last executing test programs: 16m48.96856054s ago: executing program 32 (id=170): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB='<5>A\x00'/19, @ANYRES32=0x0, @ANYBLOB="ff000000000000001c0012"], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_emit_vhci(&(0x7f0000000780)=ANY=[@ANYBLOB="042e0b01c8006b2406000900e600d6dabf9607d00fc2073545c517be3ba2abfd789d5d2c516368a3a487561867b43e4e0cd9ac8cf652b271e44568aaf4ffe85a65ee2ed11b9023df4ec701551a275ec5d57e1a0139627c1c30451c19aa3897f557f17314b034ae08e194af420123a1d060c6425948a008bf1f014ec64ea148331ce6aae01d7f27532370d8518f043c48e13b86c6e99c4b0c083f918adce50000001c7f2a8a674127b6cb28e36297ee707535d0e263b7ab"], 0xe) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000200000001000000000000926b5d92"], 0x0, 0x26, 0x0, 0x1, 0x80000001, 0x0, @void, @value}, 0x28) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, &(0x7f00000000c0)={{0x8, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000, 0x0, 0x0, 0x56a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x4, 0xa6, 0x0, 0x0, 0x0, 0x13]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000008000008500000006000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r4}, 0x18) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x1c, 0x2c, 0x0, @remote, @local, {[@routing={0x84}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r5) 16m19.130845984s ago: executing program 33 (id=290): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 16m4.837464462s ago: executing program 34 (id=321): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@lazytime}, {@nouid32}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@noblock_validity}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x567, &(0x7f0000000b00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x14a) fallocate(r0, 0x8, 0x0, 0x8000) 15m55.798651155s ago: executing program 35 (id=313): r0 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@local, 0x0, 0xfffe, 0x0, 0x0, 0x2}, {0x3, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x2}, {0x0, 0xfffffffffffffffc, 0x0, 0x9}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@multicast2, 0x0, 0x3c}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x42, 0x0, 0x0, 0xfffffffd}}, 0xe8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0xfffc, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) syz_mount_image$ext4(&(0x7f0000000ec0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1c410, &(0x7f0000000e40), 0xde, 0x546, &(0x7f0000000f00)="$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") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, 0x0) chdir(&(0x7f0000000080)='./file1\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000480), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) unshare(0x2c020600) msgsnd(0x0, &(0x7f0000000380)=ANY=[@ANYRESOCT], 0x2000, 0x800) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r5, 0x4048ae9b, &(0x7f0000019180)={0x1a0003, 0x0, [0x7, 0x2, 0x8, 0x6, 0xfffffffffffffffd, 0x0, 0x3, 0x7fffffff]}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$KVM_RUN(r5, 0xae80, 0x0) 15m36.290001943s ago: executing program 36 (id=361): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f00000008c0)="0f28dc6635080000000f22d866b8000000000f23d00f21f86635200000010f23f80f01c826f0f69e0700baf80c66b888cda78dbafc0c66edbad00466b80a00000066efbad104650f8b8b85ee0f0966b9800000c00f326635002000000f30b8f90b8ee0", 0x63}], 0x1, 0x6, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 15m20.477831696s ago: executing program 37 (id=392): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x4008132, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) futex(&(0x7f0000000080), 0x7, 0x0, 0x0, 0x0, 0x0) 8m38.540001184s ago: executing program 9 (id=1852): syz_mount_image$hfsplus(&(0x7f0000007340), &(0x7f0000000000)='./file2\x00', 0x1600008, &(0x7f0000000100)=ANY=[@ANYRES64], 0x3, 0x643, &(0x7f0000000c00)="$eJzs3UtsG2kdAPD/OI4TB9TN7qa7Ba1EtJUWRESbh1IIF8pDKIcVWpUD56h1G6tuWiUuSiuEwkscuHCoOJdDbpyQeo9UznBBveZYCdRLDyg3oxmPHeftvGoHfr9q/H2fv5lv/vO352Gn1gTwf2t+IoobkcT8xOeraXtzfaa2uT4zlHfXIiKtFyKKzSKSpYjkZbP7ZvrwlfTJfP7koPU8q87devV283WzVWwtnJTS2vDByx2lueBaPsV4RAzk5V6D3Y66Y7zbB463n3//Yf8gm4Gm23y1lTjotcYea8dZ/MT7LdA/kuZ5c4/RiJHsDN28Doj86FB4t9GdvWMd5QAAAOCCem8rttYajUav4wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICLJL//f5JPhVZ9PJLW/f9LHbOXehjqmdjodQAAAAAAAAAAcCKNgc7W17ZiK1bjUrs3yf7m/2nWGMsevxSPYyUqsRzXYjUWoh71WI6piBjtGKi0ulCvL091seT0vktOn+tGAwAAAAAAAMD/ul/H/Pbf/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoB8kEQPNIpvGWvXRKBQjYjgiSul8axH/aNUvso1eBwAAAADvwHtbsRWrcanVbiTZZ/6Pss/9w/E4lqIe1ahHLSpxJ/suoPmpv7C5PlPbXJ95kE57x/3TfxqZLsPIRozmdw/7r/lKNkc57kY1e+Za3I6HUSt3jnKlFc/+cf3qTTr293JdRnYnL9Mt/2Ne9ofRLCOD7YxM5rGleXz/8Ex8/81J1zSermkqCu1vfsbOIecjeZnsKntvd86no5DlO/XR4ZmI+PqLv/xssbZ0f/HuykT/bNIJNTPRaDQzMZS1Wpn4+MhMDMXOTNx45/Gfncls2y+32/Px4/hpTMR4fBHLUY2fx0LUoxLj8aOstpC/n9PH0V2ZKuwc+uaO1hdHRVLKX5fmUfR4MX2aLXspqvGTeBh3ohI3sn/TMRXfjtmYjbmOV/hyF3t94Xh7/dVv5JX0kP77vOwPaV7f78hr5zF3NOvrfGY7Sx+c/bGx+NW8kq7jNxHxwzPcztPZnYn0LPHiy82+Dw/PxJ+z64SV2tL95cWFR12u77O8TPej3/XVWSJ9v3yQvlhZa+e7I+37cN++qaxvrN1X2NN3ud131J5ayq/h9o40nfV9vG/fTNZ3paNvz/VW+3oIgD428s2RUvlf5b+Xn5d/W14sfz78g6HvDH1SisG/DX63ODnwWeGT5K/xPH65/fkfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4uZUnT+8v1GqV5SMrSXbz/4iuZu6otG7ndPjMSRSzG/kcZ2SVWq0yHH0RxrEqtX9GdDyT9DqefqgM9dubv7fHJeD8Xa8/eHR95cnTb1UfLNyr3KssDc7Ozk3Ozd6YuX63WhuI9LEy2esogfOwfdLPmoO9jgcAAAAAAAAAAAA42uE/A2j9d8DT/Zygx5sIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXHDzE1HciCSmJq9Npu3N9ZlaOrXq23MWI6IQEckvIpKXETejOcVox3DJQet5Vp279ert5uvtsYqt+QuHLdedtXyK8YgYyMuzGu/2qcdL2luYJuxq6XTBwZn5bwAAAP//uI4Hww==") bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) truncate(&(0x7f0000000280)='./file2\x00', 0x6) symlink(&(0x7f0000000540)='./file1\x00', &(0x7f0000000380)='./file1\x00') syz_usb_connect(0x1, 0xfffffffffffffd22, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000e40)={0x1, 0x0, [{0x0, 0xf3, &(0x7f00000008c0)=""/243}]}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) unshare(0x64000600) openat$binfmt_register(0xffffff9c, 0x0, 0x1, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000200)=@rc={0x1f, @fixed}, 0x0, 0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 8m37.521838557s ago: executing program 0 (id=1855): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000006c0)}], 0x1}}], 0x1, 0x40088c4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) 8m36.997251653s ago: executing program 0 (id=1858): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000180)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 8m36.632782036s ago: executing program 9 (id=1859): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000a00)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x4, 0x78, 0x0, 0x0, 0x1, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x19, 0x20, 0x0, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}, @exp_fastopen={0xfe, 0x4}, @timestamp={0x8, 0xa, 0x200, 0x9}, @sack={0x5, 0xa, [0x2, 0x2]}, @exp_fastopen={0xfe, 0x8, 0xf989, "43ecdca9"}, @sack={0x5, 0x2a, [0xb, 0x800, 0x5, 0x8c, 0x1, 0xd, 0xfffe0000, 0x3, 0x5, 0x7]}]}}}}}}}, 0x0) 8m36.277149976s ago: executing program 0 (id=1861): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100001000071f111cdd5cfc11600000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a010100000000f9ff0000010000000900010073797a30000000000900030073797a32000000001c000000060a010400000000000000000100000008000b4004"], 0x90}}, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xf}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xe}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c5102", 0x3e}], 0x2}, 0x0) 8m36.019908341s ago: executing program 9 (id=1864): socket$can_raw(0x1d, 0x3, 0x1) socket$pptp(0x18, 0x1, 0x2) socket(0x10, 0x3, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x2000) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1, 0x1, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x2942, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x2ac}) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r4}, 0x20) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r3], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)}) 8m35.192795157s ago: executing program 9 (id=1865): syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xee}, @hci_ev_le_ext_adv_report={{}, {0x3, [{0x1a, 0x1, @none, 0xf, 0x2, 0x8, 0x4, 0x7f, 0x3, 0x1, @any, 0x7, "0bcfeb514795b2"}, {0x10, 0x1, @none, 0x6, 0x7, 0x7, 0x7f, 0x2, 0x0, 0xa, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x45, "3e21401d59ac1ef407b9aec68010639a5e3d68d6c2b589d073e83771c5e23da28bb9017c14272ba4cbfc97f9d62243b7dd58a880a71ce1fead2c3202b50c7b85ee499aa4d8"}, {0x1b, 0x0, @any, 0x1, 0x2, 0xb9, 0x6, 0x70, 0xfffb, 0xcd, @any, 0x58, "ea4e4421f0178419abae8f28a236277bfcc5d9a401604fde780db715e7e3fc47957838dd6a85cb83ffc54fd7c72eee792fe3444bd4fb0f7490d9c876bbaba8a87335f3047f10da35e15dab62cb27d01870f7aefa6acf70a5"}]}}}}, 0xf1) 8m35.125539271s ago: executing program 0 (id=1866): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) syz_usb_connect(0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a7420040ab05010300010102030109022400"], 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000e40)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 8m34.701866694s ago: executing program 9 (id=1869): syz_mount_image$hfsplus(&(0x7f0000007340), &(0x7f0000000000)='./file2\x00', 0x1600008, &(0x7f0000000100)=ANY=[@ANYRES64], 0x3, 0x643, &(0x7f0000000c00)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) truncate(&(0x7f0000000280)='./file2\x00', 0x6) symlink(&(0x7f0000000540)='./file1\x00', &(0x7f0000000380)='./file1\x00') syz_usb_connect(0x1, 0xfffffffffffffd22, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000080)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000e40)={0x1, 0x0, [{0x0, 0xf3, &(0x7f00000008c0)=""/243}]}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) unshare(0x64000600) openat$binfmt_register(0xffffff9c, 0x0, 0x1, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000200)=@rc={0x1f, @fixed}, 0x0, 0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 8m34.058530061s ago: executing program 0 (id=1872): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa07, 0x0) 8m33.440581355s ago: executing program 0 (id=1876): socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xc0001, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000002c0), 0x404800, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000680)=ANY=[@ANYRES8=r1, @ANYRES32=r2, @ANYRES32=0x0, @ANYRES64=0x0, @ANYRESDEC=r2, @ANYRES64, @ANYRESHEX=r1, @ANYRESHEX, @ANYRESOCT, @ANYRESOCT=r1], &(0x7f0000000000)='GPL\x00', 0x8, 0xb3, &(0x7f0000000140)=""/179, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) sendto$inet(0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x4004801, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006) 8m33.201185879s ago: executing program 9 (id=1879): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000680)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xb3, &(0x7f0000000140)=""/179, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006) 8m17.812161249s ago: executing program 38 (id=1879): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000680)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xb3, &(0x7f0000000140)=""/179, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001040)={0xf, {"a2e3ad21ed0d1bf91b4d090955f70e06d038e7ff7fc6e5539b0d3f0e8b089b3f35076e090890e0878f0e1ac6e7049b3346959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07580936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46636cb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2901007399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db88ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aaecbd902572058245144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067ec05ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf739c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x1000}}, 0x1006) 8m17.537372935s ago: executing program 39 (id=1876): socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xc0001, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000002c0), 0x404800, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000680)=ANY=[@ANYRES8=r1, @ANYRES32=r2, @ANYRES32=0x0, @ANYRES64=0x0, @ANYRESDEC=r2, @ANYRES64, @ANYRESHEX=r1, @ANYRESHEX, @ANYRESOCT, @ANYRESOCT=r1], &(0x7f0000000000)='GPL\x00', 0x8, 0xb3, &(0x7f0000000140)=""/179, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) sendto$inet(0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x4004801, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006) 5m15.950128949s ago: executing program 7 (id=2618): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x8, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) r2 = openat$vnet(0xffffff9c, &(0x7f0000000b00), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000b40)={0x0, 0xc}) move_pages(r0, 0x0, 0x0, 0x0, 0x0, 0x2) syz_read_part_table(0x5ec, &(0x7f0000000000)="$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") connect$can_bcm(0xffffffffffffffff, &(0x7f0000000540), 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x308) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random="371692e7f7ef"}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) setsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f0000000640)=0xffffff81, 0x4) syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0xe5, 0x87, 0x6e, 0x40, 0x2040, 0x1605, 0xa94, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x58, 0x83, 0xb2, 0x0, [], [{{0x9, 0x5, 0x85}}]}}]}}]}}, 0x0) r6 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r6, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0xfffffffffffffd37) r7 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r7, 0x0, 0x83, &(0x7f00000001c0)={'nat\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000240)=0xe0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$sock(r7, &(0x7f0000000a80)={&(0x7f00000006c0)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000740)="c1846b7391b3a685308dd3d59d61940833ded4d1a616fdb2731c9cd25aecb18292f3cdd10d8555ba8231596d61f2cbde25516871fd87ed8d8c859416b63499b2193953ec79c9e2", 0x47}, {&(0x7f00000007c0)="3881f6aff56fc88e3ffb581a53a974719550127105bf4cb052be6c47", 0x1c}, {&(0x7f0000000800)="9744d0fbeb5aeebe5bdb3fac561ab8b87e9fd33f64595e53431130dce43a3e0db3fc9e73a4f6c582a352c70c69fabe47efebdcf030bc265f48568772badd6f9b33f2f2a5053aab0a7fba861c5bad2cda0f8d86e0357546598bd6069f1763", 0x5e}, {&(0x7f0000000880)="9a7832049b98fee82b9f1104e6b9873e86e1e627374ff121ce297b8856c346a337c730f3d9db616f699d968e0eb55c4f415bf6cc", 0x34}, {&(0x7f00000008c0)="aecfa9e0296168cabf3be57b87ddfed2c59599532fcb2dd23ff4a76cb32a6f5b6a6d8f0fd61016bb63263249e088341786442880208e4278b45919ae049975cc06501fd73d3ac6de102ca68fcaf380da76bd73bd70ffe46fc8a97752e5d31a9ec2d895595f60d3eebc32927f3173d799339343", 0x73}, {&(0x7f0000000940)="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", 0xfa}], 0x6}, 0x14) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000180)={'wlan0\x00', &(0x7f0000000140)=@ethtool_sset_info={0x37, 0x0, 0x3}}) 5m13.940268368s ago: executing program 7 (id=2630): r0 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x8) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@fallback=r1, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 5m13.387706268s ago: executing program 7 (id=2633): r0 = fsopen(&(0x7f00000000c0)='tmpfs\x00', 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_io_uring_setup(0x39, &(0x7f0000001100)={0x0, 0xe7b8, 0x3501, 0x0, 0x6}, &(0x7f0000000080), &(0x7f00000010c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x21, &(0x7f0000000440), 0x1) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000100)='usrquota', &(0x7f00000002c0)='./file1\x00', 0xffffffffffffff9c) 5m12.697862435s ago: executing program 7 (id=2637): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f00000001c0)={[{@minixdf}, {@jqfmt_vfsv0}, {@inlinecrypt}, {@noblock_validity}, {@usrjquota}]}, 0x1, 0x454, &(0x7f0000000400)="$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") r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') (fail_nth: 1) 5m11.628785099s ago: executing program 7 (id=2639): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095000000000000001df17de72308e9cd8f41a970496eca32f73c22971022682be5eda39ca32576c130cee8ac9495fbd49e88d65aa4003703e70e46f1259dc855017039024cfe53770ac53bca0576d191a2004ff9f4cf90c683ebe5a21af855eb0e2fb9223ccb4dee190282e824bafa28ba5dc6a37a9d91769e0408336b1bd2ced87f9ee553c6328adafc5b42b5daeb0ac9040900007e0dd918ad8097f337c2e79ab16c5d3882312319f02b2361d8f4a47f67993a19beab25627119d6"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x3, &(0x7f0000000f80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 5m10.278766807s ago: executing program 7 (id=2646): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) writev(r1, &(0x7f0000000340)=[{&(0x7f00000010c0)="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", 0xfc0}, {&(0x7f00000002c0)="1b", 0x1}], 0x2) 5m7.900492295s ago: executing program 40 (id=2646): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) writev(r1, &(0x7f0000000340)=[{&(0x7f00000010c0)="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", 0xfc0}, {&(0x7f00000002c0)="1b", 0x1}], 0x2) 4m52.008920026s ago: executing program 2 (id=2698): r0 = socket$igmp(0x2, 0x3, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0), 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@fallback=r0, 0x8, 0x0, 0x94d6, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0], 0x0}, 0x40) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r4, r3, 0x1, 0x0, @val=@netfilter={0x2, 0x0, 0x8000}}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)={@fallback=r0, r1, 0x8e3c5164a740a75c, 0x14, 0x0, @void, @value=r3, @void, @void, r2}, 0x20) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000000)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_int(r6, &(0x7f0000000080)=0xe65e, 0x12) sendfile(r0, r6, 0x0, 0x7ff) syz_mount_image$hfs(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x200000, &(0x7f0000000280)={[{@uid}, {@dir_umask={'dir_umask', 0x3d, 0x7}}, {@gid}, {@type={'type', 0x3d, "9d119198"}}, {@codepage={'codepage', 0x3d, 'cp950'}}, {}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@file_umask={'file_umask', 0x3d, 0x3}}]}, 0x4, 0x337, &(0x7f0000000540)="$eJzs3U1r1EAYB/D/ZN9tqbGtVDxWC55KWw+KCIr05hfwIMXabqE0VrAVrChWzyLeBMGjN8+iX0Ev4hfQUw/Fk16KSCMzmWRntzPZTV82u/T/g+7rPJlnkkwysxIDIjq2bsz+eH9xS/6JEoACgCuAB6AKFAGcxlj14er68npQX0xbUEFFyD+BKFLsKbOwWreFyjgVofnyXRGD5md0NMIwDH+2LfW7K7lQfkTU9/fwgIruner7atcz25fNDgpUupNKDzG2sNjBDh5hKM90iIgof/r87+mzxKAev3seMKHH4f10/o+ZM4im8c0O8ORk9/PpGcn534veh0KuH7VGRGO+p6Zwch168SzRtizrPhE2VncZ0Z7VtAFEu1mlysWrLS0H9clNtYAXuKYZxUbV4yLihiiubMvR07hlbpoire3pBlQbSrINJUf+I5lr/LyNN/bq5r52kJP4Ir6JOeHjLRaT8V8xFHLlqPXjAzUzIMp/yr1E1Uo/KtXUykbvO6UqORtvgU8fGq2sudZrFQWZi41cimgdv/txnq/L7igMNx8UdOum3a1TUSPWqJnk/V9r1GhrVG2pFNQnF+4HqT+lHBrrjE68ErfEOH7hI2aN8b8nS0/A3TOberlQJfWekdqeoirp2I5NVAe+l6lnEvAvjGQMe4m7uIyhtY3HK/NBUH+Q/4u4q/RIPtGOqHdH+Yl8NsqgKl+UABxapbthGFq/KuIQqijHqbpyLqmmXnqXNFkdZvVPKQerHZvROjS+uu4u3Dhsyk/iI0LGSlX4syRKni2yhP/Rta9t2HdIYWRYPtodMq5qPgjOJBuugEpHPaW2j0pvPl2ZD/ZzLKJ+Y/SXsdvbV/NOh7pPjrtENP8z5itT6qgjH/yU2UjbUYexxGnHDGhYPZ7obAaXLNY5ThyIXwT1mbQ517kLwPmWGj3ENT5vXayv80Qv/qtkxZZWLS1CzOI77vD3fyIiIiIiIiIiIiIiIiIiIiIiIiKifpP1agT35QS7+jok+5UYDVvH8D/eICIiIiIiIiIiIiIiIiIiIiIiIiIiIiI6GOP+v0BB3TGmnPv9fwsd3P9XtL3FJxG18T8AAP//uTRlfg==") syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000480)='./file0\x00', 0x2018008, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="2f93edc77863113d68e33456dfe3c025878b46bc73df14f991a8f7a341a10f44c05fc1c37ad73b0239a18733e7436f3b54758b4ce59af971d50e53c14277216c0bba6ad052fa7a6d77f0b19c8b2381abc46dfa7e4bc6c37bbab3f908f48d1a6055a6457c5d503502300a69dc517cc08b955df0d19ae4c120c512eceffbf3fc154e4ba08f2497b14e95cfdef1c26e8623eab9941404ca9d84df9a2c44e453a0cfffbf23e5bf1e872ee040a582eda3d84714e82dde4c02836e5f66775f4df1bdcfbc28eb5ced2b332944d3ab2b9efe3cbb2111fe"], 0xfe, 0x4b1, &(0x7f0000001d00)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 4m51.029818575s ago: executing program 2 (id=2701): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r0, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d616373656300001800028005000900010000000c000100000000000000000008000500", @ANYRESDEC=r0, @ANYBLOB="0dc89af0fd7b1cb851e7b44e081ac9821ffe722057de0c2e0e3b09d2fe2b541fc28e435050e99b31e217e3bd6c9216b8e9d8608e9a752a0e9f77f8c81768d99e88672d6a84b81ba749ae57c872d712", @ANYRES32=r1, @ANYRESOCT], 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x20044044) 4m50.07682654s ago: executing program 2 (id=2704): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)={0x12c, r2, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x53}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x8, 0x3}}, @NL80211_ATTR_SCAN_SUPP_RATES={0xf0, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x99, 0x0, "d14acfa1826df9e31983068abca16154770d088a4410d341268359d95508afdabbafca3ec53a8c9462a12c502e48774e2ec26e4a6796e7e219426d988b20fad2ccd5278c2824c43f68ba37a75dbb4d00e3c08542608613c589619093118805573b26b805abff8b255f95e92fbcc39764ad8775532e4079fe406ac83ac6d1342d317250d431f2f114e2eb0693b28459d1e513a0f739"}, @NL80211_BAND_5GHZ={0x4f, 0x1, "221dd1277bb0ed06a7656a6e9fe5450df2f94e7c09a142e4e2b2eecbb1f6fd30dbb46234d8da3c6067c13757a184b5cd1c16b2d6f448098ce035706ec94c2b94cf9fa44f92481174760198"}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x84}, 0x6801) write(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 4m49.354410361s ago: executing program 2 (id=2706): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@orlov}, {@abort}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x10}}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x1c}}, 0x8080) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x7fffffff, 0x0) ptrace$cont(0x20, r0, 0x0, 0x0) (fail_nth: 1) 4m47.340706304s ago: executing program 2 (id=2709): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r2, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r3, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) 4m46.322020043s ago: executing program 2 (id=2711): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x101) r1 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000040)=0x100000001) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) 4m43.750973373s ago: executing program 41 (id=2711): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x101) r1 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000040)=0x100000001) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) 3m17.592564041s ago: executing program 5 (id=3022): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) (async) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000400)={0xb, 0x102, 0x1, {0x2, 0x3bc, 0x5, 0x4}}) (async) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000400)={0xb, 0x102, 0x1, {0x2, 0x3bc, 0x5, 0x4}}) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) sendmmsg(r2, &(0x7f0000000000)=[{{&(0x7f0000000100)=@isdn={0x22, 0x9, 0x1d, 0xfb, 0xd}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000a00)="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", 0x1000}, {&(0x7f0000000580)="83399ed51cf1d83f85f14ecc605cd821c352f2108d9284eb2303dbc83201c7be7a87021ac8d2144055418f6862b1959a792971b5177491d0fe81a8a5b57e894fc91694dfcf51f886eb270c65e7a995f34cdef29b798ce7802a26ad6262eea0f82f061cb863cfb6b2f36fbf6d4148d67643e0e30624c1ddde56720a6490f1164ca2b7296767de98fcf152294bf5a4894336", 0x91}, {&(0x7f0000000080)="d0f4a6805545a97b209b530c32e5018af54d", 0x12}, {&(0x7f00000002c0)="da7c458845aab737cf68a8541b9024239055388152eb358a1cdeb3a3d4247a5e00a0e19945da6bbe735ba6878727f809dc55593a4590d83322a249287155fdf6e91e6c5d2b6f1228cc7c18f9e7481dd7d93714fdd6853059be2b8eaee61f472baa2e846e43a331c5b63bec028d879e286f95bdaf88266cba57f870ab0d59640755157c263d654b5da285cbad93f438944052c059cd6dc1d56845f98e0baa9ea32db07cca2015bc6a71190ed3f7a83c68d0d503e228f655e664f105e58a5aa095fc3346f983f4c06a81e806a6e0c18a0322fdb65ce1fbc2bfb383705f6e8449d3a0aeef37c93728e091ff10c786c81b0ca518f8", 0xf3}], 0x4, &(0x7f0000000740)=[{0x2c, 0x1, 0x7, "a3953b39c8a193268bd15bcf110ef1a24e1dddda070ea695a79042f66511b9"}, {0x88, 0x10e, 0x10001, "6c3e28cc5a169b1bbb5c1991bbc4c307ea546c84d96997ee69d3d84b4c2990b5609ddd5da2f5c31c2c60611db0f3cf8abd9df438adae93d11c1651bc1e3447ae3d141231b69e8b924bbcc046cfab87f05484945ca044d98a0ffb7a109e0f6f50c0cb6d6afb7123b9cc0c1e247316689fea408ae07fd563f5bb"}, {0xac, 0x109, 0xfffffff0, "c4702482572f6b7cc9469ed9d8a666bbe852eeb44c02c599214fd4860a86b6cfea90a175a5aa5f93b1555306347fc951d70e65f7288d15c160364ab8d3c3058ab46df746ea633f99d97a18536c413d26dda176ba86db39b23a5be652ba1a8759419c52397ac1b7c5a89ebc2cea2fb5f5412d6b6c8cfac999825974f82ccf79bde82e5c453a113e92c902f4f44042942d2bdc7104eb82df63d693fc90d5"}, {0x40, 0x117, 0x0, "4eb48603271bd1381f3b4b61d71899ec189b24a54dc217c902e61423084cdbd9fce7eb82628e7132567f25d725277eba2b"}], 0x1a0}}, {{&(0x7f0000000200)=@sco, 0x80, &(0x7f00000006c0), 0x0, &(0x7f0000001a00)=[{0x2c, 0x112, 0x73, "d7c3f6b9359e736b59173509e14658cf3ac07aecff7b6b0b104d8807771dfde4"}, {0x80, 0x11, 0xe1fc, "0d83c86d97bd4f67811845f08688935425bf15c80dcb98ca98e682ff85181dec2b3419b58449a07327bf9e2310cdc73dcfe7720224b48b9487f914b5262b01e53c6fd19e9e46864a67f790fa651774166ed40661798ca6efc6a81f014c41b1c4f15977f4f61e56b3fd803f29c2119538f4440d0e"}, {0x100c, 0x11, 0x0, "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"}], 0x10b8}}], 0x2, 0x2040800) fcntl$setsig(r1, 0xa, 0x13) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='ip6gre0\x00', 0x10) sendmmsg(r3, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="7ef033", 0x3}], 0x1}}], 0x1, 0x20000000) (async) sendmmsg(r3, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="7ef033", 0x3}], 0x1}}], 0x1, 0x20000000) fcntl$setlease(r1, 0x400, 0x0) (async) fcntl$setlease(r1, 0x400, 0x0) gettid() (async) r4 = gettid() timer_create(0x2, &(0x7f000049efa0)={0x0, 0x7, 0x4, @tid=r4}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x200000, &(0x7f0000000440)={[{@nojournal_checksum}, {@delalloc}, {@errors_remount}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@bh}, {@mblk_io_submit}, {@usrquota}, {@noauto_da_alloc}]}, 0xfa, 0x57a, &(0x7f00000013c0)="$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") timer_delete(0x0) (async) timer_delete(0x0) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r5 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r5, 0x10d, 0xbf, &(0x7f0000000000), &(0x7f0000000280)=0x1a) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480), r1) sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, r6, 0x4, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x7}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d0}, 0x40880) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 3m16.699821999s ago: executing program 5 (id=3027): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000001c0)=0x7ff, 0x4) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='htcp\x00', 0x5) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x16) sendto$inet(r0, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000075203040f70a"], 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 3m13.138479304s ago: executing program 5 (id=3044): r0 = io_uring_setup(0x67bb, &(0x7f00000000c0)={0x0, 0x0, 0x3000}) io_uring_enter(r0, 0x0, 0xcbffffff, 0xf, &(0x7f0000000000), 0x18) (fail_nth: 1) 3m12.030655568s ago: executing program 5 (id=3047): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)={0x104, r2, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x53}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xc}, @NL80211_ATTR_SCAN_SSIDS={0x68, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xb, 0x0, @random="f617bcfea811f5"}, {0xd, 0x0, @random="882d8e91dfc5171c97"}, {0x5, 0x0, @random="d7"}, {0x19, 0x0, @random="539f007e4be5e5c6353af8cb24fe5fef9898ca9677"}, {0xa, 0x0, @default_ibss_ssid}]}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x8, 0x3}}, @NL80211_ATTR_SCAN_SUPP_RATES={0x58, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x54, 0x0, "d14acfa1826df9e31983068abca16154770d088a4410d341268359d95508afdabbafca3ec53a8c9462a12c502e48774e2ec26e4a6796e7e219426d988b20fad2ccd5278c2824c43f68ba37a75dbb4d00"}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x84}, 0x6801) write(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 3m10.934429209s ago: executing program 5 (id=3052): r0 = syz_open_dev$amidi(&(0x7f0000000480), 0x2, 0x80042) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 3m10.17463594s ago: executing program 5 (id=3057): r0 = syz_open_dev$amidi(&(0x7f0000000480), 0x0, 0x80042) r1 = dup(r0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r3], &(0x7f0000000180), 0x0, 0x0}) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x80000, 0x4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r5, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@multicast2, 0x4e20, 0x0, 0x800, 0x0, 0x2}, {0x7}, {}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x2b}, 0x0, @in6=@private1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x200000}}, 0xe4) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)=@flushsa={0x14, 0x1c, 0x1, 0x0, 0x0, {0xff}}, 0x14}}, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r7}}) 2m54.876959608s ago: executing program 42 (id=3057): r0 = syz_open_dev$amidi(&(0x7f0000000480), 0x0, 0x80042) r1 = dup(r0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r3], &(0x7f0000000180), 0x0, 0x0}) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x80000, 0x4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r5, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@multicast2, 0x4e20, 0x0, 0x800, 0x0, 0x2}, {0x7}, {}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x2b}, 0x0, @in6=@private1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x200000}}, 0xe4) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)=@flushsa={0x14, 0x1c, 0x1, 0x0, 0x0, {0xff}}, 0x14}}, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r7}}) 6.090177079s ago: executing program 1 (id=3737): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x109) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={0x0, &(0x7f00000002c0)=[0x8fff5], 0x0, 0x0, 0x1, 0x1}}, 0x3c) r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) ftruncate(r0, 0x9) 5.602462377s ago: executing program 3 (id=3738): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000400)={'wpan0\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002bbd7000fddbdf252000000008000300", @ANYRES32=r2, @ANYBLOB="54002d8005000100000000000500040000000000080002"], 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 5.468901235s ago: executing program 8 (id=3739): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000400)={'wpan0\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002bbd7000fddbdf252000000008000300", @ANYRES32=r2, @ANYBLOB="54002d8005000100000000000500040000000000080002"], 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x84) (fail_nth: 1) 5.385093109s ago: executing program 1 (id=3741): creat(&(0x7f0000000040)='./file0\x00', 0x199) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$inet_mptcp(0x2, 0x1, 0x106) socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f0000000240)={0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @private2}, 0x1c) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x2, 0x3, 0x3000, 0x2000, &(0x7f0000675000/0x2000)=nil}) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0xa, 0x300) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/packet\x00') pread64(r3, &(0x7f0000000800)=""/254, 0xfe, 0xffffffff) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15) socket(0x1, 0x803, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x50, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={r0, 0x20, &(0x7f00000001c0)={&(0x7f0000000400)=""/78, 0xffffff63, 0x0, &(0x7f00000000c0)=""/17, 0x1d}}, 0x10) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) 5.348644892s ago: executing program 4 (id=3742): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0x4, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x6}, {0xffff, 0xfff1}, {0x10}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x7}, @TCA_FQ_PIE_LIMIT={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x8040) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x8000) 4.766069799s ago: executing program 3 (id=3743): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00"/13], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r5) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r3, @ANYBLOB="01000400000000000000010000000c00060001000000000000000c00020000000000000000007c00078078"], 0xa8}, 0x1, 0x0, 0x0, 0x20044895}, 0x0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r3, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000400)={'wpan0\x00', 0x0}) r8 = socket(0x10, 0x3, 0x0) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000340), r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r1, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="00042ade3d1d91a22c8dc2abb217c6bd7000fbdbdf2505000094fd02cc00a599063cfe80000000000000000900000000003d1d62758aa1944ec8fe96d9f432a8dd18901ca345a52492b7a4c5d50092f6756b009212159ab0e20788a130a5283de4ee74b6e2c0591aca9cbf6784c492c2d95af8a68c883e0a19f36c46c3f5f1bc435a801ef9a6d74da48bb74cb03634985d2f03af16df3ff599a79473c1286884d03a2f59cca717ecebcdbddac2981af8a598a1f398d206f3dd4cc4c20679430b787ea8e0b3a5615818219b7ff0549453088f171796039d9ff2edf0d90a0cd66e2259ec9d7069d94241a1"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000006800010025bd7000000000000200000000000000060007000300000008000500", @ANYRES32=r10, @ANYBLOB="0c000880"], 0x34}}, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002bbd7000fddbdf252000000008000300", @ANYRES32=r7, @ANYBLOB="54002d8005000100000000000500040000000000080002"], 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 4.677474673s ago: executing program 4 (id=3744): r0 = socket$inet(0x2, 0x1, 0x0) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xa83b, 0x10, 0x2}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r0, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 4.505851747s ago: executing program 8 (id=3745): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000080)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, 0x0, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000e40)={0x1, 0x0, [{0x0, 0xf3, &(0x7f00000008c0)=""/243}]}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) unshare(0x64000600) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 4.165612282s ago: executing program 6 (id=3746): r0 = syz_open_dev$amidi(&(0x7f0000000000), 0x2, 0x2801) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0205710, &(0x7f00000000c0)={0x1, 0x3444, 0x5, 0x0, 0x80000000}) 3.981013968s ago: executing program 1 (id=3747): r0 = socket$inet(0x2, 0x1, 0x0) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xa83b, 0x10, 0x2}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r0, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) 3.888834144s ago: executing program 3 (id=3748): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)={0x134, r2, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x53}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xc}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x8, 0x3}}, @NL80211_ATTR_SCAN_SUPP_RATES={0xf0, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x99, 0x0, "d14acfa1826df9e31983068abca16154770d088a4410d341268359d95508afdabbafca3ec53a8c9462a12c502e48774e2ec26e4a6796e7e219426d988b20fad2ccd5278c2824c43f68ba37a75dbb4d00e3c08542608613c589619093118805573b26b805abff8b255f95e92fbcc39764ad8775532e4079fe406ac83ac6d1342d317250d431f2f114e2eb0693b28459d1e513a0f739"}, @NL80211_BAND_5GHZ={0x4f, 0x1, "221dd1277bb0ed06a7656a6e9fe5450df2f94e7c09a142e4e2b2eecbb1f6fd30dbb46234d8da3c6067c13757a184b5cd1c16b2d6f448098ce035706ec94c2b94cf9fa44f92481174760198"}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x84}, 0x6801) write(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f40600", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 3.633925654s ago: executing program 6 (id=3749): syz_open_dev$vim2m(&(0x7f0000000080), 0x40007, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r1}, 0x10) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) shutdown(r2, 0x2) 3.320122915s ago: executing program 8 (id=3750): r0 = socket(0x80000000000000a, 0x80000, 0x9e1) r1 = syz_open_dev$midi(&(0x7f0000000000), 0xffffffff, 0x20000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000fddbdf250d000000180001801400020076657468315f766972bbe174a796dde6b21f25dc48c826cf93745f7769666900"], 0x2c}}, 0x40080) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r4, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002800)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000000b010400000000000000000200000a088002400000000008000340000000000d004100727066696c74657200000000d96e6cc85955e763b129f8e0af5c2b96b5f1e22c7032d28ed96ad5eeb9fde5431da61f1004167eab46edb6634778a887337a47064e170901344c009d1cb873a09a3158863a8d9ecadc4e76689cf412e3d701771acecea3e19b23fc9bc55c4daaa7a0e4092893b4b7e120a87ad479f5d7e9c60ea40206e7c1f7108d4784008902f923914236f1602a753bdcee3f8b12bf1fe7870b82aa33ab98e2e815ba43b5a9b1f9f243924a"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4040010) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r1, 0x810c5701, &(0x7f0000000180)) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000040c0001800600060086dd0000040502"], 0x528}}, 0xc000) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ifreq(r6, 0x8942, &(0x7f0000000080)={'geneve0\x00', @ifru_map={0x0, 0xff, 0x8001, 0x2, 0x5, 0x9}}) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="747261ee733d6664", @ANYBLOB="2c63616368653d6c6f6f73c18a2da3616e733d66"]) r7 = socket(0x2, 0x80805, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r8) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r11, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="00000001010000005829a4807e392f9f", @ANYRES16=r9, @ANYRESDEC=r5, @ANYRES32=r10, @ANYBLOB="1400060064756d6d7930000000000000000000001400040076657468315f746f5f626f016400000005005300010000000800050004"], 0x54}}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0xc064}, @IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000050}, 0x0) sendmmsg$inet(r12, &(0x7f0000000a00)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000440)}}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r7, 0x84, 0x1c, &(0x7f00000014c0), &(0x7f0000001500)=0x4) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e22, 0x0, @private2}}}, 0x104) mkdir(&(0x7f0000000480)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000007c0)='usrquota') syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r7) chdir(&(0x7f0000000100)='./file1\x00') open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x766c618eb221466a) 3.124269608s ago: executing program 4 (id=3751): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x109) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={0x0, &(0x7f00000002c0)=[0x8fff5], 0x0, 0x0, 0x1, 0x1}}, 0x3c) r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) ftruncate(r0, 0x9) 3.049071573s ago: executing program 3 (id=3752): listxattr(&(0x7f0000000140)='./file1\x00', &(0x7f00000002c0)=""/166, 0xa6) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1008082, &(0x7f00000001c0)={[{@nodioread_nolock}, {@nolazytime}, {@abort}, {@errors_continue}, {@dioread_nolock}, {@jqfmt_vfsv0}, {@nomblk_io_submit}, {@nobarrier}]}, 0x4, 0x5ee, &(0x7f0000000f00)="$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") bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0xf, &(0x7f0000000740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x10000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x1b4098541851ee62}}}, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000940)={0x2, 0x8, 0xfffffffe, 0x10000}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000980), 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r1}, 0x10) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) 3.048230913s ago: executing program 1 (id=3753): r0 = openat$nci(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) write$nci(r0, &(0x7f0000000880)=ANY=[], 0x5b) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000011c0)=@delchain={0x8cc, 0x65, 0x2, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0x6}}, [@filter_kind_options=@f_route={{0xa}, {0x89c, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x8, 0x9}}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_POLICE={0x878, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x3, 0x3, 0xffffffff, 0x7, 0x6, 0x1, 0x7, 0xfff, 0x2, 0x80000000, 0x10001, 0xf33ba8d, 0x5, 0x7, 0xffffffff, 0x101, 0x4, 0x7f, 0x1, 0x8, 0x0, 0x6, 0x200, 0x5, 0x4, 0x5, 0x3ff, 0x0, 0x8, 0x3, 0x5, 0x2, 0x6, 0x34, 0x3, 0xfffff000, 0x3, 0x1, 0x3, 0x80, 0xb510, 0x0, 0x7, 0x14b1, 0x8dc, 0xfffffffc, 0x3, 0x5, 0x2, 0x400, 0x5, 0x0, 0x1, 0x1, 0xa, 0xfffffff7, 0x9, 0x7, 0x2, 0xe, 0x0, 0xfffffffc, 0x401, 0xf7f, 0x81, 0x80a, 0x1, 0x17, 0x952, 0x7, 0x9, 0x400, 0xc9e2, 0x5, 0x6, 0x400, 0x0, 0x4, 0x7f, 0x2, 0x1000, 0x7, 0x10001, 0x10, 0x1, 0x5f6f, 0x53d, 0x1, 0x8, 0x1, 0xe, 0x5b16, 0x7ff, 0x1c, 0xffff, 0xe36, 0x200, 0x3, 0x0, 0x2a, 0x3, 0x2, 0x2, 0x2, 0x7fff, 0x800, 0x7, 0x4, 0x8, 0x3, 0x2, 0xfff, 0x401, 0x72ec, 0x80, 0xffff, 0xfffffffd, 0x3, 0x40, 0x4, 0x7, 0x3, 0x6, 0xa51, 0x4d, 0x6, 0xffffff81, 0x9723, 0xffffffff, 0x2, 0x0, 0x3, 0xf, 0x401, 0x4, 0x3, 0x0, 0x8, 0x21e, 0x3, 0x4, 0x1, 0x8, 0x0, 0x7, 0x8, 0xaeed, 0x9, 0x5, 0x4, 0xe, 0x10000, 0x10000, 0x3, 0x7, 0xffffffff, 0x2, 0x1, 0x1000, 0x44f, 0x0, 0xc9d6, 0x2, 0x3, 0xd9, 0x8, 0x1ff, 0x100, 0x1, 0x8000, 0xa, 0xffff, 0xb, 0xafc, 0x400, 0x4, 0x8, 0x9, 0x7, 0x9, 0x1000, 0x2, 0x7f, 0x6, 0x1, 0x4392, 0xfffffc01, 0xd, 0x7, 0x7, 0x8, 0x7fffffff, 0x6, 0x2, 0x80000001, 0xfffff801, 0x2, 0x3, 0x587, 0x5, 0x0, 0x4, 0x8, 0x7, 0x3, 0x9, 0x4, 0x0, 0x7, 0x4, 0x1, 0xc13, 0x2, 0x2, 0x1, 0xb, 0x7f, 0x1, 0x6, 0x6, 0xc, 0x1, 0x0, 0x8, 0x9, 0xe00, 0xfff, 0x8001, 0xfffffff7, 0x3dd, 0x0, 0x72, 0xe0000000, 0x4, 0x0, 0xa0a, 0x4, 0x1, 0x0, 0x2f0a5ab1, 0x5, 0x18, 0x4, 0x5, 0x0, 0x8, 0x6, 0x3, 0x0, 0x3, 0x1, 0xfffff001, 0x81, 0xc, 0x7]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x6, 0x5, 0x5, 0x8001, {0x2, 0x0, 0xe411, 0x8000, 0x400, 0x1}, {0xd, 0x1, 0x0, 0x7, 0x800, 0x3}, 0x7, 0x2, 0x6d}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x6, 0x7, 0x3, 0x7, 0x2, 0xf7, 0x5e, 0x100, 0x1, 0xa0000, 0xd074, 0xab19, 0xec8, 0x5, 0x5, 0x7f, 0x7, 0xa, 0x1, 0x1, 0x0, 0x8, 0x5, 0xa1, 0x5, 0x1ea3, 0xd2b, 0x77a5, 0x8, 0x80000000, 0x0, 0x2, 0x3, 0x10000, 0xd33, 0x80, 0x1, 0x80000001, 0xfff, 0x0, 0x401, 0x7, 0x8, 0x5, 0x5, 0xaf, 0x2, 0x4, 0x5, 0xd, 0x0, 0x1, 0xfffffffb, 0xa, 0x2caff9c7, 0x80000001, 0x4, 0x7fffffff, 0x8, 0x8000, 0x3ff, 0xd2fe, 0x7c, 0x5, 0x3, 0x0, 0x6, 0xcb0e, 0x19, 0x4, 0x8, 0xe14e, 0x67c, 0x203, 0x0, 0x2, 0xffffff26, 0x1, 0x3ff, 0x5d9, 0xffffffff, 0x1, 0x3, 0x7, 0x7, 0xff, 0x80, 0xb11e, 0x1ff, 0xfffff000, 0x6, 0x9, 0x3, 0x8001, 0x450f, 0x2, 0x7, 0x800, 0x3ff, 0xd0, 0x5, 0x7, 0xc, 0x77, 0x0, 0x10000, 0xffffff01, 0x6, 0x8, 0x3, 0xb9, 0xfffffff7, 0xf, 0x2, 0x4, 0x0, 0x2, 0x3, 0xe, 0x87e, 0x4, 0x52f, 0x1, 0x10001, 0xfff, 0x2, 0x4, 0xc, 0x3, 0x6, 0x4, 0x0, 0x10001, 0x2, 0x4dd4, 0x66d, 0x9, 0x8, 0x6, 0xfff, 0xa, 0x9e9, 0x3, 0x95b0, 0x2, 0x8, 0x7, 0x80, 0x8d, 0x0, 0x3, 0x2, 0x1, 0x400, 0x5, 0x81, 0xbbdd, 0x0, 0x5, 0x81, 0xffffffff, 0x1, 0x8, 0xd, 0x5, 0xffffff7f, 0x2, 0x6, 0x3, 0x6, 0x10, 0x7, 0x2, 0x2, 0xd4, 0x3, 0x4, 0x4, 0x80000001, 0x1, 0xffffffff, 0x3, 0x9, 0x3, 0x195, 0xfffffffa, 0x1, 0xcb, 0xffff, 0x30, 0x0, 0x4f, 0x5, 0x6, 0x5866b934, 0x401, 0x9d7f, 0x4, 0x4, 0x2, 0xd, 0x8, 0x7, 0xfffffff9, 0x10, 0x0, 0x9, 0x0, 0xfffffffe, 0x5, 0x0, 0x40000000, 0x8, 0xde, 0x7, 0x86, 0x79, 0x3, 0x4, 0x9, 0x9, 0x7fff, 0x7, 0xe4e, 0x6, 0x2, 0x6, 0x9, 0x0, 0x8, 0x4, 0x2, 0x10001, 0x8a01, 0x5, 0x574f, 0x5, 0x5, 0x0, 0x6, 0x4d, 0x7, 0x2, 0x80000001, 0x101, 0xfffffffa, 0x7, 0x7, 0x9, 0x4, 0x1, 0x8, 0x8, 0x1, 0x165]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x10001}, @TCA_POLICE_RESULT={0x8, 0x5, 0x80}]}]}}]}, 0x8cc}, 0x1, 0x0, 0x0, 0x81}, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x14, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x9) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e22, @remote}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000001000000280001801400040007000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) openat$tcp_mem(0xffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, &(0x7f0000000580)={&(0x7f0000000140)={{@local}, {@my=0x0, 0x6}, 0x400, "73cdae50b9db11716ab6e8582d0d48d4b92bd91ef1a3f2ae24217370d7b11c59aa111ddb12c630d70f6baaaf3a77df792af7f582a7a5f87b8214005040bc4390b51862da2c910771d7dcef8d94e964044e977d396b0282e8c92f0c9a6e4129a6544c2a6eff4683a55563b8a2ea68d39888f01b25786560ea8846df48f18ddc654015e8b50957fe58dab1d9897ff1110b8ca25e93ff8158ae5747156a016acb56deb62e350c57d8cea5b1d18cf0ebbca7d5c3897822192b6dbaf5ac14ed3b82f48e77017b329c0fed2605fded250e9c23aafd228bb0c1adaba5f3e06efad17629495cf8b81b637641be2f1caf89a0ee0d61cbc2037f73f2865ef3dbc28967ff6154755052acab82ecdeade74e9d2db4b82769559550be14557bbb90a36634ee8c201d8b403092a5c97c0132a71cd97841a0a6c06894e3080c528da7e7aebc48214b50f29a912fd2e00fd85d2a2593bda350fbc25367983e94029d0c4a854db8f3ce455dfbf7436b18d6b42102ce5848b2008c69f543adfa51631dc46ab4788ff8919f1477cd899fa4791c499d77ff3df828f248cb585846c344845183328ce52aaec8f4ade52ec48e3698ad7ddc3bfb8e71bae5cbdb274696499ec3f69612450fb60faf15757071e26d0bcc36ad9e38d8bdb1a74cb71a994eb145bd5ff78b1669c76d4a5604a60db6b3c95fabf08aa255d39aea59e418fcc09735b3373ed6ca69e5d7311c4e9b6116a61aa0e4ed02822a946c62953144a2cda72376fb2422012c5c7329a5fd7ea53f8eb7ccb3ac2194ddcf73efb04a1d64826312b7d43691f037f2b6a78f31f09ee76859e6cc34c87698dc71b2e3064696e05a254d232fab043170ff4b7c2f780aa84aeaf53958cd22711fa8644f9ee9f18f3a4a24f9b3ebb2f3c31d677cbb748409bc0eccfee194f2baef8721bb1dc60421b97a6d8959ba90f2118bcc745c60ca1e9f3412e66c969134c12c025faf67168ebe42331cbf05e250db9b28e4115fcc9cfa0141ad5f6aabceffd135277ad55af9294d53bdc38a0479eda566b1a3b67373ff8ace3c500897a30b260149d75d5465fec8336015bce0800c01cff6b0bde6a27168c1a422fb7e9f2c6f5053357a081c0c522f8d1f70f610a195e795314132c9d2a5109b09c145ac2a7fffd967aa294a336e25c784224ade3ac72b0b14c05f23b17fc14075259e5202b4ba26022477fddb441b7033342acb0e2dc35e8e8932748d4273ea50e4632c9bc6959b3a43ce8563da8e5c6e475a428fabe894e244b26e916cf141d22b2d53998486fb60c380d79764f67bbb2ab63d0ae222b3ebefa614fa16a4921d175de1edd4de330d9af4ccbbab7f9734248a60791f27f9a31b80ec42e045027407b8e2dd44906c920bb130b9be6bf526ee633c6d144903b11979d31573ebcabd01822c6b3571be0aea79b7f8510e01c9363346"}, 0x418, 0x4f4}) r7 = socket(0x10, 0x803, 0x0) sendto(r7, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f00000037c0), 0x0, 0x0, &(0x7f0000003700)={0x77359400}) 2.758241531s ago: executing program 6 (id=3754): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0x4, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x6}, {0xffff, 0xfff1}, {0x10}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x7}, @TCA_FQ_PIE_LIMIT={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x8040) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x8000) 2.552234501s ago: executing program 4 (id=3755): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000001a00)={@val={0x8, 0x800}, @val={0x5, 0x0, 0x2, 0x0, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x3, 0x52, 0x68, 0x0, 0x7f, 0x6, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x22}}, {{0x4e24, 0x4e23, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x1ff, 0x0, 0x7}, {"e7007fa6a95d8389f20c032c9cbe9e7e796dd4e98336de601228d4d46e9c54e04e96ecb886d4cd525c4a"}}}}, 0x60) (fail_nth: 1) 2.192327447s ago: executing program 8 (id=3756): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)={0x10c, r2, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x53}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xc}, @NL80211_ATTR_SCAN_SSIDS={0x70, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0x11, 0x0, @random="f617bcfea811f597b218b15e9c"}, {0xd, 0x0, @random="882d8e91dfc5171c97"}, {0x5, 0x0, @random="d7"}, {0x19, 0x0, @random="539f007e4be5e5c6353af8cb24fe5fef9898ca9677"}, {0xa, 0x0, @default_ibss_ssid}]}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x8, 0x3}}, @NL80211_ATTR_SCAN_SUPP_RATES={0x58, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x54, 0x0, "d14acfa1826df9e31983068abca16154770d088a4410d341268359d95508afdabbafca3ec53a8c9462a12c502e48774e2ec26e4a6796e7e219426d988b20fad2ccd5278c2824c43f68ba37a75dbb4d00"}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x84}, 0x6801) write(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2.188076113s ago: executing program 3 (id=3757): creat(&(0x7f0000000040)='./file0\x00', 0x199) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$inet_mptcp(0x2, 0x1, 0x106) socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f0000000240)={0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @private2}, 0x1c) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x2, 0x3, 0x3000, 0x2000, &(0x7f0000675000/0x2000)=nil}) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0xa, 0x300) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/packet\x00') pread64(r3, &(0x7f0000000800)=""/254, 0xfe, 0xffffffff) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15) socket(0x1, 0x803, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x50, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={r0, 0x20, &(0x7f00000001c0)={&(0x7f0000000400)=""/78, 0xffffff63, 0x0, &(0x7f00000000c0)=""/17, 0x1d}}, 0x10) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) 1.881410439s ago: executing program 4 (id=3758): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f00000000c0)={0x17c04, r0, 0xe, 0xfff, 0x800000000, 0x5}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000c00000000000000008500000007000000040000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="44e2c8b6", @ANYRES16=r5, @ANYBLOB="010000000000000000000c0000000c0003800400010004000500180001801400020076657468315f746f5f68737200000000"], 0x38}}, 0x0) prctl$PR_SCHED_CORE(0x4d, 0x1, 0x0, 0x0, 0x0) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x38, 0x7ac5}, &(0x7f0000bbdffc)) write$tun(r1, &(0x7f0000001a00)={@val={0x8, 0x800}, @val={0x5, 0x4, 0x2, 0x0, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x3, 0x52, 0x68, 0x0, 0x7f, 0x6, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x22}}, {{0x4e24, 0x4e23, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x1ff, 0x0, 0x7}, {"e7007fa6a95d8389f20c032c9cbe9e7e796dd4e98336de601228d4d46e9c54e04e96ecb886d4cd525c4a"}}}}, 0x60) 1.821277277s ago: executing program 6 (id=3759): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) r1 = syz_open_dev$amidi(&(0x7f0000000000), 0x2, 0x2801) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0205710, &(0x7f00000000c0)={0x1, 0x3444, 0x5, 0x0, 0x80000000}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @in={0x2, 0x0, @multicast1}, @in={0x2, 0x4e24, @dev}], 0x58) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58"}, 0x28) sendto$inet6(r2, 0x0, 0x0, 0x8080, 0x0, 0x0) 1.491249833s ago: executing program 8 (id=3760): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000080)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, 0x0, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000e40)={0x1, 0x0, [{0x0, 0xf3, &(0x7f00000008c0)=""/243}]}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) unshare(0x64000600) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 1.35318942s ago: executing program 1 (id=3761): r0 = openat$nci(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) write$nci(r0, &(0x7f0000000880)=ANY=[], 0x5b) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000011c0)=@delchain={0x8cc, 0x65, 0x2, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0x6}}, [@filter_kind_options=@f_route={{0xa}, {0x89c, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x8, 0x9}}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_POLICE={0x878, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x3, 0x3, 0xffffffff, 0x7, 0x6, 0x1, 0x7, 0xfff, 0x2, 0x80000000, 0x10001, 0xf33ba8d, 0x5, 0x7, 0xffffffff, 0x101, 0x4, 0x7f, 0x1, 0x8, 0x0, 0x6, 0x200, 0x5, 0x4, 0x5, 0x3ff, 0x0, 0x8, 0x3, 0x5, 0x2, 0x6, 0x34, 0x3, 0xfffff000, 0x3, 0x1, 0x3, 0x80, 0xb510, 0x0, 0x7, 0x14b1, 0x8dc, 0xfffffffc, 0x3, 0x5, 0x2, 0x400, 0x5, 0x0, 0x1, 0x1, 0xa, 0xfffffff7, 0x9, 0x7, 0x2, 0xe, 0x0, 0xfffffffc, 0x401, 0xf7f, 0x81, 0x80a, 0x1, 0x17, 0x952, 0x7, 0x9, 0x400, 0xc9e2, 0x5, 0x6, 0x400, 0x0, 0x4, 0x7f, 0x2, 0x1000, 0x7, 0x10001, 0x10, 0x1, 0x5f6f, 0x53d, 0x1, 0x8, 0x1, 0xe, 0x5b16, 0x7ff, 0x1c, 0xffff, 0xe36, 0x200, 0x3, 0x0, 0x2a, 0x3, 0x2, 0x2, 0x2, 0x7fff, 0x800, 0x7, 0x4, 0x8, 0x3, 0x2, 0xfff, 0x401, 0x72ec, 0x80, 0xffff, 0xfffffffd, 0x3, 0x40, 0x4, 0x7, 0x3, 0x6, 0xa51, 0x4d, 0x6, 0xffffff81, 0x9723, 0xffffffff, 0x2, 0x0, 0x3, 0xf, 0x401, 0x4, 0x3, 0x0, 0x8, 0x21e, 0x3, 0x4, 0x1, 0x8, 0x0, 0x7, 0x8, 0xaeed, 0x9, 0x5, 0x4, 0xe, 0x10000, 0x10000, 0x3, 0x7, 0xffffffff, 0x2, 0x1, 0x1000, 0x44f, 0x0, 0xc9d6, 0x2, 0x3, 0xd9, 0x8, 0x1ff, 0x100, 0x1, 0x8000, 0xa, 0xffff, 0xb, 0xafc, 0x400, 0x4, 0x8, 0x9, 0x7, 0x9, 0x1000, 0x2, 0x7f, 0x6, 0x1, 0x4392, 0xfffffc01, 0xd, 0x7, 0x7, 0x8, 0x7fffffff, 0x6, 0x2, 0x80000001, 0xfffff801, 0x2, 0x3, 0x587, 0x5, 0x0, 0x4, 0x8, 0x7, 0x3, 0x9, 0x4, 0x0, 0x7, 0x4, 0x1, 0xc13, 0x2, 0x2, 0x1, 0xb, 0x7f, 0x1, 0x6, 0x6, 0xc, 0x1, 0x0, 0x8, 0x9, 0xe00, 0xfff, 0x8001, 0xfffffff7, 0x3dd, 0x0, 0x72, 0xe0000000, 0x4, 0x0, 0xa0a, 0x4, 0x1, 0x0, 0x2f0a5ab1, 0x5, 0x18, 0x4, 0x5, 0x0, 0x8, 0x6, 0x3, 0x0, 0x3, 0x1, 0xfffff001, 0x81, 0xc, 0x7]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x6, 0x5, 0x5, 0x8001, {0x2, 0x0, 0xe411, 0x8000, 0x400, 0x1}, {0xd, 0x1, 0x0, 0x7, 0x800, 0x3}, 0x7, 0x2, 0x6d}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x6, 0x7, 0x3, 0x7, 0x2, 0xf7, 0x5e, 0x100, 0x1, 0xa0000, 0xd074, 0xab19, 0xec8, 0x5, 0x5, 0x7f, 0x7, 0xa, 0x1, 0x1, 0x0, 0x8, 0x5, 0xa1, 0x5, 0x1ea3, 0xd2b, 0x77a5, 0x8, 0x80000000, 0x0, 0x2, 0x3, 0x10000, 0xd33, 0x80, 0x1, 0x80000001, 0xfff, 0x0, 0x401, 0x7, 0x8, 0x5, 0x5, 0xaf, 0x2, 0x4, 0x5, 0xd, 0x0, 0x1, 0xfffffffb, 0xa, 0x2caff9c7, 0x80000001, 0x4, 0x7fffffff, 0x8, 0x8000, 0x3ff, 0xd2fe, 0x7c, 0x5, 0x3, 0x0, 0x6, 0xcb0e, 0x19, 0x4, 0x8, 0xe14e, 0x67c, 0x203, 0x0, 0x2, 0xffffff26, 0x1, 0x3ff, 0x5d9, 0xffffffff, 0x1, 0x3, 0x7, 0x7, 0xff, 0x80, 0xb11e, 0x1ff, 0xfffff000, 0x6, 0x9, 0x3, 0x8001, 0x450f, 0x2, 0x7, 0x800, 0x3ff, 0xd0, 0x5, 0x7, 0xc, 0x77, 0x0, 0x10000, 0xffffff01, 0x6, 0x8, 0x3, 0xb9, 0xfffffff7, 0xf, 0x2, 0x4, 0x0, 0x2, 0x3, 0xe, 0x87e, 0x4, 0x52f, 0x1, 0x10001, 0xfff, 0x2, 0x4, 0xc, 0x3, 0x6, 0x4, 0x0, 0x10001, 0x2, 0x4dd4, 0x66d, 0x9, 0x8, 0x6, 0xfff, 0xa, 0x9e9, 0x3, 0x95b0, 0x2, 0x8, 0x7, 0x80, 0x8d, 0x0, 0x3, 0x2, 0x1, 0x400, 0x5, 0x81, 0xbbdd, 0x0, 0x5, 0x81, 0xffffffff, 0x1, 0x8, 0xd, 0x5, 0xffffff7f, 0x2, 0x6, 0x3, 0x6, 0x10, 0x7, 0x2, 0x2, 0xd4, 0x3, 0x4, 0x4, 0x80000001, 0x1, 0xffffffff, 0x3, 0x9, 0x3, 0x195, 0xfffffffa, 0x1, 0xcb, 0xffff, 0x30, 0x0, 0x4f, 0x5, 0x6, 0x5866b934, 0x401, 0x9d7f, 0x4, 0x4, 0x2, 0xd, 0x8, 0x7, 0xfffffff9, 0x10, 0x0, 0x9, 0x0, 0xfffffffe, 0x5, 0x0, 0x40000000, 0x8, 0xde, 0x7, 0x86, 0x79, 0x3, 0x4, 0x9, 0x9, 0x7fff, 0x7, 0xe4e, 0x6, 0x2, 0x6, 0x9, 0x0, 0x8, 0x4, 0x2, 0x10001, 0x8a01, 0x5, 0x574f, 0x5, 0x5, 0x0, 0x6, 0x4d, 0x7, 0x2, 0x80000001, 0x101, 0xfffffffa, 0x7, 0x7, 0x9, 0x4, 0x1, 0x8, 0x8, 0x1, 0x165]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x10001}, @TCA_POLICE_RESULT={0x8, 0x5, 0x80}]}]}}]}, 0x8cc}, 0x1, 0x0, 0x0, 0x81}, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x14, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x9) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e22, @remote}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000001000000280001801400040007000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) openat$tcp_mem(0xffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r6, 0x7ab, &(0x7f0000000580)={&(0x7f0000000140)={{@local}, {@my=0x0, 0x6}, 0x400, "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"}, 0x418, 0x4f4}) r7 = socket(0x10, 0x803, 0x0) sendto(r7, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f00000037c0), 0x0, 0x0, &(0x7f0000003700)={0x77359400}) 1.163647209s ago: executing program 6 (id=3762): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)={0x134, r2, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x53}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xc}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x8, 0x3}}, @NL80211_ATTR_SCAN_SUPP_RATES={0xf0, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x99, 0x0, "d14acfa1826df9e31983068abca16154770d088a4410d341268359d95508afdabbafca3ec53a8c9462a12c502e48774e2ec26e4a6796e7e219426d988b20fad2ccd5278c2824c43f68ba37a75dbb4d00e3c08542608613c589619093118805573b26b805abff8b255f95e92fbcc39764ad8775532e4079fe406ac83ac6d1342d317250d431f2f114e2eb0693b28459d1e513a0f739"}, @NL80211_BAND_5GHZ={0x4f, 0x1, "221dd1277bb0ed06a7656a6e9fe5450df2f94e7c09a142e4e2b2eecbb1f6fd30dbb46234d8da3c6067c13757a184b5cd1c16b2d6f448098ce035706ec94c2b94cf9fa44f92481174760198"}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x84}, 0x6801) write(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f40600", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 597.852387ms ago: executing program 4 (id=3763): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x51}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xcf88, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000000)='\t', 0xf4c, 0x0, 0x0, 0x0) 570.318866ms ago: executing program 6 (id=3764): listxattr(0x0, &(0x7f00000002c0)=""/166, 0xa6) syz_open_dev$vim2m(&(0x7f0000000080), 0x40007, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r1}, 0x10) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) shutdown(r2, 0x2) 448.935716ms ago: executing program 8 (id=3765): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x109) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={0x0, &(0x7f00000002c0)=[0x8fff5], 0x0, 0x0, 0x1, 0x1}}, 0x3c) r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) ftruncate(r0, 0x9) 170.254494ms ago: executing program 3 (id=3766): r0 = socket(0x80000000000000a, 0x80000, 0x9e1) r1 = syz_open_dev$midi(&(0x7f0000000000), 0xffffffff, 0x20000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000fddbdf250d000000180001801400020076657468315f766972bbe174a796dde6b21f25dc48c826cf93745f7769666900"], 0x2c}}, 0x40080) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r4, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002800)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000000b010400000000000000000200000a088002400000000008000340000000000d004100727066696c74657200000000d96e6cc85955e763b129f8e0af5c2b96b5f1e22c7032d28ed96ad5eeb9fde5431da61f1004167eab46edb6634778a887337a47064e170901344c009d1cb873a09a3158863a8d9ecadc4e76689cf412e3d701771acecea3e19b23fc9bc55c4daaa7a0e4092893b4b7e120a87ad479f5d7e9c60ea40206e7c1f7108d4784008902f923914236f1602a753bdcee3f8b12bf1fe7870b82aa33ab98e2e815ba43b5a9b1f9f243924a"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4040010) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r1, 0x810c5701, &(0x7f0000000180)) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000040c0001800600060086dd0000040502"], 0x528}}, 0xc000) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ifreq(r6, 0x8942, &(0x7f0000000080)={'geneve0\x00', @ifru_map={0x0, 0xff, 0x8001, 0x2, 0x5, 0x9}}) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="747261ee733d6664", @ANYBLOB="2c63616368653d6c6f6f73c18a2da3616e733d66"]) r7 = socket(0x2, 0x80805, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r8) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r11, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="00000001010000005829a4807e392f9f", @ANYRES16=r9, @ANYRESDEC=r5, @ANYRES32=r10, @ANYBLOB="1400060064756d6d7930000000000000000000001400040076657468315f746f5f626f016400000005005300010000000800050004"], 0x54}}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0xc064}, @IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000050}, 0x0) sendmmsg$inet(r12, &(0x7f0000000a00)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000440)}}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r7, 0x84, 0x1c, &(0x7f00000014c0), &(0x7f0000001500)=0x4) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e22, 0x0, @private2}}}, 0x104) mkdir(&(0x7f0000000480)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000007c0)='usrquota') syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r7) chdir(&(0x7f0000000100)='./file1\x00') quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000600, 0x0, &(0x7f00000001c0)={0x1, 0xfffffffffffffffc, 0x0, 0x6}) 0s ago: executing program 1 (id=3767): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r1 = socket$packet(0x11, 0x2, 0x300) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x8042, 0x0) syz_usb_connect(0x0, 0x4b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100003f9aab106d04f0080d5001020301090239000100001647090400000308066200090507000000000000", @ANYRES32=r2], 0x0) sendto$packet(r1, &(0x7f0000000300)="04", 0x1, 0x20008801, &(0x7f0000000100)={0x11, 0x88a8, 0x0, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}, 0x14) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r4 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x40400) ioctl$HIDIOCGDEVINFO(r4, 0x801c4803, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) setxattr$incfs_size(&(0x7f00000001c0)='./file0/bus\x00', &(0x7f0000000080), 0x0, 0x0, 0x3) syz_emit_ethernet(0x23bb, &(0x7f0000000ac0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}, @broadcast, @void, {@ipv6={0x86dd, @gre_packet={0xa, 0x6, "87df4c", 0x2385, 0x2f, 0x1, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[@fragment={0x62, 0x0, 0x1, 0x1, 0x0, 0x6, 0x66}, @srh={0x8, 0x10, 0x4, 0x8, 0x6, 0x40, 0x668, [@private2, @empty, @local, @mcast1, @remote, @empty, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @empty]}, @srh={0x2c, 0x8, 0x4, 0x4, 0xf9, 0x8, 0x45, [@private1, @remote, @dev={0xfe, 0x80, '\x00', 0x3a}, @empty]}, @hopopts={0x3c, 0x5, '\x00', [@ra={0x5, 0x2, 0x72a}, @hao={0xc9, 0x10, @mcast1}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00'}, @enc_lim={0x4, 0x1, 0x6}]}, @hopopts={0x1d, 0x14, '\x00', [@pad1, @calipso={0x7, 0x38, {0x0, 0xc, 0x80, 0x100, [0x4, 0x8, 0x5, 0x1, 0x7e93, 0x9]}}, @generic={0x3, 0x5f, "451716d38ba7c766b37295ef58392809c4f3c0f914c99871f38e45fe82267679f7ade20747e8f5e0af23e4f1dc806c147f2b24ec8957257f7b8b885382b04494bd493a88d3c475be86e51b55ff6446196135c00cb5b883f17cb7b05af754fd"}, @padn={0x1, 0x2, [0x0, 0x0]}]}, @srh={0x88, 0xe, 0x4, 0x7, 0x7, 0x78, 0x1, [@loopback, @empty, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, @mcast1]}, @dstopts={0x2, 0x3, '\x00', [@ra={0x5, 0x2, 0x2}, @ra={0x5, 0x2, 0x1}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x8}]}, @fragment={0xcfb36be00eedf5b3, 0x0, 0x8, 0x0, 0x0, 0x15, 0x66}, @srh={0x37b5988bcf2b975a, 0x4, 0x4, 0x2, 0x5e, 0x28, 0x8, [@private0, @private1={0xfc, 0x1, '\x00', 0x1}]}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x1000, 0x0, [], "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"}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [0x9, 0xff, 0x5], "82edb0c0e5773ad45bef15d6c054d08ec656d9cbcd9f6356628c26dfe567129a28f32732afcc05509d720361753f13b5bf04a2c1e03190b35982d383b80c3ac96350fae9cc7edd0404c65ccb13c43a82eaffbfb0c2cf04a53422875d07e9426f24d169a5"}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [0x1, 0x7ff, 0x9ac], "b011c534231f126ff8895911de68ce409319659e0f476b80d15bce5aae722fa81ee981313bed630c21bd9d2ce4762325aafe299753a6a777e6220bc4e5ddb8748c"}, {0x8, 0x88be, 0x4, {{0x5, 0x1, 0x1, 0x1, 0x0, 0x3, 0x2, 0x1}, 0x1, {0xfa5}}}, {0x8, 0x22eb, 0x4, {{0xf, 0x2, 0x2, 0x0, 0x1, 0x3, 0x4, 0x5}, 0x2, {0x43e, 0x4, 0x1, 0x7, 0x0, 0x0, 0x3}}}, {0x8, 0x6558, 0x3, "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"}}}}}}}, &(0x7f0000000180)={0x0, 0x2, [0xb4d, 0xd8c, 0x707, 0x373]}) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r5, 0xc010640c, &(0x7f0000000040)={0x10}) ioctl$BTRFS_IOC_FS_INFO(r4, 0x8400941f, &(0x7f0000000400)) kernel console output (not intermixed with test programs): name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1188.802521][T16352] Call Trace: [ 1188.802576][T16352] [ 1188.802631][T16352] __dump_stack+0x26/0x30 [ 1188.802822][T16352] dump_stack_lvl+0x1df/0x270 [ 1188.803008][T16352] dump_stack+0x1e/0x25 [ 1188.803172][T16352] should_fail_ex+0x7dc/0x8a0 [ 1188.803394][T16352] should_failslab+0x15b/0x200 [ 1188.803579][T16352] __kmalloc_cache_noprof+0xcb/0xed0 [ 1188.803770][T16352] ? kmsan_get_metadata+0x105/0x1b0 [ 1188.803928][T16352] ? alloc_pipe_info+0x14a/0xc50 [ 1188.804097][T16352] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1188.804265][T16352] ? kmsan_get_metadata+0x105/0x1b0 [ 1188.804443][T16352] alloc_pipe_info+0x14a/0xc50 [ 1188.804589][T16352] ? __rcu_read_unlock+0x6d/0xd0 [ 1188.804759][T16352] ? aa_file_perm+0x24c/0x18d0 [ 1188.804928][T16352] ? kmsan_get_metadata+0x105/0x1b0 [ 1188.805092][T16352] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1188.805271][T16352] splice_direct_to_actor+0x1174/0x1550 [ 1188.805413][T16352] ? __pfx_direct_splice_actor+0x10/0x10 [ 1188.805547][T16352] ? filter_irq_stacks+0x13f/0x190 [ 1188.805702][T16352] ? stack_depot_save_flags+0x35/0x7c0 [ 1188.805890][T16352] ? kmsan_get_metadata+0x105/0x1b0 [ 1188.806050][T16352] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1188.806205][T16352] ? kmsan_get_metadata+0x105/0x1b0 [ 1188.806368][T16352] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1188.806571][T16352] do_splice_direct+0x1e0/0x350 [ 1188.806716][T16352] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1188.806899][T16352] do_sendfile+0x9eb/0x1100 [ 1188.807140][T16352] __ia32_compat_sys_sendfile+0x385/0x4d0 [ 1188.807329][T16352] ? kmsan_get_metadata+0x105/0x1b0 [ 1188.807505][T16352] ? kmsan_get_metadata+0x105/0x1b0 [ 1188.807702][T16352] ia32_sys_call+0x30ca/0x42c0 [ 1188.807851][T16352] __do_fast_syscall_32+0xb0/0x110 [ 1188.808047][T16352] ? irqentry_exit_to_user_mode+0x82/0xa0 [ 1188.808223][T16352] do_fast_syscall_32+0x38/0x80 [ 1188.808386][T16352] do_SYSENTER_32+0x1f/0x30 [ 1188.808545][T16352] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1188.808711][T16352] RIP: 0023:0xf70ae539 [ 1188.808833][T16352] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1188.808982][T16352] RSP: 002b:00000000f507d55c EFLAGS: 00000206 ORIG_RAX: 00000000000000bb [ 1188.809109][T16352] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000004 [ 1188.809200][T16352] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000000000000000 [ 1188.809296][T16352] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1188.809372][T16352] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1188.809448][T16352] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1188.809554][T16352] [ 1189.603828][T16290] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1189.611336][T16290] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1189.639211][T16290] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1189.810284][T16290] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1189.817628][T16290] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1189.844059][T16290] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1189.965538][ T3784] hsr_slave_0: left promiscuous mode [ 1189.995388][ T5801] Bluetooth: hci3: command tx timeout [ 1190.007965][ T3784] hsr_slave_1: left promiscuous mode [ 1190.092298][ T3784] veth1_macvtap: left promiscuous mode [ 1190.098760][ T3784] veth0_macvtap: left promiscuous mode [ 1190.104941][ T3784] veth1_vlan: left promiscuous mode [ 1190.192427][T16361] netlink: 1624 bytes leftover after parsing attributes in process `syz.4.3225'. [ 1191.989498][T16290] hsr_slave_0: entered promiscuous mode [ 1192.010010][T16290] hsr_slave_1: entered promiscuous mode [ 1192.018994][T16290] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1192.033080][T16290] Cannot create hsr debugfs directory [ 1192.465989][T16373] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3231'. [ 1194.131732][T16290] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1194.216384][T16290] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1194.313800][T16290] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1194.380470][T16290] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1194.676978][T16405] netlink: 1624 bytes leftover after parsing attributes in process `syz.4.3242'. [ 1194.718314][ T5884] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1194.917767][ T5884] usb 7-1: Using ep0 maxpacket: 8 [ 1195.040593][ T5884] usb 7-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 1195.050761][ T5884] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1195.060208][ T5884] usb 7-1: Product: syz [ 1195.064689][ T5884] usb 7-1: Manufacturer: syz [ 1195.069519][ T5884] usb 7-1: SerialNumber: syz [ 1195.182867][ T5884] usb 7-1: config 0 descriptor?? [ 1195.415799][ T9] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1195.458953][T16290] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1195.584483][T16290] 8021q: adding VLAN 0 to HW filter on device team0 [ 1195.682983][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1195.691493][ T9] usb 4-1: can't read configurations, error -61 [ 1195.732811][T16400] loop6: detected capacity change from 0 to 512 [ 1195.746006][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 1195.753650][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1195.840255][T16400] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1195.858886][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 1195.866650][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1195.899516][ T9] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1195.973936][T16400] EXT4-fs error (device loop6): __ext4_fill_super:5502: inode #2: comm syz.6.3240: casefold flag without casefold feature [ 1196.062875][T16400] EXT4-fs (loop6): get root inode failed [ 1196.070441][T16400] EXT4-fs (loop6): mount failed [ 1196.203911][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1196.213626][ T9] usb 4-1: can't read configurations, error -61 [ 1196.221858][ T9] usb usb4-port1: attempt power cycle [ 1196.287683][T16400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1196.297104][T16400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1196.524649][T16400] affs: No valid root block on device nbd6 [ 1196.685833][ T9] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1196.773337][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1196.781547][ T9] usb 4-1: can't read configurations, error -61 [ 1196.833866][ T5884] usb 7-1: USB disconnect, device number 4 [ 1196.981074][ T9] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1197.081695][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1197.090582][ T9] usb 4-1: can't read configurations, error -61 [ 1197.108614][ T9] usb usb4-port1: unable to enumerate USB device [ 1197.836009][T16290] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1198.520215][T16436] netlink: 1624 bytes leftover after parsing attributes in process `syz.4.3253'. [ 1199.155971][T16441] FAULT_INJECTION: forcing a failure. [ 1199.155971][T16441] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1199.173316][T16441] CPU: 0 UID: 0 PID: 16441 Comm: syz.3.3255 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(undef) [ 1199.173472][T16441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1199.173552][T16441] Call Trace: [ 1199.173601][T16441] [ 1199.173655][T16441] __dump_stack+0x26/0x30 [ 1199.173858][T16441] dump_stack_lvl+0x1df/0x270 [ 1199.174095][T16441] dump_stack+0x1e/0x25 [ 1199.174281][T16441] should_fail_ex+0x7dc/0x8a0 [ 1199.174492][T16441] should_fail+0x2a/0x40 [ 1199.174674][T16441] should_fail_usercopy+0x2e/0x40 [ 1199.174894][T16441] copy_fpstate_to_sigframe+0xc4e/0x11a0 [ 1199.175114][T16441] ? copy_fpstate_to_sigframe+0x129/0x11a0 [ 1199.175325][T16441] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1199.175523][T16441] get_sigframe+0xc6a/0x1020 [ 1199.175715][T16441] ? kmsan_get_metadata+0x105/0x1b0 [ 1199.175943][T16441] ia32_setup_frame+0xff/0x19e0 [ 1199.176174][T16441] ? kmsan_get_metadata+0x105/0x1b0 [ 1199.176351][T16441] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1199.176521][T16441] ? kmsan_get_metadata+0x105/0x1b0 [ 1199.176690][T16441] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1199.176883][T16441] arch_do_signal_or_restart+0x698/0xbe0 [ 1199.177108][T16441] syscall_exit_to_user_mode+0x6c/0xb0 [ 1199.177279][T16441] __do_fast_syscall_32+0xbd/0x110 [ 1199.177454][T16441] ? syscall_exit_to_user_mode+0x8c/0xb0 [ 1199.177634][T16441] do_fast_syscall_32+0x38/0x80 [ 1199.177815][T16441] do_SYSENTER_32+0x1f/0x30 [ 1199.177998][T16441] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1199.178196][T16441] RIP: 0023:0xf70ae539 [ 1199.178301][T16441] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1199.178435][T16441] RSP: 002b:00000000f509e55c EFLAGS: 00000206 ORIG_RAX: 000000000000001a [ 1199.178568][T16441] RAX: 0000000000000000 RBX: 0000000000000020 RCX: 00000000000000f8 [ 1199.178652][T16441] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1199.178739][T16441] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1199.178826][T16441] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1199.178916][T16441] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1199.179034][T16441] [ 1200.186819][T16290] veth0_vlan: entered promiscuous mode [ 1200.280682][T16290] veth1_vlan: entered promiscuous mode [ 1200.658552][T16290] veth0_macvtap: entered promiscuous mode [ 1200.719348][T16290] veth1_macvtap: entered promiscuous mode [ 1200.821979][T16465] FAULT_INJECTION: forcing a failure. [ 1200.821979][T16465] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1200.840978][T16465] CPU: 0 UID: 0 PID: 16465 Comm: syz.3.3259 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(undef) [ 1200.841121][T16465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1200.841197][T16465] Call Trace: [ 1200.841245][T16465] [ 1200.841290][T16465] __dump_stack+0x26/0x30 [ 1200.841461][T16465] dump_stack_lvl+0x1df/0x270 [ 1200.841626][T16465] dump_stack+0x1e/0x25 [ 1200.841776][T16465] should_fail_ex+0x7dc/0x8a0 [ 1200.841981][T16465] should_fail+0x2a/0x40 [ 1200.842171][T16465] should_fail_usercopy+0x2e/0x40 [ 1200.842391][T16465] _copy_to_user+0x35/0x120 [ 1200.842586][T16465] simple_read_from_buffer+0x1b2/0x340 [ 1200.842760][T16465] proc_fail_nth_read+0x1d2/0x2c0 [ 1200.842965][T16465] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1200.843157][T16465] vfs_read+0x279/0xef0 [ 1200.843301][T16465] ? stack_depot_save_flags+0x35/0x7c0 [ 1200.843518][T16465] ? kmsan_get_metadata+0x105/0x1b0 [ 1200.843668][T16465] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1200.843837][T16465] __ia32_sys_read+0x1f9/0x4d0 [ 1200.843993][T16465] ia32_sys_call+0x184c/0x42c0 [ 1200.844112][T16465] __do_fast_syscall_32+0xb0/0x110 [ 1200.844289][T16465] ? irqentry_exit_to_user_mode+0x82/0xa0 [ 1200.844448][T16465] do_fast_syscall_32+0x38/0x80 [ 1200.844606][T16465] do_SYSENTER_32+0x1f/0x30 [ 1200.844760][T16465] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1200.844926][T16465] RIP: 0023:0xf70ae539 [ 1200.845015][T16465] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1200.845125][T16465] RSP: 002b:00000000f507d590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 1200.845245][T16465] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f507d620 [ 1200.845336][T16465] RDX: 000000000000000f RSI: 00000000f7412ff4 RDI: 0000000000000000 [ 1200.845415][T16465] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1200.845491][T16465] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1200.845569][T16465] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1200.845673][T16465] [ 1201.234034][T16290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1201.252423][T16290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1201.262625][T16290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1201.273504][T16290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1201.283756][T16290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1201.294517][T16290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1201.304766][T16290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1201.315562][T16290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1201.331566][T16290] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1201.414748][T16290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1201.425679][T16290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1201.436020][T16290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1201.446838][T16290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1201.460687][T16290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1201.472630][T16290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1201.482853][T16290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1201.493840][T16290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1201.509555][T16290] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1201.627809][T16290] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1201.637222][T16290] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1201.646493][T16290] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1201.660084][T16290] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1202.262118][T16474] loop6: detected capacity change from 0 to 1024 [ 1202.322741][T16474] hfsplus: Bad value for 'umask' [ 1203.963465][T16503] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3271'. [ 1203.973171][T16503] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3271'. [ 1204.283920][ T5884] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 1204.375992][ T5884] hid-generic 0000:0000:0000.0020: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1204.444743][T16508] loop6: detected capacity change from 0 to 1024 [ 1204.478469][T16508] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1204.509814][T16508] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1204.650497][T16508] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1205.091666][T16042] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1205.335128][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1205.348409][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1205.490586][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1205.499193][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1206.433434][T16527] FAULT_INJECTION: forcing a failure. [ 1206.433434][T16527] name failslab, interval 1, probability 0, space 0, times 0 [ 1206.447568][T16527] CPU: 0 UID: 0 PID: 16527 Comm: syz.3.3281 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(undef) [ 1206.447729][T16527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1206.447815][T16527] Call Trace: [ 1206.447870][T16527] [ 1206.447928][T16527] __dump_stack+0x26/0x30 [ 1206.448110][T16527] dump_stack_lvl+0x1df/0x270 [ 1206.448296][T16527] dump_stack+0x1e/0x25 [ 1206.448461][T16527] should_fail_ex+0x7dc/0x8a0 [ 1206.448684][T16527] should_failslab+0x15b/0x200 [ 1206.448875][T16527] __kmalloc_noprof+0x182/0x1310 [ 1206.449082][T16527] ? iovec_from_user+0xee/0x580 [ 1206.449274][T16527] ? kmsan_get_metadata+0x105/0x1b0 [ 1206.449456][T16527] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1206.449648][T16527] ? __pfx_kstrtoull+0x1/0x10 [ 1206.449804][T16527] iovec_from_user+0xee/0x580 [ 1206.449997][T16527] ? kmsan_get_metadata+0x105/0x1b0 [ 1206.450184][T16527] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1206.450380][T16527] __import_iovec+0x2a6/0xfa0 [ 1206.450590][T16527] ? stack_depot_save_flags+0x35/0x7c0 [ 1206.450789][T16527] ? kmsan_get_metadata+0x105/0x1b0 [ 1206.450962][T16527] ? kmsan_get_metadata+0x105/0x1b0 [ 1206.451163][T16527] import_iovec+0xb0/0xe0 [ 1206.451367][T16527] vfs_writev+0x1b3/0x1420 [ 1206.451550][T16527] ? filter_irq_stacks+0x49/0x190 [ 1206.451723][T16527] ? stack_depot_save_flags+0x35/0x7c0 [ 1206.451913][T16527] ? __fget_files+0x3b9/0x4a0 [ 1206.452079][T16527] ? kmsan_get_metadata+0x105/0x1b0 [ 1206.452264][T16527] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1206.452439][T16527] ? kmsan_get_metadata+0x105/0x1b0 [ 1206.452617][T16527] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1206.452817][T16527] do_writev+0x1b1/0x580 [ 1206.452994][T16527] ? kmsan_get_metadata+0x105/0x1b0 [ 1206.453198][T16527] __ia32_sys_writev+0x9c/0xf0 [ 1206.453375][T16527] ia32_sys_call+0x3f2a/0x42c0 [ 1206.453519][T16527] __do_fast_syscall_32+0xb0/0x110 [ 1206.453711][T16527] ? irqentry_exit_to_user_mode+0x82/0xa0 [ 1206.453897][T16527] do_fast_syscall_32+0x38/0x80 [ 1206.454087][T16527] do_SYSENTER_32+0x1f/0x30 [ 1206.454260][T16527] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1206.454438][T16527] RIP: 0023:0xf70ae539 [ 1206.454542][T16527] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1206.454672][T16527] RSP: 002b:00000000f509e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000092 [ 1206.454810][T16527] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000a40 [ 1206.454925][T16527] RDX: 0000000000000021 RSI: 0000000000000000 RDI: 0000000000000000 [ 1206.455013][T16527] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1206.455104][T16527] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1206.455188][T16527] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1206.455306][T16527] [ 1207.234645][T12292] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1207.396591][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1207.404544][T12292] usb 7-1: Using ep0 maxpacket: 16 [ 1207.460394][T12292] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1207.470500][T12292] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1207.480742][T12292] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1207.571341][T12292] usb 7-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 1207.580955][T12292] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1207.589359][T12292] usb 7-1: Product: syz [ 1207.597703][T12292] usb 7-1: Manufacturer: syz [ 1207.603764][T12292] usb 7-1: SerialNumber: syz [ 1207.690881][T12292] usb 7-1: config 0 descriptor?? [ 1207.843769][ T5884] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 1207.932302][ T5884] hid-generic 0000:0000:0000.0021: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1207.992286][T16543] loop8: detected capacity change from 0 to 1024 [ 1208.018405][T16543] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1208.041672][T16545] overlayfs: failed to clone upperpath [ 1208.074975][T16543] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1208.158922][T12292] usb 7-1: USB disconnect, device number 5 [ 1208.299376][T16543] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1208.787990][T16290] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1209.944555][ T5884] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1210.186907][ T5884] usb 7-1: config 0 has no interfaces? [ 1210.212646][ T5884] usb 7-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=61.d8 [ 1210.222188][ T5884] usb 7-1: New USB device strings: Mfr=123, Product=105, SerialNumber=3 [ 1210.231242][ T5884] usb 7-1: Product: syz [ 1210.235924][ T5884] usb 7-1: Manufacturer: syz [ 1210.240792][ T5884] usb 7-1: SerialNumber: syz [ 1210.337688][ T5884] usb 7-1: config 0 descriptor?? [ 1211.132814][T16578] loop8: detected capacity change from 0 to 4096 [ 1211.143902][T16578] ntfs3: Unknown parameter 'forˆ€¬OÌce' [ 1211.248900][T16582] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3304'. [ 1211.259569][T16582] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3304'. [ 1211.436749][T16578] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3302'. [ 1211.956987][T16591] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3308'. [ 1211.976862][T16591] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3308'. [ 1212.514782][T12292] usb 7-1: USB disconnect, device number 6 [ 1212.625019][T16597] loop3: detected capacity change from 0 to 1024 [ 1212.837476][T16597] FAULT_INJECTION: forcing a failure. [ 1212.837476][T16597] name failslab, interval 1, probability 0, space 0, times 0 [ 1212.850738][T16597] CPU: 1 UID: 0 PID: 16597 Comm: syz.3.3310 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(undef) [ 1212.850909][T16597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1212.850993][T16597] Call Trace: [ 1212.851046][T16597] [ 1212.851099][T16597] __dump_stack+0x26/0x30 [ 1212.851297][T16597] dump_stack_lvl+0x1df/0x270 [ 1212.851481][T16597] dump_stack+0x1e/0x25 [ 1212.851643][T16597] should_fail_ex+0x7dc/0x8a0 [ 1212.851895][T16597] should_failslab+0x15b/0x200 [ 1212.852084][T16597] kmem_cache_alloc_noprof+0xf0/0xec0 [ 1212.852291][T16597] ? getname_flags+0x102/0xac0 [ 1212.852479][T16597] ? kmsan_get_metadata+0x105/0x1b0 [ 1212.852679][T16597] getname_flags+0x102/0xac0 [ 1212.852857][T16597] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1212.853029][T16597] path_listxattrat+0xc9/0x6d0 [ 1212.853216][T16597] ? kmsan_get_metadata+0x105/0x1b0 [ 1212.853427][T16597] __ia32_sys_listxattr+0xa1/0x100 [ 1212.853614][T16597] ia32_sys_call+0x3926/0x42c0 [ 1212.853743][T16597] __do_fast_syscall_32+0xb0/0x110 [ 1212.853913][T16597] ? irqentry_exit_to_user_mode+0x82/0xa0 [ 1212.854098][T16597] do_fast_syscall_32+0x38/0x80 [ 1212.854287][T16597] do_SYSENTER_32+0x1f/0x30 [ 1212.854479][T16597] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1212.854667][T16597] RIP: 0023:0xf70ae539 [ 1212.854772][T16597] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1212.854893][T16597] RSP: 002b:00000000f509e55c EFLAGS: 00000206 ORIG_RAX: 00000000000000e8 [ 1212.855029][T16597] RAX: ffffffffffffffda RBX: 0000000080000080 RCX: 0000000000000000 [ 1212.855124][T16597] RDX: 00000000fffffeb6 RSI: 0000000000000000 RDI: 0000000000000000 [ 1212.855213][T16597] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1212.855301][T16597] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1212.855389][T16597] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1212.855520][T16597] [ 1213.544137][ T4094] hfsplus: b-tree write err: -5, ino 4 [ 1213.997702][T16608] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3317'. [ 1214.007192][T16608] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3317'. [ 1214.110212][T16610] loop6: detected capacity change from 0 to 128 [ 1214.289581][T16614] syz.6.3318: attempt to access beyond end of device [ 1214.289581][T16614] loop6: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 1214.432311][T16615] loop3: detected capacity change from 0 to 1024 [ 1214.602315][T16618] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3320'. [ 1214.796674][ T77] hfsplus: b-tree write err: -5, ino 4 [ 1215.114718][T12292] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 1215.284629][T12292] usb 9-1: Using ep0 maxpacket: 8 [ 1215.346552][T12292] usb 9-1: config 1 interface 0 has no altsetting 0 [ 1215.405335][T12292] usb 9-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.40 [ 1215.414895][T12292] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1215.423202][T12292] usb 9-1: Product: 徽贰ꠓ姆᭥ [ 1215.429614][T12292] usb 9-1: Manufacturer: æ‹“å®ç…šç±¤áˆ›ä·‘꣖秆턨ꮋ튟ìƒì±¨ßŒ [ 1215.437894][T12292] usb 9-1: SerialNumber: ã Š [ 1215.769379][T12292] usbhid 9-1:1.0: can't add hid device: -71 [ 1215.778623][T12292] usbhid 9-1:1.0: probe with driver usbhid failed with error -71 [ 1215.798302][T12292] usb 9-1: USB disconnect, device number 17 [ 1216.049265][T16635] FAULT_INJECTION: forcing a failure. [ 1216.049265][T16635] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1216.066801][T16635] CPU: 1 UID: 0 PID: 16635 Comm: syz.6.3325 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(undef) [ 1216.066961][T16635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1216.067045][T16635] Call Trace: [ 1216.067100][T16635] [ 1216.067161][T16635] __dump_stack+0x26/0x30 [ 1216.067341][T16635] dump_stack_lvl+0x1df/0x270 [ 1216.067525][T16635] dump_stack+0x1e/0x25 [ 1216.067686][T16635] should_fail_ex+0x7dc/0x8a0 [ 1216.067907][T16635] should_fail+0x2a/0x40 [ 1216.068091][T16635] should_fail_usercopy+0x2e/0x40 [ 1216.068308][T16635] _copy_from_user+0x33/0x100 [ 1216.068502][T16635] get_compat_msghdr+0x63/0x740 [ 1216.068713][T16635] ? kmsan_get_metadata+0x105/0x1b0 [ 1216.068915][T16635] ___sys_sendmsg+0x198/0x3b0 [ 1216.069073][T16635] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1216.069276][T16635] ? __rcu_read_unlock+0x6d/0xd0 [ 1216.069447][T16635] ? __fget_files+0x3b4/0x4a0 [ 1216.069611][T16635] ? __fget_files+0x3b9/0x4a0 [ 1216.069780][T16635] ? kmsan_get_metadata+0x105/0x1b0 [ 1216.069961][T16635] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1216.070164][T16635] __sys_sendmsg+0x1aa/0x300 [ 1216.070308][T16635] ? kmsan_get_metadata+0x105/0x1b0 [ 1216.070482][T16635] ? kmsan_get_metadata+0x105/0x1b0 [ 1216.070679][T16635] __ia32_compat_sys_sendmsg+0xa4/0x100 [ 1216.070901][T16635] ia32_sys_call+0x3692/0x42c0 [ 1216.071044][T16635] __do_fast_syscall_32+0xb0/0x110 [ 1216.071237][T16635] ? irqentry_exit_to_user_mode+0x82/0xa0 [ 1216.071421][T16635] do_fast_syscall_32+0x38/0x80 [ 1216.071604][T16635] do_SYSENTER_32+0x1f/0x30 [ 1216.071782][T16635] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1216.071965][T16635] RIP: 0023:0xf7f86539 [ 1216.072069][T16635] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1216.072200][T16635] RSP: 002b:00000000f50a655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1216.072341][T16635] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000140 [ 1216.072438][T16635] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1216.072525][T16635] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1216.072612][T16635] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1216.072700][T16635] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1216.072821][T16635] [ 1216.073370][ T45] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1216.754592][ T45] usb 4-1: Using ep0 maxpacket: 32 [ 1216.778019][ T45] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1216.789833][ T45] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1216.897377][ T45] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1216.907194][ T45] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1216.919009][ T45] usb 4-1: Product: syz [ 1216.923446][ T45] usb 4-1: Manufacturer: syz [ 1217.063525][ T45] hub 4-1:4.0: USB hub found [ 1217.087607][T12292] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 1217.130294][T12292] hid-generic 0000:0000:0000.0022: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1217.298700][T16642] loop6: detected capacity change from 0 to 1024 [ 1217.328300][T16642] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1217.337286][ T45] hub 4-1:4.0: 2 ports detected [ 1217.357297][T16642] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1217.439777][T16642] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1217.956660][T16648] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3331'. [ 1217.966033][T16648] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3331'. [ 1218.100796][T16042] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1218.676679][ T45] hub 4-1:4.0: hub_hub_status failed (err = -71) [ 1218.683551][ T45] hub 4-1:4.0: config failed, can't get hub status (err -71) [ 1218.782627][T16652] loop6: detected capacity change from 0 to 512 [ 1218.836354][ T45] usb 4-1: USB disconnect, device number 35 [ 1218.887632][T16652] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1219.027575][T16652] EXT4-fs error (device loop6): xattr_find_entry:333: inode #15: comm syz.6.3333: corrupted xattr entries [ 1219.057642][T16656] FAULT_INJECTION: forcing a failure. [ 1219.057642][T16656] name failslab, interval 1, probability 0, space 0, times 0 [ 1219.074519][T16656] CPU: 1 UID: 0 PID: 16656 Comm: syz.8.3334 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(undef) [ 1219.074677][T16656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1219.074763][T16656] Call Trace: [ 1219.074818][T16656] [ 1219.074883][T16656] __dump_stack+0x26/0x30 [ 1219.075065][T16656] dump_stack_lvl+0x1df/0x270 [ 1219.075256][T16656] dump_stack+0x1e/0x25 [ 1219.075422][T16656] should_fail_ex+0x7dc/0x8a0 [ 1219.075633][T16656] should_failslab+0x15b/0x200 [ 1219.075862][T16656] __kmalloc_cache_noprof+0xcb/0xed0 [ 1219.076067][T16656] ? __se_sys_memfd_create+0x51d/0x11f0 [ 1219.076299][T16656] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1219.076488][T16656] ? kmsan_get_metadata+0x105/0x1b0 [ 1219.076680][T16656] __se_sys_memfd_create+0x51d/0x11f0 [ 1219.076876][T16656] ? kmsan_get_metadata+0x105/0x1b0 [ 1219.077077][T16656] __ia32_sys_memfd_create+0x76/0xb0 [ 1219.077309][T16656] ia32_sys_call+0x335e/0x42c0 [ 1219.077442][T16656] __do_fast_syscall_32+0xb0/0x110 [ 1219.077621][T16656] ? irqentry_exit_to_user_mode+0x82/0xa0 [ 1219.077795][T16656] do_fast_syscall_32+0x38/0x80 [ 1219.077974][T16656] do_SYSENTER_32+0x1f/0x30 [ 1219.078144][T16656] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1219.078305][T16656] RIP: 0023:0xf7fc3539 [ 1219.078400][T16656] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1219.078511][T16656] RSP: 002b:00000000f50e636c EFLAGS: 00000206 ORIG_RAX: 0000000000000164 [ 1219.078632][T16656] RAX: ffffffffffffffda RBX: 00000000f72d7160 RCX: 0000000000000000 [ 1219.078722][T16656] RDX: 00000000f720691e RSI: 00000000f50e6410 RDI: 0000000000000040 [ 1219.078807][T16656] RBP: 00000000800006c0 R08: 0000000000000000 R09: 0000000000000000 [ 1219.078883][T16656] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1219.078979][T16656] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1219.079081][T16656] [ 1219.312012][T16652] EXT4-fs (loop6): 1 truncate cleaned up [ 1219.320760][T16652] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1219.629628][T16042] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1220.345999][ T5884] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 1220.555561][ T5884] usb 9-1: Using ep0 maxpacket: 16 [ 1220.582030][ T5884] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1220.594718][ T5884] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1220.615898][ T9] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1220.815029][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 1220.827169][ T5884] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1220.836809][ T5884] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1220.845410][ T5884] usb 9-1: Product: syz [ 1220.850026][ T5884] usb 9-1: Manufacturer: syz [ 1220.855120][ T5884] usb 9-1: SerialNumber: syz [ 1220.953321][ T5884] usb 9-1: config 0 descriptor?? [ 1220.986978][ T5884] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1220.996941][ T5884] em28xx 9-1:0.0: Audio interface 0 found (Vendor Class) [ 1221.017199][ T9] usb 7-1: config 0 has an invalid interface number: 151 but max is 1 [ 1221.024796][T16676] fuse: Unknown parameter 'user_id00000000000000000000' [ 1221.026171][ T9] usb 7-1: config 0 has no interface number 1 [ 1221.039660][ T9] usb 7-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1221.051079][ T9] usb 7-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 1221.063375][ T9] usb 7-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 1221.075278][ T9] usb 7-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1221.086538][ T9] usb 7-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1221.100142][ T9] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC9, changing to 0x89 [ 1221.118688][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1221.130990][ T9] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1221.294878][T16323] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1221.309375][ T9] usb 7-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 1221.325639][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1221.333916][ T9] usb 7-1: Product: syz [ 1221.340743][ T9] usb 7-1: Manufacturer: syz [ 1221.345844][ T9] usb 7-1: SerialNumber: syz [ 1221.427501][ T9] usb 7-1: config 0 descriptor?? [ 1221.459156][T16669] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1221.540055][ T9] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1221.566026][ T9] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1221.613756][ T5884] em28xx 9-1:0.0: chip ID is em2884 [ 1221.644987][T16323] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1221.656739][T16323] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1221.666899][T16323] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1221.680182][T16323] usb 4-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 1221.689599][T16323] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1221.700295][ T5884] em28xx 9-1:0.0: Config register raw data: 0x44 [ 1221.890744][T16323] usb 4-1: config 0 descriptor?? [ 1221.914381][ T9] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 1221.997003][ T9] usb 7-1: USB disconnect, device number 7 [ 1222.185879][ T45] usb 9-1: USB disconnect, device number 18 [ 1222.193767][ T45] em28xx 9-1:0.0: Disconnecting em28xx [ 1222.220028][ T45] em28xx 9-1:0.0: Freeing device [ 1222.390756][T16323] hid-udraw 0003:20D6:CB17.0023: item fetching failed at offset 5/7 [ 1222.458081][T16323] hid-udraw 0003:20D6:CB17.0023: parse failed [ 1222.465022][T16323] hid-udraw 0003:20D6:CB17.0023: probe with driver hid-udraw failed with error -22 [ 1222.601382][T16673] loop3: detected capacity change from 0 to 256 [ 1222.895919][T16673] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x16e2264b, utbl_chksum : 0xe619d30d) [ 1223.043933][ T45] usb 4-1: USB disconnect, device number 36 [ 1223.202597][T16692] FAULT_INJECTION: forcing a failure. [ 1223.202597][T16692] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1223.216289][T16692] CPU: 0 UID: 0 PID: 16692 Comm: syz.8.3347 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(undef) [ 1223.216427][T16692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1223.216500][T16692] Call Trace: [ 1223.216550][T16692] [ 1223.216596][T16692] __dump_stack+0x26/0x30 [ 1223.216753][T16692] dump_stack_lvl+0x1df/0x270 [ 1223.216908][T16692] dump_stack+0x1e/0x25 [ 1223.217045][T16692] should_fail_ex+0x7dc/0x8a0 [ 1223.217231][T16692] should_fail+0x2a/0x40 [ 1223.217386][T16692] should_fail_usercopy+0x2e/0x40 [ 1223.217571][T16692] _copy_to_user+0x35/0x120 [ 1223.217751][T16692] simple_read_from_buffer+0x1b2/0x340 [ 1223.217908][T16692] proc_fail_nth_read+0x1d2/0x2c0 [ 1223.218087][T16692] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1223.218261][T16692] vfs_read+0x279/0xef0 [ 1223.218388][T16692] ? stack_depot_save_flags+0x35/0x7c0 [ 1223.218560][T16692] ? kmsan_get_metadata+0x105/0x1b0 [ 1223.218727][T16692] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1223.218907][T16692] __ia32_sys_read+0x1f9/0x4d0 [ 1223.219071][T16692] ia32_sys_call+0x184c/0x42c0 [ 1223.219196][T16692] __do_fast_syscall_32+0xb0/0x110 [ 1223.219364][T16692] ? irqentry_exit_to_user_mode+0x82/0xa0 [ 1223.219528][T16692] do_fast_syscall_32+0x38/0x80 [ 1223.219693][T16692] do_SYSENTER_32+0x1f/0x30 [ 1223.219849][T16692] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1223.220006][T16692] RIP: 0023:0xf7fc3539 [ 1223.220096][T16692] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1223.220205][T16692] RSP: 002b:00000000f50e6590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 1223.220321][T16692] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f50e6620 [ 1223.220405][T16692] RDX: 000000000000000f RSI: 00000000f7452ff4 RDI: 0000000000000000 [ 1223.220487][T16692] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1223.220564][T16692] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1223.220641][T16692] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1223.220765][T16692] [ 1223.798308][T16696] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3349'. [ 1223.858513][T16696] team0: No ports can be present during mode change [ 1223.897563][T16696] netlink: 'syz.6.3349': attribute type 10 has an invalid length. [ 1223.928222][T16696] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1223.942013][T16696] team0: Port device bond0 added [ 1223.986865][T16697] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3349'. [ 1224.211946][T16697] team0 (unregistering): Port device team_slave_0 removed [ 1224.240285][T16697] team0 (unregistering): Port device team_slave_1 removed [ 1224.268722][T16697] team0 (unregistering): Port device bond0 removed [ 1224.379628][T12292] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 1224.554823][T12292] usb 9-1: Using ep0 maxpacket: 8 [ 1224.579215][T12292] usb 9-1: New USB device found, idVendor=093b, idProduct=a102, bcdDevice= 0.01 [ 1224.589415][T12292] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1224.600792][T12292] usb 9-1: Product: syz [ 1224.606201][T12292] usb 9-1: Manufacturer: syz [ 1224.611009][T12292] usb 9-1: SerialNumber: syz [ 1224.656734][T12292] usb 9-1: config 0 descriptor?? [ 1224.682087][T12292] go7007 9-1:0.0: probe with driver go7007 failed with error -12 [ 1224.702822][T16704] loop3: detected capacity change from 0 to 64 [ 1224.855439][T16706] fuse: Bad value for 'fd' [ 1224.870188][T16699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1224.880194][T16699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1224.915520][T16700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1224.924977][T16700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1225.748862][T16323] usb 9-1: USB disconnect, device number 19 [ 1226.305198][T16323] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1226.363812][T16720] loop8: detected capacity change from 0 to 1024 [ 1226.486258][T16720] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1226.496827][T16720] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (42840!=20869) [ 1226.507100][T16720] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1226.590557][T16323] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1226.602609][T16323] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1226.613046][T16323] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1226.626514][T16323] usb 4-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 1226.635940][T16323] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1226.683239][T16720] EXT4-fs error (device loop8): ext4_get_journal_inode:5798: inode #5: comm syz.8.3357: casefold flag without casefold feature [ 1226.737283][T16720] EXT4-fs (loop8): no journal found [ 1226.860342][T16323] usb 4-1: config 0 descriptor?? [ 1227.345001][T16323] hid-udraw 0003:20D6:CB17.0024: item fetching failed at offset 5/7 [ 1227.423502][T16323] hid-udraw 0003:20D6:CB17.0024: parse failed [ 1227.430440][T16323] hid-udraw 0003:20D6:CB17.0024: probe with driver hid-udraw failed with error -22 [ 1227.840107][T16715] loop3: detected capacity change from 0 to 256 [ 1227.954062][T16735] loop8: detected capacity change from 0 to 128 [ 1228.121506][T16715] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x16e2264b, utbl_chksum : 0xe619d30d) [ 1228.144078][T16735] syz.8.3361: attempt to access beyond end of device [ 1228.144078][T16735] loop8: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 1228.293197][T16735] syz.8.3361: attempt to access beyond end of device [ 1228.293197][T16735] loop8: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 1228.349853][T16735] syz.8.3361: attempt to access beyond end of device [ 1228.349853][T16735] loop8: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 1228.588051][T16735] syz.8.3361: attempt to access beyond end of device [ 1228.588051][T16735] loop8: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 1228.786104][T16323] usb 4-1: USB disconnect, device number 37 [ 1228.968364][T16740] loop6: detected capacity change from 0 to 1024 [ 1229.356965][ T3958] hfsplus: b-tree write err: -5, ino 4 [ 1229.696856][T16746] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3366'. [ 1229.902863][T16753] netlink: 'syz.6.3366': attribute type 10 has an invalid length. [ 1230.058489][T16755] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3366'. [ 1233.916303][T12292] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1234.118929][T12292] usb 7-1: Using ep0 maxpacket: 32 [ 1234.143399][T12292] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1234.155091][T12292] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1234.209848][T12292] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1234.225466][T12292] usb 7-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1234.234094][T12292] usb 7-1: Product: syz [ 1234.239775][T12292] usb 7-1: Manufacturer: syz [ 1234.302312][T12292] hub 7-1:4.0: USB hub found [ 1234.513801][T12292] hub 7-1:4.0: 2 ports detected [ 1234.600986][T16800] loop3: detected capacity change from 0 to 64 [ 1235.170352][T16805] loop8: detected capacity change from 0 to 1024 [ 1235.229507][T16805] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1235.248515][T16805] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (42840!=20869) [ 1235.261471][T16805] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1235.465177][T16805] EXT4-fs error (device loop8): ext4_get_journal_inode:5798: inode #5: comm syz.8.3384: casefold flag without casefold feature [ 1235.520198][T16805] EXT4-fs (loop8): no journal found [ 1235.571240][T12292] hub 7-1:4.0: hub_hub_status failed (err = -71) [ 1235.578807][T12292] hub 7-1:4.0: config failed, can't get hub status (err -71) [ 1235.645268][T12292] usb 7-1: USB disconnect, device number 8 [ 1236.030918][T16813] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3388'. [ 1236.206895][T16817] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3386'. [ 1236.595393][T16822] netlink: 'syz.3.3386': attribute type 10 has an invalid length. [ 1236.816542][T16825] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3386'. [ 1237.685996][T12292] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 1237.907661][T12292] usb 9-1: Using ep0 maxpacket: 8 [ 1237.952391][T12292] usb 9-1: config 0 has an invalid interface number: 151 but max is 1 [ 1237.961140][T12292] usb 9-1: config 0 has no interface number 1 [ 1237.971551][T12292] usb 9-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1237.984924][T12292] usb 9-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 1237.997223][T12292] usb 9-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 1238.012224][T12292] usb 9-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1238.023906][T12292] usb 9-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1238.037421][T12292] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC9, changing to 0x89 [ 1238.049380][T12292] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1238.059482][T12292] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1238.133089][T12292] usb 9-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 1238.142893][T12292] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1238.151329][T12292] usb 9-1: Product: syz [ 1238.156035][T12292] usb 9-1: Manufacturer: syz [ 1238.160844][T12292] usb 9-1: SerialNumber: syz [ 1238.176059][T12292] usb 9-1: config 0 descriptor?? [ 1238.256304][T16838] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1238.282824][T12292] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1238.308162][T12292] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1238.483703][T12292] snd-usb-audio 9-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 1238.610276][T16851] FAULT_INJECTION: forcing a failure. [ 1238.610276][T16851] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1238.630858][T16851] CPU: 0 UID: 0 PID: 16851 Comm: syz.3.3400 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(undef) [ 1238.631011][T16851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1238.631093][T16851] Call Trace: [ 1238.631143][T16851] [ 1238.631191][T16851] __dump_stack+0x26/0x30 [ 1238.631356][T16851] dump_stack_lvl+0x1df/0x270 [ 1238.631521][T16851] dump_stack+0x1e/0x25 [ 1238.631666][T16851] should_fail_ex+0x7dc/0x8a0 [ 1238.631924][T16851] should_fail+0x2a/0x40 [ 1238.632109][T16851] should_fail_usercopy+0x2e/0x40 [ 1238.632314][T16851] _copy_to_user+0x35/0x120 [ 1238.632508][T16851] simple_read_from_buffer+0x1b2/0x340 [ 1238.632681][T16851] proc_fail_nth_read+0x1d2/0x2c0 [ 1238.632879][T16851] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1238.633075][T16851] vfs_read+0x279/0xef0 [ 1238.633215][T16851] ? stack_depot_save_flags+0x35/0x7c0 [ 1238.633423][T16851] ? kmsan_get_metadata+0x105/0x1b0 [ 1238.633599][T16851] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1238.633810][T16851] __ia32_sys_read+0x1f9/0x4d0 [ 1238.633976][T16851] ia32_sys_call+0x184c/0x42c0 [ 1238.634099][T16851] __do_fast_syscall_32+0xb0/0x110 [ 1238.634271][T16851] ? irqentry_exit_to_user_mode+0x82/0xa0 [ 1238.634425][T16851] do_fast_syscall_32+0x38/0x80 [ 1238.634575][T16851] do_SYSENTER_32+0x1f/0x30 [ 1238.634728][T16851] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1238.634898][T16851] RIP: 0023:0xf70ae539 [ 1238.634993][T16851] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1238.635105][T16851] RSP: 002b:00000000f509e590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 1238.635224][T16851] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f509e620 [ 1238.635309][T16851] RDX: 000000000000000f RSI: 00000000f7412ff4 RDI: 0000000000000000 [ 1238.635387][T16851] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1238.635465][T16851] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1238.635539][T16851] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1238.635644][T16851] [ 1238.932509][T12292] usb 9-1: USB disconnect, device number 20 [ 1240.756138][T16876] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3410'. [ 1240.842076][T16876] team0: No ports can be present during mode change [ 1240.891737][T16876] netlink: 'syz.8.3410': attribute type 10 has an invalid length. [ 1240.980114][T16876] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1240.994290][T16876] team0: Port device bond0 added [ 1241.020017][T16883] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3410'. [ 1241.187444][T16323] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1241.249542][T16883] team0 (unregistering): Port device team_slave_0 removed [ 1241.370306][T16883] team0 (unregistering): Port device team_slave_1 removed [ 1241.417932][T16883] team0 (unregistering): Port device bond0 removed [ 1241.425819][T16323] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1241.435402][T16323] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1241.443658][T16323] usb 4-1: Product: syz [ 1241.448158][T16323] usb 4-1: Manufacturer: syz [ 1241.452993][T16323] usb 4-1: SerialNumber: syz [ 1241.550456][T16323] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1241.763980][ T9] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1242.045881][T16247] usb 4-1: USB disconnect, device number 38 [ 1242.879277][ T9] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1242.887189][ T9] ath9k_htc: Failed to initialize the device [ 1243.067695][T16247] usb 4-1: ath9k_htc: USB layer deinitialized [ 1244.221577][T16912] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3422'. [ 1244.231419][T16912] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3422'. [ 1244.533792][T16918] netlink: 1688 bytes leftover after parsing attributes in process `syz.6.3424'. [ 1245.002590][T16926] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3428'. [ 1245.281218][T16933] netlink: 'syz.6.3428': attribute type 10 has an invalid length. [ 1245.366573][T16934] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3428'. [ 1245.856446][T16940] fuse: Unknown parameter 'user_i00000000000000000000' [ 1246.390051][T16949] loop8: detected capacity change from 0 to 256 [ 1246.457928][T16949] exfat: Deprecated parameter 'namecase' [ 1246.464386][T16949] exfat: Bad value for 'dmask' [ 1246.483576][T16951] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3435'. [ 1246.484861][T16247] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1246.493002][T16951] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3435'. [ 1246.646294][T16949] loop8: detected capacity change from 0 to 256 [ 1246.689163][T16949] vfat: Bad value for 'utf8' [ 1246.713421][T16247] usb 4-1: Using ep0 maxpacket: 8 [ 1246.766152][T16247] usb 4-1: config 0 has an invalid interface number: 151 but max is 1 [ 1246.774901][T16247] usb 4-1: config 0 has no interface number 1 [ 1246.781366][T16247] usb 4-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1246.792786][T16247] usb 4-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 1246.805235][T16247] usb 4-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 1246.819025][T16247] usb 4-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1246.830184][T16247] usb 4-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1246.843869][T16247] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC9, changing to 0x89 [ 1246.855853][T16247] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1246.866058][T16247] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1246.979762][T16247] usb 4-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 1246.989595][T16247] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1246.998017][T16247] usb 4-1: Product: syz [ 1247.009717][T16247] usb 4-1: Manufacturer: syz [ 1247.014809][T16247] usb 4-1: SerialNumber: syz [ 1247.072785][T16247] usb 4-1: config 0 descriptor?? [ 1247.083364][T16947] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1247.132489][T16247] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1247.152042][T16247] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1247.338008][T16957] netlink: 1688 bytes leftover after parsing attributes in process `syz.1.3438'. [ 1247.400924][T16247] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 1247.543673][T16247] usb 4-1: USB disconnect, device number 39 [ 1248.551084][T16973] fuse: Unknown parameter 'user_id00000000000000000000' [ 1248.607856][T16247] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1248.615813][ T9] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1248.801308][T16247] usb 4-1: Using ep0 maxpacket: 8 [ 1248.832317][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1248.843915][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1248.845616][T16247] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 1248.854419][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1248.864758][T16247] usb 4-1: config 0 has no interface number 0 [ 1248.864884][T16247] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1248.865035][T16247] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1248.865176][T16247] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1248.865326][T16247] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1248.865526][T16247] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1248.865691][T16247] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1248.942525][T16247] usb 4-1: config 0 descriptor?? [ 1248.947163][ T9] usb 7-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 1248.947293][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1249.030064][T16247] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1249.044442][T16977] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3447'. [ 1249.205268][T16982] netlink: 'syz.4.3447': attribute type 10 has an invalid length. [ 1249.235310][T16982] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3447'. [ 1249.282932][ T9] usb 7-1: config 0 descriptor?? [ 1249.438432][T16986] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3449'. [ 1249.448102][T16986] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3449'. [ 1249.731155][ T9] hid-udraw 0003:20D6:CB17.0025: item fetching failed at offset 5/7 [ 1249.779130][ T9] hid-udraw 0003:20D6:CB17.0025: parse failed [ 1249.796845][ T9] hid-udraw 0003:20D6:CB17.0025: probe with driver hid-udraw failed with error -22 [ 1249.808748][T16247] usb 4-1: USB disconnect, device number 40 [ 1249.817581][T16247] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 1249.998312][T16967] loop6: detected capacity change from 0 to 256 [ 1250.054572][T16967] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x16e2264b, utbl_chksum : 0xe619d30d) [ 1250.131149][T16247] usb 7-1: USB disconnect, device number 9 [ 1250.480288][T16994] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.3452'. [ 1250.638059][T16996] netlink: 1688 bytes leftover after parsing attributes in process `syz.8.3453'. [ 1251.541402][T17016] fuse: Unknown parameter 'user_id00000000000000000000' [ 1251.635288][T16247] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1251.834862][T16247] usb 7-1: Using ep0 maxpacket: 32 [ 1251.877227][T16247] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1251.889018][T16247] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1251.925737][T16247] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1251.937939][T16247] usb 7-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1251.947409][T16247] usb 7-1: Product: syz [ 1251.951844][T16247] usb 7-1: Manufacturer: syz [ 1251.960487][T17020] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3461'. [ 1251.974252][T17020] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3461'. [ 1252.026957][T16247] hub 7-1:4.0: USB hub found [ 1252.226586][T16247] hub 7-1:4.0: 2 ports detected [ 1253.237537][T17031] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3464'. [ 1253.248501][T16247] hub 7-1:4.0: hub_hub_status failed (err = -71) [ 1253.255225][T16247] hub 7-1:4.0: config failed, can't get hub status (err -71) [ 1253.319618][T16247] usb 7-1: USB disconnect, device number 10 [ 1253.491976][T17036] netlink: 'syz.8.3464': attribute type 10 has an invalid length. [ 1253.611918][T17037] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3464'. [ 1254.076768][T17044] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.3466'. [ 1254.775100][T16247] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1255.016124][T16247] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1255.027807][T16247] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1255.038066][T16247] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1255.051329][T16247] usb 7-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 1255.060787][T16247] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1255.185175][T17054] fuse: Unknown parameter 'user_id00000000000000000000' [ 1255.199871][T17057] loop8: detected capacity change from 0 to 64 [ 1255.211892][T16247] usb 7-1: config 0 descriptor?? [ 1255.659681][T16247] hid-udraw 0003:20D6:CB17.0026: item fetching failed at offset 5/7 [ 1255.685689][T16247] hid-udraw 0003:20D6:CB17.0026: parse failed [ 1255.692557][T16247] hid-udraw 0003:20D6:CB17.0026: probe with driver hid-udraw failed with error -22 [ 1255.859700][T16247] usb 7-1: USB disconnect, device number 11 [ 1256.296024][T16323] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1256.474909][T16323] usb 4-1: Using ep0 maxpacket: 32 [ 1256.527608][T16323] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1256.545462][T16323] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1256.609324][T16323] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1256.619047][T16323] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1256.628228][T16323] usb 4-1: Product: syz [ 1256.632651][T16323] usb 4-1: Manufacturer: syz [ 1256.682930][T16323] hub 4-1:4.0: USB hub found [ 1256.838450][T17079] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.3479'. [ 1256.913991][T16323] hub 4-1:4.0: 2 ports detected [ 1256.959228][T17080] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3480'. [ 1257.227248][T17086] netlink: 'syz.8.3480': attribute type 10 has an invalid length. [ 1257.516352][T17087] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3480'. [ 1258.057099][T16323] hub 4-1:4.0: hub_hub_status failed (err = -71) [ 1258.063917][T16323] hub 4-1:4.0: config failed, can't get hub status (err -71) [ 1258.175386][T16323] usb 4-1: USB disconnect, device number 41 [ 1258.235285][T17094] FAULT_INJECTION: forcing a failure. [ 1258.235285][T17094] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1258.249505][T17094] CPU: 0 UID: 0 PID: 17094 Comm: syz.6.3482 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(undef) [ 1258.249660][T17094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1258.249744][T17094] Call Trace: [ 1258.249796][T17094] [ 1258.249848][T17094] __dump_stack+0x26/0x30 [ 1258.250063][T17094] dump_stack_lvl+0x1df/0x270 [ 1258.250250][T17094] dump_stack+0x1e/0x25 [ 1258.250420][T17094] should_fail_ex+0x7dc/0x8a0 [ 1258.250637][T17094] should_fail+0x2a/0x40 [ 1258.250818][T17094] should_fail_usercopy+0x2e/0x40 [ 1258.251032][T17094] _copy_from_user+0x33/0x100 [ 1258.251220][T17094] __sys_bpf+0x2c8/0xe60 [ 1258.251430][T17094] __ia32_sys_bpf+0xa4/0xf0 [ 1258.251585][T17094] ia32_sys_call+0x2544/0x42c0 [ 1258.251717][T17094] __do_fast_syscall_32+0xb0/0x110 [ 1258.251898][T17094] ? irqentry_exit_to_user_mode+0x82/0xa0 [ 1258.252073][T17094] do_fast_syscall_32+0x38/0x80 [ 1258.252248][T17094] do_SYSENTER_32+0x1f/0x30 [ 1258.252446][T17094] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1258.252624][T17094] RIP: 0023:0xf7f86539 [ 1258.252728][T17094] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1258.252854][T17094] RSP: 002b:00000000f50a655c EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 1258.252989][T17094] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000400 [ 1258.253089][T17094] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 1258.253177][T17094] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1258.253270][T17094] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1258.253358][T17094] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1258.253480][T17094] [ 1259.706976][T17100] loop3: detected capacity change from 0 to 64 [ 1259.948855][T17104] fuse: Bad value for 'fd' [ 1260.410913][T17108] loop3: detected capacity change from 0 to 1024 [ 1260.485935][T17108] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1260.536761][T17108] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1260.660186][T17108] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1260.766984][T17117] netlink: 1752 bytes leftover after parsing attributes in process `syz.8.3493'. [ 1261.018450][T14826] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1261.305759][T17123] pim6reg0: tun_chr_ioctl cmd 1074025692 [ 1261.403094][T17126] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3497'. [ 1261.587505][T17135] netlink: 'syz.8.3497': attribute type 10 has an invalid length. [ 1261.719484][T17139] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3497'. [ 1262.055121][T16323] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1262.335254][T16323] usb 4-1: Using ep0 maxpacket: 8 [ 1262.385134][T16323] usb 4-1: config 0 has an invalid interface number: 151 but max is 1 [ 1262.393641][T16323] usb 4-1: config 0 has no interface number 1 [ 1262.400207][T16323] usb 4-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1262.412502][T16323] usb 4-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 1262.427266][T16323] usb 4-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 1262.440621][T16323] usb 4-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1262.451352][T16323] usb 4-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1262.464980][T16323] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC9, changing to 0x89 [ 1262.476998][T16323] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1262.493932][T16323] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1263.179715][T16323] usb 4-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 1263.189585][T16323] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1263.205481][T16323] usb 4-1: Product: syz [ 1263.209940][T16323] usb 4-1: Manufacturer: syz [ 1263.217404][T16323] usb 4-1: SerialNumber: syz [ 1263.261915][T16323] usb 4-1: config 0 descriptor?? [ 1263.271118][T17138] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1263.319776][T16323] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1263.347109][T16323] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1263.431530][T17152] fuse: Bad value for 'fd' [ 1263.634666][T16323] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 1263.688023][T16323] usb 4-1: USB disconnect, device number 42 [ 1264.132963][T17158] netlink: 1752 bytes leftover after parsing attributes in process `syz.6.3505'. [ 1264.506595][T17164] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3507'. [ 1264.515982][T17164] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3507'. [ 1265.335672][T16323] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1265.566395][T16323] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1265.577813][T16323] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1265.588168][T16323] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1265.601563][T16323] usb 7-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 1265.611123][T16323] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1265.630441][T17171] loop8: detected capacity change from 0 to 256 [ 1265.731010][T16323] usb 7-1: config 0 descriptor?? [ 1265.769576][T17176] FAULT_INJECTION: forcing a failure. [ 1265.769576][T17176] name failslab, interval 1, probability 0, space 0, times 0 [ 1265.782923][T17176] CPU: 0 UID: 0 PID: 17176 Comm: syz.3.3511 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(undef) [ 1265.783081][T17176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1265.783172][T17176] Call Trace: [ 1265.783229][T17176] [ 1265.783319][T17176] __dump_stack+0x26/0x30 [ 1265.783502][T17176] dump_stack_lvl+0x1df/0x270 [ 1265.783693][T17176] dump_stack+0x1e/0x25 [ 1265.783851][T17176] should_fail_ex+0x7dc/0x8a0 [ 1265.784063][T17176] should_failslab+0x15b/0x200 [ 1265.784251][T17176] __kmalloc_noprof+0x182/0x1310 [ 1265.784473][T17176] ? tomoyo_realpath_from_path+0xeb/0x9f0 [ 1265.784654][T17176] ? tomoyo_path_number_perm+0x51/0x7d0 [ 1265.784816][T17176] ? filter_irq_stacks+0x49/0x190 [ 1265.784972][T17176] ? kmsan_get_metadata+0x105/0x1b0 [ 1265.785167][T17176] tomoyo_realpath_from_path+0xeb/0x9f0 [ 1265.785365][T17176] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1265.785563][T17176] ? __srcu_read_lock+0x5e/0xd0 [ 1265.785763][T17176] tomoyo_path_number_perm+0x1d0/0x7d0 [ 1265.785914][T17176] ? stack_depot_save_flags+0x35/0x7c0 [ 1265.786141][T17176] ? kmsan_get_metadata+0x105/0x1b0 [ 1265.786320][T17176] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1265.786550][T17176] tomoyo_file_ioctl+0x3d/0x50 [ 1265.786732][T17176] security_file_ioctl_compat+0x141/0x590 [ 1265.786950][T17176] __ia32_compat_sys_ioctl+0x150/0x1260 [ 1265.787105][T17176] ? kmsan_get_metadata+0x105/0x1b0 [ 1265.787278][T17176] ? kmsan_get_metadata+0x105/0x1b0 [ 1265.787471][T17176] ia32_sys_call+0x2d07/0x42c0 [ 1265.787606][T17176] __do_fast_syscall_32+0xb0/0x110 [ 1265.787786][T17176] ? irqentry_exit_to_user_mode+0x82/0xa0 [ 1265.787963][T17176] do_fast_syscall_32+0x38/0x80 [ 1265.788137][T17176] do_SYSENTER_32+0x1f/0x30 [ 1265.788314][T17176] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1265.788491][T17176] RIP: 0023:0xf70ae539 [ 1265.788592][T17176] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1265.788712][T17176] RSP: 002b:00000000f507d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1265.788840][T17176] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000005404 [ 1265.788935][T17176] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 1265.789021][T17176] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1265.789102][T17176] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1265.789201][T17176] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1265.789346][T17176] [ 1266.049781][T17176] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1266.388962][T16323] hid-udraw 0003:20D6:CB17.0027: item fetching failed at offset 5/7 [ 1266.402532][T16323] hid-udraw 0003:20D6:CB17.0027: parse failed [ 1266.409436][T16323] hid-udraw 0003:20D6:CB17.0027: probe with driver hid-udraw failed with error -22 [ 1266.464900][T17181] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3513'. [ 1266.589307][T16247] usb 7-1: USB disconnect, device number 12 [ 1266.631678][T17185] netlink: 'syz.3.3513': attribute type 10 has an invalid length. [ 1266.712428][T17185] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3513'. [ 1267.042380][T17191] fuse: Bad value for 'fd' [ 1267.646660][T17196] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.3518'. [ 1268.026885][T16247] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 1268.196329][ T5884] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1268.239789][T16247] usb 9-1: config 1 has an invalid interface number: 5 but max is 2 [ 1268.248431][T16247] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1268.258894][T16247] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1268.268318][T16247] usb 9-1: config 1 has no interface number 1 [ 1268.274769][T16247] usb 9-1: config 1 interface 5 has no altsetting 0 [ 1268.289228][T17207] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3520'. [ 1268.298819][T17207] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3520'. [ 1268.334600][T16247] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1268.347378][T16247] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1268.359045][T16247] usb 9-1: SerialNumber: syz [ 1268.414556][ T5884] usb 7-1: Using ep0 maxpacket: 8 [ 1268.495703][ T5884] usb 7-1: config 0 has an invalid interface number: 151 but max is 1 [ 1268.504646][ T5884] usb 7-1: config 0 has no interface number 1 [ 1268.511014][ T5884] usb 7-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1268.528963][ T5884] usb 7-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 1268.543298][ T5884] usb 7-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 1268.555141][ T5884] usb 7-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1268.565691][ T5884] usb 7-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1268.579269][ T5884] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC9, changing to 0x89 [ 1268.591124][ T5884] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1268.601631][ T5884] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1268.665554][T16247] usb 9-1: 0:2 : does not exist [ 1268.670714][T16247] usb 9-1: unit 5 not found! [ 1268.824022][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1268.852858][ T5884] usb 7-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 1268.862847][ T5884] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1268.871295][ T5884] usb 7-1: Product: syz [ 1268.875864][ T5884] usb 7-1: Manufacturer: syz [ 1268.880707][ T5884] usb 7-1: SerialNumber: syz [ 1268.901835][ T5884] usb 7-1: config 0 descriptor?? [ 1268.910186][T17203] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1268.965292][T16247] usb 9-1: USB disconnect, device number 21 [ 1269.047554][ T5884] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1269.068073][ T5884] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1269.204861][ T5884] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 1269.282227][T17213] FAULT_INJECTION: forcing a failure. [ 1269.282227][T17213] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1269.296337][T17213] CPU: 1 UID: 0 PID: 17213 Comm: syz.3.3523 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(undef) [ 1269.296492][T17213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1269.296576][T17213] Call Trace: [ 1269.296629][T17213] [ 1269.296684][T17213] __dump_stack+0x26/0x30 [ 1269.296857][T17213] dump_stack_lvl+0x1df/0x270 [ 1269.297024][T17213] dump_stack+0x1e/0x25 [ 1269.297176][T17213] should_fail_ex+0x7dc/0x8a0 [ 1269.297372][T17213] should_fail+0x2a/0x40 [ 1269.297563][T17213] should_fail_usercopy+0x2e/0x40 [ 1269.297749][T17213] _copy_from_user+0x33/0x100 [ 1269.297922][T17213] get_compat_msghdr+0x63/0x740 [ 1269.298125][T17213] ? kmsan_get_metadata+0x105/0x1b0 [ 1269.298310][T17213] ___sys_sendmsg+0x198/0x3b0 [ 1269.298448][T17213] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1269.298624][T17213] ? __rcu_read_unlock+0x6d/0xd0 [ 1269.298778][T17213] ? __fget_files+0x3b4/0x4a0 [ 1269.298926][T17213] ? __fget_files+0x3b9/0x4a0 [ 1269.299081][T17213] ? kmsan_get_metadata+0x105/0x1b0 [ 1269.299248][T17213] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1269.299425][T17213] __sys_sendmsg+0x1aa/0x300 [ 1269.299554][T17213] ? kmsan_get_metadata+0x105/0x1b0 [ 1269.299712][T17213] ? kmsan_get_metadata+0x105/0x1b0 [ 1269.299889][T17213] __ia32_compat_sys_sendmsg+0xa4/0x100 [ 1269.300086][T17213] ia32_sys_call+0x3692/0x42c0 [ 1269.300221][T17213] __do_fast_syscall_32+0xb0/0x110 [ 1269.300391][T17213] ? irqentry_exit_to_user_mode+0x82/0xa0 [ 1269.300577][T17213] do_fast_syscall_32+0x38/0x80 [ 1269.300751][T17213] do_SYSENTER_32+0x1f/0x30 [ 1269.300912][T17213] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1269.301084][T17213] RIP: 0023:0xf70ae539 [ 1269.301191][T17213] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1269.301313][T17213] RSP: 002b:00000000f509e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1269.301442][T17213] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080001540 [ 1269.301538][T17213] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1269.301622][T17213] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1269.301705][T17213] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1269.301789][T17213] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1269.301908][T17213] [ 1269.612146][T16247] usb 7-1: USB disconnect, device number 13 [ 1270.868933][T17222] loop3: detected capacity change from 0 to 512 [ 1270.926417][T17223] fuse: Unknown parameter '0x0000000000000004' [ 1271.006293][T17222] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1271.019551][T17222] ext4 filesystem being mounted at /127/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1271.146965][T17230] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 1271.147718][T17229] IPVS: stopping master sync thread 17230 ... [ 1271.308953][T16247] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1271.319876][T12292] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 1271.350391][T12292] hid-generic 0000:0000:0000.0028: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1271.465578][T16247] usb 4-1: device descriptor read/64, error -71 [ 1271.657584][T17236] netlink: 1752 bytes leftover after parsing attributes in process `syz.6.3532'. [ 1271.725922][T16247] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1271.819235][T17238] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3534'. [ 1271.833179][T17238] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3534'. [ 1271.885763][T17240] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3533'. [ 1271.903492][T16247] usb 4-1: device descriptor read/64, error -71 [ 1272.019686][T16247] usb usb4-port1: attempt power cycle [ 1272.120190][T17246] netlink: 'syz.8.3533': attribute type 10 has an invalid length. [ 1272.159578][T17246] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3533'. [ 1272.376122][T16247] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1272.393089][T17245] loop6: detected capacity change from 0 to 1024 [ 1272.437850][T16247] usb 4-1: device descriptor read/8, error -71 [ 1272.493065][T17245] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1272.540054][T17245] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1272.636643][T17245] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1272.691766][T16247] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1272.770743][T16247] usb 4-1: device descriptor read/8, error -71 [ 1272.889813][T16247] usb usb4-port1: unable to enumerate USB device [ 1273.097227][T16042] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1274.202490][T14826] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1275.025306][T17283] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3546'. [ 1275.036082][T17283] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3546'. [ 1275.824437][ T5884] usb 4-1: new full-speed USB device number 47 using dummy_hcd [ 1276.002779][ T5884] usb 4-1: device descriptor read/64, error -71 [ 1276.009839][T17272] Bluetooth: hci2: command 0x0406 tx timeout [ 1276.256286][ T5884] usb 4-1: new full-speed USB device number 48 using dummy_hcd [ 1276.441302][ T5884] usb 4-1: device descriptor read/64, error -71 [ 1276.563675][ T5884] usb usb4-port1: attempt power cycle [ 1276.575850][T17298] netlink: 'syz.6.3552': attribute type 10 has an invalid length. [ 1276.626202][T17298] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3552'. [ 1276.995747][ T5884] usb 4-1: new full-speed USB device number 49 using dummy_hcd [ 1277.074481][ T5884] usb 4-1: device descriptor read/8, error -71 [ 1277.454940][ T5884] usb 4-1: new full-speed USB device number 50 using dummy_hcd [ 1277.498091][T17309] FAULT_INJECTION: forcing a failure. [ 1277.498091][T17309] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1277.511902][T17309] CPU: 0 UID: 0 PID: 17309 Comm: syz.8.3555 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(undef) [ 1277.512058][T17309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1277.512143][T17309] Call Trace: [ 1277.512196][T17309] [ 1277.512248][T17309] __dump_stack+0x26/0x30 [ 1277.512451][T17309] dump_stack_lvl+0x1df/0x270 [ 1277.512632][T17309] dump_stack+0x1e/0x25 [ 1277.512789][T17309] should_fail_ex+0x7dc/0x8a0 [ 1277.513000][T17309] should_fail+0x2a/0x40 [ 1277.513173][T17309] should_fail_usercopy+0x2e/0x40 [ 1277.513378][T17309] _copy_to_user+0x35/0x120 [ 1277.513587][T17309] simple_read_from_buffer+0x1b2/0x340 [ 1277.513763][T17309] proc_fail_nth_read+0x1d2/0x2c0 [ 1277.513968][T17309] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1277.514171][T17309] vfs_read+0x279/0xef0 [ 1277.514309][T17309] ? stack_depot_save_flags+0x35/0x7c0 [ 1277.514501][T17309] ? kmsan_get_metadata+0x105/0x1b0 [ 1277.514674][T17309] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1277.514876][T17309] __ia32_sys_read+0x1f9/0x4d0 [ 1277.515069][T17309] ia32_sys_call+0x184c/0x42c0 [ 1277.515196][T17309] __do_fast_syscall_32+0xb0/0x110 [ 1277.515367][T17309] ? irqentry_exit_to_user_mode+0x82/0xa0 [ 1277.515533][T17309] do_fast_syscall_32+0x38/0x80 [ 1277.515699][T17309] do_SYSENTER_32+0x1f/0x30 [ 1277.515857][T17309] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1277.516023][T17309] RIP: 0023:0xf7fc3539 [ 1277.516118][T17309] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1277.516235][T17309] RSP: 002b:00000000f50e6590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 1277.516356][T17309] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f50e6620 [ 1277.516451][T17309] RDX: 000000000000000f RSI: 00000000f7452ff4 RDI: 0000000000000000 [ 1277.516534][T17309] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1277.516613][T17309] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1277.516693][T17309] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1277.516802][T17309] [ 1277.772761][ T5884] usb 4-1: device descriptor read/8, error -71 [ 1277.885544][ T5884] usb usb4-port1: unable to enumerate USB device [ 1278.059457][T17311] fuse: Bad value for 'fd' [ 1278.433555][T17318] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3559'. [ 1278.444583][T17318] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3559'. [ 1279.212011][T17331] loop3: detected capacity change from 0 to 1024 [ 1279.293160][T17330] loop6: detected capacity change from 0 to 1024 [ 1279.316953][T17330] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1279.327616][T17330] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (42840!=20869) [ 1279.337673][T17330] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1279.368683][T17331] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1279.405246][T17330] EXT4-fs error (device loop6): ext4_get_journal_inode:5798: inode #5: comm syz.6.3564: casefold flag without casefold feature [ 1279.425119][T17331] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1279.454740][T17330] EXT4-fs (loop6): no journal found [ 1279.499245][T17331] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1280.999395][T14826] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1281.126606][T17272] Bluetooth: hci1: command 0x0406 tx timeout [ 1281.777410][T17350] netlink: 'syz.3.3569': attribute type 10 has an invalid length. [ 1281.818036][T17350] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3569'. [ 1282.678688][T17364] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3574'. [ 1282.688214][T17364] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3574'. [ 1283.402626][T17374] loop3: detected capacity change from 0 to 1024 [ 1283.427935][T17374] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1283.456973][T17375] FAULT_INJECTION: forcing a failure. [ 1283.456973][T17375] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1283.477915][T17375] CPU: 0 UID: 0 PID: 17375 Comm: syz.6.3578 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(undef) [ 1283.478084][T17375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1283.478171][T17375] Call Trace: [ 1283.478224][T17375] [ 1283.478276][T17375] __dump_stack+0x26/0x30 [ 1283.478461][T17375] dump_stack_lvl+0x1df/0x270 [ 1283.478642][T17375] dump_stack+0x1e/0x25 [ 1283.478808][T17375] should_fail_ex+0x7dc/0x8a0 [ 1283.479005][T17375] should_fail+0x2a/0x40 [ 1283.479169][T17375] should_fail_usercopy+0x2e/0x40 [ 1283.479354][T17375] _copy_to_user+0x35/0x120 [ 1283.479527][T17375] simple_read_from_buffer+0x1b2/0x340 [ 1283.479686][T17375] proc_fail_nth_read+0x1d2/0x2c0 [ 1283.479891][T17375] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1283.480063][T17375] vfs_read+0x279/0xef0 [ 1283.480192][T17375] ? stack_depot_save_flags+0x35/0x7c0 [ 1283.480365][T17375] ? kmsan_get_metadata+0x105/0x1b0 [ 1283.480529][T17375] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1283.480728][T17375] __ia32_sys_read+0x1f9/0x4d0 [ 1283.480911][T17375] ia32_sys_call+0x184c/0x42c0 [ 1283.481046][T17375] __do_fast_syscall_32+0xb0/0x110 [ 1283.481226][T17375] ? irqentry_exit_to_user_mode+0x82/0xa0 [ 1283.481410][T17375] do_fast_syscall_32+0x38/0x80 [ 1283.481573][T17375] do_SYSENTER_32+0x1f/0x30 [ 1283.481729][T17375] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1283.481900][T17375] RIP: 0023:0xf7f86539 [ 1283.481992][T17375] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1283.482110][T17375] RSP: 002b:00000000f5085590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 1283.482235][T17375] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f5085620 [ 1283.482351][T17375] RDX: 000000000000000f RSI: 00000000f7412ff4 RDI: 0000000000000000 [ 1283.482442][T17375] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1283.482530][T17375] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1283.482619][T17375] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1283.482743][T17375] [ 1283.726915][T17374] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1283.807464][T17374] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1284.018369][T14826] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1284.038110][T17383] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3580'. [ 1286.659975][T17404] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3588'. [ 1286.669577][T17404] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3588'. [ 1287.019546][T17413] netlink: 'syz.1.3589': attribute type 10 has an invalid length. [ 1287.068613][T17413] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3589'. [ 1287.798443][T17420] loop3: detected capacity change from 0 to 1024 [ 1287.813234][T17423] loop6: detected capacity change from 0 to 1024 [ 1287.837879][T17423] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1287.851603][T17420] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1287.859735][T17423] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1287.861915][T17420] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42840!=20869) [ 1287.883097][T17420] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1287.936036][T17420] EXT4-fs error (device loop3): ext4_get_journal_inode:5798: inode #5: comm syz.3.3592: casefold flag without casefold feature [ 1287.936481][T17423] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1288.020220][T17420] EXT4-fs (loop3): no journal found [ 1288.429368][T16042] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1288.726066][ T30] audit: type=1326 audit(1745952334.362:1435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17433 comm="syz.1.3598" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x0 [ 1288.748698][ T30] audit: type=1326 audit(1745952334.362:1436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17433 comm="syz.1.3598" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x0 [ 1290.557903][T17446] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3603'. [ 1290.567371][T17446] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3603'. [ 1290.936589][T17450] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3605'. [ 1290.975043][T17450] bridge0: port 3(vlan2) entered blocking state [ 1290.982002][T17450] bridge0: port 3(vlan2) entered disabled state [ 1290.989342][T17450] vlan2: entered allmulticast mode [ 1290.994845][T17450] bridge0: entered allmulticast mode [ 1291.025232][T17450] vlan2: left allmulticast mode [ 1291.030369][T17450] bridge0: left allmulticast mode [ 1291.614978][T17455] loop6: detected capacity change from 0 to 1024 [ 1291.661235][T17455] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1291.674972][T17455] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (42840!=20869) [ 1291.685060][T17455] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1291.799917][T17455] EXT4-fs error (device loop6): ext4_get_journal_inode:5798: inode #5: comm syz.6.3607: casefold flag without casefold feature [ 1291.870291][T17455] EXT4-fs (loop6): no journal found [ 1291.880172][T17466] netlink: 'syz.8.3608': attribute type 10 has an invalid length. [ 1291.942200][T17466] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3608'. [ 1293.150644][T17478] FAULT_INJECTION: forcing a failure. [ 1293.150644][T17478] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1293.164681][T17478] CPU: 0 UID: 0 PID: 17478 Comm: syz.3.3615 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(undef) [ 1293.164818][T17478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1293.164894][T17478] Call Trace: [ 1293.164942][T17478] [ 1293.164989][T17478] __dump_stack+0x26/0x30 [ 1293.165143][T17478] dump_stack_lvl+0x1df/0x270 [ 1293.165304][T17478] dump_stack+0x1e/0x25 [ 1293.165465][T17478] should_fail_ex+0x7dc/0x8a0 [ 1293.165671][T17478] should_fail+0x2a/0x40 [ 1293.165840][T17478] should_fail_usercopy+0x2e/0x40 [ 1293.166028][T17478] _copy_from_iter+0x1ba/0x3220 [ 1293.166191][T17478] ? filter_irq_stacks+0x13f/0x190 [ 1293.166343][T17478] ? kmsan_get_metadata+0x105/0x1b0 [ 1293.166541][T17478] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1293.166738][T17478] ? __rcu_read_unlock+0x6d/0xd0 [ 1293.166901][T17478] ? txopt_get+0x287/0x2f0 [ 1293.167055][T17478] rawv6_sendmsg+0x1897/0x2df0 [ 1293.167267][T17478] ? stack_depot_save_flags+0x35/0x7c0 [ 1293.167458][T17478] ? kmsan_get_metadata+0x105/0x1b0 [ 1293.167732][T17478] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 1293.167918][T17478] inet_sendmsg+0x269/0x2a0 [ 1293.168103][T17478] __sock_sendmsg+0x278/0x3d0 [ 1293.168266][T17478] __sys_sendto+0x590/0x710 [ 1293.168438][T17478] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1293.168606][T17478] ? vfs_write+0x1342/0x1560 [ 1293.168749][T17478] ? kmsan_get_metadata+0x105/0x1b0 [ 1293.168912][T17478] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1293.169075][T17478] __ia32_sys_sendto+0x12f/0x200 [ 1293.169262][T17478] ia32_sys_call+0x1397/0x42c0 [ 1293.169381][T17478] __do_fast_syscall_32+0xb0/0x110 [ 1293.169545][T17478] ? irqentry_exit_to_user_mode+0x82/0xa0 [ 1293.169700][T17478] do_fast_syscall_32+0x38/0x80 [ 1293.169850][T17478] do_SYSENTER_32+0x1f/0x30 [ 1293.170002][T17478] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1293.170162][T17478] RIP: 0023:0xf70ae539 [ 1293.170250][T17478] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1293.170355][T17478] RSP: 002b:00000000f509e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 1293.170470][T17478] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800002c0 [ 1293.170554][T17478] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 1293.170633][T17478] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1293.170707][T17478] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1293.170781][T17478] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1293.170891][T17478] [ 1294.180183][T17485] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3616'. [ 1294.190249][T17485] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3616'. [ 1294.201372][T16323] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1294.465826][T16323] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1294.475078][T16323] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1294.485621][T16323] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1294.495032][T16323] usb 4-1: config 1 has no interface number 0 [ 1294.501343][T16323] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1294.873776][T16323] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1294.883659][T16323] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1294.892195][T16323] usb 4-1: Product: syz [ 1294.896768][T16323] usb 4-1: Manufacturer: syz [ 1294.901614][T16323] usb 4-1: SerialNumber: syz [ 1295.120315][T16323] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 1295.127835][T16323] cdc_ncm 4-1:1.1: bind() failure [ 1295.435606][T12292] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1295.605196][T12292] usb 7-1: Using ep0 maxpacket: 32 [ 1295.625923][T17505] loop8: detected capacity change from 0 to 1024 [ 1295.653070][T12292] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1295.666760][T12292] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1295.687856][T17505] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1295.714881][T17505] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1295.741946][T12292] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1295.751698][T12292] usb 7-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1295.762624][T12292] usb 7-1: Product: syz [ 1295.767709][T12292] usb 7-1: Manufacturer: syz [ 1295.776228][T16323] usb 4-1: USB disconnect, device number 51 [ 1295.831499][T12292] hub 7-1:4.0: USB hub found [ 1295.850057][T17505] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1296.036484][T12292] hub 7-1:4.0: 2 ports detected [ 1296.086164][T16290] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1296.446697][T17509] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3625'. [ 1296.544912][T17509] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1296.770095][T17517] netlink: 'syz.4.3628': attribute type 10 has an invalid length. [ 1296.814642][T17517] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3628'. [ 1296.916098][T16247] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 1296.984520][T12292] hub 7-1:4.0: hub_hub_status failed (err = -71) [ 1296.994609][T12292] hub 7-1:4.0: config failed, can't get hub status (err -71) [ 1297.134903][T16247] usb 9-1: Using ep0 maxpacket: 32 [ 1297.143525][T12292] usb 7-1: USB disconnect, device number 14 [ 1297.181377][T16247] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1297.195142][T16247] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1297.267850][T16247] usb 9-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1297.277956][T16247] usb 9-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1297.286734][T16247] usb 9-1: Product: syz [ 1297.291137][T16247] usb 9-1: Manufacturer: syz [ 1297.362184][T16247] hub 9-1:4.0: USB hub found [ 1297.597167][T16247] hub 9-1:4.0: 2 ports detected [ 1298.042243][T17515] loop8: detected capacity change from 0 to 1024 [ 1298.083401][T17515] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 1298.094064][T17515] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1298.187622][T17515] EXT4-fs error (device loop8): ext4_get_journal_inode:5798: inode #32: comm syz.8.3627: iget: special inode unallocated [ 1298.239588][T17515] EXT4-fs (loop8): no journal found [ 1298.249272][T17515] EXT4-fs (loop8): can't get journal size [ 1298.335042][T17515] EXT4-fs error (device loop8): __ext4_fill_super:5502: inode #2: comm syz.8.3627: iget: special inode unallocated [ 1298.347689][T17533] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3631'. [ 1298.347806][T17533] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3631'. [ 1298.465117][T17515] EXT4-fs (loop8): get root inode failed [ 1298.471018][T17515] EXT4-fs (loop8): mount failed [ 1298.662136][T16247] hub 9-1:4.0: hub_hub_status failed (err = -71) [ 1298.668954][T16247] hub 9-1:4.0: config failed, can't get hub status (err -71) [ 1298.806281][T16247] usb 9-1: USB disconnect, device number 22 [ 1300.184026][T17552] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3640'. [ 1300.629704][T17547] loop6: detected capacity change from 0 to 1024 [ 1300.688598][T17547] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1300.700031][T17547] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (42840!=20869) [ 1300.710314][T17547] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1300.758778][T17547] EXT4-fs error (device loop6): ext4_get_journal_inode:5798: inode #5: comm syz.6.3638: casefold flag without casefold feature [ 1300.792473][T17547] EXT4-fs (loop6): no journal found [ 1301.074516][T16247] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 1301.276569][T16247] usb 9-1: Using ep0 maxpacket: 32 [ 1301.337897][T16247] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1301.349455][T16247] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1301.398976][T16247] usb 9-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1301.408507][T16247] usb 9-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1301.417407][T16247] usb 9-1: Product: syz [ 1301.421811][T16247] usb 9-1: Manufacturer: syz [ 1301.443369][T17564] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3644'. [ 1301.452856][T17564] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3644'. [ 1301.526225][T16247] hub 9-1:4.0: USB hub found [ 1301.703764][T17572] netlink: 'syz.1.3645': attribute type 10 has an invalid length. [ 1301.764859][T16247] hub 9-1:4.0: 2 ports detected [ 1301.845957][T17573] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3645'. [ 1302.847508][T16247] hub 9-1:4.0: hub_hub_status failed (err = -71) [ 1302.854898][T16247] hub 9-1:4.0: config failed, can't get hub status (err -71) [ 1302.968907][T16247] usb 9-1: USB disconnect, device number 23 [ 1303.096889][T17587] FAULT_INJECTION: forcing a failure. [ 1303.096889][T17587] name failslab, interval 1, probability 0, space 0, times 0 [ 1303.110120][T17587] CPU: 1 UID: 0 PID: 17587 Comm: syz.6.3650 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(undef) [ 1303.110296][T17587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1303.110387][T17587] Call Trace: [ 1303.110442][T17587] [ 1303.110509][T17587] __dump_stack+0x26/0x30 [ 1303.110682][T17587] dump_stack_lvl+0x1df/0x270 [ 1303.110890][T17587] dump_stack+0x1e/0x25 [ 1303.111054][T17587] should_fail_ex+0x7dc/0x8a0 [ 1303.111302][T17587] should_failslab+0x15b/0x200 [ 1303.111491][T17587] kmem_cache_alloc_node_noprof+0xf3/0xf00 [ 1303.111701][T17587] ? __alloc_skb+0x1e0/0x7d0 [ 1303.111887][T17587] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1303.112074][T17587] ? kmsan_get_metadata+0x105/0x1b0 [ 1303.112248][T17587] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1303.112468][T17587] __alloc_skb+0x1e0/0x7d0 [ 1303.112664][T17587] alloc_skb_with_frags+0xc5/0xa60 [ 1303.112860][T17587] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1303.113051][T17587] ? kmsan_get_metadata+0x105/0x1b0 [ 1303.113228][T17587] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1303.113425][T17587] sock_alloc_send_pskb+0xad8/0xc70 [ 1303.113582][T17587] ? kmsan_get_metadata+0x105/0x1b0 [ 1303.113801][T17587] hci_sock_sendmsg+0x2a6/0x19f0 [ 1303.114008][T17587] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 1303.114142][T17587] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 1303.114275][T17587] __sock_sendmsg+0x330/0x3d0 [ 1303.114440][T17587] sock_write_iter+0x318/0x390 [ 1303.114619][T17587] vfs_write+0xb31/0x1560 [ 1303.114817][T17587] ? __pfx_sock_write_iter+0x10/0x10 [ 1303.114989][T17587] __ia32_sys_write+0x1f9/0x4d0 [ 1303.115170][T17587] ia32_sys_call+0x30f2/0x42c0 [ 1303.115313][T17587] __do_fast_syscall_32+0xb0/0x110 [ 1303.115500][T17587] ? irqentry_exit_to_user_mode+0x82/0xa0 [ 1303.115685][T17587] do_fast_syscall_32+0x38/0x80 [ 1303.115863][T17587] do_SYSENTER_32+0x1f/0x30 [ 1303.116052][T17587] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1303.116235][T17587] RIP: 0023:0xf7f86539 [ 1303.116339][T17587] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1303.116468][T17587] RSP: 002b:00000000f50a655c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 1303.116606][T17587] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000000 [ 1303.116715][T17587] RDX: 000000000000000d RSI: 0000000000000000 RDI: 0000000000000000 [ 1303.116799][T17587] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1303.116886][T17587] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1303.116970][T17587] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1303.117084][T17587] [ 1303.394349][ T5884] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1303.595293][ T5884] usb 4-1: device descriptor read/64, error -71 [ 1303.855886][ T5884] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1304.014599][ T5884] usb 4-1: device descriptor read/64, error -71 [ 1304.136011][ T5884] usb usb4-port1: attempt power cycle [ 1304.505166][ T5884] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1304.576688][ T5884] usb 4-1: device descriptor read/8, error -71 [ 1304.788365][T17603] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3658'. [ 1304.797758][T17603] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3658'. [ 1304.964550][ T5884] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1304.995495][ T5884] usb 4-1: device descriptor read/8, error -71 [ 1305.112137][ T5884] usb usb4-port1: unable to enumerate USB device [ 1305.673942][T17613] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3662'. [ 1305.841425][T17620] netlink: 'syz.4.3662': attribute type 10 has an invalid length. [ 1305.873097][T17620] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3662'. [ 1306.668185][T17630] loop8: detected capacity change from 0 to 1024 [ 1306.751795][T17630] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1306.762406][ T5801] Bluetooth: hci3: command 0x0406 tx timeout [ 1306.783970][T17631] loop3: detected capacity change from 0 to 1024 [ 1306.814490][T17630] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1306.882582][T17630] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1306.882682][T17631] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1306.972584][T17631] EXT4-fs error (device loop3): ext4_xattr_set_entry:1660: inode #15: comm syz.3.3665: corrupted xattr entries [ 1307.062935][T17631] EXT4-fs error (device loop3): ext4_xattr_block_set:2210: inode #15: comm syz.3.3665: bad block 113 [ 1307.349912][T16290] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1307.405222][ T5884] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1307.507251][T17643] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3670'. [ 1307.622971][ T5884] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1307.634806][ T5884] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1307.651772][ T5884] usb 4-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 1307.663514][ T5884] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1307.907131][ T5884] usb 4-1: config 0 descriptor?? [ 1308.026839][T17651] FAULT_INJECTION: forcing a failure. [ 1308.026839][T17651] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1308.040956][T17651] CPU: 0 UID: 0 PID: 17651 Comm: syz.8.3672 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(undef) [ 1308.041114][T17651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1308.041207][T17651] Call Trace: [ 1308.041267][T17651] [ 1308.041321][T17651] __dump_stack+0x26/0x30 [ 1308.041500][T17651] dump_stack_lvl+0x1df/0x270 [ 1308.041693][T17651] dump_stack+0x1e/0x25 [ 1308.041851][T17651] should_fail_ex+0x7dc/0x8a0 [ 1308.042074][T17651] should_fail+0x2a/0x40 [ 1308.042268][T17651] should_fail_usercopy+0x2e/0x40 [ 1308.042497][T17651] _copy_from_user+0x33/0x100 [ 1308.042693][T17651] get_compat_msghdr+0x63/0x740 [ 1308.042907][T17651] ? kmsan_get_metadata+0x105/0x1b0 [ 1308.043108][T17651] ___sys_sendmsg+0x198/0x3b0 [ 1308.043269][T17651] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1308.043470][T17651] ? __rcu_read_unlock+0x6d/0xd0 [ 1308.043650][T17651] ? __fget_files+0x3b4/0x4a0 [ 1308.043800][T17651] ? __fget_files+0x3b9/0x4a0 [ 1308.043957][T17651] ? kmsan_get_metadata+0x105/0x1b0 [ 1308.044159][T17651] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1308.044352][T17651] __sys_sendmsg+0x1aa/0x300 [ 1308.044544][T17651] ? kmsan_get_metadata+0x105/0x1b0 [ 1308.044716][T17651] ? kmsan_get_metadata+0x105/0x1b0 [ 1308.044905][T17651] __ia32_compat_sys_sendmsg+0xa4/0x100 [ 1308.045161][T17651] ia32_sys_call+0x3692/0x42c0 [ 1308.045300][T17651] __do_fast_syscall_32+0xb0/0x110 [ 1308.045488][T17651] ? irqentry_exit_to_user_mode+0x82/0xa0 [ 1308.045679][T17651] do_fast_syscall_32+0x38/0x80 [ 1308.045863][T17651] do_SYSENTER_32+0x1f/0x30 [ 1308.046036][T17651] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1308.046222][T17651] RIP: 0023:0xf7fc3539 [ 1308.046334][T17651] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1308.046458][T17651] RSP: 002b:00000000f50e655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1308.046584][T17651] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 1308.046690][T17651] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1308.046769][T17651] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1308.046849][T17651] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1308.046928][T17651] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1308.047060][T17651] [ 1309.188512][T17659] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3677'. [ 1309.904097][T17668] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3681'. [ 1309.944981][ T5884] usbhid 4-1:0.0: can't add hid device: -71 [ 1309.951668][ T5884] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1310.021147][T14826] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1310.033339][ T5884] usb 4-1: USB disconnect, device number 56 [ 1310.137031][T17661] loop6: detected capacity change from 0 to 2048 [ 1310.146293][T17672] netlink: 'syz.8.3681': attribute type 10 has an invalid length. [ 1310.251007][T17661] hpfs: Unknown parameter './bus' [ 1310.366401][T17676] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3681'. [ 1310.490303][T17675] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3683'. [ 1310.595772][T17679] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3684'. [ 1310.973247][T17681] loop3: detected capacity change from 0 to 1024 [ 1310.999890][T17681] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1311.018916][T17681] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1311.084463][T17685] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.3686'. [ 1311.251223][T17681] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1311.931144][T14826] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1312.339665][T17700] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1312.352372][T17700] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1312.498197][T17702] FAULT_INJECTION: forcing a failure. [ 1312.498197][T17702] name failslab, interval 1, probability 0, space 0, times 0 [ 1312.511834][T17702] CPU: 0 UID: 0 PID: 17702 Comm: syz.3.3692 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(undef) [ 1312.511976][T17702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1312.512065][T17702] Call Trace: [ 1312.512114][T17702] [ 1312.512160][T17702] __dump_stack+0x26/0x30 [ 1312.512343][T17702] dump_stack_lvl+0x1df/0x270 [ 1312.512532][T17702] dump_stack+0x1e/0x25 [ 1312.512695][T17702] should_fail_ex+0x7dc/0x8a0 [ 1312.512920][T17702] should_failslab+0x15b/0x200 [ 1312.513119][T17702] __kmalloc_noprof+0x182/0x1310 [ 1312.513318][T17702] ? tomoyo_realpath_from_path+0xeb/0x9f0 [ 1312.513525][T17702] ? filter_irq_stacks+0x13f/0x190 [ 1312.513681][T17702] ? kmsan_get_metadata+0x105/0x1b0 [ 1312.513858][T17702] tomoyo_realpath_from_path+0xeb/0x9f0 [ 1312.514037][T17702] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1312.514241][T17702] ? __srcu_read_lock+0x5e/0xd0 [ 1312.514428][T17702] tomoyo_path_number_perm+0x1d0/0x7d0 [ 1312.514580][T17702] ? stack_depot_save_flags+0x35/0x7c0 [ 1312.514793][T17702] ? kmsan_get_metadata+0x105/0x1b0 [ 1312.514974][T17702] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1312.515226][T17702] tomoyo_file_ioctl+0x3d/0x50 [ 1312.515408][T17702] security_file_ioctl_compat+0x141/0x590 [ 1312.515631][T17702] __ia32_compat_sys_ioctl+0x150/0x1260 [ 1312.515788][T17702] ? kmsan_get_metadata+0x105/0x1b0 [ 1312.515963][T17702] ? kmsan_get_metadata+0x105/0x1b0 [ 1312.516158][T17702] ia32_sys_call+0x2d07/0x42c0 [ 1312.516297][T17702] __do_fast_syscall_32+0xb0/0x110 [ 1312.516503][T17702] ? irqentry_exit_to_user_mode+0x82/0xa0 [ 1312.516685][T17702] do_fast_syscall_32+0x38/0x80 [ 1312.516904][T17702] do_SYSENTER_32+0x1f/0x30 [ 1312.517084][T17702] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1312.517265][T17702] RIP: 0023:0xf70ae539 [ 1312.517368][T17702] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1312.517492][T17702] RSP: 002b:00000000f509e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1312.517623][T17702] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000004004ae99 [ 1312.517717][T17702] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1312.517827][T17702] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1312.517913][T17702] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1312.518008][T17702] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1312.518138][T17702] [ 1312.771918][T17702] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1312.782079][T17707] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3693'. [ 1312.791568][T17707] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3693'. [ 1313.165022][T17714] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3696'. [ 1313.231279][T17715] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3697'. [ 1313.441647][T17719] netlink: 'syz.4.3697': attribute type 10 has an invalid length. [ 1313.546964][T17725] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3697'. [ 1313.641591][T17723] netlink: 1624 bytes leftover after parsing attributes in process `syz.8.3699'. [ 1314.430544][T17735] loop3: detected capacity change from 0 to 1024 [ 1314.455977][T17735] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1314.477366][T17735] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1314.571364][T17735] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1315.127253][T14826] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1315.212391][T17746] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3706'. [ 1315.467079][T17748] FAULT_INJECTION: forcing a failure. [ 1315.467079][T17748] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1315.481749][T17748] CPU: 1 UID: 0 PID: 17748 Comm: syz.6.3708 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(undef) [ 1315.481912][T17748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1315.481999][T17748] Call Trace: [ 1315.482052][T17748] [ 1315.482108][T17748] __dump_stack+0x26/0x30 [ 1315.482287][T17748] dump_stack_lvl+0x1df/0x270 [ 1315.482470][T17748] dump_stack+0x1e/0x25 [ 1315.482633][T17748] should_fail_ex+0x7dc/0x8a0 [ 1315.482846][T17748] should_fail+0x2a/0x40 [ 1315.483022][T17748] should_fail_usercopy+0x2e/0x40 [ 1315.483220][T17748] _copy_from_user+0x33/0x100 [ 1315.483407][T17748] get_compat_msghdr+0x63/0x740 [ 1315.483613][T17748] ? kmsan_get_metadata+0x105/0x1b0 [ 1315.483812][T17748] ___sys_sendmsg+0x198/0x3b0 [ 1315.483971][T17748] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1315.484170][T17748] ? __rcu_read_unlock+0x6d/0xd0 [ 1315.484345][T17748] ? __fget_files+0x3b4/0x4a0 [ 1315.484510][T17748] ? __fget_files+0x3b9/0x4a0 [ 1315.484684][T17748] ? kmsan_get_metadata+0x105/0x1b0 [ 1315.484863][T17748] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1315.485055][T17748] __sys_sendmsg+0x1aa/0x300 [ 1315.485198][T17748] ? kmsan_get_metadata+0x105/0x1b0 [ 1315.485367][T17748] ? kmsan_get_metadata+0x105/0x1b0 [ 1315.485555][T17748] __ia32_compat_sys_sendmsg+0xa4/0x100 [ 1315.485788][T17748] ia32_sys_call+0x3692/0x42c0 [ 1315.485923][T17748] __do_fast_syscall_32+0xb0/0x110 [ 1315.486099][T17748] ? irqentry_exit_to_user_mode+0x82/0xa0 [ 1315.486290][T17748] do_fast_syscall_32+0x38/0x80 [ 1315.486459][T17748] do_SYSENTER_32+0x1f/0x30 [ 1315.486632][T17748] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1315.486798][T17748] RIP: 0023:0xf7f86539 [ 1315.486899][T17748] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1315.487020][T17748] RSP: 002b:00000000f50a655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1315.487151][T17748] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000200 [ 1315.487249][T17748] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1315.487337][T17748] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1315.487422][T17748] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1315.487510][T17748] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1315.487623][T17748] [ 1315.770356][T17750] Cannot find add_set index 0 as target [ 1315.985220][T17753] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3710'. [ 1316.126470][T17750] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3709'. [ 1316.141632][T17757] 9pnet_fd: Insufficient options for proto=fd [ 1316.152687][T17750] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3709'. [ 1317.310577][T17772] loop3: detected capacity change from 0 to 1024 [ 1317.398082][T17772] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1317.413947][T17781] netlink: 'syz.8.3716': attribute type 10 has an invalid length. [ 1317.497274][T17772] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1317.626435][T17772] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1318.238374][T14826] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1318.350864][T17792] __nla_validate_parse: 3 callbacks suppressed [ 1318.350949][T17792] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3722'. [ 1318.395825][T17792] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1318.757547][T17797] FAULT_INJECTION: forcing a failure. [ 1318.757547][T17797] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1318.771534][T17797] CPU: 0 UID: 0 PID: 17797 Comm: syz.3.3723 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(undef) [ 1318.771678][T17797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1318.771759][T17797] Call Trace: [ 1318.771808][T17797] [ 1318.771861][T17797] __dump_stack+0x26/0x30 [ 1318.772017][T17797] dump_stack_lvl+0x1df/0x270 [ 1318.772191][T17797] dump_stack+0x1e/0x25 [ 1318.772359][T17797] should_fail_ex+0x7dc/0x8a0 [ 1318.772583][T17797] should_fail+0x2a/0x40 [ 1318.772762][T17797] should_fail_usercopy+0x2e/0x40 [ 1318.772968][T17797] _copy_to_user+0x35/0x120 [ 1318.773172][T17797] simple_read_from_buffer+0x1b2/0x340 [ 1318.773344][T17797] proc_fail_nth_read+0x1d2/0x2c0 [ 1318.773557][T17797] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1318.773738][T17797] vfs_read+0x279/0xef0 [ 1318.773867][T17797] ? stack_depot_save_flags+0x35/0x7c0 [ 1318.774041][T17797] ? kmsan_get_metadata+0x105/0x1b0 [ 1318.774208][T17797] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1318.774386][T17797] __ia32_sys_read+0x1f9/0x4d0 [ 1318.774556][T17797] ia32_sys_call+0x184c/0x42c0 [ 1318.774675][T17797] __do_fast_syscall_32+0xb0/0x110 [ 1318.774835][T17797] ? irqentry_exit_to_user_mode+0x82/0xa0 [ 1318.774987][T17797] do_fast_syscall_32+0x38/0x80 [ 1318.775174][T17797] do_SYSENTER_32+0x1f/0x30 [ 1318.775325][T17797] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1318.775490][T17797] RIP: 0023:0xf70ae539 [ 1318.775585][T17797] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1318.775697][T17797] RSP: 002b:00000000f509e590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 1318.775818][T17797] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f509e620 [ 1318.775909][T17797] RDX: 000000000000000f RSI: 00000000f7412ff4 RDI: 0000000000000000 [ 1318.775989][T17797] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1318.776067][T17797] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1318.776152][T17797] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1318.776263][T17797] [ 1320.616911][T17821] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3736'. [ 1320.704859][T17821] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1321.241577][T17829] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3738'. [ 1321.336006][T17831] FAULT_INJECTION: forcing a failure. [ 1321.336006][T17831] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1321.349737][T17831] CPU: 0 UID: 0 PID: 17831 Comm: syz.8.3739 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(undef) [ 1321.349883][T17831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1321.349961][T17831] Call Trace: [ 1321.350009][T17831] [ 1321.350058][T17831] __dump_stack+0x26/0x30 [ 1321.350225][T17831] dump_stack_lvl+0x1df/0x270 [ 1321.350390][T17831] dump_stack+0x1e/0x25 [ 1321.350538][T17831] should_fail_ex+0x7dc/0x8a0 [ 1321.350740][T17831] should_fail+0x2a/0x40 [ 1321.350910][T17831] should_fail_usercopy+0x2e/0x40 [ 1321.351097][T17831] _copy_from_user+0x33/0x100 [ 1321.351284][T17831] get_compat_msghdr+0x63/0x740 [ 1321.351475][T17831] ? kmsan_get_metadata+0x105/0x1b0 [ 1321.351656][T17831] ___sys_sendmsg+0x198/0x3b0 [ 1321.351797][T17831] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1321.351972][T17831] ? __rcu_read_unlock+0x6d/0xd0 [ 1321.352126][T17831] ? __fget_files+0x3b4/0x4a0 [ 1321.352285][T17831] ? __fget_files+0x3b9/0x4a0 [ 1321.352474][T17831] ? kmsan_get_metadata+0x105/0x1b0 [ 1321.352656][T17831] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1321.352852][T17831] __sys_sendmsg+0x1aa/0x300 [ 1321.352996][T17831] ? kmsan_get_metadata+0x105/0x1b0 [ 1321.353177][T17831] ? kmsan_get_metadata+0x105/0x1b0 [ 1321.353375][T17831] __ia32_compat_sys_sendmsg+0xa4/0x100 [ 1321.353606][T17831] ia32_sys_call+0x3692/0x42c0 [ 1321.353740][T17831] __do_fast_syscall_32+0xb0/0x110 [ 1321.353922][T17831] ? irqentry_exit_to_user_mode+0x82/0xa0 [ 1321.354098][T17831] do_fast_syscall_32+0x38/0x80 [ 1321.354286][T17831] do_SYSENTER_32+0x1f/0x30 [ 1321.354452][T17831] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1321.354632][T17831] RIP: 0023:0xf7fc3539 [ 1321.354731][T17831] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1321.354856][T17831] RSP: 002b:00000000f50e655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1321.354988][T17831] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800003c0 [ 1321.355085][T17831] RDX: 0000000000000084 RSI: 0000000000000000 RDI: 0000000000000000 [ 1321.355168][T17831] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1321.355258][T17831] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1321.355343][T17831] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1321.355460][T17831] [ 1322.108618][T17839] nbd: socks must be embedded in a SOCK_ITEM attr [ 1322.143456][T17839] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3743'. [ 1323.582059][T17859] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3750'. [ 1323.697279][T17865] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1323.751620][T17863] loop3: detected capacity change from 0 to 1024 [ 1323.803161][T17863] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1323.845081][T17863] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1324.092335][T17863] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1324.332968][T14826] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1326.573706][T17901] ===================================================== [ 1326.583804][T17901] BUG: KMSAN: uninit-value in sctp_assoc_bh_rcv+0x34e/0xbc0 [ 1326.592115][T17901] sctp_assoc_bh_rcv+0x34e/0xbc0 [ 1326.597587][T17901] sctp_inq_push+0x2a3/0x350 [ 1326.602450][T17901] sctp_backlog_rcv+0x3c7/0xda0 [ 1326.607689][T17901] sk_backlog_rcv+0x13f/0x420 [ 1326.612591][T17901] __release_sock+0x1d3/0x330 [ 1326.617614][T17901] release_sock+0x6b/0x270 [ 1326.622271][T17901] sctp_wait_for_connect+0x458/0x820 [ 1326.628330][T17901] sctp_sendmsg_to_asoc+0x223a/0x2260 [ 1326.634012][T17901] sctp_sendmsg+0x3910/0x49f0 [ 1326.639002][T17901] inet_sendmsg+0x269/0x2a0 [ 1326.643737][T17901] __sock_sendmsg+0x278/0x3d0 [ 1326.648787][T17901] __sys_sendto+0x590/0x710 [ 1326.653545][T17901] __ia32_sys_sendto+0x12f/0x200 [ 1326.659012][T17901] ia32_sys_call+0x1397/0x42c0 [ 1326.663980][T17901] __do_fast_syscall_32+0xb0/0x110 [ 1326.669450][T17901] do_fast_syscall_32+0x38/0x80 [ 1326.676224][T17901] do_SYSENTER_32+0x1f/0x30 [ 1326.680958][T17901] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1326.690305][T17901] [ 1326.692755][T17901] Uninit was created at: [ 1326.697944][T17901] __kmalloc_node_track_caller_noprof+0x96d/0x12f0 [ 1326.705020][T17901] kmalloc_reserve+0x22f/0x4b0 [ 1326.710014][T17901] __alloc_skb+0x347/0x7d0 [ 1326.715081][T17901] sctp_packet_transmit+0x189e/0x4560 [ 1326.720669][T17901] sctp_outq_flush+0x1c7d/0x67c0 [ 1326.725919][T17901] sctp_outq_uncork+0x9e/0xc0 [ 1326.730797][T17901] sctp_do_sm+0x8c8e/0x9720 [ 1326.735643][T17901] sctp_assoc_bh_rcv+0x88b/0xbc0 [ 1326.740826][T17901] sctp_inq_push+0x2a3/0x350 [ 1326.745823][T17901] sctp_backlog_rcv+0x3c7/0xda0 [ 1326.750882][T17901] sk_backlog_rcv+0x13f/0x420 [ 1326.755900][T17901] __release_sock+0x1d3/0x330 [ 1326.760786][T17901] release_sock+0x6b/0x270 [ 1326.765554][T17901] sctp_wait_for_connect+0x458/0x820 [ 1326.771119][T17901] sctp_sendmsg_to_asoc+0x223a/0x2260 [ 1326.776855][T17901] sctp_sendmsg+0x3910/0x49f0 [ 1326.781740][T17901] inet_sendmsg+0x269/0x2a0 [ 1326.789215][T17901] __sock_sendmsg+0x278/0x3d0 [ 1326.794820][T17901] __sys_sendto+0x590/0x710 [ 1326.799579][T17901] __ia32_sys_sendto+0x12f/0x200 [ 1326.805715][T17901] ia32_sys_call+0x1397/0x42c0 [ 1326.810729][T17901] __do_fast_syscall_32+0xb0/0x110 [ 1326.816258][T17901] do_fast_syscall_32+0x38/0x80 [ 1326.821360][T17901] do_SYSENTER_32+0x1f/0x30 [ 1326.826211][T17901] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1326.832975][T17901] [ 1326.835730][T17901] CPU: 1 UID: 0 PID: 17901 Comm: syz.4.3763 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(undef) [ 1326.848205][T17901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1326.858551][T17901] ===================================================== [ 1326.865820][T17901] Disabling lock debugging due to kernel taint [ 1326.872121][T17901] Kernel panic - not syncing: kmsan.panic set ... [ 1326.878702][T17901] CPU: 1 UID: 0 PID: 17901 Comm: syz.4.3763 Tainted: G B 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(undef) [ 1326.892672][T17901] Tainted: [B]=BAD_PAGE [ 1326.896987][T17901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1326.907181][T17901] Call Trace: [ 1326.910570][T17901] [ 1326.913620][T17901] __dump_stack+0x26/0x30 [ 1326.918146][T17901] dump_stack_lvl+0x53/0x270 [ 1326.922924][T17901] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1326.928943][T17901] dump_stack+0x1e/0x25 [ 1326.933276][T17901] panic+0x4bd/0xd50 [ 1326.937417][T17901] kmsan_report+0x29d/0x2a0 [ 1326.942126][T17901] ? __sock_sendmsg+0x278/0x3d0 [ 1326.947170][T17901] ? write_ok_or_segv+0x26/0x100 [ 1326.952319][T17901] ? __do_fast_syscall_32+0xb0/0x110 [ 1326.957833][T17901] ? do_fast_syscall_32+0x38/0x80 [ 1326.963048][T17901] ? do_SYSENTER_32+0x1f/0x30 [ 1326.967939][T17901] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1326.974646][T17901] ? __msan_warning+0x96/0x120 [ 1326.979578][T17901] ? sctp_assoc_bh_rcv+0x34e/0xbc0 [ 1326.984875][T17901] ? sctp_inq_push+0x2a3/0x350 [ 1326.989810][T17901] ? sctp_backlog_rcv+0x3c7/0xda0 [ 1326.995033][T17901] ? sk_backlog_rcv+0x13f/0x420 [ 1327.000086][T17901] ? __release_sock+0x1d3/0x330 [ 1327.005115][T17901] ? release_sock+0x6b/0x270 [ 1327.009906][T17901] ? sctp_wait_for_connect+0x458/0x820 [ 1327.015532][T17901] ? sctp_sendmsg_to_asoc+0x223a/0x2260 [ 1327.021255][T17901] ? sctp_sendmsg+0x3910/0x49f0 [ 1327.026265][T17901] ? inet_sendmsg+0x269/0x2a0 [ 1327.031131][T17901] ? __sock_sendmsg+0x278/0x3d0 [ 1327.036157][T17901] ? __sys_sendto+0x590/0x710 [ 1327.041041][T17901] ? __ia32_sys_sendto+0x12f/0x200 [ 1327.046355][T17901] ? ia32_sys_call+0x1397/0x42c0 [ 1327.051440][T17901] ? __do_fast_syscall_32+0xb0/0x110 [ 1327.056924][T17901] ? do_fast_syscall_32+0x38/0x80 [ 1327.062139][T17901] ? do_SYSENTER_32+0x1f/0x30 [ 1327.067021][T17901] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1327.073723][T17901] ? __loadsegment_fs+0x21/0x30 [ 1327.078755][T17901] ? kmsan_get_metadata+0x105/0x1b0 [ 1327.084147][T17901] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1327.090201][T17901] ? kmsan_get_metadata+0x105/0x1b0 [ 1327.095607][T17901] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1327.101646][T17901] ? sctp_inq_pop+0x15ea/0x19e0 [ 1327.106721][T17901] ? kmsan_get_metadata+0x105/0x1b0 [ 1327.112115][T17901] __msan_warning+0x96/0x120 [ 1327.116872][T17901] sctp_assoc_bh_rcv+0x34e/0xbc0 [ 1327.122561][T17901] ? __pfx_sctp_assoc_bh_rcv+0x10/0x10 [ 1327.128226][T17901] sctp_inq_push+0x2a3/0x350 [ 1327.133012][T17901] sctp_backlog_rcv+0x3c7/0xda0 [ 1327.138067][T17901] ? kmsan_get_metadata+0x105/0x1b0 [ 1327.143484][T17901] ? __pfx_sctp_backlog_rcv+0x10/0x10 [ 1327.149084][T17901] sk_backlog_rcv+0x13f/0x420 [ 1327.153957][T17901] __release_sock+0x1d3/0x330 [ 1327.158814][T17901] release_sock+0x6b/0x270 [ 1327.163444][T17901] sctp_wait_for_connect+0x458/0x820 [ 1327.168964][T17901] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1327.175239][T17901] sctp_sendmsg_to_asoc+0x223a/0x2260 [ 1327.180801][T17901] ? kmsan_get_metadata+0x105/0x1b0 [ 1327.186204][T17901] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1327.192244][T17901] sctp_sendmsg+0x3910/0x49f0 [ 1327.197145][T17901] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1327.203799][T17901] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1327.209103][T17901] inet_sendmsg+0x269/0x2a0 [ 1327.213831][T17901] __sock_sendmsg+0x278/0x3d0 [ 1327.218708][T17901] __sys_sendto+0x590/0x710 [ 1327.223415][T17901] ? do_futex+0x3a1/0x480 [ 1327.227998][T17901] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1327.234558][T17901] __ia32_sys_sendto+0x12f/0x200 [ 1327.239720][T17901] ia32_sys_call+0x1397/0x42c0 [ 1327.244647][T17901] __do_fast_syscall_32+0xb0/0x110 [ 1327.249977][T17901] ? irqentry_exit_to_user_mode+0x82/0xa0 [ 1327.255913][T17901] do_fast_syscall_32+0x38/0x80 [ 1327.260980][T17901] do_SYSENTER_32+0x1f/0x30 [ 1327.265688][T17901] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1327.272223][T17901] RIP: 0023:0xf7f44539 [ 1327.276450][T17901] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1327.296255][T17901] RSP: 002b:00000000f506655c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 1327.304873][T17901] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080847fff [ 1327.313019][T17901] RDX: 000000000000cf88 RSI: 0000000000000000 RDI: 000000008005ffe4 [ 1327.321156][T17901] RBP: 000000000000001c R08: 0000000000000000 R09: 0000000000000000 [ 1327.329314][T17901] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1327.337403][T17901] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1327.345545][T17901] [ 1327.349029][T17901] Kernel Offset: disabled [ 1327.353448][T17901] Rebooting in 86400 seconds..