last executing test programs: 4m2.454040801s ago: executing program 0 (id=1): r0 = socket(0x10, 0x803, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000000)={[{@jqfmt_vfsv0}, {@errors_remount}]}, 0x1, 0x78b, &(0x7f0000000f40)="$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") write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080)=0xffffffffffffffff, 0x12) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r1, 0x6, 0xa, 0x0, &(0x7f00000057c0)) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xd1, 0x0, 0x0, @loopback, @multicast1}}}}) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x10, &(0x7f00000000c0)={[{@nogrpid}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x1}}, {@orlov}, {@usrquota}, {@data_err_ignore}, {@sb={'sb', 0x3d, 0x3}}, {@noauto_da_alloc}]}, 0x4, 0x501, &(0x7f0000000f40)="$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") ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0x460, 0x2c, 0xd27, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {}, {}, {0xa, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}, @filter_kind_options=@f_bpf={{0x8}, {0x420, 0x2, [@TCA_BPF_FD={0x8, 0x6, r4}, @TCA_BPF_POLICE={0x414, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x82, 0xb, 0x97a3, 0x5, 0x3, 0x1, 0x0, 0x0, 0xb, 0x8000, 0x1000, 0x1, 0x1ed, 0x7, 0x9, 0x100, 0x3, 0x2, 0x81, 0xc486, 0x4be, 0x0, 0xbc3b, 0x8, 0x97b5, 0xac, 0x4, 0x5, 0x4, 0x1, 0x3, 0x1, 0x1, 0xa000000, 0x0, 0x7, 0x1, 0x958, 0x229f, 0x9, 0x9, 0x4, 0x630, 0x194fd611, 0xdd7, 0x8, 0x0, 0xfffffff8, 0x72, 0x5, 0x9, 0xfffff5e1, 0x401, 0x7, 0x6, 0x7, 0xf, 0x3, 0x1, 0x401, 0x3, 0x5, 0x4, 0x7fff, 0x1, 0x0, 0x9, 0x742dfcda, 0x4, 0x6, 0x6, 0x4, 0x7, 0x1, 0x8, 0x1, 0x1, 0x5, 0x0, 0xb, 0x1, 0xba, 0x8, 0x7, 0x3, 0x0, 0x5, 0x217, 0x1, 0x7, 0x8001, 0x3, 0x1, 0x7ff, 0x4, 0x9, 0x101, 0xffffffff, 0xf35a, 0x2, 0xca1e, 0x1, 0x7, 0x6, 0x7ff, 0x3, 0x8, 0x5, 0x4, 0x7, 0x5, 0x9, 0x0, 0xff, 0x101, 0x73, 0xb, 0xab76, 0x0, 0x1a0, 0x6, 0x4, 0xe, 0x5, 0x1400000, 0x9, 0x2, 0x0, 0x400, 0x1, 0x9, 0x8, 0x1, 0x2, 0x9, 0x5, 0x1, 0x6, 0xe71e, 0x101, 0x29, 0x18000, 0xc, 0x7c8a, 0x5, 0x2, 0xe5979c7, 0x4, 0xfffffff9, 0x9, 0x9, 0x0, 0x7, 0x63e, 0x399, 0x1, 0x3, 0x4, 0x7fff, 0xa1, 0x2, 0x5, 0x4, 0xfff, 0x10000, 0x9, 0x200, 0xfffffff9, 0x400, 0x3, 0x7, 0x2d7d, 0x8, 0x1, 0xfffffff9, 0x40, 0x2, 0x0, 0xffffffff, 0x4, 0xa7b, 0x5, 0x10000, 0x9, 0x5, 0x0, 0xd, 0xffffffff, 0x4, 0xfffffffa, 0x3, 0xfffffff2, 0xfecc, 0x8000, 0x40, 0xd2c9f322, 0x4, 0xfdb, 0xf447, 0x0, 0x6df, 0xffffffff, 0x1000, 0x2, 0xe0c, 0x3, 0x9, 0x7, 0x5, 0x0, 0x212b, 0x6fa, 0x6, 0x261f, 0x9, 0x2, 0x9, 0x2, 0xe7eb2bf7, 0x3, 0x5, 0x80, 0x7, 0x4, 0x0, 0x1000000, 0x2, 0xfffffffa, 0xa5, 0x6, 0xe, 0xffffffff, 0x7, 0x7, 0x3, 0x100, 0x8, 0x1, 0x80000000, 0x3, 0x8000, 0x1, 0xffff8001, 0x2, 0xa9, 0x83, 0x336c, 0x0, 0x4, 0x3, 0x1, 0x1, 0x5, 0x1]}]}]}}]}, 0x460}, 0x1, 0x0, 0x0, 0x20044815}, 0x40850) 3m47.089832491s ago: executing program 32 (id=1): r0 = socket(0x10, 0x803, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000000)={[{@jqfmt_vfsv0}, {@errors_remount}]}, 0x1, 0x78b, &(0x7f0000000f40)="$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") write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080)=0xffffffffffffffff, 0x12) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r1, 0x6, 0xa, 0x0, &(0x7f00000057c0)) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xd1, 0x0, 0x0, @loopback, @multicast1}}}}) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x10, &(0x7f00000000c0)={[{@nogrpid}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x1}}, {@orlov}, {@usrquota}, {@data_err_ignore}, {@sb={'sb', 0x3d, 0x3}}, {@noauto_da_alloc}]}, 0x4, 0x501, &(0x7f0000000f40)="$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") ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0x460, 0x2c, 0xd27, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {}, {}, {0xa, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}, @filter_kind_options=@f_bpf={{0x8}, {0x420, 0x2, [@TCA_BPF_FD={0x8, 0x6, r4}, @TCA_BPF_POLICE={0x414, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x82, 0xb, 0x97a3, 0x5, 0x3, 0x1, 0x0, 0x0, 0xb, 0x8000, 0x1000, 0x1, 0x1ed, 0x7, 0x9, 0x100, 0x3, 0x2, 0x81, 0xc486, 0x4be, 0x0, 0xbc3b, 0x8, 0x97b5, 0xac, 0x4, 0x5, 0x4, 0x1, 0x3, 0x1, 0x1, 0xa000000, 0x0, 0x7, 0x1, 0x958, 0x229f, 0x9, 0x9, 0x4, 0x630, 0x194fd611, 0xdd7, 0x8, 0x0, 0xfffffff8, 0x72, 0x5, 0x9, 0xfffff5e1, 0x401, 0x7, 0x6, 0x7, 0xf, 0x3, 0x1, 0x401, 0x3, 0x5, 0x4, 0x7fff, 0x1, 0x0, 0x9, 0x742dfcda, 0x4, 0x6, 0x6, 0x4, 0x7, 0x1, 0x8, 0x1, 0x1, 0x5, 0x0, 0xb, 0x1, 0xba, 0x8, 0x7, 0x3, 0x0, 0x5, 0x217, 0x1, 0x7, 0x8001, 0x3, 0x1, 0x7ff, 0x4, 0x9, 0x101, 0xffffffff, 0xf35a, 0x2, 0xca1e, 0x1, 0x7, 0x6, 0x7ff, 0x3, 0x8, 0x5, 0x4, 0x7, 0x5, 0x9, 0x0, 0xff, 0x101, 0x73, 0xb, 0xab76, 0x0, 0x1a0, 0x6, 0x4, 0xe, 0x5, 0x1400000, 0x9, 0x2, 0x0, 0x400, 0x1, 0x9, 0x8, 0x1, 0x2, 0x9, 0x5, 0x1, 0x6, 0xe71e, 0x101, 0x29, 0x18000, 0xc, 0x7c8a, 0x5, 0x2, 0xe5979c7, 0x4, 0xfffffff9, 0x9, 0x9, 0x0, 0x7, 0x63e, 0x399, 0x1, 0x3, 0x4, 0x7fff, 0xa1, 0x2, 0x5, 0x4, 0xfff, 0x10000, 0x9, 0x200, 0xfffffff9, 0x400, 0x3, 0x7, 0x2d7d, 0x8, 0x1, 0xfffffff9, 0x40, 0x2, 0x0, 0xffffffff, 0x4, 0xa7b, 0x5, 0x10000, 0x9, 0x5, 0x0, 0xd, 0xffffffff, 0x4, 0xfffffffa, 0x3, 0xfffffff2, 0xfecc, 0x8000, 0x40, 0xd2c9f322, 0x4, 0xfdb, 0xf447, 0x0, 0x6df, 0xffffffff, 0x1000, 0x2, 0xe0c, 0x3, 0x9, 0x7, 0x5, 0x0, 0x212b, 0x6fa, 0x6, 0x261f, 0x9, 0x2, 0x9, 0x2, 0xe7eb2bf7, 0x3, 0x5, 0x80, 0x7, 0x4, 0x0, 0x1000000, 0x2, 0xfffffffa, 0xa5, 0x6, 0xe, 0xffffffff, 0x7, 0x7, 0x3, 0x100, 0x8, 0x1, 0x80000000, 0x3, 0x8000, 0x1, 0xffff8001, 0x2, 0xa9, 0x83, 0x336c, 0x0, 0x4, 0x3, 0x1, 0x1, 0x5, 0x1]}]}]}}]}, 0x460}, 0x1, 0x0, 0x0, 0x20044815}, 0x40850) 1m0.756422473s ago: executing program 5 (id=412): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89fc, &(0x7f0000000000)={'hsr0\x00'}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x64102, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r1, 0x29, 0x31, 0xfffffffffffffffd, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) syz_open_dev$evdev(&(0x7f0000000080), 0x9, 0x10000) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000440)=""/244, 0xf4}], 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) fcntl$setstatus(r1, 0x4, 0x4000) 59.68859949s ago: executing program 5 (id=416): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="052de017000000000000000000460000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e00010000006aff8f008f000000000000000c0090aed2de0200c2"], 0x54}}, 0x0) prlimit64(0x0, 0xb52da926070e0c01, &(0x7f0000000140)={0x2, 0x80000000008a}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x3}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x200d) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x10000009) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000006, 0x100010, r2, 0x9e199000) r5 = syz_clone(0x2200c400, 0x0, 0xfe22, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, r5, 0x0, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000300), 0x7, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, &(0x7f0000000240)=0x13fff, 0x800, 0x0) get_mempolicy(0x0, 0x0, 0x206, &(0x7f0000ffd000/0x1000)=nil, 0x6) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f00000000c0)={0x5, 0x3, 0x2, 0x0, 0x20}) ioctl$vim2m_VIDIOC_EXPBUF(r7, 0xc0405610, &(0x7f0000000040)={0x2, 0x0, 0x3, 0x84000}) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) read$msr(r8, &(0x7f0000002000)=""/102400, 0x19000) 51.193827409s ago: executing program 5 (id=434): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) syz_mount_image$nilfs2(&(0x7f0000000080), &(0x7f0000000040)='./file2\x00', 0x1200400, &(0x7f0000000000)=ANY=[], 0x1, 0xa74, &(0x7f00000000c0)="$eJzs3U2MW0cBAOB53vWmmwTilIQuSWgTftryt9tslvATQVM1F6Km4lYp4hKlaYlIA6KV+FElkpy40aoKV37EqRwqQEjtBUU9calEI3GpOBQOHIiCVIkDFBKjtWe89qytZ++f7fX3SbPjefPsmff2+fn9zUwAJlal8Xdpaa4I4fobr5z6x4N/n12e8mhrjlrj73RbqhpCKGJ6Ovu8d6ea8Z33XjzfLS7CYuNvSocnb7feuyuEcCUcDjdCLRy4fvPltxafOHP19LUjb7964tbmLD0AAEyWr984sbT/r386uPf91+4/GXa0pqfj81pM747H/SfjgX86/q+EznTRFtrNZPNNx1DJ5pvqMl97OdVsvuke5c9kn1tt5R/smG9HSflTbdO6LTeMs7Qd10JRme9IVyrz881z8tA4r58p5i9fvPTM80OqKLDh/vVACOGwMGio1+s/aqzAEajL5odb9eHXQdiMUN8z7D0QQFN+v3CVK/mVhfVpfdp0f+XffqzS/f2wAbZ6+1f+eJX/q6ux/LN/2dR6MBm26+9XWq70Pdod0/l9hPz5pUG//+nzpuKf6ezzy/S6jzAu9xd61XNqi+uxVr3qn28X29VXYpzWw1ez/PbvT/4/HZf/MdDdvyfs+v/hEajDtg7VEaiD0HeoD3sHBIyslefmmupRys+f68vzd5Tk31OSP1uSv7Mkf1dJPkyy373wk/BSsXKen5/TD3o9LF1n+0CMPzhgffLrkYOWnz/3O6j1lp8/Twyj7PVzT1344tNnbzaf/y9a2//duL0fjula/G7diDOk64X5dfXWs/+1znIqPea7N6tP2m9UdqT5680S93XOV+xb+ZzQtp9ZVY+5zvft6TXfoc75atl8szHck9U3Pz7Zmb0vHX+k/WpaX9PZ8laz5ZjJ6pH2K3tjnNcD1iJtj72e/0/b51yoFs9cvHThkZhO2+kfp6o7lqcfbf/QX29N3YH16bf9z1zobP+zuzW9WmnfL+xZmV607xdq2fTFZrJ1mzxNPxbT6Xfum1Ozjenz57996emNXniYcM//4IffOnfp0oXvepFezFotXngx7D0TsNkWXnjuOwtFCOHic+eevfDshcvHjh8/trh4/EvHlhYax/UL7Uf3wHay8qM/7JoAAAAAAAAAAAAA/fre6VM3//zmF95ptv9faf+X2v+nJ39T+/8fZ+3/83byqR18age4t0t+Y9y91zvrMZPNV43hQ1l992Xl7M/e9+EYt8bxi+3/U3v7vF/XVJ/7sul5/71pvqw7gVX9pcxkfZDk4wV+LMbXYvzLAENUzHafHOOO/q3D6v6t07ae+qfQL8V4Sv+3tDWkfkxS++9e/Tql/f/eLagjG28rmhMOexmB7v458v1/tx2JD70uExCs54kK9bpRPIDRMOzxP9N1zxRf/sPX7lkOabbbj3XuL/P+S2E9Rn38SeWPwvifxYZVojX+XV/7vy69q3f089z/6Ar/+dmtd9qKDQf63f9ezRY99QO9r7zMdu/H8tPyPxT6K7/+i6z8/IZQn/6blb+zz/JXLf+htZX/v1h+Wm0Pf7zf8ps1LiqdIyfm143T/b/8unFyJ1v+1LfnwMu/xoEa78byYZL1Hme23xFsR9NQxv/tcn90rfLnMD4f02lHmJ5zyH+RB61/er4i/Q7szz6/KPl9G5dxinuZ9PF/vxzjsu9DGv83bY+1LulKW7raZd1WVr0Ahundkb//N2bhygjUQRjRMDsCdegM9Xp9cy9olRhq4Qx9/Q/77vOwyx/2+i+Tj/+bH7rn4/9WshOIfPzf/P35+L95fj6+Xp6fj/+br898/N88/77sc/Mr2HMl+R8pyT9Qkn9wJX+2W/6hkvd/tCT/SIjHJD3y7y95/wMl+feW5E+V5H+iJP+TJfkPluQ/XJL/qZL87S61R5nU5YdJlrfP8/2HyZHu//T6/u8ryQfG109fO/r42d9+o9Zs/z/TOl9L9/FOxnQ1njt/P6bz+96hLb2c92ZM/y3LH/XrHTBJ8v4z8t/3h0rygfGVnvPy/YYJVHTvsafffqt6HeczXj4d48/E+LMx/lyM52O8EOOjMV7covqxOR7/ze9PvFSsnO/vyfL7fZ68qHSe2ef9RB3rsz759YFBn2fP+/Eb1HrLX2NzMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgKGpNP4uLc0VIVx/45VTT525uLA85dHWHLXG3+m2VLX1vhAeifFUjH8eX9x578Xz7fHdGBdhMRShaE0PT95ulbQrhHAlHA43Qi0cuH7z5bcWnzhz9fS1I2+/euLW5q0BAAAA2P7+HwAA//+FBRqS") socketpair$unix(0x1, 0x2, 0x0, 0x0) socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) userfaultfd(0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000180)=0x15) ioctl$TCSETS(r4, 0xc0384707, &(0x7f0000000500)={0x5, 0x0, 0xfffffffe, 0x5, 0x0, "3eccd8f9d20000000000001000000200000500"}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xff, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000080)=0x2, 0x4) 49.219568829s ago: executing program 5 (id=438): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x400000001) fsopen(0x0, 0x1) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000140)=0xdb) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file1\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, 0x0) ioctl$TIOCSTI(r1, 0x5412, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x9, 0x10000) ioctl$OCFS2_IOC_UNRESVSP(r3, 0x40305829, &(0x7f0000000080)={0x2, 0x0, 0x2, 0x5, 0x5, 0x10000}) 44.866082013s ago: executing program 5 (id=443): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x300, 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) 44.297144232s ago: executing program 5 (id=446): connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x28040041, 0x0, 0x0) recvmmsg(r0, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x8000000004) socket$inet6_tcp(0xa, 0x1, 0x0) writev(r4, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001400add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) socket$inet6(0xa, 0x80001, 0x0) 43.39005917s ago: executing program 33 (id=446): connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x28040041, 0x0, 0x0) recvmmsg(r0, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x8000000004) socket$inet6_tcp(0xa, 0x1, 0x0) writev(r4, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001400add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) socket$inet6(0xa, 0x80001, 0x0) 19.032884763s ago: executing program 3 (id=497): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f00000105c0)='./file0\x00', 0x41, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x5, 0x10591, &(0x7f0000010600)="$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") r0 = mq_open(&(0x7f0000000040)='!seli\x1a\x1d!\xa7\x00\x00inux\x00G\xd0\xc6(X', 0x6e93ebbbcc0884f2, 0x0, 0x0) mq_timedsend(r0, 0x0, 0xff7f, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs2/binder1\x00', 0x802, 0x0) mq_timedreceive(r0, &(0x7f0000000500)=""/231, 0xe7, 0x10001, &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x5, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r3, 0x0, &(0x7f0000000000)=""/48}, 0x20) connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x602, 0x0) writev(r4, &(0x7f0000000100)=[{&(0x7f0000000140)='\t', 0x1}], 0x1) close_range(r4, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r5, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) recvmmsg(r5, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x40000000, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000340)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) setreuid(0x0, 0xee00) 17.460621857s ago: executing program 3 (id=500): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f0000000580)={0x0, 0x6}) r5 = signalfd(0xffffffffffffffff, &(0x7f0000000300)={[0x3]}, 0x8) getsockopt$ARPT_SO_GET_ENTRIES(r5, 0x0, 0x61, &(0x7f0000000380)={'filter\x00', 0x22, "3a563f94914ed5db7b1ce1a021657b1e5e2c5b6b018dee7189252ba518bb045807ba"}, &(0x7f0000000400)=0x46) r6 = syz_open_dev$mouse(&(0x7f0000000180), 0x4101, 0x40) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f00000001c0)=@req={0x0, 0x80, 0x9, 0xfffffff7}, 0x10) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000000980)={r4, "5a95ca9e74e87d955ec5f86d86fd2d53"}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r7, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) r8 = socket$inet_udp(0x2, 0x2, 0x0) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000600)={[{@gid}]}) r9 = getegid() syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x2000802, &(0x7f0000000200)=ANY=[@ANYBLOB='iocharset=macceltic,time_offset=0x0000000000000003,gid=', @ANYRESHEX=r9, @ANYBLOB="2c666d61736b3d30303030303000303030263030303030303030303030362c696f636861727365743d63703836332c616c6c6f775f7574696d653d30303030303030303030303030303030303030303030322c6e616d65636173653d312c6572726f72733d72656d6f756e742d726f2c757466382c646d61736b3d3030303030303030303030303030303030303030a930312c00"], 0x1, 0x1537, &(0x7f00000034c0)="$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") mount$fuseblk(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x10000, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x2000) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x1000000, &(0x7f00000000c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$eJzs3D1rW1cYB/AjWa6tlhZPhXbpoV3a5bb10qVDS3GhVNCSRCEv0zWWEyFFAl8NksmgOVM+RwhkCWQL+QL+DFmymYDx5Ck3OJKs2NixE0dy4vx+ix6e/z1X5+jARVy9bP5+91ZjNUtW004ozRdC8Y/QDzuFsBCKYaQffnpwZfvOxavX/v2zUlm6MDvsx/jVd4+v377//ZPOF5cf7nYKIYStxWcbX298s/ni0s16FutZbLU7MY3L7XYnXW7W4ko9ayQx/t+spVkt1ltZbW1fvtpsj5861LIspq1ebNR6sdOOnbVeTG+k9VZMkiTOB06lem8nz8NWnuf5XD/kef62JyhMZl5Myyn3n4/c3kU97l5Nn/e71W518DjI//6nsvRLfGVhPGq7263O7OW/DvK4P58Nnw/zxUPzz8KPPwzy3eyv/yoH8nJYmfzyAQAAAADgXErinkPv7yfJUfmgeu3zgQP370vh29K4MzP5pQAAAABHyHrrjbS5Mrs2KJq1Myvmwv7Ob4+GUzxu+M9Pjz9mQsWXwyK843nKIYSjjymGM9+U6RSj75EPO6PfF5xseOl9TaP8gbwao2I+HBaVw3pjbjqbAgAAnC/jN/0nHlKc6IQAAAAAAAAAAAAAAAAAAADgEzSNPzM76zUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALzJywAAAP//ixdW4w==") r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000000240)={'#! ', './file2'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r10, 0x0) pwritev(r10, &(0x7f0000000440)=[{0x0}, {&(0x7f0000000a80)="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", 0x581}, {0x0}, {0x0}], 0x4, 0x100, 0x6) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r8, 0x89f8, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f0000000480)={'gre0\x00', r2, 0x10, 0x8000, 0x89, 0x40, {{0x14, 0x4, 0x3, 0x10, 0x50, 0x66, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local, {[@generic={0x83, 0x12, "7f015d3ce87cf2d7abf8fc05cb11b6a9"}, @end, @generic={0x94, 0xd, "7be9e8c182e36d266672be"}, @cipso={0x86, 0x1c, 0x1, [{0x6, 0xb, "00d606f67be304f6ca"}, {0x7, 0xb, "731eb1080e9d48d9a6"}]}]}}}}}) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) r11 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x28442, 0x10) write$binfmt_register(r11, &(0x7f0000000140)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x5, 0x3a, '/*_', 0x3a, '/.^},', 0x3a, './file1'}, 0x2f) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r11, 0x6628) sendmsg$nl_route_sched(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@newtfilter={0xfffffffffffffd71, 0x11, 0x1, 0x70bd2c, 0x25dfdbfa, {0x0, 0x0, 0x74, r7, {0x2, 0xffe0}, {0xfff1, 0xa}, {0x1, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2400c840}, 0x4000850) 11.713254757s ago: executing program 3 (id=514): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x3000) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r2 = fcntl$dupfd(r1, 0x406, r1) syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000f00)='./file0\x00', 0x2, &(0x7f0000000000)={[{@nobarrier}, {@order_relaxed}, {}, {@order_relaxed}, {@nobarrier}, {@errors_continue}, {@nobarrier}, {@norecovery}], [], 0x2c}, 0x3, 0xf17, &(0x7f0000001e40)="$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") r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r3, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/4096, 0x1000, 0x0, &(0x7f0000001140)=""/134, 0x86}, &(0x7f00000000c0)=0x40) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 11.47622295s ago: executing program 4 (id=517): r0 = socket$inet_sctp(0x2, 0x5, 0x84) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 64) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') (rerun: 64) socket(0x1, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = fsopen(0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) pidfd_getfd(r1, r3, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r4, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x50, r5, 0x1, 0x70bd29, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x8}, {0x8, 0x15, 0xa9f}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000080}, 0x8000) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) (async) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4050}, 0x4000000) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0x50) (async, rerun: 64) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(0xffffffffffffffff, &(0x7f0000000000)='\"', 0x1) (async) bind$bt_hci(r6, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r6, &(0x7f0000000000), 0xd) (async, rerun: 64) sendmsg$inet6(r2, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1400000000000000010000000c"], 0x30}, 0x4000010) (rerun: 64) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000a00)={'wlan0\x00'}) (async, rerun: 64) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') (async, rerun: 64) r8 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r9 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010000100feffff7f030000000000", @ANYRES32=r10, @ANYBLOB="600000008008000300000000", @ANYRES32=0x0, @ANYBLOB], 0x28}, 0x1, 0xd, 0x0, 0x480c5}, 0x80c4) (async) sendmsg$inet_sctp(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="200000000000000084000000020000000a000400280000000b00000229"], 0x20, 0x2400e044}, 0x0) 11.130441928s ago: executing program 6 (id=518): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0xffff}, {0xffff, 0xfff1}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, 0x0, {0x8}, {0xffff}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x45, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000001a40)=""/102392, 0x18ff8) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/kernel/address_bits', 0x800, 0x0) lseek(r5, 0xffffffff, 0x3) shmget$private(0x0, 0x2000, 0x8, &(0x7f0000f25000/0x2000)=nil) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0x1, 0xfffffffb, 0x35, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2002, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x0, 0x3, 0xc, 0x3, 0xba55, 0x8da8, 0x2, 0x200, 0x2, 0x5, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x5, 0x10000, 0x400, 0x7ffd, 0x3, 0x3, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x2000008, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x7, 0x200, 0x3], [0x401, 0x8000c584, 0xffff, 0xcd3, 0xb, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0x1e88, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x4000, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x1, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x3, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0x80, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0xffffffff, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x1, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x3, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x200, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x86, 0x44, 0x409, 0x6, 0x4, 0x4, 0xe, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x101, 0xf, 0xf, 0x13e, 0x6]}, 0x45c) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r6, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) 11.090533997s ago: executing program 4 (id=519): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f0000000040)={'ipvs\x00'}, &(0x7f0000000100)=0x1e) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000180)=0x0) prlimit64(r2, 0x9, &(0x7f0000000200)={0xffffffffffffff21, 0x3}, &(0x7f0000000240)) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x1}]}, 0x1c}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffff4f, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94) 10.763580503s ago: executing program 3 (id=521): r0 = io_uring_setup(0x16c8, &(0x7f0000000080)={0x0, 0xd621, 0x1001, 0x0, 0x307}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x24, &(0x7f0000001280)={0x1, 0x0, &(0x7f0000000200)=[0xffffffffffffffff]}, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000001c0)={0xa0000011}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000540)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_STATS(r3, 0x0, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSBRKP(r6, 0x5425, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TIOCGPGRP(r6, 0x5437, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x20004840, 0x0, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'ip_vti0\x00', 0x0}) r10 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r10, &(0x7f0000000180)='`', 0x500, 0x0, &(0x7f0000000240)={0x3a, 0x0, r9, 0x1, 0x0, 0x6, @local}, 0x14) getpid() 10.403313973s ago: executing program 1 (id=522): r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) connect$unix(r1, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r1, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 8.112061618s ago: executing program 4 (id=523): r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) setsockopt$inet6_tcp_TLS_RX(r0, 0x11a, 0x2, &(0x7f00000001c0)=@gcm_128={{0x303}, "ecb2ec2ccc3b5101", "9360c3ccfb41612e9ce31a45675b8c2d", "1c418447", "937f705a6cfd7b02"}, 0x28) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1303}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='\'\x00', &(0x7f00000000c0)=':d]&-\'\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', r0, &(0x7f0000000180)='./file0\x00', 0x2) r2 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071100000000000001d400500000000004704000001ed00000f030000000000001d44000000000000620a00fe000000007203000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d07000000374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6bebf5088a2a12dd1a1b14d948aa911cf50968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3a51cc87e068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a881192292469d2d25115be3cfb8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c5a7bd32cb8d3ca303a671a9339e77a"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x30, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) sendmsg$nl_route(r2, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x1, 0x2, 0x25dfdbfe, {0x2}, [@NHA_ID={0x8, 0x6, 0xf7ffffff}, @NHA_FDB={0x4}]}, 0x24}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000000800010027bd7000000000000a002040000000070000000014000200fe880000000000200000000000000101080018004e204e20"], 0x38}, 0x1, 0x0, 0x0, 0x24048844}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) fcntl$setlease(r4, 0x400, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0xfcf3, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x5c}}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 7.893860922s ago: executing program 3 (id=524): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x84401, 0x0, 0x1, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) (async) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000640), 0x8) mmap$qrtrtun(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000000, 0x1810, r1, 0x40) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) (async) read$FUSE(r0, &(0x7f00000093c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x20a2112, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0xffffffffffffff04) syz_fuse_handle_req(r0, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba5234400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b60dd7710000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f400000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048636662867d08f50000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x0, 0x10201, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000500)={0x3c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x20008000) (async) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="b0"], 0x0, 0x0, 0x0}) (async) socket$xdp(0x2c, 0x3, 0x0) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000031b000/0x3000)=nil) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) (async) syz_clone3(&(0x7f0000000540)={0x200080000, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000140)=0x0, {0x39}, &(0x7f0000000240)=""/80, 0x50, &(0x7f0000000340)=""/105, &(0x7f00000004c0)=[r3, r3], 0x2, {r4}}, 0x58) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x7, r6}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(r5, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 7.740379597s ago: executing program 1 (id=525): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={0x0, 0x401}, &(0x7f0000000140)=0x8) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102400, 0x19000) syz_io_uring_setup(0x110, 0x0, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) 6.870638519s ago: executing program 6 (id=526): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={0x0, 0x1}) r1 = syz_open_dev$video4linux(&(0x7f0000000000), 0x71, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r1, 0xc0585605, &(0x7f00000005c0)={0x0, 0x1, @raw_data=[0x5, 0x400008, 0x3012, 0x0, 0x8, 0x3f, 0x7, 0xa, 0x7, 0x8, 0x4, 0xd62, 0x80000004, 0x4, 0x1, 0x5]}) r2 = timerfd_create(0x7, 0x800) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000002100), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x1) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x0, 0x0) close(0x3) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000580)=0x1) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x84e7}}, './file0\x00'}) 6.752478464s ago: executing program 1 (id=528): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='oom_adj\x00') cachestat(r0, &(0x7f0000000000)={0x264}, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, 0x0, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000100)={@multicast1, @remote, 0x0, "1e3d87dcf1640ae2dc5a12afb5be737899d3de664cd94bfafdd05de91b1b10cc", 0x4, 0xe, 0x7fff, 0x8001}, 0x3c) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000000)="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") syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902"], 0x0) 6.751490396s ago: executing program 4 (id=529): r0 = io_uring_setup(0x937, &(0x7f00000002c0)={0x0, 0x32b6, 0x80, 0x1, 0x35d}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, 0x0) r1 = syz_open_procfs(0x0, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000100)={@local}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2842, 0x0) r6 = syz_io_uring_setup(0x88f, &(0x7f0000000f40)={0x0, 0xaee2, 0x10, 0x1, 0xbfdffffc}, &(0x7f0000000140)=0x0, &(0x7f00000003c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) io_uring_enter(r6, 0x47f6, 0x0, 0x0, 0x0, 0x0) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080098306117e18911007852", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r9}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfefff963}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) memfd_create(0x0, 0x2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r2, 0x7b2, 0x0) close_range(r0, r2, 0x0) 5.730163184s ago: executing program 4 (id=530): syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x40, &(0x7f00000000c0)=ANY=[], 0x4, 0xf82, &(0x7f0000003080)="$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") r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = open(&(0x7f00000001c0)='./file1\x00', 0x149f7e, 0x100) fallocate(r1, 0x0, 0x0, 0x1001f0) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="180000afec02c34c53599ced71d31feb0000000000e278841c375c00000000000a000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x30, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r3, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000001e40)}}, 0x10) shutdown(r2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r4 = getpid() epoll_create1(0x0) sched_setscheduler(r4, 0x1, &(0x7f0000000180)=0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f0000001800)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/153, 0x99}, {&(0x7f00000005c0)=""/148, 0x94}, {&(0x7f0000000700)=""/119, 0x77}, {&(0x7f00000002c0)=""/61, 0x3d}, {&(0x7f0000000900)=""/107, 0x6b}, {&(0x7f0000000780)=""/68, 0x44}, {&(0x7f0000000a40)=""/72, 0x48}, {&(0x7f0000007000)=""/4096, 0x1000}, {&(0x7f0000001640)=""/231, 0xe7}], 0x9, &(0x7f0000001b80)=""/206, 0xce}}, {{&(0x7f0000000b40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000c80)=""/33, 0x21}, {&(0x7f0000000bc0)=""/168, 0xa8}, {&(0x7f00000019c0)=""/232, 0xe8}], 0x3}, 0xa}, {{&(0x7f0000001940)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000e40)=""/49, 0x31}, {&(0x7f0000000e80)=""/162, 0xa2}], 0x2, &(0x7f0000000f80)=""/142, 0x8e}, 0xac1}, {{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001040)=""/107, 0x6b}, {&(0x7f00000010c0)=""/71, 0x47}, {&(0x7f0000000880)=""/100, 0x64}, {&(0x7f00000011c0)=""/240, 0xf0}, {&(0x7f00000012c0)=""/74, 0x4a}, {&(0x7f0000001340)=""/85, 0x55}, {&(0x7f00000013c0)=""/136, 0x88}, {&(0x7f0000001480)=""/61, 0x3d}, {&(0x7f0000000680)=""/82, 0x52}], 0x9, &(0x7f0000001580)=""/70, 0x46}, 0x6}, {{0x0, 0x0, &(0x7f00000017c0), 0x0, &(0x7f0000009000)=""/4107, 0x100b}, 0x73}], 0x5, 0x10042, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNGETOBJECT(r7, 0x89e0, &(0x7f0000000480)) socket$inet_sctp(0x2, 0x5, 0x84) r8 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000340)={0x44, 0x4, 0x3}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) 5.446561489s ago: executing program 2 (id=531): socket$inet6(0xa, 0x1, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000280), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRESDEC=r3, @ANYRESHEX=r3, @ANYRESDEC=r0], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0xc004) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r2], 0x4) 5.035429685s ago: executing program 6 (id=532): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8482c0000005e14060205cd00000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e0000000d000000000400000600000000200000", @ANYRES32=0x1, @ANYBLOB="4000000000000002000500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300000001000000040000000700"/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000680)={'veth0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5800000055003d07000000000001000007000000", @ANYRES32=r4, @ANYBLOB="20000280", @ANYRES32=r3, @ANYBLOB="0000000000000000000000000a0000000000000000000014200001"], 0x58}}, 0x0) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300), 0x4) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000640)=@framed={{0x18, 0x2, 0x0, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x3b}}, &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r8, r7}, 0x94) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000003c0)={0x0, 0x2, 0x18}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xf, 0x12, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfff}, [@map_idx_val={0x18, 0x9, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x9362}, @ldst={0x2, 0x1, 0x2, 0x5, 0x7, 0x1, 0xffffffffffffffff}, @exit, @cb_func={0x18, 0x2, 0x4, 0x0, 0x1}, @jmp={0x5, 0x1, 0x4, 0x9, 0x5, 0xffffffffffffffff, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0xac}, @map_val={0x18, 0xb, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0xee6b}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000280)='GPL\x00', 0x6a18, 0x1d, &(0x7f00000002c0)=""/29, 0x41100, 0x1, '\x00', r4, @cgroup_device, r5, 0x8, &(0x7f0000000340)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x2, 0x3, 0x82, 0xa8}, 0x10, r8, 0xffffffffffffffff, 0x0, &(0x7f0000000400)=[r9], 0x0, 0x10, 0x7}, 0x94) 4.664254149s ago: executing program 2 (id=533): bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000001500)=@tcp}, 0x20) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'team_slave_0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x410cd}, 0x400c084) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="050000000400", @ANYBLOB='\x00'/17, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = socket(0x1a, 0xa, 0x7) setsockopt$MRT_DEL_VIF(r2, 0x0, 0xcb, &(0x7f0000000300)={0x0, 0x1, 0xa, 0x2, @vifc_lcl_addr=@loopback, @multicast2}, 0x10) r3 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000540)=""/88, 0x58}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) connect(r3, &(0x7f00000000c0)=@caif=@rfm={0x25, 0x401, "fbf67fd5331f0da9ed9026e49c0021c5"}, 0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c000000100001006cbd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="4db20200305b0100140003006e657464657673696d30000000000000200016801c0001800c0009"], 0x5c}, 0x1, 0x0, 0x0, 0xc1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="20000000f100000006"], 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="f4060000", @ANYRESOCT=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633009eef53009eff1cffffffff080211"], 0x6f4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 4.460421993s ago: executing program 6 (id=534): socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2275, &(0x7f0000000100)=0x2c0030) ioctl$SG_IO(r3, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x20000, 0x0}, &(0x7f0000000240)="948d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0}) 4.229886256s ago: executing program 2 (id=535): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4600, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000880)={0x0, 0x2, 0x1, [0x1, 0xeb5b, 0x6, 0x3, 0x100000000], [0x1, 0x3, 0x4, 0x2cd, 0x4, 0x200, 0x5, 0x5631, 0x7, 0x5, 0xfffffffffffffff7, 0xaf, 0x100000001, 0x7, 0x6e1, 0x86e, 0x2, 0x4, 0x3, 0x2, 0xfffffffffffffff7, 0x7c, 0x8, 0x2ad6, 0x8, 0x157b84ad, 0x0, 0xa, 0x80000001, 0x9, 0x10001, 0xfffffffffffffff9, 0x5, 0x1, 0x1, 0x1, 0x1, 0x1, 0x4, 0x3, 0x8, 0x7, 0xb, 0x2, 0x0, 0x9, 0x10000, 0x1000, 0x2, 0x8, 0x64, 0x280000000000, 0x2, 0x4, 0x7, 0xa, 0x3, 0x8, 0x2, 0x0, 0xa0000000000, 0xfffffffffffffff5, 0x7, 0x3, 0x176, 0x163, 0x0, 0x5, 0x5, 0xfc72, 0x9, 0x7, 0x7, 0x2, 0x6, 0x81, 0x2, 0x1, 0x10000000100, 0x0, 0x9, 0x2ce1, 0x7f, 0x8, 0xeab5, 0xffffffffffffffff, 0xf000000000000000, 0x6, 0x10001, 0x2b6, 0x1, 0x2e06ffea, 0x10001, 0xf2d5, 0xffffffffffffffff, 0x2b6b, 0x1, 0x4, 0x5ac, 0x7f95, 0xd13, 0x2c, 0x1ff, 0x1000, 0xd05, 0x1, 0x9e, 0x8000000000000000, 0x3, 0x0, 0x3, 0x5, 0xc, 0x6, 0x6281, 0x10, 0x7f, 0x7, 0x3, 0x3, 0x7]}) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, 0x1, 0x4, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4004) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_open_dev$loop(&(0x7f0000000240), 0x6, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000280)={r4, 0x0, {0x0, 0x0, 0x0, 0x32, 0x4000000000001001, 0x0, 0x0, 0x1c, 0xc, "faf98317e5a1149989fc8dbe53ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a8a0f3500000000000000000e00", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0x3, 0x6]}}) ioctl$SNDCTL_DSP_GETODELAY(r4, 0x80045017, &(0x7f0000000100)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000001000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) 3.222736399s ago: executing program 6 (id=536): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000040)=[{}], 0xb3c, 0x0, 0x0, 0x2, 0x0, 0x2}) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000000000800074000000000080003400000100e14000580050001"], 0x80}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) keyctl$reject(0x14, 0x0, 0xfffeffffffffff18, 0x1, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) fsopen(&(0x7f0000000380)='9p\x00', 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e1c, @local}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd000000100001000c081000418e00000004fcff", 0x58}], 0x1) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r7, {0xfff3, 0xb}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}, @TCA_FLOWER_CLASSID={0x8, 0x1, {0xffe0}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x220008e8}, 0x804) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) recvfrom(r0, &(0x7f0000000480)=""/190, 0xbe, 0x0, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r8, 0x1, 0x2, 0x1, 0x0, {0xa, 0x4e21, 0x2, @mcast2, 0x6}}}, 0x80) 3.167842174s ago: executing program 1 (id=537): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0xffff}, {0xffff, 0xfff1}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, 0x0, {0x8}, {0xffff}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x45, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000001a40)=""/102392, 0x18ff8) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/kernel/address_bits', 0x800, 0x0) lseek(r5, 0xffffffff, 0x3) shmget$private(0x0, 0x2000, 0x8, &(0x7f0000f25000/0x2000)=nil) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0x1, 0xfffffffb, 0x35, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2002, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x0, 0x3, 0xc, 0x3, 0xba55, 0x8da8, 0x2, 0x200, 0x2, 0x5, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x5, 0x10000, 0x400, 0x7ffd, 0x3, 0x3, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x2000008, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x7, 0x200, 0x3], [0x401, 0x8000c584, 0xffff, 0xcd3, 0xb, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0x1e88, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x4000, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x1, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x3, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0x80, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0xffffffff, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x1, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x3, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x200, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x86, 0x44, 0x409, 0x6, 0x4, 0x4, 0xe, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x101, 0xf, 0xf, 0x13e, 0x6]}, 0x45c) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200400dc}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) 1.940327576s ago: executing program 2 (id=538): r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x16101, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x15, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x2a}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xe5}, {0x85, 0x0, 0x0, 0x9b}}, @map_val={0x18, 0x7, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x6}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x6}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x25, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6ff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r3, 0x25, 0x0, @void}, 0x10) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x440, 0x0) ioctl$SNDCTL_TMR_METRONOME(r5, 0x40045407) syz_emit_ethernet(0x1289, &(0x7f00000048c0)=ANY=[], 0x0) 1.74685054s ago: executing program 4 (id=539): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r0) (async) prlimit64(0x0, 0x5, 0x0, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sigaltstack(&(0x7f0000000000)={&(0x7f0000000280)=""/4124, 0x80000001, 0x101c}, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) (async, rerun: 64) r4 = socket(0x10, 0x3, 0x4) (rerun: 64) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newqdisc={0x24, 0x14, 0xf0b, 0x70bd25, 0x0, {0x2, 0x0, 0x0, 0x0, {0x10, 0x7}, {0x0, 0x8}, {0x1, 0xffe0}}}, 0x24}}, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async, rerun: 32) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001d80)=ANY=[@ANYBLOB="4c060000", @ANYRES16=r1, @ANYBLOB="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"], 0x64c}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040) (rerun: 32) 1.447779508s ago: executing program 2 (id=540): r0 = userfaultfd(0x80001) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x20, 0x0, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') syz_genetlink_get_family_id$nl80211(&(0x7f0000002140), r2) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x6c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) ioctl$XFS_IOC_DIOINFO(r4, 0x800c581e, &(0x7f00000020c0)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002180)={0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) openat2(0xffffffffffffff9c, &(0x7f0000002100)='./file0\x00', &(0x7f0000002240)={0x0, 0x80}, 0x18) read$FUSE(r3, &(0x7f0000004240)={0x2020}, 0x2020) read$FUSE(r2, &(0x7f0000000040)={0x2020}, 0x2020) 1.162767937s ago: executing program 6 (id=541): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f0000000c80)='./file0\x00', 0x800000, &(0x7f00000000c0)=ANY=[@ANYBLOB='lastblock=00000000000000000226,adinicb,gid=forget,nostrict,unhide,uid=', @ANYRESDEC=0x0, @ANYBLOB="2c73686f727461642c7569643d69676e6f72652c73686f727461642c766f6c756d653d30303030303030303030303030303030303030362c001829935912ddb19b617db523a6bb7c0d782285ef952b9282ba93ba5ef9353deee866199e1a1a16f9b8980aa11304cc9667f126de9a575a9cb3c29169cb6e8bd4820f0d3882914f9f4dd2ac97c7c5181676dc89c5fd4f9c455fcdbd2eef48adb33cdc1f9e9a7f3a2bcb07fb13cffd272aa79076e8039f7ab310e76e7400"/192, @ANYRES64], 0x4, 0xc24, &(0x7f0000000d00)="$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") r0 = open(&(0x7f00000000c0)='./file1\x00', 0x66842, 0x21) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2030, 0x0, 0x3) 1.059724999s ago: executing program 1 (id=542): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000380)='G') (fail_nth: 3) 884.213773ms ago: executing program 3 (id=543): syz_usb_connect(0x0, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="120100005dbafc40fd0b0c01162d1c020301090224000100000000090400000221efb0000905020200000000ff09058202"], 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000002c0)=""/100, &(0x7f0000000500)=""/74, 0xeeef0000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000e40)) ioctl$VHOST_VDPA_GET_VQS_COUNT(r0, 0x8004af80, &(0x7f0000000000)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x4}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000100)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f00000001c0)=&(0x7f0000000140)) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 188.341808ms ago: executing program 1 (id=544): r0 = socket$nl_generic(0x10, 0x3, 0x10) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x1010000000000, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) syz_mount_image$fuse(0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x1, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x20000010) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r3, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x890) 0s ago: executing program 2 (id=545): syz_clone(0x1144280, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x2, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x10, 0x0, @vifc_lcl_addr=@multicast2, @remote}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000280)={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, "614af285791a63abd0f993af8077b5cd01e03d64a831683fdc3fd440829c82ae"}, 0x3c) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000040)=0x6, 0x4) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/ip_mr_cache\x00') preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/20, 0x14}], 0x1, 0x10000009, 0xffffffff) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x3, &(0x7f0000000000)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000007"], 0x0, 0x26}, 0x28) kernel console output (not intermixed with test programs): 3] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed - function = gfs2_qd_dispose, file = fs/gfs2/quota.c, line = 129 [ 186.323087][ T6956] loop2: detected capacity change from 0 to 1024 [ 186.843919][ T5823] CPU: 0 UID: 0 PID: 5823 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 186.843949][ T5823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 186.843960][ T5823] Call Trace: [ 186.843973][ T5823] [ 186.843982][ T5823] dump_stack_lvl+0xe8/0x150 [ 186.844013][ T5823] gfs2_assert_warn_i+0x194/0x2c0 [ 186.844042][ T5823] gfs2_qd_dispose+0x466/0x570 [ 186.844065][ T5823] gfs2_quota_cleanup+0x434/0x760 [ 186.844097][ T5823] ? __pfx_gfs2_quota_cleanup+0x10/0x10 [ 186.844131][ T5823] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.844157][ T5823] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.844186][ T5823] gfs2_make_fs_ro+0x2a0/0x320 [ 186.844212][ T5823] ? __pfx_gfs2_make_fs_ro+0x10/0x10 [ 186.844235][ T5823] ? do_raw_spin_lock+0x12b/0x2f0 [ 186.844257][ T5823] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.844280][ T5823] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.844305][ T5823] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.844326][ T5823] ? do_raw_spin_unlock+0xf5/0x210 [ 186.844349][ T5823] gfs2_put_super+0x220/0x860 [ 186.844380][ T5823] ? __pfx_gfs2_put_super+0x10/0x10 [ 186.844405][ T5823] generic_shutdown_super+0x13d/0x2d0 [ 186.844428][ T5823] kill_block_super+0x44/0x90 [ 186.844449][ T5823] deactivate_locked_super+0xbc/0x130 [ 186.844481][ T5823] cleanup_mnt+0x437/0x4d0 [ 186.844502][ T5823] ? _raw_spin_unlock_irq+0x23/0x50 [ 186.844524][ T5823] task_work_run+0x1d9/0x270 [ 186.844547][ T5823] ? __pfx_task_work_run+0x10/0x10 [ 186.844577][ T5823] exit_to_user_mode_loop+0xed/0x480 [ 186.844598][ T5823] ? rcu_is_watching+0x15/0xb0 [ 186.844629][ T5823] do_syscall_64+0x32d/0xf80 [ 186.844649][ T5823] ? trace_irq_disable+0x3b/0x150 [ 186.844666][ T5823] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.844689][ T5823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.844708][ T5823] RIP: 0033:0x7efd00d9d9d7 [ 186.844724][ T5823] Code: a2 c7 05 1c fd 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 186.844739][ T5823] RSP: 002b:00007ffdc8c7b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 186.844758][ T5823] RAX: 0000000000000000 RBX: 00007efd00e32050 RCX: 00007efd00d9d9d7 [ 186.844770][ T5823] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdc8c7b0e0 [ 186.844781][ T5823] RBP: 00007ffdc8c7b0e0 R08: 00007ffdc8c7c0e0 R09: 00000000ffffffff [ 186.844794][ T5823] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdc8c7c170 [ 186.844805][ T5823] R13: 00007efd00e32050 R14: 000000000002c915 R15: 00007ffdc8c7c1b0 [ 186.844839][ T5823] [ 187.508808][ T6961] loop4: detected capacity change from 0 to 32768 [ 187.627952][ T6961] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 187.643857][ T6973] loop1: detected capacity change from 0 to 512 [ 187.650932][ T6969] binder: 6967:6969 ioctl c0306201 0 returned -14 [ 187.697256][ T6961] XFS (loop4): Ending clean mount [ 187.709344][ T6961] XFS (loop4): Quotacheck needed: Please wait. [ 187.840790][ T6961] XFS (loop4): Quotacheck: Done. [ 189.185648][ T6988] loop3: detected capacity change from 0 to 4096 [ 189.192992][ T6988] EXT4-fs: Ignoring removed nobh option [ 189.220015][ T6988] EXT4-fs (loop3): Test dummy encryption mode enabled [ 189.240288][ T6988] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 189.356897][ T6988] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.481014][ T6998] ubi31: attaching mtd0 [ 189.500768][ T6998] ubi31: scanning is finished [ 190.741818][ T5821] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.864064][ T6998] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 191.704378][ T7015] usb usb3: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 193.714054][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.726487][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.520915][ T7032] loop1: detected capacity change from 0 to 32768 [ 196.598436][ T7032] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 196.606696][ T7032] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 196.623246][ T7032] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 196.636218][ T5907] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 196.643100][ T5907] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 196.839801][ T5931] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 196.872497][ T5907] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 229ms [ 196.884948][ T7044] binder: 7040:7044 ioctl c0306201 0 returned -14 [ 197.632228][ T7043] loop2: detected capacity change from 0 to 131072 [ 197.642098][ T5907] gfs2: fsid=syz:syz.0: jid=0: Done [ 197.647325][ T7032] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 197.658556][ T7043] F2FS-fs (loop2): Test dummy encryption mode enabled [ 197.667438][ T7043] F2FS-fs (loop2): invalid crc value [ 197.677690][ T5827] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 197.822936][ T7043] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 197.832950][ T7043] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 197.854236][ T5931] usb 6-1: config 0 has an invalid interface number: 52 but max is 0 [ 197.882295][ T7043] fscrypt: AES-256-XTS using implementation "xts-aes-vaes-avx2" [ 197.991281][ T7032] gfs2: fsid=syz:syz.0: found 1 quota changes [ 197.999175][ T7043] F2FS-fs (loop2): f2fs_fill_dentries: corrupted namelen=1025, run fsck to fix. [ 198.109760][ T7043] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 198.135695][ T5931] usb 6-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 198.300828][ T7057] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 198.750892][ T5931] usb 6-1: config 0 has no interface number 0 [ 198.757217][ T5931] usb 6-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 198.768869][ T5931] usb 6-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 198.790732][ T5931] usb 6-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 199.030898][ T5931] usb 6-1: config 0 interface 52 has no altsetting 0 [ 199.258196][ T5931] usb 6-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 199.279552][ T5931] usb 6-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 199.299568][ T5931] usb 6-1: Product: syz [ 199.303746][ T5931] usb 6-1: SerialNumber: syz [ 199.334435][ T5931] usb 6-1: config 0 descriptor?? [ 199.533822][ T5931] usb 6-1: can't set config #0, error -71 [ 199.573539][ T5931] usb 6-1: USB disconnect, device number 2 [ 199.928421][ T5823] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed - function = gfs2_qd_dispose, file = fs/gfs2/quota.c, line = 129 [ 200.062742][ T5823] CPU: 0 UID: 0 PID: 5823 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 200.062775][ T5823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 200.062791][ T5823] Call Trace: [ 200.062800][ T5823] [ 200.062811][ T5823] dump_stack_lvl+0xe8/0x150 [ 200.062851][ T5823] gfs2_assert_warn_i+0x194/0x2c0 [ 200.062891][ T5823] gfs2_qd_dispose+0x466/0x570 [ 200.062921][ T5823] gfs2_quota_cleanup+0x434/0x760 [ 200.062965][ T5823] ? __pfx_gfs2_quota_cleanup+0x10/0x10 [ 200.063010][ T5823] ? srso_alias_return_thunk+0x5/0xfbef5 [ 200.063045][ T5823] ? srso_alias_return_thunk+0x5/0xfbef5 [ 200.063084][ T5823] gfs2_make_fs_ro+0x2a0/0x320 [ 200.063120][ T5823] ? __pfx_gfs2_make_fs_ro+0x10/0x10 [ 200.063151][ T5823] ? do_raw_spin_lock+0x12b/0x2f0 [ 200.063181][ T5823] ? srso_alias_return_thunk+0x5/0xfbef5 [ 200.063212][ T5823] ? srso_alias_return_thunk+0x5/0xfbef5 [ 200.063246][ T5823] ? srso_alias_return_thunk+0x5/0xfbef5 [ 200.063275][ T5823] ? do_raw_spin_unlock+0xf5/0x210 [ 200.063306][ T5823] gfs2_put_super+0x220/0x860 [ 200.063347][ T5823] ? __pfx_gfs2_put_super+0x10/0x10 [ 200.063381][ T5823] generic_shutdown_super+0x13d/0x2d0 [ 200.063410][ T5823] kill_block_super+0x44/0x90 [ 200.063440][ T5823] deactivate_locked_super+0xbc/0x130 [ 200.063493][ T5823] cleanup_mnt+0x437/0x4d0 [ 200.063520][ T5823] ? _raw_spin_unlock_irq+0x23/0x50 [ 200.063550][ T5823] task_work_run+0x1d9/0x270 [ 200.063596][ T5823] ? __pfx_task_work_run+0x10/0x10 [ 200.063635][ T5823] exit_to_user_mode_loop+0xed/0x480 [ 200.063665][ T5823] ? rcu_is_watching+0x15/0xb0 [ 200.063706][ T5823] do_syscall_64+0x32d/0xf80 [ 200.063734][ T5823] ? trace_irq_disable+0x3b/0x150 [ 200.063757][ T5823] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.063788][ T5823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.063814][ T5823] RIP: 0033:0x7efd00d9d9d7 [ 200.063837][ T5823] Code: a2 c7 05 1c fd 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 200.063857][ T5823] RSP: 002b:00007ffdc8c7b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 200.063883][ T5823] RAX: 0000000000000000 RBX: 00007efd00e32050 RCX: 00007efd00d9d9d7 [ 200.063901][ T5823] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdc8c7b0e0 [ 200.063916][ T5823] RBP: 00007ffdc8c7b0e0 R08: 00007ffdc8c7c0e0 R09: 00000000ffffffff [ 200.063933][ T5823] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdc8c7c170 [ 200.063949][ T5823] R13: 00007efd00e32050 R14: 0000000000030bf9 R15: 00007ffdc8c7c1b0 [ 200.063987][ T5823] [ 200.333311][ T7067] loop4: detected capacity change from 0 to 256 [ 200.510916][ T7068] loop5: detected capacity change from 0 to 2048 [ 201.596972][ T7067] FAT-fs (loop4): Directory bread(block 64) failed [ 201.722610][ T7067] FAT-fs (loop4): Directory bread(block 65) failed [ 201.729218][ T7067] FAT-fs (loop4): Directory bread(block 66) failed [ 201.738623][ T7067] FAT-fs (loop4): Directory bread(block 67) failed [ 201.745499][ T7067] FAT-fs (loop4): Directory bread(block 68) failed [ 201.752277][ T7067] FAT-fs (loop4): Directory bread(block 69) failed [ 201.758860][ T7067] FAT-fs (loop4): Directory bread(block 70) failed [ 201.798210][ T7067] FAT-fs (loop4): Directory bread(block 71) failed [ 201.872516][ T7067] FAT-fs (loop4): Directory bread(block 72) failed [ 201.880833][ T7084] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 201.939321][ T7067] FAT-fs (loop4): Directory bread(block 73) failed [ 201.967640][ T7067] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 202.005110][ T7068] NILFS error (device loop5): nilfs_lookup: deleted inode referenced: 12 [ 202.059349][ T5907] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 202.092925][ T7068] Remounting filesystem read-only [ 204.400013][ T5907] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 204.751224][ T7105] loop2: detected capacity change from 0 to 128 [ 204.777924][ T7103] loop1: detected capacity change from 0 to 1024 [ 204.795627][ T7105] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 204.819999][ T7103] EXT4-fs: Ignoring removed oldalloc option [ 204.842830][ T5907] usb 4-1: Using ep0 maxpacket: 8 [ 204.886688][ T5907] usb 4-1: unable to get BOS descriptor or descriptor too short [ 204.898181][ T7105] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 204.914584][ T5907] usb 4-1: config 2 has an invalid interface number: 115 but max is 0 [ 204.944438][ T5907] usb 4-1: config 2 has no interface number 0 [ 204.992282][ T7103] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.005666][ T7105] trusted_key: encrypted_key: master key parameter 'defaul' is invalid [ 205.016886][ T7112] loop4: detected capacity change from 0 to 256 [ 205.034555][ T5907] usb 4-1: config 2 interface 115 altsetting 8 endpoint 0xA has an invalid bInterval 145, changing to 7 [ 205.071786][ T7113] binder: 7106:7113 ioctl c0306201 0 returned -14 [ 205.131772][ T5907] usb 4-1: config 2 interface 115 has no altsetting 0 [ 205.163516][ T7112] FAT-fs (loop4): Directory bread(block 64) failed [ 205.191812][ T7112] FAT-fs (loop4): Directory bread(block 65) failed [ 205.203120][ T5907] usb 4-1: New USB device found, idVendor=1b3d, idProduct=01a7, bcdDevice= 1.20 [ 205.229613][ T7112] FAT-fs (loop4): Directory bread(block 66) failed [ 205.272575][ T7112] FAT-fs (loop4): Directory bread(block 67) failed [ 205.281064][ T5907] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.303924][ T7112] FAT-fs (loop4): Directory bread(block 68) failed [ 205.334359][ T5907] usb 4-1: Product: syz [ 205.353144][ T7112] FAT-fs (loop4): Directory bread(block 69) failed [ 205.370687][ T5907] usb 4-1: Manufacturer: syz [ 205.379970][ T5907] usb 4-1: SerialNumber: syz [ 205.395978][ T5823] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.408344][ T7112] FAT-fs (loop4): Directory bread(block 70) failed [ 205.443001][ T7105] netlink: 'syz.2.236': attribute type 5 has an invalid length. [ 205.445957][ T7112] FAT-fs (loop4): Directory bread(block 71) failed [ 205.513141][ T31] audit: type=1800 audit(1774567879.519:116): pid=7114 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.236" name="file1" dev="loop2" ino=1048646 res=0 errno=0 [ 205.553165][ T7112] FAT-fs (loop4): Directory bread(block 72) failed [ 205.591606][ T7112] FAT-fs (loop4): Directory bread(block 73) failed [ 205.834175][ T5907] ftdi_sio 4-1:2.115: FTDI USB Serial Device converter detected [ 205.870302][ T5907] usb 4-1: Detected SIO [ 205.887174][ T5907] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 206.130942][ T5907] usb 4-1: USB disconnect, device number 8 [ 206.161253][ T5907] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 206.173910][ T5907] ftdi_sio 4-1:2.115: device disconnected [ 206.267909][ T83] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 207.006228][ T7133] loop5: detected capacity change from 0 to 256 [ 207.187413][ T7133] FAT-fs (loop5): Directory bread(block 64) failed [ 207.259631][ T7133] FAT-fs (loop5): Directory bread(block 65) failed [ 207.279081][ T7122] syz.6.241 (7122) used greatest stack depth: 16456 bytes left [ 207.321838][ T7133] FAT-fs (loop5): Directory bread(block 66) failed [ 207.392933][ T7133] FAT-fs (loop5): Directory bread(block 67) failed [ 207.496310][ T7133] FAT-fs (loop5): Directory bread(block 68) failed [ 207.534719][ T7133] FAT-fs (loop5): Directory bread(block 69) failed [ 207.799649][ T7133] FAT-fs (loop5): Directory bread(block 70) failed [ 207.826412][ T7133] FAT-fs (loop5): Directory bread(block 71) failed [ 207.909612][ T7133] FAT-fs (loop5): Directory bread(block 72) failed [ 208.046899][ T7133] FAT-fs (loop5): Directory bread(block 73) failed [ 208.592004][ T7133] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 210.672052][ T7167] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 210.732648][ T7169] FAULT_INJECTION: forcing a failure. [ 210.732648][ T7169] name failslab, interval 1, probability 0, space 0, times 0 [ 210.839819][ T7169] CPU: 0 UID: 0 PID: 7169 Comm: syz.6.255 Not tainted syzkaller #0 PREEMPT(full) [ 210.839855][ T7169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 210.839870][ T7169] Call Trace: [ 210.839880][ T7169] [ 210.839890][ T7169] dump_stack_lvl+0xe8/0x150 [ 210.839931][ T7169] should_fail_ex+0x412/0x560 [ 210.839971][ T7169] ? __d_alloc+0x37/0x6f0 [ 210.839997][ T7169] should_failslab+0xa8/0x100 [ 210.840031][ T7169] kmem_cache_alloc_lru_noprof+0x87/0x640 [ 210.840057][ T7169] ? __lock_acquire+0x6b5/0x2cf0 [ 210.840099][ T7169] __d_alloc+0x37/0x6f0 [ 210.840123][ T7169] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.840152][ T7169] ? __lock_acquire+0x6b5/0x2cf0 [ 210.840189][ T7169] d_alloc_parallel+0xe6/0x1610 [ 210.840224][ T7169] ? __d_lookup+0x66/0x780 [ 210.840258][ T7169] ? __d_lookup+0x66/0x780 [ 210.840290][ T7169] ? __pfx_d_alloc_parallel+0x10/0x10 [ 210.840319][ T7169] ? d_lookup+0x1f/0xa0 [ 210.840349][ T7169] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 210.840387][ T7169] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.840426][ T7169] path_openat+0xca8/0x3860 [ 210.840472][ T7169] ? __pfx_stack_trace_save+0x10/0x10 [ 210.840519][ T7169] ? __pfx_path_openat+0x10/0x10 [ 210.840544][ T7169] ? __x64_sys_open+0x11e/0x150 [ 210.840591][ T7169] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.840622][ T7169] ? __lock_acquire+0x6b5/0x2cf0 [ 210.840664][ T7169] do_file_open+0x23e/0x4a0 [ 210.840698][ T7169] ? __pfx_do_file_open+0x10/0x10 [ 210.840753][ T7169] ? _raw_spin_unlock+0x28/0x50 [ 210.840776][ T7169] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.840804][ T7169] ? alloc_fd+0x64b/0x6c0 [ 210.840859][ T7169] do_sys_openat2+0x113/0x200 [ 210.840900][ T7169] ? __pfx_do_sys_openat2+0x10/0x10 [ 210.840938][ T7169] ? ksys_write+0x242/0x270 [ 210.840968][ T7169] ? __pfx_ksys_write+0x10/0x10 [ 210.841002][ T7169] __x64_sys_open+0x11e/0x150 [ 210.841044][ T7169] do_syscall_64+0x14d/0xf80 [ 210.841072][ T7169] ? trace_irq_disable+0x3b/0x150 [ 210.841094][ T7169] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.841126][ T7169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.841151][ T7169] RIP: 0033:0x7f527699c799 [ 210.841172][ T7169] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 210.841192][ T7169] RSP: 002b:00007f52777b0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 210.841218][ T7169] RAX: ffffffffffffffda RBX: 00007f5276c16090 RCX: 00007f527699c799 [ 210.841236][ T7169] RDX: 0000000000000008 RSI: 0000000000002200 RDI: 0000200000000340 [ 210.841252][ T7169] RBP: 00007f52777b0090 R08: 0000000000000000 R09: 0000000000000000 [ 210.841267][ T7169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 210.841282][ T7169] R13: 00007f5276c16128 R14: 00007f5276c16090 R15: 00007ffd023f3b68 [ 210.841321][ T7169] [ 211.276508][ T7176] netlink: 4 bytes leftover after parsing attributes in process `syz.3.256'. [ 211.547095][ T7180] loop5: detected capacity change from 0 to 2048 [ 211.625513][ T7188] ubi31: attaching mtd0 [ 211.646681][ T7188] ubi31: scanning is finished [ 212.160025][ T5907] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 212.210374][ T5838] Bluetooth: hci6: command 0x0c1a tx timeout [ 212.265990][ T7180] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 212.377814][ T7180] NILFS (loop5): mounting unchecked fs [ 212.397671][ T5907] usb 7-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.7f [ 212.423648][ T5907] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.437323][ T6519] udevd[6519]: incorrect nilfs2 checksum on /dev/loop5 [ 212.444316][ T7180] NILFS (loop5): recovery complete [ 212.474222][ T7188] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 212.601116][ T5907] usb 7-1: config 0 descriptor?? [ 212.618666][ T6510] udevd[6510]: incorrect nilfs2 checksum on /dev/loop5 [ 212.629115][ T7194] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 212.850673][ T7178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.646870][ T7178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.698373][ T7178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.839376][ T7178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.881039][ T7203] netlink: 187468 bytes leftover after parsing attributes in process `syz.1.264'. [ 213.920284][ T7178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.929045][ T7178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.980343][ T7203] kernel profiling enabled (shift: 9) [ 214.049252][ T7178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.068267][ T7210] loop2: detected capacity change from 0 to 256 [ 214.176109][ T7178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.254782][ T7208] bond_slave_0: entered promiscuous mode [ 214.260580][ T7208] bond_slave_1: entered promiscuous mode [ 214.340338][ T7210] FAT-fs (loop2): Directory bread(block 64) failed [ 214.354522][ T7208] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 214.391852][ T7210] FAT-fs (loop2): Directory bread(block 65) failed [ 214.426251][ T7210] FAT-fs (loop2): Directory bread(block 66) failed [ 214.457770][ T7210] FAT-fs (loop2): Directory bread(block 67) failed [ 214.492650][ T7210] FAT-fs (loop2): Directory bread(block 68) failed [ 214.500478][ T7211] loop3: detected capacity change from 0 to 40427 [ 214.551931][ T7211] F2FS-fs (loop3): invalid crc value [ 214.600803][ T7210] FAT-fs (loop2): Directory bread(block 69) failed [ 214.651337][ T7211] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 214.668205][ T7211] F2FS-fs (loop3): checkpoint=disable on readonly fs [ 214.703266][ T5907] usb 7-1: string descriptor 0 read error: -71 [ 214.755299][ T7210] FAT-fs (loop2): Directory bread(block 70) failed [ 215.281369][ T5907] ldusb 7-1:0.0: Interrupt in endpoint not found [ 215.285194][ T7210] FAT-fs (loop2): Directory bread(block 71) failed [ 215.345632][ T5907] usb 7-1: USB disconnect, device number 4 [ 215.406117][ T7210] FAT-fs (loop2): Directory bread(block 72) failed [ 215.690464][ T5907] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 215.764045][ T7210] FAT-fs (loop2): Directory bread(block 73) failed [ 215.781066][ T7210] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 216.139603][ T5907] usb 6-1: device descriptor read/64, error -71 [ 216.478670][ T5907] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 217.009639][ T5907] usb 6-1: device descriptor read/64, error -71 [ 217.680033][ T5907] usb usb6-port1: attempt power cycle [ 217.896465][ T7246] netlink: 104 bytes leftover after parsing attributes in process `syz.2.275'. [ 217.982651][ T7246] netlink: 24 bytes leftover after parsing attributes in process `syz.2.275'. [ 218.059863][ T5907] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 218.128293][ T5907] usb 6-1: device descriptor read/8, error -71 [ 218.219360][ T7254] loop6: detected capacity change from 0 to 764 [ 218.435055][ T7258] loop4: detected capacity change from 0 to 2048 [ 218.569590][ T5907] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 218.877044][ T7260] netlink: 8 bytes leftover after parsing attributes in process `syz.2.282'. [ 218.884680][ T7258] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 218.898789][ T5907] usb 6-1: device descriptor read/8, error -71 [ 218.925304][ T7258] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 219.206132][ T5907] usb usb6-port1: unable to enumerate USB device [ 219.952498][ T7269] Symlink component flag not implemented [ 219.999213][ T7269] Symlink component flag not implemented (105) [ 220.081820][ T7275] FAULT_INJECTION: forcing a failure. [ 220.081820][ T7275] name failslab, interval 1, probability 0, space 0, times 0 [ 220.130153][ T7275] CPU: 1 UID: 0 PID: 7275 Comm: syz.1.284 Not tainted syzkaller #0 PREEMPT(full) [ 220.130183][ T7275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 220.130199][ T7275] Call Trace: [ 220.130208][ T7275] [ 220.130218][ T7275] dump_stack_lvl+0xe8/0x150 [ 220.130259][ T7275] should_fail_ex+0x412/0x560 [ 220.130308][ T7275] should_failslab+0xa8/0x100 [ 220.130343][ T7275] __kmalloc_node_track_caller_noprof+0xeb/0x7b0 [ 220.130376][ T7275] ? ip6_fraglist_init+0xb8/0xa60 [ 220.130410][ T7275] kmemdup_noprof+0x2b/0x70 [ 220.130446][ T7275] ip6_fraglist_init+0xb8/0xa60 [ 220.130490][ T7275] ip6_fragment+0x105e/0x1f30 [ 220.130541][ T7275] ? __pfx_ip6_finish_output2+0x10/0x10 [ 220.130580][ T7275] ? __pfx_ip6_fragment+0x10/0x10 [ 220.130603][ T7275] ? ip6_mtu+0x7d/0x490 [ 220.130625][ T7275] ? ip6_mtu+0x38c/0x490 [ 220.130649][ T7275] ? srso_alias_return_thunk+0x5/0xfbef5 [ 220.130679][ T7275] ? ip6_finish_output+0x37d/0x480 [ 220.130704][ T7275] ? ip6_output+0x126/0x550 [ 220.130728][ T7275] ip6_output+0x340/0x550 [ 220.130757][ T7275] ? ip6_mr_output+0x1f3/0x11c0 [ 220.130783][ T7275] ip6_mr_output+0x549/0x11c0 [ 220.130812][ T7275] ? srso_alias_return_thunk+0x5/0xfbef5 [ 220.130841][ T7275] ? __flow_hash_from_keys+0x45b/0x6e0 [ 220.130880][ T7275] ? ip6_mr_output+0x1f3/0x11c0 [ 220.130906][ T7275] ? __pfx_ip6_mr_output+0x10/0x10 [ 220.130932][ T7275] ? srso_alias_return_thunk+0x5/0xfbef5 [ 220.130964][ T7275] ? __ip6_local_out+0x15c/0x940 [ 220.131003][ T7275] ? srso_alias_return_thunk+0x5/0xfbef5 [ 220.131031][ T7275] ? __ip6_local_out+0x8f8/0x940 [ 220.131063][ T7275] ? srso_alias_return_thunk+0x5/0xfbef5 [ 220.131091][ T7275] ? ip6_cork_release+0x92/0x150 [ 220.131117][ T7275] ? __ip6_local_out+0x15c/0x940 [ 220.131153][ T7275] ? __pfx___ip6_local_out+0x10/0x10 [ 220.131199][ T7275] ? srso_alias_return_thunk+0x5/0xfbef5 [ 220.131235][ T7275] ? srso_alias_return_thunk+0x5/0xfbef5 [ 220.131264][ T7275] ? ip6_local_out+0x16e/0x190 [ 220.131295][ T7275] ? ip6_send_skb+0x10f/0x390 [ 220.131324][ T7275] ip6_send_skb+0x1d5/0x390 [ 220.131356][ T7275] udp_v6_send_skb+0xc17/0x1860 [ 220.131403][ T7275] udp_v6_push_pending_frames+0xa2/0x140 [ 220.131433][ T7275] udpv6_sendmsg+0xf36/0x2560 [ 220.131484][ T7275] ? __lock_acquire+0x6b5/0x2cf0 [ 220.131515][ T7275] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 220.131551][ T7275] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 220.131627][ T7275] ? srso_alias_return_thunk+0x5/0xfbef5 [ 220.131669][ T7275] ? srso_alias_return_thunk+0x5/0xfbef5 [ 220.131698][ T7275] ? inet_send_prepare+0x5c/0x270 [ 220.131729][ T7275] ? __pfx_inet6_sendmsg+0x10/0x10 [ 220.131764][ T7275] ? srso_alias_return_thunk+0x5/0xfbef5 [ 220.131793][ T7275] ? inet6_sendmsg+0xe4/0x120 [ 220.131826][ T7275] ? __pfx_inet6_sendmsg+0x10/0x10 [ 220.131865][ T7275] __sys_sendto+0x4a3/0x710 [ 220.131896][ T7275] ? __pfx___sys_sendto+0x10/0x10 [ 220.131919][ T7275] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 220.131967][ T7275] ? __fget_files+0x3a0/0x420 [ 220.132018][ T7275] ? srso_alias_return_thunk+0x5/0xfbef5 [ 220.132047][ T7275] ? ksys_write+0x242/0x270 [ 220.132079][ T7275] ? __pfx_ksys_write+0x10/0x10 [ 220.132113][ T7275] __x64_sys_sendto+0xde/0x100 [ 220.132145][ T7275] do_syscall_64+0x14d/0xf80 [ 220.132173][ T7275] ? trace_irq_disable+0x3b/0x150 [ 220.132194][ T7275] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.132227][ T7275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.132253][ T7275] RIP: 0033:0x7efd00d9c799 [ 220.132275][ T7275] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 220.132295][ T7275] RSP: 002b:00007efd01d02028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 220.132321][ T7275] RAX: ffffffffffffffda RBX: 00007efd01015fa0 RCX: 00007efd00d9c799 [ 220.132339][ T7275] RDX: 00000000000004d1 RSI: 0000200000001a00 RDI: 0000000000000003 [ 220.132355][ T7275] RBP: 00007efd01d02090 R08: 0000000000000000 R09: 0000000000000000 [ 220.132370][ T7275] R10: 0000000000040084 R11: 0000000000000246 R12: 0000000000000001 [ 220.132385][ T7275] R13: 00007efd01016038 R14: 00007efd01015fa0 R15: 00007ffdc8c7bdb8 [ 220.132426][ T7275] [ 220.839944][ T7248] loop3: detected capacity change from 0 to 32768 [ 221.582944][ T7284] FAULT_INJECTION: forcing a failure. [ 221.582944][ T7284] name failslab, interval 1, probability 0, space 0, times 0 [ 221.595710][ T7284] CPU: 1 UID: 0 PID: 7284 Comm: syz.6.286 Not tainted syzkaller #0 PREEMPT(full) [ 221.595739][ T7284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 221.595754][ T7284] Call Trace: [ 221.595763][ T7284] [ 221.595774][ T7284] dump_stack_lvl+0xe8/0x150 [ 221.595814][ T7284] should_fail_ex+0x412/0x560 [ 221.595864][ T7284] should_failslab+0xa8/0x100 [ 221.595899][ T7284] __kmalloc_node_track_caller_noprof+0xeb/0x7b0 [ 221.595929][ T7284] ? __kasan_kmalloc+0x93/0xb0 [ 221.595959][ T7284] ? __snd_timer_user_ioctl+0x1b6d/0x45f0 [ 221.595983][ T7284] ? srso_alias_return_thunk+0x5/0xfbef5 [ 221.596013][ T7284] ? __kmalloc_cache_noprof+0x31c/0x660 [ 221.596047][ T7284] kstrdup+0x42/0x100 [ 221.596083][ T7284] __snd_timer_user_ioctl+0x1b6d/0x45f0 [ 221.596113][ T7284] ? kasan_quarantine_put+0xbb/0x1f0 [ 221.596139][ T7284] ? srso_alias_return_thunk+0x5/0xfbef5 [ 221.596176][ T7284] ? __pfx___snd_timer_user_ioctl+0x10/0x10 [ 221.596202][ T7284] ? tomoyo_path_number_perm+0x219/0x630 [ 221.596241][ T7284] ? srso_alias_return_thunk+0x5/0xfbef5 [ 221.596270][ T7284] ? __mutex_trylock_common+0x158/0x260 [ 221.596315][ T7284] ? __pfx___mutex_trylock_common+0x10/0x10 [ 221.596352][ T7284] ? srso_alias_return_thunk+0x5/0xfbef5 [ 221.596389][ T7284] ? trace_contention_end+0x3d/0x150 [ 221.596438][ T7284] ? srso_alias_return_thunk+0x5/0xfbef5 [ 221.596466][ T7284] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 221.596505][ T7284] ? snd_timer_user_ioctl+0x4f/0xb0 [ 221.596550][ T7284] ? __pfx___mutex_lock+0x10/0x10 [ 221.596592][ T7284] ? __fget_files+0x2a/0x420 [ 221.596631][ T7284] ? __fget_files+0x3a0/0x420 [ 221.596668][ T7284] ? __fget_files+0x2a/0x420 [ 221.596707][ T7284] ? __pfx_snd_timer_user_ioctl+0x10/0x10 [ 221.596748][ T7284] snd_timer_user_ioctl+0x5e/0xb0 [ 221.596790][ T7284] __se_sys_ioctl+0xfc/0x170 [ 221.596825][ T7284] do_syscall_64+0x14d/0xf80 [ 221.596853][ T7284] ? trace_irq_disable+0x3b/0x150 [ 221.596881][ T7284] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.596913][ T7284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.596938][ T7284] RIP: 0033:0x7f527699c799 [ 221.596960][ T7284] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.596981][ T7284] RSP: 002b:00007f52777d1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 221.597006][ T7284] RAX: ffffffffffffffda RBX: 00007f5276c15fa0 RCX: 00007f527699c799 [ 221.597025][ T7284] RDX: 0000200000000040 RSI: 0000000040345410 RDI: 0000000000000003 [ 221.597041][ T7284] RBP: 00007f52777d1090 R08: 0000000000000000 R09: 0000000000000000 [ 221.597057][ T7284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.597072][ T7284] R13: 00007f5276c16038 R14: 00007f5276c15fa0 R15: 00007ffd023f3b68 [ 221.597110][ T7284] [ 222.161573][ T5827] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.655008][ T7310] loop3: detected capacity change from 0 to 512 [ 222.741999][ T7314] netlink: 16 bytes leftover after parsing attributes in process `syz.5.296'. [ 222.773000][ T7313] loop6: detected capacity change from 0 to 128 [ 222.965992][ T7310] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.110769][ T7310] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 223.318176][ T31] audit: type=1800 audit(1774567897.169:117): pid=7313 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.297" name="file1" dev="loop6" ino=1048651 res=0 errno=0 [ 223.686582][ T31] audit: type=1800 audit(1774567897.679:118): pid=7310 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.295" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 223.716869][ T7313] netlink: 'syz.6.297': attribute type 21 has an invalid length. [ 223.805794][ T7313] netlink: 132 bytes leftover after parsing attributes in process `syz.6.297'. [ 224.218205][ T7334] usb usb3: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 224.428494][ T5821] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.563769][ T7341] loop5: detected capacity change from 0 to 32768 [ 225.576327][ T7341] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.302 (7341) [ 225.893891][ T7341] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 225.904024][ T7341] BTRFS info (device loop5): using sha256 checksum algorithm [ 226.090588][ T7341] BTRFS info (device loop5): enabling ssd optimizations [ 226.097545][ T7341] BTRFS info (device loop5): turning on async discard [ 226.104339][ T7341] BTRFS info (device loop5): enabling free space tree [ 226.443509][ T7361] netlink: 16178 bytes leftover after parsing attributes in process `syz.5.302'. [ 226.847017][ T7370] loop1: detected capacity change from 0 to 1024 [ 226.880995][ T7370] ext3: Unknown parameter 'euid>000000000000000609' [ 227.221193][ T7370] loop1: detected capacity change from 0 to 1024 [ 227.349871][ T5938] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 227.569321][ T7381] netlink: 32 bytes leftover after parsing attributes in process `syz.3.312'. [ 227.632229][ T7383] netlink: 40 bytes leftover after parsing attributes in process `syz.1.308'. [ 227.645815][ T7383] netlink: 40 bytes leftover after parsing attributes in process `syz.1.308'. [ 227.704784][ T5938] usb 5-1: unable to get BOS descriptor or descriptor too short [ 227.732632][ T5818] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 227.751051][ T5938] usb 5-1: config 189 has an invalid interface number: 127 but max is 0 [ 227.766274][ T5938] usb 5-1: config 189 has no interface number 0 [ 227.802931][ T7384] pimreg: entered allmulticast mode [ 227.833334][ T5938] usb 5-1: config 189 interface 127 has no altsetting 0 [ 227.853093][ T5938] usb 5-1: language id specifier not provided by device, defaulting to English [ 227.935935][ T5938] usb 5-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=61.9f [ 227.969543][ T5938] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.014160][ T7386] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 228.021582][ T5938] usb 5-1: Product: 䞙灨恝뎺ꐺ揕ậ떉勻㨁뷳Ꞻ緄㉺ὠ첤嫦㪑ᣡ尉㜒념ⱁ眡ꛃ혷栭鑤䧋﹪˦쉳瑲䡹ࣉᲕ쭜ࢃ죜⫹䉞﹗鉅낟㊝苎埋㰞 [ 228.217028][ T5938] usb 5-1: Manufacturer: ␋柅z [ 228.222125][ T5938] usb 5-1: SerialNumber: 殮彭솺町伟쏅㖙㲿ⴚ驍룛ꕙ텳Ᏺ䩀㱾껏㧞ᗣ尮䆚ꙸ驏ឌ䟖烧䐷睷엉ှ歩劍얽妇ﱮ᳈Ꜣ✼钅젃滅⦾嗕稲늾朳ᆵ뭶⭹ [ 228.274790][ T7391] usb usb3: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 228.525687][ T5938] usbserial_generic 5-1:189.127: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 228.591207][ T5938] usbserial_generic 5-1:189.127: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 228.679558][ T5938] usbserial_generic 5-1:189.127: generic converter detected [ 228.756635][ T5938] usb 5-1: generic converter now attached to ttyUSB0 [ 228.804812][ T5938] usb 5-1: USB disconnect, device number 4 [ 228.990357][ T5938] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 229.053009][ T5938] usbserial_generic 5-1:189.127: device disconnected [ 229.323825][ T7407] loop2: detected capacity change from 0 to 32768 [ 229.358016][ T7407] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.318 (7407) [ 229.374263][ T7407] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 229.384356][ T7407] BTRFS info (device loop2): using sha256 checksum algorithm [ 229.531149][ T7405] syzkaller1: entered promiscuous mode [ 229.538805][ T7405] syzkaller1: entered allmulticast mode [ 229.549872][ T7416] loop3: detected capacity change from 0 to 2 [ 229.608801][ T7416] jffs2: Bad value for 'rp_size' [ 229.626020][ T7407] BTRFS info (device loop2): enabling ssd optimizations [ 229.633015][ T7407] BTRFS info (device loop2): turning on async discard [ 229.639795][ T7407] BTRFS info (device loop2): enabling free space tree [ 229.650229][ T7425] FAULT_INJECTION: forcing a failure. [ 229.650229][ T7425] name failslab, interval 1, probability 0, space 0, times 0 [ 229.680937][ T7425] CPU: 0 UID: 0 PID: 7425 Comm: syz.5.321 Not tainted syzkaller #0 PREEMPT(full) [ 229.680968][ T7425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 229.680983][ T7425] Call Trace: [ 229.680994][ T7425] [ 229.681004][ T7425] dump_stack_lvl+0xe8/0x150 [ 229.681045][ T7425] should_fail_ex+0x412/0x560 [ 229.681086][ T7425] ? __d_alloc+0x37/0x6f0 [ 229.681113][ T7425] should_failslab+0xa8/0x100 [ 229.681149][ T7425] kmem_cache_alloc_lru_noprof+0x87/0x640 [ 229.681176][ T7425] ? __lock_acquire+0x6b5/0x2cf0 [ 229.681219][ T7425] __d_alloc+0x37/0x6f0 [ 229.681244][ T7425] ? srso_alias_return_thunk+0x5/0xfbef5 [ 229.681274][ T7425] ? __lock_acquire+0x6b5/0x2cf0 [ 229.681311][ T7425] d_alloc_parallel+0xe6/0x1610 [ 229.681349][ T7425] ? __d_lookup+0x66/0x780 [ 229.681382][ T7425] ? __d_lookup+0x66/0x780 [ 229.681415][ T7425] ? __pfx_d_alloc_parallel+0x10/0x10 [ 229.681444][ T7425] ? d_lookup+0x1f/0xa0 [ 229.681490][ T7425] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 229.681530][ T7425] ? srso_alias_return_thunk+0x5/0xfbef5 [ 229.681570][ T7425] path_openat+0xca8/0x3860 [ 229.681625][ T7425] ? __pfx_stack_trace_save+0x10/0x10 [ 229.681673][ T7425] ? __pfx_path_openat+0x10/0x10 [ 229.681700][ T7425] ? __x64_sys_openat+0x138/0x170 [ 229.681749][ T7425] ? srso_alias_return_thunk+0x5/0xfbef5 [ 229.681778][ T7425] ? __lock_acquire+0x6b5/0x2cf0 [ 229.681820][ T7425] do_file_open+0x23e/0x4a0 [ 229.681856][ T7425] ? __pfx_do_file_open+0x10/0x10 [ 229.681912][ T7425] ? _raw_spin_unlock+0x28/0x50 [ 229.681937][ T7425] ? srso_alias_return_thunk+0x5/0xfbef5 [ 229.681965][ T7425] ? alloc_fd+0x64b/0x6c0 [ 229.682017][ T7425] do_sys_openat2+0x113/0x200 [ 229.682059][ T7425] ? __pfx_do_sys_openat2+0x10/0x10 [ 229.682098][ T7425] ? ksys_write+0x242/0x270 [ 229.682130][ T7425] ? __pfx_ksys_write+0x10/0x10 [ 229.682163][ T7425] __x64_sys_openat+0x138/0x170 [ 229.682208][ T7425] do_syscall_64+0x14d/0xf80 [ 229.682237][ T7425] ? trace_irq_disable+0x3b/0x150 [ 229.682259][ T7425] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.682292][ T7425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.682317][ T7425] RIP: 0033:0x7fea1139c799 [ 229.682340][ T7425] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 229.682360][ T7425] RSP: 002b:00007fea0f5b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 229.682386][ T7425] RAX: ffffffffffffffda RBX: 00007fea11616180 RCX: 00007fea1139c799 [ 229.682404][ T7425] RDX: 0000000000060a41 RSI: 00002000000013c0 RDI: ffffffffffffff9c [ 229.682422][ T7425] RBP: 00007fea0f5b4090 R08: 0000000000000000 R09: 0000000000000000 [ 229.682438][ T7425] R10: 0b3836f6d7a15f29 R11: 0000000000000246 R12: 0000000000000001 [ 229.682455][ T7425] R13: 00007fea11616218 R14: 00007fea11616180 R15: 00007fffd4d195b8 [ 229.682495][ T7425] [ 230.036386][ T7428] loop6: detected capacity change from 0 to 2048 [ 230.309643][ T7428] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 230.335686][ T7416] netlink: 4472 bytes leftover after parsing attributes in process `syz.3.320'. [ 230.444979][ T7416] netlink: 4472 bytes leftover after parsing attributes in process `syz.3.320'. [ 232.451182][ T5817] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 232.836322][ T7437] ubi31: attaching mtd0 [ 232.857478][ T7437] ubi31: scanning is finished [ 233.664767][ T7437] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 234.079936][ T7442] capability: warning: `syz.3.326' uses deprecated v2 capabilities in a way that may be insecure [ 234.180827][ T7448] netlink: 4 bytes leftover after parsing attributes in process `syz.3.326'. [ 234.290185][ T7453] syz_tun: entered allmulticast mode [ 234.417834][ T7447] syz_tun: left allmulticast mode [ 235.679773][ T7455] binder: 7446:7455 ioctl c0306201 0 returned -14 [ 235.965799][ T31] audit: type=1800 audit(1774567909.979:119): pid=7460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.330" name="bus" dev="tmpfs" ino=323 res=0 errno=0 [ 235.992273][ T7459] usb usb3: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 236.271226][ T5908] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 236.308989][ T7469] netlink: 28 bytes leftover after parsing attributes in process `syz.3.333'. [ 236.317987][ T7469] netlink: 40 bytes leftover after parsing attributes in process `syz.3.333'. [ 236.800435][ T7474] usb usb3: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 237.432397][ T5908] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 237.449527][ T5908] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.457583][ T5908] usb 2-1: Product: syz [ 237.469524][ T5908] usb 2-1: Manufacturer: syz [ 237.474132][ T5908] usb 2-1: SerialNumber: syz [ 238.478858][ T5908] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 238.557040][ T5907] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 238.687572][ T7477] comedi comedi0: pcl730: I/O port conflict (0x4000409,4) [ 238.813071][ T7462] tmpfs: Bad value for 'mpol' [ 239.164226][ T10] usb 2-1: USB disconnect, device number 3 [ 239.180588][ T7481] loop4: detected capacity change from 0 to 128 [ 239.386296][ T7481] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 239.458510][ T7481] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 239.483693][ T7482] loop5: detected capacity change from 0 to 4096 [ 239.545109][ T7488] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 239.794950][ T5907] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 239.809872][ T5907] ath9k_htc: Failed to initialize the device [ 239.840514][ T10] usb 2-1: ath9k_htc: USB layer deinitialized [ 239.879552][ T7482] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 239.906487][ T7481] mmap: syz.4.337 (7481) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 240.012302][ T7482] ntfs3(loop5): ino=19, mi_enum_attr [ 240.017618][ T7482] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 240.083928][ T7482] ntfs3(loop5): Failed to initialize $Extend/$Reparse. [ 240.110974][ T7492] FAULT_INJECTION: forcing a failure. [ 240.110974][ T7492] name failslab, interval 1, probability 0, space 0, times 0 [ 240.165631][ T7494] FAULT_INJECTION: forcing a failure. [ 240.165631][ T7494] name failslab, interval 1, probability 0, space 0, times 0 [ 240.171361][ T7492] CPU: 1 UID: 0 PID: 7492 Comm: syz.3.340 Tainted: G L syzkaller #0 PREEMPT(full) [ 240.171394][ T7492] Tainted: [L]=SOFTLOCKUP [ 240.171404][ T7492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 240.171418][ T7492] Call Trace: [ 240.171427][ T7492] [ 240.171437][ T7492] dump_stack_lvl+0xe8/0x150 [ 240.171476][ T7492] should_fail_ex+0x412/0x560 [ 240.171520][ T7492] should_failslab+0xa8/0x100 [ 240.171552][ T7492] ? skb_clone+0x212/0x3a0 [ 240.171582][ T7492] kmem_cache_alloc_noprof+0x87/0x650 [ 240.171614][ T7492] ? __netlink_lookup+0xc6/0x8b0 [ 240.171648][ T7492] skb_clone+0x212/0x3a0 [ 240.171683][ T7492] __netlink_deliver_tap+0x404/0x850 [ 240.171736][ T7492] ? netlink_deliver_tap+0x2e/0x1b0 [ 240.171776][ T7492] netlink_deliver_tap+0x19c/0x1b0 [ 240.171816][ T7492] netlink_unicast+0x7e3/0x9b0 [ 240.171861][ T7492] ? __pfx_netlink_unicast+0x10/0x10 [ 240.171899][ T7492] ? srso_alias_return_thunk+0x5/0xfbef5 [ 240.171928][ T7492] ? skb_put+0x11b/0x210 [ 240.171952][ T7492] ? srso_alias_return_thunk+0x5/0xfbef5 [ 240.171986][ T7492] netlink_sendmsg+0x813/0xb40 [ 240.172021][ T7492] ? __pfx_netlink_sendmsg+0x10/0x10 [ 240.172049][ T7492] ? srso_alias_return_thunk+0x5/0xfbef5 [ 240.172077][ T7492] ? aa_sock_msg_perm+0xf1/0x1b0 [ 240.172116][ T7492] ? srso_alias_return_thunk+0x5/0xfbef5 [ 240.172144][ T7492] ? srso_alias_return_thunk+0x5/0xfbef5 [ 240.172178][ T7492] ____sys_sendmsg+0x972/0x9f0 [ 240.172218][ T7492] ? __pfx_____sys_sendmsg+0x10/0x10 [ 240.172258][ T7492] ? srso_alias_return_thunk+0x5/0xfbef5 [ 240.172286][ T7492] ? import_iovec+0x73/0xa0 [ 240.172319][ T7492] ___sys_sendmsg+0x2a5/0x360 [ 240.172355][ T7492] ? __pfx____sys_sendmsg+0x10/0x10 [ 240.172427][ T7492] ? __fget_files+0x2a/0x420 [ 240.172462][ T7492] ? srso_alias_return_thunk+0x5/0xfbef5 [ 240.172491][ T7492] ? __fget_files+0x3a0/0x420 [ 240.172541][ T7492] __x64_sys_sendmsg+0x1bd/0x2a0 [ 240.172574][ T7492] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 240.172620][ T7492] ? __pfx_ksys_write+0x10/0x10 [ 240.172662][ T7492] do_syscall_64+0x14d/0xf80 [ 240.172691][ T7492] ? trace_irq_disable+0x3b/0x150 [ 240.172713][ T7492] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.172745][ T7492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.172770][ T7492] RIP: 0033:0x7f487539c799 [ 240.172792][ T7492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 240.172812][ T7492] RSP: 002b:00007f48761b4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 240.172837][ T7492] RAX: ffffffffffffffda RBX: 00007f4875615fa0 RCX: 00007f487539c799 [ 240.172855][ T7492] RDX: 0000000000044000 RSI: 0000200000000200 RDI: 0000000000000003 [ 240.172871][ T7492] RBP: 00007f48761b4090 R08: 0000000000000000 R09: 0000000000000000 [ 240.172886][ T7492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 240.172901][ T7492] R13: 00007f4875616038 R14: 00007f4875615fa0 R15: 00007ffe7207a228 [ 240.172940][ T7492] [ 240.484074][ T7494] CPU: 0 UID: 0 PID: 7494 Comm: syz.6.342 Tainted: G L syzkaller #0 PREEMPT(full) [ 240.484110][ T7494] Tainted: [L]=SOFTLOCKUP [ 240.484119][ T7494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 240.484133][ T7494] Call Trace: [ 240.484142][ T7494] [ 240.484152][ T7494] dump_stack_lvl+0xe8/0x150 [ 240.484192][ T7494] should_fail_ex+0x412/0x560 [ 240.484231][ T7494] ? __d_alloc+0x37/0x6f0 [ 240.484258][ T7494] should_failslab+0xa8/0x100 [ 240.484292][ T7494] kmem_cache_alloc_lru_noprof+0x87/0x640 [ 240.484330][ T7494] __d_alloc+0x37/0x6f0 [ 240.484363][ T7494] d_alloc_pseudo+0x21/0xc0 [ 240.484391][ T7494] alloc_file_pseudo+0xdd/0x240 [ 240.484432][ T7494] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 240.484471][ T7494] ? rcu_is_watching+0x15/0xb0 [ 240.484510][ T7494] ? __kasan_kmalloc+0x93/0xb0 [ 240.484547][ T7494] anon_inode_getfile+0xc5/0x1a0 [ 240.484581][ T7494] sync_file_create+0x76/0x1c0 [ 240.484613][ T7494] dma_buf_ioctl+0x688/0x8d0 [ 240.484655][ T7494] ? __pfx_dma_buf_ioctl+0x10/0x10 [ 240.484701][ T7494] ? __fget_files+0x2a/0x420 [ 240.484743][ T7494] ? __fget_files+0x2a/0x420 [ 240.484780][ T7494] ? __fget_files+0x3a0/0x420 [ 240.484816][ T7494] ? __fget_files+0x2a/0x420 [ 240.484864][ T7494] ? srso_alias_return_thunk+0x5/0xfbef5 [ 240.484894][ T7494] ? srso_alias_return_thunk+0x5/0xfbef5 [ 240.484925][ T7494] ? __pfx_dma_buf_ioctl+0x10/0x10 [ 240.484964][ T7494] __se_sys_ioctl+0xfc/0x170 [ 240.484998][ T7494] do_syscall_64+0x14d/0xf80 [ 240.485027][ T7494] ? trace_irq_disable+0x3b/0x150 [ 240.485049][ T7494] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.485081][ T7494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.485106][ T7494] RIP: 0033:0x7f527699c799 [ 240.485127][ T7494] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 240.485148][ T7494] RSP: 002b:00007f52777d1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 240.485173][ T7494] RAX: ffffffffffffffda RBX: 00007f5276c15fa0 RCX: 00007f527699c799 [ 240.485191][ T7494] RDX: 0000200000000540 RSI: 00000000c0086202 RDI: 0000000000000007 [ 240.485208][ T7494] RBP: 00007f52777d1090 R08: 0000000000000000 R09: 0000000000000000 [ 240.485224][ T7494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 240.485239][ T7494] R13: 00007f5276c16038 R14: 00007f5276c15fa0 R15: 00007ffd023f3b68 [ 240.485278][ T7494] [ 240.910075][ T7491] loop1: detected capacity change from 0 to 32768 [ 241.094135][ T6510] Dev loop1 SGI disklabel: csum bad, label corrupted [ 241.116157][ T7491] Dev loop1 SGI disklabel: csum bad, label corrupted [ 241.169943][ T7508] binder: Unknown parameter 'fd' [ 241.450181][ T7514] erspan0: entered promiscuous mode [ 241.482873][ T7518] usb usb3: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 241.737578][ T7517] loop2: detected capacity change from 0 to 32768 [ 241.782139][ T7517] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 241.790362][ T7517] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 241.841769][ T7517] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 241.851666][ T5931] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 241.858452][ T5931] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 241.971527][ T7526] loop6: detected capacity change from 0 to 4096 [ 242.223978][ T5931] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 365ms [ 242.256430][ T5931] gfs2: fsid=syz:syz.0: jid=0: Done [ 242.280934][ T7517] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 242.313636][ T7526] netlink: 348 bytes leftover after parsing attributes in process `syz.6.352'. [ 242.689956][ T7528] misc userio: Invalid payload size [ 244.160708][ T7517] gfs2: fsid=syz:syz.0: found 1 quota changes [ 245.033154][ T7539] FAULT_INJECTION: forcing a failure. [ 245.033154][ T7539] name failslab, interval 1, probability 0, space 0, times 0 [ 245.272375][ T7539] CPU: 1 UID: 0 PID: 7539 Comm: syz.1.353 Tainted: G L syzkaller #0 PREEMPT(full) [ 245.272414][ T7539] Tainted: [L]=SOFTLOCKUP [ 245.272424][ T7539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 245.272438][ T7539] Call Trace: [ 245.272448][ T7539] [ 245.272457][ T7539] dump_stack_lvl+0xe8/0x150 [ 245.272497][ T7539] should_fail_ex+0x412/0x560 [ 245.272541][ T7539] should_failslab+0xa8/0x100 [ 245.272576][ T7539] __kmalloc_cache_noprof+0x88/0x660 [ 245.272607][ T7539] ? binder_transaction+0x6f9/0x71d0 [ 245.272638][ T7539] ? do_raw_spin_unlock+0xf5/0x210 [ 245.272671][ T7539] binder_transaction+0x6f9/0x71d0 [ 245.272698][ T7539] ? arch_stack_walk+0xfb/0x150 [ 245.272746][ T7539] ? srso_alias_return_thunk+0x5/0xfbef5 [ 245.272776][ T7539] ? look_up_lock_class+0x57/0x110 [ 245.272814][ T7539] ? srso_alias_return_thunk+0x5/0xfbef5 [ 245.272854][ T7539] ? srso_alias_return_thunk+0x5/0xfbef5 [ 245.272882][ T7539] ? ima_match_policy+0x2146/0x21e0 [ 245.272926][ T7539] ? __pfx_binder_transaction+0x10/0x10 [ 245.272959][ T7539] ? __lock_acquire+0x6b5/0x2cf0 [ 245.272999][ T7539] ? srso_alias_return_thunk+0x5/0xfbef5 [ 245.273029][ T7539] ? __lock_acquire+0x6b5/0x2cf0 [ 245.273069][ T7539] ? srso_alias_return_thunk+0x5/0xfbef5 [ 245.273098][ T7539] ? __lock_acquire+0x6b5/0x2cf0 [ 245.273142][ T7539] ? srso_alias_return_thunk+0x5/0xfbef5 [ 245.273171][ T7539] ? __lock_acquire+0x6b5/0x2cf0 [ 245.273206][ T7539] ? srso_alias_return_thunk+0x5/0xfbef5 [ 245.273235][ T7539] ? __lock_acquire+0x6b5/0x2cf0 [ 245.273265][ T7539] ? srso_alias_return_thunk+0x5/0xfbef5 [ 245.273294][ T7539] ? binder_debug+0x155/0x1d0 [ 245.273323][ T7539] ? srso_alias_return_thunk+0x5/0xfbef5 [ 245.273355][ T7539] ? srso_alias_return_thunk+0x5/0xfbef5 [ 245.273391][ T7539] ? srso_alias_return_thunk+0x5/0xfbef5 [ 245.273436][ T7539] binder_ioctl_write_read+0xb5c/0xa660 [ 245.273472][ T7539] ? srso_alias_return_thunk+0x5/0xfbef5 [ 245.273512][ T7539] ? srso_alias_return_thunk+0x5/0xfbef5 [ 245.273542][ T7539] ? unwind_get_return_address+0x4d/0x90 [ 245.273583][ T7539] ? arch_stack_walk+0xfb/0x150 [ 245.273634][ T7539] ? srso_alias_return_thunk+0x5/0xfbef5 [ 245.273663][ T7539] ? stack_trace_save+0xa9/0x100 [ 245.273690][ T7539] ? __pfx_binder_ioctl_write_read+0x10/0x10 [ 245.273715][ T7539] ? kasan_save_free_info+0x46/0x50 [ 245.273757][ T7539] ? srso_alias_return_thunk+0x5/0xfbef5 [ 245.273786][ T7539] ? stack_depot_save_flags+0x33/0x810 [ 245.273823][ T7539] ? srso_alias_return_thunk+0x5/0xfbef5 [ 245.273851][ T7539] ? format_decode+0xd0/0xe10 [ 245.273885][ T7539] ? srso_alias_return_thunk+0x5/0xfbef5 [ 245.273918][ T7539] ? srso_alias_return_thunk+0x5/0xfbef5 [ 245.273946][ T7539] ? kasan_save_track+0x4f/0x80 [ 245.273976][ T7539] ? kasan_save_track+0x3e/0x80 [ 245.274000][ T7539] ? kasan_save_free_info+0x46/0x50 [ 245.274036][ T7539] ? __kasan_slab_free+0x5c/0x80 [ 245.274067][ T7539] ? srso_alias_return_thunk+0x5/0xfbef5 [ 245.274096][ T7539] ? __lock_acquire+0x6b5/0x2cf0 [ 245.274153][ T7539] ? __pfx_binder_debug+0x10/0x10 [ 245.274176][ T7539] ? do_raw_spin_lock+0x12b/0x2f0 [ 245.274205][ T7539] ? srso_alias_return_thunk+0x5/0xfbef5 [ 245.274236][ T7539] ? srso_alias_return_thunk+0x5/0xfbef5 [ 245.274276][ T7539] ? srso_alias_return_thunk+0x5/0xfbef5 [ 245.274305][ T7539] ? _raw_spin_unlock+0x28/0x50 [ 245.274329][ T7539] ? binder_get_thread+0x177/0x6d0 [ 245.274361][ T7539] binder_ioctl+0x423/0x1b70 [ 245.274387][ T7539] ? tomoyo_path_number_perm+0x219/0x630 [ 245.274424][ T7539] ? tomoyo_path_number_perm+0x219/0x630 [ 245.274457][ T7539] ? srso_alias_return_thunk+0x5/0xfbef5 [ 245.274489][ T7539] ? srso_alias_return_thunk+0x5/0xfbef5 [ 245.274518][ T7539] ? do_vfs_ioctl+0x1166/0x1530 [ 245.274548][ T7539] ? __pfx_binder_ioctl+0x10/0x10 [ 245.274575][ T7539] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 245.274620][ T7539] ? srso_alias_return_thunk+0x5/0xfbef5 [ 245.274652][ T7539] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 245.274706][ T7539] ? __fget_files+0x2a/0x420 [ 245.274748][ T7539] ? __fget_files+0x2a/0x420 [ 245.274784][ T7539] ? __fget_files+0x3a0/0x420 [ 245.274821][ T7539] ? __fget_files+0x2a/0x420 [ 245.274862][ T7539] ? srso_alias_return_thunk+0x5/0xfbef5 [ 245.274890][ T7539] ? srso_alias_return_thunk+0x5/0xfbef5 [ 245.274921][ T7539] ? __pfx_binder_ioctl+0x10/0x10 [ 245.274946][ T7539] __se_sys_ioctl+0xfc/0x170 [ 245.274984][ T7539] do_syscall_64+0x14d/0xf80 [ 245.275012][ T7539] ? trace_irq_disable+0x3b/0x150 [ 245.275034][ T7539] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.275066][ T7539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.275092][ T7539] RIP: 0033:0x7efd00d9c799 [ 245.275114][ T7539] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 245.275135][ T7539] RSP: 002b:00007efd01d02028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 245.275160][ T7539] RAX: ffffffffffffffda RBX: 00007efd01015fa0 RCX: 00007efd00d9c799 [ 245.275179][ T7539] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 245.275196][ T7539] RBP: 00007efd01d02090 R08: 0000000000000000 R09: 0000000000000000 [ 245.275211][ T7539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.275226][ T7539] R13: 00007efd01016038 R14: 00007efd01015fa0 R15: 00007ffdc8c7bdb8 [ 245.275265][ T7539] [ 246.510629][ T7549] loop1: detected capacity change from 0 to 1024 [ 246.550997][ T7549] hfsplus: Unknown parameter '/dev/snd/seq' [ 246.561334][ T5817] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed - function = gfs2_qd_dispose, file = fs/gfs2/quota.c, line = 129 [ 246.599953][ T5817] CPU: 0 UID: 0 PID: 5817 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 246.599992][ T5817] Tainted: [L]=SOFTLOCKUP [ 246.600001][ T5817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 246.600016][ T5817] Call Trace: [ 246.600025][ T5817] [ 246.600035][ T5817] dump_stack_lvl+0xe8/0x150 [ 246.600075][ T5817] gfs2_assert_warn_i+0x194/0x2c0 [ 246.600113][ T5817] gfs2_qd_dispose+0x466/0x570 [ 246.600144][ T5817] gfs2_quota_cleanup+0x434/0x760 [ 246.600186][ T5817] ? __pfx_gfs2_quota_cleanup+0x10/0x10 [ 246.600231][ T5817] ? srso_alias_return_thunk+0x5/0xfbef5 [ 246.600267][ T5817] ? srso_alias_return_thunk+0x5/0xfbef5 [ 246.600306][ T5817] gfs2_make_fs_ro+0x2a0/0x320 [ 246.600342][ T5817] ? __pfx_gfs2_make_fs_ro+0x10/0x10 [ 246.600373][ T5817] ? do_raw_spin_lock+0x12b/0x2f0 [ 246.600403][ T5817] ? srso_alias_return_thunk+0x5/0xfbef5 [ 246.600435][ T5817] ? srso_alias_return_thunk+0x5/0xfbef5 [ 246.600468][ T5817] ? srso_alias_return_thunk+0x5/0xfbef5 [ 246.600497][ T5817] ? do_raw_spin_unlock+0xf5/0x210 [ 246.600529][ T5817] gfs2_put_super+0x220/0x860 [ 246.600570][ T5817] ? __pfx_gfs2_put_super+0x10/0x10 [ 246.600603][ T5817] generic_shutdown_super+0x13d/0x2d0 [ 246.600633][ T5817] kill_block_super+0x44/0x90 [ 246.600662][ T5817] deactivate_locked_super+0xbc/0x130 [ 246.600713][ T5817] cleanup_mnt+0x437/0x4d0 [ 246.600740][ T5817] ? _raw_spin_unlock_irq+0x23/0x50 [ 246.600770][ T5817] task_work_run+0x1d9/0x270 [ 246.600801][ T5817] ? __pfx_task_work_run+0x10/0x10 [ 246.600840][ T5817] exit_to_user_mode_loop+0xed/0x480 [ 246.600869][ T5817] ? rcu_is_watching+0x15/0xb0 [ 246.600910][ T5817] do_syscall_64+0x32d/0xf80 [ 246.600938][ T5817] ? trace_irq_disable+0x3b/0x150 [ 246.600959][ T5817] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.600991][ T5817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.601017][ T5817] RIP: 0033:0x7f05f059d9d7 [ 246.601038][ T5817] Code: a2 c7 05 1c fd 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 246.601059][ T5817] RSP: 002b:00007fffd614f488 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 246.601084][ T5817] RAX: 0000000000000000 RBX: 00007f05f0632050 RCX: 00007f05f059d9d7 [ 246.601101][ T5817] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffd614f540 [ 246.601116][ T5817] RBP: 00007fffd614f540 R08: 00007fffd6150540 R09: 00000000ffffffff [ 246.601134][ T5817] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffd61505d0 [ 246.601150][ T5817] R13: 00007f05f0632050 R14: 000000000003c0e6 R15: 00007fffd6150610 [ 246.601188][ T5817] [ 247.349725][ T7557] loop4: detected capacity change from 0 to 256 [ 247.466104][ T7557] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 248.107097][ T7566] netlink: 16 bytes leftover after parsing attributes in process `syz.1.364'. [ 248.128170][ T7568] FAULT_INJECTION: forcing a failure. [ 248.128170][ T7568] name failslab, interval 1, probability 0, space 0, times 0 [ 248.167463][ T7566] netlink: 92 bytes leftover after parsing attributes in process `syz.1.364'. [ 248.215723][ T7568] CPU: 1 UID: 0 PID: 7568 Comm: syz.5.363 Tainted: G L syzkaller #0 PREEMPT(full) [ 248.215754][ T7568] Tainted: [L]=SOFTLOCKUP [ 248.215761][ T7568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 248.215772][ T7568] Call Trace: [ 248.215779][ T7568] [ 248.215787][ T7568] dump_stack_lvl+0xe8/0x150 [ 248.215818][ T7568] should_fail_ex+0x412/0x560 [ 248.215850][ T7568] should_failslab+0xa8/0x100 [ 248.215875][ T7568] ? do_getname+0x2e/0x250 [ 248.215899][ T7568] kmem_cache_alloc_noprof+0x87/0x650 [ 248.215927][ T7568] do_getname+0x2e/0x250 [ 248.215952][ T7568] ? user_path_at+0x1e/0x160 [ 248.215973][ T7568] user_path_at+0x2a/0x160 [ 248.215994][ T7568] __se_sys_mount+0x2dc/0x420 [ 248.216029][ T7568] ? __pfx___se_sys_mount+0x10/0x10 [ 248.216062][ T7568] ? srso_alias_return_thunk+0x5/0xfbef5 [ 248.216084][ T7568] ? __x64_sys_mount+0x20/0xc0 [ 248.216114][ T7568] do_syscall_64+0x14d/0xf80 [ 248.216135][ T7568] ? trace_irq_disable+0x3b/0x150 [ 248.216152][ T7568] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.216175][ T7568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.216194][ T7568] RIP: 0033:0x7fea1139c799 [ 248.216211][ T7568] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 248.216232][ T7568] RSP: 002b:00007fea0f5f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 248.216258][ T7568] RAX: ffffffffffffffda RBX: 00007fea11615fa0 RCX: 00007fea1139c799 [ 248.216280][ T7568] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000000000000000 [ 248.216296][ T7568] RBP: 00007fea0f5f6090 R08: 0000200000000400 R09: 0000000000000000 [ 248.216313][ T7568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 248.216327][ T7568] R13: 00007fea11616038 R14: 00007fea11615fa0 R15: 00007fffd4d195b8 [ 248.216366][ T7568] [ 249.320870][ T7574] loop5: detected capacity change from 0 to 8 [ 249.345054][ T7574] SQUASHFS error: Failed to read block 0x2fc: -5 [ 249.351499][ T7574] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 249.359604][ T7574] SQUASHFS error: Unable to read directory block [247:26] [ 249.669547][ T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 249.677517][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 250.006173][ T7586] loop5: detected capacity change from 0 to 256 [ 250.052873][ T7576] loop4: detected capacity change from 0 to 8192 [ 250.128973][ T7586] FAT-fs (loop5): Directory bread(block 64) failed [ 250.157360][ T7588] loop2: detected capacity change from 0 to 1024 [ 250.191848][ T7588] EXT4-fs: Ignoring removed nomblk_io_submit option [ 250.197721][ T7586] FAT-fs (loop5): Directory bread(block 65) failed [ 250.268545][ T7586] FAT-fs (loop5): Directory bread(block 66) failed [ 250.270686][ T7588] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 250.351159][ T7592] netlink: 24 bytes leftover after parsing attributes in process `syz.1.372'. [ 250.379864][ T7592] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 250.549447][ T7586] FAT-fs (loop5): Directory bread(block 67) failed [ 251.130379][ T7605] loop1: detected capacity change from 0 to 1024 [ 251.210781][ T7605] syz.1.374: attempt to access beyond end of device [ 251.210781][ T7605] loop1: rw=8390665, sector=262, nr_sectors = 65274 limit=1024 [ 251.212308][ T7586] FAT-fs (loop5): Directory bread(block 68) failed [ 251.285983][ T5817] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.362204][ T7586] FAT-fs (loop5): Directory bread(block 69) failed [ 251.368872][ T7586] FAT-fs (loop5): Directory bread(block 70) failed [ 251.467682][ T7607] input: syz0 as /devices/virtual/input/input7 [ 251.485215][ T7586] FAT-fs (loop5): Directory bread(block 71) failed [ 251.513066][ T7586] FAT-fs (loop5): Directory bread(block 72) failed [ 251.607706][ T7586] FAT-fs (loop5): Directory bread(block 73) failed [ 251.723876][ T7612] loop2: detected capacity change from 0 to 64 [ 251.789542][ T10] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 251.829218][ T7586] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 252.001889][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.744636][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 253.074323][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 253.159796][ T10] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 253.192498][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.411390][ T10] usb 4-1: config 0 descriptor?? [ 254.740540][ T10] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 254.841607][ T7607] loop3: detected capacity change from 0 to 128 [ 254.893698][ T7607] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 254.940047][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 254.946341][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 254.971844][ T7607] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 255.020416][ T7637] loop4: detected capacity change from 0 to 1024 [ 255.058034][ T7637] EXT4-fs: Ignoring removed nomblk_io_submit option [ 255.099212][ T7637] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.891376][ T5827] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.640234][ T5938] usb 4-1: reset high-speed USB device number 9 using dummy_hcd [ 257.235817][ T7665] fuse: Bad value for 'fd' [ 257.260188][ T10] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 257.933583][ T5908] usb 4-1: USB disconnect, device number 9 [ 258.185115][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 258.193810][ T10] usb 7-1: config index 0 descriptor too short (expected 26, got 18) [ 258.212183][ T10] usb 7-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 258.989551][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.997565][ T10] usb 7-1: Product: syz [ 259.019498][ T10] usb 7-1: Manufacturer: syz [ 259.024094][ T10] usb 7-1: SerialNumber: syz [ 259.041613][ T10] usb 7-1: config 0 descriptor?? [ 259.087502][ T10] gspca_main: sq930x-2.14.0 probing 2770:930c [ 259.388403][ T7678] ubi31: attaching mtd0 [ 259.413418][ T7678] ubi31: scanning is finished [ 259.671698][ T7661] overlayfs: failed lookup in lower (newroot/52, name='file1', err=-40): overlapping layers [ 259.805043][ T10] gspca_sq930x: reg_r 001f failed -110 [ 259.946033][ T10] sq930x 7-1:0.0: probe with driver sq930x failed with error -110 [ 259.956718][ T7682] overlayfs: failed lookup in lower (newroot/52, name='bus', err=-40): overlapping layers [ 259.978260][ T7682] overlayfs: failed lookup in lower (newroot/52, name='bus', err=-40): overlapping layers [ 259.996276][ T7678] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 260.880772][ T7689] loop3: detected capacity change from 0 to 131072 [ 260.901746][ T7689] F2FS-fs (loop3): Wrong CP boundary, start(512) end(1536) blocks(0) [ 260.913134][ T7689] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 260.926421][ T5908] usb 7-1: USB disconnect, device number 5 [ 260.936257][ T7689] F2FS-fs (loop3): invalid crc value [ 261.021951][ T7689] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 261.076064][ T7689] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 261.083258][ T7689] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 262.346464][ T7708] syz_tun: entered allmulticast mode [ 262.484608][ T7702] syz_tun: left allmulticast mode [ 262.721542][ T7711] FAULT_INJECTION: forcing a failure. [ 262.721542][ T7711] name failslab, interval 1, probability 0, space 0, times 0 [ 262.809635][ T7711] CPU: 1 UID: 0 PID: 7711 Comm: syz.2.399 Tainted: G L syzkaller #0 PREEMPT(full) [ 262.809673][ T7711] Tainted: [L]=SOFTLOCKUP [ 262.809683][ T7711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 262.809698][ T7711] Call Trace: [ 262.809708][ T7711] [ 262.809718][ T7711] dump_stack_lvl+0xe8/0x150 [ 262.809756][ T7711] should_fail_ex+0x412/0x560 [ 262.809802][ T7711] should_failslab+0xa8/0x100 [ 262.809837][ T7711] __kmalloc_noprof+0xe8/0x760 [ 262.809865][ T7711] ? rcu_is_watching+0x15/0xb0 [ 262.809899][ T7711] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 262.809934][ T7711] ? srso_alias_return_thunk+0x5/0xfbef5 [ 262.809979][ T7711] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 262.810022][ T7711] genl_family_rcv_msg_doit+0xd9/0x330 [ 262.810061][ T7711] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 262.810101][ T7711] ? srso_alias_return_thunk+0x5/0xfbef5 [ 262.810135][ T7711] ? srso_alias_return_thunk+0x5/0xfbef5 [ 262.810165][ T7711] ? apparmor_capable+0x126/0x170 [ 262.810195][ T7711] ? srso_alias_return_thunk+0x5/0xfbef5 [ 262.810224][ T7711] ? srso_alias_return_thunk+0x5/0xfbef5 [ 262.810253][ T7711] ? security_capable+0x7e/0x2c0 [ 262.810297][ T7711] genl_rcv_msg+0x61c/0x7a0 [ 262.810336][ T7711] ? __pfx_genl_rcv_msg+0x10/0x10 [ 262.810366][ T7711] ? __pfx_netlbl_cipsov4_add+0x10/0x10 [ 262.810401][ T7711] ? __lock_acquire+0x6b5/0x2cf0 [ 262.810448][ T7711] netlink_rcv_skb+0x232/0x4b0 [ 262.810490][ T7711] ? __pfx_genl_rcv_msg+0x10/0x10 [ 262.810522][ T7711] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 262.810581][ T7711] ? srso_alias_return_thunk+0x5/0xfbef5 [ 262.810611][ T7711] ? down_read+0x272/0x2e0 [ 262.810642][ T7711] ? genl_rcv+0xd/0x40 [ 262.810674][ T7711] genl_rcv+0x28/0x40 [ 262.810702][ T7711] netlink_unicast+0x80f/0x9b0 [ 262.810747][ T7711] ? __pfx_netlink_unicast+0x10/0x10 [ 262.810786][ T7711] ? srso_alias_return_thunk+0x5/0xfbef5 [ 262.810814][ T7711] ? skb_put+0x11b/0x210 [ 262.810840][ T7711] ? srso_alias_return_thunk+0x5/0xfbef5 [ 262.810875][ T7711] netlink_sendmsg+0x813/0xb40 [ 262.810911][ T7711] ? __pfx_netlink_sendmsg+0x10/0x10 [ 262.810939][ T7711] ? srso_alias_return_thunk+0x5/0xfbef5 [ 262.810974][ T7711] ? aa_sock_msg_perm+0xf1/0x1b0 [ 262.811014][ T7711] ? srso_alias_return_thunk+0x5/0xfbef5 [ 262.811042][ T7711] ? srso_alias_return_thunk+0x5/0xfbef5 [ 262.811077][ T7711] ____sys_sendmsg+0x972/0x9f0 [ 262.811120][ T7711] ? __pfx_____sys_sendmsg+0x10/0x10 [ 262.811161][ T7711] ? srso_alias_return_thunk+0x5/0xfbef5 [ 262.811190][ T7711] ? import_iovec+0x73/0xa0 [ 262.811223][ T7711] ___sys_sendmsg+0x2a5/0x360 [ 262.811260][ T7711] ? __pfx____sys_sendmsg+0x10/0x10 [ 262.811333][ T7711] ? __fget_files+0x2a/0x420 [ 262.811370][ T7711] ? srso_alias_return_thunk+0x5/0xfbef5 [ 262.811399][ T7711] ? __fget_files+0x3a0/0x420 [ 262.811450][ T7711] __x64_sys_sendmsg+0x1bd/0x2a0 [ 262.811485][ T7711] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 262.811527][ T7711] ? __pfx_ksys_write+0x10/0x10 [ 262.811570][ T7711] do_syscall_64+0x14d/0xf80 [ 262.811599][ T7711] ? trace_irq_disable+0x3b/0x150 [ 262.811621][ T7711] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.811653][ T7711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.811679][ T7711] RIP: 0033:0x7f05f059c799 [ 262.811701][ T7711] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 262.811721][ T7711] RSP: 002b:00007f05f1492028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 262.811747][ T7711] RAX: ffffffffffffffda RBX: 00007f05f0816090 RCX: 00007f05f059c799 [ 262.811766][ T7711] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000004 [ 262.811782][ T7711] RBP: 00007f05f1492090 R08: 0000000000000000 R09: 0000000000000000 [ 262.811798][ T7711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 262.811813][ T7711] R13: 00007f05f0816128 R14: 00007f05f0816090 R15: 00007fffd6150218 [ 262.811853][ T7711] [ 263.853633][ T7715] netlink: 8 bytes leftover after parsing attributes in process `syz.4.403'. [ 263.899559][ T7715] netlink: 20 bytes leftover after parsing attributes in process `syz.4.403'. [ 263.939912][ T7717] netlink: 56 bytes leftover after parsing attributes in process `syz.3.404'. [ 264.269562][ T5931] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 264.370850][ T7721] syzkaller1: entered promiscuous mode [ 264.376390][ T7721] syzkaller1: entered allmulticast mode [ 265.209631][ T5931] usb 2-1: Using ep0 maxpacket: 16 [ 265.279188][ T7728] loop2: detected capacity change from 0 to 2048 [ 265.324347][ T5931] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 265.436856][ T7728] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 265.499264][ T5931] usb 2-1: config 0 has no interface number 0 [ 265.629775][ T5931] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 265.861581][ T5931] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 266.090845][ T5931] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 266.181279][ T5931] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.250749][ T5931] usb 2-1: Product: syz [ 266.274994][ T5931] usb 2-1: Manufacturer: syz [ 266.341404][ T5931] usb 2-1: SerialNumber: syz [ 266.385205][ T5931] usb 2-1: config 0 descriptor?? [ 266.410903][ T7738] binder: 7733:7738 ioctl c0306201 0 returned -14 [ 266.440158][ T7719] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 266.514444][ T7719] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 266.719424][ T7743] netlink: 'syz.6.411': attribute type 2 has an invalid length. [ 267.018891][ T7743] !: entered promiscuous mode [ 267.366379][ T7751] FAULT_INJECTION: forcing a failure. [ 267.366379][ T7751] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 267.404920][ T7749] loop2: detected capacity change from 0 to 32768 [ 267.416458][ T7749] gfs2: Invalid block size [ 267.572281][ T7751] CPU: 1 UID: 0 PID: 7751 Comm: syz.3.413 Tainted: G L syzkaller #0 PREEMPT(full) [ 267.572319][ T7751] Tainted: [L]=SOFTLOCKUP [ 267.572329][ T7751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 267.572343][ T7751] Call Trace: [ 267.572352][ T7751] [ 267.572362][ T7751] dump_stack_lvl+0xe8/0x150 [ 267.572403][ T7751] should_fail_ex+0x412/0x560 [ 267.572448][ T7751] _copy_to_user+0x31/0xb0 [ 267.572480][ T7751] simple_read_from_buffer+0xe1/0x170 [ 267.572524][ T7751] proc_fail_nth_read+0x1bb/0x230 [ 267.572560][ T7751] ? srso_alias_return_thunk+0x5/0xfbef5 [ 267.572595][ T7751] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 267.572636][ T7751] ? srso_alias_return_thunk+0x5/0xfbef5 [ 267.572664][ T7751] ? rw_verify_area+0x2a6/0x4d0 [ 267.572691][ T7751] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 267.572737][ T7751] vfs_read+0x20c/0xa70 [ 267.572762][ T7751] ? fdget_pos+0x246/0x320 [ 267.572790][ T7751] ? __pfx___mutex_lock+0x10/0x10 [ 267.572823][ T7751] ? __pfx_vfs_read+0x10/0x10 [ 267.572853][ T7751] ? __fget_files+0x2a/0x420 [ 267.572896][ T7751] ? srso_alias_return_thunk+0x5/0xfbef5 [ 267.572925][ T7751] ? __fget_files+0x3a0/0x420 [ 267.572961][ T7751] ? __fget_files+0x2a/0x420 [ 267.573004][ T7751] ? srso_alias_return_thunk+0x5/0xfbef5 [ 267.573038][ T7751] ksys_read+0x150/0x270 [ 267.573069][ T7751] ? __pfx_ksys_read+0x10/0x10 [ 267.573111][ T7751] do_syscall_64+0x14d/0xf80 [ 267.573139][ T7751] ? trace_irq_disable+0x3b/0x150 [ 267.573161][ T7751] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.573195][ T7751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.573221][ T7751] RIP: 0033:0x7f487535cfce [ 267.573242][ T7751] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 267.573263][ T7751] RSP: 002b:00007f4876192fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 267.573289][ T7751] RAX: ffffffffffffffda RBX: 00007f48761936c0 RCX: 00007f487535cfce [ 267.573308][ T7751] RDX: 000000000000000f RSI: 00007f48761930a0 RDI: 0000000000000003 [ 267.573324][ T7751] RBP: 00007f4876193090 R08: 0000000000000000 R09: 0000000000000000 [ 267.573339][ T7751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 267.573354][ T7751] R13: 00007f4875616128 R14: 00007f4875616090 R15: 00007ffe7207a228 [ 267.573393][ T7751] [ 267.825537][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 268.339573][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 270.498936][ T7775] netlink: 56 bytes leftover after parsing attributes in process `syz.6.419'. [ 270.531604][ T5931] asix 2-1:0.251: probe with driver asix failed with error -71 [ 270.622293][ T5931] usb 2-1: USB disconnect, device number 5 [ 271.083522][ T7788] loop4: detected capacity change from 0 to 2048 [ 271.187501][ T7790] syz_tun: entered allmulticast mode [ 271.327425][ T7786] syz_tun: left allmulticast mode [ 273.974037][ T7784] syzkaller1: entered promiscuous mode [ 273.999916][ T7784] syzkaller1: entered allmulticast mode [ 274.096256][ T7788] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 274.183775][ T7792] netlink: 28 bytes leftover after parsing attributes in process `syz.6.424'. [ 274.192690][ T7792] netlink: 24 bytes leftover after parsing attributes in process `syz.6.424'. [ 274.545198][ T7800] loop3: detected capacity change from 0 to 8 [ 274.583573][ T7798] loop1: detected capacity change from 0 to 2048 [ 274.679368][ T7798] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 274.732323][ T7798] NILFS (loop1): mounting unchecked fs [ 274.741796][ T7800] SQUASHFS error: Failed to read block 0x2fc: -5 [ 274.748240][ T7800] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 274.851068][ T7800] SQUASHFS error: Unable to read directory block [247:26] [ 274.894828][ T7801] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 274.903499][ T7798] NILFS (loop1): recovery complete [ 274.935133][ T7801] SQUASHFS error: Unable to read directory block [247:26] [ 274.971923][ T7803] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 275.010385][ T7807] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 275.060236][ T7800] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 275.100240][ T7800] SQUASHFS error: Unable to read directory block [247:26] [ 275.127783][ T7803] SQUASHFS error: Unable to read directory block [247:26] [ 275.157843][ T7809] block nbd4: not configured, cannot reconfigure [ 275.308154][ T7806] loop6: detected capacity change from 0 to 4096 [ 275.347108][ T7806] ntfs3(loop6): Different NTFS sector size (2048) and media sector size (512). [ 275.624602][ T7806] ntfs3(loop6): Failed to initialize $Extend/$ObjId. [ 276.019869][ T30] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 276.220230][ T30] usb 7-1: Using ep0 maxpacket: 32 [ 276.241092][ T30] usb 7-1: config 0 has an invalid interface number: 188 but max is 0 [ 276.271014][ T30] usb 7-1: config 0 has no interface number 0 [ 276.296800][ T30] usb 7-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 276.345481][ T30] usb 7-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 276.374046][ T30] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.407137][ T30] usb 7-1: Product: syz [ 276.427535][ T30] usb 7-1: Manufacturer: syz [ 276.462993][ T30] usb 7-1: SerialNumber: syz [ 276.491605][ T30] usb 7-1: config 0 descriptor?? [ 276.495825][ T7825] loop5: detected capacity change from 0 to 2048 [ 276.515736][ T7806] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 276.979515][ T7829] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 277.810720][ T7834] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 278.655301][ T7841] netlink: 56 bytes leftover after parsing attributes in process `syz.1.436'. [ 278.881055][ T7846] binder: 7838:7846 ioctl c0306201 0 returned -14 [ 279.201358][ T7852] syzkaller1: entered promiscuous mode [ 279.258315][ T7852] syzkaller1: entered allmulticast mode [ 279.474136][ T7856] loop1: detected capacity change from 0 to 2048 [ 279.558804][ T7856] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 280.119761][ T5931] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 280.305799][ T5931] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.364968][ T5931] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 280.437333][ T5931] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 280.502262][ T5931] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.009746][ T5838] Bluetooth: hci4: command 0x1003 tx timeout [ 281.017104][ T5832] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 282.193861][ T5931] usb 3-1: config 0 descriptor?? [ 282.629601][ T7858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.688653][ T7858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.739095][ T5931] usbhid 3-1:0.0: can't add hid device: -71 [ 282.781330][ T5931] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 282.809883][ T5931] usb 3-1: USB disconnect, device number 2 [ 283.094123][ T30] asix 7-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -110 [ 283.139911][ T30] asix 7-1:0.188: probe with driver asix failed with error -110 [ 283.177672][ T13] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.423455][ T5938] usb 7-1: USB disconnect, device number 6 [ 283.701986][ T13] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.031480][ T7870] netlink: 20 bytes leftover after parsing attributes in process `syz.1.449'. [ 284.060218][ T13] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.078772][ T7869] loop6: detected capacity change from 0 to 2048 [ 284.368799][ T7872] loop2: detected capacity change from 0 to 32768 [ 284.437600][ T7872] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 284.445843][ T7872] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 284.474977][ T7872] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 284.492658][ T5938] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 284.499419][ T5938] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 284.544115][ T7863] loop4: detected capacity change from 0 to 32768 [ 284.560480][ T7863] btrfs: Deprecated parameter 'usebackuproot' [ 284.566774][ T7863] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 284.578195][ T7863] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.445 (7863) [ 284.600639][ T7869] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 284.634186][ T7869] NILFS (loop6): mounting unchecked fs [ 284.765048][ T7869] NILFS (loop6): recovery complete [ 284.783020][ T7863] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 284.804401][ T6510] udevd[6510]: incorrect nilfs2 checksum on /dev/loop6 [ 284.819141][ T7876] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 284.846150][ T7863] BTRFS info (device loop4): using crc32c checksum algorithm [ 284.857278][ T13] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.185000][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 285.204373][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 285.214491][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 285.327686][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 285.418373][ T5819] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 285.447668][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 285.705946][ T5938] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 1206ms [ 285.721150][ T5819] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.763992][ T5819] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 285.784007][ T5819] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 285.798169][ T37] BTRFS warning (device loop4): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 285.819047][ T5819] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 285.821345][ T5938] gfs2: fsid=syz:syz.0: jid=0: Done [ 285.880143][ T7872] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 285.902205][ T5819] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.915314][ T7863] BTRFS error (device loop4): failed to load root extent [ 285.924474][ T7863] BTRFS warning (device loop4): try to load backup roots slot 1 [ 285.934272][ T37] BTRFS warning (device loop4): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 286.022948][ T5819] usb 2-1: config 0 descriptor?? [ 286.032872][ T7863] BTRFS warning (device loop4): couldn't read tree root [ 286.090300][ T7863] BTRFS warning (device loop4): try to load backup roots slot 2 [ 286.134065][ T7872] gfs2: fsid=syz:syz.0: found 1 quota changes [ 286.178589][ T6256] BTRFS error (device loop4): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 286.263931][ T7863] BTRFS warning (device loop4): couldn't read tree root [ 286.311505][ T7863] BTRFS warning (device loop4): try to load backup roots slot 3 [ 286.914615][ T7907] FAULT_INJECTION: forcing a failure. [ 286.914615][ T7907] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 287.024638][ T5819] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 287.074267][ T7907] CPU: 0 UID: 0 PID: 7907 Comm: syz.3.453 Tainted: G L syzkaller #0 PREEMPT(full) [ 287.074304][ T7907] Tainted: [L]=SOFTLOCKUP [ 287.074314][ T7907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 287.074329][ T7907] Call Trace: [ 287.074338][ T7907] [ 287.074351][ T7907] dump_stack_lvl+0xe8/0x150 [ 287.074392][ T7907] should_fail_ex+0x412/0x560 [ 287.074436][ T7907] _copy_from_user+0x2d/0xb0 [ 287.074466][ T7907] rds_setsockopt+0x650/0xd90 [ 287.074502][ T7907] ? __pfx_rds_setsockopt+0x10/0x10 [ 287.074533][ T7907] ? fd_install+0x94/0x3d0 [ 287.074573][ T7907] ? __pfx_aa_sk_perm+0x10/0x10 [ 287.074609][ T7907] ? srso_alias_return_thunk+0x5/0xfbef5 [ 287.074641][ T7907] ? srso_alias_return_thunk+0x5/0xfbef5 [ 287.074670][ T7907] ? aa_sock_opt_perm+0xff/0x1a0 [ 287.074711][ T7907] ? srso_alias_return_thunk+0x5/0xfbef5 [ 287.074740][ T7907] ? srso_alias_return_thunk+0x5/0xfbef5 [ 287.074769][ T7907] ? __pfx_rds_setsockopt+0x10/0x10 [ 287.074800][ T7907] do_sock_setsockopt+0x17c/0x1b0 [ 287.074836][ T7907] __x64_sys_setsockopt+0x13d/0x1b0 [ 287.074871][ T7907] do_syscall_64+0x14d/0xf80 [ 287.074899][ T7907] ? trace_irq_disable+0x3b/0x150 [ 287.074921][ T7907] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.074953][ T7907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.074983][ T7907] RIP: 0033:0x7f487539c799 [ 287.075005][ T7907] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 287.075025][ T7907] RSP: 002b:00007f48761b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 287.075051][ T7907] RAX: ffffffffffffffda RBX: 00007f4875615fa0 RCX: 00007f487539c799 [ 287.075069][ T7907] RDX: 0000000000000006 RSI: 0000000000000114 RDI: 0000000000000004 [ 287.075084][ T7907] RBP: 00007f48761b4090 R08: 0000000000000004 R09: 0000000000000000 [ 287.075100][ T7907] R10: 0000200000000680 R11: 0000000000000246 R12: 0000000000000001 [ 287.075116][ T7907] R13: 00007f4875616038 R14: 00007f4875615fa0 R15: 00007ffe7207a228 [ 287.075154][ T7907] [ 287.556046][ T7863] BTRFS error (device loop4): open_ctree failed: -4 [ 287.559898][ T5819] usb 2-1: USB disconnect, device number 6 [ 287.650799][ T5838] Bluetooth: hci1: command tx timeout [ 287.986812][ T7910] fido_id[7910]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 288.228397][ T7920] loop3: detected capacity change from 0 to 2048 [ 288.285603][ T7920] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 288.574002][ T5817] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed - function = gfs2_qd_dispose, file = fs/gfs2/quota.c, line = 129 [ 288.633388][ T7917] binder: BINDER_SET_CONTEXT_MGR already set [ 288.745977][ T7917] binder: 7916:7917 ioctl 4018620d 200000000040 returned -16 [ 288.895468][ T5817] CPU: 1 UID: 0 PID: 5817 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 288.895507][ T5817] Tainted: [L]=SOFTLOCKUP [ 288.895516][ T5817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 288.895531][ T5817] Call Trace: [ 288.895541][ T5817] [ 288.895552][ T5817] dump_stack_lvl+0xe8/0x150 [ 288.895592][ T5817] gfs2_assert_warn_i+0x194/0x2c0 [ 288.895632][ T5817] gfs2_qd_dispose+0x466/0x570 [ 288.895664][ T5817] gfs2_quota_cleanup+0x434/0x760 [ 288.895708][ T5817] ? __pfx_gfs2_quota_cleanup+0x10/0x10 [ 288.895754][ T5817] ? srso_alias_return_thunk+0x5/0xfbef5 [ 288.895790][ T5817] ? srso_alias_return_thunk+0x5/0xfbef5 [ 288.895830][ T5817] gfs2_make_fs_ro+0x2a0/0x320 [ 288.895868][ T5817] ? __pfx_gfs2_make_fs_ro+0x10/0x10 [ 288.895898][ T5817] ? do_raw_spin_lock+0x12b/0x2f0 [ 288.895929][ T5817] ? srso_alias_return_thunk+0x5/0xfbef5 [ 288.895961][ T5817] ? srso_alias_return_thunk+0x5/0xfbef5 [ 288.896000][ T5817] ? srso_alias_return_thunk+0x5/0xfbef5 [ 288.896030][ T5817] ? do_raw_spin_unlock+0xf5/0x210 [ 288.896062][ T5817] gfs2_put_super+0x220/0x860 [ 288.896104][ T5817] ? __pfx_gfs2_put_super+0x10/0x10 [ 288.896138][ T5817] generic_shutdown_super+0x13d/0x2d0 [ 288.896169][ T5817] kill_block_super+0x44/0x90 [ 288.896199][ T5817] deactivate_locked_super+0xbc/0x130 [ 288.896243][ T5817] cleanup_mnt+0x437/0x4d0 [ 288.896271][ T5817] ? _raw_spin_unlock_irq+0x23/0x50 [ 288.896303][ T5817] task_work_run+0x1d9/0x270 [ 288.896335][ T5817] ? __pfx_task_work_run+0x10/0x10 [ 288.896375][ T5817] exit_to_user_mode_loop+0xed/0x480 [ 288.896406][ T5817] ? rcu_is_watching+0x15/0xb0 [ 288.896448][ T5817] do_syscall_64+0x32d/0xf80 [ 288.896477][ T5817] ? trace_irq_disable+0x3b/0x150 [ 288.896499][ T5817] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.896532][ T5817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.896558][ T5817] RIP: 0033:0x7f05f059d9d7 [ 288.896580][ T5817] Code: a2 c7 05 1c fd 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 288.896601][ T5817] RSP: 002b:00007fffd614f488 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 288.896627][ T5817] RAX: 0000000000000000 RBX: 00007f05f0632050 RCX: 00007f05f059d9d7 [ 288.896645][ T5817] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffd614f540 [ 288.896661][ T5817] RBP: 00007fffd614f540 R08: 00007fffd6150540 R09: 00000000ffffffff [ 288.896679][ T5817] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffd61505d0 [ 288.896694][ T5817] R13: 00007f05f0632050 R14: 0000000000046302 R15: 00007fffd6150610 [ 288.896734][ T5817] [ 289.735430][ T13] bridge_slave_1: left allmulticast mode [ 289.762214][ T5838] Bluetooth: hci1: command tx timeout [ 289.822313][ T13] bridge_slave_1: left promiscuous mode [ 289.897024][ T7922] binder: 7916:7922 ioctl c0306201 0 returned -14 [ 289.922125][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.021107][ T7933] FAULT_INJECTION: forcing a failure. [ 291.021107][ T7933] name failslab, interval 1, probability 0, space 0, times 0 [ 291.033880][ T7933] CPU: 1 UID: 0 PID: 7933 Comm: syz.4.459 Tainted: G L syzkaller #0 PREEMPT(full) [ 291.033915][ T7933] Tainted: [L]=SOFTLOCKUP [ 291.033925][ T7933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 291.033940][ T7933] Call Trace: [ 291.033949][ T7933] [ 291.033959][ T7933] dump_stack_lvl+0xe8/0x150 [ 291.034006][ T7933] should_fail_ex+0x412/0x560 [ 291.034050][ T7933] should_failslab+0xa8/0x100 [ 291.034086][ T7933] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 291.034116][ T7933] ? __alloc_skb+0x1d0/0x7d0 [ 291.034142][ T7933] ? __local_bh_enable_ip+0xd8/0x130 [ 291.034181][ T7933] __alloc_skb+0x1d0/0x7d0 [ 291.034212][ T7933] netlink_sendmsg+0x5d4/0xb40 [ 291.034249][ T7933] ? __pfx_netlink_sendmsg+0x10/0x10 [ 291.034279][ T7933] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 291.034319][ T7933] ? srso_alias_return_thunk+0x5/0xfbef5 [ 291.034354][ T7933] ____sys_sendmsg+0x972/0x9f0 [ 291.034383][ T7933] ? irqentry_exit+0x59e/0x620 [ 291.034412][ T7933] ? srso_alias_return_thunk+0x5/0xfbef5 [ 291.034451][ T7933] ? __pfx_____sys_sendmsg+0x10/0x10 [ 291.034492][ T7933] ? srso_alias_return_thunk+0x5/0xfbef5 [ 291.034521][ T7933] ? import_iovec+0x73/0xa0 [ 291.034553][ T7933] ___sys_sendmsg+0x2a5/0x360 [ 291.034590][ T7933] ? __pfx____sys_sendmsg+0x10/0x10 [ 291.034629][ T7933] ? srso_alias_return_thunk+0x5/0xfbef5 [ 291.034691][ T7933] ? __fget_files+0x2a/0x420 [ 291.034728][ T7933] ? srso_alias_return_thunk+0x5/0xfbef5 [ 291.034757][ T7933] ? __fget_files+0x3a0/0x420 [ 291.034807][ T7933] __x64_sys_sendmsg+0x1bd/0x2a0 [ 291.034842][ T7933] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 291.034901][ T7933] do_syscall_64+0x14d/0xf80 [ 291.034930][ T7933] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.034955][ T7933] ? srso_alias_return_thunk+0x5/0xfbef5 [ 291.034997][ T7933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.035023][ T7933] RIP: 0033:0x7f3a62f9c799 [ 291.035044][ T7933] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 291.035066][ T7933] RSP: 002b:00007f3a63dfd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 291.035091][ T7933] RAX: ffffffffffffffda RBX: 00007f3a63216180 RCX: 00007f3a62f9c799 [ 291.035109][ T7933] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000007 [ 291.035126][ T7933] RBP: 00007f3a63dfd090 R08: 0000000000000000 R09: 0000000000000000 [ 291.035142][ T7933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 291.035156][ T7933] R13: 00007f3a63216218 R14: 00007f3a63216180 R15: 00007fffca13ce68 [ 291.035194][ T7933] [ 291.815121][ T5838] Bluetooth: hci1: command tx timeout [ 292.198344][ T13] bridge_slave_0: left allmulticast mode [ 292.210443][ T13] bridge_slave_0: left promiscuous mode [ 292.216184][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.499993][ T30] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 292.680538][ T30] usb 2-1: Using ep0 maxpacket: 32 [ 292.713699][ T30] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 292.759559][ T30] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 292.791830][ T30] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 292.824572][ T30] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 292.848241][ T30] usb 2-1: config 0 interface 0 has no altsetting 0 [ 292.902742][ T30] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 292.946912][ T30] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 292.976246][ T30] usb 2-1: Product: syz [ 292.984238][ T30] usb 2-1: Manufacturer: syz [ 292.988919][ T30] usb 2-1: SerialNumber: syz [ 293.021382][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 293.031416][ T30] usb 2-1: config 0 descriptor?? [ 293.054485][ T30] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 293.092094][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 293.113302][ T30] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 293.153760][ T13] bond0 (unregistering): Released all slaves [ 293.346478][ T7937] loop1: detected capacity change from 0 to 1024 [ 293.444579][ T7937] ext4: Unknown parameter 'seclabel' [ 293.580282][ T5819] usb 2-1: USB disconnect, device number 7 [ 293.580343][ C1] ldusb 2-1:0.0: usb_submit_urb failed (-19) [ 293.599597][ T7937] ldusb 2-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 293.635446][ T5819] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 293.889901][ T5838] Bluetooth: hci1: command tx timeout [ 294.141997][ T5819] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 294.610158][ T5819] usb 2-1: device descriptor read/64, error -71 [ 294.645732][ T7953] netlink: 32 bytes leftover after parsing attributes in process `syz.3.465'. [ 294.930277][ T5819] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 295.069596][ T5819] usb 2-1: device descriptor read/64, error -71 [ 295.180612][ T7959] openvswitch: netlink: Missing key (keys=2020040, expected=100) [ 295.193180][ T5819] usb usb2-port1: attempt power cycle [ 295.579987][ T5819] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 295.796789][ T5819] usb 2-1: device descriptor read/8, error -71 [ 295.809190][ T7940] mac80211_hwsim hwsim14 wlan0: entered promiscuous mode [ 295.877395][ T7940] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 296.056869][ T7965] loop4: detected capacity change from 0 to 512 [ 298.949152][ T10] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 299.282287][ T13] hsr_slave_0: left promiscuous mode [ 299.286110][ T10] usb 7-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 299.312898][ T13] hsr_slave_1: left promiscuous mode [ 299.324873][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.329298][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 299.351847][ T10] usb 7-1: Product: syz [ 299.371151][ T10] usb 7-1: Manufacturer: syz [ 299.387051][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 299.393191][ T10] usb 7-1: SerialNumber: syz [ 299.430004][ T10] usb 7-1: config 0 descriptor?? [ 299.444018][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 299.463682][ T10] hub 7-1:0.0: bad descriptor, ignoring hub [ 299.498248][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 299.505614][ T10] hub 7-1:0.0: probe with driver hub failed with error -5 [ 299.540331][ T10] f81232 7-1:0.0: f81534a converter detected [ 299.620333][ T13] veth1_macvtap: left promiscuous mode [ 299.643188][ T13] veth0_macvtap: left promiscuous mode [ 299.863662][ T13] veth1_vlan: left promiscuous mode [ 299.904166][ T13] veth0_vlan: left promiscuous mode [ 299.933497][ T8001] netlink: 4 bytes leftover after parsing attributes in process `syz.6.471'. [ 300.016020][ T10] usb 7-1: f81534a converter now attached to ttyUSB0 [ 300.299792][ T5938] usb 7-1: USB disconnect, device number 7 [ 300.343450][ T5938] f81534a ttyUSB0: f81534a converter now disconnected from ttyUSB0 [ 300.414518][ T5938] f81232 7-1:0.0: device disconnected [ 301.674223][ T7995] loop2: detected capacity change from 0 to 32768 [ 301.748688][ T7995] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 301.954180][ T7995] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 302.099018][ T7995] XFS (loop2): Starting recovery (logdev: internal) [ 302.336384][ T8030] FAULT_INJECTION: forcing a failure. [ 302.336384][ T8030] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 302.349538][ T8030] CPU: 1 UID: 0 PID: 8030 Comm: syz.6.479 Tainted: G L syzkaller #0 PREEMPT(full) [ 302.349574][ T8030] Tainted: [L]=SOFTLOCKUP [ 302.349582][ T8030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 302.349597][ T8030] Call Trace: [ 302.349606][ T8030] [ 302.349616][ T8030] dump_stack_lvl+0xe8/0x150 [ 302.349656][ T8030] should_fail_ex+0x412/0x560 [ 302.349698][ T8030] _copy_from_user+0x2d/0xb0 [ 302.349734][ T8030] __sys_bpf+0x229/0x950 [ 302.349776][ T8030] ? __pfx___sys_bpf+0x10/0x10 [ 302.349833][ T8030] ? srso_alias_return_thunk+0x5/0xfbef5 [ 302.349861][ T8030] ? ksys_write+0x242/0x270 [ 302.349893][ T8030] ? __pfx_ksys_write+0x10/0x10 [ 302.349929][ T8030] __x64_sys_bpf+0x7c/0x90 [ 302.349961][ T8030] do_syscall_64+0x14d/0xf80 [ 302.349987][ T8030] ? trace_irq_disable+0x3b/0x150 [ 302.350006][ T8030] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.350033][ T8030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.350055][ T8030] RIP: 0033:0x7f527699c799 [ 302.350074][ T8030] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 302.350091][ T8030] RSP: 002b:00007f527778f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 302.350113][ T8030] RAX: ffffffffffffffda RBX: 00007f5276c16180 RCX: 00007f527699c799 [ 302.350128][ T8030] RDX: 0000000000000020 RSI: 0000200000001100 RDI: 0000000000000001 [ 302.350142][ T8030] RBP: 00007f527778f090 R08: 0000000000000000 R09: 0000000000000000 [ 302.350156][ T8030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 302.350168][ T8030] R13: 00007f5276c16218 R14: 00007f5276c16180 R15: 00007ffd023f3b68 [ 302.350206][ T8030] [ 302.681955][ T8028] usb usb3: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 302.949162][ T13] team0 (unregistering): Port device team_slave_1 removed [ 303.045089][ T8032] FAULT_INJECTION: forcing a failure. [ 303.045089][ T8032] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 303.067632][ T7995] XFS (loop2): Ending recovery (logdev: internal) [ 303.082908][ T8032] CPU: 1 UID: 0 PID: 8032 Comm: syz.6.481 Tainted: G L syzkaller #0 PREEMPT(full) [ 303.082942][ T8032] Tainted: [L]=SOFTLOCKUP [ 303.082951][ T8032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 303.082966][ T8032] Call Trace: [ 303.082974][ T8032] [ 303.082984][ T8032] dump_stack_lvl+0xe8/0x150 [ 303.083023][ T8032] should_fail_ex+0x412/0x560 [ 303.083066][ T8032] _copy_from_user+0x2d/0xb0 [ 303.083096][ T8032] __copy_msghdr+0x3c5/0x5b0 [ 303.083135][ T8032] ___sys_sendmsg+0x213/0x360 [ 303.083171][ T8032] ? __pfx____sys_sendmsg+0x10/0x10 [ 303.083242][ T8032] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.083278][ T8032] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.083317][ T8032] __sys_sendmmsg+0x27c/0x4e0 [ 303.083354][ T8032] ? __pfx___sys_sendmmsg+0x10/0x10 [ 303.083381][ T8032] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 303.083442][ T8032] ? ksys_write+0x242/0x270 [ 303.083474][ T8032] ? __pfx_ksys_write+0x10/0x10 [ 303.083509][ T8032] __x64_sys_sendmmsg+0xa0/0xc0 [ 303.083542][ T8032] do_syscall_64+0x14d/0xf80 [ 303.083570][ T8032] ? trace_irq_disable+0x3b/0x150 [ 303.083591][ T8032] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.083623][ T8032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.083647][ T8032] RIP: 0033:0x7f527699c799 [ 303.083669][ T8032] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 303.083689][ T8032] RSP: 002b:00007f52777d1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 303.083713][ T8032] RAX: ffffffffffffffda RBX: 00007f5276c15fa0 RCX: 00007f527699c799 [ 303.083739][ T8032] RDX: 0000000000000002 RSI: 0000200000009240 RDI: 0000000000000004 [ 303.083754][ T8032] RBP: 00007f52777d1090 R08: 0000000000000000 R09: 0000000000000000 [ 303.083770][ T8032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 303.083785][ T8032] R13: 00007f5276c16038 R14: 00007f5276c15fa0 R15: 00007ffd023f3b68 [ 303.083824][ T8032] [ 303.084397][ T13] team0 (unregistering): Port device team_slave_0 removed [ 303.349753][ T8034] netlink: 60 bytes leftover after parsing attributes in process `syz.1.482'. [ 303.388377][ T5817] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 303.429154][ T8037] loop6: detected capacity change from 0 to 2048 [ 303.520230][ T8037] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 305.466025][ T8056] Illegal XDP return value 57208888 on prog (id 27) dev N/A, expect packet loss! [ 305.688269][ T7997] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 305.697646][ T7997] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 305.708658][ T7997] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 306.785853][ T7885] chnl_net:caif_netlink_parms(): no params data found [ 307.063781][ T8073] vlan3: entered promiscuous mode [ 307.089186][ T8073] bridge0: entered promiscuous mode [ 307.504905][ T7885] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.531993][ T7885] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.539700][ T7885] bridge_slave_0: entered allmulticast mode [ 307.550085][ T7885] bridge_slave_0: entered promiscuous mode [ 307.561890][ T8086] loop4: detected capacity change from 0 to 256 [ 307.574114][ T7885] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.628481][ T8092] ubi31: attaching mtd0 [ 307.634814][ T8092] ubi31: scanning is finished [ 307.952270][ T7885] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.953636][ T8086] vfat: Unknown parameter 'cBepage' [ 307.968889][ T8095] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 308.002534][ T7885] bridge_slave_1: entered allmulticast mode [ 308.039200][ T7885] bridge_slave_1: entered promiscuous mode [ 308.106914][ T8092] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 308.146746][ T8097] netlink: 8 bytes leftover after parsing attributes in process `syz.2.496'. [ 308.167566][ T8097] netlink: 'syz.2.496': attribute type 25 has an invalid length. [ 308.194294][ T8097] netlink: 4 bytes leftover after parsing attributes in process `syz.2.496'. [ 308.310040][ T8085] netlink: 60 bytes leftover after parsing attributes in process `syz.4.490'. [ 309.291041][ T8104] loop3: detected capacity change from 0 to 131072 [ 309.377998][ T8104] F2FS-fs (loop3): QUOTA feature is enabled, so ignore qf_name [ 309.386685][ T8104] F2FS-fs (loop3): QUOTA feature is enabled, so ignore qf_name [ 309.394653][ T8104] F2FS-fs (loop3): QUOTA feature is enabled, so ignore qf_name [ 309.417673][ T8106] loop6: detected capacity change from 0 to 256 [ 309.423007][ T8104] F2FS-fs (loop3): invalid crc value [ 309.434149][ T7885] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 309.469553][ T5938] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 309.540271][ T8104] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 309.549965][ T8104] F2FS-fs (loop3): Mounted with checkpoint version = 1b41e955 [ 309.576694][ T7885] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 309.605100][ T8104] ALSA: mixer_oss: invalid OSS volume '' [ 309.673176][ T8106] FAT-fs (loop6): Directory bread(block 64) failed [ 309.720645][ T5938] usb 5-1: Using ep0 maxpacket: 32 [ 309.729541][ T8106] FAT-fs (loop6): Directory bread(block 65) failed [ 309.749889][ T5938] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 309.758737][ T8106] FAT-fs (loop6): Directory bread(block 66) failed [ 309.790918][ T6121] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 309.791817][ T5938] usb 5-1: config 0 has no interface number 0 [ 309.811957][ T8106] FAT-fs (loop6): Directory bread(block 67) failed [ 309.834443][ T6121] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 309.849082][ T5938] usb 5-1: config 0 interface 188 altsetting 0 endpoint 0x82 has invalid maxpacket 19488, setting to 1024 [ 309.860996][ T8106] FAT-fs (loop6): Directory bread(block 68) failed [ 309.867508][ T8106] FAT-fs (loop6): Directory bread(block 69) failed [ 309.973587][ T5938] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 310.930939][ T8106] FAT-fs (loop6): Directory bread(block 70) failed [ 310.990450][ T6121] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 311.049596][ T8106] FAT-fs (loop6): Directory bread(block 71) failed [ 311.059208][ T6121] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 311.120034][ T8106] FAT-fs (loop6): Directory bread(block 72) failed [ 311.154996][ T8106] FAT-fs (loop6): Directory bread(block 73) failed [ 311.176057][ T5938] usb 5-1: string descriptor 0 read error: -71 [ 311.229892][ T5938] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 311.264932][ T7885] team0: Port device team_slave_0 added [ 311.289492][ T5938] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.333276][ T5938] usb 5-1: config 0 descriptor?? [ 311.370865][ T7885] team0: Port device team_slave_1 added [ 311.379619][ T5938] usb 5-1: can't set config #0, error -71 [ 311.423973][ T5938] usb 5-1: USB disconnect, device number 5 [ 311.507013][ T31] audit: type=1804 audit(1774567985.519:120): pid=8106 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.498" name="/newroot/73/file1/bus" dev="loop6" ino=1048677 res=1 errno=0 [ 311.533777][ T8106] Invalid ELF header magic: != ELF [ 311.551279][ T7885] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 311.569935][ T7885] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 311.669594][ T7885] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 311.717868][ T7885] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 311.740409][ T50] kworker/u8:3: attempt to access beyond end of device [ 311.740409][ T50] loop6: rw=1, sector=1224, nr_sectors = 8 limit=256 [ 311.769528][ T7885] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 311.794918][ T8124] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 311.822056][ T31] audit: type=1326 audit(1774567985.839:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8125 comm="syz.1.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd00d9c799 code=0x7ffc0000 [ 311.844559][ T7885] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 311.897117][ T31] audit: type=1326 audit(1774567985.869:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8125 comm="syz.1.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd00d9c799 code=0x7ffc0000 [ 312.006174][ T31] audit: type=1326 audit(1774567985.889:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8125 comm="syz.1.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd00d9c799 code=0x7ffc0000 [ 312.116492][ T31] audit: type=1326 audit(1774567985.889:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8125 comm="syz.1.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd00d9c799 code=0x7ffc0000 [ 312.142757][ T7885] hsr_slave_0: entered promiscuous mode [ 312.172402][ T7885] hsr_slave_1: entered promiscuous mode [ 312.213513][ T31] audit: type=1326 audit(1774567985.889:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8125 comm="syz.1.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7efd00d9c799 code=0x7ffc0000 [ 312.382822][ T31] audit: type=1326 audit(1774567985.889:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8125 comm="syz.1.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd00d9c799 code=0x7ffc0000 [ 312.429530][ T31] audit: type=1326 audit(1774567985.889:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8125 comm="syz.1.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd00d9c799 code=0x7ffc0000 [ 312.721402][ T31] audit: type=1326 audit(1774567985.889:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8125 comm="syz.1.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd00d9c799 code=0x7ffc0000 [ 312.818331][ T31] audit: type=1326 audit(1774567985.889:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8125 comm="syz.1.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd00d9c799 code=0x7ffc0000 [ 312.951338][ T8142] FAULT_INJECTION: forcing a failure. [ 312.951338][ T8142] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 313.009851][ T8142] CPU: 1 UID: 0 PID: 8142 Comm: syz.4.506 Tainted: G L syzkaller #0 PREEMPT(full) [ 313.009878][ T8142] Tainted: [L]=SOFTLOCKUP [ 313.009884][ T8142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 313.009895][ T8142] Call Trace: [ 313.009903][ T8142] [ 313.009910][ T8142] dump_stack_lvl+0xe8/0x150 [ 313.009940][ T8142] should_fail_ex+0x412/0x560 [ 313.009973][ T8142] _copy_from_user+0x2d/0xb0 [ 313.009998][ T8142] snd_seq_ioctl+0x219/0x4c0 [ 313.010031][ T8142] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 313.010075][ T8142] ? __fget_files+0x3a0/0x420 [ 313.010103][ T8142] ? __fget_files+0x2a/0x420 [ 313.010133][ T8142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 313.010155][ T8142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 313.010178][ T8142] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 313.010206][ T8142] __se_sys_ioctl+0xfc/0x170 [ 313.010231][ T8142] do_syscall_64+0x14d/0xf80 [ 313.010252][ T8142] ? trace_irq_disable+0x3b/0x150 [ 313.010269][ T8142] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.010293][ T8142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.010311][ T8142] RIP: 0033:0x7f3a62f9c799 [ 313.010327][ T8142] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 313.010342][ T8142] RSP: 002b:00007f3a63e3f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 313.010360][ T8142] RAX: ffffffffffffffda RBX: 00007f3a63215fa0 RCX: 00007f3a62f9c799 [ 313.010374][ T8142] RDX: 0000200000000940 RSI: 00000000c0505350 RDI: 0000000000000003 [ 313.010386][ T8142] RBP: 00007f3a63e3f090 R08: 0000000000000000 R09: 0000000000000000 [ 313.010397][ T8142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 313.010408][ T8142] R13: 00007f3a63216038 R14: 00007f3a63215fa0 R15: 00007fffca13ce68 [ 313.010437][ T8142] [ 313.627388][ T8145] loop3: detected capacity change from 0 to 256 [ 313.769821][ T8145] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x23633d53, utbl_chksum : 0xe619d30d) [ 314.323124][ T7885] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 314.427784][ T7885] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 314.485610][ T7885] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 314.558051][ C1] vcan0: j1939_tp_rxtimer: 0xffff888027842c00: rx timeout, send abort [ 314.585467][ T7885] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 315.058734][ C1] vcan0: j1939_tp_rxtimer: 0xffff888027843000: rx timeout, send abort [ 315.066995][ C1] vcan0: j1939_tp_rxtimer: 0xffff888027842c00: abort rx timeout. Force session deactivation [ 315.426909][ T8191] 9p: Bad value for 'rfdno' [ 315.568184][ C1] vcan0: j1939_tp_rxtimer: 0xffff888027843000: abort rx timeout. Force session deactivation [ 315.644678][ T7885] 8021q: adding VLAN 0 to HW filter on device bond0 [ 315.856567][ T7885] 8021q: adding VLAN 0 to HW filter on device team0 [ 315.871837][ T8194] workqueue: name exceeds WQ_NAME_LEN. Truncating to: &%Q0@æjʫ} [ 316.017065][ T171] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.017186][ T171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 316.019246][ T171] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.039548][ T171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 316.373532][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.386173][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.903213][ T8226] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 318.003750][ T8228] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 319.209604][ T8231] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 319.650649][ T31] kauditd_printk_skb: 139 callbacks suppressed [ 319.650670][ T31] audit: type=1326 audit(1774567993.669:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8233 comm="syz.4.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a62f9c799 code=0x7ffc0000 [ 319.730024][ T8239] sctp: [Deprecated]: syz.1.525 (pid 8239) Use of struct sctp_assoc_value in delayed_ack socket option. [ 319.730024][ T8239] Use struct sctp_sack_info instead [ 320.199563][ T31] audit: type=1326 audit(1774567993.669:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8233 comm="syz.4.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a62f9c799 code=0x7ffc0000 [ 320.319564][ T31] audit: type=1326 audit(1774567993.669:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8233 comm="syz.4.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a62f9c799 code=0x7ffc0000 [ 320.445667][ T31] audit: type=1326 audit(1774567993.669:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8233 comm="syz.4.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a62f9c799 code=0x7ffc0000 [ 320.579792][ T31] audit: type=1326 audit(1774567993.669:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8233 comm="syz.4.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f3a62f9c799 code=0x7ffc0000 [ 320.788952][ T31] audit: type=1326 audit(1774567993.669:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8233 comm="syz.4.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a62f9c799 code=0x7ffc0000 [ 320.814046][ T31] audit: type=1326 audit(1774567993.669:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8233 comm="syz.4.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a62f9c799 code=0x7ffc0000 [ 321.534554][ T31] audit: type=1326 audit(1774567993.669:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8233 comm="syz.4.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a62f9c799 code=0x7ffc0000 [ 321.573738][ T31] audit: type=1326 audit(1774567993.669:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8233 comm="syz.4.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a62f9c799 code=0x7ffc0000 [ 321.622234][ T8253] loop2: detected capacity change from 0 to 512 [ 321.745787][ T31] audit: type=1326 audit(1774567993.669:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8233 comm="syz.4.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f3a62f9c799 code=0x7ffc0000 [ 321.869508][ T5938] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 322.091726][ T5938] usb 2-1: config index 0 descriptor too short (expected 17441, got 36) [ 322.142935][ T8263] loop4: detected capacity change from 0 to 4096 [ 322.145435][ T5938] usb 2-1: config 198 has too many interfaces: 113, using maximum allowed: 32 [ 322.200074][ T7885] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 322.253908][ T5938] usb 2-1: config 198 has an invalid descriptor of length 209, skipping remainder of the config [ 322.296337][ T8273] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 322.325608][ T5938] usb 2-1: config 198 has 0 interfaces, different from the descriptor's value: 113 [ 322.335812][ T5938] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 322.344924][ T5938] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.389811][ T8263] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 322.474111][ T8263] Remounting filesystem read-only [ 322.475059][ T8276] NILFS (loop4): DAT doesn't have a block to manage vblocknr = 524288 [ 322.487503][ T8276] NILFS error (device loop4): nilfs_bmap_truncate: broken bmap (inode number=15) [ 322.497510][ T8276] NILFS (loop4): error -5 truncating bmap (ino=15) [ 322.553919][ T8277] netlink: 'syz.6.532': attribute type 10 has an invalid length. [ 322.679714][ T8277] team0: Device xfrm0 is of different type [ 322.850478][ T8283] netlink: 8 bytes leftover after parsing attributes in process `syz.2.533'. [ 322.859317][ T8283] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 322.902725][ T8283] netlink: 12 bytes leftover after parsing attributes in process `syz.2.533'. [ 323.274160][ T5931] usb 2-1: USB disconnect, device number 12 [ 324.982747][ T8301] netlink: 8 bytes leftover after parsing attributes in process `syz.6.536'. [ 325.486156][ T5827] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 326.186517][ T7885] veth0_vlan: entered promiscuous mode [ 326.257020][ T7885] veth1_vlan: entered promiscuous mode [ 326.404868][ T8330] FAULT_INJECTION: forcing a failure. [ 326.404868][ T8330] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 326.470650][ T8328] loop6: detected capacity change from 0 to 2048 [ 326.474697][ T7885] veth0_macvtap: entered promiscuous mode [ 326.498285][ T8330] CPU: 1 UID: 0 PID: 8330 Comm: syz.1.542 Tainted: G L syzkaller #0 PREEMPT(full) [ 326.498311][ T8330] Tainted: [L]=SOFTLOCKUP [ 326.498318][ T8330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 326.498329][ T8330] Call Trace: [ 326.498337][ T8330] [ 326.498344][ T8330] dump_stack_lvl+0xe8/0x150 [ 326.498375][ T8330] should_fail_ex+0x412/0x560 [ 326.498408][ T8330] _copy_from_user+0x2d/0xb0 [ 326.498430][ T8330] hci_sock_reject_list_add+0x94/0x130 [ 326.498451][ T8330] ? __pfx_hci_sock_reject_list_add+0x10/0x10 [ 326.498472][ T8330] ? srso_alias_return_thunk+0x5/0xfbef5 [ 326.498494][ T8330] ? security_capable+0x7e/0x2c0 [ 326.498527][ T8330] hci_sock_ioctl+0x87f/0x940 [ 326.498550][ T8330] sock_do_ioctl+0x101/0x320 [ 326.498580][ T8330] ? __pfx_sock_do_ioctl+0x10/0x10 [ 326.498604][ T8330] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 326.498642][ T8330] sock_ioctl+0x5c6/0x7f0 [ 326.498670][ T8330] ? __pfx_sock_ioctl+0x10/0x10 [ 326.498696][ T8330] ? __fget_files+0x2a/0x420 [ 326.498724][ T8330] ? __fget_files+0x3a0/0x420 [ 326.498753][ T8330] ? __fget_files+0x2a/0x420 [ 326.498783][ T8330] ? srso_alias_return_thunk+0x5/0xfbef5 [ 326.498805][ T8330] ? srso_alias_return_thunk+0x5/0xfbef5 [ 326.498827][ T8330] ? __pfx_sock_ioctl+0x10/0x10 [ 326.498852][ T8330] __se_sys_ioctl+0xfc/0x170 [ 326.498877][ T8330] do_syscall_64+0x14d/0xf80 [ 326.498898][ T8330] ? trace_irq_disable+0x3b/0x150 [ 326.498914][ T8330] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.498938][ T8330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.498956][ T8330] RIP: 0033:0x7efd00d9c799 [ 326.498974][ T8330] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 326.498994][ T8330] RSP: 002b:00007efd01d02028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 326.499013][ T8330] RAX: ffffffffffffffda RBX: 00007efd01015fa0 RCX: 00007efd00d9c799 [ 326.499027][ T8330] RDX: 0000200000000380 RSI: 00000000400448e6 RDI: 0000000000000004 [ 326.499039][ T8330] RBP: 00007efd01d02090 R08: 0000000000000000 R09: 0000000000000000 [ 326.499050][ T8330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 326.499061][ T8330] R13: 00007efd01016038 R14: 00007efd01015fa0 R15: 00007ffdc8c7bdb8 [ 326.499090][ T8330] [ 327.036762][ T7885] veth1_macvtap: entered promiscuous mode [ 327.177443][ T7885] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 327.196063][ T8328] UDF-fs: error (device loop6): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 327.221321][ T8328] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 327.228963][ T8328] UDF-fs: Scanning with blocksize 512 failed [ 327.304854][ T7885] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 327.329724][ T5975] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 327.348619][ T8328] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 327.424551][ T31] kauditd_printk_skb: 36 callbacks suppressed [ 327.424569][ T31] audit: type=1800 audit(1774568001.439:315): pid=8328 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.541" name="file1" dev="loop6" ino=838 res=0 errno=0 [ 327.472446][ T8328] ------------[ cut here ]------------ [ 327.478093][ T8328] byte_offset [ 327.478108][ T8328] WARNING: fs/udf/truncate.c:224 at udf_truncate_extents+0xd8d/0xf00, CPU#0: syz.6.541/8328 [ 327.480365][ T83] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.481457][ T8328] Modules linked in: [ 327.504232][ T8328] CPU: 0 UID: 0 PID: 8328 Comm: syz.6.541 Tainted: G L syzkaller #0 PREEMPT(full) [ 327.515424][ T8328] Tainted: [L]=SOFTLOCKUP [ 327.520149][ T8328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 327.526959][ T83] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.531283][ T8328] RIP: 0010:udf_truncate_extents+0xd8d/0xf00 [ 327.544908][ T8328] Code: 9c c6 0f 48 3b 84 24 80 01 00 00 75 7a 44 89 e0 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 e5 7c ba fd cc e8 94 e9 6f fe 90 <0f> 0b 90 e9 64 ff ff ff 44 89 e9 80 e1 07 38 c1 0f 8c e0 f3 ff ff [ 327.564595][ T8328] RSP: 0018:ffffc900051377c0 EFLAGS: 00010283 [ 327.569806][ T5975] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 327.570707][ T8328] RAX: ffffffff8355c42c RBX: 1ffff1100a872b14 RCX: 0000000000080000 [ 327.588284][ T8328] RDX: ffffc9001dd32000 RSI: 00000000000008fd RDI: 00000000000008fe [ 327.596623][ T8328] RBP: ffffc90005137988 R08: ffff888028468000 R09: 0000000000000002 [ 327.604630][ T8328] R10: 0000000000000001 R11: 0000000000000002 R12: 0000000000000000 [ 327.612657][ T8328] R13: 0000000000000000 R14: 000000000000000a R15: 000000000000000a [ 327.621136][ T8328] FS: 00007f52777d16c0(0000) GS:ffff88812545a000(0000) knlGS:0000000000000000 [ 327.623968][ T5975] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 327.630369][ T8328] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 327.646372][ T8328] CR2: 000000110c2e588a CR3: 00000000333ed000 CR4: 0000000000350ef0 [ 327.654519][ T8328] Call Trace: [ 327.657799][ T8328] [ 327.660774][ T8328] ? __lock_acquire+0x146e/0x2cf0 [ 327.662279][ T5975] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 327.665832][ T8328] ? __pfx_udf_truncate_extents+0x10/0x10 [ 327.681329][ T8328] ? srso_alias_return_thunk+0x5/0xfbef5 [ 327.686977][ T8328] ? srso_alias_return_thunk+0x5/0xfbef5 [ 327.692638][ T8328] ? __entry_text_end+0x1020b5/0x1020b9 [ 327.698198][ T8328] ? do_raw_spin_unlock+0xf5/0x210 [ 327.703321][ T8328] udf_write_failed+0x185/0x1c0 [ 327.708170][ T8328] udf_direct_IO+0x1c6/0x200 [ 327.712826][ T8328] generic_file_direct_write+0x1db/0x3e0 [ 327.718460][ T8328] __generic_file_write_iter+0x11d/0x230 [ 327.724409][ T8328] ? udf_file_write_iter+0x2af/0x6b0 [ 327.729921][ T8328] udf_file_write_iter+0x2ca/0x6b0 [ 327.735034][ T8328] do_iter_readv_writev+0x619/0x8c0 [ 327.740253][ T8328] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 327.745967][ T8328] ? srso_alias_return_thunk+0x5/0xfbef5 [ 327.751618][ T8328] ? srso_alias_return_thunk+0x5/0xfbef5 [ 327.757249][ T8328] vfs_writev+0x33c/0x990 [ 327.761601][ T8328] ? __pfx_vfs_writev+0x10/0x10 [ 327.766452][ T8328] ? srso_alias_return_thunk+0x5/0xfbef5 [ 327.772090][ T8328] ? __fget_files+0x2a/0x420 [ 327.776681][ T8328] ? srso_alias_return_thunk+0x5/0xfbef5 [ 327.782342][ T8328] ? __fget_files+0x3a0/0x420 [ 327.787036][ T8328] ? __fget_files+0x2a/0x420 [ 327.791675][ T8328] ? srso_alias_return_thunk+0x5/0xfbef5 [ 327.797302][ T8328] __se_sys_pwritev2+0x184/0x2a0 [ 327.802295][ T8328] ? __pfx___se_sys_pwritev2+0x10/0x10 [ 327.807755][ T8328] ? srso_alias_return_thunk+0x5/0xfbef5 [ 327.813395][ T8328] ? __x64_sys_pwritev2+0x20/0xc0 [ 327.818412][ T8328] do_syscall_64+0x14d/0xf80 [ 327.823362][ T8328] ? trace_irq_disable+0x3b/0x150 [ 327.828373][ T8328] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.834647][ T8328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.840561][ T8328] RIP: 0033:0x7f527699c799 [ 327.844975][ T8328] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 327.864620][ T8328] RSP: 002b:00007f52777d1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 327.873058][ T8328] RAX: ffffffffffffffda RBX: 00007f5276c15fa0 RCX: 00007f527699c799 [ 327.881056][ T8328] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000004 [ 327.889012][ T8328] RBP: 00007f5276a32c99 R08: 0000000000000000 R09: 0000000000000003 [ 327.896995][ T8328] R10: 0000000000002030 R11: 0000000000000246 R12: 0000000000000000 [ 327.904971][ T8328] R13: 00007f5276c16038 R14: 00007f5276c15fa0 R15: 00007ffd023f3b68 [ 327.913147][ T8328] [ 327.916149][ T8328] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 327.923407][ T8328] CPU: 0 UID: 0 PID: 8328 Comm: syz.6.541 Tainted: G L syzkaller #0 PREEMPT(full) [ 327.934148][ T8328] Tainted: [L]=SOFTLOCKUP [ 327.938446][ T8328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 327.948480][ T8328] Call Trace: [ 327.951747][ T8328] [ 327.954658][ T8328] vpanic+0x56c/0xa60 [ 327.958631][ T8328] ? __pfx__printk+0x10/0x10 [ 327.963204][ T8328] ? __pfx_vpanic+0x10/0x10 [ 327.967697][ T8328] ? is_bpf_text_address+0x292/0x2b0 [ 327.972968][ T8328] ? is_bpf_text_address+0x26/0x2b0 [ 327.978157][ T8328] panic+0xc5/0xd0 [ 327.981869][ T8328] ? __pfx_panic+0x10/0x10 [ 327.986289][ T8328] __warn+0x315/0x4f0 [ 327.990259][ T8328] ? udf_truncate_extents+0xd8d/0xf00 [ 327.995618][ T8328] ? udf_truncate_extents+0xd8d/0xf00 [ 328.000977][ T8328] __report_bug+0x29a/0x540 [ 328.005467][ T8328] ? srso_alias_return_thunk+0x5/0xfbef5 [ 328.011105][ T8328] ? __lock_acquire+0x6b5/0x2cf0 [ 328.016038][ T8328] ? udf_truncate_extents+0xd8d/0xf00 [ 328.021397][ T8328] ? __pfx___report_bug+0x10/0x10 [ 328.026407][ T8328] ? srso_alias_return_thunk+0x5/0xfbef5 [ 328.032030][ T8328] ? udf_current_aext+0x698/0xb30 [ 328.037056][ T8328] ? srso_alias_return_thunk+0x5/0xfbef5 [ 328.042682][ T8328] ? srso_alias_return_thunk+0x5/0xfbef5 [ 328.048306][ T8328] ? udf_truncate_extents+0xd8d/0xf00 [ 328.053660][ T8328] report_bug+0x16a/0x220 [ 328.057978][ T8328] ? udf_truncate_extents+0xd8d/0xf00 [ 328.063332][ T8328] ? udf_truncate_extents+0xd8f/0xf00 [ 328.068708][ T8328] handle_bug+0x9c/0x200 [ 328.072949][ T8328] exc_invalid_op+0x1a/0x50 [ 328.077442][ T8328] asm_exc_invalid_op+0x1a/0x20 [ 328.082278][ T8328] RIP: 0010:udf_truncate_extents+0xd8d/0xf00 [ 328.088245][ T8328] Code: 9c c6 0f 48 3b 84 24 80 01 00 00 75 7a 44 89 e0 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 e5 7c ba fd cc e8 94 e9 6f fe 90 <0f> 0b 90 e9 64 ff ff ff 44 89 e9 80 e1 07 38 c1 0f 8c e0 f3 ff ff [ 328.107835][ T8328] RSP: 0018:ffffc900051377c0 EFLAGS: 00010283 [ 328.113888][ T8328] RAX: ffffffff8355c42c RBX: 1ffff1100a872b14 RCX: 0000000000080000 [ 328.121862][ T8328] RDX: ffffc9001dd32000 RSI: 00000000000008fd RDI: 00000000000008fe [ 328.129820][ T8328] RBP: ffffc90005137988 R08: ffff888028468000 R09: 0000000000000002 [ 328.137786][ T8328] R10: 0000000000000001 R11: 0000000000000002 R12: 0000000000000000 [ 328.145743][ T8328] R13: 0000000000000000 R14: 000000000000000a R15: 000000000000000a [ 328.153704][ T8328] ? udf_truncate_extents+0xd8c/0xf00 [ 328.159093][ T8328] ? __lock_acquire+0x146e/0x2cf0 [ 328.164124][ T8328] ? __pfx_udf_truncate_extents+0x10/0x10 [ 328.169834][ T8328] ? srso_alias_return_thunk+0x5/0xfbef5 [ 328.175465][ T8328] ? srso_alias_return_thunk+0x5/0xfbef5 [ 328.181085][ T8328] ? __entry_text_end+0x1020b5/0x1020b9 [ 328.186620][ T8328] ? do_raw_spin_unlock+0xf5/0x210 [ 328.191721][ T8328] udf_write_failed+0x185/0x1c0 [ 328.196571][ T8328] udf_direct_IO+0x1c6/0x200 [ 328.201155][ T8328] generic_file_direct_write+0x1db/0x3e0 [ 328.206785][ T8328] __generic_file_write_iter+0x11d/0x230 [ 328.212405][ T8328] ? udf_file_write_iter+0x2af/0x6b0 [ 328.217683][ T8328] udf_file_write_iter+0x2ca/0x6b0 [ 328.222790][ T8328] do_iter_readv_writev+0x619/0x8c0 [ 328.227980][ T8328] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 328.233696][ T8328] ? srso_alias_return_thunk+0x5/0xfbef5 [ 328.239322][ T8328] ? srso_alias_return_thunk+0x5/0xfbef5 [ 328.244944][ T8328] vfs_writev+0x33c/0x990 [ 328.249271][ T8328] ? __pfx_vfs_writev+0x10/0x10 [ 328.254121][ T8328] ? srso_alias_return_thunk+0x5/0xfbef5 [ 328.259752][ T8328] ? __fget_files+0x2a/0x420 [ 328.264339][ T8328] ? srso_alias_return_thunk+0x5/0xfbef5 [ 328.269958][ T8328] ? __fget_files+0x3a0/0x420 [ 328.274633][ T8328] ? __fget_files+0x2a/0x420 [ 328.279243][ T8328] ? srso_alias_return_thunk+0x5/0xfbef5 [ 328.284872][ T8328] __se_sys_pwritev2+0x184/0x2a0 [ 328.289805][ T8328] ? __pfx___se_sys_pwritev2+0x10/0x10 [ 328.295258][ T8328] ? srso_alias_return_thunk+0x5/0xfbef5 [ 328.300877][ T8328] ? __x64_sys_pwritev2+0x20/0xc0 [ 328.305893][ T8328] do_syscall_64+0x14d/0xf80 [ 328.310473][ T8328] ? trace_irq_disable+0x3b/0x150 [ 328.315478][ T8328] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.321543][ T8328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.327423][ T8328] RIP: 0033:0x7f527699c799 [ 328.331834][ T8328] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 328.351440][ T8328] RSP: 002b:00007f52777d1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 328.359843][ T8328] RAX: ffffffffffffffda RBX: 00007f5276c15fa0 RCX: 00007f527699c799 [ 328.367798][ T8328] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000004 [ 328.375749][ T8328] RBP: 00007f5276a32c99 R08: 0000000000000000 R09: 0000000000000003 [ 328.383703][ T8328] R10: 0000000000002030 R11: 0000000000000246 R12: 0000000000000000 [ 328.391656][ T8328] R13: 00007f5276c16038 R14: 00007f5276c15fa0 R15: 00007ffd023f3b68 [ 328.399626][ T8328] [ 328.402903][ T8328] Kernel Offset: disabled [ 328.407212][ T8328] Rebooting in 86400 seconds..