last executing test programs: 9.18684579s ago: executing program 2 (id=2080): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0b", 0x11}], 0x1}, 0x0) set_mempolicy(0x3, &(0x7f00000003c0)=0x8000000000000001, 0xe0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x89f1, &(0x7f0000000900)={'ip6gre0\x00', @random="0600002000"}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)={0xaa, 0x32a}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file1\x00', 0x210008, &(0x7f0000001040)=ANY=[@ANYBLOB='uid=', @ANYRESDEC=0x0, @ANYRESDEC=0x0], 0xff, 0xc2d, &(0x7f00000001c0)="$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") r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0xc0086c43, &(0x7f0000000080)=0x700) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0xc0086c43, &(0x7f0000000080)=0x700) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000004c0)) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r5}]}, 0x20}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x80}}, './file0\x00'}) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r8, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0x64, r9, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x40047}, 0x20000880) sendmsg$nl_route(r1, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="940000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0300000000000000640012800b0001006970366772650000540002800800150061db0a0008000100", @ANYRES32, @ANYBLOB="14000700fe8000000000000000000000000000aa08000d005fe1ffff060010004e22000008000500200c000014000600fc"], 0x94}}, 0x0) 9.186661952s ago: executing program 4 (id=2081): r0 = socket$inet6(0xa, 0x40000080806, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000240)=0x80000000) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) socket$kcm(0x10, 0x2, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_aout(r3, &(0x7f0000000800)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r3, 0x0) connect$bt_sco(r1, &(0x7f00000000c0), 0x8) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, 0x0, &(0x7f0000000500)) 8.626010157s ago: executing program 4 (id=2084): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/sr_mod', 0x0, 0x0) fchmod(0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800810, &(0x7f00000001c0)=ANY=[@ANYBLOB="a80c74ef7815ce82bd23c39d69b90eb15fc06b9d63aa93bddcb3a6dbdc00a1f59ff2960e7c7b6e55ca3cbb637defddcc39287440bd8a5f76820692a611c851bb7a", @ANYRES64=0x0, @ANYRES32, @ANYRES32, @ANYRES16, @ANYRESDEC=0x0, @ANYRESDEC=r0, @ANYRESDEC=r0], 0x0, 0x669, &(0x7f0000001000)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r3 = accept$alg(r2, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) setsockopt$sock_linger(r3, 0x1, 0x3d, &(0x7f0000000080), 0x8) r4 = add_key$keyring(&(0x7f00000006c0), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000740)='asymmetric\x00', &(0x7f0000002180)=@keyring={'key_or_keyring:', r4}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="d800000010000100"/20, @ANYRES32=0x0, @ANYBLOB="00000008df0005001c00020000000000000000", @ANYRES32=0x0, @ANYBLOB="1400030076657468305f746f5f626f6e6400000074001a800c000a8005000800000000000400070004000a80100002800c000180080000000000000018000a80140007000000000000000000000000000000000128000a80050008000000000014000700fe80000000000000000000000000000005000800000000000400070008000280040001800800250000000000080020000000000008001e0000000000"], 0xd8}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r1) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x1, 0x0, &(0x7f0000000040)="a4"}, 0x50) creat(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001680)={0x8, {"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", 0x1000}}, 0x1006) openat$cgroup_ro(r7, &(0x7f00000002c0)='cpuset.effective_mems\x00', 0x275a, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@func={0x2}]}, {0x0, [0x0, 0x2e, 0xaa67eeefc217049c]}}, 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0xf4, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}]}}}]}]}], {0x14}}, 0xb8}}, 0x0) 7.552251591s ago: executing program 2 (id=2087): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(r1, &(0x7f00000004c0)='./bus\x00', r0, &(0x7f0000000500)='./file0\x00', 0x2) r2 = syz_open_dev$loop(&(0x7f0000000040), 0x8000000000000000, 0x200) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f0000000340)={0x9, 0x2, 0x0, [{0x5, 0x7, 0x7ff, 0xd0, 0x6, 0x7, 0x7, '\x00', 0x7}, {0x5, 0x3, 0x8, 0x2, 0x81, 0xf8, 0x5}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x7, 0x1, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) openat$tun(0xffffff9c, &(0x7f00000000c0), 0x400100, 0x0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$SIOCSIFHWADDR(r3, 0x89f0, &(0x7f0000000900)={'bridge0\x00', @local}) r4 = socket(0x25, 0x3, 0x2) setsockopt$inet_mreq(r4, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @local}, 0x8) r5 = openat$hwrng(0xffffff9c, &(0x7f0000000080), 0x100, 0x0) setsockopt$CAIFSO_REQ_PARAM(r5, 0x116, 0x80, &(0x7f0000000140)="928fe927fd2afc973c2a06db8c9a6729ac0e37556f79c9e9a01b05272318f7dde983208c6e3e72cef23b81b9c5d349f343a591bc586f876dee2d90f9667c80492d5c99b8c0041b713c57595cbf2d4a24f8ea638a7f94386c6db3d73bcfaa6cae7f4065c466fb6eb4903298558604bec2b5165b387d0a6bcb53b12188f3324edda4e3ecb97a249e075ac6e2e2b9ee569d8adb0f332dbdf85489f8b32b53f88a275a95b3e9709be91de393ffb51fa0c9c35a3c4d0fdd0b70d9496034c91ecdf3f9", 0xc0) 7.406764155s ago: executing program 4 (id=2088): mq_open(0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x80000000001}) r0 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000000)='/', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r0, r1, r1}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={'poly1305-generic\x00'}}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@loopback}}, &(0x7f00000000c0)=0xe8) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_persistent(0x16, r2, r3) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r5}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='numa_maps\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) read$FUSE(r6, &(0x7f0000002140)={0x2020}, 0x2020) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)=[0x0], 0x0, 0x0, 0x0, 0x1}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000e5f45140ca0700b835f50102030109021b00010000000009040000010300000009058d0300a200000000"], 0x0) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r7, 0x4008af00, &(0x7f0000000140)=0x200000000) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000002304e800000000000000ea850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='netlink_extack\x00', r9}, 0x10) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000000300)={@dev, @mcast1, @mcast2, 0x0, 0xff, 0x0, 0x0, 0xa21, 0x791012b}) write$vhost_msg_v2(r7, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000300)=""/110, 0xffffffffffffffd0, 0x0, 0x3, 0x2}}, 0x48) 6.967910088s ago: executing program 0 (id=2089): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01002083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000a00)={0x1c, &(0x7f0000000940)={0x40, 0x1f}, 0x0, 0x0}) 6.853181381s ago: executing program 2 (id=2090): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000001a40)={0x1, &(0x7f0000000740)=[{0x6}]}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0xd}}, [], {0x14}}, 0x28}}, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000380), 0x0, 0x1) r2 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x8, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0xfffffc01, 0x0, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000440)=@userptr={0xffffff69, 0xc, 0x4, 0x0, 0x2, {}, {0x3, 0x8, 0x2, 0x3, 0x4, 0x6, "f7f4d113"}, 0xfffffff3, 0x2, {0x0}, 0x5}) socket(0x5, 0x1, 0x81) socket$tipc(0x1e, 0x5, 0x0) r4 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r4, 0x0) getpeername$tipc(r4, &(0x7f0000000000)=@name, &(0x7f0000000080)=0x10) ioctl$LOOP_GET_STATUS(r1, 0x4c07, 0x0) 6.470924375s ago: executing program 2 (id=2091): getpid() (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0x5) setuid(r0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) chown(&(0x7f0000000000)='./file1\x00', 0x0, r2) (async) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000002f80)={{{@in6, @in=@local}}, {{@in6=@private1}, 0x0, @in=@broadcast}}, &(0x7f0000003080)=0xe8) (async) getegid() (async) geteuid() lstat(&(0x7f00000030c0)='./file0\x00', &(0x7f0000003100)) (async) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f00000002c0)=0x1) (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0xe, &(0x7f0000000380)={[{@noload}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@init_itable_val={'init_itable', 0x3d, 0x7f}}, {@block_validity}, {@quota}]}, 0x3, 0x436, &(0x7f0000001900)="$eJzs28tvG0UYAPBv7TxIHyRU5dG0QKAgIh5Jk5bSAxcQSBxAQoJDOYYkrULdBjVBolUEAaFyRJW4I45I/AWc4IKAExJXuKNKFcqlhZPR2ruJ7dpukjpxwb+ftMmMd5yZzztjz+zEAfSssfRHErEvIn6PiOFqtr7AWPXXzbWV2b/XVmaTKJff+iuplLuxtjKbF82ftzfP9EUUPkvicJN6ly5dPjdTKs1fzPKTy+ffn1y6dPm5hfMzZ+fPzl+YPnXqxPGpF05OP9+RONO4box+tHjk0GvvXH1j9vTVd3/+Nsnjb4ijQ8banXyyXO5wdd21vyad9HWxIWxJsTpMo78y/oejGBsXbzhe/bSrjQN2VLlcLj/Q+vRqGfgfS6LbLQC6I/+gT9e/+bFLU4+7wvWXqgugNO6b2VE90xeFrEx/w/q2k8Yi4vTqP1+lR+zMfQgAgDrfp/OfZ5vN/wpRe1/o3mwPZSQi7ouIAxFxMiIORsT9EZWyD0bEQ1usv3GT5Nb5T+HatgLbpHT+92K2t1U//8tnfzFSzHL7K/H3J2cWSvPHstdkPPoH0/xUmzp+eOW3L1qdq53/pUdafz4XzNpxrW+w/jlzM8szdxJzreufRIz2NYs/Wd8JSCLiUESMbrOOhae/OdLq3O3jb6MD+0zlryOeql7/1WiIP5e035+cvCdK88cm815xq19+vfJmq/rvKP4OSK//nqb9fz3+kaR2v3Zp63Vc+ePzlmuazfb/2veJtP8PJG/X/Z0PZ5aXL05FDCSvVxtd+/h0Q7npjfJp/ONHm4//A7HxShyOiLQTPxwRj0TEo1nbH4uIxyPiaJv4f3r5ife2H//OSuOf29L130gMROMjzRPFcz9+V1fpyFbiT6//iUpqPHtkM+9/t2vX4LZ7MwAAAPz3FCJiXySFifV0oTAxUf0f/oOxp1BaXFp+5sziBxfmqt8RGIn+Qn6na7jmfuhUtqzP89MN+ePZfeMvi0OV/MTsYmmu28FDj9vbYvyn/ix2u3XAjvN9Lehdxj/0LuMfepfxD72ryfgf6kY7gN3X7PP/4y60A9h9DePfth/0EOt/6F3GP/Qu4x960tJQtP/yvoRE00QU7opmSOxQotvvTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ3xbwAAAP//g+Dmgg==") shutdown(r3, 0x1) (async) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f0000000540), 0x4) openat$vcsa(0xffffffffffffff9c, &(0x7f0000003180), 0x0, 0x0) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r4, 0x40383d0c, &(0x7f00000000c0)={{0x4}, {0x4}, 0x0, 0x7}) openat$kvm(0xffffffffffffff9c, &(0x7f00000031c0), 0x206400, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000003200), 0x20000, 0x0) (async) syz_open_dev$usbfs(&(0x7f0000003240), 0x5e89, 0x200) (async) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r5, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303290007006000000002000020d3"]) 5.566871053s ago: executing program 2 (id=2093): ppoll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x101}], 0x1, &(0x7f00000001c0)={0x0, 0x3938700}, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = msgget$private(0x0, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, 0x0, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x11ff, 0x3331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x6}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) close(0x4) msgsnd(0x0, &(0x7f0000000480)=ANY=[@ANYRESOCT], 0xb, 0x0) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000003c0)=@fd={0x0, 0x2, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f06e4b56"}, 0x0, 0x4, {}, 0x5c000000}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) msgrcv(r0, &(0x7f00000004c0)={0x0, ""/255}, 0x107, 0x1, 0x201f) 5.489094773s ago: executing program 0 (id=2095): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, &(0x7f0000000040)) (fail_nth: 5) 4.72168453s ago: executing program 0 (id=2096): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0b", 0x11}], 0x1}, 0x0) set_mempolicy(0x3, &(0x7f00000003c0)=0x8000000000000001, 0xe0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x89f1, &(0x7f0000000900)={'ip6gre0\x00', @random="0600002000"}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)={0xaa, 0x32a}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file1\x00', 0x210008, &(0x7f0000001040)=ANY=[@ANYBLOB='uid=', @ANYRESDEC=0x0, @ANYRESDEC=0x0], 0xff, 0xc2d, &(0x7f00000001c0)="$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") r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0xc0086c43, &(0x7f0000000080)=0x700) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0xc0086c43, &(0x7f0000000080)=0x700) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000004c0)) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r5}]}, 0x20}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x80}}, './file0\x00'}) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r8, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0x64, r9, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x40047}, 0x20000880) sendmsg$nl_route(r1, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="940000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0300000000000000640012800b0001006970366772650000540002800800150061db0a0008000100", @ANYRES32, @ANYBLOB="14000700fe8000000000000000000000000000aa08000d005fe1ffff060010004e22000008000500200c000014000600fc"], 0x94}}, 0x0) 4.562630829s ago: executing program 3 (id=2097): unshare(0x22020600) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0xfe, 0x18100}) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0x8010aa01, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}}) 4.558237779s ago: executing program 4 (id=2098): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000a702000000000000850000009b000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r1 = syz_usb_connect$hid(0x93ff2010b8f713bc, 0x36, &(0x7f0000001940)=ANY=[@ANYBLOB="12010000000000406a052c0300000000000109022400010000000009040000010300000009210df4000277567453d1435117f7f59759718db8959b67fa75568a077c7c03a8faffc2ba70ac87a13a6eea3d"], 0x0) syz_usb_connect(0x4, 0x436, &(0x7f0000000380)={{0x12, 0x1, 0x310, 0x38, 0x30, 0x47, 0x10, 0x6e0, 0x319, 0x67e2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x424, 0x1, 0x7, 0x8, 0x10, 0xae, [{{0x9, 0x4, 0x3b, 0x0, 0xb, 0xb4, 0xb0, 0xb5, 0x4, [@generic={0xef, 0xf, "e92d43001c698390094d6b5afead1f8262c50ac008e9796b105a290a74109ac910d379543c400f7fc61bcdb759c2e684eb21d7b2ad0bfa3ccbd524a3b280180aa33a1f8e4d0e92b05fb3535bdf4b80268a9bdfe2564c34d063ab55ae4907f3427418e29d734d2a0270743ebbdff324df669ad90c66fe0d1189623507a62a9ccf9e4c5ce487f115dcf6c28989405a1dff62d9ca3d4afa227ffb585bbb8d61230352904cd81323cdf88af49fee23e3baade770e80fb17a65e869b9c6a4756321f8ed3e158c9ec94bfa64410ffff0eda4f871a99691232877d7b5a52f66977208feaee198bd60e5e2983e229b9494"}, @uac_control={{0xa, 0x24, 0x1, 0x9, 0x1}, [@selector_unit={0x9, 0x24, 0x5, 0x2, 0x6, "3b3fe263"}, @extension_unit={0x9, 0x24, 0x8, 0x5, 0x81, 0x2, "feac"}, @feature_unit={0x9, 0x24, 0x6, 0x4, 0x3, 0x1, [0x8]}]}], [{{0x9, 0x5, 0xb, 0x10, 0x8, 0x8, 0x1, 0xca, [@generic={0x7e, 0x22, "6478f5554e209988b730cedcae6d26a02b569782388c247c579f176aedf87a4cc2cbc386d118907c895052ff8c926691c3a489d6d1a8b9d638404de32d62c886f2c73b6fb647982f6aba01a4ebfb10825be000e580137decf0114e86048d1d2d826d416070dd3c1b8090fb0eb5bfdd1e9359d3d645f892a0994038dc"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x10, 0x1, 0xf8, 0x7, [@generic={0x9b, 0xd, "b0a244166801ae480047bff3deb731565cd50952977ded3d27d7de4773f0c37d67586b9de733df8bd584b6b2f091ba0fd674b87661f03a28608a67de371122f8a4d6fcdb5d249aeed710137507765931bc593715f9369fed5b432ee33c088f165534bd01552877b8ef864c9bd3ffec74d21f5fc3313452c7044731eaae351ff1716439924f0a0042c0ef1d9b0375888da0e72a8499a9872d8a"}]}}, {{0x9, 0x5, 0x4, 0x4, 0x40, 0xf, 0x7, 0x7}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0xfc, 0xa2, 0x5}}, {{0x9, 0x5, 0xb, 0x0, 0x3ff, 0x7, 0x9, 0x38, [@generic={0x2f, 0x21, "cf495ec2516488d3a40dbf1961ea1612eaea5b7747ba7a8afa9b8616d45ebc2ab296976cd4fa3f3b755fe7be68"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x7}]}}, {{0x9, 0x5, 0x1, 0x0, 0x3ef, 0x1, 0xff, 0x6d, [@generic={0xaa, 0xf, "01d790d9630b9ab93cfec1a0527cec6ae684f9fc73f263d5eb61959626a9b6bf5bdf3292a31b6200de321a25e870c0b6ca437a76e823918925aeb29d9dd7875b514412daad000b865a833ca64a64784f6e174c0413754cabc1b0b78806bd40bb815168ff75911b4e8dcbc5dd5e41e2c199200db74df60292a18ff89291293d1e69ea59ce75978460ed05185b8cf1eddf4865e10686abb95272b2c86860cae0423a19e9b37b06d02f"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0xa}]}}, {{0x9, 0x5, 0xc, 0x0, 0x200, 0x4, 0x0, 0x2}}, {{0x9, 0x5, 0x6, 0x0, 0x200, 0xdf, 0x40, 0x40}}, {{0x9, 0x5, 0xf, 0x3, 0x258, 0x1, 0x4, 0x8}}, {{0x9, 0x5, 0x2, 0x0, 0x8, 0x4, 0x2, 0x4, [@generic={0x8e, 0x31, "ca8a34811a69c45640435bd9651d0354ff9b09eb4bf187486b0b84e1ebdacdc187ec6c009d1e670380871f1bd0dda101d1df34238240db96eabc2628a219beb4aeac438b511098ee61939ff953584fcc1aa5cc14de5ddc1e4970720154da3f9dc48499632437475b0fd13fdd721bcf911a262d32a958a550a2b3e25d5cc01af64d9c7887a577d99ee3cb62b8"}]}}, {{0x9, 0x5, 0xa, 0xc, 0x400, 0x6, 0x83, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x200}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x1, 0xa5}]}}]}}]}}]}}, &(0x7f0000000800)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x8, 0x2, 0x81, 0x40, 0x3}, 0xf, &(0x7f0000000100)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x7, 0x80, 0x8f7}]}, 0x4, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x827}}, {0xc1, &(0x7f0000000200)=@string={0xc1, 0x3, "b88067e1b2a24403409e57cc155aab0ca5d164bb986fc4c679a01a05f3be1e39521c1f49e5cf4544b7d19e3b31f1d02753a988dff928fb07111afb1f16ec98d8b55396e8da961d3bb3fe912b3b33e47fa05b38f232ac75ee85fe386037f546fc3cfc398be8e4bd440928b3df1836a473ba378d7cf4e56e82889d3d373b506e07c98dce79e67d2717dbdcd5a99522268e7f2b6aa290f48f35d6e8e88aeba86042808106dadfabb38b8f6ed449d24a9911841f03d3345e064685299bd42a4e25"}}, {0x2d, &(0x7f0000000180)=@string={0x2d, 0x3, "520420a4c200035b2d6b4d236b1964562a33ec50d63dbb21bf95a415c1b0d84c7301d7bdf239d4db7dec9b"}}, {0x2c, &(0x7f00000007c0)=@string={0x2c, 0x3, "6d25f97b08337a8fd4f91fbee2072dea958f27eb579fd1b3557e62b44078b9649b41e104db886e210c5f"}}]}) syz_usb_control_io(r1, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) fgetxattr(r2, &(0x7f00000018c0)=ANY=[@ANYBLOB="000000000000000000ceb6b493fbd99ac88fa76392dc0c1f14b9cf508b5085f89e4abf999d0d9e6409da4d2179e473cd0da4771bdfaad7f847fce11ae0bd1b10beaad2944eff258d2f5f9e92003602440b9f0638a347ec0000"], &(0x7f00000008c0)=""/58, 0x3a) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000900), 0x4) splice(r2, 0x0, r4, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000000)={0xa0002, 0x0, [0x97e, 0x7f, 0x0, 0x4, 0x7, 0x80000001, 0x9de7, 0x51]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x7, &(0x7f0000000280)=0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x70bd2b, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, @in6=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e20, 0x0, @empty}}, @sadb_address={0x5, 0x6, 0x0, 0x20, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}}, @sadb_x_sec_ctx={0x1}]}, 0xa8}}, 0x0) io_submit(r7, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}]) recvfrom$unix(r5, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x2, 0xd60, &(0x7f0000000940)={{0x12, 0x1, 0x110, 0x4d, 0x21, 0xf8, 0x8, 0x19d2, 0x24, 0xd2bd, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd4e, 0x3, 0x7, 0x7, 0x40, 0xd, [{{0x9, 0x4, 0x4, 0x4, 0x7, 0xff, 0xff, 0xff, 0xa, [@uac_as={[@format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x3, 0x1, 0x9, 0xa, "743622e3"}, @as_header={0x7, 0x24, 0x1, 0x7, 0x4, 0x1002}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x9, 0x1, 0x4, 0x2, "", "9e7711"}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x10, 0x3, 0xb, 0x3, "166db64854cf4b"}, @as_header={0x7, 0x24, 0x1, 0x77, 0xff, 0x2}]}], [{{0x9, 0x5, 0x19, 0x0, 0x690, 0xfb, 0x9, 0x3}}, {{0x9, 0x5, 0x5, 0x14, 0x200, 0x4, 0xd8, 0x7, [@generic={0xec, 0x4, "8ad455ab4db7fadccc16130538608c32134eda0a570648d7a4607fba8553fdbeda6ff597f8392809d5e7bc5185c890b1e979ade5e5c9a09ac5c777af3e5a65f41222b6990ac618b1a3042968853f0d48a703c49fd409d19e824823261d7ced8cc3d67cc19514e6abee51b0eb1bbc3a65dbd254ee0cef459a275d5999d1c821337b9dbea2f8e78a38e10ff4725cfb5bf22196841fa8c1611cf149e8451c4def095e8244f666725b6a3a4937154488693ffbbbf00b35c8a250d43007558e44168892e0b1e5e91ebcde74739c6d79157c4afb41cf171a00d1d36efcb86d5590873e0305c16b1d553bc0d11f"}, @generic={0x5a, 0x24, "cd04146c9dd1dc5911eaf891e5dfa2a31f60da5c198a8a10fb6dd130c29f04b63222d630ef1170a2586cb165768f82edcfd9f94d409199cac2408b24c8a30eff0c9551bc296cf142deb8284d940ee4b948cc6bd41af0ea93"}]}}, {{0x9, 0x5, 0x1, 0x2, 0x40, 0x6, 0x40, 0xde, [@generic={0xde, 0x5, "0ef191974156553e2687a81e272aff71de24294db10b9e835ac2e23bc8da081efb218e00c2e9e7931d3fb3ed372eeb00bd80a4433c150d228ec379f7c554bc6c9ead17ca37880287f7222f929cac647f19c2ef4c413ad2acff036ee8669799640c93fd0b53aa2dc16f7ad7777d6b7fbbeae74125440c3ca10d03550fd5a4a09c39e426330e0eac5c497a565d7d54c56065456b11dbf6b504fc40d56296fdc5b67ee0bb534f9b11942d5c13b92b75be4657dff8a3b2ccb62db9df3b5ba64a00e34a8cf456103beef39bf39df40c82cb28bccdae6adb11e8e39501e850"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0xf6, 0x54d}]}}, {{0x9, 0x5, 0x80, 0x0, 0x10, 0x5, 0x7f, 0x31, [@generic={0x9d, 0x3, "0df49f0ca4eca0fdf06503786de499d5d2a120d09f26b8694828f5dcc442778d0c37bc9e3fc9c86a5a92faae5299f5b95b68a3178dffc7b653443cedd3f58481a89ba91a411f48e61302f3e07ba12d8b5f7e249deda2f17db0a589b490115b96252ce1d7db31296b615a2caa6c8699053b16fb07732e5e495296169b44354769b31c67b13a7573676a3acb8c8f2187477f1c8294f25457c0c8b08d"}, @generic={0xdf, 0x8, "1ac6dbb111085c3e6cbde4fcc7c3a03ba31cabf9fce1c9261351d66af821ef69fa9926bf55d3a3cec238a407b155a5aff13c0039e1929a3b9a25e94487b3052ee2eef8749180c22a6cf9994449390a2b549b94b8a04a3e4256a1684c3cca9e9b578227b6071113b3f4d4c949226fe10e8ff737e89dafa10e41889f6c21ab742b26e2684b0cb98cc11a71faa85c06365d527f445dee1f2f20ca6034822e7be37794a924401e0c926bc496f11cae801a79ce438ed05484975db5c3b66907937e7a452cee65db6543c3c9677d488a8125e9617c1f6e3f7883e9ef24634cee"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x3ff, 0x9, 0x80, 0xff}}, {{0x9, 0x5, 0x4, 0x2, 0x200, 0x2c, 0x1, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x7, 0x401}]}}, {{0x9, 0x5, 0x8d, 0x0, 0x40, 0x8, 0x5, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x5}]}}]}}, {{0x9, 0x4, 0x4d, 0x1, 0x8, 0xff, 0xff, 0xff, 0x7, [], [{{0x9, 0x5, 0x80, 0xc, 0x40, 0x1, 0x8, 0xa}}, {{0x9, 0x5, 0x9, 0x2, 0x8, 0xea, 0x10, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1, 0xb92c}]}}, {{0x9, 0x5, 0xf, 0x10, 0x0, 0x8, 0x5, 0xc3, [@generic={0xf3, 0x3, "a7e7f4ba2c87c7612e50587b8e774d7749e96ccbb02df7b5702803e79d058217b8847b57a8783eaf191136417a32d83ba8845681187a54d6c85bd2f5b762674c4f29990d9dbfd958d6b01808db25338e25d8126df1d6652f301fe2b922f9a016e4055018857f05f03590b05a2fd51422e98ca3b39d871a3aeea41b032e85c0716442ee86bdb5512a0c5e8e96be72edf38ec543d66cbeb8e159e5d79a3969c8cfff074b8bed5145e82a98752f478f60e079b699b86ceb03fc07d22a7370731dd3bc017e4eb5aa2964f2574578013bbdf78323ff1f1af1e65745100f660ab1ae1d56a3823b62c8c9986a077e36b0d4da3182"}, @generic={0x5d, 0x23, "b43c118a1f90436e8833a9f8f23e92700b47978bcdf96867e805004d974b5d524afed895084691061a3df1620ee3bb6bda309765184bae051d5fe09b6b41a62d629bb8666494555b16c4ce04026978391549959c6d0b878ab610e4"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x20, 0x3, 0x9, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x3}]}}, {{0x9, 0x5, 0x80, 0x0, 0x3ff, 0xa, 0x45, 0xfe}}, {{0x9, 0x5, 0xe, 0x2, 0x200, 0x6, 0xfc, 0x5}}, {{0x9, 0x5, 0x5, 0x2, 0x400, 0x6, 0xf7, 0x3}}, {{0x9, 0x5, 0x0, 0x4, 0x400, 0x21, 0x5, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x7, 0xb}]}}]}}, {{0x9, 0x4, 0xd9, 0x8, 0xd, 0x2c, 0xb3, 0x4a, 0x6, [@generic={0xcb, 0xd, "f616d94bb331b7935dcb633bbbf44d8538b65ef72b8ebf9ae4df9542363ef29255bd9ffa5bafb36e7e703c6baf8c26f58924315d898898bd82a8367a7ce01589aa9fdcc82062c6b690e3b0b7e055a1cdc792593434cbf5f5648b636cb2dd9236da9efce5cb54f5b45b2be7569d2a2d6bf169f8714ba2472ab0fe6c24143bfe705e4d0d474574de7baf6862bdb8a51e84789982923dc687c817d894698123e44f6c4b8ff9513790a8b3e7b3c2deb8ed7b88fee5c0584f3288285d58adcca4fea95324dc32056db084d4"}], [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x1, 0x6, 0x4, [@generic={0x36, 0x1, "a0e0967022bbf7ad895e940934d826582159af7f53a6da7da4f7ce3ec0430a4485952dc7ad25e5b370846e0528b04c7602c14941"}, @generic={0x94, 0xf04bba6fc8c67d5d, "d78780c8aefddaed496df4c4169b747ebdd4b70cdf71f461ba3aa31a8fb2fb730b445d374befb94105f414cf68e416717e1bf9868303697ff9bdc889270bb9339065d62b16a8806f3b6af052dfabc53f12124f435ad70ed7a509bf1fb725b0fd8298c974e2b7af21eb585578886a83ee0a084574356f627af412dfadd4911309369b335c2a8d94eeae97a0dcf9aef24aac84"}]}}, {{0x9, 0x5, 0x2, 0x4, 0x3ff, 0x5, 0x0, 0x7f, [@generic={0xfd, 0x7, "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"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x40, 0x0, 0x40, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x4, 0xf033}, @generic={0xf6, 0x11, "91cdfb7671d945f707a255f18ab5a737a67e79e072fe178c425fe4f5edd116f0e19fd3c37b97885b63a83d1e9bca3c3230fcafafb2716a4363dde5a74044e4832092ec49b340ebb1d765ea0151de4987f0cbb331886261e46fcd3fb19ed93ce733b4a25c868649cd04fc45ff9448d0f19ac2d6f58f52c7995aae8d5e5b303e35ddd9d663ce7de72c45b67ad849220ad8adda2bd536c4ceb7cd5c7ffedc2300458acd4f9f72e1eaaa7cfb7977b205e05c6cacdc4c148f6e147466fac4cdcc415694ececf08d0a1e125c5d9a05825250869b4408649581303d9fcbf93f8837767b6a73cc15b9736006ca029c292bd0252b1702fb50"}]}}, {{0x9, 0x5, 0xd, 0x4, 0x3ef, 0x6, 0x2, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x6, 0x100}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x4}]}}, {{0x9, 0x5, 0x6, 0x0, 0x10, 0x5, 0xb, 0x4, [@generic={0x98, 0xe, "92188e3059503742f4bc480d1d4bf7fe0f45b9671329000b6126b7185aa455d9bff31e335c46f824b97fbcc8ed4e66be2d26a6cdc39f2ddc7cd94498cb9b5749b18506d54a5a14a5ca3fe8afbf36075ee67e9ca472f320c500d611cbaae2738015d3fcd333dffd14688e2a5e5840ae8a66c5ed1a53908c2d5d608c1e6d12448144940e87c88ad8b45bb74fc4af105f2afcfa6f63c27a"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x6f, 0x6}]}}, {{0x9, 0x5, 0x5, 0xf, 0x1f7, 0xfc, 0xec, 0x2}}, {{0x9, 0x5, 0xa, 0x10, 0x1f7, 0x41, 0x0, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x192}]}}, {{0x9, 0x5, 0x3, 0xc, 0x3ff, 0x66, 0x7, 0x1, [@generic={0xff, 0x3, "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"}]}}, {{0x9, 0x5, 0x9, 0x1, 0x0, 0x8, 0x4, 0x9}}, {{0x9, 0x5, 0x8, 0x8, 0x3ff, 0x7f, 0xfa, 0xc8}}, {{0x9, 0x5, 0xd, 0x13, 0x200, 0x4, 0x9, 0x80, [@generic={0x9d, 0x2, "1d2111c8904df1c32a2c37006ddeaec0b5f96aed2c9880b1291d3e10c7975f2f63a6dcb4565cbd4da83ddc68eb9e54c22ea27bdfb0b6672b31f772587f6bdebb39883578a24dfdcf192a846f727754b3b4eafc6a2d14fe3432ec739bde85798cc74c99853887138fca7440ad3909a783923f79ec1fa0e98c41aac14e1dd5f5c13f921fb70d09603579089d0dd3010dfedf0a1cf0c23576cff73c75"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xf1, 0x6}]}}, {{0x9, 0x5, 0x3, 0x1, 0x20, 0x6, 0x9, 0xb, [@generic={0x21, 0x11, "5a1cdc6f1fa42842c89b482bd0d3350ec27d3d38563166d3cc4058db559bed"}, @generic={0x1e, 0x10, "55a188e2d9ff68da7d8669576367408249d3353d896fc3a600781feb"}]}}, {{0x9, 0x5, 0x8, 0x4, 0x40, 0xa, 0x9, 0x0, [@generic={0xaa, 0x9, "f42d487d3d69710a3a7b2e97b7d5e9f2b82f7f145f7507ff6a28cf6813e95203c3a89f913fcefafecf5f865918f924b3bd3b6e56f375199479e2beee4eafa94b4d8219249967543c88e7e62168d18661f7309907b8f66fd7c68ca147a99483ffb163d8d1a09b6e13520c68bf381cd75adef89e0a308daf88872d6c2c10b4266d02fe3ab2cb5488a1f881ff29caf02e8864ec421a336f6243cb8147fde260fc13cd942811d3aba08e"}, @generic={0xa, 0xd, "563a92c522fdca9e"}]}}]}}]}}]}}, &(0x7f0000001880)={0xa, &(0x7f00000016c0)={0xa, 0x6, 0x200, 0xff, 0x86, 0x55, 0x8, 0x8}, 0xe8, &(0x7f0000001700)={0x5, 0xf, 0xe8, 0x6, [@generic={0x57, 0x10, 0xb, "649b25be9f4b4be61a7e5671e5d318ab36f3a6dff67e5c601c4b6a8e05fabffcfea55bcfb842c7a179e5797e4ca2a07f1b52eca623b1ea62f20b456df32556bb1c08c33680e4c2077f6910d2d325d0fca413b560"}, @ssp_cap={0x24, 0x10, 0xa, 0x7, 0x6, 0x3, 0xf780, 0x2, [0xff0030, 0xe07f, 0x3e4f, 0x3f00, 0x1e, 0xff3f00]}, @ss_container_id={0x14, 0x10, 0x4, 0xb6, "99d8ecf2cde4d986ed5646ebb52cc971"}, @ssp_cap={0x24, 0x10, 0xa, 0x81, 0x6, 0x1, 0x0, 0x0, [0xcf, 0xc0, 0x868f194aeb883aa7, 0x17, 0x30, 0xffc000]}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "ba7a9c60284e1301d2006a62c93fff87"}, @ssp_cap={0x1c, 0x10, 0xa, 0x0, 0x4, 0x9, 0x0, 0x10, [0x7f7fff, 0xffdf6e, 0xa5811fb89459dd80, 0xff0000]}]}, 0x2, [{0x4, &(0x7f0000001800)=@lang_id={0x4, 0x3, 0x42d}}, {0x4, &(0x7f0000001840)=@lang_id={0x4, 0x3, 0x400a}}]}) write$binfmt_script(r6, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001a80)={@cgroup=r3, 0x31, 0x0, 0x9, &(0x7f0000000880)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f00000019c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001a00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001a40)=[0x0, 0x0, 0x0], 0x0}, 0x40) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe000000008500000044000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85823d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2ba9c29faa38c409d32b6b7d6cf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e933119c5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247fa62fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120bed64069dcf82d3e5e0361e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a1000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e824d86869ec4ab392b0a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a412a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0daca8d4c1090000000000000084d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f0000000000000000004f9e02a3b51a97c4b1c1b411cc6bee2a56f29c55a6aac46a0cfc318fae02922a403431d4e5a4396cad2c8dd34037bc041a2ba1505ba2c4889122ca04e85881aad5f8bfc12e6741872aad21bf5301cd4c607ef50a991c410f7c60e45b5c193f813a36d841165b91b5e170f6ba24558df57145eb8142a6ed87c6d5cbae3e52d569996604669a6e9ca1a3689c795970b4bcd00881faff52a6766fafa07ed7d4a49f47d34fd76a394adcb33a270b6a14e74bca7c2ea92dd845d3f774fde1bbea911c1ea76d52f7912e2597e6a33380647ed44956730b5b84662b8e659124379c0d86b1d28fdfa3cd2013103e3048c4ad4f5a4dcd133b2fc8fae3b51e4433cee7c08e67c7d7ed4432045e10f8718e5c163b1704fa2c707b61a1a9f63edfceff1a0cd7baf4a15b2fd607a09d398d73243bdcc664fbd5f582e48af2a18b02f0184a7bdd95ac78241e6749e74b152702333c56588375f806f10578eaae329c4f8dfb83e5524e2c9aa59ce7828bd1f146b2a4150fb2a8ced08e2ffac81e921e8a6f0071361a0acdbd125fb5f5e9ffe98e38508582a496afd30ca460dbfca77915a18b7b9ef6c1d6e13bc12fe43063cfecfafb05bf2339ad61533fbf3e410b403182742fa2d40c402cb83c2fef46a36f17c1abf97b0e2d114bd1472ab4207aa060f9e5d91c4a4911b1a1df47b858be141ab3386f26f561df35678489dc1b9f10eee1b2ab3dfdaedd7e06ff8a127f1743fcb32d7f80d40aebc1ea72edc348f5f9ba4bace97db948c24c679c74cd4336a7233d836082bb0e8b013bd1ee3612cd43cd2a3cb83754bb3408"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r10, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000200)={r11}, 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001ac0)={@map=r3, r0, 0x2, 0x20, r0, @void, @void, @void, @value=r11, r9}, 0x20) syz_usb_control_io$hid(r1, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x0, "0c959905"}]}}, 0x0}, 0x0) 4.345698463s ago: executing program 0 (id=2100): r0 = memfd_create(&(0x7f0000000380)='fuse\x00', 0xf) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xf, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000880)={r2, r3, 0x6, 0x0, @val=@tcx={@void, @value}}, 0x40) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xf, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r4, r5, 0x6, 0x0, @void}, 0x10) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r4, r5, 0x6, 0x0, @val=@tracing}, 0x40) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) r6 = dup(r1) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) r7 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x800, 0x0, 0x73}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r7, 0x47ba, 0x0, 0x0, 0x0, 0x0) lseek(r0, 0x0, 0x1) socket$inet_sctp(0x2, 0x1, 0x84) r10 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r10, &(0x7f00000004c0)=ANY=[@ANYBLOB="930200007d00000005f0000000000000000000000000000000000000000000000000000000000000000000000000006465767b6376666f7892ffffff8102000000000031ffcebc920000003800704a86cec602007dfa673effeb09b5351f5bde05f7"], 0x232) r11 = syz_open_procfs(0x0, &(0x7f0000000040)='comm\x00') writev(r11, &(0x7f0000003ac0)=[{&(0x7f000001f600)="d6", 0x1}], 0x1) r12 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r12, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000006a00bd8a"], 0x18}}, 0x0) syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000400)='./file0\x00', 0x1828811, &(0x7f0000000240)=ANY=[], 0x1, 0x1ef, &(0x7f0000000040)="$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") writev(r4, &(0x7f00000008c0)=[{&(0x7f00000002c0)="449b917b54a40c7429a35c9f2d2a20b689db84ae84e0606b7ca738c25ec1deb205d2144d0df4caaca7e09737fba5be51820851e0476b1083942b1e42c8d2366255247e7b5fca90a3b0e7733e5ba7d3f8e8b863d276a022c318cc6888978655f92e", 0x61}, {&(0x7f0000000540)="a2cb15e7883ceb3e798415d602a4fe48e4b9a65dab337e23d4d3283e61e3677afdb76d057cec1314404dc133da5a787ea0973efcb99ab925d8a739f54e23ca4ca5ce4c071985d70a9fac2c53a58e37c63be36cd8aaa2703382e74019ca333e2d254c5e1e74d010596cb2c2d036b103b120f6c3d8ce170f0edd", 0x79}, {&(0x7f00000005c0)="1dff456e1af47440aeb34af37213f24ee528027da7cb1b220eef59390567f1aacfbd6014b21963ea9d0777d25c4f5645e1fcd6bff73909f35861dc30244f132595b945bc57d0f184839cf3f2abe04f41281270be43661b4b9a3bb6cb122c88c22f4993", 0x63}, {&(0x7f0000000240)="3960efabe24b3525478f847242224b84475e332ce947fa184efe748dd2ee424232331f12c3d04260ba49", 0x2a}, {&(0x7f0000000640)="2e78b9dd21f789068281289e6c0f8893ebca89f4b46ea04478af40dc72116fb1717f7006f8305c99705a8ac33d2600ab367e18b0fde4959e8854de9ce84cc38b192d0a4abc8c90e345d1dca0eb1617e7c79b28dbb8a08e4153b16df2a1fbca825d9b095d2cf54cf06b73cdc1f7537c38411b01e959d6f103d37dbceaa634a958188f030168878668d66293a324636b4c3cfd232ca42f139e8c8218968714b249b77c2c40f5715ebec1cb1aa22c105091e6d81a274d5438cb0e861c33bdac9dcf7bbb77fd30f482973535f61f22f78f5f4cf56cd02bc847b7e7f21f22ef5c54cdc02e589ed3ad191f2e05cf878b2b15ee96c6", 0xf2}, {&(0x7f0000000740)="018fcc17721aced7d9f93b57cfa3adaeda58d421912112c01b0a09ff22436685018ec002283f7a20756069da57db0d88e08de30c4ae5a3329790ea113c0f13b6dfa39bf5182d83abf589d221d6a1dcc8ca4c1e360fa9d8ca14fd3c2de443f1d2f977ce5ccae6b3a28f1560cb81418586", 0x70}, {&(0x7f00000007c0)="1627d9ac548563458015090ed919096030b935019b51cbfbd9d85afda3f48f17db7ab7b238cafef6fee7dc0b1bed5f9007838ee649b29b3288206afcd747a0472173c33261bb53e06e04da4bb5c581b82b748debd9dd1402b2dc9cf3f5656346a8906c7f50bdf10bea7030b8ace43e7609492844054afa0d0618108fdf1a2280bd4ee4c9f2adbd6880da91433bdb25eb7b7d5b14688801d5e5cfd04c52d2ddbff066854064911fb59227c027314bce4a8002", 0xb2}], 0x7) 4.110776276s ago: executing program 3 (id=2101): socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$usbfs(&(0x7f0000000080), 0x6f, 0x101301) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000002380), 0x0, 0x0) syz_io_uring_setup(0x82e, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) socket$kcm(0x10, 0x2, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$vcsu(0xffffff9c, &(0x7f00000000c0), 0x2240, 0x0) syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040b827ed010000000000010902"], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYBLOB="f9732e2d", @ANYBLOB="7dbf230d000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="0a0001"], 0x64}}, 0x0) 3.89421079s ago: executing program 1 (id=2102): ioperm(0x2, 0x7, 0x8) getxattr(0x0, 0x0, 0x0, 0x604) 2.963205252s ago: executing program 1 (id=2103): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @host}, 0x10) listen(r2, 0x0) ppoll(&(0x7f0000000040)=[{r2, 0x1}], 0x1, &(0x7f0000000340)={0x0, 0x3938700}, 0x0, 0x0) r3 = dup(r1) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000002100)=ANY=[@ANYBLOB="b0000000000000001659ec0889419429aa5db97288b0f8a87ea8e66d9a8b"], 0xb0) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="10"], 0x10) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="a8"], 0xa8) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) write$FUSE_ENTRY(r3, &(0x7f0000000440)={0x90}, 0x90) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@posixacl}]}}) 2.491025868s ago: executing program 0 (id=2104): socket$pptp(0x18, 0x1, 0x2) syz_open_dev$amidi(&(0x7f0000000140), 0x7, 0x200) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f0000000080)={'batadv0\x00'}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454da, &(0x7f0000000140)={'batadv0\x00'}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x1}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'\x00', 0x52d35ce30131f272}) socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) 2.286411604s ago: executing program 1 (id=2105): mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYRESOCT]) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x6, 0x2a6, &(0x7f00000007c0)="$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") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = openat$autofs(0xffffff9c, &(0x7f0000000040), 0x2000, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0x3d13, 0x0) 2.032305678s ago: executing program 2 (id=2106): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK/file0\x00', 0x5827dac0c381543, &(0x7f0000000180)=ANY=[], 0xfd, 0x1501, &(0x7f0000001800)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept4$unix(r0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f00000001c0)=ANY=[@ANYRESOCT=0x0, @ANYRESHEX], 0x0) 1.78782074s ago: executing program 1 (id=2107): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000001f5c0)={0x2, 0x4, 0x0, 0x2, 0x6, 0x0, 0x70bd2a, 0x25dfdbfc, [@sadb_spirange={0x2, 0x10, 0x4d4, 0x4d2}, @sadb_x_sa2={0x2, 0x13, 0x3, 0x0, 0x0, 0x70bd26, 0x3503}]}, 0x30}}, 0x40044004) r1 = accept4$tipc(0xffffffffffffffff, &(0x7f000001f4c0)=@id, &(0x7f000001f500)=0x10, 0x800) r2 = openat$null(0xffffff9c, &(0x7f000001f380), 0x88040, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f000001f700)=@security={'security\x00', 0xe, 0x4, 0x400, 0xffffffff, 0xd0, 0x260, 0x0, 0xffffffff, 0xffffffff, 0x330, 0x330, 0x330, 0xffffffff, 0x4, &(0x7f000001f3c0), {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0x3}, {0x0, 0x5, 0x5}}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, [0x0, 0x0, 0xff, 0xffffffff], [0xff, 0xff000000, 0xffffffff], 'caif0\x00', 'veth1_to_bridge\x00', {}, {}, 0x11, 0xcf, 0x6, 0x4f}, 0x0, 0x168, 0x190, 0x0, {}, [@common=@srh1={{0x90}, {0x87, 0x6, 0x3, 0x0, 0xffff, @empty, @private2, @mcast2, [0xffffff00, 0xffffffff, 0xffffffff, 0xff000000], [0xff0000ff, 0xff, 0xff000000, 0xc3eeac3faa74d45c], [0xffffff00, 0xff000000, 0xff], 0x2110, 0x3030}}, @common=@srh={{0x30}, {0x8, 0xa, 0x9, 0xa, 0x8, 0x0, 0x1}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xfff}}}, {{@ipv6={@local, @empty, [0x0, 0xff, 0xffffffff], [0xff, 0xffffffff, 0x0, 0xff000000], 'gre0\x00', 'ip6gre0\x00', {0xff}, {0xff}, 0x73, 0x9, 0x2, 0x4a}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) r3 = semget$private(0x0, 0xc, 0x904) semtimedop(r3, &(0x7f0000000180)=[{0x0, 0xfff}], 0x1, 0x0) semtimedop(r3, &(0x7f0000000040)=[{}], 0x1, 0x0) semctl$GETZCNT(r3, 0x0, 0x10, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(r1, 0x10f, 0x83, &(0x7f000001f540), &(0x7f000001f580)=0x4) 1.677135333s ago: executing program 0 (id=2108): mq_open(0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x80000000001}) r0 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000000)='/', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r0, r1, r1}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={'poly1305-generic\x00'}}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@loopback}}, &(0x7f00000000c0)=0xe8) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_persistent(0x16, r2, r3) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r5}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='numa_maps\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) read$FUSE(r6, &(0x7f0000002140)={0x2020}, 0x2020) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)=[0x0], 0x0, 0x0, 0x0, 0x1}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000e5f45140ca0700b835f50102030109021b00010000000009040000010300000009058d0300a200000000"], 0x0) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r7, 0x4008af00, &(0x7f0000000140)=0x200000000) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000002304e800000000000000ea850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='netlink_extack\x00', r9}, 0x10) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000000300)={@dev, @mcast1, @mcast2, 0x0, 0xff, 0x0, 0x0, 0xa21, 0x791012b}) write$vhost_msg_v2(r7, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000300)=""/110, 0xffffffffffffffd0, 0x0, 0x3, 0x2}}, 0x48) 1.673857271s ago: executing program 4 (id=2109): pselect6(0x40, &(0x7f0000000000)={0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0) 1.49636103s ago: executing program 1 (id=2110): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0b", 0x11}], 0x1}, 0x0) set_mempolicy(0x3, &(0x7f00000003c0)=0x8000000000000001, 0xe0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@ldst={0x5}], {0x95, 0x0, 0x74}}, 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x89f1, &(0x7f0000000900)={'ip6gre0\x00', @random="0600002000"}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)={0xaa, 0x32a}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file1\x00', 0x210008, &(0x7f0000001040)=ANY=[@ANYBLOB='uid=', @ANYRESDEC=0x0, @ANYRESDEC=0x0], 0xff, 0xc2d, &(0x7f00000001c0)="$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") r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0xc0086c43, &(0x7f0000000080)=0x700) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0xc0086c43, &(0x7f0000000080)=0x700) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000004c0)) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r5}]}, 0x20}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x80}}, './file0\x00'}) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r8, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0x64, r9, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x40047}, 0x20000880) sendmsg$nl_route(r1, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="940000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0300000000000000640012800b0001006970366772650000540002800800150061db0a0008000100", @ANYRES32, @ANYBLOB="14000700fe8000000000000000000000000000aa08000d005fe1ffff060010004e22000008000500200c000014000600fc"], 0x94}}, 0x0) 1.378454762s ago: executing program 4 (id=2111): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, 0x0, 0x0) timer_create(0x3, 0x0, &(0x7f0000000280)=0x0) syz_mount_image$hfs(&(0x7f0000000140), &(0x7f0000000040)='./file1\x00', 0x2810880, &(0x7f0000000000)=ANY=[], 0x8b, 0x2a7, &(0x7f0000000180)="$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") rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') timer_settime(0x0, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) timer_create(0x3, 0x0, &(0x7f00000000c0)=0x0) r3 = io_uring_setup(0x77f, &(0x7f0000000340)={0x0, 0x1989}) r4 = syz_open_dev$swradio(&(0x7f00000000c0), 0x0, 0x2) read$hiddev(r4, &(0x7f0000000740)=""/43, 0x2b) r5 = open$dir(&(0x7f0000000000)='./file0\x00', 0x202c00, 0x14) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) syz_usb_connect(0x0, 0x4e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000c5bd8b206d042108ad300102030109023e00010000000009040000010e010000052406000105240000000d240f0108000000000000000006"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0xfffffffe, 0x79, 0x10, 0xc0}, [@ldst={0x2, 0x0, 0x3}]}, &(0x7f0000000080)='GPL\x00', 0x22f, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0xf, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x20000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) futimesat(r5, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)={{0x77359400}, {r6, r7/1000+60000}}) syz_usb_connect(0x0, 0x24, &(0x7f00000017c0)={{0x12, 0x1, 0x0, 0xc7, 0xe, 0x86, 0x40, 0x1bcf, 0xb40, 0x80b1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x1}}]}}]}}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xfffffffffffffd7b, &(0x7f0000000100)={@local, @empty, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @random, @loopback, @random="a8adb9736dea", @multicast2}}}}, 0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x77359400}, {0x0, 0x989680}}, 0x0) timer_settime(r1, 0x1, &(0x7f0000000480)={{}, {0x77359400}}, 0x0) unshare(0x20000400) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000003dc0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r8, 0x68, &(0x7f0000001240)}, 0x9) socket$pptp(0x18, 0x1, 0x2) 1.31490902s ago: executing program 3 (id=2112): syz_mount_image$efs(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x604, &(0x7f0000000340), 0x1, 0x299, &(0x7f0000000380)="$eJzs3D9vm0UcB/Dv4zrgRpWIWPgjJAJFokPrhBSYGNKBd0BfQNW6UVQXEGFpYSgzS2cGJLYOCCEmNngX8CaQysCCKh5k+544hjhtbDkm9PNRYt/j+/l+d5HuIj13dgAAAAAAAACA/421JC8meSXJenmtruv6z98/v76d5NUkVRPYHv5kpcS9N3h4WNd5VNfnkqyWsEFQq3lf50Cy9ihHU3eviUkyyLfz/pe31kvc8LfENHFV6eN2aWMQ8kLTdjUMgxNx/6vv//jsanL/69HzhLUldeowZVK3ymWZVuN584QG8zNl7qWsCweaX6ztcd6TtFbWuMHfrv5pO1U7qZ8b1dVnxnHVgXVs4IOXqhPvKwAAAAAAAMT+P8zE/v9E84tl/x8AAAAAAAAe62rr7P6+XpX1Q/fVLya58ITtPUjybZLvkvyQ5K8kPyZ5NPeWaL2/oVbXkzUz7bQ9nKszAAAAwCnx85VygLccjG7ug/zyj+fX5szTmvL6b1+Mai6cPzr/G+X+y+sz5n9+av7RnZPVHJ3//Ix5G1PHf6U1ETAt/6VF5S/jv5Gj819cUP76m1H+Nx+Tf+PT2x9v7N25e2n39rWd3k7vw62ty+9uvr25+c7Wxs3dfm9z9HjsfjXjf7l9dP7usVue1J7z/QAAwPz+9fl54KkxmP/n0q6643Kr203ODM/qdFZu7vZ7W2WNaK7fymT95fJdIGtprzR3IZ5J8qDqnB1cd69/1L+x7IECAPv27ty9da3f732yt+yeAAAAAAAAAAAAxzU+/7O4wrLHCBxuZcr5/2eH5/lX98/7d5L8WnVWZvuWAeC/6CT+/ysoKJy2wrJXJgAAAAAAAAAAAAAAAAAAAABOqXvL7sBp8ncAAAD//3BAsAI=") 1.038412179s ago: executing program 3 (id=2113): unshare(0x22020600) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0x8010aa01, 0x0) 686.0621ms ago: executing program 1 (id=2114): socket$pptp(0x18, 0x1, 0x2) (fail_nth: 3) 588.953604ms ago: executing program 3 (id=2115): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x280000, 0x1, 0x2, 0x0, 0x9}) 0s ago: executing program 3 (id=2116): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000000)={0xffffffffffffffff, 0x4000000000, 0x0, 0xf}) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xe3, 0xdd, 0xef, 0x20, 0x1d50, 0x60a1, 0xa14f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9d, 0x14, 0x4e}}]}}]}}, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @broadcast}, @timestamp_reply={0x11}}}}}, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000100)=0x40009, 0x4) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r3, &(0x7f0000000040)='d', 0x1, 0x807, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 787.961945][ T8657] usb 2-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 787.971642][ T8657] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.980005][ T8657] usb 2-1: Product: syz [ 787.984587][ T8657] usb 2-1: Manufacturer: syz [ 787.989461][ T8657] usb 2-1: SerialNumber: syz [ 788.005547][ T4877] usb 1-1: USB disconnect, device number 102 [ 788.024837][ T8657] usb 2-1: config 0 descriptor?? [ 788.068483][ T8657] gspca_main: STV06xx-2.14.0 probing 046d:08f0 [ 788.076556][ T8657] gspca_stv06xx: st6422 sensor detected [ 788.231524][T10196] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 788.281808][T11110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 788.295145][T11110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 788.372065][ T8657] STV06xx 2-1:0.0: probe with driver STV06xx failed with error -71 [ 788.413092][T10196] usb 4-1: Using ep0 maxpacket: 8 [ 788.422081][ T8657] usb 2-1: USB disconnect, device number 100 [ 788.444815][T10196] usb 4-1: config 227 has an invalid descriptor of length 62, skipping remainder of the config [ 788.456292][T10196] usb 4-1: config 227 has 0 interfaces, different from the descriptor's value: 1 [ 788.579322][T10196] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 788.589038][T10196] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 788.597498][T10196] usb 4-1: Product: syz [ 788.602004][T10196] usb 4-1: Manufacturer: syz [ 788.609690][T10196] usb 4-1: SerialNumber: syz [ 788.835647][T11126] loop4: detected capacity change from 0 to 8192 [ 789.258103][T10196] usb 4-1: USB disconnect, device number 112 [ 789.548089][ T5232] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 789.701790][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 789.741582][ T5232] usb 2-1: Using ep0 maxpacket: 8 [ 789.773442][ T5232] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 789.783174][ T5232] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 789.806234][ T5232] usb 2-1: config 0 descriptor?? [ 790.115690][T11143] loop2: detected capacity change from 0 to 2048 [ 790.124480][T11135] kernel read not supported for file /!selinuxwk1ÐmÃ9Éž*T“ýâ‘ïª#j—¼ÞYÌÅmVËvm(pÉ-QZ#Ò{„¿ (pid: 11135 comm: syz.1.1804) [ 790.196454][T11143] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 790.231568][ T29] audit: type=1326 audit(1727816542.386:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11145 comm="syz.3.1810" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f517b17dff9 code=0x0 [ 790.302609][T11143] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1807'. [ 790.502309][T10196] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 790.602565][ T5232] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 790.613761][ T5232] asix 2-1:0.0: probe with driver asix failed with error -61 [ 790.682317][T10196] usb 1-1: Using ep0 maxpacket: 16 [ 790.733088][T10196] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 790.742661][T10196] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.751030][T10196] usb 1-1: Product: syz [ 790.759416][T10196] usb 1-1: Manufacturer: syz [ 790.765156][T10196] usb 1-1: SerialNumber: syz [ 790.806147][T10196] r8152-cfgselector 1-1: Unknown version 0x0000 [ 790.813140][T10196] r8152-cfgselector 1-1: config 0 descriptor?? [ 790.926776][T11157] No control pipe specified [ 790.978828][T11157] loop2: detected capacity change from 0 to 136 [ 790.989092][T11157] iso9660: Unknown parameter 'bloc0000' [ 791.148439][T11157] loop2: detected capacity change from 0 to 1024 [ 791.264925][T11157] EXT4-fs error (device loop2): ext4_orphan_get:1414: comm syz.2.1813: bad orphan inode 2048 [ 791.312660][T11157] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 791.321129][ T8657] r8152-cfgselector 1-1: USB disconnect, device number 103 [ 791.325552][T11157] ext4 filesystem being mounted at /37/file1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 791.445702][T10449] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 791.804640][T10196] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 791.978669][T10196] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 791.993100][T10196] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 41472, setting to 1024 [ 792.075073][T10196] usb 4-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=f5.35 [ 792.084919][T10196] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 792.095923][T10196] usb 4-1: Product: syz [ 792.100328][T10196] usb 4-1: Manufacturer: syz [ 792.106103][T10196] usb 4-1: SerialNumber: syz [ 792.167312][T10196] usb 4-1: config 0 descriptor?? [ 792.197054][T10196] (null): radio-mr800 - initialization failed [ 792.204329][T10196] radio-mr800 4-1:0.0: probe with driver radio-mr800 failed with error -22 [ 792.347890][T11180] Attempt to restore checkpoint with obsolete wellknown handles [ 792.444285][T10196] usb 4-1: USB disconnect, device number 113 [ 792.489397][ T5232] usb 2-1: USB disconnect, device number 101 [ 792.777125][T11187] loop2: detected capacity change from 0 to 512 [ 792.847436][T11187] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 792.861276][T11187] ext4 filesystem being mounted at /41/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 792.969310][ T29] audit: type=1326 audit(1727816545.126:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11195 comm="syz.4.1824" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f130d57dff9 code=0x0 [ 793.047405][T10449] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 793.359106][T11204] loop1: detected capacity change from 0 to 512 [ 793.381465][T11204] EXT4-fs: Ignoring removed oldalloc option [ 793.429531][T11204] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.1826: corrupted in-inode xattr: overlapping e_value [ 793.480979][T11204] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.1826: couldn't read orphan inode 15 (err -117) [ 793.524386][T11204] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 793.617745][T11199] EXT4-fs error (device loop1): htree_dirblock_to_tree:1083: inode #2: comm syz.1.1826: Directory hole found for htree leaf block 0 [ 793.761691][ T8657] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 793.955712][ T8657] usb 4-1: Using ep0 maxpacket: 16 [ 794.012020][ T8657] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 794.021600][ T8657] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 794.030059][ T8657] usb 4-1: Product: syz [ 794.036903][ T8657] usb 4-1: Manufacturer: syz [ 794.042655][ T8657] usb 4-1: SerialNumber: syz [ 794.059532][T10067] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 794.462503][ T8657] r8152-cfgselector 4-1: Unknown version 0x0000 [ 794.469061][ T8657] r8152-cfgselector 4-1: config 0 descriptor?? [ 795.139196][T10196] r8152-cfgselector 4-1: USB disconnect, device number 114 [ 795.681520][ T4877] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 795.950771][ T29] audit: type=1326 audit(1727816548.106:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11250 comm="syz.1.1841" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb15ad7dff9 code=0x0 [ 796.011111][T11253] usb usb7: usbfs: process 11253 (syz.3.1842) did not claim interface 2 before use [ 796.090197][ T4877] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 796.101944][ T4877] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 41472, setting to 1024 [ 796.154175][ T4877] usb 1-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=f5.35 [ 796.164046][ T4877] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 796.172463][ T4877] usb 1-1: Product: syz [ 796.176871][ T4877] usb 1-1: Manufacturer: syz [ 796.181885][ T4877] usb 1-1: SerialNumber: syz [ 796.194814][ T4877] usb 1-1: config 0 descriptor?? [ 796.214036][ T4877] (null): radio-mr800 - initialization failed [ 796.221468][ T4877] radio-mr800 1-1:0.0: probe with driver radio-mr800 failed with error -22 [ 796.475977][ T4877] usb 1-1: USB disconnect, device number 104 [ 796.949714][T11268] loop4: detected capacity change from 0 to 64 [ 797.073268][ T29] audit: type=1804 audit(1727816549.226:26): pid=11268 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1847" name="/newroot/19/file0/bus" dev="loop4" ino=21 res=1 errno=0 [ 797.095646][ T29] audit: type=1804 audit(1727816549.256:27): pid=11268 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1847" name="/newroot/19/file0/bus" dev="loop4" ino=21 res=1 errno=0 [ 797.250467][T11273] FAULT_INJECTION: forcing a failure. [ 797.250467][T11273] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 797.264539][T11273] CPU: 0 UID: 0 PID: 11273 Comm: syz.1.1848 Tainted: G W 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 797.277151][T11273] Tainted: [W]=WARN [ 797.281147][T11273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 797.291443][T11273] Call Trace: [ 797.294921][T11273] [ 797.298046][T11273] dump_stack_lvl+0x216/0x2d0 [ 797.303045][T11273] dump_stack+0x1e/0x30 [ 797.307496][T11273] should_fail_ex+0x748/0x7f0 [ 797.312498][T11273] should_fail+0x2a/0x40 [ 797.317052][T11273] should_fail_usercopy+0x2e/0x40 [ 797.322399][T11273] _copy_from_user+0x33/0x160 [ 797.327394][T11273] __sys_bpf+0x2dc/0xd90 [ 797.331972][T11273] ? ksys_write+0x416/0x4c0 [ 797.336786][T11273] __x64_sys_bpf+0xa0/0xe0 [ 797.341521][T11273] x64_sys_call+0x2cce/0x3ba0 [ 797.346517][T11273] do_syscall_64+0xcd/0x1e0 [ 797.351332][T11273] ? clear_bhb_loop+0x25/0x80 [ 797.356296][T11273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 797.362531][T11273] RIP: 0033:0x7fb15ad7dff9 [ 797.367210][T11273] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 797.387279][T11273] RSP: 002b:00007fb15bc21038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 797.396035][T11273] RAX: ffffffffffffffda RBX: 00007fb15af35f80 RCX: 00007fb15ad7dff9 [ 797.404278][T11273] RDX: 0000000000000048 RSI: 000000002000e000 RDI: 0000000000000005 [ 797.412511][T11273] RBP: 00007fb15bc21090 R08: 0000000000000000 R09: 0000000000000000 [ 797.420743][T11273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 797.428979][T11273] R13: 0000000000000000 R14: 00007fb15af35f80 R15: 00007fffe62d28a8 [ 797.437233][T11273] [ 797.440590][ C0] vkms_vblank_simulate: vblank timer overrun [ 797.788688][T10878] hfs: request for non-existent node 131072 in B*Tree [ 797.795824][T10878] hfs: request for non-existent node 131072 in B*Tree [ 798.891742][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 799.061610][ T29] audit: type=1326 audit(1727816551.206:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11288 comm="syz.2.1858" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1147d7dff9 code=0x0 [ 799.416915][T11296] loop1: detected capacity change from 0 to 512 [ 799.441085][ T5185] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 799.465401][ T5185] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 799.474486][T11296] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 799.500996][ T5185] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 799.519196][ T5185] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 799.530950][ T5185] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 799.544555][ T5185] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 799.653247][T11296] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1861'. [ 799.679725][T11296] 9pnet_fd: Insufficient options for proto=fd [ 799.799106][T10067] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 800.144993][ T3466] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.236448][ T4877] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 800.348759][ T3466] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.518728][ T3466] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.551984][ T4877] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 800.564662][ T4877] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 41472, setting to 1024 [ 800.623294][T11298] chnl_net:caif_netlink_parms(): no params data found [ 800.683302][ T4877] usb 4-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=f5.35 [ 800.695155][ T4877] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.704320][ T4877] usb 4-1: Product: syz [ 800.708743][ T4877] usb 4-1: Manufacturer: syz [ 800.713886][ T4877] usb 4-1: SerialNumber: syz [ 800.745885][ T4877] usb 4-1: config 0 descriptor?? [ 800.768689][ T4877] (null): radio-mr800 - initialization failed [ 800.776356][ T4877] radio-mr800 4-1:0.0: probe with driver radio-mr800 failed with error -22 [ 800.897639][ T3466] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.190712][ T4877] usb 4-1: USB disconnect, device number 115 [ 801.379418][ T3466] bridge_slave_1: left allmulticast mode [ 801.385624][ T3466] bridge_slave_1: left promiscuous mode [ 801.392666][ T3466] bridge0: port 2(bridge_slave_1) entered disabled state [ 801.495836][ T3466] bridge_slave_0: left allmulticast mode [ 801.501910][ T3466] bridge_slave_0: left promiscuous mode [ 801.512971][ T3466] bridge0: port 1(bridge_slave_0) entered disabled state [ 801.621901][ T9437] Bluetooth: hci4: command tx timeout [ 802.157071][T11337] loop3: detected capacity change from 0 to 64 [ 802.224677][ T3466] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 802.259044][ T3466] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 802.291354][ T3466] bond0 (unregistering): Released all slaves [ 802.678966][ T29] audit: type=1326 audit(1727816554.806:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11341 comm="syz.0.1872" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7effccd7dff9 code=0x0 [ 803.021571][T11298] bridge0: port 1(bridge_slave_0) entered blocking state [ 803.029504][T11298] bridge0: port 1(bridge_slave_0) entered disabled state [ 803.037466][T11298] bridge_slave_0: entered allmulticast mode [ 803.050892][T11298] bridge_slave_0: entered promiscuous mode [ 803.096728][T11298] bridge0: port 2(bridge_slave_1) entered blocking state [ 803.105157][T11298] bridge0: port 2(bridge_slave_1) entered disabled state [ 803.113096][T11298] bridge_slave_1: entered allmulticast mode [ 803.122202][T11298] bridge_slave_1: entered promiscuous mode [ 803.510826][ T3466] hsr_slave_0: left promiscuous mode [ 803.609085][ T3466] hsr_slave_1: left promiscuous mode [ 803.642216][ T3466] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 803.650002][ T3466] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 803.695490][ T3466] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 803.697964][ T9437] Bluetooth: hci4: command tx timeout [ 803.703351][ T3466] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 803.812169][ T3466] veth1_macvtap: left promiscuous mode [ 803.817950][ T3466] veth0_macvtap: left promiscuous mode [ 803.824021][ T3466] veth1_vlan: left promiscuous mode [ 803.829596][ T3466] veth0_vlan: left promiscuous mode [ 803.927484][T11355] syz.0.1876 uses old SIOCAX25GETINFO [ 804.011885][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 804.667312][ T3466] team0 (unregistering): Port device team_slave_1 removed [ 804.692763][ T3466] team0 (unregistering): Port device team_slave_0 removed [ 805.084783][T10196] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 805.181973][T11298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 805.262413][T11298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 805.267000][T10196] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 805.283265][T10196] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 41472, setting to 1024 [ 805.406735][T11298] team0: Port device team_slave_0 added [ 805.432759][T11298] team0: Port device team_slave_1 added [ 805.467007][T10196] usb 1-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=f5.35 [ 805.476654][T10196] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 805.485230][T10196] usb 1-1: Product: syz [ 805.489641][T10196] usb 1-1: Manufacturer: syz [ 805.494576][T10196] usb 1-1: SerialNumber: syz [ 805.538346][T10196] usb 1-1: config 0 descriptor?? [ 805.556024][T10196] (null): radio-mr800 - initialization failed [ 805.563478][T10196] radio-mr800 1-1:0.0: probe with driver radio-mr800 failed with error -22 [ 805.658591][T11298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 805.666561][T11298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 805.695305][T11298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 805.776683][ T9437] Bluetooth: hci4: command tx timeout [ 805.780349][T11298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 805.789626][T11298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 805.819614][T11298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 805.929472][T10196] usb 1-1: USB disconnect, device number 105 [ 806.144167][T11298] hsr_slave_0: entered promiscuous mode [ 806.160851][T11298] hsr_slave_1: entered promiscuous mode [ 806.170467][T11298] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 806.178502][T11298] Cannot create hsr debugfs directory [ 807.033888][T11393] loop3: detected capacity change from 0 to 128 [ 807.248098][T11393] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 807.275534][T11298] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 807.309558][T11393] ext4 filesystem being mounted at /149/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 807.323411][T11298] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 807.377230][T11298] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 807.431950][T11298] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 807.874883][ T9437] Bluetooth: hci4: command tx timeout [ 807.908357][T11298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 807.967131][T11298] 8021q: adding VLAN 0 to HW filter on device team0 [ 808.092589][T11298] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 808.104136][T11298] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 808.153848][ T3466] bridge0: port 1(bridge_slave_0) entered blocking state [ 808.161693][ T3466] bridge0: port 1(bridge_slave_0) entered forwarding state [ 808.178356][ T3466] bridge0: port 2(bridge_slave_1) entered blocking state [ 808.186152][ T3466] bridge0: port 2(bridge_slave_1) entered forwarding state [ 808.361016][ T8885] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 808.836801][T11426] loop2: detected capacity change from 0 to 1024 [ 808.846315][T11426] EXT4-fs: Ignoring removed orlov option [ 808.852685][T11426] EXT4-fs: Ignoring removed nomblk_io_submit option [ 808.937818][T11426] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 808.991992][T11420] netlink: 'syz.3.1895': attribute type 13 has an invalid length. [ 809.000320][T11420] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1895'. [ 809.009757][T11420] gretap0: entered allmulticast mode [ 809.019768][T11420] gretap0: refused to change device tx_queue_len [ 809.116035][T10196] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 809.132014][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 809.186461][T10449] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 809.303475][T10196] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 809.314932][T10196] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 41472, setting to 1024 [ 809.360869][T10196] usb 1-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=f5.35 [ 809.370676][T10196] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.379217][T10196] usb 1-1: Product: syz [ 809.383717][T10196] usb 1-1: Manufacturer: syz [ 809.388584][T10196] usb 1-1: SerialNumber: syz [ 809.460257][T10196] usb 1-1: config 0 descriptor?? [ 809.477673][T10196] (null): radio-mr800 - initialization failed [ 809.486569][T10196] radio-mr800 1-1:0.0: probe with driver radio-mr800 failed with error -22 [ 809.601432][T11298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 809.799126][T11441] FAULT_INJECTION: forcing a failure. [ 809.799126][T11441] name failslab, interval 1, probability 0, space 0, times 0 [ 809.815117][T11441] CPU: 1 UID: 0 PID: 11441 Comm: syz.1.1900 Tainted: G W 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 809.827728][T11441] Tainted: [W]=WARN [ 809.831734][T11441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 809.842034][T11441] Call Trace: [ 809.845601][T11441] [ 809.848722][T11441] dump_stack_lvl+0x216/0x2d0 [ 809.853725][T11441] dump_stack+0x1e/0x30 [ 809.858169][T11441] should_fail_ex+0x748/0x7f0 [ 809.863157][T11441] should_failslab+0x17f/0x210 [ 809.868190][T11441] __kmalloc_node_noprof+0x177/0xf50 [ 809.873814][T11441] ? __kvmalloc_node_noprof+0xc0/0x2d0 [ 809.879561][T11441] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 809.886223][T11441] __kvmalloc_node_noprof+0xc0/0x2d0 [ 809.891815][T11441] __do_semtimedop+0x1f10/0x2460 [ 809.897064][T11441] ? should_fail_ex+0x19a/0x7f0 [ 809.902235][T11441] do_semtimedop+0x2da/0x3d0 [ 809.907129][T11441] ? vfs_write+0xf3e/0x1540 [ 809.911905][T11441] ? kmsan_get_metadata+0x13e/0x1c0 [ 809.917360][T11441] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 809.924002][T11441] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 809.930374][T11441] ? fput+0x286/0x320 [ 809.934612][T11441] ? ksys_write+0x405/0x4c0 [ 809.939379][T11441] ? kmsan_get_metadata+0x13e/0x1c0 [ 809.944828][T11441] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 809.950900][T11441] __x64_sys_semtimedop+0x1ef/0x290 [ 809.956399][T11441] x64_sys_call+0x2e09/0x3ba0 [ 809.961366][T11441] do_syscall_64+0xcd/0x1e0 [ 809.966148][T11441] ? clear_bhb_loop+0x25/0x80 [ 809.971077][T11441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 809.977289][T11441] RIP: 0033:0x7fb15ad7dff9 [ 809.981928][T11441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 810.001813][T11441] RSP: 002b:00007fb15bc21038 EFLAGS: 00000246 ORIG_RAX: 00000000000000dc [ 810.010516][T11441] RAX: ffffffffffffffda RBX: 00007fb15af35f80 RCX: 00007fb15ad7dff9 [ 810.018733][T11441] RDX: 0000000000000006 RSI: 0000000020000640 RDI: 0000000000000000 [ 810.026927][T11441] RBP: 00007fb15bc21090 R08: 0000000000000000 R09: 0000000000000000 [ 810.035122][T11441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 810.043313][T11441] R13: 0000000000000000 R14: 00007fb15af35f80 R15: 00007fffe62d28a8 [ 810.051530][T11441] [ 810.253111][T10196] usb 1-1: USB disconnect, device number 106 [ 810.840219][T11451] loop1: detected capacity change from 0 to 1024 [ 810.885198][T11451] EXT4-fs: Ignoring removed orlov option [ 810.891823][T11451] ext4: Unknown parameter 'subj_type' [ 811.039869][T11451] usb usb8: usbfs: process 11451 (syz.1.1902) did not claim interface 0 before use [ 811.296659][T11458] loop3: detected capacity change from 0 to 128 [ 811.510090][T11298] veth0_vlan: entered promiscuous mode [ 811.541548][T11298] veth1_vlan: entered promiscuous mode [ 811.671372][T11298] veth0_macvtap: entered promiscuous mode [ 811.693037][T11298] veth1_macvtap: entered promiscuous mode [ 811.741980][T11298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 811.753941][T11298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 811.764596][T11298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 811.778034][T11298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 811.790980][T11298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 811.807341][T11298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 811.819200][T11298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 811.830028][T11298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 811.844946][T11298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 811.985517][T11458] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 812.065334][T11458] ext4 filesystem being mounted at /152/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 812.097405][ C0] vkms_vblank_simulate: vblank timer overrun [ 812.276010][T11298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 812.287355][T11298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 812.298036][T11298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 812.308844][T11298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 812.319116][T11298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 812.329856][T11298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 812.340232][T11298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 812.351006][T11298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 812.370492][T11298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 812.413160][T11298] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 812.422628][T11298] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 812.431825][T11298] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 812.438360][T11475] loop2: detected capacity change from 0 to 1024 [ 812.440782][T11298] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 812.520046][T11475] EXT4-fs: Ignoring removed orlov option [ 812.527298][T11475] EXT4-fs: Ignoring removed nomblk_io_submit option [ 812.599242][T11475] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 812.814989][T10449] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 812.894032][ T8885] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 813.060852][ T5185] Bluetooth: hci1: command tx timeout [ 813.398490][T11496] FAULT_INJECTION: forcing a failure. [ 813.398490][T11496] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 813.412152][T11496] CPU: 1 UID: 0 PID: 11496 Comm: syz.2.1914 Tainted: G W 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 813.424747][T11496] Tainted: [W]=WARN [ 813.428744][T11496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 813.439052][T11496] Call Trace: [ 813.442527][T11496] [ 813.445647][T11496] dump_stack_lvl+0x216/0x2d0 [ 813.450643][T11496] dump_stack+0x1e/0x30 [ 813.455101][T11496] should_fail_ex+0x748/0x7f0 [ 813.460106][T11496] should_fail+0x2a/0x40 [ 813.464660][T11496] should_fail_usercopy+0x2e/0x40 [ 813.469994][T11496] strncpy_from_user+0x39/0x540 [ 813.475149][T11496] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 813.481268][T11496] getname_flags+0x187/0xa30 [ 813.486152][T11496] ? kmsan_get_metadata+0x13e/0x1c0 [ 813.491651][T11496] user_path_at+0x45/0x390 [ 813.496370][T11496] ? __se_sys_mount+0x644/0x810 [ 813.501522][T11496] ? __x64_sys_mount+0xe4/0x150 [ 813.506668][T11496] ? _copy_from_user+0x10c/0x160 [ 813.511915][T11496] __se_sys_mount+0x668/0x810 [ 813.516901][T11496] ? ksys_write+0x405/0x4c0 [ 813.521727][T11496] __x64_sys_mount+0xe4/0x150 [ 813.526735][T11496] x64_sys_call+0x255a/0x3ba0 [ 813.531745][T11496] do_syscall_64+0xcd/0x1e0 [ 813.536555][T11496] ? clear_bhb_loop+0x25/0x80 [ 813.541526][T11496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 813.547779][T11496] RIP: 0033:0x7f1147d7dff9 [ 813.552457][T11496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 813.572378][T11496] RSP: 002b:00007f1148b94038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 813.581135][T11496] RAX: ffffffffffffffda RBX: 00007f1147f35f80 RCX: 00007f1147d7dff9 [ 813.589386][T11496] RDX: 0000000020000000 RSI: 00000000200020c0 RDI: 0000000000000000 [ 813.597630][T11496] RBP: 00007f1148b94090 R08: 0000000020000040 R09: 0000000000000000 [ 813.605872][T11496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 813.614103][T11496] R13: 0000000000000000 R14: 00007f1147f35f80 R15: 00007ffe3d1b8c88 [ 813.622363][T11496] [ 814.171601][ T5232] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 814.434824][ T5232] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 814.446692][ T5232] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 41472, setting to 1024 [ 814.539617][ T5232] usb 4-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=f5.35 [ 814.549404][ T5232] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.557804][ T5232] usb 4-1: Product: syz [ 814.562415][ T5232] usb 4-1: Manufacturer: syz [ 814.567297][ T5232] usb 4-1: SerialNumber: syz [ 814.654227][ T5232] usb 4-1: config 0 descriptor?? [ 814.709055][ T5232] (null): radio-mr800 - initialization failed [ 814.716284][ T5232] radio-mr800 4-1:0.0: probe with driver radio-mr800 failed with error -22 [ 814.971837][ T5232] usb 4-1: USB disconnect, device number 116 [ 815.140145][ T9437] Bluetooth: hci1: command 0x0406 tx timeout [ 816.485094][T11542] loop3: detected capacity change from 0 to 2048 [ 816.532479][T11545] loop1: detected capacity change from 0 to 1024 [ 816.603376][T11542] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 816.644821][T11545] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 816.941119][T10067] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 817.177056][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 817.185500][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 817.313695][T11558] loop1: detected capacity change from 0 to 512 [ 817.400806][ T3383] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 817.410286][ T3383] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 817.487579][T11558] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 817.501728][T11558] ext4 filesystem being mounted at /78/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 817.664478][T11565] loop4: detected capacity change from 0 to 128 [ 817.744515][T11565] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1855'. [ 818.012394][ T4877] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 818.209298][ T4877] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 818.220165][ T4877] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 818.286948][ T4877] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 818.298773][ T4877] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 818.307774][ T4877] usb 2-1: SerialNumber: syz [ 818.368673][ T4877] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 818.381563][ T5232] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 818.598629][ T5232] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 818.613774][ T5232] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 41472, setting to 1024 [ 818.670069][ T5232] usb 5-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=f5.35 [ 818.680094][ T5232] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.688504][ T5232] usb 5-1: Product: syz [ 818.693030][ T5232] usb 5-1: Manufacturer: syz [ 818.697886][ T5232] usb 5-1: SerialNumber: syz [ 818.724993][ T5232] usb 5-1: config 0 descriptor?? [ 818.789099][ T4877] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 818.792708][ T5232] (null): radio-mr800 - initialization failed [ 818.807658][ T5232] radio-mr800 5-1:0.0: probe with driver radio-mr800 failed with error -22 [ 818.988458][ T4877] usb 1-1: config 0 has no interfaces? [ 818.995218][ T4877] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 819.004875][ T4877] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 819.028716][ T4877] usb 1-1: config 0 descriptor?? [ 819.050060][ T5232] usb 5-1: USB disconnect, device number 99 [ 819.071521][ T8657] usb 2-1: USB disconnect, device number 102 [ 819.317511][T11578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 819.340835][T11578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 819.411986][ T8657] usb 1-1: USB disconnect, device number 107 [ 819.558212][T11584] FAULT_INJECTION: forcing a failure. [ 819.558212][T11584] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 819.572082][T11584] CPU: 1 UID: 0 PID: 11584 Comm: syz.2.1937 Tainted: G W 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 819.584676][T11584] Tainted: [W]=WARN [ 819.588672][T11584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 819.599062][T11584] Call Trace: [ 819.602549][T11584] [ 819.605683][T11584] dump_stack_lvl+0x216/0x2d0 [ 819.610681][T11584] dump_stack+0x1e/0x30 [ 819.615123][T11584] should_fail_ex+0x748/0x7f0 [ 819.620100][T11584] should_fail+0x2a/0x40 [ 819.624608][T11584] should_fail_usercopy+0x2e/0x40 [ 819.629917][T11584] _copy_from_user+0x33/0x160 [ 819.634888][T11584] __tun_chr_ioctl+0x215/0x3bb0 [ 819.640102][T11584] tun_chr_ioctl+0x43/0x50 [ 819.644822][T11584] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 819.650259][T11584] __se_sys_ioctl+0x25e/0x450 [ 819.655222][T11584] __x64_sys_ioctl+0x96/0xe0 [ 819.660082][T11584] x64_sys_call+0x18bf/0x3ba0 [ 819.665054][T11584] do_syscall_64+0xcd/0x1e0 [ 819.669829][T11584] ? clear_bhb_loop+0x25/0x80 [ 819.674770][T11584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 819.680989][T11584] RIP: 0033:0x7f1147d7dff9 [ 819.685724][T11584] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 819.705710][T11584] RSP: 002b:00007f1148b94038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 819.714421][T11584] RAX: ffffffffffffffda RBX: 00007f1147f35f80 RCX: 00007f1147d7dff9 [ 819.722627][T11584] RDX: 0000000020000180 RSI: 00000000400454ca RDI: 0000000000000003 [ 819.730830][T11584] RBP: 00007f1148b94090 R08: 0000000000000000 R09: 0000000000000000 [ 819.739036][T11584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 819.747238][T11584] R13: 0000000000000000 R14: 00007f1147f35f80 R15: 00007ffe3d1b8c88 [ 819.755462][T11584] [ 819.983617][T10067] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 820.183166][T11590] loop3: detected capacity change from 0 to 1024 [ 820.405065][T11590] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 820.980780][ T8885] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 821.099946][T11606] loop2: detected capacity change from 0 to 1024 [ 821.150401][T11606] EXT4-fs: Ignoring removed orlov option [ 821.157483][T11606] EXT4-fs: Ignoring removed nomblk_io_submit option [ 821.393867][T11606] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 821.868977][T11622] loop1: detected capacity change from 0 to 2048 [ 822.066774][T10449] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 822.069661][T11622] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 822.145539][T11622] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1948'. [ 822.178366][T11626] loop3: detected capacity change from 0 to 512 [ 822.270616][T11626] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 822.284023][T11626] ext4 filesystem being mounted at /160/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 822.310337][ T1920] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 822.431777][T11634] cgroup: name respecified [ 822.532836][ T1920] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 822.544399][ T1920] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 41472, setting to 1024 [ 822.567143][ T1920] usb 5-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=f5.35 [ 822.577349][ T1920] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.578065][T11634] tmpfs: Unknown parameter 'uidñǶg ûÖþR)Ѐ–Þx›t%e« ®Yƒ“O S—(fŽ›¬1ê>){sdÍVÌÇyý©Ãêž•ºÜê$UÜ/õüÙyKJOž˜ãô7y–~Ê­-g¿ÌâBj˜ÎRü$·ˆßÛ÷0xffffffffffffffff0x0000000000000005' [ 822.585718][ T1920] usb 5-1: Product: syz [ 822.585833][ T1920] usb 5-1: Manufacturer: syz [ 822.621435][ T1920] usb 5-1: SerialNumber: syz [ 822.644802][ T1920] usb 5-1: config 0 descriptor?? [ 822.680091][ T1920] (null): radio-mr800 - initialization failed [ 822.687326][ T1920] radio-mr800 5-1:0.0: probe with driver radio-mr800 failed with error -22 [ 822.716952][T10196] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 822.931864][T11639] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1954'. [ 823.211836][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 823.508017][ T1920] usb 5-1: USB disconnect, device number 100 [ 823.587518][T10196] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 823.598864][T10196] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 823.669155][T10196] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 823.678884][T10196] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 823.687401][T10196] usb 4-1: SerialNumber: syz [ 823.785584][T10196] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 823.868532][T11645] loop2: detected capacity change from 0 to 1024 [ 823.963634][T11645] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 824.291109][T11659] loop4: detected capacity change from 0 to 512 [ 824.305869][T11659] EXT4-fs: Ignoring removed oldalloc option [ 824.329055][T10449] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 824.408634][T11659] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.1959: corrupted in-inode xattr: overlapping e_value [ 824.439843][ T8657] usb 4-1: USB disconnect, device number 117 [ 824.453065][T11659] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.1959: couldn't read orphan inode 15 (err -117) [ 824.462818][T11660] ptrace attach of "./syz-executor exec"[10067] was attempted by " [ 824.479411][T11659] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 824.571058][ C0] vkms_vblank_simulate: vblank timer overrun [ 824.638936][T11665] loop2: detected capacity change from 0 to 128 [ 824.680726][T11665] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 824.709731][T11665] ext4 filesystem being mounted at /75/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 824.791366][T11665] fscrypt (loop2, inode 12): Unsupported encryption modes (contents 0, filenames 0) [ 824.911650][T10196] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 824.954995][T10449] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 825.127954][T11298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 825.148114][T10196] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 825.159781][T10196] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 825.174817][T10196] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 825.189959][T10196] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 825.199577][T10196] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 825.230235][T10196] usb 2-1: config 0 descriptor?? [ 825.231656][ T8885] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 825.406773][ T1920] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 825.732374][T10196] plantronics 0003:047F:FFFF.002B: ignoring exceeding usage max [ 825.775465][ T1920] usb 3-1: device descriptor read/64, error -71 [ 825.800108][T10196] plantronics 0003:047F:FFFF.002B: No inputs registered, leaving [ 825.832234][T10196] plantronics 0003:047F:FFFF.002B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 826.015870][ T8657] usb 2-1: USB disconnect, device number 103 [ 826.031671][ T1920] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 826.185855][ T4877] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 826.201712][ T1920] usb 3-1: device descriptor read/64, error -71 [ 826.315818][ T1920] usb usb3-port1: attempt power cycle [ 826.347956][ T4877] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 826.359612][ T4877] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 826.369816][ T4877] usb 1-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 826.379403][ T4877] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 826.390462][ T5239] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 826.443673][ T4877] usb 1-1: config 0 descriptor?? [ 826.590182][ T5239] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 826.603157][ T5239] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 41472, setting to 1024 [ 826.681560][ T1920] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 826.726115][ T5239] usb 5-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=f5.35 [ 826.736556][ T5239] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 826.743684][ T1920] usb 3-1: device descriptor read/8, error -71 [ 826.745058][ T5239] usb 5-1: Product: syz [ 826.755678][ T5239] usb 5-1: Manufacturer: syz [ 826.760738][ T5239] usb 5-1: SerialNumber: syz [ 826.797458][ T5239] usb 5-1: config 0 descriptor?? [ 826.829516][ T5239] (null): radio-mr800 - initialization failed [ 826.837431][ T5239] radio-mr800 5-1:0.0: probe with driver radio-mr800 failed with error -22 [ 826.981581][ T1920] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 826.992853][T11688] loop1: detected capacity change from 0 to 16 [ 827.041837][T11688] erofs: Unknown parameter '' [ 827.053044][ T1920] usb 3-1: device descriptor read/8, error -71 [ 827.083842][T11688] loop1: detected capacity change from 0 to 1 [ 827.085707][ T5239] usb 5-1: USB disconnect, device number 101 [ 827.092677][T11688] syz.1.1970: attempt to access beyond end of device [ 827.092677][T11688] loop1: rw=2048, sector=0, nr_sectors = 8 limit=1 [ 827.112769][T11688] SQUASHFS error: Failed to read block 0x0: -5 [ 827.119307][T11688] unable to read squashfs_super_block [ 827.162884][ T1920] usb usb3-port1: unable to enumerate USB device [ 827.225565][ T4877] usbhid 1-1:0.0: can't add hid device: -71 [ 827.232736][ T4877] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 827.263122][ T4877] usb 1-1: USB disconnect, device number 108 [ 827.922798][T11693] loop1: detected capacity change from 0 to 1024 [ 828.009531][T11693] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 828.187234][T11695] loop4: detected capacity change from 0 to 1024 [ 828.196692][T11695] EXT4-fs: Ignoring removed orlov option [ 828.205605][T11695] EXT4-fs: Ignoring removed nomblk_io_submit option [ 828.270879][T11695] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 828.337056][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 828.410755][T10067] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 828.760110][ T1920] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 828.792583][T11298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 828.792698][T11709] loop2: detected capacity change from 0 to 256 [ 828.896070][T11709] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 828.932009][ T1920] usb 1-1: Using ep0 maxpacket: 8 [ 828.959438][ T29] audit: type=1800 audit(1727816581.106:30): pid=11709 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1977" name="file1" dev="loop2" ino=1048773 res=0 errno=0 [ 828.991895][ T1920] usb 1-1: config 16 has an invalid interface number: 118 but max is 0 [ 829.000486][ T1920] usb 1-1: config 16 has no interface number 0 [ 829.007097][ T1920] usb 1-1: config 16 interface 118 altsetting 6 has an invalid endpoint descriptor of length 5, skipping [ 829.018757][ T1920] usb 1-1: config 16 interface 118 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 829.032378][ T1920] usb 1-1: config 16 interface 118 has no altsetting 0 [ 829.071493][ T1920] usb 1-1: New USB device found, idVendor=045e, idProduct=007a, bcdDevice=bc.dd [ 829.073910][T11710] loop1: detected capacity change from 0 to 512 [ 829.080763][ T1920] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 829.095765][ T1920] usb 1-1: Product: syz [ 829.100188][ T1920] usb 1-1: Manufacturer: syz [ 829.105146][ T1920] usb 1-1: SerialNumber: syz [ 829.415100][T11710] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 829.428876][T11710] ext4 filesystem being mounted at /87/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 829.543662][T11715] loop2: detected capacity change from 0 to 512 [ 829.570888][T11715] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 829.579133][T11715] UDF-fs: Scanning with blocksize 512 failed [ 829.599244][T11715] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 829.607326][T11715] UDF-fs: Scanning with blocksize 1024 failed [ 829.632699][ T1920] pegasus 1-1:16.118: probe with driver pegasus failed with error -71 [ 829.674353][ T1920] usb 1-1: USB disconnect, device number 109 [ 829.687693][T11715] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 829.697490][T11715] UDF-fs: Scanning with blocksize 2048 failed [ 829.718005][T11715] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 829.831121][T11715] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 829.882729][ T4877] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 830.166725][ T4877] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 830.177460][ T4877] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 830.271898][ T4877] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 830.281556][ T4877] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 830.291488][ T4877] usb 2-1: SerialNumber: syz [ 830.327767][ T4877] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 831.084275][T11731] loop2: detected capacity change from 0 to 512 [ 831.201833][T11731] EXT4-fs (loop2): Invalid log block size: 7 [ 831.313597][ T1920] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 831.374891][T11721] loop3: detected capacity change from 0 to 4096 [ 831.395608][T10196] usb 2-1: USB disconnect, device number 104 [ 831.436323][T11733] FAULT_INJECTION: forcing a failure. [ 831.436323][T11733] name failslab, interval 1, probability 0, space 0, times 0 [ 831.449625][T11733] CPU: 0 UID: 0 PID: 11733 Comm: syz.4.1978 Tainted: G W 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 831.462224][T11733] Tainted: [W]=WARN [ 831.466214][T11733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 831.476593][T11733] Call Trace: [ 831.480068][T11733] [ 831.483192][T11733] dump_stack_lvl+0x216/0x2d0 [ 831.488178][T11733] dump_stack+0x1e/0x30 [ 831.492700][T11733] should_fail_ex+0x748/0x7f0 [ 831.497787][T11733] should_failslab+0x17f/0x210 [ 831.502838][T11733] kmem_cache_alloc_noprof+0xe2/0xb20 [ 831.508526][T11733] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 831.514610][T11733] ? security_inode_alloc+0x75/0x6d0 [ 831.520165][T11733] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 831.526245][T11733] security_inode_alloc+0x75/0x6d0 [ 831.531620][T11733] inode_init_always+0x721/0x7d0 [ 831.536943][T11733] alloc_inode+0x125/0x460 [ 831.541644][T11733] new_inode+0x38/0x480 [ 831.546075][T11733] ? resv_map_alloc+0x36e/0x640 [ 831.551226][T11733] hugetlbfs_get_inode+0xf0/0x6c0 [ 831.556529][T11733] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 831.562619][T11733] hugetlb_file_setup+0x2d7/0xa40 [ 831.567973][T11733] ksys_mmap_pgoff+0x2b9/0x790 [ 831.573033][T11733] ? kmsan_get_metadata+0x13e/0x1c0 [ 831.578514][T11733] __x64_sys_mmap+0x1a8/0x240 [ 831.583488][T11733] x64_sys_call+0x1bfb/0x3ba0 [ 831.588456][T11733] do_syscall_64+0xcd/0x1e0 [ 831.593236][T11733] ? clear_bhb_loop+0x25/0x80 [ 831.598163][T11733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 831.604367][T11733] RIP: 0033:0x7f9f32b7dff9 [ 831.609008][T11733] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 831.628918][T11733] RSP: 002b:00007f9f33a12038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 831.637715][T11733] RAX: ffffffffffffffda RBX: 00007f9f32d36130 RCX: 00007f9f32b7dff9 [ 831.645932][T11733] RDX: 0000000003000002 RSI: 0000000000c00000 RDI: 0000000020400000 [ 831.654129][T11733] RBP: 00007f9f33a12090 R08: ffffffffffffffff R09: 0000000000000000 [ 831.662337][T11733] R10: 000000000005d031 R11: 0000000000000246 R12: 0000000000000001 [ 831.670529][T11733] R13: 0000000000000000 R14: 00007f9f32d36130 R15: 00007ffd53110098 [ 831.678750][T11733] [ 831.682186][ C0] vkms_vblank_simulate: vblank timer overrun [ 831.707493][ T1920] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 831.722475][ T1920] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 41472, setting to 1024 [ 831.789601][ T1920] usb 1-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=f5.35 [ 831.799401][ T1920] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.807974][ T1920] usb 1-1: Product: syz [ 831.812568][ T1920] usb 1-1: Manufacturer: syz [ 831.817418][ T1920] usb 1-1: SerialNumber: syz [ 831.849146][ T1920] usb 1-1: config 0 descriptor?? [ 831.873969][ T1920] (null): radio-mr800 - initialization failed [ 831.881075][ T1920] radio-mr800 1-1:0.0: probe with driver radio-mr800 failed with error -22 [ 831.896794][T11735] kernel profiling enabled (shift: 0) [ 831.917681][T11737] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 831.972238][T11736] loop9: detected capacity change from 0 to 7 [ 832.044986][T11736] Dev loop9: unable to read RDB block 7 [ 832.046341][ T29] audit: type=1800 audit(1727816584.196:31): pid=11721 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1981" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 832.051082][T11736] loop9: unable to read partition table [ 832.114723][T11736] loop9: partition table beyond EOD, truncated [ 832.121393][T11736] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 832.121393][T11736] ) failed (rc=-5) [ 832.144759][ T1920] usb 1-1: USB disconnect, device number 110 [ 832.224553][T10067] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 832.607415][T11744] loop1: detected capacity change from 0 to 256 [ 832.853989][T11744] FAT-fs (loop1): Directory bread(block 64) failed [ 832.861084][T11744] FAT-fs (loop1): Directory bread(block 65) failed [ 832.868201][T11744] FAT-fs (loop1): Directory bread(block 66) failed [ 832.875085][T11744] FAT-fs (loop1): Directory bread(block 67) failed [ 832.882355][T11744] FAT-fs (loop1): Directory bread(block 68) failed [ 832.889140][T11744] FAT-fs (loop1): Directory bread(block 69) failed [ 832.896243][T11744] FAT-fs (loop1): Directory bread(block 70) failed [ 832.903126][T11744] FAT-fs (loop1): Directory bread(block 71) failed [ 832.910100][T11744] FAT-fs (loop1): Directory bread(block 72) failed [ 832.917014][T11744] FAT-fs (loop1): Directory bread(block 73) failed [ 833.484753][ T1240] ieee802154 phy0 wpan0: encryption failed: -22 [ 833.492832][ T1240] ieee802154 phy1 wpan1: encryption failed: -22 [ 833.651555][T11736] loop2: detected capacity change from 0 to 2048 [ 834.075988][T11736] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 834.089021][T11736] ext4 filesystem being mounted at /82/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 834.366721][T11754] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1989'. [ 834.490802][T11754] FAULT_INJECTION: forcing a failure. [ 834.490802][T11754] name failslab, interval 1, probability 0, space 0, times 0 [ 834.504363][T11754] CPU: 0 UID: 0 PID: 11754 Comm: syz.3.1989 Tainted: G W 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 834.516944][T11754] Tainted: [W]=WARN [ 834.520940][T11754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 834.531319][T11754] Call Trace: [ 834.534792][T11754] [ 834.537910][T11754] dump_stack_lvl+0x216/0x2d0 [ 834.542897][T11754] dump_stack+0x1e/0x30 [ 834.547347][T11754] should_fail_ex+0x748/0x7f0 [ 834.552435][T11754] should_failslab+0x17f/0x210 [ 834.557483][T11754] kmem_cache_alloc_noprof+0xe2/0xb20 [ 834.563176][T11754] ? skb_clone+0x303/0x550 [ 834.567902][T11754] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 834.574004][T11754] skb_clone+0x303/0x550 [ 834.578561][T11754] __netlink_deliver_tap+0x607/0xc90 [ 834.584189][T11754] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 834.590288][T11754] ? kmsan_get_metadata+0x13e/0x1c0 [ 834.595779][T11754] netlink_unicast+0x1103/0x1260 [ 834.601126][T11754] netlink_sendmsg+0x10da/0x11e0 [ 834.606393][T11754] ? __pfx_netlink_sendmsg+0x10/0x10 [ 834.612002][T11754] ? __pfx_netlink_sendmsg+0x10/0x10 [ 834.617590][T11754] __sock_sendmsg+0x30f/0x380 [ 834.622586][T11754] ____sys_sendmsg+0x877/0xb60 [ 834.627680][T11754] ___sys_sendmsg+0x28d/0x3c0 [ 834.632659][T11754] ? kmsan_get_metadata+0x13e/0x1c0 [ 834.638146][T11754] ? __rcu_read_unlock+0x7b/0xe0 [ 834.643469][T11754] ? __fget_files+0x4f5/0x5c0 [ 834.648459][T11754] ? kmsan_get_metadata+0x13e/0x1c0 [ 834.653932][T11754] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 834.660022][T11754] __x64_sys_sendmsg+0x300/0x4a0 [ 834.665267][T11754] ? perf_mmap+0x14e0/0x28d0 [ 834.670123][T11754] x64_sys_call+0x2da0/0x3ba0 [ 834.675032][T11754] do_syscall_64+0xcd/0x1e0 [ 834.679833][T11754] ? clear_bhb_loop+0x25/0x80 [ 834.684804][T11754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 834.691039][T11754] RIP: 0033:0x7f517b17dff9 [ 834.695699][T11754] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 834.715617][T11754] RSP: 002b:00007f517bf0a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 834.724371][T11754] RAX: ffffffffffffffda RBX: 00007f517b335f80 RCX: 00007f517b17dff9 [ 834.732608][T11754] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000003 [ 834.740830][T11754] RBP: 00007f517bf0a090 R08: 0000000000000000 R09: 0000000000000000 [ 834.749298][T11754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 834.757495][T11754] R13: 0000000000000000 R14: 00007f517b335f80 R15: 00007ffc397b4c18 [ 834.765735][T11754] [ 834.768989][ C0] vkms_vblank_simulate: vblank timer overrun [ 835.761796][T11762] loop1: detected capacity change from 0 to 256 [ 835.883233][T11762] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1992'. [ 837.611486][T11774] loop1: detected capacity change from 0 to 512 [ 837.746743][T11774] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 837.762108][T11774] ext4 filesystem being mounted at /91/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 838.211496][ T1920] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 838.542433][ T1920] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 838.553100][ T1920] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 838.899922][ T1920] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 838.909643][ T1920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 838.918061][ T1920] usb 2-1: SerialNumber: syz [ 839.093893][ T1920] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 839.281703][ T5239] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 841.296852][ T5239] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 841.308282][ T5239] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 41472, setting to 1024 [ 841.641763][ T5239] usb 5-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=f5.35 [ 841.652933][ T5239] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 841.662046][ T5239] usb 5-1: Product: syz [ 841.666470][ T5239] usb 5-1: Manufacturer: syz [ 841.720020][ T5239] usb 5-1: config 0 descriptor?? [ 841.730201][ T5239] usb 5-1: can't set config #0, error -71 [ 841.794675][ T5239] usb 5-1: USB disconnect, device number 102 [ 841.918314][ T8657] usb 2-1: USB disconnect, device number 105 [ 842.307944][ T5185] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 842.320703][ T5185] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 842.332828][ T5185] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 842.351754][ T5185] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 842.381891][ T5185] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 842.406146][ T5185] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 842.502614][ T8657] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 842.607536][T10067] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 843.004270][T11818] loop3: detected capacity change from 0 to 512 [ 843.012864][ T8657] usb 5-1: config 0 has no interfaces? [ 843.016562][T11818] EXT4-fs: Ignoring removed oldalloc option [ 843.018545][ T8657] usb 5-1: New USB device found, idVendor=046d, idProduct=20ee, bcdDevice= 0.00 [ 843.034155][ T8657] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 843.047033][ T8657] usb 5-1: config 0 descriptor?? [ 843.069443][T11818] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.2010: corrupted in-inode xattr: overlapping e_value [ 843.155941][T11818] EXT4-fs error (device loop3): ext4_orphan_get:1393: comm syz.3.2010: couldn't read orphan inode 15 (err -117) [ 844.060676][T11818] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 844.372244][ T1920] usb 5-1: USB disconnect, device number 103 [ 844.512721][T11832] EXT4-fs error (device loop3): htree_dirblock_to_tree:1083: inode #2: comm syz.3.2010: Directory hole found for htree leaf block 0 [ 844.731997][ T5185] Bluetooth: hci5: command tx timeout [ 845.605753][ T8885] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 845.625558][T11809] chnl_net:caif_netlink_parms(): no params data found [ 845.808910][T11843] loop1: detected capacity change from 0 to 1024 [ 845.887964][T11843] EXT4-fs: Ignoring removed orlov option [ 845.894607][T11843] EXT4-fs: Ignoring removed nomblk_io_submit option [ 845.940290][T11847] loop3: detected capacity change from 0 to 128 [ 846.065798][T11843] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 846.487001][T11856] loop4: detected capacity change from 0 to 512 [ 846.542229][T10067] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 846.633532][T11856] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 846.648106][T11856] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 846.825985][ T5185] Bluetooth: hci5: command tx timeout [ 846.909374][T11809] bridge0: port 1(bridge_slave_0) entered blocking state [ 846.917539][T11809] bridge0: port 1(bridge_slave_0) entered disabled state [ 846.925588][T11809] bridge_slave_0: entered allmulticast mode [ 846.934784][T11809] bridge_slave_0: entered promiscuous mode [ 846.965611][T11809] bridge0: port 2(bridge_slave_1) entered blocking state [ 846.977284][T11809] bridge0: port 2(bridge_slave_1) entered disabled state [ 846.985275][T11809] bridge_slave_1: entered allmulticast mode [ 846.994519][T11809] bridge_slave_1: entered promiscuous mode [ 847.096670][ T5239] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 847.159968][T11809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 847.193738][T11809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 847.325922][ T5239] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 847.337741][ T5239] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 847.370038][ T5239] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 847.380190][ T5239] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 847.390161][ T5239] usb 5-1: SerialNumber: syz [ 847.432911][T11809] team0: Port device team_slave_0 added [ 847.458191][ T5239] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 847.504055][T11809] team0: Port device team_slave_1 added [ 847.635278][T11809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 847.642956][T11809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 847.669466][T11809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 847.761515][T11809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 847.768832][T11809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 847.797068][T11809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 848.197292][T11809] hsr_slave_0: entered promiscuous mode [ 848.228093][ T5239] usb 5-1: USB disconnect, device number 104 [ 848.253810][T11809] hsr_slave_1: entered promiscuous mode [ 848.284445][T11809] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 848.293860][T11809] Cannot create hsr debugfs directory [ 848.891718][ T9437] Bluetooth: hci5: command tx timeout [ 849.107358][T11298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 849.208332][T11809] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 849.357698][T11809] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 849.435322][T11847] EXT4-fs: error -4 creating inode table initialization thread [ 849.437608][T10196] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 849.453526][T11847] EXT4-fs (loop3): mount failed [ 849.707939][T11809] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 849.807716][T11809] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 850.057895][T11878] input: syz0 as /devices/virtual/input/input46 [ 852.273892][ T9437] Bluetooth: hci3: command 0x0406 tx timeout [ 852.280195][ T9437] Bluetooth: hci5: command tx timeout [ 852.356104][T11809] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 852.633683][T11809] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 852.664546][T11809] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 852.692351][T11809] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 853.816614][T11735] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 854.026363][T11906] loop4: detected capacity change from 0 to 512 [ 854.155732][T11902] loop3: detected capacity change from 0 to 1024 [ 854.220503][T11906] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 854.233829][T11906] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 854.266796][T11902] EXT4-fs: Ignoring removed orlov option [ 854.273832][T11902] EXT4-fs: Ignoring removed nomblk_io_submit option [ 854.376856][ T5239] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 854.397811][T11902] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 854.444524][T11809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 854.556833][ T5239] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 854.568360][ T5239] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 41472, setting to 1024 [ 854.590826][T11809] 8021q: adding VLAN 0 to HW filter on device team0 [ 854.619137][ T2523] bridge0: port 1(bridge_slave_0) entered blocking state [ 854.626990][ T2523] bridge0: port 1(bridge_slave_0) entered forwarding state [ 854.682434][ T5239] usb 2-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=f5.35 [ 854.692564][ T5239] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 854.700851][ T5239] usb 2-1: Product: syz [ 854.703166][ T2523] bridge0: port 2(bridge_slave_1) entered blocking state [ 854.705429][ T5239] usb 2-1: Manufacturer: syz [ 854.712784][ T2523] bridge0: port 2(bridge_slave_1) entered forwarding state [ 854.717062][ T5239] usb 2-1: SerialNumber: syz [ 854.822592][ T5239] usb 2-1: config 0 descriptor?? [ 854.832405][ T5232] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 854.855285][ T5239] (null): radio-mr800 - initialization failed [ 854.864956][ T5239] radio-mr800 2-1:0.0: probe with driver radio-mr800 failed with error -22 [ 855.039659][ T5232] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 855.051402][ T5232] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 855.099992][ T8885] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 855.175192][ T5232] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 855.185117][ T5232] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 855.193551][ T5232] usb 5-1: SerialNumber: syz [ 855.285985][ T5239] usb 2-1: USB disconnect, device number 106 [ 855.303475][ T5232] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 856.130460][ T1090] bridge_slave_1: left allmulticast mode [ 856.137495][ T1090] bridge_slave_1: left promiscuous mode [ 856.144196][ T1090] bridge0: port 2(bridge_slave_1) entered disabled state [ 856.300278][T11930] FAULT_INJECTION: forcing a failure. [ 856.300278][T11930] name failslab, interval 1, probability 0, space 0, times 0 [ 856.314357][T11930] CPU: 1 UID: 0 PID: 11930 Comm: syz.0.2036 Tainted: G W 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 856.326969][T11930] Tainted: [W]=WARN [ 856.330977][T11930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 856.341280][T11930] Call Trace: [ 856.344748][T11930] [ 856.347862][T11930] dump_stack_lvl+0x216/0x2d0 [ 856.352860][T11930] dump_stack+0x1e/0x30 [ 856.357319][T11930] should_fail_ex+0x748/0x7f0 [ 856.362311][T11930] should_failslab+0x17f/0x210 [ 856.367370][T11930] __kmalloc_cache_noprof+0xbf/0xb00 [ 856.372976][T11930] ? kmsan_get_metadata+0x13e/0x1c0 [ 856.378446][T11930] ? ctnetlink_alloc_filter+0x67/0x1050 [ 856.384304][T11930] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 856.390413][T11930] ctnetlink_alloc_filter+0x67/0x1050 [ 856.396102][T11930] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 856.402202][T11930] ctnetlink_start+0x222/0x330 [ 856.407264][T11930] ? __pfx_ctnetlink_start+0x10/0x10 [ 856.412847][T11930] ? __pfx_ctnetlink_start+0x10/0x10 [ 856.418419][T11930] __netlink_dump_start+0x6bc/0xcf0 [ 856.423946][T11930] ctnetlink_get_conntrack+0x25d/0xb20 [ 856.429871][T11930] ? kmsan_get_metadata+0x13e/0x1c0 [ 856.435341][T11930] ? __pfx_ctnetlink_start+0x10/0x10 [ 856.440914][T11930] ? __pfx_ctnetlink_dump_table+0x10/0x10 [ 856.446926][T11930] ? __pfx_ctnetlink_done+0x10/0x10 [ 856.452422][T11930] ? kmsan_get_metadata+0x40/0x1c0 [ 856.457816][T11930] ? __pfx_ctnetlink_get_conntrack+0x10/0x10 [ 856.464088][T11930] nfnetlink_rcv_msg+0xc91/0xdf0 [ 856.469353][T11930] ? kmsan_internal_poison_memory+0x49/0x90 [ 856.475633][T11930] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 856.481722][T11930] netlink_rcv_skb+0x375/0x650 [ 856.486799][T11930] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 856.492569][T11930] ? kmsan_get_metadata+0x13e/0x1c0 [ 856.498041][T11930] nfnetlink_rcv+0x381/0x5100 [ 856.503032][T11930] ? kmsan_get_metadata+0x13e/0x1c0 [ 856.508511][T11930] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 856.515173][T11930] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 856.521577][T11930] ? ref_tracker_free+0x630/0xec0 [ 856.526903][T11930] ? __dev_queue_xmit+0x352/0x55e0 [ 856.532314][T11930] ? __skb_clone+0x4bf/0x650 [ 856.537200][T11930] ? kmsan_get_metadata+0x13e/0x1c0 [ 856.542677][T11930] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 856.549334][T11930] ? kmsan_get_metadata+0x13e/0x1c0 [ 856.554815][T11930] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 856.560911][T11930] ? __netlink_deliver_tap+0xc61/0xc90 [ 856.566680][T11930] ? kmsan_get_metadata+0x13e/0x1c0 [ 856.572155][T11930] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 856.578247][T11930] ? kmsan_get_metadata+0x13e/0x1c0 [ 856.583727][T11930] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 856.589834][T11930] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 856.595278][T11930] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 856.600719][T11930] netlink_unicast+0xf52/0x1260 [ 856.605909][T11930] netlink_sendmsg+0x10da/0x11e0 [ 856.611183][T11930] ? __pfx_netlink_sendmsg+0x10/0x10 [ 856.616793][T11930] ? __pfx_netlink_sendmsg+0x10/0x10 [ 856.622389][T11930] __sock_sendmsg+0x30f/0x380 [ 856.627393][T11930] ____sys_sendmsg+0x877/0xb60 [ 856.632474][T11930] ___sys_sendmsg+0x28d/0x3c0 [ 856.637450][T11930] ? kmsan_get_metadata+0x13e/0x1c0 [ 856.642939][T11930] ? __rcu_read_unlock+0x7b/0xe0 [ 856.648183][T11930] ? __fget_files+0x4f5/0x5c0 [ 856.653177][T11930] ? kmsan_get_metadata+0x13e/0x1c0 [ 856.658651][T11930] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 856.664761][T11930] __x64_sys_sendmsg+0x300/0x4a0 [ 856.670007][T11930] ? perf_mmap+0x14e0/0x28d0 [ 856.674903][T11930] x64_sys_call+0x2da0/0x3ba0 [ 856.679895][T11930] do_syscall_64+0xcd/0x1e0 [ 856.684701][T11930] ? clear_bhb_loop+0x25/0x80 [ 856.689657][T11930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 856.695887][T11930] RIP: 0033:0x7effccd7dff9 [ 856.700545][T11930] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 856.720532][T11930] RSP: 002b:00007effcc7ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 856.729292][T11930] RAX: ffffffffffffffda RBX: 00007effccf35f80 RCX: 00007effccd7dff9 [ 856.737532][T11930] RDX: 0000000000008010 RSI: 0000000020000200 RDI: 0000000000000003 [ 856.745761][T11930] RBP: 00007effcc7ff090 R08: 0000000000000000 R09: 0000000000000000 [ 856.753976][T11930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 856.762185][T11930] R13: 0000000000000000 R14: 00007effccf35f80 R15: 00007ffe185dea88 [ 856.770441][T11930] [ 856.912228][T11936] loop1: detected capacity change from 0 to 256 [ 857.857397][ T1090] bridge_slave_0: left allmulticast mode [ 857.864095][ T1090] bridge_slave_0: left promiscuous mode [ 857.870718][ T1090] bridge0: port 1(bridge_slave_0) entered disabled state [ 858.997129][T11934] loop3: detected capacity change from 0 to 32768 [ 859.101591][ T29] audit: type=1800 audit(1727816611.256:32): pid=11934 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2037" name="bus" dev="loop3" ino=8 res=0 errno=0 [ 859.149052][T11936] FAT-fs (loop1): Directory bread(block 64) failed [ 859.156208][T11936] FAT-fs (loop1): Directory bread(block 65) failed [ 859.166048][T11936] FAT-fs (loop1): Directory bread(block 66) failed [ 859.172969][T11936] FAT-fs (loop1): Directory bread(block 67) failed [ 859.179876][T11936] FAT-fs (loop1): Directory bread(block 68) failed [ 859.186824][T11936] FAT-fs (loop1): Directory bread(block 69) failed [ 859.186917][ T8657] usb 5-1: USB disconnect, device number 105 [ 859.193919][T11936] FAT-fs (loop1): Directory bread(block 70) failed [ 859.207020][T11936] FAT-fs (loop1): Directory bread(block 71) failed [ 859.214180][T11936] FAT-fs (loop1): Directory bread(block 72) failed [ 859.220966][T11936] FAT-fs (loop1): Directory bread(block 73) failed [ 859.629747][T11298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 859.769421][ T1090] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 860.021748][T10067] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 860.029590][T10067] FAT-fs (loop1): Filesystem has been set read-only [ 860.134726][ T1090] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 860.182503][ T1090] bond0 (unregistering): Released all slaves [ 860.450195][T11946] loop4: detected capacity change from 0 to 512 [ 860.460065][T11946] EXT4-fs: Ignoring removed oldalloc option [ 860.489974][T11946] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.2040: corrupted in-inode xattr: overlapping e_value [ 860.538165][T11946] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.2040: couldn't read orphan inode 15 (err -117) [ 860.556345][ T5232] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 860.599390][T11809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 860.633970][T11946] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 860.685664][T11946] EXT4-fs error (device loop4): htree_dirblock_to_tree:1083: inode #2: comm syz.4.2040: Directory hole found for htree leaf block 0 [ 860.757324][ T5232] usb 1-1: config 0 has no interfaces? [ 860.764144][ T5232] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 860.774884][ T5232] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 860.785866][ T1920] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 860.825412][ T5232] usb 1-1: config 0 descriptor?? [ 860.962834][ T1920] usb 4-1: Using ep0 maxpacket: 16 [ 860.984028][ T1920] usb 4-1: New USB device found, idVendor=25c6, idProduct=9002, bcdDevice=62.ba [ 860.990780][T11809] veth0_vlan: entered promiscuous mode [ 860.993943][ T1920] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 861.008883][ T1920] usb 4-1: Product: syz [ 861.014244][ T1920] usb 4-1: Manufacturer: syz [ 861.019102][ T1920] usb 4-1: SerialNumber: syz [ 861.055128][T11943] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2041'. [ 861.078094][T11943] vlan2: entered promiscuous mode [ 861.083558][T11943] batadv0: entered promiscuous mode [ 861.089807][T11943] vlan2: entered allmulticast mode [ 861.095331][T11943] batadv0: entered allmulticast mode [ 861.143567][ T1920] usb 4-1: config 0 descriptor?? [ 861.174549][T11943] batadv0: left allmulticast mode [ 861.179849][T11943] batadv0: left promiscuous mode [ 861.219811][T11298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 861.300604][ T5232] usb 1-1: USB disconnect, device number 112 [ 861.316886][ T1090] hsr_slave_0: left promiscuous mode [ 861.359465][ T1090] hsr_slave_1: left promiscuous mode [ 861.368918][ T1090] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 861.377018][ T1090] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 861.397531][ T1090] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 861.405551][ T1090] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 861.437344][ T1090] veth1_macvtap: left promiscuous mode [ 861.443831][ T1090] veth0_macvtap: left promiscuous mode [ 861.449902][ T1090] veth1_vlan: left promiscuous mode [ 861.455717][ T1090] veth0_vlan: left promiscuous mode [ 861.767189][ T1920] snd-usb-hiface 4-1:0.0: probe with driver snd-usb-hiface failed with error -22 [ 861.818777][ T1920] usb 4-1: USB disconnect, device number 118 [ 862.093860][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 862.103666][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 862.112969][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 862.126059][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 862.139166][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 862.149927][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 862.226860][ T1090] team0 (unregistering): Port device team_slave_1 removed [ 862.301477][ T1090] team0 (unregistering): Port device team_slave_0 removed [ 862.755522][T11809] veth1_vlan: entered promiscuous mode [ 863.130124][T11809] veth0_macvtap: entered promiscuous mode [ 863.170168][ T1920] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 863.343659][ T1090] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 863.382029][T11809] veth1_macvtap: entered promiscuous mode [ 863.432732][ T1920] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 863.444315][ T1920] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 41472, setting to 1024 [ 863.479055][ T1090] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 863.497403][ T1920] usb 5-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=f5.35 [ 863.507155][ T1920] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 863.515655][ T1920] usb 5-1: Product: syz [ 863.520070][ T1920] usb 5-1: Manufacturer: syz [ 863.525154][ T1920] usb 5-1: SerialNumber: syz [ 863.580276][T11809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 863.581638][ T1920] usb 5-1: config 0 descriptor?? [ 863.591072][T11809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 863.591226][T11809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 863.615916][ T1920] (null): radio-mr800 - initialization failed [ 863.616950][T11809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 863.623854][ T1920] radio-mr800 5-1:0.0: probe with driver radio-mr800 failed with error -22 [ 863.633224][T11809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 863.653103][T11809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 863.655356][ T25] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 863.663132][T11809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 863.663231][T11809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 863.710473][T11809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 863.747610][T11955] chnl_net:caif_netlink_parms(): no params data found [ 863.849461][ T1090] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 863.892103][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 863.966138][ T25] usb 1-1: New USB device found, idVendor=25c6, idProduct=9002, bcdDevice=62.ba [ 863.977640][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 863.986713][ T25] usb 1-1: Product: syz [ 863.991398][ T25] usb 1-1: Manufacturer: syz [ 863.996400][ T25] usb 1-1: SerialNumber: syz [ 864.094526][T11809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 864.105675][T11809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 864.116060][T11809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 864.127045][T11809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 864.137406][T11809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 864.148407][T11809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 864.158922][T11809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 864.169960][T11809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 864.194757][T11809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 864.353585][ T1920] usb 5-1: USB disconnect, device number 106 [ 864.365638][ T25] usb 1-1: config 0 descriptor?? [ 864.379796][ T51] Bluetooth: hci1: command tx timeout [ 864.478692][ T1090] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 864.720788][ T25] snd-usb-hiface 1-1:0.0: probe with driver snd-usb-hiface failed with error -22 [ 864.977785][T11809] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.988973][T11809] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 865.001600][T11809] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 865.010653][T11809] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 865.082413][ T25] usb 1-1: USB disconnect, device number 113 [ 865.339979][ T1090] bridge_slave_1: left allmulticast mode [ 865.346982][ T1090] bridge_slave_1: left promiscuous mode [ 865.354047][ T1090] bridge0: port 2(bridge_slave_1) entered disabled state [ 865.514045][ T1090] bridge_slave_0: left allmulticast mode [ 865.519981][ T1090] bridge_slave_0: left promiscuous mode [ 865.527254][ T1090] bridge0: port 1(bridge_slave_0) entered disabled state [ 865.638244][T11970] loop3: detected capacity change from 0 to 32768 [ 865.703686][T11974] loop4: detected capacity change from 0 to 512 [ 866.082005][T11974] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 866.097186][T11974] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 866.106920][T11970] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 866.210778][ T1090] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 866.255705][T11985] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2048'. [ 866.291059][ T1090] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 866.316514][ T1090] bond0 (unregistering): Released all slaves [ 866.427143][ T51] Bluetooth: hci1: command tx timeout [ 866.462466][ T25] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 867.281367][ T8885] ocfs2: Unmounting device (7,3) on (node local) [ 867.712706][ T25] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 867.723839][ T25] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 867.864781][ T25] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 867.874425][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 867.883079][ T25] usb 5-1: SerialNumber: syz [ 868.011002][ T1090] hsr_slave_0: left promiscuous mode [ 868.062753][ T1090] hsr_slave_1: left promiscuous mode [ 868.089184][ T25] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 868.134545][ T1090] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 868.143039][ T1090] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 868.193014][ T1090] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 868.200899][ T1090] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 868.311506][ T1090] veth1_macvtap: left promiscuous mode [ 868.317430][ T1090] veth0_macvtap: left promiscuous mode [ 868.323653][ T1090] veth1_vlan: left promiscuous mode [ 868.329227][ T1090] veth0_vlan: left promiscuous mode [ 868.607173][ T51] Bluetooth: hci1: command tx timeout [ 869.300173][ T25] usb 5-1: USB disconnect, device number 107 [ 869.734046][ T1090] team0 (unregistering): Port device team_slave_1 removed [ 869.844361][ T1090] team0 (unregistering): Port device team_slave_0 removed [ 870.659882][T11955] bridge0: port 1(bridge_slave_0) entered blocking state [ 870.667806][T11955] bridge0: port 1(bridge_slave_0) entered disabled state [ 870.676038][T11955] bridge_slave_0: entered allmulticast mode [ 870.685225][T11955] bridge_slave_0: entered promiscuous mode [ 870.700685][T11298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 870.712455][ T51] Bluetooth: hci1: command tx timeout [ 870.864457][T11955] bridge0: port 2(bridge_slave_1) entered blocking state [ 870.873091][T11955] bridge0: port 2(bridge_slave_1) entered disabled state [ 870.880890][T11955] bridge_slave_1: entered allmulticast mode [ 870.890096][T11955] bridge_slave_1: entered promiscuous mode [ 870.940147][T12001] loop3: detected capacity change from 0 to 32768 [ 871.100621][T11955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 871.101125][T12001] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 871.193867][ T5239] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 871.238857][T11955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 871.265479][T12001] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2052'. [ 871.416843][ T5239] usb 1-1: config 0 has no interfaces? [ 871.423818][ T5239] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 871.434201][ T5239] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 871.487362][ T5239] usb 1-1: config 0 descriptor?? [ 871.552076][T11955] team0: Port device team_slave_0 added [ 871.604529][ T8885] ocfs2: Unmounting device (7,3) on (node local) [ 871.633052][T11955] team0: Port device team_slave_1 added [ 871.942362][T12005] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2055'. [ 871.968295][T12005] vlan2: entered promiscuous mode [ 871.973711][T12005] batadv0: entered promiscuous mode [ 871.979967][T12005] vlan2: entered allmulticast mode [ 871.986182][T12005] batadv0: entered allmulticast mode [ 871.997753][T12005] batadv0: left allmulticast mode [ 872.003208][T12005] batadv0: left promiscuous mode [ 872.037418][T11955] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 872.044921][T11955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 872.073198][T11955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 872.113552][T11955] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 872.120751][T11955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 872.147732][T11955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 872.172832][T12019] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2058'. [ 872.257003][T10196] usb 1-1: USB disconnect, device number 114 [ 872.397672][T11955] hsr_slave_0: entered promiscuous mode [ 872.432467][T11955] hsr_slave_1: entered promiscuous mode [ 872.892032][ T5239] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 873.088994][ T5239] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 873.100576][ T5239] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 41472, setting to 1024 [ 873.202504][ T5239] usb 4-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=f5.35 [ 873.214682][ T5239] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 873.224189][ T5239] usb 4-1: Product: syz [ 873.228596][ T5239] usb 4-1: Manufacturer: syz [ 873.234281][ T5239] usb 4-1: SerialNumber: syz [ 873.297464][ T5239] usb 4-1: config 0 descriptor?? [ 873.326262][ T5239] (null): radio-mr800 - initialization failed [ 873.334887][ T5239] radio-mr800 4-1:0.0: probe with driver radio-mr800 failed with error -22 [ 873.341404][T12027] loop4: detected capacity change from 0 to 4096 [ 873.626851][T12034] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 873.692963][ T5239] usb 4-1: USB disconnect, device number 119 [ 874.052027][T11955] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 874.154120][T11955] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 874.266171][T11955] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 874.384373][T11955] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 875.970366][ T3206] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 875.978539][ T3206] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 876.084222][T12032] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2060'. [ 876.313342][ T3206] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 876.321572][ T3206] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 877.173243][T11955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 877.393551][T11955] 8021q: adding VLAN 0 to HW filter on device team0 [ 877.440102][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state [ 877.447873][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state [ 877.477976][T12050] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2064'. [ 877.553158][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state [ 877.560920][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state [ 877.958808][T12062] loop2: detected capacity change from 0 to 1764 [ 877.968310][T12062] iso9660: Unknown parameter 'ÿ' [ 878.395537][T12063] loop3: detected capacity change from 0 to 1024 [ 878.518927][T12063] EXT4-fs: Ignoring removed orlov option [ 878.525397][T12063] EXT4-fs: Ignoring removed nomblk_io_submit option [ 878.533534][ T5239] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 878.632655][T12069] loop4: detected capacity change from 0 to 2048 [ 878.693686][T12069] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 878.710168][ T5239] usb 1-1: config 0 has no interfaces? [ 878.716245][ T5239] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 878.728742][ T5239] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 878.757008][T12063] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842e018, mo2=0002] [ 878.769783][ T5239] usb 1-1: config 0 descriptor?? [ 878.806524][T12063] System zones: 0-1, 3-12 [ 878.903759][T12063] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 878.963668][T12069] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2069'. [ 879.012579][T12065] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2068'. [ 879.040847][T12065] vlan2: entered promiscuous mode [ 879.046620][T12065] batadv0: entered promiscuous mode [ 879.053165][T12065] vlan2: entered allmulticast mode [ 879.058519][T12065] batadv0: entered allmulticast mode [ 879.078888][T12065] batadv0: left allmulticast mode [ 879.084905][T12065] batadv0: left promiscuous mode [ 879.218804][T11955] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 879.256605][ T4877] usb 1-1: USB disconnect, device number 115 [ 879.402478][T11955] veth0_vlan: entered promiscuous mode [ 879.434730][T11955] veth1_vlan: entered promiscuous mode [ 879.573248][T11955] veth0_macvtap: entered promiscuous mode [ 879.593944][T11955] veth1_macvtap: entered promiscuous mode [ 879.651983][T11955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 879.663514][T11955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 879.673672][T11955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 879.684521][T11955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 879.694787][T11955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 879.705599][T11955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 879.715741][T11955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 879.726547][T11955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 879.741752][T11955] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 879.798271][ T1090] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 879.808596][ T1090] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 879.823299][ T8657] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 879.825370][T11955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 879.842451][T11955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 879.852689][T11955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 879.863512][T11955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 879.873664][T11955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 879.884517][T11955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 879.889112][ T4877] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 879.894640][T11955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 879.894737][T11955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 879.928216][T11955] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 879.947499][T11955] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 879.958468][T11955] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 879.967741][T11955] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 879.976900][T11955] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 880.201737][ T4877] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 880.213262][ T4877] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 41472, setting to 1024 [ 880.298120][ T4877] usb 3-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=f5.35 [ 880.307762][ T4877] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 880.316149][ T4877] usb 3-1: Product: syz [ 880.320569][ T4877] usb 3-1: Manufacturer: syz [ 880.326007][ T4877] usb 3-1: SerialNumber: syz [ 880.333732][ T8657] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 880.429997][ T4877] usb 3-1: config 0 descriptor?? [ 880.441697][ T8885] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 880.463689][ T4877] (null): radio-mr800 - initialization failed [ 880.470996][ T4877] radio-mr800 3-1:0.0: probe with driver radio-mr800 failed with error -22 [ 880.652319][ T8657] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 880.805817][ T4877] usb 3-1: USB disconnect, device number 94 [ 881.309928][T12099] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2077'. [ 881.442922][T12103] program syz.4.2077 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 881.517132][T12099] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2077'. [ 881.531008][T12097] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 881.546341][T12097] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 881.556390][T12097] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 881.567212][T12097] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 881.577122][T12097] vxlan0: entered promiscuous mode [ 881.582583][T12097] vxlan0: entered allmulticast mode [ 881.725410][T12097] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 881.735121][T12097] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 881.744713][T12097] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 881.748807][T12107] binder: 12106:12107 ioctl 4008ae93 20000000 returned -22 [ 881.753963][T12097] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 882.638206][T12114] loop2: detected capacity change from 0 to 2048 [ 882.699422][T12114] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 882.740957][T12124] loop4: detected capacity change from 0 to 1024 [ 882.761807][T12124] hfsplus: unable to parse mount options [ 882.857204][T12114] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2080'. [ 882.887693][ T8657] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 883.088494][ T8657] usb 4-1: config 0 has no interfaces? [ 883.094410][ T8657] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 883.104611][ T8657] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 883.200459][ T8657] usb 4-1: config 0 descriptor?? [ 883.252516][ T11] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 883.260836][ T11] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 883.281770][ T8657] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 883.317310][T12131] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2084'. [ 883.363530][T12132] FAULT_INJECTION: forcing a failure. [ 883.363530][T12132] name failslab, interval 1, probability 0, space 0, times 0 [ 883.377689][T12132] CPU: 0 UID: 0 PID: 12132 Comm: syz.0.2086 Tainted: G W 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 883.390279][T12132] Tainted: [W]=WARN [ 883.394277][T12132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 883.404569][T12132] Call Trace: [ 883.408041][T12132] [ 883.411160][T12132] dump_stack_lvl+0x216/0x2d0 [ 883.416141][T12132] dump_stack+0x1e/0x30 [ 883.420580][T12132] should_fail_ex+0x748/0x7f0 [ 883.425573][T12132] should_failslab+0x17f/0x210 [ 883.430621][T12132] __kmalloc_node_noprof+0x177/0xf50 [ 883.436222][T12132] ? __kvmalloc_node_noprof+0xc0/0x2d0 [ 883.441986][T12132] ? kmsan_get_metadata+0x13e/0x1c0 [ 883.447483][T12132] __kvmalloc_node_noprof+0xc0/0x2d0 [ 883.453066][T12132] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 883.459171][T12132] alloc_netdev_mqs+0x1155/0x1bd0 [ 883.464505][T12132] rtnl_create_link+0x50f/0x12b0 [ 883.469727][T12132] ? __pfx_macsec_setup+0x10/0x10 [ 883.475057][T12132] rtnl_newlink+0x2b8a/0x4200 [ 883.480079][T12132] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 883.486734][T12132] ? kmsan_get_metadata+0x13e/0x1c0 [ 883.492225][T12132] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 883.498322][T12132] ? __pfx_rtnl_newlink+0x10/0x10 [ 883.503640][T12132] ? __pfx_rtnl_newlink+0x10/0x10 [ 883.508949][T12132] rtnetlink_rcv_msg+0x12fc/0x1410 [ 883.514473][T12132] ? kmsan_get_metadata+0x13e/0x1c0 [ 883.519975][T12132] netlink_rcv_skb+0x375/0x650 [ 883.525243][T12132] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 883.531028][T12132] ? __pfx_rtnetlink_rcv+0x10/0x10 [ 883.536438][T12132] rtnetlink_rcv+0x34/0x40 [ 883.541146][T12132] netlink_unicast+0xf52/0x1260 [ 883.546305][T12132] netlink_sendmsg+0x10da/0x11e0 [ 883.551569][T12132] ? __pfx_netlink_sendmsg+0x10/0x10 [ 883.557166][T12132] ? __pfx_netlink_sendmsg+0x10/0x10 [ 883.562765][T12132] __sock_sendmsg+0x30f/0x380 [ 883.567775][T12132] ____sys_sendmsg+0x877/0xb60 [ 883.572879][T12132] ___sys_sendmsg+0x28d/0x3c0 [ 883.577860][T12132] ? kmsan_get_metadata+0x13e/0x1c0 [ 883.583354][T12132] ? __rcu_read_unlock+0x7b/0xe0 [ 883.588597][T12132] ? __fget_files+0x4f5/0x5c0 [ 883.593587][T12132] ? kmsan_get_metadata+0x13e/0x1c0 [ 883.599086][T12132] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 883.605230][T12132] __x64_sys_sendmsg+0x300/0x4a0 [ 883.610486][T12132] ? perf_mmap+0x14e0/0x28d0 [ 883.615403][T12132] x64_sys_call+0x2da0/0x3ba0 [ 883.620458][T12132] do_syscall_64+0xcd/0x1e0 [ 883.625275][T12132] ? clear_bhb_loop+0x25/0x80 [ 883.630259][T12132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 883.636504][T12132] RIP: 0033:0x7effccd7dff9 [ 883.641168][T12132] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 883.661090][T12132] RSP: 002b:00007effcc7ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 883.669834][T12132] RAX: ffffffffffffffda RBX: 00007effccf35f80 RCX: 00007effccd7dff9 [ 883.678091][T12132] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 000000000000000e [ 883.686328][T12132] RBP: 00007effcc7ff090 R08: 0000000000000000 R09: 0000000000000000 [ 883.694561][T12132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 883.702786][T12132] R13: 0000000000000000 R14: 00007effccf35f80 R15: 00007ffe185dea88 [ 883.711023][T12132] [ 883.740296][T12123] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2082'. [ 883.770012][T12123] vlan2: entered promiscuous mode [ 883.777368][T12123] batadv0: entered promiscuous mode [ 883.784126][T12123] vlan2: entered allmulticast mode [ 883.789495][T12123] batadv0: entered allmulticast mode [ 883.812016][T12123] batadv0: left allmulticast mode [ 883.817343][T12123] batadv0: left promiscuous mode [ 884.048215][ T25] usb 4-1: USB disconnect, device number 120 [ 884.171983][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 884.256602][ T4877] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 884.531696][ T4877] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 884.541531][ T5232] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 884.719091][ T4877] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 884.730637][ T4877] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 41472, setting to 1024 [ 884.819561][ T4877] usb 5-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=f5.35 [ 884.830000][ T4877] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 884.838496][ T4877] usb 5-1: Product: syz [ 884.842997][ T4877] usb 5-1: Manufacturer: syz [ 884.847827][ T4877] usb 5-1: SerialNumber: syz [ 884.891612][ T5232] usb 1-1: Using ep0 maxpacket: 16 [ 884.948876][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 884.957260][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 885.023265][ T5232] usb 1-1: unable to get BOS descriptor or descriptor too short [ 885.026108][ T4877] usb 5-1: config 0 descriptor?? [ 885.051906][ T5232] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 885.054502][ T4877] (null): radio-mr800 - initialization failed [ 885.059906][ T5232] usb 1-1: can't read configurations, error -71 [ 885.079164][ T4877] radio-mr800 5-1:0.0: probe with driver radio-mr800 failed with error -22 [ 885.081483][T12154] loop2: detected capacity change from 0 to 512 [ 885.094178][ T2986] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 885.094325][ T2986] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 885.138927][T12154] EXT4-fs: Ignoring removed mblk_io_submit option [ 885.197625][T12154] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 885.280575][T12154] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:164: inode #15: comm syz.2.2091: inline data xattr refers to an external xattr inode [ 885.320807][T12154] EXT4-fs error (device loop2): ext4_orphan_get:1393: comm syz.2.2091: couldn't read orphan inode 15 (err -117) [ 885.343369][ T4877] usb 5-1: USB disconnect, device number 108 [ 885.380484][T12154] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 885.530665][T11809] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 885.744389][T12170] FAULT_INJECTION: forcing a failure. [ 885.744389][T12170] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 885.758414][T12170] CPU: 1 UID: 0 PID: 12170 Comm: syz.0.2095 Tainted: G W 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 885.770988][T12170] Tainted: [W]=WARN [ 885.774974][T12170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 885.785253][T12170] Call Trace: [ 885.788717][T12170] [ 885.791847][T12170] dump_stack_lvl+0x216/0x2d0 [ 885.796830][T12170] dump_stack+0x1e/0x30 [ 885.801270][T12170] should_fail_ex+0x748/0x7f0 [ 885.806257][T12170] should_fail+0x2a/0x40 [ 885.810783][T12170] should_fail_usercopy+0x2e/0x40 [ 885.816116][T12170] _copy_to_user+0x33/0x110 [ 885.820917][T12170] vmci_host_unlocked_ioctl+0x4e08/0x5060 [ 885.826969][T12170] ? __pfx_vmci_host_unlocked_ioctl+0x10/0x10 [ 885.833336][T12170] __se_sys_ioctl+0x25e/0x450 [ 885.838333][T12170] __x64_sys_ioctl+0x96/0xe0 [ 885.843234][T12170] x64_sys_call+0x18bf/0x3ba0 [ 885.848225][T12170] do_syscall_64+0xcd/0x1e0 [ 885.853029][T12170] ? clear_bhb_loop+0x25/0x80 [ 885.857983][T12170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 885.864211][T12170] RIP: 0033:0x7effccd7dff9 [ 885.868874][T12170] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 885.888784][T12170] RSP: 002b:00007effcc7ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 885.897513][T12170] RAX: ffffffffffffffda RBX: 00007effccf35f80 RCX: 00007effccd7dff9 [ 885.905737][T12170] RDX: 0000000020000040 RSI: 00000000000007a6 RDI: 0000000000000003 [ 885.913955][T12170] RBP: 00007effcc7ff090 R08: 0000000000000000 R09: 0000000000000000 [ 885.922164][T12170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 885.930366][T12170] R13: 0000000000000000 R14: 00007effccf35f80 R15: 00007ffe185dea88 [ 885.938596][T12170] [ 885.941955][ C1] vkms_vblank_simulate: vblank timer overrun [ 886.331659][ T25] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 886.540649][T12176] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2096'. [ 886.547364][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 886.569576][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 886.580072][ T25] usb 3-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.00 [ 886.590022][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 886.777632][ T25] usb 3-1: config 0 descriptor?? [ 886.940911][T12180] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2099'. [ 887.247124][ T5232] usb 5-1: new full-speed USB device number 109 using dummy_hcd [ 887.346081][T10196] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 887.478726][ T5232] usb 5-1: config 7 has an invalid interface number: 4 but max is 2 [ 887.487584][ T5232] usb 5-1: config 7 has an invalid interface number: 138 but max is 2 [ 887.496384][ T5232] usb 5-1: config 7 has an invalid interface number: 77 but max is 2 [ 887.505230][ T5232] usb 5-1: config 7 has an invalid interface number: 217 but max is 2 [ 887.514119][ T5232] usb 5-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 887.523443][ T5232] usb 5-1: config 7 contains an unexpected descriptor of type 0x2, skipping [ 887.533570][ T5232] usb 5-1: config 7 has 4 interfaces, different from the descriptor's value: 3 [ 887.542000][ C0] ip6_tnl_xmit_ctl: 1 callbacks suppressed [ 887.542073][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 887.543201][ T5232] usb 5-1: config 7 has no interface number 0 [ 887.563261][ T5232] usb 5-1: config 7 has no interface number 1 [ 887.569773][ T5232] usb 5-1: config 7 has no interface number 2 [ 887.577199][ T5232] usb 5-1: config 7 has no interface number 3 [ 887.584323][ T5232] usb 5-1: config 7 interface 4 altsetting 4 has an endpoint descriptor with address 0x19, changing to 0x9 [ 887.596368][ T5232] usb 5-1: config 7 interface 4 altsetting 4 endpoint 0x9 has invalid maxpacket 1680, setting to 64 [ 887.608187][ T5232] usb 5-1: config 7 interface 4 altsetting 4 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 887.619598][ T5232] usb 5-1: config 7 interface 4 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 887.634034][ T5232] usb 5-1: too many endpoints for config 7 interface 138 altsetting 212: 85, using maximum allowed: 30 [ 887.647824][ T5232] usb 5-1: config 7 interface 138 altsetting 212 endpoint 0xE has an invalid bInterval 65, changing to 4 [ 887.659775][ T5232] usb 5-1: config 7 interface 138 altsetting 212 endpoint 0xE has invalid maxpacket 38801, setting to 1023 [ 887.671969][ T5232] usb 5-1: config 7 interface 138 altsetting 212 has an invalid descriptor for endpoint zero, skipping [ 887.683648][ T5232] usb 5-1: config 7 interface 138 altsetting 212 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 887.695499][ T5232] usb 5-1: config 7 interface 138 altsetting 212 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 887.707157][ T5232] usb 5-1: config 7 interface 138 altsetting 212 has 6 endpoint descriptors, different from the interface descriptor's value: 85 [ 887.721288][ T5232] usb 5-1: config 7 interface 77 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 887.733757][ T5232] usb 5-1: config 7 interface 77 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 887.745248][ T5232] usb 5-1: config 7 interface 77 altsetting 1 endpoint 0xF has invalid wMaxPacketSize 0 [ 887.755618][ T5232] usb 5-1: config 7 interface 77 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 887.767127][ T5232] usb 5-1: config 7 interface 77 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 887.780606][ T5232] usb 5-1: config 7 interface 77 altsetting 1 has a duplicate endpoint with address 0xE, skipping [ 887.791848][ T5232] usb 5-1: config 7 interface 77 altsetting 1 has a duplicate endpoint with address 0x5, skipping [ 887.803047][ T5232] usb 5-1: config 7 interface 77 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 887.814497][ T5232] usb 5-1: config 7 interface 217 altsetting 8 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 887.826196][ T5232] usb 5-1: config 7 interface 217 altsetting 8 has a duplicate endpoint with address 0x2, skipping [ 887.838246][ T5232] usb 5-1: config 7 interface 217 altsetting 8 has a duplicate endpoint with address 0x2, skipping [ 887.849807][ T5232] usb 5-1: config 7 interface 217 altsetting 8 has a duplicate endpoint with address 0xD, skipping [ 887.862293][ T5232] usb 5-1: config 7 interface 217 altsetting 8 has a duplicate endpoint with address 0x5, skipping [ 887.873696][ T5232] usb 5-1: config 7 interface 217 altsetting 8 endpoint 0xA has invalid maxpacket 503, setting to 64 [ 887.885416][ T5232] usb 5-1: config 7 interface 217 altsetting 8 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 887.897026][ T5232] usb 5-1: config 7 interface 217 altsetting 8 has a duplicate endpoint with address 0x9, skipping [ 887.908412][ T5232] usb 5-1: config 7 interface 217 altsetting 8 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 887.920033][ T5232] usb 5-1: config 7 interface 217 altsetting 8 has a duplicate endpoint with address 0xD, skipping [ 887.931467][ T5232] usb 5-1: config 7 interface 217 altsetting 8 has a duplicate endpoint with address 0x3, skipping [ 887.943678][ T5232] usb 5-1: config 7 interface 217 altsetting 8 has a duplicate endpoint with address 0x8, skipping [ 887.955193][ T5232] usb 5-1: config 7 interface 4 has no altsetting 0 [ 887.962422][ T5232] usb 5-1: config 7 interface 138 has no altsetting 0 [ 887.969643][ T5232] usb 5-1: config 7 interface 77 has no altsetting 0 [ 887.976938][ T5232] usb 5-1: config 7 interface 217 has no altsetting 0 [ 888.238730][T10196] usb 4-1: config 0 has no interfaces? [ 888.245767][T10196] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 888.255758][T10196] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 888.271732][T10196] usb 4-1: config 0 descriptor?? [ 888.319409][ T5232] usb 5-1: New USB device found, idVendor=19d2, idProduct=0024, bcdDevice=d2.bd [ 888.329298][ T5232] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 888.338028][ T5232] usb 5-1: Product: syz [ 888.342744][ T5232] usb 5-1: Manufacturer: 䀊 [ 888.348490][ T5232] usb 5-1: SerialNumber: syz [ 888.553428][T12188] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2101'. [ 888.580620][T12188] vlan2: entered promiscuous mode [ 888.586281][T12188] batadv0: entered promiscuous mode [ 888.593158][T12188] vlan2: entered allmulticast mode [ 888.598758][T12188] batadv0: entered allmulticast mode [ 888.696684][T12188] batadv0: left allmulticast mode [ 888.702623][T12188] batadv0: left promiscuous mode [ 888.787972][ T5232] option 5-1:7.4: GSM modem (1-port) converter detected [ 888.932386][T10196] usb 4-1: USB disconnect, device number 121 [ 888.963784][ T5232] option 5-1:7.77: GSM modem (1-port) converter detected [ 889.047150][ T5232] usb 5-1: USB disconnect, device number 109 [ 889.058069][ T5232] option 5-1:7.4: device disconnected [ 889.072908][ T5232] option 5-1:7.77: device disconnected [ 889.103945][ T25] usbhid 3-1:0.0: can't add hid device: -71 [ 889.109713][T12198] loop1: detected capacity change from 0 to 256 [ 889.110521][ T25] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 889.185727][ T25] usb 3-1: USB disconnect, device number 95 [ 889.263925][T12200] loop2: detected capacity change from 0 to 256 [ 889.673430][ T4877] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 889.861944][ T4877] usb 3-1: device descriptor read/64, error -71 [ 889.869768][T12212] loop4: detected capacity change from 0 to 64 [ 889.877791][T12215] loop3: detected capacity change from 0 to 128 [ 889.919095][T12212] hfs: keylen 94 too large [ 889.924198][T12212] hfs: request for non-existent node 1818584064 in B*Tree [ 889.931803][T12212] hfs: request for non-existent node 1818584064 in B*Tree [ 890.022200][T12210] loop1: detected capacity change from 0 to 2048 [ 890.096511][T12210] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 890.139609][ T8657] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 890.148395][ T4877] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 890.168880][T12210] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2110'. [ 890.282323][ T5232] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 890.332437][ T4877] usb 3-1: device descriptor read/64, error -71 [ 890.362197][ T3206] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 890.370909][ T3206] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 890.377797][ T8657] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 890.390279][ T8657] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 41472, setting to 1024 [ 890.397622][ T25] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 890.445289][ T4877] usb usb3-port1: attempt power cycle [ 890.456158][ T8657] usb 1-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=f5.35 [ 890.465743][ T8657] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 890.474125][ T8657] usb 1-1: Product: syz [ 890.478533][ T8657] usb 1-1: Manufacturer: syz [ 890.482338][ T5232] usb 5-1: Using ep0 maxpacket: 32 [ 890.484118][ T8657] usb 1-1: SerialNumber: syz [ 890.552170][ T5232] usb 5-1: config index 0 descriptor too short (expected 62, got 60) [ 890.557277][ T8657] usb 1-1: config 0 descriptor?? [ 890.560559][ T5232] usb 5-1: config 0 has an invalid descriptor of length 102, skipping remainder of the config [ 890.579259][ T5232] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 890.588626][ T8657] (null): radio-mr800 - initialization failed [ 890.602566][ T25] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 890.614705][ T8657] radio-mr800 1-1:0.0: probe with driver radio-mr800 failed with error -22 [ 890.725389][ T5232] usb 5-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice=30.ad [ 890.735035][ T5232] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 890.743565][ T5232] usb 5-1: Product: syz [ 890.747992][ T5232] usb 5-1: Manufacturer: syz [ 890.753036][ T5232] usb 5-1: SerialNumber: syz [ 890.816125][T12222] FAULT_INJECTION: forcing a failure. [ 890.816125][T12222] name failslab, interval 1, probability 0, space 0, times 0 [ 890.829642][T12222] CPU: 0 UID: 0 PID: 12222 Comm: syz.1.2114 Tainted: G W 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 890.842232][T12222] Tainted: [W]=WARN [ 890.846228][T12222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 890.852074][ T5232] usb 5-1: config 0 descriptor?? [ 890.856421][T12222] Call Trace: [ 890.856477][T12222] [ 890.867998][T12222] dump_stack_lvl+0x216/0x2d0 [ 890.872990][T12222] dump_stack+0x1e/0x30 [ 890.877437][T12222] should_fail_ex+0x748/0x7f0 [ 890.882448][T12222] should_failslab+0x17f/0x210 [ 890.887503][T12222] __kmalloc_noprof+0x175/0xf30 [ 890.892670][T12222] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 890.898765][T12222] ? sk_prot_alloc+0x143/0x440 [ 890.900332][ T25] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 890.903813][T12222] ? kmsan_get_metadata+0x13e/0x1c0 [ 890.903957][T12222] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 890.922819][T12222] sk_prot_alloc+0x143/0x440 [ 890.927719][T12222] sk_alloc+0x55/0x850 [ 890.932068][T12222] ? inode_init_always+0x778/0x7d0 [ 890.937490][T12222] pptp_create+0x52/0x330 [ 890.942117][T12222] ? __pfx_pptp_create+0x10/0x10 [ 890.947363][T12222] ? __pfx_pptp_create+0x10/0x10 [ 890.952592][T12222] pppox_create+0x1e2/0x2d0 [ 890.957383][T12222] ? __pfx_pppox_create+0x10/0x10 [ 890.962787][T12222] __sock_create+0x772/0xd70 [ 890.967710][T12222] __sys_socket+0x145/0x680 [ 890.972475][T12222] ? kmsan_get_metadata+0x13e/0x1c0 [ 890.977955][T12222] __x64_sys_socket+0x8e/0xe0 [ 890.982911][T12222] x64_sys_call+0x3a18/0x3ba0 [ 890.987898][T12222] do_syscall_64+0xcd/0x1e0 [ 890.992697][T12222] ? clear_bhb_loop+0x25/0x80 [ 890.997644][T12222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 891.003872][T12222] RIP: 0033:0x7f82a277dff9 [ 891.008621][T12222] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 891.028544][T12222] RSP: 002b:00007f82a35f8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 891.037365][T12222] RAX: ffffffffffffffda RBX: 00007f82a2935f80 RCX: 00007f82a277dff9 [ 891.045601][T12222] RDX: 0000000000000002 RSI: 0000000000000001 RDI: 0000000000000018 [ 891.053906][T12222] RBP: 00007f82a35f8090 R08: 0000000000000000 R09: 0000000000000000 [ 891.062129][T12222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 891.070347][T12222] R13: 0000000000000001 R14: 00007f82a2935f80 R15: 00007ffdab3b6328 [ 891.078593][T12222] [ 891.084338][T12212] hfs: keylen 94 too large [ 891.089150][T12212] ===================================================== [ 891.096742][T12212] BUG: KMSAN: uninit-value in hfs_brec_find+0x65e/0x980 [ 891.104140][T12212] hfs_brec_find+0x65e/0x980 [ 891.110427][T12212] hfs_brec_read+0x3f/0x1a0 [ 891.121848][T12212] hfs_lookup+0x1ce/0x3d0 [ 891.127385][T12212] __lookup_slow+0x506/0x6e0 [ 891.128546][ T8657] usb 1-1: USB disconnect, device number 118 [ 891.140023][T12212] lookup_slow+0x6a/0xd0 [ 891.144779][T12212] walk_component+0x467/0x650 [ 891.149824][T12212] path_lookupat+0x27d/0x6f0 [ 891.154969][T12212] filename_lookup+0x22f/0x750 [ 891.160054][T12212] user_path_at+0x85/0x390 [ 891.164898][T12212] do_utimes+0x262/0x490 [ 891.165438][T12217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 891.169368][T12212] __x64_sys_futimesat+0x42b/0x500 [ 891.181929][ T4877] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 891.184567][T12212] x64_sys_call+0x3127/0x3ba0 [ 891.197311][T12212] do_syscall_64+0xcd/0x1e0 [ 891.202288][T12212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 891.208687][T12212] [ 891.212937][T12212] Local variable fd created at: [ 891.217906][T12212] hfs_lookup+0x5b/0x3d0 [ 891.222872][T12212] __lookup_slow+0x506/0x6e0 [ 891.227789][T12212] [ 891.230345][T12212] CPU: 1 UID: 0 PID: 12212 Comm: syz.4.2111 Tainted: G W 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 891.243678][T12212] Tainted: [W]=WARN [ 891.247720][T12212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 891.258227][T12212] ===================================================== [ 891.265536][T12212] Disabling lock debugging due to kernel taint [ 891.272351][T12212] Kernel panic - not syncing: kmsan.panic set ... [ 891.278907][T12212] CPU: 1 UID: 0 PID: 12212 Comm: syz.4.2111 Tainted: G B W 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 891.291374][T12212] Tainted: [B]=BAD_PAGE, [W]=WARN [ 891.296513][T12212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 891.306728][T12212] Call Trace: [ 891.310121][T12212] [ 891.313157][T12212] dump_stack_lvl+0x216/0x2d0 [ 891.318045][T12212] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 891.324050][T12212] dump_stack+0x1e/0x30 [ 891.328400][T12212] panic+0x4e2/0xcf0 [ 891.332492][T12212] ? kmsan_get_metadata+0x41/0x1c0 [ 891.337798][T12212] kmsan_report+0x2c7/0x2d0 [ 891.342477][T12212] ? vprintk_default+0x3e/0x50 [ 891.347436][T12212] ? __msan_warning+0x95/0x120 [ 891.352416][T12212] ? hfs_brec_find+0x65e/0x980 [ 891.357439][T12212] ? hfs_brec_read+0x3f/0x1a0 [ 891.362286][T12212] ? hfs_lookup+0x1ce/0x3d0 [ 891.366980][T12212] ? __lookup_slow+0x506/0x6e0 [ 891.371920][T12212] ? lookup_slow+0x6a/0xd0 [ 891.376509][T12212] ? walk_component+0x467/0x650 [ 891.381543][T12212] ? path_lookupat+0x27d/0x6f0 [ 891.386481][T12212] ? filename_lookup+0x22f/0x750 [ 891.391598][T12212] ? user_path_at+0x85/0x390 [ 891.396362][T12212] ? do_utimes+0x262/0x490 [ 891.401055][T12212] ? __x64_sys_futimesat+0x42b/0x500 [ 891.406559][T12212] ? x64_sys_call+0x3127/0x3ba0 [ 891.411703][T12212] ? do_syscall_64+0xcd/0x1e0 [ 891.416578][T12212] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 891.422900][T12212] ? kmsan_get_metadata+0x13e/0x1c0 [ 891.428277][T12212] ? hfs_brec_keylen+0x398/0x610 [ 891.433417][T12212] ? hfs_brec_keylen+0x58f/0x610 [ 891.438565][T12212] ? __hfs_brec_find+0x426/0x830 [ 891.443673][T12212] ? __pfx_hfs_cat_keycmp+0x10/0x10 [ 891.449064][T12212] ? kmsan_get_metadata+0x13e/0x1c0 [ 891.454440][T12212] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 891.460433][T12212] __msan_warning+0x95/0x120 [ 891.465241][T12212] hfs_brec_find+0x65e/0x980 [ 891.470023][T12212] hfs_brec_read+0x3f/0x1a0 [ 891.474696][T12212] ? hfs_cat_build_key+0xa5/0xd0 [ 891.479828][T12212] hfs_lookup+0x1ce/0x3d0 [ 891.484362][T12212] ? kmsan_get_metadata+0x13e/0x1c0 [ 891.489749][T12212] ? __pfx_hfs_lookup+0x10/0x10 [ 891.494873][T12212] __lookup_slow+0x506/0x6e0 [ 891.499658][T12212] lookup_slow+0x6a/0xd0 [ 891.504082][T12212] walk_component+0x467/0x650 [ 891.508922][T12212] ? kmsan_get_metadata+0x13e/0x1c0 [ 891.514305][T12212] path_lookupat+0x27d/0x6f0 [ 891.519088][T12212] filename_lookup+0x22f/0x750 [ 891.524057][T12212] ? kmsan_get_metadata+0x13e/0x1c0 [ 891.529440][T12212] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 891.535466][T12212] user_path_at+0x85/0x390 [ 891.540080][T12212] ? do_utimes+0x94/0x490 [ 891.545033][T12212] ? __x64_sys_futimesat+0x42b/0x500 [ 891.550533][T12212] do_utimes+0x262/0x490 [ 891.554970][T12212] ? kmsan_get_metadata+0x13e/0x1c0 [ 891.560393][T12212] __x64_sys_futimesat+0x42b/0x500 [ 891.565743][T12212] x64_sys_call+0x3127/0x3ba0 [ 891.570630][T12212] do_syscall_64+0xcd/0x1e0 [ 891.575336][T12212] ? clear_bhb_loop+0x25/0x80 [ 891.580227][T12212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 891.586368][T12212] RIP: 0033:0x7f9f32b7dff9 [ 891.590939][T12212] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 891.610767][T12212] RSP: 002b:00007f9f33a54038 EFLAGS: 00000246 ORIG_RAX: 0000000000000105 [ 891.619388][T12212] RAX: ffffffffffffffda RBX: 00007f9f32d35f80 RCX: 00007f9f32b7dff9 [ 891.627544][T12212] RDX: 0000000020000140 RSI: 0000000020000040 RDI: 0000000000000007 [ 891.635687][T12212] RBP: 00007f9f32bf0296 R08: 0000000000000000 R09: 0000000000000000 [ 891.643818][T12212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 891.651949][T12212] R13: 0000000000000000 R14: 00007f9f32d35f80 R15: 00007ffd53110098 [ 891.660108][T12212] [ 891.663524][T12212] Kernel Offset: disabled [ 891.667935][T12212] Rebooting in 86400 seconds..