last executing test programs: 3m4.295805972s ago: executing program 5 (id=6): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r0, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r0, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f00000000c0)={0x3, 0x2}) r1 = socket$qrtr(0x2a, 0x2, 0x0) fcntl$setpipe(r0, 0x407, 0x8128) ioctl$sock_qrtr_TIOCINQ(r1, 0x541b, &(0x7f0000000040)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000001c0), 0x12) sync() 3m2.949107756s ago: executing program 5 (id=19): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x200000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x4000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=@mpls_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x100}}, 0x1c}}, 0x20004980) sendmsg$kcm(r2, &(0x7f0000002040)={&(0x7f00000001c0)=@ethernet={0x1, @broadcast}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000000480)="29f34a00e7200180232dd9d665127d2520f893c53ad9c2bc21a84b9753b4a266384e8b0d4303c3b1fab19b70b9e177695b56650983f7210ed6dccc988df086086ae20a62eeac203ce673427eda6dbf339132c62a63c47b42953d3e733f9035352fd6b2aa5c6582d25bfabaec12ed74a41bccd33d872cb6282ea96d4dbbf01bb092100edd62a8cf4f50442314e8b16b66bde7d879cdb6140d63db24421b23262631aed38604a5a6485e4ef6", 0xab}, {&(0x7f0000000700)="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", 0xff0}, {&(0x7f0000001700)="fc608a677d9970c54092bb94e4dcf440d70a571d4d413cf85a617da7ad1140dfd1e734c5be73d3bfd34ed2314b13bebaa23c8eb39e45d69648183d4c9896d3f1db4a927f65d0a534018d8fa08d6f66f448c3aaf4f8ff5c989e25081daa067e1861d803774ffd07e75c03e283ae860e056ebe90cee5", 0x75}, {&(0x7f0000001780)="0250287742df46d19caf534249784fd114eb2c4efc6afa1405ce927f82950a15abe4e4131301473defbcde4a5aebc4eafc9b20a41f1d3dfedf7fcc795bc252309a593087d1c887041045bf0612ea804ab81b196f8fc9f28a5e0fbd48239efa4ffbb0a90c99a76c4371110779", 0x6c}, {&(0x7f0000001800)="a6d5315499f90c3c02f0505f94d2543f1cb8d8914daf443277e7323a31c89dcb57b2398b0c35b4f9a2ed28a02eb1667b6fffcf7a2ab225a4fde28de645092ec129772d2103098e2001ea6a8bbeaff6b0f8bc18be63886f104cde343f33549e5c0d26800dd61ea939d59529ac9aaa53c978ef527414be5a0c40f419611e01da98ba15a6740fd1776a9d6c4a3c7023563ec34cf732bd57c4036d7fa1197faa28bfc281e90a4fdb26304015f9e59908b8cb98f068de744439c4", 0xb8}, {&(0x7f0000001900)="765d485e5169c45ba27e35afd40cacba51309fc222eab4a7f77673b2e9f670e37cefde1cbf1e5e66107fc4c1d9ad016c4c9716ffedcb058844be599fb86c84ce2ae0a6be9aa0f290f52b600560a38a6d2f0548662da33844de59bafdaa8e0ec16ab2c3796fd03f9332486ce12495", 0x6e}, {&(0x7f0000001980)="88edb32171e4d678cb11ae6e3f34c7070978266730ee8c8daa20f466462f93a610efbb4e5815afb805e3cbd04898c1bd3b1d0d2c07459a4b10f5e182d27e34a1522f9a71db3c0e5e", 0x48}, {&(0x7f0000001a00)="b5ecc9b2298d3556597962573f6827e754e1b9ac305ce01dfc4372296f0f60b6ed5f9452b60bc477afc7c2660c5a18bcfb2b25b8afa5e59f199b96486b265fced3bd08e4b8ceaf", 0x47}, {&(0x7f0000001a80)="c0cc7cea7cada57bf39ee5c65b5046ad6ca7df500543b542ca3d8836162132253adc1f3956ba8486a5c426c5682deed3098bb40ceabed6df7b93ebce2c201499afea9c58bfa0dca728621984cb6aa9963c133515489e04402357e68ac89b96c7fc69cbb0224102bad4cec77c9d43c427eb5803c2125f6c83a4e0476b26e8031c228ee312737df2df513b403fb69c9e04f69462befebaed72833184f76f848da29731689197307a157b10a8ef764ed5c9d29c4d859b011636cc2021c9f35e4b", 0xbf}], 0x9, &(0x7f0000001c40)=[{0xd0, 0xff, 0x8001, "969be89ecdf2f46be688cdc43f5d70e030eb4bf8cc4d24d08c8d67eedaa564fb4ed85280496d640e37bd9b748c2dc948d8d22fce9747637ae2235f8b7f1de6900b2f03cb739ceb30f3d683c29a7a4538bc2a5095cb5ae5fc5e0844a595aab6e5d920ab0135a69ea27b1dea5e0310a3514325a459bbd8f8ef5fcce5d9bb78159fc062e31dd46ef2de926ac51daab1fa7487864deb854b6ef4df3f630c38729d50bda5985c62238dfbd7c784ec0c6deff0775e6a14b308a5674d3d"}, {0xa0, 0x117, 0x10, "95ebc0c2c45f5d78e0b237cd5d9d27c6e6768a238e41bf89d6e5c26c69e51f145d05e5b967c096393514a90f7d14cf30aece781fdc46352ea298d00cdedbab4e15c736ef61f0722176a7cb865636f7e2a2ac70c9549e0cd81e2d1b4ef878ff11e86fe0816eeac159d9054e7d73c45b867cc36b0204506156dff3d60e288947fa9fa3e30a0bb36c38c916edeb4cff0fe6"}, {0xb8, 0x0, 0x9ea, "ff5d8dc0f15777c53fd1bb62658bbfbfc59ccbef0ac9dbebbd1c0bf45c1ff3bb12247ca474dadc7a8b55ae16fb661bb229ca4115d12f97ae7a6074ee82ab9ea77f10bf288e2d35f9e792dd36c31525d387306cae4208c2855acb8800dabea47e7fad63f241bf0dde8fd313d9c800e752a8e779a3ca010960c89f81d0c73dff68f4642430b226ad6590fb93579e615faf2d0d0b6d60c8f718d3443a1a7d80d0f780"}, {0xf8, 0x104, 0x52, "d787a87ce0a1e2778535a94f63f553fa9e3b0ae3d88f130b3d08facfb388e8c71d929ccd41d2ae35f47c8285218d79fbcf42dbbf9cb1338af043f8ff2bf21d73aa4b89881282866e106d35fc966ef35fb1d58a1af20352ade40c18ccce920ffde78f796d4d815e4d7ebf659fe435b6b13edd3f093201da26c8645078ebe654cd2f4fc1535a88f787973967f9a83c3f212a69e726c6b67109a8b35a49f4a5acabacfc3472daf5bc879671db8e9149c210e3c027082ece0f2a5ff321886b6fd944ff63fe3a58a553520da4e79907e9b2992ae4042617d9583534c6260b7999f6584d8a"}, {0x10, 0x10e, 0x8}], 0x330}, 0x40) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0xf, 0x0, 0x0) shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) 3m0.175321648s ago: executing program 5 (id=25): r0 = syz_usb_connect(0x0, 0x202, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902f00101040000030904"], 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x450000, 0x20) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) ioctl$BLKPG(r2, 0x40084d0b, 0x0) mount_setattr(r1, 0x0, 0x9000, &(0x7f0000000200)={0x5, 0x0, 0x1a0000, {r2}}, 0x20) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000840)={0x44, &(0x7f0000000600)=ANY=[@ANYBLOB='\f\x00'/11], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$dri(&(0x7f0000000a40), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000a80)="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", 0x1000}) 2m57.032176325s ago: executing program 5 (id=35): syz_open_dev$ttys(0xc, 0x2, 0x1) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x204001, &(0x7f0000000240), 0x1, 0xb9f, &(0x7f0000000c00)="$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") r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r0, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xff\a\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x5c) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x42428, 0x0) socket$packet(0x11, 0x3, 0x300) mount$9p_rdma(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080), 0x10000, &(0x7f0000000200)={'trans=rdma,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@sq={'sq', 0x3d, 0x73e}}]}}) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x5, 0xb, &(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRESOCT, @ANYRES16, @ANYRES32=0x0, @ANYRES8=r2], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), r2) sendmsg$DEVLINK_CMD_TRAP_GET(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000fbfbdf25270000000e0001006e655f64657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) 2m56.011254305s ago: executing program 5 (id=40): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file0\x00', 0x210008, &(0x7f0000000540)=ANY=[], 0xff, 0xc42, &(0x7f0000000f40)="$eJzs3U9sHNd9B/DfGy7Fld1WTOwoThoXm7ZIZcVS9S+mYhXuqqbZBpBlIRRzC8CVSKkLUyRBUo1spC3THnroIUAR9JATgdYokKKB0bRBj0zrAsnFhyKnnogWNoKiB7YIkFPAYGbfikuKtGmTlCjr87HJ7+7MezPvzaxmJIJvXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEb/30sVTp9ODbgUAcD9dHv3yqTPu/wDwSLnq3/8AAAAAAAAAAAAAAHDQpSjiiUgxe3k1jVfvO+qX2v2374wNj2xd7XCqavZV5cuv+ukzZ8994bmh89281J5+j/p77dPxyujVi40XZ27Nzk3Oz09ONMam29dnJiZ3vIXd1t/seHUAGrdevT1x48Z848zJsxtW3xl8d+Dxo4MXhp458XS37NjwyMjoepF6b/nah25Ix3YjPA5FEScixbPf/UlqRUQRuz8W9ft77jc7XHXieNWJseGRqiNT7db0QrnySvdAFBGNnkrN7jHa+lxErf++9mF7zYjFsvllg4+X3Rudbc21rk1NNq605hbaC+2Z6Sup09qyP40o4nyKWIqIlYF7N9cfRdQixbePrKZrEdHXPQ6frwYGb9+OYh/7uANlOxv9EUvFQ3DODrCBKOLlSPHTt47F9Xydqa41n4t4uczvR7xR5gsRqfxgnIt4Z4vPEQ+nWhTxl+X5v7CaJqrrQfe6cukrjS9N35jpKdu9rnzA+8M9V4r7f384fPdbT94fB/zaVI8iWtUVfzV9+L/sAAAAAAAAAAAAAAAAALDXDkcRn4oUL/3HH1XjiqMal37kwtDvD/5y75jxp95nO2XZkxGxWOxsTO6hPDDwSrqS0gMeS/woq0cRf5zH/33jQTcGAAAAAAAAAAAAAAAAAADgkVbEjyPF828fS0vRO6d4e/pm42rr2lRnVtju3L/dOdPX1tbWGqmTzZzjORdzLuVczrmSM4pcP2cz53jOxZxLOZdzruSMvlw/ZzPneM7FnEs5l3Ou5Ixarp+zmXM852LOpZyv/Hmnzyv5fRyQuXsBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD5Kiiji55Him19bTZEiohkxHp1cHnjQrQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAASgOpiO9FisYfNO8uq0VEqv7vOFZ+OxfNQ2V+PJpDZb4QzYs5W1XWmt94AO1nd/pTET+KFAP1N++e8Hz++zvv7n4M4o2vr7/7dK2Tfd2Vg+8OPH70yIWhkV97arvXaasGHL/Unr59pzE2PDIy2rO4lvf+8Z5lg3m/xd50nYiYf+31V1tTU5NzH/5F+RHYRfWH6EWqPSo99aJ6EbUPWuufv/Wg27xnfecRUN7/34kUv/32f3Zv+J37fz1+qfPu7h0+fvYn6/f/5zdvaIf3/9rmevn+X97Tt7r/P9Gz7Pn8t5H+WkR94dZs/9GI+vxrr59o32rdnLw5OX3u1KkvDg198eyp/kMR9RvtqcmeV3tyuAAAAAAAAAAAAAAAAADumxRF/G6kaP1oNTUi4k41XmvwwtAzJ57ui75qvNWGcduvjF692Hhx5tbs3OT8/OREY2y6fX1mYnKn+6tXw73Ghkf2pTfv6/A+t/9w/cWZ2dfm2jf/cGHL9Y/VL16bX5hrXd96dRyOIqLZu+R41eCx4ZGq0VPt1nRV9cqWg+k/uP5UxH9FiuvnGumzeVke/795hP+G8f+Lmze0T+P/P9azrNxnSkX8LFL81l89FZ+t2vlY3HPMcrm/jRTHz38ml4tDZbluGzrPFeiMDCzL/l+k+MefbyzbHQ/5xHrZ0zs+sA+J8vwfiRTf+4vvxK/nZRuf/7D1+X9s84b26fw/2bPssQ3PK9h118nn/0SkeOGJN+M38rL3ev5H99kbx3Lhu8/n2Kfz/4meZYN5v7+5N10HAAAAAAAAAAB4qPWnIv4uUvxgpJaey8t28vt/E5s3tE+///XJnmUT289X1Bd7OP3Jrg8qAAAAABwQ/amIH0eKmwtv3h1DvXH8d8/4z99ZH/85nDatrX7O9yvVcwP28ud/vQbzfsd3320AAAAAAAAAAAAAAAAAAAA4UFIq4rk8n/p4NZ5/Ytv51JcjxUv/82wul46W5brzwA9W3+uXZ6ZPXJyamrneWmhdm5psjM62rk+WdZ+MFKt/85lct6jmV+/ON9+Z4319Lva5SDHy992ynbnYu3OTP7le9nRZ9mOR4r//YWPZ7jzWn1gve6Ys+9eR4qv/snXZo+tlz5ZlvxMpfvjVRrfsY2XZ7vNRP7le9uT1mWIfzgoAAAAAAAAAAAAAAAAAAACPmv5UxJ9Fiv+9tXR3LH+e/7+/523lja/3zPe/yZ1qnv/Bav7/7V5vPf//n8Z7zf9fPVdgcbu9AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAR1OKIl6PFLOXV9PyQPm+o36pPX37ztjwyNbVDqeqZl9Vvvyqnz5z9twXnhs63833rr/XPhWvjF692Hhx5tbs3OT8/OREY2y6fX1mYnLHW9ht/c2OVwegcevV2xM3bsw3zpw8u2H1ncF3Bx4/Onhh6JkTT3fLjg2PjIz2lKn1f+i93yNts/xQFPGtSPHsd3+SfjAQUcTuj8X7fHb22+GqE8erTowNj1QdmWq3phfKlVe6B6KIaPRUanaP0X04F7vSjFgsm182+HjZvdHZ1lzr2tRk40prbqG90J6ZvpI6rS3704gizqeIpYhYGbh3c/1RxKuR4ttHVtO/DkT0dY/D5y+PfvnUme3bUexjH3egbGejP2KpeAjO2QE2EEX8U6T46VvH4t8GImrR+YrPRbxc5vcj3mic7BQuPxjnIt7Z4nPEw6kWRfx/ef4vrKa3BsrrQfe6cukrjS9N35jpKdu9rjz094f76YBfm+pRxA+rP9ir6d/9uQYAAAAAAAAAAAAAAAA4QIr41Ujx/NvHUjU++O6Y4vb0zcbV1rWpzrC+7ti/7pjptbW1tUbqZDPneM7FnEs5l3Ou5Iwi18/ZLLO+tjae3y/mXMq5nHMlZ/Tl+jmbOcdzLuZcyrmccyVn1HL9nM2c4zkXcy7lXM65kjMOyNg9AAAAAAAAAAAAAAAAAADgo6Wo/kvxza+tprWBzvzS49HJZfOBfuT9IgAA///MXvRq") r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42902, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d, 0x0, 0xd6e}}) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x300, 0xfffe, 0x101}}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x54, 0x2c, 0xd27, 0x870b525, 0x8000, {0x0, 0x0, 0x0, r4, {0x8, 0xc}, {}, {0xa, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x2204403c}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_OSF_FLAGS={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000540)="1400000016000b63d224068520c6d0242d127212", 0x14}], 0x1}, 0x0) ioctl$XFS_IOC_READLINK_BY_HANDLE(r3, 0xc038586c, &(0x7f0000000340)={r0, &(0x7f0000000100)='/{^-+\\\x00', 0x2002c0, &(0x7f00000001c0)={@_ha_fsid={[0x5, 0x6]}, {0xfff7, 0xffff, 0x8, 0x6}}, 0x7, &(0x7f00000002c0), &(0x7f0000000300)=0x200}) 2m54.371239652s ago: executing program 5 (id=46): listen(0xffffffffffffffff, 0x1) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) capset(&(0x7f0000000040)={0x20080522, r2}, &(0x7f00000000c0)={0x6, 0x6, 0x2, 0x87, 0x8, 0x40}) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000200)={0xfffa, [0x400006, 0x2], 0x7ff}, 0x10) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 2m53.757902512s ago: executing program 32 (id=46): listen(0xffffffffffffffff, 0x1) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) capset(&(0x7f0000000040)={0x20080522, r2}, &(0x7f00000000c0)={0x6, 0x6, 0x2, 0x87, 0x8, 0x40}) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000200)={0xfffa, [0x400006, 0x2], 0x7ff}, 0x10) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 2m7.674235946s ago: executing program 1 (id=164): socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x4e, 0x0, 0x1, 0x800}, 0x28) r0 = syz_open_dev$loop(0x0, 0x7, 0x180862) writev(r0, &(0x7f0000000640)=[{&(0x7f00000004c0)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0xfffffffffffffdb1, &(0x7f0000000280)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) socketpair(0xf, 0x1, 0x80, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRES8, @ANYRES16=r2], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r3}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r5, &(0x7f0000000340)="ac85b24d", &(0x7f0000000080)=""/32}, 0x20) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x3}, 0x4) getsockopt$packet_int(r6, 0x107, 0x15, 0x0, &(0x7f0000001600)) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r7, 0x84, 0x13, &(0x7f0000000200)=0x7, 0x4) setreuid(0x0, 0xee00) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f0000000300)={[{@journal_path={'journal_path', 0x3d, './file1'}}, {@data_journal}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") unlink(&(0x7f0000000180)='./file1\x00') mount(0x0, 0x0, 0x0, 0xa145cf, 0x0) 2m6.300145537s ago: executing program 1 (id=169): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) getpid() syz_emit_ethernet(0x2e, &(0x7f0000000080)={@broadcast, @local, @val={@void, {0x8100, 0x1}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @random="51b0883d2522", @private=0xa010100, @random="8528d5915819", @multicast1}}}}, 0x0) bind$unix(0xffffffffffffffff, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) bpf$ENABLE_STATS(0x20, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x87) connect$inet6(r2, &(0x7f0000000500)={0xa, 0x4e23, 0x6, @mcast1, 0x5}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000440), 0x1000a) sendfile(r2, r3, &(0x7f0000000080)=0x5, 0x7ffff000) 2m1.525789076s ago: executing program 1 (id=184): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000001400), 0x101) write$cgroup_type(r0, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r1 = io_uring_setup(0x3454, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x1a5}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000440)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000001300)='./file0/file0\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x835, 0x1) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x187042, 0x15) io_setup(0x43, &(0x7f0000000440)=0x0) io_submit(r4, 0x1, &(0x7f00000004c0)=[&(0x7f0000000480)={0x0, 0x0, 0x18, 0x8, 0x0, r3, 0x0, 0x0, 0x1, 0x0, 0x2}]) eventfd(0x81) creat(&(0x7f0000000240)='./file0/file0\x00', 0x20) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000080), &(0x7f0000001400)=ANY=[], 0x835, 0x2) lsetxattr$trusted_overlay_redirect(&(0x7f0000000500)='./file1\x00', &(0x7f0000000540), 0x0, 0x0, 0x1) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) 1m58.88933624s ago: executing program 1 (id=192): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@nombcache}]}, 0x1, 0x437, &(0x7f0000000900)="$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") timer_create(0x0, 0x0, 0x0) geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file2/../file0\x00', &(0x7f00000002c0), 0x1000) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x10000, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1000000, 0x0, 0x6000, 0x0, r3, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000000340)={0x50, 0x0, r2, {0x7, 0x2d, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x50) r4 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) ioctl$FIBMAP(r4, 0x401870cc, &(0x7f0000000040)) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 1m57.032384156s ago: executing program 1 (id=198): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0xe00, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x0) 1m54.663520265s ago: executing program 1 (id=207): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001240)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x12, 0x468fe4e8}]}}]}, 0x38}}, 0x4048000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a300000000084000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff00080003400000000838001180090001006c61737400000000280002800c00024000000000000000090800014000000ba308000140000010000800014000003f5e980000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000006c00038068000080080003"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000001300050000000000feffffff07000000", @ANYRES32=r5, @ANYBLOB="003000000000000014001a80100004800c0009"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6}]}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000002000dd8d000000000000000002"], 0x30}}, 0x4090) sendmsg$NFQNL_MSG_VERDICT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000003030101000000000000000c000220ffff190100000101"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4024000) 1m53.465271621s ago: executing program 33 (id=207): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001240)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x12, 0x468fe4e8}]}}]}, 0x38}}, 0x4048000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a300000000084000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff00080003400000000838001180090001006c61737400000000280002800c00024000000000000000090800014000000ba308000140000010000800014000003f5e980000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000006c00038068000080080003"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000001300050000000000feffffff07000000", @ANYRES32=r5, @ANYBLOB="003000000000000014001a80100004800c0009"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6}]}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000002000dd8d000000000000000002"], 0x30}}, 0x4090) sendmsg$NFQNL_MSG_VERDICT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000003030101000000000000000c000220ffff190100000101"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4024000) 11.687407032s ago: executing program 3 (id=561): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f00000000c0)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f00000007c0)="$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") socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x14, 0x0, 0x1, 0x4, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) r0 = syz_usb_connect(0x0, 0x202, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902f00101040000030904"], 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000840)={0x44, &(0x7f0000000600)={0x0, 0x18, 0x5, "d2ee90a58d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000001080)={0x80000000, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000004c0)=0x7) getpid() r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r1, &(0x7f0000002000)={0x10, 0x17, 0x2, {0xfffffffffffffced, './file0'}}, 0xfffffdab) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x2000000, 0x0, 0x15, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file1\x00', 0x42, 0x0) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) 8.213838556s ago: executing program 4 (id=572): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}, {0x3, &(0x7f0000000040)=0x3, 0x2}], 0x2, 0x0, 0x0, 0x0) futex(&(0x7f0000000140)=0x2, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a0"], 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r1 = getpid() timer_create(0x4, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r3, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c02000100000000000040000280ffffff05000500000000000a"], 0x80}}, 0x0) sendmmsg(r3, &(0x7f0000000180), 0x400008a, 0xff80) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$igmp6(0xa, 0x3, 0x2) memfd_create(0x0, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x0, 0x10000, 0x0) ptrace$ARCH_SHSTK_DISABLE(0x1e, r1, 0x1, 0x5002) unshare(0x42000000) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000001c0)={'\x00', 0x9, 0x1, 0x33, 0xe001, 0xfffffffffffffffb, r1}) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r6 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x78, '\x00', 0x0, @fallback=0x30, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7], &(0x7f0000000240), 0x0, 0x80000}}, 0x40) 6.983004176s ago: executing program 0 (id=576): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x2, &(0x7f0000000740), 0x7, 0x4f5, &(0x7f0000000800)="$eJzs3E9sFFUcAODfbLe0hSIVEaWiFtHYaGyhoHAwMRhNPGhixIMem7YQZKGmrYkQAkti8GhIvBrj0asHr2q8GE4mXvFoYkiI4QJ4WjO7s+12O136Z9tK+33Jsu/NvJn33r55s2/eYxvAljWQ/pNE9EbEzYjYFRGF5gQDtbd7dy6N3b9zaSzKlcrJf5L0sLibxjNJ9r4jiwwWIgpfJHM7GkxfuHh2tFSamMriwzPnPh2evnDxlTPnRk9PnJ44P3L8+NEjh4+9NvLq8iuVk19ar7v9lyf373vn4+vvjRXr27uz98Z6tMtADOQVpeqFdme2wXY2hJNiq5RvrH1hWLL0+k+bq7Pa/3dFR7RsPGATqVQqla4s3Llwd7nS7OqCLcBDK4mNLgGwMepf9Onzb/2VN07YtnZDkA11+0TtASit973sFfFsdWN9HqSz6fm2nQaiGB+V//02faXx4hrMQwAANPr5RH0k2DT+64vY25DukWwNpS8iHo2I3RHxWETsiYjHo5b2iYh4sun8HRFRaZH/QFN84fizcGt1NWwtHf+9nq1tzY3/onEVrK8ji+2MqA+YJw5ln8lgdHadOlOaONwij1/e+uOrxfal9a+P/9JXmn99LJiV41axa/4x46MzoyuucJPbVyP6i831T4oRyexKQBIR+yKi/9dvlnzevobwmZe+3z8baZpkfHD9qyq562htWKqofBfxYq39yzGv/edyTFqvTw53R2ni0HB6FRzKzePG79fez9ueLKX+P/7VfNjbx346mfWs1Uvbf3vD9R/19du5+vclEcnseu30Iie6snge1/78ctFnmpVe/9uSD3ui4bn089GZmanDEduSd2PB9pHZZd56vPoe5Vr9Bw/m9//d2THpJ/FURKQX8dMR8UzUnhAHonLlQEQ8FxEHF69+/Pbm85+svP5rK63/eO79b177z63Xp4F069S8LaOlpFxLPbdlNtBx9sDN+/35+S+t/Y9WQ4PZlvz7XzLvFrGwFPmBVX58AAAA8FAoRERvw1xSbxQKQ0O1OaA9sb1QmpyeeTmZ/Oz8eO03An0NaWvzwZ1Jff6zryE+0hQ/ks0bf93RU40PjU2WxjeozkDNjmqfTwpDs/eCWv9P/d2eKWbg/8xPfmDrelD/33t9nQoCrDvf/7BVTV1uiJQXSVT2P2Vgc1rK97+5QNic8vp/i//P7YEBNomK7gxb2nL6//y0N3a1vTDAuirGB7PhwoaWBFhvxv+wJS3pR/IrDlS68nd1x8LE0d36hB2xsmL05OS1IYF0ZLXK89RbbXlH9eTuKrY+qv7XFBZNE4XlFb5r7k9GJKtp01Orb4vTe9t98XdWsvWxdl82P6xJP31g454dLbW+b4z0tv1WBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsCb+CwAA//+0FNMg") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x10fb) 6.857515377s ago: executing program 4 (id=579): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x101a02, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x3000, 0x8900}, [@IFLA_MASTER={0x8, 0x3}, @IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x38}}]}}}]}, 0x40}, 0x1, 0xd, 0x0, 0x480c5}, 0x20000000) sendfile(r0, r0, 0x0, 0x101) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x7, 0x30}, 0xc) sendto$inet(r2, &(0x7f00000000c0)='}', 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r2, &(0x7f0000000440)='p', 0x1, 0x24008810, 0x0, 0x0) sendmmsg(r2, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="1d", 0x1}], 0x1}}], 0x1, 0x4008885) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x103b43, 0x0) flock(r3, 0x1) syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="13010000bd460e10490d1070900c0102030109021200010000000009040000"], 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0x7ffffffc, 0xfff}, 0x10) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="300000001a00010700000000000000001c000000000e93"], 0x30}}, 0x0) sendto$inet(r2, &(0x7f0000000300)="ab", 0x34000, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000002c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r7 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r11 = syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f0000000200)={0x2e, 0x0, 0x0, r6, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000300)=0x0) syz_io_uring_submit$UBLK(r8, r9, r10, &(0x7f0000000600)=@ublk_set_params_sqe={0x2e, 0x0, 0x0, r6, 0xc0207508, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r11, 0xffff, 0x30, &(0x7f0000000680)={0x30, 0x1, {0x0, 0x9, 0xc, 0xc, 0x9, 0x8}}}}) r13 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r11, 0x2) syz_ublk_setup_queues(r13, r12, &(0x7f0000000700), &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff}], 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, r13, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, &(0x7f0000000a00)=@buf_4k}}, &(0x7f0000000b00)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r14, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @struct, 0x0}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_BALANCE_V2(r15, 0xc4009420, &(0x7f0000002440)={0x4, 0x0, {0xfffffffffffffffa, @usage=0x6, 0x0, 0x3, 0x9, 0x1, 0x61a9, 0x4, 0x10, @struct={0xffff, 0xffffff7f}, 0xff, 0x1, [0x100000001, 0x3, 0x7, 0x7fffffffffffffff, 0x1, 0x5]}, {0x6, @usage=0x4, r16, 0x8000000000000001, 0x7, 0xffff, 0x800, 0xfffffffffffffb88, 0xa1, @struct={0x7ff, 0x7}, 0x5, 0x0, [0x3b2db8a0, 0x40, 0xfffffffffffffe00, 0x9, 0x3755e221, 0x2]}, {0x6, @usage=0x81, 0x0, 0x6, 0x7f, 0x2, 0x0, 0x5, 0xc, @usage=0x81, 0x100, 0x80000000, [0x0, 0x1, 0x4, 0x4, 0x685, 0x9]}, {0x2, 0x1, 0xfff}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000006c0)={0x0, 0x65, 0x544}) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000000ac0)={0x1, 0x3, {0x2, @struct={0xfffffffc, 0x4}, r5, 0x8, 0xfff, 0x400, 0x8, 0x7, 0x14, @usage=0x2, 0x1ff, 0x0, [0x3, 0x100, 0xc868, 0x12be, 0x9, 0x10]}, {0x5, @usage=0xc1, r16, 0x8000, 0x4, 0x0, 0x8, 0x0, 0x0, @usage=0x9, 0x3, 0x1, [0x87, 0x0, 0x4, 0x1457d96, 0x1, 0x3]}, {0xffff, @usage=0xb59, r17, 0x5, 0x9, 0x8, 0x7ff, 0x8, 0x40, @usage=0x2, 0x8, 0x7ff, [0x0, 0x8, 0x3, 0xde, 0xffffffffffffffff, 0x6]}, {0x1, 0x80000001, 0x5}}) 6.391386976s ago: executing program 0 (id=582): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000001500010320000000000000000c0000000800040001"], 0x1c}}, 0x4000000) r1 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x1dc042b0, 0x12800) ioctl$XFS_IOC_INUMBERS(r1, 0x80405880, &(0x7f00000002c0)={{0x100000001, 0x6, 0x800, 0x0, 0x5362}, [{0x100000000, 0x0, 0x4, 0x30}, {0x3, 0x3, 0x4, 0x4}, {0x7, 0x1, 0x1, 0x40}, {0x10000, 0x10, 0x2, 0x6}, {0x1, 0x8, 0xc, 0xec}, {0xec, 0x8, 0x1, 0x1}, {0x4080, 0x6, 0x6, 0x3}]}) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000080)=0x8) r2 = socket(0x1e, 0x1, 0x0) connect$tipc(r2, &(0x7f0000000040)=@id, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a0188"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) recvmsg(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/15, 0xf}], 0x1, &(0x7f0000000200)=""/97, 0x61}, 0x40010000) shutdown(r2, 0x2) 6.202426884s ago: executing program 3 (id=583): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r3, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e000300000003000000050007"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x200000000000011, 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0xffa1, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r6, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) write$nci(0xffffffffffffffff, &(0x7f0000000080)=@NCI_OP_RF_DEACTIVATE_NTF={0x1, 0x0, 0x3, 0x6, 0x2, {0x7, 0x2}}, 0x5) openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001840)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="09022cbd7000fbdbdf2506"], 0x1c}, 0x1, 0x0, 0x0, 0xc000800}, 0x4000000) 6.035209009s ago: executing program 2 (id=584): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000780)=@security={'security\x00', 0xe, 0x2, 0x378, 0xffffffff, 0x2f8, 0x0, 0x2f8, 0xffffffff, 0xffffffff, 0x410, 0x410, 0x410, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@ipv6={@mcast1, @empty, [], [], 'vlan1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@remote, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3a69199fb8f4af703fe193000f3e34e1c27647d8cd16b804edb9654cf89d"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f0000000140)={0x1d, r3}, 0x10) sendmsg$can_bcm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) r5 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r7 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r9 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000280)=ANY=[], 0x2d, r9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000700), r10) sendmsg$IEEE802154_ASSOCIATE_REQ(r10, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000001480)={0x34, r11, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0xfd}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) bind$can_j1939(r7, &(0x7f0000000380)={0x1d, r8, 0x1, {0x0, 0x0, 0x1}, 0xfd}, 0x18) bind$can_j1939(r5, &(0x7f0000000100)={0x1d, r6, 0x2, {0x3}}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) r13 = openat$incfs(0xffffffffffffffff, &(0x7f0000000080)='.log\x00', 0x46300, 0x5) ioctl$SG_SET_KEEP_ORPHAN(r13, 0x2287, &(0x7f0000000200)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x2000, 0x0, @dev, 0x1}, 0x1c) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)=ANY=[], 0x20) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r12, {0x8}, {0x7, 0xf}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x44060}, 0x98) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f0000000300)) sendmsg$IPSET_CMD_CREATE(r14, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="600000000206050000000000000000009500050005000400000000000900020073797a3200000000050005000200000011000300686173683a69702c706f72740000000014000780080006000000000008001340fffffffc0500010007000000"], 0x60}}, 0x8080) 5.667414603s ago: executing program 0 (id=585): creat(0x0, 0x8) r0 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000080)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x10001, 0x0, 0x1, 0xc6fe2, 0x11403f}) socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r6, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bind$alg(r0, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r7 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r7, &(0x7f0000000600), 0xfec8) recvmmsg(r7, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0xc8}, {&(0x7f0000000140)=""/9, 0x9}, {&(0x7f0000000300)=""/225, 0xe1}, {&(0x7f0000000000)=""/54, 0x36}, {&(0x7f0000000440)=""/123, 0xff32}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000dc0)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0x18}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) 4.678091563s ago: executing program 0 (id=587): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) ftruncate(r1, 0x1000006) fcntl$addseals(r1, 0x409, 0x7) ioctl$UDMABUF_CREATE(r0, 0x40187542, 0x0) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f00000001c0)={r1, 0x3f00, 0x0, 0x1000000}) 4.477254737s ago: executing program 3 (id=590): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_proto_private(0xffffffffffffffff, 0x8927, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xc, 0x4}, {0x0, 0x9}, {0x3, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x10, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x30, 0x1}]}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x804c041}, 0x20040054) (fail_nth: 1) 4.471146978s ago: executing program 2 (id=591): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f00000017c0)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{0x0}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000340)={0x2, 0xfff, 0x1, 0x2, 0x100, 0x80, 0x8000, 0x7, r1}, 0x20) 4.230443342s ago: executing program 2 (id=593): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x200000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x4000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=@mpls_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x100}}, 0x1c}}, 0x20004980) sendmsg$kcm(r2, &(0x7f0000002040)={&(0x7f00000001c0)=@ethernet={0x1, @broadcast}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000000480)}, {&(0x7f0000000700)}, {&(0x7f0000001700)="fc608a677d9970c54092bb94e4dcf440d70a571d4d413cf85a617da7ad1140dfd1e734c5be73d3bfd34ed2314b13bebaa23c8eb39e45d69648183d4c9896d3f1db4a927f65d0a534018d8fa08d6f66f448c3aaf4f8ff5c989e25081daa067e1861d803774ffd07e75c03e283ae860e056ebe90cee5", 0x75}, {&(0x7f0000001780)="0250287742df46d19caf534249784fd114eb2c4efc6afa1405ce927f82950a15abe4e4131301473defbcde4a5aebc4eafc9b20a41f1d3dfedf7fcc795bc252309a593087d1c887041045bf0612ea804ab81b196f8fc9f28a5e0fbd48239efa4ffbb0a90c99a76c4371", 0x69}, {&(0x7f0000001800)="a6d5315499f90c3c02f0505f94d2543f1cb8d8914daf443277e7323a31c89dcb57b2398b0c35b4f9a2ed28a02eb1667b6fffcf7a2ab225a4fde28de645092ec129772d2103098e2001ea6a8bbeaff6b0f8bc18be63886f104cde343f33549e5c0d26800dd61ea939d59529ac9aaa53c978ef527414be5a0c40f419611e01da98ba15a6740fd1776a9d6c4a3c7023563ec34cf732bd57c4036d7fa1197faa28bfc281e90a4fdb26304015f9e59908b8cb98f068de744439c4d5af3ad52c9ac35f3f752f8d", 0xc4}, {&(0x7f0000001900)="765d485e5169c45ba27e35afd40cacba51309fc222eab4a7f77673b2e9f670e37cefde1cbf1e5e66107fc4c1d9ad016c4c9716ffedcb058844be599fb86c84ce2ae0a6be9aa0f290f52b600560a38a6d2f0548662da33844de59bafdaa8e0ec16ab2c3796fd03f9332486ce12495", 0x6e}, {0x0}, {0x0}, {&(0x7f0000001a80)="c0cc7cea7cada57bf39ee5c65b5046ad6ca7df500543b542ca3d8836162132253adc1f3956ba8486a5c426c5682deed3098bb40ceabed6df7b93ebce2c201499afea9c58bfa0dca728621984cb6aa9963c133515489e04402357e68ac89b96c7fc69cbb0224102bad4cec77c9d43c427eb5803c2125f6c83a4e0476b26e8031c228ee312737df2df513b403fb69c9e04f69462befebaed72833184f76f848da29731689197307a157b10a8ef764ed5c9d29c4d859b011636cc2021c9f35e4bd856ac0e2dd8f6fadb", 0xc8}], 0x9, &(0x7f0000001c40)=[{0xd0, 0xff, 0x8001, "969be89ecdf2f46be688cdc43f5d70e030eb4bf8cc4d24d08c8d67eedaa564fb4ed85280496d640e37bd9b748c2dc948d8d22fce9747637ae2235f8b7f1de6900b2f03cb739ceb30f3d683c29a7a4538bc2a5095cb5ae5fc5e0844a595aab6e5d920ab0135a69ea27b1dea5e0310a3514325a459bbd8f8ef5fcce5d9bb78159fc062e31dd46ef2de926ac51daab1fa7487864deb854b6ef4df3f630c38729d50bda5985c62238dfbd7c784ec0c6deff0775e6a14b308a5674d3d"}, {0x10, 0x117, 0x10}, {0x10, 0x0, 0x9ea}, {0x80, 0x104, 0x52, "d787a87ce0a1e2778535a94f63f553fa9e3b0ae3d88f130b3d08facfb388e8c71d929ccd41d2ae35f47c8285218d79fbcf42dbbf9cb1338af043f8ff2bf21d73aa4b89881282866e106d35fc966ef35fb1d58a1af20352ade40c18ccce920ffde78f796d4d815e4d7ebf659fe435"}, {0xb0, 0x10e, 0x8, "0399e31543fabc12509a0745274ce42540332b92dbebe4ab89d7590bce93178745d50285c9d6d8e60c758da339499407c843a88ac7fcd832aabf059e2ecc49ba58896daa338677bce29ed793ef5b3d19bf57a2220a4c57abef4a80acaacc8a2d2dcd8aee7f882635d62749bc5d715da71e0c16bee6080b81fc94b0c37738aa25a5ecc02a4bdf07787f36f13eceedaa26f9be3b052eb2a19b8fafc44529"}], 0x220}, 0x40) shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000004180)=@security={'security\x00', 0xe, 0x4, 0x4c8, 0xffffffff, 0x328, 0xe8, 0x328, 0xffffffff, 0xffffffff, 0x3f8, 0x3f8, 0x3f8, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "78c1a2f02c4efb91009be714fe5bb1ac4af4af4dcfa386c3d41dd8d9054a"}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @private=0xa010101}, @private2={0xfc, 0x2, '\x00', 0x4d}, [0xff000000, 0x0, 0xff, 0xff000000], [0xffffffff, 0xffffffff, 0xffffff00, 0xff000000], 'team0\x00', 'wg2\x00', {}, {}, 0x16, 0x6, 0x7, 0x30}, 0x0, 0x218, 0x240, 0x0, {}, [@common=@unspec=@owner={{0x38}, {0x0, 0x0, r3, 0xee00, 0x2, 0x1}}, @common=@rt={{0x138}, {0xc, [0x26, 0x4], 0xb, 0x4, 0x0, [@local, @private1, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x32}, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @broadcast}, @empty, @private2, @rand_addr=' \x01\x00', @loopback, @private2, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast1}, @private1, @mcast1], 0xd}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x2, 0x9, 0x1}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, [0xff, 0xff000000, 0xff000000, 0xffffff00], [0xffffffff, 0xff000000, 0xffffffff, 0xffffff00], 'veth1_to_bond\x00', 'team_slave_0\x00', {0xff}, {}, 0x0, 0x7, 0x5, 0xc}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x0, 0x81, 0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x528) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) capset(0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x801, 0x84) 3.60415487s ago: executing program 0 (id=595): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)={0x14, 0x15, 0x301, 0x0, 0x0, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000010900010073797a3000000000200000001e0a01020000000000000000070000070900010073797a3000000000140000001000010000000000000000000284000acd739a90ab625bf5d7ec1af9cd8b8f9f4458b82e901ce50d84196da85407ed9607ce6c668b258d446960b490c48a5f03002e6fbbabb0c2348c65627ad797bf1c72e2d4f25d291b53e2d0234fb6a2a4d8bb8e4b09a99fc4de568b233fdb8cee364fc386f774e6aab920d2baa0d7d1"], 0x68}}, 0x40000) clock_nanosleep(0x5, 0x1, 0x0, 0x0) 3.471835044s ago: executing program 4 (id=596): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = syz_open_dev$mouse(&(0x7f0000000180), 0x8389, 0x200000) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r3, 0x0, 0x0}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000080)={0x0, 'geneve1\x00', {0x2}, 0x9}) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x60, 0x30, 0x103, 0x0, 0x2000000, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x6, 0x4, 0xffffffffffffffff, 0x12, 0xe}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000014}, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x260, 0xc840) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000200), 0x41, 0x0) write$fb(r5, 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x74) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(r6, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x40010) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) sendmmsg$unix(r0, 0x0, 0x0, 0x0) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x2004008, &(0x7f0000000380)={[{@clear_cache}, {@user_subvol_rm}, {@user_subvol_rm}, {@noenospc_debug}, {@subvolid={'subvolid', 0x3d, 0x3}}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x67, 0x32, 0x35, 0x39, 0x25, 0x39, 0x27, 0x2d, 0x2d, 0x37]}}, {@thread_pool={'thread_pool', 0x3d, 0x5}}]}, 0x0, 0x559e, &(0x7f00000103c0)="$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") 3.428715185s ago: executing program 3 (id=597): r0 = syz_io_uring_setup(0x48be, &(0x7f00000011c0)={0x0, 0xac18, 0x0, 0x3}, &(0x7f0000000000), &(0x7f0000001180), &(0x7f0000000000)) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x21}}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f0000000040)=0x7, 0x4) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) io_setup(0xff, &(0x7f0000000380)=0x0) io_submit(r5, 0x27f, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r4, &(0x7f0000000340), 0x41}]) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), r6) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000010c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000000000010000004c00088048000080200009801c000080060001000200007f0f000200ac1414aa0500030002000000240001000000000000000000000000000000000041000000000000000000000000000000080005000100000014000200776731"], 0x7c}, 0x1, 0x0, 0x0, 0x4084}, 0x20008040) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000b, 0x10, 0xffffffffffffffff, 0xfc778000) getsockname$packet(0xffffffffffffffff, &(0x7f0000001140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001240)=0x14) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x100007, 0x5, 0x3}, 0x50) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000002300)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x3100) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r8, 0x1, 0x40, &(0x7f0000000080)=0x1, 0x4) keyctl$chown(0x4, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) r9 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r9, 0xc02064b6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) connect$inet6(r8, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000000), 0x0) 2.938441122s ago: executing program 2 (id=598): socket(0x400000000010, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) migrate_pages(0x0, 0x0, 0x0, &(0x7f0000000000)=0xfffffffffffffffc) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f00000002c0)={0x0, 0x5, 0x6, 0x4006, 0x0, 0xe, 0x0}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000003c0)="c87caee45a79880d142a7b2464264f504582ee2d9799576c31076a173ea302e4ae420de8c31ba03be4307214f2f9c6f13ec70b89c6a23425e708a521f9e0083eb29b0533c2329caf8917e57af5df2b2438bb3d3e47906a67559f895c7a821848eae36834fbdac9e1f305805d612dffec502e9a930f9d0b2f959b99464603dc5f562cfe5ff8c08bca1382b843d9234dc524029369a074aa0fa273c2535569390c5b757e7347b05b49a60e1b7aa44758a275ac441a5b000b6368dddadeb457ce64ab", 0xc1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)=0xff) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r5 = accept4(r0, 0x0, 0x0, 0x80000) io_uring_setup(0x1020, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) sendmmsg$unix(r5, &(0x7f0000003dc0)=[{{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000340)='gid=0,no9\xe1\x12 \x91\xfdP\x83\x0e\xb9G!8\xb0\x89\x99\x81\x02\x85\x1cE\b\x9f\x0f\t\x00\x00\x00 \x99\x8d\x1d\x8a\xc7\xc5\x96\xe8Ee\xd5\xac\x18(\x9d\tIr\xdd\\\x95\x9eu}\x06ib\x88\x8c\x9d\xde\xeaT0;\xb4\x1f\x8cm\x15y\xb4[Gc\xaf\xee#\xcf>Qk\xcf\xfc\x12bY\xfc&\x93\xe0\xcc#\x93w\x84@/VV\xbc\x0eL\xeb~1\x832\xa7\xf7l\x1b\xffh\x96O\x84h\x1b\'\x15\xae\xc8\xfbrK1\x1b\x82\\kU{!\x8fe\xbd\xfa\xf3\xac\xdc\x9a7\xbb\xdf\xdf\n\xc4U\xfa\x15\x03e\xe2[\xa6\xd3\xce\xce\x1e\xe4\xc8\xd4s\xd8\xe4W\x8a\x18j\xc4S\xbf\xc9\xcc1\x87\xa0\f\x91/\x8b\a\xdd\x1bj\xff\xae\xfcJM\x9b\xc3\xe6q\xc1T\x19\xa9,\xef\x8ax\xbb\x18\xe7\x99\xff\x10\x15S\x19\'?\xfbt/\x86\xc6\xd3\xb2c\xc4*\x06\x05\x06\x00\x00\x00\x97\xda8\xc8\xd0\x8d\x87Yk\xa1\x83\x9f\x86.[\x83\xdf&\x13\xcc\xb9\x01`D7R\xb7o\xa1\x1e\xffD#\t\x18i\xed\xa4<\x9c\x02\x00\x82\xbd\x93\x9e+\x03\xc6w?\x83\x05\x0e\xf3TB]\xc0V\xd4#r\x9e=C\xd6k\xf89S\xb3\xf4\x84\xd8)\x17L\xeb\xf4\xf3iW\xe6\x9b\x8a\x13\x01\x0ej\x88N\xb5\xf7e;\xdd\xe1\xfc\x9c\x8a\xae>=n\xb3\x12\x7f\x94\x19~\x93\x92xK\x9b\x9e\xa6\x9e\x16v\"e\xe80\xa3%oS\xb4\xad\xb1\xb6\xe0\xef\x1fy\xf2\x1aN\xd7\xee\\*6\xa6\x8e\x84 \xc5\xc0\xd4/\x0eVg\xc1\xd9\xcb\xdcGp\xef\x17\xfc\xc2\xef\xb9\x03\b*\x1c\xc6\xe8\x9a\xe0o\xba\x1d {%\x904\xa2\x8f\xed\xca%Z\x1a#\xddA7\x1b\xdf\xd5]') r6 = socket$inet6(0xa, 0x3, 0x5) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000180)=0x2) sendmmsg(r6, &(0x7f0000000140)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @local, 0x2, 0x1}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000000000000002900000003000000e8000000000000008400000007000000a1b4c657d1c53ef80aa934b02739590bbd9cf2fb8f6d0e7e07a6f79268fb47d2fedcdb494b76fbc54aa42d2fae85d3ddccbd167f6ce03bf8e22af068cd82bf3a62d66c39a9fc4180c352e873511617ab4b4cb796bb79808f285b3954ae4e107928923bcddbd4e935683f298ba34ab52072098fef58f3587f18c8e65b53af221098ab770fc6f868ccabfccfb81a9aac5ec82202e88255b4246158a3b04e6b2794460fd4647fb4c9cf252b0ebdcd55b9b7e2b5bfe1cfc556f5044fc000"/233], 0xf8}}], 0x1, 0x48044) syz_mount_image$minix(&(0x7f0000000300), &(0x7f0000000000)='./file2\x00', 0x4000, &(0x7f0000000100)=ANY=[@ANYRES64=0x0, @ANYRESDEC, @ANYRES16, @ANYRES8], 0x21, 0x210, &(0x7f0000000940)="$eJzs28tOE1Ecx/Hf9EZFI17iJa5MTIwbqQIJ6Up5ADcuTVyQWkjjoEbcQEiUl3Dv1pWPQKLv4QvAwp0rjjkzp2nHDp0LM0yg309C50/n/M6cAc6h04sAzKznwa0nT+2gMsZ8vi/p1QtJjYoHB6BUxm2PDYDZU8899V8P1xAA59LRWl1SWwee9PvPXu/QfbVTPn44WquFhScdjuUvpc3ve8H2XiOan5d0eaL15AWJ+RbmH2qYtyPf613JePx5RY+va2nz4fk/eqCmxvJXJS1IQTfXJd2QdFOas21vSapFjt9y343yd8M79lOeBgAAAAAAU9mrz8XT5hM7qEt6ErvHXgdvDPx+/N5kTZd/mjPfcvmlaY1Mcn55/M7aSa29UdkMN3Muv9h777/JMG6gCLVs83/iaUH7F32Q0MGJ08GtDNH530w/GveM4Mbga6YMgND2zu7bdd/vfyyyeDatjZS1Q7siFDzC+OK7LfQ3fGWk5GPlKeximzc+fEGm6IF9UXIbk6LNRSoaxf6cf8r7f542IpPoh/vdZuj5ZdyuliLzNKJ+xgsTgNJ1Pm196Gzv7D4ebK1v9jf771ZWu93VleWlbid4WG5vzULVowRQhtF//5idad/EAwAAAAAAAAAAAAAAKnVb0p2g+nWcIcY7AwAAAIBz6Cw+FFX1OQIAAAAAAAAAAAAAcNH9CwAA///UBDZV") setuid(0xee01) lchown(&(0x7f0000000040)='./file2\x00', 0xffffffffffffffff, 0x0) 2.916236358s ago: executing program 0 (id=599): creat(&(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x8) r0 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000080)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x10001, 0x0, 0x1, 0xc6fe2, 0x11403f}) socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r6, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bind$alg(r0, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r7 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r7, &(0x7f0000000600), 0xfec8) recvmmsg(r7, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0xc8}, {&(0x7f0000000140)=""/9, 0x9}, {&(0x7f0000000300)=""/225, 0xe1}, {&(0x7f0000000000)=""/54, 0x36}, {&(0x7f0000000440)=""/123, 0xff32}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000dc0)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0x18}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) 2.683011456s ago: executing program 2 (id=601): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) set_mempolicy(0x5, &(0x7f0000000000)=0x2, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="01000000050010000500000005"], 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000380)}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a88000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac420001561afb9fdd672bad0040000000000000091a0c7f120ffffffffffff000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r3 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) ftruncate(r3, 0x1000006) fcntl$addseals(r3, 0x409, 0x7) ioctl$UDMABUF_CREATE(r0, 0x40187542, 0x0) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f00000001c0)={r3, 0x0, 0x0, 0x1000000}) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0xd225, 0x10, 0x0, 0x2fd}, &(0x7f0000000200)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x96ad, 0x20000, 0x3, 0xf1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9865, 0x2, 0x0, 0x34e}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc88a, 0x20, 0x1, 0x348}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4740, 0x2000, 0x1, 0xb2}}], 0x4, &(0x7f0000001480)={0x2e, 0x4, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x7ff}, 0x0, 0x0, '\x00', {0x2, 0x470, 0x0, &(0x7f0000000480)=@buf_4k="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"}}, &(0x7f0000001500)) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r4, 0x18, &(0x7f0000001540)={0x7f, r3, 0x28, {0x2, 0xfffffffffffffff7}, 0x40}, 0x1) 2.306069271s ago: executing program 7 (id=603): socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, 0x0, 0x4040000) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x100) r0 = fsopen(&(0x7f00000003c0)='gfs2\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x28383, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x40000000015, 0x5, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x7, 0x20000000080, 0x0, 0x4, 0x4, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x400, 0xffffffffffffffff, 0x6, 0x4, 0xf, 0x4000000007d5}, 0x0, 0x0) syz_mount_image$udf(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='shortad,partition=00000000000000000005,noadinicb,uid=', @ANYRESDEC=0x0, @ANYBLOB=',gid=', @ANYRESDEC=0x0, @ANYBLOB=',volume=0000000000000006,\x00\x00\x00\x00\x00'], 0x1, 0x489, &(0x7f0000000580)="$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") read$FUSE(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x40) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xfecc) symlink(&(0x7f00000005c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000002c0)='.\x02\x00') close_range(r0, 0xffffffffffffffff, 0x0) 2.210984908s ago: executing program 3 (id=604): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f00000017c0)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f0000000140)=[{&(0x7f00000005c0)="883d", 0x2}], 0x1}}, {{&(0x7f0000000400)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x30}}, 0x10, &(0x7f0000000b40)=[{&(0x7f0000000500)="b5", 0x1}], 0x1}}], 0x3, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000340)={0x2, 0xfff, 0x1, 0x2, 0x100, 0x80, 0x8000, 0x7, r1}, 0x20) 2.025761305s ago: executing program 6 (id=605): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f00000017c0)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000340)={0x2, 0xfff, 0x1, 0x2, 0x100, 0x80, 0x8000, 0x7, r1}, 0x20) 2.002246986s ago: executing program 7 (id=606): mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file2\x00', 0x0) syz_emit_ethernet(0x5e, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) execve(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f00000005c0)={'filter\x00', 0x7, 0x4, 0x410, 0x0, 0x1f0, 0x0, 0x318, 0x318, 0x318, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @broadcast, @multicast1, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x2, 0x5, 0x1}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0xc, 0x79, 0x9, 0x0, 0x0, "72a35cf68ac9f50f47acd117e6668eeb7210b56f18638af1541f592900b4f39b6298926fc5ed319c1745029bba378ef4a6e0db4f582376029145678cf5214738"}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x460) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f00000000c0)={'dummy0\x00', @random="01350104ff00"}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x0, 0x3938700}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='net/route\x00') preadv(r4, &(0x7f00000001c0), 0x0, 0x6, 0x0) r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card0/oss_mixer\x00', 0x87f36c16f02fe1a8, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xc, 0x1010, r0, 0xfffff000) init_module(&(0x7f0000000380)=ANY=[@ANYBLOB="7f454c46f97f000401000000000000000300060000000000d901b80a000000004000000000000000bc020000000000004f0f00000200380001000100feff3500060000007e060000e52100000000000000000000000000000000000000000080290700000000000002000000000000000000000000040000"], 0x78, 0x0) r6 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)="f5", 0x30, 0xfffffffffffffffe) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000000)={0x80000000, 0x0, &(0x7f0000000100)}) r7 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xd3, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r6, r7, r6}, &(0x7f0000000240)=""/69, 0x45, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000480)=@nfc_llcp, 0x0, 0x800) write$proc_mixer(r5, 0x0, 0x8c) close(r5) syz_open_dev$vbi(0x0, 0x2, 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x0) 1.923905351s ago: executing program 3 (id=607): r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000000200)={0x5, [0x4, 0x9, 0x1ff, 0x7f, 0x4, 0x7ff, 0x5, 0x3, 0x8ba, 0xa2b, 0x101, 0x60, 0x3, 0x3, 0x8000, 0x3, 0x8, 0x10, 0x9, 0x101, 0x401, 0xe2, 0x9fed, 0x3, 0x4, 0x20, 0x7, 0x6, 0x1ff, 0x2, 0x9, 0x0, 0xa0a7, 0x0, 0x3, 0x0, 0xfff8, 0x5, 0x100, 0x1, 0x3, 0x8, 0x0, 0x6, 0x62f, 0x3, 0x3ff, 0xfffb], 0xb}) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@jqfmt_vfsv1}]}, 0xc1, 0x7da, &(0x7f0000000fc0)="$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") r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000400)={0x40, 0x17, 0x4, "947471a8"}, 0x0, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x5}, 0x0, 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r2) r3 = open(&(0x7f0000000100)='./file1\x00', 0x147842, 0x88) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000) pselect6(0x517, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x700}, &(0x7f0000000240)={0x0, 0x989680}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) write$FUSE_INIT(r3, &(0x7f0000004640)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x2d, 0xd92, 0x20, 0xa, 0xa, 0xddf, 0x39df, 0x0, 0x0, 0x22, 0x4}}, 0x50) preadv2(r3, &(0x7f0000000a80)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0xd) 1.788776178s ago: executing program 6 (id=608): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0xe00, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x68}, 0x1, 0x0, 0x0, 0x840}, 0x0) 1.605783829s ago: executing program 4 (id=609): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macsec0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x300, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x1, 0x70bd29, 0x2, {0x0, 0x0, 0x1f00, r1, 0x60400, 0x40484}, [@IFLA_MTU={0x8, 0x4, 0x9}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 1.560408839s ago: executing program 7 (id=610): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000149000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x400c841) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000024002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) syz_emit_ethernet(0x6b, &(0x7f00000003c0)={@local, @local, @void, {@ipv6={0x86dd, @udp={0xb, 0x6, "511dc2", 0x0, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, {[@srh={0x32, 0x0, 0x4, 0x0, 0xb, 0x50, 0x80, [@dev={0xfe, 0x80, '\x00', 0x2e}, @dev={0xfe, 0x80, '\x00', 0xe}]}, @routing={0x3c, 0x0, 0x0, 0x8}, @fragment={0x84, 0x0, 0x7, 0x1, 0x0, 0x5, 0x68}], {0x4e23, 0x4e22, 0x0, 0x0, @wg=@data={0x4, 0x1, 0x5, "b380bc0cfc3384039ecde2b0ac4cad180c3c4aa9c97c923a9c6cb13f6aa9fbf8c08fb700252ea7f0213a06dcbe9459c26c3d32e20f876ac1a8af8b062848da682f703220f6526c300ae9a1b65f9c84a6bd74f8cf0ebccbf3163defff0b96ad2daab94c255d861af6a702229ca46f95d13cba864c825a77be7bdcb040da246bb6f3f5b0d0c69a647e2388ad42324f"}}}}}}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x6, &(0x7f00000007c0)={0x65, {{0x29, 0x0, 0x8000000, @remote, 0x3}}}, 0x88) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001c00)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000f91f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3, r1}, 0x41) r4 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"/309], 0x78}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000500)={'syztnl1\x00', &(0x7f0000000340)={'ip6tnl0\x00', 0x0, 0x29, 0x22, 0x9, 0x9, 0x0, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x8030, 0x1, 0x6af, 0xff}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x1, 0xffffffff, 0x7f, 0x9, 0x100000000}) 1.424922016s ago: executing program 6 (id=611): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x200000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x4000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=@mpls_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x100}}, 0x1c}}, 0x20004980) sendmsg$kcm(r2, &(0x7f0000002040)={&(0x7f00000001c0)=@ethernet={0x1, @broadcast}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000000480)}, {&(0x7f0000000700)}, {&(0x7f0000001700)="fc608a677d9970c54092bb94e4dcf440d70a571d4d413cf85a617da7ad1140dfd1e734c5be73d3bfd34ed2314b13bebaa23c8eb39e45d69648183d4c9896d3f1db4a927f65d0a534018d8fa08d6f66f448c3aaf4f8ff5c989e25081daa067e1861d803774ffd07e75c03e283ae860e056ebe90cee5", 0x75}, {&(0x7f0000001780)="0250287742df46d19caf534249784fd114eb2c4efc6afa1405ce927f82950a15abe4e4131301473defbcde4a5aebc4eafc9b20a41f1d3dfedf7fcc795bc252309a593087d1c887041045bf0612ea804ab81b196f8fc9f28a5e0fbd48239efa4ffbb0a90c99a76c4371", 0x69}, {&(0x7f0000001800)="a6d5315499f90c3c02f0505f94d2543f1cb8d8914daf443277e7323a31c89dcb57b2398b0c35b4f9a2ed28a02eb1667b6fffcf7a2ab225a4fde28de645092ec129772d2103098e2001ea6a8bbeaff6b0f8bc18be63886f104cde343f33549e5c0d26800dd61ea939d59529ac9aaa53c978ef527414be5a0c40f419611e01da98ba15a6740fd1776a9d6c4a3c7023563ec34cf732bd57c4036d7fa1197faa28bfc281e90a4fdb26304015f9e59908b8cb98f068de744439c4d5af3ad52c9ac35f3f752f8d", 0xc4}, {&(0x7f0000001900)="765d485e5169c45ba27e35afd40cacba51309fc222eab4a7f77673b2e9f670e37cefde1cbf1e5e66107fc4c1d9ad016c4c9716ffedcb058844be599fb86c84ce2ae0a6be9aa0f290f52b600560a38a6d2f0548662da33844de59bafdaa8e0ec16ab2c3796fd03f9332486ce12495", 0x6e}, {0x0}, {0x0}, {&(0x7f0000001a80)="c0cc7cea7cada57bf39ee5c65b5046ad6ca7df500543b542ca3d8836162132253adc1f3956ba8486a5c426c5682deed3098bb40ceabed6df7b93ebce2c201499afea9c58bfa0dca728621984cb6aa9963c133515489e04402357e68ac89b96c7fc69cbb0224102bad4cec77c9d43c427eb5803c2125f6c83a4e0476b26e8031c228ee312737df2df513b403fb69c9e04f69462befebaed72833184f76f848da29731689197307a157b10a8ef764ed5c9d29c4d859b011636cc2021c9f35e4bd856ac0e2dd8f6fadb", 0xc8}], 0x9, &(0x7f0000001c40)=[{0xd0, 0xff, 0x8001, "969be89ecdf2f46be688cdc43f5d70e030eb4bf8cc4d24d08c8d67eedaa564fb4ed85280496d640e37bd9b748c2dc948d8d22fce9747637ae2235f8b7f1de6900b2f03cb739ceb30f3d683c29a7a4538bc2a5095cb5ae5fc5e0844a595aab6e5d920ab0135a69ea27b1dea5e0310a3514325a459bbd8f8ef5fcce5d9bb78159fc062e31dd46ef2de926ac51daab1fa7487864deb854b6ef4df3f630c38729d50bda5985c62238dfbd7c784ec0c6deff0775e6a14b308a5674d3d"}, {0x10, 0x117, 0x10}, {0x10, 0x0, 0x9ea}, {0x80, 0x104, 0x52, "d787a87ce0a1e2778535a94f63f553fa9e3b0ae3d88f130b3d08facfb388e8c71d929ccd41d2ae35f47c8285218d79fbcf42dbbf9cb1338af043f8ff2bf21d73aa4b89881282866e106d35fc966ef35fb1d58a1af20352ade40c18ccce920ffde78f796d4d815e4d7ebf659fe435"}, {0xb0, 0x10e, 0x8, "0399e31543fabc12509a0745274ce42540332b92dbebe4ab89d7590bce93178745d50285c9d6d8e60c758da339499407c843a88ac7fcd832aabf059e2ecc49ba58896daa338677bce29ed793ef5b3d19bf57a2220a4c57abef4a80acaacc8a2d2dcd8aee7f882635d62749bc5d715da71e0c16bee6080b81fc94b0c37738aa25a5ecc02a4bdf07787f36f13eceedaa26f9be3b052eb2a19b8fafc44529"}], 0x220}, 0x40) shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000004180)=@security={'security\x00', 0xe, 0x4, 0x4c8, 0xffffffff, 0x328, 0xe8, 0x328, 0xffffffff, 0xffffffff, 0x3f8, 0x3f8, 0x3f8, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "78c1a2f02c4efb91009be714fe5bb1ac4af4af4dcfa386c3d41dd8d9054a"}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @private=0xa010101}, @private2={0xfc, 0x2, '\x00', 0x4d}, [0xff000000, 0x0, 0xff, 0xff000000], [0xffffffff, 0xffffffff, 0xffffff00, 0xff000000], 'team0\x00', 'wg2\x00', {}, {}, 0x16, 0x6, 0x7, 0x30}, 0x0, 0x218, 0x240, 0x0, {}, [@common=@unspec=@owner={{0x38}, {0x0, 0x0, r3, 0xee00, 0x2, 0x1}}, @common=@rt={{0x138}, {0xc, [0x26, 0x4], 0xb, 0x4, 0x0, [@local, @private1, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x32}, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @broadcast}, @empty, @private2, @rand_addr=' \x01\x00', @loopback, @private2, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast1}, @private1, @mcast1], 0xd}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x2, 0x9, 0x1}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, [0xff, 0xff000000, 0xff000000, 0xffffff00], [0xffffffff, 0xff000000, 0xffffffff, 0xffffff00], 'veth1_to_bond\x00', 'team_slave_0\x00', {0xff}, {}, 0x0, 0x7, 0x5, 0xc}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x0, 0x81, 0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x528) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) capset(0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x801, 0x84) 1.148374705s ago: executing program 6 (id=612): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) poll(&(0x7f0000000000), 0x2000000d, 0x9) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000005200)=@bpf_tracing={0x1a, 0x18, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}, [@cb_func={0x18, 0x4, 0x4, 0x0, 0x87}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_fd={0x18, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x1}, @ldst={0x1, 0x0, 0x3, 0x3, 0x6, 0xfffffffffffffffc, 0x4}]}, &(0x7f0000000780)='syzkaller\x00', 0x4d1afbd7, 0x1000, &(0x7f00000007c0)=""/4096, 0x40f00, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f00000017c0)={0x9, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x278ff, 0xffffffffffffffff, 0x0, &(0x7f0000005180)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000051c0), 0x10, 0x5}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x10042) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a6c000000060a09040000000000000000020000000900010073797a30000000000900020073797a0500800000400004803c0001800c0001007061796c6f6164002c0002800800064000000003080003400000000008000240000000020a000440000000000800054000000000140000001100010000000000000000000000000aac0433382e09"], 0x94}, 0x1, 0x0, 0x0, 0x48046}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r11, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r12 = socket(0x11, 0x3, 0x1) setsockopt(r12, 0x107, 0xf, &(0x7f0000000100)="00008634", 0x4) r13 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) accept4(r3, &(0x7f0000000340)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000440)=0x80, 0x80000) 1.059280628s ago: executing program 4 (id=613): socket(0x400000000010, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) migrate_pages(0x0, 0x0, 0x0, &(0x7f0000000000)=0xfffffffffffffffc) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f00000002c0)={0x0, 0x5, 0x6, 0x4006, 0x0, 0xe, 0x0}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000003c0)="c87caee45a79880d142a7b2464264f504582ee2d9799576c31076a173ea302e4ae420de8c31ba03be4307214f2f9c6f13ec70b89c6a23425e708a521f9e0083eb29b0533c2329caf8917e57af5df2b2438bb3d3e47906a67559f895c7a821848eae36834fbdac9e1f305805d612dffec502e9a930f9d0b2f959b99464603dc5f562cfe5ff8c08bca1382b843d9234dc524029369a074aa0fa273c2535569390c5b757e7347b05b49a60e1b7aa44758a275ac441a5b000b6368dddadeb457ce64ab", 0xc1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)=0xff) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r5 = accept4(r0, 0x0, 0x0, 0x80000) io_uring_setup(0x1020, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) sendmmsg$unix(r5, &(0x7f0000003dc0)=[{{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000340)='gid=0,no9\xe1\x12 \x91\xfdP\x83\x0e\xb9G!8\xb0\x89\x99\x81\x02\x85\x1cE\b\x9f\x0f\t\x00\x00\x00 \x99\x8d\x1d\x8a\xc7\xc5\x96\xe8Ee\xd5\xac\x18(\x9d\tIr\xdd\\\x95\x9eu}\x06ib\x88\x8c\x9d\xde\xeaT0;\xb4\x1f\x8cm\x15y\xb4[Gc\xaf\xee#\xcf>Qk\xcf\xfc\x12bY\xfc&\x93\xe0\xcc#\x93w\x84@/VV\xbc\x0eL\xeb~1\x832\xa7\xf7l\x1b\xffh\x96O\x84h\x1b\'\x15\xae\xc8\xfbrK1\x1b\x82\\kU{!\x8fe\xbd\xfa\xf3\xac\xdc\x9a7\xbb\xdf\xdf\n\xc4U\xfa\x15\x03e\xe2[\xa6\xd3\xce\xce\x1e\xe4\xc8\xd4s\xd8\xe4W\x8a\x18j\xc4S\xbf\xc9\xcc1\x87\xa0\f\x91/\x8b\a\xdd\x1bj\xff\xae\xfcJM\x9b\xc3\xe6q\xc1T\x19\xa9,\xef\x8ax\xbb\x18\xe7\x99\xff\x10\x15S\x19\'?\xfbt/\x86\xc6\xd3\xb2c\xc4*\x06\x05\x06\x00\x00\x00\x97\xda8\xc8\xd0\x8d\x87Yk\xa1\x83\x9f\x86.[\x83\xdf&\x13\xcc\xb9\x01`D7R\xb7o\xa1\x1e\xffD#\t\x18i\xed\xa4<\x9c\x02\x00\x82\xbd\x93\x9e+\x03\xc6w?\x83\x05\x0e\xf3TB]\xc0V\xd4#r\x9e=C\xd6k\xf89S\xb3\xf4\x84\xd8)\x17L\xeb\xf4\xf3iW\xe6\x9b\x8a\x13\x01\x0ej\x88N\xb5\xf7e;\xdd\xe1\xfc\x9c\x8a\xae>=n\xb3\x12\x7f\x94\x19~\x93\x92xK\x9b\x9e\xa6\x9e\x16v\"e\xe80\xa3%oS\xb4\xad\xb1\xb6\xe0\xef\x1fy\xf2\x1aN\xd7\xee\\*6\xa6\x8e\x84 \xc5\xc0\xd4/\x0eVg\xc1\xd9\xcb\xdcGp\xef\x17\xfc\xc2\xef\xb9\x03\b*\x1c\xc6\xe8\x9a\xe0o\xba\x1d {%\x904\xa2\x8f\xed\xca%Z\x1a#\xddA7\x1b\xdf\xd5]') r6 = socket$inet6(0xa, 0x3, 0x5) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000180)=0x2) sendmmsg(r6, &(0x7f0000000140)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @local, 0x2, 0x1}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000000000000002900000003000000e8000000000000008400000007000000a1b4c657d1c53ef80aa934b02739590bbd9cf2fb8f6d0e7e07a6f79268fb47d2fedcdb494b76fbc54aa42d2fae85d3ddccbd167f6ce03bf8e22af068cd82bf3a62d66c39a9fc4180c352e873511617ab4b4cb796bb79808f285b3954ae4e107928923bcddbd4e935683f298ba34ab52072098fef58f3587f18c8e65b53af221098ab770fc6f868ccabfccfb81a9aac5ec82202e88255b4246158a3b04e6b2794460fd4647fb4c9cf252b0ebdcd55b9b7e2b5bfe1cfc556f5044fc000"/233], 0xf8}}], 0x1, 0x48044) syz_mount_image$minix(&(0x7f0000000300), &(0x7f0000000000)='./file2\x00', 0x4000, &(0x7f0000000100)=ANY=[@ANYRES64=0x0, @ANYRESDEC, @ANYRES16, @ANYRES8], 0x21, 0x210, &(0x7f0000000940)="$eJzs28tOE1Ecx/Hf9EZFI17iJa5MTIwbqQIJ6Up5ADcuTVyQWkjjoEbcQEiUl3Dv1pWPQKLv4QvAwp0rjjkzp2nHDp0LM0yg309C50/n/M6cAc6h04sAzKznwa0nT+2gMsZ8vi/p1QtJjYoHB6BUxm2PDYDZU8899V8P1xAA59LRWl1SWwee9PvPXu/QfbVTPn44WquFhScdjuUvpc3ve8H2XiOan5d0eaL15AWJ+RbmH2qYtyPf613JePx5RY+va2nz4fk/eqCmxvJXJS1IQTfXJd2QdFOas21vSapFjt9y343yd8M79lOeBgAAAAAAU9mrz8XT5hM7qEt6ErvHXgdvDPx+/N5kTZd/mjPfcvmlaY1Mcn55/M7aSa29UdkMN3Muv9h777/JMG6gCLVs83/iaUH7F32Q0MGJ08GtDNH530w/GveM4Mbga6YMgND2zu7bdd/vfyyyeDatjZS1Q7siFDzC+OK7LfQ3fGWk5GPlKeximzc+fEGm6IF9UXIbk6LNRSoaxf6cf8r7f542IpPoh/vdZuj5ZdyuliLzNKJ+xgsTgNJ1Pm196Gzv7D4ebK1v9jf771ZWu93VleWlbid4WG5vzULVowRQhtF//5idad/EAwAAAAAAAAAAAAAAKnVb0p2g+nWcIcY7AwAAAIBz6Cw+FFX1OQIAAAAAAAAAAAAAcNH9CwAA///UBDZV") setuid(0xee01) lchown(&(0x7f0000000040)='./file2\x00', 0xffffffffffffffff, 0x0) 710.469077ms ago: executing program 4 (id=614): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0xe9, 0x79, 0x56, 0x40, 0x781, 0x5, 0x5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x2, 0x95, 0x10, 0x99, "", [{{0x9, 0x4, 0x2b, 0xd, 0x2, 0x39, 0xb3, 0x92, 0x9, [], [{{0x9, 0x5, 0x1, 0x2, 0x40, 0x9, 0xb9, 0x1}}, {{0x9, 0x5, 0x82, 0x12, 0x8, 0x4, 0x4, 0x3f}}]}}]}}]}}, 0x0) 643.813632ms ago: executing program 6 (id=615): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000c000000080000000100"], &(0x7f00000001c0)=""/257, 0x3c, 0x101, 0x6}, 0x28) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000740)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x60, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x18000000000002a0, 0x77, 0x0, &(0x7f0000000080)="d2df03c3ff4f84e5fbb1cb460800", 0x0, 0x95b4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = syz_open_dev$sndctrl(&(0x7f0000000680), 0x2, 0x40) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r1, 0xc0405519, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newtaction={0x4c, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x38, 0x1, [@m_tunnel_key={0x34, 0x17, 0x0, 0x0, {{0xf}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x4c}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x6081) r5 = socket(0x11, 0x3, 0x0) bind$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_int(r5, 0x107, 0xf, 0x0, 0x0) r6 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r6, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) r8 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r8, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x0, r7, 0x0, 0x0}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), r9) sendmsg$NLBL_MGMT_C_ADD(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002c00)={&(0x7f0000000100)={0x3c, r10, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'net/l2cap\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}]}, 0x3c}, 0x1, 0x2000000, 0x0, 0x20000000}, 0x24000080) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x38, r2, 0x701, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x99, {0x1, 0x75}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1374}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) 611.833743ms ago: executing program 7 (id=616): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000001a80)={&(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000380)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2d}, @remote}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@rr={0x7, 0x3, 0x1b}]}}}], 0x38}, 0x4000000) (fail_nth: 3) 235.132791ms ago: executing program 7 (id=617): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r3, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e000300000003000000050007"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x200000000000011, 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x4, 0x0, 0x5374}, 0x1d, [0x8000, 0x78, 0xf, 0x2, 0x80, 0x2, 0x203, 0x7e, 0x4, 0x4b, 0x39cc1919, 0x40, 0x9, 0x5, 0xffff2d37, 0x881, 0x6, 0x3, 0x0, 0x5, 0x4, 0x3, 0x5, 0x3c5d, 0x1, 0x0, 0x9, 0x2, 0x15bb, 0x2, 0xe65f, 0x3, 0x7, 0x3, 0x7fff, 0x7, 0x80000000, 0xa72, 0x3, 0x7, 0x0, 0x71, 0xe, 0x5, 0x1, 0x5, 0x9, 0x3a, 0xffffff7f, 0x6, 0x6, 0xfffbffff, 0x5, 0x4, 0x8, 0x0, 0x80, 0x2, 0x4, 0x9, 0x8, 0x7, 0x1f, 0x40], [0x10000007, 0x3, 0x800, 0x8000, 0x10, 0xffeffff3, 0x8, 0x200c5, 0xf9, 0x10, 0x2bf, 0x6c9, 0xfff, 0xfffffffc, 0x5, 0x0, 0xd14, 0x5, 0x2f, 0x1, 0x4312, 0x7c, 0xea4, 0x0, 0x4, 0x22, 0x8000, 0x40009, 0x400, 0x401, 0xa, 0x1, 0xff, 0x5, 0x5, 0x5f31, 0x7f9, 0x5, 0x2, 0x2, 0x9, 0x5, 0x9, 0x8, 0x800000d, 0x88da, 0x2007, 0xd, 0x2000001, 0xfe000000, 0x10002, 0x2, 0x7b, 0x9, 0x3, 0x3, 0x8, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x1000042, 0xffff], [0x7, 0xf5fd, 0x0, 0x5, 0x1, 0x100, 0x8d2, 0x9, 0x800003, 0x7fff, 0x0, 0x100005, 0xf, 0x4, 0x5, 0x20000005, 0x0, 0x81ef, 0x5, 0x8, 0x83, 0x3, 0x0, 0x3e7, 0xa, 0x5, 0x200, 0x5, 0x3, 0x8, 0x8, 0x6cfc, 0x5, 0x39, 0x7, 0x200, 0x80, 0x3, 0x4e0a, 0x7, 0x1000, 0xa2, 0x7, 0x5, 0x3, 0x6, 0xac8, 0xffffffff, 0x2, 0x11, 0x7ff, 0xfffffff8, 0x0, 0x10000, 0xffff, 0x2b98, 0x1, 0x4, 0x120000, 0xbe, 0x0, 0xa2ed, 0x2, 0x25], [0x9, 0xbb31, 0x7, 0xb, 0x5, 0x3, 0xa, 0x3, 0x0, 0x5, 0x7d, 0xc9, 0x6, 0x6, 0x8, 0x57b, 0x7, 0x10000, 0x6, 0x7ffd, 0xfffd, 0x4, 0x20002, 0x5, 0xe8a0556, 0x2, 0x14c, 0x3, 0x6, 0x6, 0x3, 0x80000000, 0x5, 0x8, 0xce, 0xee1, 0xfffff000, 0x179, 0x3, 0x7e, 0x100, 0x9600, 0x56e, 0x2, 0x1007, 0x40000006, 0x1, 0x0, 0x8, 0x4, 0x30b1d693, 0xa1f, 0xc, 0x800007, 0xfffffffe, 0x3, 0x0, 0xffff, 0x8000007, 0x2bf, 0x3, 0x200, 0x7fffffff, 0x2]}, 0x45c) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0xffa1, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) write$nci(0xffffffffffffffff, &(0x7f0000000080)=@NCI_OP_RF_DEACTIVATE_NTF={0x1, 0x0, 0x3, 0x6, 0x2, {0x7, 0x2}}, 0x5) openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001840)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="09022cbd7000fbdbdf2506"], 0x1c}, 0x1, 0x0, 0x0, 0xc000800}, 0x4000000) 70.084174ms ago: executing program 7 (id=618): r0 = syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x2, &(0x7f0000000040)={[{@minixdf}, {@nogrpid}]}, 0x7, 0x4ff, &(0x7f00000000c0)="$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") ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000600)={0x10000, 0x0, r0}) write$P9_RVERSION(r1, &(0x7f0000000640)={0x15, 0x65, 0xffff, 0x2, 0x8, '9P2000.u'}, 0x15) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt(r2, 0x84, 0x75, &(0x7f0000000280)="1a00008002000000", 0x8) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) socket$inet(0x2, 0x5, 0x809) getdents64(r3, &(0x7f0000000f80)=""/4096, 0x1000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'bridge0\x00', 0x0}) open(&(0x7f0000000680)='./file1\x00', 0x4, 0x808594519ea6108b) r7 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_G_CROP(r7, 0xc014563b, &(0x7f0000000040)={0xe, {0x80000000, 0x43abf1af, 0x0, 0x401}}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbee, {0x0, 0x0, 0x0, 0x0, 0x40c35}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCRYPT={0x5, 0x7, 0x1}, @IFLA_MACSEC_PROTECT={0x5}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) 49.461573ms ago: executing program 6 (id=619): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000480)=@assoc_value, &(0x7f0000000040)=0x8) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f00000017c0)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)="e1", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f0000000140)=[{&(0x7f00000005c0)="883d", 0x2}], 0x1}}, {{&(0x7f0000000400)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x30}}, 0x10, &(0x7f0000000b40)=[{&(0x7f0000000500)="b5", 0x1}], 0x1}}], 0x3, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, 0x0, 0x0) 0s ago: executing program 2 (id=620): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f00000017c0)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000340)={0x2, 0xfff, 0x1, 0x2, 0x100, 0x80, 0x8000, 0x7, r1}, 0x20) kernel console output (not intermixed with test programs): [ 152.796630][ T6763] ? srso_alias_return_thunk+0x5/0xfbef5 [ 152.796663][ T6763] ? netlink_deliver_tap+0x2e/0x1b0 [ 152.796702][ T6763] ? netlink_deliver_tap+0x2e/0x1b0 [ 152.796748][ T6763] netlink_unicast+0x75c/0x8e0 [ 152.796797][ T6763] netlink_sendmsg+0x813/0xb40 [ 152.796843][ T6763] ? __pfx_netlink_sendmsg+0x10/0x10 [ 152.796886][ T6763] ? srso_alias_return_thunk+0x5/0xfbef5 [ 152.796916][ T6763] ? aa_sock_msg_perm+0xf1/0x1b0 [ 152.796956][ T6763] ? srso_alias_return_thunk+0x5/0xfbef5 [ 152.796985][ T6763] ? srso_alias_return_thunk+0x5/0xfbef5 [ 152.797019][ T6763] ____sys_sendmsg+0x972/0x9f0 [ 152.797043][ T6763] ? srso_alias_return_thunk+0x5/0xfbef5 [ 152.797083][ T6763] ? __pfx_____sys_sendmsg+0x10/0x10 [ 152.797118][ T6763] ? srso_alias_return_thunk+0x5/0xfbef5 [ 152.797147][ T6763] ? import_iovec+0x73/0xa0 [ 152.797184][ T6763] ___sys_sendmsg+0x2a5/0x360 [ 152.797206][ T6763] ? srso_alias_return_thunk+0x5/0xfbef5 [ 152.797236][ T6763] ? __lock_acquire+0x6b5/0x2cf0 [ 152.797269][ T6763] ? __pfx____sys_sendmsg+0x10/0x10 [ 152.797358][ T6763] ? __fget_files+0x2a/0x420 [ 152.797389][ T6763] ? srso_alias_return_thunk+0x5/0xfbef5 [ 152.797418][ T6763] ? __fget_files+0x3a0/0x420 [ 152.797463][ T6763] __x64_sys_sendmsg+0x1bd/0x2a0 [ 152.797491][ T6763] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 152.797528][ T6763] ? __pfx_ksys_write+0x10/0x10 [ 152.797577][ T6763] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.797605][ T6763] do_syscall_64+0x174/0x580 [ 152.797630][ T6763] ? trace_irq_disable+0x3b/0x140 [ 152.797675][ T6763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.797700][ T6763] RIP: 0033:0x7f1ab259ce59 [ 152.797723][ T6763] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.797743][ T6763] RSP: 002b:00007f1ab3539028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 152.797768][ T6763] RAX: ffffffffffffffda RBX: 00007f1ab2815fa0 RCX: 00007f1ab259ce59 [ 152.797786][ T6763] RDX: 0000000004024000 RSI: 0000200000000040 RDI: 0000000000000003 [ 152.797802][ T6763] RBP: 00007f1ab3539090 R08: 0000000000000000 R09: 0000000000000000 [ 152.797818][ T6763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 152.797832][ T6763] R13: 00007f1ab2816038 R14: 00007f1ab2815fa0 R15: 00007ffd96737a78 [ 152.797872][ T6763] [ 153.750569][ T6769] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 154.173674][ T6775] loop0: detected capacity change from 0 to 32768 [ 154.209210][ T6775] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 154.258560][ T6775] XFS (loop0): Ending clean mount [ 154.271437][ T6775] XFS (loop0): Quotacheck needed: Please wait. [ 154.351437][ T6775] XFS (loop0): Quotacheck: Done. [ 154.822823][ T31] audit: type=1800 audit(1780482424.106:15): pid=6793 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.176" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=4429 res=0 errno=0 [ 155.331795][ T6757] loop2: detected capacity change from 0 to 32768 [ 155.714745][ T5630] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 155.827490][ T6799] kthread_run failed with err -4 [ 156.913651][ T6814] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 156.929276][ T6814] loop3: detected capacity change from 0 to 512 [ 156.936222][ T6814] journal_path: Non-blockdev passed as './file1' [ 156.942590][ T6814] EXT4-fs: error: could not find journal device path [ 157.100086][ T6816] loop1: detected capacity change from 0 to 1024 [ 157.108687][ T6816] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 157.191572][ T6816] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.327254][ T31] audit: type=1800 audit(1780482426.626:16): pid=6816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.184" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 158.000929][ T5937] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 158.337588][ T6840] loop2: detected capacity change from 0 to 32768 [ 158.420926][ T5937] usb 5-1: Using ep0 maxpacket: 16 [ 158.446322][ T6840] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 158.463909][ T5937] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 158.488232][ T5937] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 158.501564][ T5937] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 158.509817][ T5937] usb 5-1: SerialNumber: syz [ 158.728731][ T5937] usb 5-1: 0:2 : does not exist [ 158.814888][ T6840] XFS (loop2): Ending clean mount [ 158.827950][ T6840] XFS (loop2): Quotacheck needed: Please wait. [ 158.937063][ T5632] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.963280][ T6840] XFS (loop2): Quotacheck: Done. [ 159.509146][ T31] audit: type=1800 audit(1780482428.526:17): pid=6851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.191" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=4429 res=0 errno=0 [ 159.599173][ T5937] usb 5-1: 5:0: failed to get current value for ch 1 (-22) [ 159.659337][ T5937] usb 5-1: 5:0: cannot get min/max values for control 5 (id 5) [ 159.872378][ T5937] usb 5-1: 5:0: cannot get min/max values for control 5 (id 5) [ 159.924480][ T5937] usb 5-1: USB disconnect, device number 8 [ 159.936364][ T5629] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 160.025327][ T6854] loop1: detected capacity change from 0 to 512 [ 160.050219][ T6003] udevd[6003]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 160.078550][ T6854] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 160.107248][ T6854] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 160.153709][ T6857] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 160.204905][ T6854] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 160.344417][ T6854] EXT4-fs (loop1): 1 truncate cleaned up [ 160.369895][ T6854] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.796342][ T5632] EXT4-fs error (device loop1): mb_free_blocks:2049: group 0, inode 11: block 54:freeing already freed block (bit 53); block bitmap corrupt. [ 160.825731][ T6867] FAULT_INJECTION: forcing a failure. [ 160.825731][ T6867] name failslab, interval 1, probability 0, space 0, times 0 [ 160.858796][ T5632] EXT4-fs (loop1): Remounting filesystem read-only [ 160.870800][ T6867] CPU: 0 UID: 0 PID: 6867 Comm: syz.2.193 Not tainted syzkaller #0 PREEMPT(full) [ 160.870830][ T6867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 160.870852][ T6867] Call Trace: [ 160.870861][ T6867] [ 160.870870][ T6867] dump_stack_lvl+0xe8/0x150 [ 160.870902][ T6867] should_fail_ex+0x412/0x560 [ 160.870937][ T6867] should_failslab+0xa8/0x100 [ 160.870964][ T6867] __kmalloc_noprof+0xe8/0x760 [ 160.871002][ T6867] ? drm_atomic_state_init+0x113/0x3b0 [ 160.871039][ T6867] ? __kmalloc_noprof+0x1b8/0x760 [ 160.871080][ T6867] drm_atomic_state_init+0x113/0x3b0 [ 160.871123][ T6867] drm_atomic_state_alloc+0xbc/0x100 [ 160.871163][ T6867] drm_mode_atomic_ioctl+0x4ab/0xdd0 [ 160.871191][ T6867] ? srso_alias_return_thunk+0x5/0xfbef5 [ 160.871239][ T6867] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 160.871289][ T6867] ? srso_alias_return_thunk+0x5/0xfbef5 [ 160.871322][ T6867] ? srso_alias_return_thunk+0x5/0xfbef5 [ 160.871349][ T6867] ? do_raw_spin_unlock+0xf5/0x210 [ 160.871389][ T6867] ? srso_alias_return_thunk+0x5/0xfbef5 [ 160.871417][ T6867] ? _raw_spin_unlock+0x28/0x50 [ 160.871453][ T6867] ? srso_alias_return_thunk+0x5/0xfbef5 [ 160.871481][ T6867] ? drm_is_current_master+0x19f/0x200 [ 160.871514][ T6867] drm_ioctl_kernel+0x2df/0x3b0 [ 160.871560][ T6867] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 160.871589][ T6867] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 160.871641][ T6867] drm_ioctl+0x6ba/0xb80 [ 160.871686][ T6867] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 160.871721][ T6867] ? __pfx_drm_ioctl+0x10/0x10 [ 160.871775][ T6867] ? __fget_files+0x2a/0x420 [ 160.871811][ T6867] ? srso_alias_return_thunk+0x5/0xfbef5 [ 160.871840][ T6867] ? srso_alias_return_thunk+0x5/0xfbef5 [ 160.871875][ T6867] ? __pfx_drm_ioctl+0x10/0x10 [ 160.871914][ T6867] __se_sys_ioctl+0xfc/0x170 [ 160.871954][ T6867] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.871981][ T6867] do_syscall_64+0x174/0x580 [ 160.872005][ T6867] ? trace_irq_disable+0x3b/0x140 [ 160.872050][ T6867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.872075][ T6867] RIP: 0033:0x7fb36659ce59 [ 160.872097][ T6867] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.872116][ T6867] RSP: 002b:00007fb3674a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 160.872140][ T6867] RAX: ffffffffffffffda RBX: 00007fb366815fa0 RCX: 00007fb36659ce59 [ 160.872158][ T6867] RDX: 0000200000000180 RSI: 00000000c03864bc RDI: 000000000000000e [ 160.872174][ T6867] RBP: 00007fb3674a7090 R08: 0000000000000000 R09: 0000000000000000 [ 160.872189][ T6867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.872207][ T6867] R13: 00007fb366816038 R14: 00007fb366815fa0 R15: 00007ffc1a459b08 [ 160.872246][ T6867] [ 160.875121][ T6869] fuse: Unknown parameter '00000000000000000000' [ 162.486459][ T6877] loop4: detected capacity change from 0 to 1024 [ 162.526295][ T6877] EXT4-fs: Ignoring removed orlov option [ 162.805916][ T6877] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 162.854828][ T6877] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.006976][ T5632] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.157091][ T38] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.398265][ T6892] loop0: detected capacity change from 0 to 32768 [ 163.440044][ T6892] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 163.473384][ T6901] FAULT_INJECTION: forcing a failure. [ 163.473384][ T6901] name failslab, interval 1, probability 0, space 0, times 0 [ 163.479017][ T6892] XFS (loop0): Ending clean mount [ 163.499978][ T6892] XFS (loop0): Quotacheck needed: Please wait. [ 163.561698][ T6901] CPU: 1 UID: 0 PID: 6901 Comm: syz.6.205 Not tainted syzkaller #0 PREEMPT(full) [ 163.561731][ T6901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 163.561750][ T6901] Call Trace: [ 163.561758][ T6901] [ 163.561768][ T6901] dump_stack_lvl+0xe8/0x150 [ 163.561801][ T6901] should_fail_ex+0x412/0x560 [ 163.561835][ T6901] should_failslab+0xa8/0x100 [ 163.561862][ T6901] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 163.561899][ T6901] ? __alloc_skb+0x186/0x7d0 [ 163.561935][ T6901] ? __alloc_skb+0x1d0/0x7d0 [ 163.561969][ T6901] ? __local_bh_enable_ip+0xd0/0x130 [ 163.562000][ T6901] __alloc_skb+0x1d0/0x7d0 [ 163.562042][ T6901] alloc_skb_with_frags+0xc8/0x760 [ 163.562091][ T6901] ? srso_alias_return_thunk+0x5/0xfbef5 [ 163.562121][ T6901] ? __lock_acquire+0x6b5/0x2cf0 [ 163.562152][ T6901] sock_alloc_send_pskb+0x878/0x990 [ 163.562187][ T6901] ? __kernel_text_address+0xd/0x30 [ 163.562236][ T6901] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 163.562266][ T6901] ? do_raw_spin_lock+0x12b/0x2f0 [ 163.562309][ T6901] ? srso_alias_return_thunk+0x5/0xfbef5 [ 163.562340][ T6901] ? __lock_acquire+0x6b5/0x2cf0 [ 163.562375][ T6901] __ip_append_data+0x2a98/0x3e40 [ 163.562428][ T6901] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 163.562461][ T6901] ? srso_alias_return_thunk+0x5/0xfbef5 [ 163.562500][ T6901] ? srso_alias_return_thunk+0x5/0xfbef5 [ 163.562532][ T6901] ? ipv4_mtu+0x23/0x650 [ 163.562560][ T6901] ? __pfx___ip_append_data+0x10/0x10 [ 163.562587][ T6901] ? srso_alias_return_thunk+0x5/0xfbef5 [ 163.562630][ T6901] ? ipv4_mtu+0x23/0x650 [ 163.562655][ T6901] ? __pfx_ipv4_mtu+0x10/0x10 [ 163.562678][ T6901] ? srso_alias_return_thunk+0x5/0xfbef5 [ 163.562707][ T6901] ? ip_setup_cork+0x57e/0xa50 [ 163.562738][ T6901] ip_make_skb+0x22e/0x450 [ 163.562773][ T6901] ? srso_alias_return_thunk+0x5/0xfbef5 [ 163.562805][ T6901] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 163.562834][ T6901] ? __pfx_ip_make_skb+0x10/0x10 [ 163.562876][ T6901] ? srso_alias_return_thunk+0x5/0xfbef5 [ 163.562915][ T6901] udp_sendmsg+0x18fd/0x21a0 [ 163.562957][ T6901] ? string+0x279/0x2b0 [ 163.563001][ T6901] ? __pfx_udp_sendmsg+0x10/0x10 [ 163.563041][ T6901] ? srso_alias_return_thunk+0x5/0xfbef5 [ 163.563071][ T6901] ? look_up_lock_class+0x57/0x110 [ 163.563105][ T6901] ? srso_alias_return_thunk+0x5/0xfbef5 [ 163.563134][ T6901] ? __lock_acquire+0x6b5/0x2cf0 [ 163.563177][ T6901] ? srso_alias_return_thunk+0x5/0xfbef5 [ 163.563227][ T6901] ? get_random_u32+0x4ce/0x8b0 [ 163.563262][ T6901] ? srso_alias_return_thunk+0x5/0xfbef5 [ 163.563301][ T6901] udpv6_sendmsg+0x996/0x25c0 [ 163.563356][ T6901] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 163.563391][ T6901] ? udp_lib_get_port+0x177a/0x1c60 [ 163.563448][ T6901] ? srso_alias_return_thunk+0x5/0xfbef5 [ 163.563499][ T6901] ? inet_send_prepare+0x1b9/0x270 [ 163.563528][ T6901] ? inet_send_prepare+0x1b9/0x270 [ 163.563565][ T6901] ? srso_alias_return_thunk+0x5/0xfbef5 [ 163.563597][ T6901] ? __local_bh_enable_ip+0xd0/0x130 [ 163.563621][ T6901] ? srso_alias_return_thunk+0x5/0xfbef5 [ 163.563650][ T6901] ? inet_send_prepare+0x1b9/0x270 [ 163.563682][ T6901] ? srso_alias_return_thunk+0x5/0xfbef5 [ 163.563711][ T6901] ? inet6_sendmsg+0xe4/0x120 [ 163.563749][ T6901] ____sys_sendmsg+0x5c7/0x9f0 [ 163.563784][ T6901] ? __pfx_____sys_sendmsg+0x10/0x10 [ 163.563818][ T6901] ? srso_alias_return_thunk+0x5/0xfbef5 [ 163.563847][ T6901] ? import_iovec+0x73/0xa0 [ 163.563883][ T6901] ___sys_sendmsg+0x2a5/0x360 [ 163.563905][ T6901] ? srso_alias_return_thunk+0x5/0xfbef5 [ 163.563934][ T6901] ? __lock_acquire+0x6b5/0x2cf0 [ 163.563965][ T6901] ? __pfx____sys_sendmsg+0x10/0x10 [ 163.564031][ T6901] ? __fget_files+0x2a/0x420 [ 163.564061][ T6901] ? srso_alias_return_thunk+0x5/0xfbef5 [ 163.564092][ T6901] ? __fget_files+0x3a0/0x420 [ 163.564136][ T6901] __x64_sys_sendmsg+0x1bd/0x2a0 [ 163.564165][ T6901] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 163.564204][ T6901] ? __pfx_ksys_write+0x10/0x10 [ 163.564258][ T6901] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.564286][ T6901] do_syscall_64+0x174/0x580 [ 163.564313][ T6901] ? trace_irq_disable+0x3b/0x140 [ 163.564362][ T6901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.564387][ T6901] RIP: 0033:0x7f5887f9ce59 [ 163.564409][ T6901] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.564428][ T6901] RSP: 002b:00007f5888d73028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 163.564453][ T6901] RAX: ffffffffffffffda RBX: 00007f5888215fa0 RCX: 00007f5887f9ce59 [ 163.564472][ T6901] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000005 [ 163.564487][ T6901] RBP: 00007f5888d73090 R08: 0000000000000000 R09: 0000000000000000 [ 163.564503][ T6901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.564517][ T6901] R13: 00007f5888216038 R14: 00007f5888215fa0 R15: 00007ffc66a7b488 [ 163.564555][ T6901] [ 164.120917][ T6824] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 164.153471][ T6892] XFS (loop0): Quotacheck: Done. [ 164.241439][ T38] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.474068][ T31] audit: type=1800 audit(1780482433.776:18): pid=6905 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.206" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=4429 res=0 errno=0 [ 164.790017][ T6824] EXT4-fs (loop4): Remounting filesystem read-only [ 164.804003][ T5640] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 164.880385][ T5643] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 164.889356][ T5643] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 164.898645][ T5643] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 164.909088][ T5643] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 164.917115][ T5643] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 165.097727][ T6923] netlink: 'syz.2.213': attribute type 13 has an invalid length. [ 165.440348][ T38] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.711090][ T5630] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 165.745656][ T38] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.407761][ T6939] ip6tnl1: entered allmulticast mode [ 167.010964][ T5652] Bluetooth: hci3: command tx timeout [ 167.063266][ T37] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 167.122683][ T37] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 167.131511][ T803] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 167.189404][ T6944] Driver unsupported XDP return value 0 on prog (id 38) dev N/A, expect packet loss! [ 167.203370][ T803] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 167.282347][ T38] bridge_slave_1: left allmulticast mode [ 167.297743][ T38] bridge_slave_1: left promiscuous mode [ 167.314593][ T38] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.343683][ T38] bridge_slave_0: left allmulticast mode [ 167.367145][ T38] bridge_slave_0: left promiscuous mode [ 167.399691][ T38] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.486015][ T38] tipc: Resetting bearer [ 167.525558][ T6956] FAULT_INJECTION: forcing a failure. [ 167.525558][ T6956] name failslab, interval 1, probability 0, space 0, times 0 [ 167.557291][ T6952] loop6: detected capacity change from 0 to 1024 [ 167.566003][ T6956] CPU: 1 UID: 0 PID: 6956 Comm: syz.4.222 Not tainted syzkaller #0 PREEMPT(full) [ 167.566032][ T6956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 167.566047][ T6956] Call Trace: [ 167.566057][ T6956] [ 167.566067][ T6956] dump_stack_lvl+0xe8/0x150 [ 167.566100][ T6956] should_fail_ex+0x412/0x560 [ 167.566134][ T6956] should_failslab+0xa8/0x100 [ 167.566161][ T6956] __kmalloc_cache_noprof+0x88/0x660 [ 167.566198][ T6956] ? __pfx_stack_trace_save+0x10/0x10 [ 167.566238][ T6956] ? rtnl_newlink+0x136/0x1bb0 [ 167.566274][ T6956] ? srso_alias_return_thunk+0x5/0xfbef5 [ 167.566310][ T6956] rtnl_newlink+0x136/0x1bb0 [ 167.566346][ T6956] ? srso_alias_return_thunk+0x5/0xfbef5 [ 167.566375][ T6956] ? kasan_save_track+0x3e/0x80 [ 167.566409][ T6956] ? kasan_save_free_info+0x46/0x50 [ 167.566437][ T6956] ? __kasan_slab_free+0x5c/0x80 [ 167.566473][ T6956] ? dev_hard_start_xmit+0x2cd/0x830 [ 167.566497][ T6956] ? __dev_queue_xmit+0x14d9/0x3950 [ 167.566523][ T6956] ? __netlink_deliver_tap+0x5ad/0x850 [ 167.566561][ T6956] ? netlink_deliver_tap+0x19c/0x1b0 [ 167.566597][ T6956] ? netlink_unicast+0x730/0x8e0 [ 167.566629][ T6956] ? netlink_sendmsg+0x813/0xb40 [ 167.566669][ T6956] ? __pfx_rtnl_newlink+0x10/0x10 [ 167.566702][ T6956] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.566765][ T6956] ? srso_alias_return_thunk+0x5/0xfbef5 [ 167.566797][ T6956] ? kasan_quarantine_put+0xbb/0x1f0 [ 167.566837][ T6956] ? srso_alias_return_thunk+0x5/0xfbef5 [ 167.566865][ T6956] ? lockdep_hardirqs_on+0x7a/0x110 [ 167.566890][ T6956] ? srso_alias_return_thunk+0x5/0xfbef5 [ 167.566923][ T6956] ? srso_alias_return_thunk+0x5/0xfbef5 [ 167.566951][ T6956] ? kmem_cache_free+0x182/0x650 [ 167.567001][ T6956] ? srso_alias_return_thunk+0x5/0xfbef5 [ 167.567030][ T6956] ? __lock_acquire+0x6b5/0x2cf0 [ 167.567060][ T6956] ? srso_alias_return_thunk+0x5/0xfbef5 [ 167.567090][ T6956] ? __dev_queue_xmit+0x2b6/0x3950 [ 167.567121][ T6956] ? __local_bh_enable_ip+0xd0/0x130 [ 167.567146][ T6956] ? srso_alias_return_thunk+0x5/0xfbef5 [ 167.567174][ T6956] ? lockdep_hardirqs_on+0x7a/0x110 [ 167.567198][ T6956] ? srso_alias_return_thunk+0x5/0xfbef5 [ 167.567227][ T6956] ? __local_bh_enable_ip+0xd0/0x130 [ 167.567250][ T6956] ? __dev_queue_xmit+0x2b6/0x3950 [ 167.567286][ T6956] ? srso_alias_return_thunk+0x5/0xfbef5 [ 167.567323][ T6956] ? srso_alias_return_thunk+0x5/0xfbef5 [ 167.567362][ T6956] ? __pfx_rtnl_newlink+0x10/0x10 [ 167.567399][ T6956] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 167.567440][ T6956] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 167.567480][ T6956] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 167.567514][ T6956] ? ref_tracker_free+0x693/0x840 [ 167.567547][ T6956] ? __pfx_ref_tracker_free+0x10/0x10 [ 167.567574][ T6956] ? __asan_memcpy+0x40/0x70 [ 167.567605][ T6956] ? __skb_clone+0x63/0x7a0 [ 167.567639][ T6956] netlink_rcv_skb+0x232/0x4b0 [ 167.567680][ T6956] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 167.567719][ T6956] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 167.567773][ T6956] ? netlink_deliver_tap+0x2e/0x1b0 [ 167.567811][ T6956] ? netlink_deliver_tap+0x2e/0x1b0 [ 167.567863][ T6956] netlink_unicast+0x75c/0x8e0 [ 167.567911][ T6956] netlink_sendmsg+0x813/0xb40 [ 167.567962][ T6956] ? __pfx_netlink_sendmsg+0x10/0x10 [ 167.568003][ T6956] ? srso_alias_return_thunk+0x5/0xfbef5 [ 167.568029][ T6956] ? aa_sock_msg_perm+0xf1/0x1b0 [ 167.568069][ T6956] ? srso_alias_return_thunk+0x5/0xfbef5 [ 167.568097][ T6956] ? srso_alias_return_thunk+0x5/0xfbef5 [ 167.568131][ T6956] ____sys_sendmsg+0x972/0x9f0 [ 167.568156][ T6956] ? srso_alias_return_thunk+0x5/0xfbef5 [ 167.568194][ T6956] ? __pfx_____sys_sendmsg+0x10/0x10 [ 167.568229][ T6956] ? srso_alias_return_thunk+0x5/0xfbef5 [ 167.568258][ T6956] ? import_iovec+0x73/0xa0 [ 167.568294][ T6956] ___sys_sendmsg+0x2a5/0x360 [ 167.568316][ T6956] ? srso_alias_return_thunk+0x5/0xfbef5 [ 167.568345][ T6956] ? __lock_acquire+0x6b5/0x2cf0 [ 167.568377][ T6956] ? __pfx____sys_sendmsg+0x10/0x10 [ 167.568443][ T6956] ? __fget_files+0x2a/0x420 [ 167.568474][ T6956] ? srso_alias_return_thunk+0x5/0xfbef5 [ 167.568504][ T6956] ? __fget_files+0x3a0/0x420 [ 167.568548][ T6956] __x64_sys_sendmsg+0x1bd/0x2a0 [ 167.568576][ T6956] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 167.568612][ T6956] ? __pfx_ksys_write+0x10/0x10 [ 167.568660][ T6956] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.568687][ T6956] do_syscall_64+0x174/0x580 [ 167.568712][ T6956] ? trace_irq_disable+0x3b/0x140 [ 167.568757][ T6956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.568782][ T6956] RIP: 0033:0x7f0b5159ce59 [ 167.568804][ T6956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.568823][ T6956] RSP: 002b:00007f0b52464028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 167.568854][ T6956] RAX: ffffffffffffffda RBX: 00007f0b51815fa0 RCX: 00007f0b5159ce59 [ 167.568872][ T6956] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 167.568888][ T6956] RBP: 00007f0b52464090 R08: 0000000000000000 R09: 0000000000000000 [ 167.568903][ T6956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.568917][ T6956] R13: 00007f0b51816038 R14: 00007f0b51815fa0 R15: 00007ffce21c1958 [ 167.568955][ T6956] [ 168.075920][ T5760] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 168.190893][ T6952] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 168.303015][ T6952] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.424136][ T31] audit: type=1800 audit(1780482437.726:19): pid=6952 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.220" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 168.616760][ T38] tipc: Disabling bearer [ 168.853032][ T38] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 169.018055][ T38] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 169.080845][ T5652] Bluetooth: hci3: command tx timeout [ 169.409336][ T38] bond0 (unregistering): Released all slaves [ 169.652643][ T6066] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.787790][ T6973] netlink: 8 bytes leftover after parsing attributes in process `syz.3.226'. [ 169.826711][ T38] tipc: Left network mode [ 170.157826][ T6989] loop4: detected capacity change from 0 to 128 [ 170.186419][ T6989] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 170.195853][ T6989] System zones: 1-3, 19-19, 35-36 [ 170.204612][ T6989] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 170.235067][ T6989] ext4 filesystem being mounted at /42/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 170.334374][ T6989] EXT4-fs warning (device loop4): verify_group_input:156: Last group not full [ 170.482839][ T7001] netlink: 60 bytes leftover after parsing attributes in process `syz.3.232'. [ 170.921239][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 171.161462][ T5652] Bluetooth: hci3: command tx timeout [ 171.583342][ T5640] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 171.732947][ T7016] netlink: 60 bytes leftover after parsing attributes in process `syz.0.233'. [ 171.960017][ T38] hsr_slave_0: left promiscuous mode [ 171.987714][ T38] hsr_slave_1: left promiscuous mode [ 172.028722][ T38] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.069711][ T38] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.123479][ T38] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.159337][ T38] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.786529][ T38] veth1_macvtap: left promiscuous mode [ 172.823391][ T38] veth0_macvtap: left promiscuous mode [ 172.846951][ T38] veth1_vlan: left promiscuous mode [ 172.874813][ T38] veth0_vlan: left promiscuous mode [ 172.919927][ T7027] netlink: 60 bytes leftover after parsing attributes in process `syz.4.235'. [ 173.146341][ T7040] loop2: detected capacity change from 0 to 1024 [ 173.170129][ T7040] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 173.224046][ T7040] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.250987][ T5652] Bluetooth: hci3: command tx timeout [ 173.315438][ T31] audit: type=1800 audit(1780482442.616:20): pid=7040 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.238" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 173.657762][ T38] team0 (unregistering): Port device team_slave_1 removed [ 173.697569][ T38] team0 (unregistering): Port device team_slave_0 removed [ 173.999357][ T5629] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.035930][ T5291] 8021q: adding VLAN 0 to HW filter on device eth5 [ 176.267237][ T7075] loop2: detected capacity change from 0 to 32768 [ 176.326874][ T7075] find_entry called with index >= next_index [ 176.332937][ T7075] find_entry called with index >= next_index [ 176.338908][ T7075] find_entry called with index >= next_index [ 176.344955][ T7075] find_entry called with index >= next_index [ 176.350985][ T7075] find_entry called with index >= next_index [ 176.356958][ T7075] add_index: next_index = 0. Resetting! [ 176.362782][ T7075] find_entry called with index >= next_index [ 176.368761][ T7075] find_entry called with index >= next_index [ 176.374932][ T7075] find_entry called with index >= next_index [ 176.381039][ T7075] find_entry called with index >= next_index [ 176.394095][ T7075] non-latin1 character 0x3ff found in JFS file name [ 176.400809][ T7075] mount with iocharset=utf8 to access [ 176.560893][ T5760] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 176.726331][ T6914] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.761907][ T6914] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.781801][ T5760] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 176.793900][ T6914] bridge_slave_0: entered allmulticast mode [ 176.819930][ T5760] usb 7-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 176.828570][ T6914] bridge_slave_0: entered promiscuous mode [ 176.854534][ T5760] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 176.872704][ T6914] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.884556][ T5760] usb 7-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 176.986051][ T6914] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.093329][ T6914] bridge_slave_1: entered allmulticast mode [ 177.096875][ T5760] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 177.118464][ T7096] trusted_key: syz.4.240 sent an empty control message without MSG_MORE. [ 177.291728][ T7093] netlink: 60 bytes leftover after parsing attributes in process `syz.3.247'. [ 177.318522][ T5760] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 177.329448][ T6914] bridge_slave_1: entered promiscuous mode [ 177.478318][ T5760] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 177.526765][ T5760] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 177.571450][ T5760] usb 7-1: Product: syz [ 177.595053][ T5760] usb 7-1: Manufacturer: syz [ 177.777154][ T7082] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 177.796841][ T5760] cdc_wdm 7-1:1.0: skipping garbage [ 177.837363][ T5760] cdc_wdm 7-1:1.0: skipping garbage [ 177.845929][ T6914] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.935425][ T6914] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.964543][ T5760] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 177.998580][ T5760] cdc_wdm 7-1:1.0: Unknown control protocol [ 178.203339][ T6914] team0: Port device team_slave_0 added [ 178.254622][ T6914] team0: Port device team_slave_1 added [ 178.404966][ T7113] loop3: detected capacity change from 0 to 1024 [ 178.436967][ T6914] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.467321][ T7113] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 178.481550][ T6914] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 178.571459][ T7113] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.596072][ T7120] netlink: 4 bytes leftover after parsing attributes in process `syz.2.252'. [ 178.605957][ T6914] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.638116][ T31] audit: type=1800 audit(1780482447.936:21): pid=7113 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.251" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 178.690199][ T7121] netlink: 8 bytes leftover after parsing attributes in process `syz.2.252'. [ 178.705172][ T6914] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.748736][ T6914] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 178.780889][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 178.856203][ T6914] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.956237][ T7121] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.964271][ T7121] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.124124][ T5291] 8021q: adding VLAN 0 to HW filter on device eth6 [ 179.189330][ T6914] hsr_slave_0: entered promiscuous mode [ 179.223098][ T6914] hsr_slave_1: entered promiscuous mode [ 179.250308][ T6914] debugfs: 'hsr0' already exists in 'hsr' [ 179.275956][ T5648] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.276855][ T6914] Cannot create hsr debugfs directory [ 179.951819][ T7129] syzkaller0: entered promiscuous mode [ 179.969773][ T7129] syzkaller0: entered allmulticast mode [ 180.004679][ T24] usb 7-1: USB disconnect, device number 3 [ 181.134891][ T7148] loop3: detected capacity change from 0 to 256 [ 181.224372][ T29] IPVS: starting estimator thread 0... [ 181.247062][ T7148] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 181.311451][ T7148] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 181.318574][ C1] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 181.332183][ T7150] IPVS: using max 25 ests per chain, 60000 per kthread [ 181.500776][ T24] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 181.663015][ T24] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 181.702538][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.753365][ T24] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 181.783236][ T7167] loop3: detected capacity change from 0 to 128 [ 181.784954][ T24] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 181.829021][ T7167] vfat: Bad value for 'time_offset' [ 181.853747][ T24] usb 7-1: Manufacturer: syz [ 181.884622][ T24] usb 7-1: config 0 descriptor?? [ 182.104307][ T24] rc_core: IR keymap rc-hauppauge not found [ 182.121290][ T6914] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 182.130643][ T24] Registered IR keymap rc-empty [ 182.147628][ T7178] loop2: detected capacity change from 0 to 1764 [ 182.152645][ T6914] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 182.176246][ T24] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 182.178988][ T6914] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 182.242898][ T6914] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 182.244822][ T24] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input5 [ 182.276168][ T6914] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 182.334507][ T6914] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 182.372785][ T6914] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 182.404917][ T6914] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 182.469738][ C1] igorplugusb 7-1:0.0: receive overflow invalid: 235 [ 182.910065][ T6914] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.027058][ T6914] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.078270][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.085516][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.146347][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.153539][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.225248][ T7209] xt_hashlimit: size too large, truncated to 1048576 [ 183.468944][ T7212] syzkaller0: entered promiscuous mode [ 183.498794][ T7212] syzkaller0: entered allmulticast mode [ 183.511556][ T7221] overlay: filesystem on ./bus not supported as upperdir [ 183.543254][ T5291] 8021q: adding VLAN 0 to HW filter on device eth7 [ 183.800647][ T7231] loop2: detected capacity change from 0 to 128 [ 183.984595][ T7231] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fff0000) [ 184.000430][ T7231] FAT-fs (loop2): Filesystem has been set read-only [ 184.025489][ T7231] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fff0000) [ 184.214479][ T24] usb 7-1: USB disconnect, device number 4 [ 184.833025][ T7262] netlink: 4 bytes leftover after parsing attributes in process `syz.2.294'. [ 186.243545][ T7280] netlink: 'syz.3.301': attribute type 3 has an invalid length. [ 186.429488][ T7290] vlan0: entered promiscuous mode [ 187.548631][ T7308] loop4: detected capacity change from 0 to 1024 [ 187.597683][ T7308] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 187.604123][ T7316] loop0: detected capacity change from 0 to 1024 [ 187.748919][ T7308] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.836657][ T31] audit: type=1800 audit(1780482457.126:22): pid=7308 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.308" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 187.953908][ T7316] hfsplus: unable to load nls mapping "×J{‚¯¶-¦É’_™macroman" [ 189.340501][ T5640] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.356343][ T7335] loop2: detected capacity change from 0 to 4096 [ 189.388688][ T7335] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 189.434312][ T6914] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.459720][ T7301] loop6: detected capacity change from 0 to 32768 [ 189.606749][ T31] audit: type=1800 audit(1780482458.906:23): pid=7301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.306" name="file1" dev="loop6" ino=4 res=0 errno=0 [ 189.732828][ T7346] loop3: detected capacity change from 0 to 1024 [ 189.792098][ T7348] loop4: detected capacity change from 0 to 2048 [ 189.899146][ T7348] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 189.978985][ T31] audit: type=1800 audit(1780482459.276:24): pid=7348 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.314" name="bus" dev="loop4" ino=1367 res=0 errno=0 [ 190.067391][ T7357] loop3: detected capacity change from 0 to 1024 [ 190.339099][ T7358] netlink: 'syz.4.314': attribute type 1 has an invalid length. [ 190.379236][ T7358] netlink: 224 bytes leftover after parsing attributes in process `syz.4.314'. [ 190.479679][ T5291] 8021q: adding VLAN 0 to HW filter on device eth8 [ 191.544735][ T7383] fuse: Bad value for 'fd' [ 191.665853][ T7374] syzkaller0: entered promiscuous mode [ 191.673971][ T7374] syzkaller0: entered allmulticast mode [ 191.870221][ T6914] veth0_vlan: entered promiscuous mode [ 191.907248][ T6914] veth1_vlan: entered promiscuous mode [ 192.010028][ T7386] loop0: detected capacity change from 0 to 8192 [ 192.026066][ T6914] veth0_macvtap: entered promiscuous mode [ 192.080551][ T7386] loop0: AHDI p2 [ 192.086375][ T6914] veth1_macvtap: entered promiscuous mode [ 192.195381][ T6914] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 192.484582][ T6914] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 192.506527][ T3307] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.515858][ T3307] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.545626][ T3307] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.759071][ T7400] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 192.779745][ T3307] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.878500][ T7404] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 193.489388][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.507958][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.521503][ T7400] loop4: detected capacity change from 0 to 512 [ 193.582800][ T7400] journal_path: Non-blockdev passed as './file1' [ 193.791076][ T7400] EXT4-fs: error: could not find journal device path [ 194.120964][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 194.314865][ T7295] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.660898][ T7295] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.917251][ T7413] loop2: detected capacity change from 0 to 1024 [ 194.923352][ T6048] udevd[6048]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 195.060828][ T7413] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 195.119682][ T185] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.146775][ T7413] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.345309][ T185] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.375286][ T31] audit: type=1800 audit(1780482464.666:25): pid=7413 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.327" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 196.488557][ T7432] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 196.524632][ T5629] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.570020][ T7445] syzkaller0: entered promiscuous mode [ 197.580918][ T7445] syzkaller0: entered allmulticast mode [ 197.887920][ T7456] autofs: Unknown parameter 'no9á ‘ıPƒ¹G!8°‰™…EŸ ' [ 197.943258][ T7456] loop3: detected capacity change from 0 to 64 [ 197.975439][ T7453] xt_hashlimit: size too large, truncated to 1048576 [ 198.921903][ T803] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 199.141590][ T803] usb 3-1: Using ep0 maxpacket: 32 [ 199.156377][ T803] usb 3-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 199.180410][ T803] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.215056][ T7466] FAULT_INJECTION: forcing a failure. [ 199.215056][ T7466] name failslab, interval 1, probability 0, space 0, times 0 [ 199.227994][ T803] usb 3-1: Product: syz [ 199.265571][ T803] usb 3-1: Manufacturer: syz [ 199.275736][ T803] usb 3-1: SerialNumber: syz [ 199.293336][ T803] usb 3-1: config 0 descriptor?? [ 199.298253][ T7466] CPU: 1 UID: 0 PID: 7466 Comm: syz.6.342 Not tainted syzkaller #0 PREEMPT(full) [ 199.298281][ T7466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 199.298297][ T7466] Call Trace: [ 199.298307][ T7466] [ 199.298324][ T7466] dump_stack_lvl+0xe8/0x150 [ 199.298367][ T7466] should_fail_ex+0x412/0x560 [ 199.298402][ T7466] should_failslab+0xa8/0x100 [ 199.298429][ T7466] __kmalloc_noprof+0xe8/0x760 [ 199.298467][ T7466] ? tomoyo_encode+0x28b/0x550 [ 199.298514][ T7466] tomoyo_encode+0x28b/0x550 [ 199.298560][ T7466] tomoyo_realpath_from_path+0x58d/0x5d0 [ 199.298614][ T7466] ? tomoyo_path_number_perm+0x219/0x630 [ 199.298649][ T7466] tomoyo_path_number_perm+0x246/0x630 [ 199.298687][ T7466] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 199.298719][ T7466] ? srso_alias_return_thunk+0x5/0xfbef5 [ 199.298748][ T7466] ? __lock_acquire+0x6b5/0x2cf0 [ 199.298782][ T7466] ? srso_alias_return_thunk+0x5/0xfbef5 [ 199.298821][ T7466] ? srso_alias_return_thunk+0x5/0xfbef5 [ 199.298850][ T7466] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 199.298902][ T7466] ? __fget_files+0x2a/0x420 [ 199.298937][ T7466] ? __fget_files+0x2a/0x420 [ 199.298967][ T7466] ? __fget_files+0x3a0/0x420 [ 199.298997][ T7466] ? __fget_files+0x2a/0x420 [ 199.299034][ T7466] security_file_ioctl+0xc3/0x2a0 [ 199.299068][ T7466] __se_sys_ioctl+0x47/0x170 [ 199.299108][ T7466] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.299135][ T7466] do_syscall_64+0x174/0x580 [ 199.299161][ T7466] ? srso_alias_return_thunk+0x5/0xfbef5 [ 199.299196][ T7466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.299221][ T7466] RIP: 0033:0x7f5887f9ce59 [ 199.299243][ T7466] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.299262][ T7466] RSP: 002b:00007f5888d73028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 199.299291][ T7466] RAX: ffffffffffffffda RBX: 00007f5888215fa0 RCX: 00007f5887f9ce59 [ 199.299308][ T7466] RDX: 0000200000000140 RSI: 000000004028af11 RDI: 0000000000000003 [ 199.299325][ T7466] RBP: 00007f5888d73090 R08: 0000000000000000 R09: 0000000000000000 [ 199.299346][ T7466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 199.299360][ T7466] R13: 00007f5888216038 R14: 00007f5888215fa0 R15: 00007ffc66a7b488 [ 199.299400][ T7466] [ 199.537421][ T7466] ERROR: Out of memory at tomoyo_realpath_from_path. [ 199.575996][ T7472] x_tables: duplicate entry at hook 3 [ 199.767659][ T803] RobotFuzz Open Source InterFace, OSIF 3-1:0.0: version d4.15 found at bus 003 address 004 [ 200.237459][ T7482] loop4: detected capacity change from 0 to 1024 [ 200.335161][ T7482] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 200.390535][ T7482] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.420213][ T31] audit: type=1800 audit(1780482469.716:26): pid=7482 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.345" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 200.540095][ T7491] capability: warning: `syz.2.340' uses deprecated v2 capabilities in a way that may be insecure [ 201.963306][ T7505] syzkaller0: entered promiscuous mode [ 201.984419][ T7505] syzkaller0: entered allmulticast mode [ 202.046923][ T5640] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.292096][ T7517] netlink: 'syz.4.355': attribute type 4 has an invalid length. [ 202.531041][ T7460] i2c i2c-1: failure sending STOP [ 202.885453][ T7529] loop4: detected capacity change from 0 to 32768 [ 203.010166][ T7529] find_entry called with index >= next_index [ 203.016259][ T7529] find_entry called with index >= next_index [ 203.022305][ T7529] find_entry called with index >= next_index [ 203.028279][ T7529] find_entry called with index >= next_index [ 203.034298][ T7529] find_entry called with index >= next_index [ 203.041807][ T7529] add_index: next_index = 0. Resetting! [ 203.047444][ T7529] find_entry called with index >= next_index [ 203.054496][ T7529] find_entry called with index >= next_index [ 203.060474][ T7529] find_entry called with index >= next_index [ 203.066494][ T7529] find_entry called with index >= next_index [ 203.076245][ T7529] non-latin1 character 0x3ff found in JFS file name [ 203.083263][ T7529] mount with iocharset=utf8 to access [ 203.113637][ T9] usb 3-1: USB disconnect, device number 4 [ 203.677714][ T7537] autofs: Unknown parameter 'no9á ‘ıPƒ¹G!8°‰™…EŸ ' [ 203.887716][ T7537] loop2: detected capacity change from 0 to 64 [ 203.960211][ T7540] 9p: Bad value for 'wfdno' [ 205.383105][ T7559] netlink: 40 bytes leftover after parsing attributes in process `syz.0.369'. [ 205.439472][ T7559] netlink: 8 bytes leftover after parsing attributes in process `syz.0.369'. [ 205.460080][ T7554] loop6: detected capacity change from 0 to 1024 [ 205.506960][ T7564] loop3: detected capacity change from 0 to 128 [ 205.566180][ T7554] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 205.631197][ T7564] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 205.684766][ T7554] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.706154][ T7572] loop7: detected capacity change from 0 to 128 [ 205.748969][ T7564] ext4 filesystem being mounted at /68/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 205.840527][ T7572] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 205.886469][ T31] audit: type=1800 audit(1780482475.156:27): pid=7554 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.367" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 205.910996][ T7572] ext4 filesystem being mounted at /9/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 205.937556][ T7576] loop4: detected capacity change from 0 to 128 [ 205.979998][ T5643] Bluetooth: hci5: command 0x0406 tx timeout [ 205.990162][ T5652] Bluetooth: hci4: command 0x0406 tx timeout [ 205.992791][ T5643] Bluetooth: hci1: command 0x0406 tx timeout [ 205.996312][ T5641] Bluetooth: hci0: command 0x0406 tx timeout [ 206.234706][ T7576] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 206.334170][ T7582] FAULT_INJECTION: forcing a failure. [ 206.334170][ T7582] name failslab, interval 1, probability 0, space 0, times 0 [ 206.346956][ T7582] CPU: 1 UID: 0 PID: 7582 Comm: syz.0.373 Not tainted syzkaller #0 PREEMPT(full) [ 206.346985][ T7582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 206.347000][ T7582] Call Trace: [ 206.347010][ T7582] [ 206.347020][ T7582] dump_stack_lvl+0xe8/0x150 [ 206.347053][ T7582] should_fail_ex+0x412/0x560 [ 206.347087][ T7582] should_failslab+0xa8/0x100 [ 206.347115][ T7582] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 206.347152][ T7582] ? __alloc_skb+0x186/0x7d0 [ 206.347188][ T7582] ? __alloc_skb+0x1d0/0x7d0 [ 206.347222][ T7582] ? __local_bh_enable_ip+0xd0/0x130 [ 206.347254][ T7582] __alloc_skb+0x1d0/0x7d0 [ 206.347289][ T7582] ? srso_alias_return_thunk+0x5/0xfbef5 [ 206.347319][ T7582] ? netlink_ack_tlv_len+0x6c/0x210 [ 206.347362][ T7582] netlink_ack+0x146/0xa50 [ 206.347399][ T7582] ? srso_alias_return_thunk+0x5/0xfbef5 [ 206.347432][ T7582] ? sock_diag_rcv_msg+0x188/0x600 [ 206.347472][ T7582] ? srso_alias_return_thunk+0x5/0xfbef5 [ 206.347502][ T7582] ? sock_diag_rcv_msg+0x4ed/0x600 [ 206.347541][ T7582] netlink_rcv_skb+0x2b6/0x4b0 [ 206.347582][ T7582] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 206.347619][ T7582] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 206.347655][ T7582] ? lockdep_hardirqs_on+0x7a/0x110 [ 206.347703][ T7582] ? srso_alias_return_thunk+0x5/0xfbef5 [ 206.347737][ T7582] netlink_unicast+0x75c/0x8e0 [ 206.347785][ T7582] netlink_sendmsg+0x813/0xb40 [ 206.347842][ T7582] ? __pfx_netlink_sendmsg+0x10/0x10 [ 206.347888][ T7582] ? __entry_text_end+0x1020b9/0x1020b9 [ 206.347919][ T7582] ? srso_alias_return_thunk+0x5/0xfbef5 [ 206.347948][ T7582] ? srso_alias_return_thunk+0x5/0xfbef5 [ 206.347983][ T7582] ____sys_sendmsg+0x972/0x9f0 [ 206.348006][ T7582] ? lockdep_hardirqs_on+0x7a/0x110 [ 206.348030][ T7582] ? srso_alias_return_thunk+0x5/0xfbef5 [ 206.348068][ T7582] ? __pfx_____sys_sendmsg+0x10/0x10 [ 206.348103][ T7582] ? srso_alias_return_thunk+0x5/0xfbef5 [ 206.348132][ T7582] ? import_iovec+0x73/0xa0 [ 206.348169][ T7582] ___sys_sendmsg+0x2a5/0x360 [ 206.348191][ T7582] ? srso_alias_return_thunk+0x5/0xfbef5 [ 206.348220][ T7582] ? __lock_acquire+0x6b5/0x2cf0 [ 206.348252][ T7582] ? __pfx____sys_sendmsg+0x10/0x10 [ 206.348283][ T7582] ? srso_alias_return_thunk+0x5/0xfbef5 [ 206.348312][ T7582] ? finish_task_switch+0x41f/0xbe0 [ 206.348384][ T7582] ? __fget_files+0x2a/0x420 [ 206.348414][ T7582] ? srso_alias_return_thunk+0x5/0xfbef5 [ 206.348443][ T7582] ? __fget_files+0x3a0/0x420 [ 206.348487][ T7582] __x64_sys_sendmsg+0x1bd/0x2a0 [ 206.348515][ T7582] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 206.348551][ T7582] ? srso_alias_return_thunk+0x5/0xfbef5 [ 206.348580][ T7582] ? rcu_is_watching+0x15/0xb0 [ 206.348621][ T7582] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.348649][ T7582] do_syscall_64+0x174/0x580 [ 206.348676][ T7582] ? srso_alias_return_thunk+0x5/0xfbef5 [ 206.348712][ T7582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.348737][ T7582] RIP: 0033:0x7f1ab259ce59 [ 206.348759][ T7582] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 206.348780][ T7582] RSP: 002b:00007f1ab34f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 206.348805][ T7582] RAX: ffffffffffffffda RBX: 00007f1ab2816180 RCX: 00007f1ab259ce59 [ 206.348823][ T7582] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000005 [ 206.348845][ T7582] RBP: 00007f1ab34f7090 R08: 0000000000000000 R09: 0000000000000000 [ 206.348862][ T7582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.348877][ T7582] R13: 00007f1ab2816218 R14: 00007f1ab2816180 R15: 00007ffd96737a78 [ 206.348915][ T7582] [ 206.696002][ T7576] ext4 filesystem being mounted at /67/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 206.951080][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 207.038445][ T6066] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.179511][ T9] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 207.202745][ T9] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 207.214412][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.250778][ T803] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 207.341397][ T9] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 207.347713][ T5760] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 207.406813][ T803] usb 8-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 207.452166][ T803] usb 8-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 208.101588][ T803] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.116133][ T5760] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 208.371979][ T5760] usb 5-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 208.385785][ T803] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 208.392309][ T5760] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.685408][ T9] stv0680 4-1:4.0: STV(e): camera ping failed!! [ 208.717380][ T5760] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 208.899226][ T9] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 208.953496][ T9] stv0680 4-1:4.0: last error: 210, command = 0xee [ 209.038986][ T9] usb 4-1: USB disconnect, device number 8 [ 209.116629][ T5640] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 209.214463][ T7602] FAULT_INJECTION: forcing a failure. [ 209.214463][ T7602] name failslab, interval 1, probability 0, space 0, times 0 [ 209.227657][ T7602] CPU: 0 UID: 0 PID: 7602 Comm: syz.6.378 Not tainted syzkaller #0 PREEMPT(full) [ 209.227687][ T7602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 209.227702][ T7602] Call Trace: [ 209.227712][ T7602] [ 209.227722][ T7602] dump_stack_lvl+0xe8/0x150 [ 209.227756][ T7602] should_fail_ex+0x412/0x560 [ 209.227790][ T7602] should_failslab+0xa8/0x100 [ 209.227818][ T7602] __kmalloc_cache_noprof+0x88/0x660 [ 209.227858][ T7602] ? xfrm_policy_alloc+0x78/0x2b0 [ 209.227893][ T7602] xfrm_policy_alloc+0x78/0x2b0 [ 209.227923][ T7602] xfrm_policy_construct+0x39/0x6b0 [ 209.227972][ T7602] xfrm_add_policy+0x286/0x820 [ 209.228012][ T7602] ? __pfx_xfrm_add_policy+0x10/0x10 [ 209.228043][ T7602] ? apparmor_capable+0x126/0x170 [ 209.228078][ T7602] ? __nla_parse+0x40/0x60 [ 209.228116][ T7602] xfrm_user_rcv_msg+0x7ae/0xc40 [ 209.228156][ T7602] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 209.228229][ T7602] ? __pfx___mutex_trylock_common+0x10/0x10 [ 209.228268][ T7602] ? srso_alias_return_thunk+0x5/0xfbef5 [ 209.228299][ T7602] ? rcu_is_watching+0x15/0xb0 [ 209.228335][ T7602] ? srso_alias_return_thunk+0x5/0xfbef5 [ 209.228365][ T7602] ? trace_contention_end+0x3d/0x140 [ 209.228401][ T7602] ? srso_alias_return_thunk+0x5/0xfbef5 [ 209.228430][ T7602] ? __mutex_lock+0x319/0x1550 [ 209.228467][ T7602] netlink_rcv_skb+0x232/0x4b0 [ 209.228509][ T7602] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 209.228544][ T7602] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 209.228599][ T7602] ? srso_alias_return_thunk+0x5/0xfbef5 [ 209.228632][ T7602] ? netlink_deliver_tap+0x2e/0x1b0 [ 209.228671][ T7602] ? netlink_deliver_tap+0x2e/0x1b0 [ 209.228714][ T7602] xfrm_netlink_rcv+0x79/0x90 [ 209.228747][ T7602] netlink_unicast+0x75c/0x8e0 [ 209.228796][ T7602] netlink_sendmsg+0x813/0xb40 [ 209.228848][ T7602] ? __pfx_netlink_sendmsg+0x10/0x10 [ 209.228897][ T7602] ? srso_alias_return_thunk+0x5/0xfbef5 [ 209.228927][ T7602] ? aa_sock_msg_perm+0xf1/0x1b0 [ 209.228968][ T7602] ? srso_alias_return_thunk+0x5/0xfbef5 [ 209.228997][ T7602] ? srso_alias_return_thunk+0x5/0xfbef5 [ 209.229032][ T7602] ____sys_sendmsg+0x972/0x9f0 [ 209.229058][ T7602] ? srso_alias_return_thunk+0x5/0xfbef5 [ 209.229098][ T7602] ? __pfx_____sys_sendmsg+0x10/0x10 [ 209.229133][ T7602] ? srso_alias_return_thunk+0x5/0xfbef5 [ 209.229163][ T7602] ? import_iovec+0x73/0xa0 [ 209.229200][ T7602] ___sys_sendmsg+0x2a5/0x360 [ 209.229222][ T7602] ? srso_alias_return_thunk+0x5/0xfbef5 [ 209.229252][ T7602] ? __lock_acquire+0x6b5/0x2cf0 [ 209.229283][ T7602] ? __pfx____sys_sendmsg+0x10/0x10 [ 209.229356][ T7602] ? __fget_files+0x2a/0x420 [ 209.229388][ T7602] ? srso_alias_return_thunk+0x5/0xfbef5 [ 209.229418][ T7602] ? __fget_files+0x3a0/0x420 [ 209.229463][ T7602] __x64_sys_sendmsg+0x1bd/0x2a0 [ 209.229492][ T7602] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 209.229529][ T7602] ? __pfx_ksys_write+0x10/0x10 [ 209.229579][ T7602] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.229607][ T7602] do_syscall_64+0x174/0x580 [ 209.229633][ T7602] ? trace_irq_disable+0x3b/0x140 [ 209.229679][ T7602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.229705][ T7602] RIP: 0033:0x7f5887f9ce59 [ 209.229727][ T7602] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 209.229748][ T7602] RSP: 002b:00007f5888d73028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 209.229773][ T7602] RAX: ffffffffffffffda RBX: 00007f5888215fa0 RCX: 00007f5887f9ce59 [ 209.229792][ T7602] RDX: 0000000000000000 RSI: 0000200000000ac0 RDI: 0000000000000003 [ 209.229809][ T7602] RBP: 00007f5888d73090 R08: 0000000000000000 R09: 0000000000000000 [ 209.229825][ T7602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 209.229840][ T7602] R13: 00007f5888216038 R14: 00007f5888215fa0 R15: 00007ffc66a7b488 [ 209.229880][ T7602] [ 209.608852][ T7600] loop0: detected capacity change from 0 to 32768 [ 209.639571][ T803] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -71 [ 209.647954][ T803] stv0680 8-1:4.0: STV(e): camera ping failed!! [ 209.655167][ T803] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 209.663343][ T803] stv0680 8-1:4.0: last error: 0, command = 0x0 [ 209.671428][ T803] usb 8-1: USB disconnect, device number 2 [ 209.680508][ T7600] find_entry called with index >= next_index [ 209.686638][ T7600] find_entry called with index >= next_index [ 209.692725][ T7600] find_entry called with index >= next_index [ 209.700858][ T7600] find_entry called with index >= next_index [ 209.706843][ T7600] find_entry called with index >= next_index [ 209.712890][ T7600] add_index: next_index = 0. Resetting! [ 209.718536][ T7600] find_entry called with index >= next_index [ 209.724759][ T7600] find_entry called with index >= next_index [ 209.730767][ T7600] find_entry called with index >= next_index [ 209.736735][ T7600] find_entry called with index >= next_index [ 209.744996][ T7600] non-latin1 character 0x3ff found in JFS file name [ 209.751641][ T7600] mount with iocharset=utf8 to access [ 209.886303][ T5760] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -71 [ 209.896007][ T5760] stv0680 5-1:4.0: STV(e): camera ping failed!! [ 209.905537][ T5760] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 209.918564][ T5760] stv0680 5-1:4.0: last error: 0, command = 0x0 [ 209.927729][ T5760] usb 5-1: USB disconnect, device number 9 [ 210.047513][ T7604] autofs: Unknown parameter 'no9á ‘ıPƒ¹G!8°‰™…EŸ ' [ 210.062179][ T7604] loop4: detected capacity change from 0 to 64 [ 211.014123][ T7617] netlink: 60 bytes leftover after parsing attributes in process `syz.4.383'. [ 212.459174][ T5648] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 212.584063][ T7632] loop4: detected capacity change from 0 to 1024 [ 212.625375][ T7632] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 212.712290][ T7632] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.774010][ T31] audit: type=1800 audit(1780482482.066:28): pid=7632 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.386" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 212.919969][ T6914] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 213.013543][ T31] audit: type=1326 audit(1780482482.316:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7643 comm="syz.3.380" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97fa79ce59 code=0x7ffc0000 [ 213.072432][ T7644] loop3: detected capacity change from 0 to 128 [ 213.140518][ T31] audit: type=1326 audit(1780482482.346:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7643 comm="syz.3.380" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97fa79ce59 code=0x7ffc0000 [ 213.258641][ T31] audit: type=1326 audit(1780482482.346:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7643 comm="syz.3.380" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97fa79ce59 code=0x7ffc0000 [ 213.371059][ T31] audit: type=1326 audit(1780482482.346:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7643 comm="syz.3.380" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97fa79ce59 code=0x7ffc0000 [ 213.489502][ T31] audit: type=1326 audit(1780482482.316:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7643 comm="syz.3.380" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97fa79ce59 code=0x7ffc0000 [ 213.689838][ T7654] FAULT_INJECTION: forcing a failure. [ 213.689838][ T7654] name failslab, interval 1, probability 0, space 0, times 0 [ 213.702738][ T7654] CPU: 0 UID: 0 PID: 7654 Comm: syz.3.391 Not tainted syzkaller #0 PREEMPT(full) [ 213.702768][ T7654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 213.702781][ T7654] Call Trace: [ 213.702789][ T7654] [ 213.702797][ T7654] dump_stack_lvl+0xe8/0x150 [ 213.702822][ T7654] should_fail_ex+0x412/0x560 [ 213.702847][ T7654] should_failslab+0xa8/0x100 [ 213.702866][ T7654] ? do_getname+0x2e/0x250 [ 213.702886][ T7654] kmem_cache_alloc_noprof+0x87/0x650 [ 213.702912][ T7654] ? srso_alias_return_thunk+0x5/0xfbef5 [ 213.702942][ T7654] do_getname+0x2e/0x250 [ 213.702961][ T7654] ? __se_sys_mkdirat+0x18/0x150 [ 213.702978][ T7654] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.702999][ T7654] __se_sys_mkdirat+0x24/0x150 [ 213.703017][ T7654] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.703038][ T7654] do_syscall_64+0x174/0x580 [ 213.703063][ T7654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.703082][ T7654] RIP: 0033:0x7f97fa79ce59 [ 213.703099][ T7654] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 213.703114][ T7654] RSP: 002b:00007f97f89f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 213.703133][ T7654] RAX: ffffffffffffffda RBX: 00007f97faa16090 RCX: 00007f97fa79ce59 [ 213.703147][ T7654] RDX: 00000000000001ff RSI: 0000200000000b40 RDI: ffffffffffffff9c [ 213.703159][ T7654] RBP: 00007f97f89f6090 R08: 0000000000000000 R09: 0000000000000000 [ 213.703172][ T7654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.703183][ T7654] R13: 00007f97faa16128 R14: 00007f97faa16090 R15: 00007fffc65e2378 [ 213.703211][ T7654] [ 213.921786][ T31] audit: type=1326 audit(1780482482.346:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7643 comm="syz.3.380" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f97fa79ce59 code=0x7ffc0000 [ 213.950355][ T31] audit: type=1326 audit(1780482482.346:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7643 comm="syz.3.380" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97fa79ce59 code=0x7ffc0000 [ 213.989045][ T31] audit: type=1326 audit(1780482482.346:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7643 comm="syz.3.380" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97fa79ce59 code=0x7ffc0000 [ 214.016110][ T31] audit: type=1326 audit(1780482482.356:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7643 comm="syz.3.380" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97fa79ce59 code=0x7ffc0000 [ 214.051342][ T5640] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.700653][ T7660] netlink: 8 bytes leftover after parsing attributes in process `syz.6.389'. [ 215.654713][ T7665] loop4: detected capacity change from 0 to 128 [ 215.973698][ T7675] loop2: detected capacity change from 0 to 32768 [ 215.984672][ T7665] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 216.015327][ T7675] find_entry called with index >= next_index [ 216.021407][ T7675] find_entry called with index >= next_index [ 216.027389][ T7675] find_entry called with index >= next_index [ 216.033450][ T7675] find_entry called with index >= next_index [ 216.039416][ T7675] find_entry called with index >= next_index [ 216.047437][ T7675] add_index: next_index = 0. Resetting! [ 216.053091][ T7675] find_entry called with index >= next_index [ 216.059048][ T7675] find_entry called with index >= next_index [ 216.065034][ T7675] find_entry called with index >= next_index [ 216.071035][ T7675] find_entry called with index >= next_index [ 216.079458][ T7675] non-latin1 character 0x3ff found in JFS file name [ 216.086073][ T7675] mount with iocharset=utf8 to access [ 216.142640][ T7665] ext4 filesystem being mounted at /71/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 216.171226][ T7666] autofs: Unknown parameter 'no9á ‘ıPƒ¹G!8°‰™…EŸ ' [ 216.181142][ T7666] loop7: detected capacity change from 0 to 64 [ 216.631390][ T29] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 216.803731][ T29] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 216.847657][ T29] usb 5-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 216.896165][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.996401][ T29] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 217.066901][ T7694] netlink: 120 bytes leftover after parsing attributes in process `syz.0.400'. [ 217.168164][ T7694] netlink: 'syz.0.400': attribute type 1 has an invalid length. [ 217.574505][ T7694] netlink: 64 bytes leftover after parsing attributes in process `syz.0.400'. [ 217.978209][ T7702] netlink: 60 bytes leftover after parsing attributes in process `syz.3.401'. [ 218.041238][ T29] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -71 [ 218.103776][ T29] stv0680 5-1:4.0: STV(e): camera ping failed!! [ 218.166484][ T29] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 218.203832][ T29] stv0680 5-1:4.0: last error: 0, command = 0x0 [ 218.249618][ T29] usb 5-1: USB disconnect, device number 10 [ 219.028401][ T7713] netlink: 8 bytes leftover after parsing attributes in process `syz.7.402'. [ 220.085111][ T5867] IPVS: starting estimator thread 0... [ 220.281741][ T5937] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 220.298730][ T7721] IPVS: using max 25 ests per chain, 60000 per kthread [ 220.548493][ T7717] loop2: detected capacity change from 0 to 1024 [ 220.623930][ T7717] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 220.986906][ T7717] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.022984][ T7737] netlink: 60 bytes leftover after parsing attributes in process `syz.6.406'. [ 221.309717][ T31] kauditd_printk_skb: 30 callbacks suppressed [ 221.309738][ T31] audit: type=1800 audit(1780482490.606:68): pid=7717 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.404" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 221.360331][ T7739] loop3: detected capacity change from 0 to 64 [ 221.570075][ T5640] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 221.749474][ T7747] autofs: Unknown parameter 'no9á ‘ıPƒ¹G!8°‰™…EŸ ' [ 221.768524][ T7747] loop7: detected capacity change from 0 to 64 [ 222.266731][ T5629] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.505776][ T7766] fuse: Unknown parameter '00000000000000000000' [ 222.782787][ T7767] loop6: detected capacity change from 0 to 32768 [ 222.831905][ T7767] find_entry called with index >= next_index [ 222.837952][ T7767] find_entry called with index >= next_index [ 222.844043][ T7767] find_entry called with index >= next_index [ 222.850077][ T7767] find_entry called with index >= next_index [ 222.856098][ T7767] find_entry called with index >= next_index [ 222.862279][ T7767] add_index: next_index = 0. Resetting! [ 222.867943][ T7767] find_entry called with index >= next_index [ 222.879601][ T7767] find_entry called with index >= next_index [ 222.885721][ T7767] find_entry called with index >= next_index [ 222.891750][ T7767] find_entry called with index >= next_index [ 222.921245][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 223.519465][ T7777] loop7: detected capacity change from 0 to 1024 [ 223.548769][ T7777] EXT4-fs: Ignoring removed orlov option [ 223.759101][ T7777] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 223.866648][ T7777] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 224.192628][ T7784] netlink: 32 bytes leftover after parsing attributes in process `syz.2.418'. [ 224.523420][ T7794] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 224.840555][ T6914] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 224.855951][ T7794] loop3: detected capacity change from 0 to 512 [ 224.936669][ T7794] journal_path: Non-blockdev passed as './file1' [ 224.993495][ T7794] EXT4-fs: error: could not find journal device path [ 225.670805][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 225.745372][ T7803] loop6: detected capacity change from 0 to 128 [ 225.805575][ T7803] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 225.835938][ T7803] ext4 filesystem being mounted at /48/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 226.169225][ T7810] loop7: detected capacity change from 0 to 1024 [ 226.207615][ T7810] EXT4-fs (loop7): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 226.273472][ T7810] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.284610][ T31] audit: type=1800 audit(1780482495.586:69): pid=7810 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.424" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 226.330783][ T5760] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 226.485949][ T5760] usb 7-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 226.525552][ T5760] usb 7-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 226.561052][ T5760] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.650560][ T5760] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 226.684254][ T7817] autofs: Unknown parameter 'no9á ‘ıPƒ¹G!8°‰™…EŸ ' [ 226.705801][ T7817] loop0: detected capacity change from 0 to 64 [ 227.389020][ T6914] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.471260][ T7822] loop3: detected capacity change from 0 to 4096 [ 227.558090][ T7822] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.721826][ T5760] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -71 [ 227.751407][ T5760] stv0680 7-1:4.0: STV(e): camera ping failed!! [ 227.783394][ T5760] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 227.810871][ T5760] stv0680 7-1:4.0: last error: 0, command = 0x0 [ 227.856053][ T5760] usb 7-1: USB disconnect, device number 5 [ 228.071536][ T7833] loop7: detected capacity change from 0 to 32768 [ 228.165477][ T7833] find_entry called with index >= next_index [ 228.171627][ T7833] find_entry called with index >= next_index [ 228.177624][ T7833] find_entry called with index >= next_index [ 228.183778][ T7833] find_entry called with index >= next_index [ 228.189736][ T7833] find_entry called with index >= next_index [ 228.195713][ T7833] add_index: next_index = 0. Resetting! [ 228.201378][ T7833] find_entry called with index >= next_index [ 228.207346][ T7833] find_entry called with index >= next_index [ 228.213335][ T7833] find_entry called with index >= next_index [ 228.219312][ T7833] find_entry called with index >= next_index [ 228.302264][ T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 228.389002][ T5648] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.500458][ T9] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 228.549773][ T9] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 228.590462][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.658929][ T9] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 228.758027][ T7815] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 229.004197][ T6066] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 229.069635][ T7849] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 229.332232][ T7849] loop4: detected capacity change from 0 to 512 [ 229.355302][ T7844] loop7: detected capacity change from 0 to 4096 [ 229.385877][ T7849] journal_path: Non-blockdev passed as './file1' [ 229.393258][ T7849] EXT4-fs: error: could not find journal device path [ 229.510430][ T7848] fuse: Unknown parameter '00000000000000000000' [ 229.518710][ T7844] /dev/loop7: Can't open blockdev [ 229.809281][ T9] stv0680 1-1:4.0: STV(e): camera ping failed!! [ 230.216595][ T5760] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 230.247108][ T9] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 230.641849][ T9] stv0680 1-1:4.0: last error: 0, command = 0x0 [ 230.681095][ T5760] usb 3-1: Using ep0 maxpacket: 16 [ 230.735879][ T9] usb 1-1: USB disconnect, device number 10 [ 230.783305][ T5760] usb 3-1: config index 0 descriptor too short (expected 1810, got 18) [ 230.837645][ T7857] loop3: detected capacity change from 0 to 1024 [ 230.844664][ T7857] EXT4-fs: Ignoring removed orlov option [ 230.867983][ T7861] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 230.877147][ T5760] usb 3-1: New USB device found, idVendor=102c, idProduct=6151, bcdDevice=44.e6 [ 230.918329][ T5760] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.928542][ T7857] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 230.940637][ T7857] ext4 filesystem being mounted at /81/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 231.055143][ T5760] usb 3-1: config 0 descriptor?? [ 231.229628][ T7865] loop6: detected capacity change from 0 to 512 [ 231.397438][ T7865] journal_path: Non-blockdev passed as './file1' [ 231.403493][ T7869] netlink: 40 bytes leftover after parsing attributes in process `syz.7.440'. [ 231.432997][ T5648] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 231.434563][ T7865] EXT4-fs: error: could not find journal device path [ 231.570875][ T4946] Bluetooth: hci2: command 0x0406 tx timeout [ 231.687825][ T5760] usb 3-1: can't set config #0, error -71 [ 231.713512][ T5760] usb 3-1: USB disconnect, device number 5 [ 231.811390][ T7874] netlink: 60 bytes leftover after parsing attributes in process `syz.0.441'. [ 232.061700][ T7869] netlink: 8 bytes leftover after parsing attributes in process `syz.7.440'. [ 232.079985][ T7869] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.087499][ T7869] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.773456][ T7883] loop7: detected capacity change from 0 to 128 [ 232.867619][ T7885] loop3: detected capacity change from 0 to 128 [ 232.877376][ T7883] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 232.960612][ T7883] ext4 filesystem being mounted at /22/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 232.992175][ T7885] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 233.021614][ T7885] ext4 filesystem being mounted at /83/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 233.386210][ T7894] loop2: detected capacity change from 0 to 32768 [ 233.462954][ T7894] find_entry called with index >= next_index [ 233.468983][ T7894] find_entry called with index >= next_index [ 233.477046][ T7894] find_entry called with index >= next_index [ 233.483091][ T7894] find_entry called with index >= next_index [ 233.490589][ T7894] find_entry called with index >= next_index [ 233.496763][ T7894] add_index: next_index = 0. Resetting! [ 233.502516][ T7894] find_entry called with index >= next_index [ 233.508499][ T7894] find_entry called with index >= next_index [ 233.514567][ T7894] find_entry called with index >= next_index [ 233.520539][ T7894] find_entry called with index >= next_index [ 233.898027][ T5648] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 234.728325][ T6914] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 234.818837][ T7904] loop3: detected capacity change from 0 to 256 [ 234.871683][ T7904] exfat: Deprecated parameter 'namecase' [ 234.903202][ T7904] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 234.960423][ T7901] netlink: 60 bytes leftover after parsing attributes in process `syz.0.451'. [ 235.055643][ T7904] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 235.249253][ T7904] exfat: Deprecated parameter 'namecase' [ 235.328172][ T7912] loop7: detected capacity change from 0 to 1024 [ 235.461885][ T7912] hfsplus: invalid length 2325 has been corrected to 255 [ 235.572987][ T7912] hfsplus: invalid length 2325 has been corrected to 255 [ 235.641056][ T7912] hfsplus: invalid length 2325 has been corrected to 255 [ 235.810925][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 235.873738][ T7919] autofs: Unknown parameter 'no9á ‘ıPƒ¹G!8°‰™…EŸ ' [ 235.883678][ T7919] loop3: detected capacity change from 0 to 64 [ 236.022083][ T9] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 236.045966][ T9] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 236.071929][ T7922] netlink: 40 bytes leftover after parsing attributes in process `syz.3.457'. [ 236.082729][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.107293][ T7922] netlink: 8 bytes leftover after parsing attributes in process `syz.3.457'. [ 236.143473][ T9] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 236.366469][ T7925] process 'syz.2.458' launched './file0' with NULL argv: empty string added [ 236.685003][ T7927] loop3: detected capacity change from 0 to 32768 [ 236.759202][ T7927] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 236.830324][ T7927] XFS (loop3): Ending clean mount [ 236.839996][ T7927] XFS (loop3): Quotacheck needed: Please wait. [ 236.882168][ T7927] XFS (loop3): Quotacheck: Done. [ 237.063215][ T31] audit: type=1800 audit(1780482506.366:70): pid=7927 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.460" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=4429 res=0 errno=0 [ 237.164193][ T7940] loop7: detected capacity change from 0 to 256 [ 237.192737][ T7940] exfat: Deprecated parameter 'namecase' [ 237.242307][ T7940] exfat: Deprecated parameter 'namecase' [ 237.253089][ T9] stv0680 1-1:4.0: STV(e): camera ping failed!! [ 237.358030][ T5648] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 237.405940][ T7940] exFAT-fs (loop7): failed to load upcase table (idx : 0x0001fe89, chksum : 0x5ec6d925, utbl_chksum : 0xe619d30d) [ 237.470619][ T9] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 238.441527][ T9] stv0680 1-1:4.0: last error: 0, command = 0x0 [ 238.454290][ T9] usb 1-1: USB disconnect, device number 11 [ 239.579670][ T7947] loop3: detected capacity change from 0 to 2048 [ 240.001484][ T7958] loop6: detected capacity change from 0 to 32768 [ 240.037803][ T7958] find_entry called with index >= next_index [ 240.044142][ T7958] find_entry called with index >= next_index [ 240.050155][ T7958] find_entry called with index >= next_index [ 240.056168][ T7958] find_entry called with index >= next_index [ 240.062300][ T7958] find_entry called with index >= next_index [ 240.068277][ T7958] add_index: next_index = 0. Resetting! [ 240.073919][ T7958] find_entry called with index >= next_index [ 240.079886][ T7958] find_entry called with index >= next_index [ 240.085872][ T7958] find_entry called with index >= next_index [ 240.091858][ T7958] find_entry called with index >= next_index [ 240.148521][ T7956] loop2: detected capacity change from 0 to 1024 [ 240.151570][ T7947] loop3: p4 < > [ 240.289196][ T4996] loop3: p4 < > [ 240.315494][ T7965] autofs: Unknown parameter 'no9á ‘ıPƒ¹G!8°‰™…EŸ ' [ 240.348531][ T7965] loop4: detected capacity change from 0 to 64 [ 240.625233][ T7970] fuse: Unknown parameter '00000000000000000000' [ 240.635999][ T7971] netlink: 40 bytes leftover after parsing attributes in process `syz.7.472'. [ 240.670087][ T7973] loop2: detected capacity change from 0 to 512 [ 240.687477][ T7971] netlink: 8 bytes leftover after parsing attributes in process `syz.7.472'. [ 240.781753][ T7973] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2810: inode #11: comm syz.2.473: corrupted xattr block 95: invalid header [ 240.846700][ T7973] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 240.852779][ T7973] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.473: bg 0: block 7: invalid block bitmap [ 240.862150][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 240.862173][ C0] EXT4-fs (loop2): initial error at time 1780482510: ext4_expand_extra_isize_ea:2810: inode 11 [ 240.862213][ C0] EXT4-fs (loop2): last error at time 1780482510: ext4_expand_extra_isize_ea:2810: inode 11 [ 241.053723][ T7973] loop2: lost filesystem error report for type 5 error -117 [ 241.428569][ T7985] loop6: detected capacity change from 0 to 1024 [ 241.515067][ T7985] EXT4-fs: Ignoring removed orlov option [ 241.547472][ T7973] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 241.665971][ T7973] loop2: lost filesystem error report for type 5 error -117 [ 241.674563][ T7985] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 241.692059][ T7973] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2972: inode #11: comm syz.2.473: corrupted xattr block 95: invalid header [ 241.718452][ T7985] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 241.845994][ T7991] autofs: Unknown parameter 'no9á ‘ıPƒ¹G!8°‰™…EŸ ' [ 241.874671][ T7991] loop7: detected capacity change from 0 to 64 [ 241.890910][ T7973] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 241.892918][ T7973] EXT4-fs warning (device loop2): ext4_evict_inode:287: xattr delete (err -117) [ 242.011717][ T7973] EXT4-fs (loop2): 1 orphan inode deleted [ 242.038657][ T7973] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.152295][ T7973] EXT4-fs error (device loop2): ext4_readdir:265: inode #2: block 13: comm syz.2.473: path /94/file0: bad entry in directory: directory entry overrun - offset=92, inode=16, rec_len=196732, size=1024 fake=0 [ 242.153508][ T6048] udevd[6048]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 242.437620][ T6066] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 242.461372][ T5629] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.502555][ T5937] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 242.685872][ T5937] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 242.725010][ T5937] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 242.779743][ T5937] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.850137][ T5937] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 243.291624][ T8015] loop4: detected capacity change from 0 to 32768 [ 243.802959][ T8015] find_entry called with index >= next_index [ 243.808986][ T8015] find_entry called with index >= next_index [ 243.815085][ T8015] find_entry called with index >= next_index [ 243.821099][ T8015] find_entry called with index >= next_index [ 243.827088][ T8015] find_entry called with index >= next_index [ 243.833082][ T8015] add_index: next_index = 0. Resetting! [ 243.838691][ T8015] find_entry called with index >= next_index [ 243.844689][ T8015] find_entry called with index >= next_index [ 243.850673][ T8015] find_entry called with index >= next_index [ 243.856640][ T8015] find_entry called with index >= next_index [ 243.961652][ T5937] stv0680 1-1:4.0: STV(e): camera ping failed!! [ 244.175926][ T5937] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 244.210290][ T5937] stv0680 1-1:4.0: last error: 0, command = 0x0 [ 244.251848][ T5937] usb 1-1: USB disconnect, device number 12 [ 244.597502][ T8030] loop6: detected capacity change from 0 to 128 [ 244.659924][ T8030] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 244.783300][ T8030] ext4 filesystem being mounted at /56/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 245.406235][ T8039] netlink: 40 bytes leftover after parsing attributes in process `syz.4.489'. [ 245.419703][ T8039] netlink: 8 bytes leftover after parsing attributes in process `syz.4.489'. [ 245.451906][ T8039] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.459207][ T8039] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.667554][ T8049] loop2: detected capacity change from 0 to 4096 [ 245.706729][ T8049] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 245.769386][ T8054] fuse: Unknown parameter '0xffffffffffffffff0x0000000000000003' [ 245.800210][ T8049] ntfs3(loop2): ino=19, mi_enum_attr [ 245.914529][ T6066] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 245.925302][ T8049] ntfs3(loop2): failed to convert "c46c" to cp869 [ 246.026557][ T8049] ntfs3(loop2): ino=20, mi_enum_attr [ 246.062485][ T5937] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 246.179088][ T8065] netlink: 8 bytes leftover after parsing attributes in process `syz.6.492'. [ 246.246440][ T8065] : entered promiscuous mode [ 246.246620][ T5937] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 246.293194][ T5937] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 246.335476][ T5937] usb 5-1: config 0 interface 0 has no altsetting 0 [ 246.373776][ T5937] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 246.409413][ T5937] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 246.448058][ T5937] usb 5-1: Product: syz [ 246.469278][ T5937] usb 5-1: Manufacturer: syz [ 246.491689][ T5937] usb 5-1: SerialNumber: syz [ 246.703763][ T8068] loop2: detected capacity change from 0 to 32768 [ 246.731347][ T8068] find_entry called with index >= next_index [ 246.737377][ T8068] find_entry called with index >= next_index [ 246.743398][ T8068] find_entry called with index >= next_index [ 246.749389][ T8068] find_entry called with index >= next_index [ 246.755400][ T8068] find_entry called with index >= next_index [ 246.761432][ T8068] add_index: next_index = 0. Resetting! [ 246.768970][ T8068] find_entry called with index >= next_index [ 246.774983][ T8068] find_entry called with index >= next_index [ 246.780991][ T8068] find_entry called with index >= next_index [ 246.786959][ T8068] find_entry called with index >= next_index [ 246.818484][ T5937] usb 5-1: config 0 descriptor?? [ 246.876283][ T5937] hub 5-1:0.0: bad descriptor, ignoring hub [ 246.883526][ T5937] hub 5-1:0.0: probe with driver hub failed with error -5 [ 246.921925][ T5937] usb 5-1: selecting invalid altsetting 0 [ 250.784095][ T5760] usb 5-1: USB disconnect, device number 11 [ 251.328730][ T8094] loop3: detected capacity change from 0 to 128 [ 251.415805][ T8094] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 251.530787][ T5937] usb 7-1: new low-speed USB device number 6 using dummy_hcd [ 251.549376][ T8094] ext4 filesystem being mounted at /91/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 251.653151][ T8104] netlink: 40 bytes leftover after parsing attributes in process `syz.0.507'. [ 251.674616][ T8103] loop4: detected capacity change from 0 to 1024 [ 251.703094][ T5937] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 251.716589][ T8104] netlink: 8 bytes leftover after parsing attributes in process `syz.0.507'. [ 251.743389][ T5937] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 251.789860][ T8103] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.061082][ T8103] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 252.141152][ T5937] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 252.156020][ T5937] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 252.168775][ T5937] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.245695][ T8102] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #15: comm syz.4.508: lblock 0 mapped to illegal pblock 0 (length 1) [ 252.269651][ T8086] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 252.350982][ T5937] hub 7-1:1.0: bad descriptor, ignoring hub [ 252.373980][ T8102] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #15: comm syz.4.508: lblock 0 mapped to illegal pblock 0 (length 1) [ 252.432869][ T5937] hub 7-1:1.0: probe with driver hub failed with error -5 [ 252.439365][ T8102] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #15: comm syz.4.508: lblock 0 mapped to illegal pblock 0 (length 1) [ 252.475732][ T5937] cdc_wdm 7-1:1.0: skipping garbage [ 252.477814][ T8115] loop0: detected capacity change from 0 to 512 [ 252.519078][ T5937] cdc_wdm 7-1:1.0: skipping garbage [ 252.525645][ T8102] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #15: comm syz.4.508: lblock 0 mapped to illegal pblock 0 (length 1) [ 252.547203][ T8115] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.511: iget: bad extra_isize 50264 (inode size 256) [ 252.574167][ T8115] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 252.578941][ T8102] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #15: comm syz.4.508: lblock 0 mapped to illegal pblock 0 (length 1) [ 252.588173][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 252.588191][ C0] EXT4-fs (loop0): initial error at time 1780482521: ext4_orphan_get:1397: inode 15 [ 252.588220][ C0] EXT4-fs (loop0): last error at time 1780482521: ext4_orphan_get:1397: inode 15 [ 252.634313][ T5937] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 252.650187][ T8115] EXT4-fs (loop0): Remounting filesystem read-only [ 252.668898][ T8115] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 252.686496][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 252.693184][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 252.699664][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 252.706236][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 252.712980][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 252.719575][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 252.725876][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 252.732451][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 252.738716][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 252.745374][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 252.751662][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 252.758232][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 252.764516][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 252.771088][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 252.777334][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 252.783912][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 252.790180][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 252.796750][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 252.803163][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 252.809749][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 253.224996][ T5937] cdc_wdm 7-1:1.0: Unknown control protocol [ 253.286984][ T8102] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #15: comm syz.4.508: lblock 0 mapped to illegal pblock 0 (length 1) [ 253.353927][ T8102] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #15: comm syz.4.508: lblock 0 mapped to illegal pblock 0 (length 1) [ 253.405951][ T5630] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.416974][ T8102] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #15: comm syz.4.508: lblock 0 mapped to illegal pblock 0 (length 1) [ 253.485707][ T8102] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #15: comm syz.4.508: lblock 0 mapped to illegal pblock 0 (length 1) [ 253.501780][ T8102] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #15: comm syz.4.508: lblock 0 mapped to illegal pblock 0 (length 1) [ 253.578794][ T5648] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 253.720372][ T8124] fuse: Unknown parameter '0x0000000000000007' [ 253.992287][ T8125] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 254.570560][ T5640] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 255.029594][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.037549][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.332996][ T5867] usb 7-1: USB disconnect, device number 6 [ 255.403749][ T8141] fuse: Unknown parameter '00000000000000000000' [ 255.870064][ T8154] loop3: detected capacity change from 0 to 128 [ 255.948903][ T8152] loop4: detected capacity change from 0 to 1024 [ 255.962379][ T8154] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 256.019387][ T8154] ext4 filesystem being mounted at /93/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 256.281421][ T8152] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 256.649228][ T8152] ext4 filesystem being mounted at /file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 256.793316][ T8168] netlink: 40 bytes leftover after parsing attributes in process `syz.0.524'. [ 256.818388][ T8152] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 256.846798][ T8168] netlink: 8 bytes leftover after parsing attributes in process `syz.0.524'. [ 256.917944][ T8171] loop6: detected capacity change from 0 to 512 [ 257.015586][ T8171] EXT4-fs error (device loop6): ext4_iget_extra_inode:5128: inode #15: comm syz.6.525: corrupted in-inode xattr: invalid ea_ino [ 257.135104][ T8171] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 257.136658][ T8171] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.525: couldn't read orphan inode 15 (err -117) [ 257.146027][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 257.146051][ C0] EXT4-fs (loop6): initial error at time 1780482526: ext4_iget_extra_inode:5128: inode 15 [ 257.146087][ C0] EXT4-fs (loop6): last error at time 1780482526: ext4_iget_extra_inode:5128: inode 15 [ 257.257993][ T8149] loop4: detected capacity change from 0 to 4096 [ 257.264774][ T8171] loop6: lost filesystem error report for type 5 error -117 [ 257.279701][ T8171] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000500000000 r/w without journal. Quota mode: none. [ 257.307842][ T5648] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 257.324639][ T8149] EXT4-fs: inline encryption not supported [ 257.433328][ T8149] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 257.484477][ T8149] EXT4-fs (loop4): Test dummy encryption mode enabled [ 257.530718][ T8149] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c198, mo2=0003] [ 257.566095][ T8149] System zones: 0-5 [ 257.595085][ T8171] EXT4-fs error (device loop6): ext4_find_dest_de:2050: inode #2: block 13: comm syz.6.525: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 257.604351][ T8149] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.753050][ T8149] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.867340][ T6066] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000500000000. [ 257.905032][ T8180] loop3: detected capacity change from 0 to 32768 [ 257.935862][ T8180] find_entry called with index >= next_index [ 257.941902][ T8180] find_entry called with index >= next_index [ 257.947874][ T8180] find_entry called with index >= next_index [ 257.954153][ T8180] find_entry called with index >= next_index [ 257.960169][ T8180] find_entry called with index >= next_index [ 257.966221][ T8180] add_index: next_index = 0. Resetting! [ 257.971941][ T8180] find_entry called with index >= next_index [ 257.977911][ T8180] find_entry called with index >= next_index [ 257.984022][ T8180] find_entry called with index >= next_index [ 257.989990][ T8180] find_entry called with index >= next_index [ 258.853412][ T8191] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 258.860545][ C1] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 258.950777][ T5760] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 259.242760][ T5760] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 259.267707][ T5760] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.288644][ T8200] netlink: 8 bytes leftover after parsing attributes in process `syz.2.535'. [ 259.322664][ T5760] usb 5-1: config 0 descriptor?? [ 259.493450][ T8183] loop0: detected capacity change from 0 to 32768 [ 259.826870][ T31] audit: type=1800 audit(1780482529.126:71): pid=8183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.528" name="file1" dev="loop0" ino=4 res=0 errno=0 [ 259.894155][ T8208] loop2: detected capacity change from 0 to 128 [ 260.379108][ T803] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 260.442173][ T5760] usb 5-1: Cannot set autoneg [ 260.552847][ T8208] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 260.554209][ T5760] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -32 [ 260.583410][ T8213] netlink: 40 bytes leftover after parsing attributes in process `syz.7.539'. [ 260.597518][ T8208] ext4 filesystem being mounted at /102/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 260.634806][ T8213] netlink: 8 bytes leftover after parsing attributes in process `syz.7.539'. [ 260.730771][ T803] usb 4-1: device descriptor read/64, error -71 [ 261.281884][ T803] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 261.450926][ T803] usb 4-1: device descriptor read/64, error -71 [ 261.482895][ T5629] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 261.581790][ T803] usb usb4-port1: attempt power cycle [ 261.841558][ T8234] loop2: detected capacity change from 0 to 32768 [ 261.889385][ T8234] find_entry called with index >= next_index [ 261.896018][ T8234] find_entry called with index >= next_index [ 261.902060][ T8234] find_entry called with index >= next_index [ 261.908033][ T8234] find_entry called with index >= next_index [ 261.914035][ T8234] find_entry called with index >= next_index [ 261.921579][ T8234] add_index: next_index = 0. Resetting! [ 261.927210][ T8234] find_entry called with index >= next_index [ 261.934160][ T8234] find_entry called with index >= next_index [ 261.940138][ T8234] find_entry called with index >= next_index [ 261.946150][ T8234] find_entry called with index >= next_index [ 262.017235][ T5867] usb 5-1: USB disconnect, device number 12 [ 262.276596][ T8240] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 262.284059][ T5644] IPVS: starting estimator thread 0... [ 262.371494][ T8242] IPVS: using max 25 ests per chain, 60000 per kthread [ 262.412988][ T803] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 262.443047][ T803] usb 4-1: device descriptor read/8, error -71 [ 262.517328][ T8246] netlink: 8 bytes leftover after parsing attributes in process `syz.7.550'. [ 262.609415][ T8248] FAULT_INJECTION: forcing a failure. [ 262.609415][ T8248] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 262.659935][ T8248] CPU: 1 UID: 0 PID: 8248 Comm: syz.0.551 Not tainted syzkaller #0 PREEMPT(full) [ 262.659969][ T8248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 262.659984][ T8248] Call Trace: [ 262.659993][ T8248] [ 262.660004][ T8248] dump_stack_lvl+0xe8/0x150 [ 262.660037][ T8248] should_fail_ex+0x412/0x560 [ 262.660070][ T8248] _copy_from_user+0x2d/0xb0 [ 262.660103][ T8248] ___sys_sendmsg+0x1c6/0x360 [ 262.660128][ T8248] ? srso_alias_return_thunk+0x5/0xfbef5 [ 262.660158][ T8248] ? __lock_acquire+0x6b5/0x2cf0 [ 262.660192][ T8248] ? __pfx____sys_sendmsg+0x10/0x10 [ 262.660259][ T8248] ? __fget_files+0x2a/0x420 [ 262.660289][ T8248] ? srso_alias_return_thunk+0x5/0xfbef5 [ 262.660319][ T8248] ? __fget_files+0x3a0/0x420 [ 262.660363][ T8248] __x64_sys_sendmsg+0x1bd/0x2a0 [ 262.660392][ T8248] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 262.660429][ T8248] ? __pfx_ksys_write+0x10/0x10 [ 262.660478][ T8248] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.660506][ T8248] do_syscall_64+0x174/0x580 [ 262.660532][ T8248] ? trace_irq_disable+0x3b/0x140 [ 262.660577][ T8248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.660603][ T8248] RIP: 0033:0x7f1ab259ce59 [ 262.660624][ T8248] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 262.660650][ T8248] RSP: 002b:00007f1ab3539028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 262.660677][ T8248] RAX: ffffffffffffffda RBX: 00007f1ab2815fa0 RCX: 00007f1ab259ce59 [ 262.660697][ T8248] RDX: 0000000000000000 RSI: 0000200000001640 RDI: 0000000000000003 [ 262.660712][ T8248] RBP: 00007f1ab3539090 R08: 0000000000000000 R09: 0000000000000000 [ 262.660728][ T8248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 262.660743][ T8248] R13: 00007f1ab2816038 R14: 00007f1ab2815fa0 R15: 00007ffd96737a78 [ 262.660781][ T8248] [ 262.892047][ T803] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 263.030599][ T8251] netlink: 28 bytes leftover after parsing attributes in process `syz.4.553'. [ 263.065416][ T8253] netlink: 8 bytes leftover after parsing attributes in process `syz.7.554'. [ 263.065530][ T803] usb 4-1: device descriptor read/8, error -71 [ 263.104803][ T8251] FAULT_INJECTION: forcing a failure. [ 263.104803][ T8251] name failslab, interval 1, probability 0, space 0, times 0 [ 263.190596][ T8251] CPU: 1 UID: 0 PID: 8251 Comm: syz.4.553 Not tainted syzkaller #0 PREEMPT(full) [ 263.190621][ T8251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 263.190633][ T8251] Call Trace: [ 263.190648][ T8251] [ 263.190659][ T8251] dump_stack_lvl+0xe8/0x150 [ 263.190693][ T8251] should_fail_ex+0x412/0x560 [ 263.190726][ T8251] should_failslab+0xa8/0x100 [ 263.190753][ T8251] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 263.190790][ T8251] ? __alloc_skb+0x186/0x7d0 [ 263.190826][ T8251] ? __alloc_skb+0x1d0/0x7d0 [ 263.190867][ T8251] ? __local_bh_enable_ip+0xd0/0x130 [ 263.190899][ T8251] __alloc_skb+0x1d0/0x7d0 [ 263.190934][ T8251] ? srso_alias_return_thunk+0x5/0xfbef5 [ 263.190964][ T8251] ? netlink_ack_tlv_len+0x6c/0x210 [ 263.191006][ T8251] netlink_ack+0x146/0xa50 [ 263.191041][ T8251] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 263.191076][ T8251] ? ref_tracker_free+0x693/0x840 [ 263.191109][ T8251] ? __pfx_ref_tracker_free+0x10/0x10 [ 263.191137][ T8251] ? __asan_memcpy+0x40/0x70 [ 263.191168][ T8251] ? __skb_clone+0x63/0x7a0 [ 263.191202][ T8251] netlink_rcv_skb+0x2b6/0x4b0 [ 263.191242][ T8251] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 263.191280][ T8251] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 263.191334][ T8251] ? netlink_deliver_tap+0x2e/0x1b0 [ 263.191373][ T8251] ? netlink_deliver_tap+0x2e/0x1b0 [ 263.191419][ T8251] netlink_unicast+0x75c/0x8e0 [ 263.191467][ T8251] netlink_sendmsg+0x813/0xb40 [ 263.191518][ T8251] ? __pfx_netlink_sendmsg+0x10/0x10 [ 263.191561][ T8251] ? srso_alias_return_thunk+0x5/0xfbef5 [ 263.191590][ T8251] ? aa_sock_msg_perm+0xf1/0x1b0 [ 263.191630][ T8251] ? srso_alias_return_thunk+0x5/0xfbef5 [ 263.191659][ T8251] ? srso_alias_return_thunk+0x5/0xfbef5 [ 263.191693][ T8251] ____sys_sendmsg+0x972/0x9f0 [ 263.191718][ T8251] ? srso_alias_return_thunk+0x5/0xfbef5 [ 263.191757][ T8251] ? __pfx_____sys_sendmsg+0x10/0x10 [ 263.191792][ T8251] ? srso_alias_return_thunk+0x5/0xfbef5 [ 263.191821][ T8251] ? import_iovec+0x73/0xa0 [ 263.191863][ T8251] ___sys_sendmsg+0x2a5/0x360 [ 263.191886][ T8251] ? srso_alias_return_thunk+0x5/0xfbef5 [ 263.191917][ T8251] ? __lock_acquire+0x6b5/0x2cf0 [ 263.191951][ T8251] ? __pfx____sys_sendmsg+0x10/0x10 [ 263.192012][ T8251] ? __fget_files+0x2a/0x420 [ 263.192034][ T8251] ? srso_alias_return_thunk+0x5/0xfbef5 [ 263.192056][ T8251] ? __fget_files+0x3a0/0x420 [ 263.192089][ T8251] __x64_sys_sendmsg+0x1bd/0x2a0 [ 263.192110][ T8251] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 263.192138][ T8251] ? __pfx_ksys_write+0x10/0x10 [ 263.192174][ T8251] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.192194][ T8251] do_syscall_64+0x174/0x580 [ 263.192213][ T8251] ? trace_irq_disable+0x3b/0x140 [ 263.192247][ T8251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.192267][ T8251] RIP: 0033:0x7f0b5159ce59 [ 263.192284][ T8251] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 263.192299][ T8251] RSP: 002b:00007f0b52464028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 263.192317][ T8251] RAX: ffffffffffffffda RBX: 00007f0b51815fa0 RCX: 00007f0b5159ce59 [ 263.192331][ T8251] RDX: 0000000000008000 RSI: 0000200000000280 RDI: 0000000000000003 [ 263.192343][ T8251] RBP: 00007f0b52464090 R08: 0000000000000000 R09: 0000000000000000 [ 263.192354][ T8251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 263.192367][ T8251] R13: 00007f0b51816038 R14: 00007f0b51815fa0 R15: 00007ffce21c1958 [ 263.192396][ T8251] [ 263.271187][ T803] usb usb4-port1: unable to enumerate USB device [ 263.503779][ T8258] netlink: 8 bytes leftover after parsing attributes in process `syz.0.555'. [ 263.793118][ T8264] netlink: 'syz.4.558': attribute type 22 has an invalid length. [ 263.973354][ T8262] loop3: detected capacity change from 0 to 32768 [ 263.980910][ T8262] btrfs: Deprecated parameter 'usebackuproot' [ 263.987012][ T8262] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 264.053549][ T8266] overlayfs: failed to clone upperpath [ 264.081105][ T8265] netlink: 'syz.4.558': attribute type 22 has an invalid length. [ 264.113910][ T8262] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.557 (8262) [ 264.186514][ T8262] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 264.197641][ T8262] BTRFS info (device loop3): using crc32c checksum algorithm [ 264.300033][ T7382] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 264.380903][ T8262] BTRFS error (device loop3): failed to load root extent [ 264.388003][ T8262] BTRFS warning (device loop3): try to load backup roots slot 1 [ 264.396267][ T38] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 264.410878][ T8262] BTRFS warning (device loop3): couldn't read tree root [ 264.417859][ T8262] BTRFS warning (device loop3): try to load backup roots slot 2 [ 264.425887][ T38] BTRFS error (device loop3): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 264.439320][ T8262] BTRFS warning (device loop3): couldn't read tree root [ 264.446519][ T8262] BTRFS warning (device loop3): try to load backup roots slot 3 [ 264.466791][ T8262] BTRFS info (device loop3): rebuilding free space tree [ 264.491444][ T8262] BTRFS info (device loop3): checking UUID tree [ 264.499497][ T8262] BTRFS info (device loop3): enabling ssd optimizations [ 264.506546][ T8262] BTRFS info (device loop3): turning on async discard [ 264.513351][ T8262] BTRFS info (device loop3): enabling free space tree [ 264.520096][ T8262] BTRFS info (device loop3): force clearing of disk cache [ 264.527337][ T8262] BTRFS info (device loop3): enabling auto defrag [ 264.533783][ T8262] BTRFS info (device loop3): trying to use backup root at mount time [ 264.541937][ T8262] BTRFS info (device loop3): force zlib compression, level 3 [ 266.116199][ T8282] usb usb8: usbfs: process 8282 (syz.2.552) did not claim interface 0 before use [ 266.244857][ T5648] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 266.792039][ T8299] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 266.810670][ T5937] IPVS: starting estimator thread 0... [ 266.977378][ T8304] IPVS: using max 25 ests per chain, 60000 per kthread [ 267.103047][ T8301] loop6: detected capacity change from 0 to 1024 [ 267.520557][ T8312] loop4: detected capacity change from 0 to 32768 [ 268.045007][ T8312] find_entry called with index >= next_index [ 268.051099][ T8312] find_entry called with index >= next_index [ 268.057068][ T8312] find_entry called with index >= next_index [ 268.063962][ T8312] find_entry called with index >= next_index [ 268.069933][ T8312] find_entry called with index >= next_index [ 268.075940][ T8312] add_index: next_index = 0. Resetting! [ 268.081610][ T8312] find_entry called with index >= next_index [ 268.087576][ T8312] find_entry called with index >= next_index [ 268.093587][ T8312] find_entry called with index >= next_index [ 268.099553][ T8312] find_entry called with index >= next_index [ 268.131159][ T8301] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 268.240203][ T8301] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.328831][ T8320] autofs: Unknown parameter 'no9á ‘ıPƒ¹G!8°‰™…EŸ ' [ 268.400847][ T5937] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 268.415836][ T8312] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 268.425673][ T8312] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 268.435293][ T8312] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 268.624794][ T5937] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 268.662029][ T5937] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 268.716335][ T5937] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.282928][ T8325] netlink: 8 bytes leftover after parsing attributes in process `syz.7.568'. [ 269.325386][ T5937] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 269.571979][ T6066] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.429839][ T8344] FAULT_INJECTION: forcing a failure. [ 270.429839][ T8344] name failslab, interval 1, probability 0, space 0, times 0 [ 270.460824][ T8330] overlayfs: failed to clone upperpath [ 270.484924][ T5937] stv0680 4-1:4.0: STV(e): camera ping failed!! [ 270.494553][ T8344] CPU: 1 UID: 0 PID: 8344 Comm: syz.0.573 Not tainted syzkaller #0 PREEMPT(full) [ 270.494589][ T8344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 270.494605][ T8344] Call Trace: [ 270.494615][ T8344] [ 270.494625][ T8344] dump_stack_lvl+0xe8/0x150 [ 270.494660][ T8344] should_fail_ex+0x412/0x560 [ 270.494694][ T8344] should_failslab+0xa8/0x100 [ 270.494721][ T8344] ? alloc_empty_file+0x5b/0x1d0 [ 270.494753][ T8344] kmem_cache_alloc_noprof+0x87/0x650 [ 270.494800][ T8344] alloc_empty_file+0x5b/0x1d0 [ 270.494832][ T8344] alloc_file_pseudo+0x155/0x240 [ 270.494863][ T8344] ? srso_alias_return_thunk+0x5/0xfbef5 [ 270.494897][ T8344] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 270.494927][ T8344] ? srso_alias_return_thunk+0x5/0xfbef5 [ 270.494959][ T8344] ? alloc_fd+0x64b/0x6c0 [ 270.495003][ T8344] anon_inode_getfd+0xc8/0x1f0 [ 270.495032][ T8344] __se_sys_fsopen+0x232/0x2c0 [ 270.495059][ T8344] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.495087][ T8344] do_syscall_64+0x174/0x580 [ 270.495113][ T8344] ? trace_irq_disable+0x3b/0x140 [ 270.495160][ T8344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.495186][ T8344] RIP: 0033:0x7f1ab259ce59 [ 270.495209][ T8344] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 270.495231][ T8344] RSP: 002b:00007f1ab3539028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 270.495257][ T8344] RAX: ffffffffffffffda RBX: 00007f1ab2815fa0 RCX: 00007f1ab259ce59 [ 270.495276][ T8344] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080 [ 270.495293][ T8344] RBP: 00007f1ab3539090 R08: 0000000000000000 R09: 0000000000000000 [ 270.495309][ T8344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 270.495325][ T8344] R13: 00007f1ab2816038 R14: 00007f1ab2815fa0 R15: 00007ffd96737a78 [ 270.495365][ T8344] [ 270.833829][ T5937] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 270.843810][ T5937] stv0680 4-1:4.0: last error: 210, command = 0xee [ 270.854222][ T5937] usb 4-1: USB disconnect, device number 13 [ 271.089108][ T8354] loop0: detected capacity change from 0 to 512 [ 271.156872][ T8354] EXT4-fs error (device loop0): ext4_iget_extra_inode:5128: inode #15: comm syz.0.576: corrupted in-inode xattr: e_value out of bounds [ 271.174296][ T8354] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 271.174771][ T8354] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.576: couldn't read orphan inode 15 (err -117) [ 271.183969][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 271.183992][ C1] EXT4-fs (loop0): initial error at time 1780482540: ext4_iget_extra_inode:5128: inode 15 [ 271.184031][ C1] EXT4-fs (loop0): last error at time 1780482540: ext4_iget_extra_inode:5128: inode 15 [ 271.223076][ T8354] loop0: lost filesystem error report for type 5 error -117 [ 271.226605][ T8354] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 271.309478][ T8355] tipc: Enabling of bearer rejected, failed to enable media [ 271.417548][ T5630] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.427297][ T8360] syzkaller0: entered promiscuous mode [ 271.435106][ T8360] syzkaller0: entered allmulticast mode [ 271.451740][ T803] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 271.624638][ T803] usb 5-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 271.640386][ T8363] loop6: detected capacity change from 0 to 32768 [ 271.687590][ T803] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.719109][ T8363] find_entry called with index >= next_index [ 271.725956][ T8363] find_entry called with index >= next_index [ 271.731968][ T8363] find_entry called with index >= next_index [ 271.737936][ T8363] find_entry called with index >= next_index [ 271.743964][ T8363] find_entry called with index >= next_index [ 271.751455][ T8363] add_index: next_index = 0. Resetting! [ 271.758175][ T8363] find_entry called with index >= next_index [ 271.764395][ T8363] find_entry called with index >= next_index [ 271.770369][ T8363] find_entry called with index >= next_index [ 271.776808][ T8363] find_entry called with index >= next_index [ 271.787550][ T803] usb 5-1: Product: syz [ 271.837208][ T803] usb 5-1: Manufacturer: syz [ 271.864980][ T803] usb 5-1: SerialNumber: syz [ 271.917255][ T803] usb 5-1: config 0 descriptor?? [ 271.928952][ T8365] netlink: 44 bytes leftover after parsing attributes in process `syz.0.582'. [ 271.976412][ T803] ums-onetouch 5-1:0.0: USB Mass Storage device detected [ 272.053836][ T8370] trusted_key: encrypted_key: insufficient parameters specified [ 272.308210][ T8371] autofs: Unknown parameter 'no9á ‘ıPƒ¹G!8°‰™…EŸ ' [ 272.988854][ T8370] netlink: 4 bytes leftover after parsing attributes in process `syz.2.584'. [ 273.253159][ T8384] netlink: 8 bytes leftover after parsing attributes in process `syz.3.583'. [ 273.496048][ T8394] FAULT_INJECTION: forcing a failure. [ 273.496048][ T8394] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 273.560775][ T8394] CPU: 1 UID: 0 PID: 8394 Comm: syz.3.590 Not tainted syzkaller #0 PREEMPT(full) [ 273.560809][ T8394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 273.560825][ T8394] Call Trace: [ 273.560834][ T8394] [ 273.560844][ T8394] dump_stack_lvl+0xe8/0x150 [ 273.560878][ T8394] should_fail_ex+0x412/0x560 [ 273.560912][ T8394] _copy_from_user+0x2d/0xb0 [ 273.560951][ T8394] ___sys_sendmsg+0x1c6/0x360 [ 273.560974][ T8394] ? srso_alias_return_thunk+0x5/0xfbef5 [ 273.561006][ T8394] ? __lock_acquire+0x6b5/0x2cf0 [ 273.561040][ T8394] ? __pfx____sys_sendmsg+0x10/0x10 [ 273.561107][ T8394] ? __fget_files+0x2a/0x420 [ 273.561139][ T8394] ? srso_alias_return_thunk+0x5/0xfbef5 [ 273.561169][ T8394] ? __fget_files+0x3a0/0x420 [ 273.561213][ T8394] __x64_sys_sendmsg+0x1bd/0x2a0 [ 273.561241][ T8394] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 273.561281][ T8394] ? __pfx_ksys_write+0x10/0x10 [ 273.561329][ T8394] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.561356][ T8394] do_syscall_64+0x174/0x580 [ 273.561387][ T8394] ? trace_irq_disable+0x3b/0x140 [ 273.561433][ T8394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.561458][ T8394] RIP: 0033:0x7f97fa79ce59 [ 273.561480][ T8394] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 273.561501][ T8394] RSP: 002b:00007f97f89f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 273.561527][ T8394] RAX: ffffffffffffffda RBX: 00007f97faa16090 RCX: 00007f97fa79ce59 [ 273.561545][ T8394] RDX: 0000000020040054 RSI: 0000200000006040 RDI: 0000000000000003 [ 273.561561][ T8394] RBP: 00007f97f89f6090 R08: 0000000000000000 R09: 0000000000000000 [ 273.561577][ T8394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 273.561592][ T8394] R13: 00007f97faa16128 R14: 00007f97faa16090 R15: 00007fffc65e2378 [ 273.561631][ T8394] [ 273.817885][ T8396] overlayfs: failed to clone upperpath [ 274.162746][ T5760] usb 5-1: USB disconnect, device number 13 [ 275.053942][ T8419] autofs: Unknown parameter 'no9á ‘ıPƒ¹G!8°‰™…EŸ ' [ 275.065194][ T8419] loop2: detected capacity change from 0 to 64 [ 275.303524][ T8407] netlink: 8 bytes leftover after parsing attributes in process `syz.6.588'. [ 275.614830][ T8428] netlink: 8 bytes leftover after parsing attributes in process `syz.6.602'. [ 275.928457][ T8436] ÿ: renamed from dummy0 (while UP) [ 275.999140][ T8439] Invalid ELF header type: 3 != 1 [ 276.013895][ T8406] loop4: detected capacity change from 0 to 32768 [ 276.025198][ T8438] loop3: detected capacity change from 0 to 2048 [ 276.135383][ T8438] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 276.400908][ T5867] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 276.470852][ T8450] netlink: 60 bytes leftover after parsing attributes in process `syz.7.610'. [ 276.602463][ T5867] usb 4-1: Using ep0 maxpacket: 16 [ 276.658791][ T5867] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 276.723618][ T5867] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 276.799834][ T5867] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 276.834185][ T5867] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.867241][ T5867] usb 4-1: Product: syz [ 276.891848][ T5867] usb 4-1: Manufacturer: syz [ 276.902589][ T8459] autofs: Unknown parameter 'no9á ‘ıPƒ¹G!8°‰™…EŸ ' [ 276.923361][ T5867] usb 4-1: SerialNumber: syz [ 276.957297][ T5867] usb 4-1: config 0 descriptor?? [ 277.001731][ T5867] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 277.054720][ T5867] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 277.508550][ T8466] netlink: 8 bytes leftover after parsing attributes in process `syz.6.615'. [ 277.580749][ T993] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 277.604509][ T5867] em28xx 4-1:0.0: chip ID is em2828X [ 277.660206][ T8468] netlink: 8 bytes leftover after parsing attributes in process `syz.7.617'. [ 277.783703][ T993] usb 5-1: config 2 has an invalid interface number: 43 but max is 0 [ 277.817484][ T993] usb 5-1: config 2 has no interface number 0 [ 277.825928][ T31] audit: type=1800 audit(1780482547.126:72): pid=8438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.607" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 277.852246][ T993] usb 5-1: config 2 interface 43 altsetting 13 bulk endpoint 0x1 has invalid maxpacket 64 [ 277.885344][ T993] usb 5-1: config 2 interface 43 altsetting 13 bulk endpoint 0x82 has invalid maxpacket 8 [ 277.908009][ T8438] [ 277.910330][ T8438] ====================================================== [ 277.917328][ T8438] WARNING: possible circular locking dependency detected [ 277.924322][ T8438] syzkaller #0 Not tainted [ 277.928713][ T8438] ------------------------------------------------------ [ 277.935703][ T8438] syz.3.607/8438 is trying to acquire lock: [ 277.941570][ T8438] ffff88806bba2f78 (&ei->xattr_sem){++++}-{4:4}, at: ext4_destroy_inline_data+0x28/0xe0 [ 277.951321][ T8438] [ 277.951321][ T8438] but task is already holding lock: [ 277.958660][ T8438] ffff888078d24c18 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x205/0x3b0 [ 277.968671][ T8438] [ 277.968671][ T8438] which lock already depends on the new lock. [ 277.968671][ T8438] [ 277.979050][ T8438] [ 277.979050][ T8438] the existing dependency chain (in reverse order) is: [ 277.988043][ T8438] [ 277.988043][ T8438] -> #1 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 277.996467][ T8438] percpu_down_read_internal+0x48/0x1c0 [ 278.002536][ T8438] ext4_writepages+0x205/0x3b0 [ 278.007817][ T8438] do_writepages+0x32e/0x550 [ 278.012914][ T8438] __writeback_single_inode+0x133/0x10e0 [ 278.019057][ T8438] writeback_single_inode+0x4ac/0xdc0 [ 278.024934][ T8438] write_inode_now+0x1c2/0x290 [ 278.030201][ T8438] iput+0x8c1/0xe80 [ 278.034522][ T8438] ext4_xattr_block_set+0x1fd4/0x2ad0 [ 278.040402][ T8438] ext4_expand_extra_isize_ea+0x12cf/0x1ea0 [ 278.046803][ T8438] __ext4_expand_extra_isize+0x30d/0x400 [ 278.052945][ T8438] __ext4_mark_inode_dirty+0x45c/0x710 [ 278.058917][ T8438] ext4_evict_inode+0x986/0x10e0 [ 278.064368][ T8438] evict+0x61e/0xb10 [ 278.068765][ T8438] ext4_orphan_cleanup+0xc38/0x1470 [ 278.074479][ T8438] ext4_fill_super+0x5a19/0x6330 [ 278.079925][ T8438] get_tree_bdev_flags+0x431/0x4f0 [ 278.085551][ T8438] vfs_get_tree+0x92/0x2a0 [ 278.090484][ T8438] do_new_mount+0x341/0xd30 [ 278.095501][ T8438] __se_sys_mount+0x31d/0x420 [ 278.100688][ T8438] do_syscall_64+0x174/0x580 [ 278.105788][ T8438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.112186][ T8438] [ 278.112186][ T8438] -> #0 (&ei->xattr_sem){++++}-{4:4}: [ 278.119742][ T8438] __lock_acquire+0x15a5/0x2cf0 [ 278.125101][ T8438] lock_acquire+0x106/0x350 [ 278.130108][ T8438] down_write+0x96/0x200 [ 278.134858][ T8438] ext4_destroy_inline_data+0x28/0xe0 [ 278.140745][ T8438] ext4_do_writepages+0x51e/0x4670 [ 278.146362][ T8438] ext4_writepages+0x241/0x3b0 [ 278.151633][ T8438] do_writepages+0x32e/0x550 [ 278.156727][ T8438] file_write_and_wait_range+0x36e/0x440 [ 278.162873][ T8438] mmb_fsync_noflush+0x76/0x1c0 [ 278.168244][ T8438] ext4_sync_file+0x437/0xd50 [ 278.173428][ T8438] ext4_buffered_write_iter+0x2ca/0x3a0 [ 278.179476][ T8438] ext4_file_write_iter+0x298/0x1bf0 [ 278.185296][ T8438] vfs_write+0x61d/0xb90 [ 278.190056][ T8438] ksys_write+0x150/0x270 [ 278.194901][ T8438] do_syscall_64+0x174/0x580 [ 278.200004][ T8438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.206404][ T8438] [ 278.206404][ T8438] other info that might help us debug this: [ 278.206404][ T8438] [ 278.216615][ T8438] Possible unsafe locking scenario: [ 278.216615][ T8438] [ 278.224058][ T8438] CPU0 CPU1 [ 278.229400][ T8438] ---- ---- [ 278.234741][ T8438] rlock(&sbi->s_writepages_rwsem); [ 278.240020][ T8438] lock(&ei->xattr_sem); [ 278.246853][ T8438] lock(&sbi->s_writepages_rwsem); [ 278.254555][ T8438] lock(&ei->xattr_sem); [ 278.258890][ T8438] [ 278.258890][ T8438] *** DEADLOCK *** [ 278.258890][ T8438] [ 278.267008][ T8438] 3 locks held by syz.3.607/8438: [ 278.272012][ T8438] #0: ffff8880254cab70 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 278.281073][ T8438] #1: ffff888078d26410 (sb_writers#4){.+.+}-{0:0}, at: vfs_write+0x227/0xb90 [ 278.289969][ T8438] #2: ffff888078d24c18 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x205/0x3b0 [ 278.300417][ T8438] [ 278.300417][ T8438] stack backtrace: [ 278.306286][ T8438] CPU: 0 UID: 0 PID: 8438 Comm: syz.3.607 Not tainted syzkaller #0 PREEMPT(full) [ 278.306311][ T8438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 278.306325][ T8438] Call Trace: [ 278.306333][ T8438] [ 278.306342][ T8438] dump_stack_lvl+0xe8/0x150 [ 278.306368][ T8438] print_circular_bug+0x2e1/0x300 [ 278.306400][ T8438] check_noncircular+0x12e/0x150 [ 278.306433][ T8438] __lock_acquire+0x15a5/0x2cf0 [ 278.306459][ T8438] ? __kasan_check_byte+0x12/0x40 [ 278.306495][ T8438] ? srso_alias_return_thunk+0x5/0xfbef5 [ 278.306520][ T8438] ? rcu_is_watching+0x15/0xb0 [ 278.306546][ T8438] ? srso_alias_return_thunk+0x5/0xfbef5 [ 278.306572][ T8438] ? lock_release+0x4b/0x3c0 [ 278.306592][ T8438] ? srso_alias_return_thunk+0x5/0xfbef5 [ 278.306618][ T8438] ? lock_release+0x4b/0x3c0 [ 278.306643][ T8438] ? ext4_destroy_inline_data+0x28/0xe0 [ 278.306673][ T8438] lock_acquire+0x106/0x350 [ 278.306695][ T8438] ? ext4_destroy_inline_data+0x28/0xe0 [ 278.306729][ T8438] ? srso_alias_return_thunk+0x5/0xfbef5 [ 278.306763][ T8438] down_write+0x96/0x200 [ 278.306789][ T8438] ? ext4_destroy_inline_data+0x28/0xe0 [ 278.306820][ T8438] ? __pfx_down_write+0x10/0x10 [ 278.306844][ T8438] ? ext4_journal_check_start+0x1c/0x2b0 [ 278.306870][ T8438] ? ext4_journal_check_start+0x1cf/0x2b0 [ 278.306898][ T8438] ext4_destroy_inline_data+0x28/0xe0 [ 278.306931][ T8438] ext4_do_writepages+0x51e/0x4670 [ 278.306953][ T8438] ? srso_alias_return_thunk+0x5/0xfbef5 [ 278.306979][ T8438] ? kernel_text_address+0xa5/0xe0 [ 278.307013][ T8438] ? srso_alias_return_thunk+0x5/0xfbef5 [ 278.307039][ T8438] ? unwind_get_return_address+0x4d/0x90 [ 278.307066][ T8438] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 278.307100][ T8438] ? srso_alias_return_thunk+0x5/0xfbef5 [ 278.307126][ T8438] ? arch_stack_walk+0xfb/0x150 [ 278.307158][ T8438] ? srso_alias_return_thunk+0x5/0xfbef5 [ 278.307184][ T8438] ? stack_trace_save+0xa9/0x100 [ 278.307215][ T8438] ? __pfx_stack_trace_save+0x10/0x10 [ 278.307248][ T8438] ? __pfx_hlock_conflict+0x10/0x10 [ 278.307278][ T8438] ? srso_alias_return_thunk+0x5/0xfbef5 [ 278.307303][ T8438] ? check_path+0x21/0x40 [ 278.307328][ T8438] ? srso_alias_return_thunk+0x5/0xfbef5 [ 278.307356][ T8438] ? srso_alias_return_thunk+0x5/0xfbef5 [ 278.307381][ T8438] ? add_lock_to_list+0xc7/0x100 [ 278.307409][ T8438] ? __pfx_ext4_do_writepages+0x10/0x10 [ 278.307428][ T8438] ? srso_alias_return_thunk+0x5/0xfbef5 [ 278.307453][ T8438] ? srso_alias_return_thunk+0x5/0xfbef5 [ 278.307479][ T8438] ? __lock_acquire+0x146e/0x2cf0 [ 278.307514][ T8438] ? srso_alias_return_thunk+0x5/0xfbef5 [ 278.307541][ T8438] ? srso_alias_return_thunk+0x5/0xfbef5 [ 278.307570][ T8438] ? srso_alias_return_thunk+0x5/0xfbef5 [ 278.307598][ T8438] ? srso_alias_return_thunk+0x5/0xfbef5 [ 278.307626][ T8438] ext4_writepages+0x241/0x3b0 [ 278.307654][ T8438] ? __pfx_ext4_writepages+0x10/0x10 [ 278.307688][ T8438] ? srso_alias_return_thunk+0x5/0xfbef5 [ 278.307716][ T8438] ? srso_alias_return_thunk+0x5/0xfbef5 [ 278.307741][ T8438] ? do_raw_spin_unlock+0xf5/0x210 [ 278.307777][ T8438] ? __pfx_ext4_writepages+0x10/0x10 [ 278.307805][ T8438] do_writepages+0x32e/0x550 [ 278.307829][ T8438] ? srso_alias_return_thunk+0x5/0xfbef5 [ 278.307855][ T8438] ? srso_alias_return_thunk+0x5/0xfbef5 [ 278.307883][ T8438] ? srso_alias_return_thunk+0x5/0xfbef5 [ 278.307908][ T8438] ? do_raw_spin_unlock+0xf5/0x210 [ 278.307941][ T8438] file_write_and_wait_range+0x36e/0x440 [ 278.307972][ T8438] ? __pfx_file_write_and_wait_range+0x10/0x10 [ 278.308026][ T8438] mmb_fsync_noflush+0x76/0x1c0 [ 278.308063][ T8438] ext4_sync_file+0x437/0xd50 [ 278.308090][ T8438] ? __pfx_ext4_sync_file+0x10/0x10 [ 278.308130][ T8438] ? srso_alias_return_thunk+0x5/0xfbef5 [ 278.308156][ T8438] ? sync_lazytime+0x5e/0x4c0 [ 278.308191][ T8438] ? srso_alias_return_thunk+0x5/0xfbef5 [ 278.308221][ T8438] ext4_buffered_write_iter+0x2ca/0x3a0 [ 278.308245][ T8438] ext4_file_write_iter+0x298/0x1bf0 [ 278.308288][ T8438] ? srso_alias_return_thunk+0x5/0xfbef5 [ 278.308314][ T8438] ? srso_alias_return_thunk+0x5/0xfbef5 [ 278.308341][ T8438] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 278.308376][ T8438] ? srso_alias_return_thunk+0x5/0xfbef5 [ 278.308408][ T8438] vfs_write+0x61d/0xb90 [ 278.308443][ T8438] ? __pfx_vfs_write+0x10/0x10 [ 278.308480][ T8438] ? __fget_files+0x2a/0x420 [ 278.308509][ T8438] ? srso_alias_return_thunk+0x5/0xfbef5 [ 278.308536][ T8438] ksys_write+0x150/0x270 [ 278.308569][ T8438] ? __pfx_ksys_write+0x10/0x10 [ 278.308606][ T8438] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.308629][ T8438] do_syscall_64+0x174/0x580 [ 278.308650][ T8438] ? trace_irq_disable+0x3b/0x140 [ 278.308687][ T8438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.308708][ T8438] RIP: 0033:0x7f97fa79ce59 [ 278.308727][ T8438] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 278.308745][ T8438] RSP: 002b:00007f97fb581028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 278.308771][ T8438] RAX: ffffffffffffffda RBX: 00007f97faa15fa0 RCX: 00007f97fa79ce59 [ 278.308787][ T8438] RDX: 0000000000000050 RSI: 0000200000004640 RDI: 0000000000000007 [ 278.308801][ T8438] RBP: 00007f97fa832d6f R08: 0000000000000000 R09: 0000000000000000 [ 278.308815][ T8438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 278.308828][ T8438] R13: 00007f97faa16038 R14: 00007f97faa15fa0 R15: 00007fffc65e2378 [ 278.308853][ T8438] [ 278.848500][ T8438] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 278.865214][ T993] usb 5-1: config 2 interface 43 has no altsetting 0 [ 278.892396][ T8438] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 278.940897][ T8438] EXT4-fs (loop3): This should not happen!! Data will be lost [ 278.940897][ T8438] [ 278.958473][ T8438] EXT4-fs (loop3): Total free blocks count 0 [ 278.966597][ T8438] EXT4-fs (loop3): Free/Dirty block details [ 278.973088][ T8438] EXT4-fs (loop3): free_blocks=2415919104 [ 278.978885][ T8438] EXT4-fs (loop3): dirty_blocks=16 [ 278.991136][ T993] usb 5-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 278.997512][ T8438] EXT4-fs (loop3): Block reservation details [ 279.000192][ T993] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.006466][ T8438] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 279.020680][ T993] usb 5-1: Product: syz [ 279.024850][ T993] usb 5-1: Manufacturer: syz [ 279.029710][ T993] usb 5-1: SerialNumber: syz [ 279.033265][ T5867] usb 4-1: USB disconnect, device number 14 [ 279.041856][ T5867] em28xx 4-1:0.0: Disconnecting em28xx [ 279.047568][ T8461] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 279.056548][ T8461] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 279.059207][ T5867] em28xx 4-1:0.0: Freeing device [ 279.074563][ T5648] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 279.087105][ T5648] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 279.269600][ T993] ums-usbat 5-1:2.43: USB Mass Storage device detected [ 279.278026][ T993] ums-usbat 5-1:2.43: Quirks match for vid 0781 pid 0005: 1 [ 279.312760][ T993] ums-usbat 5-1:2.43: probe with driver ums-usbat failed with error -5 [ 279.324120][ T993] usb 5-1: USB disconnect, device number 14 [ 285.640874][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 287.720804][ T4946] Bluetooth: hci3: command 0x0406 tx timeout