last executing test programs: 19m11.233871655s ago: executing program 32 (id=35): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x8004587d, 0x0) link(0x0, &(0x7f0000001740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000001440)={'bridge0\x00', 0x0}) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x806, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x103400, 0x0) readv(r2, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0x2}, {&(0x7f0000000180)=""/172, 0x2000022c}], 0x3) 19m0.173658407s ago: executing program 33 (id=48): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(0x0, 0x0) socketpair(0x1, 0x100000005, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x3, 0xd, 0x1, 0x41001, 0x1, 0xff, '\x00', r1, r2, 0x4, 0x5, 0x4, 0x0, @void, @value, @void, @value}, 0x50) syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xc, 0x20, &(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRESOCT=r2], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) read$dsp(0xffffffffffffffff, &(0x7f00000002c0)=""/59, 0x3b) syz_emit_vhci(&(0x7f0000000500)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x0, 0xc8, 0x6}}}, 0x7) 17m58.040091692s ago: executing program 34 (id=154): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) ioctl$TIOCSERGETLSR(r2, 0x5459, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f0000000180)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x1, 0x3, 0x80001}) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) 15m49.673835427s ago: executing program 35 (id=427): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 15m39.761224055s ago: executing program 36 (id=439): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000"], 0x7c}}, 0x80) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000210000000000000000000000000a6c000000160a3f360000000000000000020000000900010073797a30000000004000038008000240000000002c0003801400010076657468305f746f5f626f6e64000000140001007665"], 0x94}}, 0x8000) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x4000000) syz_open_dev$I2C(0x0, 0x6, 0x402) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, &(0x7f0000000300)=""/67, 0x0, 0x43, 0x1, 0x3, 0x0, @void, @value}, 0x28) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b07, &(0x7f0000000440)={'wlan1\x00', @random="8dffffffebff"}) 14m29.91550532s ago: executing program 37 (id=529): mount(&(0x7f0000000440)=@nullb, &(0x7f0000000480)='./file1\x00', &(0x7f00000004c0)='9p\x00', 0x0, 0x0) request_key(&(0x7f0000000100)='rxrpc_s\x00', 0x0, 0x0, 0xfffffffffffffffc) r0 = add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) add_key$keyring(0x0, &(0x7f0000000400)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) fsopen(&(0x7f00000000c0)='virtiofs\x00', 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x800) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x8, 0x0) syz_mount_image$erofs(&(0x7f00000001c0), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES64, @ANYRES64, @ANYRESHEX, @ANYRES16, @ANYRES8, @ANYRESHEX], 0xfe, 0x1d1, &(0x7f0000000640)="$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") add_key$fscrypt_provisioning(0x0, &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r0) 13m20.498770876s ago: executing program 38 (id=692): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x0) r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x5, 0x0) close(r1) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) getsockname$inet(r3, 0x0, &(0x7f0000000040)) socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0xa002a008}) 10m27.341502792s ago: executing program 39 (id=1017): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 10m16.982986399s ago: executing program 40 (id=1032): r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0], 0x2}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x4, r1}) 8m49.137721149s ago: executing program 41 (id=1151): r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001300)={0xc, {"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", 0x1000}}, 0x1006) ioctl$GIO_CMAP(r2, 0x4b70, &(0x7f00000000c0)) ioctl$PPPIOCGUNIT(r2, 0x80047456, &(0x7f0000000000)) ioctl$int_in(r0, 0x0, &(0x7f00000000c0)=0x45) syz_usb_connect$cdc_ecm(0x5, 0x5a, &(0x7f0000000480)=ANY=[@ANYBLOB="120100001a0000102505a1a440000000010109024800010100200009040000ff020200000d240f"], 0x0) syz_emit_ethernet(0x66, &(0x7f0000000040)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x30, 0x3a, 0x0, @private2, @mcast1, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, '\x00', 0x2, 0x0, 0x0, @private1, @private2}}}}}}}, 0x0) chdir(&(0x7f0000000100)='./file0\x00') 8m21.089882652s ago: executing program 42 (id=1181): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000006780)=[{{0x0, 0x0, 0x0}}], 0x80000000000020c, 0x0) setsockopt$inet_int(r0, 0x3000000, 0xb, 0x0, 0x0) 8m2.184077727s ago: executing program 43 (id=1215): r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000740)={0x20, 0x3, 0x2, "b23b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x82, 0x2, "c9a7"}, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f00000003c0)={0x20, 0x23, 0x2, "f6cb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001640)={0x44, &(0x7f00000002c0)={0x20, 0x17, 0x2, "78dc"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000680)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x81, 0x2, '\x00\x00'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 7m34.829288391s ago: executing program 44 (id=1258): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d00000007000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='nilfs2_transaction_transition\x00', r0, 0x0, 0xc0b}, 0x18) syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000180)='./file2\x00', 0x1800490, &(0x7f0000003280)=ANY=[], 0x6, 0xd9c, &(0x7f0000000e00)="$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") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00f733934900000000000000280012800968c6bfe6d0f2eef187c61c30f90e355c099e228d361ca8e3412be6197e8d0ccfcc34", @ANYRES32=0x0, @ANYBLOB="00000000410404000c001a800800028004000180"], 0x54}, 0x1, 0xd}, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r1 = eventfd(0x4) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000580)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) 7m29.067842041s ago: executing program 45 (id=1270): syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000180)={0xc, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0003020000000203cdc84c07dc74b8349e352011a4f80000aa07888fcff15c59e71e5ffa73045aea5122e024"]}, 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="043e110b07"], 0xec) 7m21.992432053s ago: executing program 46 (id=1280): syz_usb_connect(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000c9a83410861246206ec60102030109022400010200000009048e0002ff04010009050202100000fa00"], 0x0) 5m44.137475209s ago: executing program 47 (id=1479): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x13, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180200002020702500000000002020207b0a40fe00000000bda106000000000026010000f8ffffffb702000008000000b703000000000000850000000500000018010000202070250000000000202020c31af8ffa1000000bfa10000000000000701000000feffffb702000008000000b70300000000000085000000c700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x5e, &(0x7f0000005100)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00ed00", 0x28, 0x3a, 0xff, @remote={0xfe, 0xc0}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @mcast1, @mcast1}}}}}}, 0x0) syz_emit_ethernet(0x7a, &(0x7f00000009c0)={@random="856b1200ffff", @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "381f34", 0x44, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88a8, 0xf5ff}}}}}}}, 0x0) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0xf0f01c, 0x2}) keyctl$chown(0x4, r0, 0xee01, 0x0) keyctl$setperm(0x5, r0, 0x21081c22) keyctl$KEYCTL_MOVE(0x1e, r0, r0, r0, 0x0) 5m33.533039407s ago: executing program 48 (id=1493): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x30c) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x28, r4, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}]}]}, 0x28}}, 0x0) 4m51.855372389s ago: executing program 9 (id=1567): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'geneve0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) readv(r3, &(0x7f00000000c0)=[{&(0x7f0000000300)=""/203, 0x3}], 0x300) r4 = openat$tun(0xffffff9c, &(0x7f0000000140), 0x200800, 0x0) ioctl$TUNGETFILTER(r4, 0x800854db, &(0x7f00000006c0)=""/4096) sendto$inet(r3, 0x0, 0x0, 0x20008800, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x10b, 0x4, 0x0, &(0x7f0000048000), 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) connect$inet(r3, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) sendmmsg$inet(r3, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000000240)="60dbc0f4aca2fd393c58413552ee20a6ffb194eb866939781720f1a589bd4a5c95c4be84deeeb45c8ce7954b1c1057ede4df0326ff749c8aabb67b0138b7c5bc96cb44ea1d", 0x45}], 0x1}}], 0x1, 0x80) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)=0x13, 0x4) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="5800000010000300"/20, @ANYRES32=r2, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028005000400010000001c001a8018000a8014000700fc"], 0x58}, 0x1, 0x2}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'geneve0\x00'}) (async) socket$inet(0x2, 0x2, 0x0) (async) bind$inet(r3, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) (async) readv(r3, &(0x7f00000000c0)=[{&(0x7f0000000300)=""/203, 0x3}], 0x300) (async) openat$tun(0xffffff9c, &(0x7f0000000140), 0x200800, 0x0) (async) ioctl$TUNGETFILTER(r4, 0x800854db, &(0x7f00000006c0)=""/4096) (async) sendto$inet(r3, 0x0, 0x0, 0x20008800, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc)=0x4, 0x10b, 0x4, 0x0, &(0x7f0000048000), 0x0) (async) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) connect$inet(r3, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) (async) sendmmsg$inet(r3, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000000240)="60dbc0f4aca2fd393c58413552ee20a6ffb194eb866939781720f1a589bd4a5c95c4be84deeeb45c8ce7954b1c1057ede4df0326ff749c8aabb67b0138b7c5bc96cb44ea1d", 0x45}], 0x1}}], 0x1, 0x80) (async) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)=0x13, 0x4) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="5800000010000300"/20, @ANYRES32=r2, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028005000400010000001c001a8018000a8014000700fc"], 0x58}, 0x1, 0x2}, 0x0) (async) 4m50.694457023s ago: executing program 9 (id=1571): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000015c0)={0x1, 0x2, 0x6000, 0x2000, &(0x7f0000fa2000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="010000000000000008001b"], 0x28}}, 0x0) 4m46.545223248s ago: executing program 49 (id=1570): r0 = socket(0x2b, 0x80801, 0x1) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @private=0xa010102, 0x4e23, 0x3, 'sh\x00', 0x1, 0x7, 0x49}, 0x2c) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000380)={{0x84, @dev={0xac, 0x14, 0x14, 0x2a}, 0x4e20, 0x3, 'sh\x00', 0x0, 0x60000000, 0xc}, {@loopback, 0x4e21, 0x2, 0x8f, 0xe1b2, 0xfffffffe}}, 0x44) setsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000000)=0x11e, 0x4) 4m46.428257395s ago: executing program 9 (id=1576): r0 = socket$rxrpc(0x21, 0x2, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) bind$rxrpc(r0, &(0x7f00000001c0)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e24, 0xfffffffd, @remote, 0x101}}, 0x24) syz_open_dev$MSR(&(0x7f0000000000), 0x6, 0x0) 4m45.661668736s ago: executing program 9 (id=1578): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) open(&(0x7f0000001740)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) syz_open_dev$evdev(0x0, 0x2, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7fe, 0x3, 0x0, 0x0, 0x3, 0x0, "ef359f413bb90152f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea00", "036c47c67816200400000000008000335263bdd6ef7ca21508e156ea51dd753abd950100002a00ffff01000000000009000200000000040000000100", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x8000000001, 0xfffffffffffffffe]}) r2 = shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmdt(r2) shmdt(r2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) setxattr$trusted_overlay_upper(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[], 0x835, 0x0) 4m44.311148413s ago: executing program 1 (id=1580): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x6348c2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000000c0)) 4m42.584183465s ago: executing program 9 (id=1582): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x400000002, 0x0) socket$unix(0x1, 0x5, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) eventfd2(0x8, 0x801) socket(0x2a, 0x2, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) socket$kcm(0x1e, 0x5, 0x0) r4 = socket$kcm(0x1e, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x200000000000000) 4m42.078801954s ago: executing program 1 (id=1584): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$l2tp(r1, &(0x7f0000000940)="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", 0x280, 0x200c0819, 0x0, 0x8dff) 4m41.140092429s ago: executing program 1 (id=1585): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000300)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x1, 0xad8, &(0x7f0000000e00)="$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") readv(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) syz_open_dev$evdev(0x0, 0x2, 0x240) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000380)=ANY=[], 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2c, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x6}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}]}, 0x2c}}, 0x404c800) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, 0x0, 0x20000080) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setresuid(0x0, 0xee00, 0x0) sendto$inet(r4, &(0x7f0000000580)="5ca7bb8fde0ce88fa02d07eec0fa3052b3b19477a8440b3167a4cd48bed723681afe25e1ee1d5875477d31cc830ebc626b5f3b365ce4bbef89520e9868956159a16ec3360589", 0x3d5bb649f2c3467, 0x40000d5, 0x0, 0x0) 4m40.906157073s ago: executing program 9 (id=1587): syz_emit_ethernet(0x4a6, &(0x7f0000000040)=ANY=[@ANYRESDEC=0x0], 0x0) syz_usb_connect(0x2, 0x52, &(0x7f0000000140)=ANY=[@ANYBLOB="120100036ffa680863070120ff2c0102030109024000021109400c0904080601ff8bbd020a240107000d020102052405"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x28, r1, 0x600, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_DEVKEY={0x14, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x5}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x91}, 0x5) 4m36.813240405s ago: executing program 50 (id=1587): syz_emit_ethernet(0x4a6, &(0x7f0000000040)=ANY=[@ANYRESDEC=0x0], 0x0) syz_usb_connect(0x2, 0x52, &(0x7f0000000140)=ANY=[@ANYBLOB="120100036ffa680863070120ff2c0102030109024000021109400c0904080601ff8bbd020a240107000d020102052405"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x28, r1, 0x600, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_DEVKEY={0x14, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x5}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x91}, 0x5) 4m36.763192828s ago: executing program 1 (id=1591): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) open(&(0x7f0000001740)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) syz_open_dev$evdev(0x0, 0x2, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7fe, 0x3, 0x0, 0x0, 0x3, 0x0, "ef359f413bb90152f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea00", "036c47c67816200400000000008000335263bdd6ef7ca21508e156ea51dd753abd950100002a00ffff01000000000009000200000000040000000100", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x8000000001, 0xfffffffffffffffe]}) r2 = shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmdt(r2) shmdt(r2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) setxattr$trusted_overlay_upper(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[], 0x835, 0x0) 4m34.135939742s ago: executing program 1 (id=1595): ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$kcm(0xa, 0x2, 0x73) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x161000) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0xc0505405, &(0x7f0000000340)={0x1}) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000018c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x210, 0x94, 0x94, 0x94, 0x0, 0x37c, 0x37c, 0x37c, 0x37c, 0x37c, 0x6, 0x0, {[{{@ip={@rand_addr, @multicast1, 0x0, 0x0, 'vlan0\x00', 'veth1\x00'}, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0x70, 0xd0, 0x0, {0x100000000000000}}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x0, 0x7, 0x2, 0x6, 0x6, 0x1], 0x4, 0x2}, {0x1, [0x1, 0x5, 0x7, 0x6, 0x0, 0x3], 0x1, 0x1}}}}, {{@ip={@rand_addr, @empty, 0x0, 0x0, 'dummy0\x00', 'ipvlan1\x00'}, 0x0, 0x70, 0xac}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private2}}}, {{@uncond, 0x0, 0x70, 0x94}, @TTL={0x24}}, {{@ip={@empty, @multicast1, 0x0, 0x0, 'caif0\x00', 'rose0\x00'}, 0x0, 0xb4, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}, @inet=@rpfilter={{0x24}}]}, @TTL={0x24}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x46c) socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(r2, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x10, 0x29, 0x37}}, @ip_tos_u8={{0xd, 0x29, 0x3}}, @ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x38}, 0x5efe) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x8}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x110, 0xffffffffffffffff, 0x10000) syz_mount_image$hfsplus(&(0x7f0000001640), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1002000, &(0x7f0000000000)=ANY=[], 0x0, 0x688, &(0x7f0000002540)="$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") getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000001340)={0x0, @in6={{0xa, 0x4e24, 0x1000, @local, 0xcc2b}}, 0x7, 0x1007, 0xb0b, 0x2, 0x1, 0x5, 0x9}, &(0x7f0000001400)=0x9c) r5 = socket$inet(0x2, 0x4000000805, 0x0) listen(r5, 0x5) sendmmsg(r5, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x7fffffff, @remote, 0x6, 0x4}, 0x80, &(0x7f00000014c0)=[{&(0x7f0000001500)="0a6c8ed4ab55971ccd008dac0883f093c9845f642234d65cd3263e9bb25f5dd6f42cbc82de06eb0e57c76b02e902960815bdfac8520dd02dcbee12c50de4b44f0076b134fb9939945ccc4efb67190abcdb8c7d2ee6de418a3b5dd32b3e3537e3195242b29691061994ef3d306b55040a6db364e0198d524d95d4634f9e7890c747ab10953bdaabb82b1afe423f77a8a540b090189e6dfce19e4d42a0e72504298e1758b355519a36ed581695aa60a720ca5a305b", 0xb4}, {&(0x7f0000001440)="b9e495e2d7b05048bef45297d7e597150a40fa1a20c025b5c566090b80422062d5010efac7e1b7a9e418b702a09966981e6077cee57b7356067e785d24ae05a043eb6ddfc9d41d5730f5dbfc7668a45b063cc93b536c89ef", 0x58}], 0x2}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1a0000"], 0x18}}], 0x2, 0x844) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x100003, &(0x7f0000006680)=0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000001100)) r6 = syz_open_dev$I2C(&(0x7f0000000480), 0x0, 0x400) ioctl$I2C_RDWR(r6, 0x707, &(0x7f00000001c0)={&(0x7f0000000200)=[{0x9, 0x0, 0x0, 0x0}, {0x5, 0xa44caf554528cc1, 0x0, 0x0}], 0x2}) iopl(0x9) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000015c0)=ANY=[@ANYRESDEC=r8, @ANYRES32, @ANYRESOCT, @ANYRESHEX, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000380)={r9, 0x58, &(0x7f00000016c0)}, 0x10) preadv(r7, &(0x7f0000000040)=[{&(0x7f0000000180)=""/66, 0x42}, {&(0x7f0000000240)=""/225, 0xe1}], 0x2, 0x0, 0x3) 4m32.547931088s ago: executing program 1 (id=1596): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x8000000, 0x102140) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0xfe, 0x2ae, &(0x7f0000000a40)="$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") truncate(&(0x7f0000000280)='./file1\x00', 0x3f00) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x2, &(0x7f0000000380)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@usrjquota}, {@lazytime}, {@jqfmt_vfsv0}, {@usrquota}, {@noload}, {@nodiscard}, {@barrier_val}, {@nombcache}, {@nodiscard}]}, 0x45, 0x7b9, &(0x7f0000000680)="$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") mkdir(&(0x7f0000000140)='./control\x00', 0x0) rmdir(&(0x7f0000000100)='./control\x00') ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000180)={0x82, ""/130}) 4m26.052573562s ago: executing program 51 (id=1596): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x8000000, 0x102140) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0xfe, 0x2ae, &(0x7f0000000a40)="$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") truncate(&(0x7f0000000280)='./file1\x00', 0x3f00) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x2, &(0x7f0000000380)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@usrjquota}, {@lazytime}, {@jqfmt_vfsv0}, {@usrquota}, {@noload}, {@nodiscard}, {@barrier_val}, {@nombcache}, {@nodiscard}]}, 0x45, 0x7b9, &(0x7f0000000680)="$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") mkdir(&(0x7f0000000140)='./control\x00', 0x0) rmdir(&(0x7f0000000100)='./control\x00') ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000180)={0x82, ""/130}) 3m48.050936247s ago: executing program 7 (id=1654): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func_proto, @func_proto]}}, 0x0, 0x32, 0x0, 0xa, 0x0, 0x0, @void, @value}, 0x28) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) syz_usb_connect(0x2, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0xc7, 0xa6, 0x7d, 0x40, 0x13b1, 0x42, 0xec, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x36, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x9a, 0x0, 0x2, 0x7e, 0xd7, 0x25, 0x92, [], [{{0x9, 0x5, 0x3, 0x8, 0x40, 0x9, 0x1}}, {{0x9, 0x5, 0x2, 0x3, 0x40, 0x8, 0x0, 0x7}}]}}]}}]}}, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000680), 0x0, 0x0) r2 = open$dir(&(0x7f0000000440)='./file0\x00', 0x101000, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x2399}}, 0x3c) fsopen(&(0x7f0000000280)='smb3\x00', 0x1) setsockopt$TIPC_MCAST_BROADCAST(r1, 0x10f, 0x85) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r5) sendmsg$NLBL_CIPSOV4_C_REMOVE(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)={0x1c, r6, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}}, 0x4000880) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f00000000c0)={{{@in6=@private0, @in=@initdev}}, {{@in6=@private1}, 0x0, @in6=@initdev}}, &(0x7f00000001c0)=0xe8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}]}]}], {0x14}}, 0x58}}, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r7, 0x8905, 0x0) r9 = socket$netlink(0x10, 0x3, 0x14) r10 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r10, &(0x7f000000a2c0), 0x0, 0x2000c000) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, 0x0, 0x0) unshare(0x22020400) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001100)=ANY=[], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$llc(0x1a, 0x1, 0x0) 3m45.05649547s ago: executing program 7 (id=1661): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r0, 0x0, 0x3f, 0x4810, &(0x7f0000000280)={0xa, 0x4e24, 0x1, @remote, 0xf5ff}, 0x1c) 3m43.844437886s ago: executing program 7 (id=1664): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x10, &(0x7f0000000680), 0x1, 0x254, &(0x7f00000006c0)="$eJzs3T1oJGUcBvBnZnc9c7fIqY0gfoCIaCCcnWBzNgoHchwiggonojbKRYgJdomVjYXWKqlsgtgZLSVNsFEEq6gpYiNosDBYaLGyOxvJx+qqm+zIze8HszPvzsd/Zneed7bY2Q3QWOeTXEzSSjKbpJOkOLjA3dVwfthcndm8mvR6T/xcDJar2pX99c4lWUnyUJKNssjL7WRp/ZmdX7ceu++txc69H6w/PTPVgxza3dl+fO/9y29+fOnBpS+//vFykYvpHjquk1eMeK5dJLecRrH/iaJd9x7wT1x5/aNv+rm/Nck9g/x3UqZ6895euGGjkwfe+6t13/npq9unua/Ayev1Ov1r4EoPaJwySTdFOZekmi7LubnqM/y3rbPlK/MLr82+NL947YW6eyrgpHST7Uc/PfPJuSP5/6FV5X+oVetOAqein/8nr6x915/ek3JohjuqUT//s88t3x/5h8aRf2iQFw+1SvmH5hqf/1q+ogNMges/NJf8Q3PJP1zHOn8/W/6hueQfmkv+obkO5h8AaJbembrvQAbqUnf/AwAAAAAAAAAAAAAAAAAAHLc6s3l1f5hWzc/fTXYfSdIeVb81+D/i5MbB49lfiv5ifyqq1Sby7F0TbmBCH9Z89/VN30/8Ek7kizvrrJ4sX0tW3khyod0+fv4Vw/Pvv7t5zPzO8xMW+JeKI+2Hn5pu/aN+X6u3/qWt5LN+/3NhVP9T5rbBeHT/0x3/E8tjvfrbhBsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgav4IAAD//7ANbcM=") creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) r0 = creat(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f0000000a40)={[{@noauto_da_alloc}]}, 0x0, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") r2 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r2, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x1c0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r3, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @aes256, 0x0, '\x00', @a}) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x50, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0x31, 0x33, @beacon={{{}, {}, @broadcast, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x80, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x0, 0x1, 0x0, 0x0, 0x2, 0x2e, 0x20}}, @void}}]}, 0x50}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000080), 0x800400, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c6d73697a653d3078303030303030303030303030303340642c63616368657461673d0102030405040708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e3d3e3f402c6d73697a653d3078336463363638313230303030303030302c63616368653d7265616461686561642c686173682c7375626a5f747970653d5d2b3a7d2c6d61736b3d5e4d41595f455845432c61707072616973655f747970653d696d617369672c7569643d00"/201, @ANYRESDEC=0x0, @ANYBLOB=',appraise_type=imasig,\x00']) fcntl$dupfd(r0, 0x0, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r8, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r8, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40000160) 3m41.113355589s ago: executing program 7 (id=1671): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) open(&(0x7f0000001740)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) syz_open_dev$evdev(0x0, 0x2, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7fe, 0x3, 0x0, 0x0, 0x3, 0x0, "ef359f413bb90152f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea00", "036c47c67816200400000000008000335263bdd6ef7ca21508e156ea51dd753abd950100002a00ffff01000000000009000200000000040000000100", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x8000000001, 0xfffffffffffffffe]}) r2 = shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmdt(r2) shmdt(r2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x10) setxattr$trusted_overlay_upper(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[], 0x835, 0x0) 3m40.242173666s ago: executing program 4 (id=1673): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x8880, &(0x7f00000001c0)=ANY=[@ANYBLOB='iocharset=m^ciceland,discard,discard,namecase=1,errors=remount-ro,discard,discard,dmask=00000000000000000000005,iocharset=maccyrillic,fmask=00000000000000000000005,\x00'], 0x5, 0x1525, &(0x7f0000000d40)="$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") (fail_nth: 9) 3m38.943814148s ago: executing program 6 (id=1674): openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000100), 0x2e100, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x441, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x12, 0x3, &(0x7f0000000200)=@framed={{0x85, 0x0, 0x0, 0x0, 0x39, 0x4}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000a40)={{0x0, 0x4, 0x249, 0x5, 0x0, 0x40, 0x6, 0xb0, 0x5, 0x3, 0x3, 0x4, 0x5, 0x1, 0x6}}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000240)={{r2, 0x4, 0x4056, 0x5, 0xffffffffffffff01, 0x81, 0x5, 0xf3, 0x0, 0x0, 0x7fff, 0x8, 0x8, 0x37, 0xffffffffffffffff}, 0x10, [0x0, 0x0]}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000380)={0x1, 0x13000, 0x1}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="c3ff000000000000240012800b0001006772657461700000140002800800140001008dab8ede0000000500130000000000"], 0x44}}, 0x0) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfd, 0x800}, 0xc) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000180)={{0x2, 0x4e24, @local}, {0x306, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}}, 0x2, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'batadv_slave_1\x00'}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000a00)={&(0x7f0000000880)={0x2, 0x4e23, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="10000000000000003400000001"], 0x10}, 0x10) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x7000, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0xeeef5001, 0x11d000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3m38.590767466s ago: executing program 7 (id=1677): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x200, 0x70bd2b, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_vlan\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@updsa={0x100, 0x1a, 0x1, 0x0, 0x0, {{@in6=@private0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x2}, {@in6=@local, 0xa00, 0x2b}, @in=@rand_addr=0x64010101, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x40}, [@coaddr={0x14}]}, 0x100}}, 0x0) 3m38.387735645s ago: executing program 4 (id=1678): r0 = openat$fb0(0xffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0xf00, 0xf0, 0x30, 0x300, 0x0, 0x80000001, 0x8, 0x2, {0x2, 0x2, 0x1}, {0x8, 0xe11a}, {0x1210, 0x5}, {0x6, 0x9}, 0x1, 0x0, 0x40000000, 0xd975, 0x0, 0x4, 0x8, 0x7, 0x7f, 0x100, 0x9, 0x4, 0xc, 0x0, 0x1, 0x5}) 3m37.42750614s ago: executing program 4 (id=1681): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40000160) 3m37.408227282s ago: executing program 7 (id=1682): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad433ec50000000f0000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 3m34.482783814s ago: executing program 52 (id=1682): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad433ec50000000f0000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 3m34.424226111s ago: executing program 6 (id=1686): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000380)=[@timestamp, @mss={0x2, 0xa}, @mss={0x2, 0x401}, @window={0x3, 0x74a}, @mss={0x2, 0xfff}, @sack_perm, @sack_perm, @sack_perm], 0x8) connect(r0, &(0x7f0000000480)=@in6={0xa, 0x4e24, 0xf, @empty, 0x6}, 0x80) r1 = syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000c00)=ANY=[@ANYBLOB="12010002d90000002505a8a44000010203010902240001012200040904000401070102070905010200024040bd09058202000282090136753cb9a56932682583c605de06f7d59c54df9427251dcdf8509a926cef07a7cbe42d4e30e73ad8b0187523c60111240ac27c05d4c41d435e8099fc804225bf83ade215883b18e01e54a06231a346d73011fe90"], &(0x7f0000000740)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x200, 0x4, 0x0, 0xf2, 0x20, 0x9}, 0x8, &(0x7f0000000400)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x5, [{0x97, &(0x7f00000005c0)=@string={0x97, 0x3, "b17979e56da778b2966952833f7e75b869f3cda42cafc24a3e7722bf2f53467d95e6b29baa20e42efadd43e45670bd1d87e5e930a530926e98b4b2ee50850b91d8130390e1138f1b90d35b95eebdfb7fd236d1e9cdaa6891a0185ab40bb485fbb8d2c94a0b80256f9f7b88ad96daf5ba210375dc2e01fe31b22d055a0ae3d3c4c46395c60fe7e2f79c34bdbdffc3c3076cc4e0c69a"}}, {0x6, &(0x7f0000000500)=@string={0x6, 0x3, "78f7ff4a"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x300a}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x430}}, {0x56, &(0x7f00000006c0)=@string={0x56, 0x3, "485d63ae1a67c6c0014dc5d484672ecb59b4f1965875efb75b79fe343ad7b4a86b1f9a5921a555ee979d907686a97ee6b1b32f0ff87ffe002c94cfd53ea292b944b7e281298bebc2ca66675fdf70d8a8e35d8ec4"}}]}) syz_usb_control_io$printer(r1, &(0x7f0000000900)={0xc, &(0x7f0000000780)={0x40, 0x30, 0xa7, {0xa7, 0xf, "2c3e4c75d375a4913374ded33842d6862cd5b430af1fba7f3ca0a22e8dd095974a4056d9aad7c56c90782494136890cc62c73f016b2c3e16cbeab402d081076b14214dcddef071d9977074151ad85d25470f38601e9cacd48f05506b89196743141509a32e926a03947b28d2b5539c963e3c7263c8665f9a96ff7239a061988baee21c98fda37d4aa73e0a1ceb78e25c20a3f4cb7a25d3a814a3a8333d8a956247fdc468cd"}}, &(0x7f0000000840)={0x0, 0x3, 0xaa, @string={0xaa, 0x3, "73351d2cf68dfcc13e0b6620f80b335a9999a66256a280879cc4db898589c0a73049a31a630f9b3843b35f689478429b7997f38392299d79082a4891aa9f1b81f19d7d5cfbaed562a26e884595eead07ddb54be1b9bddf3b5ae6ea30ba0e803211d04205821418bfb6073c018923194a0169afb1575b7f0095642d1d7f828354b14b9397ff2c2070b29eab61ae5bde7e64685d37dcb4954df21ed4a65c4c565dddce73163380e4f9"}}}, &(0x7f0000000bc0)={0x1c, &(0x7f0000000940)={0x20, 0x18, 0xae, "51f2eb3ce82269da24f74e34a4b207ae4ef6b0c029885d8d474778d1998fd2db81806ee2a3f637fe134c844ff7443139ac8e3fc43028193451a53d2dc7186b4a182d0a719f330bc5ec02c8ae5db93943672c9209458e3c017c16824c4e2bd84efa03d8f03f0a98d226118d657d6d6b27ba38469684a7d326b9467ea6f30cab8727f062d30a1392c40d7041e53b6baedd0dfd143872c28f6fa70c63df544b97c3c16ed6af68420cadc4ba07bcce4c"}, &(0x7f0000000a00)={0x0, 0xa, 0x1}, &(0x7f0000000a40)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000a80)={0x20, 0x0, 0x99, {0x97, "63abd803af5d467dc2aa0709cbfd3078a730555bab9464396bc0123bc80b93ccbd23ebeeead719fd8ad28604c2dcf32c03aa8b3d584cb9d4f3847e4bf212b584b0de5fbf306f6169e922bb4e0aede83560586f26a71ceb07dde817c4997cc274479ef98e4c8a6a014dca1dc06c0ce501209e3d48c0704dcf344ecafd018620784c9d4ecddb0ca22099f2cbc1195247a075909128656a90"}}, &(0x7f0000000b40)={0x20, 0x1, 0x1, 0x1}, &(0x7f0000000b80)={0x20, 0x0, 0x1, 0x50}}) getsockopt$inet_tcp_buf(r0, 0x6, 0xb, 0x0, &(0x7f0000000300)) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)}], 0x1) r2 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)='\x00', 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) r6 = socket$netlink(0x10, 0x3, 0x8000000004) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r8 = userfaultfd(0x801) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r8, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001d4000/0x9000)=nil, 0x400000, 0x2, 0x2}) capset(&(0x7f0000000100)={0x19980330}, &(0x7f0000000140)) writev(r6, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0258ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000008000100090810000000000000040000", 0x58}], 0x1) r9 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r9, &(0x7f0000000580)={&(0x7f0000000280)=@nameseq={0x1e, 0x0}, 0x10, 0x0}, 0x80ea) write$cgroup_devices(r5, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\tmww'], 0xa) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r2}, &(0x7f0000001800)=""/69, 0x45, 0x0) openat$fb0(0xffffff9c, &(0x7f0000000000), 0x800, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) 3m34.416380224s ago: executing program 4 (id=1687): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) open(&(0x7f0000001740)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) syz_open_dev$evdev(0x0, 0x2, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7fe, 0x3, 0x0, 0x0, 0x3, 0x0, "ef359f413bb90152f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea00", "036c47c67816200400000000008000335263bdd6ef7ca21508e156ea51dd753abd950100002a00ffff01000000000009000200000000040000000100", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x8000000001, 0xfffffffffffffffe]}) r2 = shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmdt(r2) shmdt(r2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x10) setxattr$trusted_overlay_upper(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[], 0x835, 0x0) 3m32.301883596s ago: executing program 4 (id=1689): unshare(0x22020400) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, 0x0, 0x0) 3m30.860079475s ago: executing program 4 (id=1692): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r0, 0x104, 0x7, 0x0, &(0x7f0000000280)) (fail_nth: 1) 3m30.806096188s ago: executing program 6 (id=1693): unshare(0x52070a00) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, 0x0, 0x0) 3m27.70871665s ago: executing program 53 (id=1692): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r0, 0x104, 0x7, 0x0, &(0x7f0000000280)) (fail_nth: 1) 3m27.561356452s ago: executing program 6 (id=1698): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) open(&(0x7f0000001740)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) syz_open_dev$evdev(0x0, 0x2, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7fe, 0x3, 0x0, 0x0, 0x3, 0x0, "ef359f413bb90152f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea00", "036c47c67816200400000000008000335263bdd6ef7ca21508e156ea51dd753abd950100002a00ffff01000000000009000200000000040000000100", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x8000000001, 0xfffffffffffffffe]}) r2 = shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmdt(r2) shmdt(r2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x10) setxattr$trusted_overlay_upper(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[], 0x835, 0x0) 3m25.792692514s ago: executing program 6 (id=1701): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f0000000380)={[{@grpjquota}, {@test_dummy_encryption_v1}, {@dioread_nolock}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}]}, 0x3, 0x4de, &(0x7f0000000c40)="$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") r0 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x1, 0x2, 0x0, 0x42) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) 3m23.955019984s ago: executing program 6 (id=1705): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000100), 0x8, 0x5fb, &(0x7f00000004c0)="$eJzs3c1vFVUbAPBnpp+07/u2kDcqLqSJMZAoLS1giDER9oTgx85VpYUghRJao0USS4IbE+PGhYkrF+J/oSRuXbh14caVISHGsBBD5Jq5nSnT23tLv+69pff3S4aemeHOOVP68Jx7es7cADrWSPZHGrE/Iq4mEUOlc92RnxxZ+nv3/7xxLtuSqFTe/iOJG58ki+VrJfnXwfzF/wxF8nMasa9rdb1zC9cvTc7MTF/L98fmL18dm1u4fvji5ckL0xemr0y8OnHi+LHjJ8aPbOn++kvl07fe/3DoszPvfvv1w2T8u1/PJHEyHuVty+6r9rV9W6o5+56NRGXJg/Lx7Pt6YovX3in+Gip+Th5Lag+wY53Pfx7/FxHPxlB0lf41h+LTN9vaOKCpKkkUOQroOMmm4r9/+xsCtFjRDyje29d7H7xa2uReCdAK904tDQAsxX5PRBTx3700Nhj9kR0duJ+sGOdJImJrI3NLsjp++vHMrWyLBuNwQHMs3ixGuWvzf1KNzeF8BH3gfroi/tPSlh1/a5P1j9Tsi39oncWbEfFcnv97Y0PxP1KK//c2Wb/4BwAAAAAAgO1z51REvFJv/l+6PP+nt878n8GIOLkN9T/593/p3byQbEN1QMm9UxGv153/uzzHd7gr3/tvdT5AT3L+4sz0kXzN4KHo6cv2x2uuW54hfPjzfV81qr88/y/bsvqLuYD5le521yzEnZqcn9zqfQMR925GPF+d/3sgP7Jy/k+W/5M6+T+L76vrrGPfS7fPNjr35PgHmqXyTcTBuvn/cXc7Wfv5HGPV/sBY0StY7YWPv/i+Uf3iH9ony/8Da8d/X1J+Xs/cxq7fGxFHF7orjc5vtv/fm7zTVVw/89Hk/Py18Yje5PTq4xMbazPsVkU8FPGSxf+hF9ce/1vu/5ficE9ELK6zzmceDf7W6Jz8D+2Txf/U2vl/eGX+33hh4vbwD43qP7uu/H+smtMP5UeM/0HZ6udxrDdA29JcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHjKpRHxn0jS0eVymo6ORgxGxP9jIJ2ZnZt/+fzsB1emsnPVz/9Pi0/6HVraT4rP/x8u7U/U7B+NiL0R8WXXnur+6LnZmal23zwAAAAAAAAAAAAAAAAAAADsEIPVNf+Vvtr1/5nfu9rdOqDpuvOv4h06T/emX1np29aGAC23+fgHnnbrj/+eprYDaL3G8f/gYaWqpc0BWkj/HzrXJuPfrwtgF5D/oVOtc0yvv9ntANpB/gcAAAAAgF1l74E7vyQRsfjanuqW6c3PmewPu1va7gYAbWMOL3Su7tl2twBoF+/xgWS59Hfdxf6NZ/8nzWkQAAAAAAAAAAAAALDKwf3W/0OnWnv9v7n9sJutsf6/XvB7XADsIo0/+kPuh93Oe3zgSdne+n8AAAAAAAAAAAAA2AH6r1+anJmZvja38PQV3tgZzdhYYXFyRzRjWwuPmnPlnojYGTfY6kLxCI42NqPN/y8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADL/g0AAP//QwInjA==") syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f0000000ec0), 0x2, 0xbb8, &(0x7f0000000280)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x50) r1 = memfd_secret(0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r2, &(0x7f00000000c0)={&(0x7f0000000080)={0xa, 0x4e22, 0x80000, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=[@hoplimit={{0x10, 0x29, 0x34, 0x3b6}}], 0x10}, 0x20000040) getpeername$qrtr(r1, &(0x7f0000000000), &(0x7f0000000080)=0xc) mq_notify(r1, 0x0) mmap(&(0x7f0000fec000/0x11000)=nil, 0x11000, 0x6, 0x50, r1, 0x67818000) bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000faffffff18110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$BLKALIGNOFF(0xffffffffffffffff, 0x127a, &(0x7f0000000e40)) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) r3 = syz_open_procfs(0x0, &(0x7f0000000340)='net/packet\x00') read$msr(r3, &(0x7f0000000180)=""/126, 0x7e) quotactl$Q_GETQUOTA(0xffffffff80000700, &(0x7f0000000e80)=@loop={'/dev/loop', 0x0}, 0xee00, &(0x7f0000001940)) 3m21.645037144s ago: executing program 54 (id=1705): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000100), 0x8, 0x5fb, &(0x7f00000004c0)="$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") syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f0000000ec0), 0x2, 0xbb8, &(0x7f0000000280)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x50) r1 = memfd_secret(0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r2, &(0x7f00000000c0)={&(0x7f0000000080)={0xa, 0x4e22, 0x80000, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=[@hoplimit={{0x10, 0x29, 0x34, 0x3b6}}], 0x10}, 0x20000040) getpeername$qrtr(r1, &(0x7f0000000000), &(0x7f0000000080)=0xc) mq_notify(r1, 0x0) mmap(&(0x7f0000fec000/0x11000)=nil, 0x11000, 0x6, 0x50, r1, 0x67818000) bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000faffffff18110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$BLKALIGNOFF(0xffffffffffffffff, 0x127a, &(0x7f0000000e40)) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) r3 = syz_open_procfs(0x0, &(0x7f0000000340)='net/packet\x00') read$msr(r3, &(0x7f0000000180)=""/126, 0x7e) quotactl$Q_GETQUOTA(0xffffffff80000700, &(0x7f0000000e80)=@loop={'/dev/loop', 0x0}, 0xee00, &(0x7f0000001940)) 13.372321595s ago: executing program 5 (id=2264): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0xffbffffffffffffe}, 0x18) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000400)=@fragment={0x33, 0x0, 0x2, 0x0, 0x0, 0x9, 0x65}, 0x8) 12.315930332s ago: executing program 5 (id=2270): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x2, @rand_addr=0x64010102}]}, &(0x7f0000000280)=0x10) r2 = socket$inet(0x2, 0x80001, 0x84) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00'}) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000040)={r3, 0x81, 0x10, 0x6, 0x81}, &(0x7f0000000080)=0x18) 11.006654235s ago: executing program 5 (id=2278): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xcc}}, 0x0) 10.367310476s ago: executing program 5 (id=2281): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0xfe, 0xbac, &(0x7f0000003480)="$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") 9.889278553s ago: executing program 8 (id=2285): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000040], 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000042000000000000000000000000000000000000000000000000feffffff00000000"]}, 0xe0) r3 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000140)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000040], 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000010000000000000000000000000000000feffffff00000000"]}, 0xe0) 9.355009787s ago: executing program 8 (id=2287): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x30, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x58}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000002600)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = eventfd(0x0) readv(r3, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/61, 0x3d}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) recvmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0, 0x94}, {&(0x7f0000002cc0)=""/210, 0xd2}], 0x2}}], 0x1, 0x0, 0x0) 9.051710792s ago: executing program 5 (id=2290): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) read$usbfs(r1, 0x0, 0x2300) write$tun(r1, &(0x7f0000000400)=ANY=[], 0xa2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 8.264322763s ago: executing program 5 (id=2292): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, &(0x7f0000000140)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) io_uring_enter(r1, 0x1e76, 0x0, 0x6, 0x0, 0x0) 6.120995793s ago: executing program 55 (id=2292): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, &(0x7f0000000140)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) io_uring_enter(r1, 0x1e76, 0x0, 0x6, 0x0, 0x0) 6.029267337s ago: executing program 0 (id=2295): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20050800) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000540)={[{@resgid}]}, 0x1, 0x55e, &(0x7f0000000ac0)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x4, 0x5, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%ps \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000100)='kmem_cache_free\x00', r2, 0x0, 0x1000000000004}, 0x18) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 5.968017417s ago: executing program 8 (id=2296): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='mm_page_free\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 5.967834243s ago: executing program 2 (id=2297): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000002306000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000340)='sys_enter\x00', r0}, 0x4b) clock_gettime(0x0, &(0x7f00000000c0)) 5.077808905s ago: executing program 2 (id=2299): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, r1}, 0x18) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0xfffe, @local, 'veth0\x00'}}, 0x1e) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x2, @broadcast, 'veth1_to_batadv\x00'}}, 0x1e) close(r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 4.819805669s ago: executing program 0 (id=2300): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x102) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x10000000) 4.785491154s ago: executing program 3 (id=2301): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r5}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000240)={[0xffffffffffffffff]}, 0x0, 0x0, 0x8) tkill(0x0, 0x16) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1709000000000000000001000000050007004200000008000a0000000000060002000100000008001700", @ANYRES32, @ANYBLOB='\b\x00\t'], 0x3c}}, 0x0) 4.119223281s ago: executing program 2 (id=2302): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xa3500, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) 3.598599306s ago: executing program 0 (id=2303): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r2, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4082, 0xff2}, {0x0}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000003cc80920"], 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) 3.385343703s ago: executing program 2 (id=2304): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0, 0x0, 0xfffffffffffffffe}, 0x18) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 2.976187953s ago: executing program 3 (id=2305): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r0}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000180)={@in={{0x2, 0x4e20, @multicast2}}, 0x0, 0x0, 0x27, 0x0, "8a7ecb4d6b3f0cafbcf35cabb63f9e9d198114683021053c2f3bda25afeda865b263ae05982942263fef7decbccfcf7e96961f74d44a9ab0ed3c3e8b01d58bb05c429eefcbc6b655605f8babcf818706"}, 0xd8) 2.79167399s ago: executing program 0 (id=2306): socket$inet6(0xa, 0x806, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r0, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) 2.742838848s ago: executing program 2 (id=2307): r0 = syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802) ioperm(0x6, 0x4, 0x10003) fsconfig$FSCONFIG_SET_FD(r0, 0x5, 0x0, 0x0, 0xffffffffffffffff) 2.295716925s ago: executing program 3 (id=2308): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000080000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000021440011800a0001006d617463680000003400028008000240000000001c0003000afe6cbf96caa5debdad61b67ddb2fb68fcf19f7807076430a00010071756f7461"], 0xc8}, 0x1, 0x0, 0x0, 0x4000005}, 0x20000004) 2.127792118s ago: executing program 0 (id=2309): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000001010101000000000000000002000000040001801800028014000180080001007f00000108000a00ac1414aa140019"], 0x44}}, 0x0) 2.021174646s ago: executing program 2 (id=2310): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f6873720000000058000000160a0101000b000000000000010000000900020073797a32000000000900010073797a30000000002c0003"], 0xf8}, 0x1, 0x0, 0x0, 0xc000}, 0x40) 1.825402227s ago: executing program 8 (id=2311): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x786d) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="a80000000207010200000000000000000a0000070c0003400000000000000005090001005e797a30000000000900010073797a30000000000900010073797a31000000002c000780080001400000009e08000140000003ff080001400000000308000140000000dd08000240000000060c000340fffffffffffffffe2c00078008000140fffffffb08000240"], 0xa8}, 0x1, 0x0, 0x0, 0x20040040}, 0x0) 1.633870052s ago: executing program 3 (id=2312): ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x511e36599023629, 0x100000, 0x480000f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0) r1 = syz_io_uring_setup(0x1a78, &(0x7f00000002c0)={0x0, 0x0, 0x10100, 0x1}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='2'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ_FIXED) io_uring_enter(r1, 0x2d3e, 0x0, 0x4, 0x0, 0x0) 1.589880784s ago: executing program 0 (id=2313): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) 1.095814072s ago: executing program 8 (id=2314): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mkdir(&(0x7f0000000180)='./file0\x00', 0x40) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 688.349127ms ago: executing program 3 (id=2315): r0 = socket(0x400000000010, 0x3, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xf}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) 429.389554ms ago: executing program 8 (id=2316): r0 = syz_io_uring_setup(0x110, &(0x7f0000000340)={0x0, 0x810c, 0x8, 0x40000, 0x100000f0}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000880), 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=ANY=[@ANYBLOB='8\x00'], 0x348}, 0x0, 0x800, 0x1}) io_uring_enter(r0, 0x8aa, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 3 (id=2317): syz_open_procfs(0x0, &(0x7f00000001c0)='coredump_filter\x00') pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0xf3a, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc020660b, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0xc040400) fcntl$notify(0xffffffffffffffff, 0x402, 0x8000003d) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) splice(r0, 0x0, r5, 0x0, 0x80, 0x6) write(r5, &(0x7f0000003300)="ac", 0x1) ioctl(r4, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) write(r2, 0x0, 0x0) kernel console output (not intermixed with test programs): W 6.14.0-rc4-syzkaller #0 [ 1252.665478][T13376] Tainted: [W]=WARN [ 1252.665535][T13376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1252.665628][T13376] Call Trace: [ 1252.665684][T13376] [ 1252.665742][T13376] dump_stack_lvl+0x216/0x2d0 [ 1252.665900][T13376] dump_stack+0x1e/0x24 [ 1252.666027][T13376] should_fail_ex+0x767/0x830 [ 1252.666227][T13376] should_fail+0x2a/0x40 [ 1252.666403][T13376] should_fail_usercopy+0x2e/0x40 [ 1252.666601][T13376] strncpy_from_user+0x39/0x540 [ 1252.666772][T13376] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1252.666961][T13376] getname_flags+0x187/0xa30 [ 1252.667173][T13376] __ia32_sys_mkdir+0x6a/0xe0 [ 1252.667355][T13376] ia32_sys_call+0x1f39/0x4180 [ 1252.667534][T13376] __do_fast_syscall_32+0xb0/0x110 [ 1252.667708][T13376] ? irqentry_exit+0x16/0x60 [ 1252.667856][T13376] do_fast_syscall_32+0x38/0x80 [ 1252.668022][T13376] do_SYSENTER_32+0x1f/0x30 [ 1252.668181][T13376] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1252.668401][T13376] RIP: 0023:0xf746d579 [ 1252.668506][T13376] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1252.668639][T13376] RSP: 002b:00000000f50f655c EFLAGS: 00000206 ORIG_RAX: 0000000000000027 [ 1252.668775][T13376] RAX: ffffffffffffffda RBX: 0000000080000400 RCX: 0000000000000008 [ 1252.668876][T13376] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1252.668966][T13376] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1252.669054][T13376] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1252.669158][T13376] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1252.669266][T13376] [ 1252.969963][T12886] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1252.996856][T12886] Buffer I/O error on dev loop6, logical block 1, lost sync page write [ 1253.005777][T12886] EXT4-fs (loop6): I/O error while writing superblock [ 1253.009024][T13321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1253.020319][T13321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1253.051171][T13321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1253.067212][T13363] Buffer I/O error on dev loop6, logical block 64, lost sync page write [ 1253.716144][ T4127] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1253.724076][T13388] FAULT_INJECTION: forcing a failure. [ 1253.724076][T13388] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1253.741628][T13388] CPU: 0 UID: 0 PID: 13388 Comm: syz.8.1704 Tainted: G W 6.14.0-rc4-syzkaller #0 [ 1253.741804][T13388] Tainted: [W]=WARN [ 1253.741863][T13388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1253.741954][T13388] Call Trace: [ 1253.742012][T13388] [ 1253.742069][T13388] dump_stack_lvl+0x216/0x2d0 [ 1253.742227][T13388] dump_stack+0x1e/0x24 [ 1253.742356][T13388] should_fail_ex+0x767/0x830 [ 1253.742566][T13388] should_fail+0x2a/0x40 [ 1253.742732][T13388] should_fail_usercopy+0x2e/0x40 [ 1253.742920][T13388] _copy_to_user+0x34/0x120 [ 1253.743109][T13388] simple_read_from_buffer+0x199/0x340 [ 1253.743297][T13388] proc_fail_nth_read+0x1e5/0x2c0 [ 1253.743519][T13388] vfs_read+0x29f/0xf70 [ 1253.743677][T13388] ? stack_depot_save_flags+0x2c/0x750 [ 1253.743862][T13388] ? kmsan_get_metadata+0x13e/0x1c0 [ 1253.744039][T13388] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 1253.744212][T13388] ? kmsan_get_metadata+0x13e/0x1c0 [ 1253.744389][T13388] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1253.744593][T13388] ksys_read+0x240/0x4b0 [ 1253.744744][T13388] ? kmsan_get_metadata+0x13e/0x1c0 [ 1253.744930][T13388] __ia32_sys_read+0x91/0xe0 [ 1253.745091][T13388] ia32_sys_call+0x16dd/0x4180 [ 1253.745263][T13388] __do_fast_syscall_32+0xb0/0x110 [ 1253.745447][T13388] ? irqentry_exit+0x16/0x60 [ 1253.745587][T13388] do_fast_syscall_32+0x38/0x80 [ 1253.745754][T13388] do_SYSENTER_32+0x1f/0x30 [ 1253.745914][T13388] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1253.746131][T13388] RIP: 0023:0xf746d579 [ 1253.746234][T13388] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1253.746365][T13388] RSP: 002b:00000000f50d5590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 1253.746509][T13388] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f50d5620 [ 1253.746608][T13388] RDX: 000000000000000f RSI: 00000000f745cff4 RDI: 0000000000000000 [ 1253.746705][T13388] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1253.746794][T13388] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1253.746884][T13388] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1253.746990][T13388] [ 1253.992149][ T5802] Bluetooth: hci2: command tx timeout [ 1254.159575][T13321] hsr_slave_0: entered promiscuous mode [ 1254.174931][T13321] hsr_slave_1: entered promiscuous mode [ 1254.277804][T13389] bond0: option mode: unable to set because the bond device has slaves [ 1254.342336][ T5802] Bluetooth: hci0: command tx timeout [ 1254.435296][ T4127] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1254.668356][ T4127] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1254.864598][ T4127] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1255.333755][T13372] chnl_net:caif_netlink_parms(): no params data found [ 1255.770051][ T4127] bridge_slave_1: left allmulticast mode [ 1255.776210][ T4127] bridge_slave_1: left promiscuous mode [ 1255.783197][ T4127] bridge0: port 2(bridge_slave_1) entered disabled state [ 1255.854133][ T4127] bridge_slave_0: left allmulticast mode [ 1255.860123][ T4127] bridge_slave_0: left promiscuous mode [ 1255.867052][ T4127] bridge0: port 1(bridge_slave_0) entered disabled state [ 1256.410259][ T5802] Bluetooth: hci0: command tx timeout [ 1256.565655][ T4127] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1256.635182][ T4127] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1256.684404][ T4127] bond0 (unregistering): Released all slaves [ 1256.955918][ T29] audit: type=1326 audit(1740470906.695:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13406 comm="syz.8.1708" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf746d579 code=0x0 [ 1257.079832][ T8906] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1257.087136][T13411] FAULT_INJECTION: forcing a failure. [ 1257.087136][T13411] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1257.087299][T13411] CPU: 1 UID: 0 PID: 13411 Comm: syz.8.1708 Tainted: G W 6.14.0-rc4-syzkaller #0 [ 1257.087486][T13411] Tainted: [W]=WARN [ 1257.087545][T13411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1257.087644][T13411] Call Trace: [ 1257.087704][T13411] [ 1257.087766][T13411] dump_stack_lvl+0x216/0x2d0 [ 1257.087938][T13411] dump_stack+0x1e/0x24 [ 1257.088075][T13411] should_fail_ex+0x767/0x830 [ 1257.088303][T13411] should_fail+0x2a/0x40 [ 1257.088487][T13411] should_fail_usercopy+0x2e/0x40 [ 1257.088699][T13411] strncpy_from_user+0x39/0x540 [ 1257.088900][T13411] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1257.089117][T13411] getname_flags+0x187/0xa30 [ 1257.089348][T13411] __ia32_sys_mkdir+0x6a/0xe0 [ 1257.089531][T13411] ia32_sys_call+0x1f39/0x4180 [ 1257.089720][T13411] __do_fast_syscall_32+0xb0/0x110 [ 1257.089904][T13411] ? irqentry_exit+0x16/0x60 [ 1257.090065][T13411] do_fast_syscall_32+0x38/0x80 [ 1257.090252][T13411] do_SYSENTER_32+0x1f/0x30 [ 1257.090426][T13411] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1257.090653][T13411] RIP: 0023:0xf746d579 [ 1257.090767][T13411] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1257.090909][T13411] RSP: 002b:00000000f50d555c EFLAGS: 00000206 ORIG_RAX: 0000000000000027 [ 1257.091058][T13411] RAX: ffffffffffffffda RBX: 0000000080000400 RCX: 0000000000000008 [ 1257.091175][T13411] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1257.091269][T13411] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1257.091364][T13411] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1257.091456][T13411] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1257.091577][T13411] [ 1257.307608][ T8906] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1257.318149][ T8906] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1257.346104][ T8906] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1257.359228][ T8906] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1257.369435][ T8906] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1258.071221][ T4127] hsr_slave_0: left promiscuous mode [ 1258.105768][ T4127] hsr_slave_1: left promiscuous mode [ 1258.114165][ T4127] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1258.121885][ T4127] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1258.216534][ T4127] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1258.224585][ T4127] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1258.327313][ T4127] veth1_macvtap: left promiscuous mode [ 1258.333740][ T4127] veth0_macvtap: left promiscuous mode [ 1258.339683][ T4127] veth1_vlan: left promiscuous mode [ 1258.345559][ T4127] veth0_vlan: left promiscuous mode [ 1258.504662][ T5802] Bluetooth: hci0: command tx timeout [ 1258.623920][ T29] audit: type=1326 audit(1740470908.295:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13424 comm="syz.8.1711" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf746d579 code=0x0 [ 1259.092771][ T4127] team0 (unregistering): Port device team_slave_1 removed [ 1259.149893][ T4127] team0 (unregistering): Port device team_slave_0 removed [ 1259.511044][ T5802] Bluetooth: hci3: command tx timeout [ 1260.267628][T13321] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1260.343402][ T5846] usb 9-1: new high-speed USB device number 40 using dummy_hcd [ 1260.429526][T13321] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1260.496443][T13321] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1260.534919][ T5846] usb 9-1: Using ep0 maxpacket: 32 [ 1260.569713][ T5846] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1260.574024][ T5802] Bluetooth: hci0: command tx timeout [ 1260.579407][ T5846] usb 9-1: config 1 has no interface number 1 [ 1260.677151][ T5846] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1260.687426][ T5846] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1260.696037][ T5846] usb 9-1: Product: syz [ 1260.700469][ T5846] usb 9-1: Manufacturer: syz [ 1260.705672][ T5846] usb 9-1: SerialNumber: syz [ 1260.748209][T13321] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1260.853416][T13372] bridge0: port 1(bridge_slave_0) entered blocking state [ 1260.861447][T13372] bridge0: port 1(bridge_slave_0) entered disabled state [ 1260.869584][T13372] bridge_slave_0: entered allmulticast mode [ 1260.879108][T13372] bridge_slave_0: entered promiscuous mode [ 1260.917445][T13409] chnl_net:caif_netlink_parms(): no params data found [ 1261.055309][T13372] bridge0: port 2(bridge_slave_1) entered blocking state [ 1261.063369][T13372] bridge0: port 2(bridge_slave_1) entered disabled state [ 1261.071272][T13372] bridge_slave_1: entered allmulticast mode [ 1261.081174][T13372] bridge_slave_1: entered promiscuous mode [ 1261.523843][ T5802] Bluetooth: hci3: command tx timeout [ 1261.621290][T13372] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1261.689053][ T10] IPVS: starting estimator thread 0... [ 1261.711567][T13372] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1261.804421][T13455] IPVS: using max 192 ests per chain, 9600 per kthread [ 1261.878054][ T9774] Process accounting resumed [ 1262.184464][ T5846] usb 9-1: 2:1 : no or invalid class specific endpoint descriptor [ 1262.192798][ T5846] usb 9-1: found format II with max.bitrate = 256, frame size=511 [ 1262.205674][ T5846] usb 9-1: 2:1 : no or invalid class specific endpoint descriptor [ 1262.215026][ T5846] usb 9-1: found format II with max.bitrate = 256, frame size=511 [ 1262.368888][T13372] team0: Port device team_slave_0 added [ 1262.530469][ T5846] usb 9-1: USB disconnect, device number 40 [ 1262.546255][T13372] team0: Port device team_slave_1 added [ 1262.995263][T13372] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1263.002496][T13372] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1263.030918][T13372] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1263.101750][ T9395] udevd[9395]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1263.365030][T13372] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1263.372265][T13372] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1263.402324][T13372] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1263.604224][ T5802] Bluetooth: hci3: command tx timeout [ 1263.796474][T13409] bridge0: port 1(bridge_slave_0) entered blocking state [ 1263.804430][T13409] bridge0: port 1(bridge_slave_0) entered disabled state [ 1263.812339][T13409] bridge_slave_0: entered allmulticast mode [ 1263.822194][T13409] bridge_slave_0: entered promiscuous mode [ 1263.876137][T13321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1263.994364][T13409] bridge0: port 2(bridge_slave_1) entered blocking state [ 1264.008609][T13409] bridge0: port 2(bridge_slave_1) entered disabled state [ 1264.016852][T13409] bridge_slave_1: entered allmulticast mode [ 1264.026528][T13409] bridge_slave_1: entered promiscuous mode [ 1264.464765][T13372] hsr_slave_0: entered promiscuous mode [ 1264.475403][T13372] hsr_slave_1: entered promiscuous mode [ 1264.486416][T13372] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1264.494417][T13372] Cannot create hsr debugfs directory [ 1264.518529][T13321] 8021q: adding VLAN 0 to HW filter on device team0 [ 1264.541835][T13409] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1264.582070][T13409] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1264.590391][T13474] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1718'. [ 1264.649565][T13477] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1718'. [ 1264.812674][T13409] team0: Port device team_slave_0 added [ 1264.936196][ T3462] bridge0: port 1(bridge_slave_0) entered blocking state [ 1264.944072][ T3462] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1265.005507][ T3462] bridge0: port 2(bridge_slave_1) entered blocking state [ 1265.013441][ T3462] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1265.026593][T13474] loop8: detected capacity change from 0 to 1024 [ 1265.131199][T13409] team0: Port device team_slave_1 added [ 1265.171643][T13474] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 1265.182119][T13474] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1265.280039][T13474] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1265.575851][T13409] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1265.583192][T13409] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1265.610287][T13409] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1265.695646][ T5802] Bluetooth: hci3: command tx timeout [ 1265.803540][T12313] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1265.845178][T13409] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1265.852543][T13409] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1265.879020][T13409] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1266.773854][T13409] hsr_slave_0: entered promiscuous mode [ 1266.784653][T13409] hsr_slave_1: entered promiscuous mode [ 1266.795474][T13409] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1266.804343][T13409] Cannot create hsr debugfs directory [ 1268.422221][T13321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1268.739513][T13372] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1268.956328][T13372] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1269.101536][T13372] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1269.239560][T13372] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1269.612459][T13321] veth0_vlan: entered promiscuous mode [ 1269.801739][T13321] veth1_vlan: entered promiscuous mode [ 1270.148543][T13409] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1270.251848][T13409] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1270.514970][T13409] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1270.607756][T13409] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1270.893575][T13321] veth0_macvtap: entered promiscuous mode [ 1271.001423][T13321] veth1_macvtap: entered promiscuous mode [ 1271.321743][T13321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1271.334814][T13321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1271.345197][T13321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1271.356003][T13321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1271.373675][T13321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1271.507179][T13372] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1271.551082][T13527] loop8: detected capacity change from 0 to 16 [ 1271.618363][T13321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1271.629746][T13321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1271.640229][T13321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1271.651152][T13321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1271.666881][T13321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1271.716875][T13527] FAULT_INJECTION: forcing a failure. [ 1271.716875][T13527] name failslab, interval 1, probability 0, space 0, times 0 [ 1271.730224][T13527] CPU: 0 UID: 0 PID: 13527 Comm: syz.8.1729 Tainted: G W 6.14.0-rc4-syzkaller #0 [ 1271.730395][T13527] Tainted: [W]=WARN [ 1271.730447][T13527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1271.730533][T13527] Call Trace: [ 1271.730586][T13527] [ 1271.730640][T13527] dump_stack_lvl+0x216/0x2d0 [ 1271.730800][T13527] dump_stack+0x1e/0x24 [ 1271.730929][T13527] should_fail_ex+0x767/0x830 [ 1271.731128][T13527] should_failslab+0x17f/0x210 [ 1271.731313][T13527] kmem_cache_alloc_lru_noprof+0xf5/0xe20 [ 1271.731488][T13527] ? alloc_inode+0xd0/0x460 [ 1271.731685][T13527] ? kmsan_get_metadata+0x13e/0x1c0 [ 1271.731878][T13527] alloc_inode+0xd0/0x460 [ 1271.732071][T13527] iget_locked+0x250/0x1290 [ 1271.732268][T13527] ? cramfs_read+0x312/0x1350 [ 1271.732424][T13527] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1271.732625][T13527] get_cramfs_inode+0x1b2/0xb50 [ 1271.732792][T13527] cramfs_lookup+0x79e/0x870 [ 1271.732977][T13527] ? __pfx_cramfs_lookup+0x10/0x10 [ 1271.733123][T13527] path_openat+0x2969/0x6250 [ 1271.733344][T13527] do_filp_open+0x268/0x600 [ 1271.733543][T13527] do_sys_openat2+0x1bf/0x2f0 [ 1271.733757][T13527] __ia32_sys_creat+0xe4/0x140 [ 1271.733905][T13527] ia32_sys_call+0x38cf/0x4180 [ 1271.734087][T13527] __do_fast_syscall_32+0xb0/0x110 [ 1271.734263][T13527] ? irqentry_exit+0x16/0x60 [ 1271.734414][T13527] do_fast_syscall_32+0x38/0x80 [ 1271.734583][T13527] do_SYSENTER_32+0x1f/0x30 [ 1271.734747][T13527] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1271.734970][T13527] RIP: 0023:0xf746d579 [ 1271.735077][T13527] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1271.735211][T13527] RSP: 002b:00000000f50f655c EFLAGS: 00000206 ORIG_RAX: 0000000000000008 [ 1271.735351][T13527] RAX: ffffffffffffffda RBX: 0000000080000240 RCX: 0000000000000000 [ 1271.735454][T13527] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1271.735545][T13527] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1271.735637][T13527] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1271.735728][T13527] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1271.735838][T13527] [ 1272.009064][T13372] 8021q: adding VLAN 0 to HW filter on device team0 [ 1272.042798][ T3487] bridge0: port 1(bridge_slave_0) entered blocking state [ 1272.050726][ T3487] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1272.180952][T13372] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1272.193323][T13372] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1272.243019][ T3487] bridge0: port 2(bridge_slave_1) entered blocking state [ 1272.250760][ T3487] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1272.412073][T13321] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1272.421428][T13321] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1272.430730][T13321] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1272.440039][T13321] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1272.712278][T13409] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1273.038957][T13409] 8021q: adding VLAN 0 to HW filter on device team0 [ 1273.222741][ T4127] bridge0: port 1(bridge_slave_0) entered blocking state [ 1273.230801][ T4127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1273.401782][ T4127] bridge0: port 2(bridge_slave_1) entered blocking state [ 1273.409691][ T4127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1274.060246][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 1274.068451][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1274.600462][T13372] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1276.156388][ T10] usb 9-1: new full-speed USB device number 41 using dummy_hcd [ 1276.388340][ T10] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1276.399000][ T10] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1276.447129][T13409] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1276.492384][ T10] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 1276.503414][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1276.512521][ T10] usb 9-1: SerialNumber: syz [ 1276.595651][ T10] usb 9-1: 0:2 : does not exist [ 1276.940615][ T29] audit: type=1326 audit(1740470926.662:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13579 comm="syz.0.1737" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 1276.963891][ T29] audit: type=1326 audit(1740470926.672:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13579 comm="syz.0.1737" exe="/root/syz-executor" sig=0 arch=40000003 syscall=271 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 1276.987310][ T29] audit: type=1326 audit(1740470926.672:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13579 comm="syz.0.1737" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 1277.010683][ T29] audit: type=1326 audit(1740470926.672:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13579 comm="syz.0.1737" exe="/root/syz-executor" sig=0 arch=40000003 syscall=81 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 1277.033624][ T29] audit: type=1326 audit(1740470926.672:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13579 comm="syz.0.1737" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 1277.056831][ T29] audit: type=1326 audit(1740470926.672:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13579 comm="syz.0.1737" exe="/root/syz-executor" sig=0 arch=40000003 syscall=19 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 1277.079321][ T29] audit: type=1326 audit(1740470926.672:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13579 comm="syz.0.1737" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 1277.102041][ T29] audit: type=1326 audit(1740470926.822:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13579 comm="syz.0.1737" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 1277.111657][T13581] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1737'. [ 1277.125445][ T29] audit: type=1326 audit(1740470926.822:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13579 comm="syz.0.1737" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 1277.154638][ T9078] usb 9-1: USB disconnect, device number 41 [ 1277.156562][ T29] audit: type=1326 audit(1740470926.822:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13579 comm="syz.0.1737" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 1277.304324][T13409] veth0_vlan: entered promiscuous mode [ 1277.365974][T13409] veth1_vlan: entered promiscuous mode [ 1277.652736][ T6476] udevd[6476]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1277.683552][T13409] veth0_macvtap: entered promiscuous mode [ 1277.788511][T13409] veth1_macvtap: entered promiscuous mode [ 1278.028624][T13409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1278.041635][T13409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1278.051945][T13409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1278.062790][T13409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1278.073140][T13409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1278.086102][T13409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1278.102115][T13409] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1278.144625][T13372] veth0_vlan: entered promiscuous mode [ 1278.349452][T13372] veth1_vlan: entered promiscuous mode [ 1278.456190][T13409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1278.468818][T13409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1278.479994][T13409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1278.493432][T13409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1278.504844][T13409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1278.515636][T13409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1278.531275][T13409] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1278.774507][T13409] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1278.783932][T13409] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1278.793279][T13409] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1278.802329][T13409] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1279.078359][T13372] veth0_macvtap: entered promiscuous mode [ 1279.142265][T13372] veth1_macvtap: entered promiscuous mode [ 1279.236813][T13596] loop8: detected capacity change from 0 to 512 [ 1279.396377][T13596] EXT4-fs: Ignoring removed oldalloc option [ 1279.435088][T13372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1279.448122][T13372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1279.460108][T13372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1279.471288][T13372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1279.481609][T13372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1279.492509][T13372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1279.502735][T13372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1279.513721][T13372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1279.529733][T13372] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1279.575796][T13372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1279.584400][T13596] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 1279.586620][T13372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1279.607558][T13372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1279.618900][T13372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1279.629301][T13372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1279.640120][T13372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1279.650480][T13372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1279.661353][T13372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1279.678786][T13372] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1279.909188][T13596] EXT4-fs (loop8): warning: checktime reached, running e2fsck is recommended [ 1279.945860][T13372] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1279.956718][T13372] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1279.966187][T13372] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1279.976593][T13372] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1279.999958][T13596] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=b846c01c, mo2=0102] [ 1280.011915][T13596] System zones: 0-2, 18-18, 34-34 [ 1280.087037][T13596] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -117 [ 1280.146012][T13596] EXT4-fs error (device loop8): ext4_orphan_get:1415: comm syz.8.1738: bad orphan inode 15 [ 1280.185371][T13596] ext4_test_bit(bit=14, block=18) = 1 [ 1280.191102][T13596] is_bad_inode(inode)=0 [ 1280.195913][T13596] NEXT_ORPHAN(inode)=2264924160 [ 1280.201014][T13596] max_ino=32 [ 1280.204987][T13596] i_nlink=0 [ 1280.208430][T13596] EXT4-fs warning (device loop8): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1280.433741][T13596] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.1738: bg 0: block 80: padding at end of block bitmap is not set [ 1280.588620][T13596] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 1280.631502][T13596] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1281.387351][T12313] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1282.315915][T13633] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1742'. [ 1282.365479][ T3437] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1282.373810][ T3437] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1282.556859][ T7831] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1282.568404][ T7831] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1286.113299][ T8] usb 9-1: new full-speed USB device number 42 using dummy_hcd [ 1286.551684][ T8] usb 9-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1286.561175][ T8] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1286.569688][ T8] usb 9-1: Product: syz [ 1286.574272][ T8] usb 9-1: Manufacturer: syz [ 1286.579145][ T8] usb 9-1: SerialNumber: syz [ 1286.676662][ T8] usb 9-1: config 0 descriptor?? [ 1286.774299][ T8] hub 9-1:0.0: bad descriptor, ignoring hub [ 1286.780529][ T8] hub 9-1:0.0: probe with driver hub failed with error -5 [ 1286.797688][ T8] input: syz syz as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input20 [ 1287.171004][ C0] usbtouchscreen 9-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 1287.180615][ T8] usb 9-1: USB disconnect, device number 42 [ 1287.314797][T13699] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1752'. [ 1288.336057][ T4127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1288.345083][ T4127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1288.617682][ T7831] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1288.625966][ T7831] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1288.665378][ T5846] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1288.907920][ T5846] usb 3-1: Using ep0 maxpacket: 32 [ 1288.971346][ T5846] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1288.982383][ T5846] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1289.028906][ T5846] usb 3-1: config 0 descriptor?? [ 1289.074378][ T5846] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1289.241482][ T3487] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1289.249999][ T3487] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1289.504211][ T5846] gspca_sunplus: reg_w_riv err -71 [ 1289.509923][ T5846] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 1289.560987][ T5846] usb 3-1: USB disconnect, device number 58 [ 1289.685808][ T2961] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1289.694330][ T2961] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1290.577351][T13723] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1706'. [ 1290.645411][T13727] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1706'. [ 1291.158560][T13723] loop3: detected capacity change from 0 to 1024 [ 1291.190054][T13732] loop2: detected capacity change from 0 to 8 [ 1291.272330][T13723] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 1291.283621][T13723] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1291.347934][T13732] SQUASHFS error: xz decompression failed, data probably corrupt [ 1291.356502][T13732] SQUASHFS error: Failed to read block 0x108: -5 [ 1291.363468][T13732] SQUASHFS error: Unable to read metadata cache entry [106] [ 1291.371015][T13732] SQUASHFS error: Unable to read inode 0x11f [ 1291.455948][T13723] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1292.002292][T13409] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1292.044681][ T5846] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1292.242168][T13747] fuse: Bad value for 'user_id' [ 1292.247772][T13747] fuse: Bad value for 'user_id' [ 1292.265410][ T5846] usb 3-1: Using ep0 maxpacket: 16 [ 1292.299609][ T5846] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1292.310909][ T5846] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1292.442490][ T5846] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1292.452374][ T5846] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1292.462074][ T5846] usb 3-1: Product: syz [ 1292.471654][ T5846] usb 3-1: Manufacturer: syz [ 1292.478410][ T5846] usb 3-1: SerialNumber: syz [ 1292.896737][ T5846] usb 3-1: 0:2 : does not exist [ 1292.901997][ T5846] usb 3-1: unit 9 not found! [ 1293.047741][ T5846] usb 3-1: 4:0: cannot get min/max values for control 1 (id 4) [ 1293.171329][ T5846] usb 3-1: USB disconnect, device number 59 [ 1293.449917][T13756] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1762'. [ 1293.553384][ T6476] udevd[6476]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1294.359347][T13761] loop8: detected capacity change from 0 to 8 [ 1294.570791][T13761] SQUASHFS error: xz decompression failed, data probably corrupt [ 1294.580023][T13761] SQUASHFS error: Failed to read block 0x108: -5 [ 1294.586835][T13761] SQUASHFS error: Unable to read metadata cache entry [106] [ 1294.594501][T13761] SQUASHFS error: Unable to read inode 0x11f [ 1294.746807][T13773] loop3: detected capacity change from 0 to 256 [ 1294.848310][T13773] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1294.860817][T13773] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 1295.113447][T13773] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1295.147816][ T9080] usb 3-1: new full-speed USB device number 60 using dummy_hcd [ 1295.247402][ T29] kauditd_printk_skb: 40 callbacks suppressed [ 1295.247490][ T29] audit: type=1800 audit(1740470944.979:292): pid=13767 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1764" name="file1" dev="loop3" ino=46 res=0 errno=0 [ 1295.408311][ T9080] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1295.418167][ T9080] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1295.426643][ T9080] usb 3-1: Product: syz [ 1295.431072][ T9080] usb 3-1: Manufacturer: syz [ 1295.439269][ T9080] usb 3-1: SerialNumber: syz [ 1295.530552][ T9080] usb 3-1: config 0 descriptor?? [ 1295.646939][ T9080] hub 3-1:0.0: bad descriptor, ignoring hub [ 1295.653451][ T9080] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1295.670582][ T9080] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input21 [ 1295.671567][T13776] loop5: detected capacity change from 0 to 512 [ 1295.756607][ T5846] usb 9-1: new high-speed USB device number 43 using dummy_hcd [ 1295.967574][ T9080] usb 3-1: USB disconnect, device number 60 [ 1295.967810][ C0] usbtouchscreen 3-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 1296.035658][ T5846] usb 9-1: Using ep0 maxpacket: 16 [ 1296.123751][ T5846] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1296.134557][ T5846] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1296.179404][T13767] exFAT-fs (loop3): error, invalid access to FAT (entry 0xffffffff) [ 1296.188464][T13767] exFAT-fs (loop3): Filesystem has been set read-only [ 1296.239574][T13776] EXT4-fs (loop5): corrupt root inode, run e2fsck [ 1296.246770][T13776] EXT4-fs (loop5): mount failed [ 1296.345800][ T5846] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1296.360447][ T5846] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1296.370690][ T5846] usb 9-1: Product: syz [ 1296.375307][ T5846] usb 9-1: Manufacturer: syz [ 1296.380172][ T5846] usb 9-1: SerialNumber: syz [ 1296.770420][T13776] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1766'. [ 1296.976549][ T5846] usb 9-1: 0:2 : does not exist [ 1296.981764][ T5846] usb 9-1: unit 9 not found! [ 1297.115700][ T5846] usb 9-1: 4:0: cannot get min/max values for control 1 (id 4) [ 1297.273647][ T5846] usb 9-1: USB disconnect, device number 43 [ 1297.616937][ T7008] udevd[7008]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1298.213525][ T5846] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1298.648365][ T5846] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1298.658119][ T5846] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1298.666799][ T5846] usb 3-1: Product: syz [ 1298.671253][ T5846] usb 3-1: Manufacturer: syz [ 1298.676330][ T5846] usb 3-1: SerialNumber: syz [ 1298.746654][T13789] loop3: detected capacity change from 0 to 4096 [ 1298.911603][ T5846] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1299.033425][T13789] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1299.520969][ T9078] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1300.338782][T13409] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1300.538008][ T29] audit: type=1804 audit(1740470950.249:293): pid=13805 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.1772" name="/newroot/61/bus/file0" dev="overlay" ino=360 res=1 errno=0 [ 1300.684762][ T9078] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1300.695871][ T9078] ath9k_htc: Failed to initialize the device [ 1300.871589][ T5846] usb 3-1: USB disconnect, device number 61 [ 1301.092160][ T5846] usb 3-1: ath9k_htc: USB layer deinitialized [ 1301.809563][T13820] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1776'. [ 1302.793571][ T5846] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 1303.120047][ T5846] usb 6-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1303.132314][ T5846] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1303.141032][ T5846] usb 6-1: Product: syz [ 1303.145658][ T5846] usb 6-1: Manufacturer: syz [ 1303.150515][ T5846] usb 6-1: SerialNumber: syz [ 1303.154309][T13836] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1778'. [ 1303.247226][ T5846] usb 6-1: config 0 descriptor?? [ 1303.565401][T13836] loop8: detected capacity change from 0 to 256 [ 1303.706873][T13836] msdos: Unknown parameter '¾.bßE`ŠdZ\¢6¥^:ÿæ;@žâÉ©³¡j³t¶:™ÿß5K+ßë¥]ê¥z¡0×5JœFyBPéÃÄ­5$&~$ÏQéM¬?jvøb‘AInWV¹SK…Ñ»' [ 1303.783536][ T5846] airspy 6-1:0.0: Board ID: 00 [ 1303.788608][ T5846] airspy 6-1:0.0: Firmware version: Yá÷Ð^ŠoÒc±”z‘+=é~y/åÞÿlͶ›c@X¶ [ 1304.129694][T13848] loop2: detected capacity change from 0 to 256 [ 1304.197796][T13828] loop8: detected capacity change from 0 to 64 [ 1304.287398][T13848] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1304.298705][T13848] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 1304.307778][T13828] minix: Unknown parameter 'œ<-ËqÄÅyQŸMóçÃG““;åÂá²ÕÅl6Ý‹úÜ»9Ÿ6ó«q­j/çe3Æí[9ŸgžLVòQ¼îrâ' [ 1304.694378][T13848] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1304.993386][ T29] audit: type=1800 audit(1740470954.689:294): pid=13842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1780" name="file1" dev="loop2" ino=47 res=0 errno=0 [ 1305.224296][ T5846] airspy 6-1:0.0: Registered as swradio24 [ 1305.230340][ T5846] airspy 6-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1305.598246][ T5846] usb 6-1: USB disconnect, device number 20 [ 1306.060728][T13842] exFAT-fs (loop2): error, invalid access to FAT (entry 0xffffffff) [ 1306.069687][T13842] exFAT-fs (loop2): Filesystem has been set read-only [ 1307.347473][T13872] trusted_key: encrypted_key: key trusted:syz not found [ 1308.557152][ T5846] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1308.813421][ T5846] usb 4-1: Using ep0 maxpacket: 16 [ 1308.863628][ T5846] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1308.874353][ T5846] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1308.897149][T13890] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1791'. [ 1308.971052][ T5846] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1308.980755][ T5846] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1308.989292][ T5846] usb 4-1: Product: syz [ 1308.993930][ T5846] usb 4-1: Manufacturer: syz [ 1308.998784][ T5846] usb 4-1: SerialNumber: syz [ 1309.304110][ T5846] usb 4-1: 0:2 : does not exist [ 1309.389893][T13899] loop5: detected capacity change from 0 to 512 [ 1309.404056][ T5846] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 1309.582291][T13899] EXT4-fs error (device loop5): ext4_orphan_get:1389: inode #15: comm syz.5.1794: casefold flag without casefold feature [ 1309.592356][ T5846] usb 4-1: USB disconnect, device number 20 [ 1309.694936][T13903] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1795'. [ 1309.695071][T13899] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.1794: couldn't read orphan inode 15 (err -117) [ 1309.756192][T13899] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1310.367375][ T6476] udevd[6476]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1311.022791][T13919] loop2: detected capacity change from 0 to 8 [ 1311.250319][T13919] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1311.258776][T13919] SQUASHFS error: Failed to read block 0x91: -5 [ 1311.267655][T13919] SQUASHFS error: Unable to read metadata cache entry [8f] [ 1311.275251][T13919] SQUASHFS error: Unable to read inode 0x11f [ 1311.414833][T13372] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1312.356311][T13929] loop3: detected capacity change from 0 to 24 [ 1312.429211][T13929] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1312.807437][T13935] loop5: detected capacity change from 0 to 256 [ 1312.814562][ T5846] usb 9-1: new high-speed USB device number 44 using dummy_hcd [ 1312.882107][T13935] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1312.893668][T13935] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 1313.003635][ T5846] usb 9-1: Using ep0 maxpacket: 32 [ 1313.094142][ T5846] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1313.105680][ T5846] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1313.116013][ T5846] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1313.125619][ T5846] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1313.241985][T13935] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1313.326963][ T5846] usb 9-1: config 0 descriptor?? [ 1313.382782][ T5846] hub 9-1:0.0: USB hub found [ 1313.414974][ T29] audit: type=1800 audit(1740470963.149:295): pid=13930 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1801" name="file1" dev="loop5" ino=48 res=0 errno=0 [ 1313.950701][T13943] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1806'. [ 1314.064883][T13933] loop8: detected capacity change from 0 to 512 [ 1314.092330][T13942] loop3: detected capacity change from 0 to 1024 [ 1314.148784][T13933] EXT4-fs: Ignoring removed nobh option [ 1314.217441][T13942] ext4: Unknown parameter 'noacl' [ 1314.313777][T13930] exFAT-fs (loop5): error, invalid access to FAT (entry 0xffffffff) [ 1314.322257][T13930] exFAT-fs (loop5): Filesystem has been set read-only [ 1315.245816][T13933] EXT4-fs error (device loop8): ext4_do_update_inode:5154: inode #16: comm syz.8.1802: corrupted inode contents [ 1315.325230][T13933] EXT4-fs (loop8): Remounting filesystem read-only [ 1315.433515][T13933] EXT4-fs (loop8): 1 truncate cleaned up [ 1315.475502][T13933] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1315.489004][T13933] ext4 filesystem being mounted at /66/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1315.559742][ T3487] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 1315.571085][ T3487] Quota error (device loop8): write_blk: dquota write failed [ 1315.579181][ T3487] Quota error (device loop8): remove_free_dqentry: Can't write block (5) with free entries [ 1315.589814][ T3487] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 1315.601622][ T3487] Quota error (device loop8): write_blk: dquota write failed [ 1315.617671][ T3487] Quota error (device loop8): free_dqentry: Can't move quota data block (5) to free list [ 1315.628690][ T3487] EXT4-fs (loop8): Quota write (off=8, len=24) cancelled because transaction is not started [ 1315.639403][ T3487] Quota error (device loop8): v2_write_file_info: Can't write info structure [ 1315.649506][ T3487] Quota error (device loop8): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1316.000390][T13960] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1807'. [ 1316.662708][ T5846] hub 9-1:0.0: config failed, can't read hub descriptor (err -22) [ 1316.754461][ T5846] usbhid 9-1:0.0: can't add hid device: -71 [ 1316.761349][ T5846] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1316.805630][T12313] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1316.924023][ T5846] usb 9-1: USB disconnect, device number 44 [ 1317.615726][ T5846] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1317.698695][T13976] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1812'. [ 1317.708974][T13976] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1812'. [ 1317.883961][ T5846] usb 3-1: Using ep0 maxpacket: 16 [ 1317.953367][ T5846] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1317.969228][ T5846] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1318.156195][ T5846] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1318.172305][ T5846] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1318.183102][ T5846] usb 3-1: Product: syz [ 1318.187549][ T5846] usb 3-1: Manufacturer: syz [ 1318.192411][ T5846] usb 3-1: SerialNumber: syz [ 1318.357401][T13982] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1814'. [ 1318.590224][ T5846] usb 3-1: 0:2 : does not exist [ 1318.696403][ T5846] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 1318.864205][T13985] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1815'. [ 1318.922431][ T5846] usb 3-1: USB disconnect, device number 62 [ 1318.999724][T13985] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1815'. [ 1319.009818][T13985] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1815'. [ 1319.441136][ T6476] udevd[6476]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1320.299029][T14000] loop8: detected capacity change from 0 to 256 [ 1320.550721][T14000] exFAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1320.562113][T14000] exFAT-fs (loop8): Medium has reported failures. Some data may be lost. [ 1321.104072][T14000] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1321.370410][T14008] loop5: detected capacity change from 0 to 2048 [ 1321.404236][ T29] audit: type=1800 audit(1740470971.119:296): pid=13996 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1817" name="file1" dev="loop8" ino=49 res=0 errno=0 [ 1321.635246][T14008] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1322.022500][T14014] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1822'. [ 1322.614380][T13996] exFAT-fs (loop8): error, invalid access to FAT (entry 0xffffffff) [ 1322.622885][T13996] exFAT-fs (loop8): Filesystem has been set read-only [ 1323.985495][T14030] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1827'. [ 1324.283703][ T5846] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1324.453342][ T9078] usb 9-1: new high-speed USB device number 45 using dummy_hcd [ 1324.573667][ T5846] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1324.580684][ T5846] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1324.590370][ T5846] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1324.696014][ T9078] usb 9-1: device descriptor read/64, error -71 [ 1324.739078][ T5846] usb 6-1: config 0 descriptor?? [ 1324.970599][ T9078] usb 9-1: new high-speed USB device number 46 using dummy_hcd [ 1325.176449][ T9078] usb 9-1: device descriptor read/64, error -71 [ 1325.294794][ T5846] wacom 0003:056A:0331.0014: hidraw0: USB HID v0.00 Device [HID 056a:0331] on usb-dummy_hcd.5-1/input0 [ 1325.307616][ T9080] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1325.308534][ T9078] usb usb9-port1: attempt power cycle [ 1325.513658][ T9080] usb 4-1: Using ep0 maxpacket: 16 [ 1325.533191][ T8] usb 6-1: USB disconnect, device number 21 [ 1325.597928][ T9080] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1325.608791][ T9080] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1325.723783][ T9080] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1325.734107][ T9080] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1325.739481][ T9078] usb 9-1: new high-speed USB device number 47 using dummy_hcd [ 1325.743308][ T9080] usb 4-1: Product: syz [ 1325.759794][ T9080] usb 4-1: Manufacturer: syz [ 1325.764966][ T9080] usb 4-1: SerialNumber: syz [ 1325.842222][ T9078] usb 9-1: device descriptor read/8, error -71 [ 1326.133435][ T9078] usb 9-1: new high-speed USB device number 48 using dummy_hcd [ 1326.206355][ T9080] usb 4-1: 0:2 : does not exist [ 1326.238030][ T9078] usb 9-1: device descriptor read/8, error -71 [ 1326.307787][ T9080] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 1326.378668][ T9078] usb usb9-port1: unable to enumerate USB device [ 1326.575928][ T9080] usb 4-1: USB disconnect, device number 21 [ 1327.050483][ T6476] udevd[6476]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1329.660042][T14090] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1842'. [ 1329.853802][T14090] loop3: detected capacity change from 0 to 256 [ 1329.914643][T14090] msdos: Unknown parameter '¾.bßE`ŠdZ\¢6¥^:ÿæ;@žâÉ©³¡j³t¶:™ÿß5K+ßë¥]ê¥z¡0×5JœFyBPéÃÄ­5$&~$ÏQéM¬?jvøb‘AInWV¹SK…Ñ»' [ 1330.172756][T14090] loop3: detected capacity change from 0 to 64 [ 1330.182468][T14090] minix: Unknown parameter 'œ<-ËqÄÅyQŸMóçÃG““;åÂá²ÕÅl6Ý‹úÜ»9Ÿ6ó«q­j/çe3Æí[9ŸgžLVòQ¼îrâ' [ 1330.246630][T14095] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1844'. [ 1330.302536][T14093] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1843'. [ 1330.434942][T14091] block nbd2: shutting down sockets [ 1330.694078][ T9080] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 1330.916424][ T9080] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1330.949718][ T9080] usb 6-1: not running at top speed; connect to a high speed hub [ 1331.023569][ T9080] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1331.078043][ T9080] usb 6-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice= 0.40 [ 1331.087609][ T9080] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1331.096116][ T9080] usb 6-1: Product: syz [ 1331.100562][ T9080] usb 6-1: Manufacturer: syz [ 1331.105792][ T9080] usb 6-1: SerialNumber: syz [ 1331.486853][ T9080] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input25 [ 1331.508918][ T5132] bcm5974 6-1:1.0: could not read from device [ 1331.577683][ T5132] bcm5974 6-1:1.0: could not read from device [ 1331.624551][ T8] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1331.637098][T14110] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 1331.671370][ T5132] bcm5974 6-1:1.0: could not read from device [ 1331.699782][ T9080] usb 6-1: USB disconnect, device number 22 [ 1331.726590][ T5132] bcm5974 6-1:1.0: could not read from device [ 1331.817606][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 1331.933533][ T8] usb 4-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 1331.943353][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1331.951645][ T8] usb 4-1: Product: syz [ 1331.957176][ T8] usb 4-1: Manufacturer: syz [ 1331.962025][ T8] usb 4-1: SerialNumber: syz [ 1332.028186][ T8] usb 4-1: config 0 descriptor?? [ 1332.065237][ T8] gspca_main: sq905-2.14.0 probing 2770:9120 [ 1332.588986][ T8] gspca_sq905: sq905_command: usb_control_msg failed 2 (-71) [ 1332.597697][ T8] sq905 4-1:0.0: probe with driver sq905 failed with error -71 [ 1332.664892][ T8] usb 4-1: USB disconnect, device number 22 [ 1332.983307][ T9080] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1333.226149][ T9080] usb 3-1: Using ep0 maxpacket: 32 [ 1333.285918][ T9080] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1333.393939][ T9080] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1333.403526][ T9080] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1333.411821][ T9080] usb 3-1: Product: syz [ 1333.416452][ T9080] usb 3-1: Manufacturer: syz [ 1333.421293][ T9080] usb 3-1: SerialNumber: syz [ 1333.586271][ T9080] usb 3-1: config 0 descriptor?? [ 1334.762338][ T8] usb 3-1: USB disconnect, device number 63 [ 1335.506696][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 1335.513643][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1336.894159][ T8] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 1337.129289][ T8] usb 6-1: config 252 has an invalid interface number: 251 but max is 0 [ 1337.138174][ T8] usb 6-1: config 252 has no interface number 0 [ 1337.145336][ T8] usb 6-1: New USB device found, idVendor=0c45, idProduct=6280, bcdDevice=d5.fc [ 1337.154907][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1337.319509][ T8] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6280 [ 1337.744949][T14165] fuse: Unknown parameter 'fd00000000000000000000003' [ 1337.791659][ T8] gspca_sn9c20x: Write register 1001 failed -71 [ 1337.798330][ T8] gspca_sn9c20x: Device initialization failed [ 1337.805209][ T8] gspca_sn9c20x 6-1:252.251: probe with driver gspca_sn9c20x failed with error -71 [ 1337.912107][ T8] usb 6-1: USB disconnect, device number 23 [ 1337.925272][ T7008] udevd[7008]: setting owner of /dev/bus/usb/006/023 to uid=0, gid=0 failed: No such file or directory [ 1339.577736][T14181] loop2: detected capacity change from 0 to 8 [ 1339.727295][T14181] SQUASHFS error: xz decompression failed, data probably corrupt [ 1339.735937][T14181] SQUASHFS error: Failed to read block 0x108: -5 [ 1339.742523][T14181] SQUASHFS error: Unable to read metadata cache entry [106] [ 1339.750416][T14181] SQUASHFS error: Unable to read inode 0x11f [ 1340.073323][T14180] loop5: detected capacity change from 0 to 4096 [ 1340.332689][T14180] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1340.507348][ T8] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1340.733203][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 1340.818195][ T8] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1340.828912][ T8] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1341.025525][ T8] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1341.035224][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1341.043918][ T8] usb 3-1: Product: syz [ 1341.048373][ T8] usb 3-1: Manufacturer: syz [ 1341.053492][ T8] usb 3-1: SerialNumber: syz [ 1341.364822][T13372] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1341.637367][ T8] usb 3-1: 0:2 : does not exist [ 1341.642608][ T8] usb 3-1: unit 9 not found! [ 1341.757375][ T8] usb 3-1: 4:0: cannot get min/max values for control 1 (id 4) [ 1342.016584][ T8] usb 3-1: USB disconnect, device number 64 [ 1342.315992][ T6476] udevd[6476]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1342.404602][T14189] loop8: detected capacity change from 0 to 8192 [ 1352.404493][T14307] tap0: tun_chr_ioctl cmd 21731 [ 1355.569296][T14333] loop5: detected capacity change from 0 to 2048 [ 1355.820735][T14333] Alternate GPT is invalid, using primary GPT. [ 1355.828794][T14333] loop5: p1 p2 p3 [ 1355.973858][ T29] audit: type=1326 audit(1740471005.679:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14339 comm="syz.8.1921" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 1355.997592][ T29] audit: type=1326 audit(1740471005.689:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14339 comm="syz.8.1921" exe="/root/syz-executor" sig=0 arch=40000003 syscall=448 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 1356.020345][ T29] audit: type=1326 audit(1740471005.689:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14339 comm="syz.8.1921" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 1356.043223][ T29] audit: type=1326 audit(1740471005.709:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14339 comm="syz.8.1921" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 1356.420306][T14342] .: renamed from veth1_vlan (while UP) [ 1356.554604][ T29] audit: type=1326 audit(1740471005.979:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14339 comm="syz.8.1921" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 1356.582001][ T29] audit: type=1326 audit(1740471005.979:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14339 comm="syz.8.1921" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 1356.606030][ T29] audit: type=1326 audit(1740471006.149:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14339 comm="syz.8.1921" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 1356.628892][ T29] audit: type=1326 audit(1740471006.269:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14339 comm="syz.8.1921" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 1356.652055][ T29] audit: type=1326 audit(1740471006.339:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14339 comm="syz.8.1921" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 1356.868381][ T7441] udevd[7441]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 1356.966014][ T7008] udevd[7008]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 1357.006912][T14348] loop2: detected capacity change from 0 to 512 [ 1357.348627][ T29] audit: type=1326 audit(1740471006.439:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14339 comm="syz.8.1921" exe="/root/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 1357.612132][T14348] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1357.626626][T14348] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1358.101323][ T6476] udevd[6476]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 1358.408494][ T7008] udevd[7008]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 1358.434941][ T7441] udevd[7441]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 1358.442395][ T6476] udevd[6476]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 1359.225757][T14368] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1359.238579][T14368] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1359.284808][T14368] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1359.291358][T14368] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1359.409274][T14368] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1359.415994][T14368] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1359.497829][T14368] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1359.567737][T13321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1359.575453][T14368] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1359.583707][T14368] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1359.714365][T14368] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1359.808595][T14368] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1359.819296][T14368] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1359.935925][T14368] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1360.037041][T14368] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1360.405474][ T8906] Bluetooth: hci4: command 0x0406 tx timeout [ 1361.110380][ T29] kauditd_printk_skb: 110 callbacks suppressed [ 1361.110468][ T29] audit: type=1326 audit(1740471010.839:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14389 comm="syz.3.1937" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55579 code=0x7ffc0000 [ 1361.284282][ T29] audit: type=1326 audit(1740471010.939:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14389 comm="syz.3.1937" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f55579 code=0x7ffc0000 [ 1361.307223][ T29] audit: type=1326 audit(1740471010.949:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14389 comm="syz.3.1937" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55579 code=0x7ffc0000 [ 1361.330119][ T29] audit: type=1326 audit(1740471010.969:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14389 comm="syz.3.1937" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f55579 code=0x7ffc0000 [ 1361.353243][ T29] audit: type=1326 audit(1740471010.979:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14389 comm="syz.3.1937" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55579 code=0x7ffc0000 [ 1361.375998][ T29] audit: type=1326 audit(1740471010.979:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14389 comm="syz.3.1937" exe="/root/syz-executor" sig=0 arch=40000003 syscall=451 compat=1 ip=0xf7f55579 code=0x7ffc0000 [ 1361.405586][ T29] audit: type=1326 audit(1740471010.989:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14389 comm="syz.3.1937" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55579 code=0x7ffc0000 [ 1361.453372][ T8906] Bluetooth: hci1: command 0x0406 tx timeout [ 1361.459829][ T8906] Bluetooth: hci2: command 0x0c1a tx timeout [ 1361.624871][ T5802] Bluetooth: hci0: command 0x0c1a tx timeout [ 1361.844278][ T5802] Bluetooth: hci3: command 0x0c1a tx timeout [ 1362.041367][T14402] loop3: detected capacity change from 0 to 128 [ 1362.363329][ T29] audit: type=1326 audit(1740471012.069:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14404 comm="syz.8.1942" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 1362.484182][ T5802] Bluetooth: hci4: command 0x0406 tx timeout [ 1362.523982][ T29] audit: type=1326 audit(1740471012.129:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14404 comm="syz.8.1942" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 1362.547566][ T29] audit: type=1326 audit(1740471012.159:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14404 comm="syz.8.1942" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 1363.161278][T14416] loop2: detected capacity change from 0 to 128 [ 1363.454672][T14416] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1363.523703][ T5802] Bluetooth: hci2: command 0x0c1a tx timeout [ 1363.523856][ T8906] Bluetooth: hci1: command 0x0406 tx timeout [ 1363.694224][ T8906] Bluetooth: hci0: command 0x0c1a tx timeout [ 1363.753796][T14416] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1363.928613][ T8906] Bluetooth: hci3: command 0x0c1a tx timeout [ 1364.646538][T13321] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1365.607319][ T8906] Bluetooth: hci2: command 0x0c1a tx timeout [ 1365.764259][ T8906] Bluetooth: hci0: command 0x0c1a tx timeout [ 1366.013697][ T8906] Bluetooth: hci3: command 0x0c1a tx timeout [ 1368.087796][ T8906] Bluetooth: hci3: command 0x0c1a tx timeout [ 1371.035928][T14479] loop8: detected capacity change from 0 to 1024 [ 1371.121142][T14479] EXT4-fs: quotafile must be on filesystem root [ 1372.513824][T14493] dccp_invalid_packet: P.Data Offset(172) too large [ 1372.760126][T14493] loop2: detected capacity change from 0 to 1024 [ 1372.801758][T14496] loop5: detected capacity change from 0 to 128 [ 1372.851044][T14493] EXT4-fs: Ignoring removed bh option [ 1373.078218][T14493] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1373.314001][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 1373.314087][ T29] audit: type=1326 audit(1740471023.039:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14491 comm="syz.2.1969" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f2f579 code=0x7ffc0000 [ 1373.344243][ T29] audit: type=1326 audit(1740471023.049:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14491 comm="syz.2.1969" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f2f579 code=0x7ffc0000 [ 1373.397563][T14496] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1970'. [ 1373.691422][ T29] audit: type=1326 audit(1740471023.349:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14491 comm="syz.2.1969" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f2f579 code=0x7ffc0000 [ 1373.715003][ T29] audit: type=1326 audit(1740471023.349:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14491 comm="syz.2.1969" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f2f579 code=0x7ffc0000 [ 1374.158337][T13321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1374.827273][T14522] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1976'. [ 1376.017929][T14538] loop5: detected capacity change from 0 to 128 [ 1376.090006][T14538] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1376.704076][ T7831] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1376.960952][T14548] loop2: detected capacity change from 0 to 1024 [ 1376.996905][T14548] EXT4-fs: Ignoring removed nobh option [ 1377.003314][T14548] EXT4-fs: Ignoring removed bh option [ 1377.211596][T14548] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1377.905375][T13321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1378.910834][T14564] loop2: detected capacity change from 0 to 164 [ 1378.979704][T14564] ISOFS: unable to read i-node block [ 1378.985478][T14564] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 1379.156764][T14567] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1992'. [ 1379.681279][T14573] loop8: detected capacity change from 0 to 256 [ 1379.767802][T14574] loop2: detected capacity change from 0 to 164 [ 1379.899655][T14574] tipc: Started in network mode [ 1379.905647][T14574] tipc: Node identity ac14140f, cluster identity 4711 [ 1379.922289][T14574] tipc: New replicast peer: 255.255.255.255 [ 1379.932738][T14574] tipc: Enabled bearer , priority 10 [ 1379.985161][T14573] FAT-fs (loop8): Directory bread(block 64) failed [ 1379.992154][T14573] FAT-fs (loop8): Directory bread(block 65) failed [ 1379.999308][T14573] FAT-fs (loop8): Directory bread(block 66) failed [ 1380.006608][T14573] FAT-fs (loop8): Directory bread(block 67) failed [ 1380.013740][T14573] FAT-fs (loop8): Directory bread(block 68) failed [ 1380.023854][T14573] FAT-fs (loop8): Directory bread(block 69) failed [ 1380.030828][T14573] FAT-fs (loop8): Directory bread(block 70) failed [ 1380.038908][T14573] FAT-fs (loop8): Directory bread(block 71) failed [ 1380.046090][T14573] FAT-fs (loop8): Directory bread(block 72) failed [ 1380.053052][T14573] FAT-fs (loop8): Directory bread(block 73) failed [ 1380.795393][T14583] loop2: detected capacity change from 0 to 512 [ 1380.844544][T14581] loop5: detected capacity change from 0 to 2048 [ 1380.876009][T14583] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1380.916876][T14583] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1380.994055][T14581] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1381.047036][ T9078] tipc: Node number set to 2886997007 [ 1381.137931][T14581] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1997: bg 0: block 234: padding at end of block bitmap is not set [ 1381.181576][T14581] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 117 [ 1381.198609][T14581] EXT4-fs (loop5): This should not happen!! Data will be lost [ 1381.198609][T14581] [ 1381.256818][T14580] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1381.270218][T14580] EXT4-fs (loop5): This should not happen!! Data will be lost [ 1381.270218][T14580] [ 1381.280263][T14580] EXT4-fs (loop5): Total free blocks count 0 [ 1381.287048][T14580] EXT4-fs (loop5): Free/Dirty block details [ 1381.293903][T14580] EXT4-fs (loop5): free_blocks=0 [ 1381.299119][T14580] EXT4-fs (loop5): dirty_blocks=32 [ 1381.304625][T14580] EXT4-fs (loop5): Block reservation details [ 1381.419824][T13321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1381.958805][T14597] netlink: 252 bytes leftover after parsing attributes in process `syz.2.2002'. [ 1382.155909][T14599] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2004'. [ 1382.165860][T14599] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1382.177789][T14599] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1382.224025][T14599] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1382.232103][T14599] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1382.402177][T14602] loop5: detected capacity change from 0 to 512 [ 1382.469088][T14602] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1382.564198][T14602] EXT4-fs (loop5): 1 truncate cleaned up [ 1382.571934][T14602] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1383.102615][T13372] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1383.536070][T14617] loop8: detected capacity change from 0 to 1024 [ 1383.620152][T14622] netem: change failed [ 1383.711829][T14617] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1384.028700][ T29] audit: type=1326 audit(1740471033.749:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14627 comm="syz.3.2011" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55579 code=0x7ffc0000 [ 1384.051880][ T29] audit: type=1326 audit(1740471033.769:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14627 comm="syz.3.2011" exe="/root/syz-executor" sig=0 arch=40000003 syscall=218 compat=1 ip=0xf7f55579 code=0x7ffc0000 [ 1384.075029][ T29] audit: type=1326 audit(1740471033.769:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14627 comm="syz.3.2011" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55579 code=0x7ffc0000 [ 1384.544768][ T4127] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 1384.583520][ T4127] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 504 with error 28 [ 1384.595576][T14630] loop5: detected capacity change from 0 to 1024 [ 1384.596470][ T4127] EXT4-fs (loop8): This should not happen!! Data will be lost [ 1384.596470][ T4127] [ 1384.612752][ T4127] EXT4-fs (loop8): Total free blocks count 0 [ 1384.619139][ T4127] EXT4-fs (loop8): Free/Dirty block details [ 1384.630807][ T4127] EXT4-fs (loop8): free_blocks=68451041280 [ 1384.638553][ T4127] EXT4-fs (loop8): dirty_blocks=512 [ 1384.644144][ T4127] EXT4-fs (loop8): Block reservation details [ 1384.644195][T14630] EXT4-fs: Ignoring removed orlov option [ 1384.656403][ T4127] EXT4-fs (loop8): i_reserved_data_blocks=32 [ 1384.744523][T14630] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1384.778134][T12313] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1384.918020][T13372] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1385.495486][T14642] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2016'. [ 1385.884676][T14644] loop3: detected capacity change from 0 to 1024 [ 1385.934547][T14644] EXT4-fs: Ignoring removed mblk_io_submit option [ 1385.969078][T14644] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1386.040739][T14644] EXT4-fs error (device loop3): ext4_ext_check_inode:524: inode #11: comm syz.3.2018: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 1386.081587][T14644] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.2018: couldn't read orphan inode 11 (err -117) [ 1386.102229][T14644] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1386.270504][T14644] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.2018: Invalid block bitmap block 0 in block_group 0 [ 1386.386307][T14644] Quota error (device loop3): write_blk: dquota write failed [ 1386.394326][T14644] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 1386.404893][T14644] EXT4-fs error (device loop3): ext4_acquire_dquot:6927: comm syz.3.2018: Failed to acquire dquot type 0 [ 1386.720628][T13409] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1387.171616][T14670] loop8: detected capacity change from 0 to 1024 [ 1387.246089][T14670] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1387.687977][T12313] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1387.778201][T14676] loop2: detected capacity change from 0 to 2048 [ 1387.918507][T14676] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1387.931562][T14676] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1388.405686][T13321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1389.367336][T14698] mmap: syz.0.2039 (14698) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1389.493404][ T29] audit: type=1326 audit(1740471039.219:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14703 comm="syz.3.2042" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55579 code=0x7ffc0000 [ 1389.588141][ T29] audit: type=1326 audit(1740471039.319:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14703 comm="syz.3.2042" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f55579 code=0x7ffc0000 [ 1389.611073][ T29] audit: type=1326 audit(1740471039.319:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14703 comm="syz.3.2042" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55579 code=0x7ffc0000 [ 1389.634011][ T29] audit: type=1326 audit(1740471039.319:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14703 comm="syz.3.2042" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55579 code=0x7ffc0000 [ 1389.659071][ T29] audit: type=1326 audit(1740471039.319:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14703 comm="syz.3.2042" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f55579 code=0x7ffc0000 [ 1389.904456][ T29] audit: type=1326 audit(1740471039.459:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14703 comm="syz.3.2042" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55579 code=0x7ffc0000 [ 1389.927396][ T29] audit: type=1326 audit(1740471039.459:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14703 comm="syz.3.2042" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55579 code=0x7ffc0000 [ 1389.958779][ T29] audit: type=1326 audit(1740471039.479:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14703 comm="syz.3.2042" exe="/root/syz-executor" sig=0 arch=40000003 syscall=226 compat=1 ip=0xf7f55579 code=0x7ffc0000 [ 1389.982329][ T29] audit: type=1326 audit(1740471039.479:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14703 comm="syz.3.2042" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55579 code=0x7ffc0000 [ 1390.004929][ T29] audit: type=1326 audit(1740471039.499:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14703 comm="syz.3.2042" exe="/root/syz-executor" sig=0 arch=40000003 syscall=227 compat=1 ip=0xf7f55579 code=0x7ffc0000 [ 1390.773540][T14722] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2048'. [ 1391.700755][T14719] loop2: detected capacity change from 0 to 8192 [ 1393.194058][T14754] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2060'. [ 1393.206536][T14753] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2058'. [ 1393.895162][T14764] smc: net device bond0 applied user defined pnetid SYZ0 [ 1393.951488][T14764] smc: net device bond0 erased user defined pnetid SYZ0 [ 1394.549404][T14771] usb usb1: usbfs: interface 0 claimed by hub while 'syz.8.2067' sets config #0 [ 1394.564492][T14773] netlink: 'syz.5.2068': attribute type 13 has an invalid length. [ 1394.653416][T14773] gretap0: refused to change device tx_queue_len [ 1394.666833][T14773] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1394.758454][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 1394.758540][ T29] audit: type=1326 audit(1740471044.489:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14774 comm="syz.0.2069" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 1394.893100][ T29] audit: type=1326 audit(1740471044.619:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14774 comm="syz.0.2069" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 1394.916770][ T29] audit: type=1326 audit(1740471044.619:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14774 comm="syz.0.2069" exe="/root/syz-executor" sig=0 arch=40000003 syscall=131 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 1395.020049][ T29] audit: type=1326 audit(1740471044.749:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14774 comm="syz.0.2069" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 1395.043140][ T29] audit: type=1326 audit(1740471044.749:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14774 comm="syz.0.2069" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 1395.185847][ T29] audit: type=1326 audit(1740471044.909:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14776 comm="syz.3.2070" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55579 code=0x7ffc0000 [ 1395.208723][ T29] audit: type=1326 audit(1740471044.909:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14776 comm="syz.3.2070" exe="/root/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf7f55579 code=0x7ffc0000 [ 1395.231649][ T29] audit: type=1326 audit(1740471044.909:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14776 comm="syz.3.2070" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55579 code=0x7ffc0000 [ 1395.476056][ T29] audit: type=1326 audit(1740471044.989:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14776 comm="syz.3.2070" exe="/root/syz-executor" sig=0 arch=40000003 syscall=107 compat=1 ip=0xf7f55579 code=0x7ffc0000 [ 1395.504794][ T29] audit: type=1326 audit(1740471044.989:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14776 comm="syz.3.2070" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55579 code=0x7ffc0000 [ 1396.539944][T14797] usb usb1: usbfs: process 14797 (syz.3.2080) did not claim interface 0 before use [ 1396.937084][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 1396.944050][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1397.446560][T14806] tipc: Enabled bearer , priority 0 [ 1397.523484][T14806] +: renamed from syzkaller0 [ 1397.579594][T14806] tipc: Disabling bearer [ 1398.372160][T14817] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2089'. [ 1398.530439][T14819] loop2: detected capacity change from 0 to 128 [ 1398.596207][T14819] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1398.654892][T14819] ext4 filesystem being mounted at /57/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1399.169454][T13321] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1399.192660][T14829] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2094'. [ 1399.231958][T14829] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2094'. [ 1399.245912][T14829] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2094'. [ 1399.274039][T14829] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2094'. [ 1399.384431][T14830] loop8: detected capacity change from 0 to 512 [ 1399.394667][T14830] EXT4-fs: Ignoring removed oldalloc option [ 1399.540986][T14830] EXT4-fs error (device loop8): ext4_xattr_inode_iget:436: comm syz.8.2093: Parent and EA inode have the same ino 15 [ 1399.568675][T14830] EXT4-fs (loop8): Remounting filesystem read-only [ 1399.584662][T14830] EXT4-fs warning (device loop8): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 1399.595724][T14830] EXT4-fs (loop8): 1 orphan inode deleted [ 1399.603895][T14830] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1399.714489][T14839] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2097'. [ 1399.734701][T14836] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2098'. [ 1399.841898][T14836] bond0: (slave bond_slave_0): Releasing backup interface [ 1399.955410][T12313] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1400.491328][T14842] loop8: detected capacity change from 0 to 512 [ 1400.672386][T14842] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.2099: bg 0: block 16: invalid block bitmap [ 1400.689238][T14842] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 1400.717713][T14842] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.2099: invalid indirect mapped block 5 (level 0) [ 1400.793570][T14842] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.2099: invalid indirect mapped block 4294967295 (level 1) [ 1400.873718][T14842] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.2099: invalid indirect mapped block 4294967295 (level 2) [ 1400.939869][T14842] EXT4-fs (loop8): 1 truncate cleaned up [ 1400.948963][T14842] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1401.204734][T12313] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1401.607514][T14855] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2105'. [ 1401.617152][T14855] tipc: Started in network mode [ 1401.625415][T14855] tipc: Node identity dd6cce07, cluster identity 5 [ 1401.632165][T14855] tipc: Node number set to 3714895367 [ 1402.109355][T14862] loop3: detected capacity change from 0 to 512 [ 1402.160112][T14862] EXT4-fs: Ignoring removed nobh option [ 1402.306215][T14862] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1402.319671][T14862] ext4 filesystem being mounted at /77/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1402.500153][T14867] loop8: detected capacity change from 0 to 512 [ 1402.549274][T14867] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1402.640172][T14867] EXT4-fs (loop8): 1 truncate cleaned up [ 1402.651807][T14867] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1402.880666][T13409] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1403.383638][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 1403.383720][ T29] audit: type=1326 audit(1740471053.109:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14878 comm="syz.3.2114" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55579 code=0x7ffc0000 [ 1403.412983][ T29] audit: type=1326 audit(1740471053.119:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14878 comm="syz.3.2114" exe="/root/syz-executor" sig=0 arch=40000003 syscall=116 compat=1 ip=0xf7f55579 code=0x7ffc0000 [ 1403.435699][ T29] audit: type=1326 audit(1740471053.119:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14878 comm="syz.3.2114" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55579 code=0x7ffc0000 [ 1403.458502][ T29] audit: type=1326 audit(1740471053.119:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14878 comm="syz.3.2114" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55579 code=0x7ffc0000 [ 1403.833437][ T29] audit: type=1326 audit(1740471053.559:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14880 comm="syz.0.2115" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 1403.857246][ T29] audit: type=1326 audit(1740471053.559:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14880 comm="syz.0.2115" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 1404.002266][ T29] audit: type=1326 audit(1740471053.639:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14880 comm="syz.0.2115" exe="/root/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 1404.094009][ T29] audit: type=1326 audit(1740471053.779:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14882 comm="syz.0.2115" exe="/root/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 1404.116904][ T29] audit: type=1326 audit(1740471053.789:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14880 comm="syz.0.2115" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 1404.139960][ T29] audit: type=1326 audit(1740471053.789:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14880 comm="syz.0.2115" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 1405.827555][T14902] sch_tbf: burst 1656 is lower than device lo mtu (65550) ! [ 1406.923271][T12313] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1408.271983][T14929] loop2: detected capacity change from 0 to 1024 [ 1409.103777][T14929] EXT4-fs: Ignoring removed i_version option [ 1409.114348][T14929] EXT4-fs: Mount option(s) incompatible with ext2 [ 1410.684622][T14953] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2145'. [ 1410.694265][T14953] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2145'. [ 1411.808031][T14967] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2152'. [ 1412.540197][ T29] kauditd_printk_skb: 60 callbacks suppressed [ 1412.540284][ T29] audit: type=1326 audit(1740471062.259:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14972 comm="syz.0.2154" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 1412.569692][ T29] audit: type=1326 audit(1740471062.269:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14972 comm="syz.0.2154" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 1412.799921][ T29] audit: type=1326 audit(1740471062.359:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14972 comm="syz.0.2154" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 1412.824106][ T29] audit: type=1326 audit(1740471062.359:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14972 comm="syz.0.2154" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 1412.846880][ T29] audit: type=1326 audit(1740471062.359:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14972 comm="syz.0.2154" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 1412.869580][ T29] audit: type=1326 audit(1740471062.369:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14972 comm="syz.0.2154" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 1412.896789][ T29] audit: type=1326 audit(1740471062.429:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14972 comm="syz.0.2154" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 1412.920862][ T29] audit: type=1326 audit(1740471062.429:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14972 comm="syz.0.2154" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 1412.943615][ T29] audit: type=1326 audit(1740471062.429:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14972 comm="syz.0.2154" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 1412.966400][ T29] audit: type=1326 audit(1740471062.429:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14972 comm="syz.0.2154" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 1414.072262][T14991] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2162'. [ 1417.115269][T15019] loop5: detected capacity change from 0 to 512 [ 1417.178766][T15019] EXT4-fs error (device loop5): ext4_expand_extra_isize_ea:2813: inode #11: comm syz.5.2176: corrupted xattr block 95: invalid header [ 1417.236783][T15019] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.2176: bg 0: block 7: invalid block bitmap [ 1417.293573][T15019] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 1417.350760][T15019] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2977: inode #11: comm syz.5.2176: corrupted xattr block 95: invalid header [ 1417.442540][T15019] EXT4-fs warning (device loop5): ext4_evict_inode:276: xattr delete (err -117) [ 1417.452145][T15019] EXT4-fs (loop5): 1 orphan inode deleted [ 1417.460671][T15019] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1417.722034][ T5802] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1417.736267][ T5802] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1417.764018][ T5802] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1417.817621][ T5802] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1417.846947][ T5802] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1417.879244][ T5802] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1418.365933][T13372] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1419.194769][T15026] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2177'. [ 1419.923768][ T8906] Bluetooth: hci5: command tx timeout [ 1420.154421][T15022] chnl_net:caif_netlink_parms(): no params data found [ 1421.168104][T15046] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2182'. [ 1421.508092][T15044] loop3: detected capacity change from 0 to 2048 [ 1421.623477][T15044] Alternate GPT is invalid, using primary GPT. [ 1421.630859][T15044] loop3: p1 p2 p3 [ 1421.879047][T15022] bridge0: port 1(bridge_slave_0) entered blocking state [ 1421.887067][T15022] bridge0: port 1(bridge_slave_0) entered disabled state [ 1421.895303][T15022] bridge_slave_0: entered allmulticast mode [ 1421.912441][T15022] bridge_slave_0: entered promiscuous mode [ 1422.003713][ T8906] Bluetooth: hci5: command tx timeout [ 1422.024340][T15022] bridge0: port 2(bridge_slave_1) entered blocking state [ 1422.032150][T15022] bridge0: port 2(bridge_slave_1) entered disabled state [ 1422.041826][T15022] bridge_slave_1: entered allmulticast mode [ 1422.051456][T15022] bridge_slave_1: entered promiscuous mode [ 1422.300420][T15022] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1422.396188][T15022] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1422.781778][T15022] team0: Port device team_slave_0 added [ 1422.889465][ T3487] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1422.953931][T15060] loop5: detected capacity change from 0 to 1024 [ 1422.957940][T15022] team0: Port device team_slave_1 added [ 1422.974821][T15060] EXT4-fs: Ignoring removed bh option [ 1423.036905][ T3487] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1423.181510][T15060] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1423.260852][ T3487] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1423.285756][T15022] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1423.294314][T15022] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1423.320901][T15022] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1423.431006][ T3487] netdevsim netdevsim0 netdevsim0 (unregistering): left promiscuous mode [ 1423.553879][ T3487] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1423.628838][T15022] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1423.636343][T15022] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1423.668682][T15022] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1424.083620][ T8906] Bluetooth: hci5: command tx timeout [ 1424.610599][T15073] loop3: detected capacity change from 0 to 2048 [ 1424.834538][T13372] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1424.886907][T15073] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1424.935386][ T3487] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1424.961258][ T3487] bond0 (unregistering): Released all slaves [ 1424.991968][T15078] loop8: detected capacity change from 0 to 512 [ 1425.079188][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 1425.079267][ T29] audit: type=1800 audit(1740471074.809:612): pid=15073 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2191" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 1425.166509][T15022] hsr_slave_0: entered promiscuous mode [ 1425.182459][T15022] hsr_slave_1: entered promiscuous mode [ 1425.191600][T15022] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1425.199661][T15022] Cannot create hsr debugfs directory [ 1425.231074][T15078] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1425.245019][T15078] ext4 filesystem being mounted at /137/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1425.430003][ T3487] tipc: Left network mode [ 1425.490956][T13409] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1425.525126][T15078] EXT4-fs error (device loop8): ext4_do_update_inode:5154: inode #2: comm syz.8.2194: corrupted inode contents [ 1425.548750][T15078] EXT4-fs error (device loop8): ext4_dirty_inode:6042: inode #2: comm syz.8.2194: mark_inode_dirty error [ 1425.612645][T15078] EXT4-fs error (device loop8): ext4_do_update_inode:5154: inode #2: comm syz.8.2194: corrupted inode contents [ 1425.630465][T15078] EXT4-fs error (device loop8): __ext4_ext_dirty:207: inode #2: comm syz.8.2194: mark_inode_dirty error [ 1425.761850][T15087] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2192'. [ 1425.771499][T15087] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2192'. [ 1426.107399][T12313] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1426.129506][ T3487] hsr_slave_0: left promiscuous mode [ 1426.161563][ T3487] hsr_slave_1: left promiscuous mode [ 1426.174137][ T3487] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1426.181991][ T3487] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1426.190672][ T8906] Bluetooth: hci5: command tx timeout [ 1426.218812][ T3487] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1426.227066][ T3487] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1426.244644][ T3487] veth1_macvtap: left promiscuous mode [ 1426.250607][ T3487] veth0_macvtap: left promiscuous mode [ 1426.256866][ T3487] veth1_vlan: left promiscuous mode [ 1426.262481][ T3487] veth0_vlan: left promiscuous mode [ 1426.890941][ T3487] batadv1 (unregistering): left promiscuous mode [ 1426.901452][ T3487] team0 (unregistering): Port device batadv1 removed [ 1427.341345][ T3487] team_slave_1 (unregistering): left promiscuous mode [ 1427.367106][ T3487] team0 (unregistering): Port device team_slave_1 removed [ 1427.400226][ T3487] team_slave_0 (unregistering): left promiscuous mode [ 1427.414203][ T3487] team0 (unregistering): Port device team_slave_0 removed [ 1428.223244][ T29] audit: type=1326 audit(1740471077.919:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15103 comm="syz.3.2201" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55579 code=0x7ffc0000 [ 1428.249508][ T29] audit: type=1326 audit(1740471077.949:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15103 comm="syz.3.2201" exe="/root/syz-executor" sig=0 arch=40000003 syscall=225 compat=1 ip=0xf7f55579 code=0x7ffc0000 [ 1428.273135][ T29] audit: type=1326 audit(1740471077.949:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15103 comm="syz.3.2201" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55579 code=0x7ffc0000 [ 1428.295892][ T29] audit: type=1326 audit(1740471077.949:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15103 comm="syz.3.2201" exe="/root/syz-executor" sig=0 arch=40000003 syscall=356 compat=1 ip=0xf7f55579 code=0x7ffc0000 [ 1428.318535][ T29] audit: type=1326 audit(1740471077.949:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15103 comm="syz.3.2201" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7f55579 code=0x7ffc0000 [ 1428.341221][ T29] audit: type=1326 audit(1740471077.989:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15103 comm="syz.3.2201" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f55579 code=0x7ffc0000 [ 1428.346728][T15107] loop3: detected capacity change from 0 to 512 [ 1428.367472][ T29] audit: type=1326 audit(1740471078.009:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15103 comm="syz.3.2201" exe="/root/syz-executor" sig=0 arch=40000003 syscall=91 compat=1 ip=0xf7f55579 code=0x7ffc0000 [ 1428.396824][ T29] audit: type=1326 audit(1740471078.079:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15103 comm="syz.3.2201" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f55579 code=0x7ffc0000 [ 1428.419429][ T29] audit: type=1326 audit(1740471078.079:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15103 comm="syz.3.2201" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f55579 code=0x7ffc0000 [ 1428.621015][T15107] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.2201: corrupted in-inode xattr: invalid ea_ino [ 1428.643513][T15107] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.2201: couldn't read orphan inode 15 (err -117) [ 1428.691205][T15107] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1428.745789][ T3487] IPVS: stop unused estimator thread 0... [ 1429.209230][T13409] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1429.301914][T15022] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1429.335568][T15022] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1429.394588][T15022] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1429.451524][T15022] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1430.618142][T15022] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1430.778162][T15022] 8021q: adding VLAN 0 to HW filter on device team0 [ 1430.795243][T15131] usb usb8: usbfs: process 15131 (syz.8.2210) did not claim interface 0 before use [ 1430.873899][ T7831] bridge0: port 1(bridge_slave_0) entered blocking state [ 1430.881884][ T7831] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1430.967634][ T7831] bridge0: port 2(bridge_slave_1) entered blocking state [ 1430.975753][ T7831] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1432.272363][T15144] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 1432.272363][T15144] program syz.5.2215 not setting count and/or reply_len properly [ 1433.101514][T15022] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1433.360308][T15155] loop2: detected capacity change from 0 to 128 [ 1433.426851][T15155] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 1433.553452][T15022] veth0_vlan: entered promiscuous mode [ 1433.645053][T15022] veth1_vlan: entered promiscuous mode [ 1433.815888][ T4463] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 1433.957077][T15022] veth0_macvtap: entered promiscuous mode [ 1434.090376][T15022] veth1_macvtap: entered promiscuous mode [ 1434.268588][T15022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1434.279582][T15022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1434.293976][T15022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1434.306106][T15022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1434.316366][T15022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1434.327343][T15022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1434.342808][T15022] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1434.382775][T15022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1434.398670][T15022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1434.410923][T15022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1434.421825][T15022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1434.432236][T15022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1434.443157][T15022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1434.458584][T15022] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1434.858268][T15163] loop8: detected capacity change from 0 to 512 [ 1434.881958][T15022] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1434.891373][T15022] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1434.900643][T15022] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1434.914686][T15022] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1434.931552][T15163] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1435.069763][T15163] EXT4-fs (loop8): 1 truncate cleaned up [ 1435.077981][T15163] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1435.608333][T15171] sctp: [Deprecated]: syz.5.2225 (pid 15171) Use of int in max_burst socket option. [ 1435.608333][T15171] Use struct sctp_assoc_value instead [ 1435.656056][T12313] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1436.785286][T15184] loop8: detected capacity change from 0 to 164 [ 1436.843312][T15184] Unable to read rock-ridge attributes [ 1436.893663][T15184] Unable to read rock-ridge attributes [ 1437.357950][T15190] loop2: detected capacity change from 0 to 256 [ 1437.374553][T15190] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1437.478755][T15190] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1437.688464][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 1437.688550][ T29] audit: type=1326 audit(1740471087.409:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15194 comm="syz.5.2234" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 1437.813535][ T29] audit: type=1326 audit(1740471087.459:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15194 comm="syz.5.2234" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 1437.836213][ T29] audit: type=1326 audit(1740471087.459:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15194 comm="syz.5.2234" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 1437.859347][ T29] audit: type=1326 audit(1740471087.459:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15194 comm="syz.5.2234" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 1437.884881][ T29] audit: type=1326 audit(1740471087.459:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15194 comm="syz.5.2234" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 1437.908389][ T29] audit: type=1326 audit(1740471087.459:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15194 comm="syz.5.2234" exe="/root/syz-executor" sig=0 arch=40000003 syscall=342 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 1437.931146][ T29] audit: type=1326 audit(1740471087.459:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15194 comm="syz.5.2234" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 1437.953760][ T29] audit: type=1326 audit(1740471087.459:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15194 comm="syz.5.2234" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 1438.736929][T15202] loop8: detected capacity change from 0 to 2048 [ 1438.853792][T15202] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1439.069951][T15207] loop2: detected capacity change from 0 to 1024 [ 1439.128691][T15213] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2239'. [ 1439.180351][T15207] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1439.182551][ T29] audit: type=1800 audit(1740471088.889:641): pid=15215 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2236" name="bus" dev="loop8" ino=18 res=0 errno=0 [ 1439.432212][T15203] loop5: detected capacity change from 0 to 8192 [ 1439.532721][T12313] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1439.562806][T15203] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1439.598088][T13321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1440.111142][T15226] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2241'. [ 1440.406759][ T4463] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1440.415188][ T4463] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1440.752845][ T7831] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1440.761688][ T7831] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1441.509882][T15244] usb usb7: usbfs: process 15244 (syz.8.2247) did not claim interface 0 before use [ 1441.853173][T15251] team0: Device gtp0 is of different type [ 1441.965793][T15253] loop3: detected capacity change from 0 to 512 [ 1442.005755][T15253] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1442.048868][T15253] EXT4-fs (loop3): 1 truncate cleaned up [ 1442.057101][T15253] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1442.256972][T15253] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2250: bg 0: block 127: padding at end of block bitmap is not set [ 1442.315020][T15246] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1442.321929][T15246] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1442.332752][T15246] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1442.340385][T15246] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1442.347366][T15246] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1442.354134][T15246] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1442.398049][T15246] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1442.578865][T13409] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1443.529614][ T8906] Bluetooth: hci1: command 0x0406 tx timeout [ 1444.341954][ T8906] Bluetooth: hci2: command 0x0c1a tx timeout [ 1444.403740][ T8906] Bluetooth: hci5: command 0x0c1a tx timeout [ 1444.406918][ T5802] Bluetooth: hci3: command 0x0c1a tx timeout [ 1444.410240][ T8906] Bluetooth: hci0: command 0x0c1a tx timeout [ 1444.644280][ T29] audit: type=1326 audit(1740471094.349:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15284 comm="syz.3.2265" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55579 code=0x7ffc0000 [ 1444.667407][ T29] audit: type=1326 audit(1740471094.359:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15284 comm="syz.3.2265" exe="/root/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7f55579 code=0x7ffc0000 [ 1444.690052][ T29] audit: type=1326 audit(1740471094.359:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15284 comm="syz.3.2265" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55579 code=0x7ffc0000 [ 1444.713189][ T29] audit: type=1326 audit(1740471094.359:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15284 comm="syz.3.2265" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55579 code=0x7ffc0000 [ 1444.729261][T15289] loop8: detected capacity change from 0 to 1024 [ 1444.739929][ T29] audit: type=1326 audit(1740471094.369:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15284 comm="syz.3.2265" exe="/root/syz-executor" sig=0 arch=40000003 syscall=261 compat=1 ip=0xf7f55579 code=0x7ffc0000 [ 1444.769700][ T29] audit: type=1326 audit(1740471094.369:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15284 comm="syz.3.2265" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55579 code=0x7ffc0000 [ 1444.792331][ T29] audit: type=1326 audit(1740471094.379:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15284 comm="syz.3.2265" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55579 code=0x7ffc0000 [ 1444.856461][T15289] EXT4-fs: Ignoring removed nobh option [ 1444.862344][T15289] EXT4-fs: Ignoring removed bh option [ 1444.868295][T15289] EXT4-fs: Ignoring removed bh option [ 1445.110411][T15289] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1445.187928][ T29] audit: type=1326 audit(1740471094.909:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15294 comm="syz.2.2267" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f2f579 code=0x7ffc0000 [ 1445.211608][ T29] audit: type=1326 audit(1740471094.909:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15294 comm="syz.2.2267" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f2f579 code=0x7ffc0000 [ 1445.393501][ T29] audit: type=1326 audit(1740471095.019:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15294 comm="syz.2.2267" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f2f579 code=0x7ffc0000 [ 1445.542772][T12313] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1446.486561][ T8906] Bluetooth: hci5: command 0x0c1a tx timeout [ 1446.588580][T15314] loop2: detected capacity change from 0 to 128 [ 1446.698517][T15314] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1446.735414][T15314] ext4 filesystem being mounted at /99/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1447.386966][T13321] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1448.042088][T15328] loop5: detected capacity change from 0 to 4096 [ 1448.154437][T15328] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1448.534093][T13372] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1448.566378][ T8906] Bluetooth: hci5: command 0x0c1a tx timeout [ 1449.352128][ T7831] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1449.554545][ T7831] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1449.728482][ T7831] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1449.908274][ T7831] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1450.256554][ T7831] bridge_slave_1: left allmulticast mode [ 1450.268481][ T7831] bridge_slave_1: left promiscuous mode [ 1450.275523][ T7831] bridge0: port 2(bridge_slave_1) entered disabled state [ 1450.309627][ T7831] bridge_slave_0: left allmulticast mode [ 1450.316481][ T7831] bridge_slave_0: left promiscuous mode [ 1450.323450][ T7831] bridge0: port 1(bridge_slave_0) entered disabled state [ 1450.934800][ T7831] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1450.984082][ T7831] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1451.018757][ T7831] bond0 (unregistering): Released all slaves [ 1451.707930][ T7831] hsr_slave_0: left promiscuous mode [ 1451.733856][ T7831] hsr_slave_1: left promiscuous mode [ 1451.742070][ T7831] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1451.750616][ T7831] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1451.850935][ T7831] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1451.859202][ T7831] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1451.919714][T15359] loop0: detected capacity change from 0 to 512 [ 1451.959346][ T7831] veth1_macvtap: left promiscuous mode [ 1451.965460][ T7831] veth0_macvtap: left promiscuous mode [ 1451.971435][ T7831] veth1_vlan: left promiscuous mode [ 1451.977164][ T7831] veth0_vlan: left promiscuous mode [ 1452.062301][T15359] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1452.076220][T15359] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1452.703494][T15022] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1452.714294][ T5802] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1452.786876][ T5802] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1452.802352][ T5802] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1452.827885][ T5802] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1452.977176][ T7831] team0 (unregistering): Port device team_slave_1 removed [ 1453.019783][ T5802] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1453.034835][ T5802] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1453.082355][ T7831] team0 (unregistering): Port device team_slave_0 removed [ 1454.836710][T15365] chnl_net:caif_netlink_parms(): no params data found [ 1455.128919][ T5802] Bluetooth: hci0: command tx timeout [ 1456.094595][T15402] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2311'. [ 1456.623018][T15365] bridge0: port 1(bridge_slave_0) entered blocking state [ 1456.630923][T15365] bridge0: port 1(bridge_slave_0) entered disabled state [ 1456.642078][T15365] bridge_slave_0: entered allmulticast mode [ 1456.651818][T15365] bridge_slave_0: entered promiscuous mode [ 1456.776794][T15365] bridge0: port 2(bridge_slave_1) entered blocking state [ 1456.786374][T15365] bridge0: port 2(bridge_slave_1) entered disabled state [ 1456.794412][T15365] bridge_slave_1: entered allmulticast mode [ 1456.804119][T15365] bridge_slave_1: entered promiscuous mode [ 1457.171622][T15365] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1457.209738][ T5802] Bluetooth: hci0: command tx timeout [ 1457.249709][T15365] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1457.525566][T15365] team0: Port device team_slave_0 added [ 1457.608477][T15365] team0: Port device team_slave_1 added [ 1457.679250][T15413] ===================================================== [ 1457.690218][T15413] BUG: KMSAN: uninit-value in cmsghdr_from_user_compat_to_kern+0x568/0x10d0 [ 1457.699850][T15413] cmsghdr_from_user_compat_to_kern+0x568/0x10d0 [ 1457.706984][T15413] ____sys_sendmsg+0x22c/0xda0 [ 1457.712030][T15413] __sys_sendmsg_sock+0x42/0x60 [ 1457.717379][T15413] io_sendmsg+0x36a/0xe30 [ 1457.721994][T15413] io_issue_sqe+0x394/0x1fb0 [ 1457.727063][T15413] io_submit_sqes+0x11c3/0x2ff0 [ 1457.732208][T15413] __se_sys_io_uring_enter+0x41d/0x4da0 [ 1457.744267][T15413] __ia32_sys_io_uring_enter+0x11d/0x1a0 [ 1457.750192][T15413] ia32_sys_call+0xd59/0x4180 [ 1457.755272][T15413] __do_fast_syscall_32+0xb0/0x110 [ 1457.760608][T15413] do_fast_syscall_32+0x38/0x80 [ 1457.765943][T15413] do_SYSENTER_32+0x1f/0x30 [ 1457.770674][T15413] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1457.777574][T15413] [ 1457.780021][T15413] Uninit was stored to memory at: [ 1457.785531][T15413] io_sendmsg+0x694/0xe30 [ 1457.790105][T15413] io_issue_sqe+0x394/0x1fb0 [ 1457.797770][T15413] io_submit_sqes+0x11c3/0x2ff0 [ 1457.803059][T15413] __se_sys_io_uring_enter+0x41d/0x4da0 [ 1457.808886][T15413] __ia32_sys_io_uring_enter+0x11d/0x1a0 [ 1457.815033][T15413] ia32_sys_call+0xd59/0x4180 [ 1457.819959][T15413] __do_fast_syscall_32+0xb0/0x110 [ 1457.825616][T15413] do_fast_syscall_32+0x38/0x80 [ 1457.830708][T15413] do_SYSENTER_32+0x1f/0x30 [ 1457.835603][T15413] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1457.846940][T15413] [ 1457.849412][T15413] Uninit was created at: [ 1457.855497][T15413] __alloc_frozen_pages_noprof+0x9a7/0xe00 [ 1457.861594][T15413] alloc_pages_mpol+0x4cd/0x890 [ 1457.866908][T15413] alloc_frozen_pages_noprof+0x1bf/0x1e0 [ 1457.872824][T15413] allocate_slab+0x23a/0x1110 [ 1457.877936][T15413] ___slab_alloc+0x1287/0x3540 [ 1457.883204][T15413] kmem_cache_alloc_bulk_noprof+0x486/0x1330 [ 1457.889443][T15413] __io_alloc_req_refill+0x84/0x5b0 [ 1457.895075][T15413] io_submit_sqes+0x90f/0x2ff0 [ 1457.900094][T15413] __se_sys_io_uring_enter+0x41d/0x4da0 [ 1457.906069][T15413] __ia32_sys_io_uring_enter+0x11d/0x1a0 [ 1457.912086][T15413] ia32_sys_call+0xd59/0x4180 [ 1457.917212][T15413] __do_fast_syscall_32+0xb0/0x110 [ 1457.922569][T15413] do_fast_syscall_32+0x38/0x80 [ 1457.931370][T15413] do_SYSENTER_32+0x1f/0x30 [ 1457.936712][T15413] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1457.948093][T15413] [ 1457.950580][T15413] CPU: 1 UID: 0 PID: 15413 Comm: syz.8.2316 Tainted: G W 6.14.0-rc4-syzkaller #0 [ 1457.962753][T15413] Tainted: [W]=WARN [ 1457.966887][T15413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1457.977334][T15413] ===================================================== [ 1457.984555][T15413] Disabling lock debugging due to kernel taint [ 1457.990878][T15413] Kernel panic - not syncing: kmsan.panic set ... [ 1457.997480][T15413] CPU: 1 UID: 0 PID: 15413 Comm: syz.8.2316 Tainted: G B W 6.14.0-rc4-syzkaller #0 [ 1458.008267][T15413] Tainted: [B]=BAD_PAGE, [W]=WARN [ 1458.013454][T15413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1458.023714][T15413] Call Trace: [ 1458.027159][T15413] [ 1458.030248][T15413] dump_stack_lvl+0x216/0x2d0 [ 1458.035164][T15413] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1458.041280][T15413] dump_stack+0x1e/0x24 [ 1458.045673][T15413] panic+0x4e2/0xcf0 [ 1458.049879][T15413] ? kmsan_get_metadata+0xc1/0x1c0 [ 1458.055379][T15413] kmsan_report+0x2c7/0x2d0 [ 1458.060243][T15413] ? kmsan_get_metadata+0xc0/0x1c0 [ 1458.065619][T15413] ? __msan_warning+0x95/0x120 [ 1458.070635][T15413] ? cmsghdr_from_user_compat_to_kern+0x568/0x10d0 [ 1458.077433][T15413] ? ____sys_sendmsg+0x22c/0xda0 [ 1458.082598][T15413] ? __sys_sendmsg_sock+0x42/0x60 [ 1458.087849][T15413] ? io_sendmsg+0x36a/0xe30 [ 1458.092631][T15413] ? io_issue_sqe+0x394/0x1fb0 [ 1458.097750][T15413] ? io_submit_sqes+0x11c3/0x2ff0 [ 1458.103039][T15413] ? __se_sys_io_uring_enter+0x41d/0x4da0 [ 1458.109055][T15413] ? __ia32_sys_io_uring_enter+0x11d/0x1a0 [ 1458.115157][T15413] ? ia32_sys_call+0xd59/0x4180 [ 1458.120280][T15413] ? __do_fast_syscall_32+0xb0/0x110 [ 1458.125822][T15413] ? do_fast_syscall_32+0x38/0x80 [ 1458.131101][T15413] ? do_SYSENTER_32+0x1f/0x30 [ 1458.136043][T15413] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1458.142842][T15413] ? kernel_text_address+0x129/0x1b0 [ 1458.148384][T15413] ? kmsan_get_metadata+0x13e/0x1c0 [ 1458.153864][T15413] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 1458.160467][T15413] ? kmsan_get_metadata+0x13e/0x1c0 [ 1458.165958][T15413] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1458.172028][T15413] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 1458.178095][T15413] ? stack_depot_save_flags+0x6db/0x750 [ 1458.183878][T15413] ? kmsan_get_metadata+0x13e/0x1c0 [ 1458.189333][T15413] ? kmsan_get_metadata+0x13e/0x1c0 [ 1458.194768][T15413] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1458.200834][T15413] __msan_warning+0x95/0x120 [ 1458.205632][T15413] cmsghdr_from_user_compat_to_kern+0x568/0x10d0 [ 1458.212218][T15413] ? stack_depot_save_flags+0x2c/0x750 [ 1458.217974][T15413] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 1458.224540][T15413] ? kmsan_get_metadata+0x13e/0x1c0 [ 1458.229981][T15413] ____sys_sendmsg+0x22c/0xda0 [ 1458.234944][T15413] ? __fget_files+0x42b/0x500 [ 1458.239853][T15413] ? kmsan_get_metadata+0xc0/0x1c0 [ 1458.245211][T15413] __sys_sendmsg_sock+0x42/0x60 [ 1458.250267][T15413] io_sendmsg+0x36a/0xe30 [ 1458.254918][T15413] ? __pfx_io_sendmsg+0x10/0x10 [ 1458.259996][T15413] io_issue_sqe+0x394/0x1fb0 [ 1458.264850][T15413] io_submit_sqes+0x11c3/0x2ff0 [ 1458.269964][T15413] ? kmsan_get_metadata+0xc0/0x1c0 [ 1458.275326][T15413] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 1458.281909][T15413] __se_sys_io_uring_enter+0x41d/0x4da0 [ 1458.287722][T15413] ? finish_task_switch+0x1c8/0x8f0 [ 1458.293253][T15413] ? do_futex+0x380/0x4a0 [ 1458.297774][T15413] ? kmsan_get_metadata+0x13e/0x1c0 [ 1458.303202][T15413] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1458.309249][T15413] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1458.315297][T15413] __ia32_sys_io_uring_enter+0x11d/0x1a0 [ 1458.321191][T15413] ia32_sys_call+0xd59/0x4180 [ 1458.326088][T15413] __do_fast_syscall_32+0xb0/0x110 [ 1458.331416][T15413] ? switch_fpu_return+0x17/0x20 [ 1458.336600][T15413] do_fast_syscall_32+0x38/0x80 [ 1458.341663][T15413] do_SYSENTER_32+0x1f/0x30 [ 1458.346376][T15413] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1458.353018][T15413] RIP: 0023:0xf746d579 [ 1458.357371][T15413] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1458.377330][T15413] RSP: 002b:00000000f50f655c EFLAGS: 00000206 ORIG_RAX: 00000000000001aa [ 1458.385994][T15413] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000000008aa [ 1458.394138][T15413] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1458.402262][T15413] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1458.410385][T15413] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1458.418530][T15413] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1458.426700][T15413] [ 1458.430198][T15413] Kernel Offset: disabled [ 1458.434625][T15413] Rebooting in 86400 seconds..