last executing test programs: 18.732797233s ago: executing program 0 (id=245): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = syz_clone(0x1a2400, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000019200)=0x8) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000019240)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000019280)=0x6) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000032540)={0x800, 0x0, "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"}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000192c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019300)=""/102392, 0x18ff8) sched_setaffinity(r5, 0x8, &(0x7f0000032300)=0x80000000000003) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = syz_open_dev$sndctrl(&(0x7f0000032340), 0x0, 0x0) ioctl$int_in(r8, 0x5452, &(0x7f0000032380)=0x1) ioctl$BTRFS_IOC_QUOTA_CTL(r7, 0xc0109428, &(0x7f00000323c0)={0x3, 0x40}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000032400)={0x0, 0x0, &(0x7f0000032440)={&(0x7f0000032480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4f}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x37}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x1c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_HASH_MODULUS={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa8}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r9 = syz_open_procfs(r0, &(0x7f0000000100)='pagemap\x00') pread64(r9, &(0x7f0000000200)=""/102400, 0x19020, 0x1000000000) 17.248137425s ago: executing program 3 (id=250): r0 = syz_open_dev$video(&(0x7f000000a480), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f000000a4c0)={0x1, @pix={0x0, 0x0, 0x3631564e, 0x0, 0x0, 0x0, 0x0, 0xfeedcafe, 0x3}}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x13ec, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x12, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) r2 = syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x200841a, &(0x7f0000000140)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0], 0x1, 0x5547, &(0x7f0000000700)="$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") r3 = syz_usb_connect$midi(0x1, 0x6f, &(0x7f0000005d80)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x582, 0x5, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x1, 0x1, 0x2, 0x0, 0x8, "", {{{0x9, 0x4, 0x0, 0x0, 0x4, 0x1, 0x3, 0x30, 0x7f, [], [{{0x9, 0x5, 0x80, 0x3, 0x3ff, 0x0, 0xb, 0xf1, {0x5, 0x25, 0x1, 0x1, "cb"}}}, {{0x9, 0x5, 0x8, 0x1, 0x10, 0x9, 0x37, 0x3, {0x7, 0x25, 0x1, 0x3, "04976d"}}}, {{0x9, 0x5, 0x9, 0x0, 0x20, 0xd, 0x9, 0xf9, {0x9, 0x25, 0x1, 0x5, "3195708d35"}}}, {{0x9, 0x5, 0x9, 0x4, 0x8, 0x67, 0xff, 0x9, {0x12, 0x25, 0x1, 0xe, "4ff02824d45e72f59d7c8816048d"}}}]}}}}}]}}, &(0x7f0000006080)={0xa, &(0x7f0000005e00)={0xa, 0x6, 0x201, 0x3, 0x9, 0x1, 0x8, 0x7}, 0xa2, &(0x7f0000005e40)={0x5, 0xf, 0xa2, 0x6, [@ssp_cap={0xc, 0x10, 0xa, 0xff, 0x0, 0x9, 0xf00, 0x9}, @ext_cap={0x7, 0x10, 0x2, 0x22, 0xb, 0xd, 0xce}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x1a, 0x1, 0x8, 0x2}, @generic={0x70, 0x10, 0x1, "f3d44898014f89b616b8162a7d0a2d67fd0163343c72cfea28da3d6ae85f5eccda37a1963b9e02d163aac12f2bb6df24c1b9b2dce146a1efe4df9d29ce72703a9b36618cb954441b486be551e97509b53b166f031be461a1777d216f4d694bb24d3b549ce883e3d68295528bf3"}, @ssp_cap={0x10, 0x10, 0xa, 0x2a, 0x1, 0x2, 0xf000, 0xe, [0xf]}]}, 0x2, [{0xb9, &(0x7f000000a680)=ANY=[@ANYBLOB="b903e3c0fb5971d3bd06726949e1cc680515306b405d4ab6dc931379eaf8459e6ba157b617332342c4a427f52aa2960453863cc144c42e87bf535e07e81128bf5c8cbb4ceceeef787f52cdb0e6f2e85225aade6f376c0e07ab2688ce1120236414e189c83e7b5b2d9cb217a1ad0bb1b607b8612a162d36d6068a9c1228ff11e1b2e3d0b26437cf81ff345f445c32d36870f84a7ae4ed2c47a64c1a13e9c4383025ab58b1edae8f3cedde6057f286717e68847fe720e5d69cd46f9ce1f458425c857c82fc9e2ba509d4f836272e9ddb249e28941c27d7cd83b139af07505eeb2a0872901d534853ceed9577620e4d1c9b7a6804152b702c3b29e9f21247055b122001e765a29116f837df46fd410bee9db17cdc0033395fa98024af5538d219c0ebb24f2f16d09bb0753171a16f2d435329ee6f8ad5b54a3fdeb16b7860a1c913571af2d25ec8cbc2ffa1873b6cec30edae94908a9ae7dc1ecf2d4b165b9b73b37816c64a9d8f042ce3a949adbc700d194a62325958e939644f9a6b98752f049569a9130acd2c75a43da482f993e0435cb3c2d323a8009128"]}, {0xba, &(0x7f0000005fc0)=@string={0xba, 0x3, "ccf7cb7d05f29c1c2430c3f4037298593355caf219f57371b5f8651d1aa7cff30d176b7e4e003a0020e2b711f14134403346c5e1364990f3fb5ff059bd370e049071d0883aa2d2979cb25456c25c4e5c6327be769c11bd358071e941a2c15a7105a1c6780acee8c8744e43d3d46b6e63473891cee6c757343aa905110f4c9f4310869b6f26419c7c2868194b3026bef3f625892b34933cc0d384276a933d02c445012b3033552d5fe9b689161a349d0bdd0b65b9f5e6261f"}}]}) mknodat(0xffffffffffffff9c, &(0x7f00000060c0)='./file0\x00', 0x1000, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f000000a440)={0x28, 0x0, 0x2710, @host}, 0x10) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000006100), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000006140)='./file0\x00', &(0x7f0000006180), 0x10401, &(0x7f00000061c0)=ANY=[@ANYBLOB='g`=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRES32=r3]) read$FUSE(r5, &(0x7f0000006240)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000008280)={0x50, 0x0, r6, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x4, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f000000a5c0)={&(0x7f000000a600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x6, [@struct={0x4, 0x1, 0x0, 0x4, 0x0, 0x1, [{0x1, 0x3}]}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20, 0x0, 0x0, 0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}]}, {0x0, [0x61, 0x0, 0x2e, 0x61]}}, 0x0, 0x5e}, 0x28) syz_fuse_handle_req(r5, &(0x7f0000008300)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f000000a300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a3c0)={0x20, 0x0, 0x3f31, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f000000a400)='./file0\x00', 0xc5501, 0x104) write$cgroup_netprio_ifpriomap(r7, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x18b341, 0x84) ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f0000005c80)="60e3212b3884d2b67bc8ac92e02b3f4b5f0038669e0eacb6d290772470302b025b5f316f4e1eed0b01c903e55d3debbadac5d11b25e193000000000000000bd0ea5b5d3c3f7fc4d966fa2c51095030bf0025125b7f23994e4538b38afaf46ea6dc0fb833540c121608be5fc5b8fe6d3df6557293946d6a2d77eee0d6817e32d159b4ea22481c588d1ffc493c6c8c568e8dc00b4410224e7e2963733eb9dea683921eee180064078f17aad08b63c801d0f6a45f31aeacf01d49e34a89f0b7abef807d56c8f5506389931db85d0aba8e659b8b338179c3df243f97a16c341ffad04c5bb580ed875f96ed48abebbcd9e9df2a00") syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) syz_open_dev$hiddev(0x0, 0xa, 0x62080) 15.381817339s ago: executing program 0 (id=254): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1a2400, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000019200)=0x8) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000019240)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000019280)=0x6) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000032540)={0x800, 0x0, "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"}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000192c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019300)=""/102392, 0x18ff8) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = syz_open_dev$sndctrl(&(0x7f0000032340), 0x0, 0x0) ioctl$int_in(r6, 0x5452, &(0x7f0000032380)=0x1) 13.16053765s ago: executing program 1 (id=261): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000800)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000840)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000940), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000980), 0x2, 0x141102) writev(r2, &(0x7f00000009c0)=[{&(0x7f0000000a00)="94", 0xf000}, {0x0}], 0x2) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000a80)={0xcf47, 0x4cc, 0xffff, 0x9dff, 0x1, "8003e3ffff072000"}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000ac0)=ANY=[], 0xff2e) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000b00)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r3 = syz_open_pts(0xffffffffffffffff, 0x200) r4 = dup3(r3, 0xffffffffffffffff, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000b40)=0xff) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x5, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000fd3f00000000000009000000850000002e000000850000000f00000095"], &(0x7f00000006c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r5, 0x0, 0x8f, 0x6, &(0x7f0000000e00)="0000000000000000d2f51cce554cb3d53cc39ad6495fc9c493a48ac4aef00649903b74f7026e189df5819abe419dc795dcc5f35aeee1682a97ab0212fe83cbf86ae49c96cc43152a8559bc9e2f238303af797c9d02964249605dca329590d3ede402ded96e5d40e15c4b22ff4f8936de8f980cb916f997af6e4d91f8b9752c6f04072e5f3f36b1a7310113ad37b0745a7a65297e0e550b83a83ec81fb217e9940aa3a1905235fdf0498f9da9fe9e7874f3ed466d", &(0x7f0000000700), 0xeb, 0x0, 0xffffffffffffff8d, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r6, &(0x7f0000000340), &(0x7f00000005c0)=""/140}, 0x20) write$binfmt_misc(r4, &(0x7f0000000b80)="6e3ad83cd70226068894f7713bc18388bc9855ff2ea16a96ceab9364bb83dcdb859736214ef5a3e1a085ae408b9ac21ff7779ab6de89cac64c010c4e11abc438b1a09ed792dd4be2ddffa25da21bad1feb6ca95c4414b1468bf82cc94c69377ad98ebd", 0x63) r7 = accept$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000300)=0x1c) socket$inet6(0xa, 0xa, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000400)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x4, 0x1, 0x1, 0x2, 0x0, 0x5}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000002c0)=r8, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0xffffffef, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x18000000000002a0, 0x56, 0x0, &(0x7f0000000100)="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", 0x0, 0xfb, 0x60006000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000001c40)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135d9f30457a8ffb21aef4a95a155fab70a40b086056b0f63331a66b3457c", 0x2}, 0x2c) 11.853219927s ago: executing program 3 (id=262): io_setup(0x0, &(0x7f0000000240)=0x0) io_pgetevents(r0, 0x4, 0x2, 0x0, 0x0, 0x0) ptrace$getregset(0x4204, 0x0, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = userfaultfd(0x801) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x5e8}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000180)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f00000001c0)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) r3 = openat$fault_inject(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/fail_make_request/interval\x00', 0x1, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r3, 0x275e, 0x7, 0x93}) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000200)={0x200000000003b9a, 0x5, 0x2, 0x3}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) socket$nl_xfrm(0x10, 0x3, 0x6) socket$igmp(0x2, 0x3, 0x2) r5 = openat$kvm(0x0, &(0x7f00000003c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r6, 0x4068aea3, &(0x7f0000000400)={0x79, 0x0, 0x1}) ioctl$KVM_SET_GSI_ROUTING(r6, 0x4008ae6a, &(0x7f0000000480)={0x1, 0x0, [{0x4, 0x2, 0x1, 0x0, @sint={0x8000, 0x6}}]}) ioctl$KVM_CAP_X2APIC_API(r6, 0x4068aea3, &(0x7f00000004c0)={0x81, 0x0, 0x3}) r7 = eventfd2(0xa, 0x0) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f0000000540)={r7, 0x4}) write$eventfd(r7, &(0x7f0000000580)=0x430f, 0x8) connect$unix(r4, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e23}, 0x6e) r8 = openat$comedi(0xffffff9c, &(0x7f0000000280)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, &(0x7f00000002c0)={'8255\x00', [0x3f00, 0x5, 0xd09a, 0xffffffff, 0x5, 0xfdfffffa, 0x2, 0x4e0, 0x0, 0x7fffbfff, 0x5, 0x401, 0x404, 0x7, 0x804, 0x4, 0x5, 0x9, 0x0, 0x5, 0x3, 0x70004496, 0x80, 0x9, 0x101, 0xfffff000, 0x20, 0x10001, 0x75, 0x2, 0x6]}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) 11.797508709s ago: executing program 4 (id=263): ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000a80)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x3f, 0x58, 0x2, 0x0, 0x0, 0x2f, 0x0, @empty, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x8100, 0x0, 0x10}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3}}}, {0x8, 0x22eb, 0x4, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x2, {0x8, 0xfffd}}}}}}}}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000000), 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd600000000008ff40fe8000000000000000000000000000bbfe8000000000000000000000000000aa"], 0x0) mount(&(0x7f0000000100)=@nullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000a40)='msdos\x00', 0x2208004, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1f4) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f00000007c0)=0xfff, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000800)={0x0, 0x38, &(0x7f0000000840)=[@in6={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20}, @in6={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}]}, &(0x7f0000000880)=0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f00000003c0)='27', 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, r2, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x1f, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="180500000000000000000000000000001800000020696c2500000000002020207b0af8ff00000000bd510000000000000701000000feffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000640)='GPL\x00', 0x4, 0xda, &(0x7f0000000680)=""/218, 0x41100, 0x73}, 0x94) futimesat(r2, &(0x7f0000000400)='./proc\x00', 0x0) gettid() mremap(&(0x7f0000ff1000/0x3000)=nil, 0x5000, 0x3000, 0x3, &(0x7f0000ff6000/0x1000)=nil) socket$inet_mptcp(0x2, 0x1, 0x106) syz_open_dev$dri(&(0x7f0000000780), 0xfff, 0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_lsm={0xa, 0x3, &(0x7f00000009c0)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x69}}, &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) 11.793985024s ago: executing program 0 (id=264): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = syz_clone(0x1a2400, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000019200)=0x8) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000019240)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000019280)=0x6) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000032540)={0x800, 0x0, "a402b6883c4084dc6792472574b3bc3e9b6a8aee3e8f562808ede39d51328b0f6c5619746a52a6fade8a15e502e3c05f10ed14ea08fb6da5f82a4bf12115441c97731d864027edfbfc11187f0559f5b8dfd76d880c3f6291b73e18bb365f8beef6ee70948674e4cb4ee0e1a3872b0f56f385c2562dccdceef0695ce0dc69a62a0be8101ba53955be6875f7ef5bdfae74342ebe57563921e6e04b7ea77ca6cd31eb4ab597b4a18619fd6505d82bb42eab2e5c9bd875c12282b8968fedf2804ee8c21f224fef38ae5153c28f59f658684bd048624ba6d836becf6867a3e386bd38c193c1bb4238bbe28935787ef6c15ad1e76a86208c1c562043e2fef3c7637333"}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000192c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019300)=""/102392, 0x18ff8) sched_setaffinity(r5, 0x8, &(0x7f0000032300)=0x80000000000003) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = syz_open_dev$sndctrl(&(0x7f0000032340), 0x0, 0x0) ioctl$int_in(r8, 0x5452, &(0x7f0000032380)=0x1) ioctl$BTRFS_IOC_QUOTA_CTL(r7, 0xc0109428, &(0x7f00000323c0)={0x3, 0x40}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000032400)={0x0, 0x0, &(0x7f0000032440)={&(0x7f0000032480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4f}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x37}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x1c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_HASH_MODULUS={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa8}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r9 = syz_open_procfs(r0, &(0x7f0000000100)='pagemap\x00') pread64(r9, &(0x7f0000000200)=""/102400, 0x19020, 0x1000000000) 10.652452279s ago: executing program 1 (id=265): socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$kcm(0xa, 0x3, 0x87) socket$kcm(0x10, 0x2, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc0}, 0x4) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="03000000040000"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xc, 0x8, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x86dd, 0x12, 0x0, &(0x7f0000000440)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 10.554622295s ago: executing program 1 (id=266): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000440)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) inotify_init1(0x0) fanotify_init(0x1a, 0x800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000005c0)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0xfd2, &(0x7f0000000680)={0x0, 0x36e, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1b, 0x0, 0x0, &(0x7f00000007c0)='syzkaller\x00', 0x80000002, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1700000004"], 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000540), 0x4, 0xc0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000580)={0x5, 0x7fffffff, 0x8, 0x5f3dfadf, 0xfffffff7, 0xea}) r4 = syz_open_dev$MSR(&(0x7f00000004c0), 0x0, 0x0) read$msr(r4, &(0x7f0000000d00)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x2, &(0x7f0000019d00)=0x80000000000003) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x84, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x58, 0x3, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x44, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x10000}]}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}]}, {0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xe8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) 9.440357565s ago: executing program 1 (id=268): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000300)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) connect$unix(r4, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000440), 0x318, 0x0) recvmmsg(r4, &(0x7f0000000480), 0x10106, 0x2, 0x0) r6 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f00000004c0)={0x100000001, {{0xa, 0x0, 0x42, @mcast2, 0xf}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[], 0x0, 0x2c, 0x0, 0x1, 0xfffffffe}, 0x28) request_key(&(0x7f0000000740)='asymmetric\x00', &(0x7f0000000780)={'syz', 0x1}, &(0x7f00000007c0)='q\xa9', 0x0) sendmsg$netlink(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000880)={0x18, 0x56, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x00\x00\x00'}]}, 0x18}], 0x1}, 0x800) socket$nl_route(0x10, 0x3, 0x0) write(r1, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000280)=[{0x20, 0x2, 0x81, 0xfffff034}]}, 0x10) syz_emit_ethernet(0xeb, &(0x7f0000000100)=ANY=[@ANYBLOB="0180c2000001ffffffffffff8100450000040e04e63ac2ea5150e9ca670e28ac7db0bab879c615af5261ab3a2c7782f738afdff50ab39d8a05a115c2b1bce3d94465cbdbd6ef9fc37aaf718bfe91457afec09ea1dbd0ce738186554dcf7f00566ce8fa5994cfd68487268e545c47114b02f03ef767f314be2fda2a00000000000000099f5cf86f378742a0e45c8904ea5da86ba38c00c6ef51ed19689e2ac7387837593f71875c32b509d3cc48188de2b82be6303bb9f3f77291709ca28122c7f858709d9865fa5dbdbf93aa0eff226b8ca48248d1af40bb26012c64058fcd06f7bb58c43b1e1569a4f23b"], 0x0) 8.24485281s ago: executing program 2 (id=269): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008855}, 0x1000) 7.823002001s ago: executing program 3 (id=270): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x3, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc02, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {0xffff, 0xb}, {0x4, 0x1}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004802}, 0x4894) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 6.544859775s ago: executing program 0 (id=271): r0 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0x2c}, 0x0) 6.339570707s ago: executing program 3 (id=272): syz_usb_connect(0x2, 0x4e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002ff000040cd06310100010102030109023c00010100a0320904000006ff000000070501024000000705020240000007050402400000070506024000000705810340000107"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x401) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x8801}, 0x10) socket$inet(0x2, 0xa, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=ANY=[@ANYBLOB="58000000020603000000000000000000000000000c000300686173683a69700005000400000000000900020073797a31000000001400078008001340000017e5080012400002000905000500020200000500010006"], 0x58}}, 0x4080) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xfffe}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x7f000001}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010102}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000057}, 0x4000050) (fail_nth: 5) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x0) syz_usb_connect$uac3(0x1, 0x121, &(0x7f0000000500)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x10f, 0x3, 0x1, 0x3, 0xa0, 0x4, {0x8, 0xb, 0x2, 0x1, 0x1, 0x21, 0x30, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x4c, 0x7}, [@power_domain={0xd, 0x24, 0x10, 0xc, 0x82ff, 0x92a8, 0x36, "29bf6009"}, @source_unit={0xc, 0x24, 0xb, 0x3, 0x0, 0x7fffffff, 0x5, 0x5}, @processing_unit={0x9, 0x24, 0x9, 0x3, 0x2, [0x0]}, @input_terminal={0x14, 0x24, 0x2, 0x2, 0x101, 0x2, 0x3, 0x6, 0x4, 0x8000, 0x269, 0x4}, @source_unit={0xc, 0x24, 0xb, 0x6, 0x1, 0x4, 0x1f, 0x401}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0xc, 0x3, 0x4, 0xf1, "e0"}, @as_header={0x17, 0x24, 0x1, 0x6, 0xe, 0x4, 0x1001, 0x0, 0x5, 0x100, 0xe2}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x3, 0x4, 0x0, 0x4, "954b3c04"}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x1, 0x8, 0xa, "1ff6195a0780a1a725"}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2, 0x40}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2, 0x9}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x3, 0xe, 0x4, {0xa, 0x25, 0x25, 0x7ff, 0x9, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x1, 0x3, 0x6, 0x5}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xc, 0x1, 0x7, 0xb, "e9", "a4b3"}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x7, 0xc8, 0x29, {0xa, 0x25, 0x25, 0x0, 0xfc, 0x101}}}}}}}}]}}, &(0x7f0000000c00)={0xa, &(0x7f0000000680)={0xa, 0x6, 0x0, 0x9, 0xf, 0x69, 0x20}, 0x3e, &(0x7f00000006c0)={0x5, 0xf, 0x3e, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x2, "02b895e3441d05e65a5318f5c06654fa"}, @generic={0xd, 0x10, 0x3, "20c457c5258b6d141046"}, @ssp_cap={0x18, 0x10, 0xa, 0x9, 0x3, 0x7fffff7, 0x0, 0x1, [0xc000, 0xff0000, 0xc0]}]}, 0x3, [{0xb4, &(0x7f0000000700)=@string={0xb4, 0x3, "e986f09e289eb78e1121996fc26d5927c1e14947cfc62bb721e2d7907cc2292e185ddc70506b131fcd45f388bc98240a5dc82f4f6d9f541252737f8b49587e538d32a69624832e265e9aae55b533f5e4ec5947b6f4c015c9f028d4e6ae1796d57b91006b92b0b03f27069c2602d34075fc562c3da2b46f72016231eac80eae87a73cfd0b46b5110bcef7927a14af5149f3018b86b01601ac1b92b16ae8fc59b907633ca824c99269e9fbe046921c87fd4644"}}, {0xc8, &(0x7f0000000a00)=@string={0xc8, 0x3, "eb69ec06cc8c655b39ba95c6772789fcb86c3b2b816219a0ab5907b1c318623afa740be902e288897160f2a4f25dd09736eeb8d9a99d8fdd8c66e377b688ecdedd294c5278326229dd723a8906d0727e5754a9fd6243169a4911e62b5e62f8c26591c8acde9c4af390e4704a6fc607328087b62e13959231fc7b8b1c3768f4e846c146c65db8c02fc3877dbe49a97420f5ba77fdc9cc48099ed2ce7d49a1b2e695b9530141b6c70630ac7096f5eab48877332419b1107799bc355bd65190538b21887282fabc"}}, {0xdb, &(0x7f0000000b00)=@string={0xdb, 0x3, "4edc0e239b22393b79b0ec2560e5805904a210adb3a209e682ec32828d7113770ba05b42cd7928778ce98450485d0ba1a65d91dedbf10d9c5a9db4c0f2547924ddbbaba16052115a08236b8b212768faf6c077cfeff5c86f46ffce72f1b37200d91b901d1972a7cb3bb3ce53e374a7f8148e512c78a0a3c01561815ce44b18d3f429e1e62c90010c655531c7466efb7720e35ae9673ebea8a44328f9d1769ad0264b23b9bde7f0ffdcbd25da4b1a34b032643c1c38610cec2e1bab48072f02e51f42af26a4375daa0a4b29b240c64172f31010f6c771f39b42"}}]}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = syz_io_uring_setup(0xf03, &(0x7f0000000200)={0x0, 0x5b5f, 0x10000, 0x0, 0x51}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) io_uring_enter(r3, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r4 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchdir(r4) openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1002, 0x40) 5.800888021s ago: executing program 4 (id=273): r0 = openat$binderfs_proc_dir(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) symlinkat(&(0x7f0000000500)='./proc/sys/kernel/hostname\x00', r0, &(0x7f0000000580)='./proc/sys/kernel/hostname\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./proc/sys/kernel/hostname\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r1, 0x4000}], 0x1, 0x0, 0x0, 0x0) write(r1, 0x0, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r2, 0xc2604110, &(0x7f0000000280)={0x0, [[0x9ef8, 0x0, 0x0, 0x1], [0xffff], [0x7]], '\x00', [{0xffffffff}, {0x2000000, 0x10}, {}, {0x4, 0x80000000, 0x0, 0x0, 0x1}, {0x0, 0x1, 0x0, 0x1, 0x1}, {0x0, 0x5f, 0x1}, {0x0, 0xfffffffe}, {0x0, 0x87}, {0xfffffffa, 0x40}, {0x0, 0xfffffffe}, {0x9}, {0x0, 0x80002}], '\x00', 0x1000}) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='clear_refs\x00') writev(r3, 0x0, 0x0) r4 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x100000000, 0x200001) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x13, 0x23, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_val={0x18, 0x2, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0xc}, @exit, @alu={0x4, 0x1, 0x1a, 0x0, 0x7, 0xffffffffffffffe0, 0xfffffffffffffffe}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8000}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @map_fd={0x18, 0x8, 0x1, 0x0, r4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffc}, @cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffffb}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001280)='GPL\x00', 0x1, 0x1000, &(0x7f00000012c0)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.824555585s ago: executing program 1 (id=274): syz_open_procfs(0x0, &(0x7f0000000140)='map_files\x00') syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) listns(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r2, &(0x7f0000000a00)=""/102392, 0x18ff8) setresgid(0xee00, 0xee01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20000000) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) inotify_init1(0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000019c40)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000019cc0)={0x18, 0xc, &(0x7f0000019d80)=@framed={{}, [@jmp={0x5, 0x0, 0xe, 0x0, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, @ldst={0x2, 0x3, 0x3, 0xa, 0x0, 0xffffffffffffffc0, 0x10}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000019e00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) 4.747962948s ago: executing program 2 (id=275): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000014c0)={0x172c, 0x40, 0x109, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x1708, 0x2, 0x0, 0x1, [@nested={0x1701, 0x14, 0x0, 0x1, [@generic=')', @nested={0x16fc, 0x80, 0x0, 0x1, [@typed={0x8d, 0x14e, 0x0, 0x0, @binary="b50f7296e52f0a27dbf2f3f34e05daf490aeb69b4466b961d838d2cca67cc982eed2d55dc953e13c9859911887a4f666ac70730864f38b49ef9ebd940b957f800491111732843bb9574325e7d00e50bcba0e1f82fac64cf6d83a04517c6699595e2ec75d7246f6c95efc045117684a93057570437eb0aa796bf70e7fc1b6f24dca0db1048c1a6eb847"}, @nested={0x1665, 0xeb, 0x0, 0x1, [@generic="046e93c8136e9f963ce99849d9de871280f509d640d34be6e108cdb999f1056f0eae8647703a50e520ebf70f3fb9daa20be8160fa99a65898be01444fad3491c680c8bc78c07d92c23a644c0b711f506d58381e0f7a2a2097da6580b3f6463ab30d3876f3f4fdfcfc05359e8b9fc82c7e09ea3a892df3839abfe1608459fa1cee546cb3124e81ae381b45d09fc6934dd88b8042ae49a9e4382033b2d2cf1dafda7f8a45840763067f883b7e8c07e59017a1afa36", @typed={0x8, 0xbd, 0x0, 0x0, @uid}, @typed={0x8, 0x12d, 0x0, 0x0, @u32=0x80}, @generic="a84fce29a270699028b98ff1b7820e4444e7e00f6ed086db3bcb3f8a77", @typed={0x8, 0x153, 0x0, 0x0, @fd=r0}, @nested={0x1530, 0x12d, 0x0, 0x1, [@typed={0x14, 0xe6, 0x0, 0x0, @ipv6=@private2}, @nested={0x150c, 0x91, 0x0, 0x1, [@nested={0x1501, 0x26, 0x0, 0x1, [@generic="81924a3375547a14ca40a438a3ec6013193a01e9092cad53639132a9732f8d2acde3624294086b866ead6fb86a6fae119cd03ba0a00717c8", @generic="1d8f1cf8d66e88e1f983c0d34922575818effe0d877a22585a94d1012e5ee8ce231d4013adfe7b0cb5a06f2b14de49efc6ead93a564a6493a9f2939b3820a7e4a1733f9c7c13ccf78479e7d9df132546d5cd0fcafc667e6e2c26a98e6e7de1ec64516beb7e0fd77e9d389b182a26c03d738e3cf77840a300e16a35f7c6d200f0485557d7bc5b6a6429788494180eedc7f2a4fc1a7a41417ecead702da02d", @nested={0x41c, 0x13f, 0x0, 0x1, [@typed={0x8, 0x12e, 0x0, 0x0, @u32}, @generic="c09a4ee7aa129456714188574d78e7c8fecbb890a54c43391d977e1ff14a9e797063391e15c589a9b9375582c6821cfa4e2875c36d7ea97799fb7d78df077c97844211c283045ebfbd44d2b4691d69cda5e3c3e5b19ea13b30ec99da245794825b467e2ad5e6ca436f87454a36fc4ce1b7a55ce974850d698c", @nested={0x1f4, 0xc, 0x0, 0x1, [@nested={0x1a5, 0x134, 0x0, 0x1, [@generic="a0", @typed={0x8, 0x9c, 0x0, 0x0, @pid}, @generic="9a2a8b2305a96e2001f48e082fd0678ed7bb2ff78476dd5aa2390b1b52362a0cad96701fc22b654228bb589d60971e24187449029edfb5a9c461a6ced3e6967465396c030348257a5d2f7fdc3b7769bd34e601480ddc8665c7a169750f8152d006c23c54e270069089118c84f53ace5655a6cc84c16944bb9503c9b9be3f5c68c427fdd45274c8e865742374ccaf093a0cf96e411fed87aa9269981afd1868e7def374fd", @typed={0x8, 0xfd, 0x0, 0x0, @fd=r0}, @nested={0xe9, 0x3c, 0x0, 0x1, [@generic="fcec4814d6a7323768aad409ec6d863cfb5ede92b2d21c1518ea50196d6a04df22278b3435cfcfa7ab71c3185ad6cc93900bba662301276134d01c9aee", @generic="d79f616c9e38e6375751bd25c34d1d975a150473c6d67d2a35fd98e90cbd0ffb", @typed={0x8, 0x103, 0x0, 0x0, @pid}, @nested={0x4, 0x107}, @nested={0x4, 0xc5}, @nested={0x4, 0x12c}, @typed={0x8, 0xd8, 0x0, 0x0, @ipv4=@private=0xa010100}, @generic="fa423fa0a7d092b1c58d6d8b92817b3d03b9d8b479c1730998f029cde180d1c1e7b516ca59d3df0711032c0830d231c529bb906d63956e9780f5338b2f0038cf366cdce2e9c2197a8b60392b756e70c04a9ed1f76fba5e7134fdcef90b216be9448f6bc8", @typed={0x8, 0x5d, 0x0, 0x0, @pid}]}]}, @nested={0x45, 0xbd, 0x0, 0x1, [@generic="55108d69330e80923e709e3a0729cd6403b5fe7537892b6b85661a94ccda3cc6b8cb4b718df9211b9a", @typed={0x8, 0xa4, 0x0, 0x0, @ipv4=@local}, @typed={0x8, 0x15b, 0x0, 0x0, @uid}, @nested={0x8, 0x76, 0x0, 0x1, [@typed={0x4, 0x13}]}]}]}, @generic="68aa53524478fb5752ae8ec70b47413b08359a45b6c2de6e77ca09ea958782dceb136d80d4f185e5bcdfc7c64bb03e109252d1e2078b12e966a5b6189a504fea01182e4457fcf4d97ffb71eca28a49a1048e160541e9ee6de18af6e4cc8671518ac2bb5a431983311e5deefe8733", @generic="7abbd296436b9a72c7f1ab925b13abf244ef8e8f43f29b9ac379a3ad5d2f4646d0aa3e834c37c17ab2c63cd4a69a3a3fed27704e8a55c79b05a76452b09f5a9e7ec5e1f69eb23406901369d1009a6ea15639b9eaee3b589b0152d58db7c69ee200ca8467fdaefc3f9c67afad8cd6ef6527b6d15cb6a2c8f7b0c193f4158b02e65be7586470fe35ebe452af4d06b8b6dcbc665195c4195c969c5f555c834da9d8d75964ee14b49bf85ac6569dd0e65ecb242d71b43fa4d8f2379e530cece09acce920f5faf649e0798de0f525337f612ed3657fe18297c78ad6d1cbf7e43f16d4da5285", @nested={0x4, 0x38}, @nested={0x4, 0xdd}, @generic="1f998db8c0c188b058c8ec5c7b69209e934f6639e16dc208d20de01bd25399873a2e3b68cf3243d406d0ba4076ae4e779b9da7679aeeb16039fe46df4ac16e8cde3b08a1b18f", @nested={0x4, 0x14c}]}, @generic="389c7429e3103361dc5b164c6767fcf2e9e9fde7210d37e06a5818fd4ec6adc8f72d0cfcf0c6f387e347a71cfa30132b31cfd6587ebe443a3cdeaedb806a4d5d61a7bf2ef77d51b25a354559125c9d9ea75fe259bb430bedab8bc28157e25a7ebc3f78f43f0b164b64ff52c948c2001e70627339d62f4f21", @generic="f147d80185d677547b339c0c39569b4736fa842bbb59c4a6a8e852a7c1272c97fe8a13e14c59dba1f14e857620af89e155f77c573df0b3f95d7bceb85b8c1962a946a6448f1f8f370cb979b3f065326dc5f35628ae8826", @generic="3d9a9f68739364c30cc3cf78bc5dcac04f5206b2a2e951885c92ea30e31265bc13", @nested={0xf09, 0x12, 0x0, 0x1, [@typed={0x8, 0xe6, 0x0, 0x0, @uid=0xee00}, @generic="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"]}, @generic="b8a333c106ad30d59304246a1c7257"]}, @nested={0x4, 0x49}]}, @typed={0x8, 0x2c, 0x0, 0x0, @uid}, @nested={0x4, 0x5d}]}, @typed={0x45, 0x3, 0x0, 0x0, @binary="a3a203dee0f2d2d50da83a06a4df6f289197c1b27c3e1c64942c17ff0a0732993c5faa010000000000000032c06b0127c50bb536a17284cac023abed33b3ecfa8b"}]}]}]}]}]}, 0x172c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 3.797041023s ago: executing program 2 (id=276): socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$kcm(0xa, 0x3, 0x87) socket$kcm(0x10, 0x2, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc0}, 0x4) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="03000000040000000400"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xc, 0x8, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x86dd, 0x12, 0x0, &(0x7f0000000440)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.739245182s ago: executing program 4 (id=277): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000800)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000840)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000940), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f0000000980), 0x2, 0x141102) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000a40), 0x41, 0x0) ioctl$TCSETAF(r2, 0x5408, &(0x7f0000000a80)={0xcf47, 0x4cc, 0xffff, 0x9dff, 0x1, "8003e3ffff072000"}) write$binfmt_aout(r2, &(0x7f0000000ac0)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000b00)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r3 = syz_open_pts(r2, 0x200) r4 = dup3(r3, r2, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000b40)=0xff) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x5, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000fd3f00000000000009000000850000002e000000850000000f00000095"], &(0x7f00000006c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r5, 0x0, 0x8f, 0x6, &(0x7f0000000e00)="0000000000000000d2f51cce554cb3d53cc39ad6495fc9c493a48ac4aef00649903b74f7026e189df5819abe419dc795dcc5f35aeee1682a97ab0212fe83cbf86ae49c96cc43152a8559bc9e2f238303af797c9d02964249605dca329590d3ede402ded96e5d40e15c4b22ff4f8936de8f980cb916f997af6e4d91f8b9752c6f04072e5f3f36b1a7310113ad37b0745a7a65297e0e550b83a83ec81fb217e9940aa3a1905235fdf0498f9da9fe9e7874f3ed466d", &(0x7f0000000700), 0xeb, 0x0, 0xffffffffffffff8d, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r6, &(0x7f0000000340), &(0x7f00000005c0)=""/140}, 0x20) write$binfmt_misc(r4, &(0x7f0000000b80)="6e3ad83cd70226068894f7713bc18388bc9855ff2ea16a96ceab9364bb83dcdb859736214ef5a3e1a085ae408b9ac21ff7779ab6de89cac64c010c4e11abc438b1a09ed792dd4be2ddffa25da21bad1feb6ca95c4414b1468bf82cc94c69377ad98ebd", 0x63) r7 = accept$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000300)=0x1c) socket$inet6(0xa, 0xa, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000400)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x4, 0x1, 0x1, 0x2, 0x0, 0x5}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000002c0)=r8, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0xffffffef, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x18000000000002a0, 0x56, 0x0, &(0x7f0000000100)="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", 0x0, 0xfb, 0x60006000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000001c40)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135d9f30457a8ffb21aef4a95a155fab70a40b086056b0f63331a66b3457c", 0x2}, 0x2c) 3.427828812s ago: executing program 3 (id=278): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) read$FUSE(0xffffffffffffffff, &(0x7f0000000600)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r1 = getpgrp(r0) openat$dir(0xffffffffffffff9c, 0x0, 0x40, 0x16f) execve(0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() read$FUSE(r2, &(0x7f0000002700)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000004740)={0x50, 0x0, r3, {0x7, 0x2d, 0x93, 0x62000000, 0x8, 0x8, 0x7, 0x100, 0x0, 0x0, 0x80, 0xa}}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000015980)=""/102392, 0x18ff8) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x28100, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f00000002c0)={[0x19eac99f, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0xffffffffffff8001, 0x1, 0x0, 0x7, 0x0, 0x101, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x182200}) getrlimit(0x4, &(0x7f0000000000)) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x10, 0x16, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 3.399321806s ago: executing program 2 (id=279): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) bind(r0, &(0x7f0000000040)=@can={0x1d, r1, 0x1, 0x2}, 0x10) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000240)={0x1, 0x0, 0x9, r1, 0x2}, 0xc) sendmsg$can_raw(r2, &(0x7f00000000c0)={&(0x7f0000000100)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000180)=@can={{0x1}, 0x8, 0x0, 0x0, 0x0, "0100"}, 0x10}}, 0x0) read(r0, &(0x7f00000001c0)=""/100, 0x64) 3.35763997s ago: executing program 1 (id=280): r0 = socket$pptp(0x18, 0x1, 0x2) writev(r0, &(0x7f0000001680)=[{&(0x7f0000000180)="42fddc632436fa57dd147b564b34dbdf137e0b10c342b6c036d04e5f7987dca69d09a3ad5c203d6078883b13fda99c7c0f2dbcc652ce0a7e4afd4001741c06fda45f1fdf27a18195f6dc433ddc4228063c9c600d0910c51fb2243e0b55b50cf550d6638fcc38a34148fffb8117727b7f233620200873d27ef8443d96005742578504e3a93c77149ee5", 0x89}, {&(0x7f0000000240)="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", 0xfd}, {&(0x7f0000000340)="a99cd166a5deb53bbc9480cae0c66f8f24f021c611510a2bc1af7e11ff77921eb16cb04b78cf5c4783af5c7ab9f1c2a45aef06eb20e7f33602779e0c", 0x3c}, {&(0x7f0000000380)="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", 0x1000}, {&(0x7f0000001380)="35b27f8dcbb8a07bb1853c2a4b0d4e1586419983d0ebb61cb123f24fdbb58679c53c1cde9df1f4fb16eb0fe21dc1a0164087ea47502a430a024b108a0560ccd8841e7dc1deef46425b87ec216f6a61d6ebcd454e3074d394cf9922ac5490782dc574b60d68dee15219ffd30f35c6c6d3b64eb5ba42b0d68faf5188ef756c28a207b1d6e93f3eeac5723dd1ece34bdd71bb8aa9b10a4f97d78d4879df23c39a9b67aecb7c1fd1770aab8bc3b9f6f4ec1b54f8952a524f49642859395f84f4a6282fe6bad3cd3284f11675d3d505ef3178b6", 0xd1}, {&(0x7f0000001480)="a4769413089f05da8e415fd74b77da6de44bc7c611d970998c0f3eff59a174c7c7677b5896916c3f70a9573b9f9a4bc0e6e647924fd9193cbad0a6e2607788cf53c5a2eca90d27b3b512b6c26dc28a487c5b405765da3db2fbe46b62fe0859328958c2f0a26f32633efcd7efc0d605f00fd7c5bd5a6cf17667f6e30589c186b1f65fff754975287206ead78f20960c7aa32dac3bdd80b4dd08a254ccd1477e7a072d672bb098b9", 0xa7}, {&(0x7f0000001540)="0c0aa4d85c38779e308c60114a44f59f7c731d43ffd643c0568721a4bc8a88eaa7835c4907c3361696355c746a740d733b0b437ebc5aef956a7a50acac11999ba78d5eb769e914d4ad6b1805f001b5afdaa3c31e1df254127d4640f23f7ebb63e90801410e2c50eda8263a2452cd5bc96f4f60cfae8b7c0c403bd969cbbd2a3e0f3f40d432117fb8438231b172a23673acd461e2f908792da9e6db2d3ac457ae86f021a0d355618e2bf3f68639097dab05e69c9c80660a14b44d8b32e0335f0393c1e26cf421eeeb0fa8315c13", 0xcd}, {&(0x7f0000001640)}], 0x8) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) r2 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000000c0)=@multiplanar_overlay={0x0, 0x8, 0x4, 0x0, 0x7, {}, {0x3, 0x0, 0x5b, 0x66, 0x3, 0x8, "5a373bcf"}, 0x0, 0x3, {0x0}, 0x7}) setsockopt$sock_attach_bpf(r1, 0x1, 0x24, &(0x7f0000000000), 0x4) 2.355966952s ago: executing program 2 (id=281): read(0xffffffffffffffff, &(0x7f0000019b40)=""/16384, 0x4000) sendmsg$inet(0xffffffffffffffff, 0x0, 0x200040a0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0xfffffff6, &(0x7f0000000080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) socket(0xa, 0x3, 0x3a) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r3, &(0x7f0000000b40)=""/102392, 0x18ff8) close(0xffffffffffffffff) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x1e, 0x3, 0x0, &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0xb, &(0x7f0000000740)=@raw=[@generic={0xb7}, @generic={0x7b, 0xa, 0x0, 0xfff0}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4, 0x0, 0x0, 0xffffffff}, @generic={0xb7, 0x5}, @generic={0x85, 0x0, 0x0, 0x0, 0x55}, @generic={0x15, 0x0, 0x0, 0x2}, @generic={0xbf, 0x1}, @generic={0x85, 0x0, 0x0, 0x0, 0x56}, @generic={0x95}], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.277616986s ago: executing program 4 (id=282): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = syz_clone(0x1a2400, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000019200)=0x8) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000019240)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000019280)=0x6) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000032540)={0x800, 0x0, "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"}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000192c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019300)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000032300)=0x80000000000003) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = syz_open_dev$sndctrl(&(0x7f0000032340), 0x0, 0x0) ioctl$int_in(r7, 0x5452, &(0x7f0000032380)=0x1) ioctl$BTRFS_IOC_QUOTA_CTL(r6, 0xc0109428, &(0x7f00000323c0)={0x3, 0x40}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000032400)={0x0, 0x0, &(0x7f0000032440)={&(0x7f0000032480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4f}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x37}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x1c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_HASH_MODULUS={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa8}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r8 = syz_open_procfs(r0, &(0x7f0000000100)='pagemap\x00') pread64(r8, &(0x7f0000000200)=""/102400, 0x19020, 0x1000000000) 1.025814624s ago: executing program 2 (id=283): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt_cache\x00') read$FUSE(r3, &(0x7f0000000640)={0x2020}, 0x2020) preadv(r3, &(0x7f0000002680)=[{&(0x7f00000026c0)=""/179, 0xb3}], 0x1, 0x1, 0x8) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x24, r1, 0x5, 0x0, 0x3, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8041}, 0x0) 973.273962ms ago: executing program 0 (id=284): bpf$MAP_CREATE(0x1100, &(0x7f0000000f40)=ANY=[@ANYBLOB="1c0000000400000008000000000000000100"/48, @ANYRES32, @ANYBLOB="0100000002"], 0x40) 338.378874ms ago: executing program 4 (id=285): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x20008855}, 0x1000) 243.865647ms ago: executing program 0 (id=286): r0 = syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES32=0x0], 0x11, 0x308, &(0x7f00000005c0)="$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") syz_mount_image$hfsplus(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x2, 0x63e, &(0x7f0000000a00)="$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") (async, rerun: 32) unlinkat(0xffffffffffffff9c, &(0x7f0000001040)='./file1\x00', 0x0) (async, rerun: 32) syz_mount_image$msdos(&(0x7f0000001080), &(0x7f00000010c0)='./sys\x00', 0x404, &(0x7f0000001100)=ANY=[], 0xb, 0x0, &(0x7f0000001140)) symlinkat(&(0x7f0000001180)='.\x00', 0xffffffffffffff9c, &(0x7f00000011c0)='./file0\x00') (async, rerun: 64) prctl$PR_SET_FPEMU(0xa, 0x1) (rerun: 64) symlinkat(&(0x7f0000000580)='.\x00', 0xffffffffffffff9c, &(0x7f0000000980)='./file0\x00') (async) capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)={0x0, 0x7, 0x0, 0x2000081, 0xffffffff, 0x4}) (async) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) (async, rerun: 64) r2 = socket$kcm(0x29, 0x2, 0x0) (async, rerun: 64) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x1e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) r3 = syz_io_uring_setup(0x38, &(0x7f0000000440)={0x0, 0xbbda, 0x13f00, 0xffffffff}, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000900)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x21, &(0x7f0000000940), 0x1) (async) write$cgroup_pressure(r2, &(0x7f00000002c0)={'full'}, 0xfffffdef) (async) sendmsg$kcm(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000818) (async) setsockopt$sock_attach_bpf(r2, 0x1, 0x7, &(0x7f0000000340), 0x4) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000180)={0x6, 0x8001, 0x9, 0xe, 0x2, "10e155e100008000"}) (async) openat$ttyS3(0xffffff9c, &(0x7f0000000200), 0x1a3200, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000009c0)='./file1\x00', 0x1c0) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000001100), 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000001140)='./cgroup.net/devices.allow\x00', 0x2, 0x48) write$cgroup_devices(r4, &(0x7f0000001200)=ANY=[@ANYBLOB='c *:* '], 0xa) (async, rerun: 64) openat(r0, &(0x7f0000000540)='./file0\x00', 0x2c41, 0x0) (rerun: 64) 112.120899ms ago: executing program 3 (id=287): bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x6, 0xd, &(0x7f0000001180)=@raw=[@generic={0xb7, 0x2, 0x0, 0x1f}, @generic={0x73, 0xa, 0x2, 0xffc0}, @generic={0x63, 0xa, 0x2, 0xffc8}, @generic={0x18, 0x2, 0x0, 0x0, 0x100000a}, @generic, @generic={0x18, 0x2, 0x0, 0x0, 0x200000a}, @generic, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xffffffc0}, @generic={0xb7, 0x3, 0x0, 0x0, 0x40}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x45}, @generic={0x95}], &(0x7f0000001280)='GPL\x00', 0x1, 0x1000, &(0x7f00000012c0)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 4 (id=288): ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000a80)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x3f, 0x58, 0x2, 0x0, 0x0, 0x2f, 0x0, @empty, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x8100, 0x0, 0x10}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3}}}, {0x8, 0x22eb, 0x4, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x2, {0x8, 0xfffd}}}}}}}}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000000), 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd600000000008ff40fe8000000000000000000000000000bbfe8000000000000000000000000000aa"], 0x0) mount(&(0x7f0000000100)=@nullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000a40)='msdos\x00', 0x2208004, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1f4) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f00000007c0)=0xfff, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000800)={0x0, 0x38, &(0x7f0000000840)=[@in6={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20}, @in6={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}]}, &(0x7f0000000880)=0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f00000003c0)='27', 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, r3, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x1f, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="180500000000000000000000000000001800000020696c2500000000002020207b0af8ff00000000bd510000000000000701000000feffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000640)='GPL\x00', 0x4, 0xda, &(0x7f0000000680)=""/218, 0x41100, 0x73}, 0x94) futimesat(r3, &(0x7f0000000400)='./proc\x00', 0x0) gettid() mremap(&(0x7f0000ff1000/0x3000)=nil, 0x5000, 0x3000, 0x3, &(0x7f0000ff6000/0x1000)=nil) socket$inet_mptcp(0x2, 0x1, 0x106) syz_open_dev$dri(&(0x7f0000000780), 0xfff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x1c, &(0x7f0000000280)=ANY=[@ANYBLOB="18080000e9ff0000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b70300002bb91a0085000000a0000000bc0900000000000045080100002000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000bf27008f0600000007080000fffdffffbfa4000000ffffffc40200000800000018220000abdf9ef277664df6de989a3127f6d60473cc64015b3201937a701c3fd5770676b97fbbe3b6b6c8496058562869d7f5f12809df23abab9f01f11cbf418a0942136802099a40e23c2db6316460fb1dba3db07ea4bca09b24a40fe0", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608efff76000000bf9800000000000056090000000000008500000000a00000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 72.662212][ T5650] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 72.662862][ T5650] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 72.665826][ T5649] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 72.666140][ T5649] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 72.683585][ T5647] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 72.690851][ T5647] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 72.692333][ T5649] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 72.692609][ T5647] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 72.692647][ T5649] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 72.693263][ T5650] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 72.701119][ T5650] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 72.725158][ T5640] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 72.751379][ T4956] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 73.598938][ T5637] rxe_eth0 speed is unknown, defaulting to 1000 [ 73.629443][ T5637] rxe_eth0 speed is unknown, defaulting to 1000 [ 73.632468][ T5636] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 73.637431][ T5637] rxe_eth0 speed is unknown, defaulting to 1000 [ 73.699404][ T5634] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 73.861142][ T5635] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 73.900767][ T5633] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 74.002170][ T5637] infiniband rxe0: set active [ 74.002860][ T5639] rxe_eth0 speed is unknown, defaulting to 1000 [ 74.003328][ T5637] infiniband rxe0: added rxe_eth0 [ 74.021855][ T5637] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 74.021890][ T5637] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 74.021925][ T5637] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 74.087315][ T5637] RDS/IB: rxe0: added [ 74.087712][ T5637] smc: adding ib device rxe0 with port count 1 [ 74.087804][ T5637] smc: ib device rxe0 port 1 has no pnetid [ 74.131440][ T5639] rxe_eth0 speed is unknown, defaulting to 1000 [ 74.136139][ T5637] rxe_eth0 speed is unknown, defaulting to 1000 [ 74.486188][ T5637] rxe_eth0 speed is unknown, defaulting to 1000 [ 74.691759][ T5636] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.694072][ T5636] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.694263][ T5636] bridge_slave_0: entered allmulticast mode [ 74.696334][ T5636] bridge_slave_0: entered promiscuous mode [ 74.730218][ T4956] Bluetooth: hci3: command tx timeout [ 74.730420][ T4956] Bluetooth: hci4: command tx timeout [ 74.730640][ T5642] Bluetooth: hci1: command tx timeout [ 74.761946][ T5636] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.762037][ T5636] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.762157][ T5636] bridge_slave_1: entered allmulticast mode [ 74.765193][ T5636] bridge_slave_1: entered promiscuous mode [ 74.809348][ T5642] Bluetooth: hci0: command tx timeout [ 74.809648][ T5642] Bluetooth: hci2: command tx timeout [ 74.838696][ T5637] rxe_eth0 speed is unknown, defaulting to 1000 [ 74.899015][ T5636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.914623][ T5634] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.916216][ T5634] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.916327][ T5634] bridge_slave_0: entered allmulticast mode [ 74.917629][ T5634] bridge_slave_0: entered promiscuous mode [ 74.920297][ T5634] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.920395][ T5634] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.920758][ T5634] bridge_slave_1: entered allmulticast mode [ 74.925619][ T5634] bridge_slave_1: entered promiscuous mode [ 74.984147][ T5636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.095888][ T5636] team0: Port device team_slave_0 added [ 75.105418][ T5634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.106054][ T5637] rxe_eth0 speed is unknown, defaulting to 1000 [ 75.110062][ T5634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.137480][ T5636] team0: Port device team_slave_1 added [ 75.137780][ T5635] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.137869][ T5635] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.137975][ T5635] bridge_slave_0: entered allmulticast mode [ 75.140931][ T5635] bridge_slave_0: entered promiscuous mode [ 75.191507][ T5635] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.191651][ T5635] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.192056][ T5635] bridge_slave_1: entered allmulticast mode [ 75.194019][ T5635] bridge_slave_1: entered promiscuous mode [ 75.210431][ T5634] team0: Port device team_slave_0 added [ 75.259482][ T5634] team0: Port device team_slave_1 added [ 75.260356][ T5636] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.260368][ T5636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.260394][ T5636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.334497][ T5633] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.335785][ T5633] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.336798][ T5633] bridge_slave_0: entered allmulticast mode [ 75.360098][ T5633] bridge_slave_0: entered promiscuous mode [ 75.385660][ T5636] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.385672][ T5636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.385686][ T5636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.408896][ T5635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.409143][ T5633] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.409272][ T5633] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.409757][ T5633] bridge_slave_1: entered allmulticast mode [ 75.415296][ T5633] bridge_slave_1: entered promiscuous mode [ 75.447366][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.447383][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.447406][ T5634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.451282][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.451297][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.451335][ T5634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.561072][ T5635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.639706][ T5633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.657603][ T5634] hsr_slave_0: entered promiscuous mode [ 75.658822][ T5634] hsr_slave_1: entered promiscuous mode [ 75.667402][ T5636] hsr_slave_0: entered promiscuous mode [ 75.668379][ T5636] hsr_slave_1: entered promiscuous mode [ 75.669080][ T5636] debugfs: 'hsr0' already exists in 'hsr' [ 75.669111][ T5636] Cannot create hsr debugfs directory [ 75.670079][ T5637] rxe_eth0 speed is unknown, defaulting to 1000 [ 75.676393][ T5635] team0: Port device team_slave_0 added [ 75.684967][ T5633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.724540][ T5635] team0: Port device team_slave_1 added [ 75.788289][ T5633] team0: Port device team_slave_0 added [ 75.822257][ T5635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.822275][ T5635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.822299][ T5635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.841548][ T5633] team0: Port device team_slave_1 added [ 75.855443][ T5635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.855460][ T5635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.855483][ T5635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.942753][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.942771][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.942795][ T5633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.996769][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.996787][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.996812][ T5633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.015555][ T5635] hsr_slave_0: entered promiscuous mode [ 76.016553][ T5635] hsr_slave_1: entered promiscuous mode [ 76.017326][ T5635] debugfs: 'hsr0' already exists in 'hsr' [ 76.017340][ T5635] Cannot create hsr debugfs directory [ 76.228948][ T5633] hsr_slave_0: entered promiscuous mode [ 76.230238][ T5633] hsr_slave_1: entered promiscuous mode [ 76.230872][ T5633] debugfs: 'hsr0' already exists in 'hsr' [ 76.230886][ T5633] Cannot create hsr debugfs directory [ 76.504969][ T5634] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 76.511425][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 76.512592][ T5634] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 76.520085][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 76.549446][ T5634] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 76.556050][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 76.558291][ T5634] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 76.572940][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 76.713787][ T5636] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 76.718617][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 76.748500][ T5636] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 76.759155][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 76.761083][ T5636] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 76.771511][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 76.794501][ T5636] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 76.797373][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 76.820960][ T55] Bluetooth: hci1: command tx timeout [ 76.821011][ T55] Bluetooth: hci4: command tx timeout [ 76.821033][ T55] Bluetooth: hci3: command tx timeout [ 76.826535][ T5637] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.826700][ T5637] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.826828][ T5637] bridge_slave_0: entered allmulticast mode [ 76.828577][ T5637] bridge_slave_0: entered promiscuous mode [ 76.845079][ T5637] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.845178][ T5637] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.845324][ T5637] bridge_slave_1: entered allmulticast mode [ 76.851361][ T5637] bridge_slave_1: entered promiscuous mode [ 76.900702][ T55] Bluetooth: hci0: command tx timeout [ 76.901900][ T5642] Bluetooth: hci2: command tx timeout [ 76.934503][ T5637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.954395][ T5637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.002256][ T5637] team0: Port device team_slave_0 added [ 77.021395][ T5637] team0: Port device team_slave_1 added [ 77.041018][ T5635] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 77.043791][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 77.044496][ T5635] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 77.049200][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 77.065969][ T5637] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.065985][ T5637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.066009][ T5637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.075791][ T5634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.083295][ T5635] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 77.092518][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 77.093416][ T5635] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 77.122498][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 77.123960][ T5637] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.123973][ T5637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.123997][ T5637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.243753][ T5637] hsr_slave_0: entered promiscuous mode [ 77.244372][ T5637] hsr_slave_1: entered promiscuous mode [ 77.244805][ T5637] debugfs: 'hsr0' already exists in 'hsr' [ 77.244815][ T5637] Cannot create hsr debugfs directory [ 77.251558][ T5634] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.337330][ T5633] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 77.342062][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 77.356552][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.356646][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.373845][ T5633] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 77.384299][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 77.405525][ T5633] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 77.408719][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 77.418184][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.418339][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.439947][ T5633] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 77.444275][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 77.585333][ T5636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.673357][ T5637] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 77.678258][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 77.703764][ T5637] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 77.708208][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 77.729200][ T5637] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 77.741510][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 77.742350][ T5637] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 77.746212][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 77.776575][ T5636] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.813680][ T277] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.813852][ T277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.815994][ T277] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.816086][ T277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.863710][ T5635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.915511][ T5635] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.955404][ T5633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.965048][ T261] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.965146][ T261] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.998964][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.999055][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.039188][ T5633] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.078851][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.078964][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.113257][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.113364][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.365723][ T5637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.447960][ T5637] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.473917][ T1341] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.474017][ T1341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.518523][ T261] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.518623][ T261] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.589579][ T5634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.855517][ T5634] veth0_vlan: entered promiscuous mode [ 78.896221][ T5642] Bluetooth: hci3: command tx timeout [ 78.896254][ T5642] Bluetooth: hci4: command tx timeout [ 78.896276][ T5642] Bluetooth: hci1: command tx timeout [ 78.925408][ T5634] veth1_vlan: entered promiscuous mode [ 78.972147][ T55] Bluetooth: hci2: command tx timeout [ 78.972182][ T55] Bluetooth: hci0: command tx timeout [ 79.164462][ T5634] veth0_macvtap: entered promiscuous mode [ 79.197526][ T5634] veth1_macvtap: entered promiscuous mode [ 79.285847][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.317654][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.385542][ T5636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.423471][ T45] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.474414][ T5635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.486002][ T1320] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.486408][ T1320] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.490643][ T1320] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.543973][ T5633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.794038][ T1320] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.794063][ T1320] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.835238][ T5635] veth0_vlan: entered promiscuous mode [ 79.915650][ T5635] veth1_vlan: entered promiscuous mode [ 79.932632][ T5633] veth0_vlan: entered promiscuous mode [ 79.945315][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.945338][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.983795][ T5633] veth1_vlan: entered promiscuous mode [ 80.076874][ T5637] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.123872][ T5635] veth0_macvtap: entered promiscuous mode [ 80.150795][ T5635] veth1_macvtap: entered promiscuous mode [ 80.173306][ T5633] veth0_macvtap: entered promiscuous mode [ 80.190457][ T5634] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 80.196229][ T5633] veth1_macvtap: entered promiscuous mode [ 80.256775][ T5636] veth0_vlan: entered promiscuous mode [ 80.273933][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.302045][ T5636] veth1_vlan: entered promiscuous mode [ 80.310450][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.329180][ T5637] veth0_vlan: entered promiscuous mode [ 80.336951][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.356397][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.480356][ T5637] veth1_vlan: entered promiscuous mode [ 80.549521][ T45] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.549594][ T45] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.549628][ T45] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.709688][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.727369][ T5636] veth0_macvtap: entered promiscuous mode [ 80.749438][ T1341] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.749475][ T1341] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.749494][ T1341] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.749512][ T1341] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.764935][ T5636] veth1_macvtap: entered promiscuous mode [ 80.785870][ T5637] veth0_macvtap: entered promiscuous mode [ 80.870839][ T5838] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 81.292406][ T5642] Bluetooth: hci1: command tx timeout [ 81.292445][ T5642] Bluetooth: hci4: command tx timeout [ 81.292467][ T5642] Bluetooth: hci3: command tx timeout [ 81.292488][ T5642] Bluetooth: hci0: command tx timeout [ 81.292510][ T5642] Bluetooth: hci2: command tx timeout [ 81.347280][ T5637] veth1_macvtap: entered promiscuous mode [ 81.454841][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.454863][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.522439][ T1341] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.522461][ T1341] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.571316][ T5636] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.635289][ T5637] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.648357][ T5636] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.685161][ T5637] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.716972][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.716994][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.760792][ T45] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.762709][ T45] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.762746][ T45] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.766964][ T1341] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.777987][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.778009][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.790789][ T1320] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.791184][ T1320] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.802187][ T1320] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.806158][ T1320] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.284733][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.284756][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.329571][ T1234] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 82.357318][ T5848] loop0: detected capacity change from 0 to 2048 [ 82.408756][ T5848] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 82.455240][ T1341] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.455263][ T1341] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.499356][ T1234] usb 4-1: Using ep0 maxpacket: 16 [ 82.500873][ T1234] usb 4-1: New USB device found: idVendor=1d6b, idProduct=0101, bcdDevice=f.89 [ 82.505537][ T1234] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 82.505563][ T1234] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 82.506709][ T1234] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 82.506730][ T1234] usb 4-1: SerialNumber: syz [ 82.506783][ T5638] udevd[5638]: incorrect nilfs2 checksum on /dev/loop0 [ 82.591580][ T1234] usb 4-1: 0:2 : does not exist [ 82.644842][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.644887][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.715994][ T5638] udevd[5638]: incorrect nilfs2 checksum on /dev/loop0 [ 82.799197][ T5848] netlink: 'syz.0.1': attribute type 2 has an invalid length. [ 82.799400][ T5848] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1'. [ 82.874120][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.874143][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.145906][ T5855] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 83.258518][ T5857] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 85.819672][ T1234] usb 4-1: 5:0: cannot get min/max values for control 5 (id 5) [ 85.973442][ T1234] usb 4-1: 5:0: cannot get min/max values for control 5 (id 5) [ 86.013665][ T5730] rxe_eth0 speed is unknown, defaulting to 1000 [ 86.026264][ T1234] usb 4-1: 5:0: cannot get min/max values for control 5 (id 5) [ 86.109922][ T1234] usb 4-1: USB disconnect, device number 2 [ 86.232206][ T5638] udevd[5638]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 86.495791][ T5730] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 86.751299][ T5730] usb 1-1: Using ep0 maxpacket: 16 [ 86.777379][ T5730] usb 1-1: New USB device found: idVendor=1d6b, idProduct=0101, bcdDevice=f.89 [ 86.799660][ T5730] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 86.799700][ T5730] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 86.866344][ T5730] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 86.866413][ T5730] usb 1-1: SerialNumber: syz [ 86.976044][ T1234] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 87.278629][ T996] cfg80211: failed to load regulatory.db [ 87.579501][ T5882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.641025][ T5882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.674787][ T5730] usb 1-1: 0:2 : does not exist [ 88.156589][ T5900] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 89.599275][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 89.769749][ T27] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 89.921552][ T27] usb 5-1: Using ep0 maxpacket: 16 [ 89.922406][ T27] usb 5-1: New USB device found: idVendor=1d6b, idProduct=0101, bcdDevice=f.89 [ 89.923550][ T1234] usb 4-1: unable to get BOS descriptor or descriptor too short [ 89.923686][ T27] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 89.923705][ T27] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 89.924800][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 89.924821][ T27] usb 5-1: SerialNumber: syz [ 89.928261][ T1234] usb 4-1: New USB device found: idVendor=0582, idProduct=004c, bcdDevice=0.40 [ 89.929185][ T1234] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 89.929219][ T1234] usb 4-1: can't read configurations, error -71 [ 90.049846][ T5730] usb 1-1: 5:0: cannot get min/max values for control 5 (id 5) [ 90.076674][ T5730] usb 1-1: 5:0: cannot get min/max values for control 5 (id 5) [ 92.210264][ T5926] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 93.157897][ T5730] usb 1-1: 5:0: cannot get min/max values for control 5 (id 5) [ 94.252909][ T27] usb 5-1: 0:2 : does not exist [ 94.296393][ T5730] usb 1-1: USB disconnect, device number 2 [ 94.439423][ T27] usb 5-1: 5:0: cannot get min/max values for control 5 (id 5) [ 94.470430][ T27] usb 5-1: 5:0: cannot get min/max values for control 5 (id 5) [ 94.555925][ T27] usb 5-1: 5:0: cannot get min/max values for control 5 (id 5) [ 94.644406][ T27] usb 5-1: USB disconnect, device number 2 [ 101.375990][ T5974] netlink: 44 bytes leftover after parsing attributes in process `syz.1.25'. [ 106.229664][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 110.747898][ T6024] loop3: detected capacity change from 0 to 4096 [ 110.783364][ T6024] ext4: Unknown parameter 'audit' [ 111.442424][ T6032] loop1: detected capacity change from 0 to 4096 [ 111.464005][ T6032] ext4: Unknown parameter 'audit' [ 113.479310][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 116.059782][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 117.333341][ T32] audit: type=1326 audit(1794328970.979:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6072 comm="syz.1.43" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a9f7a8f19 code=0x7ffc0000 [ 117.333396][ T32] audit: type=1326 audit(1794328970.979:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6072 comm="syz.1.43" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a9f7a8f19 code=0x7ffc0000 [ 117.346473][ T32] audit: type=1326 audit(1794328970.979:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6072 comm="syz.1.43" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7f8a9f7a8f19 code=0x7ffc0000 [ 117.346524][ T32] audit: type=1326 audit(1794328970.989:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6072 comm="syz.1.43" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a9f7a8f19 code=0x7ffc0000 [ 117.346561][ T32] audit: type=1326 audit(1794328970.989:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6072 comm="syz.1.43" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a9f7a8f19 code=0x7ffc0000 [ 117.441450][ T32] audit: type=1326 audit(1794328971.089:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6072 comm="syz.1.43" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f8a9f7a8f19 code=0x7ffc0000 [ 117.441501][ T32] audit: type=1326 audit(1794328971.089:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6072 comm="syz.1.43" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a9f7a8f19 code=0x7ffc0000 [ 117.441538][ T32] audit: type=1326 audit(1794328971.089:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6072 comm="syz.1.43" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a9f7a8f19 code=0x7ffc0000 [ 117.553371][ T32] audit: type=1326 audit(1794328971.199:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6072 comm="syz.1.43" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8a9f7a8f19 code=0x7ffc0000 [ 117.553414][ T32] audit: type=1326 audit(1794328971.199:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6072 comm="syz.1.43" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a9f7a8f19 code=0x7ffc0000 [ 118.209711][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 119.029570][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 123.329667][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 125.492927][ T6115] loop1: detected capacity change from 0 to 2048 [ 125.503703][ T6115] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 126.247139][ T6105] udevd[6105]: incorrect nilfs2 checksum on /dev/loop1 [ 126.325263][ T6124] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 131.009676][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 133.492235][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.492292][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.039982][ T6161] loop2: detected capacity change from 0 to 2048 [ 134.082257][ T6161] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 134.428812][ T6152] udevd[6152]: incorrect nilfs2 checksum on /dev/loop2 [ 134.559988][ T6161] netlink: 'syz.2.62': attribute type 2 has an invalid length. [ 134.560043][ T6161] netlink: 224 bytes leftover after parsing attributes in process `syz.2.62'. [ 134.768353][ T6170] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 136.008617][ T6178] loop3: detected capacity change from 0 to 2048 [ 136.019219][ T6178] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 137.417076][ T6152] udevd[6152]: incorrect nilfs2 checksum on /dev/loop3 [ 138.172322][ T6192] udevd[6192]: incorrect nilfs2 checksum on /dev/loop3 [ 138.192336][ T6178] netlink: 'syz.3.59': attribute type 2 has an invalid length. [ 138.192358][ T6178] netlink: 224 bytes leftover after parsing attributes in process `syz.3.59'. [ 138.274910][ T6194] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 140.907685][ T6212] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 141.058236][ T6220] loop3: detected capacity change from 0 to 2048 [ 141.072771][ T6220] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 141.136080][ T6192] udevd[6192]: incorrect nilfs2 checksum on /dev/loop3 [ 141.140162][ T6220] netlink: 'syz.3.74': attribute type 2 has an invalid length. [ 141.140181][ T6220] netlink: 224 bytes leftover after parsing attributes in process `syz.3.74'. [ 141.223794][ T6224] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 141.346887][ T6227] netlink: 44 bytes leftover after parsing attributes in process `syz.0.76'. [ 142.577748][ T32] kauditd_printk_skb: 34 callbacks suppressed [ 142.577761][ T32] audit: type=1326 audit(1794328996.219:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6228 comm="syz.2.77" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3035a8f19 code=0x7ffc0000 [ 142.577787][ T32] audit: type=1326 audit(1794328996.219:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6228 comm="syz.2.77" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3035a8f19 code=0x7ffc0000 [ 142.603476][ T32] audit: type=1326 audit(1794328996.229:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6228 comm="syz.2.77" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7fb3035a8f19 code=0x7ffc0000 [ 142.603524][ T32] audit: type=1326 audit(1794328996.229:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6228 comm="syz.2.77" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3035a8f19 code=0x7ffc0000 [ 142.603560][ T32] audit: type=1326 audit(1794328996.229:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6228 comm="syz.2.77" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3035a8f19 code=0x7ffc0000 [ 142.726351][ T32] audit: type=1326 audit(1794328996.369:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6228 comm="syz.2.77" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7fb3035a8f19 code=0x7ffc0000 [ 142.726382][ T32] audit: type=1326 audit(1794328996.369:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6228 comm="syz.2.77" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3035a8f19 code=0x7ffc0000 [ 142.726402][ T32] audit: type=1326 audit(1794328996.369:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6228 comm="syz.2.77" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3035a8f19 code=0x7ffc0000 [ 142.815014][ T32] audit: type=1326 audit(1794328996.459:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6228 comm="syz.2.77" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb3035a8f19 code=0x7ffc0000 [ 142.815074][ T32] audit: type=1326 audit(1794328996.459:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6228 comm="syz.2.77" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3035a8f19 code=0x7ffc0000 [ 143.809719][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 150.710861][ T6275] netlink: 44 bytes leftover after parsing attributes in process `syz.2.88'. [ 151.912109][ T6279] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 157.464233][ T6309] loop3: detected capacity change from 0 to 2048 [ 157.486779][ T6309] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 157.602501][ T6268] udevd[6268]: incorrect nilfs2 checksum on /dev/loop3 [ 157.603458][ T6309] netlink: 'syz.3.89': attribute type 2 has an invalid length. [ 157.603475][ T6309] netlink: 224 bytes leftover after parsing attributes in process `syz.3.89'. [ 157.690546][ T6314] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 159.989405][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 162.486016][ T32] kauditd_printk_skb: 43 callbacks suppressed [ 162.486035][ T32] audit: type=1326 audit(1794329016.129:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6335 comm="syz.2.103" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3035a8f19 code=0x7ffc0000 [ 162.489446][ T32] audit: type=1326 audit(1794329016.129:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6335 comm="syz.2.103" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7fb3035a8f19 code=0x7ffc0000 [ 162.521720][ T32] audit: type=1326 audit(1794329016.169:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6335 comm="syz.2.103" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3035a8f19 code=0x7ffc0000 [ 162.534607][ T32] audit: type=1326 audit(1794329016.169:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6335 comm="syz.2.103" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3035a8f19 code=0x7ffc0000 [ 162.631947][ T32] audit: type=1326 audit(1794329016.279:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6335 comm="syz.2.103" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7fb3035a8f19 code=0x7ffc0000 [ 162.632106][ T32] audit: type=1326 audit(1794329016.279:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6335 comm="syz.2.103" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3035a8f19 code=0x7ffc0000 [ 162.632283][ T32] audit: type=1326 audit(1794329016.279:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6335 comm="syz.2.103" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3035a8f19 code=0x7ffc0000 [ 162.633924][ T32] audit: type=1326 audit(1794329016.279:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6335 comm="syz.2.103" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb3035a8f19 code=0x7ffc0000 [ 162.634202][ T32] audit: type=1326 audit(1794329016.279:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6335 comm="syz.2.103" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3035a8f19 code=0x7ffc0000 [ 162.634241][ T32] audit: type=1326 audit(1794329016.279:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6335 comm="syz.2.103" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3035a8f19 code=0x7ffc0000 [ 164.739999][ T6341] loop1: detected capacity change from 0 to 40427 [ 164.828242][ T6341] F2FS-fs (loop1): invalid crc value [ 165.132309][ T6362] FAULT_INJECTION: forcing a failure. [ 165.132309][ T6362] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 165.132351][ T6362] CPU: 1 UID: 0 PID: 6362 Comm: syz.4.108 Not tainted syzkaller #0 PREEMPT(full) [ 165.132369][ T6362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 165.132385][ T6362] Call Trace: [ 165.132390][ T6362] [ 165.132397][ T6362] dump_stack_lvl+0xe8/0x150 [ 165.132432][ T6362] should_fail_ex+0x3eb/0x540 [ 165.132456][ T6362] _copy_from_user+0x2d/0xb0 [ 165.132478][ T6362] ___sys_recvmsg+0x173/0x5a0 [ 165.132499][ T6362] ? __pfx____sys_recvmsg+0x10/0x10 [ 165.132519][ T6362] ? lock_acquire+0x115/0x350 [ 165.132552][ T6362] ? __fget_files+0x2a/0x420 [ 165.132577][ T6362] ? __fget_files+0x3a2/0x420 [ 165.132599][ T6362] ? __fget_files+0x2a/0x420 [ 165.132628][ T6362] ? fdget+0x1ac/0x250 [ 165.132654][ T6362] do_recvmmsg+0x31a/0x800 [ 165.132680][ T6362] ? __pfx_do_recvmmsg+0x10/0x10 [ 165.132702][ T6362] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 165.132722][ T6362] ? fdget+0x1ac/0x250 [ 165.132751][ T6362] __x64_sys_recvmmsg+0x198/0x250 [ 165.132772][ T6362] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 165.132796][ T6362] do_syscall_64+0x16a/0x530 [ 165.132812][ T6362] ? trace_irq_disable+0x3b/0x140 [ 165.132834][ T6362] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.132849][ T6362] ? clear_bhb_loop+0x70/0xc0 [ 165.132868][ T6362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.132885][ T6362] RIP: 0033:0x7f3e651a8f19 [ 165.132906][ T6362] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.132920][ T6362] RSP: 002b:00007f3e66131028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 165.132943][ T6362] RAX: ffffffffffffffda RBX: 00007f3e65425fa0 RCX: 00007f3e651a8f19 [ 165.132956][ T6362] RDX: 0000000000000001 RSI: 0000200000000400 RDI: 0000000000000003 [ 165.132967][ T6362] RBP: 00007f3e66131090 R08: 0000000000000000 R09: 0000000000000000 [ 165.132978][ T6362] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 165.132988][ T6362] R13: 00007f3e65426038 R14: 00007f3e65425fa0 R15: 00007ffd011c0ca8 [ 165.133015][ T6362] [ 165.770033][ T6341] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 165.892354][ T6341] F2FS-fs (loop1): f2fs_disable_checkpoint starts, unusable: 0 [ 165.919762][ T6341] F2FS-fs (loop1): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 165.958949][ T6341] F2FS-fs (loop1): Start checkpoint disabled! [ 166.334750][ T6341] F2FS-fs (loop1): f2fs_disable_checkpoint finishes, err:0 [ 166.494547][ T6373] loop4: detected capacity change from 0 to 2048 [ 166.506598][ T6373] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 167.267500][ T6373] netlink: 'syz.4.110': attribute type 2 has an invalid length. [ 167.267555][ T6373] netlink: 224 bytes leftover after parsing attributes in process `syz.4.110'. [ 167.407137][ T6348] udevd[6348]: incorrect nilfs2 checksum on /dev/loop4 [ 167.457840][ T6382] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 167.537046][ T6379] loop3: detected capacity change from 0 to 4096 [ 167.549639][ T6379] ext4: Unknown parameter 'audit' [ 168.422975][ T6392] FAULT_INJECTION: forcing a failure. [ 168.422975][ T6392] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 168.422994][ T6392] CPU: 0 UID: 0 PID: 6392 Comm: syz.4.115 Not tainted syzkaller #0 PREEMPT(full) [ 168.423006][ T6392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 168.423012][ T6392] Call Trace: [ 168.423016][ T6392] [ 168.423021][ T6392] dump_stack_lvl+0xe8/0x150 [ 168.423044][ T6392] should_fail_ex+0x3eb/0x540 [ 168.423062][ T6392] _copy_from_user+0x2d/0xb0 [ 168.423078][ T6392] ___sys_sendmsg+0x1c6/0x360 [ 168.423088][ T6392] ? __lock_acquire+0x747/0x2de0 [ 168.423105][ T6392] ? __pfx____sys_sendmsg+0x10/0x10 [ 168.423133][ T6392] ? __fget_files+0x3a2/0x420 [ 168.423148][ T6392] ? __fget_files+0x2a/0x420 [ 168.423167][ T6392] __x64_sys_sendmsg+0x1b1/0x290 [ 168.423178][ T6392] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 168.423199][ T6392] do_syscall_64+0x16a/0x530 [ 168.423211][ T6392] ? trace_irq_disable+0x3b/0x140 [ 168.423235][ T6392] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.423245][ T6392] ? clear_bhb_loop+0x70/0xc0 [ 168.423258][ T6392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.423268][ T6392] RIP: 0033:0x7f3e651a8f19 [ 168.423278][ T6392] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.423286][ T6392] RSP: 002b:00007f3e66131028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 168.423298][ T6392] RAX: ffffffffffffffda RBX: 00007f3e65425fa0 RCX: 00007f3e651a8f19 [ 168.423305][ T6392] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 168.423311][ T6392] RBP: 00007f3e66131090 R08: 0000000000000000 R09: 0000000000000000 [ 168.423317][ T6392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.423323][ T6392] R13: 00007f3e65426038 R14: 00007f3e65425fa0 R15: 00007ffd011c0ca8 [ 168.423338][ T6392] [ 172.064934][ T32] kauditd_printk_skb: 28 callbacks suppressed [ 172.064953][ T32] audit: type=1326 audit(1794329025.709:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6409 comm="syz.1.114" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a9f7a8f19 code=0x7ffc0000 [ 172.065068][ T32] audit: type=1326 audit(1794329025.709:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6409 comm="syz.1.114" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a9f7a8f19 code=0x7ffc0000 [ 172.065924][ T32] audit: type=1326 audit(1794329025.709:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6409 comm="syz.1.114" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7f8a9f7a8f19 code=0x7ffc0000 [ 172.082731][ T32] audit: type=1326 audit(1794329025.729:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6409 comm="syz.1.114" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a9f7a8f19 code=0x7ffc0000 [ 172.083965][ T32] audit: type=1326 audit(1794329025.729:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6409 comm="syz.1.114" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a9f7a8f19 code=0x7ffc0000 [ 172.087201][ T32] audit: type=1326 audit(1794329025.729:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6409 comm="syz.1.114" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f8a9f7a8f19 code=0x7ffc0000 [ 172.087430][ T32] audit: type=1326 audit(1794329025.729:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6409 comm="syz.1.114" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a9f7a8f19 code=0x7ffc0000 [ 172.087617][ T32] audit: type=1326 audit(1794329025.729:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6409 comm="syz.1.114" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a9f7a8f19 code=0x7ffc0000 [ 172.087943][ T32] audit: type=1326 audit(1794329025.729:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6409 comm="syz.1.114" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8a9f7a8f19 code=0x7ffc0000 [ 172.088120][ T32] audit: type=1326 audit(1794329025.729:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6409 comm="syz.1.114" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a9f7a8f19 code=0x7ffc0000 [ 172.427343][ T6415] FAULT_INJECTION: forcing a failure. [ 172.427343][ T6415] name failslab, interval 1, probability 0, space 0, times 1 [ 172.427372][ T6415] CPU: 0 UID: 0 PID: 6415 Comm: syz.4.122 Not tainted syzkaller #0 PREEMPT(full) [ 172.427392][ T6415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 172.427403][ T6415] Call Trace: [ 172.427411][ T6415] [ 172.427419][ T6415] dump_stack_lvl+0xe8/0x150 [ 172.427456][ T6415] should_fail_ex+0x3eb/0x540 [ 172.427487][ T6415] should_failslab+0xa8/0x100 [ 172.427510][ T6415] __kmalloc_noprof+0xf9/0x710 [ 172.427537][ T6415] ? kernfs_fop_write_iter+0x157/0x540 [ 172.427563][ T6415] ? kernfs_fop_write_iter+0x157/0x540 [ 172.427596][ T6415] kernfs_fop_write_iter+0x157/0x540 [ 172.427629][ T6415] vfs_write+0x612/0xba0 [ 172.427667][ T6415] ? __pfx_vfs_write+0x10/0x10 [ 172.427698][ T6415] ? __fget_files+0x3a2/0x420 [ 172.427724][ T6415] ? __fget_files+0x2a/0x420 [ 172.427753][ T6415] ? fdget+0x1ac/0x250 [ 172.427785][ T6415] ksys_write+0x150/0x270 [ 172.427815][ T6415] ? __pfx_ksys_write+0x10/0x10 [ 172.427856][ T6415] do_syscall_64+0x16a/0x530 [ 172.427877][ T6415] ? trace_irq_disable+0x3b/0x140 [ 172.427912][ T6415] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.427931][ T6415] ? clear_bhb_loop+0x70/0xc0 [ 172.427954][ T6415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.427973][ T6415] RIP: 0033:0x7f3e651a8f19 [ 172.427991][ T6415] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.428006][ T6415] RSP: 002b:00007f3e66131028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 172.428027][ T6415] RAX: ffffffffffffffda RBX: 00007f3e65425fa0 RCX: 00007f3e651a8f19 [ 172.428041][ T6415] RDX: 0000000000000008 RSI: 0000200000000cc0 RDI: 0000000000000003 [ 172.428053][ T6415] RBP: 00007f3e66131090 R08: 0000000000000000 R09: 0000000000000000 [ 172.428065][ T6415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.428077][ T6415] R13: 00007f3e65426038 R14: 00007f3e65425fa0 R15: 00007ffd011c0ca8 [ 172.428110][ T6415] [ 172.833685][ T6417] loop4: detected capacity change from 0 to 2048 [ 172.862356][ T6417] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 172.989815][ T6417] netlink: 'syz.4.125': attribute type 2 has an invalid length. [ 172.989837][ T6417] netlink: 224 bytes leftover after parsing attributes in process `syz.4.125'. [ 173.033624][ T6418] udevd[6418]: incorrect nilfs2 checksum on /dev/loop4 [ 173.081597][ T6422] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 175.187530][ T6413] loop3: detected capacity change from 0 to 40427 [ 175.381360][ T6413] F2FS-fs (loop3): Unable to read 1th superblock [ 175.381883][ T6413] F2FS-fs (loop3): Unable to read 2th superblock [ 176.074167][ T6449] loop3: detected capacity change from 0 to 4096 [ 176.075704][ T6449] ext4: Unknown parameter 'audit' [ 176.322106][ T6454] loop0: detected capacity change from 0 to 32768 [ 176.369946][ T6454] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 176.369963][ T6454] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 176.389668][ T5764] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 176.467138][ T6454] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 176.486589][ T1234] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 176.486610][ T1234] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 176.530519][ T5764] usb 5-1: New USB device found: idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 176.535456][ T5764] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 176.535508][ T5764] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.550687][ T5764] usb 5-1: config 0 descriptor?? [ 176.587744][ T5764] pwc: Askey VC010 type 2 USB webcam detected. [ 176.871035][ T1234] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 384ms [ 176.887961][ T1234] gfs2: fsid=syz:syz.0: jid=0: Done [ 176.888441][ T6454] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 176.936574][ T6459] FAULT_INJECTION: forcing a failure. [ 176.936574][ T6459] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 176.936609][ T6459] CPU: 1 UID: 0 PID: 6459 Comm: syz.1.131 Not tainted syzkaller #0 PREEMPT(full) [ 176.936621][ T6459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 176.936627][ T6459] Call Trace: [ 176.936631][ T6459] [ 176.936641][ T6459] dump_stack_lvl+0xe8/0x150 [ 176.936664][ T6459] should_fail_ex+0x3eb/0x540 [ 176.936683][ T6459] _copy_from_user+0x2d/0xb0 [ 176.936699][ T6459] ___sys_recvmsg+0x173/0x5a0 [ 176.936714][ T6459] ? __pfx____sys_recvmsg+0x10/0x10 [ 176.936729][ T6459] ? lock_acquire+0x115/0x350 [ 176.936751][ T6459] ? __fget_files+0x2a/0x420 [ 176.936765][ T6459] ? __fget_files+0x3a2/0x420 [ 176.936779][ T6459] ? __fget_files+0x2a/0x420 [ 176.936795][ T6459] ? fdget+0x1ac/0x250 [ 176.936810][ T6459] do_recvmmsg+0x31a/0x800 [ 176.936825][ T6459] ? __pfx_do_recvmmsg+0x10/0x10 [ 176.936842][ T6459] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 176.936857][ T6459] ? fdget+0x1ac/0x250 [ 176.936877][ T6459] __x64_sys_recvmmsg+0x198/0x250 [ 176.936890][ T6459] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 176.936906][ T6459] do_syscall_64+0x16a/0x530 [ 176.936918][ T6459] ? trace_irq_disable+0x3b/0x140 [ 176.936933][ T6459] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.936944][ T6459] ? clear_bhb_loop+0x70/0xc0 [ 176.936957][ T6459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.936967][ T6459] RIP: 0033:0x7f8a9f7a8f19 [ 176.936978][ T6459] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.936986][ T6459] RSP: 002b:00007f8aa05db028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 176.936998][ T6459] RAX: ffffffffffffffda RBX: 00007f8a9fa25fa0 RCX: 00007f8a9f7a8f19 [ 176.937005][ T6459] RDX: 0000000000000001 RSI: 0000200000000400 RDI: 0000000000000003 [ 176.937011][ T6459] RBP: 00007f8aa05db090 R08: 0000000000000000 R09: 0000000000000000 [ 176.937017][ T6459] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 176.937023][ T6459] R13: 00007f8a9fa26038 R14: 00007f8a9fa25fa0 R15: 00007ffc4c8cfaa8 [ 176.937039][ T6459] [ 176.985066][ T5764] pwc: recv_control_msg error -32 req 02 val 2b00 [ 176.986309][ T5764] pwc: recv_control_msg error -32 req 02 val 2700 [ 177.008888][ T5764] pwc: recv_control_msg error -32 req 02 val 2c00 [ 177.026999][ T5764] pwc: recv_control_msg error -32 req 04 val 1000 [ 177.040099][ T5764] pwc: recv_control_msg error -32 req 04 val 1300 [ 177.046260][ T5764] pwc: recv_control_msg error -32 req 04 val 1400 [ 177.047015][ T5764] pwc: recv_control_msg error -32 req 02 val 2000 [ 177.068636][ T5764] pwc: recv_control_msg error -32 req 02 val 2100 [ 177.076287][ T5764] pwc: recv_control_msg error -32 req 04 val 1500 [ 177.083840][ T5764] pwc: recv_control_msg error -32 req 02 val 2500 [ 177.091966][ T5764] pwc: recv_control_msg error -32 req 02 val 2400 [ 177.263004][ T6463] loop1: detected capacity change from 0 to 128 [ 177.287652][ T6463] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 177.338470][ T32] kauditd_printk_skb: 32 callbacks suppressed [ 177.338488][ T32] audit: type=1326 audit(1794329030.979:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6464 comm="syz.3.135" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e5e3a8f19 code=0x7ffc0000 [ 177.338531][ T32] audit: type=1326 audit(1794329030.979:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6464 comm="syz.3.135" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e5e3a8f19 code=0x7ffc0000 [ 177.339100][ T32] audit: type=1326 audit(1794329030.979:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6464 comm="syz.3.135" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7f1e5e3a8f19 code=0x7ffc0000 [ 177.375015][ T32] audit: type=1326 audit(1794329030.999:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6464 comm="syz.3.135" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e5e3a8f19 code=0x7ffc0000 [ 177.375069][ T32] audit: type=1326 audit(1794329030.999:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6464 comm="syz.3.135" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e5e3a8f19 code=0x7ffc0000 [ 177.435070][ T6467] FAULT_INJECTION: forcing a failure. [ 177.435070][ T6467] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 177.435099][ T6467] CPU: 1 UID: 0 PID: 6467 Comm: syz.2.133 Not tainted syzkaller #0 PREEMPT(full) [ 177.435120][ T6467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 177.435131][ T6467] Call Trace: [ 177.435138][ T6467] [ 177.435146][ T6467] dump_stack_lvl+0xe8/0x150 [ 177.435183][ T6467] should_fail_ex+0x3eb/0x540 [ 177.435213][ T6467] _copy_from_user+0x2d/0xb0 [ 177.435240][ T6467] ucma_write+0x158/0x2f0 [ 177.435267][ T6467] ? __pfx_ucma_write+0x10/0x10 [ 177.435289][ T6467] ? security_file_permission+0x75/0x260 [ 177.435317][ T6467] ? rw_verify_area+0x203/0x4c0 [ 177.435345][ T6467] ? __pfx_ucma_write+0x10/0x10 [ 177.435367][ T6467] vfs_write+0x296/0xba0 [ 177.435401][ T6467] ? __pfx_vfs_write+0x10/0x10 [ 177.435430][ T6467] ? __fget_files+0x2a/0x420 [ 177.435454][ T6467] ? __fget_files+0x3a2/0x420 [ 177.435476][ T6467] ? __fget_files+0x2a/0x420 [ 177.435504][ T6467] ? fdget+0x1ac/0x250 [ 177.435535][ T6467] ksys_write+0x150/0x270 [ 177.435564][ T6467] ? __pfx_ksys_write+0x10/0x10 [ 177.435601][ T6467] do_syscall_64+0x16a/0x530 [ 177.435622][ T6467] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.435641][ T6467] ? clear_bhb_loop+0x70/0xc0 [ 177.435663][ T6467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.435681][ T6467] RIP: 0033:0x7fb3035a8f19 [ 177.435698][ T6467] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 177.435713][ T6467] RSP: 002b:00007fb3044b1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 177.435733][ T6467] RAX: ffffffffffffffda RBX: 00007fb303825fa0 RCX: 00007fb3035a8f19 [ 177.435746][ T6467] RDX: 0000000000000048 RSI: 0000200000000140 RDI: 0000000000000003 [ 177.435758][ T6467] RBP: 00007fb3044b1090 R08: 0000000000000000 R09: 0000000000000000 [ 177.435775][ T6467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.435786][ T6467] R13: 00007fb303826038 R14: 00007fb303825fa0 R15: 00007ffedbf43b08 [ 177.435815][ T6467] [ 177.600583][ T32] audit: type=1326 audit(1794329031.239:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6464 comm="syz.3.135" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f1e5e3a8f19 code=0x7ffc0000 [ 177.600637][ T32] audit: type=1326 audit(1794329031.239:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6464 comm="syz.3.135" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e5e3a8f19 code=0x7ffc0000 [ 177.600675][ T32] audit: type=1326 audit(1794329031.239:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6464 comm="syz.3.135" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e5e3a8f19 code=0x7ffc0000 [ 177.606447][ T32] audit: type=1326 audit(1794329031.249:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6464 comm="syz.3.135" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1e5e3a8f19 code=0x7ffc0000 [ 177.606494][ T32] audit: type=1326 audit(1794329031.249:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6464 comm="syz.3.135" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e5e3a8f19 code=0x7ffc0000 [ 179.007651][ T6473] UDF-fs: error (device loop1): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 180.131411][ T5764] pwc: recv_control_msg error -71 req 02 val 2900 [ 180.131832][ T5764] pwc: recv_control_msg error -71 req 02 val 2800 [ 180.133433][ T5764] pwc: recv_control_msg error -71 req 04 val 1100 [ 180.135440][ T5764] pwc: recv_control_msg error -71 req 04 val 1200 [ 180.166878][ T5764] pwc: Registered as video103. [ 180.200957][ T5764] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input5 [ 180.666020][ T5764] usb 5-1: USB disconnect, device number 3 [ 181.489122][ T6496] loop0: detected capacity change from 0 to 2048 [ 181.513668][ T6496] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 181.622974][ T6496] netlink: 'syz.0.136': attribute type 2 has an invalid length. [ 181.623165][ T6496] netlink: 224 bytes leftover after parsing attributes in process `syz.0.136'. [ 181.659999][ T6504] dummy0 speed is unknown, defaulting to 1000 [ 181.660551][ T6504] dummy0 speed is unknown, defaulting to 1000 [ 181.675358][ T6504] dummy0 speed is unknown, defaulting to 1000 [ 181.691363][ T6504] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 181.691443][ T6504] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 181.691498][ T6504] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 181.933445][ T6504] dummy0 speed is unknown, defaulting to 1000 [ 181.997554][ T6507] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 183.002786][ T6504] dummy0 speed is unknown, defaulting to 1000 [ 183.003965][ T6504] dummy0 speed is unknown, defaulting to 1000 [ 183.023857][ T6504] dummy0 speed is unknown, defaulting to 1000 [ 183.038551][ T6504] dummy0 speed is unknown, defaulting to 1000 [ 183.057428][ T6505] smc: removing ib device rxe0 [ 184.232565][ T6505] smbdirect: ib_dev[rxe0] removed [ 185.370227][ T6524] netlink: 268 bytes leftover after parsing attributes in process `syz.2.147'. [ 187.810744][ T6524] loop2: detected capacity change from 0 to 32768 [ 187.812858][ T6524] ======================================================= [ 187.812858][ T6524] WARNING: The mand mount option has been deprecated and [ 187.812858][ T6524] and is ignored by this kernel. Remove the mand [ 187.812858][ T6524] option from the mount to silence this warning. [ 187.812858][ T6524] ======================================================= [ 187.982898][ T6524] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 188.605487][ T6524] syz.2.147 (6524) used greatest stack depth: 19232 bytes left [ 188.895684][ T6549] loop4: detected capacity change from 0 to 2048 [ 188.909829][ T6549] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 188.937196][ T5637] ocfs2: Unmounting device (7,2) on (node local) [ 188.975300][ T6549] netlink: 'syz.4.156': attribute type 2 has an invalid length. [ 188.975333][ T6549] netlink: 224 bytes leftover after parsing attributes in process `syz.4.156'. [ 189.021457][ T6418] udevd[6418]: incorrect nilfs2 checksum on /dev/loop4 [ 189.058057][ T6554] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 190.394871][ T6561] netlink: 44 bytes leftover after parsing attributes in process `syz.4.159'. [ 192.078234][ T6578] netlink: zone id is out of range [ 192.078250][ T6578] netlink: zone id is out of range [ 192.078258][ T6578] netlink: zone id is out of range [ 192.078265][ T6578] netlink: zone id is out of range [ 192.078287][ T6578] netlink: zone id is out of range [ 192.078297][ T6578] netlink: zone id is out of range [ 192.319950][ T5764] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 192.496417][ T5764] usb 3-1: not running at top speed; connect to a high speed hub [ 192.496440][ T5764] usb 3-1: New USB device found: idVendor=0ea0, idProduct=6858, bcdDevice=0.40 [ 192.498961][ T5764] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 192.563343][ T5764] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.563373][ T5764] usb 3-1: Product: syz [ 192.563388][ T5764] usb 3-1: Manufacturer: syz [ 192.563403][ T5764] usb 3-1: SerialNumber: syz [ 192.603953][ T5764] oti6858 3-1:1.0: oti6858 converter detected [ 192.624645][ T5764] usb 3-1: oti6858 converter now attached to ttyUSB0 [ 192.733022][ T6583] loop3: detected capacity change from 0 to 512 [ 192.733964][ T6583] EXT4-fs: Ignoring removed nobh option [ 192.893430][ T6583] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.893524][ T6583] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 193.431227][ T6589] EXT4-fs error (device loop3): ext4_validate_block_bitmap:445: comm ext4lazyinit: bg 0: block 250: padding at end of block bitmap is not set [ 193.532466][ T5634] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.345084][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.345141][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.365525][ T6591] loop2: detected capacity change from 0 to 32768 [ 194.366314][ T6591] jfs: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 194.582619][ T6605] FAULT_INJECTION: forcing a failure. [ 194.582619][ T6605] name failslab, interval 1, probability 0, space 0, times 0 [ 194.582649][ T6605] CPU: 1 UID: 0 PID: 6605 Comm: syz.1.169 Not tainted syzkaller #0 PREEMPT(full) [ 194.582673][ T6605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 194.582684][ T6605] Call Trace: [ 194.582692][ T6605] [ 194.582699][ T6605] dump_stack_lvl+0xe8/0x150 [ 194.582743][ T6605] should_fail_ex+0x3eb/0x540 [ 194.582775][ T6605] should_failslab+0xa8/0x100 [ 194.582796][ T6605] ? skb_clone+0x212/0x3a0 [ 194.582817][ T6605] kmem_cache_alloc_noprof+0x9c/0x600 [ 194.582845][ T6605] ? skb_clone+0x212/0x3a0 [ 194.582871][ T6605] skb_clone+0x212/0x3a0 [ 194.582895][ T6605] __netlink_deliver_tap+0x355/0x6e0 [ 194.582932][ T6605] ? netlink_deliver_tap+0x2e/0x1b0 [ 194.582959][ T6605] netlink_deliver_tap+0x19c/0x1b0 [ 194.582985][ T6605] netlink_unicast+0x8c1/0xa80 [ 194.583026][ T6605] netlink_sendmsg+0x7f0/0xb20 [ 194.583064][ T6605] ? __pfx_netlink_sendmsg+0x10/0x10 [ 194.583098][ T6605] ? aa_sock_msg_perm+0x144/0x210 [ 194.583125][ T6605] ? apparmor_socket_sendmsg+0x98/0x360 [ 194.583156][ T6605] ? __pfx_netlink_sendmsg+0x10/0x10 [ 194.583180][ T6605] sock_sendmsg_nosec+0x14e/0x190 [ 194.583206][ T6605] ____sys_sendmsg+0x54e/0x850 [ 194.583231][ T6605] ? __pfx_____sys_sendmsg+0x10/0x10 [ 194.583259][ T6605] ? import_iovec+0x73/0xa0 [ 194.583288][ T6605] ___sys_sendmsg+0x2a6/0x360 [ 194.583305][ T6605] ? __lock_acquire+0x747/0x2de0 [ 194.583336][ T6605] ? __pfx____sys_sendmsg+0x10/0x10 [ 194.583360][ T6605] ? kstrtouint+0x6e/0xe0 [ 194.583409][ T6605] ? __fget_files+0x3a2/0x420 [ 194.583434][ T6605] ? __fget_files+0x2a/0x420 [ 194.583469][ T6605] __sys_sendmmsg+0x273/0x4e0 [ 194.583495][ T6605] ? __pfx___sys_sendmmsg+0x10/0x10 [ 194.583523][ T6605] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 194.583560][ T6605] ? ksys_write+0x242/0x270 [ 194.583590][ T6605] ? __pfx_ksys_write+0x10/0x10 [ 194.583622][ T6605] __x64_sys_sendmmsg+0xa0/0xc0 [ 194.583643][ T6605] do_syscall_64+0x16a/0x530 [ 194.583663][ T6605] ? trace_irq_disable+0x3b/0x140 [ 194.583689][ T6605] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.583716][ T6605] ? clear_bhb_loop+0x70/0xc0 [ 194.583740][ T6605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.583759][ T6605] RIP: 0033:0x7f8a9f7a8f19 [ 194.583777][ T6605] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.583793][ T6605] RSP: 002b:00007f8aa05db028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 194.583814][ T6605] RAX: ffffffffffffffda RBX: 00007f8a9fa25fa0 RCX: 00007f8a9f7a8f19 [ 194.583828][ T6605] RDX: 0492492492492627 RSI: 00002000000000c0 RDI: 0000000000000003 [ 194.583841][ T6605] RBP: 00007f8aa05db090 R08: 0000000000000000 R09: 0000000000000000 [ 194.583853][ T6605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 194.583864][ T6605] R13: 00007f8a9fa26038 R14: 00007f8a9fa25fa0 R15: 00007ffc4c8cfaa8 [ 194.583896][ T6605] [ 194.584260][ T6604] loop3: detected capacity change from 0 to 16 [ 194.595982][ T6605] Zero length message leads to an empty skb [ 194.646767][ T6604] erofs (device loop3): mounted with root inode @ nid 36. [ 194.852075][ T6579] loop2: detected capacity change from 0 to 4096 [ 194.869961][ T6579] ntfs3: unknown option "mnt". Use uid,gid,umask,dmask,fmask,sys_immutable,discard,force,sparse,nohidden,hide_dot_files,windows_names,showmeta,acl,iocharset,prealloc,nocase,delalloc,ads,ugm [ 194.870005][ T6579] ntfs3: Unknown parameter 'mnt' [ 194.924531][ T6608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.925087][ T6608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.146613][ T6614] FAULT_INJECTION: forcing a failure. [ 195.146613][ T6614] name failslab, interval 1, probability 0, space 0, times 0 [ 195.146639][ T6614] CPU: 0 UID: 0 PID: 6614 Comm: syz.1.171 Not tainted syzkaller #0 PREEMPT(full) [ 195.146657][ T6614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 195.146665][ T6614] Call Trace: [ 195.146671][ T6614] [ 195.146677][ T6614] dump_stack_lvl+0xe8/0x150 [ 195.146708][ T6614] should_fail_ex+0x3eb/0x540 [ 195.146733][ T6614] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 195.146749][ T6614] should_failslab+0xa8/0x100 [ 195.146767][ T6614] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 195.146780][ T6614] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 195.146799][ T6614] ? shmem_alloc_inode+0x28/0x40 [ 195.146811][ T6614] ? shmem_alloc_inode+0x28/0x40 [ 195.146825][ T6614] ? stack_depot_save_flags+0x33/0x840 [ 195.146846][ T6614] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 195.146859][ T6614] shmem_alloc_inode+0x28/0x40 [ 195.146873][ T6614] alloc_inode+0x6a/0x1b0 [ 195.146892][ T6614] new_inode+0x1f/0x170 [ 195.146909][ T6614] ? shmem_get_inode+0x29a/0x10b0 [ 195.146925][ T6614] shmem_get_inode+0x3a4/0x10b0 [ 195.146946][ T6614] ? __pfx_shmem_get_inode+0x10/0x10 [ 195.146969][ T6614] __shmem_file_setup+0x20b/0x370 [ 195.146991][ T6614] ? __pfx___shmem_file_setup+0x10/0x10 [ 195.147019][ T6614] memfd_alloc_file+0x99/0x4c0 [ 195.147039][ T6614] ? __pfx_memfd_alloc_file+0x10/0x10 [ 195.147064][ T6614] __se_sys_memfd_create+0x31f/0x410 [ 195.147085][ T6614] do_syscall_64+0x16a/0x530 [ 195.147102][ T6614] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.147116][ T6614] ? clear_bhb_loop+0x70/0xc0 [ 195.147134][ T6614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.147160][ T6614] RIP: 0033:0x7f8a9f7a8f19 [ 195.147175][ T6614] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.147188][ T6614] RSP: 002b:00007f8aa05b9d58 EFLAGS: 00000206 ORIG_RAX: 000000000000013f [ 195.147205][ T6614] RAX: ffffffffffffffda RBX: 0000000000000610 RCX: 00007f8a9f7a8f19 [ 195.147215][ T6614] RDX: 00007f8aa05b9ddc RSI: 0000000000000000 RDI: 00007f8a9f838160 [ 195.147225][ T6614] RBP: 0000200000000000 R08: 00000000ffffffff R09: 0000000000000000 [ 195.147235][ T6614] R10: 0000000000000001 R11: 0000000000000206 R12: 0000000000000001 [ 195.147244][ T6614] R13: 00007f8aa05b9ddc R14: 00007f8aa05b9de0 R15: 00007ffc4c8cfaa8 [ 195.147270][ T6614] [ 196.423528][ T5650] Bluetooth: hci1: command 0x0406 tx timeout [ 196.423640][ T5650] Bluetooth: hci4: command 0x0406 tx timeout [ 196.423665][ T5650] Bluetooth: hci2: command 0x0406 tx timeout [ 196.423688][ T5650] Bluetooth: hci0: command 0x0406 tx timeout [ 196.423709][ T5650] Bluetooth: hci3: command 0x0406 tx timeout [ 197.205426][ T10] usb 3-1: USB disconnect, device number 2 [ 197.802986][ T10] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 197.823861][ T10] oti6858 3-1:1.0: device disconnected [ 199.881226][ T52] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 200.522930][ T52] usb 5-1: New USB device found: idVendor=0eef, idProduct=72c4, bcdDevice=0.00 [ 200.524185][ T52] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.524217][ T52] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 200.524242][ T52] usb 5-1: config 0 interface 0 has no altsetting 0 [ 200.524274][ T52] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.526743][ T52] usb 5-1: config 0 descriptor?? [ 201.780658][ T6627] loop4: detected capacity change from 0 to 1024 [ 201.787407][ T52] hid-multitouch 0003:0EEF:72C4.0001: collection stack underflow [ 201.787440][ T52] hid-multitouch 0003:0EEF:72C4.0001: item 0 1 0 12 parsing failed [ 201.792764][ T52] hid-multitouch 0003:0EEF:72C4.0001: probe with driver hid-multitouch failed with error -22 [ 201.823045][ T6627] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 201.847384][ T6627] EXT4-fs error (device loop4): ext4_map_blocks:867: inode #3: block 2: comm syz.4.175: lblock 2 mapped to illegal pblock 2 (length 1) [ 201.847532][ T6627] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 201.848369][ T6627] __quota_error: 47 callbacks suppressed [ 201.848385][ T6627] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 201.848438][ T6627] EXT4-fs error (device loop4): __ext4_get_inode_loc:5709: comm syz.4.175: Invalid inode table block 1 in block_group 0 [ 201.848562][ T6627] loop4: lost filesystem error report for type 5 error -117 [ 201.849616][ C1] EXT4-fs (loop4): error count since last fsck: 2 [ 201.849635][ C1] EXT4-fs (loop4): initial error at time 1794329055: ext4_map_blocks:867: inode 3: block 2 [ 201.849666][ C1] EXT4-fs (loop4): last error at time 1794329055: __ext4_get_inode_loc:5709 [ 201.849782][ T6627] EXT4-fs error (device loop4) in ext4_reserve_inode_write:7435: Corrupt filesystem [ 201.849800][ T6627] loop4: lost filesystem error report for type 5 error -117 [ 201.893434][ T6627] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #3: comm syz.4.175: mark_inode_dirty error [ 201.893470][ T6627] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 201.893757][ T6627] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 201.893775][ T6627] EXT4-fs error (device loop4): ext4_acquire_dquot:7120: comm syz.4.175: Failed to acquire dquot type 0 [ 201.893795][ T6627] loop4: lost filesystem error report for type 5 error -117 [ 201.894479][ T6627] EXT4-fs error (device loop4) in ext4_reserve_inode_write:7435: Corrupt filesystem [ 201.894501][ T6627] loop4: lost filesystem error report for type 5 error -117 [ 201.895621][ T6627] EXT4-fs error (device loop4): ext4_evict_inode:336: inode #11: comm syz.4.175: mark_inode_dirty error [ 201.895647][ T6627] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 201.896780][ T6627] EXT4-fs warning (device loop4): ext4_evict_inode:339: couldn't mark inode dirty (err -117) [ 201.897140][ T6627] EXT4-fs (loop4): 1 orphan inode deleted [ 201.898750][ T6627] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.084125][ T186] EXT4-fs error (device loop4): ext4_map_blocks:867: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 202.117802][ T186] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 202.117869][ T186] EXT4-fs error (device loop4): ext4_release_dquot:7156: comm kworker/u8:6: Failed to release dquot type 0 [ 202.230242][ T996] usb 5-1: USB disconnect, device number 4 [ 202.514668][ T6652] netlink: 28 bytes leftover after parsing attributes in process `syz.1.173'. [ 202.756889][ T5636] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.808613][ T5636] EXT4-fs error (device loop4): __ext4_get_inode_loc:5709: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 202.808647][ T5636] loop4: lost filesystem error report for type 5 error -117 [ 202.838202][ T5636] EXT4-fs error (device loop4) in ext4_reserve_inode_write:7435: Corrupt filesystem [ 202.838229][ T5636] loop4: lost filesystem error report for type 5 error -117 [ 202.864575][ T5636] EXT4-fs error (device loop4): ext4_quota_off:7404: inode #3: comm syz-executor: mark_inode_dirty error [ 202.864609][ T5636] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 202.865130][ T5636] EXT4-fs error (device loop4): __ext4_get_inode_loc:5709: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 202.865160][ T5636] loop4: lost filesystem error report for type 5 error -117 [ 203.522260][ T6663] CacheFiles: Failed to register: -95 [ 205.659679][ T6694] FAULT_INJECTION: forcing a failure. [ 205.659679][ T6694] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 205.659708][ T6694] CPU: 0 UID: 0 PID: 6694 Comm: syz.4.182 Not tainted syzkaller #0 PREEMPT(full) [ 205.659729][ T6694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 205.659740][ T6694] Call Trace: [ 205.659748][ T6694] [ 205.659756][ T6694] dump_stack_lvl+0xe8/0x150 [ 205.659793][ T6694] should_fail_ex+0x3eb/0x540 [ 205.659822][ T6694] _copy_to_user+0x31/0xb0 [ 205.659849][ T6694] simple_read_from_buffer+0xe1/0x170 [ 205.659880][ T6694] proc_fail_nth_read+0x1bb/0x230 [ 205.659904][ T6694] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 205.659925][ T6694] ? rw_verify_area+0x24a/0x4c0 [ 205.659954][ T6694] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 205.659975][ T6694] vfs_read+0x213/0xa80 [ 205.660007][ T6694] ? __pfx___mutex_lock+0x10/0x10 [ 205.660030][ T6694] ? __pfx_vfs_read+0x10/0x10 [ 205.660054][ T6694] ? __fget_files+0x2a/0x420 [ 205.660076][ T6694] ? __fget_files+0x3a2/0x420 [ 205.660099][ T6694] ? __fget_files+0x2a/0x420 [ 205.660137][ T6694] ? fdget+0x1ac/0x250 [ 205.660167][ T6694] ksys_read+0x150/0x270 [ 205.660194][ T6694] ? __pfx_ksys_read+0x10/0x10 [ 205.660232][ T6694] do_syscall_64+0x16a/0x530 [ 205.660254][ T6694] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.660273][ T6694] ? clear_bhb_loop+0x70/0xc0 [ 205.660294][ T6694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.660310][ T6694] RIP: 0033:0x7f3e6516974e [ 205.660326][ T6694] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 205.660339][ T6694] RSP: 002b:00007f3e6610ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 205.660356][ T6694] RAX: ffffffffffffffda RBX: 00007f3e661106c0 RCX: 00007f3e6516974e [ 205.660370][ T6694] RDX: 000000000000000f RSI: 00007f3e661100a0 RDI: 0000000000000004 [ 205.660382][ T6694] RBP: 00007f3e66110090 R08: 0000000000000000 R09: 0000000000000000 [ 205.660394][ T6694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.660405][ T6694] R13: 00007f3e65426128 R14: 00007f3e65426090 R15: 00007ffd011c0ca8 [ 205.660438][ T6694] [ 206.917168][ T6701] FAULT_INJECTION: forcing a failure. [ 206.917168][ T6701] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 206.917201][ T6701] CPU: 1 UID: 0 PID: 6701 Comm: syz.0.190 Not tainted syzkaller #0 PREEMPT(full) [ 206.917226][ T6701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 206.917237][ T6701] Call Trace: [ 206.917244][ T6701] [ 206.917252][ T6701] dump_stack_lvl+0xe8/0x150 [ 206.917288][ T6701] should_fail_ex+0x3eb/0x540 [ 206.917319][ T6701] _copy_from_user+0x2d/0xb0 [ 206.917347][ T6701] ___sys_sendmsg+0x1c6/0x360 [ 206.917365][ T6701] ? __lock_acquire+0x747/0x2de0 [ 206.917396][ T6701] ? __pfx____sys_sendmsg+0x10/0x10 [ 206.917421][ T6701] ? kstrtouint+0x6e/0xe0 [ 206.917466][ T6701] ? __fget_files+0x3a2/0x420 [ 206.917498][ T6701] ? __fget_files+0x2a/0x420 [ 206.917531][ T6701] __sys_sendmmsg+0x273/0x4e0 [ 206.917553][ T6701] ? __pfx___sys_sendmmsg+0x10/0x10 [ 206.917579][ T6701] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 206.917614][ T6701] ? ksys_write+0x242/0x270 [ 206.917647][ T6701] ? __pfx_ksys_write+0x10/0x10 [ 206.917682][ T6701] __x64_sys_sendmmsg+0xa0/0xc0 [ 206.917702][ T6701] do_syscall_64+0x16a/0x530 [ 206.917721][ T6701] ? trace_irq_disable+0x3b/0x140 [ 206.917748][ T6701] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.917767][ T6701] ? clear_bhb_loop+0x70/0xc0 [ 206.917789][ T6701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.917807][ T6701] RIP: 0033:0x7f252cba8f19 [ 206.917823][ T6701] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 206.917838][ T6701] RSP: 002b:00007f252db25028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 206.917857][ T6701] RAX: ffffffffffffffda RBX: 00007f252ce25fa0 RCX: 00007f252cba8f19 [ 206.917871][ T6701] RDX: 0000000000000002 RSI: 0000200000001280 RDI: 0000000000000004 [ 206.917882][ T6701] RBP: 00007f252db25090 R08: 0000000000000000 R09: 0000000000000000 [ 206.917894][ T6701] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000001 [ 206.917905][ T6701] R13: 00007f252ce26038 R14: 00007f252ce25fa0 R15: 00007ffeff091998 [ 206.917932][ T6701] [ 207.060414][ T6699] loop1: detected capacity change from 0 to 1764 [ 207.072376][ T6699] iso9660: Bad value for 'uid' [ 207.072395][ T6699] iso9660: Bad value for 'uid' [ 207.792723][ T6711] loop1: detected capacity change from 0 to 512 [ 207.798863][ T6711] EXT4-fs: Ignoring removed oldalloc option [ 207.880704][ T6711] EXT4-fs: Mount option(s) incompatible with ext2 [ 208.582638][ T6716] FAULT_INJECTION: forcing a failure. [ 208.582638][ T6716] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 208.582668][ T6716] CPU: 1 UID: 0 PID: 6716 Comm: syz.0.197 Not tainted syzkaller #0 PREEMPT(full) [ 208.582690][ T6716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 208.582701][ T6716] Call Trace: [ 208.582708][ T6716] [ 208.582716][ T6716] dump_stack_lvl+0xe8/0x150 [ 208.582752][ T6716] should_fail_ex+0x3eb/0x540 [ 208.582783][ T6716] _copy_from_iter+0x1d3/0x1680 [ 208.582807][ T6716] ? __alloc_skb+0x27a/0x7a0 [ 208.582836][ T6716] ? __alloc_skb+0x27a/0x7a0 [ 208.582862][ T6716] ? __alloc_skb+0x27a/0x7a0 [ 208.582888][ T6716] ? __pfx__copy_from_iter+0x10/0x10 [ 208.582910][ T6716] ? kmem_cache_alloc_node_noprof+0x1f4/0x600 [ 208.582934][ T6716] ? __alloc_skb+0x27a/0x7a0 [ 208.582958][ T6716] ? __alloc_skb+0x27a/0x7a0 [ 208.582990][ T6716] ? netlink_sendmsg+0x64f/0xb20 [ 208.583017][ T6716] ? skb_put+0x112/0x210 [ 208.583047][ T6716] netlink_sendmsg+0x6bb/0xb20 [ 208.583078][ T6716] ? __pfx_netlink_sendmsg+0x10/0x10 [ 208.583108][ T6716] ? aa_sock_msg_perm+0x144/0x210 [ 208.583135][ T6716] ? apparmor_socket_sendmsg+0x98/0x360 [ 208.583167][ T6716] ? __pfx_netlink_sendmsg+0x10/0x10 [ 208.583191][ T6716] sock_sendmsg_nosec+0x14e/0x190 [ 208.583218][ T6716] ____sys_sendmsg+0x54e/0x850 [ 208.583243][ T6716] ? __pfx_____sys_sendmsg+0x10/0x10 [ 208.583271][ T6716] ? import_iovec+0x73/0xa0 [ 208.583300][ T6716] ___sys_sendmsg+0x2a6/0x360 [ 208.583317][ T6716] ? __lock_acquire+0x747/0x2de0 [ 208.583354][ T6716] ? __pfx____sys_sendmsg+0x10/0x10 [ 208.583410][ T6716] ? __fget_files+0x3a2/0x420 [ 208.583436][ T6716] ? __fget_files+0x2a/0x420 [ 208.583471][ T6716] __x64_sys_sendmsg+0x1b1/0x290 [ 208.583494][ T6716] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 208.583535][ T6716] do_syscall_64+0x16a/0x530 [ 208.583559][ T6716] ? trace_irq_disable+0x3b/0x140 [ 208.583587][ T6716] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.583607][ T6716] ? clear_bhb_loop+0x70/0xc0 [ 208.583631][ T6716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.583651][ T6716] RIP: 0033:0x7f252cba8f19 [ 208.583668][ T6716] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.583685][ T6716] RSP: 002b:00007f252db25028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 208.583705][ T6716] RAX: ffffffffffffffda RBX: 00007f252ce25fa0 RCX: 00007f252cba8f19 [ 208.583720][ T6716] RDX: 00000000000040c0 RSI: 0000200000000480 RDI: 0000000000000003 [ 208.583732][ T6716] RBP: 00007f252db25090 R08: 0000000000000000 R09: 0000000000000000 [ 208.583744][ T6716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.583756][ T6716] R13: 00007f252ce26038 R14: 00007f252ce25fa0 R15: 00007ffeff091998 [ 208.583787][ T6716] [ 210.330560][ T6729] loop3: detected capacity change from 0 to 2048 [ 210.931099][ T6721] loop1: detected capacity change from 0 to 16 [ 211.749738][ T6721] erofs (device loop1): mounted with root inode @ nid 36. [ 211.854010][ T6729] Dev loop3: RDB in block 1 has bad checksum [ 211.854160][ T6729] Dev loop3: unable to read RDB block 8 [ 211.854249][ T6729] loop3: unable to read partition table [ 211.854362][ T6729] loop_reread_partitions: partition scan of loop3 () failed (rc=-5) [ 212.021123][ T6721] erofs (device loop1): bogus i_mode (4355) @ nid 46 [ 212.058952][ T6721] erofs (device loop1): bogus i_mode (4355) @ nid 46 [ 212.609456][ T6740] loop0: detected capacity change from 0 to 4096 [ 212.616809][ T6740] ext4: Unknown parameter 'audit' [ 213.253590][ T6744] loop2: detected capacity change from 0 to 4096 [ 213.891611][ T6744] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.570790][ T5637] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.727324][ T6753] loop2: detected capacity change from 0 to 512 [ 214.774055][ T6753] EXT4-fs error (device loop2): ext4_validate_block_bitmap:436: comm syz.2.208: bg 0: block 5: invalid block bitmap [ 214.774077][ T6753] loop2: lost filesystem error report for type 5 error -117 [ 214.777465][ T6753] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6678: Corrupt filesystem [ 214.777491][ T6753] loop2: lost filesystem error report for type 5 error -117 [ 214.779329][ C1] EXT4-fs (loop2): error count since last fsck: 2 [ 214.779351][ C1] EXT4-fs (loop2): initial error at time 1794329068: ext4_validate_block_bitmap:436 [ 214.779372][ C1] EXT4-fs (loop2): last error at time 1794329068: ext4_mb_clear_bb:6678 [ 214.804571][ T6753] EXT4-fs error (device loop2): ext4_free_branches:1040: inode #11: comm syz.2.208: invalid indirect mapped block 3 (level 2) [ 214.804606][ T6753] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 214.841752][ T6753] EXT4-fs (loop2): 1 orphan inode deleted [ 214.841775][ T6753] EXT4-fs (loop2): 1 truncate cleaned up [ 214.884430][ T6753] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.031851][ T5637] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.058560][ T6742] loop1: detected capacity change from 0 to 40427 [ 215.126980][ T6742] F2FS-fs (loop1): invalid crc value [ 215.162089][ T6768] FAULT_INJECTION: forcing a failure. [ 215.162089][ T6768] name failslab, interval 1, probability 0, space 0, times 0 [ 215.162117][ T6768] CPU: 1 UID: 0 PID: 6768 Comm: syz.2.210 Not tainted syzkaller #0 PREEMPT(full) [ 215.162137][ T6768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 215.162147][ T6768] Call Trace: [ 215.162154][ T6768] [ 215.162162][ T6768] dump_stack_lvl+0xe8/0x150 [ 215.162200][ T6768] should_fail_ex+0x3eb/0x540 [ 215.162230][ T6768] should_failslab+0xa8/0x100 [ 215.162252][ T6768] __kmalloc_node_noprof+0xfb/0x720 [ 215.162275][ T6768] ? __get_vm_area_node+0x200/0x2f0 [ 215.162304][ T6768] ? __get_vm_area_node+0x283/0x2f0 [ 215.162323][ T6768] ? __vmalloc_node_range_noprof+0x5d1/0x16f0 [ 215.162344][ T6768] ? __vmalloc_node_range_noprof+0x5d1/0x16f0 [ 215.162374][ T6768] __vmalloc_node_range_noprof+0x5d1/0x16f0 [ 215.162402][ T6768] ? __lock_acquire+0x747/0x2de0 [ 215.162439][ T6768] ? hook_capable+0x1c3/0x5e0 [ 215.162468][ T6768] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 215.162497][ T6768] ? bpf_prog_alloc_no_stats+0x47/0x550 [ 215.162515][ T6768] __vmalloc_noprof+0xd2/0x120 [ 215.162538][ T6768] ? bpf_prog_alloc_no_stats+0x47/0x550 [ 215.162558][ T6768] bpf_prog_alloc_no_stats+0x47/0x550 [ 215.162576][ T6768] ? bpf_prog_alloc+0x2a/0x1a0 [ 215.162597][ T6768] bpf_prog_alloc+0x3c/0x1a0 [ 215.162619][ T6768] bpf_prog_load+0x7f8/0x1c60 [ 215.162648][ T6768] ? __pfx_bpf_prog_load+0x10/0x10 [ 215.162682][ T6768] ? __might_fault+0xaf/0x130 [ 215.162707][ T6768] __sys_bpf+0xd86/0xe00 [ 215.162732][ T6768] ? __pfx___sys_bpf+0x10/0x10 [ 215.162758][ T6768] ? __fget_files+0x2a/0x420 [ 215.162800][ T6768] ? ksys_write+0x242/0x270 [ 215.162831][ T6768] ? __pfx_ksys_write+0x10/0x10 [ 215.162863][ T6768] __x64_sys_bpf+0xba/0xd0 [ 215.162894][ T6768] do_syscall_64+0x16a/0x530 [ 215.162914][ T6768] ? trace_irq_disable+0x3b/0x140 [ 215.162939][ T6768] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.162958][ T6768] ? clear_bhb_loop+0x70/0xc0 [ 215.162982][ T6768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.163000][ T6768] RIP: 0033:0x7fb3035a8f19 [ 215.163018][ T6768] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 215.163032][ T6768] RSP: 002b:00007fb3044b1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 215.163051][ T6768] RAX: ffffffffffffffda RBX: 00007fb303825fa0 RCX: 00007fb3035a8f19 [ 215.163063][ T6768] RDX: 0000000000000094 RSI: 0000200000000400 RDI: 0000000000000005 [ 215.163075][ T6768] RBP: 00007fb3044b1090 R08: 0000000000000000 R09: 0000000000000000 [ 215.163087][ T6768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.163096][ T6768] R13: 00007fb303826038 R14: 00007fb303825fa0 R15: 00007ffedbf43b08 [ 215.163126][ T6768] [ 215.166094][ T6768] syz.2.210: vmalloc error: size 4096, failed to allocated page array size 8, mode:0x500dc2(GFP_HIGHUSER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 215.167047][ T6768] CPU: 1 UID: 0 PID: 6768 Comm: syz.2.210 Not tainted syzkaller #0 PREEMPT(full) [ 215.167068][ T6768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 215.167079][ T6768] Call Trace: [ 215.167086][ T6768] [ 215.167094][ T6768] dump_stack_lvl+0xe8/0x150 [ 215.167129][ T6768] warn_alloc+0x24d/0x270 [ 215.167161][ T6768] ? __pfx_warn_alloc+0x10/0x10 [ 215.167192][ T6768] ? __kmalloc_node_noprof+0x4d2/0x720 [ 215.167216][ T6768] ? __get_vm_area_node+0x200/0x2f0 [ 215.167237][ T6768] ? __get_vm_area_node+0x283/0x2f0 [ 215.167256][ T6768] ? __vmalloc_node_range_noprof+0x5d1/0x16f0 [ 215.167278][ T6768] ? __vmalloc_node_range_noprof+0x5d1/0x16f0 [ 215.167318][ T6768] __vmalloc_node_range_noprof+0xa10/0x16f0 [ 215.167347][ T6768] ? __lock_acquire+0x747/0x2de0 [ 215.167395][ T6768] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 215.167428][ T6768] ? bpf_prog_alloc_no_stats+0x47/0x550 [ 215.167447][ T6768] __vmalloc_noprof+0xd2/0x120 [ 215.167470][ T6768] ? bpf_prog_alloc_no_stats+0x47/0x550 [ 215.167492][ T6768] bpf_prog_alloc_no_stats+0x47/0x550 [ 215.167509][ T6768] ? bpf_prog_alloc+0x2a/0x1a0 [ 215.167527][ T6768] bpf_prog_alloc+0x3c/0x1a0 [ 215.167547][ T6768] bpf_prog_load+0x7f8/0x1c60 [ 215.167579][ T6768] ? __pfx_bpf_prog_load+0x10/0x10 [ 215.167614][ T6768] ? __might_fault+0xaf/0x130 [ 215.167642][ T6768] __sys_bpf+0xd86/0xe00 [ 215.167669][ T6768] ? __pfx___sys_bpf+0x10/0x10 [ 215.167700][ T6768] ? __fget_files+0x2a/0x420 [ 215.167745][ T6768] ? ksys_write+0x242/0x270 [ 215.167775][ T6768] ? __pfx_ksys_write+0x10/0x10 [ 215.167807][ T6768] __x64_sys_bpf+0xba/0xd0 [ 215.167838][ T6768] do_syscall_64+0x16a/0x530 [ 215.167860][ T6768] ? trace_irq_disable+0x3b/0x140 [ 215.167886][ T6768] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.167905][ T6768] ? clear_bhb_loop+0x70/0xc0 [ 215.167928][ T6768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.167947][ T6768] RIP: 0033:0x7fb3035a8f19 [ 215.167965][ T6768] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 215.167981][ T6768] RSP: 002b:00007fb3044b1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 215.167999][ T6768] RAX: ffffffffffffffda RBX: 00007fb303825fa0 RCX: 00007fb3035a8f19 [ 215.168012][ T6768] RDX: 0000000000000094 RSI: 0000200000000400 RDI: 0000000000000005 [ 215.168023][ T6768] RBP: 00007fb3044b1090 R08: 0000000000000000 R09: 0000000000000000 [ 215.168034][ T6768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.168044][ T6768] R13: 00007fb303826038 R14: 00007fb303825fa0 R15: 00007ffedbf43b08 [ 215.168068][ T6768] [ 215.301641][ T6768] Mem-Info: [ 215.301665][ T6768] active_anon:40940 inactive_anon:0 isolated_anon:0 [ 215.301665][ T6768] active_file:0 inactive_file:62052 isolated_file:0 [ 215.301665][ T6768] unevictable:0 dirty:316 writeback:0 [ 215.301665][ T6768] slab_reclaimable:11499 slab_unreclaimable:95479 [ 215.301665][ T6768] mapped:38467 shmem:35952 pagetables:1220 [ 215.301665][ T6768] sec_pagetables:0 bounce:0 [ 215.301665][ T6768] kernel_misc_reclaimable:0 [ 215.301665][ T6768] free:1246610 free_pcp:34444 free_cma:0 [ 215.301720][ T6768] Node 0 active_anon:163760kB inactive_anon:0kB active_file:0kB inactive_file:248012kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:153868kB dirty:1264kB writeback:0kB shmem:143808kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12368kB pagetables:4724kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 215.301772][ T6768] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 215.301821][ T6768] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 215.301877][ T6768] lowmem_reserve[]: 0 2463 2464 2464 2464 [ 215.301909][ T6768] Node 0 DMA32 free:1048364kB boost:0kB min:33920kB low:42400kB high:50880kB reserved_highatomic:0kB free_highatomic:0kB active_anon:163680kB inactive_anon:0kB active_file:0kB inactive_file:248020kB unevictable:0kB writepending:1264kB zspages:0kB present:3129332kB managed:2522536kB mlocked:0kB bounce:0kB free_pcp:117420kB local_pcp:36944kB free_cma:0kB [ 215.301965][ T6768] lowmem_reserve[]: 0 0 1 1 1 [ 215.301995][ T6768] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 215.302048][ T6768] lowmem_reserve[]: 0 0 0 0 0 [ 215.302078][ T6768] Node 1 Normal free:3922716kB boost:0kB min:55960kB low:69948kB high:83936kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:20352kB local_pcp:7828kB free_cma:0kB [ 215.302132][ T6768] lowmem_reserve[]: 0 0 0 0 0 [ 215.302163][ T6768] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 215.302274][ T6768] Node 0 DMA32: 2359*4kB (UM) 1076*8kB (UME) 387*16kB (UME) 145*32kB (ME) 98*64kB (UM) 149*128kB (M) 55*256kB (UME) 30*512kB (UM) 20*1024kB (UM) 15*2048kB (UM) 223*4096kB (UM) = 1048268kB [ 215.305327][ T6768] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 215.305420][ T6768] Node 1 Normal: 9*4kB (UM) 10*8kB (UM) 11*16kB (UM) 9*32kB (UM) 7*64kB (UM) 5*128kB (UM) 3*256kB (UM) 1*512kB (U) 2*1024kB (UM) 3*2048kB (UM) 955*4096kB (UM) = 3922820kB [ 215.321510][ T6768] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 215.321527][ T6768] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 215.321542][ T6768] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 215.321557][ T6768] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 215.321572][ T6768] 97984 total pagecache pages [ 215.321596][ T6768] 0 pages in swap cache [ 215.321603][ T6768] Free swap = 124996kB [ 215.321609][ T6768] Total swap = 124996kB [ 215.321617][ T6768] 2097051 pages RAM [ 215.321624][ T6768] 0 pages HighMem/MovableOnly [ 215.321630][ T6768] 434455 pages reserved [ 215.321637][ T6768] 0 pages cma reserved [ 216.373234][ T6742] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 216.385786][ T6742] F2FS-fs (loop1): f2fs_disable_checkpoint starts, unusable: 0 [ 216.385814][ T6742] F2FS-fs (loop1): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 216.385838][ T6742] F2FS-fs (loop1): Start checkpoint disabled! [ 216.430433][ T6742] F2FS-fs (loop1): f2fs_disable_checkpoint finishes, err:0 [ 216.621495][ T6777] loop3: detected capacity change from 0 to 4096 [ 216.629118][ T6777] ext4: Unknown parameter 'audit' [ 216.715404][ T6781] loop4: detected capacity change from 0 to 4096 [ 216.743111][ T6781] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.345130][ T6813] faux_driver vgem: [drm] Unknown color mode 11176; guessing buffer size. [ 220.346710][ T6813] FAULT_INJECTION: forcing a failure. [ 220.346710][ T6813] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 220.346737][ T6813] CPU: 1 UID: 0 PID: 6813 Comm: syz.2.220 Not tainted syzkaller #0 PREEMPT(full) [ 220.346758][ T6813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 220.346769][ T6813] Call Trace: [ 220.346776][ T6813] [ 220.346784][ T6813] dump_stack_lvl+0xe8/0x150 [ 220.346819][ T6813] should_fail_ex+0x3eb/0x540 [ 220.346849][ T6813] _copy_to_user+0x31/0xb0 [ 220.346879][ T6813] simple_read_from_buffer+0xe1/0x170 [ 220.346909][ T6813] proc_fail_nth_read+0x1bb/0x230 [ 220.346934][ T6813] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 220.346959][ T6813] ? rw_verify_area+0x24a/0x4c0 [ 220.346989][ T6813] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 220.347010][ T6813] vfs_read+0x213/0xa80 [ 220.347043][ T6813] ? __pfx___mutex_lock+0x10/0x10 [ 220.347067][ T6813] ? __pfx_vfs_read+0x10/0x10 [ 220.347094][ T6813] ? __fget_files+0x2a/0x420 [ 220.347119][ T6813] ? __fget_files+0x3a2/0x420 [ 220.347143][ T6813] ? __fget_files+0x2a/0x420 [ 220.347173][ T6813] ? fdget+0x1ac/0x250 [ 220.347205][ T6813] ksys_read+0x150/0x270 [ 220.347234][ T6813] ? __pfx_ksys_read+0x10/0x10 [ 220.347261][ T6813] ? __pfx_drm_ioctl+0x10/0x10 [ 220.347294][ T6813] do_syscall_64+0x16a/0x530 [ 220.347314][ T6813] ? trace_irq_disable+0x3b/0x140 [ 220.347338][ T6813] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.347355][ T6813] ? clear_bhb_loop+0x70/0xc0 [ 220.347377][ T6813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.347396][ T6813] RIP: 0033:0x7fb30356974e [ 220.347413][ T6813] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 220.347427][ T6813] RSP: 002b:00007fb3044b0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 220.347447][ T6813] RAX: ffffffffffffffda RBX: 00007fb3044b16c0 RCX: 00007fb30356974e [ 220.347460][ T6813] RDX: 000000000000000f RSI: 00007fb3044b10a0 RDI: 0000000000000004 [ 220.347472][ T6813] RBP: 00007fb3044b1090 R08: 0000000000000000 R09: 0000000000000000 [ 220.347484][ T6813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 220.347495][ T6813] R13: 00007fb303826038 R14: 00007fb303825fa0 R15: 00007ffedbf43b08 [ 220.347528][ T6813] [ 220.604705][ T5636] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.011394][ T6817] loop2: detected capacity change from 0 to 2048 [ 221.868172][ T6825] ceph: No source [ 222.259864][ T6836] loop0: detected capacity change from 0 to 256 [ 222.292415][ T6834] loop2: detected capacity change from 0 to 4096 [ 222.312421][ T6834] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 222.407435][ T6834] ntfs3(loop2): ino=19, mi_enum_attr [ 222.407747][ T6834] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 222.438200][ T6834] ntfs3(loop2): ino=1a, mi_enum_attr [ 222.438344][ T6834] ntfs3(loop2): ino=1a, mi_enum_attr [ 222.438363][ T6834] ntfs3(loop2): Failed to initialize $Extend/$Reparse. [ 222.502514][ T6828] loop4: detected capacity change from 0 to 40427 [ 222.519443][ T6828] F2FS-fs (loop4): invalid crc value [ 222.719154][ T32] audit: type=1326 audit(1794329076.359:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6830 comm="syz.2.224" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb3035a8f19 code=0x0 [ 222.775691][ T6836] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 222.775726][ T6836] FAT-fs (loop0): Filesystem has been set read-only [ 222.801900][ T6836] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 222.801971][ T6836] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 222.803497][ T32] audit: type=1800 audit(1794329076.449:237): pid=6836 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.226" name="file1" dev="loop0" ino=3 res=0 errno=-5 [ 222.844629][ T6828] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 222.853840][ T6828] F2FS-fs (loop4): f2fs_disable_checkpoint starts, unusable: 0 [ 222.853871][ T6828] F2FS-fs (loop4): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 222.853895][ T6828] F2FS-fs (loop4): Start checkpoint disabled! [ 222.945217][ T6828] F2FS-fs (loop4): f2fs_disable_checkpoint finishes, err:0 [ 222.947881][ T6828] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 223.068113][ T6849] netlink: 44 bytes leftover after parsing attributes in process `syz.1.227'. [ 224.136821][ T14] kworker/u8:1: attempt to access beyond end of device [ 224.136821][ T14] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 224.138710][ T14] CPU: 0 UID: 0 PID: 14 Comm: kworker/u8:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 224.138741][ T14] Tainted: [L]=SOFTLOCKUP [ 224.138748][ T14] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 224.138760][ T14] Workqueue: writeback wb_workfn (flush-7:4) [ 224.138790][ T14] Call Trace: [ 224.138798][ T14] [ 224.138807][ T14] dump_stack_lvl+0xe8/0x150 [ 224.138840][ T14] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 224.138876][ T14] f2fs_write_end_bio+0x118e/0x15d0 [ 224.138924][ T14] __submit_merged_bio+0x258/0x6a0 [ 224.138945][ T14] ? rcu_is_watching+0x16/0xb0 [ 224.138981][ T14] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 224.139007][ T14] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 224.139057][ T14] f2fs_write_data_pages+0x2a13/0x36e0 [ 224.139121][ T14] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 224.139158][ T14] ? __lock_acquire+0x747/0x2de0 [ 224.139206][ T14] ? __lock_acquire+0x747/0x2de0 [ 224.139232][ T14] ? __lock_acquire+0x747/0x2de0 [ 224.139274][ T14] ? kvm_sched_clock_read+0x11/0x20 [ 224.139293][ T14] ? sched_clock+0x41/0x60 [ 224.139334][ T14] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 224.139360][ T14] do_writepages+0x338/0x560 [ 224.139393][ T14] ? reacquire_held_locks+0x117/0x1a0 [ 224.139420][ T14] ? writeback_sb_inodes+0x450/0x1af0 [ 224.139451][ T14] __writeback_single_inode+0x136/0x1220 [ 224.139478][ T14] ? do_raw_spin_unlock+0xf5/0x200 [ 224.139504][ T14] writeback_sb_inodes+0x9de/0x1af0 [ 224.139527][ T14] ? __lock_acquire+0x747/0x2de0 [ 224.139574][ T14] ? do_raw_spin_unlock+0xf5/0x200 [ 224.139604][ T14] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 224.139674][ T14] ? rcu_is_watching+0x16/0xb0 [ 224.139701][ T14] ? queue_io+0x2d3/0x470 [ 224.139726][ T14] wb_writeback+0x41c/0xad0 [ 224.139751][ T14] ? queue_io+0x221/0x470 [ 224.139780][ T14] ? __pfx_wb_writeback+0x10/0x10 [ 224.139800][ T14] ? do_raw_spin_lock+0x12b/0x2f0 [ 224.139841][ T14] wb_workfn+0x431/0x10f0 [ 224.139891][ T14] ? __pfx_wb_workfn+0x10/0x10 [ 224.139929][ T14] ? do_raw_spin_lock+0x12b/0x2f0 [ 224.139961][ T14] ? lock_acquire+0x115/0x350 [ 224.139995][ T14] ? rcu_is_watching+0x16/0xb0 [ 224.140025][ T14] ? process_scheduled_works+0x97a/0x1630 [ 224.140054][ T14] process_scheduled_works+0xc3d/0x1630 [ 224.140121][ T14] ? __pfx_process_scheduled_works+0x10/0x10 [ 224.140157][ T14] ? assign_work+0x3cf/0x5d0 [ 224.140192][ T14] worker_thread+0xa47/0xfb0 [ 224.140244][ T14] kthread+0x38b/0x480 [ 224.140267][ T14] ? __pfx_worker_thread+0x10/0x10 [ 224.140283][ T14] ? __pfx_kthread+0x10/0x10 [ 224.140308][ T14] ret_from_fork+0x514/0xb70 [ 224.140333][ T14] ? __pfx_ret_from_fork+0x10/0x10 [ 224.140356][ T14] ? __switch_to+0xc78/0x1410 [ 224.140378][ T14] ? __pfx_kthread+0x10/0x10 [ 224.140403][ T14] ret_from_fork_asm+0x1a/0x30 [ 224.140444][ T14] [ 224.293672][ T14] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 224.417261][ T6854] loop2: detected capacity change from 0 to 512 [ 224.425192][ T6854] EXT4-fs: Ignoring removed oldalloc option [ 224.427378][ T6854] EXT4-fs (loop2): Test dummy encryption mode enabled [ 224.511021][ T6854] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.554420][ T6854] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-lib" [ 224.594809][ T6854] fscrypt: AES-256-XTS using blk-crypto-fallback [ 224.612517][ T6854] vcan0: tx drop: invalid da for name 0x00000000000000f5 [ 224.634320][ T6854] netlink: 4 bytes leftover after parsing attributes in process `syz.2.229'. [ 224.696393][ T5637] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.096918][ T6873] loop1: detected capacity change from 0 to 8 [ 226.442702][ T6873] SQUASHFS error: Unable to read inode 0x2000 [ 228.504886][ T6890] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 228.589845][ T6892] loop2: detected capacity change from 0 to 512 [ 228.590461][ T6892] ext4: Unknown parameter 'seclabel' [ 228.949362][ T52] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 229.104272][ T52] usb 3-1: New USB device found: idVendor=13d8, idProduct=0010, bcdDevice=ac.d9 [ 229.107250][ T52] usb 3-1: config 1 has an invalid interface number: 69 but max is 0 [ 229.107279][ T52] usb 3-1: config 1 has no interface number 0 [ 229.107307][ T52] usb 3-1: config 1 interface 69 has no altsetting 0 [ 229.124067][ T52] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.124095][ T52] usb 3-1: Product: syz [ 229.124108][ T52] usb 3-1: Manufacturer: syz [ 229.124122][ T52] usb 3-1: SerialNumber: syz [ 229.362887][ T6892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.363216][ T6892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.408336][ T6892] loop2: detected capacity change from 0 to 1024 [ 229.414956][ T6892] EXT4-fs: Ignoring removed orlov option [ 229.487723][ T6892] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 229.772715][ T6907] loop3: detected capacity change from 0 to 1024 [ 229.835784][ T52] comedi comedi5: This driver needs USB 2.0 to operate. Aborting... [ 229.835807][ T52] usbduxfast 3-1:1.69: driver 'usbduxfast' failed to auto-configure device. [ 229.853234][ T52] usb 3-1: USB disconnect, device number 3 [ 230.180728][ T6895] loop4: detected capacity change from 0 to 40427 [ 230.206689][ T6895] F2FS-fs (loop4): invalid crc value [ 230.379582][ T6895] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 230.407291][ T6895] F2FS-fs (loop4): f2fs_disable_checkpoint starts, unusable: 0 [ 230.407320][ T6895] F2FS-fs (loop4): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 230.407355][ T6895] F2FS-fs (loop4): Start checkpoint disabled! [ 230.451547][ T6895] F2FS-fs (loop4): f2fs_disable_checkpoint finishes, err:0 [ 230.453773][ T6895] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 230.457499][ T5637] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.599159][ T154] kworker/u8:5: attempt to access beyond end of device [ 231.599159][ T154] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 231.599213][ T154] CPU: 1 UID: 0 PID: 154 Comm: kworker/u8:5 Tainted: G L syzkaller #0 PREEMPT(full) [ 231.599228][ T154] Tainted: [L]=SOFTLOCKUP [ 231.599231][ T154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 231.599242][ T154] Workqueue: writeback wb_workfn (flush-7:4) [ 231.599269][ T154] Call Trace: [ 231.599275][ T154] [ 231.599283][ T154] dump_stack_lvl+0xe8/0x150 [ 231.599313][ T154] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 231.599338][ T154] f2fs_write_end_bio+0x118e/0x15d0 [ 231.599380][ T154] __submit_merged_bio+0x258/0x6a0 [ 231.599398][ T154] ? rcu_is_watching+0x16/0xb0 [ 231.599432][ T154] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 231.599455][ T154] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 231.599500][ T154] f2fs_write_data_pages+0x2a13/0x36e0 [ 231.599561][ T154] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 231.599596][ T154] ? virtscsi_queuecommand+0x6dc/0xb80 [ 231.599676][ T154] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 231.599724][ T154] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 231.599750][ T154] do_writepages+0x338/0x560 [ 231.599775][ T154] ? __lock_acquire+0x747/0x2de0 [ 231.599804][ T154] ? reacquire_held_locks+0x117/0x1a0 [ 231.599831][ T154] ? writeback_sb_inodes+0x450/0x1af0 [ 231.599861][ T154] __writeback_single_inode+0x136/0x1220 [ 231.599890][ T154] ? do_raw_spin_unlock+0xf5/0x200 [ 231.599915][ T154] writeback_sb_inodes+0x9de/0x1af0 [ 231.599938][ T154] ? __lock_acquire+0x747/0x2de0 [ 231.599968][ T154] ? do_raw_spin_lock+0x12b/0x2f0 [ 231.600005][ T154] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 231.600074][ T154] ? rcu_is_watching+0x16/0xb0 [ 231.600110][ T154] ? queue_io+0x2d3/0x470 [ 231.600137][ T154] wb_writeback+0x41c/0xad0 [ 231.600164][ T154] ? queue_io+0x221/0x470 [ 231.600194][ T154] ? __pfx_wb_writeback+0x10/0x10 [ 231.600215][ T154] ? do_raw_spin_lock+0x12b/0x2f0 [ 231.600253][ T154] wb_workfn+0x431/0x10f0 [ 231.600293][ T154] ? __pfx_wb_workfn+0x10/0x10 [ 231.600320][ T154] ? trace_hrtimer_start+0x82/0x200 [ 231.600349][ T154] ? do_raw_spin_lock+0x12b/0x2f0 [ 231.600379][ T154] ? lock_acquire+0x115/0x350 [ 231.600412][ T154] ? rcu_is_watching+0x16/0xb0 [ 231.600443][ T154] ? process_scheduled_works+0x97a/0x1630 [ 231.600471][ T154] process_scheduled_works+0xc3d/0x1630 [ 231.600527][ T154] ? __pfx_process_scheduled_works+0x10/0x10 [ 231.600560][ T154] ? assign_work+0x3cf/0x5d0 [ 231.600592][ T154] worker_thread+0xa47/0xfb0 [ 231.600640][ T154] kthread+0x38b/0x480 [ 231.600663][ T154] ? __pfx_worker_thread+0x10/0x10 [ 231.600680][ T154] ? __pfx_kthread+0x10/0x10 [ 231.600703][ T154] ret_from_fork+0x514/0xb70 [ 231.600727][ T154] ? __pfx_ret_from_fork+0x10/0x10 [ 231.600748][ T154] ? __switch_to+0xc78/0x1410 [ 231.600771][ T154] ? __pfx_kthread+0x10/0x10 [ 231.600799][ T154] ret_from_fork_asm+0x1a/0x30 [ 231.600838][ T154] [ 231.604402][ T154] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 232.164036][ T6933] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 232.302671][ T5864] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 232.450065][ T5864] usb 4-1: Using ep0 maxpacket: 32 [ 232.452142][ T5864] usb 4-1: New USB device found: idVendor=13ec, idProduct=0006, bcdDevice=0.00 [ 232.456491][ T5864] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.456534][ T5864] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 232.456560][ T5864] usb 4-1: config 0 interface 0 has no altsetting 0 [ 232.456592][ T5864] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.461508][ T5864] usb 4-1: config 0 descriptor?? [ 233.989877][ T6946] loop1: detected capacity change from 0 to 2048 [ 234.004545][ T6946] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 234.053293][ T6946] netlink: 'syz.1.248': attribute type 2 has an invalid length. [ 234.053316][ T6946] netlink: 224 bytes leftover after parsing attributes in process `syz.1.248'. [ 234.112580][ T6951] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 234.184232][ T6953] FAULT_INJECTION: forcing a failure. [ 234.184232][ T6953] name failslab, interval 1, probability 0, space 0, times 0 [ 234.184265][ T6953] CPU: 0 UID: 0 PID: 6953 Comm: syz.4.257 Tainted: G L syzkaller #0 PREEMPT(full) [ 234.184289][ T6953] Tainted: [L]=SOFTLOCKUP [ 234.184296][ T6953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 234.184306][ T6953] Call Trace: [ 234.184313][ T6953] [ 234.184321][ T6953] dump_stack_lvl+0xe8/0x150 [ 234.184368][ T6953] should_fail_ex+0x3eb/0x540 [ 234.184399][ T6953] should_failslab+0xa8/0x100 [ 234.184422][ T6953] __kmalloc_cache_noprof+0x9e/0x600 [ 234.184449][ T6953] ? percpu_ref_init+0xc5/0x350 [ 234.184466][ T6953] ? percpu_ref_init+0xc5/0x350 [ 234.184492][ T6953] ? __pfx_io_ring_ctx_ref_free+0x10/0x10 [ 234.184512][ T6953] percpu_ref_init+0xc5/0x350 [ 234.184537][ T6953] io_ring_ctx_alloc+0x318/0xb80 [ 234.184557][ T6953] ? io_prepare_config+0x8c8/0xc70 [ 234.184579][ T6953] io_uring_create+0x50/0x980 [ 234.184601][ T6953] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 234.184622][ T6953] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 234.184646][ T6953] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 234.184682][ T6953] ? __pfx_ksys_write+0x10/0x10 [ 234.184721][ T6953] do_syscall_64+0x16a/0x530 [ 234.184741][ T6953] ? trace_irq_disable+0x3b/0x140 [ 234.184766][ T6953] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.184785][ T6953] ? clear_bhb_loop+0x70/0xc0 [ 234.184808][ T6953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.184827][ T6953] RIP: 0033:0x7f3e651a8f19 [ 234.184844][ T6953] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 234.184860][ T6953] RSP: 002b:00007f3e66130ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 234.184879][ T6953] RAX: ffffffffffffffda RBX: 0000200000000a88 RCX: 00007f3e651a8f19 [ 234.184892][ T6953] RDX: 0000200000000b08 RSI: 0000200000000a88 RDI: 00000000000003f7 [ 234.184903][ T6953] RBP: 0000200000000a80 R08: 0000000000000000 R09: 0000000000000000 [ 234.184913][ T6953] R10: 0000200000000b10 R11: 0000000000000206 R12: 0000200000000b08 [ 234.184925][ T6953] R13: 0000200000000b10 R14: 00007f3e66130fd8 R15: 0000000000000000 [ 234.184954][ T6953] [ 237.225418][ T5864] usbhid 4-1:0.0: can't add hid device: -71 [ 237.225517][ T5864] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 237.262387][ T5864] usb 4-1: USB disconnect, device number 5 [ 238.542201][ T6976] comedi comedi1: 8255: I/O base address not correctly aligned [ 242.335576][ T7000] syzkaller0: entered promiscuous mode [ 242.335600][ T7000] syzkaller0: entered allmulticast mode [ 242.355648][ T7000] tipc: Enabling of bearer rejected, failed to enable media [ 242.742534][ T7002] FAULT_INJECTION: forcing a failure. [ 242.742534][ T7002] name failslab, interval 1, probability 0, space 0, times 0 [ 242.742587][ T7002] CPU: 0 UID: 0 PID: 7002 Comm: syz.4.263 Tainted: G L syzkaller #0 PREEMPT(full) [ 242.742617][ T7002] Tainted: [L]=SOFTLOCKUP [ 242.742624][ T7002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 242.742644][ T7002] Call Trace: [ 242.742652][ T7002] [ 242.742661][ T7002] dump_stack_lvl+0xe8/0x150 [ 242.742701][ T7002] should_fail_ex+0x3eb/0x540 [ 242.742734][ T7002] should_failslab+0xa8/0x100 [ 242.742759][ T7002] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 242.742789][ T7002] ? __d_alloc+0x37/0x820 [ 242.742815][ T7002] ? __d_alloc+0x37/0x820 [ 242.742847][ T7002] __d_alloc+0x37/0x820 [ 242.742873][ T7002] ? __pfx_get_random_u32+0x10/0x10 [ 242.742894][ T7002] ? dquot_alloc_inode+0x216/0xa50 [ 242.742919][ T7002] d_alloc_pseudo+0x21/0xc0 [ 242.742952][ T7002] alloc_path_pseudo+0x107/0x220 [ 242.742982][ T7002] ? __pfx_alloc_path_pseudo+0x10/0x10 [ 242.743020][ T7002] alloc_file_pseudo+0xa8/0x1e0 [ 242.743049][ T7002] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 242.743094][ T7002] __shmem_file_setup+0x2e9/0x370 [ 242.743127][ T7002] ? __pfx___shmem_file_setup+0x10/0x10 [ 242.743162][ T7002] ? vma_set_pgoff+0x17d/0x4f0 [ 242.743187][ T7002] shmem_zero_setup+0x90/0x130 [ 242.743218][ T7002] mmap_region+0x1cd3/0x2820 [ 242.743259][ T7002] ? __pfx_mmap_region+0x10/0x10 [ 242.743280][ T7002] ? do_raw_spin_lock+0x12b/0x2f0 [ 242.743312][ T7002] ? rcu_is_watching+0x16/0xb0 [ 242.743344][ T7002] ? trace_hrtimer_start+0x82/0x200 [ 242.743374][ T7002] ? hrtimer_start_range_ns_common+0x7f6/0xb60 [ 242.743476][ T7002] ? arch_get_unmapped_area_topdown+0x269/0xc30 [ 242.743542][ T7002] ? apparmor_capable+0x126/0x170 [ 242.743572][ T7002] ? bpf_lsm_capable+0x9/0x20 [ 242.743592][ T7002] ? security_capable+0x7e/0x2c0 [ 242.743619][ T7002] do_mmap+0xe0a/0x1300 [ 242.743649][ T7002] ? __pfx_do_mmap+0x10/0x10 [ 242.743682][ T7002] ? vm_mmap_pgoff+0x1ed/0x520 [ 242.743707][ T7002] ? down_write_killable+0x179/0x230 [ 242.743737][ T7002] ? __pfx_down_write_killable+0x10/0x10 [ 242.743764][ T7002] ? apparmor_mmap_file+0x1cc/0x390 [ 242.743791][ T7002] ? security_mmap_file+0x4df/0xa20 [ 242.743825][ T7002] vm_mmap_pgoff+0x27a/0x520 [ 242.743860][ T7002] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 242.743889][ T7002] ? rcu_is_watching+0x16/0xb0 [ 242.743923][ T7002] ? ksys_mmap_pgoff+0xf3/0x760 [ 242.743945][ T7002] ? __x64_sys_mmap+0x7f/0x140 [ 242.743973][ T7002] do_syscall_64+0x16a/0x530 [ 242.743996][ T7002] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.744017][ T7002] ? clear_bhb_loop+0x70/0xc0 [ 242.744043][ T7002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.744063][ T7002] RIP: 0033:0x7f3e651a8f19 [ 242.744105][ T7002] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 242.744123][ T7002] RSP: 002b:00007f3e66131028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 242.744146][ T7002] RAX: ffffffffffffffda RBX: 00007f3e65425fa0 RCX: 00007f3e651a8f19 [ 242.744162][ T7002] RDX: 0000000002000004 RSI: 0000000000c00000 RDI: 0000200000001000 [ 242.744176][ T7002] RBP: 00007f3e65237f6d R08: ffffffffffffffff R09: 0000000000000000 [ 242.744191][ T7002] R10: 000000000003b071 R11: 0000000000000246 R12: 0000000000000000 [ 242.744204][ T7002] R13: 00007f3e65426038 R14: 00007f3e65425fa0 R15: 00007ffd011c0ca8 [ 242.744238][ T7002] [ 243.240631][ T52] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 243.460353][ T52] usb 4-1: not running at top speed; connect to a high speed hub [ 243.460606][ T52] usb 4-1: New USB device found: idVendor=06cd, idProduct=0131, bcdDevice=1.00 [ 243.468523][ T52] usb 4-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 244.036997][ T52] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.037020][ T52] usb 4-1: Product: syz [ 244.037028][ T52] usb 4-1: Manufacturer: syz [ 244.037035][ T52] usb 4-1: SerialNumber: syz [ 244.085920][ T52] keyspan 4-1:1.0: Keyspan 4 port adapter converter detected [ 244.098942][ T52] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 88 [ 244.148782][ T52] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 244.273534][ T52] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 244.299033][ T7006] syz.3.272 uses obsolete (PF_INET,SOCK_PACKET) [ 244.308100][ T52] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 244.336684][ T52] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 244.354994][ T7006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.355487][ T7006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.397286][ T7018] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 244.415526][ T52] usb 4-1: USB disconnect, device number 6 [ 245.172008][ T52] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 245.175328][ T52] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 245.207506][ T52] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 245.240951][ T52] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 245.248173][ T52] keyspan 4-1:1.0: device disconnected [ 248.882285][ T7052] loop0: detected capacity change from 0 to 64 [ 248.954929][ T7052] hfs: unable to locate alternate MDB [ 248.954943][ T7052] hfs: continuing without an alternate MDB [ 249.334418][ T7057] [ 249.336788][ T7057] ============================================ [ 249.342932][ T7057] WARNING: possible recursive locking detected [ 249.349110][ T7057] syzkaller #0 Tainted: G L [ 249.355099][ T7057] -------------------------------------------- [ 249.361242][ T7057] syz.0.286/7057 is trying to acquire lock: [ 249.367127][ T7057] ffff888078adbfe0 (&HFS_I(tree->inode)->extents_lock){+.+.}-{4:4}, at: hfs_extend_file+0xf9/0x1680 [ 249.377935][ T7057] [ 249.377935][ T7057] but task is already holding lock: [ 249.385297][ T7057] ffff888078adba20 (&HFS_I(tree->inode)->extents_lock){+.+.}-{4:4}, at: hfs_extend_file+0xf9/0x1680 [ 249.396114][ T7057] [ 249.396114][ T7057] other info that might help us debug this: [ 249.404202][ T7057] Possible unsafe locking scenario: [ 249.404202][ T7057] [ 249.411667][ T7057] CPU0 [ 249.414954][ T7057] ---- [ 249.418238][ T7057] lock(&HFS_I(tree->inode)->extents_lock); [ 249.424227][ T7057] lock(&HFS_I(tree->inode)->extents_lock); [ 249.430213][ T7057] [ 249.430213][ T7057] *** DEADLOCK *** [ 249.430213][ T7057] [ 249.438366][ T7057] May be due to missing lock nesting notation [ 249.438366][ T7057] [ 249.446689][ T7057] locks held by syz.0.286/7057: 5, on CPU#0: [ 249.452681][ T7057] #0: ffff8880797d2478 (sb_writers#23){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 249.461937][ T7057] #1: ffff888078adb600 (&type->i_mutex_dir_key#17){++++}-{4:4}, at: lookup_open+0x246/0x1ae0 [ 249.472262][ T7057] #2: ffff88807ed3e0a8 (&tree->tree_lock#2){+.+.}-{4:4}, at: hfs_find_init+0x18d/0x300 [ 249.482036][ T7057] #3: ffff888078adba20 (&HFS_I(tree->inode)->extents_lock){+.+.}-{4:4}, at: hfs_extend_file+0xf9/0x1680 [ 249.493281][ T7057] #4: ffff8880797400a8 (&tree->tree_lock#2/1){+.+.}-{4:4}, at: hfs_find_init+0x18d/0x300 [ 249.503254][ T7057] [ 249.503254][ T7057] stack backtrace: [ 249.509147][ T7057] CPU: 0 UID: 0 PID: 7057 Comm: syz.0.286 Tainted: G L syzkaller #0 PREEMPT(full) [ 249.519909][ T7057] Tainted: [L]=SOFTLOCKUP [ 249.524235][ T7057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 249.534303][ T7057] Call Trace: [ 249.537683][ T7057] [ 249.540646][ T7057] dump_stack_lvl+0xe8/0x150 [ 249.545275][ T7057] print_deadlock_bug+0x27a/0x290 [ 249.550366][ T7057] __lock_acquire+0x25db/0x2de0 [ 249.555234][ T7057] lock_acquire+0x115/0x350 [ 249.559754][ T7057] ? hfs_extend_file+0xf9/0x1680 [ 249.564716][ T7057] __mutex_lock+0x197/0x15a0 [ 249.569320][ T7057] ? hfs_extend_file+0xf9/0x1680 [ 249.574275][ T7057] ? finish_task_switch+0x40e/0xc60 [ 249.579501][ T7057] ? lockdep_hardirqs_on+0x7b/0x110 [ 249.584719][ T7057] ? rcu_is_watching+0x16/0xb0 [ 249.589505][ T7057] ? trace_sched_exit_tp+0x3a/0x130 [ 249.594756][ T7057] ? hfs_extend_file+0xf9/0x1680 [ 249.599971][ T7057] ? __pfx___mutex_lock+0x10/0x10 [ 249.605024][ T7057] hfs_extend_file+0xf9/0x1680 [ 249.609801][ T7057] ? irqentry_exit+0x2a0/0x9b0 [ 249.614569][ T7057] ? __pfx___schedule+0x10/0x10 [ 249.619411][ T7057] ? irqentry_exit+0x2a0/0x9b0 [ 249.624168][ T7057] ? __pfx_hfs_extend_file+0x10/0x10 [ 249.629441][ T7057] ? __mutex_trylock_common+0x15f/0x270 [ 249.634986][ T7057] ? preempt_schedule_thunk+0x16/0x40 [ 249.640355][ T7057] ? preempt_schedule_common+0x7f/0xd0 [ 249.645806][ T7057] ? preempt_schedule_thunk+0x16/0x40 [ 249.651173][ T7057] ? __asan_memset+0x22/0x50 [ 249.655760][ T7057] ? hfs_brec_find+0x19a/0x510 [ 249.660521][ T7057] hfs_bmap_reserve+0x108/0x430 [ 249.665377][ T7057] __hfs_ext_write_extent+0x200/0x620 [ 249.670743][ T7057] ? __kmalloc_noprof+0x1a6/0x710 [ 249.675764][ T7057] ? hfs_find_init+0x9d/0x300 [ 249.680442][ T7057] __hfs_ext_cache_extent+0x6e/0x9b0 [ 249.685753][ T7057] ? hfs_find_init+0x18d/0x300 [ 249.690514][ T7057] hfs_extend_file+0x3ad/0x1680 [ 249.695365][ T7057] ? __pfx___mutex_trylock_common+0x10/0x10 [ 249.701260][ T7057] ? __pfx_hfs_extend_file+0x10/0x10 [ 249.706540][ T7057] ? __mutex_lock+0x305/0x15a0 [ 249.711319][ T7057] ? hfs_find_init+0x18d/0x300 [ 249.716093][ T7057] ? __pfx___mutex_lock+0x10/0x10 [ 249.721120][ T7057] ? rcu_is_watching+0x16/0xb0 [ 249.725884][ T7057] ? trace_kmalloc+0x2a/0xf0 [ 249.730479][ T7057] hfs_bmap_reserve+0x108/0x430 [ 249.735338][ T7057] hfs_cat_create+0x23d/0x870 [ 249.740015][ T7057] ? __pfx_hfs_cat_create+0x10/0x10 [ 249.745219][ T7057] ? _raw_spin_unlock+0x28/0x50 [ 249.750061][ T7057] ? hfs_new_inode+0x83e/0xcc0 [ 249.754816][ T7057] hfs_create+0x78/0xe0 [ 249.758967][ T7057] lookup_open+0x102d/0x1ae0 [ 249.763565][ T7057] path_openat+0x70c/0x20f0 [ 249.768063][ T7057] do_file_open+0x23e/0x4a0 [ 249.772554][ T7057] ? __pfx_do_file_open+0x10/0x10 [ 249.777579][ T7057] ? _raw_spin_unlock+0x28/0x50 [ 249.782443][ T7057] ? alloc_fd+0x6af/0x760 [ 249.786769][ T7057] do_sys_openat2+0x115/0x200 [ 249.791440][ T7057] ? __se_sys_futex+0x3a8/0x450 [ 249.796281][ T7057] ? __pfx_do_sys_openat2+0x10/0x10 [ 249.801476][ T7057] ? rcu_is_watching+0x16/0xb0 [ 249.806247][ T7057] __x64_sys_openat+0x138/0x170 [ 249.811093][ T7057] do_syscall_64+0x16a/0x530 [ 249.815681][ T7057] ? trace_irq_disable+0x3b/0x140 [ 249.820700][ T7057] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.826758][ T7057] ? clear_bhb_loop+0x70/0xc0 [ 249.831426][ T7057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.837333][ T7057] RIP: 0033:0x7f252cba8f19 [ 249.841739][ T7057] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 249.861368][ T7057] RSP: 002b:00007f252da80028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 249.869778][ T7057] RAX: ffffffffffffffda RBX: 00007f252ce26450 RCX: 00007f252cba8f19 [ 249.877740][ T7057] RDX: 0000000000002c41 RSI: 0000200000000540 RDI: 0000000000000003 [ 249.885709][ T7057] RBP: 00007f252cc37f6d R08: 0000000000000000 R09: 0000000000000000 [ 249.893670][ T7057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 249.901760][ T7057] R13: 00007f252ce264e8 R14: 00007f252ce26450 R15: 00007ffeff091998 [ 249.909757][ T7057] [ 249.960127][ T7057] hfs: new node 0 already hashed? [ 249.960510][ T7057] ------------[ cut here ]------------ [ 249.960519][ T7057] 1 [ 249.960530][ T7057] WARNING: fs/hfs/bnode.c:478 at hfs_bnode_create+0x45a/0x4e0, CPU#0: syz.0.286/7057 [ 249.983033][ T7057] Modules linked in: [ 249.986948][ T7057] CPU: 0 UID: 0 PID: 7057 Comm: syz.0.286 Tainted: G L syzkaller #0 PREEMPT(full) [ 249.998280][ T7057] Tainted: [L]=SOFTLOCKUP [ 250.003102][ T7057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 250.013388][ T7057] RIP: 0010:hfs_bnode_create+0x45a/0x4e0 [ 250.019067][ T7057] Code: 4a 8c 89 ee e8 b7 e2 61 fe e9 d6 fc ff ff e8 dd 68 03 ff 4c 89 ef e8 75 e2 45 09 48 c7 c7 e0 b2 4a 8c 89 ee e8 97 e2 61 fe 90 <0f> 0b 90 eb b0 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c dd fb ff ff [ 250.038775][ T7057] RSP: 0018:ffffc90006b07168 EFLAGS: 00010246 [ 250.044887][ T7057] RAX: 000000000000001f RBX: ffff888079740000 RCX: 567512e3bdf5f100 [ 250.052889][ T7057] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff900343a0 [ 250.060893][ T7057] RBP: 0000000000000000 R08: ffffc90006b06ec7 R09: 1ffff92000d60dd8 [ 250.068879][ T7057] R10: dffffc0000000000 R11: fffff52000d60dd9 R12: 0000000000000000 [ 250.076878][ T7057] R13: ffff8880797400d8 R14: ffff88802b506300 R15: dffffc0000000000 [ 250.084878][ T7057] FS: 00007f252da806c0(0000) GS:ffff8881233f9000(0000) knlGS:0000000000000000 [ 250.093935][ T7057] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 250.101041][ T7057] CR2: 00007f252287fc00 CR3: 000000002ca04000 CR4: 00000000003526f0 [ 250.109036][ T7057] Call Trace: [ 250.112787][ T7057] [ 250.115737][ T7057] hfs_btree_inc_height+0xf9/0xac0 [ 250.120883][ T7057] ? __pfx_folio_mark_accessed+0x10/0x10 [ 250.126522][ T7057] ? __pfx_hfs_btree_inc_height+0x10/0x10 [ 250.132289][ T7057] ? rcu_is_watching+0x16/0xb0 [ 250.137061][ T7057] ? do_raw_spin_unlock+0xf5/0x200 [ 250.142206][ T7057] hfs_brec_insert+0x7eb/0xc80 [ 250.146974][ T7057] ? preempt_schedule_thunk+0x16/0x40 [ 250.152374][ T7057] ? __pfx_hfs_brec_insert+0x10/0x10 [ 250.157658][ T7057] __hfs_ext_write_extent+0x34b/0x620 [ 250.163094][ T7057] ? __kmalloc_noprof+0x1a6/0x710 [ 250.168135][ T7057] ? hfs_find_init+0x9d/0x300 [ 250.173157][ T7057] __hfs_ext_cache_extent+0x6e/0x9b0 [ 250.178545][ T7057] ? hfs_find_init+0x18d/0x300 [ 250.183354][ T7057] hfs_extend_file+0x3ad/0x1680 [ 250.188213][ T7057] ? __pfx___mutex_trylock_common+0x10/0x10 [ 250.194154][ T7057] ? __pfx_hfs_extend_file+0x10/0x10 [ 250.199476][ T7057] ? __mutex_lock+0x305/0x15a0 [ 250.204533][ T7057] ? hfs_find_init+0x18d/0x300 [ 250.209580][ T7057] ? __pfx___mutex_lock+0x10/0x10 [ 250.214604][ T7057] ? rcu_is_watching+0x16/0xb0 [ 250.219429][ T7057] ? trace_kmalloc+0x2a/0xf0 [ 250.224019][ T7057] hfs_bmap_reserve+0x108/0x430 [ 250.228905][ T7057] hfs_cat_create+0x23d/0x870 [ 250.233613][ T7057] ? __pfx_hfs_cat_create+0x10/0x10 [ 250.238813][ T7057] ? _raw_spin_unlock+0x28/0x50 [ 250.243772][ T7057] ? hfs_new_inode+0x83e/0xcc0 [ 250.248589][ T7057] hfs_create+0x78/0xe0 [ 250.252844][ T7057] lookup_open+0x102d/0x1ae0 [ 250.257441][ T7057] path_openat+0x70c/0x20f0 [ 250.261968][ T7057] do_file_open+0x23e/0x4a0 [ 250.266464][ T7057] ? __pfx_do_file_open+0x10/0x10 [ 250.271542][ T7057] ? _raw_spin_unlock+0x28/0x50 [ 250.276393][ T7057] ? alloc_fd+0x6af/0x760 [ 250.280804][ T7057] do_sys_openat2+0x115/0x200 [ 250.285491][ T7057] ? __se_sys_futex+0x3a8/0x450 [ 250.290379][ T7057] ? __pfx_do_sys_openat2+0x10/0x10 [ 250.295570][ T7057] ? rcu_is_watching+0x16/0xb0 [ 250.300367][ T7057] __x64_sys_openat+0x138/0x170 [ 250.305681][ T7057] do_syscall_64+0x16a/0x530 [ 250.310545][ T7057] ? trace_irq_disable+0x3b/0x140 [ 250.315564][ T7057] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.321690][ T7057] ? clear_bhb_loop+0x70/0xc0 [ 250.326364][ T7057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.332307][ T7057] RIP: 0033:0x7f252cba8f19 [ 250.336716][ T7057] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 250.356357][ T7057] RSP: 002b:00007f252da80028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 250.364803][ T7057] RAX: ffffffffffffffda RBX: 00007f252ce26450 RCX: 00007f252cba8f19 [ 250.372931][ T7057] RDX: 0000000000002c41 RSI: 0000200000000540 RDI: 0000000000000003 [ 250.380945][ T7057] RBP: 00007f252cc37f6d R08: 0000000000000000 R09: 0000000000000000 [ 250.388909][ T7057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 250.396959][ T7057] R13: 00007f252ce264e8 R14: 00007f252ce26450 R15: 00007ffeff091998 [ 250.404993][ T7057] [ 250.408276][ T7057] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 250.415550][ T7057] CPU: 0 UID: 0 PID: 7057 Comm: syz.0.286 Tainted: G L syzkaller #0 PREEMPT(full) [ 250.426329][ T7057] Tainted: [L]=SOFTLOCKUP [ 250.430648][ T7057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 250.440687][ T7057] Call Trace: [ 250.443957][ T7057] [ 250.446983][ T7057] vpanic+0x26f/0x710 [ 250.450958][ T7057] panic+0xc5/0xd0 [ 250.454683][ T7057] ? __pfx_panic+0x10/0x10 [ 250.459109][ T7057] __warn+0x315/0x4c0 [ 250.463078][ T7057] ? hfs_bnode_create+0x45a/0x4e0 [ 250.468099][ T7057] ? hfs_bnode_create+0x45a/0x4e0 [ 250.473116][ T7057] __report_bug+0x276/0x570 [ 250.477616][ T7057] ? hfs_bnode_create+0x45a/0x4e0 [ 250.482648][ T7057] ? __pfx___report_bug+0x10/0x10 [ 250.487663][ T7057] ? vprintk_emit+0x56a/0x5f0 [ 250.492331][ T7057] ? __pfx_vprintk_emit+0x10/0x10 [ 250.497347][ T7057] ? hfs_bnode_create+0x45a/0x4e0 [ 250.502391][ T7057] report_bug+0x16b/0x220 [ 250.506716][ T7057] ? hfs_bnode_create+0x45a/0x4e0 [ 250.511773][ T7057] ? hfs_bnode_create+0x45c/0x4e0 [ 250.516802][ T7057] handle_bug+0x9c/0x200 [ 250.521047][ T7057] exc_invalid_op+0x1a/0x50 [ 250.525541][ T7057] asm_exc_invalid_op+0x1a/0x20 [ 250.530375][ T7057] RIP: 0010:hfs_bnode_create+0x45a/0x4e0 [ 250.535998][ T7057] Code: 4a 8c 89 ee e8 b7 e2 61 fe e9 d6 fc ff ff e8 dd 68 03 ff 4c 89 ef e8 75 e2 45 09 48 c7 c7 e0 b2 4a 8c 89 ee e8 97 e2 61 fe 90 <0f> 0b 90 eb b0 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c dd fb ff ff [ 250.555586][ T7057] RSP: 0018:ffffc90006b07168 EFLAGS: 00010246 [ 250.561664][ T7057] RAX: 000000000000001f RBX: ffff888079740000 RCX: 567512e3bdf5f100 [ 250.569629][ T7057] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff900343a0 [ 250.577589][ T7057] RBP: 0000000000000000 R08: ffffc90006b06ec7 R09: 1ffff92000d60dd8 [ 250.585636][ T7057] R10: dffffc0000000000 R11: fffff52000d60dd9 R12: 0000000000000000 [ 250.593598][ T7057] R13: ffff8880797400d8 R14: ffff88802b506300 R15: dffffc0000000000 [ 250.601582][ T7057] ? hfs_bnode_create+0x459/0x4e0 [ 250.606604][ T7057] hfs_btree_inc_height+0xf9/0xac0 [ 250.611710][ T7057] ? __pfx_folio_mark_accessed+0x10/0x10 [ 250.617350][ T7057] ? __pfx_hfs_btree_inc_height+0x10/0x10 [ 250.623079][ T7057] ? rcu_is_watching+0x16/0xb0 [ 250.627866][ T7057] ? do_raw_spin_unlock+0xf5/0x200 [ 250.632969][ T7057] hfs_brec_insert+0x7eb/0xc80 [ 250.637729][ T7057] ? preempt_schedule_thunk+0x16/0x40 [ 250.643101][ T7057] ? __pfx_hfs_brec_insert+0x10/0x10 [ 250.648397][ T7057] __hfs_ext_write_extent+0x34b/0x620 [ 250.653791][ T7057] ? __kmalloc_noprof+0x1a6/0x710 [ 250.658892][ T7057] ? hfs_find_init+0x9d/0x300 [ 250.663583][ T7057] __hfs_ext_cache_extent+0x6e/0x9b0 [ 250.668860][ T7057] ? hfs_find_init+0x18d/0x300 [ 250.673612][ T7057] hfs_extend_file+0x3ad/0x1680 [ 250.678448][ T7057] ? __pfx___mutex_trylock_common+0x10/0x10 [ 250.684335][ T7057] ? __pfx_hfs_extend_file+0x10/0x10 [ 250.689611][ T7057] ? __mutex_lock+0x305/0x15a0 [ 250.694376][ T7057] ? hfs_find_init+0x18d/0x300 [ 250.699125][ T7057] ? __pfx___mutex_lock+0x10/0x10 [ 250.704154][ T7057] ? rcu_is_watching+0x16/0xb0 [ 250.708928][ T7057] ? trace_kmalloc+0x2a/0xf0 [ 250.713508][ T7057] hfs_bmap_reserve+0x108/0x430 [ 250.718364][ T7057] hfs_cat_create+0x23d/0x870 [ 250.723044][ T7057] ? __pfx_hfs_cat_create+0x10/0x10 [ 250.728250][ T7057] ? _raw_spin_unlock+0x28/0x50 [ 250.733091][ T7057] ? hfs_new_inode+0x83e/0xcc0 [ 250.737841][ T7057] hfs_create+0x78/0xe0 [ 250.741984][ T7057] lookup_open+0x102d/0x1ae0 [ 250.746572][ T7057] path_openat+0x70c/0x20f0 [ 250.751062][ T7057] do_file_open+0x23e/0x4a0 [ 250.755549][ T7057] ? __pfx_do_file_open+0x10/0x10 [ 250.760562][ T7057] ? _raw_spin_unlock+0x28/0x50 [ 250.765400][ T7057] ? alloc_fd+0x6af/0x760 [ 250.769718][ T7057] do_sys_openat2+0x115/0x200 [ 250.774383][ T7057] ? __se_sys_futex+0x3a8/0x450 [ 250.779218][ T7057] ? __pfx_do_sys_openat2+0x10/0x10 [ 250.784409][ T7057] ? rcu_is_watching+0x16/0xb0 [ 250.789163][ T7057] __x64_sys_openat+0x138/0x170 [ 250.794000][ T7057] do_syscall_64+0x16a/0x530 [ 250.798578][ T7057] ? trace_irq_disable+0x3b/0x140 [ 250.803591][ T7057] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.809650][ T7057] ? clear_bhb_loop+0x70/0xc0 [ 250.814315][ T7057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.820192][ T7057] RIP: 0033:0x7f252cba8f19 [ 250.824599][ T7057] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 250.844192][ T7057] RSP: 002b:00007f252da80028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 250.852590][ T7057] RAX: ffffffffffffffda RBX: 00007f252ce26450 RCX: 00007f252cba8f19 [ 250.860575][ T7057] RDX: 0000000000002c41 RSI: 0000200000000540 RDI: 0000000000000003 [ 250.868557][ T7057] RBP: 00007f252cc37f6d R08: 0000000000000000 R09: 0000000000000000 [ 250.876524][ T7057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 250.884499][ T7057] R13: 00007f252ce264e8 R14: 00007f252ce26450 R15: 00007ffeff091998 [ 250.892483][ T7057] [ 250.895508][ T7057] Kernel Offset: disabled [ 250.899829][ T7057] Rebooting in 86400 seconds..