last executing test programs: 3m31.042624483s ago: executing program 2 (id=3): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000180)='./bus\x00', 0x804, &(0x7f0000000280)={[{@rodir}, {@shortname_lower}, {@utf8no}, {@uni_xlateno}, {@shortname_mixed}, {@utf8no}, {@shortname_winnt}, {@utf8no}, {@fat=@check_normal}, {@fat=@codepage={'codepage', 0x3d, '866'}}, {@fat=@check_strict}, {@shortname_win95}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@utf8no}, {@rodir}]}, 0x1, 0x27b, &(0x7f0000000640)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r4 = fanotify_init(0xf00, 0x0) fanotify_mark(r4, 0x105, 0x40009975, r3, 0x0) mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103) 3m29.862494547s ago: executing program 2 (id=9): socket$inet(0x2, 0x2, 0x1) r0 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x4, 0x2ffffffff}, 0x2e) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000003800010325bd700035effd9006"], 0x14}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r3, 0x10c, 0x2, &(0x7f00000006c0), &(0x7f0000000700)=0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) writev(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, "0f78fbc54b6c106c", "75fd7583f127c5c356354c80ea765edaa15f377fb214e20fda1b0241bed67dc4", "b1726789", "fb442565fb00"}, 0x38) close_range(r1, 0xffffffffffffffff, 0x0) 3m28.994526582s ago: executing program 2 (id=11): r0 = syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f0000000080)='./file1\x00', 0x4490, &(0x7f0000002cc0)=ANY=[], 0x1, 0x27f, &(0x7f0000000480)="$eJzs3T9v00AYx/HfOWkbaFXcPwgJMRUqMaG2LIilCGVgZ2FCQBOkiqhIUMSfKTAj2Nl5C7wARibEjMTGxAvIFnTnC3HSOA5W00vS70dKlNT32M/F5949rqoIwKl1u/rr8/Xf9mGkkkqSbkqRpIpUlnReFyovDg73Dxv12rAdlVyEfRglkeZIm72D+qBQG+civNi+K2sp/TOMR+Wnmh9v3XkZOg+E5a7+ASJpwV+dbnvlxDMbj2boBAIzLbX0Ssuh8wAAhOXn/8jP80t+/R5F0qaf9nvn/ymfQFuhExizrznbU/O/q7Laxp7fc25Tt95zJZzdHnWqxCK5zCsZWT0LTJNXVbpcojOP9xv1a3tPG7VI77TrzXWbrbvnWjJ0O9LZvj26640BtekQxfu+6PowZ/uwk84/1WTteI+Yz3wz3819E+uTav/Wf+W2safJnam470wl+W9l79H1cl6uVUYvV9xBLvojeEN7WVJGRaLOiFpR7w2COC9PF7XaF5X0bjsnam1g1E5O1Hp/VHc0Z0eOm/lg7pkN/dEXVVPr/8h+2psa5cq0bVxLPzKG9qfsWsZuPvFXXfPSwJZR0R6hgPd6pBtafv76zZOHjUb92cy+sFfiBKQxUS86g2BS8pnZF/ZDDnL0zrxTfD/BfjPhBHVP+n8G8reZWWHXXSap/1L1ypZbrNmnuHedvpCObeftPLXH7YzaYNU9n82u4HoYd+thMbuCG7XmunxVujLKEROxz3Py7BYJMlX90APu/wMAAAAAAAAAAAAAAAAAAEyb4/uXg4qyNoXuIwAAAAAAAAAAAAAAAAAAAAAA027ivv/3rpJ3fP8vMHZ/AwAA////DnhI") prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, 0x0, 0x8000) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$packet(0x11, 0x2, 0x300) read$dsp(0xffffffffffffffff, 0x0, 0x0) clock_adjtime(0x2, &(0x7f0000000640)={0x7, 0x9, 0x380000, 0x8, 0xfffffffffffffff9, 0xfffffffffffffff7, 0x9, 0x0, 0xae, 0x6, 0x7, 0x4, 0xfffffffffffff04f, 0x7, 0x80000000, 0xfffffffffffffff8, 0xffffffffffffffff, 0x6, 0x0, 0x100, 0x4, 0x2, 0x5, 0x3, 0x8, 0x8}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) rename(0x0, 0x0) ftruncate(r4, 0x201f) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x2) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x1a4243c, &(0x7f00000008c0)=ANY=[@ANYRES16, @ANYRESOCT, @ANYBLOB="12a4095a2aac12f0bfcb206d982e44066381388d27f14002d8d7431d3947f6399c7ff9f5193fc0398653e5a67bbb319f02bf4ac6f6ccd5acbfe1350cc3a6d2d48cf6c089ddf67171ffb3b15988e7b394c5daf3e12ca05e4dbdad7edd45f10cbc296a53a530d4c2d203ee650d5fff3a9b5aae78794fe84327e508172cdd72eeff5af4d6db9379bef20dde8e64b91d31a84ce8a7598bb78cc85108874811fc650f0520a5", @ANYRESHEX=r3, @ANYBLOB="7b8ae4d950a510a981c78f2246d4825535c37655327112a414ee394162b6e558c36104bc2a1b47a800a92237a6148a222bcace4f74ebf7b4d63ad663b601d02146f21caf496271e9376e3f721e48caaa194f00e137096facebc4e2574ed5d094491b637c93517ded181fdf49e2daceefb5c72f3fef86df384ff03cb9820b35f281ae9b5064199b03e8e689b35f17c7e23647ccaa01c87d80ab00757848", @ANYRES16, @ANYRES64, @ANYRES32=r1, @ANYRES8, @ANYRES16, @ANYRESHEX=r0, @ANYRESHEX=0x0, @ANYRESOCT=r0], 0x0, 0x0, &(0x7f0000000000)) ioctl$SNDCTL_SEQ_PANIC(0xffffffffffffffff, 0x5100) 3m27.582931446s ago: executing program 2 (id=12): mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000640)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x22, 0xe4}]}, 0x10) r1 = getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b70300000000002085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto$inet(r0, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000180)="df9156dfa2bc9adc3af2f785c9a20000b25272f55fcc22f19a4988df936e54de3cc1740c2bb8f230d8bd84276541c12fe96c9b6f0239c62ce08d48fd3d686f6c5a139e1047cac1e4d76d59e98ac7847b8c110a4731af82ae9416c1648e394625ba8c83e665cd7047af7fa2784322e0d871481568e026ae25d8ff3afe7043659b92bb33300e747fc61bbfd0469cd80d49118f32a8", 0x94, 0x80, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x0, 0x0, 0x21) 3m22.440281685s ago: executing program 2 (id=21): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461000018bbdecde39739fcd1df176dde746ec834120600000000003b814e50a959736d6572462abc30ef5b65c70f73ecea54b5e5bea9836c319f653557e79a002208ce996dda659bd5ba0f4ce5c2080002223dc60000000000000044cd0a1e3686873600000000005493b4b81d5b9fa9b40fe4d76afc3a989c6d60044e89eb96e44d01a1034e3797ffa86870b82939f41ffa0f3d726f085663c29cbdc4c766a7eb77cc36160191acf5ae7469c82ab4145b595b987d75912a0fcd1c061835294cc0c618aba204f8adaa20c80108d356cd88cc86177056b06e7068c40f807d9e539f8f5b64a8ee0725aa8d00000000007cb6020d90ea79b8027cf75964dd86c2ed2b5e75779677aa8c76b848dd03dab190b5f02ec52830a17b01eaae1c3df076000000000000000000000000000083a48a6b926c668b9b90195018ea3619f9d80a0b894e212178e1a19909d764666264fa29e2c055fd7f8e67c2acfb75f0a8d41692f4542a575ee42ed94a0014fba44985cca9df12fe93bfaccf0122a6e7e593613ac0111701b125cc6799c43aa4ff708dc4a00a6decad26f0378072a571da000000b1a6bdf03fd56697e348b5b494f6fddb9f56142a47a40ef81690a7eca421bd0ad198afa58ce69d61c29deaa93c0efea0df04f20020ee84075b4e1a2ad43d1be1138de4668e7b6137545708790c501f1ed7f6a571d500000000000000"], 0x27, 0x5586, &(0x7f00000079c0)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) 3m6.454670323s ago: executing program 32 (id=21): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x27, 0x5586, &(0x7f00000079c0)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) 19.440086095s ago: executing program 0 (id=436): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000022c0), 0x3, 0x439, &(0x7f0000002380)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)}, &(0x7f0000000140)=0x10) r1 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000c40)={0x0, 0xfe72}) ioctl$MON_IOCX_GETX(r1, 0x80089203, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@nfs_export_off}], [], 0x2c}) chdir(&(0x7f0000000080)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1d) 16.261077563s ago: executing program 4 (id=441): syz_mount_image$minix(&(0x7f0000000300), &(0x7f0000000180)='./file2\x00', 0x4000, &(0x7f0000001f00)=ANY=[], 0x3, 0x210, &(0x7f0000000700)="$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") openat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0) 14.169076288s ago: executing program 0 (id=445): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) r1 = getpid() getrlimit(0x4, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x4002) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200)=ANY=[]) syz_open_procfs$namespace(r1, &(0x7f0000000240)='ns/cgroup\x00') socket(0x11, 0x800000003, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4800000009) socket$netlink(0x10, 0x3, 0x14) syz_usb_connect(0x5, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12011003c08b25203c41a4819fae0102030109021b0002000750000904fbd400ffffff030904020700ff06800af955ceaa393469f16b1361ff"], &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0}) socket$nl_xfrm(0x10, 0x3, 0x6) pread64(0xffffffffffffffff, 0x0, 0x0, 0xc2a) sendmsg$unix(r3, 0x0, 0x4804) recvmsg$unix(r2, 0x0, 0x0) bind$unix(r2, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) openat$comedi(0xffffff9c, &(0x7f0000000200)='/dev/comedi4\x00', 0x50b400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000080)={0xffffffffffffffff, 0x300}, 0x8) syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="03010000ac0fce405d0500904431000000e30902120001000080040904"], 0x0) 14.138558274s ago: executing program 4 (id=446): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, 0x0, 0x0) dup(0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5", 0xa2}], 0x1}, 0x48002) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000540)='afs_get_tree\x00', r0}, 0x10) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x0, &(0x7f0000000000)={[{@dyn}]}) 13.412876465s ago: executing program 5 (id=449): socket(0x2c, 0x3, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0xfffd, 0x6, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0xe, 0x9}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_emit_ethernet(0x2a, &(0x7f0000000300)={@random="e90c630faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x2, 0x0, 0x1c, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0) 13.121718461s ago: executing program 1 (id=450): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x2a, 0xc002) sendfile(r0, r0, 0x0, 0x24002deb) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000003c0)={0x0}, &(0x7f0000000400)=0xc) prlimit64(r2, 0x8, &(0x7f0000000440)={0x8, 0x3}, &(0x7f0000000dc0)) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) shmget$private(0x0, 0x1000, 0x78000a42, &(0x7f0000ff2000/0x1000)=nil) setrlimit(0x8, &(0x7f0000000300)={0x400, 0x2}) socket(0xa, 0x3, 0xff) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000f40)='./file1\x00', 0x840, &(0x7f0000000540)={[{@test_dummy_encryption}]}, 0x1, 0x239, &(0x7f0000001280)="$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") 12.6335121s ago: executing program 4 (id=451): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x2a, 0xc002) sendfile(r0, r0, 0x0, 0x24002deb) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000003c0)={0x0}, &(0x7f0000000400)=0xc) prlimit64(r2, 0x8, &(0x7f0000000440)={0x8, 0x3}, &(0x7f0000000dc0)) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) shmget$private(0x0, 0x1000, 0x78000a42, &(0x7f0000ff2000/0x1000)=nil) setrlimit(0x8, &(0x7f0000000300)={0x400, 0x2}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000f40)='./file1\x00', 0x840, &(0x7f0000000540)={[{@test_dummy_encryption}]}, 0x1, 0x239, &(0x7f0000001280)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRkU5Xr5P6601T92sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//4g6bS0=") 12.30019255s ago: executing program 3 (id=452): r0 = open(&(0x7f0000000140)='./bus\x00', 0x143bc2, 0x1c0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x25, 0x0, 0x10, 0xfffff00c}]}, 0x10) ioctl$COMEDI_BUFINFO(r0, 0xc02c640e, &(0x7f0000000000)={0x9, 0xe00000, 0xfffff24d, 0x6, 0x5, 0x5, 0x1}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000f80)={'team0\x00', &(0x7f0000000f40)=@ethtool_wolinfo={0x3, 0xfffffffc, 0x0, "000000002191"}}) syz_mount_image$hfsplus(&(0x7f0000001140), &(0x7f00000004c0)='./file1\x00', 0x804c10, &(0x7f0000000180)=ANY=[], 0xfe, 0x66b, &(0x7f0000001180)="$eJzs3c1vHGcdB/DvbDZ2Ni3BTZM2oEq1GgkQFolf5IK5YBBCPlSoKgfOVuI0VjZpsV3kVog6vF576B9QDr4gTkjcIxUOXODWG/KxEhKXXjCnRTuetdfrl66TxrtpP59o93lmnplnfs/vmZl9saIN8IW1MJH6gxRZmHhlvb28tTnT3NqcudupJxlNspHUk9SSFP9ttVofJvNJsdtN0VMe8P7y3GsffbL18c5SvXqU29eO269Htd1Gz+qNzrrxJGeq8hHs6+/GI/dX7EY+n+RqVcLAnU3S2udnf396t6VL47C9z51KjMDjVey8bh4wlpyvLvT2+4DOK2/tdKPr32if2/W+gwAAAIAnTT+fgb+8ne2sFxdOIRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4XNjY+/3/onrUOvXxFJ3f/x+p1qWqD5cXT7b5g8cVBwAAAAAAAACcohe3s531XOgst4ryb/4vlQuXyuen8lZWs5SVXMt6FrOWtaxkKslYV0cj64traytTfew5feie058S6GhVNj6bcQMAAAAAAADA58yvsrD3938AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgGRXJmp0hxv2v1WGr1JOeSjLRXbCT/7NSfZA8GHQAAAACcgtFkO+u50FluFbmU5LnyO4BzeSv3spblrKWZpdwsvxfY+dRf29qcaW5tztxtPw72+/3/nCiMssfsfPdw+JGvlFs0civL5ZpruZE30szN1Mo9265U8XR67Ynrfjum4nuVPiO7WZXtkb9XlQe8e6LBHuWEX6aMlRk5u5uRySq2djae6czM4TN0wtnpPdJUarvBXuo50sj+wTxUzs9XZXs8vzsq5wPRm4nprrPvueNznnz9L3/66WRVH54h9edMVbbK58bBTMx0ZeL5fjJxu3nvzu1bqxNPWiYOmCwzcXl3eSE/yk8ykfG8mpUs5+dZzFqWMp4flrXFavKLrkv+iEzN71t69dMiGanO0J3JOllML5X7Xshyfpw3cjNLebn8N52pfDuzmc1c1wxfPn6Gy6u+tu+q35vm1pcODf7qN6pKI8nvq3I4tPP6TFdeu++5Y2Vb95q9LF3sI0snvDfWv1pV2sf4dVUOh95MTHVl4tnjM/GH8ray2rx3Z+X24pv9He7ie1WlfWb9NhkfnhtJ+3y52J6scmn/2dFue/bQtqmy7dJuW+1A2+Xdtp0rdePIK3Wkeg93sKfpsu35Q9tmyrYrXW2Hvd8CYOid/+b5kca/G/9ofND4TeN245VzPxj9zugLIzn717PfrU+e+VrtheLP+SC/3Pv8DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPLzVt9+5s9hsLq30VFqt1rtHNPVZqVdHeMjdH6GS8X891T7yIU2dnzM7xXi+8nRyemMf1sr/Wq1WtaY4Yps//m1oEtWqDEXqBlQZ3D0JOB3X1+6+eX317Xe+tXx38fWl15fuzc3Ozk3Ozb48c/3WcnNpcud50FECj8Pei/6gIwEAAAAAAAAAAAD6dRr/nWDQYwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACebAsTqT9IkanJa5Pt5a3NmWb70anvbVlPUktS/CIpPkzmi6phrKu74qjjvL8899pHn2x9vNdXvbN97bj9+rNRPTKe5MxOef+z6u9GVR6rOG4Ixe4I55NcrUoYuP8HAAD//xokBkA=") open(&(0x7f0000000140)='./file1\x00', 0x1e3042, 0x9c) r3 = syz_usb_connect(0x2, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000240)={0x40, 0x17, 0x6, "a535fee5e86e"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r3, 0x0, 0x0) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000002c0)='./file1\x00') r4 = open(&(0x7f0000000040)='./file2\x00', 0x141042, 0x0) unshare(0x8040480) syncfs(r4) fcntl$setlease(r0, 0x400, 0x1) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) socket$packet(0x11, 0x3, 0x300) 11.550899184s ago: executing program 5 (id=454): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r2, 0x2f126000) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r4, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c1) r6 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r6, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000080)={0x0, @rand_addr=0x64010100, @multicast1}, 0xc) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) recvmmsg(r6, &(0x7f0000003800)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x10000, 0x0) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000900)=[{{&(0x7f0000007b00)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000b00)=[{&(0x7f0000007b40)="fb9f", 0x2}], 0x1}}, {{&(0x7f0000000800)={0x2, 0x4e20, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x7, 0x4, [@multicast2]}]}}}], 0x18}}], 0x2, 0x40000) fcntl$notify(r1, 0x402, 0x8) 9.441575455s ago: executing program 1 (id=456): clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) semtimedop(0xffffffffffffffff, &(0x7f0000000000)=[{0x3, 0xf, 0x1800}, {0x3, 0x1, 0x1800}, {0x3, 0xc061, 0x800}, {0x0, 0x9, 0x800}], 0x4, &(0x7f00000000c0)={r0, r1+60000000}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x0, &(0x7f0000000340)={[{@usrquota}, {@usrquota}]}, 0x21, 0x4cc, &(0x7f0000000b80)="$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") getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r3) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000000)=0x60) 9.335117826s ago: executing program 0 (id=457): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) r1 = getpid() getrlimit(0x4, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x4002) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200)=ANY=[]) syz_open_procfs$namespace(r1, &(0x7f0000000240)='ns/cgroup\x00') socket(0x11, 0x800000003, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x14) syz_usb_connect(0x5, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12011003c08b25203c41a4819fae0102030109021b0002000750000904fbd400ffffff030904020700ff06800af955ceaa393469f16b1361ff"], &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0}) 9.081886553s ago: executing program 6 (id=458): bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f00000000c0)={@empty, @private=0xa010101, 0x2, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x100101, 0x0, 0x801}, 0x3c) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x24004080) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005000100040000000600180000100000060019"], 0x4c}}, 0x0) syz_open_procfs$pagemap(0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000193c0)={0x11, 0x13, &(0x7f0000019300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000206a932500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000000)='sys_enter\x00', r3, 0x0, 0x91}, 0x18) rt_sigqueueinfo(0x0, 0x15, &(0x7f0000000000)={0x2e, 0x6, 0xffff7d34}) 7.745344715s ago: executing program 4 (id=459): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x45, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x240}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r4, &(0x7f0000003480)={0x2020}, 0x2020) syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0xb43d, 0x0, 0x7, 0x11f}, &(0x7f0000000440)=0x0, &(0x7f0000000400)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) 7.738797535s ago: executing program 1 (id=460): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x49, &(0x7f0000000080)=0x4, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) timer_create(0xfffffffffffffffd, 0x0, &(0x7f00000000c0)=0x0) timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x3938700}, {0x77359400}}, 0x0) timer_create(0xfffffffffffffffd, 0x0, &(0x7f00000000c0)=0x0) timer_delete(r1) r3 = open(&(0x7f0000000000)='./file1\x00', 0x14927e, 0x22) dup(r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000610400000000008095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x94) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=ANY=[@ANYBLOB="1200000002000001000000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='\a'], 0x10) close(0x3) timer_create(0x6, &(0x7f0000000300)={0x0, 0x3, 0x0, @thr={&(0x7f0000000000)="1c8a8ed319ee204a1c5ec79c77da0284eb214509c0fac9c98dad2b2bd7f4c07d206894cd43da348dff1cfcdf2ea6b3", &(0x7f0000000200)="6c7f047660bc05d61c1f04d0b13e28d4208d2f8e0bb369b357d2787e3acabf2ed188f035b6c11a9564c7680932d5493473cc477eb8e3de12070ba6dab590c1cceea6e4016e45cde2a69c427571fc80fc06e87f365c6e304d11230cf04e3161b640fc50c6d521a9240336a579c86a4a947beca61c1d03be2d4992c0f551524da78d9f1c8f7a5c6aa9fde25d354bc3461bc602372f37b38606a6d35eadf3fd51edabd3ca6ea9f1b3d1ffbcfabc4eb0a87382d4ac18f7a4a47d844b51dec72175f252280450c184edef2dcaa9ef2e4cde7ff70dba97be3c148b14f36e84da0b289ab9bf5c754abd77b89b7f6cc2a563"}}, &(0x7f00000003c0)) r6 = socket(0xa, 0x3, 0x7) sendmmsg(r6, &(0x7f0000000180)=[{{&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0xb, @mcast2, 0x2}, 0x80, 0x0}}, {{&(0x7f0000000340)=@l2tp6={0xa, 0x0, 0x2, @remote, 0x6}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x29, 0x2}], 0x10}}], 0x2, 0x9000) close(0x4) timer_settime(r2, 0x0, &(0x7f0000000140)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) syz_read_part_table(0x4078, &(0x7f0000004080)="$eJzs079KwlEUB/CjQ0EtFj3A3SKQ+vknySkqGhrMwamxwkIQg7RwaelteqQeoOcwMIP4lYMFBfH5TOfe7z2Xs5zVl6eDiCjs3A1648gpRsRkWu0XIwoRUZ8lhfzT4XWvf37R7b91FfMxCyvNuX94nBVLi/+5uRZxmiJiZfS8cfST6fgnlrfOPh4nU5/3+3tODlupfdxKWaNR7VSq6V0t1bKvO7Ism5P8tvVS52qc7ru3w97NIO1u18qpfTlKlb1yqjSb9b8eDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeGUHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKO3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdiBYwEAAAAAYf7WSXRuAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAqAAAAP//CaUg2w==") open(&(0x7f00000000c0)='./file0\x00', 0x7e841, 0x0) syz_extract_tcp_res(&(0x7f00000004c0)={0x41424344}, 0x800000, 0x7) syz_emit_ethernet(0x176, &(0x7f0000000500)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x140, 0x6, 0x1, @empty, @local, {[], {{0x0, 0x4e22, r7, r7, 0x0, 0x4, 0xf, 0xc2, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "58f48b54fb2bea4f72c3adf62f4c185c"}, @exp_fastopen={0xfe, 0x10, 0xf989, "ad07ced56d569bac332d05b7"}, @exp_fastopen={0xfe, 0x6, 0xf989, "58cc"}]}}, {"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"}}}}}}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000d40)=[{&(0x7f0000000b40)="2ac9", 0x2}], 0x1) 7.564989012s ago: executing program 5 (id=461): socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000040)='./file0\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000001440)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@default_permissions}]}) chdir(&(0x7f00000003c0)='./bus\x00') open(0x0, 0x10b942, 0x1) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000300)=""/104, 0x68) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 7.407296358s ago: executing program 6 (id=462): r0 = syz_open_procfs(0x0, &(0x7f0000002400)='net/netstat\x00') read$FUSE(r0, 0x0, 0x0) 6.364821606s ago: executing program 6 (id=463): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x45, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x240}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000000c0)={[{@quota}, {@grpquota_block_hardlimit={'grpquota_block_hardlimit', 0x3d, [0x33]}}]}) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r4, &(0x7f0000003480)={0x2020}, 0x2020) 6.290440495s ago: executing program 5 (id=464): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) ioctl$MEDIA_IOC_ENUM_ENTITIES(0xffffffffffffffff, 0xc1007c01, 0x0) syz_open_dev$video(&(0x7f0000000000), 0xc000, 0x0) syz_io_uring_setup(0x6087, &(0x7f0000000400)={0x0, 0x4f5b, 0x4000, 0x3, 0xe}, &(0x7f0000000480), &(0x7f00000004c0)) mount(0x0, 0x0, 0x0, 0x2014800, 0x0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r4, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) 6.276476144s ago: executing program 4 (id=465): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$usbfs(&(0x7f0000000340), 0x206, 0x8401) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000093c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000004200)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x2026012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="5001000000000000018000000000000003000000473041000000000000000000000000ff0f0000000000008000000000000000ffffff991a0d0000050000ffffffffff7f020000000000000004000000000000000800000000000000070000000000e4000000008000001000"/120, @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="090000000000000000000000000000000000000002000000000000000700000008"], 0x0, 0x0, 0x0}) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000180)=0xc) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0xc0060, &(0x7f0000000040)={[{@uid={'uid', 0x3d, r8}}]}) mount$fuse(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x20, &(0x7f0000000540)={{}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {'group_id', 0x3d, r6}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xfffffffffffffe01}}], [{@smackfsdef={'smackfsdef', 0x3d, '/dev/infiniband/rdma_cm\x00'}}, {@seclabel}, {@euid_gt={'euid>', r8}}]}}) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) ioctl$USBDEVFS_BULK(r1, 0x5523, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xc}]}, 0x40}}, 0x0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff}, 0x80) r11 = add_key(&(0x7f0000000140)='cifs.spnego\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) shmget$private(0x0, 0x4000, 0x100, &(0x7f0000002000/0x4000)=nil) keyctl$KEYCTL_WATCH_KEY(0x20, r11, r10, 0x100000000000014) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)='veth1_macvtap\x00', r11) r12 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r12, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r12, &(0x7f0000000340)={0x15, 0x110, 0xfa08, {r13, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @loopback}, @in={0x2, 0x4000, @multicast1}}}, 0x118) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x6, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}], {0x14}}, 0xe8}}, 0x0) 6.176627777s ago: executing program 3 (id=466): socket(0x1d, 0x2, 0x6) (async) syz_mount_image$iso9660(&(0x7f0000000a80), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000b00)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYBLOB="0c9a99a31522f509df8947553737480dfacb31640a68f6654dd749314a63329879b5989b491d79215c2fa063601f05d0e892a3033109b8abad463695501e1058b6d089dd423e734f5208781a59ad32bd8f19ca9f9fcea5e5886cc434d12fe40f2d0e4481650498c129a97fcdfed3c240411acb468d9a39dc30dfb4eb160d200ce7eb828454a45452c34d7a60a83705494cc4cd05541a95e585131e0d5b4b9ad667b03218fbe4162b2bc1fff68ccdae6255e78e9fd7fd08d64fa5f6958f422d371b29d38eb7d3492aea369144c78f8495786d78ecdc3230a568"], 0xfe, 0x5db, &(0x7f0000000380)="$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") (async) creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x100}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x30, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x9, 0x2, 0x0, 0x1, [@generic="cd0170a004"]}]}, 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) 5.937438311s ago: executing program 1 (id=467): r0 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r0, 0x0, 0x0) keyctl$read(0xb, r0, &(0x7f00000010c0)=""/4096, 0x1000) 5.165756772s ago: executing program 6 (id=468): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYRES8=r0, @ANYRES32=r1, @ANYBLOB="003000000000000014001a80100004800c00098008", @ANYRES8=r0], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r3}, 0x18) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0xa, &(0x7f0000000180)=[{0x7, 0xc0, 0x8, 0xffff8000}, {0x7, 0x9, 0x0, 0x8}, {0x7, 0x3, 0x49, 0x10}, {0xb9, 0x9, 0x7, 0x1ff}, {0x9, 0x8, 0x3}, {0x2, 0x5f, 0x24, 0x2}, {0xfff, 0x9, 0x4, 0x2}, {0x800, 0x0, 0x3, 0xaa14}, {0x7ff, 0x1, 0x1c, 0x9}, {0x74f, 0x5, 0x3, 0x4}]}, 0x10) 4.489389881s ago: executing program 1 (id=469): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x2a, 0xc002) sendfile(r0, r0, 0x0, 0x24002deb) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000003c0)={0x0}, &(0x7f0000000400)=0xc) prlimit64(r2, 0x8, &(0x7f0000000440)={0x8, 0x3}, &(0x7f0000000dc0)) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) shmget$private(0x0, 0x1000, 0x78000a42, &(0x7f0000ff2000/0x1000)=nil) setrlimit(0x8, &(0x7f0000000300)={0x400, 0x2}) socket(0xa, 0x3, 0xff) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000f40)='./file1\x00', 0x840, &(0x7f0000000540)={[{@test_dummy_encryption}]}, 0x1, 0x239, &(0x7f0000001280)="$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") 4.389531843s ago: executing program 5 (id=470): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x3, {0x40, 0x4, 0x4}}, 0x10) write$binfmt_misc(r0, &(0x7f0000000080), 0x2000011a) recvmsg$can_bcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000000280)=""/239, 0xef}], 0x1, 0x0, 0x3c}, 0x2) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="40000000121402002bbd7100fbdbdf25080001000100000008001500020000000800150005000000080003000400000008001500030000000800030000000000"], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4001) socket$netlink(0x10, 0x3, 0x0) socket$inet6(0xa, 0x5, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000380)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000001dcdf250700000008000300", @ANYRES32=r4, @ANYBLOB="1400040070696d3672656730001000000000000028000500060000000a00e82d8804979ecf222a34b9957fb1e341f1a814bd91824e551a18117f38a905175d6948846683f83bcf59e8095b844303120de41a390a2d60d2e3b0f1f689ab17c0eb39b171abce9ce19dc7c14e29cb19023624fae7a8e548be5c86a2f997f34bf2011228ccb4a032b25e0d001a99a360fe9f8c44a7b82894e5e72d5b8e993721f64c7a7ab7bcae08e22a1a4ed8adfedcf652eac73604dcb0a5dc0e5ce540778f129d6fbec4d68f6ed4454a5b353a829c9ff1d81605fca7d01104d4a0df5909f12872d06441899487ac8073"], 0x4c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r5, &(0x7f0000000000), 0xd) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, 0x28111, r6, 0x0) openat$cgroup_ro(r1, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x80002, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r8 = getpid() openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file2\x00', 0x84a42, 0x99) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x4) 4.364691914s ago: executing program 0 (id=471): bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f00000000c0)={@empty, @private=0xa010101, 0x2, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x100101, 0x0, 0x801}, 0x3c) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x24004080) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005000100040000000600180000100000060019"], 0x4c}}, 0x0) syz_open_procfs$pagemap(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000193c0)={0x11, 0x13, &(0x7f0000019300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000206a932500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) rt_sigqueueinfo(0x0, 0x15, &(0x7f0000000000)={0x2e, 0x6, 0xffff7d34}) 4.269022125s ago: executing program 3 (id=472): clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) semtimedop(0xffffffffffffffff, &(0x7f0000000000)=[{0x3, 0xf, 0x1800}, {0x3, 0x1, 0x1800}, {0x3, 0xc061, 0x800}, {0x0, 0x9, 0x800}], 0x4, &(0x7f00000000c0)={r0, r1+60000000}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff) r3 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r4) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000000)=0x60) 3.621785018s ago: executing program 6 (id=473): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) ioctl$MEDIA_IOC_ENUM_ENTITIES(0xffffffffffffffff, 0xc1007c01, 0x0) syz_open_dev$video(&(0x7f0000000000), 0xc000, 0x0) syz_io_uring_setup(0x6087, &(0x7f0000000400)={0x0, 0x4f5b, 0x4000, 0x3, 0xe}, &(0x7f0000000480), &(0x7f00000004c0)) mount(0x0, 0x0, 0x0, 0x2014800, 0x0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r4, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) 3.365150543s ago: executing program 5 (id=474): socket$packet(0x11, 0x2, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080)={[{@nobh}, {@auto_da_alloc}, {@data_err_ignore}]}, 0x3, 0x4cd, &(0x7f0000000c80)="$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") write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000300)=ANY=[@ANYRES32=r0, @ANYBLOB="000000000000000000000000601300"/34], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000800, &(0x7f0000000040)={0x2, 0x3, @remote}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) write$sndseq(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00'}, 0x10) 3.287668919s ago: executing program 3 (id=475): r0 = syz_open_procfs(0x0, &(0x7f0000002400)='net/netstat\x00') read$FUSE(r0, 0x0, 0x0) 2.033584916s ago: executing program 6 (id=476): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="b800000019000100fcffffff00000000ac14142c000000000000000000000000fe8000000000000000000000000000aa4e2200044e2400000a00006000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000010feffffffffffffff000000400000000000000000000000001a000010000000000100000000000000feffffffffffffff770000000000000005000000000000000000000000000000ff7f00000000000008000000000000000101"], 0xb8}}, 0x0) syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000040)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@init_itable}]}, 0x0, 0x510, &(0x7f00000001c0)="$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") r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = dup(r3) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000000206030000000000fffff0000000000016000300686173683a6e65742c706f72742c6e6574000000050004000000000005000500020000000900020073797a3200000000050001000700000014000780080013400000000008001240"], 0x64}}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x105042, 0x1ff) linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file4\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file5\x00', 0x0) syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x1000000, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], 0x2, 0x58a, &(0x7f0000000740)="$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") write$binfmt_script(r2, &(0x7f00000008c0), 0xfecc) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000640)='.log\x00', 0xa5d, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x161442, 0xb6) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.state\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) sendto$inet6(r0, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) 1.926550648s ago: executing program 0 (id=477): socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000040)='./file0\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000001440)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@default_permissions}]}) chdir(&(0x7f00000003c0)='./bus\x00') open(0x0, 0x10b942, 0x1) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000300)=""/104, 0x68) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 1.861028077s ago: executing program 4 (id=478): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x2a, 0xc002) sendfile(r0, r0, 0x0, 0x24002deb) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000003c0)={0x0}, &(0x7f0000000400)=0xc) prlimit64(r3, 0x8, &(0x7f0000000440)={0x8, 0x3}, &(0x7f0000000dc0)) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) shmget$private(0x0, 0x1000, 0x78000a42, &(0x7f0000ff2000/0x1000)=nil) setrlimit(0x8, &(0x7f0000000300)={0x400, 0x2}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) socket(0xa, 0x3, 0xff) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000f40)='./file1\x00', 0x840, &(0x7f0000000540)={[{@test_dummy_encryption}]}, 0x1, 0x239, &(0x7f0000001280)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x187842, 0x3) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000eb2f00000030000000020000000000000000000006040000000000000001000005040000000000000003000000000000000000000000000009010000000000"], 0x0, 0x4a, 0x0, 0x1}, 0x28) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000240)={0x3920e, r5, 0x17, 0x6d3, 0x2}) r8 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r8, 0x29, 0x16, &(0x7f0000000000)=0x7, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001080)={r8, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000011c0)={0x11, 0x5, &(0x7f0000000e40)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @generic={0x5, 0xf, 0x7, 0xfffa, 0x800}], &(0x7f0000000e80)='GPL\x00', 0x101, 0x59, &(0x7f0000000ec0)=""/89, 0x41000, 0x10, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f0000001000)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000001040)={0x10000, 0x4, 0x10, 0x3}, 0x10, 0x0, 0x0, 0x9, &(0x7f00000010c0)=[r5, r9, r5, r6, r6], &(0x7f0000001100)=[{0x0, 0x3, 0x7, 0x1}, {0x4, 0x5, 0xe, 0x2}, {0x5, 0x2, 0x8, 0x2}, {0x5, 0x3, 0xb, 0x5}, {0x2, 0x2, 0xf, 0xb}, {0x2, 0x2, 0xb, 0x7}, {0x1, 0x1, 0x8, 0x7}, {0x0, 0x1, 0x9, 0x6}, {0x0, 0x1, 0x9, 0x8}], 0x10, 0x9}, 0x94) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x8d8, 0x30, 0xffffffffffffffff, 0x0, 0x40002, {}, [{0x8c4, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x64, 0x7, 0x8, 0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r2}]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x874, 0x2, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0xf69b, 0x809, 0x4, 0x101, 0x8, 0x80000001, 0xbd0, 0x9, 0x9, 0x80, 0x2, 0x2, 0x7ff, 0x1e26, 0xffffffad, 0x4, 0xb, 0x6, 0x2, 0x2, 0x5, 0x7fff, 0x5777, 0x4, 0xfffffbff, 0x200, 0x7fbd, 0x85f, 0x9, 0xfff, 0x5, 0x4, 0x1, 0x0, 0x5, 0x77, 0x2, 0x3, 0x101, 0x100000, 0x7fff, 0xd, 0x7ff, 0x9, 0x3, 0x8, 0x6, 0x2480, 0x7, 0x8, 0x5, 0x9, 0x80, 0x9, 0x803d, 0x6, 0x8, 0x580, 0xfa, 0xfffffffb, 0x8, 0x4, 0x3, 0x1e, 0x0, 0x80000000, 0x2, 0x3, 0x5a14, 0x4c9, 0x2, 0x84, 0x8, 0x4, 0xba000000, 0x3, 0x0, 0x1, 0x4, 0x4c3, 0x1, 0xfffffffa, 0x2f70, 0xf, 0xe0f, 0x4, 0x8, 0xb4000000, 0x7fff, 0x8001, 0x400, 0x3f19, 0x77e, 0x10, 0x3ff, 0xffff, 0x4, 0xf, 0x0, 0x2, 0x1ff, 0x101, 0x7fff, 0x3, 0x100, 0x6, 0x1, 0x40, 0xfffffff7, 0x100004, 0x6, 0x100, 0x2, 0x5587, 0x0, 0x161, 0xf, 0x1001, 0x7f, 0x9, 0x2d2, 0x3, 0x1, 0x9, 0x6, 0xfff, 0x1ff, 0x7, 0x200, 0x8, 0xffffffff, 0x3ff, 0x1d4f, 0x5, 0x2, 0x0, 0x8, 0x4, 0xd, 0x8, 0x5, 0x6, 0x81, 0x6, 0x2, 0x2, 0x6, 0x0, 0x4, 0x1000, 0x7, 0x8, 0xbddd, 0x9, 0xc7, 0x401, 0x0, 0x5, 0xe94, 0x3, 0x8, 0xfffff173, 0x77, 0x9, 0x5, 0x7fff, 0xffff, 0x10002, 0x8001, 0x6, 0x4, 0x363a, 0x2, 0xc, 0x0, 0x4, 0x0, 0x1000, 0x37a7, 0x0, 0x4, 0xde, 0x400, 0xffff, 0xc, 0x6, 0x7556, 0x3, 0x7, 0x4, 0x1b2, 0x6, 0x993, 0x5, 0x4, 0x434, 0xd, 0x2, 0x0, 0x1, 0x7f, 0x0, 0x9, 0x2, 0x4, 0x4, 0x6, 0x8141, 0xf720, 0x80000001, 0x206004b1, 0x4519, 0x81, 0x0, 0x81, 0x5, 0x0, 0x5, 0x3, 0x7, 0x8, 0x8001, 0x285b, 0x4, 0x6, 0xb36, 0x3, 0x800, 0x1, 0x7, 0x101, 0x4, 0xc2, 0x1, 0x7f, 0xfff, 0x326, 0x8, 0x3ff, 0xfffffff8, 0x9, 0x4, 0xfffffff7, 0x6, 0x7, 0x6, 0x6, 0x0, 0x997a, 0x5, 0x8, 0x20080, 0x4, 0x3, 0x6]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x10000, 0x1, 0x20, 0x5, 0x5, 0x9, 0x86, 0x2, 0x0, 0x2, 0x8, 0x200, 0x7fff, 0x6, 0x0, 0xfffffffe, 0x80000001, 0x9, 0x9, 0x9, 0xff, 0x0, 0x5, 0xa, 0x401, 0xfffff801, 0x6, 0x98a, 0x5, 0x5, 0x5, 0x7fff, 0x80, 0x7, 0x0, 0x4, 0x3, 0xffffffff, 0x9, 0x0, 0x9, 0x2, 0x3, 0x8, 0x6, 0xfffff800, 0x3, 0xb, 0x5, 0x1000, 0x8, 0x0, 0x8, 0x3, 0x4, 0x2, 0x60b, 0x3, 0x4, 0x6, 0x9, 0x6c8, 0x81, 0x0, 0x0, 0xff04, 0x9, 0x8, 0xffffffff, 0x13e0, 0x8, 0x6, 0x3, 0x5, 0x78, 0x8, 0x6, 0x36, 0x5, 0x7, 0x736, 0xff, 0x800, 0xc, 0x8, 0x9, 0xffff0001, 0x6, 0x5, 0x4, 0x8000, 0x98, 0x2, 0xd31, 0xe, 0x3, 0x4, 0x2, 0x8, 0x4, 0x1, 0x800, 0x98d, 0x2, 0xbc3, 0x0, 0x8, 0x4, 0x2, 0x5, 0x1, 0x8, 0x1000005, 0x1, 0x466e, 0x804, 0x5, 0x9, 0x5, 0x9, 0x2d4, 0xd7, 0x2, 0xe67, 0x1, 0x204, 0x5, 0x6, 0x2bc0eb12, 0xd, 0x2, 0x2, 0x7, 0xc19, 0x1, 0xd, 0x5, 0x1, 0x4, 0x80000000, 0xb06f, 0x5, 0x5, 0x7d10, 0x319, 0x7, 0xfffffff8, 0x3ff, 0x2, 0x10001, 0x2, 0x3e3, 0x26, 0x8, 0x5e, 0x8, 0x8, 0x7, 0xc, 0xc, 0xb, 0x5, 0x0, 0x6, 0x5, 0x0, 0x6, 0x0, 0x7f, 0x7, 0xd, 0x3, 0x0, 0xff, 0xfffff801, 0x5, 0x10, 0x6, 0x8, 0x8, 0x8, 0x8, 0x8, 0xb, 0x1a95, 0x2, 0xa, 0x8001, 0x7, 0x7f, 0x0, 0x5, 0x8, 0x0, 0x2, 0x1800000, 0x10, 0x9, 0x5, 0x400, 0x8, 0x80000000, 0x1, 0x97f, 0xd, 0x5, 0x1, 0x101, 0x6, 0x7ff, 0xf5, 0x6, 0x0, 0x6, 0x1, 0x4, 0x3, 0x67c5, 0x6, 0x8, 0x80000001, 0x9, 0x5, 0x10000, 0x1, 0x890, 0x72, 0xfff, 0x3, 0xc, 0x7, 0x2, 0x3, 0x5, 0x9, 0x6, 0x5, 0x8001, 0x1, 0x8, 0x0, 0x1, 0xfff, 0x1, 0x3, 0xd6, 0x40, 0xfffffff9, 0x4, 0x8, 0xf5, 0x2, 0x3ff, 0x7fff, 0x10, 0x8]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x1, 0x3, 0x9, 0x0, {0xb, 0x2, 0x5dfe, 0x10, 0x3, 0x7}, {0xdc, 0x1, 0x3ff, 0x3, 0x4, 0x8368}, 0x6, 0xce, 0x2a}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x8d8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000000)={{{@in6=@mcast2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@mcast2}}, &(0x7f0000000100)=0xe8) syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fowjer>,:..#,-%),,&,fscontext,func,\x00\x00\x00\x00\x00\x00\x00\x00\x00,fowner>', @ANYRESDEC=r10, @ANYBLOB=',fscontext=root,fsmagic=0x0000000000000005,fsname=,seclabel,\x00'], 0x1, 0x156, &(0x7f0000000240)="$eJzs271OwlAYxvHnAALiF4o6GAcTB12kfEQSN70UApUQixpxgTjoFXgN3pkXoIObkxgawEQ+mkjsifb/W/o2T0/6djjtu1QAIutUezIySvZPdtPZx5yx3RKAkPQGx48egOiJv9vuAIAdr2fSs6SXt7ua4smx+aCf3w/zWGo8f5B2EoPcpLX4fb54kg6G601m4vrMKF+amB/uD++/rBWtak1ZrWtDuUFeH63fnmMSAgAgOozyQfnMC2I6b3puYWq+4OfFqXnSz0sBeXlqnvLzfO3Kq89qE8AEsTn3fzxg/ycC9j8Ae9qd7kXV89wbCgoKilFh+80E4Lc5t61rp93pHjVb1YbbcC9LhcJJ5bhcrJQcf7J3Zs/3AP6ur4++7U4AAAAAAAAAAAAAAMBPbWrLdgsAAAAAQhLG70S2nxEAAAAAAAAAAAAAAAAAgP/mMwAA//9E/CIc") 1.736833391s ago: executing program 3 (id=479): bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f00000000c0)={@empty, @private=0xa010101, 0x2, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x100101, 0x0, 0x801}, 0x3c) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x24004080) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005000100040000000600180000100000060019"], 0x4c}}, 0x0) syz_open_procfs$pagemap(0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000193c0)={0x11, 0x13, &(0x7f0000019300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000206a932500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000000)='sys_enter\x00', r3, 0x0, 0x91}, 0x18) fchown(0xffffffffffffffff, 0x0, 0xee00) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) rt_sigqueueinfo(r4, 0x15, &(0x7f0000000000)={0x2e, 0x6, 0xffff7d34}) syz_clone3(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x83) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[]) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000280)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r5, &(0x7f00000003c0)={&(0x7f0000000200)=@name={0x1e, 0x2, 0x0, {{0x43, 0x3}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x26044885}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) rseq(0x0, 0x0, 0x0, 0x0) 668.779966ms ago: executing program 1 (id=480): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = accept4(0xffffffffffffffff, &(0x7f0000000080)=@xdp, &(0x7f0000000100)=0x80, 0x80000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000280)={[{@nobarrier}, {@gid={'gid', 0x3d, r4}}, {@creator={'creator', 0x3d, "bd3d66f1"}}, {@creator={'creator', 0x3d, "64eb8ba9"}}, {@nodecompose}, {@umask}, {@uid={'uid', 0x3d, r3}}, {@nodecompose}]}, 0x3, 0x6a4, &(0x7f0000001b40)="$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") fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) splice(r0, &(0x7f0000000040)=0x7, r1, &(0x7f0000000140)=0x101000000, 0x7f98, 0x8) r5 = syz_open_dev$media(&(0x7f0000000000), 0xdc54, 0x2) pwritev(r5, &(0x7f0000000280)=[{&(0x7f0000000540)="e65c", 0x2}, {0x0}], 0x2, 0x3, 0x5) syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000200), 0x1, 0x16c, &(0x7f0000000240)="$eJzsVc1K80AUPdNOf75vVdCVIBQUrYI2naq4cNGH6ANY0liLqT9NQFuKjTufwG23Ln0E3yKvIIqLunIjkcncjGP2CkKyyLnnXu6ZexM4c+xdeCUAH/OJDVTAAHAs4oUxcAALMgGgXVL4XlR4QPyJK1ym/D3hM6E3Gp90XNcZ/mDwG2dkQRZkwV8LvmjzJofX2MvC+cQmU9NPF4BZz6dqSxzII9J1aXqSrAOo+4Pzujcab/UHnZ7Tc06FaO5ZO5a1K+pHfdex1JsZ8jmSlrgBQHrpP6NeMI7/nxo1Gf2ajNfsk557SPXayvc+eVYURREMZHjUveTnkKu3sYYygMuAGdlqrMIRr9MCQ55Ig6dmy6EcF7btM7c7BQNL2mbgWqMRoqCJMEmzEiRr3HKlekf3yX6QLDQlrBK2CGeEIWFygz2QAo8V3ojVAqCIq47vDxsypSKdEzonKoH5KVdB/81Ye5P4ZwAAAP//xwlU6g==") 81.39624ms ago: executing program 0 (id=481): r0 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r0, 0x0, 0x0) keyctl$read(0xb, r0, &(0x7f00000010c0)=""/4096, 0x1000) 0s ago: executing program 3 (id=482): syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x6c, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x4a, 0x0, @wg=@data={0x4, 0x0, 0x0, '\x00'/50}}}}}}, 0x0) kernel console output (not intermixed with test programs): 88fc98ebe9 [ 149.323011][ T6446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.323031][ T6446] RSP: 002b:00007f88fd86a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 149.323056][ T6446] RAX: ffffffffffffffda RBX: 00007f88fcbb5fa0 RCX: 00007f88fc98ebe9 [ 149.323074][ T6446] RDX: 0000000000000019 RSI: 0000000000000001 RDI: 0000000000000003 [ 149.323089][ T6446] RBP: 00007f88fd86a090 R08: 0000200000003080 R09: 0000000000000000 [ 149.323112][ T6446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 149.323126][ T6446] R13: 00007f88fcbb6038 R14: 00007f88fcbb5fa0 R15: 00007fff86fc9e38 [ 149.323164][ T6446] [ 149.646128][ T6049] team0 (unregistering): Port device team_slave_1 removed [ 149.678489][ T6049] team0 (unregistering): Port device team_slave_0 removed [ 150.305285][ T6450] loop0: detected capacity change from 0 to 40427 [ 150.322288][ T6450] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 150.330040][ T6450] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 150.363598][ T6450] F2FS-fs (loop0): invalid crc value [ 150.463246][ T6450] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 150.476247][ T6450] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 150.483363][ T6450] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 150.564070][ T6456] loop5: detected capacity change from 0 to 64 [ 150.620906][ T6458] loop1: detected capacity change from 0 to 64 [ 152.269490][ T6448] loop4: detected capacity change from 0 to 40427 [ 152.328545][ T6448] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 152.393663][ T6448] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 152.484103][ T6448] F2FS-fs (loop4): invalid crc value [ 152.804751][ T6203] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 152.929985][ T6203] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 152.970236][ T6448] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 153.062552][ T6478] loop0: detected capacity change from 0 to 64 [ 153.142724][ T6203] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 153.302485][ T6203] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 153.517161][ T6467] loop3: detected capacity change from 0 to 32768 [ 154.354995][ T6203] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.421449][ T6203] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.505138][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.512304][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.615477][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.622627][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.769325][ T6499] loop0: detected capacity change from 0 to 256 [ 154.777126][ T6498] FAULT_INJECTION: forcing a failure. [ 154.777126][ T6498] name failslab, interval 1, probability 0, space 0, times 0 [ 154.809618][ T6499] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 154.897281][ T6499] netlink: 56 bytes leftover after parsing attributes in process `syz.0.121'. [ 154.945253][ T6498] CPU: 1 UID: 0 PID: 6498 Comm: syz.3.120 Not tainted 6.16.0-syzkaller-12187-g0227b49b5027 #0 PREEMPT(full) [ 154.945287][ T6498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 154.945301][ T6498] Call Trace: [ 154.945311][ T6498] [ 154.945321][ T6498] dump_stack_lvl+0x189/0x250 [ 154.945355][ T6498] ? __pfx____ratelimit+0x10/0x10 [ 154.945390][ T6498] ? __pfx_dump_stack_lvl+0x10/0x10 [ 154.945420][ T6498] ? __pfx__printk+0x10/0x10 [ 154.945462][ T6498] ? __pfx___might_resched+0x10/0x10 [ 154.945491][ T6498] should_fail_ex+0x414/0x560 [ 154.945529][ T6498] should_failslab+0xa8/0x100 [ 154.945569][ T6498] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 154.945611][ T6498] ? __alloc_skb+0x112/0x2d0 [ 154.945654][ T6498] __alloc_skb+0x112/0x2d0 [ 154.945696][ T6498] netlink_sendmsg+0x5c6/0xb30 [ 154.945745][ T6498] ? __pfx_netlink_sendmsg+0x10/0x10 [ 154.945785][ T6498] ? srso_alias_return_thunk+0x5/0xfbef5 [ 154.945813][ T6498] ? aa_sock_msg_perm+0xf1/0x1d0 [ 154.945853][ T6498] ? srso_alias_return_thunk+0x5/0xfbef5 [ 154.945881][ T6498] ? srso_alias_return_thunk+0x5/0xfbef5 [ 154.945910][ T6498] ? __pfx_netlink_sendmsg+0x10/0x10 [ 154.945948][ T6498] __sock_sendmsg+0x21c/0x270 [ 154.945984][ T6498] ____sys_sendmsg+0x505/0x830 [ 154.946016][ T6498] ? __pfx_____sys_sendmsg+0x10/0x10 [ 154.946051][ T6498] ? srso_alias_return_thunk+0x5/0xfbef5 [ 154.946079][ T6498] ? import_iovec+0x74/0xa0 [ 154.946110][ T6498] ___sys_sendmsg+0x21f/0x2a0 [ 154.946138][ T6498] ? __pfx____sys_sendmsg+0x10/0x10 [ 154.946170][ T6498] ? srso_alias_return_thunk+0x5/0xfbef5 [ 154.946235][ T6498] ? __fget_files+0x2a/0x420 [ 154.946271][ T6498] ? srso_alias_return_thunk+0x5/0xfbef5 [ 154.946299][ T6498] ? __fget_files+0x3a0/0x420 [ 154.946349][ T6498] __x64_sys_sendmsg+0x19b/0x260 [ 154.946377][ T6498] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 154.946413][ T6498] ? __pfx_ksys_write+0x10/0x10 [ 154.946444][ T6498] ? rcu_is_watching+0x15/0xb0 [ 154.946475][ T6498] ? do_syscall_64+0xbe/0x3b0 [ 154.946516][ T6498] do_syscall_64+0xfa/0x3b0 [ 154.946550][ T6498] ? lockdep_hardirqs_on+0x9c/0x150 [ 154.946588][ T6498] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.946611][ T6498] ? srso_alias_return_thunk+0x5/0xfbef5 [ 154.946639][ T6498] ? exc_page_fault+0x9f/0xf0 [ 154.946674][ T6498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.946697][ T6498] RIP: 0033:0x7fb2d2b8ebe9 [ 154.946717][ T6498] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.946737][ T6498] RSP: 002b:00007fb2d39a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 154.946762][ T6498] RAX: ffffffffffffffda RBX: 00007fb2d2db5fa0 RCX: 00007fb2d2b8ebe9 [ 154.946780][ T6498] RDX: 0000000020008010 RSI: 00002000000002c0 RDI: 0000000000000003 [ 154.946797][ T6498] RBP: 00007fb2d39a7090 R08: 0000000000000000 R09: 0000000000000000 [ 154.946812][ T6498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.946827][ T6498] R13: 00007fb2d2db6038 R14: 00007fb2d2db5fa0 R15: 00007ffd8c075768 [ 154.946864][ T6498] [ 155.857051][ T6513] loop4: detected capacity change from 0 to 64 [ 157.985490][ T6532] loop3: detected capacity change from 0 to 512 [ 158.023248][ T6532] EXT4-fs: Ignoring removed mblk_io_submit option [ 158.211324][ T6532] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 158.235606][ T6532] EXT4-fs (loop3): orphan cleanup on readonly fs [ 158.372596][ T6532] Quota error (device loop3): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 158.375988][ T6203] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.417178][ T6532] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 158.616330][ T6532] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 159.035755][ T6532] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.129: bg 0: block 40: padding at end of block bitmap is not set [ 159.107313][ T6532] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 159.164475][ T6532] EXT4-fs (loop3): 1 truncate cleaned up [ 159.281665][ T6561] loop4: detected capacity change from 0 to 512 [ 159.307547][ T6532] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 159.376552][ T6561] EXT4-fs: Ignoring removed nobh option [ 159.514764][ T6561] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.134: iget: bad i_size value: 38620345925642 [ 159.543942][ T6569] netlink: 10 bytes leftover after parsing attributes in process `syz.1.136'. [ 159.613430][ T6561] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.134: couldn't read orphan inode 15 (err -117) [ 159.731293][ T6561] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.780517][ T6574] loop0: detected capacity change from 0 to 8192 [ 160.855375][ T6583] loop5: detected capacity change from 0 to 4096 [ 160.906131][ T6574] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 160.925968][ T6583] ======================================================= [ 160.925968][ T6583] WARNING: The mand mount option has been deprecated and [ 160.925968][ T6583] and is ignored by this kernel. Remove the mand [ 160.925968][ T6583] option from the mount to silence this warning. [ 160.925968][ T6583] ======================================================= [ 161.246648][ T6583] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 162.012825][ T6574] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 162.278902][ T6574] FAT-fs (loop0): Filesystem has been set read-only [ 162.296397][ T6574] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 162.304700][ T5857] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.529904][ T6574] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 162.622134][ T6583] ntfs3(loop5): Failed to load $UpCase (-22). [ 162.696883][ T6203] veth0_vlan: entered promiscuous mode [ 162.807195][ T6203] veth1_vlan: entered promiscuous mode [ 162.840967][ T3515] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm kworker/u8:6: bg 0: block 5: invalid block bitmap [ 162.946996][ T3515] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1104 with error 28 [ 162.989911][ T3515] EXT4-fs (loop4): This should not happen!! Data will be lost [ 162.989911][ T3515] [ 163.011273][ T6599] loop3: detected capacity change from 0 to 64 [ 163.044547][ T3515] EXT4-fs (loop4): Total free blocks count 0 [ 163.061576][ T6203] veth0_macvtap: entered promiscuous mode [ 163.067563][ T3515] EXT4-fs (loop4): Free/Dirty block details [ 163.097194][ T3515] EXT4-fs (loop4): free_blocks=0 [ 163.118089][ T3515] EXT4-fs (loop4): dirty_blocks=1108 [ 163.163718][ T3515] EXT4-fs (loop4): Block reservation details [ 163.169733][ T3515] EXT4-fs (loop4): i_reserved_data_blocks=1108 [ 163.330068][ T6203] veth1_macvtap: entered promiscuous mode [ 164.024679][ T5858] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.110538][ T6203] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 164.113006][ T5854] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 164.161388][ T6203] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 164.402188][ T4391] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.411840][ T4391] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.557489][ T4391] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.588860][ T4391] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.853781][ T6059] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 165.452601][ T6059] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 165.962210][ T6059] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 165.975247][ T6059] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 165.986033][ T6059] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 166.012176][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 166.036354][ T6059] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 166.083307][ T6059] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.153091][ T6059] usb 4-1: config 0 descriptor?? [ 166.193332][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 166.220236][ T4391] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.245264][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 166.269407][ T4391] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.280807][ T9] usb 5-1: config 0 has an invalid interface number: 251 but max is 1 [ 166.364606][ T9] usb 5-1: config 0 has an invalid interface number: 2 but max is 1 [ 166.392264][ T975] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 166.398222][ T6059] plantronics 0003:047F:FFFF.0001: ignoring exceeding usage max [ 166.412211][ T9] usb 5-1: config 0 has no interface number 0 [ 166.425603][ T9] usb 5-1: config 0 has no interface number 1 [ 166.452496][ T9] usb 5-1: config 0 interface 251 has no altsetting 0 [ 166.461459][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.491385][ T9] usb 5-1: config 0 interface 2 has no altsetting 0 [ 166.518502][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.535681][ T6059] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 166.574963][ T975] usb 6-1: Using ep0 maxpacket: 16 [ 166.576319][ T9] usb 5-1: New USB device found, idVendor=413c, idProduct=81a4, bcdDevice=ae.9f [ 166.616427][ T975] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.628492][ T6614] netlink: 44 bytes leftover after parsing attributes in process `syz.3.145'. [ 166.629759][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.687603][ T9] usb 5-1: Product: syz [ 166.694795][ T975] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.726489][ T9] usb 5-1: Manufacturer: syz [ 166.749956][ T975] usb 6-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 166.765714][ T9] usb 5-1: SerialNumber: syz [ 166.795283][ T975] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.813446][ T9] usb 5-1: config 0 descriptor?? [ 166.871557][ T5951] usb 4-1: USB disconnect, device number 3 [ 166.882013][ T975] usb 6-1: config 0 descriptor?? [ 167.089765][ T6631] fido_id[6631]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 167.427629][ T6637] loop6: detected capacity change from 0 to 40427 [ 167.490715][ T6637] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 167.498569][ T6637] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 167.502215][ T30] audit: type=1800 audit(1754742776.518:2): pid=6640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.150" name="bus" dev="tmpfs" ino=182 res=0 errno=0 [ 167.639931][ T6637] F2FS-fs (loop6): invalid crc value [ 167.783150][ T6637] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 167.795712][ T6617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.804518][ T6617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.858941][ T6637] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 167.866612][ T6637] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 167.889272][ T9] usb 5-1: selecting invalid altsetting 0 [ 167.940156][ T9] usb 5-1: Could not set interface, error -22 [ 168.102290][ T975] hid-picolcd 0003:04D8:F002.0002: unknown main item tag 0x0 [ 168.109723][ T975] hid-picolcd 0003:04D8:F002.0002: unknown main item tag 0x0 [ 168.127809][ T9] usb 5-1: USB disconnect, device number 3 [ 168.936521][ T975] hid-picolcd 0003:04D8:F002.0002: unknown main item tag 0x0 [ 168.976670][ T975] hid-picolcd 0003:04D8:F002.0002: unknown main item tag 0x0 [ 169.005535][ T975] hid-picolcd 0003:04D8:F002.0002: unknown main item tag 0x0 [ 169.031267][ T975] hid-picolcd 0003:04D8:F002.0002: unknown main item tag 0x0 [ 169.121856][ T975] hid-picolcd 0003:04D8:F002.0002: unknown main item tag 0x0 [ 169.160535][ T975] hid-picolcd 0003:04D8:F002.0002: unknown main item tag 0x0 [ 169.209054][ T975] hid-picolcd 0003:04D8:F002.0002: unknown main item tag 0x0 [ 169.254495][ T975] hid-picolcd 0003:04D8:F002.0002: unknown main item tag 0x0 [ 169.265674][ T6651] loop1: detected capacity change from 0 to 64 [ 169.276191][ T6651] minix: Unknown parameter '' [ 169.364517][ T975] hid-picolcd 0003:04D8:F002.0002: No report with id 0xf3 found [ 169.432248][ T975] hid-picolcd 0003:04D8:F002.0002: No report with id 0xf4 found [ 169.514306][ T975] usb 6-1: USB disconnect, device number 2 [ 169.655443][ T6660] FAULT_INJECTION: forcing a failure. [ 169.655443][ T6660] name failslab, interval 1, probability 0, space 0, times 0 [ 169.748231][ T6660] CPU: 0 UID: 0 PID: 6660 Comm: syz.1.155 Not tainted 6.16.0-syzkaller-12187-g0227b49b5027 #0 PREEMPT(full) [ 169.748265][ T6660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 169.748279][ T6660] Call Trace: [ 169.748288][ T6660] [ 169.748298][ T6660] dump_stack_lvl+0x189/0x250 [ 169.748334][ T6660] ? __pfx____ratelimit+0x10/0x10 [ 169.748378][ T6660] ? __pfx_dump_stack_lvl+0x10/0x10 [ 169.748407][ T6660] ? __pfx__printk+0x10/0x10 [ 169.748452][ T6660] ? __pfx___might_resched+0x10/0x10 [ 169.748474][ T6660] ? srso_alias_return_thunk+0x5/0xfbef5 [ 169.748509][ T6660] should_fail_ex+0x414/0x560 [ 169.748545][ T6660] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 169.748583][ T6660] should_failslab+0xa8/0x100 [ 169.748620][ T6660] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 169.748655][ T6660] kmem_cache_alloc_lru_noprof+0x78/0x3d0 [ 169.748688][ T6660] ? shmem_alloc_inode+0x28/0x40 [ 169.748729][ T6660] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 169.748766][ T6660] shmem_alloc_inode+0x28/0x40 [ 169.748801][ T6660] alloc_inode+0x6a/0x1b0 [ 169.748837][ T6660] new_inode+0x22/0x170 [ 169.748878][ T6660] shmem_get_inode+0x346/0xe90 [ 169.748914][ T6660] ? srso_alias_return_thunk+0x5/0xfbef5 [ 169.748952][ T6660] __shmem_file_setup+0x163/0x300 [ 169.748989][ T6660] __se_sys_memfd_create+0x308/0x780 [ 169.749020][ T6660] do_syscall_64+0xfa/0x3b0 [ 169.749054][ T6660] ? lockdep_hardirqs_on+0x9c/0x150 [ 169.749085][ T6660] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.749108][ T6660] ? srso_alias_return_thunk+0x5/0xfbef5 [ 169.749135][ T6660] ? exc_page_fault+0x9f/0xf0 [ 169.749169][ T6660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.749192][ T6660] RIP: 0033:0x7fbf36f8ebe9 [ 169.749213][ T6660] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.749232][ T6660] RSP: 002b:00007fbf351f5e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 169.749257][ T6660] RAX: ffffffffffffffda RBX: 0000000000000516 RCX: 00007fbf36f8ebe9 [ 169.749274][ T6660] RDX: 00007fbf351f5ef0 RSI: 0000000000000000 RDI: 00007fbf370127e8 [ 169.749291][ T6660] RBP: 0000200000000600 R08: 00007fbf351f5bb7 R09: 00007fbf351f5e40 [ 169.749308][ T6660] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000580 [ 169.749324][ T6660] R13: 00007fbf351f5ef0 R14: 00007fbf351f5eb0 R15: 00002000000005c0 [ 169.749367][ T6660] [ 170.034501][ T6667] FAULT_INJECTION: forcing a failure. [ 170.034501][ T6667] name failslab, interval 1, probability 0, space 0, times 0 [ 170.243702][ T6667] CPU: 0 UID: 0 PID: 6667 Comm: syz.4.158 Not tainted 6.16.0-syzkaller-12187-g0227b49b5027 #0 PREEMPT(full) [ 170.243736][ T6667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 170.243751][ T6667] Call Trace: [ 170.243761][ T6667] [ 170.243771][ T6667] dump_stack_lvl+0x189/0x250 [ 170.243807][ T6667] ? __pfx____ratelimit+0x10/0x10 [ 170.243842][ T6667] ? __pfx_dump_stack_lvl+0x10/0x10 [ 170.243872][ T6667] ? __pfx__printk+0x10/0x10 [ 170.243915][ T6667] ? __pfx___might_resched+0x10/0x10 [ 170.243937][ T6667] ? srso_alias_return_thunk+0x5/0xfbef5 [ 170.243973][ T6667] should_fail_ex+0x414/0x560 [ 170.244010][ T6667] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 170.244049][ T6667] should_failslab+0xa8/0x100 [ 170.244088][ T6667] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 170.244125][ T6667] kmem_cache_alloc_lru_noprof+0x78/0x3d0 [ 170.244160][ T6667] ? shmem_alloc_inode+0x28/0x40 [ 170.244203][ T6667] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 170.244239][ T6667] shmem_alloc_inode+0x28/0x40 [ 170.244277][ T6667] alloc_inode+0x6a/0x1b0 [ 170.244316][ T6667] new_inode+0x22/0x170 [ 170.244359][ T6667] shmem_get_inode+0x346/0xe90 [ 170.244397][ T6667] ? srso_alias_return_thunk+0x5/0xfbef5 [ 170.244437][ T6667] __shmem_file_setup+0x163/0x300 [ 170.244475][ T6667] __se_sys_memfd_create+0x308/0x780 [ 170.244508][ T6667] do_syscall_64+0xfa/0x3b0 [ 170.244543][ T6667] ? lockdep_hardirqs_on+0x9c/0x150 [ 170.244576][ T6667] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.244605][ T6667] ? srso_alias_return_thunk+0x5/0xfbef5 [ 170.244633][ T6667] ? exc_page_fault+0x9f/0xf0 [ 170.244668][ T6667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.244692][ T6667] RIP: 0033:0x7f5cfc38ebe9 [ 170.244713][ T6667] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.244733][ T6667] RSP: 002b:00007f5cfd23ae18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 170.244758][ T6667] RAX: ffffffffffffffda RBX: 000000000001f6bf RCX: 00007f5cfc38ebe9 [ 170.244776][ T6667] RDX: 00007f5cfd23aef0 RSI: 0000000000000000 RDI: 00007f5cfc4127e8 [ 170.244793][ T6667] RBP: 000020000001f780 R08: 00007f5cfd23abb7 R09: 00007f5cfd23ae40 [ 170.244810][ T6667] R10: 000000000000000a R11: 0000000000000202 R12: 000020000001f700 [ 170.244826][ T6667] R13: 00007f5cfd23aef0 R14: 00007f5cfd23aeb0 R15: 000020000001f740 [ 170.244863][ T6667] [ 170.775730][ T5969] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 170.952193][ T5969] usb 6-1: Using ep0 maxpacket: 32 [ 170.970221][ T5969] usb 6-1: config 83 has an invalid interface number: 125 but max is 0 [ 170.992104][ T5969] usb 6-1: config 83 has an invalid descriptor of length 0, skipping remainder of the config [ 171.450623][ T6682] loop1: detected capacity change from 0 to 24 [ 171.469342][ T6682] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 171.889305][ T5969] usb 6-1: config 83 has no interface number 0 [ 171.895107][ T6682] romfs: bad initial checksum on dev loop1. [ 171.895661][ T5969] usb 6-1: config 83 interface 125 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 171.914755][ T5969] usb 6-1: config 83 interface 125 has no altsetting 0 [ 171.979628][ T5969] usb 6-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice=8f.54 [ 172.032128][ T5969] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.202555][ T5969] usb 6-1: Product: ㋗活Ủ瘕똔ａ敤燆欔ᓠ⻼䧨ᎆ᳗幌㜳榸ꕌ㦦齼ᐵ䜾 [ 172.222232][ T5969] usb 6-1: Manufacturer: ⠊ [ 172.232426][ T5969] usb 6-1: SerialNumber: syz [ 172.504881][ T5969] iuu_phoenix 6-1:83.125: required endpoints missing [ 172.829504][ T6690] loop1: detected capacity change from 0 to 32768 [ 172.888315][ T6690] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 172.898916][ T6690] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 172.929430][ T5969] usb 6-1: USB disconnect, device number 3 [ 173.117645][ T6690] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 173.136304][ T975] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 173.170702][ T975] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 173.241004][ T6700] netlink: 8 bytes leftover after parsing attributes in process `syz.0.163'. [ 173.357450][ T6700] netlink: 8 bytes leftover after parsing attributes in process `syz.0.163'. [ 173.366359][ T6703] mmap: syz.5.164 (6703) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 173.490941][ T6703] netlink: 8 bytes leftover after parsing attributes in process `syz.5.164'. [ 173.544992][ T6703] netlink: 8 bytes leftover after parsing attributes in process `syz.5.164'. [ 173.626457][ T975] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 455ms [ 173.655923][ T6703] gtp0: entered promiscuous mode [ 173.679563][ T975] gfs2: fsid=syz:syz.0: jid=0: Done [ 173.696958][ T6703] gtp0: entered allmulticast mode [ 173.716428][ T6690] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 173.982950][ T30] audit: type=1326 audit(1754742782.948:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6711 comm="syz.0.167" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f88fc98ebe9 code=0x0 [ 174.522785][ T6722] loop0: detected capacity change from 0 to 4096 [ 176.928018][ T6730] loop4: detected capacity change from 0 to 64 [ 176.982526][ T6722] ntfs3(loop0): Failed to read $UpCase (-4). [ 177.203369][ T1204] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 177.488426][ T1204] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 177.538646][ T1204] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.582040][ T1204] usb 6-1: config 0 descriptor?? [ 180.443532][ T1204] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 181.284648][ T1204] [drm:udl_init] *ERROR* Selecting channel failed [ 181.358796][ T6754] loop3: detected capacity change from 0 to 64 [ 181.693689][ T1204] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 181.701649][ T1204] [drm] Initialized udl on minor 2 [ 181.814004][ T1204] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 181.903211][ T1204] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 181.953678][ T6765] loop5: detected capacity change from 0 to 128 [ 182.014527][ T9] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 182.060977][ T6765] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 182.065682][ T1204] usb 6-1: USB disconnect, device number 4 [ 182.121668][ T9] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 182.136192][ T6765] ext4 filesystem being mounted at /29/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 182.381429][ T6765] syz.5.180 (pid 6765) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 183.215284][ T6781] loop3: detected capacity change from 0 to 512 [ 183.373268][ T5869] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 183.978320][ T6781] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.056672][ T6781] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.089649][ T6776] loop4: detected capacity change from 0 to 8192 [ 184.156967][ T6796] FAULT_INJECTION: forcing a failure. [ 184.156967][ T6796] name failslab, interval 1, probability 0, space 0, times 0 [ 184.172171][ T1204] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 184.224294][ T30] audit: type=1800 audit(1754742793.278:4): pid=6798 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.184" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 184.259952][ T6796] CPU: 1 UID: 0 PID: 6796 Comm: syz.5.188 Not tainted 6.16.0-syzkaller-12187-g0227b49b5027 #0 PREEMPT(full) [ 184.259982][ T6796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 184.259995][ T6796] Call Trace: [ 184.260003][ T6796] [ 184.260011][ T6796] dump_stack_lvl+0x189/0x250 [ 184.260044][ T6796] ? __pfx____ratelimit+0x10/0x10 [ 184.260072][ T6796] ? __pfx_dump_stack_lvl+0x10/0x10 [ 184.260099][ T6796] ? __pfx__printk+0x10/0x10 [ 184.260135][ T6776] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 184.260141][ T6796] ? __pfx___might_resched+0x10/0x10 [ 184.260164][ T6796] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.260197][ T6796] should_fail_ex+0x414/0x560 [ 184.260235][ T6796] should_failslab+0xa8/0x100 [ 184.260273][ T6796] kmem_cache_alloc_noprof+0x73/0x3c0 [ 184.260305][ T6796] ? security_inode_alloc+0x39/0x330 [ 184.260335][ T6796] security_inode_alloc+0x39/0x330 [ 184.260361][ T6796] inode_init_always_gfp+0x9ed/0xdc0 [ 184.260404][ T6796] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 184.260441][ T6796] alloc_inode+0x82/0x1b0 [ 184.260477][ T6796] new_inode+0x22/0x170 [ 184.260519][ T6796] shmem_get_inode+0x346/0xe90 [ 184.260556][ T6796] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.260594][ T6796] __shmem_file_setup+0x163/0x300 [ 184.260638][ T6796] __se_sys_memfd_create+0x308/0x780 [ 184.260671][ T6796] do_syscall_64+0xfa/0x3b0 [ 184.260705][ T6796] ? lockdep_hardirqs_on+0x9c/0x150 [ 184.260737][ T6796] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.260759][ T6796] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.260786][ T6796] ? exc_page_fault+0x9f/0xf0 [ 184.260820][ T6796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.260844][ T6796] RIP: 0033:0x7fe468f8ebe9 [ 184.260864][ T6796] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 184.260884][ T6796] RSP: 002b:00007fe469dace18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 184.260908][ T6796] RAX: ffffffffffffffda RBX: 000000000001f725 RCX: 00007fe468f8ebe9 [ 184.260925][ T6796] RDX: 00007fe469dacef0 RSI: 0000000000000000 RDI: 00007fe4690127e8 [ 184.260941][ T6796] RBP: 000020000001f800 R08: 00007fe469dacbb7 R09: 00007fe469dace40 [ 184.260958][ T6796] R10: 000000000000000a R11: 0000000000000202 R12: 000020000001f780 [ 184.260973][ T6796] R13: 00007fe469dacef0 R14: 00007fe469daceb0 R15: 000020000001f7c0 [ 184.261010][ T6796] [ 184.676943][ T6805] loop0: detected capacity change from 0 to 128 [ 184.770470][ T6805] EXT4-fs (loop0): Test dummy encryption mode enabled [ 185.048727][ T1204] usb 2-1: Using ep0 maxpacket: 32 [ 185.163918][ T1204] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 185.222516][ T1204] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.257577][ T1204] usb 2-1: config 0 descriptor?? [ 185.274834][ T6805] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 185.362933][ T6805] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.428737][ T6803] fscrypt: AES-256-XTS using implementation "xts-aes-vaes-avx2" [ 185.438488][ T30] audit: type=1800 audit(1754742794.488:5): pid=6803 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.189" name="file1" dev="loop0" ino=12 res=0 errno=0 [ 185.471698][ T6803] EXT4-fs (loop0): Online defrag not supported for encrypted files [ 185.505131][ T1204] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 185.722163][ T30] audit: type=1800 audit(1754742794.518:6): pid=6803 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.189" name="file2" dev="loop0" ino=13 res=0 errno=0 [ 186.263170][ T6771] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 209: padding at end of block bitmap is not set [ 186.358743][ T1204] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 186.414629][ T6790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.484355][ T5854] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 186.517906][ T1204] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 186.575861][ T1204] usb 2-1: media controller created [ 186.581565][ T6790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.750813][ T1204] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 186.887882][ T5857] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.506308][ T6827] misc userio: Can't change port type on an already running userio instance [ 187.634266][ T1204] az6027: usb out operation failed. (-71) [ 187.677567][ T6834] FAULT_INJECTION: forcing a failure. [ 187.677567][ T6834] name failslab, interval 1, probability 0, space 0, times 0 [ 187.684638][ T1204] az6027: usb out operation failed. (-71) [ 187.744403][ T6834] CPU: 0 UID: 0 PID: 6834 Comm: syz.3.195 Not tainted 6.16.0-syzkaller-12187-g0227b49b5027 #0 PREEMPT(full) [ 187.744437][ T6834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 187.744452][ T6834] Call Trace: [ 187.744462][ T6834] [ 187.744472][ T6834] dump_stack_lvl+0x189/0x250 [ 187.744508][ T6834] ? __pfx____ratelimit+0x10/0x10 [ 187.744543][ T6834] ? __pfx_dump_stack_lvl+0x10/0x10 [ 187.744573][ T6834] ? __pfx__printk+0x10/0x10 [ 187.744615][ T6834] ? __pfx___might_resched+0x10/0x10 [ 187.744665][ T6834] ? srso_alias_return_thunk+0x5/0xfbef5 [ 187.744701][ T6834] should_fail_ex+0x414/0x560 [ 187.744740][ T6834] should_failslab+0xa8/0x100 [ 187.744780][ T6834] kmem_cache_alloc_noprof+0x73/0x3c0 [ 187.744813][ T6834] ? security_inode_alloc+0x39/0x330 [ 187.744843][ T6834] security_inode_alloc+0x39/0x330 [ 187.744870][ T6834] inode_init_always_gfp+0x9ed/0xdc0 [ 187.744915][ T6834] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 187.744954][ T6834] alloc_inode+0x82/0x1b0 [ 187.744992][ T6834] new_inode+0x22/0x170 [ 187.745036][ T6834] shmem_get_inode+0x346/0xe90 [ 187.745074][ T6834] ? srso_alias_return_thunk+0x5/0xfbef5 [ 187.745113][ T6834] __shmem_file_setup+0x163/0x300 [ 187.745151][ T6834] __se_sys_memfd_create+0x308/0x780 [ 187.745184][ T6834] do_syscall_64+0xfa/0x3b0 [ 187.745219][ T6834] ? lockdep_hardirqs_on+0x9c/0x150 [ 187.745252][ T6834] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.745276][ T6834] ? srso_alias_return_thunk+0x5/0xfbef5 [ 187.745303][ T6834] ? exc_page_fault+0x9f/0xf0 [ 187.745338][ T6834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.745362][ T6834] RIP: 0033:0x7fb2d2b8ebe9 [ 187.745383][ T6834] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.745401][ T6834] RSP: 002b:00007fb2d39a6e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 187.745425][ T6834] RAX: ffffffffffffffda RBX: 0000000000000516 RCX: 00007fb2d2b8ebe9 [ 187.745441][ T6834] RDX: 00007fb2d39a6ef0 RSI: 0000000000000000 RDI: 00007fb2d2c127e8 [ 187.745457][ T6834] RBP: 0000200000000600 R08: 00007fb2d39a6bb7 R09: 00007fb2d39a6e40 [ 187.745473][ T6834] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000580 [ 187.745487][ T6834] R13: 00007fb2d39a6ef0 R14: 00007fb2d39a6eb0 R15: 00002000000005c0 [ 187.745522][ T6834] [ 187.745718][ T1204] stb0899_attach: Driver disabled by Kconfig [ 188.108766][ T6840] netlink: 12 bytes leftover after parsing attributes in process `syz.4.196'. [ 188.958100][ T1204] az6027: no front-end attached [ 188.958100][ T1204] [ 188.969104][ T1204] az6027: usb out operation failed. (-71) [ 189.103494][ T5969] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 189.562196][ T1204] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 189.627891][ T1204] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input6 [ 189.644844][ T5969] usb 5-1: Using ep0 maxpacket: 16 [ 189.668222][ T6857] loop6: detected capacity change from 0 to 512 [ 189.676783][ T5969] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.719448][ T30] audit: type=1326 audit(1754742798.768:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6841 comm="syz.3.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2d2b8ebe9 code=0x7ffc0000 [ 189.745479][ T5969] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.758360][ T6857] EXT4-fs: Ignoring removed mblk_io_submit option [ 189.779493][ T1204] dvb-usb: schedule remote query interval to 400 msecs. [ 189.807930][ T5969] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 189.829234][ T1204] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 189.839488][ T30] audit: type=1326 audit(1754742798.808:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6841 comm="syz.3.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb2d2b90b07 code=0x7ffc0000 [ 189.869674][ T5969] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 189.880258][ T1204] usb 2-1: USB disconnect, device number 2 [ 189.928235][ T5969] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.973115][ T6857] EXT4-fs (loop6): orphan cleanup on readonly fs [ 189.994130][ T30] audit: type=1326 audit(1754742798.808:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6841 comm="syz.3.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fb2d2b90a7c code=0x7ffc0000 [ 190.036873][ T6857] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -13 [ 190.076784][ T6857] EXT4-fs error (device loop6): ext4_clear_blocks:876: inode #13: comm syz.6.202: attempt to clear invalid blocks 2 len 1 [ 190.110102][ T5969] usb 5-1: config 0 descriptor?? [ 190.110392][ T6860] loop0: detected capacity change from 0 to 32768 [ 190.124201][ T6860] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.203 (6860) [ 190.138663][ T30] audit: type=1326 audit(1754742798.808:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6841 comm="syz.3.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fb2d2b909b4 code=0x7ffc0000 [ 190.198035][ T6860] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 190.208324][ T6860] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 190.216902][ T6860] BTRFS info (device loop0): using free-space-tree [ 190.224642][ T6857] EXT4-fs (loop6): Remounting filesystem read-only [ 190.260719][ T6857] EXT4-fs (loop6): 1 truncate cleaned up [ 190.261329][ T30] audit: type=1326 audit(1754742798.808:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6841 comm="syz.3.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fb2d2b909b4 code=0x7ffc0000 [ 190.342464][ T6059] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 190.361761][ T30] audit: type=1326 audit(1754742798.808:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6841 comm="syz.3.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fb2d2b8d84a code=0x7ffc0000 [ 190.392470][ T30] audit: type=1326 audit(1754742798.848:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6841 comm="syz.3.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2d2b8ebe9 code=0x7ffc0000 [ 190.417782][ T6857] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 190.518283][ T6059] usb 6-1: Using ep0 maxpacket: 16 [ 190.526885][ T30] audit: type=1326 audit(1754742798.848:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6841 comm="syz.3.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2d2b8ebe9 code=0x7ffc0000 [ 190.533362][ T6857] EXT4-fs (loop6): Quota file not on filesystem root. Journaled quota will not work [ 190.549771][ T30] audit: type=1326 audit(1754742798.848:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6841 comm="syz.3.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fb2d2b8ebe9 code=0x7ffc0000 [ 190.581167][ T30] audit: type=1326 audit(1754742798.848:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6841 comm="syz.3.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2d2b8ebe9 code=0x7ffc0000 [ 190.608785][ T6059] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.634451][ T5969] hid_parser_main: 1 callbacks suppressed [ 190.634477][ T5969] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 190.757672][ T6059] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.801089][ T5969] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 190.910693][ T6059] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 190.925498][ T1204] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 190.952545][ T5969] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 191.667773][ T5969] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 191.684687][ T6059] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 191.702134][ T5969] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 191.894528][ T6902] netlink: 25 bytes leftover after parsing attributes in process `syz.3.208'. [ 191.953753][ T6059] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.349681][ T6059] usb 6-1: config 0 descriptor?? [ 192.509207][ T6203] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.869230][ T5969] microsoft 0003:045E:07DA.0003: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 192.925162][ T5969] microsoft 0003:045E:07DA.0003: no inputs found [ 192.931562][ T5969] microsoft 0003:045E:07DA.0003: could not initialize ff, continuing anyway [ 192.984964][ T6907] loop6: detected capacity change from 0 to 512 [ 193.046050][ T6907] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 193.068909][ T5854] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 193.079516][ T5969] usb 5-1: USB disconnect, device number 4 [ 193.568397][ T6918] FAULT_INJECTION: forcing a failure. [ 193.568397][ T6918] name failslab, interval 1, probability 0, space 0, times 0 [ 193.601487][ T6918] CPU: 1 UID: 0 PID: 6918 Comm: syz.3.211 Not tainted 6.16.0-syzkaller-12187-g0227b49b5027 #0 PREEMPT(full) [ 193.601523][ T6918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 193.601538][ T6918] Call Trace: [ 193.601548][ T6918] [ 193.601558][ T6918] dump_stack_lvl+0x189/0x250 [ 193.601594][ T6918] ? __pfx____ratelimit+0x10/0x10 [ 193.601629][ T6918] ? __pfx_dump_stack_lvl+0x10/0x10 [ 193.601667][ T6918] ? __pfx__printk+0x10/0x10 [ 193.601711][ T6918] ? __pfx___might_resched+0x10/0x10 [ 193.601741][ T6918] should_fail_ex+0x414/0x560 [ 193.601780][ T6918] should_failslab+0xa8/0x100 [ 193.601820][ T6918] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 193.601857][ T6918] ? __alloc_skb+0x112/0x2d0 [ 193.601901][ T6918] __alloc_skb+0x112/0x2d0 [ 193.601943][ T6918] tcp_stream_alloc_skb+0x3d/0x340 [ 193.601980][ T6918] tcp_sendmsg_locked+0xf38/0x5620 [ 193.602080][ T6918] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 193.602111][ T6918] ? __local_bh_enable_ip+0x12d/0x1c0 [ 193.602136][ T6918] ? srso_alias_return_thunk+0x5/0xfbef5 [ 193.602169][ T6918] ? srso_alias_return_thunk+0x5/0xfbef5 [ 193.602197][ T6918] ? __local_bh_enable_ip+0x12d/0x1c0 [ 193.602238][ T6918] tcp_sendmsg+0x2f/0x50 [ 193.602270][ T6918] __sock_sendmsg+0x19c/0x270 [ 193.602306][ T6918] __sys_sendto+0x3bd/0x520 [ 193.602348][ T6918] ? __pfx___sys_sendto+0x10/0x10 [ 193.602383][ T6918] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 193.602436][ T6918] ? __fget_files+0x3a0/0x420 [ 193.602488][ T6918] ? srso_alias_return_thunk+0x5/0xfbef5 [ 193.602517][ T6918] ? ksys_write+0x22a/0x250 [ 193.602554][ T6918] ? __pfx_ksys_write+0x10/0x10 [ 193.602585][ T6918] ? srso_alias_return_thunk+0x5/0xfbef5 [ 193.602622][ T6918] __x64_sys_sendto+0xde/0x100 [ 193.602670][ T6918] do_syscall_64+0xfa/0x3b0 [ 193.602706][ T6918] ? lockdep_hardirqs_on+0x9c/0x150 [ 193.602740][ T6918] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.602764][ T6918] ? srso_alias_return_thunk+0x5/0xfbef5 [ 193.602792][ T6918] ? exc_page_fault+0x9f/0xf0 [ 193.602828][ T6918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.602852][ T6918] RIP: 0033:0x7fb2d2b8ebe9 [ 193.602873][ T6918] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 193.602893][ T6918] RSP: 002b:00007fb2d3965038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 193.602919][ T6918] RAX: ffffffffffffffda RBX: 00007fb2d2db6180 RCX: 00007fb2d2b8ebe9 [ 193.602938][ T6918] RDX: ffffffffffffff94 RSI: 0000200000000000 RDI: 0000000000000003 [ 193.602955][ T6918] RBP: 00007fb2d3965090 R08: 0000000000000000 R09: 0000000000000000 [ 193.602971][ T6918] R10: 000000000000000b R11: 0000000000000246 R12: 0000000000000001 [ 193.602986][ T6918] R13: 00007fb2d2db6218 R14: 00007fb2d2db6180 R15: 00007ffd8c075768 [ 193.603024][ T6918] [ 194.059517][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.066036][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.086213][ T6914] random: crng reseeded on system resumption [ 194.459999][ T6907] EXT4-fs (loop6): 1 orphan inode deleted [ 194.547978][ T6059] shield 0003:0955:7214.0004: unknown main item tag 0x0 [ 194.562125][ T6059] shield 0003:0955:7214.0004: unknown main item tag 0x0 [ 194.569079][ T6059] shield 0003:0955:7214.0004: unknown main item tag 0x0 [ 194.571454][ T6907] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.591137][ T6059] shield 0003:0955:7214.0004: unknown main item tag 0x0 [ 194.599965][ T6059] shield 0003:0955:7214.0004: unknown main item tag 0x0 [ 194.644919][ T6059] input: HID 0955:7214 Haptics as /devices/virtual/input/input7 [ 194.703619][ T6907] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 195.440668][ T6059] shield 0003:0955:7214.0004: Registered Thunderstrike controller [ 195.765020][ T6059] shield 0003:0955:7214.0004: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.5-1/input0 [ 195.892437][ T6944] smc: net device bond0 applied user defined pnetid SYZ2 [ 195.974673][ T6944] smc: net device bond0 erased user defined pnetid SYZ2 [ 195.982183][ T5969] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 196.053409][ T1204] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 196.072191][ T6059] usb 6-1: USB disconnect, device number 5 [ 196.192202][ T1204] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 196.276208][ T5969] usb 7-1: config 8 has an invalid interface number: 223 but max is 0 [ 196.482367][ T1204] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 196.568838][ T5969] usb 7-1: config 8 has no interface number 0 [ 196.783000][ T5969] usb 7-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 196.803819][ T5937] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 196.803877][ T1204] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 196.874186][ T6939] fido_id[6939]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 196.942202][ T5969] usb 7-1: config 8 interface 223 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 197.101125][ T5969] usb 7-1: string descriptor 0 read error: -71 [ 197.458489][ T5937] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 197.512268][ T5969] usb 7-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 197.716854][ T5937] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.722167][ T5969] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.753234][ T5937] usb 2-1: config 0 descriptor?? [ 198.726273][ T5969] usb 7-1: can't set config #8, error -71 [ 198.735928][ T5969] usb 7-1: USB disconnect, device number 2 [ 198.869352][ T6203] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.948994][ T5937] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 199.060761][ T6956] loop4: detected capacity change from 0 to 8192 [ 199.189429][ T6956] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 199.352183][ T6059] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 199.380512][ T5937] gp8psk: usb in 138 operation failed. [ 199.412718][ T5937] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 199.640044][ T5937] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 199.664592][ T5937] usb 2-1: USB disconnect, device number 3 [ 199.682795][ T6059] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 199.798223][ T6976] FAT-fs (loop4): error, clusters badly computed (385 != 18) [ 199.805867][ T6976] FAT-fs (loop4): Filesystem has been set read-only [ 199.813088][ T6976] FAT-fs (loop4): error, clusters badly computed (386 != 19) [ 199.822481][ T6976] FAT-fs (loop4): error, clusters badly computed (387 != 20) [ 199.830353][ T6976] FAT-fs (loop4): error, clusters badly computed (388 != 21) [ 199.839924][ T6976] FAT-fs (loop4): error, clusters badly computed (389 != 22) [ 199.848479][ T6976] FAT-fs (loop4): error, clusters badly computed (390 != 23) [ 199.872234][ T6976] FAT-fs (loop4): error, clusters badly computed (391 != 24) [ 199.883418][ T6976] FAT-fs (loop4): error, clusters badly computed (392 != 25) [ 199.891988][ T6976] FAT-fs (loop4): error, clusters badly computed (393 != 26) [ 199.900523][ T6976] FAT-fs (loop4): error, clusters badly computed (394 != 27) [ 200.262512][ T6977] netlink: 'syz.3.224': attribute type 5 has an invalid length. [ 200.422827][ T6059] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.458829][ T6059] usb 6-1: config 0 descriptor?? [ 200.592811][ T6980] loop0: detected capacity change from 0 to 512 [ 200.737095][ T6980] EXT4-fs (loop0): Test dummy encryption mode enabled [ 200.737192][ T6972] loop6: detected capacity change from 0 to 8192 [ 200.763942][ T6980] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 200.925068][ T6985] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 201.366801][ T6059] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 201.561344][ T6059] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 201.570801][ T6980] EXT4-fs (loop0): 1 truncate cleaned up [ 201.615741][ T6972] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 201.653110][ T6980] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.675730][ T6059] [drm] Initialized udl on minor 2 [ 201.722397][ T6059] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 201.760352][ T6059] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 202.039764][ T6992] loop1: detected capacity change from 0 to 40427 [ 202.054572][ T5969] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 202.063643][ T5969] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 202.109868][ T6992] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 202.117695][ T6992] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 202.174574][ T6992] F2FS-fs (loop1): invalid crc value [ 202.186199][ T6059] usb 6-1: USB disconnect, device number 6 [ 202.383629][ T6993] Driver unsupported XDP return value 0 on prog (id 40) dev N/A, expect packet loss! [ 202.464265][ T6992] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 202.543500][ T6992] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 202.550561][ T6992] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 203.574237][ T5854] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.711701][ T7013] netlink: 12 bytes leftover after parsing attributes in process `syz.5.230'. [ 203.723816][ T7010] netlink: 12 bytes leftover after parsing attributes in process `syz.5.230'. [ 204.925755][ T7021] loop3: detected capacity change from 0 to 2048 [ 204.957061][ T7021] EXT4-fs: Ignoring removed oldalloc option [ 205.189244][ T7016] veth3: entered promiscuous mode [ 205.224995][ T7029] loop0: detected capacity change from 0 to 64 [ 205.238508][ T7029] hfs: type requires a 4 character value [ 205.268580][ T7029] loop0: detected capacity change from 0 to 64 [ 205.889386][ T7021] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.983904][ T5857] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.324023][ T5937] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 208.559266][ T7067] loop1: detected capacity change from 0 to 64 [ 208.667328][ T7076] overlayfs: missing 'workdir' [ 208.759145][ T7067] syz.1.229: attempt to access beyond end of device [ 208.759145][ T7067] loop1: rw=0, sector=234881062, nr_sectors = 2 limit=64 [ 208.804170][ T5937] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 208.830920][ T5937] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 208.861512][ T7067] Buffer I/O error on dev loop1, logical block 117440531, async page read [ 208.878582][ T5937] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 209.487151][ T7067] syz.1.229: attempt to access beyond end of device [ 209.487151][ T7067] loop1: rw=0, sector=8548515840, nr_sectors = 2 limit=64 [ 209.581921][ T5937] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.590789][ T7067] Buffer I/O error on dev loop1, logical block 4274257920, async page read [ 209.632927][ T7056] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 209.661413][ T7067] syz.1.229: attempt to access beyond end of device [ 209.661413][ T7067] loop1: rw=0, sector=301989888, nr_sectors = 2 limit=64 [ 209.675672][ T7067] Buffer I/O error on dev loop1, logical block 150994944, async page read [ 209.723388][ T7067] syz.1.229: attempt to access beyond end of device [ 209.723388][ T7067] loop1: rw=0, sector=234881062, nr_sectors = 2 limit=64 [ 209.769282][ T7067] Buffer I/O error on dev loop1, logical block 117440531, async page read [ 209.787502][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 209.787528][ T30] audit: type=1800 audit(1754742818.838:24): pid=7067 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.229" name="file2" dev="loop1" ino=6 res=0 errno=0 [ 209.823224][ T5937] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 210.090767][ T5937] usb 6-1: USB disconnect, device number 7 [ 210.204258][ T7092] loop6: detected capacity change from 0 to 4096 [ 210.231316][ T7056] loop5: detected capacity change from 0 to 1764 [ 210.261664][ T6347] udevd[6347]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 210.293962][ T7090] loop4: detected capacity change from 0 to 8192 [ 210.314929][ T7092] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 210.342271][ T5856] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 210.365909][ T7090] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 210.383350][ T5951] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 210.426868][ T7056] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 210.463301][ T7092] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 4096) [ 210.519928][ T7092] NILFS (loop6): mounting unchecked fs [ 210.736452][ T5856] usb 4-1: unable to get BOS descriptor or descriptor too short [ 210.754273][ T5951] usb 1-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 210.771431][ T5951] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.784595][ T5951] usb 1-1: Product: syz [ 210.788897][ T5856] usb 4-1: config 7 has an invalid interface number: 252 but max is 0 [ 210.797264][ T5951] usb 1-1: Manufacturer: syz [ 210.801858][ T5951] usb 1-1: SerialNumber: syz [ 210.819480][ T7092] NILFS (loop6): invalid segment: Checksum error in segment payload [ 210.841853][ T5856] usb 4-1: config 7 has no interface number 0 [ 211.029474][ T5856] usb 4-1: config 7 interface 252 altsetting 8 endpoint 0xF has invalid wMaxPacketSize 0 [ 211.063181][ T5951] usb 1-1: config 0 descriptor?? [ 211.092401][ T7092] NILFS (loop6): unable to fall back to spare super block [ 211.124282][ T5856] usb 4-1: config 7 interface 252 has no altsetting 0 [ 211.298571][ T7104] loop1: detected capacity change from 0 to 3 [ 211.323396][ T7092] NILFS (loop6): error -22 while searching super root [ 211.335287][ T5856] usb 4-1: string descriptor 0 read error: -22 [ 211.382606][ T5856] usb 4-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=56.c0 [ 211.408206][ T7092] netlink: 56 bytes leftover after parsing attributes in process `syz.6.248'. [ 211.449840][ T5856] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.540815][ T5856] idmouse 4-1:7.252: Unable to find bulk-in endpoint. [ 213.291377][ T7113] input: syz1 as /devices/virtual/input/input8 [ 213.439548][ T7123] netlink: 76 bytes leftover after parsing attributes in process `syz.6.255'. [ 213.673572][ T5951] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 213.694720][ T5951] asix 1-1:0.0: probe with driver asix failed with error -71 [ 213.724891][ T5951] usb 1-1: USB disconnect, device number 3 [ 214.462892][ T7130] FAULT_INJECTION: forcing a failure. [ 214.462892][ T7130] name failslab, interval 1, probability 0, space 0, times 0 [ 214.599931][ T7130] CPU: 1 UID: 0 PID: 7130 Comm: syz.0.257 Not tainted 6.16.0-syzkaller-12187-g0227b49b5027 #0 PREEMPT(full) [ 214.599968][ T7130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 214.599983][ T7130] Call Trace: [ 214.599992][ T7130] [ 214.600002][ T7130] dump_stack_lvl+0x189/0x250 [ 214.600039][ T7130] ? __pfx____ratelimit+0x10/0x10 [ 214.600073][ T7130] ? __pfx_dump_stack_lvl+0x10/0x10 [ 214.600104][ T7130] ? __pfx__printk+0x10/0x10 [ 214.600147][ T7130] ? __pfx___might_resched+0x10/0x10 [ 214.600170][ T7130] ? srso_alias_return_thunk+0x5/0xfbef5 [ 214.600206][ T7130] should_fail_ex+0x414/0x560 [ 214.600245][ T7130] should_failslab+0xa8/0x100 [ 214.600285][ T7130] kmem_cache_alloc_noprof+0x73/0x3c0 [ 214.600318][ T7130] ? alloc_empty_file+0x55/0x1d0 [ 214.600350][ T7130] alloc_empty_file+0x55/0x1d0 [ 214.600376][ T7130] alloc_file_pseudo+0x13d/0x210 [ 214.600406][ T7130] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 214.600442][ T7130] ? srso_alias_return_thunk+0x5/0xfbef5 [ 214.600474][ T7130] ? srso_alias_return_thunk+0x5/0xfbef5 [ 214.600506][ T7130] ? srso_alias_return_thunk+0x5/0xfbef5 [ 214.600539][ T7130] __shmem_file_setup+0x284/0x300 [ 214.600578][ T7130] __se_sys_memfd_create+0x308/0x780 [ 214.600611][ T7130] do_syscall_64+0xfa/0x3b0 [ 214.600646][ T7130] ? lockdep_hardirqs_on+0x9c/0x150 [ 214.600679][ T7130] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.600702][ T7130] ? srso_alias_return_thunk+0x5/0xfbef5 [ 214.600730][ T7130] ? exc_page_fault+0x9f/0xf0 [ 214.600765][ T7130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.600789][ T7130] RIP: 0033:0x7f88fc98ebe9 [ 214.600809][ T7130] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 214.600831][ T7130] RSP: 002b:00007f88fd869e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 214.600856][ T7130] RAX: ffffffffffffffda RBX: 0000000000000677 RCX: 00007f88fc98ebe9 [ 214.600874][ T7130] RDX: 00007f88fd869ef0 RSI: 0000000000000000 RDI: 00007f88fca127e8 [ 214.600892][ T7130] RBP: 0000200000000c00 R08: 00007f88fd869bb7 R09: 00007f88fd869e40 [ 214.600910][ T7130] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000240 [ 214.600926][ T7130] R13: 00007f88fd869ef0 R14: 00007f88fd869eb0 R15: 0000200000000280 [ 214.600965][ T7130] [ 214.857905][ T7134] netlink: 60 bytes leftover after parsing attributes in process `syz.6.260'. [ 215.054651][ T7126] loop1: detected capacity change from 0 to 8192 [ 215.089751][ T5951] usb 4-1: USB disconnect, device number 4 [ 215.957292][ T7126] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 216.338786][ T5872] Bluetooth: hci1: command 0x0406 tx timeout [ 216.345166][ T5872] Bluetooth: hci5: command 0x0406 tx timeout [ 216.351962][ T5176] Bluetooth: hci2: command 0x0406 tx timeout [ 216.364602][ T5876] Bluetooth: hci3: command 0x0406 tx timeout [ 217.161738][ T7153] loop3: detected capacity change from 0 to 40427 [ 217.292499][ T10] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 217.298291][ T7153] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 217.307893][ T7153] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 217.399135][ T7153] F2FS-fs (loop3): invalid crc value [ 217.581238][ T7153] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 217.672140][ T7153] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 217.679210][ T7153] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 217.953366][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 217.980094][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 218.059560][ T10] usb 6-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 218.172193][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.311073][ T10] usb 6-1: config 0 descriptor?? [ 218.743408][ T10] hso 6-1:0.0: Can't find BULK IN endpoint [ 218.973742][ T7145] loop5: detected capacity change from 0 to 64 [ 219.140932][ T7165] loop1: detected capacity change from 0 to 8192 [ 219.221533][ T7165] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 219.257898][ T7173] loop6: detected capacity change from 0 to 64 [ 220.112132][ T7164] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 220.228517][ T7173] syz.6.269: attempt to access beyond end of device [ 220.228517][ T7173] loop6: rw=2049, sector=268435468, nr_sectors = 2 limit=64 [ 220.280712][ T7164] FAT-fs (loop1): Filesystem has been set read-only [ 220.332599][ T7164] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 220.580064][ T7164] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 221.385768][ T5951] usb 6-1: USB disconnect, device number 8 [ 222.379475][ T7194] loop5: detected capacity change from 0 to 64 [ 222.585048][ T7194] hfs: invalid catalog max_key_len 1061 [ 222.591139][ T7194] hfs: unable to open catalog tree [ 222.712602][ T7194] hfs: can't find a HFS filesystem on dev loop5 [ 222.798583][ T5862] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 222.841376][ T7191] loop0: detected capacity change from 0 to 8192 [ 222.977681][ T7191] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 223.596123][ T7199] loop3: detected capacity change from 0 to 8192 [ 224.224102][ T7191] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 224.263756][ T7199] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 224.282187][ T7191] FAT-fs (loop0): Filesystem has been set read-only [ 224.289157][ T7191] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 224.405897][ T7191] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 224.999782][ T7220] loop6: detected capacity change from 0 to 256 [ 225.499802][ T7220] exFAT-fs (loop6): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 227.919863][ T7249] loop5: detected capacity change from 0 to 128 [ 227.977958][ T7249] EXT4-fs (loop5): Test dummy encryption mode enabled [ 228.414388][ T7249] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 228.443969][ T7249] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 228.548816][ T7257] loop3: detected capacity change from 0 to 512 [ 229.450761][ T5865] Bluetooth: hci2: unexpected event for opcode 0x3e01 [ 229.502671][ T5869] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 229.556818][ T7257] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.613884][ T7268] loop4: detected capacity change from 0 to 8 [ 229.646672][ T7257] ext4 filesystem being mounted at /55/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 229.681571][ T7271] loop0: detected capacity change from 0 to 512 [ 229.689741][ T7271] EXT4-fs: Ignoring removed nobh option [ 229.792562][ T7257] EXT4-fs error (device loop3): ext4_get_inode_usage:884: inode #12: comm syz.3.288: corrupted xattr block 6: invalid header [ 229.956911][ T7271] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.290: iget: bad i_size value: 38620345925642 [ 230.060954][ T7263] SQUASHFS error: lzo decompression failed, data probably corrupt [ 230.072712][ T7263] SQUASHFS error: Failed to read block 0x71: -5 [ 230.090726][ T7263] SQUASHFS error: lzo decompression failed, data probably corrupt [ 230.092163][ T7271] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.290: couldn't read orphan inode 15 (err -117) [ 230.116039][ T7263] SQUASHFS error: Failed to read block 0x71: -5 [ 230.219387][ T30] audit: type=1800 audit(1754742839.188:25): pid=7263 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.287" name="file0" dev="loop4" ino=3 res=0 errno=0 [ 230.433353][ T7271] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.620648][ T5857] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.467616][ T5856] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 231.801383][ T5856] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 231.803298][ T7293] loop5: detected capacity change from 0 to 3 [ 231.884549][ T5856] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.968214][ T5856] usb 7-1: config 0 descriptor?? [ 232.196862][ T77] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm kworker/u8:4: bg 0: block 5: invalid block bitmap [ 232.272715][ T5856] udl 7-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 232.323177][ T77] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 232.360863][ T7295] loop3: detected capacity change from 0 to 4096 [ 232.374864][ T5856] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 2 [ 232.388216][ T77] EXT4-fs (loop0): This should not happen!! Data will be lost [ 232.388216][ T77] [ 232.430126][ T5856] [drm] Initialized udl on minor 2 [ 232.459077][ T77] EXT4-fs (loop0): Total free blocks count 0 [ 232.528247][ T77] EXT4-fs (loop0): Free/Dirty block details [ 232.536585][ T5856] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 232.560059][ T5856] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 232.566635][ T77] EXT4-fs (loop0): free_blocks=0 [ 232.566671][ T77] EXT4-fs (loop0): dirty_blocks=3264 [ 232.566689][ T77] EXT4-fs (loop0): Block reservation details [ 232.566714][ T77] EXT4-fs (loop0): i_reserved_data_blocks=3264 [ 232.768810][ T77] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 1212 with error 28 [ 232.823858][ T5951] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 232.831853][ T5951] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 232.853140][ T5856] usb 7-1: USB disconnect, device number 3 [ 232.872176][ T5937] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 233.091922][ T5937] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.148682][ T5937] usb 6-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 233.176531][ T5937] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.273742][ T5937] usb 6-1: config 0 descriptor?? [ 233.714876][ T5856] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 234.752161][ T5856] usb 5-1: Using ep0 maxpacket: 16 [ 235.090932][ T7324] loop0: detected capacity change from 0 to 512 [ 235.121354][ T5856] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.138424][ T7324] vfat: Unknown parameter 'UVvS+ &;Sw//S 0xRCk̕.' [ 235.147663][ T5856] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.206086][ T5856] usb 5-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00 [ 235.233220][ T7317] loop3: detected capacity change from 0 to 4096 [ 235.298940][ T5856] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.402572][ T7324] [U] [ 235.405373][ T7324] [U] [ 235.408067][ T7324] [U] [ 235.410510][ T7330] loop1: detected capacity change from 0 to 512 [ 235.410758][ T7324] [U] [ 235.433095][ T5856] usb 5-1: config 0 descriptor?? [ 235.443849][ T7324] [U] [ 235.446994][ T7324] [U] [ 235.449683][ T7324] [U] [ 235.452394][ T7324] [U] [ 235.474254][ T7330] EXT4-fs: Ignoring removed nobh option [ 235.507795][ T7317] ntfs3(loop3): ino=19, mi_enum_attr [ 235.549120][ T7324] [U] [ 235.551874][ T7324] [U] [ 235.554581][ T7324] [U] [ 235.557278][ T7324] [U] [ 235.562525][ T7317] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 235.569491][ T7331] loop6: detected capacity change from 0 to 64 [ 235.734806][ T7330] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.305: iget: bad i_size value: 38620345925642 [ 235.843660][ T7330] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.305: couldn't read orphan inode 15 (err -117) [ 235.979251][ T5856] input: HID 0458:5012 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5012.0005/input/input9 [ 236.009535][ T7330] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.331363][ T7341] loop6: detected capacity change from 0 to 40427 [ 236.365372][ T5937] usbhid 6-1:0.0: can't add hid device: -71 [ 236.371395][ T5937] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 236.397323][ T7341] F2FS-fs (loop6): invalid crc value [ 236.490393][ T7341] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 236.501652][ T7341] F2FS-fs (loop6): Start checkpoint disabled! [ 236.512541][ T5856] input: HID 0458:5012 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5012.0005/input/input10 [ 236.536930][ T5937] usb 6-1: USB disconnect, device number 9 [ 236.560649][ T7341] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 236.629083][ T7316] [U] [ 238.345102][ T5856] kye 0003:0458:5012.0005: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5012] on usb-dummy_hcd.4-1/input0 [ 238.446462][ T5982] kworker/u8:8: attempt to access beyond end of device [ 238.446462][ T5982] loop6: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 238.503558][ T5982] CPU: 0 UID: 0 PID: 5982 Comm: kworker/u8:8 Not tainted 6.16.0-syzkaller-12187-g0227b49b5027 #0 PREEMPT(full) [ 238.503593][ T5982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 238.503612][ T5982] Workqueue: writeback wb_workfn (flush-7:6) [ 238.503649][ T5982] Call Trace: [ 238.503658][ T5982] [ 238.503669][ T5982] dump_stack_lvl+0x189/0x250 [ 238.503707][ T5982] ? __pfx_dump_stack_lvl+0x10/0x10 [ 238.503743][ T5982] ? __pfx_queue_work_on+0x10/0x10 [ 238.503769][ T5982] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 238.503803][ T5982] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 238.503848][ T5982] f2fs_handle_critical_error+0x37c/0x540 [ 238.503894][ T5982] f2fs_write_end_io+0x886/0xb60 [ 238.503940][ T5982] __submit_merged_bio+0x27a/0x6a0 [ 238.503983][ T5982] __submit_merged_write_cond+0x255/0x530 [ 238.504026][ T5982] f2fs_write_data_pages+0x261d/0x3000 [ 238.504107][ T5982] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 238.504144][ T5982] ? __local_bh_enable_ip+0x12d/0x1c0 [ 238.504184][ T5982] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.504214][ T5982] ? rcu_is_watching+0x15/0xb0 [ 238.504282][ T5982] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.504339][ T5982] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.504366][ T5982] ? __lock_acquire+0xab9/0xd20 [ 238.504418][ T5982] ? ktime_get_coarse_real_ts64_mg+0x52/0x1e0 [ 238.504462][ T5982] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 238.504503][ T5982] do_writepages+0x32e/0x550 [ 238.504543][ T5982] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.504572][ T5982] ? reacquire_held_locks+0x127/0x1d0 [ 238.504597][ T5982] ? writeback_sb_inodes+0x384/0x1010 [ 238.504641][ T5982] __writeback_single_inode+0x145/0xff0 [ 238.504675][ T5982] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.504703][ T5982] ? do_raw_spin_unlock+0x122/0x240 [ 238.504762][ T5982] writeback_sb_inodes+0x6c7/0x1010 [ 238.504828][ T5982] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 238.504911][ T5982] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.504940][ T5982] ? rcu_is_watching+0x15/0xb0 [ 238.504964][ T5982] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.505004][ T5982] wb_writeback+0x43b/0xaf0 [ 238.505047][ T5982] ? queue_io+0x391/0x590 [ 238.505083][ T5982] ? __pfx_wb_writeback+0x10/0x10 [ 238.505126][ T5982] ? _raw_spin_unlock_irq+0x23/0x50 [ 238.505164][ T5982] wb_workfn+0x409/0xef0 [ 238.505209][ T5982] ? __pfx_wb_workfn+0x10/0x10 [ 238.505242][ T5982] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.505270][ T5982] ? __lock_acquire+0xab9/0xd20 [ 238.505321][ T5982] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.505353][ T5982] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.505387][ T5982] ? _raw_spin_unlock_irq+0x23/0x50 [ 238.505416][ T5982] ? process_scheduled_works+0x9ef/0x17b0 [ 238.505441][ T5982] ? process_scheduled_works+0x9ef/0x17b0 [ 238.505468][ T5982] process_scheduled_works+0xae1/0x17b0 [ 238.505529][ T5982] ? __pfx_process_scheduled_works+0x10/0x10 [ 238.505564][ T5982] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.505604][ T5982] worker_thread+0x8a0/0xda0 [ 238.505633][ T5982] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 238.505676][ T5982] ? __kthread_parkme+0x7b/0x200 [ 238.505717][ T5982] kthread+0x711/0x8a0 [ 238.505758][ T5982] ? __pfx_worker_thread+0x10/0x10 [ 238.505782][ T5982] ? __pfx_kthread+0x10/0x10 [ 238.505810][ T5982] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.505844][ T5982] ? _raw_spin_unlock_irq+0x23/0x50 [ 238.505873][ T5982] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.505902][ T5982] ? lockdep_hardirqs_on+0x9c/0x150 [ 238.505934][ T5982] ? __pfx_kthread+0x10/0x10 [ 238.505968][ T5982] ret_from_fork+0x3fc/0x770 [ 238.505998][ T5982] ? __pfx_ret_from_fork+0x10/0x10 [ 238.506032][ T5982] ? __switch_to_asm+0x39/0x70 [ 238.506066][ T5982] ? __switch_to_asm+0x33/0x70 [ 238.506097][ T5982] ? __pfx_kthread+0x10/0x10 [ 238.506131][ T5982] ret_from_fork_asm+0x1a/0x30 [ 238.506185][ T5982] [ 238.509938][ T5982] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 238.837939][ T5856] usb 5-1: USB disconnect, device number 5 [ 239.073303][ T5982] CPU: 1 UID: 0 PID: 5982 Comm: kworker/u8:8 Not tainted 6.16.0-syzkaller-12187-g0227b49b5027 #0 PREEMPT(full) [ 239.073330][ T5982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 239.073343][ T5982] Workqueue: writeback wb_workfn (flush-7:6) [ 239.073370][ T5982] Call Trace: [ 239.073377][ T5982] [ 239.073385][ T5982] dump_stack_lvl+0x189/0x250 [ 239.073415][ T5982] ? __pfx_dump_stack_lvl+0x10/0x10 [ 239.073438][ T5982] ? __pfx_queue_work_on+0x10/0x10 [ 239.073456][ T5982] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 239.073489][ T5982] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 239.073525][ T5982] f2fs_handle_critical_error+0x37c/0x540 [ 239.073560][ T5982] f2fs_write_end_io+0x886/0xb60 [ 239.073597][ T5982] __submit_merged_bio+0x27a/0x6a0 [ 239.073631][ T5982] __submit_merged_write_cond+0x255/0x530 [ 239.073665][ T5982] f2fs_write_data_pages+0x261d/0x3000 [ 239.073731][ T5982] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 239.073757][ T5982] ? __local_bh_enable_ip+0x12d/0x1c0 [ 239.073790][ T5982] ? srso_alias_return_thunk+0x5/0xfbef5 [ 239.073815][ T5982] ? rcu_is_watching+0x15/0xb0 [ 239.073873][ T5982] ? srso_alias_return_thunk+0x5/0xfbef5 [ 239.073920][ T5982] ? srso_alias_return_thunk+0x5/0xfbef5 [ 239.073939][ T5982] ? __lock_acquire+0xab9/0xd20 [ 239.073980][ T5982] ? ktime_get_coarse_real_ts64_mg+0x52/0x1e0 [ 239.074014][ T5982] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 239.074044][ T5982] do_writepages+0x32e/0x550 [ 239.074075][ T5982] ? srso_alias_return_thunk+0x5/0xfbef5 [ 239.074095][ T5982] ? reacquire_held_locks+0x127/0x1d0 [ 239.074113][ T5982] ? writeback_sb_inodes+0x384/0x1010 [ 239.074148][ T5982] __writeback_single_inode+0x145/0xff0 [ 239.074172][ T5982] ? srso_alias_return_thunk+0x5/0xfbef5 [ 239.074192][ T5982] ? do_raw_spin_unlock+0x122/0x240 [ 239.074221][ T5982] writeback_sb_inodes+0x6c7/0x1010 [ 239.074275][ T5982] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 239.074345][ T5982] ? srso_alias_return_thunk+0x5/0xfbef5 [ 239.074365][ T5982] ? rcu_is_watching+0x15/0xb0 [ 239.074383][ T5982] ? srso_alias_return_thunk+0x5/0xfbef5 [ 239.074414][ T5982] wb_writeback+0x43b/0xaf0 [ 239.074448][ T5982] ? queue_io+0x391/0x590 [ 239.074507][ T5982] ? __pfx_wb_writeback+0x10/0x10 [ 239.074542][ T5982] ? _raw_spin_unlock_irq+0x23/0x50 [ 239.074571][ T5982] wb_workfn+0x409/0xef0 [ 239.074609][ T5982] ? __pfx_wb_workfn+0x10/0x10 [ 239.074634][ T5982] ? srso_alias_return_thunk+0x5/0xfbef5 [ 239.074654][ T5982] ? __lock_acquire+0xab9/0xd20 [ 239.074694][ T5982] ? srso_alias_return_thunk+0x5/0xfbef5 [ 239.074719][ T5982] ? srso_alias_return_thunk+0x5/0xfbef5 [ 239.074746][ T5982] ? _raw_spin_unlock_irq+0x23/0x50 [ 239.074767][ T5982] ? process_scheduled_works+0x9ef/0x17b0 [ 239.074784][ T5982] ? process_scheduled_works+0x9ef/0x17b0 [ 239.074805][ T5982] process_scheduled_works+0xae1/0x17b0 [ 239.074857][ T5982] ? __pfx_process_scheduled_works+0x10/0x10 [ 239.074885][ T5982] ? srso_alias_return_thunk+0x5/0xfbef5 [ 239.074915][ T5982] worker_thread+0x8a0/0xda0 [ 239.074938][ T5982] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 239.074971][ T5982] ? __kthread_parkme+0x7b/0x200 [ 239.075003][ T5982] kthread+0x711/0x8a0 [ 239.075030][ T5982] ? __pfx_worker_thread+0x10/0x10 [ 239.075049][ T5982] ? __pfx_kthread+0x10/0x10 [ 239.075069][ T5982] ? srso_alias_return_thunk+0x5/0xfbef5 [ 239.075094][ T5982] ? _raw_spin_unlock_irq+0x23/0x50 [ 239.075115][ T5982] ? srso_alias_return_thunk+0x5/0xfbef5 [ 239.075136][ T5982] ? lockdep_hardirqs_on+0x9c/0x150 [ 239.075159][ T5982] ? __pfx_kthread+0x10/0x10 [ 239.075184][ T5982] ret_from_fork+0x3fc/0x770 [ 239.075207][ T5982] ? __pfx_ret_from_fork+0x10/0x10 [ 239.075234][ T5982] ? __switch_to_asm+0x39/0x70 [ 239.075257][ T5982] ? __switch_to_asm+0x33/0x70 [ 239.075280][ T5982] ? __pfx_kthread+0x10/0x10 [ 239.075305][ T5982] ret_from_fork_asm+0x1a/0x30 [ 239.075349][ T5982] [ 239.075356][ T5982] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 239.547042][ T7351] fido_id[7351]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 239.627864][ T7337] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 239.729155][ T7356] loop4: detected capacity change from 0 to 512 [ 239.824991][ T7356] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.952301][ T7356] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 239.971229][ T7367] loop3: detected capacity change from 0 to 512 [ 239.989759][ T6049] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 240.003261][ T7367] EXT4-fs: Ignoring removed nobh option [ 240.147722][ T6049] EXT4-fs (loop1): This should not happen!! Data will be lost [ 240.147722][ T6049] [ 240.190011][ T6049] EXT4-fs (loop1): Total free blocks count 0 [ 240.200149][ T6049] EXT4-fs (loop1): Free/Dirty block details [ 240.231517][ T6049] EXT4-fs (loop1): free_blocks=0 [ 240.236887][ T6049] EXT4-fs (loop1): dirty_blocks=2548 [ 240.290739][ T6049] EXT4-fs (loop1): Block reservation details [ 240.296796][ T6049] EXT4-fs (loop1): i_reserved_data_blocks=2548 [ 240.337309][ T7367] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.309: iget: bad i_size value: 38620345925642 [ 241.064409][ T7367] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.309: couldn't read orphan inode 15 (err -117) [ 241.229990][ T7367] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.246401][ T5858] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.319881][ T6049] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 492 with error 28 [ 241.391231][ T6049] EXT4-fs (loop1): This should not happen!! Data will be lost [ 241.391231][ T6049] [ 241.413474][ T6049] EXT4-fs (loop1): Total free blocks count 0 [ 241.419474][ T6049] EXT4-fs (loop1): Free/Dirty block details [ 241.435628][ T6049] EXT4-fs (loop1): free_blocks=0 [ 241.440576][ T6049] EXT4-fs (loop1): dirty_blocks=496 [ 241.466148][ T6049] EXT4-fs (loop1): Block reservation details [ 241.723952][ T6049] EXT4-fs (loop1): i_reserved_data_blocks=496 [ 242.018975][ T7382] loop4: detected capacity change from 0 to 40427 [ 242.053629][ T7382] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 242.061390][ T7382] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 242.078430][ T7382] F2FS-fs (loop4): invalid crc value [ 242.257601][ T7382] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 242.260682][ T5862] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.269707][ T7382] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 242.282689][ T7382] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 242.734157][ T49] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm kworker/u8:3: bg 0: block 5: invalid block bitmap [ 243.132522][ T49] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 243.193305][ T49] EXT4-fs (loop3): This should not happen!! Data will be lost [ 243.193305][ T49] [ 243.203643][ T49] EXT4-fs (loop3): Total free blocks count 0 [ 243.210901][ T49] EXT4-fs (loop3): Free/Dirty block details [ 243.228688][ T49] EXT4-fs (loop3): free_blocks=0 [ 243.282203][ T49] EXT4-fs (loop3): dirty_blocks=2628 [ 243.287531][ T49] EXT4-fs (loop3): Block reservation details [ 243.518212][ T49] EXT4-fs (loop3): i_reserved_data_blocks=2628 [ 244.425737][ T49] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 572 with error 28 [ 245.384902][ T6059] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 245.574669][ T6059] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 245.574794][ T6059] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.776897][ T6059] usb 1-1: config 0 descriptor?? [ 246.039758][ T6059] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 246.276148][ T6059] cpia1 1-1:0.0: unexpected state after lo power cmd: 00 [ 246.677841][ T6059] cpia1 1-1:0.0: only firmware version 1 is supported (got: 0) [ 246.791525][ T7408] loop5: detected capacity change from 0 to 40427 [ 247.163383][ T7408] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 247.284279][ T7440] loop6: detected capacity change from 0 to 164 [ 247.351058][ T7408] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 247.394018][ T7440] Unable to read rock-ridge attributes [ 247.419838][ T7408] F2FS-fs (loop5): invalid crc value [ 247.452689][ T7408] F2FS-fs (loop5): SIT is corrupted node# 5 vs 7 [ 247.560451][ T7408] F2FS-fs (loop5): Failed to initialize F2FS segment manager (-117) [ 247.703852][ T5856] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 247.717873][ T7449] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 247.897592][ T5856] usb 4-1: Using ep0 maxpacket: 8 [ 247.918017][ T5856] usb 4-1: config 162 has an invalid interface number: 142 but max is 1 [ 248.337159][ T5856] usb 4-1: config 162 has an invalid interface number: 112 but max is 1 [ 248.360832][ T5856] usb 4-1: config 162 has no interface number 0 [ 248.374269][ T5856] usb 4-1: config 162 has no interface number 1 [ 248.388493][ T5856] usb 4-1: config 162 interface 142 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 248.542862][ T5969] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 248.945641][ T5856] usb 4-1: config 162 interface 112 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 248.958700][ T5856] usb 4-1: config 162 interface 112 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 248.970632][ T5856] usb 4-1: config 162 interface 112 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 248.984684][ T5856] usb 4-1: config 162 interface 112 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 248.995085][ T5856] usb 4-1: config 162 interface 112 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 249.008509][ T5856] usb 4-1: config 162 interface 142 has no altsetting 0 [ 249.015587][ T5856] usb 4-1: config 162 interface 112 has no altsetting 0 [ 249.064739][ T6059] usb 1-1: USB disconnect, device number 4 [ 249.086199][ T5969] usb 6-1: Using ep0 maxpacket: 32 [ 249.130268][ T5969] usb 6-1: unable to get BOS descriptor or descriptor too short [ 249.154858][ T5856] usb 4-1: string descriptor 0 read error: -71 [ 249.161169][ T5856] usb 4-1: New USB device found, idVendor=0557, idProduct=2008, bcdDevice=a7.08 [ 249.180831][ T5969] usb 6-1: config 0 has an invalid interface number: 251 but max is 1 [ 249.221272][ T5969] usb 6-1: config 0 has an invalid interface number: 2 but max is 1 [ 249.294170][ T5969] usb 6-1: config 0 has no interface number 0 [ 249.301205][ T5856] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.310811][ T5969] usb 6-1: config 0 has no interface number 1 [ 249.332177][ T7465] loop0: detected capacity change from 0 to 64 [ 249.364699][ T5969] usb 6-1: config 0 interface 251 has no altsetting 0 [ 249.412614][ T5856] usb 4-1: can't set config #162, error -71 [ 249.436046][ T7465] syz.0.331: attempt to access beyond end of device [ 249.436046][ T7465] loop0: rw=0, sector=234881062, nr_sectors = 2 limit=64 [ 249.449799][ T5969] usb 6-1: config 0 interface 2 has no altsetting 0 [ 249.465911][ T5856] usb 4-1: USB disconnect, device number 5 [ 249.493924][ T7465] Buffer I/O error on dev loop0, logical block 117440531, async page read [ 249.503010][ T5969] usb 6-1: New USB device found, idVendor=413c, idProduct=81a4, bcdDevice=ae.9f [ 249.503044][ T5969] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.503070][ T5969] usb 6-1: Product: syz [ 249.503089][ T5969] usb 6-1: Manufacturer: syz [ 249.591465][ T5969] usb 6-1: SerialNumber: syz [ 249.635555][ T7465] syz.0.331: attempt to access beyond end of device [ 249.635555][ T7465] loop0: rw=0, sector=8548515840, nr_sectors = 2 limit=64 [ 249.651406][ T5969] usb 6-1: config 0 descriptor?? [ 249.757476][ T7465] Buffer I/O error on dev loop0, logical block 4274257920, async page read [ 249.851988][ T7465] syz.0.331: attempt to access beyond end of device [ 249.851988][ T7465] loop0: rw=0, sector=301989888, nr_sectors = 2 limit=64 [ 249.867091][ T7465] Buffer I/O error on dev loop0, logical block 150994944, async page read [ 249.896786][ T7465] syz.0.331: attempt to access beyond end of device [ 249.896786][ T7465] loop0: rw=0, sector=234881062, nr_sectors = 2 limit=64 [ 249.917183][ T7465] Buffer I/O error on dev loop0, logical block 117440531, async page read [ 250.014897][ T5969] usb 6-1: selecting invalid altsetting 0 [ 250.038414][ T30] audit: type=1800 audit(1754742859.088:26): pid=7465 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.331" name="file2" dev="loop0" ino=6 res=0 errno=0 [ 250.057811][ T5969] usb 6-1: Could not set interface, error -22 [ 250.067989][ T5969] usb 6-1: USB disconnect, device number 10 [ 250.514539][ T7477] loop6: detected capacity change from 0 to 256 [ 250.581567][ T7477] FAT-fs (loop6): Directory bread(block 64) failed [ 250.620873][ T7477] FAT-fs (loop6): Directory bread(block 65) failed [ 250.680011][ T7477] FAT-fs (loop6): Directory bread(block 66) failed [ 250.746836][ T7477] FAT-fs (loop6): Directory bread(block 67) failed [ 250.759405][ T7477] FAT-fs (loop6): Directory bread(block 68) failed [ 250.768361][ T975] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 250.812196][ T7477] FAT-fs (loop6): Directory bread(block 69) failed [ 250.821594][ T7477] FAT-fs (loop6): Directory bread(block 70) failed [ 250.923015][ T7477] FAT-fs (loop6): Directory bread(block 71) failed [ 250.929667][ T7477] FAT-fs (loop6): Directory bread(block 72) failed [ 251.083024][ T7477] FAT-fs (loop6): Directory bread(block 73) failed [ 251.106797][ T975] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.838762][ T975] usb 5-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 251.893454][ T975] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.945607][ T975] usb 5-1: config 0 descriptor?? [ 251.982550][ T5861] Bluetooth: hci6: command 0x0405 tx timeout [ 252.682722][ T975] playstation 0003:054C:0BA0.0006: unknown main item tag 0x0 [ 252.914651][ T975] playstation 0003:054C:0BA0.0006: hidraw0: USB HID v0.00 Device [HID 054c:0ba0] on usb-dummy_hcd.4-1/input0 [ 253.186846][ T7412] io-wq is not configured for unbound workers [ 253.273703][ T975] playstation 0003:054C:0BA0.0006: Invalid byte count transferred, expected 16 got 9 [ 253.282701][ T7503] loop0: detected capacity change from 0 to 8 [ 253.338601][ T975] playstation 0003:054C:0BA0.0006: Failed to retrieve DualShock4 pairing info: -22 [ 253.415238][ T975] playstation 0003:054C:0BA0.0006: Failed to get MAC address from DualShock4 [ 253.485775][ T7498] loop3: detected capacity change from 0 to 4096 [ 253.497786][ T7503] SQUASHFS error: xz decompression failed, data probably corrupt [ 253.508116][ T7509] loop5: detected capacity change from 0 to 512 [ 253.523254][ T975] playstation 0003:054C:0BA0.0006: Failed to create dualshock4. [ 253.597498][ T7503] SQUASHFS error: Failed to read block 0x108: -5 [ 253.664726][ T7509] EXT4-fs: Ignoring removed nobh option [ 253.674199][ T7503] SQUASHFS error: Unable to read metadata cache entry [106] [ 253.700218][ T975] playstation 0003:054C:0BA0.0006: probe with driver playstation failed with error -22 [ 253.701483][ T7503] SQUASHFS error: Unable to read inode 0x11f [ 253.741729][ T7509] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.342: iget: bad i_size value: 38620345925642 [ 253.756336][ T975] usb 5-1: USB disconnect, device number 6 [ 253.822466][ T7512] loop6: detected capacity change from 0 to 128 [ 253.933292][ T7509] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.342: couldn't read orphan inode 15 (err -117) [ 253.969235][ T7512] EXT4-fs (loop6): Test dummy encryption mode enabled [ 254.201222][ T7509] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.396569][ T7512] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 254.447284][ T7512] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 255.033212][ T7514] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 255.046279][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.052842][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.048731][ T49] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 256.152847][ T7538] loop4: detected capacity change from 0 to 64 [ 256.296617][ T49] EXT4-fs (loop5): This should not happen!! Data will be lost [ 256.296617][ T49] [ 257.072239][ T49] EXT4-fs (loop5): Total free blocks count 0 [ 257.078261][ T49] EXT4-fs (loop5): Free/Dirty block details [ 257.082258][ T7538] syz.4.347: attempt to access beyond end of device [ 257.082258][ T7538] loop4: rw=0, sector=234881062, nr_sectors = 2 limit=64 [ 257.124506][ T49] EXT4-fs (loop5): free_blocks=0 [ 257.129504][ T49] EXT4-fs (loop5): dirty_blocks=2064 [ 257.151595][ T7538] Buffer I/O error on dev loop4, logical block 117440531, async page read [ 257.192026][ T49] EXT4-fs (loop5): Block reservation details [ 257.203021][ T6203] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 257.230520][ T49] EXT4-fs (loop5): i_reserved_data_blocks=2064 [ 257.253313][ T7538] syz.4.347: attempt to access beyond end of device [ 257.253313][ T7538] loop4: rw=0, sector=8548515840, nr_sectors = 2 limit=64 [ 257.271398][ T7538] Buffer I/O error on dev loop4, logical block 4274257920, async page read [ 257.288822][ T7538] syz.4.347: attempt to access beyond end of device [ 257.288822][ T7538] loop4: rw=0, sector=301989888, nr_sectors = 2 limit=64 [ 257.304778][ T7538] Buffer I/O error on dev loop4, logical block 150994944, async page read [ 257.341357][ T7538] syz.4.347: attempt to access beyond end of device [ 257.341357][ T7538] loop4: rw=0, sector=234881062, nr_sectors = 2 limit=64 [ 257.356896][ T7538] Buffer I/O error on dev loop4, logical block 117440531, async page read [ 257.590564][ T30] audit: type=1800 audit(1754742866.568:27): pid=7538 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.347" name="file2" dev="loop4" ino=6 res=0 errno=0 [ 258.161098][ T1000] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 8 with error 28 [ 259.583640][ T5869] EXT4-fs: 7 callbacks suppressed [ 259.583660][ T5869] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.072664][ T7566] loop4: detected capacity change from 0 to 4096 [ 261.471597][ T7576] loop6: detected capacity change from 0 to 4096 [ 261.787333][ T7566] udf: Bad value for 'bs' [ 261.795534][ T7576] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512). [ 261.848244][ T7576] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 261.861469][ T7576] ntfs3(loop6): ino=19, mi_enum_attr [ 261.962186][ T7578] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 261.969008][ T7578] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 262.074817][ T7587] netlink: 36 bytes leftover after parsing attributes in process `syz.3.360'. [ 262.199844][ T7578] vhci_hcd vhci_hcd.0: Device attached [ 262.219009][ T7582] loop5: detected capacity change from 0 to 512 [ 262.298108][ T5958] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 262.368524][ T7582] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 262.412193][ T7582] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 262.440982][ T5856] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 262.528575][ T7582] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 262.541703][ T5958] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 262.608740][ T5958] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.919118][ T5958] usb 2-1: config 0 descriptor?? [ 263.039462][ T7582] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 263.170196][ T7582] System zones: 0-2, 18-18, 34-35 [ 263.496951][ T7582] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 263.548514][ T5958] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 263.569115][ T7578] EXT4-fs error (device loop5): ext4_generic_delete_entry:2668: inode #2: block 3: comm syz.5.350: bad entry in directory: inode out of bounds - offset=24, inode=134217739, rec_len=20, size=2048 fake=0 [ 263.658982][ T7578] EXT4-fs error (device loop5) in ext4_delete_entry:2739: Corrupt filesystem [ 263.670041][ T5958] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 263.677121][ T5958] [drm] Initialized udl on minor 2 [ 263.813357][ T5958] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 263.852759][ T5958] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 263.860763][ T7608] loop3: detected capacity change from 0 to 16 [ 263.889673][ T6050] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 263.928702][ T6050] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 263.932366][ T7608] erofs: Unknown parameter '' [ 263.938385][ T5958] usb 2-1: USB disconnect, device number 4 [ 264.013528][ T6059] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 264.268386][ T6059] usb 6-1: config 0 has no interfaces? [ 264.680360][ T6059] usb 6-1: New USB device found, idVendor=0de5, idProduct=0056, bcdDevice= 5.b5 [ 264.776921][ T6059] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.324243][ T6059] usb 6-1: config 0 descriptor?? [ 265.418019][ T6059] usb 6-1: can't set config #0, error -71 [ 265.445811][ T7579] vhci_hcd: connection reset by peer [ 265.462568][ T6059] usb 6-1: USB disconnect, device number 11 [ 265.665359][ T36] vhci_hcd: stop threads [ 265.670156][ T36] vhci_hcd: release socket [ 265.676220][ T36] vhci_hcd: disconnect device [ 265.699029][ T5869] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.922271][ T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 266.943715][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 266.954424][ T10] usb 4-1: config index 0 descriptor too short (expected 4495, got 71) [ 267.613779][ T10] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 267.651453][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 267.662025][ T6059] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 267.673265][ T5856] vhci_hcd: vhci_device speed not set [ 267.808389][ T10] usb 4-1: config 0 has no interface number 0 [ 267.820267][ T10] usb 4-1: New USB device found, idVendor=046c, idProduct=14e0, bcdDevice= 0.01 [ 267.842467][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.850545][ T10] usb 4-1: Product: syz [ 267.864864][ T10] usb 4-1: Manufacturer: syz [ 267.869491][ T10] usb 4-1: SerialNumber: syz [ 267.878192][ T10] usb 4-1: config 0 descriptor?? [ 267.953041][ T6059] usb 6-1: Using ep0 maxpacket: 32 [ 267.982385][ T6059] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 268.020315][ T6059] usb 6-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 268.640946][ T10] usb 4-1: Found UVC 0.00 device syz (046c:14e0) [ 268.647534][ T10] usb 4-1: No valid video chain found. [ 268.675980][ T6059] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.739771][ T6059] usb 6-1: Product: syz [ 268.753137][ T6059] usb 6-1: Manufacturer: syz [ 268.768600][ T6059] usb 6-1: SerialNumber: syz [ 268.814813][ T6059] usb 6-1: config 0 descriptor?? [ 269.069755][ T6059] usb 6-1: bad CDC descriptors [ 269.094734][ T6059] usb 6-1: unsupported MDLM descriptors [ 269.163373][ T7630] bpf: Bad value for 'uid' [ 269.206764][ T7630] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 270.813609][ T5978] usb 4-1: USB disconnect, device number 6 [ 270.987040][ T7683] netlink: 20 bytes leftover after parsing attributes in process `syz.0.382'. [ 271.031155][ T7684] netlink: 20 bytes leftover after parsing attributes in process `syz.3.383'. [ 271.202315][ T7689] netlink: 20 bytes leftover after parsing attributes in process `syz.0.382'. [ 271.311841][ T43] usb 6-1: USB disconnect, device number 12 [ 271.465975][ T7696] loop3: detected capacity change from 0 to 128 [ 271.517623][ T7700] loop1: detected capacity change from 0 to 128 [ 272.105410][ T7700] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: writeback. [ 273.267311][ T5862] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 273.843072][ T5978] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 274.399829][ T5978] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 274.434361][ T5978] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.445106][ T7721] loop3: detected capacity change from 0 to 32768 [ 274.452209][ T7721] ocfs2: Unknown parameter 'nointratime_quantum' [ 274.602215][ T43] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 274.713278][ T5978] usb 1-1: config 0 descriptor?? [ 274.782473][ T43] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 274.812188][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.870961][ T43] usb 2-1: config 0 descriptor?? [ 274.980703][ T5978] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 275.094528][ T5978] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 275.121759][ T5978] [drm] Initialized udl on minor 2 [ 275.138659][ T43] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 275.196008][ T43] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 3 [ 275.210765][ T5978] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 275.212360][ T5958] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 275.235702][ T5978] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 275.249995][ T43] [drm] Initialized udl on minor 3 [ 275.365803][ T7734] loop3: detected capacity change from 0 to 8192 [ 275.367086][ T43] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 275.408710][ T7734] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 275.422324][ T6059] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 275.430438][ T5958] usb 5-1: Using ep0 maxpacket: 16 [ 275.436202][ T43] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 275.461447][ T6059] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 275.462699][ T5958] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 275.492583][ T6059] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 275.500300][ T5978] usb 1-1: USB disconnect, device number 5 [ 275.503478][ T5958] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 275.760777][ T5958] usb 5-1: config 0 has no interface number 0 [ 275.768346][ T5856] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 275.801588][ T5958] usb 5-1: New USB device found, idVendor=0bd3, idProduct=05f4, bcdDevice= 0.5b [ 275.824110][ T5856] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 275.832760][ T5856] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 275.847345][ T43] usb 2-1: USB disconnect, device number 5 [ 275.942278][ T7734] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 275.953501][ T5958] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.053847][ T5958] usb 5-1: config 0 descriptor?? [ 276.063424][ T7734] FAT-fs (loop3): Filesystem has been set read-only [ 276.070370][ T7734] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 276.121240][ T5958] usb 5-1: Found UVC 0.00 device (0bd3:05f4) [ 276.170948][ T5958] usb 5-1: No valid video chain found. [ 276.178645][ T7734] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 276.346946][ T5958] usb 5-1: USB disconnect, device number 7 [ 276.527203][ T7743] sctp: [Deprecated]: syz.0.401 (pid 7743) Use of int in max_burst socket option deprecated. [ 276.527203][ T7743] Use struct sctp_assoc_value instead [ 276.651859][ T7728] loop5: detected capacity change from 0 to 32768 [ 276.696748][ T7745] netlink: 32 bytes leftover after parsing attributes in process `syz.3.402'. [ 277.381147][ T5978] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 277.469171][ T7745] loop3: detected capacity change from 0 to 4096 [ 277.572155][ T5978] usb 1-1: Using ep0 maxpacket: 8 [ 277.590509][ T5978] usb 1-1: unable to get BOS descriptor or descriptor too short [ 277.643051][ T5978] usb 1-1: config 4 has an invalid interface number: 177 but max is 0 [ 277.736766][ T5978] usb 1-1: config 4 has no interface number 0 [ 278.056429][ T7745] loop3: detected capacity change from 0 to 8 [ 278.112999][ T5978] usb 1-1: config 4 interface 177 has no altsetting 0 [ 278.215894][ T7745] squashfs: Unknown parameter '' [ 278.242374][ T5978] usb 1-1: New USB device found, idVendor=13d3, idProduct=3349, bcdDevice=26.35 [ 278.272218][ T5978] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.280236][ T5978] usb 1-1: Product: syz [ 278.284706][ T1204] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 278.317665][ T5978] usb 1-1: Manufacturer: syz [ 278.350478][ T5978] usb 1-1: SerialNumber: syz [ 279.032163][ T1204] usb 5-1: Using ep0 maxpacket: 32 [ 279.063395][ T1204] usb 5-1: unable to get BOS descriptor or descriptor too short [ 279.099957][ T1204] usb 5-1: config 0 has an invalid interface number: 251 but max is 1 [ 279.127348][ T7743] loop0: detected capacity change from 0 to 64 [ 279.133656][ T1204] usb 5-1: config 0 has an invalid interface number: 2 but max is 1 [ 279.141673][ T1204] usb 5-1: config 0 has no interface number 0 [ 279.155672][ T7762] FAULT_INJECTION: forcing a failure. [ 279.155672][ T7762] name failslab, interval 1, probability 0, space 0, times 0 [ 279.186594][ T5978] usb 1-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 279.195391][ T1204] usb 5-1: config 0 has no interface number 1 [ 279.201654][ T7762] CPU: 0 UID: 0 PID: 7762 Comm: syz.5.404 Not tainted 6.16.0-syzkaller-12187-g0227b49b5027 #0 PREEMPT(full) [ 279.201685][ T7762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 279.201701][ T7762] Call Trace: [ 279.201710][ T7762] [ 279.201720][ T7762] dump_stack_lvl+0x189/0x250 [ 279.201755][ T7762] ? __pfx____ratelimit+0x10/0x10 [ 279.201800][ T7762] ? __pfx_dump_stack_lvl+0x10/0x10 [ 279.201831][ T7762] ? __pfx__printk+0x10/0x10 [ 279.201869][ T7762] ? __lock_acquire+0xab9/0xd20 [ 279.201919][ T7762] should_fail_ex+0x414/0x560 [ 279.201958][ T7762] should_failslab+0xa8/0x100 [ 279.201998][ T7762] kmem_cache_alloc_noprof+0x73/0x3c0 [ 279.202032][ T7762] ? skb_clone+0x212/0x3a0 [ 279.202069][ T7762] skb_clone+0x212/0x3a0 [ 279.202101][ T7762] __netlink_deliver_tap+0x404/0x850 [ 279.202154][ T7762] ? netlink_deliver_tap+0x2e/0x1b0 [ 279.202193][ T7762] netlink_deliver_tap+0x19c/0x1b0 [ 279.202232][ T7762] netlink_unicast+0x7fa/0x9e0 [ 279.202275][ T7762] ? __pfx_netlink_unicast+0x10/0x10 [ 279.202310][ T7762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.202339][ T7762] ? skb_put+0x11b/0x210 [ 279.202376][ T7762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.202410][ T7762] netlink_sendmsg+0x805/0xb30 [ 279.202459][ T7762] ? __pfx_netlink_sendmsg+0x10/0x10 [ 279.202500][ T7762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.202529][ T7762] ? aa_sock_msg_perm+0xf1/0x1d0 [ 279.202571][ T7762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.202600][ T7762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.202628][ T7762] ? __pfx_netlink_sendmsg+0x10/0x10 [ 279.202667][ T7762] __sock_sendmsg+0x21c/0x270 [ 279.202703][ T7762] sock_sendmsg+0x158/0x230 [ 279.202737][ T7762] ? __pfx_sock_sendmsg+0x10/0x10 [ 279.202790][ T7762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.202818][ T7762] ? __asan_memset+0x22/0x50 [ 279.202845][ T7762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.202874][ T7762] ? iov_iter_bvec+0xb8/0x180 [ 279.202903][ T7762] splice_to_socket+0x8ff/0xf10 [ 279.202966][ T7762] ? __pfx_splice_to_socket+0x10/0x10 [ 279.203050][ T7762] ? register_lock_class+0x51/0x320 [ 279.203097][ T7762] ? __pfx_splice_to_socket+0x10/0x10 [ 279.203134][ T7762] direct_splice_actor+0x101/0x160 [ 279.203175][ T7762] splice_direct_to_actor+0x5a8/0xcc0 [ 279.203235][ T7762] ? __pfx_direct_splice_actor+0x10/0x10 [ 279.203271][ T7762] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 279.203321][ T7762] do_splice_direct+0x181/0x270 [ 279.203355][ T7762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.203388][ T7762] ? __pfx_do_splice_direct+0x10/0x10 [ 279.203422][ T7762] ? common_file_perm+0x1b5/0x230 [ 279.203462][ T7762] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 279.203505][ T7762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.203532][ T7762] ? security_file_permission+0x75/0x290 [ 279.203566][ T7762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.203594][ T7762] ? rw_verify_area+0x255/0x4d0 [ 279.203625][ T7762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.203658][ T7762] do_sendfile+0x4da/0x7e0 [ 279.203682][ T7762] ? __pfx_vfs_write+0x10/0x10 [ 279.203722][ T7762] ? __pfx_do_sendfile+0x10/0x10 [ 279.203747][ T7762] ? __fget_files+0x3a0/0x420 [ 279.203802][ T7762] __se_sys_sendfile64+0x13e/0x190 [ 279.203846][ T7762] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 279.203883][ T7762] ? rcu_is_watching+0x15/0xb0 [ 279.203914][ T7762] ? do_syscall_64+0xbe/0x3b0 [ 279.203949][ T7762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.203982][ T7762] do_syscall_64+0xfa/0x3b0 [ 279.204016][ T7762] ? lockdep_hardirqs_on+0x9c/0x150 [ 279.204049][ T7762] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.204072][ T7762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.204100][ T7762] ? exc_page_fault+0x9f/0xf0 [ 279.204136][ T7762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.204159][ T7762] RIP: 0033:0x7fe468f8ebe9 [ 279.204180][ T7762] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 279.204201][ T7762] RSP: 002b:00007fe469dad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 279.204226][ T7762] RAX: ffffffffffffffda RBX: 00007fe4691b5fa0 RCX: 00007fe468f8ebe9 [ 279.204245][ T7762] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000009 [ 279.204260][ T7762] RBP: 00007fe469dad090 R08: 0000000000000000 R09: 0000000000000000 [ 279.204275][ T7762] R10: 0000000100000002 R11: 0000000000000246 R12: 0000000000000001 [ 279.204291][ T7762] R13: 00007fe4691b6038 R14: 00007fe4691b5fa0 R15: 00007ffe8c479288 [ 279.204329][ T7762] [ 279.641561][ T1204] usb 5-1: config 0 interface 251 has no altsetting 0 [ 279.648379][ T1204] usb 5-1: config 0 interface 2 has no altsetting 0 [ 279.660895][ T5978] usb 1-1: USB disconnect, device number 6 [ 279.678543][ T1204] usb 5-1: New USB device found, idVendor=413c, idProduct=81a4, bcdDevice=ae.9f [ 279.687751][ T1204] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.696765][ T1204] usb 5-1: Product: syz [ 279.700929][ T1204] usb 5-1: Manufacturer: syz [ 279.705551][ T1204] usb 5-1: SerialNumber: syz [ 279.718752][ T1204] usb 5-1: config 0 descriptor?? [ 279.723446][ T43] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 279.912360][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.965588][ T1204] usb 5-1: selecting invalid altsetting 0 [ 279.971357][ T1204] usb 5-1: Could not set interface, error -22 [ 279.977386][ T43] usb 4-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 279.980537][ T1204] usb 5-1: USB disconnect, device number 8 [ 280.079966][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.193076][ T43] usb 4-1: config 0 descriptor?? [ 280.437072][ T7760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.532979][ T7760] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.608301][ T43] usbhid 4-1:0.0: can't add hid device: -71 [ 283.664635][ T43] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 283.734556][ T43] usb 4-1: USB disconnect, device number 7 [ 284.905959][ T7794] mkiss: ax0: crc mode is auto. [ 286.242183][ T43] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 286.335961][ T7812] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 286.347367][ T5856] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 286.406772][ T7815] loop1: detected capacity change from 0 to 4096 [ 286.442571][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 286.451142][ T43] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 286.488276][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.524870][ T43] usb 4-1: config 0 descriptor?? [ 286.600215][ T5856] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 286.669611][ T43] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 286.676180][ T5856] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.899828][ T5856] usb 5-1: config 0 descriptor?? [ 287.865326][ T5856] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 288.523823][ T5856] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 288.538012][ T5856] [drm] Initialized udl on minor 2 [ 288.545469][ T5856] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 288.555130][ T5856] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 288.754448][ T6050] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 288.777567][ T6050] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 288.785352][ T5856] usb 5-1: USB disconnect, device number 9 [ 288.812163][ T43] gspca_sonixj: i2c_w8 err -71 [ 288.832224][ T43] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 288.842333][ T43] usb 4-1: USB disconnect, device number 8 [ 288.892613][ T7829] loop1: detected capacity change from 0 to 4096 [ 289.053343][ T7829] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512). [ 290.748869][ T7839] loop6: detected capacity change from 0 to 32768 [ 290.931096][ T7839] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.430 (7839) [ 290.973126][ T7839] BTRFS info (device loop6): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 290.984061][ T7839] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm [ 290.993532][ T7839] BTRFS info (device loop6): using free-space-tree [ 291.920767][ T7873] loop0: detected capacity change from 0 to 512 [ 292.107782][ T7873] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 293.233214][ T6203] BTRFS info (device loop6): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 294.001891][ T7873] EXT4-fs (loop0): 1 truncate cleaned up [ 294.064778][ T7873] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 294.392551][ T6059] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 294.798760][ T6059] usb 2-1: Using ep0 maxpacket: 32 [ 295.022813][ T7887] loop4: detected capacity change from 0 to 64 [ 295.066704][ T6059] usb 2-1: unable to get BOS descriptor or descriptor too short [ 295.104029][ T6059] usb 2-1: config 0 has an invalid interface number: 251 but max is 1 [ 295.125599][ T7873] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 295.137010][ T7887] syz.4.441: attempt to access beyond end of device [ 295.137010][ T7887] loop4: rw=0, sector=234881062, nr_sectors = 2 limit=64 [ 295.161225][ T6059] usb 2-1: config 0 has an invalid interface number: 2 but max is 1 [ 295.188247][ T6059] usb 2-1: config 0 has no interface number 0 [ 295.203803][ T7873] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 295.204101][ T7889] EXT4-fs error (device loop0): ext4_lookup:1787: inode #14: comm syz.0.436: invalid fast symlink length 39 [ 295.234077][ T6059] usb 2-1: config 0 has no interface number 1 [ 295.240298][ T7887] Buffer I/O error on dev loop4, logical block 117440531, async page read [ 295.292281][ T6059] usb 2-1: config 0 interface 251 has no altsetting 0 [ 295.292593][ T7887] syz.4.441: attempt to access beyond end of device [ 295.292593][ T7887] loop4: rw=0, sector=8548515840, nr_sectors = 2 limit=64 [ 295.299092][ T6059] usb 2-1: config 0 interface 2 has no altsetting 0 [ 295.341515][ T7887] Buffer I/O error on dev loop4, logical block 4274257920, async page read [ 295.642466][ T6059] usb 2-1: New USB device found, idVendor=413c, idProduct=81a4, bcdDevice=ae.9f [ 295.651536][ T6059] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.718319][ T7897] process 'syz.3.442' launched './file0' with NULL argv: empty string added [ 295.845508][ T7897] loop3: detected capacity change from 0 to 512 [ 296.324141][ T30] audit: type=1800 audit(1754742904.718:28): pid=7887 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.441" name="file2" dev="loop4" ino=6 res=0 errno=0 [ 296.352327][ T6059] usb 2-1: Product: syz [ 296.356509][ T6059] usb 2-1: Manufacturer: syz [ 296.361099][ T6059] usb 2-1: SerialNumber: syz [ 296.390358][ T7897] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.442: corrupted in-inode xattr: invalid ea_ino [ 296.411768][ T7897] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.442: couldn't read orphan inode 15 (err -117) [ 296.427480][ T7897] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 296.447498][ T7897] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.483393][ T6059] usb 2-1: config 0 descriptor?? [ 296.557219][ T6059] usb 2-1: can't set config #0, error -71 [ 296.579446][ T6059] usb 2-1: USB disconnect, device number 6 [ 296.872328][ T5854] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.026594][ T7909] loop3: detected capacity change from 0 to 64 [ 297.502602][ T7909] syz.3.448: attempt to access beyond end of device [ 297.502602][ T7909] loop3: rw=0, sector=234881062, nr_sectors = 2 limit=64 [ 297.579985][ T7909] Buffer I/O error on dev loop3, logical block 117440531, async page read [ 298.066041][ T7909] syz.3.448: attempt to access beyond end of device [ 298.066041][ T7909] loop3: rw=0, sector=8548515840, nr_sectors = 2 limit=64 [ 298.141435][ T7909] Buffer I/O error on dev loop3, logical block 4274257920, async page read [ 298.303418][ T30] audit: type=1800 audit(1754742907.328:29): pid=7909 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.448" name="file2" dev="loop3" ino=6 res=0 errno=0 [ 299.312733][ T7927] loop1: detected capacity change from 0 to 128 [ 299.352594][ T7927] EXT4-fs (loop1): Test dummy encryption mode enabled [ 299.682248][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 299.712890][ T7927] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 299.947486][ T7927] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 300.032162][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 300.074636][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 300.096178][ T5978] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 300.326132][ T9] usb 1-1: config 0 has an invalid interface number: 251 but max is 1 [ 300.352627][ T9] usb 1-1: config 0 has an invalid interface number: 2 but max is 1 [ 301.220912][ T9] usb 1-1: config 0 has no interface number 0 [ 301.251129][ T9] usb 1-1: config 0 has no interface number 1 [ 301.267644][ T7940] loop4: detected capacity change from 0 to 128 [ 301.274315][ T9] usb 1-1: config 0 interface 251 has no altsetting 0 [ 301.289350][ T7940] EXT4-fs (loop4): Test dummy encryption mode enabled [ 301.301712][ T5862] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 301.329558][ T5978] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 301.339545][ T9] usb 1-1: config 0 interface 2 has no altsetting 0 [ 301.372191][ T5978] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.396278][ T9] usb 1-1: string descriptor 0 read error: -71 [ 301.416500][ T7940] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 301.449268][ T5978] usb 4-1: Product: syz [ 301.463408][ T9] usb 1-1: New USB device found, idVendor=413c, idProduct=81a4, bcdDevice=ae.9f [ 301.482333][ T7940] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 301.515466][ T5978] usb 4-1: Manufacturer: syz [ 301.525578][ T5978] usb 4-1: SerialNumber: syz [ 301.543985][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.577007][ T5978] usb 4-1: config 0 descriptor?? [ 301.612430][ T9] usb 1-1: config 0 descriptor?? [ 301.658439][ T9] usb 1-1: can't set config #0, error -71 [ 301.675496][ T9] usb 1-1: USB disconnect, device number 7 [ 301.732417][ T7944] loop1: detected capacity change from 0 to 512 [ 302.764805][ T5978] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 302.785030][ T7944] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 302.832356][ T7944] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 302.846462][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 302.980939][ T5858] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 303.007455][ T5862] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.017272][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 303.089986][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 303.157193][ T9] usb 1-1: config 0 has an invalid interface number: 251 but max is 1 [ 303.230055][ T9] usb 1-1: config 0 has an invalid interface number: 2 but max is 1 [ 303.268498][ T7959] overlayfs: missing 'workdir' [ 303.305856][ T9] usb 1-1: config 0 has no interface number 0 [ 303.341946][ T9] usb 1-1: config 0 has no interface number 1 [ 303.355442][ T9] usb 1-1: config 0 interface 251 has no altsetting 0 [ 303.392527][ T9] usb 1-1: config 0 interface 2 has no altsetting 0 [ 303.669110][ T9] usb 1-1: New USB device found, idVendor=413c, idProduct=81a4, bcdDevice=ae.9f [ 303.702180][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.710353][ T9] usb 1-1: Product: syz [ 303.720217][ T9] usb 1-1: Manufacturer: syz [ 303.733677][ T9] usb 1-1: SerialNumber: syz [ 304.422357][ T9] usb 1-1: config 0 descriptor?? [ 304.451325][ T5978] dm9601 4-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 304.492663][ T5978] usb 4-1: USB disconnect, device number 9 [ 306.254558][ T7985] loop3: detected capacity change from 0 to 736 [ 306.309973][ T9] usb 1-1: selecting invalid altsetting 0 [ 306.319891][ T9] usb 1-1: Could not set interface, error -22 [ 306.336955][ T9] usb 1-1: USB disconnect, device number 8 [ 306.486740][ T7991] netlink: 28 bytes leftover after parsing attributes in process `syz.5.470'. [ 307.482922][ T8004] loop1: detected capacity change from 0 to 128 [ 308.363181][ T8004] EXT4-fs (loop1): Test dummy encryption mode enabled [ 308.730162][ T8004] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 308.801983][ T8017] loop5: detected capacity change from 0 to 512 [ 308.808658][ T8004] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 308.856141][ T8021] loop6: detected capacity change from 0 to 64 [ 308.863365][ T8017] EXT4-fs: Ignoring removed nobh option [ 308.934282][ T8017] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.474: iget: bad i_size value: 38620345925642 [ 308.969841][ T8017] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.474: couldn't read orphan inode 15 (err -117) [ 309.185080][ T8030] 9pnet_virtio: no channels available for device syz [ 309.595472][ T8035] loop4: detected capacity change from 0 to 128 [ 309.942863][ T8028] overlayfs: missing 'workdir' [ 309.956852][ T8017] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 309.981701][ T8035] EXT4-fs (loop4): Test dummy encryption mode enabled [ 310.512447][ T5862] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 310.542485][ T8016] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 310.623590][ T8035] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 310.706498][ T8035] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 310.739915][ T8021] ------------[ cut here ]------------ [ 310.745663][ T8021] WARNING: CPU: 1 PID: 8021 at fs/buffer.c:1183 mark_buffer_dirty+0x2a9/0x410 [ 310.754959][ T8021] Modules linked in: [ 310.759125][ T8021] CPU: 1 UID: 0 PID: 8021 Comm: syz.6.476 Not tainted 6.16.0-syzkaller-12187-g0227b49b5027 #0 PREEMPT(full) [ 310.770712][ T8021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 310.780862][ T8021] RIP: 0010:mark_buffer_dirty+0x2a9/0x410 [ 310.786775][ T8021] Code: 4c 89 f7 e8 b9 54 dd ff 49 8b 3e be 20 00 00 00 5b 41 5c 41 5e 41 5f 5d e9 54 05 fc ff e8 ff e9 79 ff eb 8c e8 f8 e9 79 ff 90 <0f> 0b 90 e9 95 fd ff ff e8 ea e9 79 ff 90 0f 0b 90 e9 bf fd ff ff [ 310.806727][ T8021] RSP: 0018:ffffc9000c047608 EFLAGS: 00010283 [ 310.812903][ T8021] RAX: ffffffff8245c1b8 RBX: ffff88804dc5c0e8 RCX: 0000000000080000 [ 310.820894][ T8021] RDX: ffffc9001c9c0000 RSI: 0000000000001bad RDI: 0000000000001bae [ 310.830216][ T8021] RBP: ffff88807b78e001 R08: ffff88804dc5c0ef R09: 1ffff11009b8b81d [ 310.839284][ T8021] R10: dffffc0000000000 R11: ffffed1009b8b81e R12: ffff88806dd41000 [ 310.847406][ T8021] R13: ffff88804dc1ad98 R14: ffff88804dc5c0e8 R15: 000000000000000e [ 310.855459][ T8021] FS: 00007fdda09f66c0(0000) GS:ffff888125d1c000(0000) knlGS:0000000000000000 [ 310.864539][ T8021] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 310.871141][ T8021] CR2: 0000200000002000 CR3: 0000000057145000 CR4: 0000000000350ef0 [ 310.879185][ T8021] Call Trace: [ 310.882506][ T8021] [ 310.885427][ T8021] bfs_get_block+0x5da/0xae0 [ 310.890030][ T8021] __block_write_begin_int+0x6b5/0x1900 [ 310.895660][ T8021] ? srso_alias_return_thunk+0x5/0xfbef5 [ 310.901310][ T8021] ? __pfx_bfs_get_block+0x10/0x10 [ 310.906513][ T8021] ? __pfx___block_write_begin_int+0x10/0x10 [ 310.912541][ T8021] ? __filemap_get_folio+0x79f/0xaf0 [ 310.917829][ T8021] ? __pfx_bfs_get_block+0x10/0x10 [ 310.922980][ T8021] block_write_begin+0x8a/0x120 [ 310.929127][ T8021] ? bfs_write_begin+0x1e/0xd0 [ 310.934955][ T8021] bfs_write_begin+0x35/0xd0 [ 310.939574][ T8021] generic_perform_write+0x2c5/0x900 [ 310.945168][ T8021] ? __pfx_generic_perform_write+0x10/0x10 [ 310.950966][ T8021] ? file_update_time+0x416/0x490 [ 310.956019][ T8021] ? srso_alias_return_thunk+0x5/0xfbef5 [ 310.961701][ T8021] ? __generic_file_write_iter+0xf9/0x230 [ 310.967495][ T8021] ? generic_file_write_iter+0x103/0x550 [ 310.973187][ T8021] generic_file_write_iter+0x117/0x550 [ 310.978676][ T8021] ? trace_irq_disable+0x37/0x110 [ 310.983765][ T8021] ? __pfx_generic_file_write_iter+0x10/0x10 [ 310.989747][ T8021] ? irqentry_exit+0x74/0x90 [ 310.994403][ T8021] ? srso_alias_return_thunk+0x5/0xfbef5 [ 311.000027][ T8021] ? lockdep_hardirqs_on+0x9c/0x150 [ 311.005362][ T8021] ? srso_alias_return_thunk+0x5/0xfbef5 [ 311.010991][ T8021] ? vfs_write+0x211/0xa90 [ 311.015436][ T8021] ? srso_alias_return_thunk+0x5/0xfbef5 [ 311.021065][ T8021] ? srso_alias_return_thunk+0x5/0xfbef5 [ 311.027289][ T8021] ? rcu_read_lock_any_held+0xb3/0x120 [ 311.034088][ T8021] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 311.039990][ T8021] vfs_write+0x54b/0xa90 [ 311.045295][ T8021] ? __pfx_generic_file_write_iter+0x10/0x10 [ 311.051273][ T8021] ? __pfx_vfs_write+0x10/0x10 [ 311.056096][ T8021] ? srso_alias_return_thunk+0x5/0xfbef5 [ 311.061724][ T8021] ksys_write+0x145/0x250 [ 311.066093][ T8021] ? __pfx_ksys_write+0x10/0x10 [ 311.070935][ T8021] ? rcu_is_watching+0x15/0xb0 [ 311.075727][ T8021] ? do_syscall_64+0xbe/0x3b0 [ 311.080407][ T8021] do_syscall_64+0xfa/0x3b0 [ 311.084953][ T8021] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.091004][ T8021] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 311.096656][ T8021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.102570][ T8021] RIP: 0033:0x7fdda278ebe9 [ 311.107019][ T8021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 311.126683][ T8021] RSP: 002b:00007fdda09f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 311.136425][ T8021] RAX: ffffffffffffffda RBX: 00007fdda29b5fa0 RCX: 00007fdda278ebe9 [ 311.145526][ T8021] RDX: 000000000000fecc RSI: 00002000000008c0 RDI: 0000000000000009 [ 311.153514][ T8021] RBP: 00007fdda2811e19 R08: 0000000000000000 R09: 0000000000000000 [ 311.161494][ T8021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 311.169491][ T8021] R13: 00007fdda29b6038 R14: 00007fdda29b5fa0 R15: 00007ffe9b84dab8 [ 311.177527][ T8021] [ 311.180564][ T8021] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 311.187838][ T8021] CPU: 1 UID: 0 PID: 8021 Comm: syz.6.476 Not tainted 6.16.0-syzkaller-12187-g0227b49b5027 #0 PREEMPT(full) [ 311.199360][ T8021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 311.209416][ T8021] Call Trace: [ 311.212699][ T8021] [ 311.215615][ T8021] dump_stack_lvl+0x99/0x250 [ 311.220197][ T8021] ? __asan_memcpy+0x40/0x70 [ 311.224781][ T8021] ? __pfx_dump_stack_lvl+0x10/0x10 [ 311.229970][ T8021] ? __pfx__printk+0x10/0x10 [ 311.234560][ T8021] ? srso_alias_return_thunk+0x5/0xfbef5 [ 311.240195][ T8021] vpanic+0x281/0x750 [ 311.244170][ T8021] ? __pfx__printk+0x10/0x10 [ 311.248754][ T8021] ? __pfx_vpanic+0x10/0x10 [ 311.253243][ T8021] ? srso_alias_return_thunk+0x5/0xfbef5 [ 311.258862][ T8021] ? is_bpf_text_address+0x26/0x2b0 [ 311.264082][ T8021] ? srso_alias_return_thunk+0x5/0xfbef5 [ 311.269707][ T8021] panic+0xb9/0xc0 [ 311.273418][ T8021] ? __pfx_panic+0x10/0x10 [ 311.277867][ T8021] __warn+0x31b/0x4b0 [ 311.281834][ T8021] ? mark_buffer_dirty+0x2a9/0x410 [ 311.286935][ T8021] ? mark_buffer_dirty+0x2a9/0x410 [ 311.292042][ T8021] report_bug+0x2be/0x4f0 [ 311.296376][ T8021] ? mark_buffer_dirty+0x2a9/0x410 [ 311.301481][ T8021] ? mark_buffer_dirty+0x2a9/0x410 [ 311.306584][ T8021] ? mark_buffer_dirty+0x2ab/0x410 [ 311.311679][ T8021] handle_bug+0x84/0x160 [ 311.315939][ T8021] exc_invalid_op+0x1a/0x50 [ 311.320440][ T8021] asm_exc_invalid_op+0x1a/0x20 [ 311.325280][ T8021] RIP: 0010:mark_buffer_dirty+0x2a9/0x410 [ 311.330981][ T8021] Code: 4c 89 f7 e8 b9 54 dd ff 49 8b 3e be 20 00 00 00 5b 41 5c 41 5e 41 5f 5d e9 54 05 fc ff e8 ff e9 79 ff eb 8c e8 f8 e9 79 ff 90 <0f> 0b 90 e9 95 fd ff ff e8 ea e9 79 ff 90 0f 0b 90 e9 bf fd ff ff [ 311.350607][ T8021] RSP: 0018:ffffc9000c047608 EFLAGS: 00010283 [ 311.356669][ T8021] RAX: ffffffff8245c1b8 RBX: ffff88804dc5c0e8 RCX: 0000000000080000 [ 311.364630][ T8021] RDX: ffffc9001c9c0000 RSI: 0000000000001bad RDI: 0000000000001bae [ 311.372590][ T8021] RBP: ffff88807b78e001 R08: ffff88804dc5c0ef R09: 1ffff11009b8b81d [ 311.380571][ T8021] R10: dffffc0000000000 R11: ffffed1009b8b81e R12: ffff88806dd41000 [ 311.388552][ T8021] R13: ffff88804dc1ad98 R14: ffff88804dc5c0e8 R15: 000000000000000e [ 311.396522][ T8021] ? mark_buffer_dirty+0x2a8/0x410 [ 311.401632][ T8021] ? mark_buffer_dirty+0x2a8/0x410 [ 311.406731][ T8021] bfs_get_block+0x5da/0xae0 [ 311.411334][ T8021] __block_write_begin_int+0x6b5/0x1900 [ 311.416970][ T8021] ? srso_alias_return_thunk+0x5/0xfbef5 [ 311.422604][ T8021] ? __pfx_bfs_get_block+0x10/0x10 [ 311.427712][ T8021] ? __pfx___block_write_begin_int+0x10/0x10 [ 311.433700][ T8021] ? __filemap_get_folio+0x79f/0xaf0 [ 311.438978][ T8021] ? __pfx_bfs_get_block+0x10/0x10 [ 311.444080][ T8021] block_write_begin+0x8a/0x120 [ 311.448918][ T8021] ? bfs_write_begin+0x1e/0xd0 [ 311.453679][ T8021] bfs_write_begin+0x35/0xd0 [ 311.458265][ T8021] generic_perform_write+0x2c5/0x900 [ 311.463552][ T8021] ? __pfx_generic_perform_write+0x10/0x10 [ 311.469447][ T8021] ? file_update_time+0x416/0x490 [ 311.474463][ T8021] ? srso_alias_return_thunk+0x5/0xfbef5 [ 311.480080][ T8021] ? __generic_file_write_iter+0xf9/0x230 [ 311.485785][ T8021] ? generic_file_write_iter+0x103/0x550 [ 311.491407][ T8021] generic_file_write_iter+0x117/0x550 [ 311.496852][ T8021] ? trace_irq_disable+0x37/0x110 [ 311.501869][ T8021] ? __pfx_generic_file_write_iter+0x10/0x10 [ 311.507842][ T8021] ? irqentry_exit+0x74/0x90 [ 311.512422][ T8021] ? srso_alias_return_thunk+0x5/0xfbef5 [ 311.518041][ T8021] ? lockdep_hardirqs_on+0x9c/0x150 [ 311.523227][ T8021] ? srso_alias_return_thunk+0x5/0xfbef5 [ 311.528849][ T8021] ? vfs_write+0x211/0xa90 [ 311.533259][ T8021] ? srso_alias_return_thunk+0x5/0xfbef5 [ 311.538973][ T8021] ? srso_alias_return_thunk+0x5/0xfbef5 [ 311.544596][ T8021] ? rcu_read_lock_any_held+0xb3/0x120 [ 311.550062][ T8021] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 311.555954][ T8021] vfs_write+0x54b/0xa90 [ 311.560283][ T8021] ? __pfx_generic_file_write_iter+0x10/0x10 [ 311.566262][ T8021] ? __pfx_vfs_write+0x10/0x10 [ 311.571034][ T8021] ? srso_alias_return_thunk+0x5/0xfbef5 [ 311.576658][ T8021] ksys_write+0x145/0x250 [ 311.580982][ T8021] ? __pfx_ksys_write+0x10/0x10 [ 311.585829][ T8021] ? rcu_is_watching+0x15/0xb0 [ 311.590599][ T8021] ? do_syscall_64+0xbe/0x3b0 [ 311.595272][ T8021] do_syscall_64+0xfa/0x3b0 [ 311.599768][ T8021] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.605814][ T8021] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 311.611437][ T8021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.617348][ T8021] RIP: 0033:0x7fdda278ebe9 [ 311.621747][ T8021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 311.641340][ T8021] RSP: 002b:00007fdda09f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 311.649774][ T8021] RAX: ffffffffffffffda RBX: 00007fdda29b5fa0 RCX: 00007fdda278ebe9 [ 311.657738][ T8021] RDX: 000000000000fecc RSI: 00002000000008c0 RDI: 0000000000000009 [ 311.665697][ T8021] RBP: 00007fdda2811e19 R08: 0000000000000000 R09: 0000000000000000 [ 311.673766][ T8021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 311.681721][ T8021] R13: 00007fdda29b6038 R14: 00007fdda29b5fa0 R15: 00007ffe9b84dab8 [ 311.689705][ T8021] [ 311.692929][ T8021] Kernel Offset: disabled [ 311.697242][ T8021] Rebooting in 86400 seconds..