 0x24, 0x1, 0x6, 0x81}, [@output_terminal={0x9, 0x24, 0x3, 0x1, 0x300, 0x2, 0x6, 0x5}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x1ff, 0x3, 0x6, 0xff69, 0x7, 0x8}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x201, 0x6, 0x6, 0x7613, 0xf5, 0x8}, @mixer_unit={0x7, 0x24, 0x4, 0x3, 0xf8, "7087"}, @mixer_unit={0x9, 0x24, 0x4, 0x2, 0x2, 'm#iz'}, @processing_unit={0xc, 0x24, 0x7, 0x5, 0x2, 0x4, "56bc0ba01e"}]}], [{{0x9, 0x5, 0xd, 0x0, 0x40, 0xf, 0x4, 0x4}}]}}]}}]}}, &(0x7f0000000dc0)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x300, 0x4, 0xa, 0x14, 0x40, 0xb3}, 0x31, &(0x7f0000000380)=ANY=[@ANYBLOB="050e31000218100af5621f0000000073003f3f0000de00ff00003f0000141004036f7cb805045d0b7bad9e1848e8381186"], 0xa, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x41c}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x402}}, {0xfd, &(0x7f0000000440)=@string={0xfd, 0x3, "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"}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x1215}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x412}}, {0x100, &(0x7f0000000b40)=@string={0x100, 0x3, "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"}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x411}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x408}}, {0xa0, &(0x7f0000000cc0)=@string={0xa0, 0x3, "cc4c3c46b401c520d31e89a041dd7aaef0498e4cc5b0b4362fee011913ccc8310ea178130931778e8cdb35432902bb939aff859874097a5076244f0e7f63268ba7784511e7fdd65a9c620f4921f1c91185f400cf35e0859a7d7fafba6953fe77ff2f2a1ae9d1e83e33765d1d4d652ab63cd5a1df4031868fd299dc17fbc4a8ade563c0592d3d09b9330b7f6b0eee1d3dbc4f1d39b821b700307322a0695b"}}, {0x4, &(0x7f0000000d80)=@lang_id={0x4, 0x3, 0x3009}}]}) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000000)={0x0, 0x0, 0x3, &(0x7f00000000c0)={0x19, "90f50180e64f61909103f1fbbc2b81c9f144d76e44c700100000e52829e7cb8393"}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000ec0)='9p_client_res\x00', r0}, 0x18) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000e80)='./file0\x00', 0x2808080, &(0x7f0000000540)={[{@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@numtail}, {@uni_xlateno}, {@shortname_win95}, {@fat=@errors_continue}, {@fat=@codepage={'codepage', 0x3d, '862'}}, {@rodir}, {@uni_xlateno}, {@shortname_mixed}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@iocharset={'iocharset', 0x3d, 'cp936'}}, {@shortname_win95}]}, 0x81, 0x2ae, &(0x7f0000001980)="$eJzs3c+KI0UYAPCvJ52ZjArJwZMINujB07CzT7BBRljMSemDXlTcLMgkLEwgsCrGPXkXPPkOvoMP4MU38OBR8OYexJakO3+nM2wkZmX297vM11X1VVdV18xAoCufvD68fPBo9PDJV79Gq5XE0b24F0+T6MRRzH0TAMBt8rQo4o+iFHF8Y9t0Vl+0q6ujw4wQANi39f//AMCL4IMPP3qv2+tdvJ9lrYjht+M8iYhhMs7L+u7D+DwG0Y870Y6/IoqFMn7lfu8i0iybfxgwPo08Yvjxz9V19/eIWf55tKNzPf/d+72L86wUbw0n43x65+nPZryURHSLpOzobrTj1YiiGVUny/y7NfmRH8fbb/5Qjf/vfpxFO375LB7FIB7Muljmf32eZe8U3//5ZTmDPCKZjPOTWbulonGwhwIAAAAAAAAAAAAAAAAAAAAAwK13li10Vs/PmZ8GeHZWXz87H6hRcz5QdcLPZOV8nTtZls2P8RnnzSjz03gtjfS5Th4AAAAAAAAAAAAAAAAAAAD+J0aPv7j8dDDoX60FPxWbJTVB9UZ/VCXpSlW6XnVzPzXB5Y8Ru2c9SxCNamiD5Not5hN65g7T7Y1PdhnYaV0/cbRtDdNBlIP/bvdFeGOnCU6D4l+s83x3TTfJDY0bMXrcqt8kKzvztOrsajR7QKfbNu16UNQsXWNr1vGe9tjxy/vdtNMZNxeLud6mNX2SKyXNPf+mbEj+iz8/AAAAAAAAAAAAAAAAAADAiuVLv/Hbtconz2VIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBwy+//XwTR2SzZDCZVcr8ufSM4uRrV3LZz4GkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwy/0TAAD//0dFVzc=") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.self_freezing\x00', 0x275a, 0x0) ftruncate(r2, 0xc17a) sync_file_range(r2, 0x7, 0x0, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace$getenv(0x4201, r3, 0x4, &(0x7f00000001c0)) mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000580000/0x4000)=nil) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r6, 0x29, 0x31, &(0x7f0000000300)=0x8, 0x4) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r7, 0x0, 0x401}, 0xfffffffffffffff2) r8 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0xfd, 0x0, 0x0, 0x0) 1.36660171s ago: executing program 6 (id=2268): write$P9_RSETATTR(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x1b, 0x1}, 0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='v'], 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, &(0x7f0000000200)}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000080)={0x8f, 0x0, 0x4}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160-generic\x00'}, 0x58) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x200000000, 0x100000000, 0x0, 0x4000081, 0x100000, 0x0, 0x2004c8, 0x3, 0x0, 0x0, 0x7, 0x0, 0xbb59, 0x0, 0x0, 0x8], 0x0, 0x200}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 967.745608ms ago: executing program 6 (id=2269): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x8, 0x9, 0x7, 0x0, 0x2, 0x6, 0x2, 0x8, 0x2, 0x0, 0x0, 0x0, 0x7, 0x6, 0x1, 0x7], 0xeeee0000, 0x28344}) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x40, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4044001}, 0x20000040) ioctl$KVM_RUN(r2, 0xae80, 0x0) 927.348009ms ago: executing program 4 (id=2270): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f0000000040)=[@in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @in6={0xa, 0x4e20, 0x0, @loopback, 0x3}]}, &(0x7f0000000180)=0x10) futex(&(0x7f0000000140)=0xfffffffc, 0x5, 0x0, 0x0, &(0x7f0000000080), 0xfffdffff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x44, 0x20, 0x1, 0x0, 0x25dfdbfc, {0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3001e}, [@FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'wg2\x00'}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x44}}, 0x604c020) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000000c0)={r1, 0x10, 0x9, 0xd5, 0x1}, 0x14) 857.333372ms ago: executing program 6 (id=2271): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0xe0480, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x20004, r1, 0x2}) r4 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) close_range(r0, 0xffffffffffffffff, 0x20) 687.76192ms ago: executing program 6 (id=2272): prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a32, 0xc000, 0x7, 0x337}) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f00000002c0)={0x3f, {0x80000001}}) r1 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000840), &(0x7f00000007c0)=0xffffffbc, 0x80800) accept4$nfc_llcp(r1, &(0x7f0000000900), &(0x7f0000000980)=0x60, 0x80000) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x4) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000300)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x0, 0x0, 0x0, 0x0, 0x4d16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffff346, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r2 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000100)={0x0, 0x4, 0xa5}) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x200408, &(0x7f0000000280)=ANY=[@ANYBLOB='nodots,nodots,dots,dots,nodots,errors=continue,time_offset=0xfffffffffffffa93,dots,showexec,nodots,dots,gid=', @ANYRESHEX=0xee00, @ANYBLOB="2c646f74732c646f74732c6e66732c6e6f646f74732c646f74732c6e6f646f74732c646f74732c646f74732c6e6f646f74732c646f74732c646f74732c646f74732c636865636b3d72656c617865642c74696d655f6f66667365743d3078303030303030303030303030303437612c646f6e745f686173682c7365636c6162656c2c667373c322e2a50762a3d3fcae283b43ea02757569643d31643067586564382d353166312d62326634"], 0x1, 0x1d3, &(0x7f0000001a00)="$eJzs3cFqE1EUBuAzsTapIHYniOCAG1dBfYKKRBAHRCULXSm0bhoRks3oxvoWPqAPIF11IyNmxsaWZGxjzJj0+zb5yTmTey+ESTY5eX3z3f7u+9Hbr9e/RKeTRGsnduIoie1oxS8HAQCsk6OiiG9FsdH0PgCA5ak+/8dmtHyvu94XBwBYPS9evnryIMt6z9O0E3F4kPfzfvlY1h89znp307HtyVWHed6/dFy/V9bTk/XLcSUitiLr3Z9a34w7t8fXf/5Ze/g0O1Vvx+6/Pz4AAAAAAAAAAAAAAAAAAAAAADSimx6bOt+n251VL9Nv84FOze/ZiBuGAwIAAAAAAAAAAAAAAAAAAMCZjD583H8zGOwNJ6EdESefmS8U12YuMS2kEfH3i543tGJ5a61aSP6PbZwzRDV1oqbn1mLe4c+u/qkn5nvlzYio79mqP+AiwuQe0W7m1gQAAAAAAAAAAAAAAAAAABdO9VvfZDhqeicAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0Jzy//8He8N5wqeIOENztVTS8FEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABYYz8CAAD//x8yIRo=") getsockopt(0xffffffffffffffff, 0x8, 0x2711, &(0x7f00000002c0)=""/4, &(0x7f0000000000)=0x4) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) shutdown(r4, 0x1) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000040)={r6, @in={{0x2, 0x4e20, @empty}}, 0x3b, 0x9, 0x81, 0x4, 0x20, 0x7fffffff, 0xff}, &(0x7f0000000140)=0x9c) getsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000180)={r7, 0x4}, &(0x7f0000000240)=0x8) openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000200)={0x200000, 0x0, 0xa}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write(r9, &(0x7f0000000080)='\x00', 0x1) splice(r9, &(0x7f0000000040), r8, 0x0, 0x6, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 503.454637ms ago: executing program 6 (id=2273): fstat(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000040)='./file4\x00', 0xa18c14, &(0x7f00000003c0)={[{@shortname_lower}, {@shortname_mixed}, {@shortname_winnt}, {@fat=@gid}, {@utf8no}, {@fat=@check_strict}, {@shortname_win95}, {@uni_xlate}, {@shortname_mixed}, {@uni_xlate}, {@uni_xlateno}, {@fat=@dmask={'dmask', 0x3d, 0x4}}, {@rodir}], [{@pcr={'pcr', 0x3d, 0x3a}}, {@fsname}, {@uid_gt={'uid>', 0xee01}}, {@euid_gt={'euid>', r0}}, {@flag='posixacl'}, {@defcontext={'defcontext', 0x3d, 'system_u'}}]}, 0x89, 0x29b, &(0x7f0000000580)="$eJzs3c9qK1UYAPBv0iRNVEgWrkRwQBeuwr33CW6QChezUrLQjV5sC5KEQgMB/2Dsyr3gynfwHXwAN76BC5eCO7sQR5KZSdI0bY3EVOrvt5kvc74v509OWyjMyUevjgbHZ+PTiy9+jkYjicrTeBqXSbSjEqWvAgB4SC6zLH7LcnflVqMeEVmreFXZw/AAgH/BNn//AYCH4b33P3in2+sdvZumjYjR15N+Evk1b++exicxjJN4FK34IyJbyOOXnvWOopqm5T8DJs3oR4w+/LF43f01Yl7/OFrRXq+vF1npXLwxmk76s55n11q8kER0syRPeRKteDkiq0XxJvnl7We9oyfp9fro1+PN178rxv/nSXSiFT99HGcxjOP5Wyzrv3ycpm9l3/7+eT6DfkQynfQP53lL2cFePhAAAAAAAAAAAAAAAAAAAAAAAP4XOulCe/X8nPI0wE5nc/uN5wMVJ/xMV87XeZSmaXmMz6Rfi7y+Gq9Uo3p/MwcAAAAAAAAAAAAAAAAAAID/jvGnnw2eD4cn51eCH7JZ0Lw1Zz2ortwpH+u/u2pzMPg+YvuqvxPEQTG0YXKti6Rs2kFfh9skNzd1GpWb1rA6jHzw32w/sNd2NcFbg3J3DZ4ncUdyY/MmWdl15TY8HydbbMhsw9Id3FhV39Hc6y/+0/LmxoWazbi2WMyrVY3ZJ7lyp7bjn5Q1yc5/9wAAAAAAAAAAAAAAAAAAAFctH/qNX641XtzLkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg75bf/78Ior1+Zz2YFsXzO5Xbkw/Pxxu6be95mgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADxwfwUAAP//5OlVhQ==") r1 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r1, 0x0, 0x0) r2 = syz_usb_connect$uac1(0x2, 0xa6, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000106b1d01010000000003010902940003010040000904000000010100000a2401000000020102132406000006000000281ab0ab2c90619b34000000000000000000000924030000000000000924050000f8211cfd0924030500000004000724050401"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) syz_usb_control_io$uac1(r2, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) 255.312038ms ago: executing program 4 (id=2274): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000010000004200000040"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setrlimit(0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_usb_connect(0x3, 0x40, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000008c0)=@delsa={0x3c, 0x11, 0x1, 0x70bd25, 0x25dfdbfe, {@in=@broadcast, 0x4d4, 0x0, 0x3c}, [@srcaddr={0x14, 0xd, @in=@broadcast}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24044821}, 0x0) 44.249117ms ago: executing program 35 (id=2274): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000010000004200000040"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setrlimit(0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_usb_connect(0x3, 0x40, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000008c0)=@delsa={0x3c, 0x11, 0x1, 0x70bd25, 0x25dfdbfe, {@in=@broadcast, 0x4d4, 0x0, 0x3c}, [@srcaddr={0x14, 0xd, @in=@broadcast}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24044821}, 0x0) 0s ago: executing program 5 (id=2276): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = syz_open_procfs(0x0, 0x0) read$FUSE(r0, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r2 = syz_open_procfs(0x0, 0x0) read$FUSE(r2, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r3 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r3, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x80, 0x34325241, 0x3, [0x2], [0x80ffff, 0x0, 0x0, 0x8], [0x5], [0x400000000000003]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)={0x54, 0x0, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_KEYS={0x24, 0x51, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "a3446ceb1c5a6525e8f56e2add"}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4010}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e09200000000000010902240001000000000904000901030001000921050000"], 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000000140)=[@request_death={0x400c630e, 0x1}], 0x0, 0x0, 0x0}) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r6, &(0x7f0000000000), 0x6) kernel console output (not intermixed with test programs): [ 937.879674][T12241] udp_sendmsg+0x1a5a/0x2340 [ 937.884291][T12241] ? verify_lock_unused+0x140/0x140 [ 937.889538][T12241] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 937.894412][T12241] ? udp_cmsg_send+0x350/0x350 [ 937.899225][T12241] ? aa_af_perm+0x2b0/0x2b0 [ 937.903747][T12241] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 937.910186][T12241] ? sock_rps_record_flow+0x17/0x3b0 [ 937.915512][T12241] ? inet_send_prepare+0x260/0x260 [ 937.920639][T12241] ? inet_sendmsg+0x78/0x2f0 [ 937.925234][T12241] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 937.930532][T12241] ? security_socket_sendmsg+0x7c/0xa0 [ 937.936006][T12241] ? inet_send_prepare+0x260/0x260 [ 937.941135][T12241] ____sys_sendmsg+0x5a2/0x8c0 [ 937.945923][T12241] ? memset+0x1e/0x40 [ 937.949922][T12241] ? __sys_sendmsg_sock+0x30/0x30 [ 937.954995][T12241] ? import_iovec+0x6f/0xa0 [ 937.959524][T12241] ___sys_sendmsg+0x1f0/0x260 [ 937.964228][T12241] ? __sys_sendmsg+0x250/0x250 [ 937.969035][T12241] ? __fdget+0x18b/0x210 [ 937.973296][T12241] __sys_sendmmsg+0x27c/0x4a0 [ 937.977989][T12241] ? __ia32_sys_sendmsg+0x80/0x80 [ 937.983040][T12241] ? __context_tracking_exit+0x4c/0x80 [ 937.988541][T12241] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 937.994721][T12241] ? lock_chain_count+0x20/0x20 [ 937.999584][T12241] ? vtime_user_exit+0x2dc/0x400 [ 938.004554][T12241] __x64_sys_sendmmsg+0x9c/0xb0 [ 938.009424][T12241] do_syscall_64+0x4c/0xa0 [ 938.013865][T12241] ? clear_bhb_loop+0x30/0x80 [ 938.018564][T12241] ? clear_bhb_loop+0x30/0x80 [ 938.023256][T12241] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 938.029170][T12241] RIP: 0033:0x7f637585a749 [ 938.033620][T12241] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 938.053243][T12241] RSP: 002b:00007f6373ac1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 938.062095][T12241] RAX: ffffffffffffffda RBX: 00007f6375ab0fa0 RCX: 00007f637585a749 [ 938.070074][T12241] RDX: 0000000000000300 RSI: 0000200000004d00 RDI: 0000000000000003 [ 938.078147][T12241] RBP: 00007f6373ac1090 R08: 0000000000000000 R09: 0000000000000000 [ 938.086132][T12241] R10: 0000000000000f00 R11: 0000000000000246 R12: 0000000000000001 [ 938.094112][T12241] R13: 00007f6375ab1038 R14: 00007f6375ab0fa0 R15: 00007ffffe6393e8 [ 938.102114][T12241] [ 938.144004][ T1110] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 938.200094][ T1110] usb 6-1: config 0 descriptor?? [ 938.565116][ T1110] usb 6-1: USB disconnect, device number 22 [ 938.577168][ T4221] usb 5-1: USB disconnect, device number 52 [ 938.641745][T12245] loop4: detected capacity change from 0 to 8 [ 939.061785][T12250] loop0: detected capacity change from 0 to 512 [ 939.292283][T12250] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.1964: inode has both inline data and extents flags [ 939.313019][ T1110] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 939.333095][T12250] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.1964: couldn't read orphan inode 15 (err -117) [ 939.375363][T12250] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 939.616966][T12264] FAULT_INJECTION: forcing a failure. [ 939.616966][T12264] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 939.630290][T12264] CPU: 0 PID: 12264 Comm: syz.6.1967 Not tainted syzkaller #0 [ 939.637792][T12264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 939.647870][T12264] Call Trace: [ 939.651154][T12264] [ 939.654093][T12264] dump_stack_lvl+0x168/0x230 [ 939.658880][T12264] ? show_regs_print_info+0x20/0x20 [ 939.664089][T12264] ? load_image+0x3b0/0x3b0 [ 939.668600][T12264] ? __lock_acquire+0x7c60/0x7c60 [ 939.673638][T12264] ? drm_dev_dbg+0x1c0/0x1c0 [ 939.678245][T12264] should_fail+0x38c/0x4c0 [ 939.682679][T12264] _copy_from_user+0x2e/0x170 [ 939.687369][T12264] drm_ioctl+0x53c/0x990 [ 939.691650][T12264] ? drm_gem_prime_handle_to_fd+0x4e0/0x4e0 [ 939.697559][T12264] ? drm_ioctl_kernel+0x4b0/0x4b0 [ 939.702641][T12264] ? bpf_lsm_file_ioctl+0x5/0x10 [ 939.707583][T12264] ? security_file_ioctl+0x7c/0xa0 [ 939.712711][T12264] ? drm_ioctl_kernel+0x4b0/0x4b0 [ 939.717749][T12264] __se_sys_ioctl+0xfa/0x170 [ 939.722374][T12264] do_syscall_64+0x4c/0xa0 [ 939.726802][T12264] ? clear_bhb_loop+0x30/0x80 [ 939.731491][T12264] ? clear_bhb_loop+0x30/0x80 [ 939.736181][T12264] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 939.742091][T12264] RIP: 0033:0x7f4a1b5d4749 [ 939.746545][T12264] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 939.762397][ T1110] usb 6-1: Using ep0 maxpacket: 32 [ 939.766155][T12264] RSP: 002b:00007f4a1981a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 939.766180][T12264] RAX: ffffffffffffffda RBX: 00007f4a1b82b090 RCX: 00007f4a1b5d4749 [ 939.766195][T12264] RDX: 0000200000000080 RSI: 00000000c00c642d RDI: 0000000000000006 [ 939.766209][T12264] RBP: 00007f4a1981a090 R08: 0000000000000000 R09: 0000000000000000 [ 939.766221][T12264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 939.766233][T12264] R13: 00007f4a1b82b128 R14: 00007f4a1b82b090 R15: 00007ffe4d9c32f8 [ 939.819621][T12264] [ 940.328571][T12265] loop6: detected capacity change from 0 to 4096 [ 940.924515][T12265] NILFS: invalid option "cp=0x0000000000000002": read-only option is not specified [ 941.102402][ T1110] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 941.111868][T12264] loop6: detected capacity change from 0 to 2048 [ 941.715293][T12264] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 941.841656][ T1110] usb 6-1: config 0 has no interface number 0 [ 941.848231][ T1110] usb 6-1: config 0 interface 12 has no altsetting 0 [ 941.945790][ T1110] usb 6-1: string descriptor 0 read error: -71 [ 941.952859][ T1110] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 941.962818][ T1110] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 941.974962][ T1110] usb 6-1: config 0 descriptor?? [ 941.999635][T12277] IPVS: Unknown mcast interface: nicvf0 [ 942.004724][ T1110] usb 6-1: can't set config #0, error -71 [ 942.025289][ T1110] usb 6-1: USB disconnect, device number 23 [ 942.295469][T12280] loop0: detected capacity change from 0 to 1024 [ 942.356145][T12280] EXT4-fs (loop0): Ignoring removed orlov option [ 942.370725][T12284] loop2: detected capacity change from 0 to 1024 [ 942.421361][T12280] EXT4-fs (loop0): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 942.467132][T12283] loop5: detected capacity change from 0 to 4096 [ 942.474079][ T21] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 942.508473][T12284] hfsplus: bad catalog entry type [ 942.547301][T12283] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 942.560851][ T4271] hfsplus: b-tree write err: -5, ino 4 [ 942.882887][T12289] loop6: detected capacity change from 0 to 4096 [ 942.892318][ T21] usb 5-1: Using ep0 maxpacket: 16 [ 942.948618][T12283] 9pnet: Insufficient options for proto=fd [ 943.009181][T12289] NILFS: invalid option "cp=0x0000000000000002": read-only option is not specified [ 943.458630][T12292] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1974'. [ 943.717366][T12289] loop6: detected capacity change from 0 to 2048 [ 944.723174][ T21] usb 5-1: config 53 has an invalid interface number: 240 but max is 0 [ 944.821901][T12289] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 944.847299][T12298] loop0: detected capacity change from 0 to 64 [ 945.003716][ T21] usb 5-1: config 53 has no interface number 0 [ 945.010027][ T21] usb 5-1: config 53 interface 240 altsetting 0 has an invalid endpoint with address 0xC2, skipping [ 945.020885][ T21] usb 5-1: config 53 interface 240 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 945.058862][T12298] xt_hashlimit: max too large, truncated to 1048576 [ 945.080774][T12298] xt_hashlimit: overflow, try lower: 0/0 [ 945.086865][ T21] usb 5-1: string descriptor 0 read error: -71 [ 945.093240][ T21] usb 5-1: New USB device found, idVendor=0bfd, idProduct=0106, bcdDevice=ec.89 [ 945.103874][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 945.132080][ T21] usb 5-1: can't set config #53, error -71 [ 945.142305][ T21] usb 5-1: USB disconnect, device number 53 [ 945.156133][T12306] netlink: 'syz.0.1976': attribute type 32 has an invalid length. [ 945.189733][T12305] loop4: detected capacity change from 0 to 764 [ 945.220005][T12310] loop5: detected capacity change from 0 to 256 [ 945.277224][ T4849] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 945.330637][T12310] FAT-fs (loop5): Directory bread(block 64) failed [ 945.344108][T12310] FAT-fs (loop5): Directory bread(block 65) failed [ 945.350950][T12310] FAT-fs (loop5): Directory bread(block 66) failed [ 945.382630][T12310] FAT-fs (loop5): Directory bread(block 67) failed [ 945.523201][T12310] FAT-fs (loop5): Directory bread(block 68) failed [ 945.621521][T12310] FAT-fs (loop5): Directory bread(block 69) failed [ 945.702265][T12310] FAT-fs (loop5): Directory bread(block 70) failed [ 945.787948][T12310] FAT-fs (loop5): Directory bread(block 71) failed [ 945.852782][T12310] FAT-fs (loop5): Directory bread(block 72) failed [ 945.860661][T12310] FAT-fs (loop5): Directory bread(block 73) failed [ 945.901905][ T4849] usb 3-1: Using ep0 maxpacket: 32 [ 946.022832][ T4849] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 946.063219][ T4849] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 946.195325][ T4849] usb 3-1: config 0 descriptor?? [ 946.282877][T12324] loop0: detected capacity change from 0 to 512 [ 946.457047][T12324] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.1982: inode has both inline data and extents flags [ 946.552135][ T4849] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 946.583511][T12324] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.1982: couldn't read orphan inode 15 (err -117) [ 946.624765][ T4849] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 946.701912][T12324] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 946.742536][ T4849] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 946.884088][ T4849] usb 3-1: media controller created [ 947.521881][ T4849] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 947.579070][ T4849] az6027: usb out operation failed. (-71) [ 947.621908][ T4849] az6027: usb out operation failed. (-71) [ 947.627677][ T4849] stb0899_attach: Driver disabled by Kconfig [ 947.641968][ T4849] az6027: no front-end attached [ 947.641968][ T4849] [ 947.671828][ T4849] az6027: usb out operation failed. (-71) [ 947.677591][ T4849] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 947.693509][ T4849] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input27 [ 947.762114][ T4849] dvb-usb: schedule remote query interval to 400 msecs. [ 947.769102][ T4849] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 947.865238][ T4849] usb 3-1: USB disconnect, device number 38 [ 947.883916][ T26] audit: type=1800 audit(2000000124.014:9): pid=12310 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1979" name="file1" dev="loop5" ino=1048798 res=0 errno=0 [ 947.888474][T12337] loop2: detected capacity change from 0 to 8192 [ 948.663575][T12337] FAT-fs (loop2): Unrecognized mount option "ÿÿÿÿ8ܺ²Kd×˼+Õ“2%b+8YŒA×Ç´›s'€%u^3öÆ×¢×ª»fxµT*ªPðä8n£@#t‰úŠ3-<“æàWCØÉyk—'öÇx¨!~]u­@¿Ý(lZ8šS…²X¿Ù|Ýnµç'E0ôåOàg1{ÀÛc¼DëmžHšÒõžógœ4!Õ‹u¤nl…Ríjsh|´›Nó€F5ž¨[}7´ºFÏþÉ$w [ 948.663575][T12337] ½7?  [ 948.663575][T12337] 4²1~÷®¼ t¸°5þ" or missing value [ 948.733592][ T4849] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 948.915549][T10037] attempt to access beyond end of device [ 948.915549][T10037] loop5: rw=1, want=1832, limit=256 [ 948.932899][T12351] IPVS: Unknown mcast interface: nicvf0 [ 948.981199][T10037] attempt to access beyond end of device [ 948.981199][T10037] loop5: rw=1, want=3308, limit=256 [ 949.168667][T12353] FAULT_INJECTION: forcing a failure. [ 949.168667][T12353] name failslab, interval 1, probability 0, space 0, times 0 [ 949.184073][T12337] loop2: detected capacity change from 0 to 47 [ 949.195539][T12353] CPU: 0 PID: 12353 Comm: syz.5.1989 Not tainted syzkaller #0 [ 949.203125][T12353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 949.213194][T12353] Call Trace: [ 949.216488][T12353] [ 949.219430][T12353] dump_stack_lvl+0x168/0x230 [ 949.224134][T12353] ? show_regs_print_info+0x20/0x20 [ 949.229349][T12353] ? load_image+0x3b0/0x3b0 [ 949.233889][T12353] ? __might_sleep+0xf0/0xf0 [ 949.238495][T12353] ? __lock_acquire+0x7c60/0x7c60 [ 949.243541][T12353] should_fail+0x38c/0x4c0 [ 949.247990][T12353] should_failslab+0x5/0x20 [ 949.251875][ T4303] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 949.252524][T12353] slab_pre_alloc_hook+0x51/0xc0 [ 949.252550][T12353] ? mm_alloc+0x1f/0xc0 [ 949.269187][T12353] kmem_cache_alloc+0x3d/0x290 [ 949.274163][T12353] mm_alloc+0x1f/0xc0 [ 949.278168][T12353] alloc_bprm+0x1a9/0x6a0 [ 949.282517][T12353] ? __phys_addr_symbol+0x2b/0x70 [ 949.287556][T12353] ? __check_object_size+0x30c/0x410 [ 949.292995][T12353] do_execveat_common+0x193/0x6d0 [ 949.298050][T12353] ? getname_flags+0x1fe/0x500 [ 949.302857][T12353] __x64_sys_execveat+0xc0/0xe0 [ 949.307740][T12353] do_syscall_64+0x4c/0xa0 [ 949.312175][T12353] ? clear_bhb_loop+0x30/0x80 [ 949.316872][T12353] ? clear_bhb_loop+0x30/0x80 [ 949.321573][T12353] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 949.327518][T12353] RIP: 0033:0x7f7816eeb749 [ 949.331953][T12353] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 949.351580][T12353] RSP: 002b:00007f7815152038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 949.360032][T12353] RAX: ffffffffffffffda RBX: 00007f7817141fa0 RCX: 00007f7816eeb749 [ 949.368021][T12353] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 949.375997][T12353] RBP: 00007f7815152090 R08: 0000000000001000 R09: 0000000000000000 [ 949.383973][T12353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 949.391947][T12353] R13: 00007f7817142038 R14: 00007f7817141fa0 R15: 00007ffeacf7e588 [ 949.400051][T12353] [ 949.597954][ T4303] usb 1-1: Using ep0 maxpacket: 16 [ 949.648340][T12364] loop4: detected capacity change from 0 to 512 [ 949.741777][ T4303] usb 1-1: config 53 has an invalid interface number: 240 but max is 0 [ 949.771795][ T21] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 949.776618][T12364] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.1995: inode has both inline data and extents flags [ 949.876849][T12364] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.1995: couldn't read orphan inode 15 (err -117) [ 949.978248][T12364] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 950.898119][ T4303] usb 1-1: config 53 has no interface number 0 [ 950.904420][ T4303] usb 1-1: config 53 interface 240 altsetting 0 has an invalid endpoint with address 0xC2, skipping [ 950.915745][ T4303] usb 1-1: config 53 interface 240 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 950.985343][T12379] loop4: detected capacity change from 0 to 512 [ 951.078109][T12383] netlink: 'syz.6.2000': attribute type 1 has an invalid length. [ 951.881631][ T4303] usb 1-1: New USB device found, idVendor=0bfd, idProduct=0106, bcdDevice=ec.89 [ 951.890887][ T4303] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 951.941451][ T21] usb 6-1: Using ep0 maxpacket: 16 [ 951.964840][ T4303] usb 1-1: Product: syz [ 951.969072][ T4303] usb 1-1: Manufacturer: syz [ 951.974189][ T4303] usb 1-1: SerialNumber: syz [ 952.082082][ T4303] usb 1-1: can't set config #53, error -71 [ 952.089056][ T4303] usb 1-1: USB disconnect, device number 39 [ 952.111899][ T21] usb 6-1: too many endpoints for config 0 interface 0 altsetting 1: 48, using maximum allowed: 30 [ 952.122815][ T21] usb 6-1: config 0 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 952.136322][ T21] usb 6-1: config 0 interface 0 has no altsetting 0 [ 952.161401][T12396] loop2: detected capacity change from 0 to 4096 [ 952.214653][T12396] ntfs: (device loop2): parse_options(): Unrecognized mount option ÿ0x000000000000ee00. [ 952.245016][T12396] ntfs: (device loop2): parse_options(): The show_sys_files option requires a boolean argument. [ 952.305700][ T21] usb 6-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=29.82 [ 952.319447][ T21] usb 6-1: New USB device strings: Mfr=83, Product=5, SerialNumber=10 [ 952.354998][ T21] usb 6-1: Product: syz [ 952.380696][ T21] usb 6-1: Manufacturer: syz [ 952.404763][ T21] usb 6-1: SerialNumber: syz [ 952.408845][T12401] loop0: detected capacity change from 0 to 2048 [ 952.445625][ T21] usb 6-1: config 0 descriptor?? [ 952.522695][T12401] hpfs: filesystem error: improperly stopped; already mounted read-only [ 952.541581][T12401] hpfs: filesystem error: sector(s) 'dir_band' badly placed at 7b318cc2 [ 952.651638][ T21] usb 6-1: can't set config #0, error -71 [ 952.672078][ T21] usb 6-1: USB disconnect, device number 24 [ 952.762137][T12411] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:3b, vlan:0) [ 952.873587][T12411] loop0: detected capacity change from 0 to 2048 [ 952.947353][T12411] UDF-fs: bad mount option " [ 952.947353][T12411] " or missing value [ 954.091648][ T4303] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 954.680919][T12427] FAULT_INJECTION: forcing a failure. [ 954.680919][T12427] name failslab, interval 1, probability 0, space 0, times 0 [ 954.693555][T12427] CPU: 1 PID: 12427 Comm: syz.5.2010 Not tainted syzkaller #0 [ 954.700996][T12427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 954.711043][T12427] Call Trace: [ 954.714311][T12427] [ 954.717228][T12427] dump_stack_lvl+0x168/0x230 [ 954.721896][T12427] ? show_regs_print_info+0x20/0x20 [ 954.727079][T12427] ? load_image+0x3b0/0x3b0 [ 954.731583][T12427] ? __might_sleep+0xf0/0xf0 [ 954.736176][T12427] ? __lock_acquire+0x7c60/0x7c60 [ 954.741208][T12427] should_fail+0x38c/0x4c0 [ 954.745629][T12427] should_failslab+0x5/0x20 [ 954.750212][T12427] slab_pre_alloc_hook+0x51/0xc0 [ 954.755150][T12427] ? mm_alloc+0x1f/0xc0 [ 954.759299][T12427] kmem_cache_alloc+0x3d/0x290 [ 954.764061][T12427] mm_alloc+0x1f/0xc0 [ 954.768034][T12427] alloc_bprm+0x1a9/0x6a0 [ 954.772360][T12427] ? __phys_addr_symbol+0x2b/0x70 [ 954.777372][T12427] ? __check_object_size+0x30c/0x410 [ 954.782648][T12427] do_execveat_common+0x193/0x6d0 [ 954.787662][T12427] ? getname_flags+0x1fe/0x500 [ 954.792424][T12427] __x64_sys_execveat+0xc0/0xe0 [ 954.797271][T12427] do_syscall_64+0x4c/0xa0 [ 954.801675][T12427] ? clear_bhb_loop+0x30/0x80 [ 954.806337][T12427] ? clear_bhb_loop+0x30/0x80 [ 954.811005][T12427] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 954.816884][T12427] RIP: 0033:0x7f7816eeb749 [ 954.821287][T12427] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 954.840983][T12427] RSP: 002b:00007f7815152038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 954.849413][T12427] RAX: ffffffffffffffda RBX: 00007f7817141fa0 RCX: 00007f7816eeb749 [ 954.857386][T12427] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 954.865349][T12427] RBP: 00007f7815152090 R08: 0000000000001000 R09: 0000000000000000 [ 954.873328][T12427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 954.881295][T12427] R13: 00007f7817142038 R14: 00007f7817141fa0 R15: 00007ffeacf7e588 [ 954.889272][T12427] [ 954.892296][ C1] vkms_vblank_simulate: vblank timer overrun [ 955.070880][T12433] IPVS: Unknown mcast interface: nicvf0 [ 955.086761][T12431] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 955.097762][T12431] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 955.104155][T12435] FAULT_INJECTION: forcing a failure. [ 955.104155][T12435] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 955.129524][T12435] CPU: 1 PID: 12435 Comm: syz.5.2015 Not tainted syzkaller #0 [ 955.137016][T12435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 955.147096][T12435] Call Trace: [ 955.150393][T12435] [ 955.153334][T12435] dump_stack_lvl+0x168/0x230 [ 955.158030][T12435] ? show_regs_print_info+0x20/0x20 [ 955.163262][T12435] ? load_image+0x3b0/0x3b0 [ 955.167866][T12435] ? __might_sleep+0xf0/0xf0 [ 955.172472][T12435] ? __lock_acquire+0x7c60/0x7c60 [ 955.177520][T12435] should_fail+0x38c/0x4c0 [ 955.181967][T12435] copy_page_from_iter+0x33c/0x760 [ 955.187101][T12435] tun_get_user+0x187b/0x38d0 [ 955.191798][T12435] ? tun_ring_recv+0xc30/0xc30 [ 955.196581][T12435] ? rcu_lock_release+0x5/0x20 [ 955.201351][T12435] ? __lock_acquire+0x7c60/0x7c60 [ 955.206409][T12435] tun_chr_write_iter+0x112/0x1e0 [ 955.211452][T12435] vfs_write+0x712/0xd00 [ 955.215717][T12435] ? file_end_write+0x250/0x250 [ 955.220575][T12435] ? __fget_files+0x40f/0x480 [ 955.225264][T12435] ? __fdget_pos+0x1e2/0x370 [ 955.229865][T12435] ? ksys_write+0x71/0x250 [ 955.234294][T12435] ksys_write+0x14d/0x250 [ 955.238631][T12435] ? __ia32_sys_read+0x80/0x80 [ 955.243446][T12435] ? lockdep_hardirqs_on+0x94/0x140 [ 955.248657][T12435] do_syscall_64+0x4c/0xa0 [ 955.253082][T12435] ? clear_bhb_loop+0x30/0x80 [ 955.257799][T12435] ? clear_bhb_loop+0x30/0x80 [ 955.262487][T12435] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 955.268388][T12435] RIP: 0033:0x7f7816eea1ff [ 955.272817][T12435] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 955.292441][T12435] RSP: 002b:00007f7815152000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 955.300872][T12435] RAX: ffffffffffffffda RBX: 00007f7817141fa0 RCX: 00007f7816eea1ff [ 955.308861][T12435] RDX: 0000000000000036 RSI: 0000200000000000 RDI: 00000000000000c8 [ 955.316847][T12435] RBP: 00007f7815152090 R08: 0000000000000000 R09: 0000000000000000 [ 955.324826][T12435] R10: 0000000000000036 R11: 0000000000000293 R12: 0000000000000001 [ 955.332816][T12435] R13: 00007f7817142038 R14: 00007f7817141fa0 R15: 00007ffeacf7e588 [ 955.340818][T12435] [ 955.343898][ C1] vkms_vblank_simulate: vblank timer overrun [ 955.361899][ T4303] usb 1-1: config 0 has an invalid interface number: 163 but max is 0 [ 955.450309][ T4303] usb 1-1: config 0 has no interface number 0 [ 955.546353][ T4303] usb 1-1: config 0 interface 163 altsetting 100 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 955.627046][ T4303] usb 1-1: config 0 interface 163 has no altsetting 0 [ 955.833181][T11423] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 955.859886][T12447] FAULT_INJECTION: forcing a failure. [ 955.859886][T12447] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 955.877268][T12447] CPU: 0 PID: 12447 Comm: syz.0.2018 Not tainted syzkaller #0 [ 955.884749][T12447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 955.894809][T12447] Call Trace: [ 955.898102][T12447] [ 955.901042][T12447] dump_stack_lvl+0x168/0x230 [ 955.905734][T12447] ? show_regs_print_info+0x20/0x20 [ 955.910939][T12447] ? load_image+0x3b0/0x3b0 [ 955.915450][T12447] ? __lock_acquire+0x7c60/0x7c60 [ 955.920493][T12447] should_fail+0x38c/0x4c0 [ 955.924935][T12447] prepare_alloc_pages+0x1e4/0x5f0 [ 955.930065][T12447] __alloc_pages+0x10e/0x470 [ 955.934679][T12447] ? zone_statistics+0x170/0x170 [ 955.939640][T12447] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 955.945555][T12447] ? alloc_pages+0x438/0x550 [ 955.950164][T12447] __get_free_pages+0x8/0x30 [ 955.954771][T12447] __pollwait+0x234/0x3f0 [ 955.959112][T12447] ? poll_initwait+0x150/0x150 [ 955.963903][T12447] pipe_poll+0x16b/0x490 [ 955.968156][T12447] ? __fdget+0x150/0x210 [ 955.972421][T12447] ? pipe_write+0x1a80/0x1a80 [ 955.977114][T12447] do_sys_poll+0x8b8/0x1100 [ 955.981622][T12447] ? do_sys_poll+0x441/0x1100 [ 955.984175][ T4303] usb 1-1: string descriptor 0 read error: -71 [ 955.986319][T12447] ? poll_select_finish+0x5e0/0x5e0 [ 955.986346][T12447] ? verify_lock_unused+0x140/0x140 [ 955.986369][T12447] ? poll_initwait+0x150/0x150 [ 955.986391][T12447] ? __ia32_compat_sys_ppoll_time64+0x2f0/0x2f0 [ 955.986415][T12447] ? __ia32_compat_sys_ppoll_time64+0x2f0/0x2f0 [ 955.986438][T12447] ? __ia32_compat_sys_ppoll_time64+0x2f0/0x2f0 [ 955.986459][T12447] ? __ia32_compat_sys_ppoll_time64+0x2f0/0x2f0 [ 955.986482][T12447] ? __ia32_compat_sys_ppoll_time64+0x2f0/0x2f0 [ 955.993491][ T4303] usb 1-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 955.997929][T12447] ? __ia32_compat_sys_ppoll_time64+0x2f0/0x2f0 [ 956.004565][ T4303] usb 1-1: New USB device strings: Mfr=0, Product=210, SerialNumber=57 [ 956.007904][T12447] ? __ia32_compat_sys_ppoll_time64+0x2f0/0x2f0 [ 956.016519][ T4303] usb 1-1: config 0 descriptor?? [ 956.020392][T12447] ? __ia32_compat_sys_ppoll_time64+0x2f0/0x2f0 [ 956.020421][T12447] ? __ia32_compat_sys_ppoll_time64+0x2f0/0x2f0 [ 956.041409][ T4303] usb 1-1: can't set config #0, error -71 [ 956.048166][T12447] ? verify_lock_unused+0x140/0x140 [ 956.056153][ T4303] usb 1-1: USB disconnect, device number 40 [ 956.062625][T12447] ? rcu_read_lock_any_held+0xb0/0x120 [ 956.062652][T12447] ? rcu_read_lock_bh_held+0xe0/0xe0 [ 956.062671][T12447] ? proc_fail_nth_write+0x17a/0x1f0 [ 956.119113][T12447] ? proc_fail_nth_read+0x210/0x210 [ 956.124317][T12447] ? common_file_perm+0x171/0x1c0 [ 956.129370][T12447] ? __context_tracking_exit+0x4c/0x80 [ 956.134828][T12447] ? set_user_sigmask+0xc4/0x1b0 [ 956.139761][T12447] ? sigprocmask+0x190/0x190 [ 956.144344][T12447] ? __lock_acquire+0x7c60/0x7c60 [ 956.149368][T12447] __se_sys_ppoll+0x1fc/0x260 [ 956.154041][T12447] ? __x64_sys_ppoll+0xc0/0xc0 [ 956.158815][T12447] ? lockdep_hardirqs_on+0x94/0x140 [ 956.164003][T12447] ? __x64_sys_ppoll+0x1c/0xc0 [ 956.168767][T12447] do_syscall_64+0x4c/0xa0 [ 956.173171][T12447] ? clear_bhb_loop+0x30/0x80 [ 956.177836][T12447] ? clear_bhb_loop+0x30/0x80 [ 956.182509][T12447] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 956.188410][T12447] RIP: 0033:0x7f637585a749 [ 956.192826][T12447] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 956.212433][T12447] RSP: 002b:00007f6373ac1038 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 956.220842][T12447] RAX: ffffffffffffffda RBX: 00007f6375ab0fa0 RCX: 00007f637585a749 [ 956.228804][T12447] RDX: 0000000000000000 RSI: 20000000000000dc RDI: 00002000000000c0 [ 956.236771][T12447] RBP: 00007f6373ac1090 R08: 0000000000000000 R09: 0000000000000000 [ 956.244754][T12447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 956.252730][T12447] R13: 00007f6375ab1038 R14: 00007f6375ab0fa0 R15: 00007ffffe6393e8 [ 956.260708][T12447] [ 956.280038][ T21] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 956.326493][T12445] loop5: detected capacity change from 0 to 1024 [ 956.360493][T12451] loop6: detected capacity change from 0 to 1024 [ 956.375507][T12445] EXT4-fs (loop5): Ignoring removed orlov option [ 956.400166][T12445] EXT4-fs (loop5): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 956.421661][ C1] vkms_vblank_simulate: vblank timer overrun [ 956.421816][T11423] usb 3-1: Using ep0 maxpacket: 16 [ 956.438437][T12451] EXT4-fs (loop6): Ignoring removed orlov option [ 956.553495][T11423] usb 3-1: config 53 has an invalid interface number: 240 but max is 0 [ 956.561491][ T21] usb 5-1: Using ep0 maxpacket: 32 [ 956.566977][T11423] usb 3-1: config 53 has no interface number 0 [ 956.567009][T11423] usb 3-1: config 53 interface 240 altsetting 0 has an invalid endpoint with address 0xC2, skipping [ 956.680851][T11423] usb 3-1: config 53 interface 240 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 956.931927][T11423] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0106, bcdDevice=ec.89 [ 956.950274][T11423] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 956.977076][T11423] usb 3-1: Product: syz [ 956.994175][T11423] usb 3-1: Manufacturer: syz [ 956.999083][T11423] usb 3-1: SerialNumber: syz [ 957.275640][T12433] bridge0: port 4(syz_tun) entered blocking state [ 957.276709][T12451] EXT4-fs (loop6): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 957.290952][T12433] bridge0: port 4(syz_tun) entered disabled state [ 957.303637][ C1] vkms_vblank_simulate: vblank timer overrun [ 957.334627][T12433] device syz_tun entered promiscuous mode [ 957.385185][ C0] sd 0:0:1:0: tag#4675 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 957.395265][ C0] sd 0:0:1:0: tag#4675 CDB: Read buffer capacity [ 957.401654][ C0] sd 0:0:1:0: tag#4675 CDB[00]: 5c a8 63 04 00 00 00 f0 09 9a f2 9e 96 c8 d4 2b [ 957.410685][ C0] sd 0:0:1:0: tag#4675 CDB[10]: d4 51 03 96 97 e1 d4 c1 d8 ed c7 39 9b ed 9c 45 [ 957.419765][ C0] sd 0:0:1:0: tag#4675 CDB[20]: 84 dd 57 96 3d dc ee e7 af 02 f3 04 28 6e 50 ff [ 957.428827][ C0] sd 0:0:1:0: tag#4675 CDB[30]: c3 e5 9e 63 5c f0 00 00 00 81 f8 ac 2e 86 da 52 [ 957.437910][ C0] sd 0:0:1:0: tag#4675 CDB[40]: 4a e2 ad 5d eb 90 ac 06 b0 44 09 73 59 49 2e 6f [ 957.447059][ C0] sd 0:0:1:0: tag#4675 CDB[50]: a2 40 fc 9d 25 0c 5f f8 d0 80 e2 65 94 39 69 4c [ 957.456125][ C0] sd 0:0:1:0: tag#4675 CDB[60]: d1 ec c0 32 b0 42 49 a1 2c 0d 69 e1 73 f3 87 a0 [ 957.465189][ C0] sd 0:0:1:0: tag#4675 CDB[70]: 90 b5 92 26 e9 80 4a a2 51 ed 0c 76 01 4c f1 7b [ 957.473926][T12464] loop0: detected capacity change from 0 to 512 [ 957.474280][ C0] sd 0:0:1:0: tag#4675 CDB[80]: 90 f3 9e 40 a0 38 9b 9f c3 64 44 15 bb 68 61 be [ 957.484995][T12466] udc-core: couldn't find an available UDC or it's busy [ 957.489517][ C0] sd 0:0:1:0: tag#4675 CDB[90]: 98 8e 7a f2 2f b4 d2 7f 3e b4 a7 c8 26 98 fd 23 [ 957.497008][T12466] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 957.505482][ C0] sd 0:0:1:0: tag#4675 CDB[a0]: a2 01 5f 95 4f b3 e9 c2 b4 62 9e c4 7b 84 5d e1 [ 957.513598][ T21] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 37385, setting to 1024 [ 957.521988][ C0] sd 0:0:1:0: tag#4675 CDB[b0]: 99 89 a6 b3 8b 0b 6e 26 c7 4a 68 0d 6f 04 22 2f [ 957.522008][ C0] sd 0:0:1:0: tag#4675 CDB[c0]: 7f d8 b4 90 d5 9e 13 2d 5a 52 c3 98 2a 81 9b 23 [ 957.522024][ C0] sd 0:0:1:0: tag#4675 CDB[d0]: 7f 4a 68 4b d4 25 27 f0 69 49 96 bc 71 12 49 7c [ 957.522040][ C0] sd 0:0:1:0: tag#4675 CDB[e0]: dc 9f 33 fd f2 13 0a 7d 31 f2 da 82 2d 3c a8 32 [ 957.522055][ C0] sd 0:0:1:0: tag#4675 CDB[f0]: ba 31 00 00 00 00 00 [ 957.587675][ T21] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 957.831601][ T21] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 957.935181][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 957.944938][ T21] usb 5-1: Product: syz [ 957.954074][ T21] usb 5-1: Manufacturer: syz [ 957.958768][ T21] usb 5-1: SerialNumber: syz [ 957.970879][ T21] usb 5-1: config 0 descriptor?? [ 958.002889][T12431] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 958.081518][ T21] usb 5-1: can't set config #0, error -71 [ 958.097111][ T21] usb 5-1: USB disconnect, device number 54 [ 958.124386][T12483] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 959.442823][T12502] loop4: detected capacity change from 0 to 2048 [ 959.487381][T11423] kvaser_usb 3-1:53.240: Cannot get usb endpoint(s) [ 959.505705][T12502] UDF-fs: bad mount option " [ 959.505705][T12502] " or missing value [ 960.331611][T11423] usb 3-1: USB disconnect, device number 39 [ 960.419536][T12513] loop5: detected capacity change from 0 to 512 [ 960.528413][T12513] EXT4-fs error (device loop5): ext4_orphan_get:1401: inode #15: comm syz.5.2035: inode has both inline data and extents flags [ 960.580258][T12513] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.2035: couldn't read orphan inode 15 (err -117) [ 960.627544][T12521] netdevsim netdevsim0: Direct firmware load for þ failed with error -2 [ 960.636145][T12521] netdevsim netdevsim0: Falling back to sysfs fallback for: þ [ 960.647974][T12513] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 960.681206][T12506] loop6: detected capacity change from 0 to 32768 [ 960.835722][ T4189] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 961.472701][T12506] ocfs2: Slot 0 on device (7,6) was already allocated to this node! [ 961.590109][T12506] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 961.599820][ T4189] usb 5-1: config 0 has an invalid interface number: 163 but max is 0 [ 961.619391][ T4189] usb 5-1: config 0 has no interface number 0 [ 961.654764][ T4189] usb 5-1: config 0 interface 163 altsetting 100 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 961.693943][T12522] syz.0.2036 (12522) used greatest stack depth: 18408 bytes left [ 961.731312][ T4189] usb 5-1: config 0 interface 163 has no altsetting 0 [ 961.879229][T12506] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 961.903407][ T4189] usb 5-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 961.927659][ T4189] usb 5-1: New USB device strings: Mfr=0, Product=210, SerialNumber=57 [ 961.954986][ T4189] usb 5-1: Product: syz [ 961.959369][ T4189] usb 5-1: SerialNumber: syz [ 961.966334][ T4189] usb 5-1: config 0 descriptor?? [ 961.986536][T12549] loop0: detected capacity change from 0 to 1024 [ 962.043424][T12549] hfsplus: unable to parse mount options [ 962.054715][T12552] IPVS: Unknown mcast interface: nicvf0 [ 962.185927][ T9238] ocfs2: Unmounting device (7,6) on (node local) [ 962.219353][T12502] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2030'. [ 962.361334][ T4849] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 963.056998][ T4189] ftdi_sio 5-1:0.163: FTDI USB Serial Device converter detected [ 963.122096][ T4189] usb 5-1: Detected FT-X [ 963.161556][ T4189] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 963.191494][ T4189] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 963.294799][ T4189] ftdi_sio 5-1:0.163: GPIO initialisation failed: -71 [ 963.307317][ T4189] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 963.319978][ T4189] usb 5-1: USB disconnect, device number 55 [ 963.328320][ T4189] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 963.351561][ T4189] ftdi_sio 5-1:0.163: device disconnected [ 963.435131][ T4849] usb 6-1: Using ep0 maxpacket: 16 [ 963.731474][ T4189] usb 5-1: new full-speed USB device number 56 using dummy_hcd [ 964.021572][ T4849] usb 6-1: config 53 has an invalid interface number: 240 but max is 0 [ 964.029860][ T4849] usb 6-1: config 53 has no interface number 0 [ 964.036333][ T4849] usb 6-1: config 53 interface 240 altsetting 0 has an invalid endpoint with address 0xC2, skipping [ 964.049793][ T4849] usb 6-1: config 53 interface 240 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 964.067976][T12570] loop2: detected capacity change from 0 to 512 [ 964.103498][T12570] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.2049: inode has both inline data and extents flags [ 964.117333][T12570] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.2049: couldn't read orphan inode 15 (err -117) [ 964.129584][T12570] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 964.299034][ T4189] usb 5-1: config 64 has an invalid interface number: 19 but max is 0 [ 964.315318][ T4189] usb 5-1: config 64 has no interface number 0 [ 964.324292][ T4189] usb 5-1: config 64 interface 19 altsetting 17 endpoint 0x2 has invalid wMaxPacketSize 0 [ 964.328502][T12574] loop0: detected capacity change from 0 to 512 [ 964.336310][ T4189] usb 5-1: config 64 interface 19 has no altsetting 0 [ 964.352109][ T4849] usb 6-1: New USB device found, idVendor=0bfd, idProduct=0106, bcdDevice=ec.89 [ 964.870042][ T4849] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 964.881632][ T4849] usb 6-1: Product: syz [ 964.887463][T12574] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.2050: inode has both inline data and extents flags [ 964.898710][ T4849] usb 6-1: Manufacturer: syz [ 964.901505][T12574] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.2050: couldn't read orphan inode 15 (err -117) [ 964.906974][ T4849] usb 6-1: SerialNumber: syz [ 964.926773][T12574] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 964.965914][ T4189] usb 5-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=3f.e0 [ 964.978567][ T4189] usb 5-1: New USB device strings: Mfr=0, Product=9, SerialNumber=0 [ 964.988409][ T4189] usb 5-1: Product: syz [ 965.149783][T12581] FAULT_INJECTION: forcing a failure. [ 965.149783][T12581] name failslab, interval 1, probability 0, space 0, times 0 [ 965.191357][T12581] CPU: 1 PID: 12581 Comm: syz.6.2052 Not tainted syzkaller #0 [ 965.198866][T12581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 965.208926][T12581] Call Trace: [ 965.212217][T12581] [ 965.215168][T12581] dump_stack_lvl+0x168/0x230 [ 965.219868][T12581] ? show_regs_print_info+0x20/0x20 [ 965.225091][T12581] ? load_image+0x3b0/0x3b0 [ 965.229611][T12581] ? __lock_acquire+0x7c60/0x7c60 [ 965.234659][T12581] should_fail+0x38c/0x4c0 [ 965.239088][T12581] should_failslab+0x5/0x20 [ 965.243621][T12581] slab_pre_alloc_hook+0x51/0xc0 [ 965.248579][T12581] kmem_cache_alloc_trace+0x47/0x2a0 [ 965.253870][T12581] ? btf_new_fd+0x1a0/0x910 [ 965.258392][T12581] btf_new_fd+0x1a0/0x910 [ 965.262738][T12581] __sys_bpf+0x51c/0x670 [ 965.266995][T12581] ? bpf_link_show_fdinfo+0x340/0x340 [ 965.272477][T12581] ? vtime_user_exit+0x2dc/0x400 [ 965.277448][T12581] __x64_sys_bpf+0x78/0x90 [ 965.281875][T12581] do_syscall_64+0x4c/0xa0 [ 965.286346][T12581] ? clear_bhb_loop+0x30/0x80 [ 965.291044][T12581] ? clear_bhb_loop+0x30/0x80 [ 965.295741][T12581] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 965.301655][T12581] RIP: 0033:0x7f4a1b5d4749 [ 965.306090][T12581] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 965.325711][T12581] RSP: 002b:00007f4a1983b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 965.334140][T12581] RAX: ffffffffffffffda RBX: 00007f4a1b82afa0 RCX: 00007f4a1b5d4749 [ 965.342129][T12581] RDX: 0000000000000028 RSI: 0000200000001ec0 RDI: 0000000000000012 [ 965.350203][T12581] RBP: 00007f4a1983b090 R08: 0000000000000000 R09: 0000000000000000 [ 965.358196][T12581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 965.366174][T12581] R13: 00007f4a1b82b038 R14: 00007f4a1b82afa0 R15: 00007ffe4d9c32f8 [ 965.374178][T12581] [ 965.714612][ T4189] usb 5-1: probing VID:PID(2201:012C) [ 965.726838][ T4189] usb 5-1: vub300 testing BULK OUT EndPoint(0) 02 [ 965.848619][T12588] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2051'. [ 966.311246][ T4189] usb 5-1: Could not find two sets of bulk-in/out endpoint pairs [ 966.346160][ T4849] kvaser_usb 6-1:53.240: Cannot get usb endpoint(s) [ 966.351096][ T4189] vub300: probe of 5-1:64.19 failed with error -22 [ 966.364350][ T4189] usb 5-1: USB disconnect, device number 56 [ 966.618487][T12593] ip6t_rpfilter: unknown options [ 966.627663][T12593] loop2: detected capacity change from 0 to 128 [ 966.676925][T12593] VFS: Found a Xenix FS (block size = 1024) on device loop2 [ 966.884378][ T4849] usb 6-1: USB disconnect, device number 25 [ 966.906207][ T4186] sysv_free_block: flc_count > flc_size [ 966.923077][ T4186] sysv_free_block: flc_count > flc_size [ 966.928659][ T4186] sysv_free_block: flc_count > flc_size [ 966.956625][ T4186] sysv_free_block: flc_count > flc_size [ 966.981668][ T4186] sysv_free_block: flc_count > flc_size [ 967.011860][ T4186] sysv_free_block: flc_count > flc_size [ 967.017438][ T4186] sysv_free_block: flc_count > flc_size [ 967.032923][T12601] loop4: detected capacity change from 0 to 512 [ 967.039275][ T4186] sysv_free_block: flc_count > flc_size [ 967.079468][ T4186] sysv_free_block: flc_count > flc_size [ 967.089440][ T4186] sysv_free_block: flc_count > flc_size [ 967.104034][ T4186] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 967.108970][T12604] loop0: detected capacity change from 0 to 1024 [ 967.132374][T12601] EXT4-fs (loop4): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 967.151270][T12601] EXT4-fs (loop4): Cannot use DAX on a filesystem that may contain inline data [ 968.681792][ T4548] hfsplus: b-tree write err: -5, ino 4 [ 968.755889][T12614] loop6: detected capacity change from 0 to 2048 [ 968.892515][T12614] UDF-fs: bad mount option " [ 968.892515][T12614] " or missing value [ 968.992832][T12621] IPVS: Unknown mcast interface: nicvf0 [ 969.115956][T12622] FAULT_INJECTION: forcing a failure. [ 969.115956][T12622] name failslab, interval 1, probability 0, space 0, times 0 [ 969.128661][T12622] CPU: 0 PID: 12622 Comm: syz.2.2064 Not tainted syzkaller #0 [ 969.136138][T12622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 969.146208][T12622] Call Trace: [ 969.149501][T12622] [ 969.152446][T12622] dump_stack_lvl+0x168/0x230 [ 969.157150][T12622] ? show_regs_print_info+0x20/0x20 [ 969.162373][T12622] ? load_image+0x3b0/0x3b0 [ 969.166898][T12622] ? __might_sleep+0xf0/0xf0 [ 969.171494][T12622] ? __lock_acquire+0x7c60/0x7c60 [ 969.176523][T12622] should_fail+0x38c/0x4c0 [ 969.180940][T12622] should_failslab+0x5/0x20 [ 969.185439][T12622] slab_pre_alloc_hook+0x51/0xc0 [ 969.190371][T12622] ? mm_alloc+0x1f/0xc0 [ 969.194572][T12622] kmem_cache_alloc+0x3d/0x290 [ 969.199338][T12622] mm_alloc+0x1f/0xc0 [ 969.203323][T12622] alloc_bprm+0x1a9/0x6a0 [ 969.207657][T12622] ? __phys_addr_symbol+0x2b/0x70 [ 969.212666][T12622] ? __check_object_size+0x30c/0x410 [ 969.217954][T12622] do_execveat_common+0x193/0x6d0 [ 969.223013][T12622] ? getname_flags+0x1fe/0x500 [ 969.227791][T12622] __x64_sys_execveat+0xc0/0xe0 [ 969.232656][T12622] do_syscall_64+0x4c/0xa0 [ 969.237069][T12622] ? clear_bhb_loop+0x30/0x80 [ 969.241824][T12622] ? clear_bhb_loop+0x30/0x80 [ 969.246506][T12622] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 969.252400][T12622] RIP: 0033:0x7f8a4b935749 [ 969.256836][T12622] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 969.276442][T12622] RSP: 002b:00007f8a49b7b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 969.284864][T12622] RAX: ffffffffffffffda RBX: 00007f8a4bb8c090 RCX: 00007f8a4b935749 [ 969.292829][T12622] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 969.300835][T12622] RBP: 00007f8a49b7b090 R08: 0000000000001000 R09: 0000000000000000 [ 969.308805][T12622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 969.316779][T12622] R13: 00007f8a4bb8c128 R14: 00007f8a4bb8c090 R15: 00007ffe223dbe38 [ 969.324876][T12622] [ 969.327935][ C0] vkms_vblank_simulate: vblank timer overrun [ 969.501250][ T1110] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 969.509806][T12625] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 969.611634][ T4849] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 970.041821][ T4849] usb 7-1: config 0 has an invalid interface number: 163 but max is 0 [ 970.322990][ T4849] usb 7-1: config 0 has no interface number 0 [ 970.361281][ T4849] usb 7-1: config 0 interface 163 altsetting 100 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 970.379382][T12631] ip6t_rpfilter: unknown options [ 970.388279][ T4849] usb 7-1: config 0 interface 163 has no altsetting 0 [ 970.389263][T12631] loop5: detected capacity change from 0 to 128 [ 970.440478][T12633] loop4: detected capacity change from 0 to 512 [ 970.450264][T12631] VFS: Found a Xenix FS (block size = 1024) on device loop5 [ 970.495950][ T7903] sysv_free_block: flc_count > flc_size [ 970.539573][ T7903] sysv_free_block: flc_count > flc_size [ 970.561207][ T1110] usb 1-1: Using ep0 maxpacket: 16 [ 970.577547][ T7903] sysv_free_block: flc_count > flc_size [ 970.612113][ T7903] sysv_free_block: flc_count > flc_size [ 970.641001][ T7903] sysv_free_block: flc_count > flc_size [ 970.669840][ T7903] sysv_free_block: flc_count > flc_size [ 970.681713][ T1110] usb 1-1: config 53 has an invalid interface number: 240 but max is 0 [ 970.700186][ T1110] usb 1-1: config 53 has no interface number 0 [ 970.714334][ T7903] sysv_free_block: flc_count > flc_size [ 970.737932][ T1110] usb 1-1: config 53 interface 240 altsetting 0 has an invalid endpoint with address 0xC2, skipping [ 970.753903][ T7903] sysv_free_block: flc_count > flc_size [ 970.784769][ T7903] sysv_free_block: flc_count > flc_size [ 970.807292][ T1110] usb 1-1: config 53 interface 240 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 970.826708][ T7903] sysv_free_block: flc_count > flc_size [ 970.858889][ T7903] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 971.042324][ T1110] usb 1-1: New USB device found, idVendor=0bfd, idProduct=0106, bcdDevice=ec.89 [ 971.065099][ T1110] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 971.105091][ T1110] usb 1-1: Product: syz [ 971.129037][ T1110] usb 1-1: Manufacturer: syz [ 971.137206][ T1110] usb 1-1: SerialNumber: syz [ 971.169982][T12633] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.2069: inode has both inline data and extents flags [ 971.184468][T12633] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.2069: couldn't read orphan inode 15 (err -117) [ 971.361940][ T4849] usb 7-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 971.371036][ T4849] usb 7-1: New USB device strings: Mfr=0, Product=210, SerialNumber=57 [ 971.372028][T12633] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 971.401121][ T4849] usb 7-1: Product: syz [ 971.405467][ T4849] usb 7-1: SerialNumber: syz [ 971.829416][ C0] sd 0:0:1:0: tag#4686 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 971.839389][ C0] sd 0:0:1:0: tag#4686 CDB: Read buffer capacity [ 971.845769][ C0] sd 0:0:1:0: tag#4686 CDB[00]: 5c a8 63 04 00 00 00 f0 09 9a f2 9e 96 c8 d4 2b [ 971.854910][ C0] sd 0:0:1:0: tag#4686 CDB[10]: d4 51 03 96 97 e1 d4 c1 d8 ed c7 39 9b ed 9c 45 [ 971.863983][ C0] sd 0:0:1:0: tag#4686 CDB[20]: 84 dd 57 96 3d dc ee e7 af 02 f3 04 28 6e 50 ff [ 971.873087][ C0] sd 0:0:1:0: tag#4686 CDB[30]: c3 e5 9e 63 5c f0 00 00 00 81 f8 ac 2e 86 da 52 [ 971.882171][ C0] sd 0:0:1:0: tag#4686 CDB[40]: 4a e2 ad 5d eb 90 ac 06 b0 44 09 73 59 49 2e 6f [ 971.891244][ C0] sd 0:0:1:0: tag#4686 CDB[50]: a2 40 fc 9d 25 0c 5f f8 d0 80 e2 65 94 39 69 4c [ 971.900295][ C0] sd 0:0:1:0: tag#4686 CDB[60]: d1 ec c0 32 b0 42 49 a1 2c 0d 69 e1 73 f3 87 a0 [ 971.909385][ C0] sd 0:0:1:0: tag#4686 CDB[70]: 90 b5 92 26 e9 80 4a a2 51 ed 0c 76 01 4c f1 7b [ 971.918450][ C0] sd 0:0:1:0: tag#4686 CDB[80]: 90 f3 9e 40 a0 38 9b 9f c3 64 44 15 bb 68 61 be [ 971.927501][ C0] sd 0:0:1:0: tag#4686 CDB[90]: 98 8e 7a f2 2f b4 d2 7f 3e b4 a7 c8 26 98 fd 23 [ 971.936546][ C0] sd 0:0:1:0: tag#4686 CDB[a0]: a2 01 5f 95 4f b3 e9 c2 b4 62 9e c4 7b 84 5d e1 [ 971.945589][ C0] sd 0:0:1:0: tag#4686 CDB[b0]: 99 89 a6 b3 8b 0b 6e 26 c7 4a 68 0d 6f 04 22 2f [ 971.954635][ C0] sd 0:0:1:0: tag#4686 CDB[c0]: 7f d8 b4 90 d5 9e 13 2d 5a 52 c3 98 2a 81 9b 23 [ 971.963682][ C0] sd 0:0:1:0: tag#4686 CDB[d0]: 7f 4a 68 4b d4 25 27 f0 69 49 96 bc 71 12 49 7c [ 971.972727][ C0] sd 0:0:1:0: tag#4686 CDB[e0]: dc 9f 33 fd f2 13 0a 7d 31 f2 da 82 2d 3c a8 32 [ 971.981779][ C0] sd 0:0:1:0: tag#4686 CDB[f0]: ba 31 00 00 00 00 00 [ 972.001294][T12621] udc-core: couldn't find an available UDC or it's busy [ 972.037628][ T4849] usb 7-1: config 0 descriptor?? [ 972.064993][T12621] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 972.711690][ T1110] kvaser_usb 1-1:53.240: Cannot get usb endpoint(s) [ 972.740584][ T1110] usb 1-1: USB disconnect, device number 41 [ 972.874287][ T4849] usb 7-1: can't set config #0, error -71 [ 972.884143][ T4849] usb 7-1: USB disconnect, device number 13 [ 973.551481][T12653] loop2: detected capacity change from 0 to 8192 [ 973.563228][T12658] FAULT_INJECTION: forcing a failure. [ 973.563228][T12658] name failslab, interval 1, probability 0, space 0, times 0 [ 973.598512][T12658] CPU: 1 PID: 12658 Comm: syz.6.2076 Not tainted syzkaller #0 [ 973.606020][T12658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 973.616083][T12658] Call Trace: [ 973.619374][T12658] [ 973.622322][T12658] dump_stack_lvl+0x168/0x230 [ 973.627011][T12658] ? show_regs_print_info+0x20/0x20 [ 973.632221][T12658] ? load_image+0x3b0/0x3b0 [ 973.636768][T12658] ? __might_sleep+0xf0/0xf0 [ 973.641372][T12658] ? __lock_acquire+0x7c60/0x7c60 [ 973.646510][T12658] should_fail+0x38c/0x4c0 [ 973.650946][T12658] should_failslab+0x5/0x20 [ 973.655549][T12658] slab_pre_alloc_hook+0x51/0xc0 [ 973.660479][T12658] __kmalloc+0x6b/0x330 [ 973.664624][T12658] ? sock_kmalloc+0x92/0xf0 [ 973.669162][T12658] sock_kmalloc+0x92/0xf0 [ 973.673516][T12658] af_alg_alloc_areq+0x89/0x230 [ 973.678380][T12658] skcipher_recvmsg+0x316/0xd40 [ 973.683248][T12658] ? skcipher_sendmsg+0xe0/0xe0 [ 973.688109][T12658] ? bpf_lsm_socket_recvmsg+0x5/0x10 [ 973.693385][T12658] ? security_socket_recvmsg+0x85/0xb0 [ 973.698928][T12658] ? skcipher_sendmsg+0xe0/0xe0 [ 973.703769][T12658] ____sys_recvmsg+0x291/0x580 [ 973.708536][T12658] ? __might_fault+0xb3/0x110 [ 973.713230][T12658] ? __sys_recvmsg_sock+0x40/0x40 [ 973.718265][T12658] ? import_iovec+0x6f/0xa0 [ 973.722850][T12658] ___sys_recvmsg+0x1af/0x4f0 [ 973.727537][T12658] ? __sys_recvmsg+0x250/0x250 [ 973.732309][T12658] ? __lock_acquire+0x7c60/0x7c60 [ 973.737351][T12658] ? __fdget+0x18b/0x210 [ 973.741598][T12658] __x64_sys_recvmsg+0x1dd/0x2a0 [ 973.746525][T12658] ? ___sys_recvmsg+0x4f0/0x4f0 [ 973.751359][T12658] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 973.757343][T12658] ? lockdep_hardirqs_on+0x94/0x140 [ 973.762565][T12658] do_syscall_64+0x4c/0xa0 [ 973.766974][T12658] ? clear_bhb_loop+0x30/0x80 [ 973.771637][T12658] ? clear_bhb_loop+0x30/0x80 [ 973.776309][T12658] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 973.782193][T12658] RIP: 0033:0x7f4a1b5d4749 [ 973.786597][T12658] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 973.806192][T12658] RSP: 002b:00007f4a1983b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 973.814591][T12658] RAX: ffffffffffffffda RBX: 00007f4a1b82afa0 RCX: 00007f4a1b5d4749 [ 973.822553][T12658] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000004 [ 973.830517][T12658] RBP: 00007f4a1983b090 R08: 0000000000000000 R09: 0000000000000000 [ 973.838480][T12658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 973.846437][T12658] R13: 00007f4a1b82b038 R14: 00007f4a1b82afa0 R15: 00007ffe4d9c32f8 [ 973.854422][T12658] [ 973.951468][T12653] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 973.960706][T12653] REISERFS (device loop2): using ordered data mode [ 973.969800][T12668] loop4: detected capacity change from 0 to 512 [ 973.971245][T12653] reiserfs: using flush barriers [ 974.005920][T12653] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 974.041699][T12653] REISERFS (device loop2): checking transaction log (loop2) [ 974.058165][T12668] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.2075: inode has both inline data and extents flags [ 974.078232][T12653] REISERFS (device loop2): Using r5 hash to sort names [ 974.078646][T12668] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.2075: couldn't read orphan inode 15 (err -117) [ 974.086148][T12653] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 974.113202][T12676] ip6t_rpfilter: unknown options [ 974.122861][T12676] loop5: detected capacity change from 0 to 128 [ 974.232792][T12668] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 974.255006][T12676] VFS: Found a Xenix FS (block size = 1024) on device loop5 [ 974.549088][T12653] REISERFS warning (device loop2): super-6502 reiserfs_getopt: unknown mount option "ÿÿ184467440737095516150xffffffffffffffff18446744073709551615±ñV?Œù³ßCp~'~8pٻ젌|ž^½Ö(cŸoö—ÈêM ) Çÿÿÿÿÿÿÿÿÿ" [ 974.832961][ T7903] sysv_free_block: flc_count > flc_size [ 974.846244][ T7903] sysv_free_block: flc_count > flc_size [ 974.853461][ T7903] sysv_free_block: flc_count > flc_size [ 974.859212][ T7903] sysv_free_block: flc_count > flc_size [ 974.869113][ T7903] sysv_free_block: flc_count > flc_size [ 974.876705][ T7903] sysv_free_block: flc_count > flc_size [ 974.883742][ T7903] sysv_free_block: flc_count > flc_size [ 974.889444][ T7903] sysv_free_block: flc_count > flc_size [ 974.895620][ T7903] sysv_free_block: flc_count > flc_size [ 974.904475][ T7903] sysv_free_block: flc_count > flc_size [ 974.910713][ T7903] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 975.096840][T12685] loop5: detected capacity change from 0 to 2048 [ 975.695782][T12685] UDF-fs: bad mount option " [ 975.695782][T12685] " or missing value [ 975.735580][T12693] loop4: detected capacity change from 0 to 512 [ 975.809489][T12693] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.2085: inode has both inline data and extents flags [ 975.825458][T12693] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.2085: couldn't read orphan inode 15 (err -117) [ 975.837630][T12693] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 976.904530][T12706] IPVS: Unknown mcast interface: nicvf0 [ 976.925237][ T7] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 977.242222][T12715] loop6: detected capacity change from 0 to 128 [ 977.391228][ T4189] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 978.405637][T12715] VFS: Found a Xenix FS (block size = 1024) on device loop6 [ 978.412049][T12718] loop4: detected capacity change from 0 to 128 [ 978.480964][T12720] netlink: 'syz.0.2090': attribute type 5 has an invalid length. [ 978.489382][T12720] netlink: 'syz.0.2090': attribute type 11 has an invalid length. [ 978.508070][T12718] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 978.511176][ T7] usb 6-1: device descriptor read/all, error -71 [ 978.526618][T12718] ext4 filesystem being mounted at /403/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 978.621450][ T4189] usb 3-1: Using ep0 maxpacket: 16 [ 978.685845][ T9238] sysv_free_block: flc_count > flc_size [ 978.691715][ T9238] sysv_free_block: flc_count > flc_size [ 978.697425][ T9238] sysv_free_block: flc_count > flc_size [ 978.721073][ T9238] sysv_free_block: flc_count > flc_size [ 978.747115][ T9238] sysv_free_block: flc_count > flc_size [ 978.764791][ T9238] sysv_free_block: flc_count > flc_size [ 978.787609][ T9238] sysv_free_block: flc_count > flc_size [ 978.805420][ T9238] sysv_free_block: flc_count > flc_size [ 978.833625][ T9238] sysv_free_block: flc_count > flc_size [ 978.848096][ T9238] sysv_free_block: flc_count > flc_size [ 978.854270][ T9238] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 978.991613][ T4189] usb 3-1: config 53 has an invalid interface number: 240 but max is 0 [ 978.999960][ T4189] usb 3-1: config 53 has no interface number 0 [ 979.170181][ T4189] usb 3-1: config 53 interface 240 altsetting 0 has an invalid endpoint with address 0xC2, skipping [ 979.224474][ T4189] usb 3-1: config 53 interface 240 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 979.489233][T12740] loop4: detected capacity change from 0 to 1024 [ 979.626086][T12740] EXT4-fs (loop4): Ignoring removed orlov option [ 979.662038][ T4189] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0106, bcdDevice=ec.89 [ 979.696133][ T4189] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 979.720202][T12740] EXT4-fs (loop4): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 981.091107][ T4189] usb 3-1: Product: syz [ 981.095317][ T4189] usb 3-1: Manufacturer: syz [ 981.099949][ T4189] usb 3-1: SerialNumber: syz [ 981.141121][ T4189] usb 3-1: can't set config #53, error -71 [ 981.165011][ T4189] usb 3-1: USB disconnect, device number 40 [ 982.075293][T12770] loop5: detected capacity change from 0 to 512 [ 982.148293][T12773] loop0: detected capacity change from 0 to 512 [ 982.174291][T12771] loop6: detected capacity change from 0 to 2048 [ 982.234876][T12771] UDF-fs: bad mount option " [ 982.234876][T12771] " or missing value [ 983.128204][T12770] EXT4-fs error (device loop5): ext4_orphan_get:1401: inode #15: comm syz.5.2100: inode has both inline data and extents flags [ 983.145486][T12770] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.2100: couldn't read orphan inode 15 (err -117) [ 983.152497][T12773] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a803c02c, mo2=0102] [ 983.172195][T12770] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 983.196791][T12773] System zones: 1-12 [ 983.203556][T12786] FAULT_INJECTION: forcing a failure. [ 983.203556][T12786] name failslab, interval 1, probability 0, space 0, times 0 [ 983.220383][T12786] CPU: 1 PID: 12786 Comm: syz.2.2105 Not tainted syzkaller #0 [ 983.227889][T12786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 983.237962][T12786] Call Trace: [ 983.241256][T12786] [ 983.244207][T12786] dump_stack_lvl+0x168/0x230 [ 983.248912][T12786] ? show_regs_print_info+0x20/0x20 [ 983.254139][T12786] ? load_image+0x3b0/0x3b0 [ 983.258679][T12786] should_fail+0x38c/0x4c0 [ 983.263127][T12786] should_failslab+0x5/0x20 [ 983.267646][T12786] slab_pre_alloc_hook+0x51/0xc0 [ 983.272607][T12786] kmem_cache_alloc_node+0x47/0x2d0 [ 983.277830][T12786] ? __alloc_skb+0xf4/0x750 [ 983.282365][T12786] __alloc_skb+0xf4/0x750 [ 983.286716][T12786] hci_mgmt_cmd+0x180/0xd90 [ 983.291252][T12786] ? sock_prot_inuse_get+0x1df/0x210 [ 983.296568][T12786] hci_sock_sendmsg+0x372/0xa80 [ 983.301447][T12786] ? hci_sock_getsockopt+0x460/0x460 [ 983.306771][T12786] ? aa_sock_msg_perm+0x94/0x150 [ 983.311736][T12786] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 983.317038][T12786] ? security_socket_sendmsg+0x7c/0xa0 [ 983.322709][T12786] sock_write_iter+0x29c/0x380 [ 983.327507][T12786] ? sock_read_iter+0x340/0x340 [ 983.332375][T12786] ? io_submit_one+0x121/0x1330 [ 983.337249][T12786] ? common_file_perm+0x171/0x1c0 [ 983.342295][T12786] ? fsnotify_perm+0x5d/0x560 [ 983.347017][T12786] ? security_file_permission+0x75/0xa0 [ 983.352579][T12786] aio_write+0x513/0x720 [ 983.356956][T12786] ? aio_read+0x430/0x430 [ 983.361319][T12786] ? __might_fault+0xb7/0x110 [ 983.366014][T12786] ? __fget_files+0x40f/0x480 [ 983.370738][T12786] io_submit_one+0x6ac/0x1330 [ 983.375452][T12786] ? lookup_ioctx+0x5f0/0x5f0 [ 983.380151][T12786] ? __might_fault+0xb7/0x110 [ 983.384861][T12786] ? __might_fault+0xb3/0x110 [ 983.389555][T12786] __se_sys_io_submit+0x190/0x300 [ 983.394603][T12786] ? __x64_sys_io_submit+0x80/0x80 [ 983.399744][T12786] ? vtime_user_exit+0x2dc/0x400 [ 983.404826][T12786] ? lockdep_hardirqs_on+0x94/0x140 [ 983.410060][T12786] do_syscall_64+0x4c/0xa0 [ 983.414498][T12786] ? clear_bhb_loop+0x30/0x80 [ 983.418649][T12773] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.2104: error while reading EA inode 32 err=-116 [ 983.419191][T12786] ? clear_bhb_loop+0x30/0x80 [ 983.436407][T12786] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 983.442324][T12786] RIP: 0033:0x7f8a4b935749 [ 983.444543][T12773] EXT4-fs (loop0): Remounting filesystem read-only [ 983.446765][T12786] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 983.459640][T12773] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2826: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 983.472873][T12786] RSP: 002b:00007f8a49b9c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 983.472898][T12786] RAX: ffffffffffffffda RBX: 00007f8a4bb8bfa0 RCX: 00007f8a4b935749 [ 983.472912][T12786] RDX: 0000200000000940 RSI: 0000000000000001 RDI: 00007f8a49b58000 [ 983.472925][T12786] RBP: 00007f8a49b9c090 R08: 0000000000000000 R09: 0000000000000000 [ 983.472936][T12786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 983.472948][T12786] R13: 00007f8a4bb8c038 R14: 00007f8a4bb8bfa0 R15: 00007ffe223dbe38 [ 983.472976][T12786] [ 983.541893][T12773] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.2104: error while reading EA inode 32 err=-116 [ 983.560069][T12773] EXT4-fs (loop0): Remounting filesystem read-only [ 983.648958][ T1110] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 983.661648][T12773] EXT4-fs (loop0): 1 orphan inode deleted [ 983.668883][T12773] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,debug,debug_want_extra_isize=0x000000000000005e,noauto_da_alloc,bsdgroups,jqfmt=vfsv1,abort,. Quota mode: none. [ 985.341198][ T1110] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 985.354927][T12807] loop2: detected capacity change from 0 to 128 [ 985.369898][T12808] loop6: detected capacity change from 0 to 1024 [ 985.383718][ T1110] usb 7-1: can't read configurations, error -71 [ 985.488496][T12808] EXT4-fs (loop6): Ignoring removed orlov option [ 985.498242][T12807] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 985.511235][T12807] hpfs: filesystem error: improperly stopped [ 985.522402][T12807] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 985.551871][T12807] hpfs: You really don't want any checks? You are crazy... [ 985.566257][T12807] hpfs: hpfs_map_sector(): read error [ 985.587965][T12807] hpfs: code page support is disabled [ 985.596112][T12808] EXT4-fs (loop6): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 986.510752][T12807] hpfs: hpfs_map_4sectors(): unaligned read [ 986.594675][T12807] hpfs: hpfs_map_4sectors(): unaligned read [ 986.668312][T12807] hpfs: filesystem error: unable to find root dir [ 986.903557][T12807] hpfs: bad mount options. [ 987.116618][T12829] loop5: detected capacity change from 0 to 512 [ 987.255600][T12829] EXT4-fs error (device loop5): ext4_orphan_get:1401: inode #15: comm syz.5.2119: inode has both inline data and extents flags [ 987.311223][ T1110] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 987.385830][T12829] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.2119: couldn't read orphan inode 15 (err -117) [ 987.482048][T12829] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 987.815652][ T1110] usb 3-1: unable to get BOS descriptor or descriptor too short [ 987.901631][ T1110] usb 3-1: not running at top speed; connect to a high speed hub [ 988.731123][ T1110] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 988.738721][ T1110] usb 3-1: can't read configurations, error -71 [ 989.613165][T12846] loop4: detected capacity change from 0 to 7 [ 989.631124][ T4187] Dev loop4: unable to read RDB block 7 [ 989.642956][ T4187] loop4: AHDI p1 p2 [ 989.650343][ T4187] loop4: partition table partially beyond EOD, truncated [ 990.468026][ T4187] loop4: p1 size 4227858431 extends beyond EOD, truncated [ 990.657665][T12846] Dev loop4: unable to read RDB block 7 [ 990.671129][T12846] loop4: AHDI p1 p2 [ 990.682194][T12846] loop4: partition table partially beyond EOD, truncated [ 990.704466][T12861] loop5: detected capacity change from 0 to 1024 [ 990.746124][T12861] EXT4-fs (loop5): Ignoring removed orlov option [ 990.753634][T12846] loop4: p1 size 4227858431 extends beyond EOD, truncated [ 991.593053][T12861] EXT4-fs (loop5): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 992.037946][T12887] FAULT_INJECTION: forcing a failure. [ 992.037946][T12887] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 992.056014][T12887] CPU: 1 PID: 12887 Comm: syz.2.2135 Not tainted syzkaller #0 [ 992.063615][T12887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 992.073699][T12887] Call Trace: [ 992.076976][T12887] [ 992.079905][T12887] dump_stack_lvl+0x168/0x230 [ 992.084584][T12887] ? show_regs_print_info+0x20/0x20 [ 992.089786][T12887] ? load_image+0x3b0/0x3b0 [ 992.094298][T12887] ? __lock_acquire+0x7c60/0x7c60 [ 992.099322][T12887] should_fail+0x38c/0x4c0 [ 992.103742][T12887] _copy_to_user+0x2e/0x130 [ 992.108235][T12887] simple_read_from_buffer+0xe3/0x150 [ 992.113597][T12887] proc_fail_nth_read+0x19a/0x210 [ 992.118620][T12887] ? proc_fault_inject_write+0x2f0/0x2f0 [ 992.124254][T12887] ? fsnotify_perm+0x254/0x560 [ 992.129019][T12887] ? proc_fault_inject_write+0x2f0/0x2f0 [ 992.134652][T12887] vfs_read+0x2f6/0xcf0 [ 992.138811][T12887] ? kernel_read+0x1e0/0x1e0 [ 992.143396][T12887] ? __fget_files+0x40f/0x480 [ 992.148065][T12887] ? mutex_lock_nested+0x17/0x20 [ 992.152993][T12887] ? __fdget_pos+0x2bf/0x370 [ 992.157577][T12887] ? ksys_read+0x71/0x250 [ 992.161900][T12887] ksys_read+0x14d/0x250 [ 992.166139][T12887] ? vfs_write+0xd00/0xd00 [ 992.170584][T12887] ? lockdep_hardirqs_on+0x94/0x140 [ 992.175787][T12887] do_syscall_64+0x4c/0xa0 [ 992.180204][T12887] ? clear_bhb_loop+0x30/0x80 [ 992.184885][T12887] ? clear_bhb_loop+0x30/0x80 [ 992.189684][T12887] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 992.195599][T12887] RIP: 0033:0x7f8a4b93415c [ 992.200007][T12887] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 992.219613][T12887] RSP: 002b:00007f8a49b7b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 992.228021][T12887] RAX: ffffffffffffffda RBX: 00007f8a4bb8c090 RCX: 00007f8a4b93415c [ 992.235980][T12887] RDX: 000000000000000f RSI: 00007f8a49b7b0a0 RDI: 000000000000000e [ 992.243943][T12887] RBP: 00007f8a49b7b090 R08: 0000000000000000 R09: 0000000000000000 [ 992.251902][T12887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 992.259858][T12887] R13: 00007f8a4bb8c128 R14: 00007f8a4bb8c090 R15: 00007ffe223dbe38 [ 992.267831][T12887] [ 992.372546][T12891] loop0: detected capacity change from 0 to 512 [ 992.399682][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.406248][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.571840][T12891] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.2136: inode has both inline data and extents flags [ 992.589357][T12891] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.2136: couldn't read orphan inode 15 (err -117) [ 993.438411][ T1110] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 993.487524][T12891] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 994.960966][ T1110] usb 6-1: Using ep0 maxpacket: 16 [ 995.240135][ T1110] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 995.249017][ T1110] usb 6-1: can't read configurations, error -71 [ 996.101478][ T4849] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 996.180326][T12927] loop6: detected capacity change from 0 to 8192 [ 996.556724][T12937] loop2: detected capacity change from 0 to 512 [ 997.118099][T12937] EXT4-fs (loop2): Ignoring removed orlov option [ 997.125248][T12937] EXT4-fs (loop2): Unrecognized mount option "nouser_xattr.barrier" or missing value [ 997.203666][ T4849] usb 5-1: device descriptor read/64, error -71 [ 997.232456][T12927] REISERFS (device loop6): found reiserfs format "3.5" with non-standard journal [ 997.243235][T12940] loop5: detected capacity change from 0 to 128 [ 997.265860][T12927] REISERFS (device loop6): using ordered data mode [ 997.275017][T12927] reiserfs: using flush barriers [ 997.283472][T12927] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 997.309171][T12927] REISERFS (device loop6): checking transaction log (loop6) [ 997.327486][T12927] REISERFS (device loop6): Using r5 hash to sort names [ 997.334940][T12927] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 997.346023][T12945] loop0: detected capacity change from 0 to 128 [ 997.354722][T12940] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 997.365729][T12940] ext4 filesystem being mounted at /219/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 997.379384][T12927] REISERFS warning (device loop6): super-6502 reiserfs_getopt: unknown mount option "ÿÿ184467440737095516150xffffffffffffffff18446744073709551615±ñV?Œù³ßCp~'~8pٻ젌|ž^½Ö(cŸoö—ÈêM ) Çÿÿÿÿÿÿÿÿÿ" [ 997.463396][T12940] EXT4-fs error (device loop5): make_indexed_dir:2333: inode #2: block 18: comm syz.5.2150: bad entry in directory: rec_len is smaller than minimal - offset=36, inode=128, rec_len=9, size=1000 fake=0 [ 997.484275][ T4849] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 997.558513][T12940] EXT4-fs warning (device loop5): dx_probe:893: inode #2: comm syz.5.2150: dx entry: limit 0 != root limit 125 [ 997.572951][T12940] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.2150: Corrupt directory, running e2fsck is recommended [ 997.602271][T12940] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2150'. [ 997.611421][T12940] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2150'. [ 997.620829][T10037] attempt to access beyond end of device [ 997.620829][T10037] loop0: rw=1, want=178, limit=128 [ 997.636720][T12940] device bond0 entered promiscuous mode [ 997.642748][T12940] device bond_slave_0 entered promiscuous mode [ 997.649069][T12940] device bond_slave_1 entered promiscuous mode [ 997.671657][T12940] device bond0 left promiscuous mode [ 997.678399][T12940] device bond_slave_0 left promiscuous mode [ 997.685841][T12940] device bond_slave_1 left promiscuous mode [ 997.716851][ T4849] usb 5-1: device descriptor read/64, error -71 [ 997.851253][ T4849] usb usb5-port1: attempt power cycle [ 997.865137][T12954] loop0: detected capacity change from 0 to 512 [ 997.911122][ T4256] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 997.952405][T12954] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.2155: inode has both inline data and extents flags [ 997.976158][T12954] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.2155: couldn't read orphan inode 15 (err -117) [ 997.994845][T12954] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 998.161040][ T4256] usb 3-1: Using ep0 maxpacket: 16 [ 998.732007][ T4849] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 998.811242][ T4849] usb 5-1: device descriptor read/8, error -71 [ 999.111428][ T4256] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 999.121684][ T4256] usb 3-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 999.134666][ T4256] usb 3-1: config 0 interface 0 has no altsetting 0 [ 999.141311][ T4256] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 999.150440][ T4256] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 999.162129][ T4256] usb 3-1: config 0 descriptor?? [ 999.234338][ T4256] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 999.464171][ T4256] usb 3-1: USB disconnect, device number 43 [ 999.730639][T12971] loop4: detected capacity change from 0 to 4096 [ 999.767461][T12958] loop5: detected capacity change from 0 to 32768 [ 999.809382][T12980] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 999.810226][T12971] NILFS (loop4): corrupt root inode [ 1000.006637][T12978] loop6: detected capacity change from 0 to 1024 [ 1000.032337][T12971] netlink: 'syz.4.2160': attribute type 1 has an invalid length. [ 1000.140412][T12978] EXT4-fs (loop6): Ignoring removed orlov option [ 1000.379988][T12978] EXT4-fs (loop6): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 1000.984903][T12994] loop0: detected capacity change from 0 to 4096 [ 1001.173358][T12994] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1001.177093][T13006] FAULT_INJECTION: forcing a failure. [ 1001.177093][T13006] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1001.193227][T13006] CPU: 0 PID: 13006 Comm: syz.2.2170 Not tainted syzkaller #0 [ 1001.200707][T13006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1001.210772][T13006] Call Trace: [ 1001.214043][T13006] [ 1001.216960][T13006] dump_stack_lvl+0x168/0x230 [ 1001.221630][T13006] ? show_regs_print_info+0x20/0x20 [ 1001.226818][T13006] ? load_image+0x3b0/0x3b0 [ 1001.231327][T13006] ? __lock_acquire+0x7c60/0x7c60 [ 1001.236345][T13006] should_fail+0x38c/0x4c0 [ 1001.240759][T13006] _copy_from_iter+0x22a/0x1150 [ 1001.245645][T13006] ? __lock_acquire+0x7c60/0x7c60 [ 1001.250667][T13006] ? copy_mc_pipe_to_iter+0x7d0/0x7d0 [ 1001.256033][T13006] ? __virt_addr_valid+0x3c6/0x470 [ 1001.261149][T13006] ? __phys_addr+0xb6/0x170 [ 1001.265647][T13006] ? __phys_addr_symbol+0x2b/0x70 [ 1001.270664][T13006] ? __check_object_size+0x30c/0x410 [ 1001.275954][T13006] netlink_sendmsg+0x749/0xbc0 [ 1001.280728][T13006] ? netlink_getsockopt+0x560/0x560 [ 1001.285984][T13006] ? aa_sock_msg_perm+0x94/0x150 [ 1001.290933][T13006] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1001.296238][T13006] ? security_socket_sendmsg+0x7c/0xa0 [ 1001.301707][T13006] ? netlink_getsockopt+0x560/0x560 [ 1001.306907][T13006] ____sys_sendmsg+0x5a2/0x8c0 [ 1001.311675][T13006] ? memset+0x1e/0x40 [ 1001.315654][T13006] ? __sys_sendmsg_sock+0x30/0x30 [ 1001.320676][T13006] ? import_iovec+0x6f/0xa0 [ 1001.325178][T13006] ___sys_sendmsg+0x1f0/0x260 [ 1001.329860][T13006] ? __sys_sendmsg+0x250/0x250 [ 1001.334637][T13006] ? vfs_write+0x84d/0xd00 [ 1001.339093][T13006] ? __fdget+0x18b/0x210 [ 1001.343348][T13006] __se_sys_sendmsg+0x190/0x250 [ 1001.348222][T13006] ? __x64_sys_sendmsg+0x80/0x80 [ 1001.353246][T13006] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 1001.359241][T13006] ? lockdep_hardirqs_on+0x94/0x140 [ 1001.364441][T13006] do_syscall_64+0x4c/0xa0 [ 1001.368857][T13006] ? clear_bhb_loop+0x30/0x80 [ 1001.373535][T13006] ? clear_bhb_loop+0x30/0x80 [ 1001.378221][T13006] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1001.384109][T13006] RIP: 0033:0x7f8a4b935749 [ 1001.388522][T13006] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1001.408128][T13006] RSP: 002b:00007f8a49b9c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1001.416626][T13006] RAX: ffffffffffffffda RBX: 00007f8a4bb8bfa0 RCX: 00007f8a4b935749 [ 1001.424590][T13006] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 1001.432547][T13006] RBP: 00007f8a49b9c090 R08: 0000000000000000 R09: 0000000000000000 [ 1001.440506][T13006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1001.448556][T13006] R13: 00007f8a4bb8c038 R14: 00007f8a4bb8bfa0 R15: 00007ffe223dbe38 [ 1001.456539][T13006] [ 1001.459694][ C0] vkms_vblank_simulate: vblank timer overrun [ 1001.526759][T12994] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 1001.565530][T12994] System zones: 0-5 [ 1001.623895][T12994] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,delalloc,resuid=0x0000000000000000,test_dummy_encryption,nodiscard,data_err=ignore,acl,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 1001.646783][ C0] vkms_vblank_simulate: vblank timer overrun [ 1002.205402][T13015] loop2: detected capacity change from 0 to 4096 [ 1002.250578][T13025] FAULT_INJECTION: forcing a failure. [ 1002.250578][T13025] name failslab, interval 1, probability 0, space 0, times 0 [ 1002.360966][T13025] CPU: 0 PID: 13025 Comm: syz.6.2174 Not tainted syzkaller #0 [ 1002.368475][T13025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1002.378552][T13025] Call Trace: [ 1002.381849][T13025] [ 1002.384800][T13025] dump_stack_lvl+0x168/0x230 [ 1002.389507][T13025] ? show_regs_print_info+0x20/0x20 [ 1002.394728][T13025] ? load_image+0x3b0/0x3b0 [ 1002.399254][T13025] ? __might_sleep+0xf0/0xf0 [ 1002.403860][T13025] ? __lock_acquire+0x7c60/0x7c60 [ 1002.408917][T13025] should_fail+0x38c/0x4c0 [ 1002.413363][T13025] should_failslab+0x5/0x20 [ 1002.417969][T13025] slab_pre_alloc_hook+0x51/0xc0 [ 1002.422925][T13025] ? __alloc_file+0x25/0x240 [ 1002.427536][T13025] kmem_cache_alloc+0x3d/0x290 [ 1002.432322][T13025] __alloc_file+0x25/0x240 [ 1002.436759][T13025] alloc_empty_file+0x90/0x180 [ 1002.441536][T13025] alloc_file+0x5b/0x4f0 [ 1002.445802][T13025] ? do_raw_spin_unlock+0x11d/0x230 [ 1002.451013][T13025] alloc_file_pseudo+0x17a/0x1f0 [ 1002.455953][T13025] ? alloc_empty_file_noaccount+0x80/0x80 [ 1002.461679][T13025] __shmem_file_setup+0x1cf/0x290 [ 1002.466704][T13025] ? shmem_file_setup+0x13/0x30 [ 1002.471556][T13025] __se_sys_memfd_create+0x290/0x430 [ 1002.476871][T13025] ? __x64_sys_memfd_create+0x60/0x60 [ 1002.482252][T13025] ? lockdep_hardirqs_on+0x94/0x140 [ 1002.487480][T13025] do_syscall_64+0x4c/0xa0 [ 1002.491896][T13025] ? clear_bhb_loop+0x30/0x80 [ 1002.496581][T13025] ? clear_bhb_loop+0x30/0x80 [ 1002.501275][T13025] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1002.507165][T13025] RIP: 0033:0x7f4a1b5d4749 [ 1002.511584][T13025] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1002.531190][T13025] RSP: 002b:00007f4a1983ae18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 1002.539622][T13025] RAX: ffffffffffffffda RBX: 00000000000003c6 RCX: 00007f4a1b5d4749 [ 1002.547591][T13025] RDX: 00007f4a1983aef0 RSI: 0000000000000000 RDI: 00007f4a1b659960 [ 1002.555556][T13025] RBP: 00002000000004c0 R08: 00007f4a1983abb7 R09: 00007f4a1983ae40 [ 1002.563538][T13025] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000440 [ 1002.571509][T13025] R13: 00007f4a1983aef0 R14: 00007f4a1983aeb0 R15: 0000200000000480 [ 1002.579669][T13025] [ 1002.582811][ C0] vkms_vblank_simulate: vblank timer overrun [ 1002.622076][T13015] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 1002.642516][ C0] vkms_vblank_simulate: vblank timer overrun [ 1003.124203][T13015] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 1003.165944][T13015] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1003.228446][T13015] ntfs: (device loop2): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 1003.270528][T13015] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1003.320985][T13015] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1003.356643][T13039] FAULT_INJECTION: forcing a failure. [ 1003.356643][T13039] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1003.369969][T13039] CPU: 1 PID: 13039 Comm: syz.0.2181 Not tainted syzkaller #0 [ 1003.377448][T13039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1003.387509][T13039] Call Trace: [ 1003.390792][T13039] [ 1003.393744][T13039] dump_stack_lvl+0x168/0x230 [ 1003.398436][T13039] ? show_regs_print_info+0x20/0x20 [ 1003.398867][T13015] ntfs: volume version 3.1. [ 1003.403648][T13039] ? load_image+0x3b0/0x3b0 [ 1003.403676][T13039] ? __lock_acquire+0x7c60/0x7c60 [ 1003.403700][T13039] ? aa_sk_perm+0x8f0/0x8f0 [ 1003.422222][T13039] should_fail+0x38c/0x4c0 [ 1003.426654][T13039] _copy_from_user+0x2e/0x170 [ 1003.431351][T13039] sock_getsockopt+0xff/0x1b10 [ 1003.436150][T13039] ? dst_negative_advice+0x220/0x220 [ 1003.441464][T13039] ? __lock_acquire+0x7c60/0x7c60 [ 1003.442018][T13015] ntfs: (device loop2): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 1003.446514][T13039] ? aa_sk_perm+0x7b4/0x8f0 [ 1003.446548][T13039] ? aa_af_perm+0x2b0/0x2b0 [ 1003.467225][T13039] ? __fget_files+0x40f/0x480 [ 1003.471929][T13039] ? aa_sock_opt_perm+0x74/0x100 [ 1003.476882][T13039] ? bpf_lsm_socket_getsockopt+0x5/0x10 [ 1003.482435][T13039] ? security_socket_getsockopt+0x7a/0xa0 [ 1003.488171][T13039] __sys_getsockopt+0x144/0x230 [ 1003.493042][T13039] __x64_sys_getsockopt+0xb1/0xc0 [ 1003.498100][T13039] do_syscall_64+0x4c/0xa0 [ 1003.502527][T13039] ? clear_bhb_loop+0x30/0x80 [ 1003.507218][T13039] ? clear_bhb_loop+0x30/0x80 [ 1003.510512][T13015] ntfs: (device loop2): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 1003.511901][T13039] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1003.511926][T13039] RIP: 0033:0x7f637585a749 [ 1003.535573][T13039] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1003.555278][T13039] RSP: 002b:00007f6373ac1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1003.563829][T13039] RAX: ffffffffffffffda RBX: 00007f6375ab0fa0 RCX: 00007f637585a749 [ 1003.571818][T13039] RDX: 0000000000000041 RSI: 0000000000000001 RDI: 0000000000000004 [ 1003.577628][T13015] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 1003.579803][T13039] RBP: 00007f6373ac1090 R08: 0000200000000140 R09: 0000000000000000 [ 1003.598785][T13039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1003.606432][T13031] loop5: detected capacity change from 0 to 32768 [ 1003.606861][T13039] R13: 00007f6375ab1038 R14: 00007f6375ab0fa0 R15: 00007ffffe6393e8 [ 1003.621253][T13039] [ 1003.625049][ T4849] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1003.629220][T13015] ntfs: (device loop2): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 1003.700658][T13031] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.2179 (13031) [ 1003.870940][ T4849] usb 5-1: Using ep0 maxpacket: 16 [ 1003.895064][T13031] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 1003.914213][T13031] BTRFS info (device loop5): using free space tree [ 1003.942701][T13031] BTRFS info (device loop5): has skinny extents [ 1004.134581][ T4849] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1004.166362][ T4849] usb 5-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1004.183401][T13057] loop6: detected capacity change from 0 to 8192 [ 1004.185071][ T4849] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1004.196433][ T4849] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1004.205840][ T4849] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1004.219957][T13031] BTRFS info (device loop5): enabling ssd optimizations [ 1004.237582][ T4849] usb 5-1: config 0 descriptor?? [ 1004.248370][T13057] REISERFS (device loop6): found reiserfs format "3.5" with non-standard journal [ 1004.297014][T13057] REISERFS (device loop6): using ordered data mode [ 1004.313437][ T4849] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1004.323078][T13057] reiserfs: using flush barriers [ 1004.337905][T13057] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1004.362115][T13057] REISERFS (device loop6): checking transaction log (loop6) [ 1004.384599][T13057] REISERFS (device loop6): Using r5 hash to sort names [ 1004.429283][T13057] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 1004.528327][ T4221] usb 5-1: USB disconnect, device number 61 [ 1005.342554][ T144] BTRFS info (device loop5): qgroup scan completed (inconsistency flag cleared) [ 1006.016965][T13089] netlink: 108 bytes leftover after parsing attributes in process `syz.6.2192'. [ 1006.021940][T13086] FAULT_INJECTION: forcing a failure. [ 1006.021940][T13086] name failslab, interval 1, probability 0, space 0, times 0 [ 1006.048091][T13089] loop6: detected capacity change from 0 to 512 [ 1006.051077][T13086] CPU: 0 PID: 13086 Comm: syz.0.2190 Not tainted syzkaller #0 [ 1006.061913][T13086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1006.071979][T13086] Call Trace: [ 1006.075263][T13086] [ 1006.078200][T13086] dump_stack_lvl+0x168/0x230 [ 1006.082889][T13086] ? show_regs_print_info+0x20/0x20 [ 1006.088103][T13086] ? load_image+0x3b0/0x3b0 [ 1006.092639][T13086] ? __might_sleep+0xf0/0xf0 [ 1006.097239][T13086] ? __lock_acquire+0x7c60/0x7c60 [ 1006.102309][T13086] should_fail+0x38c/0x4c0 [ 1006.106758][T13086] should_failslab+0x5/0x20 [ 1006.111281][T13086] slab_pre_alloc_hook+0x51/0xc0 [ 1006.116233][T13086] ? __alloc_file+0x25/0x240 [ 1006.120828][T13086] kmem_cache_alloc+0x3d/0x290 [ 1006.125611][T13086] __alloc_file+0x25/0x240 [ 1006.130050][T13086] alloc_empty_file+0x90/0x180 [ 1006.134838][T13086] alloc_file+0x5b/0x4f0 [ 1006.139095][T13086] ? do_raw_spin_unlock+0x11d/0x230 [ 1006.144335][T13086] alloc_file_pseudo+0x17a/0x1f0 [ 1006.149382][T13086] ? alloc_empty_file_noaccount+0x80/0x80 [ 1006.155131][T13086] __shmem_file_setup+0x1cf/0x290 [ 1006.160175][T13086] ? shmem_file_setup+0x13/0x30 [ 1006.165046][T13086] __se_sys_memfd_create+0x290/0x430 [ 1006.170361][T13086] ? __x64_sys_memfd_create+0x60/0x60 [ 1006.175763][T13086] ? lockdep_hardirqs_on+0x94/0x140 [ 1006.180993][T13086] do_syscall_64+0x4c/0xa0 [ 1006.185421][T13086] ? clear_bhb_loop+0x30/0x80 [ 1006.190114][T13086] ? clear_bhb_loop+0x30/0x80 [ 1006.194816][T13086] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1006.200726][T13086] RIP: 0033:0x7f637585a749 [ 1006.205160][T13086] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1006.224775][T13086] RSP: 002b:00007f6373ac0e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 1006.233196][T13086] RAX: ffffffffffffffda RBX: 00000000000010ef RCX: 00007f637585a749 [ 1006.241165][T13086] RDX: 00007f6373ac0ef0 RSI: 0000000000000000 RDI: 00007f63758df960 [ 1006.249131][T13086] RBP: 00002000000011c0 R08: 00007f6373ac0bb7 R09: 00007f6373ac0e40 [ 1006.257116][T13086] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000001140 [ 1006.265081][T13086] R13: 00007f6373ac0ef0 R14: 00007f6373ac0eb0 R15: 0000200000001180 [ 1006.273075][T13086] [ 1006.276128][ C0] vkms_vblank_simulate: vblank timer overrun [ 1006.335582][T13089] EXT4-fs (loop6): Ignoring removed orlov option [ 1006.342152][T13089] EXT4-fs (loop6): Unrecognized mount option "nouser_xattr.barrier" or missing value [ 1006.567922][T13098] loop0: detected capacity change from 0 to 4096 [ 1006.836379][T13103] loop2: detected capacity change from 0 to 512 [ 1007.124930][T13110] loop5: detected capacity change from 0 to 164 [ 1007.135001][T13103] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.2196: inode has both inline data and extents flags [ 1007.154558][T13103] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.2196: couldn't read orphan inode 15 (err -117) [ 1007.632796][T13103] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1007.676838][T13111] loop0: detected capacity change from 0 to 1024 [ 1007.691793][T13118] loop6: detected capacity change from 0 to 256 [ 1008.377631][T13118] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1008.407355][T13111] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1008.494905][T13118] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 1009.948608][T13118] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 1010.760707][T13136] loop4: detected capacity change from 0 to 128 [ 1011.714326][T13150] FAULT_INJECTION: forcing a failure. [ 1011.714326][T13150] name failslab, interval 1, probability 0, space 0, times 0 [ 1011.803354][T13150] CPU: 1 PID: 13150 Comm: syz.2.2206 Not tainted syzkaller #0 [ 1011.810860][T13150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1011.820933][T13150] Call Trace: [ 1011.824221][T13150] [ 1011.827163][T13150] dump_stack_lvl+0x168/0x230 [ 1011.831877][T13150] ? show_regs_print_info+0x20/0x20 [ 1011.837098][T13150] ? load_image+0x3b0/0x3b0 [ 1011.841705][T13150] ? __might_sleep+0xf0/0xf0 [ 1011.846306][T13150] ? __lock_acquire+0x7c60/0x7c60 [ 1011.851348][T13150] should_fail+0x38c/0x4c0 [ 1011.855788][T13150] should_failslab+0x5/0x20 [ 1011.860296][T13150] slab_pre_alloc_hook+0x51/0xc0 [ 1011.865262][T13150] ? __alloc_file+0x25/0x240 [ 1011.869866][T13150] kmem_cache_alloc+0x3d/0x290 [ 1011.874652][T13150] __alloc_file+0x25/0x240 [ 1011.879084][T13150] alloc_empty_file+0x90/0x180 [ 1011.883877][T13150] alloc_file+0x5b/0x4f0 [ 1011.888141][T13150] ? do_raw_spin_unlock+0x11d/0x230 [ 1011.893379][T13150] alloc_file_pseudo+0x17a/0x1f0 [ 1011.898341][T13150] ? alloc_empty_file_noaccount+0x80/0x80 [ 1011.904088][T13150] __shmem_file_setup+0x1cf/0x290 [ 1011.909175][T13150] ? shmem_file_setup+0x13/0x30 [ 1011.914055][T13150] __se_sys_memfd_create+0x290/0x430 [ 1011.919390][T13150] ? __x64_sys_memfd_create+0x60/0x60 [ 1011.924798][T13150] ? lockdep_hardirqs_on+0x94/0x140 [ 1011.930025][T13150] do_syscall_64+0x4c/0xa0 [ 1011.934465][T13150] ? clear_bhb_loop+0x30/0x80 [ 1011.939187][T13150] ? clear_bhb_loop+0x30/0x80 [ 1011.943918][T13150] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1011.949831][T13150] RIP: 0033:0x7f8a4b935749 [ 1011.954276][T13150] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1011.973901][T13150] RSP: 002b:00007f8a49b9be18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 1011.982328][T13150] RAX: ffffffffffffffda RBX: 000000000000051a RCX: 00007f8a4b935749 [ 1011.990444][T13150] RDX: 00007f8a49b9bef0 RSI: 0000000000000000 RDI: 00007f8a4b9ba960 [ 1011.998426][T13150] RBP: 0000200000000600 R08: 00007f8a49b9bbb7 R09: 00007f8a49b9be40 [ 1012.006416][T13150] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000580 [ 1012.014441][T13150] R13: 00007f8a49b9bef0 R14: 00007f8a49b9beb0 R15: 00002000000005c0 [ 1012.022453][T13150] [ 1012.194434][T13160] loop2: detected capacity change from 0 to 256 [ 1012.210006][T13152] loop4: detected capacity change from 0 to 32768 [ 1012.247096][T13152] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.2208 (13152) [ 1012.266556][T13162] IPVS: sync thread started: state = MASTER, mcast_ifn = bond_slave_0, syncid = 1, id = 0 [ 1012.285378][T13160] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1012.300422][T13164] loop0: detected capacity change from 0 to 128 [ 1012.312599][T13160] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 1012.324255][T13152] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 1012.333003][T13152] BTRFS info (device loop4): using free space tree [ 1012.339526][T13152] BTRFS info (device loop4): has skinny extents [ 1012.358464][T13160] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62d793a, utbl_chksum : 0xe619d30d) [ 1012.385648][T13164] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 1012.513154][T13164] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 1012.535581][T13164] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 1012.557886][T13164] UDF-fs: Scanning with blocksize 512 failed [ 1012.614745][T13164] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 1012.631617][T13164] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 1012.647578][T13164] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 1012.997715][T13164] UDF-fs: Scanning with blocksize 1024 failed [ 1013.452234][T13164] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 1013.495327][T13152] BTRFS info (device loop4): enabling ssd optimizations [ 1013.561172][T13164] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 1013.576244][T13164] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 1013.657094][T13164] UDF-fs: Scanning with blocksize 2048 failed [ 1013.666931][T13164] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 1013.682559][T13188] FAULT_INJECTION: forcing a failure. [ 1013.682559][T13188] name failslab, interval 1, probability 0, space 0, times 0 [ 1013.696219][T13164] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 1013.708249][T13164] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 1013.716329][T13164] UDF-fs: Scanning with blocksize 4096 failed [ 1013.722554][T13164] UDF-fs: warning (device loop0): udf_fill_super: No partition found (1) [ 1013.731586][T13188] CPU: 0 PID: 13188 Comm: syz.2.2214 Not tainted syzkaller #0 [ 1013.739071][T13188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1013.749139][T13188] Call Trace: [ 1013.752439][T13188] [ 1013.755373][T13188] dump_stack_lvl+0x168/0x230 [ 1013.760058][T13188] ? show_regs_print_info+0x20/0x20 [ 1013.765267][T13188] ? load_image+0x3b0/0x3b0 [ 1013.769789][T13188] should_fail+0x38c/0x4c0 [ 1013.774220][T13188] should_failslab+0x5/0x20 [ 1013.778729][T13188] slab_pre_alloc_hook+0x51/0xc0 [ 1013.783661][T13188] ? skb_clone+0x1bd/0x350 [ 1013.788076][T13188] kmem_cache_alloc+0x3d/0x290 [ 1013.792836][T13188] skb_clone+0x1bd/0x350 [ 1013.797078][T13188] __netlink_deliver_tap+0x3cd/0x7c0 [ 1013.802367][T13188] netlink_deliver_tap+0x16c/0x180 [ 1013.807472][T13188] netlink_unicast+0x74f/0x920 [ 1013.812244][T13188] netlink_sendmsg+0x8ab/0xbc0 [ 1013.817006][T13188] ? netlink_getsockopt+0x560/0x560 [ 1013.822194][T13188] ? aa_sock_msg_perm+0x94/0x150 [ 1013.827126][T13188] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1013.832408][T13188] ? security_socket_sendmsg+0x7c/0xa0 [ 1013.837861][T13188] ? netlink_getsockopt+0x560/0x560 [ 1013.843058][T13188] ____sys_sendmsg+0x5a2/0x8c0 [ 1013.847830][T13188] ? memset+0x1e/0x40 [ 1013.851828][T13188] ? __sys_sendmsg_sock+0x30/0x30 [ 1013.856960][T13188] ? import_iovec+0x6f/0xa0 [ 1013.861547][T13188] ___sys_sendmsg+0x1f0/0x260 [ 1013.866221][T13188] ? __sys_sendmsg+0x250/0x250 [ 1013.870991][T13188] ? vfs_write+0x84d/0xd00 [ 1013.875428][T13188] ? __fdget+0x18b/0x210 [ 1013.879676][T13188] __se_sys_sendmsg+0x190/0x250 [ 1013.884553][T13188] ? __x64_sys_sendmsg+0x80/0x80 [ 1013.889493][T13188] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 1013.895488][T13188] ? lockdep_hardirqs_on+0x94/0x140 [ 1013.900688][T13188] do_syscall_64+0x4c/0xa0 [ 1013.905101][T13188] ? clear_bhb_loop+0x30/0x80 [ 1013.909780][T13188] ? clear_bhb_loop+0x30/0x80 [ 1013.914466][T13188] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1013.920446][T13188] RIP: 0033:0x7f8a4b935749 [ 1013.924857][T13188] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1013.944451][T13188] RSP: 002b:00007f8a49b9c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1013.953379][T13188] RAX: ffffffffffffffda RBX: 00007f8a4bb8bfa0 RCX: 00007f8a4b935749 [ 1013.961346][T13188] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 1013.969311][T13188] RBP: 00007f8a49b9c090 R08: 0000000000000000 R09: 0000000000000000 [ 1013.977282][T13188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1013.985259][T13188] R13: 00007f8a4bb8c038 R14: 00007f8a4bb8bfa0 R15: 00007ffe223dbe38 [ 1013.993244][T13188] [ 1014.054245][T13197] loop2: detected capacity change from 0 to 512 [ 1014.070146][T13194] loop5: detected capacity change from 0 to 256 [ 1014.194653][T13197] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.2217: inode has both inline data and extents flags [ 1014.356274][T13197] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.2217: couldn't read orphan inode 15 (err -117) [ 1014.512651][T13197] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1016.719132][T13221] loop2: detected capacity change from 0 to 4096 [ 1016.822583][T13229] ip6t_rpfilter: unknown options [ 1016.832215][T13229] loop4: detected capacity change from 0 to 128 [ 1018.072496][T13233] loop0: detected capacity change from 0 to 8192 [ 1018.267553][T13221] NILFS (loop2): corrupt root inode [ 1018.281069][T13229] VFS: Found a Xenix FS (block size = 1024) on device loop4 [ 1018.303110][T13236] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1018.320412][T13233] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 1018.339891][T13233] REISERFS (device loop0): using ordered data mode [ 1018.348443][T13233] reiserfs: using flush barriers [ 1018.360688][T13233] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1018.383712][T13233] REISERFS (device loop0): checking transaction log (loop0) [ 1018.478991][ T4187] sysv_free_block: flc_count > flc_size [ 1018.484977][ T4365] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 1018.488151][ T4187] sysv_free_block: flc_count > flc_size [ 1018.498350][ T4187] sysv_free_block: flc_count > flc_size [ 1018.526276][T13233] REISERFS (device loop0): Using r5 hash to sort names [ 1018.535495][T13233] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 1018.540958][ T4187] sysv_free_block: flc_count > flc_size [ 1018.550108][ T4187] sysv_free_block: flc_count > flc_size [ 1018.567534][T13221] netlink: 'syz.2.2222': attribute type 1 has an invalid length. [ 1018.578470][ T4187] sysv_free_block: flc_count > flc_size [ 1018.586562][ T4187] sysv_free_block: flc_count > flc_size [ 1018.592521][ T4187] sysv_free_block: flc_count > flc_size [ 1018.598146][ T4187] sysv_free_block: flc_count > flc_size [ 1018.610891][ T4187] sysv_free_block: flc_count > flc_size [ 1018.616933][ T4187] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1018.655855][T13242] loop2: detected capacity change from 0 to 256 [ 1018.788735][T13242] FAT-fs (loop2): Directory bread(block 64) failed [ 1018.797399][T13242] FAT-fs (loop2): Directory bread(block 65) failed [ 1018.808188][T13242] FAT-fs (loop2): Directory bread(block 66) failed [ 1018.814789][T13242] FAT-fs (loop2): Directory bread(block 67) failed [ 1018.821480][T13242] FAT-fs (loop2): Directory bread(block 68) failed [ 1018.828017][T13242] FAT-fs (loop2): Directory bread(block 69) failed [ 1018.849885][T13242] FAT-fs (loop2): Directory bread(block 70) failed [ 1018.866388][T13242] FAT-fs (loop2): Directory bread(block 71) failed [ 1018.918104][T13242] FAT-fs (loop2): Directory bread(block 72) failed [ 1018.945512][T13242] FAT-fs (loop2): Directory bread(block 73) failed [ 1019.003106][T13247] cgroup: Invalid name [ 1019.153599][T13250] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1019.321205][ T4365] usb 7-1: config 0 has an invalid interface number: 160 but max is 0 [ 1019.430856][ T4365] usb 7-1: config 0 has no interface number 0 [ 1019.538177][ T4365] usb 7-1: config 0 interface 160 has no altsetting 0 [ 1019.931329][ T4365] usb 7-1: string descriptor 0 read error: -71 [ 1019.937931][ T4365] usb 7-1: New USB device found, idVendor=a6da, idProduct=1e78, bcdDevice=56.e4 [ 1019.977856][ T4365] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1020.018584][ T4365] usb 7-1: config 0 descriptor?? [ 1020.024059][T13262] netlink: 'syz.6.2233': attribute type 13 has an invalid length. [ 1020.054222][ T4365] usb 7-1: can't set config #0, error -71 [ 1020.076678][ T4365] usb 7-1: USB disconnect, device number 17 [ 1020.157260][T13264] loop4: detected capacity change from 0 to 8192 [ 1020.174342][T13266] loop0: detected capacity change from 0 to 512 [ 1020.206869][T13264] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 1020.217273][T13264] REISERFS (device loop4): using ordered data mode [ 1020.224076][T13264] reiserfs: using flush barriers [ 1020.228786][T13266] EXT4-fs (loop0): Ignoring removed oldalloc option [ 1020.236173][T13264] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1020.246239][T13266] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1020.253227][T13264] REISERFS (device loop4): checking transaction log (loop4) [ 1020.370638][T13264] REISERFS (device loop4): Using r5 hash to sort names [ 1020.382413][T13264] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 1020.409040][T13266] EXT4-fs (loop0): 1 truncate cleaned up [ 1020.415273][T13266] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,errors=continue,inode_readahead_blks=0x0000000000004000,stripe=0x0000000000000003,bsdgroups,oldalloc,,errors=continue. Quota mode: none. [ 1020.446274][T13264] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "ÿÿ184467440737095516150xffffffffffffffff18446744073709551615±ñV?Œù³ßCp~'~8pٻ젌|ž^½Ö(cŸoö—ÈêM ) Çÿÿÿÿÿÿÿÿÿ" [ 1021.279203][ T4181] EXT4-fs error (device loop0): ext4_lookup:1858: inode #11: comm syz-executor: iget: bad extra_isize 46 (inode size 256) [ 1021.299548][ T4181] EXT4-fs error (device loop0): ext4_lookup:1858: inode #11: comm syz-executor: iget: bad extra_isize 46 (inode size 256) [ 1021.575318][T13290] cgroup: Invalid name [ 1022.534563][T13293] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1022.542295][T13291] ip6t_rpfilter: unknown options [ 1022.552215][T13291] loop4: detected capacity change from 0 to 128 [ 1022.762297][T13291] VFS: Found a Xenix FS (block size = 1024) on device loop4 [ 1022.786554][ T4181] bridge0: port 4(syz_tun) entered disabled state [ 1023.021988][ T4187] sysv_free_block: flc_count > flc_size [ 1023.027634][ T4187] sysv_free_block: flc_count > flc_size [ 1023.039718][ T4187] sysv_free_block: flc_count > flc_size [ 1023.045709][ T4187] sysv_free_block: flc_count > flc_size [ 1023.056923][ T4187] sysv_free_block: flc_count > flc_size [ 1023.062905][ T4187] sysv_free_block: flc_count > flc_size [ 1023.068646][ T4187] sysv_free_block: flc_count > flc_size [ 1023.085796][T13299] loop6: detected capacity change from 0 to 256 [ 1023.091133][ T4187] sysv_free_block: flc_count > flc_size [ 1023.097987][ T4187] sysv_free_block: flc_count > flc_size [ 1023.110588][ T4181] device syz_tun left promiscuous mode [ 1023.115812][ T4187] sysv_free_block: flc_count > flc_size [ 1023.123551][ T4187] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1023.131188][ T4181] bridge0: port 4(syz_tun) entered disabled state [ 1023.156614][T13299] exFAT-fs (loop6): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18d7c, utbl_chksum : 0xe619d30d) [ 1023.208608][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 1023.208625][ T26] audit: type=1800 audit(2000000199.334:10): pid=13297 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2243" name="file1" dev="loop6" ino=1048812 res=0 errno=0 [ 1023.323815][T13297] device gre1 entered promiscuous mode [ 1023.351987][ T4271] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1023.389741][T13306] loop4: detected capacity change from 0 to 4096 [ 1023.431015][ T4849] usb 6-1: new full-speed USB device number 30 using dummy_hcd [ 1023.449624][T13308] loop2: detected capacity change from 0 to 8192 [ 1023.483231][ T4271] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1023.507813][T13308] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 1023.545879][T13308] REISERFS (device loop2): using ordered data mode [ 1023.554238][T13308] reiserfs: using flush barriers [ 1023.560584][T13308] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1023.565286][T13312] loop6: detected capacity change from 0 to 512 [ 1023.583239][T13308] REISERFS (device loop2): checking transaction log (loop2) [ 1023.601589][T13308] REISERFS (device loop2): Using r5 hash to sort names [ 1023.618878][T13308] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 1023.632505][ T4271] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1023.663650][ T4849] usb 6-1: device descriptor read/64, error -71 [ 1023.677331][T13308] REISERFS warning (device loop2): super-6502 reiserfs_getopt: unknown mount option "ÿÿ184467440737095516150xffffffffffffffff18446744073709551615±ñV?Œù³ßCp~'~8pٻ젌|ž^½Ö(cŸoö—ÈêM ) Çÿÿÿÿÿÿÿÿÿ" [ 1023.687233][T13312] EXT4-fs error (device loop6): ext4_orphan_get:1401: inode #15: comm syz.6.2250: inode has both inline data and extents flags [ 1023.727182][T13312] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.2250: couldn't read orphan inode 15 (err -117) [ 1023.788748][T13312] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1023.816182][ T4271] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.482561][ T4849] usb 6-1: new full-speed USB device number 31 using dummy_hcd [ 1024.776502][ T4849] usb 6-1: device descriptor read/64, error -71 [ 1024.911072][ T4849] usb usb6-port1: attempt power cycle [ 1025.148820][T13327] loop2: detected capacity change from 0 to 32768 [ 1025.214061][T13327] JBD2: Ignoring recovery information on journal [ 1025.271914][T13327] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1025.330756][ T4271] tipc: Disabling bearer [ 1025.336644][ T4271] tipc: Disabling bearer [ 1025.342751][ T4271] tipc: Left network mode [ 1025.350996][ T4849] usb 6-1: new full-speed USB device number 32 using dummy_hcd [ 1025.396265][T13317] chnl_net:caif_netlink_parms(): no params data found [ 1025.456448][ T4849] usb 6-1: device descriptor read/8, error -71 [ 1025.536059][T13329] loop4: detected capacity change from 0 to 32768 [ 1025.593470][T13317] bridge0: port 1(bridge_slave_0) entered blocking state [ 1025.605999][T13329] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 1025.618990][T13317] bridge0: port 1(bridge_slave_0) entered disabled state [ 1025.625401][T13329] JBD2: Ignoring recovery information on journal [ 1025.633385][T13317] device bridge_slave_0 entered promiscuous mode [ 1025.658621][T13317] bridge0: port 2(bridge_slave_1) entered blocking state [ 1025.676126][T13317] bridge0: port 2(bridge_slave_1) entered disabled state [ 1025.685227][T13317] device bridge_slave_1 entered promiscuous mode [ 1025.710263][T13329] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1025.721087][ T4186] ocfs2: Unmounting device (7,2) on (node local) [ 1025.752375][ T4849] usb 6-1: new full-speed USB device number 33 using dummy_hcd [ 1025.781803][T13317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1025.808093][T13317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1025.847480][ T4187] ocfs2: Unmounting device (7,4) on (node local) [ 1025.891108][ T4849] usb 6-1: device descriptor read/8, error -71 [ 1025.897082][T13317] team0: Port device team_slave_0 added [ 1025.907526][T13317] team0: Port device team_slave_1 added [ 1025.913260][ T4189] Bluetooth: hci0: command 0x0409 tx timeout [ 1025.988846][T13317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1026.000682][T13317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1026.039169][ T4849] usb usb6-port1: unable to enumerate USB device [ 1026.048669][T13317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1026.098561][T13317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1026.105890][T13317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1026.158855][T13317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1026.221737][T13351] loop5: detected capacity change from 0 to 1024 [ 1026.266685][T13317] device hsr_slave_0 entered promiscuous mode [ 1026.275110][T13317] device hsr_slave_1 entered promiscuous mode [ 1026.286261][T13317] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1026.294724][T13317] Cannot create hsr debugfs directory [ 1026.423269][ T4271] device hsr_slave_0 left promiscuous mode [ 1026.429788][ T4271] device hsr_slave_1 left promiscuous mode [ 1026.436417][T10612] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1026.447051][T13353] ip6t_rpfilter: unknown options [ 1026.456931][T13353] loop2: detected capacity change from 0 to 128 [ 1026.466829][ T4271] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1026.483093][ T4271] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1026.506523][T13353] VFS: Found a Xenix FS (block size = 1024) on device loop2 [ 1026.524650][ T4271] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1026.547792][ T4271] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1026.578245][ T4271] device macsec0 left promiscuous mode [ 1026.593961][ T4271] bridge0: port 3(macsec0) entered disabled state [ 1026.619842][ T4271] device bridge_slave_1 left promiscuous mode [ 1026.640344][ T4271] bridge0: port 2(bridge_slave_1) entered disabled state [ 1026.669644][ T4271] device bridge_slave_0 left promiscuous mode [ 1026.696612][ T4271] bridge0: port 1(bridge_slave_0) entered disabled state [ 1026.721295][T10612] usb 7-1: Using ep0 maxpacket: 16 [ 1026.741973][ T4271] device veth0_macvtap left promiscuous mode [ 1026.759116][ T4271] device veth1_vlan left promiscuous mode [ 1026.765365][ T4271] device veth0_vlan left promiscuous mode [ 1026.869713][ T4186] sysv_free_block: flc_count > flc_size [ 1026.879746][ T4186] sysv_free_block: flc_count > flc_size [ 1026.885993][ T4186] sysv_free_block: flc_count > flc_size [ 1026.891952][ T4186] sysv_free_block: flc_count > flc_size [ 1026.897630][ T4186] sysv_free_block: flc_count > flc_size [ 1026.904649][ T4186] sysv_free_block: flc_count > flc_size [ 1026.910306][ T4186] sysv_free_block: flc_count > flc_size [ 1026.916468][ T4186] sysv_free_block: flc_count > flc_size [ 1026.922315][ T4186] sysv_free_block: flc_count > flc_size [ 1026.927954][ T4186] sysv_free_block: flc_count > flc_size [ 1026.934517][ T4186] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1027.011310][T10612] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1027.030624][T10612] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1027.066652][T10612] usb 7-1: Product: syz [ 1027.083956][T10612] usb 7-1: Manufacturer: syz [ 1027.094457][T10612] usb 7-1: SerialNumber: syz [ 1027.109544][T10612] r8152-cfgselector 7-1: config 0 descriptor?? [ 1027.374125][ T26] audit: type=1800 audit(2000000203.504:11): pid=13359 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2258" name="file1" dev="loop5" ino=20 res=0 errno=0 [ 1027.431159][T10612] r8152-cfgselector 7-1: Unknown version 0x0000 [ 1027.482706][T10612] usbip-host 7-1: 7-1 is not in match_busid table... skip! [ 1027.553602][ T4189] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1027.580507][ T4271] team0 (unregistering): Port device team_slave_1 removed [ 1027.606984][ T4271] team0 (unregistering): Port device team_slave_0 removed [ 1027.669866][ T4271] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1027.695160][T13362] loop5: detected capacity change from 0 to 1024 [ 1027.703240][T11532] usb 7-1: USB disconnect, device number 18 [ 1027.713176][ T4271] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1027.791226][T13362] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2261'. [ 1027.800142][T13362] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2261'. [ 1027.814822][ T4271] bond0 (unregistering): Released all slaves [ 1027.820938][ T4189] usb 3-1: Using ep0 maxpacket: 16 [ 1028.001109][ T4365] Bluetooth: hci0: command 0x041b tx timeout [ 1028.081852][ T4189] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1028.117545][ T26] audit: type=1800 audit(2000000204.244:12): pid=13364 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2261" name="file1" dev="loop5" ino=20 res=0 errno=0 [ 1028.123865][ T4189] usb 3-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1028.181967][T13317] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1028.188317][ T4189] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1028.188479][ T4189] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1028.188548][ T4189] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1028.244751][ T4189] usb 3-1: config 0 descriptor?? [ 1028.807564][T13317] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1028.816559][ T4189] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1028.836855][T13317] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1028.847257][T13317] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1029.009949][ T4849] usb 3-1: USB disconnect, device number 44 [ 1029.446586][T13317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1029.678096][T13380] loop4: detected capacity change from 0 to 512 [ 1029.687834][ T4548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1029.696204][ T4548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1029.751984][T13317] 8021q: adding VLAN 0 to HW filter on device team0 [ 1029.779635][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1029.792301][T13380] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1029.803601][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1029.812850][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 1029.819955][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1029.829376][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1029.847087][T13380] EXT4-fs (loop4): 1 truncate cleaned up [ 1029.860994][T13380] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable,max_dir_size_kb=0x00000000000001ff,stripe=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none. [ 1029.879899][ T4548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1029.924394][ T4548] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1029.987759][ T4548] bridge0: port 2(bridge_slave_1) entered blocking state [ 1029.994905][ T4548] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1030.051551][ T4548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1030.067375][T13380] EXT4-fs (loop4): shut down requested (2) [ 1030.071080][ T9018] Bluetooth: hci0: command 0x040f tx timeout [ 1030.084735][T13380] overlayfs: failed to get origin (-5) [ 1030.087956][ T4548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1030.128886][ T4548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1030.141264][ T4849] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1030.155508][ T4548] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1030.168527][ T4548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1030.193862][ T4548] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1030.214071][ T4548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1030.223519][T13385] loop5: detected capacity change from 0 to 32768 [ 1030.233435][ T4548] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1030.278332][T13317] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1030.320531][T13317] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1030.355655][ T4548] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1030.380722][ T4548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1030.394835][T13385] XFS (loop5): Mounting V5 Filesystem [ 1030.401935][T13402] program syz.6.2272 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1030.409760][ T4548] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1030.425328][ T4187] bridge0: port 3(syz_tun) entered disabled state [ 1030.427240][T13402] loop6: detected capacity change from 0 to 256 [ 1030.433000][ T4849] usb 3-1: Using ep0 maxpacket: 32 [ 1030.505002][T13385] XFS (loop5): Ending clean mount [ 1030.514576][T13385] XFS (loop5): Quotacheck needed: Please wait. [ 1030.579346][ T4187] device syz_tun left promiscuous mode [ 1030.591092][ T4187] bridge0: port 3(syz_tun) entered disabled state [ 1030.625700][T13385] XFS (loop5): Quotacheck: Done. [ 1030.644859][ T4849] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1030.701306][T13408] loop6: detected capacity change from 0 to 256 [ 1030.718367][T13409] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1030.748025][ T4849] usb 3-1: config 56 has an invalid interface number: 162 but max is 1 [ 1030.762013][ T4849] usb 3-1: config 56 has an invalid interface number: 184 but max is 1 [ 1030.781626][ T4849] usb 3-1: config 56 has an invalid interface number: 240 but max is 1 [ 1030.789909][ T4849] usb 3-1: config 56 has an invalid descriptor of length 248, skipping remainder of the config [ 1030.808439][ T4849] usb 3-1: config 56 has 3 interfaces, different from the descriptor's value: 2 [ 1030.822306][ T4849] usb 3-1: config 56 has no interface number 0 [ 1030.828719][ T4849] usb 3-1: config 56 has no interface number 1 [ 1030.866046][ T4849] usb 3-1: config 56 has no interface number 2 [ 1030.877844][T13385] loop5: detected capacity change from 32768 to 0 [ 1030.894522][ C0] blk_update_request: I/O error, dev loop5, sector 18692 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 1030.906688][ T4849] usb 3-1: config 56 interface 162 altsetting 148 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 1030.930575][ C0] blk_update_request: I/O error, dev loop5, sector 18692 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1030.942768][ T26] audit: type=1800 audit(2000000207.074:13): pid=13409 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2266" name="file1" dev="loop5" ino=9286 res=0 errno=0 [ 1030.951189][ T4849] usb 3-1: too many endpoints for config 56 interface 184 altsetting 145: 79, using maximum allowed: 30 [ 1030.991389][ T4849] usb 3-1: config 56 interface 184 altsetting 145 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 1031.020939][ T4849] usb 3-1: config 56 interface 184 altsetting 145 has an invalid endpoint with address 0x0, skipping [ 1031.047387][ T4849] usb 3-1: config 56 interface 184 altsetting 145 has an invalid endpoint with address 0x0, skipping [ 1031.080893][ T4849] usb 3-1: config 56 interface 184 altsetting 145 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 1031.101118][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1031.108700][ T4849] usb 3-1: config 56 interface 184 altsetting 145 has a duplicate endpoint with address 0x9, skipping [ 1031.121198][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1031.130331][ T4548] loop: Write error at byte offset 9223372036855234559, length 4096. [ 1031.151008][ C0] blk_update_request: I/O error, dev loop5, sector 896 op 0x1:(WRITE) flags 0x9800 phys_seg 1 prio class 0 [ 1031.162497][ C0] blk_update_request: I/O error, dev loop5, sector 896 op 0x1:(WRITE) flags 0x9800 phys_seg 1 prio class 0 [ 1031.174758][ T150] XFS (loop5): log I/O error -5 [ 1031.182884][ T150] XFS (loop5): Log I/O Error (0x2) detected at xlog_ioend_work+0xbf/0x110 (fs/xfs/xfs_log.c:1347). Shutting down filesystem. [ 1031.185603][ T7903] XFS (loop5): Unmounting Filesystem [ 1031.196043][ T150] XFS (loop5): Please unmount the filesystem and rectify the problem(s) [ 1031.196138][ T4849] usb 3-1: config 56 interface 184 altsetting 145 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 1031.196167][ T4849] usb 3-1: config 56 interface 184 altsetting 145 has a duplicate endpoint with address 0x9, skipping [ 1031.232544][ T4849] usb 3-1: config 56 interface 184 altsetting 145 has an invalid endpoint with address 0x0, skipping [ 1031.236259][T13317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1031.243486][ T4849] usb 3-1: config 56 interface 184 altsetting 145 has an invalid endpoint with address 0xEC, skipping [ 1031.243515][ T4849] usb 3-1: config 56 interface 184 altsetting 145 has a duplicate endpoint with address 0x1, skipping [ 1031.243541][ T4849] usb 3-1: config 56 interface 184 altsetting 145 has a duplicate endpoint with address 0xE, skipping [ 1031.283921][ T4849] usb 3-1: config 56 interface 184 altsetting 145 has 15 endpoint descriptors, different from the interface descriptor's value: 79 [ 1031.297495][ T4849] usb 3-1: config 56 interface 240 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1031.310727][ T4849] usb 3-1: config 56 interface 162 has no altsetting 0 [ 1031.330897][ T4849] usb 3-1: config 56 interface 184 has no altsetting 0 [ 1031.337793][ T4849] usb 3-1: config 56 interface 240 has no altsetting 0 [ 1031.463756][T13405] ================================================================== [ 1031.472300][T13405] BUG: KASAN: use-after-free in xfs_iflush_cluster+0xc7/0x12e0 [ 1031.479873][T13405] Read of size 8 at addr ffff88804f8ee050 by task xfsaild/loop5/13405 [ 1031.488057][T13405] [ 1031.490406][T13405] CPU: 0 PID: 13405 Comm: xfsaild/loop5 Not tainted syzkaller #0 [ 1031.498128][T13405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1031.508194][T13405] Call Trace: [ 1031.511502][T13405] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1031.514454][T13405] dump_stack_lvl+0x168/0x230 [ 1031.519190][T13405] ? show_regs_print_info+0x20/0x20 [ 1031.524422][T13405] ? load_image+0x3b0/0x3b0 [ 1031.528953][T13405] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 1031.534365][T13405] ? lockdep_hardirqs_on+0x94/0x140 [ 1031.539606][T13405] print_address_description+0x60/0x2d0 [ 1031.545193][T13405] ? xfs_iflush_cluster+0xc7/0x12e0 [ 1031.550434][T13405] kasan_report+0xdf/0x130 [ 1031.554892][T13405] ? xfs_iflush_cluster+0xc7/0x12e0 [ 1031.560143][T13405] xfs_iflush_cluster+0xc7/0x12e0 [ 1031.565214][T13405] ? rcu_is_watching+0x11/0xa0 [ 1031.570012][T13405] xfs_inode_item_push+0x1cd/0x2c0 [ 1031.575154][T13405] xfsaild+0xce7/0x2780 [ 1031.579375][T13405] ? _raw_spin_lock_irqsave+0x7f/0xf0 [ 1031.584784][T13405] ? _raw_spin_unlock+0x40/0x40 [ 1031.589880][T13405] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 1031.595806][T13405] ? xfs_trans_ail_init+0x230/0x230 [ 1031.601045][T13405] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 1031.606972][T13405] ? __kthread_parkme+0x157/0x1b0 [ 1031.612496][T13405] kthread+0x436/0x520 [ 1031.617078][T13405] ? xfs_trans_ail_init+0x230/0x230 [ 1031.623233][T13405] ? kthread_blkcg+0xd0/0xd0 [ 1031.628168][T13405] ret_from_fork+0x1f/0x30 [ 1031.633963][T13405] [ 1031.637468][T13405] [ 1031.640169][T13405] Allocated by task 13385: [ 1031.645066][T13405] __kasan_slab_alloc+0x9c/0xd0 [ 1031.650658][T13405] slab_post_alloc_hook+0x4c/0x380 [ 1031.656121][T13405] kmem_cache_alloc+0x100/0x290 [ 1031.661466][T13405] xfs_inode_item_init+0x2f/0xc0 [ 1031.666630][T13405] xfs_trans_ijoin+0xb2/0xe0 [ 1031.671260][T13405] xfs_init_new_inode+0xb2d/0xe80 [ 1031.676475][T13405] xfs_create+0x749/0xe60 [ 1031.680930][T13405] xfs_generic_create+0x332/0xa20 [ 1031.685983][T13405] path_openat+0x11e1/0x2f30 [ 1031.690747][T13405] do_filp_open+0x1b3/0x3e0 [ 1031.696249][T13405] do_sys_openat2+0x142/0x4a0 [ 1031.701425][T13405] __x64_sys_creat+0x8c/0xb0 [ 1031.706066][T13405] do_syscall_64+0x4c/0xa0 [ 1031.710521][T13405] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1031.716546][T13405] [ 1031.718884][T13405] Freed by task 4271: [ 1031.722869][T13405] kasan_set_track+0x4b/0x70 [ 1031.727478][T13405] kasan_set_free_info+0x1f/0x40 [ 1031.732439][T13405] ____kasan_slab_free+0xd5/0x110 [ 1031.737482][T13405] slab_free_freelist_hook+0xea/0x170 [ 1031.742954][T13405] kmem_cache_free+0x8f/0x210 [ 1031.747641][T13405] xfs_inode_free_callback+0x1bc/0x230 [ 1031.753125][T13405] rcu_core+0x962/0x15d0 [ 1031.757378][T13405] handle_softirqs+0x328/0x820 [ 1031.762152][T13405] __irq_exit_rcu+0x12f/0x220 [ 1031.766850][T13405] irq_exit_rcu+0x5/0x20 [ 1031.771117][T13405] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 1031.776771][T13405] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1031.782776][T13405] [ 1031.785118][T13405] The buggy address belongs to the object at ffff88804f8ee000 [ 1031.785118][T13405] which belongs to the cache xfs_ili of size 256 [ 1031.798842][T13405] The buggy address is located 80 bytes inside of [ 1031.798842][T13405] 256-byte region [ffff88804f8ee000, ffff88804f8ee100) [ 1031.812058][T13405] The buggy address belongs to the page: [ 1031.817714][T13405] page:ffffea00013e3b80 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4f8ee [ 1031.827894][T13405] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 1031.835471][T13405] raw: 00fff00000000200 0000000000000000 dead000000000122 ffff88801db1f8c0 [ 1031.844067][T13405] raw: 0000000000000000 00000000800c000c 00000001ffffffff 0000000000000000 [ 1031.852661][T13405] page dumped because: kasan: bad access detected [ 1031.859093][T13405] page_owner tracks the page as allocated [ 1031.864814][T13405] page last allocated via order 0, migratetype Reclaimable, gfp_mask 0x112c50(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_HARDWALL|__GFP_RECLAIMABLE), pid 13385, ts 1030780130470, free_ts 974840049843 [ 1031.884206][T13405] get_page_from_freelist+0x1b77/0x1c60 [ 1031.889782][T13405] __alloc_pages+0x1e1/0x470 [ 1031.894396][T13405] new_slab+0xc0/0x4b0 [ 1031.898505][T13405] ___slab_alloc+0x81e/0xdf0 [ 1031.903120][T13405] kmem_cache_alloc+0x195/0x290 [ 1031.907998][T13405] xfs_inode_item_init+0x2f/0xc0 [ 1031.912962][T13405] xfs_trans_ijoin+0xb2/0xe0 [ 1031.917591][T13405] xfs_init_new_inode+0xb2d/0xe80 [ 1031.922637][T13405] xfs_create+0x749/0xe60 [ 1031.926990][T13405] xfs_generic_create+0x332/0xa20 [ 1031.932036][T13405] path_openat+0x11e1/0x2f30 [ 1031.936645][T13405] do_filp_open+0x1b3/0x3e0 [ 1031.941169][T13405] do_sys_openat2+0x142/0x4a0 [ 1031.945861][T13405] __x64_sys_creat+0x8c/0xb0 [ 1031.950472][T13405] do_syscall_64+0x4c/0xa0 [ 1031.954907][T13405] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1031.960812][T13405] page last free stack trace: [ 1031.965496][T13405] free_unref_page_prepare+0x637/0x6c0 [ 1031.970977][T13405] free_unref_page+0x94/0x280 [ 1031.975653][T13405] qlist_free_all+0x35/0x90 [ 1031.980156][T13405] kasan_quarantine_reduce+0x150/0x160 [ 1031.985663][T13405] __kasan_slab_alloc+0x2f/0xd0 [ 1031.990519][T13405] slab_post_alloc_hook+0x4c/0x380 [ 1031.995625][T13405] kmem_cache_alloc_node+0x12d/0x2d0 [ 1032.000924][T13405] __alloc_skb+0xf4/0x750 [ 1032.005275][T13405] netlink_ack+0x3a6/0xb60 [ 1032.009705][T13405] nfnetlink_rcv+0x1ef9/0x2160 [ 1032.014480][T13405] netlink_unicast+0x774/0x920 [ 1032.019252][T13405] netlink_sendmsg+0x8ab/0xbc0 [ 1032.024023][T13405] ____sys_sendmsg+0x5a2/0x8c0 [ 1032.028789][T13405] ___sys_sendmsg+0x1f0/0x260 [ 1032.033509][T13405] __se_sys_sendmsg+0x190/0x250 [ 1032.038358][T13405] do_syscall_64+0x4c/0xa0 [ 1032.042803][T13405] [ 1032.045128][T13405] Memory state around the buggy address: [ 1032.050767][T13405] ffff88804f8edf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1032.058827][T13405] ffff88804f8edf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1032.066931][T13405] >ffff88804f8ee000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1032.074991][T13405] ^ [ 1032.081667][T13405] ffff88804f8ee080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1032.089730][T13405] ffff88804f8ee100: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 1032.097794][T13405] ================================================================== [ 1032.105861][T13405] Disabling lock debugging due to kernel taint [ 1032.112059][ C0] vkms_vblank_simulate: vblank timer overrun [ 1032.140631][T13405] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1032.147862][T13405] CPU: 0 PID: 13405 Comm: xfsaild/loop5 Tainted: G B syzkaller #0 [ 1032.151107][ T4303] Bluetooth: hci0: command 0x0419 tx timeout [ 1032.156980][T13405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1032.173075][T13405] Call Trace: [ 1032.176367][T13405] [ 1032.179319][T13405] dump_stack_lvl+0x168/0x230 [ 1032.184014][T13405] ? show_regs_print_info+0x20/0x20 [ 1032.189263][T13405] ? load_image+0x3b0/0x3b0 [ 1032.193789][T13405] panic+0x2c9/0x7f0 [ 1032.197692][T13405] ? bpf_jit_dump+0xd0/0xd0 [ 1032.202201][T13405] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 1032.208103][T13405] ? _raw_spin_unlock+0x40/0x40 [ 1032.212963][T13405] ? xfs_iflush_cluster+0xc7/0x12e0 [ 1032.218178][T13405] check_panic_on_warn+0x80/0xa0 [ 1032.223127][T13405] ? xfs_iflush_cluster+0xc7/0x12e0 [ 1032.228346][T13405] end_report+0x6d/0xf0 [ 1032.232651][T13405] kasan_report+0x102/0x130 [ 1032.237188][T13405] ? xfs_iflush_cluster+0xc7/0x12e0 [ 1032.242424][T13405] xfs_iflush_cluster+0xc7/0x12e0 [ 1032.247477][T13405] ? rcu_is_watching+0x11/0xa0 [ 1032.252513][T13405] xfs_inode_item_push+0x1cd/0x2c0 [ 1032.257646][T13405] xfsaild+0xce7/0x2780 [ 1032.261815][T13405] ? _raw_spin_lock_irqsave+0x7f/0xf0 [ 1032.267240][T13405] ? _raw_spin_unlock+0x40/0x40 [ 1032.272088][T13405] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 1032.277980][T13405] ? xfs_trans_ail_init+0x230/0x230 [ 1032.283177][T13405] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 1032.289083][T13405] ? __kthread_parkme+0x157/0x1b0 [ 1032.294121][T13405] kthread+0x436/0x520 [ 1032.298201][T13405] ? xfs_trans_ail_init+0x230/0x230 [ 1032.303407][T13405] ? kthread_blkcg+0xd0/0xd0 [ 1032.308005][T13405] ret_from_fork+0x1f/0x30 [ 1032.312431][T13405] [ 1032.315784][T13405] Kernel Offset: disabled [ 1032.320127][T13405] Rebooting in 86400 seconds..