last executing test programs: 2m59.289358826s ago: executing program 4 (id=182): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)={0x20, r1, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x4040814) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = socket(0x1a, 0x3, 0xfff) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[], 0xdc}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r6, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000140)={0x28, 0x4, r6, 0x0, &(0x7f0000dc5000/0x3000)=nil, 0x3000, 0x3b1}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r6, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r5, 0x3ba0, &(0x7f0000000600)={0x48, 0x8, r7, 0x0, 0x7fffff, 0x2, &(0x7f0000000400)='iz', 0x1}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) capget(&(0x7f00000002c0)={0x20071026}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={0x1, 0xffffffffffffffff}, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x1e, &(0x7f0000000640)=@raw=[@generic={0xbf, 0x2, 0xa}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}, @generic={0xb7, 0x3, 0x0, 0x0, 0x1}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffe}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @generic={0x85, 0x0, 0x0, 0x0, 0x55}, @generic={0x15, 0x0, 0x0, 0x4, 0x1}, @generic={0xbf, 0x1}, @generic={0x85, 0x0, 0x0, 0x0, 0x56}, @generic={0x95}], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$FS_IOC_READ_VERITY_METADATA(r9, 0xc0286687, &(0x7f0000000280)={0x2, 0x1, 0xad, &(0x7f0000000140)=""/173}) connect$bt_rfcomm(r4, &(0x7f0000000480)={0x1f, @any, 0xd}, 0xa) 2m58.787686119s ago: executing program 4 (id=185): munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000019ffff0f0000000080200000180100002020732500000000002020207b0af8ff00000000bfa100000000000007010000f6ffffffb702000008000000b703000040420f00850000009e00000085"], &(0x7f0000000000)='GPL\x00', 0x1, 0xfe4, &(0x7f0000001e00)=""/4068, 0x41000, 0x25, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 2m58.75031864s ago: executing program 4 (id=186): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x20) write(r1, &(0x7f0000000000)='3', 0x4e) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)={0x3c, 0x30, 0x1, 0x70bd28, 0x25dfdbfb, "", [@nested={0x2c, 0x117, 0x0, 0x1, [@typed={0xc, 0x16, 0x0, 0x0, @u64=0xfac06}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, @generic, @generic="b804129ba6a5d89d"]}]}, 0x3c}], 0x1, 0x0, 0x0, 0x2000}, 0x20000000) 2m58.679535423s ago: executing program 4 (id=188): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x185d, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x1, 0x800000c1}) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x4400, &(0x7f00000003c0)=ANY=[], 0x82, 0x22e, &(0x7f0000000940)="$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") madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) pipe2(0x0, 0x0) bpf$OBJ_PIN_MAP(0x9, 0x0, 0x0) open(&(0x7f0000000040)='.\x00', 0x8c00, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x18d883, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r3 = socket$pppoe(0x18, 0x1, 0x0) recvmsg(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f000004f000/0x800000)=nil, 0x800000, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) read$FUSE(r2, &(0x7f0000002380)={0x2020}, 0x2020) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m54.254376692s ago: executing program 4 (id=205): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000480)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r1, 0x5501) writev(r1, &(0x7f00000004c0)=[{&(0x7f00000003c0)="9ced4a5e48c913a23a4f0ad36c66eb3c2bc430a28df9d875", 0x18}], 0x1) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newsa={0x15c, 0x10, 0x1, 0x0, 0xfffffffd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {@in=@broadcast, 0x0, 0x33}, @in=@broadcast, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x1}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x8a}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, @algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @sa_dir={0x5, 0x21, 0x1}]}, 0x15c}}, 0x0) 2m53.517759636s ago: executing program 4 (id=210): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x20) write(r1, &(0x7f0000000000)='3', 0x4e) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)={0xa8, 0x30, 0x1, 0x70bd28, 0x25dfdbfb, "", [@nested={0x98, 0x117, 0x0, 0x1, [@typed={0xc, 0x16, 0x0, 0x0, @u64=0xfac06}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb", @generic="b804129ba6a5d89d"]}]}, 0xa8}], 0x1, 0x0, 0x0, 0x2000}, 0x20000000) 2m52.528686117s ago: executing program 32 (id=210): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x20) write(r1, &(0x7f0000000000)='3', 0x4e) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)={0xa8, 0x30, 0x1, 0x70bd28, 0x25dfdbfb, "", [@nested={0x98, 0x117, 0x0, 0x1, [@typed={0xc, 0x16, 0x0, 0x0, @u64=0xfac06}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb", @generic="b804129ba6a5d89d"]}]}, 0xa8}], 0x1, 0x0, 0x0, 0x2000}, 0x20000000) 17.22507313s ago: executing program 5 (id=661): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) (async) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) (async) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000010000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x136e54520700452d, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000000000008500000059"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x28}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000780850000000f"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sched_rr_get_interval(r4, &(0x7f00000001c0)) (async) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000180)=0x68) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) (async) msgget$private(0x0, 0x200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) syz_clone3(&(0x7f0000000a00)={0x21000000, 0x0, 0x0, 0x0, {0x5}, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) 13.975839174s ago: executing program 5 (id=669): r0 = socket$igmp(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f00000006c0)={&(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1c0000000000000007000000070b7d772f40346e36f08c9404010000180000000000000008000000", @ANYRES32, @ANYBLOB="64010102ac1414aa10000000000000000700000000000000180000000000000008000000", @ANYRES32, @ANYBLOB="7f0000010a0101008c000000000000000700000086180000000302128f32061ea069046122f20bb4e92a65b783131effffffffac1414bbe0000002ac1e000144185d00000000060000000800000508000000000000ffff83120c7b691124ebd6c9c4f76218a9d6b3748927a36401010264010102e0000002640101000a0101017fc4df62ae1414197f000001000000000000000018"], 0x100}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2210088, &(0x7f0000000580)=ANY=[@ANYBLOB="74f5026e733d76697274696f2c70726976706f72742c646972656374696f2c63616368653d6c6f6f73652c6d73697a653d307830303030303030303030303031303030"]) chdir(&(0x7f0000000100)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ioctl$SNDCTL_TMR_START(r1, 0x5402) ftruncate(r1, 0x4a8e) read$FUSE(r1, &(0x7f00000030c0)={0x2020}, 0x2020) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000e80)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x8000000000000000}]}}]}, 0x48}}, 0x0) 12.193184598s ago: executing program 0 (id=674): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000006e80)={0x2020, 0x0, 0x0}, 0x2020) statx(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x2900, 0x88c, 0x0) socket(0x2, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0xb1, &(0x7f00000002c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x7b, 0x3a, 0xff, @mcast1, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @dev, @dev, [{0x2, 0xa, "2eb7f26ce4f6e2e6782d7affc771df67f2733c5a58bf3d2462689219ab1aa005de27e7cb0ccb6c86ec43f54adda87747d698f07fa8cd6c4cf252f4ff8d87327d2d9811c4866d79592b9f191a0f85fe887e"}]}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) io_setup(0xfffffff8, &(0x7f0000000080)) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r3, @ANYBLOB="00000000100000001c001a80080002802d00", @ANYRES16=r4, @ANYRES32=r4], 0x44}}, 0x2000850) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x1400001, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x50) read$FUSE(r0, &(0x7f0000004540)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002200)={0x10, 0xfffffffffffffffe, r5}, 0x10) 7.452508208s ago: executing program 1 (id=678): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./security/ima/policy\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='appraise func=FIRMWARE_CHECK', 0x1c) write(r0, &(0x7f0000000200)='appraise func=MODU', 0x12) write(r0, &(0x7f0000000300)='appraise func=POLICY_CHECK\n', 0x1b) close(r0) (fail_nth: 3) 7.444354184s ago: executing program 5 (id=679): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002e08000000000000180000000000000000100000000000009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2}, 0x94) 7.422921451s ago: executing program 0 (id=680): open(0x0, 0x4827e, 0xdc) (async) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200)={[{@quota}, {@debug}]}, 0x1, 0x246, &(0x7f0000000ac0)="$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") r0 = open(&(0x7f00000003c0)='./file3\x00', 0x14507e, 0x148) fallocate(r0, 0x10, 0x0, 0xfefffe) r1 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)={0xe0, 0x13, 0x1, 0x70bd2c, 0x25dfdbfb, "", [@nested={0xcd, 0x8d, 0x0, 0x1, [@typed={0x8, 0xc5, 0x0, 0x0, @fd}, @generic="51c6b68cf4eb24182ec06972d96b20a47257d673c593752c5a1c9016497a0d2aaaff7dd00c7771e3c0d360527a0b81ec9f7ef771712b5159099b33f27fef45ab9b9ef9723f0fc2356b2cdc4016a9dc84050982fa3d5c3baa6ff13ff96f7e539bfecd746d93ffa6a9186682c1500063e22b0d492e3111b0ade0a29e675f9a6d860fd0dabb8264042aa3d1aa75908a1182406a77ced5aad953f8b6841dad52a4069e01f90a3f168dc658368345d7326a7b29160f04aa670dd49b7482724acebea8a3"]}]}, 0xe0}], 0x1, 0x0, 0x0, 0x2000081}, 0x20048040) 7.40348918s ago: executing program 2 (id=681): fsopen(&(0x7f0000000300)='nfs4\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x6, 0x2b, 0x0, 0x74efdfe049b861ab) r1 = io_uring_setup(0x76b0, 0x0) io_uring_enter(r1, 0x0, 0x2, 0xf, 0x0, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000080), 0x15) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(0xffffffffffffffff, 0x1e, 0x0, 0x1) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) getpgrp(0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x972, &(0x7f0000006680)) sysfs$1(0x1, 0x0) io_uring_register$IORING_REGISTER_PROBE(r1, 0x8, &(0x7f0000000880)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x2a) setrlimit(0x1, &(0x7f0000000040)={0xffff, 0xa656}) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$vim2m(&(0x7f0000000100), 0x6, 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x50ef, 0x0, 0x8000, 0x4, 0x1}, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r5, 0x0, 0x0}, 0x10) r6 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef000905", @ANYRES16, @ANYRES16], 0x0) syz_usb_control_io$sierra_net(r6, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) 7.346221309s ago: executing program 3 (id=682): io_setup(0x1, &(0x7f0000000280)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) readlink(&(0x7f0000000180)='./config/usb_gadget/g1/UDC\x00', &(0x7f00000001c0)=""/130, 0x82) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8fc, &(0x7f0000000480)={0xa, 0x3a, 0x5, @loopback={0xff00000000000000}, 0x2}, 0x1c) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040), 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', &(0x7f0000000300)='configfs\x00', 0x2208800, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/midi1_num_groups\x00', 0x1, 0x0) write(r3, &(0x7f0000000000)="320d9f925ab0787ed97f2ac837bd4303c0e8f1e341b60b04a50e15d89f41a26edf0cb4a8663144a6303704b23b4c5c256d1407498edb1322eab5bebf36abbd7310095969b2d02bee1a96f00363317743602ad854c4298e6aec01edb1ce498c4c27d396eb49a7251cbbab9e02975ceeede0b8824bdd8a53ef4291", 0x7a) r4 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_configfs/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000000940)='dummy_udc.0', 0xb) 7.067942567s ago: executing program 1 (id=683): r0 = socket$xdp(0x2c, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x48051) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000140)=0x40, 0x4) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x3, r4, 0x3, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeec, 0x4000010, r3, 0xf27f000) r6 = syz_clone(0x80000000, 0x0, 0xfec9, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r6, 0x8, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x22, &(0x7f0000000440)=ANY=[@ANYBLOB="0180c200000065c541d465090800b9688e819804815b45feff1400000080002990ef0000ffff000000000c99aad097c79258400751544230048b3493bc754abf83e0c40404ba238248d1c82eb3b4eacc7ac2155992c4f06867514b06e08478a286139ca41bc19df96debd6e0e02308f67dbcb5f2baab131ded9825f1a6cff9291eb28062ea774689dc61a5b304c1fc136c00771f9011dfc985e5506cd8ef0ab97cff", @ANYRES8=0x0, @ANYRESOCT=r3], 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r8, &(0x7f0000000000)="24000000010006", 0x7) waitid(0x0, 0x0, &(0x7f0000000200), 0x40000000, 0x0) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x60680, 0x0) sendfile(0xffffffffffffffff, r9, 0x0, 0x1) ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000000)=0x7) 6.604292173s ago: executing program 5 (id=684): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x10, 0x0, 0x4, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x36}, 0x4e22, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x800000, 0x0, 0x59f5}, {0x0, 0x0, 0x0, 0x80}, 0x0, 0x0, 0x2, 0x1, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x819}, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)=0xffff0018) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, &(0x7f0000000180)) 5.557486447s ago: executing program 3 (id=685): r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x2c2000, 0x0) close_range(0xffffffffffffffff, r0, 0x0) utimensat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x77359400}}, 0x100) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f00000002c0)={0xfffffffd, 0xb, 0x1463, 0xe6, &(0x7f00000000c0)=""/230, 0x5c, &(0x7f00000001c0)=""/92, 0x45, &(0x7f0000000240)=""/69}) socketpair(0x6, 0x800, 0xfdd, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$CEC_ADAP_G_CAPS(r0, 0xc04c6100, &(0x7f0000000340)) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r0) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x60811}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x104, r3, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xc}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd90}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK={0x84, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2671}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x24}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8fe9}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdd}]}]}, @TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x20000000}, 0x4080) sendmsg$nl_route(r1, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)=@ipv6_newnexthop={0x20, 0x68, 0x800, 0x70bd2a, 0x25dfdbfe, {0xa, 0x0, 0x0, 0x0, 0x4}, [@NHA_ID={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x8800) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$CEC_ADAP_G_CONNECTOR_INFO(r0, 0x8044610a, &(0x7f0000000700)) r5 = add_key$keyring(&(0x7f0000000780), &(0x7f00000007c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) r6 = add_key$keyring(&(0x7f0000000800), &(0x7f0000000840)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$KEYCTL_MOVE(0x1e, r5, 0xfffffffffffffff9, r6, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000880)={0x0, 0x3, 0x7fff, 0x9}) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r1, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x58, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x55}, 0x0) vmsplice(r2, &(0x7f0000000e00)=[{&(0x7f0000000a00)="b3ba6273812cf12bc6c4433a7e21972f5998a53cf44f2fe65840a97bda04c2bc78e25596e71dafdcda032525f138ee44a242380273a4191c9204eae0639b3e174aa3831bca73eddf8b8cc5243f941ae888fd0d", 0x53}, {&(0x7f0000000a80)="7463343153275b1e1de4ab0c938915d01c984809880fa17f73a46432b9b0c7cf797ca36800708384c2ca7ff63b9f320d8aef9e1ae1ba5d1aad79ff57f8d58d7794f992dfd0baec5304108c8ba3038e74", 0x50}, {&(0x7f0000000b00)="c023c6a4d6d6986e544943e9689f34720cea9fd1623afb6ada559afbdc8cfca0e99948f889aa4108d5d80e769c2ce451291c1510b56fa6ab7b78bc867c1f1b73998cf308d87f0645897533afa3346ec2386a3c2942dcfa080bfe0ee2957f990aadb2635afeed8733fc0e28ddddbe3a9c0ecf231eedb81579bde4f82a61eecd605b03d56c085383f0b686f1c1a9011278c2ed28b571fc3d6903b22f766c28794839e862e1ee4fab40a336", 0xaa}, {&(0x7f0000000bc0)="08a5f62631a1b4f9f41e63c51db53eb58cc3d67a6f1e8a59b308d6840d047a0d82daf370b0efb15eecc6030ece28de22172b6ea2bd4fd4b4a27d035712782b64de4469ac90a187ca6f50715f81bf6e5a8c731b435229ecc67feeff5cb9f9751c7fa530", 0x63}, {&(0x7f0000000c40)="6677138db057d0f84a907c5786664ae5cbdc55b0061dad922210d40501d7c8218183126b5eacf1816afe95a650e42f8314c49c2bbb61344c43eb6e8c44eb834478afc8320b1b05e0415132049ba85f8ffe5e5ca7b5811eb1c3e5407769884ce7d5723a02fff72150d98886a1b836fff494fca64203943c6e060fc0e32d27ef714f741d0e808b0b54b86e71aaa620ebbd82aa", 0x92}, {&(0x7f0000000d00)="62b1471601317832539d2807f3420266a216b74d5a8ece693a61b0c34b294eb6080212046e9be50480f54a234c162beb2c1bf4222aea5cde1995a2289fa28f093c1042cdf83eaa2f598320ea13cbed208672ddec19446ad12ed0cf36a2b2f74d7f89a20fe2bdc0a56f6bae480aab2afa92e6ceca92b5c7aeb890fd11da1b77bf690897c8c40d1fbf87d6cd698ea6d4a641bce09fad007220e291253c2efc12c357817ff9fff82886219e1bd618d428b75f64c3c01183184c68b1271a4f483786545eee49e085a510864731f1385ac6810a1c1a8e50e2e06102d0447180b343d7d80698ec056dd7cbd54c0faa04a252bd7c50c2eb", 0xf4}], 0x6, 0x6) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(r0, &(0x7f0000000e80)='./file0\x00', 0x0) mkdirat(r0, &(0x7f0000000ec0)='./file0\x00', 0x0) ioctl$MEMGETINFO(r0, 0x80204d01, &(0x7f0000000f00)) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f0000000f40)={{0x1, 0x1, 0x18, r4, {0xf349}}, './file0\x00'}) getsockname$packet(r8, &(0x7f0000000f80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000fc0)=0x14) ioctl$KVM_CAP_X86_DISABLE_EXITS(r8, 0x4068aea3, &(0x7f0000001000)={0x8f, 0x0, 0x8}) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000001080)=0x800000) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r0, &(0x7f0000001180)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x38, 0x1406, 0x400, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x220000}]}, 0x38}, 0x1, 0x0, 0x0, 0x2004811}, 0x4048005) timerfd_gettime(r8, &(0x7f00000011c0)) ioctl$SNDRV_PCM_IOCTL_STATUS64(r0, 0x80984120, &(0x7f0000001200)) fcntl$dupfd(r8, 0x0, r7) recvmsg$can_j1939(r8, &(0x7f00000027c0)={&(0x7f00000012c0)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000002640)=[{&(0x7f0000001340)=""/14, 0xe}, {&(0x7f0000001380)=""/206, 0xce}, {&(0x7f0000001480)=""/118, 0x76}, {&(0x7f0000001500)=""/4096, 0x1000}, {&(0x7f0000002500)=""/121, 0x79}, {&(0x7f0000002580)=""/191, 0xbf}], 0x6, &(0x7f00000026c0)=""/244, 0xf4}, 0x162) 5.179982134s ago: executing program 5 (id=686): syz_emit_ethernet(0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa0086dd60f53a0400383a00fe8000000000000000000000000000bbff02e6ff000000000000000000000001020090780005000070f19f0000000000fc010000000000000000000000000000fc0200000000000000000000000000002b00000000000000"], 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x3, &(0x7f0000000580)=@framed={{0x18, 0x5}}, &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWRULE={0xb0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x84, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CMP_OP={0x8}, @NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, '\x00'}]}]}}}, {0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}]}]}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x154}}, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_team\x00', 0x10) sendto$inet(r2, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$inet_int(r2, 0x0, 0x6, &(0x7f00000021c0)=0x6, 0x4) r3 = syz_open_dev$vcsa(&(0x7f00000001c0), 0xfffffffffffffffa, 0xbc001) ioctl$HIDIOCSFEATURE(r3, 0xc0404806, &(0x7f00000003c0)="f61e136a0932b7acb58f8895c90181e245cc9fd9d29c6c5b4cc3ca04795ff68030b59eba1d49d61d8884b0fc0d8e46bd58494fded85a44f9c35ebef0bdda6e5bf3732555675679ad93e95448778040654b32ad0400a24784b6eab11a533ef2600793eed3002c9ec51c4e70f1bf9123dd67523e4a3c9cf296cd1ffbc4") recvmmsg(r2, &(0x7f0000001d40)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x22, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r6, &(0x7f0000000180)={0xa, 0x0, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7, 0x4}, 0x20) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r7 = socket(0x8, 0x3, 0x8) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) getsockname$packet(r7, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r8, {}, {0x0, 0x3}, {0x4, 0x9}}}, 0x24}}, 0x0) 5.157471081s ago: executing program 0 (id=687): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000005000000000000000500080018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000078500000083000000bf09000000000000550901000000000095000000000000001d0af5ff00000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x24}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="230000000800000002000000ffff000001"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x7fffffff, r1, 0x4}, 0x38) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x0) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xfecc) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@initdev, @in6=@ipv4={""/10, ""/2, @private}}}, {{@in6=@initdev}, 0x0, @in=@empty}}, &(0x7f0000000280)=0xe8) 4.978846662s ago: executing program 3 (id=688): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000080)={0x1008000}) r3 = syz_open_dev$usbfs(&(0x7f0000000340), 0x206, 0x8081) ioctl$USBDEVFS_ALLOC_STREAMS(r3, 0x8008551c, &(0x7f0000000080)={0x4257, 0x1, [{0xe, 0x1}]}) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000180)={0x1, 0x4, 0x10000, 0x1000000, &(0x7f0000000000/0x1000000)=nil, 0x0, r2}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f0000000340)={0x10000, 0x1000000}) (async) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file2\x00', 0x1000, 0x0) r6 = landlock_create_ruleset(&(0x7f0000000240)={0x2001}, 0x18, 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x202000, 0x13b) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r6, 0x1, &(0x7f0000000340)={0x2001, r7}, 0x0) landlock_restrict_self(r6, 0x0) r8 = syz_open_dev$ndb(&(0x7f0000002040), 0x0, 0x20002) sync_file_range(r8, 0x10001, 0x400, 0x1) landlock_restrict_self(r6, 0x4) landlock_restrict_self(r6, 0x5) r9 = landlock_create_ruleset(&(0x7f0000000040)={0x5e0e, 0x1}, 0x18, 0x0) landlock_restrict_self(r6, 0xc) landlock_restrict_self(r9, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f0000000340)={0x10000, 0x1000000}) 4.128199961s ago: executing program 1 (id=689): r0 = socket$igmp(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f00000006c0)={&(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1c0000000000000007000000070b7d772f40346e36f08c9404010000180000000000000008000000", @ANYRES32, @ANYBLOB="64010102ac1414aa10000000000000000700000000000000180000000000000008000000", @ANYRES32, @ANYBLOB="7f0000010a0101008c000000000000000700000086180000000302128f32061ea069046122f20bb4e92a65b783131effffffffac1414bbe0000002ac1e000144185d00000000060000000800000508000000000000ffff83120c7b691124ebd6c9c4f76218a9d6b3748927a36401010264010102e0000002640101000a0101017fc4df62ae1414197f000001000000000000000018"], 0x100}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2210088, &(0x7f0000000580)=ANY=[@ANYBLOB="74f5026e733d76697274696f2c70726976706f72742c646972656374696f2c63616368653d6c6f6f73652c6d73697a653d307830303030303030303030303031303030"]) chdir(&(0x7f0000000100)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ioctl$SNDCTL_TMR_START(r1, 0x5402) ftruncate(r1, 0x4a8e) read$FUSE(r1, &(0x7f00000030c0)={0x2020}, 0x2020) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000e80)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x8000000000000000}]}}]}, 0x48}}, 0x0) 4.069094605s ago: executing program 0 (id=690): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x6, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="bf16000000000000b7020000ff4100007b2af8ff000000007b2af0ff000000007b2ae8ff000000007b2ae0ff000000007b2ad8ff000000007b2ad0ff000000007b2ac8ff000000007b2ac0ff00000000b702000002000000732ac0ff00000000b702000001000000632ac4ff00000000180200000a0000010000000000000000632accff00000000180200000a0000020000000000000000632ac0ff00000000bf61000000000000bfa200000000000007020000c0ffffffb703000040000000b7040000000000008500000045000000b70000000200000095"], &(0x7f00000011c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002200)={r0, 0x0, 0xe, 0x0, &(0x7f0000000080)="0000000000002d9d8aaf5dc79048", 0x0, 0x8ce3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = fsopen(&(0x7f0000000040)='ceph\x00', 0x1) r2 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000140)={'ip6tnl0\x00', 0x0, 0x29, 0x0, 0x36, 0x93, 0x52, @mcast2, @mcast1, 0x10, 0x7801, 0x5, 0xcbe}}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', r4}, 0x50) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000340)=@o_path={&(0x7f0000000300)='./file0\x00', r5, 0x4000, r3}, 0x18) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000000) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xc) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xc) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='0:,:\x00', 0x0) 3.901480911s ago: executing program 5 (id=691): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffdfffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x81, 0xfffffffb, 0xb}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, 0x0, {0x10}, {}, {0xa, 0xa}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x7, 0x3, 0x3, 0x3, 0x2, 0x0, 0x10000000, 0xfffff747, 0x166c400}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) 3.859259678s ago: executing program 3 (id=692): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newtfilter={0x54, 0x2c, 0xd27, 0x60bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x4, 0xa}, {}, {0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x28, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x1, 0xb}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) 3.857502983s ago: executing program 2 (id=693): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000006e80)={0x2020, 0x0, 0x0}, 0x2020) statx(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x2900, 0x88c, 0x0) socket(0x2, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0xb1, &(0x7f00000002c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x7b, 0x3a, 0xff, @mcast1, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @dev, @dev, [{0x2, 0xa, "2eb7f26ce4f6e2e6782d7affc771df67f2733c5a58bf3d2462689219ab1aa005de27e7cb0ccb6c86ec43f54adda87747d698f07fa8cd6c4cf252f4ff8d87327d2d9811c4866d79592b9f191a0f85fe887e"}]}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) io_setup(0xfffffff8, &(0x7f0000000080)) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r3, @ANYBLOB="00000000100000001c001a80080002802d00", @ANYRES16=r4, @ANYRES32=r4], 0x44}}, 0x2000850) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x1400001, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x50) read$FUSE(r0, &(0x7f0000004540)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002200)={0x10, 0xfffffffffffffffe, r5}, 0x10) 3.380426975s ago: executing program 0 (id=694): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000000)={0x0, 0xcd, 0x10, 0xa, 0x7fffffff}, &(0x7f0000000040)=0x18) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={r1, 0x2}, 0x8) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f00000000c0)) r2 = syz_io_uring_complete(0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, &(0x7f0000000100)) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000000180)=0x0) quotactl_fd$Q_SETINFO(r2, 0xffffffff80000600, r3, &(0x7f00000001c0)={0x800, 0xfc00000000000000, 0x1, 0x6}) syz_emit_ethernet(0x218, &(0x7f0000000200)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, @multicast, @void, {@ipv6={0x86dd, @dccp_packet={0x5, 0x6, "e87116", 0x1e2, 0x21, 0xff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}, @private0, {[@srh={0x9e, 0x8, 0x4, 0x4, 0x1, 0x60, 0x5, [@empty, @remote, @mcast1, @private2]}, @fragment={0x1, 0x0, 0x4, 0x0, 0x0, 0x4, 0x68}, @routing={0x2e, 0x12, 0x0, 0xe4, 0x0, [@local, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, @dev={0xfe, 0x80, '\x00', 0x2c}, @remote, @mcast2, @local]}], {{0x4e23, 0x4e22, 0x4, 0x1, 0x7, 0x0, 0x0, 0x6, 0x3, 'ndP', 0x0, "8e0425"}, "2cd5a832f702399a0bc423ecaf8cbf431f7ea02884e70b84274be4bc344945a3b01cfcbef71e9a2b5599a06120e8aee1c5dcd34cca941d901af8e327c1d2120011557a9eb58c400b2b1271e4ee44982aa0ce5493a7434545b8d4e95cdc89533c0af243fffcfc45b732343b3495c2fa575474a91e67f246566b3068f5168a224c4125545d98b3164b48661623e6fcc408420374aed998aa615d4b9e4b91049c53393afe5546a690fa3586cd8ba2ae8e1569ddbc0e1d437e45b44409c80b07cafb7148747b1b5b394d5d671f7ff3eec87cc9a646a6383283b63a207c97735d6afc1db9619ca441638fce17"}}}}}}, 0x0) r4 = syz_open_dev$ublk_chdev(&(0x7f0000000440), 0x0, 0x10000) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x2e, 0x2, 0x0, r2, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000480)=@new_dev={0x3, 0x985, 0x0, 0x0, 0x1000, 0xffffffff, 0xffffffffffffffff, 0x0, 0x100}}}, &(0x7f0000000540)=0x0) r6 = syz_ublk_setup_io_uring(0x47f4, &(0x7f0000000580)={0x0, 0x527e, 0x1000, 0x2, 0x26d}, &(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680)) syz_ublk_setup_queues(r4, r5, &(0x7f00000006c0)={0x0, 0x6da5, 0x80000, 0x3, 0x114, 0x0, r6}, &(0x7f0000000740)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd438, 0x1, 0x0, 0x1f6, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa1f6, 0x400, 0x2, 0x97, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcc26, 0x10000, 0x2, 0x155}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x97e3, 0x8000, 0x1, 0x373, 0x0, r2}}], 0x4, &(0x7f00000019c0)={0x2e, 0x8, 0x0, r2, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x8}, 0x0, 0x0, '\x00', {0x2, 0x631, 0x0, &(0x7f00000009c0)=@buf_4k="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"}}, &(0x7f0000001a40)) r10 = semget$private(0x0, 0x2, 0x20) semctl$GETVAL(r10, 0x2, 0xc, &(0x7f0000001a80)=""/195) sendmsg$NFNL_MSG_ACCT_DEL(r8, &(0x7f0000001c40)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001c00)={&(0x7f0000001bc0)={0x40, 0x3, 0x7, 0x201, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x6}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x6}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7fd552c6}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40001}, 0x20018840) getsockopt$inet6_mreq(r9, 0x29, 0x1b, &(0x7f0000001c80)={@dev, 0x0}, &(0x7f0000001cc0)=0x14) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000001d00)={@private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x80}, @mcast1, 0xc6, 0x6, 0x6, 0x100, 0x0, 0x10000, r11}) r12 = fcntl$getown(r9, 0x9) sched_setaffinity(r12, 0x8, &(0x7f0000001d80)=0x9) getpid() semctl$SEM_STAT_ANY(r10, 0x1, 0x14, &(0x7f0000001dc0)=""/36) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000001e00)={r1, 0x7ff, 0x6, 0xfffb, 0xa, 0x8, 0x4, 0xfffffffe, {r1, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x9, 0x10, 0x3245, 0x7, 0xa7}}, &(0x7f0000001ec0)=0xb0) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000002080)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002040)={&(0x7f0000001f40)={0xe4, 0x0, 0x9, 0x801, 0x0, 0x0, {0x3}, [@NFCTH_TUPLE={0x44, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x25}}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @remote}}}]}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x22}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x2e}}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x2c040000}, 0x50) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f00000020c0)={{0x1, 0x1, 0x18, r7, {0xffffff81}}, './file0\x00'}) getsockopt$inet_pktinfo(r13, 0x0, 0x8, &(0x7f0000002100)={0x0, @remote, @multicast2}, &(0x7f0000002140)=0xc) r14 = syz_usb_connect$uac1(0x0, 0xa9, &(0x7f0000002180)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x499, 0x5005, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x97, 0x3, 0x1, 0x1, 0xc0, 0x7, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1820, 0x26}, [@selector_unit={0x6, 0x24, 0x5, 0x6, 0x9, "fe"}, @processing_unit={0xc, 0x24, 0x7, 0x4, 0x2, 0x7, "dcf6f3b28b"}, @processing_unit={0xa, 0x24, 0x7, 0x4, 0x6, 0x7, "31f4d8"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x53, 0xfe, 0x9e, 0x6, 0x80}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x6, 0x4, 0x9, {0x7, 0x25, 0x1, 0x8, 0x3, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x0, 0x100, 0x8, "267ef7c7939efda8cd"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x9, 0x1, 0xa3, {0x7, 0x25, 0x1, 0xc, 0x72, 0x2}}}}}}}}]}}, &(0x7f0000002580)={0xa, &(0x7f0000002240)={0xa, 0x6, 0x300, 0x9, 0x81, 0x7, 0x20, 0xf}, 0x25, &(0x7f0000002280)={0x5, 0xf, 0x25, 0x5, [@ssp_cap={0x10, 0x10, 0xa, 0x3, 0x1, 0x7, 0xf00f, 0x3, [0xff00cf]}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x3, 0x1, 0x5}]}, 0x7, [{0x4a, &(0x7f00000022c0)=@string={0x4a, 0x3, "9a7badb207a45de0ff1e152e053aa7a95e520af4db335de9cf09e7e53de415aed421260e4853190e7348f9ff66698f70cf0f2b3f185091ea90af4b1375b7995b4c06a4a6016acec0"}}, {0x94, &(0x7f0000002340)=@string={0x94, 0x3, "4dc85f1dc1ea857cbd14611f524015d9e6fb01d440d73288072c1d8945efc1d511f8a9daf02fadd697f907636682c5eaca30ac623753223b1f9fab6bba9136284cd03ab0cd6ed58e8dc4ec21ee3af97dbcc48cd6672af4303fa97499531dc12a04f57f0dc88db2a825f3ac019d67679e758a75575758e299474cff65ff92df626ccbc68d1f1066519b06a338f29777397f08"}}, {0x4, &(0x7f0000002400)=@lang_id={0x4, 0x3, 0xc07}}, {0x11, &(0x7f0000002440)=@string={0x11, 0x3, "34228c13860cf4a985019e7e7c2c63"}}, {0x24, &(0x7f0000002480)=@string={0x24, 0x3, "7be33e76080c42047412b4f2447f77b52d59f036f70900cb1e2d1fba2b113f5df4a8"}}, {0x50, &(0x7f00000024c0)=@string={0x50, 0x3, "1859cea2c50f1cd308c9ab5c44b5b0f2a5c8d3b1e48b9da8ce2b5f3f5fb1e1ddbcf8ccbd2c9773be1c84885ef769b05fb2bf87e8db78a10f52709ac7349ff763e0629c93d58169ea1538cd410d98"}}, {0x4, &(0x7f0000002540)=@lang_id={0x4, 0x3, 0x42f}}]}) syz_usb_control_io$uac1(r14, &(0x7f00000026c0)={0x14, &(0x7f0000002600)={0x20, 0x9, 0x6f, {0x6f, 0x7, "ac02a9c07e41f2ae753e8750d3995af4d98fd842d36a9133a04b55cfd336b67184e8c9ebef7974af1cb23bfde622bbc4dda71c672bd585d7b016b013a1fd1c37e963849df666dcef8b05303fb3c8e682e1334a8d6c79396de157e3aa7d4ecb9da1d8c66f895d1c2ca84da675d7"}}, &(0x7f0000002680)={0x0, 0x3, 0x39, @string={0x39, 0x3, "c748a26866437735e59e63f57f2d9b3c1fa61bcbcda2fd092e2f3bcd4ce14e8ecdeb0be2949e5329678a3aa08d38bdaf65508fa56ca960"}}}, &(0x7f0000002940)={0x44, &(0x7f0000002700)={0x20, 0x18, 0x74, "b15adf78430207d7f15d6956b1d7e807253d2a950d41a566bc1e1ad499beeeeb918988584bdb60728e8c3859a02d679ea001dc4956b5eb5677c7326b38f3fc1e0b2622473b1c34e44326cbabe85ef9c0698ecc305945dc58a0d2ba9693590b92b7a948d18a8df4799bc5c299ffc196f0b85993bd"}, &(0x7f0000002780)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000027c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000002800)={0x20, 0x81, 0x3, "b1f0f2"}, &(0x7f0000002840)={0x20, 0x82, 0x2, "e8e1"}, &(0x7f0000002880)={0x20, 0x83, 0x3, "00e67d"}, &(0x7f00000028c0)={0x20, 0x84, 0x4, "c0789416"}, &(0x7f0000002900)={0x20, 0x85, 0x3, "62e131"}}) setsockopt$inet_int(r13, 0x0, 0x18, &(0x7f00000029c0)=0x2, 0x4) semctl$SETVAL(r10, 0x3, 0x10, &(0x7f0000002a00)=0x8) 3.37901491s ago: executing program 2 (id=695): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) write(r0, 0x0, 0x0) copy_file_range(r0, 0x0, r0, 0x0, 0x8, 0x0) write(r0, &(0x7f00000004c0)='\n', 0x1) 3.363154851s ago: executing program 3 (id=696): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x1, 0x553a, &(0x7f0000006040)="$eJzs3EtvG1UUAODrpOmbEiEW7DpShZRItVWnSQW7AK14iFQRjwUr6tiO5db2RLHjhKxYsEQs+CcIJFYs+Q0sWLNDLEDskIo89wY1PCpQHJsk3ydNz8yd6zPnjqpEZyZyAM6s+ezXn0vhWrgUQpgNIVwNodgvpa2wGsMLIYTrIYSZJ7ZSGv9j4HwI4XII4dooecxZSqc+vzm8sfLTW798892Fc1e++Pr76a0amLYXQwjdrbi/240xb8X4MI3Xhu0idpeHKcYT3UfpOI9xt7lRZNitHcyrFfF2K87Pt3b6o7jZqdVHsdXeLMa3evGC/WHrIE/xgYe17eK40dwoYrufF7G1H+va248/2/b7g5inkfJ9VKQPg8FBjOPNvWZcz9ajItZ7gzQe8+aN5t4oDlNMlwv1vNMo6tg4yp3+f3u73dvZy4bN7X4772UrlepLleqdcnU7bzQHzeVyrdu4s5wttDqjaeVBs9ZdbeV5q9Os1PPuYrbQqtfL1Wq2cLe50a71smq1crtyq7yymPZuZq/ffz/rNLKFUXy13dsZtDv9bDPfzuInFrOlyu2XF7Mb1ezdtfVs/Z1799bW3/vw7gf3X1l787U06S9lZQtLt5aWytVb5aXq4sld/+h3/X9a/yep6DGuH46k9LSTDyZXB8AJov8HpmGi/f9cGHv/H/T/Y6H/P7Prf5wc7QZytj21/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4DT7Ye7LN4qd+Xh8JY0/k4aeS8elEMJMCOHx35gN5w/lnE155v5h/tyfavi2FIoMo2tcSNvlEMJq2n579rjvAgAAAJxeX318/bPYrcd/5qddEJMUH9rMXH0wpnylEMLc/I9jyBLSw6bw/NGrikb/v8+FvTFlKx5gXRxTsvjI7dy4sv0rs4fCxSdCKYaZg5nnJ1oXAABwnA53ApPtQgAAAJikT6ddANNRvGlNf4ufXvNdiCG9ELx06AgAAAA4gUrTLgAAAAA4dkX/7/v/AAAA4HSL3/8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL+zcze5aQNRAICfDS609AdV3bdH6Q6O0SN02WXFVTgCvUL3FWegu267iyDCnkQhMiHExoTo+yR7MmPr5RnB4o1HAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACc0t9iMf318/OwaZz1ppl2ngYAAACosyoW0/KPcdUfpfF3aehj6mcRkUdEXe3ei1c7MXspTrHn/uJeDr8jygjb/zFIx5uI+JqOqw+n/hQAAADg5VrO5pOqWq9O43MnRJeqSZv87beW4mURUYz/tRQt354+PerWzeH5oe33ux8/9lzNjkutnNiKxktmbpRTbv22oh3WSz/322Z4p8mqJu8uHQAAoCu7lUCHVQgAAAAd+37uBDiP8q1nWoufFvAPqia9EHy90wMAAAAu0LGrngEAAIDnaPTg1bL+v4D9/97/t/8fAAAAPFm1/x8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACntCoW0+VsPmkaZ72p8edLRN14jXaeBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAArtmfdxSGYTAIg5tEeXVCF/D9b2kW7NatmxkQfPxbCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAK48jpfnGa/GTLbR60zy7nkl+XRqfDs1fp0b/yRj3f0bAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADY2Z+XFAiBIIiCOeN/J33/w0qCnkGECGh4VFGLBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCLfvfL/4mpcSaZO20sHY8ka1eNravG3oPG0YPx9m8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC42Ll/37ipOADgX5/vrrSACAFlCEJUYoCFptfS0pUBFDHwJyBF6bUErvxoM9CqAmVhQ5m7IBgRQgKFrf9D51bqUrYONxSJqQPIPrt5PYo4qGJfk89Hen5fW47f9zlRlK+fcwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQG389m6cF5uFSdypjt28d3W96G9N9YXr27eXi1bE2T9c/6u9Snz+vZzuZEvtJQIAAMDBkdf1fUQ/ejurRdBZKOv/Xn1OUfN/9+wkruv56bq/7uvav2i//nL3xQcDLUzGKS56bmM0PP73VLr5Hs5znj33r2d0yztfPnvJy29I572tF8a98n5m39y48U6/DA81kS0A8H8cq/sqqP8eKvpBm4kBcGB0q1a4U9X/+UK7OQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0ob8VT9dxFhHL3d24cOve1fWyn9q/vn17uW6nr13bTq9ZXKIXEec2RsPjTU3kCXDp8pWP10aj4cXmg1cior3Rq+CDGc6JaDNDweMGnepnfbavOhoR7efcftDyLyYAAPadXtWKuv5Ob2e1OJYtRvz5/cP1/2tJHGn9P9Wn9f/dD0/fTMdK6/9BYzOcfyubFz5buXT5yhsbF9bOD88PP3nzxOCtwckzp06dWSmflax4YgIAAMDj6Vctrf87ixHjqfX/I0kcM9b/n387+DIdK1f/P9Luol/bmQAAABxszx/94/fsEcezfj++WNvcvDiYbLP71f6JybaFVP+zQ1VL6/98se2sAAAAgCaMt7KH1v/PJnHMuP7/zA8v/ZReM4+Iw9X6/7H1T0dnm5tOS+7PdFYT/06851MFAABgrh2uWrr+3yvf/+88eOWhExGvvzqJq48BnKn+z9/9+sd0rPT9/5PNTXEudZYm96PslyK6S21nBAAAwH72VNWKYv+33s7qRz8feb/v/X8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACApv0VAAD//+NPQpo=") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d40)=ANY=[@ANYBLOB="403c9514362fcb29530000000a0000010900020073797a310000000009000100737d7a310000000014000380100000800c000180050001001e000000000000002c9a115e11337df26c2e8825b02259af568ea135b660d9c214b6354b85bdd88e1ef50ae778af3cd5ff94605113fc96e675d8b6f1fbc5c81ae217dabdc153902ea4b72618b22464acac4cc02e2df51fffe416e899d7bf7843e0afdd23a2395ef9e1db5a98f5690a"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) syz_mount_image$fuse(0x0, &(0x7f0000000940)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000000180)=""/91, 0x5b) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x1008002, &(0x7f0000000d00)={[{@grpjquota}]}, 0x3, 0x5ee, &(0x7f0000000280)="$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") r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x12, 0x4, 0x8, 0x8002}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r2, 0x0, 0x0}, 0x20) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000f00)='./file0\x00', 0x3210052, &(0x7f0000000840)={[{}, {@nodiscard}, {@norecovery}, {@order_strict}, {@nobarrier}, {@order_strict}, {@nodiscard}, {@order_relaxed}], [], 0x2c}, 0x3, 0xebd, &(0x7f0000004540)="$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") name_to_handle_at(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x402) close(0xffffffffffffffff) prlimit64(0x0, 0x8, &(0x7f0000000340)={0x8, 0x8b}, 0x0) r4 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r4, 0x0) ftruncate(r4, 0x51a9497) get_mempolicy(0x0, &(0x7f0000000240), 0x6ef8, &(0x7f0000000000/0x4000)=nil, 0x4) syz_ublk_setup_io_uring(0x3e5c, &(0x7f00000008c0)={0x0, 0x98ef, 0x200, 0x0, 0xff}, &(0x7f0000000940), &(0x7f0000000c40), &(0x7f00000009c0)) syz_mount_image$vfat(&(0x7f0000001040), &(0x7f0000000240)='./file0\x00', 0x804, &(0x7f0000000b40)={[{@iocharset={'iocharset', 0x3d, 'cp950'}}, {@shortname_winnt}, {@utf8}, {@fat=@dos1xfloppy}, {@uni_xlateno}, {@shortname_mixed}, {@rodir}, {@utf8}, {@rodir}, {@fat=@codepage={'codepage', 0x3d, '936'}}, {@uni_xlate}, {@shortname_mixed}, {@utf8}, {@fat=@dos1xfloppy}, {@uni_xlate}, {@rodir}]}, 0x1, 0x2af, &(0x7f0000000880)="$eJzs3c+KW1UYAPDvJjf/2kWycCVCL+jCVen4BFOkgjggKFmoCy02BZmEQgKBqBi78gl8AhF8GTfiC/gAiju7EK/cuflbbtKMdJrB/n6rw3e+b853ztzJrO7JZ6+Nzh88mjx8/PVv0W4nUTuN03iSRC9qsfRtVPr1j+o4AHDNPcnz+DMv1KNVhmbbGY0dlWntypsDAK7E+v9/nh+7FwDgxfjwo4/fu3t2du+DLGtHjL6b9pOI9nr+7sP4IoYxiDvRjb8j8pVy/M67Z/cizQq9eGM0n/an/YjRpz8v63+PuKg/iW70qutPiuofk9ion0/7jbixWP90GIP3f4huvFJd/1ZW2qyPfjPefH2j/9vRjV8+j0cxjAeL3pb135xk2dv593999UkRLeqT+bTfWuUtsusv7JcCAAAAAAAAAAAAAAAAAAAAAMD/3u1spbd9/87y4v8983vuB5pv3M9zJ8uyPCnz1/VpvJpGesy9AwAAAAAAAAAAAAAAAAAAwHUxmX15fn84HIwPGETt2TlpFIPla/0VOfHPdqQVEYes3qqculWV3Kj8OWU/UV+0NkyiaLVx4N7Hk1kjWheVz06uX+ZUx5NZp+hnME7SuExVsdPdR5esIp3NqVtRrlVEOuVgI3Lw6j/dLE/x6al2GVk+Xef3kxjU9p5Yu+oheQ6DvOLxq++saj4d6UT1BoupPas3b/6nnvPujqkkIhqrw9zOufgju7F+IBvP9wwrPy6aV/ARBAAAAAAAAAAAAAAAAAAALKxf+q2YfHyEhgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgCNbf/3+JwXxRvCsnrxeDNBaRI28RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAl8C/AQAA//9pMVeJ") openat$dir(0xffffffffffffff9c, &(0x7f0000000c00)='./bus\x00', 0x0, 0x11) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) 3.319051007s ago: executing program 1 (id=697): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) setresuid(r1, r1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$unix(0x1, 0x5, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f0000002980)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x4001ffe, 0xa68d7c519dc00fb1, 0x7, 0x6, 0x1, 0xe, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r5, &(0x7f0000008380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x68cc, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x12) close(r5) write$UHID_INPUT(r7, &(0x7f0000000440)={0x8, {"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", 0x1000}}, 0x1006) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2802, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_int(r10, 0x1, 0x2b, 0x0, &(0x7f0000000040)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0xfe, 0x0, 0xfc, 0x0, 0x0, 0xfc, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x2, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0xfff9, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20008000) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000080)={'pim6reg0\x00', 0x400}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',grosp_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r0, &(0x7f0000006e80)={0x2020, 0x0, 0x0}, 0x2020) statx(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x2900, 0x88c, 0x0) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r11, {0x7, 0x29, 0x0, 0x1400001, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x50) openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 2.811654002s ago: executing program 1 (id=698): r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200080, &(0x7f0000000040), 0x2, 0x57d, &(0x7f0000000540)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4090}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_USERDATA={0x5, 0x6, 0x1, 0x0, "d9"}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000100)={'erspan0\x00', &(0x7f00000000c0)={'gretap0\x00', 0x0, 0x8, 0x8, 0x4, 0x3d8f, {{0x6, 0x4, 0x0, 0x1, 0x18, 0x67, 0x0, 0x4, 0x2f, 0x0, @multicast2, @remote, {[@noop]}}}}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000140)={@mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x7}, 0x3, 0x6, 0x0, 0x0, 0x2, 0x7ba6976f0865be76, r5}) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000000080)=0x4) getdents64(r1, &(0x7f0000001280)=""/4089, 0xff9) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200080, &(0x7f0000000040), 0x2, 0x57d, &(0x7f0000000540)="$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") (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) close(r2) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4090}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_USERDATA={0x5, 0x6, 0x1, 0x0, "d9"}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000100)={'erspan0\x00', &(0x7f00000000c0)={'gretap0\x00', 0x0, 0x8, 0x8, 0x4, 0x3d8f, {{0x6, 0x4, 0x0, 0x1, 0x18, 0x67, 0x0, 0x4, 0x2f, 0x0, @multicast2, @remote, {[@noop]}}}}}) (async) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000140)={@mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x7}, 0x3, 0x6, 0x0, 0x0, 0x2, 0x7ba6976f0865be76, r5}) (async) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000000080)=0x4) (async) getdents64(r1, &(0x7f0000001280)=""/4089, 0xff9) (async) 1.856429705s ago: executing program 1 (id=699): syz_emit_ethernet(0x10a, &(0x7f0000000380)={@multicast, @remote, @val={@val={0x88a8, 0x3, 0x1, 0x4}, {0x8100, 0x0, 0x1, 0x1}}, {@mpls_uc={0x8847, {[{0x1ff}], @generic="5a6130bd5839b2ad388ddfc8d73e4b0e4f76f3cb8b227ba983f1668c398cbc8e8c59fb10bf7cd05cb94a7d65c9dfbbed6d4cbd239eee9214562ecd2c39283412e6399fbdfc89f17383e296841f8b66d1a8389942a1ea34a342129a49208587c66c9382f907cf97b233a66332f1bec3da14a8fa3be49933085a1f4effa7384f796dd589fa05a8c403c4477ded8ed6a36d318cc68cecc7c1aacc51ac781ca647185dd8f498de0690f164a6b29e1fd3a93d7ec15a6e262b6fb53fbb719184eff3a17ce1308f2a16f820d9a006de27698f71d26ac2ff5f91b01d7a2a5c4260e12ca41ba4bce2715ff36ac6d29d40805af489"}}}}, &(0x7f00000004c0)={0x6, 0x1, [0xd20, 0x36b76327, 0xe5e, 0x64]}) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @initr0, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit], &(0x7f00000000c0)='GPL\x00'}, 0x78) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4}, 0xe) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x4, 0x1}, 0xe) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) syz_io_uring_setup(0xf08, 0x0, &(0x7f0000000580), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x3, 0x3a) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001380), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r4, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000000000)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x1c}}, 0x0) setsockopt$MRT6_INIT(r2, 0x29, 0xc8, &(0x7f0000000000), 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x0, 0x1, r6}, 0xc) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000300), 0x5c) syz_emit_ethernet(0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="33330000000100112233445586dd6000000000003b4020010db8000000000000000000000001ff0e00"], 0x0) write$binfmt_format(r0, 0x0, 0x0) 1.749053178s ago: executing program 2 (id=700): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000), 0x4) setns(0xc9, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x4bd1bfda, 0x0, 0x6}, 0x1c) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$F2FS_IOC_DECOMPRESS_FILE(r1, 0xf517, 0x0) sendmsg$802154_raw(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)="e9", 0x2f}, 0x1, 0x0, 0x0, 0x810}, 0x24004014) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="230000000800000002000000ffff000001"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x7fffffff, r2, 0x4}, 0x38) 1.499057547s ago: executing program 2 (id=701): getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@broadcast}}, &(0x7f0000000300)=0xe8) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000040)='./file7\x00', 0x2000c12, &(0x7f0000000200)={[{@uid={'uid', 0x3d, r0}}, {@showassoc}, {@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@cruft}, {@unhide}, {@check_relaxed}, {@cruft}, {@map_acorn}, {@map_acorn}, {@gid}, {@session={'session', 0x3d, 0x41}}, {@showassoc}, {@showassoc}, {@check_relaxed}, {@mode={'mode', 0x3d, 0xe5d}}, {@dmode={'dmode', 0x3d, 0x4}}]}, 0x4, 0xa1f, &(0x7f0000000e80)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file7\x00', 0x60) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000340)={0x40c, r2, 0x410, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6d0e}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x14}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}]}, @TIPC_NLA_BEARER={0xfc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'ib', 0x3a, 'bridge_slave_1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x0, @mcast2}}}}, @TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'syzkaller0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2c}}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @local}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x2, @remote, 0x5}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40000000}]}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x600000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xde0}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5baf}]}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xc}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER={0xb4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'pim6reg1\x00'}}, @TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'ip6erspan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7fff}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_BEARER={0xa4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3e1}]}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'ib', 0x3a, 'veth0_to_batadv\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x2, @loopback, 0xff2}}}}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x12}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x101}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7ff}]}, @TIPC_NLA_SOCK={0xa4, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xf47}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x12000}]}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xfb0}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}]}]}, 0x40c}, 0x1, 0x0, 0x0, 0x4}, 0x24000089) 1.19609046s ago: executing program 3 (id=702): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000c80)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000900)='.', 0x1, 0x8012, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000040)=0x1, 0x4) syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x183003) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe2(0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x10}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000180), 0x4001, 0x0) bind$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) syz_ublk_setup_queues(r4, r2, &(0x7f0000000040)={0x0, 0x9b6f, 0x10, 0xfffffffd, 0x7f}, &(0x7f0000000400)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7, 0x8000, 0x1, 0x243}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x103aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2bc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x97e8, 0x800, 0x14000001, 0xb2}}], 0x1, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) statfs(&(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', &(0x7f0000000680)=""/183) write$tun(r6, &(0x7f0000000380)={@void, @val={0x2, 0x5, 0x1c, 0x10, 0x14, 0x6}, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x40, 0x11, 0x0, @dev={0xac, 0x14, 0x0, 0x2}, @dev={0xac, 0x14, 0x0, 0x1}}, {0x1234, 0x4e22, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x0, "1abd6f05f0d7633e548669fdc573161e08ca803ac177590bcfa13882301102b3", "386182376f8aa3a51090c00884b5c9fe", {"cbac46504da2b4e9c89f50c8031d0743", "80c6b042dffad13a3cc5ae365aee8bae"}}}}}, 0x82) write(r1, &(0x7f0000000000)='3', 0x4e) syz_usb_connect(0x0, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) shutdown(r0, 0x1) 224.495554ms ago: executing program 0 (id=703): r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x40200, 0x0) syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000300)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x1, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f0700000000000905830300e4"], 0x0) r1 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000009780)='./file1\x00', 0x4010, &(0x7f0000000300), 0x1, 0x9768, &(0x7f0000012f40)="$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") syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000240)='./file1\x00', 0x3200014, &(0x7f00000006c0)=ANY=[], 0x1, 0x625, &(0x7f0000001540)="$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") (async) syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000240)='./file1\x00', 0x3200014, &(0x7f00000006c0)=ANY=[], 0x1, 0x625, &(0x7f0000001540)="$eJzs3U9oHNcdB/DvrFay5IKjJHZiSqAihrRU1NYflFa92C2l6BBKSA+9VthyLLxWgqQUJYdW/X/tIddCetCtp0Lvhvbc3HLVMVDoJSdBDyozO7ta2autLNvSKvl8zNv33r437735zcyudhczAb6ylqbTfJgiS9NvbZX1n+/Mt3Z35i/Uza0kZbmRNNtZirWk+efkVtopoz3DFUfN8/Hq4juffbH7ebvWrFPVv3F4iJPYrlOmkozUebJ/4XC3AdPs7x853u3ueCdVdCNTBuxamW8/1YDwbOw/pnNm/vc4mx95vQPnR9F+33zMZHIxyXj9d0DqV4fG6a7u2fP+CwAAwFfBC3vZy1YunfU6AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Dyp7/9f1KnRKU+l6Nz/f6x+LnX5nCkO1R6e2ToAAAAAAAAA4Nn5xl72spVLnfp+Uf3m/3pVuVw9fi0fZCMrWc/1bGU5m9nMemaTTPYMNLa1vLm5PnuMLef6bjl3OvsLAAAAAAAAAOfHzSfp/JssHfz+DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAw6BIRtpZlS53ypNpNJOMJxkr+20nn3bK59nDs14AAAAAnIIX9rKXrVzq1PeL6jP/K9Xn/vF8kLVsZjWbaWUld6rvAtqf+hu7O/Ot3Z35B2V6fNwf/OeJllGNmPZ3D/1nvlr1mMjdrFbPXM/tvJdW7qRRbVm62llP/3X9ulxTcbOtOObK7tR52f9PdT4cJquIjHYjMlOvrYzGi4Mj8YRH59GZZtPofvNz+dGZRg5teijmN48538U6L/fnD0Md87n67Pu0vGYGxzz55t//+rN7rbX79+5uTA/PLp1QHYntZh2J+Z7r8NVzGonRE201U0XiSre+lB/np5nOVN7e/1WSX2Q5m1nJVH5UlZZTdM/oycGRunWo9vb/W8lYfVzal+ARa8p6Vvus6fVq20tZzU/yXu5kJW9W/+Yym+9mIQtZ7DnCV47xStt4sqv+2rfqwkSSP9b5MBit4vpiT1x7X3Mnq7beZw6i9NLRUSpO+NrY/HpdKOf4bZ0Ph0cjMdsTiZcHny9/2S8fN1pr99fvLb9/zPneqPMylL8fqneJ8nx5qTxYVe3w2VG2vdy3bbZqu9xtazzWdqXb1vdKXe/Mv1j1fqXvSHNV26t92+artqs9bf3+3gJg6F389sWxiX9P/Gvik4nfTdybeGv8hxe+d+G1sYz+c/T7zZmRNxqvFX/LJ/nlwed/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg5DY+/Oj+cqu1sj6g0LnBzqA+T1so6hv5PMcpFIaskPGhWMbzLDQzFMs40dEBvuRubD54/8bGhx99Z/XB8rsr766sjS4sLM4sLrw5f+Puamtlpv141qsEnoeDN/2zXgkAAAAAAAAAAABwXKfx3wnOeh8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA821pOs2HKTI7c32mrO/uzLfK1Ckf9GwmaSTjZbn4R3Ir7ZTJnuGKo+b5eHXxnc++2P38YKxmp39j0HZ9jT76xHadMpVkpM6fwqHxbj/1eEV3D8uAXesEDs7a/wIAAP//XHoJeA==") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0) write$FUSE_LK(r2, &(0x7f0000000380)={0x28, 0x0, 0x0, {{0x3, 0x1, 0x1}}}, 0x28) r3 = fsmount(r1, 0x0, 0x82) fchdir(r3) (async) fchdir(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) unlinkat(r3, &(0x7f0000000140)='./file0\x00', 0x200) syz_emit_ethernet(0x46, &(0x7f0000000080)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x40, 0x6, 0x0, @remote, @local, {[@timestamp={0x44, 0x4, 0x6c, 0x0, 0x4}, @end, @end, @cipso={0x86, 0x8, 0x1, [{0x7, 0x2}]}]}}, {{0xfffe, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x10}}}}}}, 0x0) connect$pptp(r0, &(0x7f00000002c0)={0x18, 0x2, {0x1, @loopback}}, 0x1e) (async) connect$pptp(r0, &(0x7f00000002c0)={0x18, 0x2, {0x1, @loopback}}, 0x1e) r4 = openat$cgroup_subtree(r3, &(0x7f0000000100), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) write$cgroup_subtree(r4, &(0x7f0000000080)={[{0x2d, 'pids'}]}, 0x6) writev(0xffffffffffffffff, &(0x7f0000002100), 0x0) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, 0x0) (async) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, 0x0) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x5607, 0x12) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x4) (async) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x4) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, 0x0, 0x0) (async) connect$inet6(0xffffffffffffffff, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x0, 0x20fb87, 0x80000, 0x1, 0x32c}, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x67, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x4, 0xcc9, 0x0, 0x0}}, 0x0) (async) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x0, 0x20fb87, 0x80000, 0x1, 0x32c}, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x67, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x4, 0xcc9, 0x0, 0x0}}, 0x0) 0s ago: executing program 2 (id=704): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000000)={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x1, @multicast}, 0x34, {0x2, 0x4e20, @multicast1}, 'hsr0\x00'}) syz_emit_ethernet(0x36, &(0x7f0000000800)={@multicast, @local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x1, 0x2, 0x0, @rand_addr=0x20202c8, @multicast1}, "2200334f0000000106000001e1010203c0a80101"}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) (async) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) (async) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000000)={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x1, @multicast}, 0x34, {0x2, 0x4e20, @multicast1}, 'hsr0\x00'}) (async) syz_emit_ethernet(0x36, &(0x7f0000000800)={@multicast, @local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x1, 0x2, 0x0, @rand_addr=0x20202c8, @multicast1}, "2200334f0000000106000001e1010203c0a80101"}}}}, 0x0) (async) kernel console output (not intermixed with test programs): dget_register_driver returned -16 [ 217.010560][ T7594] ip_tables: iptables: counters copy to user failed while replacing table [ 217.320719][ T6000] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 217.407002][ T7590] loop0: detected capacity change from 0 to 32768 [ 217.409438][ T7590] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.408 (7590) [ 217.418048][ T7590] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 217.418089][ T7590] BTRFS info (device loop0): using crc32c checksum algorithm [ 217.487642][ T7590] BTRFS info (device loop0): enabling ssd optimizations [ 217.487672][ T7590] BTRFS info (device loop0): turning on flush-on-commit [ 217.487689][ T7590] BTRFS info (device loop0): enabling free space tree [ 217.487705][ T7590] BTRFS info (device loop0): enabling auto defrag [ 217.487722][ T7590] BTRFS info (device loop0): use lzo compression, level 1 [ 217.487742][ T7590] BTRFS info (device loop0): max_inline set to 4096 [ 217.919583][ T5611] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 217.955430][ T7622] FAULT_INJECTION: forcing a failure. [ 217.955430][ T7622] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 217.955462][ T7622] CPU: 1 UID: 0 PID: 7622 Comm: syz.3.412 Not tainted syzkaller #0 PREEMPT(full) [ 217.955486][ T7622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 217.955498][ T7622] Call Trace: [ 217.955506][ T7622] [ 217.955516][ T7622] dump_stack_lvl+0xe8/0x150 [ 217.955545][ T7622] should_fail_ex+0x3eb/0x540 [ 217.955572][ T7622] strncpy_from_user+0x36/0x2c0 [ 217.955598][ T7622] do_getname+0x77/0x250 [ 217.955623][ T7622] __se_sys_statx+0xd7/0x2a0 [ 217.955650][ T7622] ? __pfx___se_sys_statx+0x10/0x10 [ 217.955674][ T7622] ? fdget+0x1ac/0x250 [ 217.955698][ T7622] ? fput+0xa0/0xd0 [ 217.955718][ T7622] ? ksys_write+0x242/0x270 [ 217.955746][ T7622] ? __pfx_ksys_write+0x10/0x10 [ 217.955773][ T7622] ? __x64_sys_statx+0x20/0xc0 [ 217.955797][ T7622] do_syscall_64+0x166/0x520 [ 217.955815][ T7622] ? trace_irq_disable+0x3b/0x140 [ 217.955833][ T7622] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.955854][ T7622] ? clear_bhb_loop+0x70/0xc0 [ 217.955877][ T7622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.955898][ T7622] RIP: 0033:0x7f797199e159 [ 217.955918][ T7622] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 217.955936][ T7622] RSP: 002b:00007f79728d9028 EFLAGS: 00000246 ORIG_RAX: 000000000000014c [ 217.955960][ T7622] RAX: ffffffffffffffda RBX: 00007f7971c25fa0 RCX: 00007f797199e159 [ 217.955975][ T7622] RDX: 0000000000002900 RSI: 0000200000002040 RDI: ffffffffffffff9c [ 217.955989][ T7622] RBP: 00007f79728d9090 R08: 0000000000000000 R09: 0000000000000000 [ 217.956012][ T7622] R10: 000000000000088c R11: 0000000000000246 R12: 0000000000000001 [ 217.956024][ T7622] R13: 00007f7971c26038 R14: 00007f7971c25fa0 R15: 00007ffe5afd2908 [ 217.956058][ T7622] [ 218.592037][ T7627] loop0: detected capacity change from 0 to 32768 [ 218.594081][ T7627] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.411 (7627) [ 218.618317][ T7627] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 218.618351][ T7627] BTRFS info (device loop0): using sha256 checksum algorithm [ 218.760234][ T7651] loop5: detected capacity change from 0 to 512 [ 218.777864][ T7627] BTRFS info (device loop0): enabling ssd optimizations [ 218.777894][ T7627] BTRFS info (device loop0): turning on sync discard [ 218.777911][ T7627] BTRFS info (device loop0): enabling free space tree [ 218.777928][ T7627] BTRFS info (device loop0): use zlib compression, level 3 [ 218.878293][ T7651] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 218.878318][ T7651] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 219.005308][ T7651] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.417: invalid indirect mapped block 4294967295 (level 0) [ 219.005356][ T7651] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 219.014315][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 219.014343][ C0] EXT4-fs (loop5): initial error at time 1791174285: ext4_free_branches:1023: inode 16 [ 219.014378][ C0] EXT4-fs (loop5): last error at time 1791174285: ext4_free_branches:1023: inode 16 [ 219.099608][ T7651] EXT4-fs (loop5): Remounting filesystem read-only [ 219.100302][ T7651] EXT4-fs (loop5): 1 orphan inode deleted [ 219.100323][ T7651] EXT4-fs (loop5): 1 truncate cleaned up [ 219.198902][ T7664] loop3: detected capacity change from 0 to 1024 [ 219.216622][ T7664] hfsplus: invalid length 1280 has been corrected to 255 [ 219.216796][ T7664] hfsplus: invalid length 1280 has been corrected to 255 [ 219.217003][ T7664] hfsplus: invalid length 1280 has been corrected to 255 [ 219.217348][ T7664] hfsplus: invalid length 1280 has been corrected to 255 [ 219.217456][ T7664] hfsplus: invalid length 1280 has been corrected to 255 [ 219.217630][ T7664] hfsplus: invalid length 1280 has been corrected to 255 [ 219.218117][ T7664] hfsplus: invalid length 1280 has been corrected to 255 [ 219.290352][ T7651] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.413971][ T6606] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.918807][ T33] audit: type=1800 audit(1791174286.107:101): pid=7666 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=appraise_data cause=missing-hash comm="syz.5.421" name="/lib/firmware/regulatory.db" dev="sda1" ino=448 res=0 errno=-61 [ 219.921633][ T7666] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -13 [ 219.921730][ T7666] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -13 [ 219.921775][ T7666] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 220.198753][ T7670] loop2: detected capacity change from 0 to 512 [ 220.206412][ T5615] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 220.257118][ T5611] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 220.320640][ T7670] EXT4-fs error (device loop2): ext4_orphan_get:1403: inode #11: comm syz.2.423: unexpected EA_INODE flag [ 220.320677][ T7670] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 220.333180][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 220.333208][ C1] EXT4-fs (loop2): initial error at time 1791174286: ext4_orphan_get:1403: inode 11 [ 220.333243][ C1] EXT4-fs (loop2): last error at time 1791174286: ext4_orphan_get:1403: inode 11 [ 220.333880][ T7670] EXT4-fs (loop2): Remounting filesystem read-only [ 220.365207][ T5615] usb 2-1: device descriptor read/64, error -71 [ 220.392887][ T7670] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.551208][ T5609] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.598554][ T5615] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 220.734500][ T5615] usb 2-1: device descriptor read/64, error -71 [ 220.847483][ T5615] usb usb2-port1: attempt power cycle [ 220.862713][ T1108] hfsplus: invalid length 1280 has been corrected to 255 [ 221.184729][ T5615] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 221.206459][ T5615] usb 2-1: device descriptor read/8, error -71 [ 221.399403][ T7681] loop3: detected capacity change from 0 to 32768 [ 221.401315][ T7681] BTRFS warning: excessive commit interval 3581, use with care [ 221.424966][ T7681] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.425 (7681) [ 221.456240][ T5615] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 221.458874][ T7681] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 221.458912][ T7681] BTRFS info (device loop3): using crc32c checksum algorithm [ 221.484972][ T5615] usb 2-1: device descriptor read/8, error -71 [ 221.584684][ T5615] usb usb2-port1: unable to enumerate USB device [ 221.601748][ T7681] BTRFS info (device loop3): enabling ssd optimizations [ 221.601776][ T7681] BTRFS info (device loop3): turning on flush-on-commit [ 221.601793][ T7681] BTRFS info (device loop3): enabling free space tree [ 221.601812][ T7681] BTRFS info (device loop3): force zlib compression, level 3 [ 221.601834][ T7681] BTRFS info (device loop3): max_inline set to 4096 [ 221.643647][ T7711] FAULT_INJECTION: forcing a failure. [ 221.643647][ T7711] name failslab, interval 1, probability 0, space 0, times 0 [ 221.643680][ T7711] CPU: 0 UID: 0 PID: 7711 Comm: syz.5.431 Not tainted syzkaller #0 PREEMPT(full) [ 221.643703][ T7711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 221.643715][ T7711] Call Trace: [ 221.643723][ T7711] [ 221.643733][ T7711] dump_stack_lvl+0xe8/0x150 [ 221.643762][ T7711] should_fail_ex+0x3eb/0x540 [ 221.643789][ T7711] should_failslab+0xa8/0x100 [ 221.643813][ T7711] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 221.643837][ T7711] ? __d_alloc+0x37/0x7f0 [ 221.643856][ T7711] ? __d_alloc+0x37/0x7f0 [ 221.643882][ T7711] __d_alloc+0x37/0x7f0 [ 221.643907][ T7711] __d_alloc_parallel+0xde/0x1700 [ 221.643961][ T7711] ? __pfx___d_alloc_parallel+0x10/0x10 [ 221.643984][ T7711] ? lock_acquire+0x115/0x350 [ 221.644022][ T7711] __lookup_slow+0x82/0x2f0 [ 221.644047][ T7711] lookup_slow+0x59/0x80 [ 221.644068][ T7711] path_lookupat+0x3f5/0x8c0 [ 221.644106][ T7711] filename_lookup+0x265/0x5d0 [ 221.644133][ T7711] ? __pfx_filename_lookup+0x10/0x10 [ 221.644196][ T7711] vfs_statx+0xfc/0x200 [ 221.644218][ T7711] ? __pfx_vfs_statx+0x10/0x10 [ 221.644248][ T7711] __se_sys_statx+0x1e9/0x2a0 [ 221.644273][ T7711] ? __pfx___se_sys_statx+0x10/0x10 [ 221.644312][ T7711] ? __pfx_ksys_write+0x10/0x10 [ 221.644339][ T7711] ? __x64_sys_statx+0x20/0xc0 [ 221.644363][ T7711] do_syscall_64+0x166/0x520 [ 221.644382][ T7711] ? trace_irq_disable+0x3b/0x140 [ 221.644401][ T7711] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.644422][ T7711] ? clear_bhb_loop+0x70/0xc0 [ 221.644445][ T7711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.644465][ T7711] RIP: 0033:0x7fb21fb9e159 [ 221.644487][ T7711] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.644505][ T7711] RSP: 002b:00007fb21ddf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000014c [ 221.644529][ T7711] RAX: ffffffffffffffda RBX: 00007fb21fe25fa0 RCX: 00007fb21fb9e159 [ 221.644545][ T7711] RDX: 0000000000002900 RSI: 0000200000002040 RDI: ffffffffffffff9c [ 221.644559][ T7711] RBP: 00007fb21ddf6090 R08: 0000000000000000 R09: 0000000000000000 [ 221.644572][ T7711] R10: 000000000000088c R11: 0000000000000246 R12: 0000000000000001 [ 221.644584][ T7711] R13: 00007fb21fe26038 R14: 00007fb21fe25fa0 R15: 00007fff7e656bd8 [ 221.644619][ T7711] [ 221.803128][ T5623] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 221.960744][ T7716] loop2: detected capacity change from 0 to 4096 [ 221.973367][ T7716] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512). [ 222.010299][ T7714] BTRFS critical (device loop3 state E): emergency shutdown [ 222.049548][ T7716] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 222.097795][ T7716] ntfs3(loop2): Failed to load $Extend (-2). [ 222.097823][ T7716] ntfs3(loop2): Failed to initialize $Extend. [ 222.119490][ T7716] netlink: del zone limit has 4 unknown bytes [ 222.498730][ T7719] netlink: 8 bytes leftover after parsing attributes in process `syz.5.433'. [ 222.501384][ T7719] netlink: 8 bytes leftover after parsing attributes in process `syz.5.433'. [ 222.614225][ T5612] BTRFS info (device loop3 state E): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 222.819996][ T5615] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 222.974061][ T7725] loop3: detected capacity change from 0 to 1024 [ 222.993599][ T7725] hfsplus: invalid length 1280 has been corrected to 255 [ 222.993744][ T7725] hfsplus: invalid length 1280 has been corrected to 255 [ 222.994033][ T7725] hfsplus: invalid length 1280 has been corrected to 255 [ 222.994476][ T7725] hfsplus: invalid length 1280 has been corrected to 255 [ 222.994551][ T7725] hfsplus: invalid length 1280 has been corrected to 255 [ 222.994624][ T7725] hfsplus: invalid length 1280 has been corrected to 255 [ 222.994976][ T7725] hfsplus: invalid length 1280 has been corrected to 255 [ 223.038127][ T5615] usb 6-1: New USB device found: idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 223.058958][ T5615] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 223.059446][ T5615] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.082522][ T5615] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 223.082551][ T5615] usb 6-1: Manufacturer: syz [ 223.140110][ T5615] usb 6-1: config 0 descriptor?? [ 223.309206][ T5615] rc_core: IR keymap rc-hauppauge not found [ 223.309290][ T5615] Registered IR keymap rc-empty [ 223.332696][ T5615] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 223.353306][ T5615] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input8 [ 223.375945][ T7058] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 223.410163][ T5615] usb 6-1: USB disconnect, device number 4 [ 223.526190][ T7058] usb 2-1: New USB device found: idVendor=10c4, idProduct=ea90, bcdDevice=0.80 [ 223.528889][ T7058] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.528921][ T7058] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.528957][ T7058] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.535834][ T7058] usb 2-1: config 0 descriptor?? [ 223.974497][ T7058] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 223.974605][ T7058] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 223.974632][ T7058] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 223.974683][ T7058] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 223.974735][ T7058] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 223.974761][ T7058] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 223.974812][ T7058] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 223.987728][ T7058] cp2112 0003:10C4:EA90.0003: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 224.160737][ T7058] cp2112 0003:10C4:EA90.0003: Part Number: 0x00 Device Version: 0x03 [ 224.402180][ T51] hfsplus: invalid length 1280 has been corrected to 255 [ 224.472397][ T7737] netlink: 32 bytes leftover after parsing attributes in process `syz.5.439'. [ 224.806945][ T7058] cp2112 0003:10C4:EA90.0003: error reading lock byte: -32 [ 224.820506][ T7726] cp2112 0003:10C4:EA90.0003: Error starting transaction: -38 [ 224.970868][ T7726] loop1: detected capacity change from 0 to 4096 [ 224.991023][ T7726] EXT4-fs (loop1): cluster size (1024) smaller than block size (4096) [ 225.030599][ T7058] usb 2-1: USB disconnect, device number 12 [ 226.061451][ T7748] FAULT_INJECTION: forcing a failure. [ 226.061451][ T7748] name failslab, interval 1, probability 0, space 0, times 0 [ 226.061485][ T7748] CPU: 0 UID: 60929 PID: 7748 Comm: syz.2.442 Not tainted syzkaller #0 PREEMPT(full) [ 226.061512][ T7748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 226.061525][ T7748] Call Trace: [ 226.061534][ T7748] [ 226.061544][ T7748] dump_stack_lvl+0xe8/0x150 [ 226.061579][ T7748] should_fail_ex+0x3eb/0x540 [ 226.061607][ T7748] ? __pfx_sock_alloc_inode+0x10/0x10 [ 226.061630][ T7748] should_failslab+0xa8/0x100 [ 226.061654][ T7748] ? __pfx_sock_alloc_inode+0x10/0x10 [ 226.061675][ T7748] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 226.061700][ T7748] ? sock_alloc_inode+0x2c/0x1a0 [ 226.061719][ T7748] ? sock_alloc_inode+0x2c/0x1a0 [ 226.061741][ T7748] ? key_fsuid_changed+0xb3/0x100 [ 226.061766][ T7748] ? __pfx_sock_alloc_inode+0x10/0x10 [ 226.061786][ T7748] sock_alloc_inode+0x2c/0x1a0 [ 226.061807][ T7748] ? __pfx_sock_alloc_inode+0x10/0x10 [ 226.061827][ T7748] alloc_inode+0x6a/0x1b0 [ 226.061852][ T7748] __sock_create+0x127/0xac0 [ 226.061892][ T7748] __sys_socket+0xd6/0x1b0 [ 226.061919][ T7748] __x64_sys_socket+0x7a/0x90 [ 226.061942][ T7748] do_syscall_64+0x166/0x520 [ 226.061962][ T7748] ? trace_irq_disable+0x3b/0x140 [ 226.061982][ T7748] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.062005][ T7748] ? clear_bhb_loop+0x70/0xc0 [ 226.062029][ T7748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.062051][ T7748] RIP: 0033:0x7f61b439e159 [ 226.062072][ T7748] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 226.062092][ T7748] RSP: 002b:00007f61b5252028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 226.062118][ T7748] RAX: ffffffffffffffda RBX: 00007f61b4625fa0 RCX: 00007f61b439e159 [ 226.062135][ T7748] RDX: 000000000000000c RSI: 0000000000000003 RDI: 0000000000000010 [ 226.062148][ T7748] RBP: 00007f61b443506b R08: 0000000000000000 R09: 0000000000000000 [ 226.062162][ T7748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 226.062175][ T7748] R13: 00007f61b4626038 R14: 00007f61b4625fa0 R15: 00007ffd9953bbe8 [ 226.062211][ T7748] [ 226.066931][ T7748] socket: no more sockets [ 226.411951][ T7765] FAULT_INJECTION: forcing a failure. [ 226.411951][ T7765] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 226.411985][ T7765] CPU: 0 UID: 0 PID: 7765 Comm: syz.2.445 Not tainted syzkaller #0 PREEMPT(full) [ 226.412008][ T7765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 226.412020][ T7765] Call Trace: [ 226.412029][ T7765] [ 226.412038][ T7765] dump_stack_lvl+0xe8/0x150 [ 226.412066][ T7765] should_fail_ex+0x3eb/0x540 [ 226.412094][ T7765] _copy_to_user+0x31/0xb0 [ 226.412118][ T7765] simple_read_from_buffer+0xe1/0x170 [ 226.412148][ T7765] proc_fail_nth_read+0x1bb/0x230 [ 226.412173][ T7765] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 226.412199][ T7765] ? rw_verify_area+0x24a/0x4c0 [ 226.412223][ T7765] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 226.412245][ T7765] vfs_read+0x213/0xa80 [ 226.412273][ T7765] ? __pfx___mutex_lock+0x10/0x10 [ 226.412296][ T7765] ? __pfx_vfs_read+0x10/0x10 [ 226.412319][ T7765] ? __fget_files+0x2a/0x420 [ 226.412340][ T7765] ? __fget_files+0x3a2/0x420 [ 226.412358][ T7765] ? __fget_files+0x2a/0x420 [ 226.412384][ T7765] ? fdget+0x1ac/0x250 [ 226.412416][ T7765] ksys_read+0x150/0x270 [ 226.412440][ T7765] ? __pfx_ksys_read+0x10/0x10 [ 226.412475][ T7765] do_syscall_64+0x166/0x520 [ 226.412493][ T7765] ? trace_irq_disable+0x3b/0x140 [ 226.412520][ T7765] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.412543][ T7765] ? clear_bhb_loop+0x70/0xc0 [ 226.412567][ T7765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.412588][ T7765] RIP: 0033:0x7f61b435e98e [ 226.412608][ T7765] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 226.412626][ T7765] RSP: 002b:00007f61b5230fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 226.412651][ T7765] RAX: ffffffffffffffda RBX: 00007f61b52316c0 RCX: 00007f61b435e98e [ 226.412666][ T7765] RDX: 000000000000000f RSI: 00007f61b52310a0 RDI: 0000000000000004 [ 226.412680][ T7765] RBP: 00007f61b5231090 R08: 0000000000000000 R09: 0000000000000000 [ 226.412693][ T7765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 226.412705][ T7765] R13: 00007f61b4626128 R14: 00007f61b4626090 R15: 00007ffd9953bbe8 [ 226.412740][ T7765] [ 226.860039][ T7771] loop1: detected capacity change from 0 to 128 [ 226.861230][ T7771] befs: Unknown parameter '' [ 226.983222][ T7773] netlink: 104 bytes leftover after parsing attributes in process `syz.1.446'. [ 228.868443][ T7782] mmap: syz.1.449 (7782) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 228.919636][ T7786] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 228.919659][ T7786] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 228.920623][ T7786] vhci_hcd vhci_hcd.0: Device attached [ 228.923518][ T7786] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(13) [ 228.923542][ T7786] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 228.923582][ T7786] vhci_hcd vhci_hcd.0: Device attached [ 229.212674][ T7789] vhci_hcd: connection closed [ 229.212881][ T7061] usb 37-1: new high-speed USB device number 2 using vhci_hcd [ 229.216547][ T7787] vhci_hcd: connection closed [ 229.217100][ T7788] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 229.220720][ T238] vhci_hcd vhci_hcd.2: stop threads [ 229.220743][ T238] vhci_hcd vhci_hcd.2: release socket [ 229.220797][ T238] vhci_hcd vhci_hcd.2: disconnect device [ 229.220837][ T238] vhci_hcd vhci_hcd.2: stop threads [ 229.220849][ T238] vhci_hcd vhci_hcd.2: release socket [ 229.220866][ T238] vhci_hcd vhci_hcd.2: disconnect device [ 229.481173][ T7783] loop1: detected capacity change from 0 to 32768 [ 229.776516][ T7799] loop3: detected capacity change from 0 to 136 [ 229.868199][ T7801] loop5: detected capacity change from 0 to 128 [ 229.871555][ T7801] EXT4-fs (loop5): Test dummy encryption mode enabled [ 229.932185][ T7801] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 229.936351][ T7801] ext4 filesystem being mounted at /42/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 230.326929][ T10] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 230.644594][ T10] usb 4-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 231.119052][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.119090][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 231.119113][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 231.119159][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.131879][ T6606] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 231.182364][ T10] usb 4-1: config 0 descriptor?? [ 231.322711][ T33] audit: type=1326 audit(1791174297.517:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7809 comm="syz.5.453" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb21fb9e159 code=0x0 [ 231.488710][ T7806] loop2: detected capacity change from 0 to 40427 [ 231.506681][ T7806] F2FS-fs (loop2): Wrong segment_count / block_count (31 > 0) [ 231.506713][ T7806] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 231.536866][ T7806] F2FS-fs (loop2): invalid crc value [ 231.539668][ T7821] loop1: detected capacity change from 0 to 512 [ 231.542002][ T7821] udf: Unknown parameter 'F' [ 231.571858][ T7819] netlink: 64 bytes leftover after parsing attributes in process `syz.1.452'. [ 231.728383][ T7806] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 231.784453][ T7806] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 231.784516][ T7806] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 231.949261][ T5615] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 232.068130][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 232.068246][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 232.091551][ T10] usb 4-1: USB disconnect, device number 8 [ 232.105510][ T5615] usb 1-1: Using ep0 maxpacket: 8 [ 232.121238][ T5615] usb 1-1: unable to get BOS descriptor or descriptor too short [ 232.121297][ T5615] usb 1-1: New USB device found: idVendor=1164, idProduct=0602, bcdDevice=47.06 [ 232.143295][ T5615] usb 1-1: config 12 has an invalid interface number: 188 but max is 0 [ 232.143326][ T5615] usb 1-1: config 12 has no interface number 0 [ 232.143371][ T5615] usb 1-1: config 12 interface 188 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 8 [ 232.143398][ T5615] usb 1-1: config 12 interface 188 has no altsetting 0 [ 232.180789][ T5615] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.180820][ T5615] usb 1-1: Product: syz [ 232.180834][ T5615] usb 1-1: Manufacturer: syz [ 232.180849][ T5615] usb 1-1: SerialNumber: syz [ 232.213877][ T7825] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 232.426447][ T7829] FAULT_INJECTION: forcing a failure. [ 232.426447][ T7829] name failslab, interval 1, probability 0, space 0, times 0 [ 232.426483][ T7829] CPU: 1 UID: 0 PID: 7829 Comm: syz.5.457 Not tainted syzkaller #0 PREEMPT(full) [ 232.426517][ T7829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 232.426532][ T7829] Call Trace: [ 232.426541][ T7829] [ 232.426550][ T7829] dump_stack_lvl+0xe8/0x150 [ 232.426581][ T7829] should_fail_ex+0x3eb/0x540 [ 232.426609][ T7829] should_failslab+0xa8/0x100 [ 232.426631][ T7829] ? vm_area_dup+0x28/0x760 [ 232.426653][ T7829] kmem_cache_alloc_noprof+0x9c/0x600 [ 232.426678][ T7829] ? vm_area_dup+0x28/0x760 [ 232.426707][ T7829] vm_area_dup+0x28/0x760 [ 232.426725][ T7829] ? __split_vma+0x1b7/0xa90 [ 232.426749][ T7829] __split_vma+0x1d7/0xa90 [ 232.426775][ T7829] ? mas_next_slot+0xc91/0xd70 [ 232.426800][ T7829] ? __pfx___split_vma+0x10/0x10 [ 232.426835][ T7829] ? mas_find+0x6d6/0xcb0 [ 232.426862][ T7829] vms_gather_munmap_vmas+0x4e3/0x1370 [ 232.426902][ T7829] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 232.426932][ T7829] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 232.426968][ T7829] do_vmi_align_munmap+0x2b4/0x4b0 [ 232.427012][ T7829] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 232.427052][ T7829] ? mas_walk+0x37e/0x490 [ 232.427074][ T7829] ? mas_find+0x642/0xcb0 [ 232.427098][ T7829] do_vmi_munmap+0x252/0x2d0 [ 232.427129][ T7829] __vm_munmap+0x241/0x3e0 [ 232.427153][ T7829] ? __pfx___vm_munmap+0x10/0x10 [ 232.427172][ T7829] ? vm_mmap_pgoff+0x35a/0x4e0 [ 232.427206][ T7829] ? do_user_addr_fault+0xd3f/0x1480 [ 232.427239][ T7829] __x64_sys_munmap+0x60/0x70 [ 232.427261][ T7829] do_syscall_64+0x166/0x520 [ 232.427279][ T7829] ? trace_irq_disable+0x3b/0x140 [ 232.427297][ T7829] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.427317][ T7829] ? clear_bhb_loop+0x70/0xc0 [ 232.427342][ T7829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.427363][ T7829] RIP: 0033:0x7fb21fb9df87 [ 232.427385][ T7829] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 232.427401][ T7829] RSP: 002b:00007fb21ddf4d18 EFLAGS: 00000206 ORIG_RAX: 000000000000000b [ 232.427426][ T7829] RAX: ffffffffffffffda RBX: 00007fb218000000 RCX: 00007fb21fb9df87 [ 232.427442][ T7829] RDX: 0000000000000000 RSI: 0000000002400000 RDI: 00007fb215c00000 [ 232.427461][ T7829] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000 [ 232.427475][ T7829] R10: 0000000000000022 R11: 0000000000000206 R12: 0000000004000000 [ 232.427489][ T7829] R13: 0000000000001000 R14: 00007fb21c000000 R15: 0000000002400000 [ 232.427529][ T7829] [ 232.764964][ T7832] loop1: detected capacity change from 0 to 128 [ 233.101273][ T7832] EXT4-fs (loop1): Test dummy encryption mode enabled [ 233.353341][ T7832] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 233.353978][ T7832] ext4 filesystem being mounted at /87/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 233.364409][ T7058] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 233.532406][ T7837] bridge_slave_0: left allmulticast mode [ 233.532439][ T7837] bridge_slave_0: left promiscuous mode [ 233.533664][ T7837] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.631855][ T7837] bridge_slave_1: left allmulticast mode [ 233.631913][ T7837] bridge_slave_1: left promiscuous mode [ 233.632197][ T7837] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.786642][ T7058] usb 6-1: New USB device found: idVendor=0424, idProduct=7850, bcdDevice=0.00 [ 233.979595][ T7058] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.979627][ T7058] usb 6-1: Product: syz [ 233.979642][ T7058] usb 6-1: Manufacturer: syz [ 233.979656][ T7058] usb 6-1: SerialNumber: syz [ 234.176577][ T7837] bond0: (slave bond_slave_0): Releasing backup interface [ 234.226135][ T7837] bond0: (slave bond_slave_1): Releasing backup interface [ 234.275745][ T7837] team0: Port device team_slave_0 removed [ 234.307189][ T7837] team0: Port device team_slave_1 removed [ 234.308398][ T7837] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 234.308420][ T7837] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 234.315861][ T7837] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 234.315886][ T7837] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 234.318236][ T7837] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 234.330486][ T7061] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 234.365023][ T7841] tipc: Started in network mode [ 234.365055][ T7841] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 234.365341][ T7841] tipc: Enabled bearer , priority 0 [ 234.376237][ T5608] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 234.431239][ T7058] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 234.431312][ T7058] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 234.548029][ T7851] loop1: detected capacity change from 0 to 128 [ 234.564012][ T7851] hpfs: Unknown parameter '01777777777777777777777' [ 234.642816][ T7058] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO [ 234.642884][ T7058] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 234.683481][ T7058] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 234.733038][ T7854] loop1: detected capacity change from 0 to 2048 [ 234.794204][ T5615] pvrusb2: Hardware description: Gotview USB 2.0 DVD Deluxe [ 234.795049][ T5615] usb 1-1: selecting invalid altsetting 0 [ 234.798709][ T5615] usb 1-1: USB disconnect, device number 10 [ 234.801047][ T5615] pvrusb2: Device being rendered inoperable [ 234.869041][ T7058] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 234.899716][ T7058] usb 6-1: USB disconnect, device number 5 [ 235.377451][ T10] tipc: Node number set to 11578026 [ 235.420848][ T7860] loop0: detected capacity change from 0 to 32768 [ 235.480268][ T7860] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 235.541598][ T7860] XFS (loop0): Ending clean mount [ 235.573446][ T7860] XFS (loop0): Quotacheck needed: Please wait. [ 235.620856][ T7870] loop5: detected capacity change from 0 to 256 [ 235.634344][ T7870] FAT-fs (loop5): data area starts beyond volume (274 > 64) [ 235.634373][ T7870] FAT-fs (loop5): Can't find a valid FAT filesystem [ 237.054586][ T7860] XFS (loop0): Quotacheck: Done. [ 237.534828][ T7057] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 237.685600][ T7057] usb 6-1: Using ep0 maxpacket: 32 [ 237.686683][ T7057] usb 6-1: New USB device found: idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 237.692793][ T7057] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.692822][ T7057] usb 6-1: Product: syz [ 237.692845][ T7057] usb 6-1: Manufacturer: syz [ 237.692861][ T7057] usb 6-1: SerialNumber: syz [ 237.755017][ T7057] usb 6-1: config 0 descriptor?? [ 237.785089][ T7057] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 237.785529][ T7057] dvb-usb: bulk message failed: -22 (4/0) [ 237.785551][ T7057] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 237.785698][ T7057] dvb-usb: bulk message failed: -22 (5/0) [ 237.785712][ T7057] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 237.896761][ T7057] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 237.917547][ T7057] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 237.917609][ T7057] usb 6-1: media controller created [ 238.018652][ T5611] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 238.068283][ T7057] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 238.147791][ T7888] netlink: 348 bytes leftover after parsing attributes in process `syz.3.471'. [ 238.150731][ T33] audit: type=1400 audit(1791174304.347:103): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=7887 comm="syz.3.471" name="unknown" offset=28 [ 238.161496][ T7890] loop2: detected capacity change from 0 to 128 [ 238.209235][ T7057] usb 6-1: selecting invalid altsetting 3 [ 238.209259][ T7057] ttusb2: set interface to alts=3 failed [ 238.214402][ T7890] EXT4-fs (loop2): Test dummy encryption mode enabled [ 238.221744][ T7876] loop1: detected capacity change from 0 to 32768 [ 238.251228][ T7876] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.466 (7876) [ 238.262632][ T7876] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 238.262665][ T7876] BTRFS info (device loop1): using crc32c checksum algorithm [ 238.299306][ T7890] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 238.301695][ T7890] ext4 filesystem being mounted at /98/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 238.583791][ T7057] DVB: Unable to find symbol tda10086_attach() [ 238.583811][ T7057] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 238.585206][ T7057] dvb-usb: bulk message failed: -22 (4/0) [ 238.585246][ T7057] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 238.585386][ T7057] dvb-usb: bulk message failed: -22 (5/0) [ 238.585400][ T7057] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 238.585472][ T7057] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 238.649866][ T7057] usb 6-1: USB disconnect, device number 6 [ 239.154171][ T7876] BTRFS info (device loop1): rebuilding free space tree [ 239.251984][ T7057] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 239.405164][ T5609] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 239.480562][ T7876] BTRFS info (device loop1): enabling ssd optimizations [ 239.480583][ T7876] BTRFS info (device loop1): turning on async discard [ 239.480594][ T7876] BTRFS info (device loop1): enabling free space tree [ 239.480603][ T7876] BTRFS info (device loop1): force clearing of disk cache [ 239.480615][ T7876] BTRFS info (device loop1): use lzo compression, level 1 [ 239.482646][ T7876] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 239.484674][ T7058] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 239.569477][ T7919] syz.5.477 uses obsolete (PF_INET,SOCK_PACKET) [ 239.657730][ T7058] usb 4-1: New USB device found: idVendor=046d, idProduct=c314, bcdDevice=0.40 [ 239.670040][ T7058] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 239.670079][ T7058] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 239.722287][ T7058] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 239.722321][ T7058] usb 4-1: Product: syz [ 239.722336][ T7058] usb 4-1: Manufacturer: syz [ 239.788832][ T7058] hub 4-1:4.0: USB hub found [ 239.940627][ T7922] loop2: detected capacity change from 0 to 128 [ 240.053355][ T7058] hub 4-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 240.132409][ T7922] omfs: sysblock size (-58445445) is out of range [ 240.212567][ T7920] loop2: detected capacity change from 0 to 512 [ 240.270780][ T7920] EXT4-fs error (device loop2): ext4_orphan_get:1429: comm syz.2.476: bad orphan inode 11862016 [ 240.270813][ T7920] loop2: lost filesystem error report for type 5 error -117 [ 240.281841][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 240.281869][ C1] EXT4-fs (loop2): initial error at time 1791174306: ext4_orphan_get:1429 [ 240.281895][ C1] EXT4-fs (loop2): last error at time 1791174306: ext4_orphan_get:1429 [ 240.323576][ T7920] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 240.323652][ T7920] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 240.591027][ T7933] loop1: detected capacity change from 0 to 256 [ 240.594758][ T5615] usb 4-1: USB disconnect, device number 9 [ 241.910753][ T7941] FAULT_INJECTION: forcing a failure. [ 241.910753][ T7941] name failslab, interval 1, probability 0, space 0, times 0 [ 241.910789][ T7941] CPU: 1 UID: 0 PID: 7941 Comm: syz.3.481 Not tainted syzkaller #0 PREEMPT(full) [ 241.910813][ T7941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 241.910826][ T7941] Call Trace: [ 241.910835][ T7941] [ 241.910845][ T7941] dump_stack_lvl+0xe8/0x150 [ 241.910875][ T7941] should_fail_ex+0x3eb/0x540 [ 241.910915][ T7941] should_failslab+0xa8/0x100 [ 241.910939][ T7941] __kmalloc_cache_noprof+0x9e/0x600 [ 241.910961][ T7941] ? __pfx_idr_alloc_u32+0x10/0x10 [ 241.910982][ T7941] ? init_srcu_struct_fields+0x83/0xbd0 [ 241.911003][ T7941] ? init_srcu_struct_fields+0x83/0xbd0 [ 241.911033][ T7941] init_srcu_struct_fields+0x83/0xbd0 [ 241.911066][ T7941] dm_create+0x1fc/0xf70 [ 241.911092][ T7941] dev_create+0x1f7/0x400 [ 241.911114][ T7941] ? __pfx_dev_create+0x10/0x10 [ 241.911134][ T7941] ? __might_fault+0xaf/0x130 [ 241.911163][ T7941] dm_ctl_ioctl+0x9ec/0xe10 [ 241.911192][ T7941] ? __pfx_dev_create+0x10/0x10 [ 241.911213][ T7941] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 241.911269][ T7941] ? __fget_files+0x2a/0x420 [ 241.911295][ T7941] ? bpf_lsm_file_ioctl+0x9/0x20 [ 241.911317][ T7941] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 241.911339][ T7941] __se_sys_ioctl+0xfc/0x170 [ 241.911364][ T7941] do_syscall_64+0x166/0x520 [ 241.911384][ T7941] ? trace_irq_disable+0x3b/0x140 [ 241.911403][ T7941] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.911425][ T7941] ? clear_bhb_loop+0x70/0xc0 [ 241.911450][ T7941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.911472][ T7941] RIP: 0033:0x7f797199e159 [ 241.911493][ T7941] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 241.911511][ T7941] RSP: 002b:00007f79728d9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 241.911538][ T7941] RAX: ffffffffffffffda RBX: 00007f7971c25fa0 RCX: 00007f797199e159 [ 241.911554][ T7941] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 241.911569][ T7941] RBP: 00007f7971a3506b R08: 0000000000000000 R09: 0000000000000000 [ 241.911583][ T7941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 241.911597][ T7941] R13: 00007f7971c26038 R14: 00007f7971c25fa0 R15: 00007ffe5afd2908 [ 241.911633][ T7941] [ 242.258213][ T7941] overlay: filesystem on ./file0 is read-only [ 242.345379][ T5609] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 242.629103][ T7954] loop3: detected capacity change from 0 to 128 [ 242.635157][ T7954] EXT4-fs (loop3): Test dummy encryption mode enabled [ 242.670847][ T7954] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 242.671282][ T7954] ext4 filesystem being mounted at /102/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 243.706129][ T5612] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 243.808423][ T7966] FAULT_INJECTION: forcing a failure. [ 243.808423][ T7966] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 243.808456][ T7966] CPU: 0 UID: 0 PID: 7966 Comm: syz.0.488 Not tainted syzkaller #0 PREEMPT(full) [ 243.808480][ T7966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 243.808492][ T7966] Call Trace: [ 243.808501][ T7966] [ 243.808510][ T7966] dump_stack_lvl+0xe8/0x150 [ 243.808542][ T7966] should_fail_ex+0x3eb/0x540 [ 243.808570][ T7966] _copy_to_user+0x31/0xb0 [ 243.808594][ T7966] simple_read_from_buffer+0xe1/0x170 [ 243.808628][ T7966] proc_fail_nth_read+0x1bb/0x230 [ 243.808654][ T7966] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 243.808681][ T7966] ? rw_verify_area+0x24a/0x4c0 [ 243.808715][ T7966] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 243.808737][ T7966] vfs_read+0x213/0xa80 [ 243.808764][ T7966] ? __pfx___mutex_lock+0x10/0x10 [ 243.808787][ T7966] ? __pfx_vfs_read+0x10/0x10 [ 243.808810][ T7966] ? __fget_files+0x2a/0x420 [ 243.808830][ T7966] ? __fget_files+0x3a2/0x420 [ 243.808849][ T7966] ? __fget_files+0x2a/0x420 [ 243.808875][ T7966] ? fdget+0x1ac/0x250 [ 243.808902][ T7966] ksys_read+0x150/0x270 [ 243.808926][ T7966] ? __pfx_ksys_read+0x10/0x10 [ 243.808959][ T7966] do_syscall_64+0x166/0x520 [ 243.808979][ T7966] ? trace_irq_disable+0x3b/0x140 [ 243.808999][ T7966] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.809021][ T7966] ? clear_bhb_loop+0x70/0xc0 [ 243.809045][ T7966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.809067][ T7966] RIP: 0033:0x7fb9e595e98e [ 243.809087][ T7966] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 243.809105][ T7966] RSP: 002b:00007fb9e3bb3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 243.809128][ T7966] RAX: ffffffffffffffda RBX: 00007fb9e3bb46c0 RCX: 00007fb9e595e98e [ 243.809144][ T7966] RDX: 000000000000000f RSI: 00007fb9e3bb40a0 RDI: 0000000000000004 [ 243.809157][ T7966] RBP: 00007fb9e3bb4090 R08: 0000000000000000 R09: 0000000000000000 [ 243.809171][ T7966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 243.809184][ T7966] R13: 00007fb9e5c26218 R14: 00007fb9e5c26180 R15: 00007ffe1b42a148 [ 243.809215][ T7966] [ 244.045263][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 244.112622][ T7969] smpboot: CPU 1 is now offline [ 244.125429][ T7972] loop0: detected capacity change from 0 to 128 [ 244.278451][ T7972] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 244.278491][ T7972] hpfs: filesystem error: improperly stopped [ 244.278500][ T7972] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 244.278509][ T7972] hpfs: You really don't want any checks? You are crazy... [ 244.278516][ T7972] hpfs: Code page directory magic doesn't match (magic = 7b3184b5) [ 244.278523][ T7972] hpfs: code page support is disabled [ 244.278754][ T7972] hpfs: hpfs_map_4sectors(): unaligned read [ 244.278800][ T7972] hpfs: hpfs_map_4sectors(): unaligned read [ 244.278806][ T7972] hpfs: filesystem error: unable to find root dir [ 245.114371][ T10] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 245.264798][ T10] usb 6-1: New USB device found: idVendor=046d, idProduct=c314, bcdDevice=0.40 [ 245.265721][ T10] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 245.265742][ T10] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.266985][ T10] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 245.267000][ T10] usb 6-1: Product: syz [ 245.267009][ T10] usb 6-1: Manufacturer: syz [ 245.271039][ T10] hub 6-1:4.0: USB hub found [ 245.478038][ T10] hub 6-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 246.450474][ T7992] ./file0: Can't open blockdev [ 246.738167][ T10] usb 6-1: USB disconnect, device number 7 [ 247.054762][ T8002] syzkaller0: entered promiscuous mode [ 247.054780][ T8002] syzkaller0: entered allmulticast mode [ 247.258261][ T8008] loop1: detected capacity change from 0 to 512 [ 247.406902][ T8008] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 247.406983][ T8008] ext4 filesystem being mounted at /94/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 247.439227][ T8012] loop0: detected capacity change from 0 to 128 [ 247.454709][ T8012] EXT4-fs (loop0): Test dummy encryption mode enabled [ 247.507143][ T8008] EXT4-fs (loop1): Online defrag not supported for non-extent files [ 247.702573][ T8012] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 248.670119][ T8012] ext4 filesystem being mounted at /103/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 249.064394][ T8015] EXT4-fs (loop1): Online defrag not supported for non-extent files [ 250.362711][ T5608] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.567533][ T5611] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 250.883795][ T8042] loop0: detected capacity change from 0 to 2048 [ 250.967458][ T8045] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 253.840405][ T8048] NILFS error (device loop0): nilfs_lookup: deleted inode referenced: 12 [ 254.002908][ T8048] Remounting filesystem read-only [ 254.165934][ T8042] NILFS error (device loop0): nilfs_lookup: deleted inode referenced: 12 [ 254.235122][ T8062] Cannot find set identified by id 4 to match [ 254.250533][ T5611] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 254.267124][ T8059] syzkaller0: entered promiscuous mode [ 254.267141][ T8059] syzkaller0: entered allmulticast mode [ 254.299603][ T8064] loop2: detected capacity change from 0 to 512 [ 254.300585][ T8064] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 254.540018][ T8062] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fffff00) [ 254.564444][ T5620] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 254.632790][ T8062] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fffff00) [ 254.633276][ T8062] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fffff00) [ 254.657917][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 254.657961][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 254.658303][ T1317] aoe: packet could not be sent on lowpan0. consider increasing tx_queue_len [ 254.693740][ T8071] netlink: 24 bytes leftover after parsing attributes in process `syz.0.513'. [ 254.729026][ T5620] usb 6-1: unable to get BOS descriptor or descriptor too short [ 254.729558][ T5620] usb 6-1: not running at top speed; connect to a high speed hub [ 254.729580][ T5620] usb 6-1: New USB device found: idVendor=041e, idProduct=323b, bcdDevice=0.40 [ 254.730564][ T5620] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 255, changing to 4 [ 254.730583][ T5620] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 21965, setting to 1023 [ 254.734185][ T5620] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.734203][ T5620] usb 6-1: Product: syz [ 254.734212][ T5620] usb 6-1: Manufacturer: syz [ 254.734220][ T5620] usb 6-1: SerialNumber: syz [ 254.863409][ T8062] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fffff00) [ 254.874061][ T8062] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fffff00) [ 254.885909][ T8062] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fffff00) [ 254.886520][ T8062] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fffff00) [ 254.926616][ T8062] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fffff00) [ 254.946563][ T8062] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fffff00) [ 254.947059][ T8062] syz.2.510: attempt to access beyond end of device [ 254.947059][ T8062] loop2: rw=2049, sector=17179852706, nr_sectors = 64 limit=512 [ 255.037455][ T5620] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 255.053456][ T5620] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 255.151106][ T8080] loop0: detected capacity change from 0 to 128 [ 255.174609][ T8080] EXT4-fs (loop0): Test dummy encryption mode enabled [ 255.251592][ T8080] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 255.265545][ T8080] ext4 filesystem being mounted at /106/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 256.650064][ T5620] usb 6-1: USB disconnect, device number 8 [ 256.876056][ T5619] udevd[5619]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 256.932432][ T5611] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 257.450787][ T8107] loop5: detected capacity change from 0 to 64 [ 257.825330][ T8087] loop2: detected capacity change from 0 to 40427 [ 257.842457][ T8087] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 257.842477][ T8087] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 257.866819][ T8087] F2FS-fs (loop2): invalid crc value [ 257.921656][ T8099] loop0: detected capacity change from 0 to 512 [ 258.210532][ T8120] FAULT_INJECTION: forcing a failure. [ 258.210532][ T8120] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 258.210555][ T8120] CPU: 0 UID: 0 PID: 8120 Comm: syz.5.523 Not tainted syzkaller #0 PREEMPT(full) [ 258.210570][ T8120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 258.210578][ T8120] Call Trace: [ 258.210583][ T8120] [ 258.210589][ T8120] dump_stack_lvl+0xe8/0x150 [ 258.210608][ T8120] should_fail_ex+0x3eb/0x540 [ 258.210624][ T8120] _copy_from_user+0x2d/0xb0 [ 258.210638][ T8120] __sys_bpf+0x2e7/0xe00 [ 258.210656][ T8120] ? __pfx___sys_bpf+0x10/0x10 [ 258.210674][ T8120] ? __fget_files+0x2a/0x420 [ 258.210696][ T8120] ? ksys_write+0x242/0x270 [ 258.210710][ T8120] ? __pfx_ksys_write+0x10/0x10 [ 258.210725][ T8120] __x64_sys_bpf+0xba/0xd0 [ 258.210740][ T8120] do_syscall_64+0x166/0x520 [ 258.210751][ T8120] ? trace_irq_disable+0x3b/0x140 [ 258.210762][ T8120] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.210775][ T8120] ? clear_bhb_loop+0x70/0xc0 [ 258.210788][ T8120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.210801][ T8120] RIP: 0033:0x7fb21fb9e159 [ 258.210813][ T8120] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 258.210824][ T8120] RSP: 002b:00007fb21ddf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 258.210839][ T8120] RAX: ffffffffffffffda RBX: 00007fb21fe25fa0 RCX: 00007fb21fb9e159 [ 258.210849][ T8120] RDX: 0000000000000040 RSI: 0000200000000200 RDI: 0000000000000000 [ 258.210857][ T8120] RBP: 00007fb21ddf6090 R08: 0000000000000000 R09: 0000000000000000 [ 258.210865][ T8120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 258.210872][ T8120] R13: 00007fb21fe26038 R14: 00007fb21fe25fa0 R15: 00007fff7e656bd8 [ 258.210891][ T8120] [ 258.216880][ T8120] loop5: detected capacity change from 0 to 1024 [ 258.368143][ T8120] hfsplus: invalid length 1280 has been corrected to 255 [ 258.368215][ T8120] hfsplus: invalid length 1280 has been corrected to 255 [ 258.368315][ T8120] hfsplus: invalid length 1280 has been corrected to 255 [ 258.368455][ T8120] hfsplus: invalid length 1280 has been corrected to 255 [ 258.368505][ T8120] hfsplus: invalid length 1280 has been corrected to 255 [ 258.368548][ T8120] hfsplus: invalid length 1280 has been corrected to 255 [ 258.368748][ T8120] hfsplus: invalid length 1280 has been corrected to 255 [ 258.467468][ T10] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 258.533205][ T1123] hfsplus: invalid length 1280 has been corrected to 255 [ 258.560221][ T8099] EXT4-fs (loop0): orphan cleanup on readonly fs [ 258.578309][ T8099] EXT4-fs warning (device loop0): ext4_enable_quotas:7304: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 258.629016][ T8099] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 258.658563][ T8099] EXT4-fs error (device loop0): ext4_ext_check_inode:521: inode #13: comm syz.0.519: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 2048(2048) [ 258.658600][ T8099] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 258.677268][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 258.677289][ C0] EXT4-fs (loop0): last error at time 1791174580: ext4_ext_check_inode:521: inode 13 [ 258.682087][ T10] usb 1-1: device descriptor read/64, error -71 [ 258.700941][ T8099] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.519: couldn't read orphan inode 13 (err -117) [ 258.700964][ T8099] loop0: lost filesystem error report for type 5 error -117 [ 258.719982][ T8099] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 259.182727][ T8126] loop5: detected capacity change from 0 to 1024 [ 259.184004][ T10] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 259.223108][ T8126] hfsplus: invalid length 1280 has been corrected to 255 [ 259.223182][ T8126] hfsplus: invalid length 1280 has been corrected to 255 [ 259.223277][ T8126] hfsplus: invalid length 1280 has been corrected to 255 [ 259.223418][ T8126] hfsplus: invalid length 1280 has been corrected to 255 [ 259.223486][ T8126] hfsplus: invalid length 1280 has been corrected to 255 [ 259.223530][ T8126] hfsplus: invalid length 1280 has been corrected to 255 [ 259.223731][ T8126] hfsplus: invalid length 1280 has been corrected to 255 [ 259.308612][ T51] hfsplus: invalid length 1280 has been corrected to 255 [ 259.354534][ T10] usb 1-1: device descriptor read/64, error -71 [ 259.477744][ T10] usb usb1-port1: attempt power cycle [ 259.552094][ T8087] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 260.682691][ T5620] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 260.692217][ T10] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 260.782298][ T10] usb 1-1: device descriptor read/8, error -71 [ 260.805386][ T5611] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.871530][ T5620] usb 6-1: New USB device found: idVendor=056a, idProduct=033b, bcdDevice=0.00 [ 260.931757][ T5620] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.931792][ T5620] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.084927][ T8143] loop0: detected capacity change from 0 to 128 [ 261.093387][ T995] usb 3-1: loading /lib/firmware/htc_9271.fw failed with error -13 [ 261.093412][ T995] usb 3-1: Direct firmware load for htc_9271.fw failed with error -13 [ 261.093443][ T995] usb 3-1: Falling back to sysfs fallback for: htc_9271.fw [ 261.094054][ T33] audit: type=1800 audit(1791174583.280:104): pid=995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=appraise_data cause=missing-hash comm="kworker/0:3" name="/lib/firmware/htc_9271.fw" dev="sda1" ino=417 res=0 errno=-61 [ 261.157735][ T8143] EXT4-fs (loop0): Test dummy encryption mode enabled [ 261.189265][ T8143] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 261.203414][ T8143] ext4 filesystem being mounted at /108/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 262.852734][ T5620] wacom 0003:056A:033B.0004: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 262.990332][ T5611] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 263.003651][ T5620] wacom 0003:056A:033B.0004: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.5-1/input0 [ 263.081434][ T5620] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/0003:056A:033B.0004/input/input9 [ 263.619909][ T5620] usb 6-1: USB disconnect, device number 9 [ 264.245207][ T8156] loop2: detected capacity change from 0 to 131072 [ 264.262552][ T8156] F2FS-fs (loop2): Invalid log sectorsize (67108873) [ 264.262570][ T8156] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 264.262996][ T8156] F2FS-fs (loop2): invalid crc value [ 264.383696][ T8156] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 264.399763][ T8156] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 264.399785][ T8156] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 265.942470][ T8171] loop3: detected capacity change from 0 to 128 [ 265.961880][ T8171] EXT4-fs: Ignoring removed nobh option [ 265.999724][ T8171] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 266.022969][ T8171] ext4 filesystem being mounted at /115/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 266.775636][ T5620] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 266.927686][ T5620] usb 4-1: New USB device found: idVendor=045a, idProduct=5210, bcdDevice=1.01 [ 266.947334][ T5620] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.947355][ T5620] usb 4-1: Product: syz [ 266.947364][ T5620] usb 4-1: Manufacturer: syz [ 266.947373][ T5620] usb 4-1: SerialNumber: syz [ 266.988307][ T5620] ums-karma 4-1:1.0: USB Mass Storage device detected [ 267.081671][ T5620] ums-karma 4-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 267.081671][ T5620] Please send a copy of this message to and [ 267.273092][ T5620] ums-karma 4-1:1.0: probe with driver ums-karma failed with error -5 [ 267.311545][ T8176] ptrace attach of "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[5612] was attempted by "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[8176] [ 267.478468][ T8183] loop0: detected capacity change from 0 to 8 [ 267.562737][ T8183] SQUASHFS error: xz decompression failed, data probably corrupt [ 267.562760][ T8183] SQUASHFS error: Failed to read block 0x108: -5 [ 267.562770][ T8183] SQUASHFS error: Unable to read metadata cache entry [106] [ 267.562778][ T8183] SQUASHFS error: Unable to read inode 0x11f [ 268.013492][ T8186] loop5: detected capacity change from 0 to 1024 [ 268.049031][ T8186] hfsplus: invalid length 1280 has been corrected to 255 [ 268.049106][ T8186] hfsplus: invalid length 1280 has been corrected to 255 [ 268.049203][ T8186] hfsplus: invalid length 1280 has been corrected to 255 [ 268.049372][ T8186] hfsplus: invalid length 1280 has been corrected to 255 [ 268.049421][ T8186] hfsplus: invalid length 1280 has been corrected to 255 [ 268.049465][ T8186] hfsplus: invalid length 1280 has been corrected to 255 [ 268.049678][ T8186] hfsplus: invalid length 1280 has been corrected to 255 [ 268.134151][ T6157] hfsplus: invalid length 1280 has been corrected to 255 [ 268.361450][ T8188] netlink: 36 bytes leftover after parsing attributes in process `syz.0.540'. [ 268.361495][ T8188] netlink: 36 bytes leftover after parsing attributes in process `syz.0.540'. [ 268.387701][ T8188] netlink: 36 bytes leftover after parsing attributes in process `syz.0.540'. [ 268.387744][ T8188] netlink: 36 bytes leftover after parsing attributes in process `syz.0.540'. [ 268.944944][ T8200] FAULT_INJECTION: forcing a failure. [ 268.944944][ T8200] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 268.944986][ T8200] CPU: 0 UID: 0 PID: 8200 Comm: syz.2.535 Not tainted syzkaller #0 PREEMPT(full) [ 268.945001][ T8200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 268.945009][ T8200] Call Trace: [ 268.945014][ T8200] [ 268.945027][ T8200] dump_stack_lvl+0xe8/0x150 [ 268.945046][ T8200] should_fail_ex+0x3eb/0x540 [ 268.945063][ T8200] _copy_to_user+0x31/0xb0 [ 268.945078][ T8200] simple_read_from_buffer+0xe1/0x170 [ 268.945095][ T8200] proc_fail_nth_read+0x1bb/0x230 [ 268.945110][ T8200] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 268.945125][ T8200] ? rw_verify_area+0x24a/0x4c0 [ 268.945138][ T8200] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 268.945150][ T8200] vfs_read+0x213/0xa80 [ 268.945166][ T8200] ? __pfx___mutex_lock+0x10/0x10 [ 268.945178][ T8200] ? __pfx_vfs_read+0x10/0x10 [ 268.945192][ T8200] ? __fget_files+0x2a/0x420 [ 268.945204][ T8200] ? __fget_files+0x3a2/0x420 [ 268.945214][ T8200] ? __fget_files+0x2a/0x420 [ 268.945228][ T8200] ? fdget+0x1ac/0x250 [ 268.945247][ T8200] ksys_read+0x150/0x270 [ 268.945261][ T8200] ? __pfx_ksys_read+0x10/0x10 [ 268.945280][ T8200] do_syscall_64+0x166/0x520 [ 268.945291][ T8200] ? trace_irq_disable+0x3b/0x140 [ 268.945302][ T8200] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.945315][ T8200] ? clear_bhb_loop+0x70/0xc0 [ 268.945329][ T8200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.945341][ T8200] RIP: 0033:0x7f61b435e98e [ 268.945354][ T8200] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 268.945365][ T8200] RSP: 002b:00007f61b5251fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 268.945381][ T8200] RAX: ffffffffffffffda RBX: 00007f61b52526c0 RCX: 00007f61b435e98e [ 268.945390][ T8200] RDX: 000000000000000f RSI: 00007f61b52520a0 RDI: 0000000000000008 [ 268.945398][ T8200] RBP: 00007f61b5252090 R08: 0000000000000000 R09: 0000000000000000 [ 268.945406][ T8200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 268.945414][ T8200] R13: 00007f61b4626038 R14: 00007f61b4625fa0 R15: 00007ffd9953bbe8 [ 268.945433][ T8200] [ 269.262845][ T8203] fuse: Unknown parameter 'g' [ 269.783648][ T5620] usb 4-1: USB disconnect, device number 10 [ 269.815611][ T8207] loop2: detected capacity change from 0 to 32768 [ 270.015063][ T51] rpcbind: server 127.0.0.1 not responding, timed out [ 270.163744][ T5612] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 270.241252][ T8212] loop1: detected capacity change from 0 to 32768 [ 270.241912][ T8212] btrfs: Unknown parameter 'check_int_print_mask' [ 270.360955][ T8217] netlink: 8 bytes leftover after parsing attributes in process `syz.5.549'. [ 270.361134][ T8217] netlink: 8 bytes leftover after parsing attributes in process `syz.5.549'. [ 270.361292][ T8217] netlink: 8 bytes leftover after parsing attributes in process `syz.5.549'. [ 270.361430][ T8217] netlink: 8 bytes leftover after parsing attributes in process `syz.5.549'. [ 270.361570][ T8217] netlink: 8 bytes leftover after parsing attributes in process `syz.5.549'. [ 270.361748][ T8217] netlink: 8 bytes leftover after parsing attributes in process `syz.5.549'. [ 270.735068][ T8219] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 270.954392][ T10] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 271.107124][ T10] usb 4-1: New USB device found: idVendor=1d50, idProduct=614d, bcdDevice=1.00 [ 271.109692][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 271.109723][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 271.109736][ T10] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 271.109750][ T10] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 271.109788][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.350048][ T8246] syzkaller0: entered promiscuous mode [ 271.350067][ T8246] syzkaller0: entered allmulticast mode [ 271.662750][ T8252] loop0: detected capacity change from 0 to 512 [ 271.689489][ T8252] EXT4-fs error (device loop0): ext4_orphan_get:1403: inode #15: comm syz.0.556: iget: bad extended attribute block 134217728 [ 271.689517][ T8252] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 271.689840][ T8252] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.556: couldn't read orphan inode 15 (err -117) [ 271.689860][ T8252] loop0: lost filesystem error report for type 5 error -117 [ 271.703555][ C0] EXT4-fs (loop0): error count since last fsck: 2 [ 271.703573][ C0] EXT4-fs (loop0): initial error at time 1791174593: ext4_orphan_get:1403: inode 15 [ 271.703592][ C0] EXT4-fs (loop0): last error at time 1791174593: ext4_orphan_get:1408 [ 271.717203][ T8252] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 271.805380][ T5620] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 272.390621][ T8252] EXT4-fs error (device loop0): ext4_validate_block_bitmap:445: comm syz.0.556: bg 0: block 465: padding at end of block bitmap is not set [ 272.431452][ T8252] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 272.431478][ T8252] EXT4-fs (loop0): This should not happen!! Data will be lost [ 272.431478][ T8252] [ 272.431488][ T8252] EXT4-fs (loop0): Total free blocks count 0 [ 272.431497][ T8252] EXT4-fs (loop0): Free/Dirty block details [ 272.431512][ T8252] EXT4-fs (loop0): free_blocks=0 [ 272.431525][ T8252] EXT4-fs (loop0): dirty_blocks=16384 [ 272.431533][ T8252] EXT4-fs (loop0): Block reservation details [ 272.431540][ T8252] EXT4-fs (loop0): i_reserved_data_blocks=16384 [ 272.615179][ T5620] usb 6-1: New USB device found: idVendor=0424, idProduct=7850, bcdDevice=0.00 [ 272.636142][ T5620] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.636162][ T5620] usb 6-1: Product: syz [ 272.636193][ T5620] usb 6-1: Manufacturer: syz [ 272.636202][ T5620] usb 6-1: SerialNumber: syz [ 272.681575][ T33] audit: type=1326 audit(1791174594.870:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8235 comm="syz.3.551" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f797199e159 code=0x0 [ 272.793197][ T8252] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 273.279897][ T8262] loop2: detected capacity change from 0 to 512 [ 273.487379][ T5615] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 273.525503][ T5611] EXT4-fs warning (device loop0): ext4_evict_inode:196: inode #18: comm syz-executor: data will be lost [ 273.580621][ T10] gud 4-1:1.0: USB-1: Failed to add properties (ret=-5) [ 273.580674][ T10] gud 4-1:1.0: Failed to get connectors (error=-5) [ 273.580691][ T10] gud 4-1:1.0: probe with driver gud failed with error -5 [ 273.614548][ T5615] usb 2-1: device descriptor read/64, error -71 [ 273.854458][ T5615] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 273.985407][ T5615] usb 2-1: device descriptor read/64, error -71 [ 274.066193][ T8268] sctp: [Deprecated]: syz.0.559 (pid 8268) Use of struct sctp_assoc_value in delayed_ack socket option. [ 274.066193][ T8268] Use struct sctp_sack_info instead [ 274.095502][ T5615] usb usb2-port1: attempt power cycle [ 274.125206][ T33] audit: type=1400 audit(1791174596.310:106): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3A20FFFFFFFF pid=8267 comm="syz.0.559" [ 274.154014][ T33] audit: type=1326 audit(1791174596.340:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8267 comm="syz.0.559" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9e599e159 code=0x7ffc0000 [ 274.183705][ T33] audit: type=1326 audit(1791174596.380:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8267 comm="syz.0.559" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9e599e159 code=0x7ffc0000 [ 274.214449][ T33] audit: type=1326 audit(1791174596.410:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8267 comm="syz.0.559" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=263 compat=0 ip=0x7fb9e599e159 code=0x7ffc0000 [ 274.214914][ T33] audit: type=1326 audit(1791174596.410:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8267 comm="syz.0.559" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9e599e159 code=0x7ffc0000 [ 274.215080][ T33] audit: type=1326 audit(1791174596.410:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8267 comm="syz.0.559" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9e599e159 code=0x7ffc0000 [ 274.215374][ T33] audit: type=1326 audit(1791174596.410:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8267 comm="syz.0.559" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb9e599e159 code=0x7ffc0000 [ 274.242541][ T8268] __nla_validate_parse: 61 callbacks suppressed [ 274.242558][ T8268] netlink: 4 bytes leftover after parsing attributes in process `syz.0.559'. [ 274.242588][ T8268] netlink: 14 bytes leftover after parsing attributes in process `syz.0.559'. [ 274.407391][ T33] audit: type=1326 audit(1791174596.600:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8267 comm="syz.0.559" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9e599e159 code=0x7ffc0000 [ 274.407448][ T33] audit: type=1326 audit(1791174596.600:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8267 comm="syz.0.559" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9e599e159 code=0x7ffc0000 [ 274.579327][ T5615] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 274.605198][ T5615] usb 2-1: device descriptor read/8, error -71 [ 274.638423][ T8270] loop2: detected capacity change from 0 to 4096 [ 274.665666][ T8270] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 274.754745][ T8270] EXT4-fs error (device loop2): ext4_empty_dir:3103: inode #12: block 80: comm syz.2.560: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 274.776059][ T8270] EXT4-fs warning (device loop2): ext4_empty_dir:3106: inode #12: comm syz.2.560: directory missing '..' [ 274.845023][ T5615] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 274.864990][ T5615] usb 2-1: device descriptor read/8, error -71 [ 274.868911][ T5620] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000098. ret = -EPROTO [ 274.868954][ T5620] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 274.869282][ T5620] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 274.869313][ T5620] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 274.951134][ T5620] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 274.980081][ T5615] usb usb2-port1: unable to enumerate USB device [ 275.019609][ T5620] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 275.053121][ T5609] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.078119][ T5620] usb 6-1: USB disconnect, device number 10 [ 275.094559][ T8275] loop0: detected capacity change from 0 to 1024 [ 275.095380][ T8275] hfsplus: Unknown parameter 'fowner>00000000000000000000' [ 275.170907][ T5615] usb 4-1: USB disconnect, device number 11 [ 275.327860][ T8280] ip_tables: iptables: counters copy to user failed while replacing table [ 275.416117][ T8281] syzkaller0: entered promiscuous mode [ 275.416134][ T8281] syzkaller0: entered allmulticast mode [ 275.503247][ T8282] netlink: 34 bytes leftover after parsing attributes in process `syz.0.562'. [ 275.734617][ T5615] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 275.896086][ T5615] usb 6-1: New USB device found: idVendor=05ac, idProduct=0231, bcdDevice=0.00 [ 275.897066][ T5615] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 275.897086][ T5615] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 275.897103][ T5615] usb 6-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 275.897119][ T5615] usb 6-1: config 0 interface 0 has no altsetting 0 [ 275.897140][ T5615] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.973410][ T5615] usb 6-1: config 0 descriptor?? [ 275.974091][ T8286] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 276.018132][ T5615] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input13 [ 276.282217][ T8297] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 276.308217][ T8298] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 276.342617][ T8286] netlink: 4 bytes leftover after parsing attributes in process `syz.5.566'. [ 276.687711][ T8307] loop1: detected capacity change from 0 to 164 [ 277.196597][ T8311] loop1: detected capacity change from 0 to 128 [ 277.213467][ T8311] EXT4-fs (loop1): Test dummy encryption mode enabled [ 277.277568][ T8311] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 277.280395][ T8311] ext4 filesystem being mounted at /109/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 278.530305][ T5613] Bluetooth: hci2: command 0x0406 tx timeout [ 279.201970][ T5608] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 279.336098][ T8326] fuse: Bad value for 'fd' [ 279.356374][ T4962] bcm5974 6-1:0.0: could not read from device [ 279.460994][ T5615] usb 6-1: USB disconnect, device number 11 [ 279.470699][ T4962] bcm5974 6-1:0.0: could not read from device [ 279.509212][ T4962] bcm5974 6-1:0.0: could not read from device [ 282.880582][ T8341] ima: signed policy file (specified as an absolute pathname) required [ 282.882579][ T33] audit: type=1802 audit(1791174605.070:115): pid=8341 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=signed policy required comm="syz.0.579" res=0 errno=-13 [ 282.882905][ T8341] ima: signed policy file (specified as an absolute pathname) required [ 282.883030][ T33] audit: type=1802 audit(1791174605.070:116): pid=8341 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=signed policy required comm="syz.0.579" res=0 errno=-13 [ 282.892889][ T8341] ima: signed policy file (specified as an absolute pathname) required [ 282.893030][ T33] audit: type=1802 audit(1791174605.080:117): pid=8341 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=signed policy required comm="syz.0.579" res=0 errno=-13 [ 282.975250][ T8341] ima: policy update failed [ 282.975463][ T33] audit: type=1802 audit(1791174605.170:118): pid=8341 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.579" res=0 errno=-22 [ 283.099261][ T8343] syzkaller0: entered promiscuous mode [ 283.099280][ T8343] syzkaller0: entered allmulticast mode [ 286.102978][ T8350] bond0: (slave bond_slave_0): Releasing backup interface [ 286.427631][ T8359] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 286.427713][ T8359] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 286.575728][ T8376] fuse: Bad value for 'fd' [ 286.635546][ T8377] loop0: detected capacity change from 0 to 1024 [ 286.653305][ T8377] hfsplus: Unknown parameter '' [ 286.705070][ T8359] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 286.706456][ T8359] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 286.798219][ T8359] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 286.798267][ T8359] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 286.875180][ T8359] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 286.875254][ T8359] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 286.954642][ T8359] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 286.954694][ T8359] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 288.700896][ T5623] Bluetooth: hci0: command 0x0406 tx timeout [ 288.736302][ T5623] Bluetooth: hci1: command 0x0406 tx timeout [ 288.956607][ T5613] Bluetooth: hci3: command 0x0406 tx timeout [ 288.956681][ T5623] Bluetooth: hci4: command 0x0406 tx timeout [ 288.974599][ T5623] Bluetooth: hci2: command 0x0406 tx timeout [ 288.999124][ T8403] syzkaller0: entered promiscuous mode [ 288.999142][ T8403] syzkaller0: entered allmulticast mode [ 289.550704][ T8423] 9pnet_virtio: no channels available for device syz [ 289.747507][ T5623] Bluetooth: hci2: unexpected cc 0x042f length: 9 > 7 [ 289.747536][ T5623] Bluetooth: hci2: unexpected event for opcode 0x042f [ 290.255550][ T8431] ima: signed policy file (specified as an absolute pathname) required [ 290.255694][ T33] audit: type=1802 audit(1791174612.450:119): pid=8431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=signed policy required comm="syz.2.604" res=0 errno=-13 [ 290.258493][ T8431] ima: signed policy file (specified as an absolute pathname) required [ 290.258632][ T33] audit: type=1802 audit(1791174612.450:120): pid=8431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=signed policy required comm="syz.2.604" res=0 errno=-13 [ 290.260515][ T8431] ima: signed policy file (specified as an absolute pathname) required [ 290.260606][ T33] audit: type=1802 audit(1791174612.450:121): pid=8431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=signed policy required comm="syz.2.604" res=0 errno=-13 [ 290.261442][ T8431] ima: policy update failed [ 290.261530][ T33] audit: type=1802 audit(1791174612.450:122): pid=8431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.604" res=0 errno=-22 [ 290.734444][ T5623] Bluetooth: hci0: command 0x0406 tx timeout [ 290.814550][ T5623] Bluetooth: hci1: command 0x0406 tx timeout [ 290.824347][ T7174] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 290.974993][ T7174] usb 2-1: New USB device found: idVendor=046d, idProduct=c29c, bcdDevice=0.40 [ 290.975112][ T5613] Bluetooth: hci3: command 0x0406 tx timeout [ 290.975318][ T5623] Bluetooth: hci4: command 0x0406 tx timeout [ 290.977055][ T7174] usb 2-1: config 1 interface 0 altsetting 13 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 290.977077][ T7174] usb 2-1: config 1 interface 0 has no altsetting 0 [ 290.978910][ T7174] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.978926][ T7174] usb 2-1: Product: syz [ 290.978935][ T7174] usb 2-1: Manufacturer: syz [ 290.978943][ T7174] usb 2-1: SerialNumber: syz [ 291.064509][ T8438] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 291.566274][ T8439] loop1: detected capacity change from 0 to 4096 [ 292.168152][ T8419] bond0: (slave bond_slave_0): Releasing backup interface [ 292.251417][ T8426] netlink: 4 bytes leftover after parsing attributes in process `syz.5.602'. [ 292.349864][ T8437] netlink: 55 bytes leftover after parsing attributes in process `syz.1.605'. [ 292.391474][ T7174] usbhid 2-1:1.0: can't add hid device: -71 [ 292.391546][ T7174] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 292.440249][ T7174] usb 2-1: USB disconnect, device number 17 [ 293.067379][ T8463] syzkaller0: entered promiscuous mode [ 293.067400][ T8463] syzkaller0: entered allmulticast mode [ 293.172870][ T8471] loop1: detected capacity change from 0 to 512 [ 293.223340][ T8471] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 293.252363][ T8450] loop5: detected capacity change from 0 to 32768 [ 293.268854][ T8450] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.608 (8450) [ 293.333579][ T8450] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 293.333606][ T8450] BTRFS info (device loop5): using crc32c checksum algorithm [ 293.469908][ T8471] EXT4-fs error (device loop1): ext4_orphan_get:1403: inode #15: comm syz.1.614: iget: bad extended attribute block 1 [ 293.469936][ T8471] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 293.483686][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 293.483707][ C0] EXT4-fs (loop1): initial error at time 1791174615: ext4_orphan_get:1403: inode 15 [ 293.483726][ C0] EXT4-fs (loop1): last error at time 1791174615: ext4_orphan_get:1403: inode 15 [ 293.515488][ T8471] EXT4-fs (loop1): Remounting filesystem read-only [ 293.549534][ T8450] BTRFS info (device loop5): setting nodatasum [ 293.549555][ T8450] BTRFS info (device loop5): allowing degraded mounts [ 293.549565][ T8450] BTRFS info (device loop5): enabling ssd optimizations [ 293.549574][ T8450] BTRFS info (device loop5): turning on async discard [ 293.549584][ T8450] BTRFS info (device loop5): enabling free space tree [ 293.627539][ T8471] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 293.630217][ T8452] loop3: detected capacity change from 0 to 40427 [ 293.666486][ T8452] F2FS-fs (loop3): invalid crc value [ 293.726507][ T8474] gadgetfs: bound to dummy_udc driver [ 293.799764][ T8486] sctp: [Deprecated]: syz.0.615 (pid 8486) Use of struct sctp_assoc_value in delayed_ack socket option. [ 293.799764][ T8486] Use struct sctp_sack_info instead [ 293.876738][ T5608] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.977256][ T7174] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 293.977465][ C0] gadgetfs: connected [ 293.980702][ T7174] gadgetfs: disconnected [ 294.060290][ T8452] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=ffffffff, run fsck to fix. [ 294.079039][ T8452] loop3: lost filesystem error report for type 5 error -117 [ 294.079055][ T8452] F2FS-fs (loop3): sanity_check_inode: inode (ino=3) has corrupted i_xattr_nid: 4294967295, run fsck to fix. [ 294.079075][ T8452] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 294.079194][ T8452] F2FS-fs (loop3): Failed to read root inode [ 294.124841][ C0] gadgetfs: connected [ 294.130206][ T7174] usb 1-1: New USB device found: idVendor=0525, idProduct=a4a0, bcdDevice=1.00 [ 294.131050][ T7174] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 294.131076][ T7174] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.259030][ C0] gadgetfs: configuration #1 [ 294.299737][ T8474] gadgetfs: suspended from state 3 [ 294.299821][ T8474] gadgetfs: disconnected [ 294.315733][ T7174] usb 1-1: USB disconnect, device number 15 [ 294.547307][ T8497] ima: signed policy file (specified as an absolute pathname) required [ 294.555275][ T8497] ima: signed policy file (specified as an absolute pathname) required [ 294.557009][ T6606] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 294.591373][ T8497] ima: signed policy file (specified as an absolute pathname) required [ 294.591513][ T33] audit: type=1802 audit(1791174616.740:123): pid=8497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=signed policy required comm="syz.1.616" res=0 errno=-13 [ 294.591543][ T33] audit: type=1802 audit(1791174616.750:124): pid=8497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=signed policy required comm="syz.1.616" res=0 errno=-13 [ 294.591567][ T33] audit: type=1802 audit(1791174616.780:125): pid=8497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=signed policy required comm="syz.1.616" res=0 errno=-13 [ 294.622691][ T8497] ima: policy update failed [ 294.622866][ T33] audit: type=1802 audit(1791174616.820:126): pid=8497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.616" res=0 errno=-22 [ 294.961452][ T8503] 9pnet_virtio: no channels available for device syz [ 295.227575][ T5623] Bluetooth: hci0: unexpected cc 0x042f length: 9 > 7 [ 295.227617][ T5623] Bluetooth: hci0: unexpected event for opcode 0x042f [ 295.460768][ T7174] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 295.621825][ T7174] usb 4-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 295.642962][ T7174] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 295.642982][ T7174] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 295.642998][ T7174] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 295.643026][ T7174] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 295.643041][ T7174] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 295.667450][ T7174] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 295.667471][ T7174] usb 4-1: Product: syz [ 295.667479][ T7174] usb 4-1: Manufacturer: syz [ 295.733122][ T7174] cdc_wdm 4-1:1.0: skipping garbage [ 295.733137][ T7174] cdc_wdm 4-1:1.0: skipping garbage [ 295.771332][ T7174] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 295.771350][ T7174] cdc_wdm 4-1:1.0: Unknown control protocol [ 295.939206][ T8452] loop3: detected capacity change from 0 to 128 [ 296.040279][ T8452] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 296.043953][ T8452] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 296.239626][ T8512] fuse: Unknown parameter 'blksgjqQ։͵0x0000000000000200' [ 296.387581][ C0] cdc_wdm 4-1:1.0: Unexpected error -71 [ 296.388483][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 296.388552][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 296.388745][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 296.388757][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 296.388933][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 296.388943][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 296.389124][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 296.389135][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 296.389309][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 296.389320][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 296.389492][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 296.389502][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 296.389675][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 296.389685][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 296.389856][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 296.389867][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 296.390035][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 296.390046][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 296.390264][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 296.390276][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 296.392867][ T5747] usb 4-1: USB disconnect, device number 12 [ 296.392935][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 296.605005][ T8513] sd 0:0:1:0: PR command failed: 1026 [ 296.605038][ T8513] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 296.605062][ T8513] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 296.610915][ T8513] loop5: detected capacity change from 0 to 1024 [ 296.614537][ T8513] overlay: Unknown parameter '//dev' [ 296.619248][ T8513] loop5: detected capacity change from 0 to 512 [ 297.231963][ T8517] loop5: detected capacity change from 0 to 512 [ 297.243766][ T8517] EXT4-fs: Ignoring removed orlov option [ 297.243785][ T8517] EXT4-fs: Ignoring removed nomblk_io_submit option [ 297.243796][ T8517] EXT4-fs: Ignoring removed mblk_io_submit option [ 297.270465][ T8517] EXT4-fs (loop5): can't mount with data=, fs mounted w/o journal [ 299.757344][ T8505] netlink: 4 bytes leftover after parsing attributes in process `syz.1.619'. [ 299.970199][ T8535] ima: signed policy file (specified as an absolute pathname) required [ 299.970309][ T33] audit: type=1802 audit(1791174622.160:127): pid=8535 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=signed policy required comm="syz.1.629" res=0 errno=-13 [ 299.971261][ T8535] ima: signed policy file (specified as an absolute pathname) required [ 299.971347][ T33] audit: type=1802 audit(1791174622.160:128): pid=8535 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=signed policy required comm="syz.1.629" res=0 errno=-13 [ 299.972997][ T8535] ima: signed policy file (specified as an absolute pathname) required [ 299.973120][ T33] audit: type=1802 audit(1791174622.160:129): pid=8535 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=signed policy required comm="syz.1.629" res=0 errno=-13 [ 300.059286][ T8535] ima: policy update failed [ 300.059401][ T33] audit: type=1802 audit(1791174622.250:130): pid=8535 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.629" res=0 errno=-22 [ 301.492429][ T8539] loop3: detected capacity change from 0 to 1024 [ 301.514339][ T8539] EXT4-fs: Ignoring removed bh option [ 301.582411][ T8539] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 301.774116][ T8539] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 301.843721][ T5612] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.994331][ T5747] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 302.132464][ T8564] netlink: 'syz.3.634': attribute type 1 has an invalid length. [ 302.145119][ T5747] usb 1-1: New USB device found: idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 302.146100][ T5747] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 302.146120][ T5747] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 302.146136][ T5747] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 302.148007][ T5747] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.148022][ T5747] usb 1-1: Product: syz [ 302.148031][ T5747] usb 1-1: Manufacturer: syz [ 302.148040][ T5747] usb 1-1: SerialNumber: syz [ 302.151711][ T5747] usb 1-1: config 0 descriptor?? [ 302.152217][ T8537] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 302.201324][ T192] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 302.364558][ T5747] rc_core: IR keymap rc-streamzap not found [ 302.364574][ T5747] Registered IR keymap rc-empty [ 302.365407][ T5747] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 302.371069][ T5747] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input14 [ 302.386367][ T192] usb 2-1: Using ep0 maxpacket: 32 [ 302.398691][ T192] usb 2-1: New USB device found: idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 302.434313][ T192] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 302.434334][ T192] usb 2-1: config 0 has no interface number 0 [ 302.437429][ T192] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.437445][ T192] usb 2-1: Product: syz [ 302.437454][ T192] usb 2-1: Manufacturer: syz [ 302.437463][ T192] usb 2-1: SerialNumber: syz [ 302.496738][ T192] usb 2-1: config 0 descriptor?? [ 303.023185][ T192] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 303.023271][ T192] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 303.102179][ T8572] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 303.248484][ T5747] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 303.317082][ T33] audit: type=1326 audit(1791174625.510:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8581 comm="syz.5.639" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb21fb9e159 code=0x7ffc0000 [ 303.319362][ T33] audit: type=1326 audit(1791174625.510:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8581 comm="syz.5.639" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb21fb9e159 code=0x7ffc0000 [ 303.319810][ T33] audit: type=1326 audit(1791174625.510:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8581 comm="syz.5.639" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7fb21fb9e159 code=0x7ffc0000 [ 303.320010][ T33] audit: type=1326 audit(1791174625.510:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8581 comm="syz.5.639" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb21fb9e159 code=0x7ffc0000 [ 303.320190][ T33] audit: type=1326 audit(1791174625.510:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8581 comm="syz.5.639" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb21fb9e159 code=0x7ffc0000 [ 303.320517][ T33] audit: type=1326 audit(1791174625.510:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8581 comm="syz.5.639" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb21fb5e98e code=0x7ffc0000 [ 303.497304][ T5747] usb 4-1: not running at top speed; connect to a high speed hub [ 303.497330][ T5747] usb 4-1: New USB device found: idVendor=0ea0, idProduct=6858, bcdDevice=0.40 [ 303.499161][ T5747] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 303.499250][ T5747] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 303.502993][ T5747] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.503011][ T5747] usb 4-1: Product: syz [ 303.503020][ T5747] usb 4-1: Manufacturer: syz [ 303.503029][ T5747] usb 4-1: SerialNumber: syz [ 303.588181][ T5747] oti6858 4-1:1.0: oti6858 converter detected [ 303.621179][ T5747] usb 4-1: oti6858 converter now attached to ttyUSB0 [ 303.706308][ T192] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71 [ 303.706538][ T192] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 303.747315][ T192] usb 2-1: USB disconnect, device number 18 [ 303.947286][ T7174] usb 1-1: USB disconnect, device number 16 [ 304.032313][ T8574] oti6858 ttyUSB0: oti6858_open(): usb_submit_urb() failed with error -90 [ 304.043710][ T192] usb 4-1: USB disconnect, device number 13 [ 304.073329][ T192] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 304.085944][ T192] oti6858 4-1:1.0: device disconnected [ 304.158478][ T8588] 9pnet_virtio: no channels available for device syz [ 304.198375][ T8588] netlink: 4 bytes leftover after parsing attributes in process `syz.0.640'. [ 304.216249][ T5623] Bluetooth: hci4: unexpected cc 0x042f length: 9 > 7 [ 304.216274][ T5623] Bluetooth: hci4: unexpected event for opcode 0x042f [ 304.254203][ T8590] loop5: detected capacity change from 0 to 512 [ 304.329853][ T8590] FAT-fs (loop5): error, clusters badly computed (1 != 0) [ 304.329875][ T8590] FAT-fs (loop5): Filesystem has been set read-only [ 304.333366][ T8590] FAT-fs (loop5): error, clusters badly computed (2 != 1) [ 304.459272][ T8593] xt_hashlimit: size too large, truncated to 1048576 [ 304.459343][ T8593] xt_hashlimit: invalid rate [ 304.530833][ T8595] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -13 [ 304.530863][ T8595] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -13 [ 304.530875][ T8595] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 304.577323][ T8597] loop5: detected capacity change from 0 to 512 [ 304.609608][ T8597] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 304.609679][ T8597] ext4 filesystem being mounted at /88/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 304.695469][ T8597] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 304.695486][ T8597] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 304.695737][ T8597] EXT4-fs (loop5): changing journal_checksum during remount not supported; ignoring [ 304.731823][ T8597] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 304.800194][ T8602] ima: signed policy file (specified as an absolute pathname) required [ 304.802603][ T8602] ima: signed policy file (specified as an absolute pathname) required [ 304.832837][ T8602] ima: signed policy file (specified as an absolute pathname) required [ 304.833217][ T8602] ima: policy update failed [ 304.896137][ T8597] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 304.912581][ T8597] ip_tables: iptables: counters copy to user failed while replacing table [ 304.998402][ T8604] netlink: 'syz.0.646': attribute type 1 has an invalid length. [ 305.042453][ T8608] xt_TPROXY: Can be used only with -p tcp or -p udp [ 305.099029][ T8604] 8021q: adding VLAN 0 to HW filter on device bond1 [ 305.141457][ T8613] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 305.169229][ T8613] bond1: (slave batadv1): making interface the new active one [ 305.188392][ T8613] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 305.209901][ T8614] netlink: 16 bytes leftover after parsing attributes in process `syz.2.647'. [ 305.260151][ T6606] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.336967][ T8614] bond0: entered promiscuous mode [ 305.434126][ T8614] bond0: left promiscuous mode [ 305.520921][ T8621] loop3: detected capacity change from 0 to 4096 [ 305.572981][ T8622] netlink: 'syz.5.650': attribute type 10 has an invalid length. [ 305.621867][ T8622] team0: Port device veth0 added [ 305.683324][ T8628] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 305.898708][ T33] kauditd_printk_skb: 442 callbacks suppressed [ 305.898724][ T33] audit: type=1326 audit(1791174628.090:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8629 comm="syz.0.653" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7fb9e5997ed7 code=0x0 [ 305.933301][ T192] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 306.086559][ T192] usb 2-1: New USB device found: idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 306.089033][ T192] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 306.089056][ T192] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 306.089072][ T192] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 306.104711][ T192] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.104730][ T192] usb 2-1: Product: syz [ 306.104739][ T192] usb 2-1: Manufacturer: syz [ 306.104748][ T192] usb 2-1: SerialNumber: syz [ 306.170928][ T192] usb 2-1: config 0 descriptor?? [ 306.188408][ T192] iguanair 2-1:0.0: probe with driver iguanair failed with error -12 [ 306.745586][ T8644] hub 1-0:1.0: USB hub found [ 306.747790][ T8644] hub 1-0:1.0: 1 port detected [ 306.860829][ T8647] 9pnet_virtio: no channels available for device syz [ 306.930094][ T8641] loop5: detected capacity change from 0 to 32768 [ 306.980498][ T8641] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 307.021883][ T8641] XFS (loop5): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50. [ 307.040937][ T8641] XFS (loop5): Tail block (0x29) overwrite detected. Updated to 0x30 [ 307.130709][ T8659] loop0: detected capacity change from 0 to 128 [ 307.176573][ T8659] EXT4-fs (loop0): Test dummy encryption mode enabled [ 307.217401][ T8659] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 307.217638][ T8641] XFS (loop5): Ending clean mount [ 307.222691][ T8659] ext4 filesystem being mounted at /137/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 308.439034][ T8663] loop3: detected capacity change from 0 to 128 [ 308.457346][ T8663] EXT4-fs (loop3): Test dummy encryption mode enabled [ 308.673701][ T8663] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 308.688519][ T8663] ext4 filesystem being mounted at /139/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 308.745806][ T6606] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 309.013311][ T5611] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 309.059422][ T192] usb 2-1: USB disconnect, device number 19 [ 309.403953][ T8672] loop0: detected capacity change from 0 to 2048 [ 309.449485][ T8672] udf: Unknown parameter 'iocSarset' [ 310.823875][ T5612] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 310.995680][ T33] audit: type=1326 audit(1791174633.190:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8684 comm="syz.0.664" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9e599e159 code=0x7ffc0000 [ 310.995717][ T33] audit: type=1326 audit(1791174633.190:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8684 comm="syz.0.664" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9e599e159 code=0x7ffc0000 [ 311.062865][ T33] audit: type=1326 audit(1791174633.260:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8684 comm="syz.0.664" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fb9e599e159 code=0x7ffc0000 [ 311.062902][ T33] audit: type=1326 audit(1791174633.260:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8684 comm="syz.0.664" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9e599e159 code=0x7ffc0000 [ 311.062930][ T33] audit: type=1326 audit(1791174633.260:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8684 comm="syz.0.664" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9e599e159 code=0x7ffc0000 [ 311.172275][ T33] audit: type=1326 audit(1791174633.360:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8684 comm="syz.0.664" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fb9e599e159 code=0x7ffc0000 [ 311.172316][ T33] audit: type=1326 audit(1791174633.360:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8684 comm="syz.0.664" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb9e599dec2 code=0x7ffc0000 [ 311.172342][ T33] audit: type=1326 audit(1791174633.360:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8684 comm="syz.0.664" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb9e595e98e code=0x7ffc0000 [ 311.172368][ T33] audit: type=1326 audit(1791174633.360:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8684 comm="syz.0.664" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fb9e599df87 code=0x7ffc0000 [ 311.173243][ T33] audit: type=1326 audit(1791174633.360:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8684 comm="syz.0.664" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb9e595e98e code=0x7ffc0000 [ 311.339758][ T8686] loop0: detected capacity change from 0 to 64 [ 311.426383][ T8686] hfs: unable to locate alternate MDB [ 311.426396][ T8686] hfs: continuing without an alternate MDB [ 311.432243][ T8692] ima: signed policy file (specified as an absolute pathname) required [ 311.432425][ T8692] ima: signed policy file (specified as an absolute pathname) required [ 311.473425][ T8692] ima: signed policy file (specified as an absolute pathname) required [ 311.492315][ T8692] ima: policy update failed [ 311.492340][ T8692] FAULT_INJECTION: forcing a failure. [ 311.492340][ T8692] name failslab, interval 1, probability 0, space 0, times 0 [ 311.492360][ T8692] CPU: 0 UID: 0 PID: 8692 Comm: syz.1.667 Not tainted syzkaller #0 PREEMPT(full) [ 311.492375][ T8692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 311.492383][ T8692] Call Trace: [ 311.492388][ T8692] [ 311.492393][ T8692] dump_stack_lvl+0xe8/0x150 [ 311.492412][ T8692] should_fail_ex+0x3eb/0x540 [ 311.492427][ T8692] ? __alloc_skb+0x1db/0x7a0 [ 311.492439][ T8692] should_failslab+0xa8/0x100 [ 311.492453][ T8692] ? __alloc_skb+0x1db/0x7a0 [ 311.492463][ T8692] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 311.492477][ T8692] ? __alloc_skb+0x18d/0x7a0 [ 311.492488][ T8692] ? __alloc_skb+0x1db/0x7a0 [ 311.492503][ T8692] __alloc_skb+0x1db/0x7a0 [ 311.492517][ T8692] audit_log_start+0x1b3/0xa10 [ 311.492533][ T8692] ? __pfx_audit_log_start+0x10/0x10 [ 311.492545][ T8692] ? __pfx_vprintk_emit+0x10/0x10 [ 311.492557][ T8692] ? ima_file_free+0x176/0x5d0 [ 311.492576][ T8692] integrity_audit_msg+0x10a/0x4d0 [ 311.492592][ T8692] ? __pfx_integrity_audit_msg+0x10/0x10 [ 311.492610][ T8692] ima_release_policy+0xe3/0x190 [ 311.492622][ T8692] ? __pfx_ima_release_policy+0x10/0x10 [ 311.492634][ T8692] __fput+0x413/0xa50 [ 311.492650][ T8692] fput_close_sync+0x11f/0x240 [ 311.492665][ T8692] ? __pfx_fput_close_sync+0x10/0x10 [ 311.492678][ T8692] ? do_raw_spin_unlock+0xf5/0x200 [ 311.492695][ T8692] __se_sys_close+0xa2/0x160 [ 311.492709][ T8692] do_syscall_64+0x166/0x520 [ 311.492721][ T8692] ? trace_irq_disable+0x3b/0x140 [ 311.492737][ T8692] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.492750][ T8692] ? clear_bhb_loop+0x70/0xc0 [ 311.492763][ T8692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.492775][ T8692] RIP: 0033:0x7fb6bbf9e159 [ 311.492788][ T8692] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 311.492798][ T8692] RSP: 002b:00007fb6ba1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 311.492813][ T8692] RAX: ffffffffffffffda RBX: 00007fb6bc225fa0 RCX: 00007fb6bbf9e159 [ 311.492823][ T8692] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 311.492830][ T8692] RBP: 00007fb6ba1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 311.492844][ T8692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 311.492851][ T8692] R13: 00007fb6bc226038 R14: 00007fb6bc225fa0 R15: 00007ffec09f5cd8 [ 311.492870][ T8692] [ 311.609139][ T5747] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 311.779478][ T5747] usb 4-1: New USB device found: idVendor=056a, idProduct=0117, bcdDevice=0.00 [ 311.808450][ T5747] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 311.808476][ T5747] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 311.808500][ T5747] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.847001][ T5747] usb 4-1: config 0 descriptor?? [ 311.929311][ T8687] syzkaller0: entered promiscuous mode [ 311.929331][ T8687] syzkaller0: entered allmulticast mode [ 312.083157][ T8690] loop3: detected capacity change from 0 to 256 [ 312.083890][ T8690] exfat: Deprecated parameter 'utf8' [ 312.114040][ T5611] hfs: request for non-existent node 131072 in B*Tree [ 312.338998][ T8690] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xd956ea23, utbl_chksum : 0xe619d30d) [ 312.663958][ T5747] wacom 0003:056A:0117.0005: Unknown device_type for 'HID 056a:0117'. Ignoring. [ 312.698481][ T8703] loop1: detected capacity change from 0 to 4096 [ 312.834186][ T8703] NILFS (loop1): The specified checkpoint is not a snapshot (checkpoint number=2) [ 312.882297][ T5747] usb 4-1: USB disconnect, device number 14 [ 313.251856][ T8701] loop0: detected capacity change from 0 to 32768 [ 313.348070][ T8701] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 313.410443][ T8701] XFS (loop0): Ending clean mount [ 313.552176][ T8717] 9pnet_virtio: no channels available for device syz [ 313.725065][ T8720] loop3: detected capacity change from 0 to 128 [ 313.730413][ T8720] EXT4-fs (loop3): Test dummy encryption mode enabled [ 313.763358][ T5611] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 313.794165][ T8720] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 313.807897][ T8720] ext4 filesystem being mounted at /141/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 315.396463][ T5612] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 316.440152][ T8733] loop3: detected capacity change from 0 to 16 [ 316.443285][ T8733] cramfs: Unknown parameter 'Ra)G+6ׂ:fl9ͦ9޶5c!Ux!a/Y)T@8uBh#(|a\7Wt8Vk8>_чfVj4b' [ 316.496882][ T8733] CIFS: bad ip= option (::.) [ 317.382720][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.382766][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.383047][ T1317] aoe: packet could not be sent on lowpan0. consider increasing tx_queue_len [ 318.641101][ T8743] ima: signed policy file (specified as an absolute pathname) required [ 318.641241][ T33] kauditd_printk_skb: 34 callbacks suppressed [ 318.641250][ T33] audit: type=1802 audit(1791174640.830:622): pid=8743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=signed policy required comm="syz.1.678" res=0 errno=-13 [ 318.641369][ T8743] ima: signed policy file (specified as an absolute pathname) required [ 318.641475][ T33] audit: type=1802 audit(1791174640.830:623): pid=8743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=signed policy required comm="syz.1.678" res=0 errno=-13 [ 318.643409][ T8743] ima: signed policy file (specified as an absolute pathname) required [ 318.643521][ T33] audit: type=1802 audit(1791174640.830:624): pid=8743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=signed policy required comm="syz.1.678" res=0 errno=-13 [ 318.738391][ T8743] ima: policy update failed [ 318.738455][ T8743] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 318.738465][ T8743] audit: out of memory in audit_log_start [ 318.777455][ T8748] loop0: detected capacity change from 0 to 128 [ 318.818284][ T8748] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 318.818352][ T8748] System zones: 1-3, 19-19, 35-36 [ 318.823119][ T8748] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 318.857201][ T8748] ext4 filesystem being mounted at /142/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 320.475337][ T5747] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 320.626339][ T5747] usb 1-1: New USB device found: idVendor=0000, idProduct=0000, bcdDevice=7.03 [ 320.628959][ T5747] usb 1-1: Dual-Role OTG device on HNP port [ 320.630383][ T5747] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.689827][ T5747] gspca_main: spca501-2.14.0 probing 0000:0000 [ 320.700970][ T5747] gspca_spca501: reg write: error -32 [ 320.700984][ T5747] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 320.701060][ T5747] spca501 1-1:1.0: probe with driver spca501 failed with error -22 [ 320.872414][ T5611] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 321.099968][ T8769] netlink: 'syz.5.686': attribute type 1 has an invalid length. [ 321.655125][ T8769] 8021q: adding VLAN 0 to HW filter on device bond1 [ 321.819234][ T8776] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 321.845302][ T8776] bond1: (slave batadv1): making interface the new active one [ 321.922371][ T8776] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 322.236612][ T8790] 9pnet_virtio: no channels available for device syz [ 322.404000][ T8792] syzkaller0: entered promiscuous mode [ 322.404021][ T8792] syzkaller0: entered allmulticast mode [ 322.438314][ T8785] libceph: resolve '0' (ret=-3): failed [ 322.497372][ T995] usb 3-1: no suitable firmware found! [ 322.497389][ T995] usb 3-1: ath9k_htc: Failed to get firmware htc_9271.fw [ 322.503185][ T9] usb 3-1: ath9k_htc: USB layer deinitialized [ 322.801667][ T9] usb 1-1: USB disconnect, device number 17 [ 323.366171][ T8812] loop1: detected capacity change from 0 to 512 [ 323.448618][ T8812] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 323.462115][ T8812] ext4 filesystem being mounted at /135/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 323.584666][ T8812] EXT4-fs error (device loop1): ext4_readdir:280: inode #2: block 3: comm syz.1.698: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 323.606423][ T8812] EXT4-fs error (device loop1): ext4_readdir:280: inode #2: block 12: comm syz.1.698: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=5066064, rec_len=65536, size=2048 fake=0 [ 323.656537][ T8812] EXT4-fs error (device loop1): ext4_readdir:280: inode #2: block 13: comm syz.1.698: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=3653246737, rec_len=65536, size=2048 fake=0 [ 323.730530][ T8805] loop3: detected capacity change from 0 to 40427 [ 323.763287][ T8805] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 323.763308][ T8805] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 323.841021][ T8805] F2FS-fs (loop3): invalid crc value [ 324.122356][ T8805] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 324.152350][ T5608] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.267458][ T8805] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 324.267479][ T8805] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 324.296034][ T192] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 324.448598][ T192] usb 1-1: Using ep0 maxpacket: 8 [ 324.452183][ T192] usb 1-1: New USB device found: idVendor=0499, idProduct=5005, bcdDevice=0.40 [ 324.477343][ T192] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.477364][ T192] usb 1-1: Product: ఇ [ 324.477373][ T192] usb 1-1: Manufacturer: 졍ᵟ粅ᒽὡ䁒ﯦ퐁흀蠲Ⰷ褝헁⿰횭聯指艦ナ抬匷㬢鼟殫醺⠶큌뀺滍軕쒍⇬㫮緹쒼회⩧ヴꤿ饴ᵓ⫁ൿ跈ꢲƬ枝鹧詵坵塗駢䱇旿鋿拟쭬跆ဟ兦ڛ㢣韲㥷ࡿ [ 324.477389][ T192] usb 1-1: SerialNumber: ∴ᎌಆ꧴ƅ纞ⱼ [ 324.670817][ T8836] loop2: detected capacity change from 0 to 1764 [ 324.706562][ T192] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 324.713367][ T192] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 324.755590][ T192] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 324.785287][ T192] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 324.806510][ T8836] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 324.811734][ T192] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 324.860488][ T5612] syz-executor: attempt to access beyond end of device [ 324.860488][ T5612] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 324.929956][ T5612] CPU: 0 UID: 0 PID: 5612 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 324.929978][ T5612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 324.929986][ T5612] Call Trace: [ 324.929992][ T5612] [ 324.929998][ T5612] dump_stack_lvl+0xe8/0x150 [ 324.930017][ T5612] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 324.930036][ T5612] f2fs_write_end_bio+0xda7/0x11c0 [ 324.930060][ T5612] __submit_merged_bio+0x258/0x6a0 [ 324.930072][ T5612] ? rcu_is_watching+0x16/0xb0 [ 324.930088][ T5612] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 324.930104][ T5612] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 324.930133][ T5612] f2fs_write_data_pages+0x2a13/0x36e0 [ 324.930145][ T5612] ? is_bpf_text_address+0x26/0x2b0 [ 324.930179][ T5612] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 324.930201][ T5612] ? is_bpf_text_address+0x292/0x2b0 [ 324.930212][ T5612] ? is_bpf_text_address+0x26/0x2b0 [ 324.930241][ T5612] ? stack_trace_save+0xa9/0x100 [ 324.930254][ T5612] ? __pfx_stack_trace_save+0x10/0x10 [ 324.930277][ T5612] ? lockdep_unlock+0x5c/0xd0 [ 324.930288][ T5612] ? __lock_acquire+0x1511/0x2de0 [ 324.930317][ T5612] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 324.930331][ T5612] do_writepages+0x338/0x560 [ 324.930351][ T5612] ? do_raw_spin_unlock+0xf5/0x200 [ 324.930366][ T5612] filemap_fdatawrite+0x1e9/0x2f0 [ 324.930381][ T5612] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 324.930423][ T5612] ? do_raw_spin_unlock+0xf5/0x200 [ 324.930438][ T5612] f2fs_sync_dirty_inodes+0x471/0x970 [ 324.930462][ T5612] f2fs_write_checkpoint+0x860/0x24d0 [ 324.930497][ T5612] kill_f2fs_super+0x2dc/0x700 [ 324.930512][ T5612] ? rcu_do_enqueue+0x616/0x870 [ 324.930525][ T5612] ? lockdep_hardirqs_on+0x7b/0x110 [ 324.930537][ T5612] ? __pfx_kill_f2fs_super+0x10/0x10 [ 324.930560][ T5612] ? __pfx_call_rcu+0x10/0x10 [ 324.930576][ T5612] ? shrinker_free+0x2a7/0x3b0 [ 324.930591][ T5612] deactivate_locked_super+0xbe/0x110 [ 324.930612][ T5612] cleanup_mnt+0x3d3/0x460 [ 324.930628][ T5612] task_work_run+0x1d9/0x260 [ 324.930643][ T5612] ? __pfx_task_work_run+0x10/0x10 [ 324.930661][ T5612] exit_to_user_mode_loop+0x204/0x770 [ 324.930674][ T5612] ? rcu_is_watching+0x16/0xb0 [ 324.930689][ T5612] do_syscall_64+0x328/0x520 [ 324.930700][ T5612] ? trace_irq_disable+0x3b/0x140 [ 324.930711][ T5612] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.930725][ T5612] ? clear_bhb_loop+0x70/0xc0 [ 324.930739][ T5612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.930752][ T5612] RIP: 0033:0x7f797199f397 [ 324.930765][ T5612] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 324.930776][ T5612] RSP: 002b:00007ffe5afd1b78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 324.930792][ T5612] RAX: 0000000000000000 RBX: 00007f7971a344bb RCX: 00007f797199f397 [ 324.930801][ T5612] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe5afd1c30 [ 324.930808][ T5612] RBP: 00007ffe5afd1c30 R08: 00007ffe5afd2c30 R09: 00000000ffffffff [ 324.930817][ T5612] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe5afd2cc0 [ 324.930825][ T5612] R13: 00007f7971a344bb R14: 000000000004f3fe R15: 00007ffe5afd2d00 [ 324.930846][ T5612] [ 324.930851][ T5612] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 324.930929][ T5612] CPU: 0 UID: 0 PID: 5612 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 324.930943][ T5612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 324.930950][ T5612] Call Trace: [ 324.930955][ T5612] [ 324.930959][ T5612] dump_stack_lvl+0xe8/0x150 [ 324.930974][ T5612] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 324.930990][ T5612] f2fs_write_end_bio+0xda7/0x11c0 [ 324.931013][ T5612] __submit_merged_bio+0x258/0x6a0 [ 324.931031][ T5612] ? rcu_is_watching+0x16/0xb0 [ 324.931046][ T5612] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 324.931061][ T5612] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 324.931090][ T5612] f2fs_write_data_pages+0x2a13/0x36e0 [ 324.931102][ T5612] ? is_bpf_text_address+0x26/0x2b0 [ 324.931136][ T5612] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 324.931157][ T5612] ? is_bpf_text_address+0x292/0x2b0 [ 324.931168][ T5612] ? is_bpf_text_address+0x26/0x2b0 [ 324.931197][ T5612] ? stack_trace_save+0xa9/0x100 [ 324.931209][ T5612] ? __pfx_stack_trace_save+0x10/0x10 [ 324.931232][ T5612] ? lockdep_unlock+0x5c/0xd0 [ 324.931243][ T5612] ? __lock_acquire+0x1511/0x2de0 [ 324.931272][ T5612] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 324.931285][ T5612] do_writepages+0x338/0x560 [ 324.931305][ T5612] ? do_raw_spin_unlock+0xf5/0x200 [ 324.931320][ T5612] filemap_fdatawrite+0x1e9/0x2f0 [ 324.931335][ T5612] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 324.931380][ T5612] ? do_raw_spin_unlock+0xf5/0x200 [ 324.931395][ T5612] f2fs_sync_dirty_inodes+0x471/0x970 [ 324.931419][ T5612] f2fs_write_checkpoint+0x860/0x24d0 [ 324.931454][ T5612] kill_f2fs_super+0x2dc/0x700 [ 324.931470][ T5612] ? rcu_do_enqueue+0x616/0x870 [ 324.931482][ T5612] ? lockdep_hardirqs_on+0x7b/0x110 [ 324.931494][ T5612] ? __pfx_kill_f2fs_super+0x10/0x10 [ 324.931517][ T5612] ? __pfx_call_rcu+0x10/0x10 [ 324.931533][ T5612] ? shrinker_free+0x2a7/0x3b0 [ 324.931547][ T5612] deactivate_locked_super+0xbe/0x110 [ 324.931561][ T5612] cleanup_mnt+0x3d3/0x460 [ 324.931576][ T5612] task_work_run+0x1d9/0x260 [ 324.931590][ T5612] ? __pfx_task_work_run+0x10/0x10 [ 324.931615][ T5612] exit_to_user_mode_loop+0x204/0x770 [ 324.931627][ T5612] ? rcu_is_watching+0x16/0xb0 [ 324.931642][ T5612] do_syscall_64+0x328/0x520 [ 324.931653][ T5612] ? trace_irq_disable+0x3b/0x140 [ 324.931663][ T5612] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.931676][ T5612] ? clear_bhb_loop+0x70/0xc0 [ 324.931690][ T5612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.931703][ T5612] RIP: 0033:0x7f797199f397 [ 324.931714][ T5612] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 324.931724][ T5612] RSP: 002b:00007ffe5afd1b78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 324.931737][ T5612] RAX: 0000000000000000 RBX: 00007f7971a344bb RCX: 00007f797199f397 [ 324.931745][ T5612] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe5afd1c30 [ 324.931753][ T5612] RBP: 00007ffe5afd1c30 R08: 00007ffe5afd2c30 R09: 00000000ffffffff [ 324.931761][ T5612] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe5afd2cc0 [ 324.931769][ T5612] R13: 00007f7971a344bb R14: 000000000004f3fe R15: 00007ffe5afd2d00 [ 324.931790][ T5612] [ 325.048363][ T5612] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 325.749136][ T192] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 325.779000][ T192] usb 1-1: USB disconnect, device number 18 [ 325.813430][ T8836] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 325.863660][ T8585] udevd[8585]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 326.245810][ T192] usb 1-1: new low-speed USB device number 19 using dummy_hcd [ 326.401540][ T192] usb 1-1: New USB device found: idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 326.413963][ T192] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 326.413983][ T192] usb 1-1: config 179 has no interface number 0 [ 326.414011][ T192] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 326.414028][ T192] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 326.414042][ T192] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 326.414058][ T192] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 58368, setting to 8 [ 326.414073][ T192] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 326.414100][ T192] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.501835][ T8843] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 326.515124][ T192] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 326.515277][ C0] ================================================================== [ 326.515286][ C0] BUG: KASAN: slab-use-after-free in dummy_timer+0xce5/0x4cc0 [ 326.515304][ C0] Read of size 1 at addr ffff88807a7960e8 by task kworker/0:2/192 [ 326.515314][ C0] [ 326.515322][ C0] CPU: 0 UID: 0 PID: 192 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT(full) [ 326.515336][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 326.515344][ C0] Workqueue: usb_hub_wq hub_event [ 326.515359][ C0] Call Trace: [ 326.515364][ C0] [ 326.515370][ C0] dump_stack_lvl+0xe8/0x150 [ 326.515383][ C0] print_address_description+0x55/0x1e0 [ 326.515395][ C0] ? dummy_timer+0xce5/0x4cc0 [ 326.515405][ C0] print_report+0x58/0x70 [ 326.515416][ C0] kasan_report+0x117/0x150 [ 326.515429][ C0] ? dummy_timer+0xce5/0x4cc0 [ 326.515441][ C0] dummy_timer+0xce5/0x4cc0 [ 326.515455][ C0] ? __lock_acquire+0x747/0x2de0 [ 326.515470][ C0] ? __lock_acquire+0x747/0x2de0 [ 326.515483][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 326.515497][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 326.515509][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 326.515521][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 326.515531][ C0] __hrtimer_run_queues+0x3bc/0xa10 [ 326.515547][ C0] hrtimer_run_softirq+0x1e3/0x2e0 [ 326.515559][ C0] handle_softirqs+0x223/0x840 [ 326.515571][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 326.515584][ C0] __irq_exit_rcu+0xcb/0x220 [ 326.515595][ C0] irq_exit_rcu+0x9/0x30 [ 326.515604][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 326.515617][ C0] [ 326.515621][ C0] [ 326.515626][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 326.515638][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 326.515650][ C0] Code: f7 e8 6d ed b5 f5 f7 c3 00 02 00 00 74 05 e8 f0 83 e2 f5 9c 58 a9 00 02 00 00 75 29 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 74 e6 a6 f5 65 48 8b 05 ac e0 a7 07 48 85 c0 74 18 5b 41 5e c3 [ 326.515660][ C0] RSP: 0018:ffffc90002f7ec88 EFLAGS: 00000206 [ 326.515671][ C0] RAX: 0000000000000006 RBX: 0000000000000246 RCX: 8000000000000001 [ 326.515695][ C0] RDX: 0000000000000006 RSI: ffffffff8e43d4e5 RDI: 0000000000000001 [ 326.515703][ C0] RBP: 00000000ffffffa6 R08: ffffffff9079b1bf R09: 1ffffffff20f3637 [ 326.515712][ C0] R10: dffffc0000000000 R11: fffffbfff20f3638 R12: ffff888034fa8028 [ 326.515720][ C0] R13: ffff888034fa814c R14: ffff888034fa8108 R15: dffffc0000000000 [ 326.515734][ C0] xpad360w_start_input+0x1c9/0x300 [ 326.515748][ C0] xpad_probe+0x17ce/0x2020 [ 326.515764][ C0] usb_probe_interface+0x788/0xe50 [ 326.515779][ C0] ? __pfx_usb_probe_interface+0x10/0x10 [ 326.515789][ C0] ? kernfs_create_link+0x1cd/0x240 [ 326.515802][ C0] ? sysfs_do_create_link_sd+0xe0/0x110 [ 326.515814][ C0] ? driver_sysfs_add+0x1fe/0x210 [ 326.515826][ C0] ? __pfx_usb_probe_interface+0x10/0x10 [ 326.515836][ C0] really_probe+0x254/0xae0 [ 326.515848][ C0] __driver_probe_device+0x1e8/0x360 [ 326.515860][ C0] driver_probe_device+0x4f/0x240 [ 326.515872][ C0] __device_attach_driver+0x270/0x410 [ 326.515883][ C0] bus_for_each_drv+0x258/0x2f0 [ 326.515894][ C0] ? __pfx___device_attach_driver+0x10/0x10 [ 326.515905][ C0] ? __pfx_bus_for_each_drv+0x10/0x10 [ 326.515917][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 326.515929][ C0] __device_attach+0x2c4/0x450 [ 326.515941][ C0] ? __pfx___device_attach+0x10/0x10 [ 326.515951][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 326.515962][ C0] ? _raw_spin_unlock+0x28/0x50 [ 326.515974][ C0] device_initial_probe+0xa1/0xd0 [ 326.515985][ C0] bus_probe_device+0x12a/0x220 [ 326.515997][ C0] device_add+0x7d7/0xb80 [ 326.516009][ C0] usb_set_configuration+0x1bb5/0x2260 [ 326.516027][ C0] usb_generic_driver_probe+0x8d/0x150 [ 326.516039][ C0] usb_probe_device+0x1c3/0x3b0 [ 326.516050][ C0] ? __pfx_usb_probe_device+0x10/0x10 [ 326.516060][ C0] really_probe+0x254/0xae0 [ 326.516072][ C0] __driver_probe_device+0x1e8/0x360 [ 326.516083][ C0] driver_probe_device+0x4f/0x240 [ 326.516095][ C0] __device_attach_driver+0x270/0x410 [ 326.516106][ C0] bus_for_each_drv+0x258/0x2f0 [ 326.516117][ C0] ? __pfx___device_attach_driver+0x10/0x10 [ 326.516128][ C0] ? __pfx_bus_for_each_drv+0x10/0x10 [ 326.516140][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 326.516152][ C0] __device_attach+0x2c4/0x450 [ 326.516163][ C0] ? __pfx___device_attach+0x10/0x10 [ 326.516174][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 326.516185][ C0] ? _raw_spin_unlock+0x28/0x50 [ 326.516197][ C0] device_initial_probe+0xa1/0xd0 [ 326.516208][ C0] bus_probe_device+0x12a/0x220 [ 326.516220][ C0] device_add+0x7d7/0xb80 [ 326.516231][ C0] usb_new_device+0x9aa/0x1690 [ 326.516245][ C0] ? __pfx_usb_new_device+0x10/0x10 [ 326.516257][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 326.516269][ C0] hub_event+0x28e8/0x4d30 [ 326.516279][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 326.516301][ C0] ? __pfx_hub_event+0x10/0x10 [ 326.516314][ C0] ? rcu_is_watching+0x16/0xb0 [ 326.516325][ C0] ? process_scheduled_works+0x97a/0x1630 [ 326.516337][ C0] process_scheduled_works+0xc3d/0x1630 [ 326.516356][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 326.516369][ C0] ? assign_work+0x3cf/0x5d0 [ 326.516381][ C0] worker_thread+0xa47/0xfb0 [ 326.516399][ C0] kthread+0x38b/0x480 [ 326.516409][ C0] ? __pfx_worker_thread+0x10/0x10 [ 326.516419][ C0] ? __pfx_kthread+0x10/0x10 [ 326.516431][ C0] ret_from_fork+0x514/0xb70 [ 326.516443][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 326.516453][ C0] ? __switch_to+0xc78/0x1410 [ 326.516465][ C0] ? __pfx_kthread+0x10/0x10 [ 326.516476][ C0] ret_from_fork_asm+0x1a/0x30 [ 326.516491][ C0] [ 326.516495][ C0] [ 326.516498][ C0] Allocated by task 8755: [ 326.516504][ C0] kasan_save_track+0x3e/0x80 [ 326.516515][ C0] __kasan_kmalloc+0x93/0xb0 [ 326.516524][ C0] __kmalloc_noprof+0x366/0x710 [ 326.516533][ C0] usb_copy_descriptors+0xf7/0x320 [ 326.516543][ C0] f_midi2_bind+0x276e/0x2c90 [ 326.516553][ C0] usb_add_function+0x2e1/0x9f0 [ 326.516563][ C0] configfs_composite_bind+0xde0/0x1410 [ 326.516574][ C0] gadget_bind_driver+0x2ca/0x9e0 [ 326.516583][ C0] really_probe+0x254/0xae0 [ 326.516592][ C0] __driver_probe_device+0x1e8/0x360 [ 326.516602][ C0] driver_probe_device+0x4f/0x240 [ 326.516611][ C0] __driver_attach+0x339/0x600 [ 326.516620][ C0] bus_for_each_dev+0x23b/0x2c0 [ 326.516630][ C0] bus_add_driver+0x38f/0x6e0 [ 326.516639][ C0] driver_register+0x23a/0x320 [ 326.516648][ C0] usb_gadget_register_driver_owner+0xf9/0x270 [ 326.516659][ C0] gadget_dev_desc_UDC_store+0x1c9/0x2f0 [ 326.516669][ C0] configfs_write_iter+0x337/0x430 [ 326.516684][ C0] vfs_write+0x612/0xba0 [ 326.516694][ C0] ksys_write+0x150/0x270 [ 326.516703][ C0] do_syscall_64+0x166/0x520 [ 326.516712][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.516723][ C0] [ 326.516726][ C0] Freed by task 8808: [ 326.516731][ C0] kasan_save_track+0x3e/0x80 [ 326.516740][ C0] kasan_save_free_info+0x40/0x50 [ 326.516750][ C0] __kasan_slab_free+0x5c/0x80 [ 326.516759][ C0] kfree+0x1c5/0x650 [ 326.516768][ C0] usb_free_all_descriptors+0x78/0x110 [ 326.516778][ C0] purge_configs_funcs+0x248/0x3d0 [ 326.516788][ C0] configfs_composite_unbind+0xa4/0x1c0 [ 326.516798][ C0] gadget_unbind_driver+0x1cb/0x410 [ 326.516808][ C0] device_release_driver_internal+0x48b/0x880 [ 326.516819][ C0] driver_detach+0x1f3/0x2d0 [ 326.516828][ C0] bus_remove_driver+0x226/0x320 [ 326.516837][ C0] usb_gadget_unregister_driver+0x4e/0x70 [ 326.516847][ C0] gadget_dev_desc_UDC_store+0x17a/0x2f0 [ 326.516857][ C0] configfs_write_iter+0x337/0x430 [ 326.516866][ C0] vfs_write+0x612/0xba0 [ 326.516875][ C0] ksys_write+0x150/0x270 [ 326.516884][ C0] do_syscall_64+0x166/0x520 [ 326.516893][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.516903][ C0] [ 326.516906][ C0] The buggy address belongs to the object at ffff88807a796000 [ 326.516906][ C0] which belongs to the cache kmalloc-512 of size 512 [ 326.516916][ C0] The buggy address is located 232 bytes inside of [ 326.516916][ C0] freed 512-byte region [ffff88807a796000, ffff88807a796200) [ 326.516928][ C0] [ 326.516932][ C0] The buggy address belongs to the physical page: [ 326.516939][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7a794 [ 326.516950][ C0] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 326.516959][ C0] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 326.516971][ C0] page_type: f5(slab) [ 326.516982][ C0] raw: 00fff00000000040 ffff88801b041c80 dead000000000100 dead000000000122 [ 326.516993][ C0] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 326.517003][ C0] head: 00fff00000000040 ffff88801b041c80 dead000000000100 dead000000000122 [ 326.517012][ C0] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 326.517022][ C0] head: 00fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 326.517032][ C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 326.517037][ C0] page dumped because: kasan: bad access detected [ 326.517043][ C0] page_owner tracks the page as allocated [ 326.517047][ C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4978, tgid 4978 (udevadm), ts 28299622937 [ 326.517067][ C0] post_alloc_hook+0x1f9/0x250 [ 326.517078][ C0] get_page_from_freelist+0x220f/0x2280 [ 326.517089][ C0] __alloc_frozen_pages_noprof+0x1fc/0x400 [ 326.517099][ C0] allocate_slab+0x7d/0x5e0 [ 326.517108][ C0] refill_objects+0x2d5/0x350 [ 326.517118][ C0] __pcs_replace_empty_main+0x2c8/0x6c0 [ 326.517128][ C0] __kmalloc_cache_noprof+0x396/0x600 [ 326.517138][ C0] kernfs_fop_open+0x38c/0xd20 [ 326.517147][ C0] do_dentry_open+0x80e/0x1360 [ 326.517156][ C0] vfs_open_consume+0x4a/0x350 [ 326.517166][ C0] path_openat+0x14a6/0x1da0 [ 326.517175][ C0] do_file_open+0x23e/0x4a0 [ 326.517184][ C0] do_sys_openat2+0x115/0x200 [ 326.517194][ C0] __x64_sys_openat+0x138/0x170 [ 326.517203][ C0] do_syscall_64+0x166/0x520 [ 326.517212][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.517222][ C0] page last free pid 1 tgid 1 ts 23356037077 stack trace: [ 326.517230][ C0] free_pages_prepare+0x9eb/0xaf0 [ 326.517240][ C0] __free_contig_range_common+0x174/0x340 [ 326.517250][ C0] destroy_args+0x4e5/0x570 [ 326.517261][ C0] debug_vm_pgtable+0x3f8/0x410 [ 326.517271][ C0] do_one_initcall+0x250/0x870 [ 326.517280][ C0] do_initcall_level+0x10a/0x1a0 [ 326.517290][ C0] do_initcalls+0x59/0xa0 [ 326.517298][ C0] kernel_init_freeable+0x29d/0x3e0 [ 326.517309][ C0] kernel_init+0x22/0x1d0 [ 326.517318][ C0] ret_from_fork+0x514/0xb70 [ 326.517327][ C0] ret_from_fork_asm+0x1a/0x30 [ 326.517336][ C0] [ 326.517339][ C0] Memory state around the buggy address: [ 326.517346][ C0] ffff88807a795f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 326.517353][ C0] ffff88807a796000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 326.517361][ C0] >ffff88807a796080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 326.517367][ C0] ^ [ 326.517374][ C0] ffff88807a796100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 326.517381][ C0] ffff88807a796180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 326.517387][ C0] ================================================================== [ 326.517394][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 327.656627][ C0] CPU: 0 UID: 0 PID: 192 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT(full) [ 327.665918][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 327.675966][ C0] Workqueue: usb_hub_wq hub_event [ 327.681007][ C0] Call Trace: [ 327.684296][ C0] [ 327.687135][ C0] vpanic+0x26f/0x710 [ 327.691124][ C0] panic+0xc5/0xd0 [ 327.694849][ C0] ? __pfx_panic+0x10/0x10 [ 327.699264][ C0] ? dummy_timer+0xce5/0x4cc0 [ 327.703971][ C0] ? dummy_timer+0xce5/0x4cc0 [ 327.708653][ C0] ? dummy_timer+0xce5/0x4cc0 [ 327.713330][ C0] check_panic_on_warn+0x89/0xb0 [ 327.718264][ C0] ? dummy_timer+0xce5/0x4cc0 [ 327.722931][ C0] end_report+0x73/0x170 [ 327.727184][ C0] ? dummy_timer+0xce5/0x4cc0 [ 327.731863][ C0] kasan_report+0x128/0x150 [ 327.736375][ C0] ? dummy_timer+0xce5/0x4cc0 [ 327.741042][ C0] dummy_timer+0xce5/0x4cc0 [ 327.745548][ C0] ? __lock_acquire+0x747/0x2de0 [ 327.750494][ C0] ? __lock_acquire+0x747/0x2de0 [ 327.755423][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 327.760802][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 327.765733][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 327.771553][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 327.776493][ C0] __hrtimer_run_queues+0x3bc/0xa10 [ 327.781689][ C0] hrtimer_run_softirq+0x1e3/0x2e0 [ 327.786806][ C0] handle_softirqs+0x223/0x840 [ 327.791574][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 327.796352][ C0] __irq_exit_rcu+0xcb/0x220 [ 327.800956][ C0] irq_exit_rcu+0x9/0x30 [ 327.805227][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 327.810881][ C0] [ 327.813839][ C0] [ 327.816772][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 327.822752][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 327.829176][ C0] Code: f7 e8 6d ed b5 f5 f7 c3 00 02 00 00 74 05 e8 f0 83 e2 f5 9c 58 a9 00 02 00 00 75 29 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 74 e6 a6 f5 65 48 8b 05 ac e0 a7 07 48 85 c0 74 18 5b 41 5e c3 [ 327.848815][ C0] RSP: 0018:ffffc90002f7ec88 EFLAGS: 00000206 [ 327.854891][ C0] RAX: 0000000000000006 RBX: 0000000000000246 RCX: 8000000000000001 [ 327.862909][ C0] RDX: 0000000000000006 RSI: ffffffff8e43d4e5 RDI: 0000000000000001 [ 327.870903][ C0] RBP: 00000000ffffffa6 R08: ffffffff9079b1bf R09: 1ffffffff20f3637 [ 327.878962][ C0] R10: dffffc0000000000 R11: fffffbfff20f3638 R12: ffff888034fa8028 [ 327.886958][ C0] R13: ffff888034fa814c R14: ffff888034fa8108 R15: dffffc0000000000 [ 327.894948][ C0] xpad360w_start_input+0x1c9/0x300 [ 327.900230][ C0] xpad_probe+0x17ce/0x2020 [ 327.904749][ C0] usb_probe_interface+0x788/0xe50 [ 327.909879][ C0] ? __pfx_usb_probe_interface+0x10/0x10 [ 327.915548][ C0] ? kernfs_create_link+0x1cd/0x240 [ 327.920742][ C0] ? sysfs_do_create_link_sd+0xe0/0x110 [ 327.926281][ C0] ? driver_sysfs_add+0x1fe/0x210 [ 327.931483][ C0] ? __pfx_usb_probe_interface+0x10/0x10 [ 327.937115][ C0] really_probe+0x254/0xae0 [ 327.941705][ C0] __driver_probe_device+0x1e8/0x360 [ 327.947003][ C0] driver_probe_device+0x4f/0x240 [ 327.952027][ C0] __device_attach_driver+0x270/0x410 [ 327.957500][ C0] bus_for_each_drv+0x258/0x2f0 [ 327.962377][ C0] ? __pfx___device_attach_driver+0x10/0x10 [ 327.968267][ C0] ? __pfx_bus_for_each_drv+0x10/0x10 [ 327.973640][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 327.979444][ C0] __device_attach+0x2c4/0x450 [ 327.984212][ C0] ? __pfx___device_attach+0x10/0x10 [ 327.989486][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 327.994599][ C0] ? _raw_spin_unlock+0x28/0x50 [ 327.999575][ C0] device_initial_probe+0xa1/0xd0 [ 328.004591][ C0] bus_probe_device+0x12a/0x220 [ 328.009432][ C0] device_add+0x7d7/0xb80 [ 328.013752][ C0] usb_set_configuration+0x1bb5/0x2260 [ 328.019210][ C0] usb_generic_driver_probe+0x8d/0x150 [ 328.024658][ C0] usb_probe_device+0x1c3/0x3b0 [ 328.029505][ C0] ? __pfx_usb_probe_device+0x10/0x10 [ 328.034868][ C0] really_probe+0x254/0xae0 [ 328.039359][ C0] __driver_probe_device+0x1e8/0x360 [ 328.044631][ C0] driver_probe_device+0x4f/0x240 [ 328.049648][ C0] __device_attach_driver+0x270/0x410 [ 328.055008][ C0] bus_for_each_drv+0x258/0x2f0 [ 328.059847][ C0] ? __pfx___device_attach_driver+0x10/0x10 [ 328.065733][ C0] ? __pfx_bus_for_each_drv+0x10/0x10 [ 328.071092][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 328.076884][ C0] __device_attach+0x2c4/0x450 [ 328.081635][ C0] ? __pfx___device_attach+0x10/0x10 [ 328.086907][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 328.092007][ C0] ? _raw_spin_unlock+0x28/0x50 [ 328.096843][ C0] device_initial_probe+0xa1/0xd0 [ 328.101868][ C0] bus_probe_device+0x12a/0x220 [ 328.106706][ C0] device_add+0x7d7/0xb80 [ 328.111025][ C0] usb_new_device+0x9aa/0x1690 [ 328.115786][ C0] ? __pfx_usb_new_device+0x10/0x10 [ 328.120987][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 328.126192][ C0] hub_event+0x28e8/0x4d30 [ 328.130618][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 328.135744][ C0] ? __pfx_hub_event+0x10/0x10 [ 328.140508][ C0] ? rcu_is_watching+0x16/0xb0 [ 328.145278][ C0] ? process_scheduled_works+0x97a/0x1630 [ 328.151004][ C0] process_scheduled_works+0xc3d/0x1630 [ 328.156550][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 328.162522][ C0] ? assign_work+0x3cf/0x5d0 [ 328.167102][ C0] worker_thread+0xa47/0xfb0 [ 328.171737][ C0] kthread+0x38b/0x480 [ 328.175795][ C0] ? __pfx_worker_thread+0x10/0x10 [ 328.180903][ C0] ? __pfx_kthread+0x10/0x10 [ 328.185482][ C0] ret_from_fork+0x514/0xb70 [ 328.190063][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 328.195163][ C0] ? __switch_to+0xc78/0x1410 [ 328.199827][ C0] ? __pfx_kthread+0x10/0x10 [ 328.204411][ C0] ret_from_fork_asm+0x1a/0x30 [ 328.209198][ C0] [ 328.212487][ C0] Kernel Offset: disabled [ 328.216897][ C0] Rebooting in 86400 seconds..