last executing test programs: 17.535991352s ago: executing program 3 (id=449): socket$kcm(0x2, 0x200000000000001, 0x106) r0 = epoll_create(0x10000e9) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r2 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x0, 0x0, 0x5}, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x486, 0x186, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) delete_module(&(0x7f0000000080)='\'\x19\xb8\nc\xbb]\xdb\x7fV+\x8d\xe6\xdb\x84y\xc6[\xf3\xf1\xeaT\xfbbv2\x99\x13\xe3\xd9X\xb8\xb5\xcd8\x98g\xabY\x7f,\xdd\x86\xee\x868\xd4\x14\xaa\x04\xf2\xdd\xf4m', 0x0) ftruncate(r2, 0xffff) r3 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000100)={r2, 0x0, 0x0, 0x1000}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000080)={0x9000001d}) epoll_pwait2(r0, &(0x7f0000000540)=[{}, {}], 0x2, 0x0, 0x0, 0x0) 15.382078668s ago: executing program 4 (id=452): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, &(0x7f0000000000)=0x34, 0x4) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000001700)="$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") unshare(0x26020280) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x40000000, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x5, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe0}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, &(0x7f0000000000)=0x34, 0x4) (async) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000001700)="$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") (async) unshare(0x26020280) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) wait4(0x0, 0x0, 0x40000000, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x5, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe0}}, 0x0) (async) 13.379377527s ago: executing program 3 (id=456): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001cc0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002540), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000002580)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r1, @ANYBLOB="0800390000000100080026000816000008009f00060000000800570038"], 0x3c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r4, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x4c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_FRAME={0x1c, 0x33, @data_frame={@msdu=@type10={{}, {}, @from_mac, @device_b, @broadcast}, @a_msdu}}]}, 0x4c}}, 0x0) 12.642910959s ago: executing program 3 (id=459): ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000180)) syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_AUTH_ENABLE}}, 0x7) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x6) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) unshare(0x22020400) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = getpgrp(0xffffffffffffffff) wait4(r2, &(0x7f0000000000), 0x1, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r3, &(0x7f0000000280)={0x10, 0x0, r4}, 0x10) getpgid(r2) sched_setaffinity(0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r6 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) r7 = shmat(r6, &(0x7f0000ffd000/0x2000)=nil, 0x2000) shmat(r6, &(0x7f0000ff9000/0x1000)=nil, 0x4000) shmat(r6, &(0x7f0000ffc000/0x1000)=nil, 0x4000) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x9) shmctl$IPC_RMID(0x0, 0x0) shmdt(r7) syz_usb_connect$cdc_ecm(0x0, 0x5a, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109024800010100e800090400001602020000052404000005240000000d240f010000000000000000000424020009058103000000000009058202000000000009050302"], 0x0) 12.427562497s ago: executing program 4 (id=462): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f00000001c0)='./file1\x00', 0x8, &(0x7f0000000480)={[{@noflushoncommit}, {@ref_verify}, {@user_subvol_rm}, {@treelog}, {@rescan_uuid_tree}, {@max_inline={'max_inline', 0x3d, [0x33, 0x31, 0x6b, 0x2d, 0x31, 0x2d, 0x65]}}, {@noflushoncommit}, {@nobarrier}, {@nossd}]}, 0xfe, 0x55a3, &(0x7f0000005680)="$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") open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0xf800) 9.804810319s ago: executing program 1 (id=468): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x309241) socket$kcm(0x29, 0x5, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) socket$inet(0x2, 0x0, 0x0) socket$tipc(0x1e, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket(0xa, 0x1, 0x0) close(r2) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000002f00)={0x0, 0x10, &(0x7f0000002ec0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000002f40)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) sendmmsg$inet_sctp(r2, &(0x7f00000019c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x208, 0x0, 0x0, 0x0, 0x0, 0x0, r4}}], 0x30}], 0x1, 0x0) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) set_mempolicy(0x3, &(0x7f0000000040)=0x1, 0x4) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000900)='Z', 0x1}, {&(0x7f0000000040)="a3d7f3e8a9cf9e3887a6f6eca30e90d85fcfa281378973ab916b0e1d03bd28bca55c552da8cfecb0fbccbfb18ef20fe9541e0e1e8fa214cb6bb0455c2386f5ebb4730be449beb72f481c1429d6eb835b76fd1fdcacd50b884c98caa871ec4e225b6036b6ad2638ab5b06828c10fc355b170075f37b748b8f466fe29f40ec981d1431132bca9884654780b3205ed61f49c3b3b6229593e61d13a8505de19a8a0f502d4f3148f9450ed35ef5950bb7fefcf299beed14", 0xb5}], 0x2, 0x0, 0x0, 0x20004000}, 0x0) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) fcntl$dupfd(r5, 0x0, r5) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket(0x2b, 0x1, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0) pselect6(0x40, &(0x7f0000000280)={0xfff}, 0x0, 0x0, 0x0, 0x0) write$sndseq(r0, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0xfd, @tick, {}, {0xe}, @connect}], 0x1c) 9.447069639s ago: executing program 4 (id=470): syz_usb_connect(0x0, 0x38, &(0x7f0000000040)=ANY=[@ANYBLOB="120110038121e940e60491553994010203010902260001000000000904000002e515bb0009050402090000000009058802", @ANYRESHEX], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff400c}, 0x90) r0 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000001c0)={{0x2, 0x4e23, @rand_addr=0x64010101}, {0x307, @multicast}, 0x10, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'wg0\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$sock_int(r1, 0x1, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x38) setsockopt$inet6_int(r2, 0x29, 0x7, &(0x7f0000000040)=0xeffe, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast2, 0xb}, 0x1c) (fail_nth: 2) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xf338}], 0x1) sched_setscheduler(0x0, 0x0, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) get_robust_list(r3, &(0x7f0000000300)=&(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)}}, &(0x7f0000000280)=0xfffffffffffffe24) 8.776290424s ago: executing program 3 (id=471): syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) syz_usb_connect(0x2, 0x4ff, &(0x7f0000000b40)={{0x12, 0x1, 0x200, 0xe3, 0xc5, 0x82, 0x40, 0x19d2, 0x1596, 0x2db8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4ed, 0x3, 0x9, 0x6, 0x90, 0xb, [{{0x9, 0x4, 0x86, 0x4, 0x8, 0xff, 0xff, 0xff, 0x6, [], [{{0x9, 0x5, 0x89, 0x4, 0x200, 0x5, 0x0, 0x2}}, {{0x9, 0x5, 0x0, 0x1, 0x400, 0x4, 0x0, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0xc1, 0x7, 0x6}, @generic={0x44, 0x3, "e2c65c6e938c0584b8c5b97edca259f0d198e1cb424e2b1478b54814d8bf3eddcc4539ce454f70fb2fd7e1051729a8f23a5028f6f195a0476482e63294fb9321f3e8"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x40, 0x7, 0x38, 0x3}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0x7f, 0xc, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0xbcf6}, @generic={0x2a, 0x22, "1c3660d80c0b469f061adf8bc2daef82db34a30cb0827811c4e0fb2cb825d186484e91372e00ac60"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0x8, 0x0, 0x2}}, {{0x9, 0x5, 0x4, 0x10, 0x200, 0x8, 0x6, 0x3, [@generic={0x59, 0xf, "8079a42f3786a2b2a0b0703efb84d6e1cc4712e85178d4eca1ffbea15d39c885461c90a7516db2451a340ffcccfd523b923a8ece970761afefa4fae1ccacc3286951d9741c5577a8b94224e47e1d1b05018a92a9829bd2"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x10, 0x40, 0x7, 0x0, [@generic={0xb0, 0xa, "f22a1c5b93f997ff7153931b0308729174843346d1a2b55c32608f16a36d9dc29312e8f991ceab6ebf3c4a83f0d0c9e9b530a994333d6d295a899b5870fc83f17c77fac64658937eb793e6d82e40d127485bf600db67079e5d8ce5f0e2cedb1e1ce7c754facc8a3a069dd5341270675c8aa7841be303a64da4364239bf2cbd25187dd188f0d0ff7a07af17b7bb881fdf60e6ac4b5abe6af9eaaf68d806ffad3158080da46c9cf4a525ccade88cae"}, @uac_iso={0x7, 0x25, 0x1, 0x49457beac0cc3818}]}}, {{0x9, 0x5, 0x4, 0x10, 0x0, 0x8e, 0x0, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x8}, @generic={0xca, 0x0, "3efd7a46f35492cdef97b03bfa904a54026dcf0cd6ec405779c6bb972c78c68d71c242e007338e0fde507f5070e14a1ca2b1ea03d8496a89d2b622f61e4e6d6df8b70d0a90f30b6fc6cdb550257f122e8b96dfee054053a080a5dbdf34b722c5b2391ebf83e87e9d53d667a9d20a8b4a7ce1818904419417cc33f1f3cffbb405e3f4a4efd88b41f4e8c6036593476ef0369093dadcc81aa26ee836737f4250d12452a00097dace465ca5f9f1cf2b3df1ba66c2aa86e6393566379b0c2416945ac284731ca1346076"}]}}]}}, {{0x9, 0x4, 0xdf, 0x3, 0xb, 0x26, 0x53, 0x6, 0x4, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x2, 0x2, 0x1001}, @as_header={0x7, 0x24, 0x1, 0x0, 0x7}, @as_header={0x7, 0x24, 0x1, 0x7, 0x7, 0x1001}, @as_header={0x7, 0x24, 0x1, 0x5, 0x10, 0x1001}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x9, 0x0, 0x7, 0x5, "e2b10d26"}, @as_header={0x7, 0x24, 0x1, 0x0, 0x7f}]}, @cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "a675"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x3, 0xed7, 0x1}, [@mdlm={0x15, 0x24, 0x12, 0x3}, @obex={0x5, 0x24, 0x15, 0x4}, @mbim_extended={0x8, 0x24, 0x1c, 0x4, 0x2, 0x7}, @network_terminal={0x7, 0x24, 0xa, 0x69, 0xd, 0xc5, 0x4}, @mdlm_detail={0x8a, 0x24, 0x13, 0x3c, "39f4f7f51574ee43385f002cafe3ee057adf5e199cb98b0902a94998b98a3a8a55cd32f02453b12a6d853a7b98257ef8f1ee40e8f6c5fe3682da61a44244798041b1c557c9da27153872043fe43976afb6f79c8befae461b596e0d9b08c2aa05082f5b082da7ef899430e5f6aeb72f3fbc6f44cc8b0cefb2a0f6936146b36b5975b8c7d1709e"}]}], [{{0x9, 0x5, 0x0, 0x0, 0x8, 0xe3, 0x9, 0x2}}, {{0x9, 0x5, 0x80, 0xc, 0x10, 0xb1, 0x37, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x30, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x182, 0x1, 0xa}]}}, {{0x9, 0x5, 0x9, 0x10, 0x68, 0x7, 0x7, 0x7f}}, {{0x9, 0x5, 0x0, 0x0, 0x400, 0x2, 0x0, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x41, 0x72, 0x5}]}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0x6, 0x7, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0xc3, 0x2, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0xfc, 0x4}]}}, {{0x9, 0x5, 0x0, 0x3, 0x200, 0x40, 0x0, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xbd}]}}, {{0x9, 0x5, 0xd, 0x10, 0x8, 0x1, 0x3f, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xd1, 0x800}]}}, {{0x9, 0x5, 0xf, 0x30, 0x200, 0x23, 0x8, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x8, 0x6}]}}, {{0x9, 0x5, 0xd, 0x10, 0x20, 0x1, 0x2, 0xa}}, {{0x9, 0x5, 0x0, 0x1, 0x3ff, 0x0, 0xe9, 0xed, [@generic={0x42, 0x21, "21a05a4492ac681e1cc84154e2808a3deb6dcea84d675ee1418aeec27b8dc4f56e8f1b6b1f01d99abf5844fef8dd4495a1116e6a64f5add599557e3211ce08c2"}, @generic={0x21, 0x6, "546bfdd468568112446106ab06d7e14024c95b6ba5358d98d83dd38788449d"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x0, 0x7, 0x9}}]}}, {{0x9, 0x4, 0x0, 0x2, 0x0, 0xba, 0x9, 0xe1, 0x2, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x7, 0x200, 0x9d}, {0x6, 0x24, 0x1a, 0x7f, 0x10}, [@dmm={0x7, 0x24, 0x14, 0xb7}, @network_terminal={0x7, 0x24, 0xa, 0x7, 0x0, 0x6, 0x7}]}]}}]}}]}}, &(0x7f0000000840)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x200, 0x4, 0x4, 0xe, 0x8, 0x7}, 0xd4, &(0x7f0000000300)={0x5, 0xf, 0xd4, 0x6, [@generic={0xb4, 0x10, 0x4, "cbbf0e13cb5950d328a8e2b1dc60ccc116474924c339b18c0d1a0df0d9465acfe3f042b72aad15619584f778996d5e9ca456271a0eb7bf8e2beaa3a2cc7643f82e07c5ba9dbb01b285b8758cfc12d5bbabfea005ca8e3f9c6c4945a0c67ef13ae6fcf2ca0cb30f9803d081a7fb4c13698dbc9d8949beb3b7459eb45630fdfe6ff72665a226962c753fd0eb6f3dd748386a46102f33b975a5420972db67d391349879fed2337f6720cc51d11dbc642cf108"}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0xd, 0x4, 0x6b}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x5, 0x0, 0xb4}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0xc, 0x1, 0xfffa}]}, 0x9, [{0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x41e}}, {0x7, &(0x7f0000000580)=@string={0x7, 0x3, "cc4f2cd923"}}, {0x7c, &(0x7f00000005c0)=@string={0x7c, 0x3, "02013e7a6c3df6bc37d41b10927db4f39bcc6e0192eabb2956fab104727ea45ec66ef5dd12cde4d39123a311bb00e0db4e2f99c04ae20d55519cb0e9636b6171dc750e28ff463f3b3a4672ade0108cd34eb2ac28e912fc53bc2f51c5a4d130a5253f2403c3d8cc3c28a5bebacaf923d86e5414db91e1227d24c8"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x820}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0xc1b}}, {0x9d, &(0x7f00000006c0)=@string={0x9d, 0x3, "7501497e3b5bace6d897ef673ebd4333e431b21124194ecf398bcad3387c022f41ab535639c6ccf9d5e26790ff99c897a936b313fe774677e0784a079d0195156766f5b041e7a7b9de1ae8d4141f6ed93d4365dbb67ed388e6993548a9b7cde315d6d58600bfe2bfd60de519b6d29ba23275453d207441894ab477e4181c52821a1e59139390fc9cafb87e1d4c86951d595e7fbae27307f2305335"}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x340a}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x1004}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x425}}]}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_BASE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x10000000}, 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 8.238675429s ago: executing program 1 (id=473): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x18, 0x8, 0x40, 0x42, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r0, &(0x7f0000000500)="ae168d7650adf805afbd6bf1441898670c6d29ed2ddfca95c718139f78af7eeb91fda6f6459d293688b42158be9a1925b09d3885dbaa844b351174e2ad09d727ef4a5a05b51a95b4ad3d2bb2bb41c949f1075ef4203728ef2642658b64c97f82444b314da7867e32248dcd2800dd35aef34b9a16fe23e1635371d95ca80f86090084f05664000000000000000000d6d7624a650ab4ed55ca4a7eba329281eb1415437653266e0b4cf9669a0b4e2f99c4d5d5ba1d86d735f886", &(0x7f0000001580)=""/92}, 0x20) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="15"], 0x6) r2 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r3, 0x11c, 0x3, 0x0, &(0x7f0000000080)) poll(&(0x7f0000000140)=[{r0, 0x20a}, {0xffffffffffffffff, 0x210}, {}, {0xffffffffffffffff, 0x2000}, {}, {0xffffffffffffffff, 0x1}, {r1, 0x31b0}, {r2, 0x1400}, {r3, 0x1004}, {0xffffffffffffffff, 0x2000}], 0xa, 0x5) socket$nl_netfilter(0x10, 0x3, 0xc) 7.814421042s ago: executing program 2 (id=474): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) ioctl$KVM_SET_PIT(r1, 0xaea3, 0x0) (fail_nth: 1) 7.312477683s ago: executing program 0 (id=475): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r1, 0x89a2, &(0x7f0000000200)='bridge0\x00') (async) ioctl$sock_SIOCBRDELBR(r0, 0x89a3, &(0x7f0000000200)='bridge0\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) signalfd(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) r2 = socket(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000013c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x398, 0x0, 0x178, 0x394, 0x0, 0x178, 0x2c8, 0x258, 0x258, 0x2c8, 0x258, 0x3, 0x0, {[{{@ipv6={@loopback={0x1f0}, @mcast2, [], [], 'team_slave_0\x00', 'netpci0\x00'}, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "fc6b061134c5d5c8465af5f5caa5bd6c0dde77ff83daa984c0d76167e0608dcaa2caff7bd9c5923cccd5b483df8124249f91b8c3c2cea9bed64dc935a975401a68e34a04c1f15e50050729ba985e8c1576994e350d93a782668d4d51a1bc76bba1fde09794922ae65a804c56f092e430ebb8fa892d671c8c8035cae06810f8c6", 0x20}}, @common=@unspec=@addrtype1={{0x28}, {0xa}}]}, @common=@inet=@SET2={0x30}}, {{@ipv6={@private1, @mcast1, [], [], 'wg2\x00', 'hsr0\x00'}, 0x0, 0xd0, 0x108, 0x0, {}, [@common=@icmp6={{0x28}, {0x0, "08db"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) (async, rerun: 32) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000013c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d8, 0x0, 0x178, 0x394, 0x0, 0x178, 0x2c8, 0x258, 0x258, 0x2c8, 0x258, 0x3, 0x0, {[{{@ipv6={@loopback={0x1f0}, @mcast2, [], [], 'team_slave_0\x00', 'netpci0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}]}, @common=@inet=@SET2={0x30}}, {{@ipv6={@private1, @mcast1, [], [], 'wg2\x00', 'hsr0\x00'}, 0x0, 0xd0, 0x108, 0x0, {}, [@common=@icmp6={{0x28}, {0x0, "08db"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) (async, rerun: 64) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, 0x0, &(0x7f0000000080)) (async) sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYRES32=r5, @ANYRESDEC=r4, @ANYBLOB="4b6f00000000000000000800000004000480"], 0x18}}, 0x2400c881) 6.860568688s ago: executing program 1 (id=476): r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socket$nl_generic(0x10, 0x3, 0x10) getsockopt(0xffffffffffffffff, 0x1, 0x8d9a, &(0x7f0000000480)=""/42, &(0x7f00000004c0)=0x2a) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="04300300c9008cba4dffaa0a52c0186ef28359af281f3a6bfde3a6ee0de9ddee0bf7da43aebf706b3329b0a564835713c2de78691734f5b9ada875d8facbcb611c220f4296a197c00dc7780e18d276969228dd91f813fda5cbc6adcfdd40386249f98919c934448632816bbc251be47d"], 0x6) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, 0x0, 0x0) setsockopt$inet_opts(r1, 0x0, 0x0, &(0x7f0000000000)="89070404", 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d80f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x42}], 0x1, 0x18, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000001200010003950000000000000a0900000000000000000000080000000000ffffff9e000000000000000000000000ffff"], 0x4c}}, 0x0) sendmsg$NFT_BATCH(r4, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000060a0b040000000000000000020000001400048010000180070001006374"], 0x68}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="03c8302400200001000306080007000e00080004000607040023070100040208007ce5ff0007020c00", @ANYRES8=0x0, @ANYRES16=r4, @ANYRES32], 0x29) r6 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x121301, 0x0) write$dsp(r6, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="043e1f0a00c90001"], 0x22) mbind(&(0x7f0000068000/0x1000)=nil, 0x1000, 0x4000, 0x0, 0x0, 0x3) r7 = semget$private(0x0, 0x4, 0x424) semctl$SEM_STAT_ANY(r7, 0x0, 0x14, &(0x7f00000006c0)=""/276) ioctl$KVM_RUN(r3, 0xae80, 0x0) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000200)={0xc}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) 6.693633811s ago: executing program 2 (id=477): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000001400)=[{{&(0x7f00000003c0)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0xe96}, 0x1c, 0x0}}], 0x2, 0x0) (fail_nth: 3) 6.019890797s ago: executing program 0 (id=478): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = syz_open_dev$vcsn(&(0x7f0000000000), 0x6, 0x3a941) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000680)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}}, 0x0, 0x0, 0x43, 0x0, "e541bd3d3aa6a2d875e9671e8abcb31c134f3a9db8f52e1f54fe6e079f35ac63186c7244fc3b3801e79b8e5545b90f2dbec29f15cec2fd7e55d0345bce05c13ed90158fbdeb70322ea3188f81890e3db"}, 0xd8) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000880)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "d7749df9821e8c99c98a47cdd2ccf80f"}]}}}}}}}, 0x0) syz_mount_image$exfat(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x800, &(0x7f00000002c0)=ANY=[@ANYBLOB='iocharset=maciceland,discard,iocharset=cp949,gid=', @ANYRESHEX=0x0, @ANYBLOB=',uid=', @ANYRESHEX=0x0, @ANYBLOB="2c696f636861727365743d6370393530026769643d", @ANYRESHEX=0x0, @ANYBLOB=',errors=remount-ro,iocharset=cp865,errors=continue,\x00'], 0x5, 0x1510, &(0x7f00000037c0)="$eJzs3Am4TlX7MPD7Xmvt45D0dJLhsNa6N08yLCdJMiTJkCRJkmRKSDrJKwmJQ6akQxKS4ZAMh5AMJ0465nkekyTpJEmmTMn6rlN83t7qe//v/+17/a//uX/Xta9n3c/a99prP/czrL0N33UZWrNxrWoNiQj+LfjrQxIAxALAQAC4DgACACgXVy4uqz+nxKR/7yDsr/VI6tWeAbuauP7ZG9c/e+P6Z29c/+yN65+9cf2zN65/9sb1Zyw72zy94PW8Zd+N7/9nZ/z7/79IZumxX60tfWPXfyGF65+9cf3/1wr+Kztx/bM3rn/2xvXP3rj+2UGOP+3h+mdvXH/GsrOrff+Zt6u7Xe33H2OMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4yx7OGsv0IBwOX21Z4XY4wxxhhjjDHG/jo+x9WeAWOMMcYYY4wxxv7/QxAgQUEAMZADYiEn5AIBANdCHrgOInA9xMENkBduhHyQHwpAQYiHQlAYNBiwQBBCESgKUbgJisHNUBxKQEkoBQ5KQwLcAmXgVigLt0E5uB3Kwx1QASpCJagMd0IVuAuqwt1QDe6B6lADakItuBdqw31QB+6HuvAA1IMHoT48BA3gYWgIj0AjeBQaw2PQBB6HptAMmkMLaPnfyn8JesDL0BN6QRL0hj7wCvSFftAfBsBAeBUGwWswGF6HZBgCQ+ENGAZvwnB4C0bASBgFb8NoeAfGwFgYB+MhBSbARHgXJsF7MBmmwFSYBqkwHWbA+zATZsFs+ADmwIcwF+bBfFgAafARLIRFkA4fw2L4BDJgCSyFZbAcVsBKWAWrYQ2shXWwHjbARtgEm2ELbIVtsB12wE7YBbvhU9gDn8Fe+Bz2wRf/Yv6Zf8jvioCAAgUqVBiDMRiLsZgLc2FuzI15MA9GMIJxGId5MS/mw3xYAAtgPMZjYSyMBg0SEhbBIhjFKBbDYlgci2NJLIkOHSZgApbBW7EslsVyWA7LY3msgBWxIlbGylgFq2BVrIrVsBpWx+pYE2vivXgv9sY6WAfrYl2sh/Uu357ChtgQG2EjbIyNsQk2wabYFJtjc2yJLbEVtsLW2BrbYltsh+2wPbbHREzEDtgBO2JH7ISdsDN2xi7YBbtiN+yGL+UAfBlfxl5YXfTGPtgH+2Jyjv44AAfgqzgIX8PX8HVMxiE4FN/AN/BNHI6ncQSOxFE4CquId3AMjkUS4zEFU3AiTsRJOAkn4xScgtMwFafjDJyBM3EWzsIPcA5+iB/iPJyHCzAN03AhLsJ0TMfFeAYzcAkuxWW4HFfgclyFq3EVrsV1uBY34AbchJtwC27BbbgNd+AO3IUKAD/Fz/AzTMZ9uA/34348gAfwIB7ETMzEQ3gID+NhPIJH8CgexWN4HE/gcTyFp/A0nsGzeBbP43m8gC/Ef9NoV4k1ySCyKKFEjIgRsSJW5BK5RG6RW+QReURERESciBN5RV6RT+QTBUQBES/iRWFRWBhhBIkwBgBEVERFMVFMFBfFRUlRUjjhRIJIEGVEGVFWlBXlxO2ivLhDVBAVRRtXWVQWVURbV1XcLaqJaqK6qCFqilqilqgtaos6oo6oK+qKeqKeqC8eEg1Eb+yPj4isyjQWQ7CJGIpNRTMhL32DtRLDsbVoI9qKp8RIHIHtRSuXKJ4VHcQY7Cj+Jsbi86KzGI9dxIuiq+gmuouXRA/R2vUUvcRk7C36iGnYV/QT/cUAMRNriA9wTs6a4nWRLIaIoeINsQDfFMPFW2KEGClGibfFaPGOGCPGinFivEgRE8RE8a6YJN4Tk8UUMVVME6liupgh3hczxSwxW3wg5ogPxVwxT8wXC0Sa+EgsFItEuvhYLBafiAyxRCwVy8RysUKsFKvEarFGrBXrxHqxQWwUm8RmsUVsFdvEdrFD7BS7xG7xqdgjPhN7xedin/hC7BdfigPiK3FQfC0yxTfikPhWHBbfiSPie3FU/CCOiePihDgpTokfxWlxRpwV58R58ZO4IH4WF4UXIFEKKaWSgYyROWSszClzyWtkbhlcenWvl3HyBplX3ijzyfyygCwo42UhWVhqaaSVJENZRBaVUXmTLCZvlsVlCVlSlpJOlpYJ8hZZRt4qy8rbZDl5uywv75AVZEVZSVaWd8oq8i4JkV+PUV3WkDVlLXmvrC3vk3Xk/bKufEDWkw/K+vIh2UA+LBvKR2Qj+ahsLB+TTeTjsqlsJpvLFrKlfEK2kk/K1rKNbCufku3k07K9fEYmymdlB+kvvUWel53lC7KLfFF2ld1kd/mzvCi97Cl7SYDeso98RfaV/WR/OUAOlK/KQfI1OVi+LpPlEDlUviGHyTflcPmWHCFHylHybTlaviPHyLFynBwvU+QEOVG+KyfJ9+RkOUVOldNkqpwu+18aabaU/zT/3T/IH/zL0TfJzXKL3Cq3ye1yh9wpd8ndcrfcI/fIvXKv3Cf3yf1yvzwgD8iD8qDMlJnykDwkD8vD8og8Io/Ko/KYPC7PyZPylPxRnpZn5Bl5Tp6X5+WFS68BKFRCSaVUoGJUDhWrcqpc6hqVW12r8qjrVERdr+LUDSqvulHlU/lVAVVQxatCqrDSyiirSIWqiCqqouomvPSGUSVVKeVUaZWgbvlX8lUxdbMqrkr8Jv/y/JL+ZH4tVUvVSrVSrVVr1Va1Ve1UO9VetVeJKlF1UB1UR9VRdVKdVGfVWXVRXVRX1VV1V91VD9VD9VQ9VZJKUn3UK6qv6qf6qwFqoHpVDVKD1GA1WCWrZDVUDVXD1DA1XA1XI9QINUqNUqPVaDVGjVHj1DiVolLURDVRTVKT1GQ1WU1VU1WqSlUz1Aw1U81Us9VsNUfNUXPVXDVfzVdpKk0tVAtVukpXi9VilaGWqCVqmVqmVqgVapVapdaoNWqdWqc2qA0qQ21Wm9VWtVVtV9vVTrVT7Va71R61R+1Ve9U+tU/tV/vVAXVAHVQHVabKVIfUIXVYHVZH1BF1VB1Vx9QxdUKdUKfUKXVanVZn1Vl1Xp1XF9QFdVFdzFr2BSIQgQpUEBPEBLFBbJAryBXkDnIHeYI8QSSIBHFBXJA3uDHIF+QPCgQFg/igUFA40IEJbCAuFT0a3BQUC24OigclgpJBqcAFpYOE4JagTHBrUDa4LSgX3B6UD+4IKgQVg0pB5eDOoEpwV1A1uDuoFtwTVA9qBDWDWsG9Qe3gvqBOcH9QN3ggqBc8GNQPHgoaBA8HDYNHgkbBo0Hj4LGgSfB40DRoFjQPWgQt/9LxvT+d/0nXU/fSSbq37qNf0X11P91fD9AD9at6kH5ND9av62Q9RA/Vb+hh+k09XL+lR+iRepR+W4/W7+gxeqwep8frFD1BT9Tv6kn6PT1ZT9FT9TSdqqfrGfp9PVPP0rP1B3qO/lDP1fP0fL1Ap+mP9EK9SKfrj/Vi/YnO0Ev0Ur1ML9cr9Eq9Sq/Wa/RavU6v1xv0Rr1Jb9Zb9Fa9TW/XO/ROvUvv1p/qPfozvVd/rvfpL/R+/aU+oL/SB/XXOlN/ow/pb/Vh/Z0+or/XR/UP+pg+rk/ok/qU/lGf1mf0WX1On9c/6Qv6Z31R+6zFfdbPu1FGmRgTY2JNrMllcpncJrfJY/KYiImYOBNn8pq8Jp/JZwqYAibexJvCprDJQoZMEVPERE3UFDPFTHFT3JQ0JY0zziSYBFPGlDFlTVlTzpQz5U15U8FUMJVMJXOnudPcZe4yd5u7zT3mHlPD1DC1TC1T29Q2dUwdU9fUNfVMPVPf1DcNTAPT0DQ0jUwj09g0Nk1ME9PUNDXNTXPT0rQ0rUwr09q0Nm1NW9POtDPtTXuTaBJNB9PBdDQdTSfTyXQ2nU0X08V0NV1Nd9Pd9DA9TE/T0ySZJNPH9DF9TV/T3/Q3A81AM8gMMoPNYJNsks1QM9QMM8PMcDPcjDAjzaishap5x4wxY804M96kmBQz0Uw0k8wkM9lMNlPNVJNqUs0MM8PMNDPNbDPbzDFzzFwz18w3802aSTMLzUKTbtLNYrPYZJgMs9QsNcvNcrPSrDSrzWqz1qw162G92Wg2ms1ms9lqtprtZrvZaXaa3Wa32WP2mL1mr9ln9pn9Zr85YA6Yg+agyTSZ5pA5ZA6bw+aIOWKOmqPmmDlmTpgT5pQ5ZU6b0+asOWvOm/yXfi+9ibU5bS57jc1tr7V57HX2H+MCtqCNt4VsYattPpv/N7Gx1ha3JWxJW8o6W9om2Ft+F1ewFW0lW9neaavYu2zV38W17X22jr3f1rUP2Fr23t/E9eyDtr59zDZABLDNbCPbwja2j9km9nHb1DazzW0L284+bdvbZ2yifdZ2sM/9Ll5oF9nVdo1da9fZPfYze9aes4ftd/a8/cn2tL3sQPuqHWRfs4Pt6zbZDvldPMq+bUfbd+wYO9aOs+N/F0+102yqnW5n2PftTDvrd3Ga/cjOsel2rp1n59sFv8RZc0q3H9vF9hObYZfYpXaZXW5X2JV21f+d6zK7wW60m+xu+6ndarfZ7XaH3Wl3/RJnncde+7ndZ7+wh+y39oD9yh60R2ym/eaXOOv8jtjv7VH7gz1mj9sT9qQ9ZX+0p+2ZX84/69xP2p/tRestEBKQJEUBxVAOiqWclIuuodx0LeWh6yhC11Mc3UB56UbKR/mpABWkeCpEhUmTIUtEIRWhohSlm+jyOr0klSJHpSmBbqEydCuVpduoHN1O5ekOqkAVqRJVpjupCt1FVeluqkb3UHWqQTWpFt1Ltek+qkP3U116gOrRg1SfHqIG9DA1pEeoET1KjekxakKPU1NqRs2pBbWkJ6gVPUmtqQ21paeoHT1N7ekZSqRnqQM9Rx3pb9SJnqfO9AJ1oRepK3Wj7vQS9aCXqSf1oiTqTX3oFepL/ag/DaCB9CoNotdoML1OyTSEhtIbNIzepOH0Fo2gkTSK3qbR9A6NobE0jsZTCk2gifQuTaL3aDJNoak0jVJpOs2g92kmzaLZ9AHNoQ9pLs2j+bSA0ugjWkiLKJ0+psX0CWXQElpKy2g5raCVtIpW0xpaS+toPW2gjbSJNtMW2krbaDvtoJ20i3bTp7SHPqO99Dntoy9oP31JB+grOkhfUyZ9Q4foWzpM39ER+t73oh/oGB2nE3SSTtGPdJrO0Fk6R+fpJ7pAP9NF8gQhhiKUoQqDMCbMEcaGOcNc4TVh7vDaME94XRgJrw/jwhvCvOGNYb4wf1ggLBjGh4XCwqEOTWhDCsOwSFg0jIY3hcXCm8PiYYmwZFgqdGHpMCG8JSwT3hqWDW8Ly4W3h+XDO8IKYcXwsQcqh3eGVcK7wqrh3WG18J6welgjrBnWCu8Na4f3hXXC+8O64QNh2fDBsH74UNggfDhsGD4SNgofDRuHj4VNwsfDpmGzsHnYImwZPhG2Cp8MW4dtwrbhU2G78OmwffhMmBg+G3YIn/ul/8FFf96fFPYO+4SvhK+E3t8v50cXRNOiH0UXRhdF06MfRxdHP4lmRJdEl0aXRZdHV0RXRldFV0fXRNdG10XXRzdEN0Y3Rb2vlQMcOuGkUy5wMS6Hi3U5XS53jcvtrnV53HUu4q53ce4Gl9fd6PK5/K6AK+jiXSFX2GlnnHXkQlfEFXVRd5Mr5m52xV0JV9KVcs6VdgmuhWvpWrpW7knX2rVxbd1T7in3tHvaPeOecc+6Du4519H9zXVyz7vO7gX3gnvRdXXdXHf3kuvhJuT59TOZ5Pq4Pq6v6+v6u/5uoBvoBrlBbrAb7JJdshvqhrphbpgb7oa7EW6EG+VGudFutBvjxrhxbpxLcSluopvoJrlJbrKb7Ka6qS7VpboZboab6Wa6KrN+PcpcN9fNd/NdmktzC13WmjHdLXaLXYbLcEvdUrfcLXcr3Uq32q12a91at96tdxvdRrfZbXZb3Va33W13O91Ot9vtdnv8db8O6va5/W6/O+AOuIPua5fpvnGH3LfusPvOHXHfu6PuB3fMHXcn3El3yv3oTrsz7qw75867n9wF97O76LxLiUyITIy8G5kUeS8yOTIlMjUyLZIamR6ZEXk/MjMyKzI78kFkTuTDyNzIvMj8yIJIWuSjyMLIokh65OPI4sgnkYzIksjSyLLI8siKiPeFtoa+iC/qo/4mX8zf7Iv7Er6kL+WdL+0T/C2+jL/Vl/W3+XL+dl/e3+Er+Iq+kn/cN/XNfHPfwrf0T/hW/knf2rfxbf1Tvp1/2rf3z/hE/6zv4J/zHf3ffCf/vO/sX/Bd/Iu+q+/mu/uXfA//su/pe/kk39v38a/4vr6f7+8H+IH+VT/Iv+YH+9d9sh/ih/o3/DD/ph/u3/Ij/Eg/KuZtP/ryJTKM9yl+gp/o3/WT/Ht+sp/ip/ppPtVP9zP8+36mn+Vn+w/8HP+hn+vn+fl+gU/zH/mFfpFP9x/7xf4Tn+GXXL6p7Ff6VX61X+PX+nV+vd/gN/pNfrPf4rf6bX673+F3+l1+t//U7/Gf+b3+c7/Pf+H3+y/9Af+VP+i/9pn+G3/If+sP++/8Ef+9P+p/8Mf8cX/Cn/Sn/I/+tD/jz/pz/rz/yV/wP/uL/G/WGGOMMcb+SyZcaYo/6u/9B8+Jv9u5DwBcu61g5t/3Z60o1+f7td1PxLeLAMCzvbo8cnmrXj0pKenSvhkSgqLzAC7/SVCWGLgSL4G28DQkQhso84fz7ye6nad/Mn70doBcf5cTC1fiK+N/+SfjP/HUqIXlw7Nx/4/x5wEUL3olJydciZdAW5X12AbK/sn4+Vv9k/nn/CoFoPXf5eSGK/GV+SfAk/AcJP5mT8YYY4wxxhhj7Ff9RKVOl68/L/+Nzz+6Po9XV3JywJX4n12fM8YYY4wxxhhj7Op7vlv3Z55ITGzT6V9vVP1vZXHjf2rDe4DLzygA+DcHBPiPn8WW/8ixki99dP6xa/k5H8D/jFL+FY2r/MXEGGOMMcYY+8tdWfT/9nl1tSbEGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4xlQ/+J/07sap8jY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxdrX9nwAAAP//geYOMQ==") mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) sendmsg$tipc(r2, &(0x7f0000000280)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x3, {{0x2, 0x2}, 0x2}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)="03db1035c8a56dbc931cb3a13265928ba2be3e6da9d201cf3d0ebe365bec2e3551b741bfabecbada4888013eef56959b5788661c697c5a9f7e2f0c0d6399f50372dd56c2350ca680b3a36a26dbe7f9251a7cd6d5bffd126ee2e33a8c100be42101ab6b27ea2aa09aaaf19dcf21bcb7495d0879b60bcbe1308485b10302", 0x7d}], 0x1, &(0x7f0000000300)="cd0d49a89e46156a0ee3d861feb127a37e5a44f77f426b5d77e0d2252833d76ea05f8966ae0ad379424c4092c68aded2a4fa1f1ee6328bbedfe35d54b3e29cf83e8da8e55a02e3da3fbcb993ba0f9fe958b78aa52d3931f36c11e964c5a145af8dbf1a", 0x63}, 0x44800) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf]}}]}}]}, 0x8c}}, 0x0) r5 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000100)={0x0, 0x8, 0x0, {0x9, @vbi}}) 5.708209573s ago: executing program 2 (id=479): socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000500)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000228bd7000000000000200000008000300", @ANYRES32=r4, @ANYBLOB="000000000000000000000000a89ed6c46bafa21324aca5cd888bf177d52d2e792566b5b4fba2de9eb9c4658d3d4a95d4d379"], 0x28}}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtaction={0x110, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0xfc, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0xa8, 0x2, 0x0, 0x0, {{0x7}, {0x80, 0x2, 0x0, 0x0, [@TCA_CT_LABELS={0x14, 0x7, "42394173db81e620cd5d93c1015f7ac4"}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @multicast2}, @TCA_CT_ZONE={0x6, 0x4, 0x4}, @TCA_CT_LABELS={0x14, 0x7, "a97f78e80743a16b4e0e0adea5e2ca0c"}, @TCA_CT_LABELS_MASK={0x14, 0x8, "d32c1034a934e5d42e66f6afd8b2df3b"}, @TCA_CT_LABELS_MASK={0x14, 0x8, "dbd70f649d485eb79fbfac8ab181c45b"}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @private0}, @TCA_CT_MARK={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x110}}, 0x0) 5.606172097s ago: executing program 1 (id=480): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f00000001c0)='./file1\x00', 0x8, &(0x7f0000000480)={[{@noflushoncommit}, {@ref_verify}, {@user_subvol_rm}, {@treelog}, {@rescan_uuid_tree}, {@max_inline={'max_inline', 0x3d, [0x33, 0x31, 0x6b, 0x2d, 0x31, 0x2d, 0x65]}}, {@noflushoncommit}, {@nobarrier}, {@nossd}]}, 0xfe, 0x55a3, &(0x7f0000005680)="$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") open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0xf800) 5.150951848s ago: executing program 3 (id=481): r0 = accept(0xffffffffffffffff, &(0x7f00000006c0)=@hci, &(0x7f0000000740)=0x80) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000ac0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000800)={0x218, r1, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x4}, @TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_MEDIA={0x9c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd604}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_LINK={0x4}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xb6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7f}]}, @TIPC_NLA_BEARER={0xc4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0xfffff75c, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e21, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth1_macvtap\x00'}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9969}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf0}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x401}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x40}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x11d1}]}, @TIPC_NLA_PUBL={0x4}]}, 0x218}, 0x1, 0x0, 0x0, 0x12}, 0x7b8c3de8613f3ff6) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0xb4, r1, 0xe35, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "2f4f4a82386509ce4eee277f6f8fcb686c197b570c62183420c1c59fd3a4868161c74c"}}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0xfdef}], 0x1) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "000080f100df00000000000000000009f600"}) r3 = syz_open_dev$vcsu(&(0x7f0000000200), 0xfffffffffffffff8, 0x400000) syz_open_pts(r3, 0x111001) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) r4 = open(&(0x7f0000000580)='./file0\x00', 0x10000000181540, 0x0) fcntl$lock(r4, 0x6, &(0x7f0000000080)={0x3, 0x1, 0x80000000000c5, 0x3}) read$char_usb(r4, &(0x7f0000019700)=""/102400, 0x19000) r5 = accept$unix(0xffffffffffffffff, &(0x7f00000003c0)=@abs, &(0x7f0000000440)=0x6e) getsockname$unix(r5, &(0x7f0000000480)=@abs, &(0x7f0000000500)=0x6e) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = memfd_create(&(0x7f0000000680)='#}\x04\xe4\xfc\x1e\xff~\xb1\xe0\xa5\x9d\xc8\xca#\'\x12xY!\xa4\xde\x1b+\xb2\x1aE\x10x\xce@i}\x03\x00a\x0e\xe6\x995b\r\x00\x00\x00\x00\x00\x00\x8e\x96\xb7=\xb9OmILO\x8d\x00\x00\x00\x00\x00\xfe\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1) setsockopt$inet_mtu(r7, 0x0, 0xa, &(0x7f0000000000)=0x3, 0x4) r9 = open(&(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000180)={0x0, 0x0, 0x7, 0x7}) fcntl$getflags(r9, 0x408) syz_genetlink_get_family_id$gtp(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r6, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x28944}, 0x4000080) ftruncate(r8, 0x40001) connect$inet(r7, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000380)=@generic={&(0x7f0000000300)='./file0/file0\x00', r4}, 0x18) sendfile(r7, r8, 0x0, 0xffe4) 4.166549591s ago: executing program 0 (id=482): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001cc0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002540), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000002580)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r1, @ANYBLOB="0800390000000100080026000816000008009f00060000000800570038"], 0x3c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r4, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x4c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_FRAME={0x1c, 0x33, @data_frame={@msdu=@type10={{}, {}, @from_mac, @device_b, @broadcast}, @a_msdu}}]}, 0x4c}}, 0x0) 3.932555691s ago: executing program 2 (id=483): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x309241) socket$kcm(0x29, 0x5, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) socket$inet(0x2, 0x0, 0x0) socket$tipc(0x1e, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket(0xa, 0x1, 0x0) close(r2) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000002f00)={0x0, 0x10, &(0x7f0000002ec0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000002f40)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) sendmmsg$inet_sctp(r2, &(0x7f00000019c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x208, 0x0, 0x0, 0x0, 0x0, 0x0, r4}}], 0x30}], 0x1, 0x0) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) set_mempolicy(0x3, &(0x7f0000000040)=0x1, 0x4) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000900)='Z', 0x1}, {&(0x7f0000000040)="a3d7f3e8a9cf9e3887a6f6eca30e90d85fcfa281378973ab916b0e1d03bd28bca55c552da8cfecb0fbccbfb18ef20fe9541e0e1e8fa214cb6bb0455c2386f5ebb4730be449beb72f481c1429d6eb835b76fd1fdcacd50b884c98caa871ec4e225b6036b6ad2638ab5b06828c10fc355b170075f37b748b8f466fe29f40ec981d1431132bca9884654780b3205ed61f49c3b3b6229593e61d13a8505de19a8a0f502d4f3148f9450ed35ef5950bb7fefcf299beed14", 0xb5}], 0x2, 0x0, 0x0, 0x20004000}, 0x0) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) fcntl$dupfd(r5, 0x0, r5) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket(0x2b, 0x1, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0) pselect6(0x40, &(0x7f0000000280)={0xfff}, 0x0, 0x0, 0x0, 0x0) write$sndseq(r0, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0xfd, @tick, {}, {0xe}, @connect}], 0x1c) 3.607856618s ago: executing program 4 (id=484): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_recovery\x00', 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="500000000301010400000000000000000a0000003c0002800c00028005000100060000002c000180140003"], 0x50}}, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000080)=@x={0x94, 0xe, "53b298f014ca"}) 3.542567731s ago: executing program 3 (id=485): socket$kcm(0x2, 0x200000000000001, 0x106) r0 = epoll_create(0x10000e9) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r2 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x0, 0x0, 0x5}, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x486, 0x186, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) delete_module(&(0x7f0000000080)='\'\x19\xb8\nc\xbb]\xdb\x7fV+\x8d\xe6\xdb\x84y\xc6[\xf3\xf1\xeaT\xfbbv2\x99\x13\xe3\xd9X\xb8\xb5\xcd8\x98g\xabY\x7f,\xdd\x86\xee\x868\xd4\x14\xaa\x04\xf2\xdd\xf4m', 0x0) ftruncate(r2, 0xffff) r3 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000100)={r2, 0x0, 0x0, 0x1000}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000080)={0x9000001d}) epoll_pwait2(r0, &(0x7f0000000540)=[{}, {}], 0x2, 0x0, 0x0, 0x0) 2.753428025s ago: executing program 1 (id=486): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x18, 0x8, 0x40, 0x42, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r0, &(0x7f0000000500)="ae168d7650adf805afbd6bf1441898670c6d29ed2ddfca95c718139f78af7eeb91fda6f6459d293688b42158be9a1925b09d3885dbaa844b351174e2ad09d727ef4a5a05b51a95b4ad3d2bb2bb41c949f1075ef4203728ef2642658b64c97f82444b314da7867e32248dcd2800dd35aef34b9a16fe23e1635371d95ca80f86090084f05664000000000000000000d6d7624a650ab4ed55ca4a7eba329281eb1415437653266e0b4cf9669a0b4e2f99c4d5d5ba1d86d735f886", &(0x7f0000001580)=""/92}, 0x20) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="15"], 0x6) r2 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r3, 0x11c, 0x3, 0x0, &(0x7f0000000080)) poll(&(0x7f0000000140)=[{r0, 0x20a}, {0xffffffffffffffff, 0x210}, {}, {0xffffffffffffffff, 0x2000}, {}, {0xffffffffffffffff, 0x1}, {r1, 0x31b0}, {r2, 0x1400}, {r3, 0x1004}, {0xffffffffffffffff, 0x2000}], 0xa, 0x5) socket$nl_netfilter(0x10, 0x3, 0xc) 2.422399661s ago: executing program 2 (id=487): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) capset(&(0x7f0000000000), 0x0) ioctl$VT_SETMODE(r0, 0x5602, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000005c0), 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw6\x00') preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) r2 = socket(0x2, 0x2, 0x0) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x88, 0xb, 0x0, 0x20000000) clock_gettime(0x0, &(0x7f0000004b80)) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_exit\x00', r3}, 0x10) prctl$PR_GET_SPECULATION_CTRL(0x21, 0x2, 0x0) recvmmsg(r2, &(0x7f0000004a00)=[{{&(0x7f0000000040)=@tipc, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/220, 0xdc}, {0x0}, {&(0x7f0000000300)=""/188, 0xbc}, {&(0x7f00000000c0)=""/29, 0x1d}], 0x4}}, {{0x0, 0x0, &(0x7f00000020c0)=[{&(0x7f00000004c0)=""/117, 0x75}, {&(0x7f0000000540)=""/125, 0x7d}, {&(0x7f0000000800)=""/177, 0xb1}, {&(0x7f0000001e40)=""/253, 0xfd}, {&(0x7f0000001f40)=""/134, 0x86}, {&(0x7f0000002000)=""/184, 0xb8}], 0x6, &(0x7f0000000600)=""/163, 0xa3}, 0x3}, {{&(0x7f00000006c0)=@caif=@rfm, 0x80, &(0x7f0000000980)=[{&(0x7f0000000740)=""/68, 0x44}, {&(0x7f00000007c0)=""/64, 0x40}, {0x0}, {&(0x7f00000008c0)=""/190, 0xbe}], 0x4, &(0x7f0000000a00)=""/4096, 0x1000}, 0x40}, {{&(0x7f0000001a00)=@in6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @local}}, 0x80, &(0x7f0000001d80)=[{&(0x7f0000001a80)=""/231, 0xe7}, {&(0x7f0000001b80)=""/225, 0xe1}, {&(0x7f0000002140)=""/238, 0xee}], 0x3, &(0x7f0000001dc0)=""/96, 0x60}, 0x1}], 0x4, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x0, 0x0, 0x0, 0xff, 0x0, 0x1}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) getpid() r4 = epoll_create1(0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000040)={0x60000014}) epoll_pwait(r4, &(0x7f0000000200)=[{}], 0x1, 0x0, 0x0, 0x0) 2.371268864s ago: executing program 0 (id=488): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x40, r1, 0x1, 0x1000000, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x18, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}]}]}, 0x40}}, 0x0) 1.774116048s ago: executing program 0 (id=489): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x42, 0x0) pwritev2(r0, &(0x7f00000004c0)=[{&(0x7f0000000400)="319392c2647aafaf3c", 0x9}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x4, 0xe, 0x3, 0x3, 0x6a, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7, 0x8, 0x4, 0x1}}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x0, 0x0, r2, 0x6, '\x00', r3, 0xffffffffffffffff, 0x5, 0x1, 0x2}, 0x48) (async) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0x6, 0x34, @random="abb6"}]}, 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0x11) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x98}}, 0x0) 1.485586299s ago: executing program 0 (id=490): socket(0x0, 0x80002, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa00010, &(0x7f0000000180)={[{@longad}, {}, {@bs={'bs', 0x3d, 0x4}}, {@bs={'bs', 0x3d, 0x1}}, {@partition={'partition', 0x3d, 0xf43}}, {@uid={'uid', 0x3d, r1}}, {@anchor={'anchor', 0x3d, 0x8}}, {}]}, 0x1, 0xc43, &(0x7f0000001040)="$eJzs3U9sHNd9B/DfGy3FldxWTOwqThoHm7ZIZcZy9S+mYhXuqqbZBpBlIhRzC8CVSKkLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBAhQIWMzsW3FJkbYskhIlfz429Z2deW/mvZn1jCzozQsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIOL3Xrl46nTaZsOhh9AYAOCBuDz21VNntnv+AwCPrSs7/f8/AAAAAAAAAAAAAABwUKQo4slIMXd5LU1Unzvql9p9t26PD49sX+1IqmoeqsqXP/XTZ86e+9ILQ+e7eak98wH199pn4rWxKxcbL8/enJufWliYmmyMz7SvzU5O3fMedlt/q8HqBDRuvn5r8vr1hcaZ589u2nx74P3+J44PXBh69uQz3bLjwyMjYxtF6r3la/fdkI6dRngcjiJORornvvfT1IqIInZ/LuoP9tpvdaTqxGDVifHhkaoj0+3WzGK5cbR7IoqIRk+lZvccbX8totb3QPuws2bEUtn8ssGDZffG5lrzravTU43R1vxie7E9OzOaOq0t+9OIIs6niOWIWO2/e3d9UUQtUnzn2Fq6mt/6UZ2HL1YDg3duR7GPfbwHZTsbfRHLxSNwzQ6w/iji1Ujxs3dOxLV8n6nuNV+IeLXMH0S8VeZLEan8YpyLeG+b7xGPploU8efl9b+wliar+0H3vnLpa42vzFyf7Snbva98xOfDXXeKh/R8OLIlH4wDfm+qRxGt6o6/lu7/NzsAAAAAAAAAAAAAAAAA7LUjUcSnI8Ur//ZH1bjiqMalH7sw9PsDv9w7ZvzpD9lPWfb5iFgq7m1M7uE8MHA0jab0kMcSf5zVo4g/zuP/vvWwGwMAAAAAAAAAAAAAAAAAAPCxVsRPIsWL755Iy9E7p3h75kbjSuvqdGdW2O7cv90509fX19cbqZPNnBM5l3Iu51zJuZozilw/ZzPnRM6lnMs5V3Ku5oxDuX7OZs6JnEs5l3Ou5FzNGbVcP2cz50TOpZzLOVdyruaMAzJ3LwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA46SIIn4RKb79jbUUKSKaERPRyZX+h906AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDUn4r4fqRo/EHzzrpaRKTq344T5S/nonm4zE9Gc6jMl6J5MWerylrzWw+h/exOXyrix5Giv/72nQuer39f59Odr0G89c2NT5+pdfJQd+PA+/1PHD92YWjkc0/vtJy2a8DgpfbMrduN8eGRkbGe1bV89E/2rBvIxy32putExMIbb77emp6emr//hfIrsIvqj9BCqn1cemqhWojagWjGw+n7JvWHdYNiX5XP//cixW+/++/dB37n+V+PX+p8uvOEj5//ycbz/8WtO7rH539ta738/C+f6ds9/5/sWfdi/t1IXy2ivnhzru94RH3hjTdPtm+2bkzdmJo5d+rUl4eGvnz2VN/hiPr19vRUz9KenC4AAAAAAAAAAAAAAACABycV8buRovXjtdSIiNvVeK2BC0PPnnzmUByqxlttGrf92tiVi42XZ2/OzU8tLExNNsZn2tdmJ6fu9XD1arjX+PDIvnTmQx3Z5/Yfqb88O/fGfPvGHy5uu/1o/eLVhcX51rXtN8eRKCKavWsGqwaPD49UjZ5ut2aqqqPbDqb/6PpSEf8RKa6da6TP53V5/P/WEf6bxv8vbd3RHo7//9zRjfF/n+gpWh4zpSJ+Hil+6y+ejs9X7Twad52zXO5vIsXg+c/mcnG4LNdtQ+e9Ap2RgWXZ/4kU//CLzWW74yGf3Ch7+iOd3EdAef2PRYrv/9l349fzus3vf9j++h/duqN9ev/DUz3rjm56X8Guu06+/icjxUtPvh2/Ua35vw98/0f33RsnOoU33s+xT9f/V3vWDeTj/uZedR4AAAAAAAAAAOAR1peK+NtI8cORWnohr7uXv/83uXVH+/T3vz7Vs25yb+Yr+tCFXZ9UAAAAADgg+lIRP4kUNxbfvjOGevP4757xn7+zMf5zOG3ZWv05369U7w3Yyz//6zWQjzux+24DAAAAAAAAAAAAAAAAAADAgZJSES/k+dQnqvH8kzvOp74SKV75r+dyuXS8LNedB36g+rV+eXbm5MXp6dl6LLauTk81xuZa16bKuk9FirW//myuW1Tzq3fnm+/M8b4xF/t8pBj5u27Zzlzs3bnJn9ooe7os+4lI8Z9/v7lsnpo6zx1dlT1Tlv2rSPH1f9q+7PGNsmfLst+NFD/6eqNb9mhZtvt+1E9tlH3+2myxD1cFAAAAAAAAAAAAAAAAAACAj5u+VMSfRor/vrl8Zyx/nv+/r+dj5a1v9sz3v8Xtap7/gWr+/52W72f+/+q9Aks7HRUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB5PKYp4M1LMXV5LK/3l5476pfbMrdvjwyPbVzuSqpqHqvLlT/30mbPnvvTC0PlufnD9vfbpeG3sysXGy7M35+anFhamJhvjM+1rs5NT97yH3dbfarA6AY2br9+avH59oXHm+bObNt8eeL//ieMDF4aePflMt+z48MjIWE+ZWt99H/0uaYf1h6OIv4wUz33vp+mH/RFF7P5cfMh3Z78dqToxWHVifHik6sh0uzWzWG4c7Z6IIqLRU6nZPUcP4FrsSjNiqWx+2eDBsntjc6351tXpqcZoa36xvdienRlNndaW/WlEEedTxHJErPbfvbu+KOL1SPGdY2vpn/sjDnXPwxcvj3311Jmd21HsYx/vQdnORl/EcvEIXLMDrD+K+MdI8bN3TsS/9EfUovMTX4h4tcwfRLwVneudyi/GuYj3tvke8WiqRRH/W17/C2vpnf7yftC9r1z6WuMrM9dne8p27yuP/PPhQTrg96Z6FPGj6o6/lv7Vf9cAAAAAAAAAAAAAAAAAB0gRvxYpXnz3RKrGB98ZU9yeudG40ro63RnW1x371x0zvb6+vt5InWzmnMi5lHM550rO1ZxR5Po5m2XW19cn8uelnMs5V3Ku5oxDuX7OZs6JnEs5l3Ou5FzNGbVcP2cz50TOpZzLOVdyruaMAzJ2DwAAAAAAAAAAAAAAAAAAeLwU1T8pvv2NtbTe35lfeiI6uWI+0Mfe/wcAAP//dsP5HA==") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.effective_mems\x00', 0x275a, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x410, &(0x7f0000000200)={[{@grpquota}, {@nouid32}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000f00)={0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff01}) socket(0x10, 0x803, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r5], 0x48}}, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r9, @ANYBLOB="010600000000000000000100001008000100", @ANYRES32=r7, @ANYBLOB="8800028044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b75700000000040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000f000400726f756e64726f62696e"], 0xa4}}, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000080)) 1.276445018s ago: executing program 4 (id=491): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100001040100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008000300", @ANYRES32=0x0, @ANYBLOB="2800128008000100677470001c0002800800", @ANYRES32=r0], 0x50}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) (fail_nth: 10) 910.820248ms ago: executing program 2 (id=492): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r1, 0x0, 0x0}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r2}, 0x48) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000540)=0x1, 0x4) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r3, &(0x7f0000000300), 0x20000000}, 0x20) close(r1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000005300000000000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xa, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000008c0000006a0a00ff000000002e00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="100000000000002505ff0f000000000000000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0xb, &(0x7f0000000240)=""/165, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x3b, 0x10, 0x0, 0x1e}, 0x2d) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000cc0)={0x1, @pix_mp={0x5, 0x0, 0xa0363159, 0x8, 0x0, [{}, {}, {}, {}, {}, {}, {0x1000}], 0x0, 0x0, 0x0, 0x2}}) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0) r6 = syz_open_dev$video4linux(&(0x7f0000000040), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r6, 0xc0085666, &(0x7f0000000180)) syz_open_procfs(0x0, &(0x7f0000000040)='oom_adj\x00') socketpair(0x23, 0x6, 0x2, &(0x7f0000000000)) creat(0x0, 0x0) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) write$cgroup_int(r7, &(0x7f00000000c0)=0x3, 0x12) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a800000013000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008000d00280a000060001980140004006b2e4f2fdd8733dc1c1639228919eb5e2efc02007b5d2f215d290000140005004af57c15cd92d389e606fce6a0eebda514000400f4d8d35abbd4fab3a3614be8a496bd8f140005008ebcd2c7e1cf0421ab20db4c32c4330605001000040000001400030076657468315f6d616376746170000000040014"], 0xa8}}, 0x0) 111.132691ms ago: executing program 4 (id=493): ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000900)=ANY=[@ANYRESOCT=r0, @ANYRES64], &(0x7f0000000240)='GPL\x00', 0x10, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0000}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r1}, 0x10) syz_usb_connect(0x6, 0x24, &(0x7f00000003c0)=ANY=[@ANYRES64=r1, @ANYRESOCT=r2, @ANYRES64, @ANYRESDEC, @ANYBLOB="5668e330659d57f7e6748257b6ffdaff2270b8fd3bbc83d1eb475a43995f46707ef938646ad073f3de672984f69246c41c460d88486c5bede378d96f5b3c5f2edff750018d16e7649a7cf79e9b5d5d6300b028252495a0dda84f51aafec01710a49ba2bcdf6c66dceea7522d030e03a77e85853a1b4059af7376a096cc090533e1637cd4a0c15da23c5d1526fcc51aab8beaa4d74eea1704cc0d77a1d69412a2adc1d5d1b07fd1ed3e9474ccba0111e986ff4bde1af9d92bcc7ef68d", @ANYRESDEC=0x0, @ANYRES32=0x0], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000001980), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r3, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f00000019c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000002000000140002000061746164765f736c6166655f3100000900010073797a3200000000"], 0x34}}, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRESHEX=r3, @ANYRES16, @ANYBLOB="ac41540219c55eb16276f45d7a8371fda1b7ba9136966771c6"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) socket(0x23, 0x5, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$packet(0x11, 0x0, 0x300) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$can_raw(0x1d, 0x3, 0x1) r5 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r5, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 0s ago: executing program 1 (id=494): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x2, 0x3, 0x0, 0x0, 0x2}, 0x10}, 0x1, 0x7, 0x34000}, 0x0) kernel console output (not intermixed with test programs): c10 [ 354.129784][ T6489] do_syscall_64+0xcd/0x1e0 [ 354.134995][ T6489] ? clear_bhb_loop+0x25/0x80 [ 354.140832][ T6489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.147043][ T6489] RIP: 0033:0x7f67065773b9 [ 354.151970][ T6489] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 354.172921][ T6489] RSP: 002b:00007f67073f2048 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 354.181897][ T6489] RAX: ffffffffffffffda RBX: 00007f6706705f80 RCX: 00007f67065773b9 [ 354.190096][ T6489] RDX: 0000000000000002 RSI: 0000000020001400 RDI: 0000000000000003 [ 354.198390][ T6489] RBP: 00007f67073f20a0 R08: 0000000000000000 R09: 0000000000000000 [ 354.208260][ T6489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 354.217955][ T6489] R13: 000000000000004d R14: 00007f6706705f80 R15: 00007ffcd5e9f5f8 [ 354.226729][ T6489] [ 354.822565][ T1616] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 355.052381][ T1616] usb 3-1: not running at top speed; connect to a high speed hub [ 355.126311][ T1616] usb 3-1: config 9 has an invalid interface number: 134 but max is 2 [ 355.138960][ T1616] usb 3-1: config 9 has an invalid interface number: 223 but max is 2 [ 355.151952][ T1616] usb 3-1: config 9 has no interface number 1 [ 355.159307][ T1616] usb 3-1: config 9 has no interface number 2 [ 355.169040][ T1616] usb 3-1: config 9 interface 134 altsetting 4 endpoint 0x89 has invalid maxpacket 512, setting to 64 [ 355.182198][ T1616] usb 3-1: config 9 interface 134 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 355.200288][ T1616] usb 3-1: config 9 interface 134 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 355.214155][ T1616] usb 3-1: config 9 interface 134 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 355.225855][ T1616] usb 3-1: config 9 interface 134 altsetting 4 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 355.240343][ T1616] usb 3-1: config 9 interface 134 altsetting 4 has a duplicate endpoint with address 0x4, skipping [ 355.240515][ T1616] usb 3-1: config 9 interface 223 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 355.240649][ T1616] usb 3-1: config 9 interface 223 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 355.240798][ T1616] usb 3-1: config 9 interface 223 altsetting 3 has a duplicate endpoint with address 0x9, skipping [ 355.240946][ T1616] usb 3-1: config 9 interface 223 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 355.241084][ T1616] usb 3-1: config 9 interface 223 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 355.241222][ T1616] usb 3-1: config 9 interface 223 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 355.241371][ T1616] usb 3-1: config 9 interface 223 altsetting 3 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 355.241547][ T1616] usb 3-1: config 9 interface 223 altsetting 3 has a duplicate endpoint with address 0xD, skipping [ 355.241700][ T1616] usb 3-1: config 9 interface 223 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 355.241841][ T1616] usb 3-1: config 9 interface 223 altsetting 3 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 355.242017][ T1616] usb 3-1: config 9 interface 134 has no altsetting 0 [ 355.242145][ T1616] usb 3-1: config 9 interface 223 has no altsetting 0 [ 355.242272][ T1616] usb 3-1: config 9 interface 0 has no altsetting 0 [ 355.306725][ T6504] loop4: detected capacity change from 0 to 512 [ 355.320111][ T6504] journal_path: Lookup failure for './file0' [ 355.320324][ T6504] EXT4-fs: error: could not find journal device path [ 355.324744][ T1616] usb 3-1: New USB device found, idVendor=19d2, idProduct=1596, bcdDevice=2d.b8 [ 355.324919][ T1616] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.325054][ T1616] usb 3-1: Product: Ă稾㵬볶퐷ရ綒첛Ů⦻節ұ繲庤滆촒폤⎑ᆣ»⽎삙唍鱑正煡痜⠎䛿㬿䘺굲რ펌뉎⢬ዩ叼⾼앑톤ꔰ㼥̤㳌ꔨ몾流呮索젤 [ 355.325216][ T1616] usb 3-1: Manufacturer: 俌 [ 355.325324][ T1616] usb 3-1: SerialNumber: ࠠ [ 355.657946][ T1616] option 3-1:9.134: GSM modem (1-port) converter detected [ 355.797404][ T1616] usb 3-1: USB disconnect, device number 4 [ 355.802702][ T1616] option 3-1:9.134: device disconnected [ 355.867651][ T6508] netlink: 'syz.0.315': attribute type 1 has an invalid length. [ 355.993385][ T5290] usb 2-1: unable to get BOS descriptor or descriptor too short [ 356.001819][ T5290] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 356.023129][ T6504] loop4: detected capacity change from 0 to 2048 [ 356.026725][ T5290] usb 2-1: can't read configurations, error -71 [ 356.126218][ T6504] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 356.181195][ T6504] NILFS (loop4): segment count 8142508126285856831 exceeds upper limit (1152921504606846975 segments) [ 356.600866][ T6513] loop1: detected capacity change from 0 to 1024 [ 356.876564][ T6513] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 356.912869][ T6524] 9pnet_fd: Insufficient options for proto=fd [ 357.015789][ T6513] FAULT_INJECTION: forcing a failure. [ 357.015789][ T6513] name failslab, interval 1, probability 0, space 0, times 0 [ 357.031153][ T6513] CPU: 1 UID: 0 PID: 6513 Comm: syz.1.316 Not tainted 6.11.0-rc1-syzkaller-00044-g22f546873149 #0 [ 357.045894][ T6513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 357.059236][ T6513] Call Trace: [ 357.063749][ T6513] [ 357.067210][ T6513] dump_stack_lvl+0x216/0x2d0 [ 357.072628][ T6513] dump_stack+0x1e/0x30 [ 357.078201][ T6513] should_fail_ex+0x74e/0x800 [ 357.084629][ T6513] should_failslab+0x17f/0x210 [ 357.090602][ T6513] kmem_cache_alloc_noprof+0xe2/0xb20 [ 357.097564][ T6513] ? getname_flags+0x102/0xa30 [ 357.103947][ T6513] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 357.111527][ T6513] getname_flags+0x102/0xa30 [ 357.116785][ T6513] ? kmsan_get_metadata+0x13e/0x1c0 [ 357.123715][ T6513] user_path_at+0x45/0x390 [ 357.128776][ T6513] ? do_fchownat+0x47/0x360 [ 357.135004][ T6513] ? __x64_sys_lchown+0x9c/0xf0 [ 357.141149][ T6513] do_fchownat+0xc0/0x360 [ 357.146023][ T6513] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 357.152122][ T6513] __x64_sys_lchown+0x9c/0xf0 [ 357.157289][ T6513] x64_sys_call+0x2078/0x3c10 [ 357.162270][ T6513] do_syscall_64+0xcd/0x1e0 [ 357.167030][ T6513] ? clear_bhb_loop+0x25/0x80 [ 357.171959][ T6513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.178151][ T6513] RIP: 0033:0x7ff246f773b9 [ 357.182785][ T6513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 357.203256][ T6513] RSP: 002b:00007ff247cd0048 EFLAGS: 00000246 ORIG_RAX: 000000000000005e [ 357.214865][ T6513] RAX: ffffffffffffffda RBX: 00007ff247105f80 RCX: 00007ff246f773b9 [ 357.223984][ T6513] RDX: 000000000000ee01 RSI: 000000000000ee00 RDI: 00000000200017c0 [ 357.232810][ T6513] RBP: 00007ff247cd00a0 R08: 0000000000000000 R09: 0000000000000000 [ 357.244831][ T6513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 357.254191][ T6513] R13: 000000000000000b R14: 00007ff247105f80 R15: 00007ffe1e0509c8 [ 357.263953][ T6513] [ 357.680263][ T5190] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.718218][ T6531] FAULT_INJECTION: forcing a failure. [ 357.718218][ T6531] name failslab, interval 1, probability 0, space 0, times 0 [ 357.733657][ T6531] CPU: 1 UID: 0 PID: 6531 Comm: syz.4.322 Not tainted 6.11.0-rc1-syzkaller-00044-g22f546873149 #0 [ 357.748473][ T6531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 357.761728][ T6531] Call Trace: [ 357.765187][ T6531] [ 357.768283][ T6531] dump_stack_lvl+0x216/0x2d0 [ 357.773218][ T6531] dump_stack+0x1e/0x30 [ 357.777606][ T6531] should_fail_ex+0x74e/0x800 [ 357.782572][ T6531] should_failslab+0x17f/0x210 [ 357.787616][ T6531] __kmalloc_node_track_caller_noprof+0x177/0xf90 [ 357.794353][ T6531] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 357.800466][ T6531] ? nf_ct_ext_add+0x24a/0x4a0 [ 357.805469][ T6531] ? kmsan_get_metadata+0x13e/0x1c0 [ 357.811132][ T6531] krealloc_noprof+0x92/0x1d0 [ 357.816167][ T6531] nf_ct_ext_add+0x24a/0x4a0 [ 357.821124][ T6531] init_conntrack+0xf5a/0x1b70 [ 357.826171][ T6531] ? __siphash_unaligned+0x5d1/0xa40 [ 357.832779][ T6531] nf_conntrack_in+0x197b/0x30d0 [ 357.838278][ T6531] ipv6_conntrack_local+0x35/0x40 [ 357.844858][ T6531] ? __pfx_ipv6_conntrack_local+0x10/0x10 [ 357.851325][ T6531] nf_hook_slow+0xf4/0x400 [ 357.856151][ T6531] __ip6_local_out+0x5ac/0x640 [ 357.861703][ T6531] ? __pfx_dst_output+0x10/0x10 [ 357.866843][ T6531] ip6_local_out+0x4c/0x210 [ 357.871627][ T6531] ip6_push_pending_frames+0x1f9/0x560 [ 357.877379][ T6531] l2tp_ip6_push_pending_frames+0x183/0x220 [ 357.883568][ T6531] l2tp_ip6_sendmsg+0x2337/0x26b0 [ 357.888879][ T6531] ? kmsan_get_metadata+0x13e/0x1c0 [ 357.894411][ T6531] ? __pfx_udp_sendmsg+0x10/0x10 [ 357.899625][ T6531] ? __pfx_l2tp_ip6_sendmsg+0x10/0x10 [ 357.905280][ T6531] inet_sendmsg+0x25a/0x280 [ 357.910049][ T6531] ? __pfx_inet_sendmsg+0x10/0x10 [ 357.915625][ T6531] __sock_sendmsg+0x267/0x380 [ 357.921142][ T6531] ____sys_sendmsg+0x903/0xb60 [ 357.926586][ T6531] ___sys_sendmsg+0x28d/0x3c0 [ 357.931992][ T6531] ? kmsan_get_metadata+0x13e/0x1c0 [ 357.938857][ T6531] ? __fget_files+0x4fe/0x5d0 [ 357.945384][ T6531] ? kmsan_get_metadata+0x13e/0x1c0 [ 357.952718][ T6531] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 357.961497][ T6531] __sys_sendmmsg+0x3c4/0x950 [ 357.966843][ T6531] ? vfs_write+0xf45/0x1550 [ 357.971629][ T6531] ? kmsan_get_metadata+0x13e/0x1c0 [ 357.977219][ T6531] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 357.984425][ T6531] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 357.991121][ T6531] __x64_sys_sendmmsg+0xbc/0x120 [ 357.996348][ T6531] x64_sys_call+0x369d/0x3c10 [ 358.001333][ T6531] do_syscall_64+0xcd/0x1e0 [ 358.006143][ T6531] ? clear_bhb_loop+0x25/0x80 [ 358.011072][ T6531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.017279][ T6531] RIP: 0033:0x7f0c05b773b9 [ 358.021914][ T6531] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 358.042854][ T6531] RSP: 002b:00007f0c069f8048 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 358.051943][ T6531] RAX: ffffffffffffffda RBX: 00007f0c05d05f80 RCX: 00007f0c05b773b9 [ 358.062613][ T6531] RDX: 0000000000000001 RSI: 0000000020003480 RDI: 0000000000000003 [ 358.072146][ T6531] RBP: 00007f0c069f80a0 R08: 0000000000000000 R09: 0000000000000000 [ 358.080382][ T6531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 358.088578][ T6531] R13: 000000000000000b R14: 00007f0c05d05f80 R15: 00007ffe706f0f28 [ 358.096799][ T6531] [ 359.151075][ T6548] FAULT_INJECTION: forcing a failure. [ 359.151075][ T6548] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 359.164954][ T6548] CPU: 1 UID: 0 PID: 6548 Comm: syz.1.323 Not tainted 6.11.0-rc1-syzkaller-00044-g22f546873149 #0 [ 359.176640][ T6548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 359.188154][ T6548] Call Trace: [ 359.191874][ T6548] [ 359.195091][ T6548] dump_stack_lvl+0x216/0x2d0 [ 359.201103][ T6548] dump_stack+0x1e/0x30 [ 359.206550][ T6548] should_fail_ex+0x74e/0x800 [ 359.211732][ T6548] should_fail+0x2a/0x40 [ 359.217250][ T6548] should_fail_usercopy+0x2e/0x40 [ 359.223435][ T6548] _copy_from_user+0x33/0x160 [ 359.228439][ T6548] kstrtouint_from_user+0x75/0x140 [ 359.233879][ T6548] ? security_file_permission+0x11a/0x150 [ 359.239933][ T6548] ? proc_fail_nth_write+0x43/0x300 [ 359.245422][ T6548] ? vfs_write+0x493/0x1550 [ 359.250206][ T6548] proc_fail_nth_write+0x62/0x300 [ 359.255871][ T6548] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 359.262142][ T6548] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 359.268071][ T6548] vfs_write+0x493/0x1550 [ 359.273219][ T6548] ? kmsan_get_metadata+0x13e/0x1c0 [ 359.280660][ T6548] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 359.287322][ T6548] ksys_write+0x20f/0x4c0 [ 359.291933][ T6548] __x64_sys_write+0x93/0xe0 [ 359.297352][ T6548] x64_sys_call+0x3490/0x3c10 [ 359.303395][ T6548] do_syscall_64+0xcd/0x1e0 [ 359.308704][ T6548] ? clear_bhb_loop+0x25/0x80 [ 359.313685][ T6548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.321042][ T6548] RIP: 0033:0x7ff246f75e9f [ 359.325793][ T6548] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8d 02 00 48 [ 359.345710][ T6548] RSP: 002b:00007ff247cd0040 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 359.354434][ T6548] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff246f75e9f [ 359.362655][ T6548] RDX: 0000000000000001 RSI: 00007ff247cd00b0 RDI: 0000000000000005 [ 359.370856][ T6548] RBP: 00007ff247cd00a0 R08: 0000000000000000 R09: 0000000000000000 [ 359.380981][ T6548] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 359.391570][ T6548] R13: 000000000000000b R14: 00007ff247105f80 R15: 00007ffe1e0509c8 [ 359.403625][ T6548] [ 359.729495][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 359.729578][ T29] audit: type=1326 audit(1722434742.913:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6549 comm="syz.4.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c05b773b9 code=0x7ffc0000 [ 359.761125][ T29] audit: type=1326 audit(1722434742.913:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6549 comm="syz.4.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c05b773b9 code=0x7ffc0000 [ 359.785859][ T29] audit: type=1326 audit(1722434742.933:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6549 comm="syz.4.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0c05b75d50 code=0x7ffc0000 [ 359.819792][ T29] audit: type=1326 audit(1722434742.933:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6549 comm="syz.4.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0c05b76fbb code=0x7ffc0000 [ 359.845058][ T29] audit: type=1326 audit(1722434742.933:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6549 comm="syz.4.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0c05b76fbb code=0x7ffc0000 [ 359.869004][ T29] audit: type=1326 audit(1722434742.933:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6549 comm="syz.4.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0c05b76fbb code=0x7ffc0000 [ 359.892406][ T29] audit: type=1326 audit(1722434742.933:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6549 comm="syz.4.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0c05b76fbb code=0x7ffc0000 [ 360.388373][ T29] audit: type=1326 audit(1722434743.493:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6549 comm="syz.4.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0c05b76fbb code=0x7ffc0000 [ 360.416682][ T29] audit: type=1326 audit(1722434743.603:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6549 comm="syz.4.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0c05b76fbb code=0x7ffc0000 [ 360.455525][ T1616] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 360.470483][ T6538] loop3: detected capacity change from 0 to 32768 [ 360.482062][ T6538] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.324 (6538) [ 360.504396][ T6538] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 360.522376][ T6538] BTRFS info (device loop3): using sha256 (sha256-generic) checksum algorithm [ 360.537244][ T6538] BTRFS info (device loop3): using free-space-tree [ 360.547408][ T29] audit: type=1326 audit(1722434743.723:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6549 comm="syz.4.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0c05b76fbb code=0x7ffc0000 [ 360.885224][ T6538] BTRFS info (device loop3): checking UUID tree [ 361.168571][ T1616] usb 5-1: unable to get BOS descriptor or descriptor too short [ 361.217316][ T6575] netlink: 'syz.2.329': attribute type 1 has an invalid length. [ 361.258170][ T5290] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 361.265709][ T1616] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 361.275568][ T1616] usb 5-1: can't read configurations, error -71 [ 361.294597][ T5192] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 361.496738][ T5290] usb 2-1: Using ep0 maxpacket: 32 [ 361.537328][ T5290] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 361.605720][ T5290] usb 2-1: New USB device found, idVendor=05ac, idProduct=0246, bcdDevice= 0.40 [ 361.616166][ T5290] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.627784][ T5290] usb 2-1: Product: syz [ 361.632310][ T5290] usb 2-1: Manufacturer: syz [ 361.637957][ T5290] usb 2-1: SerialNumber: syz [ 361.707793][ T5290] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input7 [ 361.799529][ T6580] 9pnet_fd: Insufficient options for proto=fd [ 361.915536][ T4608] bcm5974 2-1:1.0: could not read from device [ 361.970072][ T4608] bcm5974 2-1:1.0: could not read from device [ 362.010924][ T5290] usb 2-1: USB disconnect, device number 16 [ 362.039818][ T4608] bcm5974 2-1:1.0: could not read from device [ 363.419347][ T6608] capability: warning: `syz.2.337' uses deprecated v2 capabilities in a way that may be insecure [ 363.659673][ T5290] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 363.724233][ T6612] process 'syz.1.338' launched '/dev/fd/3' with NULL argv: empty string added [ 363.925199][ T5290] usb 4-1: not running at top speed; connect to a high speed hub [ 364.025973][ T5290] usb 4-1: config 9 has an invalid interface number: 134 but max is 2 [ 364.036592][ T5290] usb 4-1: config 9 has an invalid interface number: 223 but max is 2 [ 364.049299][ T5290] usb 4-1: config 9 has no interface number 1 [ 364.055622][ T5290] usb 4-1: config 9 has no interface number 2 [ 364.063605][ T5290] usb 4-1: config 9 interface 134 altsetting 4 endpoint 0x89 has invalid maxpacket 512, setting to 64 [ 364.074978][ T5290] usb 4-1: config 9 interface 134 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 364.086205][ T5290] usb 4-1: config 9 interface 134 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 364.100497][ T5290] usb 4-1: config 9 interface 134 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 364.112229][ T5290] usb 4-1: config 9 interface 134 altsetting 4 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 364.127732][ T5290] usb 4-1: config 9 interface 134 altsetting 4 has a duplicate endpoint with address 0x4, skipping [ 364.148916][ T5290] usb 4-1: config 9 interface 223 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 364.160319][ T5290] usb 4-1: config 9 interface 223 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 364.171844][ T5290] usb 4-1: config 9 interface 223 altsetting 3 has a duplicate endpoint with address 0x9, skipping [ 364.184643][ T5290] usb 4-1: config 9 interface 223 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 364.198213][ T5290] usb 4-1: config 9 interface 223 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 364.213760][ T5290] usb 4-1: config 9 interface 223 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 364.228752][ T5290] usb 4-1: config 9 interface 223 altsetting 3 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 364.240263][ T5290] usb 4-1: config 9 interface 223 altsetting 3 has a duplicate endpoint with address 0xD, skipping [ 364.255512][ T5290] usb 4-1: config 9 interface 223 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 364.268777][ T5290] usb 4-1: config 9 interface 223 altsetting 3 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 364.280458][ T5290] usb 4-1: config 9 interface 134 has no altsetting 0 [ 364.287703][ T5290] usb 4-1: config 9 interface 223 has no altsetting 0 [ 364.294757][ T5290] usb 4-1: config 9 interface 0 has no altsetting 0 [ 364.485818][ T5290] usb 4-1: New USB device found, idVendor=19d2, idProduct=1596, bcdDevice=2d.b8 [ 364.496744][ T5290] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.505494][ T5290] usb 4-1: Product: Ă稾㵬볶퐷ရ綒첛Ů⦻節ұ繲庤滆촒폤⎑ᆣ»⽎삙唍鱑正煡痜⠎䛿㬿䘺굲რ펌뉎⢬ዩ叼⾼앑톤ꔰ㼥̤㳌ꔨ몾流呮索젤 [ 364.524471][ T5290] usb 4-1: Manufacturer: 俌 [ 364.529382][ T5290] usb 4-1: SerialNumber: ࠠ [ 365.096521][ T5290] option 4-1:9.134: GSM modem (1-port) converter detected [ 365.370069][ T5290] usb 4-1: USB disconnect, device number 25 [ 365.385899][ T5290] option 4-1:9.134: device disconnected [ 365.564533][ T6626] loop1: detected capacity change from 0 to 64 [ 365.666192][ T6626] MINIX-fs: bad superblock [ 365.828152][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 365.828232][ T29] audit: type=1326 audit(1722434749.033:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6628 comm="syz.4.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c05b773b9 code=0x7ffc0000 [ 365.844484][ T6619] loop0: detected capacity change from 0 to 32768 [ 365.860216][ T29] audit: type=1326 audit(1722434749.033:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6628 comm="syz.4.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c05b773b9 code=0x7ffc0000 [ 365.896098][ T29] audit: type=1326 audit(1722434749.043:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6628 comm="syz.4.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0c05b75d50 code=0x7ffc0000 [ 365.904178][ T6619] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.340 (6619) [ 365.927836][ T29] audit: type=1326 audit(1722434749.063:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6628 comm="syz.4.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0c05b76fbb code=0x7ffc0000 [ 365.971715][ T29] audit: type=1326 audit(1722434749.063:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6628 comm="syz.4.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0c05b76fbb code=0x7ffc0000 [ 366.050306][ T6619] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 366.062004][ T6619] BTRFS info (device loop0): using sha256 (sha256-generic) checksum algorithm [ 366.074869][ T6619] BTRFS info (device loop0): using free-space-tree [ 366.117372][ T29] audit: type=1326 audit(1722434749.273:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6628 comm="syz.4.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0c05b76fbb code=0x7ffc0000 [ 366.142324][ T29] audit: type=1326 audit(1722434749.273:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6628 comm="syz.4.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0c05b76fbb code=0x7ffc0000 [ 366.171722][ T29] audit: type=1326 audit(1722434749.383:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6628 comm="syz.4.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0c05b76fbb code=0x7ffc0000 [ 366.258582][ T29] audit: type=1326 audit(1722434749.463:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6628 comm="syz.4.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0c05b76fbb code=0x7ffc0000 [ 366.287828][ T5252] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 366.336065][ T29] audit: type=1326 audit(1722434749.543:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6628 comm="syz.4.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0c05b76fbb code=0x7ffc0000 [ 366.412644][ T6619] BTRFS info (device loop0): checking UUID tree [ 366.438622][ T6646] FAULT_INJECTION: forcing a failure. [ 366.438622][ T6646] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 366.453448][ T6646] CPU: 1 UID: 0 PID: 6646 Comm: syz.3.344 Not tainted 6.11.0-rc1-syzkaller-00044-g22f546873149 #0 [ 366.465043][ T6646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 366.475340][ T6646] Call Trace: [ 366.478800][ T6646] [ 366.481930][ T6646] dump_stack_lvl+0x216/0x2d0 [ 366.487259][ T6646] dump_stack+0x1e/0x30 [ 366.491694][ T6646] should_fail_ex+0x74e/0x800 [ 366.496712][ T6646] should_fail_alloc_page+0x235/0x2b0 [ 366.502430][ T6646] __alloc_pages_noprof+0x33b/0xe70 [ 366.507960][ T6646] alloc_pages_mpol_noprof+0x299/0x990 [ 366.514505][ T6646] ? kmsan_get_metadata+0x13e/0x1c0 [ 366.521968][ T6646] alloc_pages_noprof+0x1bf/0x1e0 [ 366.527767][ T6646] __pmd_alloc+0x58/0x9e0 [ 366.533763][ T6646] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 366.541539][ T6646] handle_mm_fault+0x15d2/0xe1b0 [ 366.549809][ T6646] ? mt_find+0x164d/0x1910 [ 366.557983][ T6646] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 366.565983][ T6646] exc_page_fault+0x29f/0x700 [ 366.571002][ T6646] asm_exc_page_fault+0x2b/0x30 [ 366.576120][ T6646] RIP: 0010:rep_movs_alternative+0x13/0x70 [ 366.582253][ T6646] Code: cc cc cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 83 f9 40 73 40 83 f9 08 73 21 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 0f [ 366.602263][ T6646] RSP: 0018:ffff888034bb3ae0 EFLAGS: 00050202 [ 366.608616][ T6646] RAX: ffffffff86177467 RBX: ffff888117cc2c00 RCX: 0000000000000001 [ 366.616827][ T6646] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffff888034bb3b60 [ 366.625120][ T6646] RBP: ffff888034bb3b10 R08: ffffffff8617744d R09: 0000000000000000 [ 366.635585][ T6646] R10: ffff8880343b3b60 R11: 00000000abcd0100 R12: 0000000020000000 [ 366.647802][ T6646] R13: 0000000020000001 R14: ffff888034bb3b60 R15: 0000000000000001 [ 366.656281][ T6646] ? _copy_from_user+0x9d/0x160 [ 366.664164][ T6646] ? _copy_from_user+0xb7/0x160 [ 366.669627][ T6646] ? _copy_from_user+0xcb/0x160 [ 366.675667][ T6646] do_ip_setsockopt+0x4e8/0x48d0 [ 366.681158][ T6646] ? kmsan_get_metadata+0x13e/0x1c0 [ 366.686869][ T6646] ip_setsockopt+0x105/0x210 [ 366.691735][ T6646] ? __pfx_ip_setsockopt+0x10/0x10 [ 366.697150][ T6646] tcp_setsockopt+0x153/0x190 [ 366.702140][ T6646] ? __pfx_tcp_setsockopt+0x10/0x10 [ 366.707638][ T6646] sock_common_setsockopt+0xf9/0x140 [ 366.713843][ T6646] do_sock_setsockopt+0x4bb/0x7d0 [ 366.719801][ T6646] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 366.727099][ T6646] __sys_setsockopt+0x33a/0x4b0 [ 366.732551][ T6646] __x64_sys_setsockopt+0xe8/0x170 [ 366.738197][ T6646] x64_sys_call+0x343c/0x3c10 [ 366.743821][ T6646] do_syscall_64+0xcd/0x1e0 [ 366.749538][ T6646] ? clear_bhb_loop+0x25/0x80 [ 366.757003][ T6646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.764181][ T6646] RIP: 0033:0x7f67065773b9 [ 366.768983][ T6646] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 366.790633][ T6646] RSP: 002b:00007f67073f2048 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 366.800073][ T6646] RAX: ffffffffffffffda RBX: 00007f6706705f80 RCX: 00007f67065773b9 [ 366.809894][ T6646] RDX: 0000000000000018 RSI: 0000000000000000 RDI: 0000000000000003 [ 366.818455][ T6646] RBP: 00007f67073f20a0 R08: 0000000000000002 R09: 0000000000000000 [ 366.828144][ T6646] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 366.837408][ T6646] R13: 000000000000004d R14: 00007f6706705f80 R15: 00007ffcd5e9f5f8 [ 366.846625][ T6646] [ 367.290654][ T5187] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 367.685314][ T6659] loop2: detected capacity change from 0 to 512 [ 367.709797][ T6659] EXT4-fs: quotafile must be on filesystem root [ 368.282413][ T6659] loop2: detected capacity change from 0 to 2048 [ 368.387349][ T6668] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 369.062829][ T5252] usb 5-1: unable to get BOS descriptor or descriptor too short [ 369.104504][ T5252] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 369.116678][ T5252] usb 5-1: can't read configurations, error -71 [ 369.268111][ T8] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 369.508385][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 369.540209][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 369.567996][ T8] usb 3-1: New USB device found, idVendor=1044, idProduct=800d, bcdDevice=57.5c [ 369.582049][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.591619][ T8] usb 3-1: Product: syz [ 369.596593][ T8] usb 3-1: Manufacturer: syz [ 369.603024][ T8] usb 3-1: SerialNumber: syz [ 369.664812][ T8] usb 3-1: config 0 descriptor?? [ 369.686142][ T8] rndis_host 3-1:0.0: invalid descriptor buffer length [ 369.693537][ T8] usb 3-1: bad CDC descriptors [ 369.792427][ T10] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 369.921317][ T1616] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 369.950446][ T44] usb 3-1: USB disconnect, device number 5 [ 370.052224][ T10] usb 4-1: not running at top speed; connect to a high speed hub [ 370.094432][ T10] usb 4-1: config 9 has an invalid interface number: 134 but max is 2 [ 370.103263][ T10] usb 4-1: config 9 has an invalid interface number: 223 but max is 2 [ 370.111838][ T10] usb 4-1: config 9 has no interface number 1 [ 370.118245][ T10] usb 4-1: config 9 has no interface number 2 [ 370.118537][ T1616] usb 2-1: Using ep0 maxpacket: 16 [ 370.124499][ T10] usb 4-1: config 9 interface 134 altsetting 4 endpoint 0x89 has invalid maxpacket 512, setting to 64 [ 370.124679][ T10] usb 4-1: config 9 interface 134 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 370.152519][ T10] usb 4-1: config 9 interface 134 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 370.163843][ T1616] usb 2-1: config index 0 descriptor too short (expected 42672, got 176) [ 370.163928][ T10] usb 4-1: config 9 interface 134 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 370.172709][ T1616] usb 2-1: config 201 has too many interfaces: 77, using maximum allowed: 32 [ 370.172853][ T1616] usb 2-1: config 201 has an invalid descriptor of length 0, skipping remainder of the config [ 370.172977][ T1616] usb 2-1: config 201 has 1 interface, different from the descriptor's value: 77 [ 370.173112][ T1616] usb 2-1: config 201 has no interface number 0 [ 370.173340][ T1616] usb 2-1: config 201 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 370.248104][ T1616] usb 2-1: string descriptor 0 read error: -22 [ 370.248688][ T10] usb 4-1: config 9 interface 134 altsetting 4 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 370.256130][ T1616] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 370.266494][ T10] usb 4-1: config 9 interface 134 altsetting 4 has a duplicate endpoint with address 0x4, skipping [ 370.266673][ T10] usb 4-1: config 9 interface 223 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 370.276074][ T1616] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.290593][ T10] usb 4-1: config 9 interface 223 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 370.323648][ T10] usb 4-1: config 9 interface 223 altsetting 3 has a duplicate endpoint with address 0x9, skipping [ 370.337727][ T10] usb 4-1: config 9 interface 223 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 370.349284][ T10] usb 4-1: config 9 interface 223 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 370.360866][ T10] usb 4-1: config 9 interface 223 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 370.372125][ T10] usb 4-1: config 9 interface 223 altsetting 3 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 370.383605][ T10] usb 4-1: config 9 interface 223 altsetting 3 has a duplicate endpoint with address 0xD, skipping [ 370.397976][ T10] usb 4-1: config 9 interface 223 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 370.411254][ T10] usb 4-1: config 9 interface 223 altsetting 3 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 370.422633][ T10] usb 4-1: config 9 interface 134 has no altsetting 0 [ 370.430599][ T10] usb 4-1: config 9 interface 223 has no altsetting 0 [ 370.438270][ T10] usb 4-1: config 9 interface 0 has no altsetting 0 [ 370.506068][ T10] usb 4-1: New USB device found, idVendor=19d2, idProduct=1596, bcdDevice=2d.b8 [ 370.518540][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.529368][ T10] usb 4-1: Product: Ă稾㵬볶퐷ရ綒첛Ů⦻節ұ繲庤滆촒폤⎑ᆣ»⽎삙唍鱑正煡痜⠎䛿㬿䘺굲რ펌뉎⢬ዩ叼⾼앑톤ꔰ㼥̤㳌ꔨ몾流呮索젤 [ 370.548227][ T10] usb 4-1: Manufacturer: 俌 [ 370.553242][ T10] usb 4-1: SerialNumber: ࠠ [ 371.065601][ T10] option 4-1:9.134: GSM modem (1-port) converter detected [ 371.269636][ T10] usb 4-1: USB disconnect, device number 26 [ 371.280183][ T10] option 4-1:9.134: device disconnected [ 372.379389][ T6694] loop4: detected capacity change from 0 to 32768 [ 372.400322][ T6694] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.357 (6694) [ 372.429823][ T1616] usb 2-1: USB disconnect, device number 17 [ 372.466951][ T6694] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 372.477847][ T6694] BTRFS info (device loop4): using sha256 (sha256-generic) checksum algorithm [ 372.495028][ T6694] BTRFS info (device loop4): using free-space-tree [ 372.824466][ T6694] BTRFS info (device loop4): checking UUID tree [ 373.168650][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 373.168723][ T29] audit: type=1326 audit(1722434756.413:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6731 comm="syz.1.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff246f773b9 code=0x7ffc0000 [ 373.200716][ T29] audit: type=1326 audit(1722434756.413:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6731 comm="syz.1.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff246f773b9 code=0x7ffc0000 [ 373.224339][ T6135] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 373.227017][ T29] audit: type=1326 audit(1722434756.413:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6731 comm="syz.1.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff246f75d50 code=0x7ffc0000 [ 373.262203][ T29] audit: type=1326 audit(1722434756.413:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6731 comm="syz.1.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff246f76fbb code=0x7ffc0000 [ 373.285931][ T29] audit: type=1326 audit(1722434756.413:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6731 comm="syz.1.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff246f76fbb code=0x7ffc0000 [ 373.308598][ T29] audit: type=1326 audit(1722434756.413:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6731 comm="syz.1.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff246f76fbb code=0x7ffc0000 [ 373.331584][ T29] audit: type=1326 audit(1722434756.413:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6731 comm="syz.1.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff246f76fbb code=0x7ffc0000 [ 373.355194][ T29] audit: type=1326 audit(1722434756.553:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6731 comm="syz.1.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff246f76fbb code=0x7ffc0000 [ 373.404875][ T29] audit: type=1326 audit(1722434756.633:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6731 comm="syz.1.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff246f76fbb code=0x7ffc0000 [ 373.445653][ T6734] FAULT_INJECTION: forcing a failure. [ 373.445653][ T6734] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 373.459863][ T6734] CPU: 1 UID: 0 PID: 6734 Comm: syz.3.365 Not tainted 6.11.0-rc1-syzkaller-00044-g22f546873149 #0 [ 373.471287][ T6734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 373.482275][ T6734] Call Trace: [ 373.486367][ T6734] [ 373.489819][ T6734] dump_stack_lvl+0x216/0x2d0 [ 373.496248][ T6734] dump_stack+0x1e/0x30 [ 373.501385][ T6734] should_fail_ex+0x74e/0x800 [ 373.507116][ T6734] should_fail+0x2a/0x40 [ 373.512176][ T6734] should_fail_usercopy+0x2e/0x40 [ 373.517508][ T6734] _copy_from_user+0x33/0x160 [ 373.522459][ T6734] __sys_bpf+0x2dc/0xd90 [ 373.527007][ T6734] __x64_sys_bpf+0xa0/0xe0 [ 373.531702][ T6734] x64_sys_call+0x2a02/0x3c10 [ 373.536651][ T6734] do_syscall_64+0xcd/0x1e0 [ 373.541603][ T6734] ? clear_bhb_loop+0x25/0x80 [ 373.546690][ T6734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.553470][ T6734] RIP: 0033:0x7f67065773b9 [ 373.558582][ T6734] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 373.579803][ T6734] RSP: 002b:00007f67073f2048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 373.589762][ T6734] RAX: ffffffffffffffda RBX: 00007f6706705f80 RCX: 00007f67065773b9 [ 373.599866][ T6734] RDX: 0000000000000038 RSI: 00000000200001c0 RDI: 000000000000001a [ 373.608787][ T6734] RBP: 00007f67073f20a0 R08: 0000000000000000 R09: 0000000000000000 [ 373.618268][ T6734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 373.627171][ T6734] R13: 000000000000004d R14: 00007f6706705f80 R15: 00007ffcd5e9f5f8 [ 373.635393][ T6734] [ 373.642706][ T10] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 373.732115][ T29] audit: type=1326 audit(1722434756.893:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6731 comm="syz.1.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff246f76fbb code=0x7ffc0000 [ 375.769705][ T6736] loop0: detected capacity change from 0 to 32768 [ 375.789964][ T6736] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.366 (6736) [ 375.833536][ T6736] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 375.844372][ T6736] BTRFS info (device loop0): using sha256 (sha256-generic) checksum algorithm [ 375.856313][ T6736] BTRFS info (device loop0): using free-space-tree [ 376.164477][ T6763] can0: slcan on ptm0. [ 376.210599][ T6736] BTRFS info (device loop0): checking UUID tree [ 376.405125][ T6769] loop3: detected capacity change from 0 to 1024 [ 376.503996][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 376.557984][ T10] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 376.566733][ T10] usb 2-1: can't read configurations, error -71 [ 376.670095][ T6769] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 376.720218][ T5187] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 376.743182][ T6773] FAULT_INJECTION: forcing a failure. [ 376.743182][ T6773] name failslab, interval 1, probability 0, space 0, times 0 [ 376.757152][ T6773] CPU: 0 UID: 0 PID: 6773 Comm: syz.1.372 Not tainted 6.11.0-rc1-syzkaller-00044-g22f546873149 #0 [ 376.768220][ T6773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 376.778595][ T6773] Call Trace: [ 376.782052][ T6773] [ 376.785162][ T6773] dump_stack_lvl+0x216/0x2d0 [ 376.790114][ T6773] dump_stack+0x1e/0x30 [ 376.794531][ T6773] should_fail_ex+0x74e/0x800 [ 376.799561][ T6773] should_failslab+0x17f/0x210 [ 376.804659][ T6773] kmem_cache_alloc_node_noprof+0xeb/0xb80 [ 376.810780][ T6773] ? __alloc_skb+0x1e9/0x7b0 [ 376.815741][ T6773] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 376.821974][ T6773] __alloc_skb+0x1e9/0x7b0 [ 376.826649][ T6773] ? __rcu_read_unlock+0x7b/0xe0 [ 376.831909][ T6773] _sctp_make_chunk+0x8e/0x7e0 [ 376.836929][ T6773] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 376.843547][ T6773] sctp_make_strreset_tsnresp+0x56/0x8d0 [ 376.849465][ T6773] ? kmsan_get_metadata+0x13e/0x1c0 [ 376.854952][ T6773] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 376.861048][ T6773] sctp_process_strreset_tsnreq+0x305/0xbc0 [ 376.867267][ T6773] sctp_sf_do_reconf+0x917/0xed0 [ 376.872483][ T6773] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 376.878580][ T6773] sctp_do_sm+0x181/0x93d0 [ 376.883272][ T6773] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 376.889369][ T6773] ? sctp_outq_flush+0x1e3c/0x6590 [ 376.894765][ T6773] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 376.901515][ T6773] ? kmsan_get_metadata+0x13e/0x1c0 [ 376.907144][ T6773] ? kmsan_get_metadata+0x13e/0x1c0 [ 376.913253][ T6773] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 376.919411][ T6773] ? kmsan_get_metadata+0x13e/0x1c0 [ 376.926174][ T6773] ? kmsan_get_metadata+0x13e/0x1c0 [ 376.931805][ T6773] ? __pfx_sctp_sf_do_reconf+0x10/0x10 [ 376.937570][ T6773] ? kmsan_get_metadata+0x13e/0x1c0 [ 376.944163][ T6773] sctp_assoc_bh_rcv+0x8fe/0xc50 [ 376.949976][ T6773] ? __pfx_sctp_assoc_bh_rcv+0x10/0x10 [ 376.957343][ T6773] sctp_inq_push+0x2ef/0x380 [ 376.962890][ T6773] sctp_backlog_rcv+0x397/0xdb0 [ 376.968255][ T6773] ? __pfx_sctp_backlog_rcv+0x10/0x10 [ 376.975765][ T6773] ? __pfx_tcp_v4_do_rcv+0x10/0x10 [ 376.981410][ T6773] sk_backlog_rcv+0x13b/0x420 [ 376.986386][ T6773] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 376.992489][ T6773] __release_sock+0x1da/0x330 [ 376.997820][ T6773] release_sock+0x6b/0x250 [ 377.002777][ T6773] sctp_setsockopt+0x14a0/0x2040 [ 377.008559][ T6773] ? __pfx_sctp_setsockopt+0x10/0x10 [ 377.015038][ T6773] sock_common_setsockopt+0xf9/0x140 [ 377.021910][ T6773] do_sock_setsockopt+0x4bb/0x7d0 [ 377.029063][ T6773] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 377.035847][ T6773] __sys_setsockopt+0x33a/0x4b0 [ 377.041528][ T6773] __x64_sys_setsockopt+0xe8/0x170 [ 377.047359][ T6773] x64_sys_call+0x343c/0x3c10 [ 377.052317][ T6773] do_syscall_64+0xcd/0x1e0 [ 377.057153][ T6773] ? clear_bhb_loop+0x25/0x80 [ 377.062082][ T6773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.068278][ T6773] RIP: 0033:0x7ff246f773b9 [ 377.073059][ T6773] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 377.098453][ T6773] RSP: 002b:00007ff247cd0048 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 377.108572][ T6773] RAX: ffffffffffffffda RBX: 00007ff247105f80 RCX: 00007ff246f773b9 [ 377.120381][ T6773] RDX: 0000000000000078 RSI: 0000000000000084 RDI: 0000000000000003 [ 377.130609][ T6773] RBP: 00007ff247cd00a0 R08: 0000000000000004 R09: 0000000000000000 [ 377.139810][ T6773] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000001 [ 377.149706][ T6773] R13: 000000000000000b R14: 00007ff247105f80 R15: 00007ffe1e0509c8 [ 377.158496][ T6773] [ 377.228715][ T6763] EXT4-fs error (device loop3): __ext4_iget:4985: inode #12: block 13: comm syz.3.370: invalid block [ 377.385928][ C0] eth0: bad gso: type: 1, size: 1408 [ 377.518998][ T6761] can0 (unregistered): slcan off ptm0. [ 377.757376][ T6780] netlink: 'syz.1.374': attribute type 5 has an invalid length. [ 377.769795][ T6780] netlink: 'syz.1.374': attribute type 11 has an invalid length. [ 377.815195][ T5192] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.100190][ T6782] loop2: detected capacity change from 0 to 32768 [ 379.139877][ T6782] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.375 (6782) [ 379.212512][ T6782] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 379.223246][ T6782] BTRFS info (device loop2): using sha256 (sha256-generic) checksum algorithm [ 379.233961][ T6782] BTRFS info (device loop2): using free-space-tree [ 379.319071][ T6780] loop1: detected capacity change from 0 to 8 [ 379.344522][ T6780] squashfs: Unknown parameter 'syzkaller' [ 379.575010][ T6782] BTRFS info (device loop2): checking UUID tree [ 379.918413][ T6806] loop3: detected capacity change from 0 to 764 [ 380.055128][ T6118] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 380.618128][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 380.618205][ T29] audit: type=1326 audit(1722434763.853:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6818 comm="syz.3.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67065773b9 code=0x7ffc0000 [ 380.749156][ T29] audit: type=1326 audit(1722434763.923:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6818 comm="syz.3.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67065773b9 code=0x7ffc0000 [ 380.774103][ T29] audit: type=1326 audit(1722434763.943:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6818 comm="syz.3.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6706575d50 code=0x7ffc0000 [ 380.807165][ T29] audit: type=1326 audit(1722434763.943:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6818 comm="syz.3.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6706576fbb code=0x7ffc0000 [ 380.841922][ T29] audit: type=1326 audit(1722434763.943:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6818 comm="syz.3.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6706576fbb code=0x7ffc0000 [ 380.866704][ T29] audit: type=1326 audit(1722434763.973:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6818 comm="syz.3.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6706576fbb code=0x7ffc0000 [ 380.895478][ T29] audit: type=1326 audit(1722434763.973:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6818 comm="syz.3.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6706576fbb code=0x7ffc0000 [ 381.037037][ T29] audit: type=1326 audit(1722434764.253:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6818 comm="syz.3.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6706576fbb code=0x7ffc0000 [ 381.173748][ T29] audit: type=1326 audit(1722434764.363:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6818 comm="syz.3.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6706576fbb code=0x7ffc0000 [ 381.198296][ T44] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 381.208116][ T1616] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 381.313854][ T29] audit: type=1326 audit(1722434764.503:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6818 comm="syz.3.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6706576fbb code=0x7ffc0000 [ 381.510958][ T44] usb 1-1: not running at top speed; connect to a high speed hub [ 381.620648][ T44] usb 1-1: config 9 has an invalid interface number: 134 but max is 2 [ 381.631684][ T44] usb 1-1: config 9 has an invalid interface number: 223 but max is 2 [ 381.642146][ T44] usb 1-1: config 9 has no interface number 1 [ 381.649904][ T44] usb 1-1: config 9 has no interface number 2 [ 381.660612][ T44] usb 1-1: config 9 interface 134 altsetting 4 endpoint 0x89 has invalid maxpacket 512, setting to 64 [ 381.672287][ T44] usb 1-1: config 9 interface 134 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 381.683798][ T44] usb 1-1: config 9 interface 134 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 381.695247][ T44] usb 1-1: config 9 interface 134 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 381.707063][ T44] usb 1-1: config 9 interface 134 altsetting 4 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 381.718540][ T44] usb 1-1: config 9 interface 134 altsetting 4 has a duplicate endpoint with address 0x4, skipping [ 381.729804][ T44] usb 1-1: config 9 interface 223 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 381.741225][ T44] usb 1-1: config 9 interface 223 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 381.752626][ T44] usb 1-1: config 9 interface 223 altsetting 3 has a duplicate endpoint with address 0x9, skipping [ 381.767866][ T44] usb 1-1: config 9 interface 223 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 381.779479][ T44] usb 1-1: config 9 interface 223 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 381.790848][ T44] usb 1-1: config 9 interface 223 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 381.802312][ T44] usb 1-1: config 9 interface 223 altsetting 3 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 381.813893][ T44] usb 1-1: config 9 interface 223 altsetting 3 has a duplicate endpoint with address 0xD, skipping [ 381.825303][ T44] usb 1-1: config 9 interface 223 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 381.836851][ T44] usb 1-1: config 9 interface 223 altsetting 3 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 381.849589][ T44] usb 1-1: config 9 interface 134 has no altsetting 0 [ 381.863580][ T44] usb 1-1: config 9 interface 223 has no altsetting 0 [ 381.870983][ T44] usb 1-1: config 9 interface 0 has no altsetting 0 [ 382.008913][ T44] usb 1-1: New USB device found, idVendor=19d2, idProduct=1596, bcdDevice=2d.b8 [ 382.018764][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.027300][ T44] usb 1-1: Product: Ă稾㵬볶퐷ရ綒첛Ů⦻節ұ繲庤滆촒폤⎑ᆣ»⽎삙唍鱑正煡痜⠎䛿㬿䘺굲რ펌뉎⢬ዩ叼⾼앑톤ꔰ㼥̤㳌ꔨ몾流呮索젤 [ 382.046875][ T44] usb 1-1: Manufacturer: 俌 [ 382.051997][ T44] usb 1-1: SerialNumber: ࠠ [ 382.113093][ T6813] loop4: detected capacity change from 0 to 32768 [ 382.146883][ T6813] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.381 (6813) [ 382.174343][ T6813] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 382.185760][ T6813] BTRFS info (device loop4): using sha256 (sha256-generic) checksum algorithm [ 382.197340][ T6813] BTRFS info (device loop4): using free-space-tree [ 382.547383][ T6813] BTRFS info (device loop4): checking UUID tree [ 382.665930][ T44] option 1-1:9.134: GSM modem (1-port) converter detected [ 382.840921][ T44] usb 1-1: USB disconnect, device number 13 [ 382.853440][ T44] option 1-1:9.134: device disconnected [ 383.015084][ T6135] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 383.718080][ T1616] usb 4-1: unable to get BOS descriptor or descriptor too short [ 383.742854][ T6846] can0: slcan on ptm0. [ 383.788129][ T1616] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 383.796022][ T1616] usb 4-1: can't read configurations, error -71 [ 383.963128][ T6846] loop0: detected capacity change from 0 to 1024 [ 384.094073][ T6846] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 384.281913][ T6859] loop3: detected capacity change from 0 to 512 [ 384.300600][ T5252] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 384.332786][ T6859] EXT4-fs (loop3): blocks per group (95) and clusters per group (32768) inconsistent [ 384.361046][ T6846] EXT4-fs error (device loop0): __ext4_iget:4985: inode #12: block 13: comm syz.0.387: invalid block [ 384.547932][ T6844] can0 (unregistered): slcan off ptm0. [ 384.566681][ T5252] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 384.578179][ T5252] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 384.588336][ T5252] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.610741][ T5252] usb 2-1: config 0 descriptor?? [ 384.685195][ T6864] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.696717][ T6864] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.707884][ T6864] bridge0: entered allmulticast mode [ 384.779792][ T6865] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.788158][ T6865] bridge0: port 2(bridge_slave_1) entered forwarding state [ 384.796942][ T6865] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.806335][ T6865] bridge0: port 1(bridge_slave_0) entered forwarding state [ 384.815458][ T6865] bridge0: entered promiscuous mode [ 385.029620][ T5187] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.643174][ T6876] loop4: detected capacity change from 0 to 64 [ 385.672320][ T6876] hfs: uid requires an argument [ 385.678901][ T6876] hfs: unable to parse mount options [ 385.685381][ T6873] netlink: 8 bytes leftover after parsing attributes in process `syz.0.389'. [ 385.740251][ T5252] usb 2-1: string descriptor 0 read error: -71 [ 385.792417][ T5252] usb 2-1: USB disconnect, device number 20 [ 385.839710][ T6878] netlink: 8 bytes leftover after parsing attributes in process `syz.2.393'. [ 385.850200][ T6878] IPVS: Error joining to the multicast group [ 386.724011][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 386.724089][ T29] audit: type=1326 audit(1722434769.963:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6889 comm="syz.2.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5c5773b9 code=0x7ffc0000 [ 386.836425][ T29] audit: type=1326 audit(1722434770.013:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6889 comm="syz.2.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2b5c575d50 code=0x7ffc0000 [ 386.868887][ T29] audit: type=1326 audit(1722434770.033:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6889 comm="syz.2.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2b5c576fbb code=0x7ffc0000 [ 386.906110][ T29] audit: type=1326 audit(1722434770.033:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6889 comm="syz.2.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2b5c576fbb code=0x7ffc0000 [ 386.934072][ T29] audit: type=1326 audit(1722434770.043:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6889 comm="syz.2.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2b5c576fbb code=0x7ffc0000 [ 386.962035][ T29] audit: type=1326 audit(1722434770.043:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6889 comm="syz.2.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2b5c576fbb code=0x7ffc0000 [ 387.097203][ T29] audit: type=1326 audit(1722434770.273:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6889 comm="syz.2.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2b5c576fbb code=0x7ffc0000 [ 387.124510][ T5252] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 387.197728][ T5290] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 387.228375][ T29] audit: type=1326 audit(1722434770.383:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6889 comm="syz.2.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2b5c576fbb code=0x7ffc0000 [ 387.251905][ T29] audit: type=1326 audit(1722434770.443:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6889 comm="syz.2.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2b5c576fbb code=0x7ffc0000 [ 387.275068][ T29] audit: type=1326 audit(1722434770.463:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6889 comm="syz.2.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2b5c576fbb code=0x7ffc0000 [ 387.368251][ T6893] can0: slcan on ptm0. [ 387.443678][ T5252] usb 4-1: not running at top speed; connect to a high speed hub [ 387.499562][ T5252] usb 4-1: config 9 has an invalid interface number: 134 but max is 2 [ 387.510019][ T5252] usb 4-1: config 9 has an invalid interface number: 223 but max is 2 [ 387.519145][ T5252] usb 4-1: config 9 has no interface number 1 [ 387.525471][ T5252] usb 4-1: config 9 has no interface number 2 [ 387.535228][ T5252] usb 4-1: config 9 interface 134 altsetting 4 endpoint 0x89 has invalid maxpacket 512, setting to 64 [ 387.549198][ T5252] usb 4-1: config 9 interface 134 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 387.560522][ T5252] usb 4-1: config 9 interface 134 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 387.573435][ T5252] usb 4-1: config 9 interface 134 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 387.587750][ T5252] usb 4-1: config 9 interface 134 altsetting 4 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 387.604940][ T5252] usb 4-1: config 9 interface 134 altsetting 4 has a duplicate endpoint with address 0x4, skipping [ 387.621262][ T5252] usb 4-1: config 9 interface 223 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 387.633568][ T5252] usb 4-1: config 9 interface 223 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 387.645445][ T5252] usb 4-1: config 9 interface 223 altsetting 3 has a duplicate endpoint with address 0x9, skipping [ 387.662901][ T5252] usb 4-1: config 9 interface 223 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 387.675691][ T5252] usb 4-1: config 9 interface 223 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 387.686950][ T5252] usb 4-1: config 9 interface 223 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 387.701649][ T5252] usb 4-1: config 9 interface 223 altsetting 3 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 387.714006][ T5252] usb 4-1: config 9 interface 223 altsetting 3 has a duplicate endpoint with address 0xD, skipping [ 387.725104][ T5252] usb 4-1: config 9 interface 223 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 387.736368][ T5252] usb 4-1: config 9 interface 223 altsetting 3 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 387.747675][ T5252] usb 4-1: config 9 interface 134 has no altsetting 0 [ 387.754699][ T5252] usb 4-1: config 9 interface 223 has no altsetting 0 [ 387.762485][ T5252] usb 4-1: config 9 interface 0 has no altsetting 0 [ 387.866884][ T6880] loop1: detected capacity change from 0 to 32768 [ 387.882621][ T6880] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.394 (6880) [ 387.929789][ T6880] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 387.943609][ T6880] BTRFS info (device loop1): using sha256 (sha256-generic) checksum algorithm [ 387.957638][ T6880] BTRFS info (device loop1): using free-space-tree [ 387.959564][ T5252] usb 4-1: New USB device found, idVendor=19d2, idProduct=1596, bcdDevice=2d.b8 [ 387.975526][ T5252] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.984664][ T5252] usb 4-1: Product: Ă稾㵬볶퐷ရ綒첛Ů⦻節ұ繲庤滆촒폤⎑ᆣ»⽎삙唍鱑正煡痜⠎䛿㬿䘺굲რ펌뉎⢬ዩ叼⾼앑톤ꔰ㼥̤㳌ꔨ몾流呮索젤 [ 388.010234][ T5252] usb 4-1: Manufacturer: 俌 [ 388.015255][ T5252] usb 4-1: SerialNumber: ࠠ [ 388.053160][ T5290] usb 3-1: unable to get BOS descriptor or descriptor too short [ 388.081157][ T6893] loop0: detected capacity change from 0 to 1024 [ 388.093323][ T5290] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 388.102456][ T5290] usb 3-1: can't read configurations, error -71 [ 388.153836][ T6893] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 388.270074][ T6893] EXT4-fs error (device loop0): __ext4_iget:4985: inode #12: block 13: comm syz.0.399: invalid block [ 388.278757][ T6880] BTRFS info (device loop1): checking UUID tree [ 388.366116][ T5252] option 4-1:9.134: GSM modem (1-port) converter detected [ 388.475736][ T5252] usb 4-1: USB disconnect, device number 29 [ 388.486445][ T5252] option 4-1:9.134: device disconnected [ 388.525195][ T6914] FAULT_INJECTION: forcing a failure. [ 388.525195][ T6914] name failslab, interval 1, probability 0, space 0, times 0 [ 388.540606][ T6914] CPU: 0 UID: 0 PID: 6914 Comm: syz.4.401 Not tainted 6.11.0-rc1-syzkaller-00044-g22f546873149 #0 [ 388.553966][ T6914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 388.564711][ T6914] Call Trace: [ 388.569255][ T6914] [ 388.572479][ T6914] dump_stack_lvl+0x216/0x2d0 [ 388.577804][ T6914] dump_stack+0x1e/0x30 [ 388.582764][ T6914] should_fail_ex+0x74e/0x800 [ 388.588156][ T6914] should_failslab+0x17f/0x210 [ 388.594321][ T6914] kmem_cache_alloc_noprof+0xe2/0xb20 [ 388.601453][ T6914] ? security_file_alloc+0x7e/0x290 [ 388.607693][ T6914] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 388.614460][ T6914] security_file_alloc+0x7e/0x290 [ 388.619993][ T6914] alloc_empty_file+0x296/0x820 [ 388.625476][ T6914] path_openat+0xa6/0x6100 [ 388.630369][ T6914] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.634954][ T5190] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 388.637041][ T6914] ? kmsan_get_metadata+0x13e/0x1c0 [ 388.654289][ T6914] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 388.660418][ T6914] ? filter_irq_stacks+0x164/0x1a0 [ 388.665807][ T6914] ? kmsan_get_metadata+0x13e/0x1c0 [ 388.671306][ T6914] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 388.677934][ T6914] ? kmsan_get_metadata+0x13e/0x1c0 [ 388.683437][ T6914] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 388.689558][ T6914] do_filp_open+0x20e/0x590 [ 388.694321][ T6914] ? _raw_spin_unlock+0x30/0x50 [ 388.699472][ T6914] do_sys_openat2+0x1bf/0x2f0 [ 388.704437][ T6914] __x64_sys_openat+0x2a1/0x310 [ 388.709629][ T6914] x64_sys_call+0x1fe/0x3c10 [ 388.714500][ T6914] do_syscall_64+0xcd/0x1e0 [ 388.719947][ T6914] ? clear_bhb_loop+0x25/0x80 [ 388.724879][ T6914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.731079][ T6914] RIP: 0033:0x7f0c05b773b9 [ 388.735712][ T6914] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 388.756826][ T6914] RSP: 002b:00007f0c069f8048 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 388.765630][ T6914] RAX: ffffffffffffffda RBX: 00007f0c05d05f80 RCX: 00007f0c05b773b9 [ 388.773866][ T6914] RDX: 0000000000000000 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 388.782377][ T6914] RBP: 00007f0c069f80a0 R08: 0000000000000000 R09: 0000000000000000 [ 388.790600][ T6914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 388.799426][ T6914] R13: 000000000000000b R14: 00007f0c05d05f80 R15: 00007ffe706f0f28 [ 388.807755][ T6914] [ 388.850983][ T6892] can0 (unregistered): slcan off ptm0. [ 389.165165][ T5187] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.601352][ T6922] FAULT_INJECTION: forcing a failure. [ 389.601352][ T6922] name failslab, interval 1, probability 0, space 0, times 0 [ 389.614550][ T6922] CPU: 1 UID: 0 PID: 6922 Comm: syz.0.404 Not tainted 6.11.0-rc1-syzkaller-00044-g22f546873149 #0 [ 389.625443][ T6922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 389.635734][ T6922] Call Trace: [ 389.639473][ T6922] [ 389.642582][ T6922] dump_stack_lvl+0x216/0x2d0 [ 389.647732][ T6922] dump_stack+0x1e/0x30 [ 389.652500][ T6922] should_fail_ex+0x74e/0x800 [ 389.657488][ T6922] should_failslab+0x17f/0x210 [ 389.663076][ T6922] __kmalloc_noprof+0x175/0xf30 [ 389.668304][ T6922] ? tomoyo_encode+0x5f8/0xa40 [ 389.673476][ T6922] ? kmsan_get_metadata+0x13e/0x1c0 [ 389.680368][ T6922] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 389.687301][ T6922] tomoyo_encode+0x5f8/0xa40 [ 389.692388][ T6922] tomoyo_realpath_from_path+0x9dd/0xaa0 [ 389.698340][ T6922] tomoyo_path_number_perm+0x1d9/0x8f0 [ 389.704096][ T6922] ? kmsan_get_metadata+0x13e/0x1c0 [ 389.709582][ T6922] ? kmsan_get_metadata+0x13e/0x1c0 [ 389.715048][ T6922] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 389.721165][ T6922] tomoyo_file_ioctl+0x42/0x50 [ 389.726184][ T6922] ? __pfx_tomoyo_file_ioctl+0x10/0x10 [ 389.732179][ T6922] security_file_ioctl+0xa8/0x160 [ 389.738233][ T6922] __se_sys_ioctl+0xd3/0x450 [ 389.743277][ T6922] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 389.750654][ T6922] __x64_sys_ioctl+0x96/0xe0 [ 389.755516][ T6922] x64_sys_call+0x1a06/0x3c10 [ 389.760941][ T6922] do_syscall_64+0xcd/0x1e0 [ 389.765787][ T6922] ? clear_bhb_loop+0x25/0x80 [ 389.771800][ T6922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.778154][ T6922] RIP: 0033:0x7fafd61773b9 [ 389.782971][ T6922] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 389.805059][ T6922] RSP: 002b:00007fafd6eda048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 389.813757][ T6922] RAX: ffffffffffffffda RBX: 00007fafd6305f80 RCX: 00007fafd61773b9 [ 389.822165][ T6922] RDX: 0000000000000000 RSI: 000000000000ff05 RDI: 0000000000000003 [ 389.830446][ T6922] RBP: 00007fafd6eda0a0 R08: 0000000000000000 R09: 0000000000000000 [ 389.839310][ T6922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 389.848419][ T6922] R13: 000000000000000b R14: 00007fafd6305f80 R15: 00007ffc15b69038 [ 389.856821][ T6922] [ 389.864835][ T6922] ERROR: Out of memory at tomoyo_realpath_from_path. [ 390.148923][ T5290] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 390.208356][ T5252] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 390.269293][ T6936] netlink: 8 bytes leftover after parsing attributes in process `syz.0.408'. [ 390.279722][ T6936] IPVS: Error joining to the multicast group [ 390.365766][ T5290] usb 5-1: Using ep0 maxpacket: 32 [ 390.391127][ T5290] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 390.404389][ T5290] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 390.416003][ T5290] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 390.426916][ T5290] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.443513][ T5252] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 390.455056][ T5252] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 390.468525][ T5252] usb 4-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 390.479137][ T5252] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.510804][ T5252] usb 4-1: config 0 descriptor?? [ 390.532738][ T5290] hub 5-1:4.0: USB hub found [ 390.759935][ T5290] hub 5-1:4.0: 2 ports detected [ 390.787329][ T5252] kye 0003:0458:501A.0003: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 390.803386][ T5252] kye 0003:0458:501A.0003: unknown main item tag 0x0 [ 390.814036][ T5252] kye 0003:0458:501A.0003: unknown main item tag 0x0 [ 390.889552][ T5252] kye 0003:0458:501A.0003: hidraw0: USB HID v0.00 Device [HID 0458:501a] on usb-dummy_hcd.3-1/input0 [ 390.907353][ T5252] kye 0003:0458:501A.0003: tablet-enabling feature report not found [ 390.916084][ T5252] kye 0003:0458:501A.0003: tablet enabling failed [ 391.639106][ T5252] usb 4-1: USB disconnect, device number 30 [ 392.021876][ T5290] hub 5-1:4.0: hub_hub_status failed (err = -32) [ 392.030225][ T5290] hub 5-1:4.0: config failed, can't get hub status (err -32) [ 392.659857][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 392.659941][ T29] audit: type=1326 audit(1722434775.893:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6956 comm="syz.3.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67065773b9 code=0x7ffc0000 [ 392.828126][ T29] audit: type=1326 audit(1722434775.963:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6956 comm="syz.3.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6706575d50 code=0x7ffc0000 [ 392.851814][ T29] audit: type=1326 audit(1722434775.963:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6956 comm="syz.3.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6706576fbb code=0x7ffc0000 [ 392.876881][ T29] audit: type=1326 audit(1722434775.963:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6956 comm="syz.3.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6706576fbb code=0x7ffc0000 [ 392.902469][ T29] audit: type=1326 audit(1722434775.983:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6956 comm="syz.3.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6706576fbb code=0x7ffc0000 [ 392.931686][ T29] audit: type=1326 audit(1722434775.983:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6956 comm="syz.3.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6706576fbb code=0x7ffc0000 [ 393.081553][ T29] audit: type=1326 audit(1722434776.213:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6956 comm="syz.3.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6706576fbb code=0x7ffc0000 [ 393.106227][ T29] audit: type=1326 audit(1722434776.313:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6956 comm="syz.3.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6706576fbb code=0x7ffc0000 [ 393.135066][ T6951] loop1: detected capacity change from 0 to 32768 [ 393.147980][ T5290] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 393.169255][ T6951] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.412 (6951) [ 393.205071][ T6964] loop2: detected capacity change from 0 to 64 [ 393.218768][ T6964] hfs: uid requires an argument [ 393.227008][ T6964] hfs: unable to parse mount options [ 393.243161][ T6964] FAULT_INJECTION: forcing a failure. [ 393.243161][ T6964] name failslab, interval 1, probability 0, space 0, times 0 [ 393.260156][ T6964] CPU: 0 UID: 0 PID: 6964 Comm: syz.2.415 Not tainted 6.11.0-rc1-syzkaller-00044-g22f546873149 #0 [ 393.271766][ T6964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 393.283574][ T6964] Call Trace: [ 393.287027][ T6964] [ 393.290139][ T6964] dump_stack_lvl+0x216/0x2d0 [ 393.295101][ T6964] dump_stack+0x1e/0x30 [ 393.299502][ T6964] should_fail_ex+0x74e/0x800 [ 393.304484][ T6964] should_failslab+0x17f/0x210 [ 393.309660][ T6964] __kmalloc_noprof+0x175/0xf30 [ 393.316555][ T6964] ? __kmalloc_noprof+0x6cc/0xf30 [ 393.322153][ T6964] ? tomoyo_realpath_from_path+0x104/0xaa0 [ 393.329048][ T6964] ? kmsan_get_metadata+0x13e/0x1c0 [ 393.335725][ T6964] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 393.342495][ T6964] tomoyo_realpath_from_path+0x104/0xaa0 [ 393.353047][ T6964] tomoyo_mount_permission+0x479/0x10a0 [ 393.362230][ T6964] ? kmsan_get_metadata+0x13e/0x1c0 [ 393.370015][ T6964] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 393.376148][ T6964] ? kmsan_get_metadata+0x13e/0x1c0 [ 393.381630][ T6964] tomoyo_sb_mount+0x4f/0x70 [ 393.386481][ T6964] ? __pfx_tomoyo_sb_mount+0x10/0x10 [ 393.392034][ T6964] security_sb_mount+0xbd/0x170 [ 393.397147][ T6964] path_mount+0x109/0x1f10 [ 393.401823][ T6964] ? user_path_at+0x32f/0x390 [ 393.406825][ T6964] __se_sys_mount+0x722/0x810 [ 393.411772][ T6964] __x64_sys_mount+0xe4/0x150 [ 393.416710][ T6964] x64_sys_call+0xed5/0x3c10 [ 393.421575][ T6964] do_syscall_64+0xcd/0x1e0 [ 393.426320][ T6964] ? clear_bhb_loop+0x25/0x80 [ 393.431244][ T6964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.437564][ T6964] RIP: 0033:0x7f2b5c5773b9 [ 393.442735][ T6964] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 393.465700][ T6964] RSP: 002b:00007f2b5d2a1048 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 393.478000][ T6964] RAX: ffffffffffffffda RBX: 00007f2b5c705f80 RCX: 00007f2b5c5773b9 [ 393.489188][ T6964] RDX: 0000000020000000 RSI: 00000000200002c0 RDI: 0000000020000100 [ 393.501335][ T6964] RBP: 00007f2b5d2a10a0 R08: 0000000020000340 R09: 0000000000000000 [ 393.509530][ T6964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 393.517715][ T6964] R13: 000000000000000b R14: 00007f2b5c705f80 R15: 00007ffd2a5e1868 [ 393.525922][ T6964] [ 393.535254][ T6964] ERROR: Out of memory at tomoyo_realpath_from_path. [ 393.551514][ T5252] usb 5-1: USB disconnect, device number 10 [ 393.553997][ T29] audit: type=1326 audit(1722434776.393:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6956 comm="syz.3.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6706576fbb code=0x7ffc0000 [ 393.580316][ T29] audit: type=1326 audit(1722434776.403:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6956 comm="syz.3.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6706576fbb code=0x7ffc0000 [ 393.608619][ T6951] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 393.619359][ T6951] BTRFS info (device loop1): using sha256 (sha256-generic) checksum algorithm [ 393.630604][ T6951] BTRFS info (device loop1): using free-space-tree [ 393.661131][ T6963] can0: slcan on ptm0. [ 393.748786][ T5290] usb 4-1: unable to get BOS descriptor or descriptor too short [ 393.761502][ T5290] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 393.771376][ T5290] usb 4-1: can't read configurations, error -71 [ 393.861644][ T6967] loop0: detected capacity change from 0 to 1024 [ 393.922982][ T6967] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 393.973162][ T6951] BTRFS info (device loop1): checking UUID tree [ 394.017250][ T6963] EXT4-fs error (device loop0): __ext4_iget:4985: inode #12: block 13: comm syz.0.414: invalid block [ 394.068417][ T5252] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 394.229583][ T5190] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 394.262443][ T5252] usb 5-1: not running at top speed; connect to a high speed hub [ 394.269905][ T6961] can0 (unregistered): slcan off ptm0. [ 394.280269][ T5252] usb 5-1: config 9 has an invalid interface number: 134 but max is 2 [ 394.292003][ T5252] usb 5-1: config 9 has an invalid interface number: 223 but max is 2 [ 394.305277][ T5252] usb 5-1: config 9 has no interface number 1 [ 394.312118][ T5252] usb 5-1: config 9 has no interface number 2 [ 394.318596][ T5252] usb 5-1: config 9 interface 134 altsetting 4 endpoint 0x89 has invalid maxpacket 512, setting to 64 [ 394.330055][ T5252] usb 5-1: config 9 interface 134 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 394.341335][ T5252] usb 5-1: config 9 interface 134 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 394.356081][ T5252] usb 5-1: config 9 interface 134 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 394.370766][ T5252] usb 5-1: config 9 interface 134 altsetting 4 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 394.398544][ T5252] usb 5-1: config 9 interface 134 altsetting 4 has a duplicate endpoint with address 0x4, skipping [ 394.410913][ T5252] usb 5-1: config 9 interface 223 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 394.423810][ T5252] usb 5-1: config 9 interface 223 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 394.436695][ T5252] usb 5-1: config 9 interface 223 altsetting 3 has a duplicate endpoint with address 0x9, skipping [ 394.449647][ T5252] usb 5-1: config 9 interface 223 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 394.466801][ T5252] usb 5-1: config 9 interface 223 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 394.480951][ T5252] usb 5-1: config 9 interface 223 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 394.517361][ T5252] usb 5-1: config 9 interface 223 altsetting 3 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 394.530897][ T5252] usb 5-1: config 9 interface 223 altsetting 3 has a duplicate endpoint with address 0xD, skipping [ 394.542790][ T5252] usb 5-1: config 9 interface 223 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 394.563412][ T5252] usb 5-1: config 9 interface 223 altsetting 3 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 394.579175][ T5252] usb 5-1: config 9 interface 134 has no altsetting 0 [ 394.592511][ T5252] usb 5-1: config 9 interface 223 has no altsetting 0 [ 394.601691][ T5252] usb 5-1: config 9 interface 0 has no altsetting 0 [ 394.622996][ T5252] usb 5-1: New USB device found, idVendor=19d2, idProduct=1596, bcdDevice=2d.b8 [ 394.635904][ T5252] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.645914][ T5252] usb 5-1: Product: Ă稾㵬볶퐷ရ綒첛Ů⦻節ұ繲庤滆촒폤⎑ᆣ»⽎삙唍鱑正煡痜⠎䛿㬿䘺굲რ펌뉎⢬ዩ叼⾼앑톤ꔰ㼥̤㳌ꔨ몾流呮索젤 [ 394.672459][ T5252] usb 5-1: Manufacturer: 俌 [ 394.678782][ T5252] usb 5-1: SerialNumber: ࠠ [ 394.693577][ T5187] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.055596][ T5252] option 5-1:9.134: GSM modem (1-port) converter detected [ 395.193903][ T5252] usb 5-1: USB disconnect, device number 11 [ 395.204591][ T5252] option 5-1:9.134: device disconnected [ 397.264588][ T7025] loop3: detected capacity change from 0 to 8 [ 397.310346][ T7025] squashfs: Unknown parameter '' [ 397.749917][ T29] kauditd_printk_skb: 33 callbacks suppressed [ 397.749995][ T29] audit: type=1326 audit(1722434780.993:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7026 comm="syz.4.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0c05b76fbb code=0x7ffc0000 [ 397.848122][ T5249] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 397.948195][ T29] audit: type=1326 audit(1722434781.103:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7026 comm="syz.4.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0c05b76fbb code=0x7ffc0000 [ 397.970993][ T29] audit: type=1326 audit(1722434781.123:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7026 comm="syz.4.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0c05b76fbb code=0x7ffc0000 [ 397.993655][ T29] audit: type=1326 audit(1722434781.163:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7026 comm="syz.4.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0c05b76fbb code=0x7ffc0000 [ 398.150794][ T29] audit: type=1326 audit(1722434781.303:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7026 comm="syz.4.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0c05b76fbb code=0x7ffc0000 [ 398.250020][ T7029] loop0: detected capacity change from 0 to 1024 [ 398.309769][ T7020] loop1: detected capacity change from 0 to 32768 [ 398.325986][ T7020] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.428 (7020) [ 398.329688][ T29] audit: type=1326 audit(1722434781.453:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7026 comm="syz.4.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0c05b76fbb code=0x7ffc0000 [ 398.371544][ T29] audit: type=1326 audit(1722434781.453:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7026 comm="syz.4.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0c05b76fbb code=0x7ffc0000 [ 398.394485][ T29] audit: type=1326 audit(1722434781.463:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7026 comm="syz.4.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c05b773b9 code=0x7ffc0000 [ 398.406180][ T7020] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 398.417344][ T29] audit: type=1326 audit(1722434781.503:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7026 comm="syz.4.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c05b773b9 code=0x7ffc0000 [ 398.427614][ T7020] BTRFS info (device loop1): using sha256 (sha256-generic) checksum algorithm [ 398.453781][ T29] audit: type=1326 audit(1722434781.513:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7026 comm="syz.4.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=176 compat=0 ip=0x7f0c05b773b9 code=0x7ffc0000 [ 398.489358][ T7020] BTRFS info (device loop1): using free-space-tree [ 398.509443][ T5249] usb 5-1: unable to get BOS descriptor or descriptor too short [ 398.587233][ T5249] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 398.597770][ T5249] usb 5-1: can't read configurations, error -71 [ 398.656831][ T7029] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 398.720398][ T7029] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 398.737135][ T7020] BTRFS info (device loop1): checking UUID tree [ 398.746012][ T7029] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 64 with error 28 [ 398.764942][ T7029] EXT4-fs (loop0): This should not happen!! Data will be lost [ 398.764942][ T7029] [ 398.777648][ T7029] EXT4-fs (loop0): Total free blocks count 0 [ 398.784158][ T7029] EXT4-fs (loop0): Free/Dirty block details [ 398.791216][ T7029] EXT4-fs (loop0): free_blocks=68451041280 [ 398.799530][ T7029] EXT4-fs (loop0): dirty_blocks=64 [ 398.807215][ T7029] EXT4-fs (loop0): Block reservation details [ 398.816388][ T7029] EXT4-fs (loop0): i_reserved_data_blocks=4 [ 398.976356][ T5187] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.187034][ T5290] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 399.247717][ T5190] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 399.455971][ T7060] loop0: detected capacity change from 0 to 256 [ 399.487854][ T5290] usb 3-1: not running at top speed; connect to a high speed hub [ 399.519923][ T5290] usb 3-1: config 9 has an invalid interface number: 134 but max is 2 [ 399.528572][ T5290] usb 3-1: config 9 has an invalid interface number: 223 but max is 2 [ 399.537200][ T5290] usb 3-1: config 9 has no interface number 1 [ 399.543678][ T5290] usb 3-1: config 9 has no interface number 2 [ 399.550144][ T5290] usb 3-1: config 9 interface 134 altsetting 4 endpoint 0x89 has invalid maxpacket 512, setting to 64 [ 399.561526][ T5290] usb 3-1: config 9 interface 134 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 399.576106][ T5290] usb 3-1: config 9 interface 134 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 399.583291][ T7060] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 399.588500][ T5290] usb 3-1: config 9 interface 134 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 399.616699][ T5290] usb 3-1: config 9 interface 134 altsetting 4 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 399.629035][ T5290] usb 3-1: config 9 interface 134 altsetting 4 has a duplicate endpoint with address 0x4, skipping [ 399.640978][ T5290] usb 3-1: config 9 interface 223 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 399.653472][ T5290] usb 3-1: config 9 interface 223 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 399.664984][ T5290] usb 3-1: config 9 interface 223 altsetting 3 has a duplicate endpoint with address 0x9, skipping [ 399.679687][ T5290] usb 3-1: config 9 interface 223 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 399.692517][ T5290] usb 3-1: config 9 interface 223 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 399.709708][ T5290] usb 3-1: config 9 interface 223 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 399.727174][ T5290] usb 3-1: config 9 interface 223 altsetting 3 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 399.742612][ T5290] usb 3-1: config 9 interface 223 altsetting 3 has a duplicate endpoint with address 0xD, skipping [ 399.756063][ T5290] usb 3-1: config 9 interface 223 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 399.769573][ T5290] usb 3-1: config 9 interface 223 altsetting 3 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 399.788642][ T5290] usb 3-1: config 9 interface 134 has no altsetting 0 [ 399.796494][ T5290] usb 3-1: config 9 interface 223 has no altsetting 0 [ 399.804932][ T5290] usb 3-1: config 9 interface 0 has no altsetting 0 [ 399.828483][ T5290] usb 3-1: New USB device found, idVendor=19d2, idProduct=1596, bcdDevice=2d.b8 [ 399.838134][ T5290] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.847215][ T5290] usb 3-1: Product: Ă稾㵬볶퐷ရ綒첛Ů⦻節ұ繲庤滆촒폤⎑ᆣ»⽎삙唍鱑正煡痜⠎䛿㬿䘺굲რ펌뉎⢬ዩ叼⾼앑톤ꔰ㼥̤㳌ꔨ몾流呮索젤 [ 399.866703][ T5290] usb 3-1: Manufacturer: 俌 [ 399.871675][ T5290] usb 3-1: SerialNumber: ࠠ [ 399.942027][ T7063] loop4: detected capacity change from 0 to 512 [ 400.023958][ T7063] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.439: invalid block [ 400.052030][ T7063] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.439: invalid indirect mapped block 4294967295 (level 1) [ 400.077861][ T7063] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.439: invalid indirect mapped block 4294967295 (level 1) [ 400.104454][ T7063] EXT4-fs (loop4): 2 truncates cleaned up [ 400.113601][ T7063] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 400.193447][ T5290] option 3-1:9.134: GSM modem (1-port) converter detected [ 400.255473][ T7063] netlink: 'syz.4.439': attribute type 3 has an invalid length. [ 400.344535][ T5290] usb 3-1: USB disconnect, device number 8 [ 400.355273][ T5290] option 3-1:9.134: device disconnected [ 400.631747][ T6135] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.330688][ T7086] loop3: detected capacity change from 0 to 64 [ 401.498794][ T5290] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 401.790025][ T5290] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 401.802014][ T5290] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.811256][ T5290] usb 3-1: Product: syz [ 401.815758][ T5290] usb 3-1: Manufacturer: syz [ 401.820996][ T5290] usb 3-1: SerialNumber: syz [ 401.838300][ T5290] usb 3-1: config 0 descriptor?? [ 402.140505][ T7085] loop2: detected capacity change from 0 to 256 [ 402.432715][ T7085] FAT-fs (loop2): Directory bread(block 64) failed [ 402.442998][ T7085] FAT-fs (loop2): Directory bread(block 65) failed [ 402.451299][ T7085] FAT-fs (loop2): Directory bread(block 66) failed [ 402.458907][ T7085] FAT-fs (loop2): Directory bread(block 67) failed [ 402.466580][ T7085] FAT-fs (loop2): Directory bread(block 68) failed [ 402.473602][ T7085] FAT-fs (loop2): Directory bread(block 69) failed [ 402.480612][ T7085] FAT-fs (loop2): Directory bread(block 70) failed [ 402.487365][ T7085] FAT-fs (loop2): Directory bread(block 71) failed [ 402.494390][ T7085] FAT-fs (loop2): Directory bread(block 72) failed [ 402.501399][ T7085] FAT-fs (loop2): Directory bread(block 73) failed [ 402.533438][ T7088] loop1: detected capacity change from 0 to 4096 [ 402.628829][ T7088] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 402.887613][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 402.887690][ T29] audit: type=1326 audit(1722434786.123:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7101 comm="syz.3.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67065773b9 code=0x7ffc0000 [ 403.009402][ T29] audit: type=1326 audit(1722434786.163:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7101 comm="syz.3.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67065773b9 code=0x7ffc0000 [ 403.032713][ T29] audit: type=1326 audit(1722434786.173:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7101 comm="syz.3.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6706575d50 code=0x7ffc0000 [ 403.058112][ T29] audit: type=1326 audit(1722434786.173:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7101 comm="syz.3.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6706576fbb code=0x7ffc0000 [ 403.080845][ T29] audit: type=1326 audit(1722434786.183:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7101 comm="syz.3.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6706576fbb code=0x7ffc0000 [ 403.104154][ T29] audit: type=1326 audit(1722434786.183:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7101 comm="syz.3.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6706576fbb code=0x7ffc0000 [ 403.129595][ T29] audit: type=1326 audit(1722434786.183:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7101 comm="syz.3.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6706576fbb code=0x7ffc0000 [ 403.306895][ T29] audit: type=1326 audit(1722434786.503:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7101 comm="syz.3.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6706576fbb code=0x7ffc0000 [ 403.399361][ T29] audit: type=1326 audit(1722434786.593:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7101 comm="syz.3.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6706576fbb code=0x7ffc0000 [ 403.427920][ T1616] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 403.501503][ T1245] ieee802154 phy0 wpan0: encryption failed: -22 [ 403.508650][ T1245] ieee802154 phy1 wpan1: encryption failed: -22 [ 403.529486][ T29] audit: type=1326 audit(1722434786.693:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7101 comm="syz.3.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6706576fbb code=0x7ffc0000 [ 404.106349][ T7097] loop4: detected capacity change from 0 to 32768 [ 404.119458][ T7097] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.447 (7097) [ 404.190396][ T7088] ntfs3: loop1: Failed to read $UpCase (-4). [ 404.216829][ T7097] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 404.228386][ T7097] BTRFS info (device loop4): using sha256 (sha256-generic) checksum algorithm [ 404.241260][ T7097] BTRFS info (device loop4): using free-space-tree [ 404.389424][ T7097] BTRFS info (device loop4): checking UUID tree [ 404.700362][ T7123] loop0: detected capacity change from 0 to 256 [ 404.763396][ T6135] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 404.815741][ T7123] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 404.827741][ T5258] usb 3-1: USB disconnect, device number 9 [ 405.188346][ T5290] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 405.483044][ T5290] usb 2-1: not running at top speed; connect to a high speed hub [ 405.561131][ T5290] usb 2-1: config 9 has an invalid interface number: 134 but max is 2 [ 405.575544][ T5290] usb 2-1: config 9 has an invalid interface number: 223 but max is 2 [ 405.584872][ T5290] usb 2-1: config 9 has no interface number 1 [ 405.595241][ T5290] usb 2-1: config 9 has no interface number 2 [ 405.602211][ T5290] usb 2-1: config 9 interface 134 altsetting 4 endpoint 0x89 has invalid maxpacket 512, setting to 64 [ 405.614415][ T5290] usb 2-1: config 9 interface 134 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 405.630609][ T5290] usb 2-1: config 9 interface 134 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 405.646485][ T5290] usb 2-1: config 9 interface 134 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 405.660017][ T5290] usb 2-1: config 9 interface 134 altsetting 4 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 405.671361][ T5290] usb 2-1: config 9 interface 134 altsetting 4 has a duplicate endpoint with address 0x4, skipping [ 405.682493][ T5290] usb 2-1: config 9 interface 223 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 405.696827][ T5290] usb 2-1: config 9 interface 223 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 405.708750][ T5290] usb 2-1: config 9 interface 223 altsetting 3 has a duplicate endpoint with address 0x9, skipping [ 405.723174][ T5290] usb 2-1: config 9 interface 223 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 405.738354][ T5290] usb 2-1: config 9 interface 223 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 405.751233][ T5290] usb 2-1: config 9 interface 223 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 405.763170][ T5290] usb 2-1: config 9 interface 223 altsetting 3 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 405.774525][ T5290] usb 2-1: config 9 interface 223 altsetting 3 has a duplicate endpoint with address 0xD, skipping [ 405.785760][ T5290] usb 2-1: config 9 interface 223 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 405.797085][ T5290] usb 2-1: config 9 interface 223 altsetting 3 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 405.808848][ T5290] usb 2-1: config 9 interface 134 has no altsetting 0 [ 405.815886][ T5290] usb 2-1: config 9 interface 223 has no altsetting 0 [ 405.826248][ T5290] usb 2-1: config 9 interface 0 has no altsetting 0 [ 405.904514][ T7133] loop0: detected capacity change from 0 to 512 [ 405.929304][ T5290] usb 2-1: New USB device found, idVendor=19d2, idProduct=1596, bcdDevice=2d.b8 [ 405.939569][ T5290] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.947985][ T5290] usb 2-1: Product: Ă稾㵬볶퐷ရ綒첛Ů⦻節ұ繲庤滆촒폤⎑ᆣ»⽎삙唍鱑正煡痜⠎䛿㬿䘺굲რ펌뉎⢬ዩ叼⾼앑톤ꔰ㼥̤㳌ꔨ몾流呮索젤 [ 405.966672][ T5290] usb 2-1: Manufacturer: 俌 [ 405.971622][ T5290] usb 2-1: SerialNumber: ࠠ [ 406.058136][ T7133] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 406.289168][ T7133] EXT4-fs (loop0): 1 orphan inode deleted [ 406.298250][ T7133] EXT4-fs (loop0): 1 truncate cleaned up [ 406.308808][ T7133] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 406.470273][ T5290] option 2-1:9.134: GSM modem (1-port) converter detected [ 406.484409][ T1616] usb 4-1: unable to get BOS descriptor or descriptor too short [ 406.516526][ T7132] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 406.567675][ T1616] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 406.575601][ T1616] usb 4-1: can't read configurations, error -71 [ 406.659312][ T7140] loop4: detected capacity change from 0 to 2048 [ 406.683185][ T5290] usb 2-1: USB disconnect, device number 21 [ 406.695104][ T5290] option 2-1:9.134: device disconnected [ 406.798301][ T7140] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 407.352345][ T5187] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.516305][ T6135] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.698136][ T7163] team0: Port device macvlan2 added [ 407.963566][ T7165] loop1: detected capacity change from 0 to 1024 [ 408.800762][ T3229] hfsplus: b-tree write err: -5, ino 4 [ 409.238570][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 409.238649][ T29] audit: type=1326 audit(1722434792.473:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7175 comm="syz.0.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafd61773b9 code=0x7ffc0000 [ 409.369149][ T29] audit: type=1326 audit(1722434792.533:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7175 comm="syz.0.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafd61773b9 code=0x7ffc0000 [ 409.396517][ T29] audit: type=1326 audit(1722434792.533:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7175 comm="syz.0.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fafd6175d50 code=0x7ffc0000 [ 409.422176][ T29] audit: type=1326 audit(1722434792.553:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7175 comm="syz.0.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fafd6176fbb code=0x7ffc0000 [ 409.449751][ T29] audit: type=1326 audit(1722434792.563:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7175 comm="syz.0.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fafd6176fbb code=0x7ffc0000 [ 409.474875][ T29] audit: type=1326 audit(1722434792.583:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7175 comm="syz.0.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fafd6176fbb code=0x7ffc0000 [ 409.498891][ T29] audit: type=1326 audit(1722434792.583:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7175 comm="syz.0.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fafd6176fbb code=0x7ffc0000 [ 409.575754][ T7178] loop1: detected capacity change from 0 to 256 [ 409.600147][ T29] audit: type=1326 audit(1722434792.803:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7175 comm="syz.0.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fafd6176fbb code=0x7ffc0000 [ 409.691352][ T7178] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 409.708495][ T5252] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 409.728651][ T29] audit: type=1326 audit(1722434792.883:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7175 comm="syz.0.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fafd6176fbb code=0x7ffc0000 [ 409.737290][ T7167] loop4: detected capacity change from 0 to 32768 [ 409.765971][ T7167] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.462 (7167) [ 409.804345][ T29] audit: type=1326 audit(1722434793.003:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7175 comm="syz.0.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fafd6176fbb code=0x7ffc0000 [ 409.841190][ T7167] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 409.851986][ T7167] BTRFS info (device loop4): using sha256 (sha256-generic) checksum algorithm [ 409.863397][ T7167] BTRFS info (device loop4): using free-space-tree [ 409.937772][ T1616] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 410.148164][ T1616] usb 4-1: Using ep0 maxpacket: 16 [ 410.184434][ T7167] BTRFS info (device loop4): checking UUID tree [ 410.263819][ T1616] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 410.278720][ T1616] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 410.292635][ T1616] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 410.306282][ T1616] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 410.316497][ T1616] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 410.330192][ T1616] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 410.341461][ T1616] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 410.823006][ T6135] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 410.982164][ T1616] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 410.991902][ T1616] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 411.088897][ T1616] usb 4-1: can't set config #1, error -71 [ 411.135104][ T1616] usb 4-1: USB disconnect, device number 35 [ 411.889965][ T5249] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 412.132985][ T5249] usb 4-1: not running at top speed; connect to a high speed hub [ 412.175001][ T5249] usb 4-1: config 9 has an invalid interface number: 134 but max is 2 [ 412.183832][ T5249] usb 4-1: config 9 has an invalid interface number: 223 but max is 2 [ 412.193055][ T5249] usb 4-1: config 9 has no interface number 1 [ 412.199660][ T5249] usb 4-1: config 9 has no interface number 2 [ 412.206012][ T5249] usb 4-1: config 9 interface 134 altsetting 4 endpoint 0x89 has invalid maxpacket 512, setting to 64 [ 412.217562][ T5249] usb 4-1: config 9 interface 134 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 412.228850][ T5249] usb 4-1: config 9 interface 134 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 412.240440][ T5249] usb 4-1: config 9 interface 134 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 412.251833][ T5249] usb 4-1: config 9 interface 134 altsetting 4 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 412.263252][ T5249] usb 4-1: config 9 interface 134 altsetting 4 has a duplicate endpoint with address 0x4, skipping [ 412.277304][ T5249] usb 4-1: config 9 interface 223 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 412.289369][ T5249] usb 4-1: config 9 interface 223 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 412.300659][ T5249] usb 4-1: config 9 interface 223 altsetting 3 has a duplicate endpoint with address 0x9, skipping [ 412.311795][ T5249] usb 4-1: config 9 interface 223 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 412.323429][ T5249] usb 4-1: config 9 interface 223 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 412.334703][ T5249] usb 4-1: config 9 interface 223 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 412.346527][ T5249] usb 4-1: config 9 interface 223 altsetting 3 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 412.358024][ T5249] usb 4-1: config 9 interface 223 altsetting 3 has a duplicate endpoint with address 0xD, skipping [ 412.370159][ T5249] usb 4-1: config 9 interface 223 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 412.386184][ T5249] usb 4-1: config 9 interface 223 altsetting 3 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 412.398480][ T5249] usb 4-1: config 9 interface 134 has no altsetting 0 [ 412.405530][ T5249] usb 4-1: config 9 interface 223 has no altsetting 0 [ 412.412661][ T5249] usb 4-1: config 9 interface 0 has no altsetting 0 [ 412.506416][ T5249] usb 4-1: New USB device found, idVendor=19d2, idProduct=1596, bcdDevice=2d.b8 [ 412.521153][ T5249] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.530319][ T5249] usb 4-1: Product: Ă稾㵬볶퐷ရ綒첛Ů⦻節ұ繲庤滆촒폤⎑ᆣ»⽎삙唍鱑正煡痜⠎䛿㬿䘺굲რ펌뉎⢬ዩ叼⾼앑톤ꔰ㼥̤㳌ꔨ몾流呮索젤 [ 412.548960][ T5249] usb 4-1: Manufacturer: 俌 [ 412.553912][ T5249] usb 4-1: SerialNumber: ࠠ [ 412.581173][ T5252] usb 1-1: unable to get BOS descriptor or descriptor too short [ 412.620853][ T7223] FAULT_INJECTION: forcing a failure. [ 412.620853][ T7223] name failslab, interval 1, probability 0, space 0, times 0 [ 412.634992][ T7223] CPU: 0 UID: 0 PID: 7223 Comm: syz.2.474 Not tainted 6.11.0-rc1-syzkaller-00044-g22f546873149 #0 [ 412.647200][ T7223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 412.657815][ T7223] Call Trace: [ 412.661263][ T7223] [ 412.664351][ T7223] dump_stack_lvl+0x216/0x2d0 [ 412.669293][ T7223] dump_stack+0x1e/0x30 [ 412.673768][ T7223] should_fail_ex+0x74e/0x800 [ 412.678741][ T7223] should_failslab+0x17f/0x210 [ 412.683905][ T7223] __kmalloc_noprof+0x175/0xf30 [ 412.690534][ T7223] ? tomoyo_realpath_from_path+0x104/0xaa0 [ 412.698827][ T7223] ? kmsan_get_metadata+0x13e/0x1c0 [ 412.705718][ T7223] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 412.711864][ T7223] tomoyo_realpath_from_path+0x104/0xaa0 [ 412.717774][ T7223] ? __srcu_read_lock+0x76/0xd0 [ 412.722880][ T7223] tomoyo_path_number_perm+0x1d9/0x8f0 [ 412.728626][ T7223] ? kmsan_get_metadata+0x13e/0x1c0 [ 412.734107][ T7223] ? kmsan_get_metadata+0x13e/0x1c0 [ 412.739588][ T7223] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 412.745719][ T7223] tomoyo_file_ioctl+0x42/0x50 [ 412.750738][ T7223] ? __pfx_tomoyo_file_ioctl+0x10/0x10 [ 412.756458][ T7223] security_file_ioctl+0xa8/0x160 [ 412.761768][ T7223] __se_sys_ioctl+0xd3/0x450 [ 412.766690][ T7223] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 412.772801][ T7223] __x64_sys_ioctl+0x96/0xe0 [ 412.778195][ T7223] x64_sys_call+0x1a06/0x3c10 [ 412.784972][ T7223] do_syscall_64+0xcd/0x1e0 [ 412.790328][ T7223] ? clear_bhb_loop+0x25/0x80 [ 412.796458][ T7223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.802795][ T7223] RIP: 0033:0x7f2b5c5773b9 [ 412.808416][ T7223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 412.835016][ T7223] RSP: 002b:00007f2b5d2a1048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 412.845137][ T7223] RAX: ffffffffffffffda RBX: 00007f2b5c705f80 RCX: 00007f2b5c5773b9 [ 412.857410][ T7223] RDX: 0000000000000000 RSI: 000000000000aea3 RDI: 0000000000000004 [ 412.866052][ T7223] RBP: 00007f2b5d2a10a0 R08: 0000000000000000 R09: 0000000000000000 [ 412.875732][ T7223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 412.886040][ T7223] R13: 000000000000000b R14: 00007f2b5c705f80 R15: 00007ffd2a5e1868 [ 412.897342][ T7223] [ 412.904331][ T7223] ERROR: Out of memory at tomoyo_realpath_from_path. [ 412.928014][ T5252] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 412.935923][ T5252] usb 1-1: can't read configurations, error -71 [ 413.100827][ T7229] bridge0: port 3(gretap0) entered blocking state [ 413.108570][ T7229] bridge0: port 3(gretap0) entered disabled state [ 413.116302][ T7229] gretap0: entered allmulticast mode [ 413.129442][ T7229] gretap0: entered promiscuous mode [ 413.141553][ T7229] bridge0: port 3(gretap0) entered blocking state [ 413.149952][ T7229] bridge0: port 3(gretap0) entered forwarding state [ 413.205903][ T7230] gretap0: left allmulticast mode [ 413.221074][ T7230] gretap0: left promiscuous mode [ 413.231072][ T7230] bridge0: port 3(gretap0) entered disabled state [ 413.290740][ T5249] option 4-1:9.134: GSM modem (1-port) converter detected [ 413.309206][ T5290] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 413.350661][ T7232] netlink: 4 bytes leftover after parsing attributes in process `syz.1.476'. [ 413.360821][ T7232] netlink: 24 bytes leftover after parsing attributes in process `syz.1.476'. [ 413.417389][ T5249] usb 4-1: USB disconnect, device number 36 [ 413.426562][ T7237] FAULT_INJECTION: forcing a failure. [ 413.426562][ T7237] name failslab, interval 1, probability 0, space 0, times 0 [ 413.427791][ T5249] option 4-1:9.134: device disconnected [ 413.440205][ T7237] CPU: 0 UID: 0 PID: 7237 Comm: syz.2.477 Not tainted 6.11.0-rc1-syzkaller-00044-g22f546873149 #0 [ 413.458026][ T7237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 413.468323][ T7237] Call Trace: [ 413.471778][ T7237] [ 413.474900][ T7237] dump_stack_lvl+0x216/0x2d0 [ 413.480172][ T7237] dump_stack+0x1e/0x30 [ 413.485153][ T7237] should_fail_ex+0x74e/0x800 [ 413.490709][ T7237] should_failslab+0x17f/0x210 [ 413.499168][ T7237] kmem_cache_alloc_noprof+0xe2/0xb20 [ 413.505111][ T7237] ? __rt6_find_exception_rcu+0xef/0x7d0 [ 413.513350][ T7237] ? dst_alloc+0x19f/0x240 [ 413.519198][ T7237] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 413.526294][ T7237] dst_alloc+0x19f/0x240 [ 413.531265][ T7237] ? __pfx_ip6_dst_gc+0x10/0x10 [ 413.536676][ T7237] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 413.543622][ T7237] ip6_pol_route+0x14ac/0x1fb0 [ 413.549523][ T7237] ? ip6_pol_route+0xb40/0x1fb0 [ 413.555451][ T7237] ip6_pol_route_output+0x69/0x90 [ 413.562473][ T7237] fib6_rule_lookup+0x427/0xaa0 [ 413.568946][ T7237] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 413.576754][ T7237] ? kmsan_get_metadata+0x13e/0x1c0 [ 413.583107][ T7237] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 413.590773][ T7237] ip6_route_output_flags+0x4a1/0x720 [ 413.598288][ T7237] ip6_dst_lookup_tail+0x228/0x1f70 [ 413.606856][ T7237] ? filter_irq_stacks+0x60/0x1a0 [ 413.612643][ T7237] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 413.621975][ T7237] ? kmsan_get_metadata+0x13e/0x1c0 [ 413.627983][ T7237] ip6_dst_lookup_flow+0x81/0x170 [ 413.634385][ T7237] l2tp_ip6_sendmsg+0x1a54/0x26b0 [ 413.640251][ T7237] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 413.647798][ T7237] ? kmsan_get_metadata+0x13e/0x1c0 [ 413.656503][ T7237] ? __pfx_udp_sendmsg+0x10/0x10 [ 413.662697][ T7237] ? __pfx_l2tp_ip6_sendmsg+0x10/0x10 [ 413.670054][ T7237] inet_sendmsg+0x25a/0x280 [ 413.674846][ T7237] ? __pfx_inet_sendmsg+0x10/0x10 [ 413.680135][ T7237] __sock_sendmsg+0x267/0x380 [ 413.685118][ T7237] ____sys_sendmsg+0x903/0xb60 [ 413.690250][ T7237] ___sys_sendmsg+0x28d/0x3c0 [ 413.695184][ T7237] ? kmsan_get_metadata+0x13e/0x1c0 [ 413.700784][ T7237] ? __fget_files+0x4fe/0x5d0 [ 413.705821][ T7237] ? kmsan_get_metadata+0x13e/0x1c0 [ 413.711313][ T7237] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 413.717503][ T7237] __sys_sendmmsg+0x3c4/0x950 [ 413.722448][ T7237] ? vfs_write+0xf45/0x1550 [ 413.727280][ T7237] ? kmsan_get_metadata+0x13e/0x1c0 [ 413.732844][ T7237] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 413.739468][ T7237] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 413.745941][ T7237] __x64_sys_sendmmsg+0xbc/0x120 [ 413.751329][ T7237] x64_sys_call+0x369d/0x3c10 [ 413.756861][ T7237] do_syscall_64+0xcd/0x1e0 [ 413.761680][ T7237] ? clear_bhb_loop+0x25/0x80 [ 413.766667][ T7237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.774283][ T7237] RIP: 0033:0x7f2b5c5773b9 [ 413.778918][ T7237] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 413.799175][ T7237] RSP: 002b:00007f2b5d2a1048 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 413.807964][ T7237] RAX: ffffffffffffffda RBX: 00007f2b5c705f80 RCX: 00007f2b5c5773b9 [ 413.816181][ T7237] RDX: 0000000000000002 RSI: 0000000020001400 RDI: 0000000000000003 [ 413.824371][ T7237] RBP: 00007f2b5d2a10a0 R08: 0000000000000000 R09: 0000000000000000 [ 413.832557][ T7237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 413.840735][ T7237] R13: 000000000000000b R14: 00007f2b5c705f80 R15: 00007ffd2a5e1868 [ 413.849046][ T7237] [ 413.926295][ T5290] usb 5-1: unable to get BOS descriptor or descriptor too short [ 413.942684][ T5290] usb 5-1: config 0 has an invalid descriptor of length 102, skipping remainder of the config [ 413.953984][ T5290] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 413.964116][ T5290] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid maxpacket 30768, setting to 1024 [ 413.975721][ T5290] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 1024 [ 414.020126][ T5290] usb 5-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 414.029653][ T5290] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.039348][ T5290] usb 5-1: Product: syz [ 414.044340][ T5290] usb 5-1: Manufacturer: syz [ 414.050961][ T5290] usb 5-1: SerialNumber: syz [ 414.089520][ T5290] usb 5-1: config 0 descriptor?? [ 414.098702][ T7227] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 414.124837][ T7227] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 414.191072][ C0] usb 5-1: NFC: Urb failure (status -71) [ 414.197671][ C0] usb 5-1: NFC: Urb failure (status -71) [ 414.208490][ T5290] usb 5-1: NFC: Unable to get FW version [ 414.298874][ T7239] loop0: detected capacity change from 0 to 256 [ 414.314968][ T5290] pn533_usb 5-1:0.0: probe with driver pn533_usb failed with error -71 [ 414.402592][ T7227] FAULT_INJECTION: forcing a failure. [ 414.402592][ T7227] name failslab, interval 1, probability 0, space 0, times 0 [ 414.415808][ T7227] CPU: 0 UID: 0 PID: 7227 Comm: syz.4.470 Not tainted 6.11.0-rc1-syzkaller-00044-g22f546873149 #0 [ 414.426880][ T7227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 414.437910][ T7227] Call Trace: [ 414.441732][ T7227] [ 414.444854][ T7227] dump_stack_lvl+0x216/0x2d0 [ 414.449995][ T7227] dump_stack+0x1e/0x30 [ 414.454484][ T7227] should_fail_ex+0x74e/0x800 [ 414.459818][ T7227] should_failslab+0x17f/0x210 [ 414.465076][ T7227] kmem_cache_alloc_noprof+0xe2/0xb20 [ 414.470987][ T7227] ? __rt6_find_exception_rcu+0xef/0x7d0 [ 414.477907][ T7227] ? dst_alloc+0x19f/0x240 [ 414.482821][ T7227] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 414.491739][ T7227] dst_alloc+0x19f/0x240 [ 414.498579][ T7227] ? __pfx_ip6_dst_gc+0x10/0x10 [ 414.505647][ T7227] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 414.514556][ T7227] ip6_pol_route+0x14ac/0x1fb0 [ 414.519605][ T7227] ? ip6_pol_route+0xb40/0x1fb0 [ 414.528207][ T7227] ip6_pol_route_output+0x69/0x90 [ 414.534038][ T7227] fib6_rule_lookup+0x253/0xaa0 [ 414.541100][ T7227] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 414.550916][ T7227] ? kmsan_get_metadata+0x13e/0x1c0 [ 414.557463][ T7227] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 414.565571][ T7227] ip6_route_output_flags+0x4a1/0x720 [ 414.572938][ T7227] ip6_dst_lookup_tail+0x228/0x1f70 [ 414.579755][ T7227] ? filter_irq_stacks+0x60/0x1a0 [ 414.585521][ T7227] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 414.595488][ T7227] ? kmsan_get_metadata+0x13e/0x1c0 [ 414.601265][ T7227] ip6_dst_lookup_flow+0x81/0x170 [ 414.606578][ T7227] ip6_datagram_dst_update+0x8a0/0xe40 [ 414.612357][ T7227] __ip6_datagram_connect+0x129a/0x1580 [ 414.618217][ T7227] ip6_datagram_connect_v6_only+0xa7/0x110 [ 414.624315][ T7227] ? __pfx_ip6_datagram_connect_v6_only+0x10/0x10 [ 414.631033][ T7227] inet_dgram_connect+0x2e9/0x6a0 [ 414.636322][ T7227] ? kmsan_get_metadata+0x13e/0x1c0 [ 414.641813][ T7227] __sys_connect+0x606/0x690 [ 414.646659][ T7227] ? ksys_write+0x3e9/0x4c0 [ 414.651403][ T7227] ? __pfx_inet_dgram_connect+0x10/0x10 [ 414.657221][ T7227] __x64_sys_connect+0x91/0xe0 [ 414.662226][ T7227] x64_sys_call+0x25a3/0x3c10 [ 414.667175][ T7227] do_syscall_64+0xcd/0x1e0 [ 414.671916][ T7227] ? clear_bhb_loop+0x25/0x80 [ 414.676944][ T7227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.683144][ T7227] RIP: 0033:0x7f0c05b773b9 [ 414.687769][ T7227] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 414.707728][ T7227] RSP: 002b:00007f0c069f8048 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 414.716791][ T7227] RAX: ffffffffffffffda RBX: 00007f0c05d05f80 RCX: 00007f0c05b773b9 [ 414.725004][ T7227] RDX: 000000000000001c RSI: 0000000020000200 RDI: 0000000000000005 [ 414.733218][ T7227] RBP: 00007f0c069f80a0 R08: 0000000000000000 R09: 0000000000000000 [ 414.741421][ T7227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 414.749600][ T7227] R13: 000000000000000b R14: 00007f0c05d05f80 R15: 00007ffe706f0f28 [ 414.757816][ T7227] [ 414.881548][ T7239] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 415.205825][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 415.205902][ T29] audit: type=1326 audit(1722434798.443:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7244 comm="syz.3.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67065773b9 code=0x7ffc0000 [ 415.370342][ T29] audit: type=1326 audit(1722434798.543:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7244 comm="syz.3.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7f67065773b9 code=0x7ffc0000 [ 415.396760][ T29] audit: type=1326 audit(1722434798.543:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7244 comm="syz.3.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67065773b9 code=0x7ffc0000 [ 415.423405][ T29] audit: type=1326 audit(1722434798.543:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7244 comm="syz.3.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67065773b9 code=0x7ffc0000 [ 415.448748][ T29] audit: type=1326 audit(1722434798.543:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7244 comm="syz.3.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f67065773b9 code=0x7ffc0000 [ 415.473073][ T29] audit: type=1326 audit(1722434798.543:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7244 comm="syz.3.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67065773b9 code=0x7ffc0000 [ 415.496833][ T29] audit: type=1326 audit(1722434798.553:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7244 comm="syz.3.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f67065773b9 code=0x7ffc0000 [ 415.519715][ T29] audit: type=1326 audit(1722434798.553:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7244 comm="syz.3.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67065773b9 code=0x7ffc0000 [ 415.545708][ T29] audit: type=1326 audit(1722434798.573:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7244 comm="syz.3.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67065773b9 code=0x7ffc0000 [ 415.574894][ T29] audit: type=1326 audit(1722434798.573:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7244 comm="syz.3.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f67065773b9 code=0x7ffc0000 [ 415.967297][ T5290] usb 5-1: USB disconnect, device number 14 [ 416.712382][ T7242] loop1: detected capacity change from 0 to 32768 [ 416.727601][ T7242] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.480 (7242) [ 416.793087][ T7242] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 416.803917][ T7242] BTRFS info (device loop1): using sha256 (sha256-generic) checksum algorithm [ 416.815787][ T7242] BTRFS info (device loop1): using free-space-tree [ 416.972800][ T7242] BTRFS info (device loop1): checking UUID tree [ 417.063021][ T5290] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 417.243347][ T5252] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 417.429118][ T5190] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 417.439128][ T5290] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 417.450321][ T5290] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 417.461777][ T5290] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 417.472571][ T5290] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 417.492017][ T5290] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 417.513324][ T5290] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.605246][ T5290] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 417.615798][ T5290] usb 5-1: invalid MIDI out EP 0 [ 417.821369][ T5290] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 417.880800][ T7264] netlink: 20 bytes leftover after parsing attributes in process `syz.4.484'. [ 417.914114][ T5290] usb 5-1: USB disconnect, device number 15 [ 418.965400][ T7301] FAULT_INJECTION: forcing a failure. [ 418.965400][ T7301] name failslab, interval 1, probability 0, space 0, times 0 [ 418.984243][ T7301] CPU: 1 UID: 0 PID: 7301 Comm: syz.4.491 Not tainted 6.11.0-rc1-syzkaller-00044-g22f546873149 #0 [ 418.999673][ T7301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 419.010315][ T7301] Call Trace: [ 419.013800][ T7301] [ 419.016908][ T7301] dump_stack_lvl+0x216/0x2d0 [ 419.021864][ T7301] dump_stack+0x1e/0x30 [ 419.026364][ T7301] should_fail_ex+0x74e/0x800 [ 419.031371][ T7301] should_failslab+0x17f/0x210 [ 419.036460][ T7301] kmem_cache_alloc_noprof+0xe2/0xb20 [ 419.042413][ T7301] ? skb_clone+0x303/0x550 [ 419.047130][ T7301] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 419.054682][ T7301] skb_clone+0x303/0x550 [ 419.059558][ T7301] __netlink_deliver_tap+0x607/0xc90 [ 419.065167][ T7301] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 419.071427][ T7301] ? kmsan_get_metadata+0x13e/0x1c0 [ 419.077079][ T7301] netlink_unicast+0x1102/0x1260 [ 419.082450][ T7301] netlink_sendmsg+0x10da/0x11e0 [ 419.087817][ T7301] ? __pfx_netlink_sendmsg+0x10/0x10 [ 419.093920][ T7301] ? __pfx_netlink_sendmsg+0x10/0x10 [ 419.099704][ T7301] __sock_sendmsg+0x30f/0x380 [ 419.104712][ T7301] ____sys_sendmsg+0x903/0xb60 [ 419.110784][ T7301] ___sys_sendmsg+0x28d/0x3c0 [ 419.116468][ T7301] ? kmsan_get_metadata+0x13e/0x1c0 [ 419.123415][ T7301] ? filter_irq_stacks+0x60/0x1a0 [ 419.128998][ T7301] ? kmsan_get_metadata+0x13e/0x1c0 [ 419.135405][ T7301] ? kmsan_internal_check_memory+0x98/0x560 [ 419.141616][ T7301] ? kmsan_get_metadata+0x13e/0x1c0 [ 419.147142][ T7301] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 419.153363][ T7301] __sys_sendmmsg+0x3c4/0x950 [ 419.158331][ T7301] ? vfs_write+0xf45/0x1550 [ 419.163106][ T7301] ? kmsan_get_metadata+0x13e/0x1c0 [ 419.168606][ T7301] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 419.175242][ T7301] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 419.181641][ T7301] __x64_sys_sendmmsg+0xbc/0x120 [ 419.186881][ T7301] x64_sys_call+0x369d/0x3c10 [ 419.191855][ T7301] do_syscall_64+0xcd/0x1e0 [ 419.196625][ T7301] ? clear_bhb_loop+0x25/0x80 [ 419.201576][ T7301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.207811][ T7301] RIP: 0033:0x7f0c05b773b9 [ 419.212448][ T7301] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 419.232530][ T7301] RSP: 002b:00007f0c069f8048 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 419.241888][ T7301] RAX: ffffffffffffffda RBX: 00007f0c05d05f80 RCX: 00007f0c05b773b9 [ 419.250139][ T7301] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000005 [ 419.258565][ T7301] RBP: 00007f0c069f80a0 R08: 0000000000000000 R09: 0000000000000000 [ 419.267084][ T7301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 419.275393][ T7301] R13: 000000000000000b R14: 00007f0c05d05f80 R15: 00007ffe706f0f28 [ 419.284022][ T7301] [ 419.291925][ T7301] netlink: 16 bytes leftover after parsing attributes in process `syz.4.491'. [ 419.452713][ T7295] loop0: detected capacity change from 0 to 512 [ 419.616630][ T7295] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 419.630703][ T7295] ext4 filesystem being mounted at /118/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 419.702162][ T7295] netlink: 4 bytes leftover after parsing attributes in process `syz.0.490'. [ 419.877191][ T7304] netlink: 72 bytes leftover after parsing attributes in process `syz.2.492'. [ 419.890774][ T7304] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 420.001566][ T7295] team1: Mode changed to "activebackup" [ 420.008762][ T7295] ===================================================== [ 420.017762][ T7295] BUG: KMSAN: uninit-value in string+0x36f/0x580 [ 420.024613][ T7295] string+0x36f/0x580 [ 420.029067][ T7295] vsnprintf+0x1b3b/0x2a00 [ 420.033679][ T7295] __request_module+0x252/0x9f0 [ 420.038871][ T7295] team_mode_option_set+0x437/0x970 [ 420.044298][ T7295] team_nl_options_set_doit+0x1339/0x1f90 [ 420.050482][ T7295] genl_rcv_msg+0x1214/0x12c0 [ 420.059058][ T7295] netlink_rcv_skb+0x375/0x650 [ 420.064030][ T7295] genl_rcv+0x40/0x60 [ 420.069850][ T7295] netlink_unicast+0xf52/0x1260 [ 420.074993][ T7295] netlink_sendmsg+0x10da/0x11e0 [ 420.080355][ T7295] __sock_sendmsg+0x30f/0x380 [ 420.085800][ T7295] ____sys_sendmsg+0x877/0xb60 [ 420.091631][ T7295] ___sys_sendmsg+0x28d/0x3c0 [ 420.097071][ T7295] __x64_sys_sendmsg+0x307/0x4a0 [ 420.102453][ T7295] x64_sys_call+0x2dd6/0x3c10 [ 420.107629][ T7295] do_syscall_64+0xcd/0x1e0 [ 420.114417][ T7295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.118899][ T5252] usb 4-1: unable to get BOS descriptor or descriptor too short [ 420.121244][ T7295] [ 420.131403][ T7295] Uninit was created at: [ 420.135880][ T7295] kmem_cache_alloc_node_noprof+0x6bf/0xb80 [ 420.142694][ T7295] kmalloc_reserve+0x13d/0x4a0 [ 420.147871][ T7295] __alloc_skb+0x363/0x7b0 [ 420.152559][ T7295] netlink_alloc_large_skb+0x1b4/0x280 [ 420.162043][ T7295] netlink_sendmsg+0xa96/0x11e0 [ 420.162178][ T7295] __sock_sendmsg+0x30f/0x380 [ 420.162311][ T7295] ____sys_sendmsg+0x877/0xb60 [ 420.162419][ T7295] ___sys_sendmsg+0x28d/0x3c0 [ 420.162528][ T7295] __x64_sys_sendmsg+0x307/0x4a0 [ 420.162639][ T7295] x64_sys_call+0x2dd6/0x3c10 [ 420.162920][ T7295] do_syscall_64+0xcd/0x1e0 [ 420.163034][ T7295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.163197][ T7295] [ 420.163224][ T7295] CPU: 1 UID: 0 PID: 7295 Comm: syz.0.490 Not tainted 6.11.0-rc1-syzkaller-00044-g22f546873149 #0 [ 420.163342][ T7295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 420.163398][ T7295] ===================================================== [ 420.163432][ T7295] Disabling lock debugging due to kernel taint [ 420.163484][ T7295] Kernel panic - not syncing: kmsan.panic set ... [ 420.163541][ T7295] CPU: 1 UID: 0 PID: 7295 Comm: syz.0.490 Tainted: G B 6.11.0-rc1-syzkaller-00044-g22f546873149 #0 [ 420.163671][ T7295] Tainted: [B]=BAD_PAGE [ 420.163707][ T7295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 420.163764][ T7295] Call Trace: [ 420.163798][ T7295] [ 420.163834][ T7295] dump_stack_lvl+0x216/0x2d0 [ 420.163943][ T7295] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 420.164099][ T7295] dump_stack+0x1e/0x30 [ 420.164188][ T7295] panic+0x4e2/0xcd0 [ 420.164333][ T7295] ? kmsan_get_metadata+0x61/0x1c0 [ 420.164486][ T7295] kmsan_report+0x2c7/0x2d0 [ 420.164683][ T7295] ? kmsan_get_metadata+0x13e/0x1c0 [ 420.164834][ T7295] ? __msan_warning+0x95/0x120 [ 420.164966][ T7295] ? string+0x36f/0x580 [ 420.165072][ T7295] ? vsnprintf+0x1b3b/0x2a00 [ 420.165190][ T7295] ? __request_module+0x252/0x9f0 [ 420.165315][ T7295] ? team_mode_option_set+0x437/0x970 [ 420.165458][ T7295] ? team_nl_options_set_doit+0x1339/0x1f90 [ 420.165592][ T7295] ? genl_rcv_msg+0x1214/0x12c0 [ 420.165733][ T7295] ? netlink_rcv_skb+0x375/0x650 [ 420.165844][ T7295] ? genl_rcv+0x40/0x60 [ 420.165971][ T7295] ? netlink_unicast+0xf52/0x1260 [ 420.166068][ T7295] ? netlink_sendmsg+0x10da/0x11e0 [ 420.166183][ T7295] ? __sock_sendmsg+0x30f/0x380 [ 420.166315][ T7295] ? ____sys_sendmsg+0x877/0xb60 [ 420.166426][ T7295] ? ___sys_sendmsg+0x28d/0x3c0 [ 420.166537][ T7295] ? __x64_sys_sendmsg+0x307/0x4a0 [ 420.166652][ T7295] ? x64_sys_call+0x2dd6/0x3c10 [ 420.166782][ T7295] ? do_syscall_64+0xcd/0x1e0 [ 420.166880][ T7295] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.167052][ T7295] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 420.167198][ T7295] ? format_decode+0x3a/0x1580 [ 420.167313][ T7295] ? filter_irq_stacks+0x60/0x1a0 [ 420.167418][ T7295] ? kmsan_get_metadata+0x13e/0x1c0 [ 420.167562][ T7295] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 420.167694][ T7295] ? kmsan_get_metadata+0x13e/0x1c0 [ 420.167830][ T7295] ? kmsan_get_metadata+0x13e/0x1c0 [ 420.167972][ T7295] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 420.168118][ T7295] __msan_warning+0x95/0x120 [ 420.168239][ T7295] string+0x36f/0x580 [ 420.168359][ T7295] vsnprintf+0x1b3b/0x2a00 [ 420.168473][ T7295] ? kmsan_get_metadata+0x13e/0x1c0 [ 420.168629][ T7295] __request_module+0x252/0x9f0 [ 420.168755][ T7295] ? team_nl_options_set_doit+0xc5e/0x1f90 [ 420.168894][ T7295] ? kmsan_get_metadata+0x13e/0x1c0 [ 420.169034][ T7295] ? kmsan_get_metadata+0x13e/0x1c0 [ 420.169182][ T7295] team_mode_option_set+0x437/0x970 [ 420.544306][ T7295] ? __pfx_team_mode_option_set+0x10/0x10 [ 420.550601][ T7295] team_nl_options_set_doit+0x1339/0x1f90 [ 420.558524][ T7295] ? __pfx_team_nl_options_set_doit+0x10/0x10 [ 420.566173][ T7295] ? __pfx_team_nl_options_set_doit+0x10/0x10 [ 420.574313][ T7295] genl_rcv_msg+0x1214/0x12c0 [ 420.580276][ T7295] ? filter_irq_stacks+0x164/0x1a0 [ 420.586113][ T7295] ? __pfx_team_nl_options_set_doit+0x10/0x10 [ 420.595489][ T7295] netlink_rcv_skb+0x375/0x650 [ 420.601865][ T7295] ? __pfx_genl_rcv_msg+0x10/0x10 [ 420.607689][ T7295] ? __pfx_genl_rcv+0x10/0x10 [ 420.614285][ T7295] genl_rcv+0x40/0x60 [ 420.621697][ T7295] netlink_unicast+0xf52/0x1260 [ 420.627572][ T7295] netlink_sendmsg+0x10da/0x11e0 [ 420.632724][ T7295] ? __pfx_netlink_sendmsg+0x10/0x10 [ 420.638197][ T7295] ? __pfx_netlink_sendmsg+0x10/0x10 [ 420.643668][ T7295] __sock_sendmsg+0x30f/0x380 [ 420.648569][ T7295] ____sys_sendmsg+0x877/0xb60 [ 420.653895][ T7295] ___sys_sendmsg+0x28d/0x3c0 [ 420.662450][ T7295] ? __rcu_read_unlock+0x7b/0xe0 [ 420.667810][ T7295] ? __fget_files+0x4fe/0x5d0 [ 420.672896][ T7295] ? kmsan_get_metadata+0x13e/0x1c0 [ 420.678317][ T7295] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 420.684375][ T7295] __x64_sys_sendmsg+0x307/0x4a0 [ 420.689718][ T7295] x64_sys_call+0x2dd6/0x3c10 [ 420.696622][ T7295] do_syscall_64+0xcd/0x1e0 [ 420.701313][ T7295] ? clear_bhb_loop+0x25/0x80 [ 420.706237][ T7295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.714717][ T7295] RIP: 0033:0x7fafd61773b9 [ 420.721009][ T7295] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 420.745899][ T7295] RSP: 002b:00007fafd6eda048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 420.760508][ T7295] RAX: ffffffffffffffda RBX: 00007fafd6305f80 RCX: 00007fafd61773b9 [ 420.771246][ T7295] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 000000000000000a [ 420.781758][ T7295] RBP: 00007fafd61e48e6 R08: 0000000000000000 R09: 0000000000000000 [ 420.791203][ T7295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 420.801950][ T7295] R13: 000000000000000b R14: 00007fafd6305f80 R15: 00007ffc15b69038 [ 420.810395][ T7295] [ 420.813758][ T7295] Kernel Offset: disabled [ 420.818145][ T7295] Rebooting in 86400 seconds..