last executing test programs: 32m16.302584853s ago: executing program 32 (id=89): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b40)=@newtfilter={0x58, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xffff, 0x7}, {0xfff3, 0xffff}, {0x300}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x28, 0x2, [@TCA_CGROUP_EMATCHES={0x24, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x200}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0xaaf, 0x7, 0x1}, {{0x3}, {0x2, 0x0, 0x1, 0x1}}}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x404c800}, 0x0) 31m50.202152436s ago: executing program 33 (id=218): prlimit64(0x0, 0xe, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000040)={[{@discard}, {@max_batch_time}, {@bh}, {@grpquota}]}, 0x2, 0x259, &(0x7f0000000200)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x101e42, 0x1) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000004c0)=0x400) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000540)='\f', 0x1, 0x8000c61) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) read$FUSE(r2, &(0x7f000001bfc0)={0x2020}, 0xfffffeb1) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) 30m32.170947749s ago: executing program 34 (id=354): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xfe, 0xf0, &(0x7f0000000100)="b9ff03316844268cb89e14f088a847e0ffff00124000632f77fbac14fe1688a8030a07080403fe80000020006558845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0x8024, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)}, 0x2a) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000480)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000540)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r1, 0x0, 0x66) socketpair(0x11, 0x3, 0x300, &(0x7f0000000000)) socketpair(0x11, 0x2, 0x300, &(0x7f0000000b00)) 29m14.811532631s ago: executing program 35 (id=640): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000001540)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) recvmmsg(r0, &(0x7f0000001580)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x20, &(0x7f0000001680)=[{&(0x7f0000001700)=""/183, 0xb7}, {&(0x7f00000017c0)=""/83, 0x53}, {&(0x7f0000001840)=""/4091, 0xffb}, {&(0x7f0000002840)=""/175, 0xaf}, {&(0x7f0000002900)=""/256, 0x100}, {&(0x7f0000002a00)=""/191, 0xbf}], 0x6}, 0x1ff}], 0x4, 0x0, 0x0) 27m7.207966325s ago: executing program 2 (id=1046): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0103000000000000d500030000000900010073797a300000000028000000000a01040000000000000000030000000900010073797a3000000000080002400000000130000000030a03000000000000000000030000000900030073797a30000000000900010073797a30000000000400048014"], 0xa0}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000380)={&(0x7f0000004000)=""/8153, 0x2000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000006000)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000006040)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000006080)=0x10, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000006100)={'ipvtap0\x00', 0x0}) bind$xdp(0xffffffffffffffff, &(0x7f0000006140)={0x2c, 0x2, r2, 0x0, 0x0}, 0x10) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, 0xffffffffffffffff, 0x80000000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1}, 0xfffffffffffffefd) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @private2}]}, 0x0) pselect6(0x40, &(0x7f0000006180)={0x8, 0x8001, 0x3, 0x300, 0x0, 0x0, 0x9c28}, 0x0, &(0x7f00000061c0)={0x3ff, 0x4000000000002, 0x8000000000000, 0x9, 0x0, 0xfffffffffffffffe, 0x7, 0x9}, 0x0, 0x0) 27m1.307310068s ago: executing program 2 (id=1061): prlimit64(0x0, 0xe, &(0x7f0000000700)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000780)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000007c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000900), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000940), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000980)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000a00), 0x42202) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) pselect6(0x40, &(0x7f0000000a80)={0x0, 0xfffffffffffffffc, 0x5, 0x0, 0xffffffc, 0x1, 0x0, 0xfffffffffffffffa}, &(0x7f0000000ac0)={0x18, 0x8, 0x1ff, 0x0, 0x7ff, 0x400000, 0x0, 0x2}, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x3a) r3 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') gettid() r4 = openat(r3, &(0x7f0000000b40)='auth.unix.ip/channel\x00', 0x2, 0x0) read$FUSE(r4, &(0x7f0000000c40)={0x2020}, 0x2020) 27m1.251598124s ago: executing program 0 (id=1063): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r1, &(0x7f0000000880)=""/102392, 0x18ff8) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000180)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000340)="1300000010000000000800c83e090000000000ab0000", 0x16) syz_mount_image$hfsplus(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="6e6c733d64656661756c742c6465636f6d706f73652c706172743d3078303030303030303030303030303030392c706172743d3078303030303030303030303030303030392c006009785eda8b7d61e025ecbde093924e76933b3a39ae5392c9347cd15ff5913db02bfa9d2b522770566b0bc301e6385d7e3a4dc76bfe187361dfd218ca7dfa8a6440fb5b33ac0a14fa09e7749b848c65db2fdefd28f9017f1c427b3b93cc682e82b107c47e1995b464c3067a722b84f8b512b24ee9cf39c96acf157e7b15f4a534feb85bce7dce195b0f50711830a1f42d3d3abbe154bd6707bd286e5decea1d0ee56db2c0516dd06ded5e524d5bfced14e4b61d3611b475c9ed41e43a72dab99647adca9d6911"], 0x5, 0x5ea, &(0x7f00000198c0)="$eJzs3U1vG8cdB+Df0pJsuqjDJHaSFi0q2IcWMWqLYuLoUKBuURQ6BEWAXnLJQbBpWzCtBBJTKEFR2H299hskRSGfe+qh6MFAe+5HqIAecijQu24udrmUGEuRpVg2qfh5gOHMcHZnZ/7eHXGXMBjgubX4bqYfpMjixbfXy/rmRqe3udG5MywnOZmkkUwNshQrSTGdXM0g5Rvlm3V3xRcd571P3lr4rH3/3qA2Vadq+8Z++x3M3TplNsmJOj+q/q49cX/F9gzLgF0YBg7G7eEudw+z+xNet8AkKAZ/N3dpJaeTnKo/B6ReHRrPdnRH71CrHAAAABxTL2xlK+s5M+5xAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwHFS//5/UafGsDybYvj7/zP1e6nLx9qDcQ8AAAAAAAAAAI7Ad7aylfWcGdYfFtV3/uerytnq9Wv5MGvpZjWXsp6l9NPPatpJWiMdzawv9fur7QPsOb/nnvPPZr4AAAAAAAAA8BX16yzufP8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACToEhODLIqnR2WW2lMJTmVZKbc7m7y92H5OHsw7gEAAADAM/DCVraynjPD+sOiuud/pbrvP5UPs5J+ltNPL91cr54FDO76G5sbnd7mRudOmXb3+6P/HWoYVY8ZPHvY+8hz1RbnqvY/zySL+Wl+nouZzTtZzXJ+kaX0081sflKVllKkVT+9aA3Hufd4r36u9s7jxvpaNZJmbmS5GtulXMv76eV6GtUcqm32P+K9MjrFD2sHjNH1Oi9n9Mc6nwytKiLT2xGZq2NfRuPF/SNxyPPk0SO109h+BnX2KcT8dJ2Xsf79RMd8fuTse2X/SCTn//Ptv97qrdy+dWPt4uRM6Ut6NBKdkUi8+lxFYqaOxmAVHa6Wpcevluerfc9kOT/L+7mebt7MQt7MfN7IG5nLQq6MxPXc46+1m0kOc61d+F5daCb5Q51PhjKuL47EdXSla1Vto+/sROmlo1+Rpr5ZF8pj/KbOJ8OjkWiPROLl/SPxp4fl61pv5fbqraUPDni879Z5edn+bqLW5vJ8ean8x6pqnz87yraX92xrV21nt9sau9rO/fvrddvjrtSZ+jPc7p7mq7ZX92zrVG2vjbTt9SkHgIl3+vXTM83/Nv/V/LT52+at5tunfnxy4eS3ZjL9z6m/nfhL437jB8Xr+TS/2rn/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvry1jz6+vdTrdVcVFI5tYao+mydlPF+FwpgXJuCpu9y/88HltY8+/v7ynaWb3ZvdlU6nfWV+4crC/JXLN5Z73bnB67iHCTwFO3/0xz0SAAAAAAAAAAAA4KCexX8nGPccAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgONt8d1MP0iR9tylubK+udHplWlY3tlyKkkjSfHLpPhHcjWDlNZId8UXHee9T95a+Kx9/95OX1PD7Rv77Xcwd+uU2SQn6vyo+rv2xP0V2zMsA3ZhGDgYt/8HAAD//6ulC6Y=") 26m58.587572933s ago: executing program 2 (id=1065): socket$tipc(0x1e, 0x5, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141102) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000180)="94", 0xf000}, {0x0}], 0x2) openat$vimc1(0xffffff9c, &(0x7f00000001c0), 0x2, 0x0) pselect6(0x40, &(0x7f0000000200)={0x4, 0x2, 0x8000, 0x7, 0x8000000000000000, 0xfffffbfffffffffd, 0x1}, 0x0, &(0x7f0000000380)={0x1fe, 0x9, 0x0, 0x3, 0x0, 0x2c2c, 0x0, 0xffffffffffffffff}, 0x0, 0x0) close(0x4) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x9, 0x0, 0x0) syz_open_dev$MSR(&(0x7f0000000500), 0x0, 0x0) 26m58.365406124s ago: executing program 2 (id=1067): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r2, &(0x7f0000000fc0)=""/102368, 0x18fe0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing\x00', 0x1ff) 26m56.584975203s ago: executing program 2 (id=1069): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000001c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4fb49000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000000280)=""/102392, 0x18ff8) shmget(0x2, 0x2000, 0x8, &(0x7f000040f000/0x2000)=nil) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f000001a6c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f000001a700)={0x0, 0x0, &(0x7f000001a740)={&(0x7f000001a780)={0x2c, r5, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0xaf}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_SECRETLEN={0x5}]}, 0x2c}}, 0x24000806) 26m51.328837588s ago: executing program 0 (id=1075): socket$nl_generic(0x10, 0x3, 0x10) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) pipe2(0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x403, 0x0, 0x3, 0x37e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3ac}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x10, 0x0, 0x299}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626b, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 26m47.898272949s ago: executing program 0 (id=1079): socket$tipc(0x1e, 0x5, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000180)="94", 0xf000}, {0x0}], 0x2) openat$vimc1(0xffffff9c, &(0x7f00000001c0), 0x2, 0x0) pselect6(0x40, &(0x7f0000000200)={0x4, 0x2, 0x8000, 0x7, 0x8000000000000000, 0xfffffbfffffffffd, 0x1}, 0x0, &(0x7f0000000380)={0x1fe, 0x9, 0x0, 0x3, 0x0, 0x2c2c, 0x0, 0xffffffffffffffff}, 0x0, 0x0) close(0x4) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x9, 0x0, 0x0) syz_open_dev$MSR(&(0x7f0000000500), 0x0, 0x0) 26m47.688428037s ago: executing program 0 (id=1081): mount(0x0, &(0x7f0000000680)='./dev\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./mnt\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80020100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) pipe2(0x0, 0x800) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r3, &(0x7f0000000880)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000019880)=0x7) mkdir(&(0x7f00000001c0)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240)='tmpfs\x00', 0x8, &(0x7f0000000280)='usrquota') 26m45.875411996s ago: executing program 0 (id=1082): r0 = socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000002380)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000023c0)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000002400)=0x802) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000002440)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1b000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000002480), 0x0, 0x0) read$msr(r3, &(0x7f0000003300)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$vsock_stream(r0, 0x0, 0x0) modify_ldt$write(0x1, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000002540)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, 0x0}, 0x58) 26m43.493813684s ago: executing program 2 (id=1085): socket$netlink(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000200), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000240), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x6) socket$inet6(0xa, 0x2, 0x3a) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) 26m33.401581344s ago: executing program 0 (id=1097): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000180), 0x651, 0x0) recvmmsg(r0, &(0x7f00000001c0), 0x10106, 0x2, 0x0) symlinkat(&(0x7f0000000380)='.\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000480)='./bus\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000500)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000540)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file7/file0\x00', 0x0) mkdir(&(0x7f0000000680)='./file0\x00', 0x2) 26m27.671395866s ago: executing program 36 (id=1085): socket$netlink(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000200), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000240), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x6) socket$inet6(0xa, 0x2, 0x3a) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) 26m17.759838472s ago: executing program 37 (id=1097): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000180), 0x651, 0x0) recvmmsg(r0, &(0x7f00000001c0), 0x10106, 0x2, 0x0) symlinkat(&(0x7f0000000380)='.\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000480)='./bus\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000500)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000540)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file7/file0\x00', 0x0) mkdir(&(0x7f0000000680)='./file0\x00', 0x2) 24m49.227983352s ago: executing program 8 (id=1219): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/mptcp/pm_type\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f00000000c0)='1', 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) fcntl$setstatus(r1, 0x4, 0x800) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e21, @remote}, 0x10) syz_extract_tcp_res$synack(&(0x7f0000000200)={0x0, 0x0}, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r2) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r2, &(0x7f0000000400)={&(0x7f0000000440), 0xc, &(0x7f0000000480)={&(0x7f00000004c0)={0x40, r3, 0x5, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x40}}, 0x0) 24m45.826862106s ago: executing program 8 (id=1223): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000180), 0x651, 0x0) recvmmsg(r1, &(0x7f00000001c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./trace\x00', 0x1ff) read$FUSE(0xffffffffffffffff, 0x0, 0x0) symlinkat(&(0x7f0000000380)='.\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000480)='./bus\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000500)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000540)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./file7\x00', 0x1ac) renameat2(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file7/file0\x00', 0x0) mkdir(&(0x7f0000000680)='./file0\x00', 0x2) 24m43.744706531s ago: executing program 8 (id=1224): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000019740), 0x2982, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000019780)='/proc/timer_list\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) read$msr(r1, &(0x7f0000000140)=""/102400, 0x19000) timer_create(0x0, &(0x7f0000019140)={0x0, 0x21, 0x800000000004}, &(0x7f0000019180)) timer_settime(0x0, 0x1, 0x0, 0x0) pipe(&(0x7f00000191c0)) socket$netlink(0x10, 0x3, 0x6) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000019200)={0x2, 0x0, @local}, 0x16) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000019280)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x2, 0xfffffffffffffffc, 0x0, 0x0, 0x2, 0x401, 0xffeffffffffffffe}, {0x0, 0x2000000000000}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x0, 0x32}, 0x0, @in6=@mcast2, 0x10001, 0x0, 0x2, 0xb7, 0xc4, 0xfffffffe}}, 0xe8) 24m41.279328549s ago: executing program 8 (id=1228): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r2, &(0x7f0000000180)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000019300)) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000019480)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000019500)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000019540)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, 0x0, &(0x7f0000019580)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ddc, 0x80, 0x2, 0x33d, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7396, 0x20, 0x0, 0x142}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x727b, 0x80, 0x9, 0x135}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x800, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0) 24m38.243062011s ago: executing program 8 (id=1231): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r2, &(0x7f0000000fc0)=""/102368, 0x18fe0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000500)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./tracing/dynamic_events\x00', 0x1, 0x0) write(r3, &(0x7f0000000580)="65486d795fe26defdeed7dda726561645f74b9ff9be37786fe66e431205f2e760c696621b3880f26", 0x28) 24m34.783411077s ago: executing program 8 (id=1234): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000180), 0x651, 0x0) recvmmsg(r1, &(0x7f00000001c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) read$FUSE(0xffffffffffffffff, 0x0, 0x0) symlinkat(&(0x7f0000000380)='.\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000480)='./bus\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000500)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000540)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./file7\x00', 0x1ac) renameat2(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file7/file0\x00', 0x0) mkdir(&(0x7f0000000680)='./file0\x00', 0x2) 24m17.413729736s ago: executing program 38 (id=1234): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000180), 0x651, 0x0) recvmmsg(r1, &(0x7f00000001c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) read$FUSE(0xffffffffffffffff, 0x0, 0x0) symlinkat(&(0x7f0000000380)='.\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000480)='./bus\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000500)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000540)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./file7\x00', 0x1ac) renameat2(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file7/file0\x00', 0x0) mkdir(&(0x7f0000000680)='./file0\x00', 0x2) 16m40.655889299s ago: executing program 5 (id=1701): r0 = syz_open_procfs(0x0, &(0x7f00000015c0)='pagemap\x00') pread64(r0, &(0x7f0000001600)=""/102400, 0x19000, 0x1000000000) 16m38.958698758s ago: executing program 5 (id=1705): syz_open_dev$video4linux(&(0x7f0000001380), 0x5, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x0) r1 = landlock_create_ruleset(0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000) landlock_restrict_self(r1, 0xe) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) socket$kcm(0x10, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000140), 0xa00, 0x801) ioctl$DRM_IOCTL_SET_VERSION(r3, 0xc0106407, &(0x7f0000000180)={0x1, 0x2}) ioctl$DRM_IOCTL_SET_VERSION(r3, 0xc0106407, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f0000000280), 0x2, 0x141102) mount(0x0, &(0x7f0000000380)='./proc\x00', &(0x7f00000003c0)='proc\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, 0x0, &(0x7f0000000500)) 16m35.300014163s ago: executing program 5 (id=1708): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000a00), 0x0, 0x0) read$msr(r1, &(0x7f0000000a80)=""/102392, 0x18ff8) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000019a80), 0x88000, 0x0) ioctl$TCSETAW(r2, 0x5453, &(0x7f0000019ac0)={0xefa, 0x7, 0x80, 0x40e0, 0xc}) ioctl$TCSETA(0xffffffffffffffff, 0x5406, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000080)={0x2, 0x4, 0x8000000000000000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f00000000c0)={{}, {0x77359400}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f0000019b80)={0x0, 0x0, &(0x7f0000019bc0)={&(0x7f0000000040)={0xd, 0x6, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x20040801}, 0x88) socket$inet_tcp(0x2, 0x1, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000019c40), 0x802, 0x0) 16m33.224745313s ago: executing program 5 (id=1710): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r3, &(0x7f0000000180)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000019300)) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000019480)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000019500)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000019540)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, r4, 0x0, 0x0, 0x1, 0x0, 0x0) 16m31.491655741s ago: executing program 5 (id=1712): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000440)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000480)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000004c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000a40)=""/102392, 0x18ff8) process_vm_writev(0x0, &(0x7f0000019a40), 0x0, 0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000019ec0)={0x0, 0x0, &(0x7f0000019f00)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001200ffff29bd7000fddbdf252a0300014e224e2204000000070000000a00"/52, @ANYRES32=0x0, @ANYBLOB="06100000030000008100000003"], 0x54}, 0x1, 0x0, 0x0, 0x44810}, 0x2000c814) 16m18.83300102s ago: executing program 5 (id=1720): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000480)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000600), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000640), 0x10106, 0x2, 0x0) syz_open_dev$loop(0x0, 0x6b, 0x901) setitimer(0x1, &(0x7f00000006c0)={{}, {0x0, 0x2710}}, 0x0) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000740)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) connect$unix(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/sda\x00', 0x101042, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x40000000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 16m3.156140488s ago: executing program 39 (id=1720): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000480)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000600), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000640), 0x10106, 0x2, 0x0) syz_open_dev$loop(0x0, 0x6b, 0x901) setitimer(0x1, &(0x7f00000006c0)={{}, {0x0, 0x2710}}, 0x0) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000740)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) connect$unix(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/sda\x00', 0x101042, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x40000000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 5m47.265779888s ago: executing program 6 (id=2205): timer_create(0x0, 0x0, &(0x7f0000000300)) timer_create(0x0, &(0x7f0000000140)={0x0, 0x21, 0x800000000004}, &(0x7f00000001c0)=0x0) timer_settime(r0, 0x1, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) r1 = syz_create_resource$futex(&(0x7f0000000240)=0x1) r2 = syz_create_resource$futex(&(0x7f0000000280)=0x1) futex(r2, 0xb, 0x1, 0x0, r1, 0x403) futex(r2, 0xc, 0x1, 0x0, r1, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) 5m45.083432105s ago: executing program 6 (id=2208): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) timer_create(0x0, &(0x7f0000000140)={0x0, 0x21, 0x800000000004}, &(0x7f00000001c0)=0x0) timer_settime(r0, 0x1, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/ptype\x00') r1 = syz_create_resource$futex(&(0x7f0000000240)=0x1) r2 = syz_create_resource$futex(&(0x7f0000000280)=0x1) futex(r2, 0xb, 0x1, 0x0, r1, 0x403) futex(r2, 0xc, 0x1, 0x0, r1, 0x1) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x13, 0x401d031, 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r3 = getpgrp(0x0) kcmp(r3, r3, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0xa02) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r4, 0x40049421, 0x2) ioctl$DVB_DEMUX_DMX_SET_FILTER(r4, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5}) preadv(r4, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x20, 0x1, 0x7fff) ioctl$DVB_DEMUX_DMX_STOP(r4, 0x6f2a) 5m42.130616551s ago: executing program 6 (id=2211): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) timer_create(0x0, &(0x7f0000000140)={0x0, 0x21, 0x800000000004}, &(0x7f00000001c0)=0x0) timer_settime(r0, 0x1, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/ptype\x00') r1 = syz_create_resource$futex(&(0x7f0000000240)=0x1) r2 = syz_create_resource$futex(&(0x7f0000000280)=0x1) futex(r2, 0xb, 0x1, 0x0, r1, 0x403) futex(r2, 0xc, 0x1, 0x0, r1, 0x1) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x13, 0x401d031, 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x0, 0x1, 0x7ffc0002}]}) r3 = getpgrp(0x0) kcmp(r3, r3, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0xa02) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r4, 0x40049421, 0x2) ioctl$DVB_DEMUX_DMX_SET_FILTER(r4, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5}) preadv(r4, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x20, 0x1, 0x7fff) ioctl$DVB_DEMUX_DMX_STOP(r4, 0x6f2a) 5m36.968235577s ago: executing program 6 (id=2217): bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r3, &(0x7f0000000380)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000019380)=0x7) r4 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r4, 0x5) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000019400)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000019440)="4a00ffff11003ee0b4fdddd685986a49e005", 0x12) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000019580)={0x0, 0x0}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) 5m34.931671919s ago: executing program 6 (id=2220): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000500)={0x8, 0x80020100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000540)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000580)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000005c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000600), 0x0, 0x0) read$msr(r3, &(0x7f0000000840)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000019840)=0x7) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000019880)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000019900)="adcd1a9a3fc36e", 0x7) accept4$alg(r4, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x1ff) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f00000002c0)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000300), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000340), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000640)=0x1, 0x4) 5m22.497863854s ago: executing program 6 (id=2231): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000500)={0x8, 0x80020100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000540)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000580)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000005c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000600), 0x0, 0x0) read$msr(r2, &(0x7f0000000840)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x47, &(0x7f0000019840)=0x7) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000019880)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000019900)="adcd1a9a3fc36e", 0x7) accept4$alg(r3, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x1ff) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="68000000000905040000000000000000020000000900010073797a3000000000140002800600010000020000050002000600000008000500000000002c0004800800010000000001200002800c000100706f6c69637930000800020000000002080003000000001e", 0x68}], 0x1}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f00000002c0)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000300), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000340), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000640)=0x1, 0x4) 5m14.774812192s ago: executing program 9 (id=2238): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000500)={0x8, 0x80020100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000540)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000580)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000005c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000600), 0x0, 0x0) read$msr(r3, &(0x7f0000000840)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000019840)=0x7) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000019880)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000019900)="adcd1a9a3fc36e", 0x7) accept4$alg(r4, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="68000000000905040000000000000000020000000900010073797a3000000000140002800600010000020000050002000600000008000500000000002c0004800800010000000001200002800c000100706f6c69637930000800020000000002080003000000001e", 0x68}], 0x1}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f00000002c0)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000300), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000340), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000640)=0x1, 0x4) 5m12.906958563s ago: executing program 9 (id=2239): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000a00), 0x0, 0x0) read$msr(r1, &(0x7f0000000a80)=""/102392, 0x18ff8) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000019a80), 0x88000, 0x0) ioctl$TCSETAW(r2, 0x5453, &(0x7f0000019ac0)={0xefa, 0x7, 0x80, 0x40e0, 0xc}) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000019b00)={0x0, 0x10, 0x572, 0x9, 0x7, "ff000d00009a468e0cd912098d00"}) ioctl$TCSETA(0xffffffffffffffff, 0x5406, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000080)={0x2, 0x4, 0x8000000000000000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f00000000c0)={{}, {0x77359400}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f0000019b80)={0x0, 0x0, &(0x7f0000019bc0)={&(0x7f0000000040)={0xd, 0x6, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x20040801}, 0x88) socket$inet_tcp(0x2, 0x1, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000019c40), 0x802, 0x0) 5m7.291076336s ago: executing program 40 (id=2231): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000500)={0x8, 0x80020100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000540)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000580)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000005c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000600), 0x0, 0x0) read$msr(r2, &(0x7f0000000840)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x47, &(0x7f0000019840)=0x7) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000019880)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000019900)="adcd1a9a3fc36e", 0x7) accept4$alg(r3, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x1ff) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="68000000000905040000000000000000020000000900010073797a3000000000140002800600010000020000050002000600000008000500000000002c0004800800010000000001200002800c000100706f6c69637930000800020000000002080003000000001e", 0x68}], 0x1}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f00000002c0)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000300), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000340), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000640)=0x1, 0x4) 5m2.657442449s ago: executing program 9 (id=2250): r0 = open$dir(&(0x7f0000000100)='./proc\x00', 0x301080, 0x51) mkdirat(r0, &(0x7f0000000080)='./proc\x00', 0xfa) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x4000, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000003dc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8924, &(0x7f0000003f00)={'wlan0\x00', 0x1}) r4 = openat(r0, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000200)) r5 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$mtd(&(0x7f0000003ec0), 0x46, 0x1) ioctl$MEMREADOOB64(r6, 0x1269, &(0x7f0000003f40)={0x1, 0x0, 0x0, &(0x7f0000003f80)}) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x804818, &(0x7f00000002c0)=ANY=[@ANYRES64=r3, @ANYRESDEC, @ANYBLOB="0c2ec34edb42fe4f2c1b832d9141290140e677e53cc188dc415811a2970bbb79c9fe1c95293dbe00000036b03632dab46a43226a89c37f32b221bf1e737101a03cdb083ffc8585af679581ab62438f23ef4adeb4629413", @ANYRESDEC=r5, @ANYBLOB="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", @ANYRESOCT=r5, @ANYRES8, @ANYBLOB="91156f62712814b49a095a3b11802840d5afbf5494fe15a50de44c5080456ecf73e895d0e95d2b9738f5c2f9141a2fe0243540cf7faf3a065ee17c6403c7b9d550cea8f851f24b4b107003687cc27c2908639ee4bf5469ee594225359e162d37939f9327604c178af4866c3b851cb7d9fab7ea0f080e015d093b7ef91ff01fb2367f7fcef2fb197d5af62a8c1f1e8171dce3393d96c5666b1082d0a453426b16a9d539b68863346f2abb04cf448db1a4713281b7ff0da0b72f32c349be1a627c64a6", @ANYRES8=r5, @ANYBLOB="b209eb6ac758b26226e3afb394a796baf3c6ce63c6342fceeedece41257e82ae0c182b8db1d9bcee3c8cc711a99a1b54089087c846cdf5b62cf323b61a14c81100aa81ab73f3ed2ef2c4ffd4000435582841d1ec94cab660ebe3c11acdffc890d218a41f668954cb9f57fa7f418649"], 0x2, 0x56d, &(0x7f00000014c0)="$eJzs3V1v094dwPGfSzuiTOqmMSFUFTiUTSpSCU4CQRFXnnOSHkjsyHZQe4UqmqKKFCbKpLU30Bu2SduLYJd7EXtH6P8S+MsP6WMegD5SfT9VOY59fM7PbuQfp42PBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAiOXWbLtoSdN4nSU1nFsL/Nbey2zvIyvk3oFiRL8iVvwtuZzcSFfd+OPe5uuWyMfdV7OSi4ucbP/2+u+fXJuc6O8/IuDv8t8fbGlza/v1Sq/XfXdSgVxAN68O39bQngl903IaWpnQV9VKxX6wWA9V3TR1uBxGuqXcQDuRH6h5954qVqtlpQvLfsdr1Jym7q98fL9k2xX1tNDWThD63oOnhdBdNM2m8RpJnXhzXOdx/EZ8ZiIVaael1Np6r1sedwBxpeK3VCqNq1SyS6VisVQqVh5VHz227ckjK+xD5EiNk3vT4ud0Ytdu4LgmsvwvTTHiSUeWRA38cqUmgfjSGrI908//f36gR/a7P//Ppqtmb+xtnon/mZNb6atbw/L/kFhO+GuyH9XRbZuyJdvyWlakJz3pyruziejCfDVEiydGQvHFSEucZI3K1iipSkUqYssLWZT6VHwO62KkKVpCWZZQItHJO8qVQLQ4EokvgSiZF1fuiZKiVKUqZVGipSDL4ktHPGlITZyklTVZT857WZQ1LMbdSsWhh5Hv/4S7UhpxtOR/HN8JXbmB4/vaz/8AAAAAAODSspLfvk8l3zeT13XT1PZ5hwUAAAAAAE5Q8pf/2bhIPp11UyzG/wAAAAAAXDZWco+dJSJ5uZ0urYmV3C7FLwEAAAAAALgkkr//34qLZA6U22LtTpfC+B8AAAAAgEvin7uz7w6bYzdsX7X+/4sEwZS10176k7WRzM3rbFxJ97tyuMWoPmNNZ40kRSUtJiddPWvl0kq7k2B+yYq1cXFYewE4uwF8/J4Ark3Kv+VOWufOalquZlt+l/aSr5umLrh+80lRHGd6ItJL0d/erP9dksP/l9eatnKy3usWXr7trSax7MSt7GxkEygemUdxRCzvk/kWknsuBh7xVHIjRtZv3pK19V7Xbi9dzVp2NibShYmDPX6YHtHnJ5lLa81lM97m+1vSPnNxn8XCsKPPoige88g/yd20zt35u2kxIIrSuChK+6MYfC6OH0V5XBTlY0YBAOdlbUwWsuRI3v2Bq9yh7B5f9r4hu8t3ZvdPMp/WmZ9JLqyTMwOu6Pa4K7p9zOz2vyPPQBqWY+N+/3Moq36Od/g8tN+wWbLiU3jl/cZf5frm1vb99Y2VV91X3TelUrliP7TtRyWZSg4jK8g9AIAB9j9jxxqY/0c9hefr1zh3P8xG1TuHR9VZxvvD7kcKCvJS3kpPVmUhudsg+cTBwP935Pd9DGFhzKg1n6TJ9AkvCyNGdb9J7nLot1saWfdgDOWz+FEAAHBm5sbk4dH5Px27L4wZdx/M5aNHx/l9T2sDAACnQwdfrHz0DysITPtFsVotOtGiVkFOnqnA1BpaGS/SgbvoeA2t2oEf+a7fjBeem5oOVdhpt/0gUnU/UG0/NEvJ9IEqe/R7qFuOFxk3bDe1E2rl+l7kuJGqmdBV7c5fmiZc1EGyc9jWrqkb14mM76nQ7wSuLigVar2voqlpLzJ1Ey96qh2YlhPk1HO/2WlpVdOhG5h25KcN9vsyXt0PWkmzhfM+2QAAXBCbW9uvV3q97rtTXBjYce7MDxUAAGTGZGkAAAAAAAAAAAAAAAAAAAAAAHABnMX9fyxc8oX+VNA/3k5OTi9CS877/PyUC2MvHR9O/eIE4FT9GgAA//9t+k3W") r7 = open(&(0x7f0000001a40)='.\x00', 0x20000, 0x0) name_to_handle_at(r7, &(0x7f0000001a80)='./file1\x00', &(0x7f0000001ac0)=@fuse_with_parent={0x18, 0x82, {{0x2, 0xe, 0xd3ac}, {0xffffffff, 0x10400}}}, &(0x7f0000001b00), 0x1000) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000180)) write$make_it_fail(0xffffffffffffffff, &(0x7f00000000c0)='Y\x00', 0x2) write(r4, &(0x7f0000000000)='3', 0x4e) capset(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001b40)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000001b80)='./proc\x00', &(0x7f0000001bc0)='proc\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000001c00)='./proc/sys/kernel/watchdog_thresh\x00', 0x802, 0x134) read$FUSE(r8, &(0x7f0000001c40)={0x2020}, 0x2020) fsopen(&(0x7f0000000040)='ceph\x00', 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000003c80)={0x0, 0x0, &(0x7f0000003cc0)={&(0x7f0000003d00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}}]}]}], {0x14}}, 0xb8}}, 0x4004) socket$inet6_tcp(0xa, 0x1, 0x0) 5m0.394904572s ago: executing program 9 (id=2252): syz_open_dev$video4linux(&(0x7f0000001380), 0x5, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x0) r1 = landlock_create_ruleset(0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000) landlock_restrict_self(r1, 0xe) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) socket$kcm(0x10, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000140), 0xa00, 0x801) ioctl$DRM_IOCTL_SET_VERSION(r3, 0xc0106407, &(0x7f0000000180)={0x1, 0x2}) ioctl$DRM_IOCTL_SET_VERSION(r3, 0xc0106407, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000280), 0x2, 0x141102) writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000300)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./proc\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000003c0)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/sys/net/ipv4/vs/est_cpulist\x00', 0x2, 0x0) write(r5, &(0x7f0000000440)='0', 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, 0x0, &(0x7f0000000500)) 4m57.320055571s ago: executing program 9 (id=2255): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000500)={0x8, 0x80020100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000540)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000580)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000005c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000600), 0x0, 0x0) read$msr(r3, &(0x7f0000000840)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000019840)=0x7) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000019880)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x1ff) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000300), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000340), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000640)=0x1, 0x4) 4m54.894921681s ago: executing program 9 (id=2258): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r2, &(0x7f0000000180)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000019300)) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000019480)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000019500)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000019540)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, r3, 0x0, &(0x7f0000019580)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ddc, 0x80, 0x2, 0x33d}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7396, 0x20, 0x0, 0x142}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x727b, 0x80, 0x9, 0x135}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x800, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0) 4m39.495473237s ago: executing program 41 (id=2258): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r2, &(0x7f0000000180)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000019300)) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000019480)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000019500)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000019540)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, r3, 0x0, &(0x7f0000019580)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ddc, 0x80, 0x2, 0x33d}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7396, 0x20, 0x0, 0x142}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x727b, 0x80, 0x9, 0x135}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x800, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0) 1m48.424365861s ago: executing program 4 (id=2455): syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x180862) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x59a6b28c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r3, &(0x7f00000007c0)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f00000197c0)=0x7) socket(0x10, 0x803, 0x0) add_key(0x0, &(0x7f0000019880)={'syz', 0x1}, 0x0, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r4, 0x800448d3, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000019a40)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) write$binfmt_register(0xffffffffffffffff, &(0x7f0000019a80)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x7, 0x3a, '&:\\', 0x3a, '\x00', 0x3a, './file0'}, 0x2b) syz_usb_connect(0x2, 0x24, 0x0, 0x0) 1m46.556962592s ago: executing program 4 (id=2456): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000500)={0x8, 0x80020100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000540)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000580)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000005c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000600), 0x0, 0x0) read$msr(r3, &(0x7f0000000840)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000019840)=0x7) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000019880)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) accept4$alg(r4, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x1ff) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="68000000000905040000000000000000020000000900010073797a3000000000140002800600010000020000050002000600000008000500000000002c0004800800010000000001200002800c000100706f6c69637930000800020000000002080003000000001e", 0x68}], 0x1}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f00000002c0)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000300), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000340), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000640)=0x1, 0x4) 1m36.910102075s ago: executing program 4 (id=2462): syz_open_dev$video4linux(&(0x7f0000001380), 0x5, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x0) r1 = landlock_create_ruleset(0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000) landlock_restrict_self(r1, 0xe) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) socket$kcm(0x10, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000140), 0xa00, 0x801) ioctl$DRM_IOCTL_SET_VERSION(r3, 0xc0106407, &(0x7f0000000180)={0x1, 0x2}) ioctl$DRM_IOCTL_SET_VERSION(r3, 0xc0106407, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000280), 0x2, 0x141102) writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000300)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./proc\x00', &(0x7f00000003c0)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/sys/net/ipv4/vs/est_cpulist\x00', 0x2, 0x0) write(r5, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, 0x0, &(0x7f0000000500)) 1m30.690292208s ago: executing program 4 (id=2467): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000500)={0x8, 0x80020100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000540)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000580)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000600), 0x0, 0x0) read$msr(r2, &(0x7f0000000840)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x47, &(0x7f0000019840)=0x7) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000019880)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000019900)="adcd1a9a3fc36e", 0x7) accept4$alg(r3, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x1ff) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="68000000000905040000000000000000020000000900010073797a3000000000140002800600010000020000050002000600000008000500000000002c0004800800010000000001200002800c000100706f6c69637930000800020000000002080003000000001e", 0x68}], 0x1}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f00000002c0)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000300), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000340), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000640)=0x1, 0x4) 1m26.621011859s ago: executing program 4 (id=2471): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000500)={0x8, 0x80020100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000540)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000580)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000005c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) syz_open_dev$MSR(&(0x7f0000000600), 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000019900)="adcd1a9a3fc36e", 0x7) accept4$alg(r3, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x1ff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="68000000000905040000000000000000020000000900010073797a3000000000140002800600010000020000050002000600000008000500000000002c0004800800010000000001200002800c000100706f6c69637930000800020000000002080003000000001e", 0x68}], 0x1}, 0x0) 1m24.997330863s ago: executing program 4 (id=2473): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000540)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000580)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000005c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000600), 0x0, 0x0) read$msr(r3, &(0x7f0000000840)=""/102392, 0x18ff8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000300), 0x1c) 1m9.170823005s ago: executing program 42 (id=2473): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000540)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000580)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000005c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000600), 0x0, 0x0) read$msr(r3, &(0x7f0000000840)=""/102392, 0x18ff8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000300), 0x1c) 26.828766277s ago: executing program 1 (id=2520): r0 = open$dir(&(0x7f0000000100)='./proc\x00', 0x301080, 0x51) mkdirat(r0, &(0x7f0000000080)='./proc\x00', 0xfa) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x4000, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000003dc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000003e00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003e40)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8924, &(0x7f0000003f00)={'wlan0\x00', 0x1}) r4 = openat(r0, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000200)) r5 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$mtd(&(0x7f0000003ec0), 0x46, 0x1) ioctl$MEMREADOOB64(r6, 0x1269, &(0x7f0000003f40)={0x1, 0x0, 0x0, &(0x7f0000003f80)}) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x804818, &(0x7f00000002c0)=ANY=[@ANYRES64=r3, @ANYRESDEC, @ANYBLOB="0c2ec34edb42fe4f2c1b832d9141290140e677e53cc188dc415811a2970bbb79c9fe1c95293dbe00000036b03632dab46a43226a89c37f32b221bf1e737101a03cdb083ffc8585af679581ab62438f23ef4adeb4629413", @ANYRESDEC=r5, @ANYBLOB="93326b1288b7b8208b3930e891a68290350e7fcf882dd7690cffd510236f7aaef57a7534539b0a5c133b72dc53c39ae229912297603f8133b7c0f69619359181b619305abbbb04cee0eae8bc37993d16433c685bcfb5adf087bd6c130cd9ce61b35228ad48eb52eb26b22b702c442745aa886e9b4d68a24a15c3165eabfb5a7f40d586b6a9506622000ec7cd175d13de3f0d574f8e70ab1e645229d712ef8be9fd19d55124d697b329aa9b28e395799ee73f0b1c03389740c3d06bf1c515c4da839caff7698c509dac04c33dc0c78b2ea865f1931ff69ed858e3f67b5ce773b5c29f6e000f51edb51cac67b6a42f5cb1bdd08e7c3f9a5725de17dba022dcab2ecfbddc64be3ee1827f97d8d436974bb58195462889a0e6d5c784b4f42bd55a9c0c0ca5a2168c456459302311368734babd88b76fcea2d822bdc04e5a43e94be721ec073551d31fba960f390d5bd0d41533198d4d611190f8099cf5efe500d678abbcde5e9c4cff09db2952beeac88c0c9381ca81c0b8a7f8fd4df2ce9e26e019b20b98fd6ddb22da818b4e9bfa594596b3467ed95ea191c8774fae91116cdc0ba5e323388d858ebfb091011bacc83e16c7795e5885019ea96520d5b4368d76b9f48877de6a6844c98bfcd461953478271bce14c79e8fe0728c68b7a1610170dc32d31c8235b5010f523aaf6cc2bf1f7708bf57bfa480ba07e5a2b01a4248a3681f5407fdfe2c82fd9ecbdaf51e7f4c90ee8e54d0d363bbe91e1523d2f7a4479bcfd6a03f8cab1f68f94252d38f38d3d0a0bb925a4ce9d6576fb293d0eb54359d99b01ab91e7a9bda71ff6ae43e65a8176057c822f399867bff94b68edc56dc67479e2c150519311c323a84869667910c872a8c668c74b50c08b03a752d6576828609b51d1dcb14ba3470294592390909aad5a2f93def0fd99b782268d18cdbfbafe4a03995636f72b3600ce52a4f8220480d3ff3ee3b75157d1ca40ef57b2af168f026a644d7edc55b919002f95ed220426323c5470db25a8da25a805cf0b4b9fca184bd1705b2e1815335ceff75e0b0e98a22abf3e1d366617b11c25b4da91d90dd117b963c33e3b280ca94afbce68aa72b700b35956c46ce09bd9f0ae25acf2d9d85bd5d240168ede152e49a83d2ef00c16abf352b83784cf0bdaebb03ee96700ebca2ab3a9ff303d76938004805f36d282c5a54769f7af14ca08cc0e99477d43dbb8760d41c0612d869ed26280c5dfc8dc7b5b6ebeff8a0e72faf5cf0039e192dcca2f2d1d80f3c2bc170fc621f330a3d7883c0f5edd27b82ca6d2fdd202af6b10af3cd5da9a5e9d4867d38a5a10e153c32024a255c790ea84ff1e601c82edd266cdc40ed44513fcfda8fd68187be723371e75eebd0ea124d5f2f28d977842bda6191a169e734e5dc3d54daa18668007b7be35ea9cd2a3130e5473bdb8185940dc3b03181a084f76396be8b99637196ef36967d35e69904883501212676db121f0adb737a5ff842a26a52d4830a759e4165244d3e968dd0a583b4e50a5f05c31d43a074363bd5b2fb5c7f6edb7af655c7cd602266418495b4f1ac80a4b0254775252a86d6733e46cb42be0c0c7a8306280e8feb1cbe3a1b36ab61926ec3db349ccd5460d553e93bf2bbbee730c1a459ab87198cc92848c2d0fcadc43100b9e325f696fe5bcf5ed1e56608d3d7f48181bed4fd8d54d8a93aa06362d4150ce9ad4152371c7c418eb4932fe559780d5058698df850f6f94d01794508f44d040ec728508fb273a6045b3c93f16831e3215aced49f80b04383ac07440ee0b59d364ca0b41047ce1b808a3d150f96bdfcc993d300b1eba7971ea09c718b39b68bcc61bd967a6e6afa422a958a2e60f447b83e36e452e825d4ec9b9d23c743883c071723fe7c29001f18e10674822ac5bb4990e5c83781489d9d51c4beb8cd18f90bd46743649d554af4046049a168672f5851b7805bc0f31c4147036b4ca166dca7218be66bb3ec84ab1c6e1b45e5645ec49c9f5c0280e44da0d9f9a077c1d6c632b2154d33532bbc2c1f2b08fcf5ca246ee110804a0d9ed6c0ab727127f1674fc9be3d4635d2aa5aeb81a48d8a8be073097674f708220b75e176e3428cd65d16277d250c80c928063679c3ea416b13810f4b40ac1184a045218725a9c2cf895cd9d364c2a1fd29562c5832857db482c3b2737ea3ff36a3482a29d92ffc115fecd9efffaf409f30f8d7ee7b2b480dc174feffd3a5f4653e550d908ac5b308d7797393a0c785bbd05ab9c8d8f1fd68c9f03c8293065d26f62a5048c64daf5eab4b4f565395fab921cd9401e7824952308990fb0afec19984ee4e7d3a626bc7de4241785b93f4d51fec5fe4b2553fd0acdc7ae986b034aa4a7955519f230050446a21e1e03fd139bbbaff9c36780f523ccc1cfa8076709a95af52e110d789a0a6ef6be3073a062181dc1c8ced317d346ceb55f1cccc315290e576222d061ff84ebba7a643c957dd76f5b1d431a22abc970170d2053f984af270c8067571ae736bcc653442d7aa6d53fe1706ee2e7d9ac40ade98a8624ff6d5d390ccbb955992c16b70f4c5b6bf7c7732fdbd59bf89741faf45427df70036997dfa5133831f9511cf3c26506257680c42b149237b2ee5ebf9d341673f4836ff5306c10ce7d2b306003cdd37a34d2b4177b48e5ed6e46d5a74de23570481a150406d317273bcffddfdeb4d91846c2c94c619e40769c25f0f9681785cae7b1aaa0b87fc087999c70db3f49de703d934c9625a5bc5214dc60b8dfa07aa17c01ad6580bc35aee45274c48a0833ee414c5e48ab4b22ab240f0d0ff41236462fafa3ec3241ff73ad3e410130ce1d8387f1dd63c01e43d72eb84561258470346493b2b16cfaa75a8640082c9b386203993c3071f90f40f72677998daae75b58ce4484314aa89781520e4ea8dc91bdede35f950c155355945203905cbe2e5ebced8cbf159a8e0ffe695e68b462c6b4ffdc1283dcff6be3b75ee3317211b7dd261e7f7ae2dc9d6f3e64bb741c5cd3803093d728c2bab3946899c5576b973bb8137daf1746ca18ebd5ae743593364ddd298a4b299282ee85cbb817d74dcfdbff385eaaa82a156a3a9bb719ad882292140e2694c7464d360ee05e163b84a3687a44429d05f1aaa21a97480f8125ae44e9da4d0e2e76b59f346a34076b1dc43ab81ff7e98b43307ee14967a1e3311779db7593719e79da7d675370a7fc18bfc92910ce2c9972c8da0073ec330ee78f43986d58004f62ab2052284fba1cd9ec334fd90d329725901a0cc98120d6804beb5afbcae66255fa198baf6498ccf407f95e70f30c5dec7e3823b783e6ff5ad7126af43ac4ec0a22eda832aa22de8fc1832aae748b49905d56c2feae95a007c565d547dcf3bf6c534b70570810fc21f5d769a53ff12451df767cfa01b5dc0e7ad397140b351237129fb4e46cf06f29e76e1d5d2ce3d309479626c7c51934db0024d224beef7ed33eb7a1ed8a05c94acc391618818699f7b25e048c1b8e863f5276d2bf1706b4813a808f78ee2da6df07d3b531e462123559ccc6702a31e749c2ad430ed2c125fcd170f57d7f589b5b48ad44b3373e2256e9ab04f0efe1833b529e4966b40ac2cf18853c25505cebee97f9e5047ef575d01ee0cf468ab47e96d2202181156b7b3270b2c530c88e20daa282317aab6ec29497f98d28ddb5aa0dc2157ce672d0702e0ab20f427fd95814ef4756cf87fd765904ca382e72b25f69c82396b3eaa4fd429f9e4de96638135aef10bea39c61250a14fadcd25556b9d8b3a3c54d04c50d39a5251adf0da2128a2cd99074a0ca5abcc5229e1e32d5a4d1f0ac5df96fb0b0c2652b4d85baf68b4682dd5af09429c25b60ade606a8fe12261e4c79a9efaa4944bb46c6ae4162fa1d6b0a8a505e2e4d7eaa26663ded23b0ed1cd50d3f7d0e04a523df987e88017fa715c1d5a1b98aeb3b571c1cac972ce0bdfd6cab6b57fe746f9cf89b53171b762693dcd29bf3c9fc6d61231c8424e1729a2381c43212ad7c2b7f534b034df5c232d19a30196aa0beaba1520c2cd2bbcf48447df7c4fc49d89d11ff4cfdd0d9ce59c6fb363b030c4338f80b35fb757ec0e76877b4aedfd750217956f287d89f8c4bad07fc93e671da8d5cac67df1a4cc86f363a0c7989feb72f1390aa416b125ab1c21224c85952b17b71c8dcaeb5fcfce9ac97cdcb398cd48daa6d553841015576651b4ad274a9511e293829fc2b6afe40ac582537e4539615a6e0f4fe27951017fd87f1a99b13fc18cb2840d8642d7174f0f22e95857065600e5f0ad32e5c4da85b3a323a2350074c3b4aa75d87bcdc8fdbf7e68481285e29e2f90996a26067acf703852ce1e1e626cd9174b6e19d5ac8ad768bf992b84b36edf0ac0aa1dbb07a7de8b3b89434d2c5f835c36535253f94e0149912ea809d902c96df8b856e0707f599212ef31e90c24816e03cef540520e81051fa45c5cb6bbe34309648616d58d15d8c23a445a77f02489d8d3c57266e6bce99120f61a44b4021ed206d4b276ae167a4b7d84c834f1890b987f705101cd74ef89798c970bc3d811b5c781e11ec20f36755b8afe5d947d28bd7fa907b2d99fbcf258761fbf0bc771190244eb5ed515b0bb199195dab1073b35a54d17dc3bbc2c4f67ea85da13dd5f74e7a76a7ae5e8176cf5fd03d2a82ac7d4da8d32e4e44b93391fae4127c7788d0525402f36f6d26f88abe5373ced7d90fa294c48685e960ad74c73b26917d844fb619ebbac5d327c6ea27e026e56d443e892e52c8dd5f8b1820c698e9f6a590b44b76a4dc4566b5c642add5cbe4ac494366a8662c047490f4791d677e2dbad37a0758557a98fdcaac55b442333c9edab85577bafb80eaa58f9ec1107126c25d4beb730e8a07f8abe803b2be1d55ad5c4ebfec2c937bd8e93ca0f1b0e9953e659e9a51c56ee7181d7a0b93dc0278c7637c90db38f57a53d5a2373d18c16f204a5a646786dc2825969fb5a751ff48ad14462bececadfc176dc485a04038614bbac52e6caf933fd5e08b2e492013cf7a1a84bd3b776054361c5ca05c345dd787d7e4be4f0e4983599f8bb84b5bf24ba49174fbbd5253afb7825edcde54691aafdcc72747a4dc840ddb0a4888c343f1c9be5ca3e39b50abc7f1cd4c5a8d40353478176ce57c0b240781b53b70dde525414cfe3c084324a84d5d4a476afc0faeeda5efe5c700031307f9cde66b039e4bcf2f8a5b94b32e181f89b43f0dff89113d3ad55a31283579699e5e23d393d6795c85c28110a2a37a1c81cec284404e49fc7cd7c42df33489050a082fbf827321bc2ea27dee66e656f76a17cfd16f47c0acf809c5023891d6c7d009468ce487d3a7cdc796bb9de537e6bea89f174bad3f6a8a44a36704479f63cc15acc2338f50f20542bc338ccc7a7ede7813e7c9ec41509576fcdb5d5381479d721550320da5ba13afdf4eca2be38f28c5132a374cbeb2c631a93a734fa4fab333e7f63c0f899e63271c08b5789846d2c188e0e67481c7b0fcd72a8b39af2d3ec12d2c87b7c2d1a1b5c04013ba4fdd4b23b02f935a5cae119f424efba281cf35d7f89adebad777ed5874ba5d95ec83b56e951181a50bc00ee5a4474f79014fd663ec2f34e4e6656bc3f3ad09f594f481cf24ccbd9a8c0a00d13925ecf81a2fd2d46ca85034fa833fe3702a59f7a929f98325873db02e0526260ad3690fe41193cfcc1204abd6ab655d71700dc97c7c577eda570e0b4a20f3a93aa54595ede3deb25b5d34914a8bb94a20cffa7020789", @ANYRESOCT=r5, @ANYRES8, @ANYBLOB="91156f62712814b49a095a3b11802840d5afbf5494fe15a50de44c5080456ecf73e895d0e95d2b9738f5c2f9141a2fe0243540cf7faf3a065ee17c6403c7b9d550cea8f851f24b4b107003687cc27c2908639ee4bf5469ee594225359e162d37939f9327604c178af4866c3b851cb7d9fab7ea0f080e015d093b7ef91ff01fb2367f7fcef2fb197d5af62a8c1f1e8171dce3393d96c5666b1082d0a453426b16a9d539b68863346f2abb04cf448db1a4713281b7ff0da0b72f32c349be1a627c64a6", @ANYRES8=r5, @ANYBLOB="b209eb6ac758b26226e3afb394a796baf3c6ce63c6342fceeedece41257e82ae0c182b8db1d9bcee3c8cc711a99a1b54089087c846cdf5b62cf323b61a14c81100aa81ab73f3ed2ef2c4ffd4000435582841d1ec94cab660ebe3c11acdffc890d218a41f668954cb9f57fa7f418649"], 0x2, 0x56d, &(0x7f00000014c0)="$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") name_to_handle_at(0xffffffffffffffff, &(0x7f0000001a80)='./file1\x00', &(0x7f0000001ac0)=@fuse_with_parent={0x18, 0x82, {{0x2, 0xe, 0xd3ac}, {0xffffffff, 0x10400}}}, &(0x7f0000001b00), 0x1000) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000180)) write$make_it_fail(0xffffffffffffffff, &(0x7f00000000c0)='Y\x00', 0x2) write(r4, &(0x7f0000000000)='3', 0x4e) capset(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001b40)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000001b80)='./proc\x00', &(0x7f0000001bc0)='proc\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000001c00)='./proc/sys/kernel/watchdog_thresh\x00', 0x802, 0x134) read$FUSE(r7, &(0x7f0000001c40)={0x2020}, 0x2020) fsopen(0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000003c80)={0x0, 0x0, &(0x7f0000003cc0)={&(0x7f0000003d00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}}]}]}], {0x14}}, 0xb8}}, 0x4004) socket$inet6_tcp(0xa, 0x1, 0x0) 25.308480788s ago: executing program 1 (id=2522): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000500)={0x8, 0x80020100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000540)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000580)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000005c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000600), 0x0, 0x0) read$msr(r3, &(0x7f0000000840)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000019840)=0x7) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000019880)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000019900)="adcd1a9a3fc36e", 0x7) accept4$alg(r4, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x1ff) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f00000002c0)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000300), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000340), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000640)=0x1, 0x4) 23.36729553s ago: executing program 1 (id=2523): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000500)={0x8, 0x80020100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000540)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000580)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000005c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000600), 0x0, 0x0) read$msr(r3, &(0x7f0000000840)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000019840)=0x7) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000019880)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) accept4$alg(r4, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x1ff) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="68000000000905040000000000000000020000000900010073797a3000000000140002800600010000020000050002000600000008000500000000002c0004800800010000000001200002800c000100706f6c69637930000800020000000002080003000000001e", 0x68}], 0x1}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f00000002c0)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000300), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000340), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000640)=0x1, 0x4) 21.053854992s ago: executing program 3 (id=2524): syz_open_dev$video4linux(&(0x7f0000001380), 0x5, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x0) r1 = landlock_create_ruleset(0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000) landlock_restrict_self(r1, 0xe) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) socket$kcm(0x10, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000140), 0xa00, 0x801) ioctl$DRM_IOCTL_SET_VERSION(r3, 0xc0106407, &(0x7f0000000180)={0x1, 0x2}) ioctl$DRM_IOCTL_SET_VERSION(r3, 0xc0106407, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000280), 0x2, 0x141102) writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000300)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./proc\x00', 0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/sys/net/ipv4/vs/est_cpulist\x00', 0x2, 0x0) write(r5, &(0x7f0000000440)='0', 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, 0x0, &(0x7f0000000500)) 19.080609968s ago: executing program 7 (id=2527): syz_open_dev$video4linux(&(0x7f0000001380), 0x5, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x0) r1 = landlock_create_ruleset(0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000) landlock_restrict_self(r1, 0xe) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) socket$kcm(0x10, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000140), 0xa00, 0x801) ioctl$DRM_IOCTL_SET_VERSION(r3, 0xc0106407, &(0x7f0000000180)={0x1, 0x2}) ioctl$DRM_IOCTL_SET_VERSION(r3, 0xc0106407, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000280), 0x2, 0x141102) writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000300)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000380)='./proc\x00', &(0x7f00000003c0)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/sys/net/ipv4/vs/est_cpulist\x00', 0x2, 0x0) write(r5, &(0x7f0000000440)='0', 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, 0x0, &(0x7f0000000500)) 16.358450541s ago: executing program 1 (id=2528): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000500)={0x8, 0x80020100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000540)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000580)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000600), 0x0, 0x0) read$msr(r3, &(0x7f0000000840)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000019840)=0x7) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000019880)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000019900)="adcd1a9a3fc36e", 0x7) accept4$alg(r4, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x1ff) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="68000000000905040000000000000000020000000900010073797a3000000000140002800600010000020000050002000600000008000500000000002c0004800800010000000001200002800c000100706f6c69637930000800020000000002080003000000001e", 0x68}], 0x1}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f00000002c0)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000300), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000340), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000640)=0x1, 0x4) 12.329145916s ago: executing program 7 (id=2529): socket$tipc(0x1e, 0x5, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141102) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000180)="94", 0xf000}, {0x0}], 0x2) openat$vimc1(0xffffff9c, &(0x7f00000001c0), 0x2, 0x0) pselect6(0x40, &(0x7f0000000200)={0x4, 0x2, 0x8000, 0x7, 0x8000000000000000, 0xfffffbfffffffffd, 0x1}, 0x0, &(0x7f0000000380)={0x1fe, 0x9, 0x0, 0x3, 0x0, 0x2c2c, 0x0, 0xffffffffffffffff}, 0x0, 0x0) close(0x4) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$MSR(&(0x7f0000000500), 0x0, 0x0) 12.075240189s ago: executing program 3 (id=2530): r0 = open$dir(&(0x7f0000000100)='./proc\x00', 0x301080, 0x51) mkdirat(r0, &(0x7f0000000080)='./proc\x00', 0xfa) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x4000, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000003dc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000003e00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003e40)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8924, &(0x7f0000003f00)={'wlan0\x00', 0x1}) r4 = openat(r0, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000200)) r5 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$mtd(&(0x7f0000003ec0), 0x46, 0x1) ioctl$MEMREADOOB64(r6, 0x1269, &(0x7f0000003f40)={0x1, 0x0, 0x0, &(0x7f0000003f80)}) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x804818, &(0x7f00000002c0)=ANY=[@ANYRES64=r3, @ANYRESDEC, @ANYBLOB="0c2ec34edb42fe4f2c1b832d9141290140e677e53cc188dc415811a2970bbb79c9fe1c95293dbe00000036b03632dab46a43226a89c37f32b221bf1e737101a03cdb083ffc8585af679581ab62438f23ef4adeb4629413", @ANYRESDEC=r5, @ANYBLOB="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", @ANYRESOCT=r5, @ANYRES8, @ANYBLOB="91156f62712814b49a095a3b11802840d5afbf5494fe15a50de44c5080456ecf73e895d0e95d2b9738f5c2f9141a2fe0243540cf7faf3a065ee17c6403c7b9d550cea8f851f24b4b107003687cc27c2908639ee4bf5469ee594225359e162d37939f9327604c178af4866c3b851cb7d9fab7ea0f080e015d093b7ef91ff01fb2367f7fcef2fb197d5af62a8c1f1e8171dce3393d96c5666b1082d0a453426b16a9d539b68863346f2abb04cf448db1a4713281b7ff0da0b72f32c349be1a627c64a6", @ANYRES8=r5, @ANYBLOB="b209eb6ac758b26226e3afb394a796baf3c6ce63c6342fceeedece41257e82ae0c182b8db1d9bcee3c8cc711a99a1b54089087c846cdf5b62cf323b61a14c81100aa81ab73f3ed2ef2c4ffd4000435582841d1ec94cab660ebe3c11acdffc890d218a41f668954cb9f57fa7f418649"], 0x2, 0x56d, &(0x7f00000014c0)="$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") name_to_handle_at(0xffffffffffffffff, &(0x7f0000001a80)='./file1\x00', &(0x7f0000001ac0)=@fuse_with_parent={0x18, 0x82, {{0x2, 0xe, 0xd3ac}, {0xffffffff, 0x10400}}}, &(0x7f0000001b00), 0x1000) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000180)) write$make_it_fail(0xffffffffffffffff, &(0x7f00000000c0)='Y\x00', 0x2) write(r4, &(0x7f0000000000)='3', 0x4e) capset(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001b40)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000001b80)='./proc\x00', &(0x7f0000001bc0)='proc\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000001c00)='./proc/sys/kernel/watchdog_thresh\x00', 0x802, 0x134) read$FUSE(r7, &(0x7f0000001c40)={0x2020}, 0x2020) fsopen(&(0x7f0000000040)='ceph\x00', 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000003c80)={0x0, 0x0, &(0x7f0000003cc0)={&(0x7f0000003d00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14}}, 0x88}}, 0x4004) socket$inet6_tcp(0xa, 0x1, 0x0) 11.083228391s ago: executing program 7 (id=2531): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000001c0), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000200), 0x10106, 0x2, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000580)={0xe, {"a2e3ad099b0d09f91b5f2f0987f70e06d038e7ff7fc6e5539b0d3d0e8b089b3f323063090810e0879b0f0a75e70a9b334d959b669a240d5b0af3988f7ef31952010afde8d178708c523c921b1b5b07070d075b0936cd3b78130daa61d8e81a3f00005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397273ce1766769f0c91c00305d3f46635eb016d5b1dda98e2d739be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b7638354a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc3609aa24b7d520c829d095083bba2987a67399eac430d145d546a40b9f6ff14ac488ec130bb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b2860d1b3cff57d8b6d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a4f0492d48604675fde2b34cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827955e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb9754fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94e7475cb74642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd72ea4998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5ff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c58b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b50517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864af090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d885b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1a85ae7e69fd1a47a284f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cef8473b53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b344340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cccf8a97406bb5a68a1f0c4549820a73c8859dde0712ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcb7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c2e14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ec00000000000000b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a52830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec685f068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000e00f96f06817fb903729a7fb6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x942}}, 0x1006) r3 = syz_open_procfs(0x0, &(0x7f00000015c0)='pagemap\x00') pread64(r3, &(0x7f0000001600)=""/102400, 0x19000, 0x1000000000) r4 = socket(0x80000000000000a, 0x2, 0x0) r5 = syz_open_dev$usbfs(&(0x7f000001a600), 0x76, 0x1) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f000001a640)=@urb_type_control={0x2, {}, 0x2, 0x40, &(0x7f000001a680)={0x0, 0xb, 0xfffe, 0x42}, 0x8, 0x203ffffd, 0x300, 0x0, 0xeeb, 0x20002, 0x0}) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f000001a6c0)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f000001a700)="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f01", 0x17) nanosleep(&(0x7f000001a780)={0x0, 0x5f5e100}, 0x0) setns(0xc9, 0x0) r7 = socket(0x1f, 0x5, 0x8) setsockopt$sock_timeval(r7, 0x1, 0x15, 0x0, 0x0) connect(r7, &(0x7f000001a880)=@generic={0x1f, "0102030405060100"}, 0x80) close_range(r4, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mount$overlay(0x0, &(0x7f00000004c0)='./cgroup\x00', 0x0, 0x8003a, &(0x7f00000002c0)={[], [{@seclabel}, {@fsuuid={'fsuuid', 0x3d, {[0x33, 0x61, 0x63, 0x63, 0x38, 0x62, 0x34, 0x31], 0x2d, [0x39, 0x65, 0x61, 0x65], 0x2d, [0x61, 0x58, 0x30, 0x32], 0x2d, [0x31, 0x61, 0x63, 0x61], 0x2d, [0x38, 0x30, 0x34, 0x31, 0x63, 0x66, 0x34, 0x37]}}}, {@dont_appraise}, {@smackfshat={'smackfshat', 0x3d, 'netbios-ns\x00'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@obj_role={'obj_role', 0x3d, 'j\x99\xf0\xd1y\xf0\xfb\x00\xd7u\x94\xb0B\x7f\x81A\xf2\xe29D1\x90F02a7\xc4^\xcf\xa5\xc7\xae\x98vz\x87+A\xc2\x92%\v7\x1c\xf0#.n\x93&\x11\xff\x82>^2\x19\xf6r]du\xdb\x8a\xb3v\a>c\x8az\xf8\xa2 9\xces\xf4-\xd0\x9fgW\xc6\v\xe7\xd4,}\xaa\xad\xca&o;e\xe6\x19=?\xc2L\xaa\xe3\xec\xc8N\xc5\xb6\"\xc7\xf4\x86u\x84c\xe2\x03\x14\xbcD\x83\x10\xf0\tt.W\xe1\xb35\xdb<\xcc\xb4#@\xb3\x18J\xb2.\xc7\x13y\x1a\xecI\x83\x1e\x8f\x96+Z\xd3%\x06\xfe\x91\xe2\xf2gw\x1e\xf8\xc4\x9eV'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@func={'func', 0x3d, 'FILE_CHECK'}}]}) 10.536275413s ago: executing program 3 (id=2532): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) fanotify_init(0x200, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000844, &(0x7f0000b63fe4), 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}], 0x20}, 0x80) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000001080)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2425, 0x42, 0x1000002, 0x8e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x69}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe7d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 9.979710791s ago: executing program 7 (id=2533): syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x180862) r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x59a6b28c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000100)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r4, &(0x7f00000007c0)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x0, 0x0) socket(0x10, 0x803, 0x0) r5 = add_key$keyring(&(0x7f0000019800), &(0x7f0000019840)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(0x0, &(0x7f0000019880)={'syz', 0x1}, 0x0, 0x0, r5) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r6, 0x800448d3, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000019a40)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) write$binfmt_register(r0, &(0x7f0000019a80)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x7, 0x3a, '&:\\', 0x3a, '\x00', 0x3a, './file0'}, 0x2b) syz_usb_connect(0x2, 0x24, 0x0, 0x0) 6.781036458s ago: executing program 7 (id=2534): r0 = open$dir(&(0x7f0000000100)='./proc\x00', 0x301080, 0x51) mkdirat(r0, &(0x7f0000000080)='./proc\x00', 0xfa) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x4000, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000003dc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000003e00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003e40)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8924, &(0x7f0000003f00)={'wlan0\x00', 0x1}) r4 = openat(r0, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000200)) r5 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$mtd(&(0x7f0000003ec0), 0x46, 0x1) ioctl$MEMREADOOB64(r6, 0x1269, &(0x7f0000003f40)={0x1, 0x0, 0x0, &(0x7f0000003f80)}) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x804818, &(0x7f00000002c0)=ANY=[@ANYRES64=r3, @ANYRESDEC, @ANYBLOB="0c2ec34edb42fe4f2c1b832d9141290140e677e53cc188dc415811a2970bbb79c9fe1c95293dbe00000036b03632dab46a43226a89c37f32b221bf1e737101a03cdb083ffc8585af679581ab62438f23ef4adeb4629413", @ANYRESDEC=r5, @ANYBLOB="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", @ANYRESOCT=r5, @ANYRES8, @ANYBLOB="91156f62712814b49a095a3b11802840d5afbf5494fe15a50de44c5080456ecf73e895d0e95d2b9738f5c2f9141a2fe0243540cf7faf3a065ee17c6403c7b9d550cea8f851f24b4b107003687cc27c2908639ee4bf5469ee594225359e162d37939f9327604c178af4866c3b851cb7d9fab7ea0f080e015d093b7ef91ff01fb2367f7fcef2fb197d5af62a8c1f1e8171dce3393d96c5666b1082d0a453426b16a9d539b68863346f2abb04cf448db1a4713281b7ff0da0b72f32c349be1a627c64a6", @ANYRES8=r5, @ANYBLOB="b209eb6ac758b26226e3afb394a796baf3c6ce63c6342fceeedece41257e82ae0c182b8db1d9bcee3c8cc711a99a1b54089087c846cdf5b62cf323b61a14c81100aa81ab73f3ed2ef2c4ffd4000435582841d1ec94cab660ebe3c11acdffc890d218a41f668954cb9f57fa7f418649"], 0x2, 0x56d, &(0x7f00000014c0)="$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") name_to_handle_at(0xffffffffffffffff, &(0x7f0000001a80)='./file1\x00', &(0x7f0000001ac0)=@fuse_with_parent={0x18, 0x82, {{0x2, 0xe, 0xd3ac}, {0xffffffff, 0x10400}}}, &(0x7f0000001b00), 0x1000) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000180)) write$make_it_fail(0xffffffffffffffff, &(0x7f00000000c0)='Y\x00', 0x2) write(r4, &(0x7f0000000000)='3', 0x4e) capset(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001b40)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000001b80)='./proc\x00', &(0x7f0000001bc0)='proc\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000001c00)='./proc/sys/kernel/watchdog_thresh\x00', 0x802, 0x134) read$FUSE(r7, &(0x7f0000001c40)={0x2020}, 0x2020) fsopen(&(0x7f0000000040)='ceph\x00', 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000003c80)={0x0, 0x0, &(0x7f0000003cc0)={&(0x7f0000003d00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x9c}}, 0x4004) socket$inet6_tcp(0xa, 0x1, 0x0) 6.570767303s ago: executing program 3 (id=2535): syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x180862) r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x59a6b28c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000100)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r4, &(0x7f00000007c0)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f00000197c0)=0x7) socket(0x10, 0x803, 0x0) r5 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key(0x0, &(0x7f0000019880)={'syz', 0x1}, 0x0, 0x0, r5) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r6, 0x800448d3, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000019a40)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) write$binfmt_register(r0, &(0x7f0000019a80)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x7, 0x3a, '&:\\', 0x3a, '\x00', 0x3a, './file0'}, 0x2b) syz_usb_connect(0x2, 0x24, 0x0, 0x0) 6.445799499s ago: executing program 1 (id=2536): syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x180862) r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x59a6b28c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000100)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r4, &(0x7f00000007c0)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x0, 0x0) socket(0x10, 0x803, 0x0) r5 = add_key$keyring(&(0x7f0000019800), &(0x7f0000019840)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(0x0, &(0x7f0000019880)={'syz', 0x1}, 0x0, 0x0, r5) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r6, 0x800448d3, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000019a40)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) write$binfmt_register(r0, &(0x7f0000019a80)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x7, 0x3a, '&:\\', 0x3a, '\x00', 0x3a, './file0'}, 0x2b) syz_usb_connect(0x2, 0x24, 0x0, 0x0) 4.611211155s ago: executing program 3 (id=2537): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000001c0), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000200), 0x10106, 0x2, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000580)={0xe, {"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", 0x942}}, 0x1006) r3 = syz_open_procfs(0x0, &(0x7f00000015c0)='pagemap\x00') pread64(r3, &(0x7f0000001600)=""/102400, 0x19000, 0x1000000000) r4 = socket(0x80000000000000a, 0x2, 0x0) r5 = syz_open_dev$usbfs(&(0x7f000001a600), 0x76, 0x1) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f000001a640)=@urb_type_control={0x2, {}, 0x2, 0x40, &(0x7f000001a680)={0x0, 0xb, 0xfffe, 0x42}, 0x8, 0x203ffffd, 0x300, 0x0, 0xeeb, 0x20002, 0x0}) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f000001a6c0)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f000001a700)="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f", 0x16) nanosleep(&(0x7f000001a780)={0x0, 0x5f5e100}, 0x0) setns(0xc9, 0x0) r7 = socket(0x1f, 0x5, 0x8) setsockopt$sock_timeval(r7, 0x1, 0x15, &(0x7f000001a7c0)={0x0, 0x3e8}, 0x10) connect(r7, &(0x7f000001a880)=@generic={0x1f, "0102030405060100"}, 0x80) close_range(r4, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mount$overlay(0x0, &(0x7f00000004c0)='./cgroup\x00', 0x0, 0x8003a, &(0x7f00000002c0)={[], [{@seclabel}, {@fsuuid={'fsuuid', 0x3d, {[0x33, 0x61, 0x63, 0x63, 0x38, 0x62, 0x34, 0x31], 0x2d, [0x39, 0x65, 0x61, 0x65], 0x2d, [0x61, 0x58, 0x30, 0x32], 0x2d, [0x31, 0x61, 0x63, 0x61], 0x2d, [0x38, 0x30, 0x34, 0x31, 0x63, 0x66, 0x34, 0x37]}}}, {@dont_appraise}, {@smackfshat={'smackfshat', 0x3d, 'netbios-ns\x00'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@obj_role={'obj_role', 0x3d, 'j\x99\xf0\xd1y\xf0\xfb\x00\xd7u\x94\xb0B\x7f\x81A\xf2\xe29D1\x90F02a7\xc4^\xcf\xa5\xc7\xae\x98vz\x87+A\xc2\x92%\v7\x1c\xf0#.n\x93&\x11\xff\x82>^2\x19\xf6r]du\xdb\x8a\xb3v\a>c\x8az\xf8\xa2 9\xces\xf4-\xd0\x9fgW\xc6\v\xe7\xd4,}\xaa\xad\xca&o;e\xe6\x19=?\xc2L\xaa\xe3\xec\xc8N\xc5\xb6\"\xc7\xf4\x86u\x84c\xe2\x03\x14\xbcD\x83\x10\xf0\tt.W\xe1\xb35\xdb<\xcc\xb4#@\xb3\x18J\xb2.\xc7\x13y\x1a\xecI\x83\x1e\x8f\x96+Z\xd3%\x06\xfe\x91\xe2\xf2gw\x1e\xf8\xc4\x9eV'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@func={'func', 0x3d, 'FILE_CHECK'}}]}) 900.469563ms ago: executing program 1 (id=2538): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) timer_create(0x0, &(0x7f0000000140)={0x0, 0x21, 0x800000000004}, &(0x7f00000001c0)=0x0) timer_settime(r0, 0x1, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/ptype\x00') r1 = syz_create_resource$futex(&(0x7f0000000240)=0x1) r2 = syz_create_resource$futex(&(0x7f0000000280)=0x1) futex(r2, 0xb, 0x1, 0x0, r1, 0x403) futex(r2, 0xc, 0x1, 0x0, r1, 0x1) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x13, 0x401d031, 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x0, 0x1, 0x7ffc0002}]}) r3 = getpgrp(0x0) kcmp(r3, r3, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0xa02) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r4, 0x40049421, 0x2) ioctl$DVB_DEMUX_DMX_SET_FILTER(r4, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5}) preadv(r4, &(0x7f0000000480), 0x0, 0x1, 0x7fff) ioctl$DVB_DEMUX_DMX_STOP(r4, 0x6f2a) 425.45462ms ago: executing program 7 (id=2539): socket$tipc(0x1e, 0x5, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141102) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000180)="94", 0xf000}, {0x0}], 0x2) openat$vimc1(0xffffff9c, &(0x7f00000001c0), 0x2, 0x0) pselect6(0x40, &(0x7f0000000200)={0x4, 0x2, 0x8000, 0x7, 0x8000000000000000, 0xfffffbfffffffffd, 0x1}, 0x0, &(0x7f0000000380)={0x1fe, 0x9, 0x0, 0x3, 0x0, 0x2c2c, 0x0, 0xffffffffffffffff}, 0x0, 0x0) 0s ago: executing program 3 (id=2540): socket$tipc(0x1e, 0x5, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141102) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000180)="94", 0xf000}, {0x0}], 0x2) openat$vimc1(0xffffff9c, &(0x7f00000001c0), 0x2, 0x0) pselect6(0x40, &(0x7f0000000200)={0x4, 0x2, 0x8000, 0x7, 0x8000000000000000, 0xfffffbfffffffffd, 0x1}, 0x0, &(0x7f0000000380)={0x1fe, 0x9, 0x0, 0x3, 0x0, 0x2c2c, 0x0, 0xffffffffffffffff}, 0x0, 0x0) close(0x4) kernel console output (not intermixed with test programs): [ 132.185436][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.185541][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.372910][ T6593] loop2: detected capacity change from 0 to 49152 [ 132.393443][ T5801] cdc_acm 6-1:1.0: ttyACM0: USB ACM device [ 132.400165][ T6593] EXT4-fs (loop2): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 132.509280][ T6593] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w with ordered data mode. Quota mode: none. [ 132.509408][ T6593] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.642215][ T6597] loop1: detected capacity change from 0 to 32768 [ 132.648356][ T6597] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.172 (6597) [ 132.655803][ T6238] veth0_vlan: entered promiscuous mode [ 132.693493][ T5801] usb 6-1: USB disconnect, device number 7 [ 132.716645][ T6238] veth1_vlan: entered promiscuous mode [ 132.717022][ T6597] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 132.717052][ T6597] BTRFS info (device loop1): using crc32c checksum algorithm [ 132.841832][ T5631] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.868105][ T6616] loop4: detected capacity change from 0 to 33792 [ 132.869094][ T6616] EXT4-fs: Ignoring removed nomblk_io_submit option [ 132.939085][ T6597] BTRFS info (device loop1): allowing degraded mounts [ 132.939112][ T6597] BTRFS info (device loop1): enabling ssd optimizations [ 132.939130][ T6597] BTRFS info (device loop1): turning on flush-on-commit [ 132.939147][ T6597] BTRFS info (device loop1): enabling free space tree [ 132.939164][ T6597] BTRFS info (device loop1): enabling auto defrag [ 132.939182][ T6597] BTRFS info (device loop1): force zlib compression, level 3 [ 133.022080][ T6616] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.036093][ T6238] veth0_macvtap: entered promiscuous mode [ 133.053374][ T6238] veth1_macvtap: entered promiscuous mode [ 133.155444][ T6238] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 133.174567][ T6238] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 133.229600][ T5630] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 133.271661][ T77] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.271712][ T77] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.271752][ T77] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.283415][ T77] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.483716][ T6614] loop0: detected capacity change from 0 to 32768 [ 133.549045][ T6639] syz.1.178 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 133.631570][ T5785] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 133.784899][ T5785] usb 3-1: New USB device found: idVendor=0458, idProduct=5013, bcdDevice=0.40 [ 133.786005][ T5785] usb 3-1: too many endpoints for config 1 interface 0 altsetting 13: 33, using maximum allowed: 30 [ 133.786050][ T5785] usb 3-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 133.786081][ T5785] usb 3-1: config 1 interface 0 has no altsetting 0 [ 133.804723][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.804744][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.819318][ T5635] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.863233][ T5785] usb 3-1: string descriptor 0 read error: -22 [ 133.863394][ T5785] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.957949][ T6614] Bad index:0 in slot in dtpage [ 133.957949][ T6614] [ 133.957972][ T6614] ERROR: (device loop0): dtSearch: DT_GETPAGE: dtree page corrupt [ 133.957972][ T6614] [ 133.979160][ T6614] ERROR: (device loop0): remounting filesystem as read-only [ 133.979209][ T6614] jfs_lookup: dtSearch returned -5 [ 134.101081][ T6647] netlink: 'syz.5.179': attribute type 2 has an invalid length. [ 134.477211][ T5785] input: HID 0458:5013 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/0003:0458:5013.0008/input/input11 [ 134.625586][ T5785] input: HID 0458:5013 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/0003:0458:5013.0008/input/input12 [ 134.848599][ T5785] kye 0003:0458:5013.0008: input,hiddev0,hidraw0: USB HID v0.04 Device [HID 0458:5013] on usb-dummy_hcd.2-1/input0 [ 134.895691][ T5785] usb 3-1: USB disconnect, device number 6 [ 135.060703][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.060727][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.178779][ T6656] 0: reclassify loop, rule prio 0, protocol 03 [ 135.209455][ T6654] fido_id[6654]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 135.324397][ T6659] FAULT_INJECTION: forcing a failure. [ 135.324397][ T6659] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 135.324436][ T6659] CPU: 1 UID: 0 PID: 6659 Comm: syz.4.184 Tainted: G L syzkaller #0 PREEMPT(full) [ 135.324470][ T6659] Tainted: [L]=SOFTLOCKUP [ 135.324480][ T6659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 135.324495][ T6659] Call Trace: [ 135.324504][ T6659] [ 135.324515][ T6659] dump_stack_lvl+0xe8/0x150 [ 135.324560][ T6659] should_fail_ex+0x3eb/0x540 [ 135.324600][ T6659] _copy_from_user+0x2d/0xb0 [ 135.324637][ T6659] do_ipv6_mcast_group_source+0x24a/0x4c0 [ 135.324674][ T6659] ? __pfx_do_ipv6_mcast_group_source+0x10/0x10 [ 135.324708][ T6659] ? srso_alias_return_thunk+0x5/0xfbef5 [ 135.324745][ T6659] ? srso_alias_return_thunk+0x5/0xfbef5 [ 135.324776][ T6659] ? srso_alias_return_thunk+0x5/0xfbef5 [ 135.324813][ T6659] ? look_up_lock_class+0x57/0x110 [ 135.324854][ T6659] ? srso_alias_return_thunk+0x5/0xfbef5 [ 135.324884][ T6659] ? register_lock_class+0x31/0x2e0 [ 135.324916][ T6659] ? srso_alias_return_thunk+0x5/0xfbef5 [ 135.324954][ T6659] ? srso_alias_return_thunk+0x5/0xfbef5 [ 135.324984][ T6659] ? __lock_acquire+0x747/0x2de0 [ 135.325027][ T6659] ? srso_alias_return_thunk+0x5/0xfbef5 [ 135.325096][ T6659] ? do_ipv6_setsockopt+0x956/0x2960 [ 135.325128][ T6659] ? __local_bh_enable_ip+0xd6/0x140 [ 135.325165][ T6659] ? srso_alias_return_thunk+0x5/0xfbef5 [ 135.325200][ T6659] do_ipv6_setsockopt+0x17a7/0x2960 [ 135.325238][ T6659] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 135.325265][ T6659] ? aa_inet_opt_perm+0x94d/0xcd0 [ 135.325304][ T6659] ? __pfx_aa_inet_opt_perm+0x10/0x10 [ 135.325340][ T6659] ? __raw_spin_lock_init+0x45/0x100 [ 135.325370][ T6659] ? srso_alias_return_thunk+0x5/0xfbef5 [ 135.325407][ T6659] ? srso_alias_return_thunk+0x5/0xfbef5 [ 135.325437][ T6659] ? do_futex+0x3e7/0x4e0 [ 135.325461][ T6659] ? srso_alias_return_thunk+0x5/0xfbef5 [ 135.325490][ T6659] ? __asan_memcpy+0x40/0x70 [ 135.325528][ T6659] ? srso_alias_return_thunk+0x5/0xfbef5 [ 135.325557][ T6659] ? lock_acquire+0x115/0x350 [ 135.325597][ T6659] ? srso_alias_return_thunk+0x5/0xfbef5 [ 135.325631][ T6659] ? srso_alias_return_thunk+0x5/0xfbef5 [ 135.325661][ T6659] ? aa_sock_opt_perm+0xe1/0x1e0 [ 135.325692][ T6659] ipv6_setsockopt+0x59/0x170 [ 135.325721][ T6659] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 135.325751][ T6659] do_sock_setsockopt+0x17c/0x1b0 [ 135.325782][ T6659] ? srso_alias_return_thunk+0x5/0xfbef5 [ 135.325823][ T6659] __x64_sys_setsockopt+0x13d/0x1b0 [ 135.325861][ T6659] do_syscall_64+0x16a/0x530 [ 135.325900][ T6659] ? trace_irq_disable+0x3b/0x140 [ 135.325936][ T6659] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.325970][ T6659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.325996][ T6659] RIP: 0033:0x7f17d87a94d9 [ 135.326018][ T6659] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.326039][ T6659] RSP: 002b:00007f17d9746028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 135.326066][ T6659] RAX: ffffffffffffffda RBX: 00007f17d8a25fa0 RCX: 00007f17d87a94d9 [ 135.326085][ T6659] RDX: 000000000000002e RSI: 0000000000000029 RDI: 0000000000000005 [ 135.326101][ T6659] RBP: 00007f17d883804e R08: 0000000000000108 R09: 0000000000000000 [ 135.326118][ T6659] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000000 [ 135.326135][ T6659] R13: 00007f17d8a26038 R14: 00007f17d8a25fa0 R15: 00007ffee09a7818 [ 135.326176][ T6659] [ 135.895662][ T6677] FAULT_INJECTION: forcing a failure. [ 135.895662][ T6677] name failslab, interval 1, probability 0, space 0, times 0 [ 135.895704][ T6677] CPU: 1 UID: 0 PID: 6677 Comm: syz.1.188 Tainted: G L syzkaller #0 PREEMPT(full) [ 135.895739][ T6677] Tainted: [L]=SOFTLOCKUP [ 135.895748][ T6677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 135.895764][ T6677] Call Trace: [ 135.895774][ T6677] [ 135.895785][ T6677] dump_stack_lvl+0xe8/0x150 [ 135.895839][ T6677] should_fail_ex+0x3eb/0x540 [ 135.895880][ T6677] should_failslab+0xa8/0x100 [ 135.895921][ T6677] ? mempool_init_node+0x1f4/0x510 [ 135.895951][ T6677] kmem_cache_alloc_noprof+0x9c/0x600 [ 135.895987][ T6677] ? kmem_cache_alloc_noprof+0x151/0x600 [ 135.896018][ T6677] ? mempool_init_node+0x1f4/0x510 [ 135.896046][ T6677] ? srso_alias_return_thunk+0x5/0xfbef5 [ 135.896080][ T6677] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 135.896109][ T6677] mempool_init_node+0x1f4/0x510 [ 135.896148][ T6677] ? __pfx_mempool_free_slab+0x10/0x10 [ 135.896174][ T6677] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 135.896201][ T6677] mempool_init_noprof+0x3a/0x50 [ 135.896233][ T6677] bioset_init+0x5c1/0x7e0 [ 135.896269][ T6677] ? __kasan_kmalloc+0x93/0xb0 [ 135.896309][ T6677] ? __pfx_bioset_init+0x10/0x10 [ 135.896345][ T6677] ? __kmalloc_cache_noprof+0x148/0x600 [ 135.896379][ T6677] ? percpu_ref_init+0xc5/0x350 [ 135.896404][ T6677] ? percpu_ref_init+0xc5/0x350 [ 135.896439][ T6677] ? srso_alias_return_thunk+0x5/0xfbef5 [ 135.896470][ T6677] ? percpu_ref_init+0x215/0x350 [ 135.896495][ T6677] ? __pfx_no_op+0x10/0x10 [ 135.896539][ T6677] mddev_init+0x10d/0x700 [ 135.896583][ T6677] md_alloc+0xb8/0xf40 [ 135.896618][ T6677] md_alloc_and_put+0x1a/0x1f0 [ 135.896657][ T6677] add_named_array+0x240/0x350 [ 135.896695][ T6677] ? __pfx___mutex_lock+0x10/0x10 [ 135.896737][ T6677] ? __pfx_add_named_array+0x10/0x10 [ 135.896780][ T6677] ? sysfs_file_kobj+0x1a/0x230 [ 135.896827][ T6677] ? srso_alias_return_thunk+0x5/0xfbef5 [ 135.896868][ T6677] param_attr_store+0x214/0x310 [ 135.896914][ T6677] ? __pfx_param_attr_store+0x10/0x10 [ 135.896954][ T6677] ? __pfx_sysfs_kf_write+0x10/0x10 [ 135.896990][ T6677] module_attr_store+0x65/0x90 [ 135.897033][ T6677] kernfs_fop_write_iter+0x3a4/0x540 [ 135.897074][ T6677] vfs_write+0x612/0xba0 [ 135.897123][ T6677] ? __pfx_vfs_write+0x10/0x10 [ 135.897164][ T6677] ? srso_alias_return_thunk+0x5/0xfbef5 [ 135.897193][ T6677] ? __fget_files+0x3a2/0x420 [ 135.897225][ T6677] ? __fget_files+0x2a/0x420 [ 135.897263][ T6677] ? srso_alias_return_thunk+0x5/0xfbef5 [ 135.897294][ T6677] ? fdget+0x1ac/0x250 [ 135.897330][ T6677] ? srso_alias_return_thunk+0x5/0xfbef5 [ 135.897366][ T6677] ksys_write+0x150/0x270 [ 135.897407][ T6677] ? __pfx_ksys_write+0x10/0x10 [ 135.897460][ T6677] do_syscall_64+0x16a/0x530 [ 135.897499][ T6677] ? trace_irq_disable+0x3b/0x140 [ 135.897536][ T6677] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.897570][ T6677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.897601][ T6677] RIP: 0033:0x7fae1c5a94d9 [ 135.897624][ T6677] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.897646][ T6677] RSP: 002b:00007fae1d3d1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 135.897673][ T6677] RAX: ffffffffffffffda RBX: 00007fae1c825fa0 RCX: 00007fae1c5a94d9 [ 135.897692][ T6677] RDX: 0000000000000008 RSI: 0000200000000600 RDI: 0000000000000005 [ 135.897709][ T6677] RBP: 00007fae1c63804e R08: 0000000000000000 R09: 0000000000000000 [ 135.897726][ T6677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.897742][ T6677] R13: 00007fae1c826038 R14: 00007fae1c825fa0 R15: 00007ffeb1cc1168 [ 135.897784][ T6677] [ 135.934030][ T6677] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 136.601274][ T5801] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 136.641263][ T5784] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 136.762091][ T5801] usb 2-1: New USB device found: idVendor=0525, idProduct=a4a8, bcdDevice=0.41 [ 136.763425][ T5801] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 136.767476][ T5801] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 136.767503][ T5801] usb 2-1: Product: syz [ 136.767521][ T5801] usb 2-1: Manufacturer: syz [ 136.767538][ T5801] usb 2-1: SerialNumber: syz [ 136.832004][ T5784] usb 6-1: New USB device found: idVendor=046d, idProduct=c20e, bcdDevice=0.00 [ 136.834275][ T5784] usb 6-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 136.834314][ T5784] usb 6-1: config 0 interface 0 has no altsetting 0 [ 136.834350][ T5784] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.839906][ T5784] usb 6-1: config 0 descriptor?? [ 137.076243][ T5801] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 137.107778][ T5801] usb 2-1: USB disconnect, device number 7 [ 137.129454][ T5801] usblp0: removed [ 137.196900][ T6688] loop0: detected capacity change from 0 to 40427 [ 137.240901][ T6688] F2FS-fs (loop0): Corrupted extension count (64 + 1 > 64) [ 137.240932][ T6688] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 137.267523][ T6688] F2FS-fs (loop0): Image doesn't support compression [ 137.284433][ T6688] F2FS-fs (loop0): invalid crc value [ 137.328925][ T5784] logitech 0003:046D:C20E.0009: rdesc size test failed for formula gp [ 137.347740][ T5784] logitech 0003:046D:C20E.0009: hidraw0: USB HID vf.fe Device [HID 046d:c20e] on usb-dummy_hcd.5-1/input0 [ 137.486486][ T6688] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 137.503586][ T6688] F2FS-fs (loop0): f2fs_disable_checkpoint starts, unusable: 0 [ 137.503613][ T6688] F2FS-fs (loop0): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 137.503845][ T6688] F2FS-fs (loop0): Start checkpoint disabled! [ 137.555384][ T6688] F2FS-fs (loop0): f2fs_disable_checkpoint finishes, err:0 [ 137.572023][ T6688] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 137.572052][ T6688] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 137.577697][ T5784] usb 6-1: USB disconnect, device number 8 [ 137.644151][ T6713] fido_id[6713]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 137.680991][ T6712] overlay: filesystem on ./file0 not supported as upperdir [ 137.696453][ T6688] F2FS-fs (loop0): disabling checkpoint not compatible with read-only [ 137.781859][ T3295] kworker/u8:9: attempt to access beyond end of device [ 137.781859][ T3295] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 137.784349][ T3295] CPU: 0 UID: 0 PID: 3295 Comm: kworker/u8:9 Tainted: G L syzkaller #0 PREEMPT(full) [ 137.784386][ T3295] Tainted: [L]=SOFTLOCKUP [ 137.784396][ T3295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 137.784412][ T3295] Workqueue: writeback wb_workfn (flush-7:0) [ 137.784463][ T3295] Call Trace: [ 137.784472][ T3295] [ 137.784483][ T3295] dump_stack_lvl+0xe8/0x150 [ 137.784527][ T3295] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 137.784577][ T3295] f2fs_write_end_bio+0x118e/0x15d0 [ 137.784632][ T3295] __submit_merged_bio+0x258/0x6a0 [ 137.784656][ T3295] ? srso_alias_return_thunk+0x5/0xfbef5 [ 137.784686][ T3295] ? rcu_is_watching+0x16/0xb0 [ 137.784733][ T3295] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 137.784779][ T3295] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 137.784839][ T3295] ? srso_alias_return_thunk+0x5/0xfbef5 [ 137.784880][ T3295] f2fs_write_data_pages+0x2a13/0x36e0 [ 137.784911][ T3295] ? srso_alias_return_thunk+0x5/0xfbef5 [ 137.784984][ T3295] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 137.785079][ T3295] ? __pfx___skb_flow_dissect+0x10/0x10 [ 137.785132][ T3295] ? __lock_acquire+0x747/0x2de0 [ 137.785173][ T3295] ? srso_alias_return_thunk+0x5/0xfbef5 [ 137.785220][ T3295] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 137.785252][ T3295] do_writepages+0x338/0x560 [ 137.785290][ T3295] ? srso_alias_return_thunk+0x5/0xfbef5 [ 137.785325][ T3295] ? reacquire_held_locks+0x117/0x1a0 [ 137.785363][ T3295] ? writeback_sb_inodes+0x450/0x1af0 [ 137.785401][ T3295] __writeback_single_inode+0x136/0x1220 [ 137.785436][ T3295] ? srso_alias_return_thunk+0x5/0xfbef5 [ 137.785467][ T3295] ? do_raw_spin_unlock+0xf5/0x200 [ 137.785501][ T3295] writeback_sb_inodes+0x9de/0x1af0 [ 137.785530][ T3295] ? __lock_acquire+0x747/0x2de0 [ 137.785570][ T3295] ? __lock_acquire+0x747/0x2de0 [ 137.785614][ T3295] ? __lock_acquire+0x747/0x2de0 [ 137.785657][ T3295] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 137.785738][ T3295] ? srso_alias_return_thunk+0x5/0xfbef5 [ 137.785769][ T3295] ? rcu_is_watching+0x16/0xb0 [ 137.785808][ T3295] ? srso_alias_return_thunk+0x5/0xfbef5 [ 137.785838][ T3295] ? queue_io+0x2d3/0x470 [ 137.785872][ T3295] wb_writeback+0x41c/0xad0 [ 137.785905][ T3295] ? queue_io+0x201/0x470 [ 137.785942][ T3295] ? __pfx_wb_writeback+0x10/0x10 [ 137.785968][ T3295] ? do_raw_spin_lock+0x12b/0x2f0 [ 137.786015][ T3295] wb_workfn+0x431/0x10f0 [ 137.786060][ T3295] ? __lock_acquire+0x747/0x2de0 [ 137.786107][ T3295] ? __pfx_wb_workfn+0x10/0x10 [ 137.786159][ T3295] ? srso_alias_return_thunk+0x5/0xfbef5 [ 137.786188][ T3295] ? do_raw_spin_lock+0x12b/0x2f0 [ 137.786217][ T3295] ? srso_alias_return_thunk+0x5/0xfbef5 [ 137.786257][ T3295] ? srso_alias_return_thunk+0x5/0xfbef5 [ 137.786286][ T3295] ? lock_acquire+0x115/0x350 [ 137.786326][ T3295] ? srso_alias_return_thunk+0x5/0xfbef5 [ 137.786364][ T3295] ? rcu_is_watching+0x16/0xb0 [ 137.786403][ T3295] ? srso_alias_return_thunk+0x5/0xfbef5 [ 137.786436][ T3295] ? process_scheduled_works+0x97a/0x1630 [ 137.786477][ T3295] process_scheduled_works+0xc3d/0x1630 [ 137.786517][ T3295] ? srso_alias_return_thunk+0x5/0xfbef5 [ 137.786587][ T3295] ? __pfx_process_scheduled_works+0x10/0x10 [ 137.786636][ T3295] ? srso_alias_return_thunk+0x5/0xfbef5 [ 137.786667][ T3295] ? assign_work+0x3cf/0x5d0 [ 137.786713][ T3295] worker_thread+0xa47/0xfb0 [ 137.786788][ T3295] kthread+0x38b/0x480 [ 137.786821][ T3295] ? __pfx_worker_thread+0x10/0x10 [ 137.786859][ T3295] ? __pfx_kthread+0x10/0x10 [ 137.786891][ T3295] ret_from_fork+0x514/0xb70 [ 137.786926][ T3295] ? __pfx_ret_from_fork+0x10/0x10 [ 137.786956][ T3295] ? srso_alias_return_thunk+0x5/0xfbef5 [ 137.786986][ T3295] ? __switch_to+0xc78/0x1410 [ 137.787015][ T3295] ? __pfx_kthread+0x10/0x10 [ 137.787047][ T3295] ret_from_fork_asm+0x1a/0x30 [ 137.787096][ T3295] [ 137.787188][ T3295] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 137.787478][ T3295] CPU: 0 UID: 0 PID: 3295 Comm: kworker/u8:9 Tainted: G L syzkaller #0 PREEMPT(full) [ 137.787514][ T3295] Tainted: [L]=SOFTLOCKUP [ 137.787523][ T3295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 137.787539][ T3295] Workqueue: writeback wb_workfn (flush-7:0) [ 137.787585][ T3295] Call Trace: [ 137.787596][ T3295] [ 137.787606][ T3295] dump_stack_lvl+0xe8/0x150 [ 137.787649][ T3295] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 137.787698][ T3295] f2fs_write_end_bio+0x118e/0x15d0 [ 137.787755][ T3295] __submit_merged_bio+0x258/0x6a0 [ 137.787781][ T3295] ? srso_alias_return_thunk+0x5/0xfbef5 [ 137.787812][ T3295] ? rcu_is_watching+0x16/0xb0 [ 137.787858][ T3295] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 137.787906][ T3295] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 137.787966][ T3295] ? srso_alias_return_thunk+0x5/0xfbef5 [ 137.788008][ T3295] f2fs_write_data_pages+0x2a13/0x36e0 [ 137.788039][ T3295] ? srso_alias_return_thunk+0x5/0xfbef5 [ 137.788114][ T3295] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 137.788215][ T3295] ? __pfx___skb_flow_dissect+0x10/0x10 [ 137.788268][ T3295] ? __lock_acquire+0x747/0x2de0 [ 137.788318][ T3295] ? srso_alias_return_thunk+0x5/0xfbef5 [ 137.788365][ T3295] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 137.788398][ T3295] do_writepages+0x338/0x560 [ 137.788436][ T3295] ? srso_alias_return_thunk+0x5/0xfbef5 [ 137.788466][ T3295] ? reacquire_held_locks+0x117/0x1a0 [ 137.788504][ T3295] ? writeback_sb_inodes+0x450/0x1af0 [ 137.788542][ T3295] __writeback_single_inode+0x136/0x1220 [ 137.788577][ T3295] ? srso_alias_return_thunk+0x5/0xfbef5 [ 137.788607][ T3295] ? do_raw_spin_unlock+0xf5/0x200 [ 137.788639][ T3295] writeback_sb_inodes+0x9de/0x1af0 [ 137.788669][ T3295] ? __lock_acquire+0x747/0x2de0 [ 137.788715][ T3295] ? __lock_acquire+0x747/0x2de0 [ 137.788756][ T3295] ? __lock_acquire+0x747/0x2de0 [ 137.788833][ T3295] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 137.788917][ T3295] ? srso_alias_return_thunk+0x5/0xfbef5 [ 137.788948][ T3295] ? rcu_is_watching+0x16/0xb0 [ 137.788988][ T3295] ? srso_alias_return_thunk+0x5/0xfbef5 [ 137.789018][ T3295] ? queue_io+0x2d3/0x470 [ 137.789053][ T3295] wb_writeback+0x41c/0xad0 [ 137.789087][ T3295] ? queue_io+0x201/0x470 [ 137.789124][ T3295] ? __pfx_wb_writeback+0x10/0x10 [ 137.789152][ T3295] ? do_raw_spin_lock+0x12b/0x2f0 [ 137.789199][ T3295] wb_workfn+0x431/0x10f0 [ 137.789245][ T3295] ? __lock_acquire+0x747/0x2de0 [ 137.789294][ T3295] ? __pfx_wb_workfn+0x10/0x10 [ 137.789356][ T3295] ? srso_alias_return_thunk+0x5/0xfbef5 [ 137.789386][ T3295] ? do_raw_spin_lock+0x12b/0x2f0 [ 137.789416][ T3295] ? srso_alias_return_thunk+0x5/0xfbef5 [ 137.789456][ T3295] ? srso_alias_return_thunk+0x5/0xfbef5 [ 137.789485][ T3295] ? lock_acquire+0x115/0x350 [ 137.789520][ T3295] ? srso_alias_return_thunk+0x5/0xfbef5 [ 137.789559][ T3295] ? rcu_is_watching+0x16/0xb0 [ 137.789598][ T3295] ? srso_alias_return_thunk+0x5/0xfbef5 [ 137.789630][ T3295] ? process_scheduled_works+0x97a/0x1630 [ 137.789671][ T3295] process_scheduled_works+0xc3d/0x1630 [ 137.789711][ T3295] ? srso_alias_return_thunk+0x5/0xfbef5 [ 137.789780][ T3295] ? __pfx_process_scheduled_works+0x10/0x10 [ 137.789828][ T3295] ? srso_alias_return_thunk+0x5/0xfbef5 [ 137.789858][ T3295] ? assign_work+0x3cf/0x5d0 [ 137.789904][ T3295] worker_thread+0xa47/0xfb0 [ 137.789981][ T3295] kthread+0x38b/0x480 [ 137.790014][ T3295] ? __pfx_worker_thread+0x10/0x10 [ 137.790052][ T3295] ? __pfx_kthread+0x10/0x10 [ 137.790084][ T3295] ret_from_fork+0x514/0xb70 [ 137.790119][ T3295] ? __pfx_ret_from_fork+0x10/0x10 [ 137.790148][ T3295] ? srso_alias_return_thunk+0x5/0xfbef5 [ 137.790178][ T3295] ? __switch_to+0xc78/0x1410 [ 137.790207][ T3295] ? __pfx_kthread+0x10/0x10 [ 137.790239][ T3295] ret_from_fork_asm+0x1a/0x30 [ 137.790288][ T3295] [ 137.862605][ T25] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 137.872394][ T3295] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 138.021358][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 138.023570][ T25] usb 5-1: New USB device found: idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 138.027719][ T25] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 138.027760][ T25] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 138.027807][ T25] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 138.027838][ T25] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 138.027869][ T25] usb 5-1: config 0 interface 0 has no altsetting 0 [ 138.053088][ T25] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 138.053121][ T25] usb 5-1: Product: syz [ 138.053138][ T25] usb 5-1: Manufacturer: syz [ 138.053156][ T25] usb 5-1: SerialNumber: syz [ 138.066308][ T25] usb 5-1: config 0 descriptor?? [ 138.093279][ T25] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 138.119612][ T25] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 138.752795][ T6719] ldusb 5-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 138.753714][ T5784] usb 5-1: USB disconnect, device number 4 [ 138.753719][ C1] ldusb 5-1:0.0: usb_submit_urb failed (-19) [ 138.755330][ T6728] ldusb 5-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 138.798896][ T5784] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 138.952443][ T5801] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 139.113926][ T5801] usb 7-1: Using ep0 maxpacket: 32 [ 139.117174][ T5801] usb 7-1: New USB device found: idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 139.118542][ T5801] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 139.118569][ T5801] usb 7-1: config 0 has no interface number 0 [ 139.120647][ T5801] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.120673][ T5801] usb 7-1: Product: syz [ 139.120690][ T5801] usb 7-1: Manufacturer: syz [ 139.120707][ T5801] usb 7-1: SerialNumber: syz [ 139.143228][ T5801] usb 7-1: config 0 descriptor?? [ 139.617316][ T5801] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 139.617354][ T5801] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 139.657477][ T6765] ip_tables: iptables: counters copy to user failed while replacing table [ 139.721245][ T25] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 139.798132][ T6769] loop1: detected capacity change from 0 to 256 [ 139.879059][ T25] usb 3-1: unable to get BOS descriptor or descriptor too short [ 139.880088][ T25] usb 3-1: not running at top speed; connect to a high speed hub [ 139.880121][ T25] usb 3-1: New USB device found: idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 139.912602][ T25] usb 3-1: config 14 has an invalid interface number: 57 but max is 1 [ 139.912631][ T25] usb 3-1: config 14 has an invalid interface number: 228 but max is 1 [ 139.912656][ T25] usb 3-1: config 14 has no interface number 0 [ 139.912675][ T25] usb 3-1: config 14 has no interface number 1 [ 139.912739][ T25] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 139.912765][ T25] usb 3-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0x1B, changing to 0xB [ 139.912804][ T25] usb 3-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 139.912834][ T25] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64 [ 139.912866][ T25] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 10 [ 139.912908][ T25] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0 [ 139.912934][ T25] usb 3-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 139.912966][ T25] usb 3-1: config 14 interface 57 has no altsetting 0 [ 139.912988][ T25] usb 3-1: config 14 interface 228 has no altsetting 0 [ 139.919587][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.919615][ T25] usb 3-1: Product: syz [ 139.919632][ T25] usb 3-1: Manufacturer: syz [ 139.919651][ T25] usb 3-1: SerialNumber: syz [ 140.137561][ T6773] loop1: detected capacity change from 256 to 0 [ 140.150942][ C0] I/O error, dev loop1, sector 144 op 0x1:(WRITE) flags 0x800 phys_seg 4 prio class 2 [ 140.277949][ T5630] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 140.277974][ T5630] FAT-fs (loop1): Filesystem has been set read-only [ 140.278531][ T5630] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 140.469046][ T25] legousbtower 3-1:14.57: interrupt endpoints not found [ 140.679084][ T6786] FAULT_INJECTION: forcing a failure. [ 140.679084][ T6786] name failslab, interval 1, probability 0, space 0, times 0 [ 140.679151][ T6786] CPU: 0 UID: 0 PID: 6786 Comm: syz.5.215 Tainted: G L syzkaller #0 PREEMPT(full) [ 140.679186][ T6786] Tainted: [L]=SOFTLOCKUP [ 140.679196][ T6786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 140.679212][ T6786] Call Trace: [ 140.679221][ T6786] [ 140.679232][ T6786] dump_stack_lvl+0xe8/0x150 [ 140.679282][ T6786] should_fail_ex+0x3eb/0x540 [ 140.679324][ T6786] should_failslab+0xa8/0x100 [ 140.679368][ T6786] __kmalloc_cache_noprof+0x9e/0x600 [ 140.679405][ T6786] ? tcf_block_get_ext+0x14f/0x17d0 [ 140.679441][ T6786] ? tcf_block_get_ext+0x14f/0x17d0 [ 140.679479][ T6786] ? srso_alias_return_thunk+0x5/0xfbef5 [ 140.679517][ T6786] tcf_block_get_ext+0x14f/0x17d0 [ 140.679568][ T6786] tcf_block_get+0x67/0xa0 [ 140.679603][ T6786] ? __pfx_tcf_chain_head_change_dflt+0x10/0x10 [ 140.679648][ T6786] sfb_init+0x31/0xa0 [ 140.679671][ T6786] ? __pfx_sfb_init+0x10/0x10 [ 140.679697][ T6786] qdisc_create+0xc23/0x1450 [ 140.679734][ T6786] ? lockdep_rtnl_is_held+0x26/0x40 [ 140.679772][ T6786] ? srso_alias_return_thunk+0x5/0xfbef5 [ 140.679807][ T6786] ? qdisc_lookup+0x364/0x6c0 [ 140.679839][ T6786] tc_modify_qdisc+0x17af/0x2390 [ 140.679889][ T6786] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 140.679919][ T6786] ? __mutex_lock+0x5cd/0x15a0 [ 140.679987][ T6786] ? srso_alias_return_thunk+0x5/0xfbef5 [ 140.680027][ T6786] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 140.680058][ T6786] rtnetlink_rcv_msg+0x7b9/0xc00 [ 140.680095][ T6786] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 140.680125][ T6786] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 140.680161][ T6786] ? __copy_skb_header+0xa3/0x4a0 [ 140.680196][ T6786] ? srso_alias_return_thunk+0x5/0xfbef5 [ 140.680226][ T6786] ? __asan_memcpy+0x40/0x70 [ 140.680267][ T6786] netlink_rcv_skb+0x226/0x4a0 [ 140.680297][ T6786] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 140.680331][ T6786] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 140.680375][ T6786] ? netlink_deliver_tap+0x2e/0x1b0 [ 140.680402][ T6786] ? netlink_deliver_tap+0x2e/0x1b0 [ 140.680436][ T6786] netlink_unicast+0x8ef/0xa80 [ 140.680498][ T6786] netlink_sendmsg+0x7f0/0xb20 [ 140.680533][ T6786] ? __pfx_netlink_sendmsg+0x10/0x10 [ 140.680559][ T6786] ? __lock_acquire+0x747/0x2de0 [ 140.680596][ T6786] ? srso_alias_return_thunk+0x5/0xfbef5 [ 140.680626][ T6786] ? aa_sock_msg_perm+0x144/0x210 [ 140.680659][ T6786] ? srso_alias_return_thunk+0x5/0xfbef5 [ 140.680689][ T6786] ? apparmor_socket_sendmsg+0x98/0x360 [ 140.680726][ T6786] ? srso_alias_return_thunk+0x5/0xfbef5 [ 140.680760][ T6786] ? __pfx_netlink_sendmsg+0x10/0x10 [ 140.680787][ T6786] sock_sendmsg_nosec+0x14e/0x190 [ 140.680837][ T6786] ____sys_sendmsg+0x49f/0x790 [ 140.680881][ T6786] ? __pfx_____sys_sendmsg+0x10/0x10 [ 140.680918][ T6786] ? srso_alias_return_thunk+0x5/0xfbef5 [ 140.680955][ T6786] ? srso_alias_return_thunk+0x5/0xfbef5 [ 140.680986][ T6786] ? import_iovec+0x73/0xa0 [ 140.681026][ T6786] ___sys_sendmsg+0x2f8/0x3d0 [ 140.681057][ T6786] ? __lock_acquire+0x747/0x2de0 [ 140.681096][ T6786] ? __pfx____sys_sendmsg+0x10/0x10 [ 140.681132][ T6786] ? futex_wait+0x2a2/0x390 [ 140.681202][ T6786] ? srso_alias_return_thunk+0x5/0xfbef5 [ 140.681232][ T6786] ? __fget_files+0x3a2/0x420 [ 140.681266][ T6786] ? __fget_files+0x2a/0x420 [ 140.681311][ T6786] __x64_sys_sendmsg+0x1b1/0x290 [ 140.681343][ T6786] ? srso_alias_return_thunk+0x5/0xfbef5 [ 140.681377][ T6786] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 140.681422][ T6786] ? srso_alias_return_thunk+0x5/0xfbef5 [ 140.681468][ T6786] do_syscall_64+0x16a/0x530 [ 140.681506][ T6786] ? trace_irq_disable+0x3b/0x140 [ 140.681543][ T6786] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.681577][ T6786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.681603][ T6786] RIP: 0033:0x7f5ce0ba94d9 [ 140.681626][ T6786] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.681649][ T6786] RSP: 002b:00007f5ce1aec028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 140.681677][ T6786] RAX: ffffffffffffffda RBX: 00007f5ce0e25fa0 RCX: 00007f5ce0ba94d9 [ 140.681697][ T6786] RDX: 000000000004c840 RSI: 00002000000007c0 RDI: 0000000000000004 [ 140.681714][ T6786] RBP: 00007f5ce0c3804e R08: 0000000000000000 R09: 0000000000000000 [ 140.681730][ T6786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 140.681746][ T6786] R13: 00007f5ce0e26038 R14: 00007f5ce0e25fa0 R15: 00007fffb5af62d8 [ 140.681787][ T6786] [ 140.693358][ T5801] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 140.693828][ T5801] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -71 [ 140.748494][ T5801] usb 7-1: USB disconnect, device number 2 [ 140.762577][ T6640] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 140.762610][ T6640] Buffer I/O error on dev loop1, logical block 2, lost sync page write [ 140.874811][ T25] legousbtower 3-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 141.018015][ T25] legousbtower 3-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 141.267505][ T3306] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.461992][ T5784] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 141.506051][ T3306] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.612323][ T5784] usb 1-1: Using ep0 maxpacket: 16 [ 141.614092][ T5784] usb 1-1: New USB device found: idVendor=1d6b, idProduct=0101, bcdDevice=0.40 [ 141.615605][ T5784] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 141.615632][ T5784] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 141.617365][ T6805] usb 3-1: Couldn't submit interrupt_out_urb -90 [ 141.619228][ T5784] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.619255][ T5784] usb 1-1: Product: syz [ 141.619273][ T5784] usb 1-1: Manufacturer: syz [ 141.619291][ T5784] usb 1-1: SerialNumber: syz [ 141.715599][ T5784] usb 1-1: 0:2 : does not exist [ 141.756696][ T5801] usb 3-1: USB disconnect, device number 7 [ 141.799288][ T5801] legousbtower 3-1:14.228: LEGO USB Tower #-160 now disconnected [ 141.920772][ T5784] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 141.950210][ T5637] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 141.963889][ T5637] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 141.965357][ T5637] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 141.967659][ T5637] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 141.968470][ T5637] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 142.005703][ T3306] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.135184][ T6822] FAULT_INJECTION: forcing a failure. [ 142.135184][ T6822] name failslab, interval 1, probability 0, space 0, times 0 [ 142.135223][ T6822] CPU: 1 UID: 0 PID: 6822 Comm: syz.4.225 Tainted: G L syzkaller #0 PREEMPT(full) [ 142.135256][ T6822] Tainted: [L]=SOFTLOCKUP [ 142.135266][ T6822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 142.135282][ T6822] Call Trace: [ 142.135292][ T6822] [ 142.135302][ T6822] dump_stack_lvl+0xe8/0x150 [ 142.135357][ T6822] should_fail_ex+0x3eb/0x540 [ 142.135399][ T6822] should_failslab+0xa8/0x100 [ 142.135443][ T6822] __kmalloc_noprof+0xf9/0x710 [ 142.135479][ T6822] ? __mutex_unlock_slowpath+0x731/0x900 [ 142.135522][ T6822] ? sock_kmalloc+0xd6/0x160 [ 142.135555][ T6822] ? sock_kmalloc+0xd6/0x160 [ 142.135598][ T6822] sock_kmalloc+0xd6/0x160 [ 142.135637][ T6822] __tcp_md5_do_add+0x179/0x4a0 [ 142.135685][ T6822] tcp_md5_do_add+0xfa/0x390 [ 142.135735][ T6822] tcp_v6_parse_md5_keys+0x550/0x670 [ 142.135780][ T6822] ? __pfx_tcp_v6_parse_md5_keys+0x10/0x10 [ 142.135848][ T6822] ? do_tcp_setsockopt+0x8f1/0x1f80 [ 142.135881][ T6822] ? __local_bh_enable_ip+0xd6/0x140 [ 142.135918][ T6822] ? srso_alias_return_thunk+0x5/0xfbef5 [ 142.135955][ T6822] do_tcp_setsockopt+0x1250/0x1f80 [ 142.135983][ T6822] ? srso_alias_return_thunk+0x5/0xfbef5 [ 142.136014][ T6822] ? __asan_memcpy+0x40/0x70 [ 142.136054][ T6822] ? __pfx_do_tcp_setsockopt+0x10/0x10 [ 142.136093][ T6822] ? srso_alias_return_thunk+0x5/0xfbef5 [ 142.136129][ T6822] ? srso_alias_return_thunk+0x5/0xfbef5 [ 142.136159][ T6822] ? aa_sock_opt_perm+0xe1/0x1e0 [ 142.136190][ T6822] ? srso_alias_return_thunk+0x5/0xfbef5 [ 142.136220][ T6822] ? tcp_setsockopt+0x3d/0xe0 [ 142.136246][ T6822] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 142.136276][ T6822] do_sock_setsockopt+0x17c/0x1b0 [ 142.136314][ T6822] ? srso_alias_return_thunk+0x5/0xfbef5 [ 142.136350][ T6822] __x64_sys_setsockopt+0x13d/0x1b0 [ 142.136389][ T6822] do_syscall_64+0x16a/0x530 [ 142.136428][ T6822] ? trace_irq_disable+0x3b/0x140 [ 142.136466][ T6822] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.136500][ T6822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.136526][ T6822] RIP: 0033:0x7f17d87a94d9 [ 142.136550][ T6822] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.136572][ T6822] RSP: 002b:00007f17d9746028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 142.136599][ T6822] RAX: ffffffffffffffda RBX: 00007f17d8a25fa0 RCX: 00007f17d87a94d9 [ 142.136619][ T6822] RDX: 000000000000000e RSI: 0000000000000006 RDI: 0000000000000004 [ 142.136634][ T6822] RBP: 00007f17d883804e R08: 00000000000000d8 R09: 0000000000000000 [ 142.136651][ T6822] R10: 0000200000000680 R11: 0000000000000246 R12: 0000000000000000 [ 142.136668][ T6822] R13: 00007f17d8a26038 R14: 00007f17d8a25fa0 R15: 00007ffee09a7818 [ 142.136712][ T6822] [ 142.161304][ T6817] netlink: 4 bytes leftover after parsing attributes in process `syz.6.223'. [ 142.243607][ T5784] usb 1-1: USB disconnect, device number 7 [ 142.440315][ T5651] udevd[5651]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 142.684860][ T3306] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.868866][ T6835] gadgetfs: bound to dummy_udc driver [ 142.980802][ T6842] jffs2: notice: (6842) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 143.141279][ T25] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 143.141533][ C1] gadgetfs: connected [ 143.141889][ T25] gadgetfs: disconnected [ 143.209917][ T6846] loop6: detected capacity change from 0 to 33280 [ 143.294482][ T6846] EXT4-fs error (device loop6): ext4_orphan_get:1404: inode #15: comm syz.6.229: iget: bad i_size value: 38620345925642 [ 143.294683][ T6846] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 143.296830][ C1] gadgetfs: connected [ 143.299548][ T25] usb 1-1: New USB device found: idVendor=0525, idProduct=a4a0, bcdDevice=1.00 [ 143.299908][ T25] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 143.299946][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.312583][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 143.312604][ C0] EXT4-fs (loop6): initial error at time 1794745457: ext4_orphan_get:1404: inode 15 [ 143.312641][ C0] EXT4-fs (loop6): last error at time 1794745457: ext4_orphan_get:1404: inode 15 [ 143.323055][ C1] gadgetfs: configuration #1 [ 143.372653][ T6846] EXT4-fs error (device loop6): ext4_orphan_get:1409: comm syz.6.229: couldn't read orphan inode 15 (err -117) [ 143.372850][ T6846] loop6: lost filesystem error report for type 5 error -117 [ 143.387285][ T6846] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.571405][ T6856] Zero length message leads to an empty skb [ 143.632072][ T6853] erspan1: entered promiscuous mode [ 143.655808][ T6238] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.802482][ T3306] bridge_slave_1: left allmulticast mode [ 143.802514][ T3306] bridge_slave_1: left promiscuous mode [ 143.802734][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.844732][ T3306] bridge_slave_0: left allmulticast mode [ 143.844760][ T3306] bridge_slave_0: left promiscuous mode [ 143.844969][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.012404][ T5637] Bluetooth: hci3: command tx timeout [ 144.727004][ T6839] loop2: detected capacity change from 0 to 40427 [ 144.731055][ T6839] f2fs: Unknown parameter '' [ 144.760724][ T6832] gadgetfs: suspended from state 3 [ 144.763613][ T3104] usb 1-1: USB disconnect, device number 8 [ 144.765837][ T6832] gadgetfs: disconnected [ 144.820212][ T3306] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 144.846966][ T3306] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 144.860937][ T3306] bond0 (unregistering): Released all slaves [ 145.257609][ T6913] loop4: detected capacity change from 0 to 33792 [ 145.262868][ T6913] EXT4-fs: Ignoring removed nomblk_io_submit option [ 145.365784][ T6913] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.495457][ T6815] rxe_eth0 speed is unknown, defaulting to 1000 [ 146.341551][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 146.514004][ T5637] Bluetooth: hci3: command tx timeout [ 146.791270][ T5762] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 146.963028][ T5762] usb 6-1: Using ep0 maxpacket: 8 [ 146.964682][ T5762] usb 6-1: New USB device found: idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 146.973654][ T5762] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.973681][ T5762] usb 6-1: Product: syz [ 146.973698][ T5762] usb 6-1: Manufacturer: syz [ 146.973715][ T5762] usb 6-1: SerialNumber: syz [ 147.028984][ T5762] usb 6-1: config 0 descriptor?? [ 147.187974][ T5635] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.308310][ T5762] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 148.571704][ T5637] Bluetooth: hci3: command tx timeout [ 148.903435][ T5636] Bluetooth: hci6: sending frame failed (-49) [ 148.904285][ T5637] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 149.316270][ T3306] hsr_slave_0: left promiscuous mode [ 149.317133][ T3306] hsr_slave_1: left promiscuous mode [ 149.318049][ T3306] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.318072][ T3306] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.355936][ T5762] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 149.371303][ T5762] usb 6-1: USB disconnect, device number 9 [ 149.994663][ T3306] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.994691][ T3306] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 150.127776][ T3306] veth1_macvtap: left promiscuous mode [ 150.127818][ T3306] veth0_macvtap: left promiscuous mode [ 150.127978][ T3306] veth1_vlan: left promiscuous mode [ 150.128062][ T3306] veth0_vlan: left promiscuous mode [ 150.388737][ T6974] ptrace attach of "ci-upstream-kasan-gce-root/syz-executor exec"[5634] was attempted by " [ 150.480621][ T6977] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 150.651302][ T5636] Bluetooth: hci3: command tx timeout [ 151.882819][ T3306] team0 (unregistering): Port device team_slave_1 removed [ 151.924895][ T3306] team0 (unregistering): Port device team_slave_0 removed [ 152.315774][ T6973] team0 (unregistering): Port device team_slave_0 removed [ 152.334130][ T6973] team0 (unregistering): Port device team_slave_1 removed [ 152.564205][ T7004] loop6: detected capacity change from 0 to 32768 [ 152.811510][ T7004] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 153.370018][ T7004] XFS (loop6): Ending clean mount [ 153.377812][ T7004] XFS (loop6): Quotacheck needed: Please wait. [ 153.469661][ T7004] XFS (loop6): Quotacheck: Done. [ 154.961380][ T6238] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 156.676600][ T6815] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.677666][ T6815] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.677804][ T6815] bridge_slave_0: entered allmulticast mode [ 156.692969][ T6815] bridge_slave_0: entered promiscuous mode [ 156.699386][ T6815] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.699495][ T6815] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.699618][ T6815] bridge_slave_1: entered allmulticast mode [ 156.704745][ T6815] bridge_slave_1: entered promiscuous mode [ 157.115150][ T7037] device-mapper: ioctl: device has been removed from the dev hash table. [ 157.220469][ T6815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 157.256964][ T6815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 157.437977][ T7071] loop4: detected capacity change from 0 to 32896 [ 157.453431][ T6815] team0: Port device team_slave_0 added [ 157.466278][ T6815] team0: Port device team_slave_1 added [ 157.484046][ T7071] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 157.487858][ T7070] netlink: 28 bytes leftover after parsing attributes in process `syz.5.267'. [ 157.530210][ T7071] ext4 filesystem being mounted at /49/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 157.585952][ T7071] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-lib" [ 157.716253][ T7071] fscrypt: loop4: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 157.863402][ T5635] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 157.919575][ T6815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.919595][ T6815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 157.919625][ T6815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 158.123919][ T6815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 158.123939][ T6815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 158.123970][ T6815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 158.127860][ T7087] FAULT_INJECTION: forcing a failure. [ 158.127860][ T7087] name failslab, interval 1, probability 0, space 0, times 0 [ 158.127895][ T7087] CPU: 0 UID: 0 PID: 7087 Comm: syz.6.271 Tainted: G L syzkaller #0 PREEMPT(full) [ 158.127929][ T7087] Tainted: [L]=SOFTLOCKUP [ 158.127939][ T7087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 158.127954][ T7087] Call Trace: [ 158.127964][ T7087] [ 158.127974][ T7087] dump_stack_lvl+0xe8/0x150 [ 158.128021][ T7087] should_fail_ex+0x3eb/0x540 [ 158.128063][ T7087] should_failslab+0xa8/0x100 [ 158.128107][ T7087] __kmalloc_node_noprof+0xfb/0x720 [ 158.128143][ T7087] ? crypto_create_tfm_node+0x81/0x3c0 [ 158.128184][ T7087] ? crypto_create_tfm_node+0x81/0x3c0 [ 158.128235][ T7087] crypto_create_tfm_node+0x81/0x3c0 [ 158.128275][ T7087] crypto_alloc_tfm_node+0x169/0x3e0 [ 158.128314][ T7087] ? software_key_eds_op+0x3f0/0xc50 [ 158.128357][ T7087] software_key_eds_op+0x44c/0xc50 [ 158.128407][ T7087] ? __pfx_software_key_eds_op+0x10/0x10 [ 158.128443][ T7087] ? lock_acquire+0x115/0x350 [ 158.128490][ T7087] ? srso_alias_return_thunk+0x5/0xfbef5 [ 158.128523][ T7087] ? down_read+0x2b9/0x320 [ 158.128544][ T7087] ? srso_alias_return_thunk+0x5/0xfbef5 [ 158.128571][ T7087] ? asymmetric_key_eds_op+0xef/0x130 [ 158.128607][ T7087] keyctl_pkey_e_d_s+0x1cc/0x300 [ 158.128638][ T7087] ? __pfx_keyctl_pkey_e_d_s+0x10/0x10 [ 158.128681][ T7087] __se_sys_keyctl+0x494/0xbc0 [ 158.128717][ T7087] ? __pfx___se_sys_keyctl+0x10/0x10 [ 158.128754][ T7087] ? __pfx_do_futex+0x10/0x10 [ 158.128778][ T7087] ? srso_alias_return_thunk+0x5/0xfbef5 [ 158.128804][ T7087] ? rcu_is_watching+0x16/0xb0 [ 158.128845][ T7087] ? srso_alias_return_thunk+0x5/0xfbef5 [ 158.128871][ T7087] ? __se_sys_futex+0x3a8/0x450 [ 158.128904][ T7087] ? srso_alias_return_thunk+0x5/0xfbef5 [ 158.128930][ T7087] ? rcu_is_watching+0x16/0xb0 [ 158.128965][ T7087] ? srso_alias_return_thunk+0x5/0xfbef5 [ 158.128998][ T7087] ? srso_alias_return_thunk+0x5/0xfbef5 [ 158.129025][ T7087] ? __x64_sys_keyctl+0x20/0xc0 [ 158.129060][ T7087] do_syscall_64+0x16a/0x530 [ 158.129094][ T7087] ? trace_irq_disable+0x3b/0x140 [ 158.129127][ T7087] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.129156][ T7087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.129180][ T7087] RIP: 0033:0x7fb8221a94d9 [ 158.129200][ T7087] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.129219][ T7087] RSP: 002b:00007fb823090028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 158.129242][ T7087] RAX: ffffffffffffffda RBX: 00007fb822425fa0 RCX: 00007fb8221a94d9 [ 158.129259][ T7087] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000019 [ 158.129274][ T7087] RBP: 00007fb82223804e R08: 0000000000000000 R09: 0000000000000000 [ 158.129289][ T7087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 158.129302][ T7087] R13: 00007fb822426038 R14: 00007fb822425fa0 R15: 00007ffc3b8bbf18 [ 158.129338][ T7087] [ 159.212659][ T7113] netlink: 'syz.6.275': attribute type 39 has an invalid length. [ 159.357914][ T6815] hsr_slave_0: entered promiscuous mode [ 159.376078][ T6815] hsr_slave_1: entered promiscuous mode [ 159.379398][ T6815] debugfs: 'hsr0' already exists in 'hsr' [ 159.379417][ T6815] Cannot create hsr debugfs directory [ 159.399170][ T7100] syzkaller0: entered promiscuous mode [ 159.399192][ T7100] syzkaller0: entered allmulticast mode [ 164.143503][ T7145] netlink: 'syz.5.279': attribute type 1 has an invalid length. [ 164.431786][ T7151] 8021q: adding VLAN 0 to HW filter on device bond2 [ 164.458782][ T7151] bond1: (slave bond2): making interface the new active one [ 164.470403][ T7151] bond1: (slave bond2): Enslaving as an active interface with an up link [ 164.531431][ T5762] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 164.571271][ T5637] Bluetooth: hci4: command 0x0406 tx timeout [ 164.634044][ T7145] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 164.681528][ T5762] usb 1-1: Using ep0 maxpacket: 16 [ 164.682260][ T5762] usb 1-1: New USB device found: idVendor=1d6b, idProduct=0101, bcdDevice=0.40 [ 164.683467][ T5762] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 164.683491][ T5762] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 164.685945][ T5762] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.685971][ T5762] usb 1-1: Product: syz [ 164.685989][ T5762] usb 1-1: Manufacturer: syz [ 164.686006][ T5762] usb 1-1: SerialNumber: syz [ 164.748567][ T7164] netlink: 4 bytes leftover after parsing attributes in process `syz.6.285'. [ 164.778561][ T5762] usb 1-1: 0:2 : does not exist [ 165.000432][ T5762] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 165.098528][ T6815] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 165.137603][ T6815] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 165.140096][ T6815] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 165.173898][ T5762] usb 1-1: USB disconnect, device number 9 [ 165.188101][ T6815] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 165.200515][ T6815] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 165.246734][ T7173] loop6: detected capacity change from 0 to 32896 [ 165.255386][ T6815] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 165.256645][ T6815] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 165.295067][ T6815] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 165.344184][ T7173] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 165.360686][ T7173] ext4 filesystem being mounted at /21/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 165.447901][ T7155] udevd[7155]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 165.622458][ T6815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.670454][ T6815] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.711516][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.711608][ T3306] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.766565][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.766677][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.954238][ T7173] fscrypt: AES-256-XTS using blk-crypto-fallback [ 167.914861][ T6238] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 168.259445][ T7211] FAULT_INJECTION: forcing a failure. [ 168.259445][ T7211] name failslab, interval 1, probability 0, space 0, times 0 [ 168.259485][ T7211] CPU: 0 UID: 0 PID: 7211 Comm: syz.5.291 Tainted: G L syzkaller #0 PREEMPT(full) [ 168.259520][ T7211] Tainted: [L]=SOFTLOCKUP [ 168.259530][ T7211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 168.259545][ T7211] Call Trace: [ 168.259555][ T7211] [ 168.259565][ T7211] dump_stack_lvl+0xe8/0x150 [ 168.259614][ T7211] should_fail_ex+0x3eb/0x540 [ 168.259655][ T7211] should_failslab+0xa8/0x100 [ 168.259699][ T7211] __kmalloc_noprof+0xf9/0x710 [ 168.259731][ T7211] ? srso_alias_return_thunk+0x5/0xfbef5 [ 168.259762][ T7211] ? ovl_fs_params_verify+0x751/0x1250 [ 168.259794][ T7211] ? ovl_fill_super+0x45e/0x4980 [ 168.259821][ T7211] ? ovl_fill_super+0x45e/0x4980 [ 168.259857][ T7211] ovl_fill_super+0x45e/0x4980 [ 168.259911][ T7211] ? srso_alias_return_thunk+0x5/0xfbef5 [ 168.259941][ T7211] ? __mutex_unlock_slowpath+0x731/0x900 [ 168.259990][ T7211] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 168.260036][ T7211] ? __raw_spin_lock_init+0x45/0x100 [ 168.260066][ T7211] ? __init_swait_queue_head+0xa8/0x150 [ 168.260108][ T7211] ? __pfx_ovl_fill_super+0x10/0x10 [ 168.260135][ T7211] ? srso_alias_return_thunk+0x5/0xfbef5 [ 168.260168][ T7211] ? shrinker_register+0x158/0x210 [ 168.260201][ T7211] ? srso_alias_return_thunk+0x5/0xfbef5 [ 168.260231][ T7211] ? sget_fc+0x1b47/0x1ce0 [ 168.260277][ T7211] ? __pfx_set_anon_super_fc+0x10/0x10 [ 168.260315][ T7211] ? __pfx_sget_fc+0x10/0x10 [ 168.260348][ T7211] ? srso_alias_return_thunk+0x5/0xfbef5 [ 168.260378][ T7211] ? vfs_parse_monolithic_sep+0x322/0x360 [ 168.260418][ T7211] ? __pfx_ovl_next_opt+0x10/0x10 [ 168.260459][ T7211] ? srso_alias_return_thunk+0x5/0xfbef5 [ 168.260490][ T7211] ? __pfx_ovl_fill_super+0x10/0x10 [ 168.260519][ T7211] get_tree_nodev+0xbe/0x150 [ 168.260559][ T7211] vfs_get_tree+0x92/0x2a0 [ 168.260600][ T7211] do_new_mount+0x325/0xb00 [ 168.260633][ T7211] ? srso_alias_return_thunk+0x5/0xfbef5 [ 168.260670][ T7211] ? __pfx_do_new_mount+0x10/0x10 [ 168.260703][ T7211] ? srso_alias_return_thunk+0x5/0xfbef5 [ 168.260733][ T7211] ? ns_capable+0x84/0xe0 [ 168.260776][ T7211] ? srso_alias_return_thunk+0x5/0xfbef5 [ 168.260806][ T7211] ? path_mount+0x647/0x1050 [ 168.260840][ T7211] ? srso_alias_return_thunk+0x5/0xfbef5 [ 168.260870][ T7211] ? user_path_at+0xd4/0x160 [ 168.260915][ T7211] __se_sys_mount+0x31d/0x420 [ 168.260955][ T7211] ? __pfx___se_sys_mount+0x10/0x10 [ 168.260995][ T7211] ? srso_alias_return_thunk+0x5/0xfbef5 [ 168.261025][ T7211] ? __x64_sys_mount+0x20/0xc0 [ 168.261061][ T7211] do_syscall_64+0x16a/0x530 [ 168.261098][ T7211] ? trace_irq_disable+0x3b/0x140 [ 168.261136][ T7211] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.261170][ T7211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.261197][ T7211] RIP: 0033:0x7f5ce0ba94d9 [ 168.261220][ T7211] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.261242][ T7211] RSP: 002b:00007f5ce1aec028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 168.261269][ T7211] RAX: ffffffffffffffda RBX: 00007f5ce0e25fa0 RCX: 00007f5ce0ba94d9 [ 168.261289][ T7211] RDX: 0000200000000140 RSI: 0000200000000100 RDI: 0000000000000000 [ 168.261307][ T7211] RBP: 00007f5ce0c3804e R08: 0000200000000180 R09: 0000000000000000 [ 168.261325][ T7211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 168.261340][ T7211] R13: 00007f5ce0e26038 R14: 00007f5ce0e25fa0 R15: 00007fffb5af62d8 [ 168.261382][ T7211] [ 168.888730][ T7214] device-mapper: ioctl: device has been removed from the dev hash table. [ 170.620651][ T7229] nvmet: adding nsid 1 to subsystem testsubsys [ 170.630410][ T7229] nvmet: failed to open block device /dev/nullb: (-2) [ 171.019139][ T7245] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 171.021582][ T7245] Bluetooth: ISO socket layer initialized [ 172.658437][ T30] audit: type=1326 audit(1794745487.251:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7254 comm="syz.6.301" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb8221a94d9 code=0x0 [ 173.584083][ T7264] tipc: Withdrawal distribution failure [ 177.557252][ T7302] syzkaller0: entered promiscuous mode [ 177.557278][ T7302] syzkaller0: entered allmulticast mode [ 177.724435][ T7303] orangefs_devreq_write_iter: total:0: must be at least:8240: [ 180.654190][ T5785] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 180.726047][ T6815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.812747][ T5785] usb 6-1: Using ep0 maxpacket: 16 [ 180.813611][ T5785] usb 6-1: New USB device found: idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 180.817798][ T7331] bridge0: port 3(syz_tun) entered blocking state [ 180.817917][ T7331] bridge0: port 3(syz_tun) entered disabled state [ 180.818127][ T7331] syz_tun: entered allmulticast mode [ 180.820148][ T7331] syz_tun: entered promiscuous mode [ 180.820936][ T7331] bridge0: port 3(syz_tun) entered blocking state [ 180.821092][ T7331] bridge0: port 3(syz_tun) entered forwarding state [ 180.834022][ T5785] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 180.842659][ T5785] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.842686][ T5785] usb 6-1: Product: syz [ 180.842703][ T5785] usb 6-1: Manufacturer: syz [ 180.842720][ T5785] usb 6-1: SerialNumber: syz [ 180.854976][ T5785] usb 6-1: config 0 descriptor?? [ 180.884112][ T5785] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 180.884146][ T5785] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 181.509248][ T5785] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 181.867005][ T6815] veth0_vlan: entered promiscuous mode [ 182.204454][ T5785] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 182.206406][ T5785] em28xx 6-1:0.0: board has no eeprom [ 182.220868][ T6815] veth1_vlan: entered promiscuous mode [ 182.409964][ T6815] veth0_macvtap: entered promiscuous mode [ 182.429218][ T6815] veth1_macvtap: entered promiscuous mode [ 183.277773][ T6815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.328449][ T7358] loop0: detected capacity change from 0 to 512 [ 183.333074][ T7322] em28xx 6-1:0.0: reading from i2c device at 0xe failed (error=-5) [ 183.337002][ T6815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 183.355066][ T7358] vfat: Unknown parameter 'ÿÿÿÿÿ01777777777777777777777' [ 183.369722][ T5785] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 183.369751][ T5785] em28xx 6-1:0.0: dvb set to bulk mode. [ 183.395601][ T5785] usb 6-1: USB disconnect, device number 10 [ 183.396146][ T5784] em28xx 6-1:0.0: Binding DVB extension [ 183.420284][ T5785] em28xx 6-1:0.0: Disconnecting em28xx [ 183.510000][ T5292] 8021q: adding VLAN 0 to HW filter on device eth5 [ 183.518346][ T93] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.755350][ T1045] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.755410][ T1045] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.755451][ T1045] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.800511][ T5784] em28xx 6-1:0.0: Registering input extension [ 183.800848][ T5785] em28xx 6-1:0.0: Closing input extension [ 183.895108][ T5785] em28xx: Freeing device [ 184.038090][ T1045] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.038115][ T1045] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.030053][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.030079][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.186428][ T7391] netlink: 8 bytes leftover after parsing attributes in process `syz.0.325'. [ 186.248758][ T7380] loop5: detected capacity change from 0 to 33280 [ 186.265165][ T7383] loop0: detected capacity change from 0 to 2048 [ 186.309397][ T7380] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 186.348380][ T7380] EXT4-fs (loop5): 1 truncate cleaned up [ 186.349702][ T7380] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.368955][ T7380] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.701457][ T5636] Bluetooth: hci2: command 0x0406 tx timeout [ 187.913647][ T7405] netlink: 8 bytes leftover after parsing attributes in process `syz.6.328'. [ 188.121218][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 188.726374][ T7383] NILFS (loop0): error -4 creating segctord thread [ 189.861503][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 190.642014][ T10] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 190.794631][ T10] usb 6-1: New USB device found: idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 190.800233][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.800262][ T10] usb 6-1: Product: syz [ 190.800279][ T10] usb 6-1: Manufacturer: syz [ 190.800297][ T10] usb 6-1: SerialNumber: syz [ 190.835746][ T10] usb 6-1: config 0 descriptor?? [ 192.421699][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 192.831262][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 192.908730][ T10] RobotFuzz Open Source InterFace, OSIF 6-1:0.0: version d4.15 found at bus 006 address 011 [ 193.848599][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.848662][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.000772][ T7438] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 194.029557][ T7438] CIFS: Attempting to mount //127.0.0.1/share [ 194.346395][ T7438] CIFS: VFS: cifs_mount failed w/return code = -112 [ 194.521914][ T10] usb 6-1: USB disconnect, device number 11 [ 194.586609][ T5292] 8021q: adding VLAN 0 to HW filter on device eth6 [ 194.673401][ T31] IPVS: starting estimator thread 0... [ 194.981594][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 195.801350][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 196.380275][ T7445] IPVS: using max 24 ests per chain, 57600 per kthread [ 196.392593][ T7420] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 196.628333][ T7455] syzkaller0: entered promiscuous mode [ 196.628359][ T7455] syzkaller0: entered allmulticast mode [ 196.742147][ T7455] tipc: Started in network mode [ 196.742183][ T7455] tipc: Node identity a2a07257013d, cluster identity 4711 [ 196.743788][ T7455] tipc: Enabled bearer , priority 0 [ 196.749541][ T7452] tipc: Resetting bearer [ 196.809066][ T7452] tipc: Disabling bearer [ 198.771834][ T7486] netlink: 'syz.5.346': attribute type 1 has an invalid length. [ 198.926745][ T7486] 8021q: adding VLAN 0 to HW filter on device bond3 [ 200.101600][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 200.511324][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 200.692202][ T7491] bond3: (slave veth0_to_bond): making interface the new active one [ 200.742236][ T7491] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 200.777315][ T7496] bond3: entered promiscuous mode [ 200.777337][ T7496] veth0_to_bond: entered promiscuous mode [ 200.777571][ T7496] bond3: entered allmulticast mode [ 200.777587][ T7496] veth0_to_bond: entered allmulticast mode [ 200.817101][ T5292] 8021q: adding VLAN 0 to HW filter on device eth7 [ 200.836982][ T7486] macvlan2: entered promiscuous mode [ 200.837003][ T7486] macvlan2: entered allmulticast mode [ 200.840228][ T7486] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 200.872385][ T7486] bond3: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 202.661622][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 206.465697][ T53] Bluetooth: hci4: command 0x0406 tx timeout [ 206.465783][ T53] Bluetooth: hci1: command 0x0406 tx timeout [ 206.465825][ T53] Bluetooth: hci5: command 0x0406 tx timeout [ 206.465864][ T53] Bluetooth: hci2: command 0x0406 tx timeout [ 207.605698][ T7557] genirq: Flags mismatch irq 4. 00200000 (pcl818) vs. 00200080 (ttyS0) [ 208.141942][ T5292] 8021q: adding VLAN 0 to HW filter on device eth8 [ 208.282536][ T7568] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 211.583502][ T7585] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 211.981151][ T7596] process 'syz.2.368' launched './file1' with NULL argv: empty string added [ 216.613054][ T10] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 216.771986][ T10] usb 8-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 216.772034][ T10] usb 8-1: too many configurations: 13, using maximum allowed: 8 [ 216.772732][ T10] usb 8-1: config 0 has no interfaces? [ 216.773246][ T10] usb 8-1: config 0 has no interfaces? [ 216.810797][ T10] usb 8-1: config 0 has no interfaces? [ 216.823663][ T10] usb 8-1: config 0 has no interfaces? [ 216.831401][ T10] usb 8-1: config 0 has no interfaces? [ 216.843154][ T10] usb 8-1: config 0 has no interfaces? [ 216.844239][ T10] usb 8-1: config 0 has no interfaces? [ 216.846917][ T10] usb 8-1: config 0 has no interfaces? [ 216.858376][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.858404][ T10] usb 8-1: Product: syz [ 216.858421][ T10] usb 8-1: Manufacturer: syz [ 216.858438][ T10] usb 8-1: SerialNumber: syz [ 216.902616][ T10] usb 8-1: config 0 descriptor?? [ 217.137828][ T10] usb 8-1: USB disconnect, device number 2 [ 218.898338][ T7636] loop7: detected capacity change from 0 to 1024 [ 219.267429][ T30] audit: type=1800 audit(1794745533.861:6): pid=7638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.378" name="file2" dev="sda1" ino=2055 res=0 errno=-22 [ 220.007860][ T7648] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 221.488819][ T5642] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 221.504692][ T5642] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 221.505499][ T5642] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 221.508343][ T5642] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 221.509160][ T5642] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 221.808912][ T7659] loop6: detected capacity change from 0 to 36864 [ 223.532623][ T5642] Bluetooth: hci6: command tx timeout [ 223.623883][ T7670] loop0: detected capacity change from 0 to 1024 [ 223.985107][ T7674] loop2: detected capacity change from 0 to 2048 [ 223.999889][ T7674] udf: Bad value for 'session' [ 226.014631][ T5642] Bluetooth: hci6: command tx timeout [ 228.101382][ T5642] Bluetooth: hci6: command tx timeout [ 230.465307][ T5642] Bluetooth: hci6: command tx timeout [ 231.188016][ T30] audit: type=1326 audit(1794745545.781:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7748 comm="syz.6.401" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb8221a94d9 code=0x0 [ 232.533799][ T7759] loop5: detected capacity change from 0 to 2048 [ 232.606078][ T7762] openvswitch: netlink: Flow actions attr not present in new flow. [ 233.933922][ T7654] rxe_eth0 speed is unknown, defaulting to 1000 [ 236.471956][ T7785] loop5: detected capacity change from 0 to 4096 [ 237.413147][ T7785] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 240.732650][ T7654] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.736245][ T7654] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.736385][ T7654] bridge_slave_0: entered allmulticast mode [ 240.748804][ T7654] bridge_slave_0: entered promiscuous mode [ 240.768981][ T7654] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.769180][ T7654] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.769314][ T7654] bridge_slave_1: entered allmulticast mode [ 240.779586][ T7654] bridge_slave_1: entered promiscuous mode [ 241.774539][ T5636] Bluetooth: hci0: command 0x0406 tx timeout [ 241.790150][ T7654] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 241.836752][ T7654] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 241.995359][ T7654] team0: Port device team_slave_0 added [ 242.021412][ T7654] team0: Port device team_slave_1 added [ 242.207394][ T7654] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 242.207415][ T7654] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 242.207446][ T7654] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 242.314250][ T7654] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 242.314271][ T7654] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 242.314304][ T7654] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 243.722158][ T7850] NFSD: Failed to start, no listeners configured. [ 243.778750][ T7859] loop7: detected capacity change from 0 to 256 [ 244.269411][ T7654] hsr_slave_0: entered promiscuous mode [ 244.270573][ T7654] hsr_slave_1: entered promiscuous mode [ 244.286694][ T7654] debugfs: 'hsr0' already exists in 'hsr' [ 244.286713][ T7654] Cannot create hsr debugfs directory [ 244.360726][ T7866] bond1: entered promiscuous mode [ 244.992184][ T7873] loop5: detected capacity change from 0 to 2048 [ 246.814640][ T7884] loop2: detected capacity change from 0 to 33280 [ 246.957686][ T7892] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 247.224951][ T7898] netlink: 44 bytes leftover after parsing attributes in process `syz.5.443'. [ 247.405200][ T7654] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 247.471023][ T7654] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 247.488847][ T7654] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 247.541083][ T7654] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 247.543913][ T7654] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 247.770019][ T7907] loop2: detected capacity change from 0 to 128 [ 247.986876][ T7907] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 247.987049][ T7907] FAT-fs (loop2): data area starts beyond volume (36 > 11) [ 247.987104][ T7907] FAT-fs (loop2): Can't find a valid FAT filesystem [ 249.578991][ T7654] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 249.598980][ T7654] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 249.623298][ T7654] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 250.097542][ T7926] loop2: detected capacity change from 0 to 33280 [ 250.114994][ T7926] EXT4-fs: Ignoring removed nobh option [ 250.747183][ T7926] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 250.750481][ T7926] ext4 filesystem being mounted at /85/file7 supports timestamps until 2038-01-19 (0x7fffffff) [ 251.026092][ T7654] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.116678][ T7654] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.118618][ T5631] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.145633][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.145736][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.207041][ T7376] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.207152][ T7376] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.410480][ T5642] Bluetooth: hci1: unexpected event for opcode 0x0403 [ 254.641506][ T7956] loop6: detected capacity change from 0 to 32768 [ 254.759846][ T7654] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 254.777548][ T7956] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 254.777568][ T7956] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 254.959060][ T7956] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 254.996306][ T3104] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 254.996325][ T3104] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 255.059206][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.059271][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.207277][ T3104] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 210ms [ 255.232580][ T3104] gfs2: fsid=syz:syz.0: jid=0: Done [ 255.235939][ T7956] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 256.073441][ T7956] gfs2: fsid=syz:syz.0: Corruption found in quota_change0 file: duplicate identifier in slot 57405 [ 256.098301][ T8004] loop2: detected capacity change from 0 to 1024 [ 256.125181][ T7956] gfs2: fsid=syz:syz.0: found 1 quota changes [ 257.514078][ T8016] netlink: 8 bytes leftover after parsing attributes in process `syz.0.464'. [ 257.555296][ T8016] ip6tnl1: entered allmulticast mode [ 257.585593][ T7654] veth0_vlan: entered promiscuous mode [ 257.645572][ T7654] veth1_vlan: entered promiscuous mode [ 257.876445][ T7654] veth0_macvtap: entered promiscuous mode [ 257.914073][ T7654] veth1_macvtap: entered promiscuous mode [ 257.989536][ T7654] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 258.038686][ T7654] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 258.071322][ T45] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 258.111448][ T51] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.112701][ T51] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.112782][ T51] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.112823][ T51] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.233299][ T45] usb 1-1: not running at top speed; connect to a high speed hub [ 258.233843][ T45] usb 1-1: New USB device found: idVendor=06cd, idProduct=0131, bcdDevice=1.00 [ 258.265839][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.265872][ T45] usb 1-1: Product: syz [ 258.265890][ T45] usb 1-1: Manufacturer: syz [ 258.265907][ T45] usb 1-1: SerialNumber: syz [ 258.303832][ T45] keyspan 1-1:1.0: Keyspan 4 port adapter converter detected [ 258.320563][ T45] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 258.341077][ T45] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 258.377765][ T45] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 258.406877][ T45] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 258.674987][ T3306] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.675018][ T3306] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.922616][ T45] usb 1-1: USB disconnect, device number 10 [ 258.991818][ T45] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 259.038134][ T45] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 259.067944][ T45] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 259.093254][ T45] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 259.096249][ T45] keyspan 1-1:1.0: device disconnected [ 259.096824][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.096842][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.522671][ T8048] loop7: detected capacity change from 0 to 40427 [ 259.546896][ T8048] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 259.546924][ T8048] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 259.568367][ T8048] F2FS-fs (loop7): invalid crc value [ 259.651922][ T8048] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 259.678420][ T8048] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 259.678448][ T8048] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 263.573154][ T8094] comedi comedi1: comedi_parport: I/O port conflict (0x82f00,3) [ 263.878474][ T8104] loop7: detected capacity change from 0 to 8 [ 264.189409][ T8107] loop5: detected capacity change from 0 to 40427 [ 264.210253][ T8107] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 264.210280][ T8107] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 264.229060][ T8107] F2FS-fs (loop5): invalid crc value [ 264.294928][ T8107] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 264.318095][ T8107] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 264.318122][ T8107] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 267.310761][ T8143] loop7: detected capacity change from 0 to 256 [ 267.328698][ T8143] exfat: Deprecated parameter 'utf8' [ 267.328813][ T8143] exfat: Deprecated parameter 'namecase' [ 267.371628][ T5636] Bluetooth: hci3: command 0x0406 tx timeout [ 268.306176][ T8143] exFAT-fs (loop7): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 268.621395][ T8153] netlink: 'syz.5.496': attribute type 49 has an invalid length. [ 268.910661][ T8159] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 268.910878][ T8159] Cannot find del_set index 4 as target [ 269.247780][ T8161] loop5: detected capacity change from 0 to 40427 [ 269.283566][ T8161] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 269.283595][ T8161] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 269.309820][ T8161] F2FS-fs (loop5): invalid crc value [ 269.392825][ T8161] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 269.409629][ T8161] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 269.409655][ T8161] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 271.651707][ T5785] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 271.803067][ T8190] netlink: 3528 bytes leftover after parsing attributes in process `syz.8.520'. [ 271.834090][ T5785] usb 3-1: New USB device found: idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 271.838661][ T5785] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 271.838696][ T5785] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 271.838726][ T5785] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 271.889221][ T5785] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.889251][ T5785] usb 3-1: Product: syz [ 271.889270][ T5785] usb 3-1: Manufacturer: syz [ 271.889287][ T5785] usb 3-1: SerialNumber: syz [ 271.918175][ T5785] usb 3-1: config 0 descriptor?? [ 271.949365][ T5785] streamzap 3-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?! [ 272.167974][ T25] usb 3-1: USB disconnect, device number 8 [ 272.677495][ T8186] loop6: detected capacity change from 0 to 32768 [ 272.742960][ T8186] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 272.784839][ T8220] comedi comedi3: c6xdigio: I/O base address not correctly aligned [ 272.863285][ T8186] XFS (loop6): Ending clean mount [ 272.866101][ T8223] loop5: detected capacity change from 0 to 128 [ 272.874384][ T8223] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 272.884719][ T8223] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 272.909277][ T8216] libceph: resolve 'c' (ret=-3): failed [ 273.076286][ T6238] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 274.257207][ T8228] loop2: detected capacity change from 0 to 8192 [ 274.276645][ T8228] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 274.550210][ T8246] ip_tables: iptables: counters copy to user failed while replacing table [ 274.615863][ T8241] loop0: detected capacity change from 0 to 4096 [ 274.741728][ T8248] loop5: detected capacity change from 0 to 33792 [ 274.815759][ T8253] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 274.830890][ T8248] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 275.132342][ T5633] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.432676][ T8266] loop7: detected capacity change from 0 to 128 [ 275.517376][ T8263] loop5: detected capacity change from 0 to 2048 [ 275.583466][ T8263] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 276.415932][ T8286] loop6: detected capacity change from 0 to 128 [ 276.442841][ T8286] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 276.465162][ T8286] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 277.167044][ T8268] loop8: detected capacity change from 0 to 40427 [ 277.177055][ T8273] loop7: detected capacity change from 0 to 32768 [ 277.194573][ T8273] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.552 (8273) [ 277.234335][ T8268] F2FS-fs (loop8): Image doesn't support compression [ 277.234360][ T8268] F2FS-fs (loop8): build fault injection type: 0x4 [ 277.244844][ T8273] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 277.244876][ T8273] BTRFS info (device loop7): using crc32c checksum algorithm [ 277.257173][ T8268] F2FS-fs (loop8): invalid crc value [ 277.373596][ T8273] BTRFS info (device loop7): enabling ssd optimizations [ 277.373625][ T8273] BTRFS info (device loop7): turning on flush-on-commit [ 277.373645][ T8273] BTRFS info (device loop7): enabling free space tree [ 277.373664][ T8273] BTRFS info (device loop7): enabling auto defrag [ 277.373685][ T8273] BTRFS info (device loop7): use lzo compression, level 1 [ 277.373708][ T8273] BTRFS info (device loop7): max_inline set to 4096 [ 277.480424][ T8280] loop2: detected capacity change from 0 to 32768 [ 277.488787][ T8280] BTRFS warning: v1 space cache is deprecated, falling back to no space cache [ 277.499562][ T8268] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 277.506996][ T8280] BTRFS info: device /dev/loop2 (7:2) using temp-fsid d9e1ce28-83db-4459-88e5-11872effa11e [ 277.507056][ T8280] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.554 (8280) [ 277.543784][ T8268] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 277.592818][ T8268] syz.8.548: attempt to access beyond end of device [ 277.592818][ T8268] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 277.593802][ T8268] CPU: 0 UID: 0 PID: 8268 Comm: syz.8.548 Tainted: G L syzkaller #0 PREEMPT(full) [ 277.593839][ T8268] Tainted: [L]=SOFTLOCKUP [ 277.593849][ T8268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 277.593865][ T8268] Call Trace: [ 277.593875][ T8268] [ 277.593886][ T8268] dump_stack_lvl+0xe8/0x150 [ 277.593937][ T8268] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 277.593990][ T8268] f2fs_write_end_bio+0x118e/0x15d0 [ 277.594065][ T8268] __submit_merged_bio+0x258/0x6a0 [ 277.594092][ T8268] ? srso_alias_return_thunk+0x5/0xfbef5 [ 277.594124][ T8268] ? rcu_is_watching+0x16/0xb0 [ 277.594175][ T8268] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 277.594227][ T8268] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 277.594294][ T8268] ? srso_alias_return_thunk+0x5/0xfbef5 [ 277.594340][ T8268] f2fs_write_data_pages+0x2a13/0x36e0 [ 277.594428][ T8268] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 277.594459][ T8268] ? is_bpf_text_address+0x26/0x2b0 [ 277.594507][ T8268] ? arch_stack_walk+0xfb/0x150 [ 277.594586][ T8268] ? srso_alias_return_thunk+0x5/0xfbef5 [ 277.594616][ T8268] ? add_lock_to_list+0xc7/0x100 [ 277.594660][ T8268] ? srso_alias_return_thunk+0x5/0xfbef5 [ 277.594692][ T8268] ? __lock_acquire+0x1511/0x2de0 [ 277.594768][ T8268] ? srso_alias_return_thunk+0x5/0xfbef5 [ 277.594818][ T8268] ? do_raw_spin_lock+0x12b/0x2f0 [ 277.594855][ T8268] ? srso_alias_return_thunk+0x5/0xfbef5 [ 277.594890][ T8268] ? srso_alias_return_thunk+0x5/0xfbef5 [ 277.594920][ T8268] ? do_raw_spin_unlock+0xf5/0x200 [ 277.594948][ T8268] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 277.594982][ T8268] do_writepages+0x338/0x560 [ 277.595014][ T8268] ? srso_alias_return_thunk+0x5/0xfbef5 [ 277.595057][ T8268] ? srso_alias_return_thunk+0x5/0xfbef5 [ 277.595093][ T8268] ? srso_alias_return_thunk+0x5/0xfbef5 [ 277.595123][ T8268] ? do_raw_spin_unlock+0xf5/0x200 [ 277.595158][ T8268] filemap_fdatawrite+0x1e9/0x2f0 [ 277.595196][ T8268] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 277.595284][ T8268] ? srso_alias_return_thunk+0x5/0xfbef5 [ 277.595319][ T8268] ? srso_alias_return_thunk+0x5/0xfbef5 [ 277.595357][ T8268] ? do_raw_spin_unlock+0xf5/0x200 [ 277.595393][ T8268] f2fs_sync_dirty_inodes+0x471/0x970 [ 277.595452][ T8268] f2fs_write_checkpoint+0x867/0x24d0 [ 277.595543][ T8268] f2fs_issue_checkpoint+0x424/0x6f0 [ 277.595579][ T8268] ? srso_alias_return_thunk+0x5/0xfbef5 [ 277.595612][ T8268] ? __entry_text_end+0x102035/0x102039 [ 277.595642][ T8268] ? __lock_acquire+0x747/0x2de0 [ 277.595684][ T8268] ? __pfx_f2fs_issue_checkpoint+0x10/0x10 [ 277.595718][ T8268] ? kasan_save_free_info+0x40/0x50 [ 277.595748][ T8268] ? __kasan_slab_free+0x5c/0x80 [ 277.595785][ T8268] ? kmem_cache_free+0x182/0x650 [ 277.595819][ T8268] ? f2fs_mkdir+0x45c/0x640 [ 277.595856][ T8268] ? vfs_mkdir+0x411/0x660 [ 277.595894][ T8268] ? filename_mkdirat+0x284/0x550 [ 277.595932][ T8268] ? __se_sys_mkdirat+0x35/0x150 [ 277.595972][ T8268] ? do_syscall_64+0x16a/0x530 [ 277.596012][ T8268] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.596060][ T8268] ? srso_alias_return_thunk+0x5/0xfbef5 [ 277.596092][ T8268] ? __lock_acquire+0x747/0x2de0 [ 277.596186][ T8268] ? srso_alias_return_thunk+0x5/0xfbef5 [ 277.596231][ T8268] ? srso_alias_return_thunk+0x5/0xfbef5 [ 277.596262][ T8268] ? f2fs_sync_fs+0x1f2/0x3c0 [ 277.596309][ T8268] f2fs_mkdir+0x51b/0x640 [ 277.596360][ T8268] ? __pfx_f2fs_mkdir+0x10/0x10 [ 277.596417][ T8268] ? srso_alias_return_thunk+0x5/0xfbef5 [ 277.596448][ T8268] ? inode_permission+0x2b8/0x600 [ 277.596478][ T8268] ? srso_alias_return_thunk+0x5/0xfbef5 [ 277.596509][ T8268] ? srso_alias_return_thunk+0x5/0xfbef5 [ 277.596541][ T8268] ? security_inode_mkdir+0xc3/0x340 [ 277.596578][ T8268] vfs_mkdir+0x411/0x660 [ 277.596624][ T8268] ? srso_alias_return_thunk+0x5/0xfbef5 [ 277.596664][ T8268] filename_mkdirat+0x284/0x550 [ 277.596705][ T8268] ? __might_fault+0xaf/0x130 [ 277.596743][ T8268] ? __pfx_filename_mkdirat+0x10/0x10 [ 277.596791][ T8268] ? srso_alias_return_thunk+0x5/0xfbef5 [ 277.596822][ T8268] ? do_getname+0x151/0x250 [ 277.596857][ T8268] __se_sys_mkdirat+0x35/0x150 [ 277.596905][ T8268] do_syscall_64+0x16a/0x530 [ 277.596945][ T8268] ? trace_irq_disable+0x3b/0x140 [ 277.596983][ T8268] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.597020][ T8268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.597056][ T8268] RIP: 0033:0x7fd3cf7a8347 [ 277.597082][ T8268] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 277.597104][ T8268] RSP: 002b:00007fd3d05cce58 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 277.597132][ T8268] RAX: ffffffffffffffda RBX: 00007fd3d05ccee0 RCX: 00007fd3cf7a8347 [ 277.597152][ T8268] RDX: 00000000000001ff RSI: 0000200000011dc0 RDI: 00000000ffffff9c [ 277.597170][ T8268] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000200000011e00 [ 277.597188][ T8268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000011dc0 [ 277.597205][ T8268] R13: 00007fd3d05ccea0 R14: 0000000000000000 R15: 0000000000000000 [ 277.597252][ T8268] [ 277.612857][ T8280] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 277.612891][ T8280] BTRFS info (device loop2): using crc32c checksum algorithm [ 277.630497][ T6815] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 277.974899][ T8268] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 278.070620][ T8280] BTRFS info (device loop2): rebuilding free space tree [ 278.308284][ T8280] BTRFS info (device loop2): disabling free space tree [ 278.308349][ T8280] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 278.308375][ T8280] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 278.410467][ T8280] BTRFS info (device loop2): setting nodatasum [ 278.410495][ T8280] BTRFS info (device loop2): setting nodatacow [ 278.410514][ T8280] BTRFS info (device loop2): enabling ssd optimizations [ 278.410542][ T8280] BTRFS info (device loop2): turning off barriers [ 278.410562][ T8280] BTRFS info (device loop2): turning on flush-on-commit [ 278.410582][ T8280] BTRFS info (device loop2): force clearing of disk cache [ 278.485115][ T8284] loop5: detected capacity change from 0 to 32768 [ 278.588672][ T8284] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 278.859095][ T8284] XFS (loop5): Ending clean mount [ 278.905505][ T8284] XFS (loop5): Quotacheck needed: Please wait. [ 278.940407][ T8337] netlink: 12 bytes leftover after parsing attributes in process `syz.0.562'. [ 279.016396][ T5631] BTRFS info (device loop2): last unmount of filesystem d9e1ce28-83db-4459-88e5-11872effa11e [ 279.166953][ T8288] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 279.166978][ T8288] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 279.168439][ T8284] XFS (loop5): Quotacheck: Done. [ 279.250603][ T8288] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 279.259868][ T5918] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 279.259886][ T5918] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 279.495296][ T8345] Bluetooth: MGMT ver 1.23 [ 279.552372][ T8346] netlink: 'syz.0.566': attribute type 11 has an invalid length. [ 279.639141][ T5633] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 279.790369][ T5918] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 530ms [ 279.820378][ T5918] gfs2: fsid=syz:syz.0: jid=0: Done [ 279.820432][ T8288] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 280.073984][ T8288] gfs2: fsid=syz:syz.0: Corruption found in quota_change0 file: duplicate identifier in slot 57405 [ 280.114501][ T8288] gfs2: fsid=syz:syz.0: found 1 quota changes [ 280.711654][ T5918] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 280.862468][ T5918] usb 1-1: Using ep0 maxpacket: 32 [ 280.863290][ T5918] usb 1-1: New USB device found: idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 280.865653][ T5918] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 280.865702][ T5918] usb 1-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 280.865733][ T5918] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 280.865764][ T5918] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 280.865791][ T5918] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 281.048353][ T5918] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.048384][ T5918] usb 1-1: Product: syz [ 281.048402][ T5918] usb 1-1: Manufacturer: syz [ 281.048420][ T5918] usb 1-1: SerialNumber: syz [ 281.189350][ T5918] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90) [ 281.189455][ T5918] imon 1-1:155.0: unable to initialize intf0, err -90 [ 281.269661][ T8350] set_capacity_and_notify: 1 callbacks suppressed [ 281.282957][ T8350] loop2: detected capacity change from 0 to 32768 [ 281.348947][ T8350] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 281.460024][ T25] usb 1-1: USB disconnect, device number 11 [ 281.490418][ T8350] XFS (loop2): Ending clean mount [ 281.544909][ T5636] Bluetooth: hci4: command 0x0405 tx timeout [ 281.573310][ T8350] XFS (loop2): Corruption not fixed during online repair. Unmount and run xfs_repair. [ 281.625463][ T5631] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 281.630574][ T5631] XFS (loop2): Uncorrected metadata errors detected; please run xfs_repair. [ 282.056300][ T8380] loop5: detected capacity change from 0 to 40427 [ 282.158168][ T8380] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 282.158202][ T8380] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 282.197009][ T8380] F2FS-fs (loop5): invalid crc value [ 282.393237][ T8380] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 282.409641][ T8380] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 282.409686][ T8380] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 283.304105][ T8404] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 283.601300][ T25] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 283.752871][ T25] usb 8-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 283.755078][ T25] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 283.755107][ T25] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 283.755130][ T25] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 283.755178][ T25] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 283.814946][ T25] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 283.814978][ T25] usb 8-1: Product: syz [ 283.814996][ T25] usb 8-1: Manufacturer: syz [ 283.866809][ T25] cdc_wdm 8-1:1.0: skipping garbage [ 283.866832][ T25] cdc_wdm 8-1:1.0: skipping garbage [ 283.872539][ T25] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 283.872560][ T25] cdc_wdm 8-1:1.0: Unknown control protocol [ 284.092026][ T5784] usb 8-1: USB disconnect, device number 3 [ 284.122224][ T5785] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 284.283034][ T5785] usb 1-1: New USB device found: idVendor=28de, idProduct=1142, bcdDevice=0.00 [ 284.284180][ T5785] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.284216][ T5785] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 284.284258][ T5785] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.335729][ T5785] usb 1-1: config 0 descriptor?? [ 284.577306][ T8401] loop8: detected capacity change from 0 to 32768 [ 284.589606][ T8401] xfs: Deprecated parameter 'noikeep' [ 284.598968][ T8401] XFS: noikeep mount option is deprecated. [ 284.771782][ T8401] XFS (loop8): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 286.388866][ T5785] hid-steam 0003:28DE:1142.000A: unknown main item tag 0x0 [ 286.393451][ T8401] workqueue: Failed to create a rescuer kthread for wq "xfs-log/loop8": -EINTR [ 286.394925][ T8401] XFS (loop8): log mount failed [ 286.580648][ T5785] hid-steam 0003:28DE:1142.000A: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 286.580692][ T5785] hid-steam 0003:28DE:1142.000A: Steam wireless receiver connected [ 286.581034][ T5785] hid-steam 0003:28DE:1142.000A: No HID_FEATURE_REPORT present for ID 0 [ 286.581067][ T5785] hid-steam 0003:28DE:1142.000A: steam_probe:steam_get_conn_status failed with error -22 [ 286.675362][ T5785] hid-steam 0003:28DE:1142.000B: unknown main item tag 0x0 [ 286.775194][ T5785] hid-steam 0003:28DE:1142.000B: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 286.828940][ T5785] usb 1-1: USB disconnect, device number 12 [ 286.961848][ T5785] hid-steam 0003:28DE:1142.000A: Steam wireless receiver disconnected [ 286.964662][ T8436] syzkaller0: entered promiscuous mode [ 286.964684][ T8436] syzkaller0: entered allmulticast mode [ 286.989815][ T8437] fido_id[8437]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 287.018640][ T8436] tipc: Started in network mode [ 287.018674][ T8436] tipc: Node identity bef17c8b8ef3, cluster identity 4711 [ 287.033070][ T8436] tipc: Enabled bearer , priority 0 [ 287.083206][ T8434] tipc: Resetting bearer [ 287.178439][ T8434] tipc: Disabling bearer [ 287.664945][ T8446] loop8: detected capacity change from 0 to 40427 [ 287.670821][ T8446] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 287.670845][ T8446] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 287.697348][ T8446] F2FS-fs (loop8): invalid crc value [ 287.722092][ T25] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 287.805400][ T8446] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 287.821787][ T8446] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 287.821815][ T8446] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 288.022942][ T5785] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 288.071125][ T25] usb 8-1: New USB device found: idVendor=04d8, idProduct=c002, bcdDevice=0.00 [ 288.083674][ T25] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 288.083708][ T25] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 288.083749][ T25] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.862545][ T5785] usb 1-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 288.863892][ T5785] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 288.863939][ T5785] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 288.863970][ T5785] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 288.863996][ T5785] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 288.864041][ T5785] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.946638][ T25] hid-picolcd 0003:04D8:C002.000C: report_id 0 is invalid [ 288.946665][ T25] hid-picolcd 0003:04D8:C002.000C: item 0 1 1 8 parsing failed [ 288.947540][ T25] hid-picolcd 0003:04D8:C002.000C: device report parse failed [ 288.947652][ T25] hid-picolcd 0003:04D8:C002.000C: probe with driver hid-picolcd failed with error -22 [ 288.992958][ T5785] usb 1-1: config 0 descriptor?? [ 289.056041][ T25] usb 8-1: USB disconnect, device number 4 [ 289.429813][ T5785] plantronics 0003:047F:FFFF.000D: item 0 4 0 9 parsing failed [ 289.432018][ T5785] plantronics 0003:047F:FFFF.000D: parse failed [ 289.432126][ T5785] plantronics 0003:047F:FFFF.000D: probe with driver plantronics failed with error -22 [ 289.772628][ T25] usb 1-1: USB disconnect, device number 13 [ 290.310295][ T8455] loop5: detected capacity change from 0 to 32768 [ 290.357270][ T8455] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 290.539537][ T8455] XFS (loop5): Ending clean mount [ 290.762962][ T8491] netlink: 168 bytes leftover after parsing attributes in process `syz.0.609'. [ 290.952902][ T5633] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 291.046325][ T8470] loop2: detected capacity change from 0 to 40427 [ 291.048888][ T8470] F2FS-fs: heap/no_heap options were deprecated [ 291.071532][ T10] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 291.071703][ T8470] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64) [ 291.071727][ T8470] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 291.112544][ T8470] F2FS-fs (loop2): invalid crc value [ 291.234434][ T10] usb 8-1: New USB device found: idVendor=0b48, idProduct=1008, bcdDevice=1.00 [ 291.242759][ T10] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 291.242813][ T10] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 291.242859][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.496884][ T10] ttusb_dec_init_stb: unknown model returned by firmware (00000000) - please report [ 291.497101][ T10] ttusb-dec 8-1:1.0: probe with driver ttusb-dec failed with error -2 [ 291.625849][ T8470] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 291.643159][ T8470] F2FS-fs (loop2): Try to recover 1th superblock, ret: -30 [ 291.643184][ T8470] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 291.725610][ T10] usb 8-1: USB disconnect, device number 5 [ 291.855730][ T8505] loop0: detected capacity change from 0 to 8192 [ 291.877447][ T8505] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 293.392455][ T8500] loop8: detected capacity change from 0 to 40427 [ 293.415315][ T8500] F2FS-fs (loop8): Invalid SB checksum offset: 0 [ 293.415339][ T8500] F2FS-fs (loop8): Can't find valid F2FS filesystem in 2th superblock [ 293.439684][ T8500] F2FS-fs (loop8): invalid crc value [ 293.923668][ T8500] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 293.953661][ T8500] F2FS-fs (loop8): Try to recover 2th superblock, ret: 0 [ 293.953690][ T8500] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 294.247004][ T8531] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 294.742254][ T45] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 294.746566][ T8545] loop7: detected capacity change from 0 to 256 [ 294.747475][ T8545] exfat: Deprecated parameter 'utf8' [ 294.749157][ T8545] exfat: Deprecated parameter 'namecase' [ 294.771620][ T8545] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe6e0c303, utbl_chksum : 0xe619d30d) [ 294.892158][ T45] usb 1-1: New USB device found: idVendor=0b48, idProduct=1005, bcdDevice=1.00 [ 294.893354][ T45] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 294.917410][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 294.917436][ T45] usb 1-1: Product: syz [ 294.917452][ T45] usb 1-1: Manufacturer: syz [ 294.961763][ T45] usb 1-1: selecting invalid altsetting 1 [ 294.962343][ T45] dvb_ttusb_budget: ttusb_init_controller: error [ 294.962417][ T45] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 295.971353][ T8552] device-mapper: table: 248:2: verity: Data device lookup failed (-ENOENT) [ 295.971384][ T8552] device-mapper: ioctl: error adding target to table [ 295.988314][ T45] DVB: Unable to find symbol cx22700_attach() [ 296.081123][ T45] DVB: Unable to find symbol tda10046_attach() [ 296.081141][ T45] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 296.104243][ T45] usb 1-1: USB disconnect, device number 14 [ 296.181300][ T5642] Bluetooth: hci0: Opcode 0x0c13 failed: -110 [ 296.185586][ T5642] Bluetooth: hci0: command 0x0406 tx timeout [ 296.285896][ T8564] loop2: detected capacity change from 0 to 1024 [ 296.324541][ T8564] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 296.384181][ T30] audit: type=1800 audit(1794745610.981:8): pid=8564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.637" name="file2" dev="loop2" ino=840 res=0 errno=-22 [ 296.469077][ T8565] mmap: syz.8.636 (8565) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 296.492303][ T8565] loop8: detected capacity change from 0 to 64 [ 296.498957][ T3327] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.805626][ T3327] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.955351][ T3327] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.146806][ T5642] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 297.158756][ T5642] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 297.159526][ T5642] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 297.160550][ T5642] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 297.161350][ T5642] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 297.949304][ T8579] loop0: detected capacity change from 0 to 4096 [ 298.047796][ T8589] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 298.855696][ T3327] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.293031][ T5642] Bluetooth: hci3: command tx timeout [ 300.837475][ T8604] loop8: detected capacity change from 0 to 40427 [ 300.847777][ T8604] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 300.847801][ T8604] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 300.883024][ T8604] F2FS-fs (loop8): invalid crc value [ 302.121588][ T5642] Bluetooth: hci3: command tx timeout [ 302.705053][ T8604] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 302.725176][ T8604] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 302.725203][ T8604] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 302.759010][ T3327] bridge_slave_1: left allmulticast mode [ 302.759037][ T3327] bridge_slave_1: left promiscuous mode [ 302.759282][ T3327] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.834379][ T3327] bridge_slave_0: left allmulticast mode [ 302.834423][ T3327] bridge_slave_0: left promiscuous mode [ 302.850189][ T3327] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.172932][ T5642] Bluetooth: hci3: command tx timeout [ 304.545614][ T8641] device-mapper: table: 248:3: crypt: Error decoding and setting key (-ENOKEY) [ 304.545643][ T8641] device-mapper: ioctl: error adding target to table [ 304.578018][ T3327] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 304.598728][ T3327] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 304.611144][ T3327] bond0 (unregistering): Released all slaves [ 304.663878][ T3327] bond1 (unregistering): Released all slaves [ 304.903938][ T8581] rxe_eth0 speed is unknown, defaulting to 1000 [ 305.467512][ T5292] 8021q: adding VLAN 0 to HW filter on device eth9 [ 306.239412][ T8646] loop5: detected capacity change from 0 to 32768 [ 306.255546][ T5642] Bluetooth: hci3: command tx timeout [ 306.272318][ T8646] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.656 (8646) [ 306.330272][ T8646] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 306.330307][ T8646] BTRFS info (device loop5): using sha256 checksum algorithm [ 306.614017][ T8646] BTRFS info (device loop5): enabling ssd optimizations [ 306.614047][ T8646] BTRFS info (device loop5): turning on async discard [ 306.614066][ T8646] BTRFS info (device loop5): enabling free space tree [ 306.974198][ T5633] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 306.976161][ T8651] loop2: detected capacity change from 0 to 32768 [ 306.999169][ T8693] loop6: detected capacity change from 0 to 40427 [ 307.009948][ T8693] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 307.009974][ T8693] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 307.025398][ T8693] F2FS-fs (loop6): invalid crc value [ 307.046911][ T8651] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.657 (8651) [ 307.172110][ T8693] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 307.197616][ T8693] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 307.197644][ T8693] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 307.203777][ T8651] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 307.203811][ T8651] BTRFS info (device loop2): using crc32c checksum algorithm [ 307.315847][ T8696] tap0: tun_chr_ioctl cmd 2147767507 [ 307.376948][ T5292] 8021q: adding VLAN 0 to HW filter on device eth10 [ 308.494063][ T8651] BTRFS error (device loop2): open_ctree failed: -EINTR [ 308.516180][ T3327] hsr_slave_0: left promiscuous mode [ 308.558158][ T3327] hsr_slave_1: left promiscuous mode [ 308.614832][ T3327] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 308.614872][ T3327] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 308.661034][ T3327] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 308.661058][ T3327] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 309.044518][ T8741] loop0: detected capacity change from 0 to 40427 [ 309.050277][ T8741] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 309.050305][ T8741] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 309.092850][ T3327] veth1_macvtap: left promiscuous mode [ 309.092890][ T3327] veth0_macvtap: left promiscuous mode [ 309.093051][ T3327] veth1_vlan: left promiscuous mode [ 309.093139][ T3327] veth0_vlan: left promiscuous mode [ 309.136513][ T8741] F2FS-fs (loop0): invalid crc value [ 309.240294][ T8741] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 309.264404][ T8731] loop8: detected capacity change from 0 to 32768 [ 309.298680][ T8741] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 309.298708][ T8741] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 309.577582][ T8731] XFS (loop8): DAX unsupported by block device. Turning off DAX. [ 309.587890][ T8731] XFS (loop8): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 310.228518][ T8731] XFS (loop8): Ending clean mount [ 310.336624][ T8731] XFS (loop8): Quotacheck needed: Please wait. [ 310.595704][ T8731] XFS (loop8): Quotacheck: Done. [ 310.809683][ T7654] XFS (loop8): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 310.986534][ T8759] loop2: detected capacity change from 0 to 49152 [ 311.028119][ T8759] EXT4-fs (loop2): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 311.152895][ T8759] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w with ordered data mode. Quota mode: journalled. [ 311.666544][ T5631] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.898275][ T3327] team0 (unregistering): Port device team_slave_1 removed [ 312.781967][ T3327] team0 (unregistering): Port device team_slave_0 removed [ 312.913398][ T8790] device-mapper: table: 248:4: clone: Error opening source device (-ENOENT) [ 312.913427][ T8790] device-mapper: ioctl: error adding target to table [ 313.500512][ T8801] loop8: detected capacity change from 0 to 40427 [ 313.518310][ T8801] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 313.518337][ T8801] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 313.541070][ T8801] F2FS-fs (loop8): invalid crc value [ 313.623352][ T8801] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 313.648144][ T8801] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 313.648171][ T8801] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 313.670220][ T5292] 8021q: adding VLAN 0 to HW filter on device eth11 [ 315.169215][ T8796] loop0: detected capacity change from 0 to 32768 [ 315.278858][ T8796] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 315.332949][ T8831] jffs2: notice: (8831) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 315.590830][ T8796] XFS (loop0): Ending clean mount [ 315.859365][ T8581] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.859480][ T8581] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.859611][ T8581] bridge_slave_0: entered allmulticast mode [ 315.878368][ T8581] bridge_slave_0: entered promiscuous mode [ 315.889095][ T8581] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.889211][ T8581] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.889334][ T8581] bridge_slave_1: entered allmulticast mode [ 315.908864][ T8581] bridge_slave_1: entered promiscuous mode [ 315.936842][ T5634] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 315.994814][ T8581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 316.016663][ T8581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 316.106967][ T8581] team0: Port device team_slave_0 added [ 316.118663][ T8581] team0: Port device team_slave_1 added [ 316.332324][ T8581] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 316.332345][ T8581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 316.332376][ T8581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 316.349740][ T8581] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 316.349757][ T8581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 316.349787][ T8581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 316.494531][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.494616][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.558238][ T8581] hsr_slave_0: entered promiscuous mode [ 316.559457][ T8581] hsr_slave_1: entered promiscuous mode [ 316.560213][ T8581] debugfs: 'hsr0' already exists in 'hsr' [ 316.560230][ T8581] Cannot create hsr debugfs directory [ 317.867144][ T8868] loop8: detected capacity change from 0 to 24 [ 317.900241][ T8868] MTD: Attempt to mount non-MTD device "/dev/loop8" [ 318.004791][ T8868] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 318.084325][ T5292] 8021q: adding VLAN 0 to HW filter on device eth12 [ 319.333247][ T8879] device-mapper: table: 248:5: integrity: Not enough provided sectors for requested mapping size (-EINVAL) [ 319.333278][ T8879] device-mapper: ioctl: error adding target to table [ 319.469992][ T8885] block device autoloading is deprecated and will be removed. [ 319.575068][ T8581] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 319.586167][ T8581] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 319.587962][ T8581] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 319.594820][ T8895] loop6: detected capacity change from 0 to 8 [ 319.673071][ T8581] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 319.676897][ T8895] SQUASHFS error: lzo decompression failed, data probably corrupt [ 319.676929][ T8895] SQUASHFS error: Failed to read block 0x91: -5 [ 319.676944][ T8895] SQUASHFS error: Unable to read metadata cache entry [8f] [ 319.677297][ T8581] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 319.682209][ T8895] SQUASHFS error: Unable to read inode 0x11f [ 319.718222][ T8581] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 319.728723][ T8581] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 319.733545][ T8895] futex_wake_op: syz.6.695 tries to shift op by -1; fix this program [ 319.755573][ T8898] loop0: detected capacity change from 0 to 136 [ 319.786403][ T8581] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 319.860346][ T8876] loop2: detected capacity change from 0 to 32768 [ 319.885131][ T8876] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 319.890641][ T8876] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 319.966970][ T8898] rock: directory entry would overflow storage [ 319.966986][ T8898] rock: sig=0x4f50, size=4, remaining=3 [ 319.967003][ T8898] iso9660: Corrupted directory entry in block 2 of inode 1472 [ 320.086367][ T8876] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50. [ 320.159844][ T8876] XFS (loop2): Tail block (0x10) overwrite detected. Updated to 0x30 [ 320.213642][ T8876] XFS (loop2): Ending clean mount [ 320.277898][ T8876] XFS (loop2): Quotacheck needed: Please wait. [ 320.317193][ T8581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 320.805171][ T8581] 8021q: adding VLAN 0 to HW filter on device team0 [ 321.210822][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.210931][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 321.288961][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.289068][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 321.294464][ T5784] usb 7-1: new low-speed USB device number 3 using dummy_hcd [ 321.316875][ T8876] XFS (loop2): Quotacheck: Done. [ 321.444576][ T5784] usb 7-1: New USB device found: idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 321.447799][ T5784] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 321.447850][ T5784] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 321.447883][ T5784] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 321.447913][ T5784] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 321.447944][ T5784] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 321.449396][ T5784] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 321.449444][ T5784] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 321.449475][ T5784] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 321.449511][ T5784] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 321.449543][ T5784] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 321.454800][ T5784] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 321.454848][ T5784] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 321.454892][ T5784] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 321.454921][ T5784] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 321.454951][ T5784] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 321.474424][ T5784] usb 7-1: string descriptor 0 read error: -22 [ 321.474563][ T5784] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.486425][ T5631] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 321.535334][ T5784] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 322.304151][ T5879] usb 7-1: USB disconnect, device number 3 [ 324.241409][ T3104] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 324.392493][ T8964] device-mapper: table: 248:7: crypt: Integrity profile not supported. (-EINVAL) [ 324.392525][ T8964] device-mapper: ioctl: error adding target to table [ 324.414025][ T3104] usb 7-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 324.535615][ T8581] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 324.732618][ T8973] loop5: detected capacity change from 0 to 40427 [ 324.734793][ T8973] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 324.734820][ T8973] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 324.759283][ T8973] F2FS-fs (loop5): invalid crc value [ 324.785154][ T3104] usb 7-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 324.785192][ T3104] usb 7-1: config 0 interface 0 altsetting 255 bulk endpoint 0x8F has invalid maxpacket 61 [ 324.785221][ T3104] usb 7-1: config 0 interface 0 has no altsetting 0 [ 324.883957][ T3104] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 324.883989][ T3104] usb 7-1: Product: syz [ 324.884008][ T3104] usb 7-1: Manufacturer: syz [ 324.884025][ T3104] usb 7-1: SerialNumber: syz [ 324.893270][ T8973] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 324.922109][ T8973] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 324.922139][ T8973] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 324.928337][ T3104] usb 7-1: config 0 descriptor?? [ 324.929041][ T8960] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 324.964958][ T3104] usb 7-1: selecting invalid altsetting 0 [ 325.785429][ T3104] usb 7-1: USB disconnect, device number 4 [ 326.098100][ T7770] udevd[7770]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 326.158035][ T8581] veth0_vlan: entered promiscuous mode [ 326.199840][ T8581] veth1_vlan: entered promiscuous mode [ 326.366486][ T8581] veth0_macvtap: entered promiscuous mode [ 326.387497][ T8581] veth1_macvtap: entered promiscuous mode [ 326.477878][ T8581] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 326.510262][ T8581] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 326.573263][ T51] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.573461][ T51] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.573503][ T51] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.573542][ T51] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.932395][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.932420][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.074620][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.074659][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.143713][ T8990] loop2: detected capacity change from 0 to 40427 [ 327.164938][ T8990] F2FS-fs (loop2): build fault injection rate: 14 [ 327.164961][ T8990] F2FS-fs (loop2): build fault injection type: 0x30e4 [ 327.178362][ T8990] F2FS-fs (loop2): invalid crc value [ 328.459625][ T8990] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 329.660615][ T9013] loop6: detected capacity change from 0 to 40427 [ 329.679300][ T9013] F2FS-fs: heap/no_heap options were deprecated [ 329.965400][ T9013] F2FS-fs (loop6): invalid crc value [ 330.136546][ T9013] F2FS-fs (loop6): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root and reserve_node [ 330.396907][ T9029] loop8: detected capacity change from 0 to 32768 [ 330.578339][ T9013] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 330.607249][ T9029] JBD2: Ignoring recovery information on journal [ 330.880011][ T9025] loop5: detected capacity change from 0 to 40427 [ 330.889548][ T9029] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 330.941162][ T9025] F2FS-fs (loop5): build fault injection rate: 174 [ 330.942276][ T9025] F2FS-fs (loop5): build fault injection type: 0x3bfe8c [ 330.966391][ T9025] F2FS-fs (loop5): invalid crc value [ 331.035671][ T9054] jffs2: notice: (9054) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 331.262811][ T9025] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 331.287469][ T9025] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 331.420161][ T7654] ocfs2: Unmounting device (7,8) on (node local) [ 331.497889][ T5633] syz-executor: attempt to access beyond end of device [ 331.497889][ T5633] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 331.523672][ T5633] CPU: 1 UID: 0 PID: 5633 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 331.523709][ T5633] Tainted: [L]=SOFTLOCKUP [ 331.523719][ T5633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 331.523735][ T5633] Call Trace: [ 331.523744][ T5633] [ 331.523755][ T5633] dump_stack_lvl+0xe8/0x150 [ 331.523802][ T5633] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 331.523851][ T5633] f2fs_write_end_bio+0x118e/0x15d0 [ 331.523905][ T5633] __submit_merged_bio+0x258/0x6a0 [ 331.523929][ T5633] ? srso_alias_return_thunk+0x5/0xfbef5 [ 331.523960][ T5633] ? rcu_is_watching+0x16/0xb0 [ 331.524007][ T5633] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 331.524053][ T5633] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 331.524112][ T5633] ? srso_alias_return_thunk+0x5/0xfbef5 [ 331.524152][ T5633] f2fs_write_data_pages+0x2a13/0x36e0 [ 331.524227][ T5633] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 331.524256][ T5633] ? is_bpf_text_address+0x26/0x2b0 [ 331.524299][ T5633] ? arch_stack_walk+0xfb/0x150 [ 331.524369][ T5633] ? srso_alias_return_thunk+0x5/0xfbef5 [ 331.524399][ T5633] ? add_lock_to_list+0xc7/0x100 [ 331.524442][ T5633] ? srso_alias_return_thunk+0x5/0xfbef5 [ 331.524472][ T5633] ? __lock_acquire+0x1511/0x2de0 [ 331.524537][ T5633] ? srso_alias_return_thunk+0x5/0xfbef5 [ 331.524567][ T5633] ? do_raw_spin_lock+0x12b/0x2f0 [ 331.524600][ T5633] ? srso_alias_return_thunk+0x5/0xfbef5 [ 331.524634][ T5633] ? srso_alias_return_thunk+0x5/0xfbef5 [ 331.524668][ T5633] ? do_raw_spin_unlock+0xf5/0x200 [ 331.524697][ T5633] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 331.524728][ T5633] do_writepages+0x338/0x560 [ 331.524760][ T5633] ? srso_alias_return_thunk+0x5/0xfbef5 [ 331.524792][ T5633] ? srso_alias_return_thunk+0x5/0xfbef5 [ 331.524827][ T5633] ? srso_alias_return_thunk+0x5/0xfbef5 [ 331.524860][ T5633] ? do_raw_spin_unlock+0xf5/0x200 [ 331.524892][ T5633] filemap_fdatawrite+0x1e9/0x2f0 [ 331.524927][ T5633] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 331.525002][ T5633] ? srso_alias_return_thunk+0x5/0xfbef5 [ 331.525035][ T5633] ? srso_alias_return_thunk+0x5/0xfbef5 [ 331.525072][ T5633] ? do_raw_spin_unlock+0xf5/0x200 [ 331.525104][ T5633] f2fs_sync_dirty_inodes+0x471/0x970 [ 331.525158][ T5633] f2fs_write_checkpoint+0x867/0x24d0 [ 331.525237][ T5633] kill_f2fs_super+0x2df/0x700 [ 331.525276][ T5633] ? rcu_do_enqueue+0x616/0x870 [ 331.525310][ T5633] ? lockdep_hardirqs_on+0x7b/0x110 [ 331.525349][ T5633] ? __pfx_kill_f2fs_super+0x10/0x10 [ 331.525401][ T5633] ? __pfx_call_rcu+0x10/0x10 [ 331.525433][ T5633] ? srso_alias_return_thunk+0x5/0xfbef5 [ 331.525463][ T5633] ? shrinker_free+0x2a7/0x3b0 [ 331.525497][ T5633] deactivate_locked_super+0xbe/0x110 [ 331.525534][ T5633] cleanup_mnt+0x204/0x2a0 [ 331.525578][ T5633] task_work_run+0x1d9/0x260 [ 331.525621][ T5633] ? __pfx_task_work_run+0x10/0x10 [ 331.525674][ T5633] exit_to_user_mode_loop+0x204/0x770 [ 331.525709][ T5633] ? srso_alias_return_thunk+0x5/0xfbef5 [ 331.525739][ T5633] ? rcu_is_watching+0x16/0xb0 [ 331.525784][ T5633] do_syscall_64+0x32c/0x530 [ 331.525823][ T5633] ? trace_irq_disable+0x3b/0x140 [ 331.525863][ T5633] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.525897][ T5633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.525923][ T5633] RIP: 0033:0x7f5ce0baa747 [ 331.525945][ T5633] Code: a2 c7 05 ac 2f 25 00 00 00 00 00 eb 96 e8 b1 13 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 331.525966][ T5633] RSP: 002b:00007fffb5af5548 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 331.525994][ T5633] RAX: 0000000000000000 RBX: 00007f5ce0c37433 RCX: 00007f5ce0baa747 [ 331.526012][ T5633] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffb5af5600 [ 331.526028][ T5633] RBP: 00007fffb5af5600 R08: 00007fffb5af6600 R09: 00000000ffffffff [ 331.526046][ T5633] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffb5af6690 [ 331.526063][ T5633] R13: 00007f5ce0c37433 R14: 0000000000050e4b R15: 00007fffb5af66d0 [ 331.526104][ T5633] [ 331.545036][ T5633] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 331.731575][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88802276a400: rx timeout, send abort [ 332.149314][ T3104] logitech-hidpp-device 0003:046D:C082.000E: hidraw0: USB HID v0.04 Device [syz0] on syz0 [ 332.233371][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88802276a400: abort rx timeout. Force session deactivation [ 332.302676][ T9072] fido_id[9072]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 332.614018][ T9083] netlink: 4 bytes leftover after parsing attributes in process `syz.9.738'. [ 332.910091][ T9074] loop8: detected capacity change from 0 to 40427 [ 332.962954][ T9074] F2FS-fs (loop8): Small segment_count (9 < 1 * 24) [ 332.962983][ T9074] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 333.084767][ T5762] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 333.087637][ T9074] F2FS-fs (loop8): invalid crc value [ 333.233045][ T5762] usb 3-1: Using ep0 maxpacket: 8 [ 333.235751][ T5762] usb 3-1: New USB device found: idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 333.237191][ T5762] usb 3-1: config 0 has no interfaces? [ 333.237227][ T5762] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.372869][ T5762] usb 3-1: config 0 descriptor?? [ 333.439979][ T9074] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 333.470587][ T9074] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 333.470616][ T9074] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 333.555528][ T30] audit: type=1800 audit(1794745648.151:9): pid=9074 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.732" name="file1" dev="loop8" ino=10 res=0 errno=-22 [ 333.598964][ T5762] usb 3-1: USB disconnect, device number 9 [ 333.950529][ T7654] syz-executor: attempt to access beyond end of device [ 333.950529][ T7654] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 334.002736][ T7654] CPU: 0 UID: 0 PID: 7654 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 334.002776][ T7654] Tainted: [L]=SOFTLOCKUP [ 334.002786][ T7654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 334.002802][ T7654] Call Trace: [ 334.002812][ T7654] [ 334.002822][ T7654] dump_stack_lvl+0xe8/0x150 [ 334.002870][ T7654] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 334.002920][ T7654] f2fs_write_end_bio+0x118e/0x15d0 [ 334.002977][ T7654] __submit_merged_bio+0x258/0x6a0 [ 334.003002][ T7654] ? srso_alias_return_thunk+0x5/0xfbef5 [ 334.003032][ T7654] ? rcu_is_watching+0x16/0xb0 [ 334.003080][ T7654] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 334.003127][ T7654] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 334.003195][ T7654] ? srso_alias_return_thunk+0x5/0xfbef5 [ 334.003236][ T7654] f2fs_write_data_pages+0x2a13/0x36e0 [ 334.003267][ T7654] ? srso_alias_return_thunk+0x5/0xfbef5 [ 334.003341][ T7654] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 334.003370][ T7654] ? srso_alias_return_thunk+0x5/0xfbef5 [ 334.003416][ T7654] ? srso_alias_return_thunk+0x5/0xfbef5 [ 334.003450][ T7654] ? is_bpf_text_address+0x292/0x2b0 [ 334.003478][ T7654] ? is_bpf_text_address+0x26/0x2b0 [ 334.003538][ T7654] ? srso_alias_return_thunk+0x5/0xfbef5 [ 334.003567][ T7654] ? stack_trace_save+0xa9/0x100 [ 334.003600][ T7654] ? __pfx_stack_trace_save+0x10/0x10 [ 334.003639][ T7654] ? srso_alias_return_thunk+0x5/0xfbef5 [ 334.003683][ T7654] ? srso_alias_return_thunk+0x5/0xfbef5 [ 334.003714][ T7654] ? srso_alias_return_thunk+0x5/0xfbef5 [ 334.003743][ T7654] ? __lock_acquire+0x1511/0x2de0 [ 334.003810][ T7654] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 334.003843][ T7654] do_writepages+0x338/0x560 [ 334.003875][ T7654] ? srso_alias_return_thunk+0x5/0xfbef5 [ 334.003909][ T7654] ? srso_alias_return_thunk+0x5/0xfbef5 [ 334.003944][ T7654] ? srso_alias_return_thunk+0x5/0xfbef5 [ 334.003974][ T7654] ? do_raw_spin_unlock+0xf5/0x200 [ 334.004007][ T7654] filemap_fdatawrite+0x1e9/0x2f0 [ 334.004043][ T7654] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 334.004119][ T7654] ? srso_alias_return_thunk+0x5/0xfbef5 [ 334.004159][ T7654] ? srso_alias_return_thunk+0x5/0xfbef5 [ 334.004195][ T7654] ? do_raw_spin_unlock+0xf5/0x200 [ 334.004228][ T7654] f2fs_sync_dirty_inodes+0x471/0x970 [ 334.004282][ T7654] f2fs_write_checkpoint+0x867/0x24d0 [ 334.004360][ T7654] kill_f2fs_super+0x2df/0x700 [ 334.004400][ T7654] ? rcu_do_enqueue+0x616/0x870 [ 334.004432][ T7654] ? lockdep_hardirqs_on+0x7b/0x110 [ 334.004472][ T7654] ? __pfx_kill_f2fs_super+0x10/0x10 [ 334.004525][ T7654] ? __pfx_call_rcu+0x10/0x10 [ 334.004556][ T7654] ? srso_alias_return_thunk+0x5/0xfbef5 [ 334.004586][ T7654] ? shrinker_free+0x2a7/0x3b0 [ 334.004620][ T7654] deactivate_locked_super+0xbe/0x110 [ 334.004657][ T7654] cleanup_mnt+0x204/0x2a0 [ 334.004702][ T7654] task_work_run+0x1d9/0x260 [ 334.004740][ T7654] ? __pfx_task_work_run+0x10/0x10 [ 334.004786][ T7654] exit_to_user_mode_loop+0x204/0x770 [ 334.004822][ T7654] ? srso_alias_return_thunk+0x5/0xfbef5 [ 334.004852][ T7654] ? rcu_is_watching+0x16/0xb0 [ 334.004897][ T7654] do_syscall_64+0x32c/0x530 [ 334.004935][ T7654] ? trace_irq_disable+0x3b/0x140 [ 334.004972][ T7654] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.005005][ T7654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.005031][ T7654] RIP: 0033:0x7fd3cf7aa747 [ 334.005055][ T7654] Code: a2 c7 05 ac 2f 25 00 00 00 00 00 eb 96 e8 b1 13 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 334.005076][ T7654] RSP: 002b:00007fffc68d6b48 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 334.005103][ T7654] RAX: 0000000000000000 RBX: 00007fd3cf837433 RCX: 00007fd3cf7aa747 [ 334.005121][ T7654] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffc68d6c00 [ 334.005145][ T7654] RBP: 00007fffc68d6c00 R08: 00007fffc68d7c00 R09: 00000000ffffffff [ 334.005164][ T7654] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffc68d7c90 [ 334.005181][ T7654] R13: 00007fd3cf837433 R14: 0000000000051802 R15: 00007fffc68d7cd0 [ 334.005222][ T7654] [ 334.125854][ T7654] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 334.736809][ T9113] loop2: detected capacity change from 0 to 512 [ 335.211096][ T9125] netlink: 'syz.0.752': attribute type 9 has an invalid length. [ 335.268758][ T9125] macvlan2: entered promiscuous mode [ 335.290338][ T9109] loop9: detected capacity change from 0 to 32768 [ 335.293044][ T9125] macvlan2: entered allmulticast mode [ 335.391613][ T9109] XFS (loop9): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 335.757081][ T5642] Bluetooth: hci0: command 0x0406 tx timeout [ 336.527166][ T9109] XFS (loop9): Ending clean mount [ 336.888001][ T8581] XFS (loop9): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 338.130842][ T9142] loop0: detected capacity change from 0 to 32768 [ 338.163736][ T9142] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.755 (9142) [ 338.200849][ T9142] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 338.200885][ T9142] BTRFS info (device loop0): using crc32c checksum algorithm [ 338.259193][ T9172] loop2: detected capacity change from 0 to 32896 [ 338.357437][ T9142] BTRFS info (device loop0): enabling ssd optimizations [ 338.357467][ T9142] BTRFS info (device loop0): turning on flush-on-commit [ 338.357486][ T9142] BTRFS info (device loop0): enabling free space tree [ 338.357505][ T9142] BTRFS info (device loop0): enabling auto defrag [ 338.357525][ T9142] BTRFS info (device loop0): use lzo compression, level 1 [ 338.357548][ T9142] BTRFS info (device loop0): max_inline set to 4096 [ 338.401603][ T9172] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 338.411780][ T9172] ext4 filesystem being mounted at /140/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 338.771345][ T5631] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 338.835141][ T5634] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 339.972943][ T9208] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 339.972967][ T9208] block device autoloading is deprecated and will be removed. [ 340.138638][ T9206] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 340.400136][ T9225] loop0: detected capacity change from 0 to 1024 [ 341.970047][ T9231] loop5: detected capacity change from 0 to 4096 [ 342.369360][ T9231] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 343.001919][ T9231] ntfs3(loop5): Failed to initialize $Extend/$Reparse. [ 343.109980][ T9263] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 343.323313][ T5886] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 343.542264][ T5886] usb 7-1: Using ep0 maxpacket: 32 [ 343.578102][ T5886] usb 7-1: New USB device found: idVendor=046d, idProduct=c31c, bcdDevice=0.40 [ 343.773435][ T5886] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 343.775439][ T5886] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 343.778619][ T5886] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.018082][ T5886] usb 7-1: config 0 descriptor?? [ 344.042721][ T5886] hub 7-1:0.0: USB hub found [ 344.124584][ T9269] loop2: detected capacity change from 0 to 33280 [ 344.171744][ T5636] Bluetooth: hci6: command 0x0406 tx timeout [ 344.175631][ T9269] EXT4-fs (loop2): 1 truncate cleaned up [ 344.191952][ T9269] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 344.239352][ T30] audit: type=1800 audit(1794745658.831:10): pid=9269 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.786" name="file0" dev="loop2" ino=13 res=0 errno=-22 [ 344.276672][ T5886] hub 7-1:0.0: 1 port detected [ 344.312929][ T9276] capability: warning: `syz.8.789' uses deprecated v2 capabilities in a way that may be insecure [ 344.368851][ T9269] EXT4-fs error (device loop2): ext4_validate_block_bitmap:445: comm syz.2.786: bg 0: block 465: padding at end of block bitmap is not set [ 344.410802][ T9269] EXT4-fs (loop2): Remounting filesystem read-only [ 344.559675][ T9260] loop6: detected capacity change from 0 to 1024 [ 344.577041][ T9279] netlink: 'syz.5.790': attribute type 4 has an invalid length. [ 344.583164][ T9260] hfsplus: failed to load extents file [ 344.634047][ T9282] jffs2: notice: (9282) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 344.798283][ T5631] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.879135][ T9281] loop0: detected capacity change from 0 to 40427 [ 344.881351][ T9281] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 344.881377][ T9281] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 344.886882][ T5886] hub 7-1:0.0: config failed, can't get hub status (err -71) [ 344.897404][ T5886] usbhid 7-1:0.0: can't add hid device: -71 [ 344.897507][ T5886] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 344.935488][ T5886] usb 7-1: USB disconnect, device number 5 [ 344.938160][ T9281] F2FS-fs (loop0): invalid crc value [ 345.545867][ T9281] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 345.594704][ T9281] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 345.594733][ T9281] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 346.813348][ T9299] loop6: detected capacity change from 0 to 2048 [ 346.837780][ T9301] loop8: detected capacity change from 0 to 1024 [ 349.786125][ T9305] loop2: detected capacity change from 0 to 40427 [ 349.803686][ T9305] F2FS-fs (loop2): build fault injection rate: 174 [ 349.803709][ T9305] F2FS-fs (loop2): build fault injection type: 0x3bfe8c [ 349.823917][ T9305] F2FS-fs (loop2): invalid crc value [ 350.230560][ T9305] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 350.718109][ T9346] loop0: detected capacity change from 0 to 256 [ 350.721153][ T9346] exfat: Deprecated parameter 'utf8' [ 350.738895][ T9346] exfat: Deprecated parameter 'namecase' [ 350.739009][ T9346] exfat: Deprecated parameter 'namecase' [ 350.739035][ T9346] exfat: Deprecated parameter 'utf8' [ 350.765387][ T30] audit: type=1326 audit(1794745665.361:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9345 comm="syz.6.811" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb8221a94d9 code=0x0 [ 350.800142][ T9346] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0x6a70c931, utbl_chksum : 0xe619d30d) [ 350.800596][ T9346] exFAT-fs (loop0): failed to test first cluster bit of root dir(5) [ 350.843026][ T9346] exFAT-fs (loop0): start_clu is invalid cluster(0x400) [ 351.041381][ T9352] netlink: 8 bytes leftover after parsing attributes in process `syz.8.814'. [ 352.138992][ T9365] loop2: detected capacity change from 0 to 16 [ 352.205602][ T9365] erofs (device loop2): mounted with root inode @ nid 36. [ 352.288575][ T9365] erofs (device loop2): invalid h_shared_count 83 @ nid 46 [ 352.295471][ T9369] FAULT_INJECTION: forcing a failure. [ 352.295471][ T9369] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 352.295506][ T9369] CPU: 0 UID: 0 PID: 9369 Comm: syz.0.818 Tainted: G L syzkaller #0 PREEMPT(full) [ 352.295539][ T9369] Tainted: [L]=SOFTLOCKUP [ 352.295548][ T9369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 352.295563][ T9369] Call Trace: [ 352.295573][ T9369] [ 352.295583][ T9369] dump_stack_lvl+0xe8/0x150 [ 352.295629][ T9369] should_fail_ex+0x3eb/0x540 [ 352.295669][ T9369] _copy_to_user+0x31/0xb0 [ 352.295707][ T9369] copy_to_sockptr+0x5e/0xa0 [ 352.295737][ T9369] do_tcp_getsockopt+0x1bd7/0x2b60 [ 352.295777][ T9369] ? __pfx_do_tcp_getsockopt+0x10/0x10 [ 352.295803][ T9369] ? handle_mm_fault+0x2e3d/0x2f80 [ 352.295829][ T9369] ? sock_recv_errqueue+0x5b0/0x5e0 [ 352.295868][ T9369] ? handle_mm_fault+0xee/0x2f80 [ 352.295899][ T9369] ? futex_unqueue+0x22/0x240 [ 352.295942][ T9369] ? __pfx_handle_mm_fault+0x10/0x10 [ 352.295969][ T9369] ? srso_alias_return_thunk+0x5/0xfbef5 [ 352.295999][ T9369] ? rcu_is_watching+0x16/0xb0 [ 352.296038][ T9369] ? srso_alias_return_thunk+0x5/0xfbef5 [ 352.296067][ T9369] ? __up_read+0x29c/0x930 [ 352.296097][ T9369] ? __pfx___up_read+0x10/0x10 [ 352.296124][ T9369] ? do_user_addr_fault+0xc7c/0x1480 [ 352.296170][ T9369] ? srso_alias_return_thunk+0x5/0xfbef5 [ 352.296199][ T9369] ? do_user_addr_fault+0xd3f/0x1480 [ 352.296240][ T9369] ? irqentry_exit+0x2a0/0x9b0 [ 352.296277][ T9369] ? srso_alias_return_thunk+0x5/0xfbef5 [ 352.296307][ T9369] ? lockdep_hardirqs_on+0x7b/0x110 [ 352.296343][ T9369] ? srso_alias_return_thunk+0x5/0xfbef5 [ 352.296372][ T9369] ? irqentry_exit+0x2a0/0x9b0 [ 352.296407][ T9369] ? trace_irq_disable+0x3b/0x140 [ 352.296459][ T9369] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 352.296486][ T9369] tcp_getsockopt+0x83/0x130 [ 352.296512][ T9369] ? sock_recv_errqueue+0x5b0/0x5e0 [ 352.296537][ T9369] ? sock_recv_errqueue+0x5b0/0x5e0 [ 352.296563][ T9369] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 352.296590][ T9369] do_sock_getsockopt+0x4aa/0x640 [ 352.296628][ T9369] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 352.296665][ T9369] ? srso_alias_return_thunk+0x5/0xfbef5 [ 352.296707][ T9369] ? srso_alias_return_thunk+0x5/0xfbef5 [ 352.296736][ T9369] ? __fget_files+0x3a2/0x420 [ 352.296771][ T9369] ? __fget_files+0x2a/0x420 [ 352.296813][ T9369] __x64_sys_getsockopt+0x1a4/0x240 [ 352.296856][ T9369] do_syscall_64+0x16a/0x530 [ 352.296894][ T9369] ? trace_irq_disable+0x3b/0x140 [ 352.296929][ T9369] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.296963][ T9369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.296989][ T9369] RIP: 0033:0x7f3f999a94d9 [ 352.297012][ T9369] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 352.297033][ T9369] RSP: 002b:00007f3f9a8ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 352.297059][ T9369] RAX: ffffffffffffffda RBX: 00007f3f99c25fa0 RCX: 00007f3f999a94d9 [ 352.297078][ T9369] RDX: 0000000000000021 RSI: 0000000000000006 RDI: 0000000000000004 [ 352.297093][ T9369] RBP: 00007f3f99a3804e R08: 0000000000000000 R09: 0000000000000000 [ 352.297109][ T9369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 352.297125][ T9369] R13: 00007f3f99c26038 R14: 00007f3f99c25fa0 R15: 00007ffec7c0d348 [ 352.297171][ T9369] [ 352.806565][ T9386] FAULT_INJECTION: forcing a failure. [ 352.806565][ T9386] name failslab, interval 1, probability 0, space 0, times 0 [ 352.806604][ T9386] CPU: 0 UID: 0 PID: 9386 Comm: syz.2.822 Tainted: G L syzkaller #0 PREEMPT(full) [ 352.806638][ T9386] Tainted: [L]=SOFTLOCKUP [ 352.806648][ T9386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 352.806663][ T9386] Call Trace: [ 352.806673][ T9386] [ 352.806684][ T9386] dump_stack_lvl+0xe8/0x150 [ 352.806736][ T9386] should_fail_ex+0x3eb/0x540 [ 352.806776][ T9386] should_failslab+0xa8/0x100 [ 352.806818][ T9386] ? ptlock_alloc+0x20/0x70 [ 352.806846][ T9386] kmem_cache_alloc_noprof+0x9c/0x600 [ 352.806879][ T9386] ? srso_alias_return_thunk+0x5/0xfbef5 [ 352.806912][ T9386] ? ptlock_alloc+0x20/0x70 [ 352.806947][ T9386] ptlock_alloc+0x20/0x70 [ 352.806975][ T9386] pte_alloc_one+0x7a/0x370 [ 352.807017][ T9386] collapse_pmd+0x9f6/0x67f0 [ 352.807086][ T9386] ? __pfx_collapse_pmd+0x10/0x10 [ 352.807116][ T9386] ? srso_alias_return_thunk+0x5/0xfbef5 [ 352.807145][ T9386] ? __lock_acquire+0x747/0x2de0 [ 352.807195][ T9386] ? srso_alias_return_thunk+0x5/0xfbef5 [ 352.807230][ T9386] ? srso_alias_return_thunk+0x5/0xfbef5 [ 352.807258][ T9386] ? __lock_acquire+0x747/0x2de0 [ 352.807302][ T9386] ? srso_alias_return_thunk+0x5/0xfbef5 [ 352.807330][ T9386] ? do_raw_spin_lock+0x12b/0x2f0 [ 352.807356][ T9386] ? srso_alias_return_thunk+0x5/0xfbef5 [ 352.807397][ T9386] ? srso_alias_return_thunk+0x5/0xfbef5 [ 352.807425][ T9386] ? do_raw_spin_lock+0x12b/0x2f0 [ 352.807453][ T9386] ? srso_alias_return_thunk+0x5/0xfbef5 [ 352.807481][ T9386] ? rcu_is_watching+0x16/0xb0 [ 352.807518][ T9386] ? srso_alias_return_thunk+0x5/0xfbef5 [ 352.807547][ T9386] ? __up_read+0x29c/0x930 [ 352.807576][ T9386] ? __pfx___up_read+0x10/0x10 [ 352.807601][ T9386] ? srso_alias_return_thunk+0x5/0xfbef5 [ 352.807643][ T9386] collapse_single_pmd+0x1c74/0x36b0 [ 352.807705][ T9386] ? __pfx_collapse_single_pmd+0x10/0x10 [ 352.807738][ T9386] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 352.807781][ T9386] ? flush_work+0xd/0x30 [ 352.807812][ T9386] ? srso_alias_return_thunk+0x5/0xfbef5 [ 352.807841][ T9386] ? __lru_add_drain_all+0x601/0x7a0 [ 352.807873][ T9386] madvise_collapse+0x3e7/0x920 [ 352.807912][ T9386] madvise_vma_behavior+0xffe/0x4cb0 [ 352.807959][ T9386] ? __lock_acquire+0x747/0x2de0 [ 352.807994][ T9386] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 352.808035][ T9386] ? srso_alias_return_thunk+0x5/0xfbef5 [ 352.808071][ T9386] ? srso_alias_return_thunk+0x5/0xfbef5 [ 352.808100][ T9386] ? do_raw_spin_lock+0x12b/0x2f0 [ 352.808127][ T9386] ? srso_alias_return_thunk+0x5/0xfbef5 [ 352.808168][ T9386] ? srso_alias_return_thunk+0x5/0xfbef5 [ 352.808198][ T9386] ? rcu_is_watching+0x16/0xb0 [ 352.808236][ T9386] ? srso_alias_return_thunk+0x5/0xfbef5 [ 352.808264][ T9386] ? trace_hrtimer_start+0x82/0x200 [ 352.808297][ T9386] ? srso_alias_return_thunk+0x5/0xfbef5 [ 352.808326][ T9386] ? hrtimer_start_range_ns_common+0x7f6/0xb60 [ 352.808356][ T9386] ? srso_alias_return_thunk+0x5/0xfbef5 [ 352.808387][ T9386] ? srso_alias_return_thunk+0x5/0xfbef5 [ 352.808418][ T9386] ? srso_alias_return_thunk+0x5/0xfbef5 [ 352.808450][ T9386] ? finish_task_switch+0x40e/0xc60 [ 352.808486][ T9386] ? srso_alias_return_thunk+0x5/0xfbef5 [ 352.808514][ T9386] ? lockdep_hardirqs_on+0x7b/0x110 [ 352.808552][ T9386] ? srso_alias_return_thunk+0x5/0xfbef5 [ 352.808580][ T9386] ? rcu_is_watching+0x16/0xb0 [ 352.808617][ T9386] ? srso_alias_return_thunk+0x5/0xfbef5 [ 352.808645][ T9386] ? trace_sched_exit_tp+0x3a/0x130 [ 352.808686][ T9386] ? srso_alias_return_thunk+0x5/0xfbef5 [ 352.808713][ T9386] ? __lock_acquire+0x747/0x2de0 [ 352.808749][ T9386] ? srso_alias_return_thunk+0x5/0xfbef5 [ 352.808783][ T9386] ? srso_alias_return_thunk+0x5/0xfbef5 [ 352.808816][ T9386] ? srso_alias_return_thunk+0x5/0xfbef5 [ 352.808844][ T9386] ? mas_prev_slot+0xb76/0xbf0 [ 352.808901][ T9386] ? srso_alias_return_thunk+0x5/0xfbef5 [ 352.808929][ T9386] ? find_vma_prev+0x123/0x1b0 [ 352.808958][ T9386] ? __pfx_find_vma_prev+0x10/0x10 [ 352.808980][ T9386] ? futex_unqueue+0x22/0x240 [ 352.809026][ T9386] ? __futex_wait+0x3c7/0x470 [ 352.809056][ T9386] ? srso_alias_return_thunk+0x5/0xfbef5 [ 352.809096][ T9386] madvise_walk_vmas+0x57d/0xb70 [ 352.809147][ T9386] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 352.809190][ T9386] ? srso_alias_return_thunk+0x5/0xfbef5 [ 352.809221][ T9386] ? srso_alias_return_thunk+0x5/0xfbef5 [ 352.809249][ T9386] ? blk_start_plug+0x6e/0x1b0 [ 352.809277][ T9386] madvise_do_behavior+0x385/0x540 [ 352.809321][ T9386] ? __pfx_madvise_do_behavior+0x10/0x10 [ 352.809356][ T9386] ? srso_alias_return_thunk+0x5/0xfbef5 [ 352.809394][ T9386] ? srso_alias_return_thunk+0x5/0xfbef5 [ 352.809421][ T9386] ? down_read+0x2b9/0x320 [ 352.809450][ T9386] ? srso_alias_return_thunk+0x5/0xfbef5 [ 352.809483][ T9386] do_madvise+0x327/0x3a0 [ 352.809516][ T9386] ? srso_alias_return_thunk+0x5/0xfbef5 [ 352.809548][ T9386] ? __pfx_do_madvise+0x10/0x10 [ 352.809596][ T9386] ? srso_alias_return_thunk+0x5/0xfbef5 [ 352.809624][ T9386] ? __se_sys_futex+0x3a8/0x450 [ 352.809659][ T9386] ? srso_alias_return_thunk+0x5/0xfbef5 [ 352.809687][ T9386] ? rcu_is_watching+0x16/0xb0 [ 352.809734][ T9386] __x64_sys_madvise+0xa6/0xc0 [ 352.809772][ T9386] do_syscall_64+0x16a/0x530 [ 352.809808][ T9386] ? trace_irq_disable+0x3b/0x140 [ 352.809842][ T9386] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.809874][ T9386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.809898][ T9386] RIP: 0033:0x7f92dcba94d9 [ 352.809920][ T9386] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 352.809940][ T9386] RSP: 002b:00007f92dadee028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 352.809965][ T9386] RAX: ffffffffffffffda RBX: 00007f92dce25fa0 RCX: 00007f92dcba94d9 [ 352.809983][ T9386] RDX: 0000000000000019 RSI: 0000000000600003 RDI: 0000200000000000 [ 352.809999][ T9386] RBP: 00007f92dcc3804e R08: 0000000000000000 R09: 0000000000000000 [ 352.810014][ T9386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 352.810029][ T9386] R13: 00007f92dce26038 R14: 00007f92dce25fa0 R15: 00007ffd03b800e8 [ 352.810067][ T9386] [ 353.523163][ T9395] loop9: detected capacity change from 0 to 64 [ 353.565838][ T9395] hfs: invalid btree extent records [ 353.565935][ T9395] hfs: unable to open extent tree [ 353.565946][ T9395] hfs: can't find a HFS filesystem on dev loop9 [ 353.653967][ T9395] loop9: detected capacity change from 0 to 32896 [ 353.657337][ T30] audit: type=1326 audit(1794745668.251:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9392 comm="syz.2.828" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f92dcba94d9 code=0x0 [ 353.718725][ T9395] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 353.736440][ T9397] loop0: detected capacity change from 0 to 2048 [ 353.993393][ T9395] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 354.151113][ T9395] ext2 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 354.787765][ T9407] loop8: detected capacity change from 0 to 32896 [ 354.850952][ T9407] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 354.879881][ T9407] ext4 filesystem being mounted at /67/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 354.960867][ T8581] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 355.218088][ T7654] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 355.364863][ T9391] loop5: detected capacity change from 0 to 32768 [ 355.796073][ T9391] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.827 (9391) [ 356.438602][ T9430] loop9: detected capacity change from 0 to 1024 [ 356.543274][ T9436] ip_tables: iptables: counters copy to user failed while replacing table [ 356.705744][ T5886] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 356.788265][ T9440] FAULT_INJECTION: forcing a failure. [ 356.788265][ T9440] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 356.788306][ T9440] CPU: 1 UID: 0 PID: 9440 Comm: syz.0.843 Tainted: G L syzkaller #0 PREEMPT(full) [ 356.788339][ T9440] Tainted: [L]=SOFTLOCKUP [ 356.788349][ T9440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 356.788371][ T9440] Call Trace: [ 356.788380][ T9440] [ 356.788391][ T9440] dump_stack_lvl+0xe8/0x150 [ 356.788439][ T9440] should_fail_ex+0x3eb/0x540 [ 356.788480][ T9440] _copy_from_user+0x2d/0xb0 [ 356.788517][ T9440] core_sys_select+0x671/0xb40 [ 356.788565][ T9440] ? __pfx_core_sys_select+0x10/0x10 [ 356.788623][ T9440] ? __pfx_set_user_sigmask+0x10/0x10 [ 356.788664][ T9440] ? srso_alias_return_thunk+0x5/0xfbef5 [ 356.788704][ T9440] ? put_timespec64+0xd8/0x130 [ 356.788754][ T9440] __se_sys_pselect6+0x267/0x320 [ 356.788790][ T9440] ? __pfx___se_sys_pselect6+0x10/0x10 [ 356.788829][ T9440] ? srso_alias_return_thunk+0x5/0xfbef5 [ 356.788859][ T9440] ? __x64_sys_pselect6+0x21/0xf0 [ 356.788892][ T9440] do_syscall_64+0x16a/0x530 [ 356.788931][ T9440] ? trace_irq_disable+0x3b/0x140 [ 356.788970][ T9440] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.789004][ T9440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.789032][ T9440] RIP: 0033:0x7f3f999a94d9 [ 356.789055][ T9440] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 356.789078][ T9440] RSP: 002b:00007f3f9a8ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 356.789105][ T9440] RAX: ffffffffffffffda RBX: 00007f3f99c25fa0 RCX: 00007f3f999a94d9 [ 356.789125][ T9440] RDX: 0000200000000140 RSI: 0000000000000000 RDI: 0000000000000000 [ 356.789141][ T9440] RBP: 00007f3f99a3804e R08: 00002000000001c0 R09: 0000000000000000 [ 356.789160][ T9440] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000 [ 356.789177][ T9440] R13: 00007f3f99c26038 R14: 00007f3f99c25fa0 R15: 00007ffec7c0d348 [ 356.789219][ T9440] [ 356.805379][ T9442] loop9: detected capacity change from 0 to 164 [ 356.872747][ T5886] usb 9-1: Using ep0 maxpacket: 32 [ 356.892270][ T5886] usb 9-1: unable to get BOS descriptor or descriptor too short [ 356.892320][ T5886] usb 9-1: New USB device found: idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 356.893831][ T5886] usb 9-1: config 14 has an invalid interface number: 57 but max is 1 [ 356.893857][ T5886] usb 9-1: config 14 has an invalid interface number: 228 but max is 1 [ 356.893880][ T5886] usb 9-1: config 14 has no interface number 0 [ 356.893899][ T5886] usb 9-1: config 14 has no interface number 1 [ 356.893965][ T5886] usb 9-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 356.894059][ T5886] usb 9-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 356.894090][ T5886] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 356.894120][ T5886] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 356.894152][ T5886] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 356.894182][ T5886] usb 9-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 356.894213][ T5886] usb 9-1: config 14 interface 57 has no altsetting 0 [ 356.894234][ T5886] usb 9-1: config 14 interface 228 has no altsetting 0 [ 356.915450][ T5886] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.915478][ T5886] usb 9-1: Product: syz [ 356.915494][ T5886] usb 9-1: Manufacturer: syz [ 356.915511][ T5886] usb 9-1: SerialNumber: syz [ 357.395774][ T5886] legousbtower 9-1:14.57: interrupt endpoints not found [ 357.531419][ T9458] zero sized request [ 358.416806][ T5886] legousbtower 9-1:14.228: get version request failed: -121 [ 358.416995][ T5886] legousbtower 9-1:14.228: probe with driver legousbtower failed with error -121 [ 358.503055][ T9469] loop2: detected capacity change from 0 to 1024 [ 358.574359][ T9472] FAULT_INJECTION: forcing a failure. [ 358.574359][ T9472] name failslab, interval 1, probability 0, space 0, times 0 [ 358.574398][ T9472] CPU: 0 UID: 0 PID: 9472 Comm: syz.9.855 Tainted: G L syzkaller #0 PREEMPT(full) [ 358.574433][ T9472] Tainted: [L]=SOFTLOCKUP [ 358.574443][ T9472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 358.574458][ T9472] Call Trace: [ 358.574468][ T9472] [ 358.574479][ T9472] dump_stack_lvl+0xe8/0x150 [ 358.574527][ T9472] should_fail_ex+0x3eb/0x540 [ 358.574568][ T9472] should_failslab+0xa8/0x100 [ 358.574611][ T9472] ? skb_clone+0x212/0x3a0 [ 358.574647][ T9472] kmem_cache_alloc_noprof+0x9c/0x600 [ 358.574683][ T9472] ? srso_alias_return_thunk+0x5/0xfbef5 [ 358.574713][ T9472] ? skb_clone+0x212/0x3a0 [ 358.574756][ T9472] skb_clone+0x212/0x3a0 [ 358.574793][ T9472] ? nfnetlink_rcv+0x4b0/0x28c0 [ 358.574839][ T9472] nfnetlink_rcv+0x4de/0x28c0 [ 358.574895][ T9472] ? __local_bh_enable_ip+0xd6/0x140 [ 358.574949][ T9472] ? srso_alias_return_thunk+0x5/0xfbef5 [ 358.574981][ T9472] ? lockdep_hardirqs_on+0x7b/0x110 [ 358.575019][ T9472] ? srso_alias_return_thunk+0x5/0xfbef5 [ 358.575049][ T9472] ? __local_bh_enable_ip+0xd6/0x140 [ 358.575085][ T9472] ? srso_alias_return_thunk+0x5/0xfbef5 [ 358.575114][ T9472] ? __dev_queue_xmit+0x1efb/0x3920 [ 358.575157][ T9472] ? __dev_queue_xmit+0x29b/0x3920 [ 358.575209][ T9472] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 358.575276][ T9472] ? __copy_skb_header+0xa3/0x4a0 [ 358.575312][ T9472] ? srso_alias_return_thunk+0x5/0xfbef5 [ 358.575366][ T9472] ? srso_alias_return_thunk+0x5/0xfbef5 [ 358.575396][ T9472] ? skb_clone+0x246/0x3a0 [ 358.575434][ T9472] ? srso_alias_return_thunk+0x5/0xfbef5 [ 358.575464][ T9472] ? __netlink_deliver_tap+0x681/0x6e0 [ 358.575490][ T9472] ? netlink_deliver_tap+0x2e/0x1b0 [ 358.575520][ T9472] ? srso_alias_return_thunk+0x5/0xfbef5 [ 358.575554][ T9472] ? netlink_deliver_tap+0x2e/0x1b0 [ 358.575580][ T9472] ? netlink_deliver_tap+0x2e/0x1b0 [ 358.575613][ T9472] netlink_unicast+0x8ef/0xa80 [ 358.575674][ T9472] netlink_sendmsg+0x7f0/0xb20 [ 358.575709][ T9472] ? __pfx_netlink_sendmsg+0x10/0x10 [ 358.575735][ T9472] ? __lock_acquire+0x747/0x2de0 [ 358.575772][ T9472] ? srso_alias_return_thunk+0x5/0xfbef5 [ 358.575802][ T9472] ? aa_sock_msg_perm+0x144/0x210 [ 358.575834][ T9472] ? srso_alias_return_thunk+0x5/0xfbef5 [ 358.575864][ T9472] ? apparmor_socket_sendmsg+0x98/0x360 [ 358.575901][ T9472] ? srso_alias_return_thunk+0x5/0xfbef5 [ 358.575935][ T9472] ? __pfx_netlink_sendmsg+0x10/0x10 [ 358.575963][ T9472] sock_sendmsg_nosec+0x14e/0x190 [ 358.576006][ T9472] ____sys_sendmsg+0x49f/0x790 [ 358.576051][ T9472] ? __pfx_____sys_sendmsg+0x10/0x10 [ 358.576088][ T9472] ? srso_alias_return_thunk+0x5/0xfbef5 [ 358.576124][ T9472] ? srso_alias_return_thunk+0x5/0xfbef5 [ 358.576154][ T9472] ? import_iovec+0x73/0xa0 [ 358.576200][ T9472] ___sys_sendmsg+0x2f8/0x3d0 [ 358.576231][ T9472] ? __lock_acquire+0x747/0x2de0 [ 358.576270][ T9472] ? __pfx____sys_sendmsg+0x10/0x10 [ 358.576308][ T9472] ? futex_wait+0x2a2/0x390 [ 358.576376][ T9472] ? srso_alias_return_thunk+0x5/0xfbef5 [ 358.576406][ T9472] ? __fget_files+0x3a2/0x420 [ 358.576438][ T9472] ? __fget_files+0x2a/0x420 [ 358.576483][ T9472] __x64_sys_sendmsg+0x1b1/0x290 [ 358.576514][ T9472] ? srso_alias_return_thunk+0x5/0xfbef5 [ 358.576548][ T9472] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 358.576592][ T9472] ? srso_alias_return_thunk+0x5/0xfbef5 [ 358.576637][ T9472] do_syscall_64+0x16a/0x530 [ 358.576675][ T9472] ? trace_irq_disable+0x3b/0x140 [ 358.576712][ T9472] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.576745][ T9472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.576772][ T9472] RIP: 0033:0x7fabaf5a94d9 [ 358.576795][ T9472] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 358.576817][ T9472] RSP: 002b:00007fabb03df028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 358.576844][ T9472] RAX: ffffffffffffffda RBX: 00007fabaf825fa0 RCX: 00007fabaf5a94d9 [ 358.576863][ T9472] RDX: 0000000000000000 RSI: 0000200000000a00 RDI: 0000000000000005 [ 358.576880][ T9472] RBP: 00007fabaf63804e R08: 0000000000000000 R09: 0000000000000000 [ 358.576897][ T9472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 358.576912][ T9472] R13: 00007fabaf826038 R14: 00007fabaf825fa0 R15: 00007ffcab1f1b08 [ 358.576953][ T9472] [ 358.693312][ T5886] usb 9-1: USB disconnect, device number 2 [ 358.774298][ T9471] erspan1: entered promiscuous mode [ 359.148724][ T9485] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 359.148751][ T9485] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 359.148862][ T9485] FAULT_INJECTION: forcing a failure. [ 359.148862][ T9485] name failslab, interval 1, probability 0, space 0, times 0 [ 359.148893][ T9485] CPU: 1 UID: 0 PID: 9485 Comm: syz.5.860 Tainted: G L syzkaller #0 PREEMPT(full) [ 359.148927][ T9485] Tainted: [L]=SOFTLOCKUP [ 359.148937][ T9485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 359.148953][ T9485] Call Trace: [ 359.148963][ T9485] [ 359.148974][ T9485] dump_stack_lvl+0xe8/0x150 [ 359.149021][ T9485] should_fail_ex+0x3eb/0x540 [ 359.149061][ T9485] should_failslab+0xa8/0x100 [ 359.149105][ T9485] __kmalloc_cache_noprof+0x9e/0x600 [ 359.149143][ T9485] ? device_add+0xb6/0xb80 [ 359.149170][ T9485] ? device_add+0xb6/0xb80 [ 359.149207][ T9485] device_add+0xb6/0xb80 [ 359.149233][ T9485] ? wakeup_source_sysfs_add+0x1b4/0x2c0 [ 359.149276][ T9485] wakeup_source_sysfs_add+0x1d3/0x2c0 [ 359.149316][ T9485] wakeup_source_register+0x17f/0x380 [ 359.149353][ T9485] device_wakeup_enable+0xd0/0x260 [ 359.149388][ T9485] usb_hcd_submit_urb+0xdd4/0x1b60 [ 359.149440][ T9485] proc_do_submiturb+0x2657/0x3430 [ 359.149474][ T9485] ? proc_do_submiturb+0x1630/0x3430 [ 359.149524][ T9485] proc_submiturb+0x134/0x1a0 [ 359.149561][ T9485] ? usbdev_ioctl+0x13f/0x21a0 [ 359.149601][ T9485] ? __pfx_proc_submiturb+0x10/0x10 [ 359.149670][ T9485] usbdev_ioctl+0x1104/0x21a0 [ 359.149721][ T9485] ? __pfx_usbdev_ioctl+0x10/0x10 [ 359.149754][ T9485] ? srso_alias_return_thunk+0x5/0xfbef5 [ 359.149787][ T9485] ? __fget_files+0x2a/0x420 [ 359.149825][ T9485] ? srso_alias_return_thunk+0x5/0xfbef5 [ 359.149855][ T9485] ? srso_alias_return_thunk+0x5/0xfbef5 [ 359.149888][ T9485] ? __pfx_usbdev_ioctl+0x10/0x10 [ 359.149924][ T9485] __se_sys_ioctl+0xfc/0x170 [ 359.149968][ T9485] do_syscall_64+0x16a/0x530 [ 359.150006][ T9485] ? trace_irq_disable+0x3b/0x140 [ 359.150044][ T9485] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.150077][ T9485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.150103][ T9485] RIP: 0033:0x7f5ce0ba94d9 [ 359.150127][ T9485] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 359.150147][ T9485] RSP: 002b:00007f5ce1aec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 359.150173][ T9485] RAX: ffffffffffffffda RBX: 00007f5ce0e25fa0 RCX: 00007f5ce0ba94d9 [ 359.150192][ T9485] RDX: 00002000000002c0 RSI: 000000008038550a RDI: 0000000000000004 [ 359.150209][ T9485] RBP: 00007f5ce0c3804e R08: 0000000000000000 R09: 0000000000000000 [ 359.150225][ T9485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 359.150241][ T9485] R13: 00007f5ce0e26038 R14: 00007f5ce0e25fa0 R15: 00007fffb5af62d8 [ 359.150282][ T9485] [ 359.576725][ T9491] printk: console [ttyS0] disabled