last executing test programs: 5m53.771663265s ago: executing program 1 (id=532): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"}) (fail_nth: 1) 5m52.596767968s ago: executing program 1 (id=535): unshare(0x24020400) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) 5m51.807110309s ago: executing program 1 (id=538): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x801) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4, 0x300000000000000}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) 5m48.1717575s ago: executing program 1 (id=544): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f00000002c0)=ANY=[@ANYBLOB="080100000000000004010001050000000000b66a4185c07cc74303b8ad854e8beab7510e99f94230d221d3b55cf9d835aad66785fede20c79746ef7fc7411ed5dd1bc3f9fd54c01c02c47c146e9fe3344a3f95ec062da8bbc75f5985028140f358ac6d25c479dd2377c7bf8582660d7cac695d58260135bb8c16216d492d159e9a5b535c96528c2b6990e88d48de850568cf584efb4c27f89aada70d87bd5eec1f45a08586e61e3fb33d679aec5e105c2a1fbdbc6630416fcea69547d85c174d0f4de26f4ee937e998013a79e134c70403544a7e488be3c4b3e67e41e0709c4f6e4588"], 0x18) getsockopt$inet6_opts(r1, 0x29, 0x3b, 0x0, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001800dd8d00000000000000000200000000000005f1ffffff0600150001000000280016802400010000000000000000000004010020000020000000000000000000000003000001", @ANYRESOCT=r2], 0x4c}, 0x1, 0x0, 0x0, 0x20040900}, 0x0) 5m47.466873782s ago: executing program 1 (id=548): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x50, 0xb, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x8}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x100}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x77}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x7}, @NFT_OBJECT_TUNNEL=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xb8}, 0x1, 0x0, 0x0, 0x10}, 0x48800) 5m46.645851012s ago: executing program 1 (id=552): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x7b1182, 0x6d) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000001440)) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x0) r3 = dup(r2) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) utimensat(r0, 0x0, 0x0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) mount$nfs(&(0x7f0000000000)='@\a', &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x1000000, 0x0) 5m31.014529839s ago: executing program 32 (id=552): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x7b1182, 0x6d) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000001440)) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x0) r3 = dup(r2) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) utimensat(r0, 0x0, 0x0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) mount$nfs(&(0x7f0000000000)='@\a', &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x1000000, 0x0) 4m31.028354751s ago: executing program 5 (id=831): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xe}, {0x9}, {0x0, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 4m29.894679106s ago: executing program 5 (id=837): socket$key(0xf, 0x3, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r0, &(0x7f0000000180), 0x8) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x8, @sdr={0x32314247, 0x5}}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r1, &(0x7f0000000c00)=@short={0x2, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x2, @null}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) listen(r2, 0x3) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000006340)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a35f2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x7}}}}}}}, 0x0) syz_emit_ethernet(0xae, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010120", 0x78, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96489269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000000400260004000000"}, {0x1, 0x1, "fe906d17efe3"}]}}}}}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x4, 0xdddd1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="b40000001900010000000000000000001d0109004d0011806f9886ff8308eb1d7c1bbdbe3160578f5aa421ea2a089f6ab00ada4e5605b2e72655b3cc4c48e640"], 0xb4}}, 0x0) r5 = open(&(0x7f0000000040)='./file1/../file0\x00', 0xa440, 0x34) ioctl$KVM_SET_PIT(r5, 0x8048ae66, &(0x7f00000000c0)={[{0x0, 0x800, 0x0, 0x0, 0x0, 0xa5, 0x3, 0x1, 0xa9, 0x4, 0x0, 0x0, 0x40000000}, {0x8, 0x5, 0x0, 0x0, 0x41, 0x0, 0x0, 0x2, 0x6, 0xff, 0x0, 0x2, 0x6}, {0x1403fe, 0x9, 0x0, 0xfd, 0x0, 0x0, 0xb3, 0xfe, 0x3, 0x7a, 0x80, 0xf6}], 0x5}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 4m28.96368879s ago: executing program 5 (id=843): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x180000000) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb35bda", 0x7) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x180003, 0x1}}, 0x3c) 4m28.404015105s ago: executing program 5 (id=846): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x800810, &(0x7f0000000180)={[{@nobh}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") socket$kcm(0x10, 0x2, 0x0) (async) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a1d080211000000040000a118000200ff02000100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e0060000000000000080bb9ad809d5e1cace81b341139fe3cd4032e8edb12d1d2eb0c0ed0bff", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a1d080211000000040000a118000200ff02000100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e0060000000000000080bb9ad809d5e1cace81b341139fe3cd4032e8edb12d1d2eb0c0ed0bff", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804071, 0x0, 0x0, 0x0, &(0x7f0000000140)) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, 0xfffffffffffffffe, 0x8, 0x0) readlink(&(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000001c0)=""/21, 0x15) 4m27.25666567s ago: executing program 5 (id=851): socket$inet(0x2, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d657461000000001400028008000140000000120800024000", @ANYRES16=r1], 0xc4}}, 0x0) 4m23.333623919s ago: executing program 5 (id=869): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x20, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001800dd8d0000000000000000020000000000000500000000060015000100000028001680240001"], 0x4c}}, 0x0) 4m19.324239439s ago: executing program 33 (id=869): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x20, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001800dd8d0000000000000000020000000000000500000000060015000100000028001680240001"], 0x4c}}, 0x0) 2m28.266923814s ago: executing program 0 (id=1247): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x28, 0x1411, 0x1, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x28}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20080}, 0x0) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000080)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r2, &(0x7f0000000240)={'some', 0x20, 0x8, 0x20, 0xd74}, 0x2f) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000780)=r5, 0x4) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000200)="fa82", 0x3802}], 0x1}, 0x0) 2m27.432625696s ago: executing program 0 (id=1251): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x5, 0x4}]}) r0 = memfd_secret(0x80000) r1 = socket(0x11, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xd, 0x0, 0x20040001, 0x0, 0x2, 0x0, 0x0, 0x100000}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) sendto$packet(r0, &(0x7f0000000000)="43a3797ad7b77ac32b118ec38eda0ea4087f9e28a99e3e39ee994d6998964165a562b2635787", 0x26, 0x4041, &(0x7f0000000080)={0x11, 0x9, r2, 0x1, 0x3, 0x6, @multicast}, 0x14) 2m25.916014279s ago: executing program 0 (id=1258): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x880, &(0x7f00000001c0)=ANY=[@ANYBLOB='shortname=lower,iocharset=iso8859-1,fmask=00000000000000000000066,uni_xlate=1,uni_xlate=0,fmask=00000000000000000000003,uid=', @ANYRESHEX=0x0, @ANYBLOB=',uni_xlate=0,utf8=1,check=strict,nonumtail=0,rodir,errors=continue,shortname=lower,umaQk=00000000000000000000007,rodir,sys_immutable,\x00'], 0x4, 0x2dc, &(0x7f0000000bc0)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) connect$inet(r0, &(0x7f0000000000)={0x2d, 0x4e22, @empty}, 0x10) 2m25.066560302s ago: executing program 0 (id=1261): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x28, 0x1411, 0x1, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x28}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20080}, 0x0) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f0000000080)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r3, &(0x7f0000000240)={'some', 0x20, 0x8, 0x20, 0xd74}, 0x2f) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000780)=r6, 0x4) sendmsg$inet(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000200)="fa82", 0x3802}], 0x1}, 0x0) 2m24.197070442s ago: executing program 0 (id=1264): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000110000000000000000850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000500)='c::=/\x10\xcd\xb7@\x88\xedP9\xf5,\xc1\t\xb7b\x12A\x1d`\x16\xac!\xa7\x9c\x8f\xc98\xcb-\t\xcf-\xdd\xc4\xafK\x8d\xb1R8m\xc1[A\x99g\x9d\x8a\":\xc1I;\x03\xe2<\xdf;\xce\x93\xd3\xd2\x19\x964\xeb\x03\xbc\x7fo\xe8\x89\x01:\x8b-\xab[X\x10\x18\x8d\xbf\xe1H\x9a_\xe3*\xc6\xca\xae\xe0\xb9\x1e\xe1\xf4\x90\xe2\x12]\x01v\xbd\x0e\x0f J\x1d\xcb\xd9:\xa6U\f|\xce*\xa4\x8aJ$\xa5&\x1fu\x1b\x15v\xd0\xd8\x9fH54\xaa\xf2t.I\x96\x1c\t\xe42\x02\x85\xa0\xc2T\x02\x99\xfe\x1e\xb6\xf47u\xa7\x1c\xf5\"K\f\x03i\xba', 0x0) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000001080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x21408, 0x0, 0x3, 0x0, &(0x7f0000006380)) mount(0x0, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000004c0)='ceph\x00', 0x0, &(0x7f0000000500)='acl') r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x12, {"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", 0x1000}}, 0x1006) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000001100)=ANY=[@ANYBLOB="020102000a0000002abd7000fbdbdf25010016004e2300f406001900000000000a004e2100000001fe80000000000000000000000000001afaffffff00"/80], 0x50}}, 0x4004810) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) timerfd_create(0x9, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000008, 0x4000010, r0, 0x6b37f000) r3 = syz_usb_connect$cdc_ecm(0x6, 0x5e, &(0x7f0000001180)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4c, 0x1, 0x1, 0xb6, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x4, {{0x8, 0x24, 0x6, 0x0, 0x0, "f9eb2c"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x96b, 0x2, 0xaa}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x4}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x2}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x80, 0x0, 0xf}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x5d, 0x7, 0x10}}}}}]}}]}}, &(0x7f0000001340)={0xa, &(0x7f0000001200)={0xa, 0x6, 0x200, 0x0, 0xff, 0x7e, 0x8, 0x7f}, 0x5e, &(0x7f0000001240)=ANY=[@ANYBLOB="050f5e000503100b2b10039c3ff4d7024df1b58131edec4f458896cae80b7a54c3d0e68d4d6d22287a2a39a907db8c088b20ae03100b14100402bf2fb17af850929a6cee4f2022acd872141004c064990bc2b742c87fad503f68d6b1b452"], 0x1, [{0x66, &(0x7f00000012c0)=@string={0x66, 0x3, "4535551b3d1b4ab329a18aa0e861de7a335f97646d23cabb44decec99725481dcac7a8ea2648acc074b4779468b06b7ad080440d076265cdf6af3277d8fd88e64a3217c5e7b9b9d58a4b344bf0f4bdf7642ebc2943ee28faffe62eb738f6eedb072a5ff7"}}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0xc0185879, &(0x7f0000000080)={@desc={0x4100, 0x0, @desc1}}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f0000002000)={0x100, 0x1, 0x6, 0x1, 0x1, 0x3}) syz_usb_control_io(r3, &(0x7f0000001ac0)={0x2c, &(0x7f0000001800)={0x0, 0x2, 0xa6, {0xa6, 0x5, "8f0aa088d781a0f4d64b2442b7451637aec6928fae9d44fd8136efb7fed550f0b3169092e29d6cbe9ee6ca7d52f65195f5bcaa559be8d621e1da9346267fab9ecf934ec8e945296662649fdbf3528bb5c417ea7917e632354a28fd1fc5f124115743735a8056ed0e039a5dd3547fd8eac95647a45e79ccb74400c957d86d6120536b29a4340c5d35dbe3391ed7d4c140ec1dff854a212337fb64311de8870c75fb72c9a0"}}, &(0x7f00000018c0)={0x0, 0x3, 0xf0, @string={0xf0, 0x3, "882be025cf65a11f1164fe563d781a315d7579fea53685668183c4ecef407322b25148a8aef48a4e79cde69b31ed55cdeeb996c033b315c51e8c4e90cc61bef3624cb0096bc43dd9549c61ffa4912e2652607c1f9c8745d72b881cf052dc74fd8ab1773a0ef284dc31bb7f8a6d34a7d27f171fc534dd68109e8fc1dfbe61072e817bf1dcc824237f08afe5365cba4ab141f911d99af8ea4c3d3e9c15344d207d45e8686518a4a403de0c6d11e5024c5c49be61ef12538aae39edea7fa0506b5bd82c0b48f5ee53527d990be5f8c47097ff1d8034cf4fa4c2942429cdbf150bac1c02b00c3679594a04d46e2dcbd7"}}, &(0x7f0000002080)=ANY=[@ANYBLOB="000f5b000000050f5b0004071002068807000b1001021400020508000a20100a87a596e08d0f0f8fa81e2a93b1d455c39cbf6a9709000f000000003f000030c00000000000003939874d24100a01c6000000000000803f00000000000000c0000000c0c00000003f0000c0000000"], &(0x7f0000001a40)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x8, 0xf, 0x81, 'Wb|o', "45606cea"}}, &(0x7f0000001a80)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x2, 0x9, 0x10, 0x2, 0xf801, 0x81}}}, &(0x7f0000001f40)={0x84, &(0x7f0000001b00)={0x20, 0x6, 0x3e, "7968447bf8e82c0c5c3309e94d84305e2deb302e5155e50ce78f75a137c3c0b78586bcd7e7638352a4b639da7a61857941aee6699b64300c97bf744a7092"}, &(0x7f0000001b80)={0x0, 0xa, 0x1, 0xb}, &(0x7f0000001bc0)={0x0, 0x8, 0x1, 0xe}, &(0x7f0000001c00)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000001c40)=ANY=[@ANYBLOB="2000040000001002de"], &(0x7f0000001c80)={0x40, 0x7, 0x2, 0x3}, &(0x7f0000001cc0)={0x40, 0x9, 0x1, 0x10}, &(0x7f0000001d00)={0x40, 0xb, 0x2, "37ac"}, &(0x7f0000001d40)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000001d80)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, &(0x7f0000001dc0)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}, &(0x7f0000001e00)={0x40, 0x19, 0x2, "368b"}, &(0x7f0000001e40)={0x40, 0x1a, 0x2, 0x5}, &(0x7f0000001e80)={0x40, 0x1c, 0x1, 0x10}, &(0x7f0000001ec0)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000001f00)={0x40, 0x21, 0x1, 0x8}}) r5 = userfaultfd(0x80000) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000001040)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"]) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x10e, &(0x7f0000000a00), 0x3, 0x471, &(0x7f0000001380)="$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") 2m22.522078109s ago: executing program 0 (id=1269): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @empty}]}, &(0x7f0000000180)=0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000007b00000000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f00000000c0)='netlink_extack\x00', r1}, 0x18) socket$inet_sctp(0x2, 0x1, 0x84) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) mlock2(&(0x7f0000181000/0x1000)=nil, 0x1000, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000340)='sched_switch\x00', r3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(r4, 0x6, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x400000000000000) 2m7.18099949s ago: executing program 34 (id=1269): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @empty}]}, &(0x7f0000000180)=0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000007b00000000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f00000000c0)='netlink_extack\x00', r1}, 0x18) socket$inet_sctp(0x2, 0x1, 0x84) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) mlock2(&(0x7f0000181000/0x1000)=nil, 0x1000, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000340)='sched_switch\x00', r3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(r4, 0x6, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x400000000000000) 13.161255911s ago: executing program 6 (id=1658): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x1000d, 0xfffffffffffffc60}, 0x90) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGVERSION(r0, 0x80044801, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) socket$nl_route(0x10, 0x3, 0x0) r1 = userfaultfd(0x80801) r2 = creat(&(0x7f0000000240)='./file0\x00', 0x40) close(r2) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="6f4c033d", @ANYRES16=r5, @ANYBLOB="ff8826bd7000fddbdf254b0000000500a800000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x3c}, 0x1, 0x0, 0x0, 0x4044000}, 0x20048844) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff9000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r6) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) ioctl$SIOCAX25CTLCON(0xffffffffffffffff, 0x89e8, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_io_uring_setup(0x3ff7, &(0x7f0000000180)={0x0, 0x2, 0x10100, 0x3, 0x19f}, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x2, 0x0, 0x0, 0x3c}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socket(0x10, 0x803, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 12.818913127s ago: executing program 7 (id=1660): r0 = socket$key(0xf, 0x3, 0x2) syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000100)='./file2\x00', 0x2000400, &(0x7f0000001b80)={[{@iocharset={'iocharset', 0x3d, 'cp862'}}, {@uid_forget}, {@adinicb}, {@dmode={'dmode', 0x3d, 0x707}}, {@undelete}, {@umask={'umask', 0x3d, 0x2}}, {@undelete}, {@dmode}, {@noadinicb}, {@unhide}]}, 0x1, 0xc43, &(0x7f00000001c0)="$eJzs3U9sHNd9B/DfGy3FldxWTOwqThoHm7ZIZcZy9S+mYhXuqqbZBpBlIhRzC8CVSKkLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBAhQIWMzsW3FJkbYskhIlfz429Z2deW/mvZn1jCzozQsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIOL3Xrl46nTaZsOhh9AYAOCBuDz21VNntnv+AwCPrSs7/f8/AAAAAAAAAAAAAABwUKQo4slIMXd5LU1Unzvql9p9t26PD49sX+1IqmoeqsqXP/XTZ86e+9ILQ+e7eak98wH199pn4rWxKxcbL8/enJufWliYmmyMz7SvzU5O3fMedlt/q8HqBDRuvn5r8vr1hcaZ589u2nx74P3+J44PXBh69uQz3bLjwyMjYxtF6r3la/fdkI6dRngcjiJORornvvfT1IqIInZ/LuoP9tpvdaTqxGDVifHhkaoj0+3WzGK5cbR7IoqIRk+lZvccbX8totb3QPuws2bEUtn8ssGDZffG5lrzravTU43R1vxie7E9OzOaOq0t+9OIIs6niOWIWO2/e3d9UUQtUnzn2Fq6mt/6UZ2HL1YDg3duR7GPfbwHZTsbfRHLxSNwzQ6w/iji1Ujxs3dOxLV8n6nuNV+IeLXMH0S8VeZLEan8YpyLeG+b7xGPploU8efl9b+wliar+0H3vnLpa42vzFyf7Snbva98xOfDXXeKh/R8OLIlH4wDfm+qRxGt6o6/lu7/NzsAAAAAAAAAAAAAAAAA7LUjUcSnI8Ur//ZH1bjiqMalH7sw9PsDv9w7ZvzpD9lPWfb5iFgq7m1M7uE8MHA0jab0kMcSf5zVo4g/zuP/vvWwGwMAAAAAAAAAAAAAAAAAAPCxVsRPIsWL755Iy9E7p3h75kbjSuvqdGdW2O7cv90509fX19cbqZPNnBM5l3Iu51zJuZozilw/ZzPnRM6lnMs5V3Ku5oxDuX7OZs6JnEs5l3Ou5FzNGbVcP2cz50TOpZzLOVdyruaMAzJ3LwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA46SIIn4RKb79jbUUKSKaERPRyZX+h906AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDUn4r4fqRo/EHzzrpaRKTq344T5S/nonm4zE9Gc6jMl6J5MWerylrzWw+h/exOXyrix5Giv/72nQuer39f59Odr0G89c2NT5+pdfJQd+PA+/1PHD92YWjkc0/vtJy2a8DgpfbMrduN8eGRkbGe1bV89E/2rBvIxy32putExMIbb77emp6emr//hfIrsIvqj9BCqn1cemqhWojagWjGw+n7JvWHdYNiX5XP//cixW+/++/dB37n+V+PX+p8uvOEj5//ycbz/8WtO7rH539ta738/C+f6ds9/5/sWfdi/t1IXy2ivnhzru94RH3hjTdPtm+2bkzdmJo5d+rUl4eGvnz2VN/hiPr19vRUz9KenC4AAAAAAAAAAAAAAACABycV8buRovXjtdSIiNvVeK2BC0PPnnzmUByqxlttGrf92tiVi42XZ2/OzU8tLExNNsZn2tdmJ6fu9XD1arjX+PDIvnTmQx3Z5/Yfqb88O/fGfPvGHy5uu/1o/eLVhcX51rXtN8eRKCKavWsGqwaPD49UjZ5ut2aqqqPbDqb/6PpSEf8RKa6da6TP53V5/P/WEf6bxv8vbd3RHo7//9zRjfF/n+gpWh4zpSJ+Hil+6y+ejs9X7Twad52zXO5vIsXg+c/mcnG4LNdtQ+e9Ap2RgWXZ/4kU//CLzWW74yGf3Ch7+iOd3EdAef2PRYrv/9l349fzus3vf9j++h/duqN9ev/DUz3rjm56X8Guu06+/icjxUtPvh2/Ua35vw98/0f33RsnOoU33s+xT9f/V3vWDeTj/uZedR4AAAAAAAAAAOAR1peK+NtI8cORWnohr7uXv/83uXVH+/T3vz7Vs25yb+Yr+tCFXZ9UAAAAADgg+lIRP4kUNxbfvjOGevP4757xn7+zMf5zOG3ZWv05369U7w3Yyz//6zWQjzux+24DAAAAAAAAAAAAAAAAAADAgZJSES/k+dQnqvH8kzvOp74SKV75r+dyuXS8LNedB36g+rV+eXbm5MXp6dl6LLauTk81xuZa16bKuk9FirW//myuW1Tzq3fnm+/M8b4xF/t8pBj5u27Zzlzs3bnJn9ooe7os+4lI8Z9/v7lsnpo6zx1dlT1Tlv2rSPH1f9q+7PGNsmfLst+NFD/6eqNb9mhZtvt+1E9tlH3+2myxD1cFAAAAAAAAAAAAAAAAAACAj5u+VMSfRor/vrl8Zyx/nv+/r+dj5a1v9sz3v8Xtap7/gWr+/52W72f+/+q9Aks7HRUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB5PKYp4M1LMXV5LK/3l5476pfbMrdvjwyPbVzuSqpqHqvLlT/30mbPnvvTC0PlufnD9vfbpeG3sysXGy7M35+anFhamJhvjM+1rs5NT97yH3dbfarA6AY2br9+avH59oXHm+bObNt8eeL//ieMDF4aePflMt+z48MjIWE+ZWt99H/0uaYf1h6OIv4wUz33vp+mH/RFF7P5cfMh3Z78dqToxWHVifHik6sh0uzWzWG4c7Z6IIqLRU6nZPUcP4FrsSjNiqWx+2eDBsntjc6351tXpqcZoa36xvdienRlNndaW/WlEEedTxHJErPbfvbu+KOL1SPGdY2vpn/sjDnXPwxcvj3311Jmd21HsYx/vQdnORl/EcvEIXLMDrD+K+MdI8bN3TsS/9EfUovMTX4h4tcwfRLwVneudyi/GuYj3tvke8WiqRRH/W17/C2vpnf7yftC9r1z6WuMrM9dne8p27yuP/PPhQTrg96Z6FPGj6o6/lv7Vf9cAAAAAAAAAAAAAAAAAB0gRvxYpXnz3RKrGB98ZU9yeudG40ro63RnW1x371x0zvb6+vt5InWzmnMi5lHM550rO1ZxR5Po5m2XW19cn8uelnMs5V3Ku5oxDuX7OZs6JnEs5l3Ou5FzNGbVcP2cz50TOpZzLOVdyruaMAzJ2DwAAAAAAAAAAAAAAAAAAeLwU1T8pvv2NtbTe35lfeiI6uWI+0Mfe/wcAAP//dsP5HA==") symlink(&(0x7f00000005c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000002c0)='.\x02\x00') sendmsg$key(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={0x2, 0x5, 0xff, 0x9, 0x2, 0x0, 0x70bd26, 0x25dfdbfe}, 0x10}}, 0x4000005) 11.536528824s ago: executing program 7 (id=1664): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000801, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc084}, 0x24000080) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18, 0xffffffffffffffda, 0x0, {0xfffffffffffffffc}}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r5 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$UHID_INPUT(r5, &(0x7f0000000540)={0x8, {"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", 0x1000}}, 0x1006) 11.208993301s ago: executing program 6 (id=1666): socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="8dffffff0600"}) 10.36122488s ago: executing program 6 (id=1669): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r1, 0x6, 0xd, &(0x7f00000001c0)='@', 0x1) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0x3ca6, @private2, 0x57b}, 0x1c) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000000200)={0x8, "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"}) setsockopt$sock_int(r1, 0x1, 0x0, &(0x7f0000f59ffc), 0x4) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYRES64=r1], 0x18}}, 0x880) 10.340682302s ago: executing program 7 (id=1670): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000110000000000000000850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000500)='c::=/\x10\xcd\xb7@\x88\xedP9\xf5,\xc1\t\xb7b\x12A\x1d`\x16\xac!\xa7\x9c\x8f\xc98\xcb-\t\xcf-\xdd\xc4\xafK\x8d\xb1R8m\xc1[A\x99g\x9d\x8a\":\xc1I;\x03\xe2<\xdf;\xce\x93\xd3\xd2\x19\x964\xeb\x03\xbc\x7fo\xe8\x89\x01:\x8b-\xab[X\x10\x18\x8d\xbf\xe1H\x9a_\xe3*\xc6\xca\xae\xe0\xb9\x1e\xe1\xf4\x90\xe2\x12]\x01v\xbd\x0e\x0f J\x1d\xcb\xd9:\xa6U\f|\xce*\xa4\x8aJ$\xa5&\x1fu\x1b\x15v\xd0\xd8\x9fH54\xaa\xf2t.I\x96\x1c\t\xe42\x02\x85\xa0\xc2T\x02\x99\xfe\x1e\xb6\xf47u\xa7\x1c\xf5\"K\f\x03i\xba', 0x0) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000001080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x21408, 0x0, 0x3, 0x0, &(0x7f0000006380)) mount(0x0, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000004c0)='ceph\x00', 0x0, &(0x7f0000000500)='acl') r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x12, {"a2e3ad21ed0d09f91b5b090987f70906d038e7ff7fc6e5539b0d3d0e8b089b323b6d07060890e0878f0e1ac6e7049b334a959b3e9a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070b07580936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0931a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5bcd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383701d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b6080000007a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39dd0000000039ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb06ffc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00b98e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb15da202d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d877a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000001100)=ANY=[@ANYBLOB="020102000a0000002abd7000fbdbdf25010016004e2300f406001900000000000a004e2100000001fe80000000000000000000000000001afaffffff00"/80], 0x50}}, 0x4004810) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) timerfd_create(0x9, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000008, 0x4000010, r0, 0x6b37f000) r3 = syz_usb_connect$cdc_ecm(0x6, 0x5e, &(0x7f0000001180)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4c, 0x1, 0x1, 0xb6, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x4, {{0x8, 0x24, 0x6, 0x0, 0x0, "f9eb2c"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x96b, 0x2, 0xaa}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x4}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x2}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x80, 0x0, 0xf}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x5d, 0x7, 0x10}}}}}]}}]}}, &(0x7f0000001340)={0xa, &(0x7f0000001200)={0xa, 0x6, 0x200, 0x0, 0xff, 0x7e, 0x8, 0x7f}, 0x5e, &(0x7f0000001240)=ANY=[@ANYBLOB="050f5e000503100b2b10039c3ff4d7024df1b58131edec4f458896cae80b7a54c3d0e68d4d6d22287a2a39a907db8c088b20ae03100b14100402bf2fb17af850929a6cee4f2022acd872141004c064990bc2b742c87fad503f68d6b1b452"], 0x1, [{0x66, &(0x7f00000012c0)=@string={0x66, 0x3, "4535551b3d1b4ab329a18aa0e861de7a335f97646d23cabb44decec99725481dcac7a8ea2648acc074b4779468b06b7ad080440d076265cdf6af3277d8fd88e64a3217c5e7b9b9d58a4b344bf0f4bdf7642ebc2943ee28faffe62eb738f6eedb072a5ff7"}}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f0000002000)={0x100, 0x1, 0x6, 0x1, 0x1, 0x3}) syz_usb_control_io(r3, &(0x7f0000001ac0)={0x2c, &(0x7f0000001800)={0x0, 0x2, 0xa6, {0xa6, 0x5, "8f0aa088d781a0f4d64b2442b7451637aec6928fae9d44fd8136efb7fed550f0b3169092e29d6cbe9ee6ca7d52f65195f5bcaa559be8d621e1da9346267fab9ecf934ec8e945296662649fdbf3528bb5c417ea7917e632354a28fd1fc5f124115743735a8056ed0e039a5dd3547fd8eac95647a45e79ccb74400c957d86d6120536b29a4340c5d35dbe3391ed7d4c140ec1dff854a212337fb64311de8870c75fb72c9a0"}}, &(0x7f00000018c0)={0x0, 0x3, 0xf0, @string={0xf0, 0x3, "882be025cf65a11f1164fe563d781a315d7579fea53685668183c4ecef407322b25148a8aef48a4e79cde69b31ed55cdeeb996c033b315c51e8c4e90cc61bef3624cb0096bc43dd9549c61ffa4912e2652607c1f9c8745d72b881cf052dc74fd8ab1773a0ef284dc31bb7f8a6d34a7d27f171fc534dd68109e8fc1dfbe61072e817bf1dcc824237f08afe5365cba4ab141f911d99af8ea4c3d3e9c15344d207d45e8686518a4a403de0c6d11e5024c5c49be61ef12538aae39edea7fa0506b5bd82c0b48f5ee53527d990be5f8c47097ff1d8034cf4fa4c2942429cdbf150bac1c02b00c3679594a04d46e2dcbd7"}}, &(0x7f0000002080)=ANY=[@ANYBLOB="000f5b000000050f5b0004071002068807000b1001021400020508000a20100a87a596e08d0f0f8fa81e2a93b1d455c39cbf6a9709000f000000003f000030c00000000000003939874d24100a01c6000000000000803f00000000000000c0000000c0c00000003f0000c0000000"], &(0x7f0000001a40)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x8, 0xf, 0x81, 'Wb|o', "45606cea"}}, &(0x7f0000001a80)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x2, 0x9, 0x10, 0x2, 0xf801, 0x81}}}, &(0x7f0000001f40)={0x84, &(0x7f0000001b00)={0x20, 0x6, 0x3e, "7968447bf8e82c0c5c3309e94d84305e2deb302e5155e50ce78f75a137c3c0b78586bcd7e7638352a4b639da7a61857941aee6699b64300c97bf744a7092"}, &(0x7f0000001b80)={0x0, 0xa, 0x1, 0xb}, &(0x7f0000001bc0)={0x0, 0x8, 0x1, 0xe}, &(0x7f0000001c00)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000001c40)=ANY=[@ANYBLOB="2000040000001002de"], &(0x7f0000001c80)={0x40, 0x7, 0x2, 0x3}, &(0x7f0000001cc0)={0x40, 0x9, 0x1, 0x10}, &(0x7f0000001d00)={0x40, 0xb, 0x2, "37ac"}, &(0x7f0000001d40)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000001d80)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, &(0x7f0000001dc0)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}, &(0x7f0000001e00)={0x40, 0x19, 0x2, "368b"}, &(0x7f0000001e40)={0x40, 0x1a, 0x2, 0x5}, &(0x7f0000001e80)={0x40, 0x1c, 0x1, 0x10}, &(0x7f0000001ec0)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000001f00)={0x40, 0x21, 0x1, 0x8}}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000001040)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4}) 9.387004346s ago: executing program 3 (id=1674): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xeef, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0xff}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x7, {[@global=@item_4={0x3, 0x1, 0x2, "273a808e"}, @local=@item_012={0x1, 0x2, 0x9, '\x00'}]}}, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0xffffffa6, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x60, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0xfffffffffffffe1a, 0x2, [@TCA_CHOKE_STAB={0x0, 0x2, "8dd37291b6cab868f69bd24ed100a7c21426fb7ff343133ff4159173819b0931dacfba19526fd270f202056fb102ff8ca2b17216e32aade2a325cf7e292dac5ffe24b2a130057d88c253fbe2d292eaaa630dcbdc8662a30ec668fb156e06c1d898b555453d88dbf88b7c2f4493c31133ababe218407381c61339e539bac6946c05b7be3f452e4d52eb2453d08647d83b9563d8064ed05cc23455f4e437872793e2146a096daaaf389527a6147c83591011f5a4dd32c43d61a66437127e5f7a1c7732802d750573596233aa1d4fcbd206640ca05e136d7e75db6d0c8706844bf077516d55125e004b6b9d6d2730beddd783d1ed9bfbf5da79c9e0b36d7099de12"}, @TCA_CHOKE_STAB={0x0, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x6}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x1}]}}]}, 0x60}}, 0x0) 9.379417098s ago: executing program 4 (id=1675): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_req={{0x17, 0x60, 0x14}, {0x5, 0x7, 0x946, 0xa9, [0x2, 0x1, 0x4, 0x6, 0xe, 0x0]}}}}, 0x21) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="020300030600000000070000000000000100e6ffffbfffff020017005200000002"], 0x30}, 0x1, 0x7}, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x60}) readv(r2, &(0x7f0000000240)=[{&(0x7f0000000140)=""/201, 0xf}], 0x6) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x5452, 0x0) 8.96010598s ago: executing program 6 (id=1676): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800004c56ece91972b63500000000000000000000000de1f95c68eaa39a7be0"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='fscache_cache\x00', r0, 0x0, 0x8}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03000000000000002c0012800c0001006d6163766c616e001c000280080001000800000006000200010000001ffe02000000000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0xc010) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x0, 0xfffffffffffffffe}}]}}}]}, 0x40}}, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000380)={&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/60, 0x3c, 0x0, &(0x7f0000000340)=""/60, 0x3c}, &(0x7f00000003c0)=0x40) write$P9_RVERSION(r5, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r8 = dup(r1) write$FUSE_BMAP(r8, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r8, @ANYBLOB="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"]) 8.398845799s ago: executing program 4 (id=1678): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) capget(&(0x7f0000000480)={0x19980330}, &(0x7f00000004c0)={0x200, 0x80000000, 0x74, 0x1, 0x0, 0x80000001}) 7.947085762s ago: executing program 3 (id=1680): r0 = socket(0x15, 0x5, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0xff, 0x4a6, &(0x7f0000000980)="$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") r2 = creat(&(0x7f0000000240)='./file1\x00', 0x0) io_setup(0x200, &(0x7f0000000140)=0x0) io_submit(r3, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r2, &(0x7f0000000000), 0x4000}]) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/108, 0x6c}, {&(0x7f0000000340)=""/247, 0xf7}, {&(0x7f0000019580)=""/4107, 0x100b}], 0x3}, 0x60}], 0x1, 0x42, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$eJzs3c9vVFsdAPDvnXZoKQMFZaFGBRFFQ5j+ABqCC2GjMYTESFy5gNoOTdMZpum0SCuLsnRvIokr/RPcuTBh5cKdO925wYUJKnkv9CVvMS/3zqUd2g7te7Qd6Hw+ye2955xhvufMcM6Ze2B6AuhZZyNiNSKORMS9iBjO85P8iButI33cq5ePp9ZePp5Kotm8878kK0/zou3PpI7lzzkYET/7ccQvk61xG8src5PVamUhT48s1uZHGssrl2YLec74xNjE6LXLV8f3rK1nan968aPZWz//y5+/8fzvq9//dVqt0m+OZ2Xt7dhLraYXo9SW1x8Rt/YjWJf0539/+PCkve1LEXEu6//D0Ze9mwDAYdZsDkdzuD0NABx26f1/KZJCOV8LKEWhUC631vBOx1ChWm8sXhyuLz2YjmwN62QUC/dnq5XRfK3wZBSTND2WXW+kxzelL0fEqYj47cDRLF2eqlenu/nBBwB62LFN8//HA635HwA45Aa7XQEA4MCZ/wGg95j/AaD3fI7537cDAeCQcP8PAL3H/A8AvWfH+f/JwdQDADgQP719Oz2aa/nvv55+uLz0g9LDS9OVxly5tjRVnqovzJdn6vWZaqU81Wzu9HzVen1+7Mp6srG8crdWX3qweHe2NjlTuVsp7nN7AICdnTrz7J9JRKxeP5od0baXg7kaDrdCtysAdE1ftysAdI3v80Dv2sU9vmUAOOS22aL3DR3/i9BTm7/Ch+rCV63/Q6+y/g+964ut//9wz+sBHDzr/9C7ms3Env8A0GOs8QPv9O//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KNK2ZEUytle4Kvpz0K5HHE8Ik5GMbk/W62MRsSJiPjHQHEgTY91u9IAwDsq/CfJ9/+6MHy+tLn0SPLJQHaOiF/9/s7vHk0uLi6Mpfn/X89ffJrnjx/pRgMAgHY3tma15un83HYj/+rl46nXx0FW8cXN1uaiady1/GiV9Ed/dh6MYkQMfZTk6Zb080rfHsRffRIRX9lo/6O2CKVsDaS18+nm+Gns4/sQf+P13xy/8Eb8QlaWnovZa/HlPagL9JpnN1vjZN730i6W979CnM3O2/f/wWyEenevx7+1LeNfYX3869sSP8n6/Nn19Ntr8uLKX3+yJbM53Cp7EvG1/u3iJ+vxkw7j7/ldtvFfX//muU5lzT9EXIjt47fUsmF2ZLE2P9JYXrk0W5ucqcxUHoyPT4xNjF67fHV8JFujbv3823Yx/nv94olO8dP2D3WIP7hD+7+zy/b/8dN7v/jWW+J/79vbv/+n3xI/nRO/u8v4k0M3Om7fncaf7tD+nd7/i7uM//zfK9O7fCgAcAAayytzk9VqZWGHi/Sz5k6PcfFhXsRqxHtQDRfv1UW3RyZgv210+m7XBAAAAAAAAAAAAAAA6KSxvDI3EPv7daJutxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDD67MAAAD//w/PzvM=") r5 = syz_usb_connect(0x2, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba8010203010902270201020010000904"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000200)=ANY=[], 0x841, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x22d81, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r6, 0xc004ae0a, &(0x7f0000000040)=""/23) lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=ANY=[@ANYBLOB="00fb150207f2b2b4a7e5a0d9f2d5860b31327fd9b5"], 0x15, 0x0) write$binfmt_script(r2, &(0x7f0000000000)={'#! ', './file1', [{0x20, 'ext4\x00'}, {0x20, '\\('}, {}, {0x20, 'ext4\x00'}, {}]}, 0x1c) ioctl$IOMMU_IOAS_COPY(r1, 0x3b83, &(0x7f00000000c0)={0x28, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0xff}) r7 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r7, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x17}, @multicast1}}}], 0x20}, 0x4) getsockopt(r0, 0x8, 0x2713, &(0x7f0000000580)=""/102393, &(0x7f0000000000)=0x18ff9) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) 7.610620635s ago: executing program 7 (id=1681): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="500000001000010029bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="5cd20400000000001400030076657468315f746f5f6873720000000014001680100001800c0003000000010006000000050011000900000096f96c0c50e14be43d5c3e6bd0551e879ced317319371a7ff94d5613cf89c9a24169473f6d49e326ac25f903a6fcc93128a9d1a74733ff6073bd79fee28b1e95d5da36c6dfe7e473120f024d96130429fc4b563381a24844bf28060f7cefe91767b652456560a03cc5b47a5aa0efd9b5e158197ebaf5642e2ca7767fb1b25f1a74facf054bba41390830ff809e91772d55fa379bf54b26eebf9838871687aa2512acc7ce86fcd3de99f77a7f1abb284614442bdfedb4a52e2110370e75732920fbf16784248bf4370b39eb8c4dac5beb62a3e1b1afd8daa2687800"/286], 0x50}, 0x1, 0x0, 0x0, 0x20004041}, 0x40) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000540)={'batadv_slave_1\x00', 0x0}) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) r6 = fanotify_init(0x8, 0x400) r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) fanotify_mark(r6, 0x11, 0x8000012, r7, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, r8, 0x800, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x2]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x400c0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r9}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xe, 0xfff9}, {0x9}, {0x9, 0x7}}}, 0x24}}, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r10, 0x4008ae93, &(0x7f00000005c0)=0xeeee0000) 7.422412724s ago: executing program 4 (id=1682): syz_mount_image$bfs(&(0x7f00000003c0), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYRES16=0x0], 0x1, 0xb8, &(0x7f0000000000)="$eJzs17FtwkAUBuBnu3AiRRkg2SE7RJkkcpmkSgWiYSBWYQQWQBRQ0hw6zkYydDQg8X3Fyf97fpIlN/eW+8V7vH7tUoqURUQ8RZSHyfTn+/f/eMaZOh/rt3QaGqsuS9yj/B/baEt4KXnzWWJV+vP+1W61nXXDXO493+KDAQCAq6XmY5TrstllfzHc8Zu+YqsDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHtAhAAD//1RDHzc=") socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = shmget$private(0x0, 0x9000, 0x0, &(0x7f0000ff7000/0x9000)=nil) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x408b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) timer_create(0x3, 0x0, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x77359400}}, 0x0) timer_gettime(0x0, &(0x7f0000000180)) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e62ed8bdfb902733d66642c7266646e6f3da17f6585c2a74e2a8cf65c7a57a0fa5919f3e32fd2c940c96b62f93d5a530e29b30b951f22981a54d8c8627f957da966cff2f7557fe369cf0327aa610a75e3cbe3d91bf9567372925dd3dd58ca17d1290348f56ffffff271233eed3a079a5b84a2fa4b2d0d060c71c4ba5964bada110cec9d8c5046fe625699ea28329217d737ace3b9ec28ad24733415108ac09c91e3f93e35b7b61bcbdcd0e2debb6f4a6e", @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',\x00']) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000071103a00000000009c050100000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc8, &(0x7f0000000380)=""/200, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000)={0x3, 0xfffffffe}, 0x10}, 0x94) shmctl$SHM_LOCK(r1, 0xb) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000080)={'lo\x00', @random="65084533b956"}) 7.355981664s ago: executing program 6 (id=1683): r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) socket$inet(0x2, 0x0, 0x9) bind$unix(r1, &(0x7f0000003000)=@file={0x1}, 0x6e) r2 = landlock_create_ruleset(&(0x7f0000000200)={0x48, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) connect$unix(r0, &(0x7f0000000640)=@file={0x1}, 0x6e) accept(r1, &(0x7f0000000000)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000080)=0x80) 7.153661098s ago: executing program 2 (id=1684): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r2 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0x5d, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000540), &(0x7f0000000380)={'syz', 0x2}, &(0x7f0000000700)="ed", 0x1, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000100)={r3, r1, r2}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'blake2b-256\x00'}}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0xc0189436, &(0x7f0000000140)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000007c0)={'syztnl0\x00', &(0x7f00000006c0)={'gre0\x00', 0x0, 0x8000, 0x7, 0x39b3fb6a, 0xa5e, {{0x29, 0x4, 0x3, 0x4, 0xa4, 0x64, 0x0, 0x7, 0x29, 0x0, @rand_addr=0x64010102, @multicast1, {[@ra={0x94, 0x4}, @lsrr={0x83, 0x7, 0xff, [@broadcast]}, @timestamp_prespec={0x44, 0x44, 0x35, 0x3, 0x9, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@broadcast, 0x9}, {@rand_addr=0x64010101, 0x6}, {@local, 0xfffffffd}, {@local, 0x101}, {@multicast2, 0x5}, {@multicast1, 0x5}, {@broadcast, 0xff}]}, @ra={0x94, 0x4}, @rr={0x7, 0xb, 0x2, [@empty, @local]}, @timestamp_prespec={0x44, 0x14, 0xf2, 0x3, 0x2, [{@loopback, 0x7}, {@empty, 0x1}]}, @timestamp_addr={0x44, 0x1c, 0xff, 0x1, 0x6, [{@broadcast, 0x1}, {@broadcast, 0x6ef}, {@local, 0x8}]}]}}}}}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x90, 0x90, 0xb, [@enum64={0x3, 0xa, 0x0, 0x13, 0x0, 0x1, [{0xf, 0x10000, 0x3}, {0x4ce682d0, 0x57583323, 0x9}, {0xa, 0x1, 0x9}, {0x4, 0x5, 0x8}, {0xa, 0xfffffff8, 0x1}, {0x6, 0xfffff447, 0x8000}, {0x7, 0x1, 0x9}, {0x4, 0x1ff, 0x9}, {0xb, 0x3, 0x1}, {0xd, 0x5, 0x6}]}, @ptr={0x7, 0x0, 0x0, 0x2, 0x2}]}, {0x0, [0x61, 0x16, 0xcf316f2ed90db442, 0x30, 0x0, 0x5f, 0x61, 0x2e, 0x0]}}, &(0x7f0000000440)=""/88, 0xb3, 0x58, 0x1, 0x2}, 0x28) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000580)=@o_path={&(0x7f0000000540)='./file0\x00', 0x0, 0x4020, r0}, 0x18) r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x10001}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@alu={0x4, 0x1, 0x4, 0x3, 0x3, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='GPL\x00', 0x2, 0xb2, &(0x7f00000002c0)=""/178, 0x40f00, 0x18, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000004c0)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0x9, 0x1000, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0x1, r6, r0], 0x0, 0x10, 0x9}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000800)={r8, r4}, 0xc) 6.33466873s ago: executing program 4 (id=1685): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x8000) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x1, 0xbd31, 0x4, 0x0, 0x9}) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40345410, &(0x7f00000004c0)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x80605414, 0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$rxrpc(r2, &(0x7f0000000100)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e24, 0xffffffff, @empty, 0x200}}, 0x24) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x21, 0x1, 0x21}) ioctl$SIOCSIFHWADDR(r1, 0x8b06, &(0x7f0000000140)={'wlan1\x00', @random="0100030000eb"}) 6.26890808s ago: executing program 2 (id=1686): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) unshare(0x24020400) sendmsg$sock(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[@mark={{0x14, 0x1, 0x24, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}], 0x30, 0xffffff7f}, 0x4800) 5.970087685s ago: executing program 3 (id=1687): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@getnexthop={0x20, 0x76, 0xb0d, 0x70bd2a, 0x25dfdbfb, {0x3}, [@NHA_ID={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x4000) socket$unix(0x1, 0x1, 0x0) 5.772317903s ago: executing program 6 (id=1688): openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010000081000418e00000304fcff", 0x58}], 0x1) syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800000, &(0x7f0000005c80)=ANY=[@ANYBLOB="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"], 0x1, 0x593f, &(0x7f00000001c0)="$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") setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xc5, 0x5d, 0x22, 0x8, 0xf65e, 0x3868, 0xc617, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x3f, 0x0, 0x0, 0x8, 0x3, 0x50}}]}}]}}, 0x0) 5.513827595s ago: executing program 4 (id=1689): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100008010bd40820529009dbb0000000109022400011b00001009040000022a3e740009058bff7f0000100109050b362f"], 0x0) recvfrom$unix(0xffffffffffffffff, &(0x7f0000000140)=""/19, 0x13, 0x2, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) pselect6(0x40, &(0x7f0000000000)={0x2, 0x8, 0x0, 0x7fffffffffffffff, 0x6, 0x5, 0x8000000000000001, 0x8}, &(0x7f0000000040)={0x701, 0x4, 0x9f, 0x7, 0x7, 0x3, 0x9, 0x7}, &(0x7f0000000080)={0x8, 0x10000, 0x7, 0x9, 0x100000000, 0x6, 0x10000}, &(0x7f00000000c0), &(0x7f00000001c0)={&(0x7f0000000180)={[0x2]}, 0x8}) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, 0x0, &(0x7f0000000100)) 5.513545475s ago: executing program 2 (id=1690): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000b80)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="03002bbd7000fbdbdf252500000008000300", @ANYRES32=r3, @ANYBLOB="08009f00000000000800260020170000050019010d0000000a00060008021100000000000a0034000202020202020000b70e0f34d5b642903f1f17122ebe11385747f6709891963c731868c8c99036f57a9a512a15c4458390badbb791191afa67f0"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 5.24328905s ago: executing program 7 (id=1691): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x9, 0x3, 0x4, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xb30}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$xfs(&(0x7f0000000040), &(0x7f0000009740)='./file0\x00', 0x4000000, &(0x7f00000002c0)={[{@pquota}, {@discard}, {@nolargeio}, {@grpid}, {}, {@noalign}, {@inode64}, {@attr2}]}, 0x1, 0x97ee, &(0x7f0000012f40)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f00000000c0)=""/46) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000000)={0xfff, 0x1, 0x4, 0x6c383275, 0x2}) bpf$MAP_UPDATE_CONST_STR(0x15, &(0x7f0000000100)={{r0}, &(0x7f0000000040), 0x0}, 0x20) 4.818831899s ago: executing program 3 (id=1692): syz_open_dev$sndctrl(&(0x7f0000000640), 0x7, 0x40) r0 = syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0xfac6, 0x400, 0x1, 0x285}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SPLICE={0x1e, 0x9, 0x0, @fd_index=0x8, 0x6, {0x0, r0}, 0x9, 0x1, 0x0, {0x0, r3, r0}}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118) syz_read_part_table(0x61a, &(0x7f0000000000)="$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") mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000000)={0x0, 0x9, 0x0, 0x0, 0x0, 0x8000}) ioctl$sock_bt_hci(r5, 0x400448e6, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) add_key(0x0, 0x0, &(0x7f0000000140)="92d3e0225190c48d28593cfbb8ce69f8a6233ac5b90c88b22fecb640673c934183c78592ebc92b59a3ff4d384737ebcd292fc6872b03ab87e46db194af3f0298b9a70c", 0x43, 0xfffffffffffffffd) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000a80)={'bond0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000b80)={'gre0\x00', &(0x7f0000000ac0)={'syztnl0\x00', 0x0, 0x7860, 0x20, 0x0, 0x3587, {{0x23, 0x4, 0x3, 0x31, 0x8c, 0x67, 0x0, 0xf, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@lsrr={0x83, 0xf, 0xfc, [@remote, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @rr={0x7, 0x7, 0x7e, [@multicast2]}, @generic={0x44, 0xd, "832465ebe840b6000119a7"}, @timestamp_prespec={0x44, 0x34, 0x15, 0x3, 0x4, [{@empty, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7ff}, {@private=0xa010101, 0x6}, {@private=0xa010102, 0x44e}, {@remote, 0x2}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x86, 0x9, "ea5546e1c1e296"}, @ssrr={0x89, 0x17, 0x23, [@private=0xa010102, @dev={0xac, 0x14, 0x14, 0x34}, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102, @empty]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000c40)={'ip6_vti0\x00', &(0x7f0000000bc0)={'ip6tnl0\x00', 0x0, 0x2f, 0x0, 0x96, 0x8, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, 0x40, 0x7800, 0x80000000, 0x7fffffff}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000d00)={'syztnl1\x00', &(0x7f0000000c80)={'syztnl0\x00', 0x0, 0x29, 0x2, 0x1, 0x10000, 0x40, @dev={0xfe, 0x80, '\x00', 0x1d}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x40, 0x1, 0x101, 0x40}}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000ec0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x880000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000d40)={0x130, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x20040000}, 0x20040080) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) 3.89707756s ago: executing program 2 (id=1693): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0x2, 0x1}]}, @void, @void, @void, @void, @void, @void}, 0x2f) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val, @void}, 0x20) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x20044840}, 0x80) 1.99678368s ago: executing program 3 (id=1694): socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="8dffffff0600"}) 1.730653088s ago: executing program 7 (id=1695): r0 = syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x600, 0x0, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x3c, 0x20, 0x1, 0x0, 0x0, {0xa, 0x0, 0x20, 0x40, 0x0, 0x0, 0x0, 0x7}, [@FIB_RULE_POLICY=@FRA_UID_RANGE={0xc}, @FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x17}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) set_mempolicy(0x4, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000580)='./bus\x00', 0x2000006, &(0x7f00000005c0)={[{@uni_xlate}, {@uni_xlateno}, {@shortname_win95}, {@rodir}, {@fat=@dos1xfloppy}, {@shortname_lower}, {@rodir}, {@shortname_mixed}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'cp932'}}, {@rodir}, {@uni_xlate}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@uni_xlateno}], [{@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@uid_lt={'uid<', r3}}, {@smackfshat={'smackfshat', 0x3d, '^'}}, {@audit}, {@context={'context', 0x3d, 'user_u'}}, {@smackfshat={'smackfshat', 0x3d, 'iso8859-15'}}]}, 0x25, 0x367, &(0x7f0000003000)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) r4 = signalfd(0xffffffffffffffff, &(0x7f0000000240)={[0x40005]}, 0x8) fcntl$lock(r4, 0x25, &(0x7f0000000000)={0x1, 0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff}) ioctl$SCSI_IOCTL_STOP_UNIT(r4, 0x6) socket$nl_route(0x10, 0x3, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0)={0x430003, 0x2, 0x2b}, 0x18) lsetxattr$security_evm(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v2={0x5, 0x3, 0x9, 0x1f8b6385, 0x86, "186139192ddf4055f02aaf972633caf63daa388ded12cb34d5e72c541a55a01fcff2c81021607df77291c6010492dad6292c5433f93ea1be13d889f6b8e327b56dcb732c2f1c498b5df1a79a8475ba4906f5013062168eb4956c9917b90c3bdd9b6dd6f760075d5ad38ace40b8b75ef966d61d43c71b211703f7a5eed104299ddca7d90df41e"}, 0x8f, 0x1) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r5, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 1.370422865s ago: executing program 2 (id=1696): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000000000711212000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @cgroup_sock_addr=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @private, @broadcast}, @address_reply={0x2a}}}}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x6e, &(0x7f0000000540)={@local, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x38, 0x3a, 0x0, @remote, @mcast2, {[], @dest_unreach={0x1, 0x4, 0x0, 0x0, '\x00', {0x0, 0x6, "e68634", 0x0, 0x2f, 0x0, @private1, @local, [@dstopts={0x2c}]}}}}}}}, 0x0) munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x1000000}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x7ff, [{0x1000000, 0x2}]}]}}, &(0x7f0000000f40)=""/4089, 0x3e, 0xff9, 0xa, 0x7ff}, 0x28) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x28, 0x1, 0x7, 0x301, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004840}, 0x40) 1.182052293s ago: executing program 4 (id=1697): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000001c0)={'ipvlan1\x00', &(0x7f0000000240)=@ethtool_drvinfo={0x3, "0e076a1062c15853fcc1cd1f09edb6b9f19da6c46402f134189d52b93e691cd1", "6c54d88d1299c64ec4fae2d550e66db260f7d9d1a83d014b64ef453501a2bb8d", "b5ad85557f8df839ffd9c0ca011ace0e30d200", "10723bef814b3eed1223c8046063086d2868b141d4cdf0bee747e46c2df9b3dc", "8911b501e46c719cd92916eef3f5574092eaa8088b91aa19649324e300", "721770096e930000de006a7e", 0x7, 0x4, 0x9, 0x1766e8d6, 0x15}}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r3) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) sendmsg$netlink(r2, &(0x7f00000047c0)={0x0, 0xffffffffffffff65, &(0x7f0000000080)=[{&(0x7f0000000040)={0x18, 0x7a, 0x601, 0x4000800, 0x25dfdbfe}, 0x18}], 0x1}, 0x80) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000180)=0xffff7b6e, 0x4) setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f00000001c0)=0x7, 0xffffffffffffff73) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000200)=""/25, &(0x7f0000000000)=0x14) 686.477001ms ago: executing program 3 (id=1698): syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00ed6a", 0xb, 0x2c, 0x0, @remote, @local, {[], {{0x3300, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x4c882, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002000040"], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000580)={0x34, &(0x7f0000000280)={0x20, 0x16, 0x3, "42d902"}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@map=0x1, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) r4 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r4, &(0x7f0000000000)={0x2a, 0x0, 0x2}, 0xc) bind$qrtr(r4, &(0x7f00000000c0)={0x2a, 0x1}, 0xc) preadv2(r0, &(0x7f0000000100)=[{&(0x7f0000000140)=""/186, 0xba}, {0x0}], 0x46, 0xc, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000240)='./file0\x00', 0x18000, &(0x7f0000000000)=ANY=[], 0x1, 0x2ee, &(0x7f0000000a00)="$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") fdatasync(0xffffffffffffffff) r6 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x18) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x18000, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[{@afid={'afid', 0x3d, 0x80000000}}]}}) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_DEL(r10, 0x0, 0x483, &(0x7f0000000200)={0x20000000000084, @dev={0xac, 0x14, 0x14, 0xb}, 0x0, 0x1, 'lblcr\x00', 0x20}, 0x2c) fsconfig$FSCONFIG_SET_BINARY(r6, 0x2, &(0x7f0000000080)='-*%\x00', &(0x7f0000000200)="f9", 0x1) getsockopt$SO_TIMESTAMP(r5, 0x1, 0x40, 0x0, &(0x7f0000002ec0)) 0s ago: executing program 2 (id=1699): r0 = socket$inet6(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x200, 0x0, 0x0, 0x2}, {0x3, 0x0, 0x0, 0x4000}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x3, 0x4}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) kernel console output (not intermixed with test programs): nt! [ 575.683067][ T8500] Cannot create hsr debugfs directory [ 575.804268][ T8586] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 576.501958][ T8585] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 13: invalid block bitmap [ 576.537591][ T8590] netlink: 'syz.0.895': attribute type 10 has an invalid length. [ 576.545961][ T8590] netlink: 40 bytes leftover after parsing attributes in process `syz.0.895'. [ 576.636027][ T37] usbhid 5-1:1.0: can't add hid device: -71 [ 576.643127][ T37] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 576.768630][ T37] usb 5-1: USB disconnect, device number 15 [ 577.453711][ T5799] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 578.139448][ T8500] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 578.226033][ T8500] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 578.344091][ T8500] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 578.448430][ T8500] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 579.312727][ T8621] netlink: 156 bytes leftover after parsing attributes in process `syz.2.905'. [ 580.578042][ T8632] netlink: 1572 bytes leftover after parsing attributes in process `syz.2.908'. [ 580.623124][ T8500] 8021q: adding VLAN 0 to HW filter on device bond0 [ 581.004035][ T8500] 8021q: adding VLAN 0 to HW filter on device team0 [ 581.070414][ T1104] bridge0: port 1(bridge_slave_0) entered blocking state [ 581.078097][ T1104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 581.138084][ T8626] netlink: 'syz.0.906': attribute type 10 has an invalid length. [ 581.146268][ T8626] netlink: 40 bytes leftover after parsing attributes in process `syz.0.906'. [ 581.271292][ T1104] bridge0: port 2(bridge_slave_1) entered blocking state [ 581.279195][ T1104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 584.114426][ T8672] loop4: detected capacity change from 0 to 512 [ 584.388242][ T8672] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #15: comm syz.4.918: iget: bad extended attribute block 1 [ 584.490985][ T8672] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.918: couldn't read orphan inode 15 (err -117) [ 584.565505][ T8500] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 584.605464][ T8672] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 586.533625][ T37] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 586.674003][ T8678] netlink: 'syz.2.919': attribute type 10 has an invalid length. [ 586.682438][ T8678] netlink: 40 bytes leftover after parsing attributes in process `syz.2.919'. [ 586.837821][ T8674] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 13: invalid block bitmap [ 587.529932][ T37] usb 5-1: device descriptor read/all, error -71 [ 587.616899][ T5799] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 589.263556][ T37] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 589.507276][ T37] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 589.585287][ T37] usb 3-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 589.595058][ T37] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.603780][ T37] usb 3-1: Product: syz [ 589.608231][ T37] usb 3-1: Manufacturer: syz [ 589.619013][ T37] usb 3-1: SerialNumber: syz [ 589.724777][ T37] usb 3-1: config 0 descriptor?? [ 589.809620][ T37] usb 3-1: Found UVC 0.00 device syz (18ec:3288) [ 589.816379][ T37] usb 3-1: No valid video chain found. [ 589.971248][ T8722] 9pnet_fd: Insufficient options for proto=fd [ 590.061003][ T37] usb 3-1: USB disconnect, device number 19 [ 590.212762][ T8500] veth0_vlan: entered promiscuous mode [ 590.249134][ T9] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 590.316762][ T8500] veth1_vlan: entered promiscuous mode [ 590.450659][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 590.466086][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 590.503115][ T9] usb 5-1: config 7 has an invalid interface number: 187 but max is 0 [ 590.512771][ T9] usb 5-1: config 7 has no interface number 0 [ 590.519506][ T9] usb 5-1: config 7 interface 187 has no altsetting 0 [ 590.588223][ T9] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 590.599584][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.607905][ T9] usb 5-1: Product: syz [ 590.614221][ T9] usb 5-1: Manufacturer: syz [ 590.620190][ T9] usb 5-1: SerialNumber: syz [ 590.680217][ T8500] veth0_macvtap: entered promiscuous mode [ 590.785192][ T8500] veth1_macvtap: entered promiscuous mode [ 590.986437][ T9] usb 5-1: Limiting number of CPorts to U8_MAX [ 590.995157][ T9] usb 5-1: Not enough endpoints found in device, aborting! [ 591.069412][ T8500] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 591.140600][ T8500] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 591.198198][ T37] usb 5-1: USB disconnect, device number 18 [ 591.286670][ T8500] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.296100][ T8500] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.305521][ T8500] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.316593][ T8500] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.243283][ T8754] FAULT_INJECTION: forcing a failure. [ 592.243283][ T8754] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 592.258085][ T8754] CPU: 0 UID: 0 PID: 8754 Comm: syz.2.939 Tainted: G W 6.16.0-rc4-syzkaller #0 PREEMPT(undef) [ 592.258268][ T8754] Tainted: [W]=WARN [ 592.258320][ T8754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 592.258416][ T8754] Call Trace: [ 592.258473][ T8754] [ 592.258527][ T8754] __dump_stack+0x26/0x30 [ 592.258708][ T8754] dump_stack_lvl+0x1df/0x270 [ 592.258895][ T8754] dump_stack+0x1e/0x25 [ 592.259052][ T8754] should_fail_ex+0x7dc/0x8a0 [ 592.259233][ T8754] should_fail+0x2a/0x40 [ 592.259387][ T8754] should_fail_usercopy+0x2e/0x40 [ 592.259566][ T8754] _copy_from_user+0x33/0x100 [ 592.259727][ T8754] __sys_connect+0x119/0x680 [ 592.259917][ T8754] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 592.260145][ T8754] ? kmsan_get_metadata+0xfb/0x160 [ 592.260347][ T8754] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 592.260563][ T8754] __x64_sys_connect+0x95/0x100 [ 592.260769][ T8754] x64_sys_call+0x23bb/0x3db0 [ 592.260948][ T8754] do_syscall_64+0xd9/0x210 [ 592.261083][ T8754] ? irqentry_exit+0x16/0x60 [ 592.261255][ T8754] ? clear_bhb_loop+0x40/0x90 [ 592.261409][ T8754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.261552][ T8754] RIP: 0033:0x7fad7698e929 [ 592.261652][ T8754] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 592.261769][ T8754] RSP: 002b:00007fad747f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 592.261897][ T8754] RAX: ffffffffffffffda RBX: 00007fad76bb6080 RCX: 00007fad7698e929 [ 592.261994][ T8754] RDX: 000000000000006e RSI: 0000200000000640 RDI: 0000000000000003 [ 592.262080][ T8754] RBP: 00007fad747f6090 R08: 0000000000000000 R09: 0000000000000000 [ 592.262165][ T8754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 592.262245][ T8754] R13: 0000000000000000 R14: 00007fad76bb6080 R15: 00007fffcb29d368 [ 592.262369][ T8754] [ 594.364392][ T8772] autofs4:pid:8772:validate_dev_ioctl: invalid path supplied for cmd(0xc018937d) [ 595.294075][ T8778] 9pnet_fd: Insufficient options for proto=fd [ 595.437397][ T8778] netlink: 88 bytes leftover after parsing attributes in process `syz.0.945'. [ 596.152408][ T8787] bond0: entered promiscuous mode [ 596.157785][ T8787] bridge0: entered promiscuous mode [ 596.173136][ T8787] batadv0: entered promiscuous mode [ 596.184017][ T8787] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 596.196209][ T8787] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 596.288058][ T8787] bond0: left promiscuous mode [ 596.296456][ T8787] bridge0: left promiscuous mode [ 596.352242][ T8787] batadv0: left promiscuous mode [ 599.061379][ T8829] loop4: detected capacity change from 0 to 32768 [ 599.320152][ T8829] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 599.320312][ T8829] allowing incompatible features above 0.0: (unknown version) [ 599.320404][ T8829] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 599.366233][ T8829] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0 [ 599.374849][ T8829] bcachefs (loop4): initializing new filesystem [ 599.392819][ T8829] bcachefs (loop4): going read-write [ 599.450409][ T8829] bcachefs (loop4): marking superblocks [ 599.509112][ T8829] bcachefs (loop4): initializing freespace [ 599.542818][ T8829] bcachefs (loop4): done initializing freespace [ 599.572989][ T8829] bcachefs (loop4): reading snapshots table [ 599.579679][ T8829] bcachefs (loop4): reading snapshots done [ 599.750953][ T8829] bcachefs (loop4): done starting filesystem [ 600.071181][ T5799] bcachefs (loop4): shutting down [ 600.077335][ T5799] bcachefs (loop4): going read-only [ 600.084805][ T5799] bcachefs (loop4): finished waiting for writes to stop [ 600.186248][ T5799] bcachefs (loop4): flushing journal and stopping allocators, journal seq 3 [ 600.550185][ T5799] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 3 [ 600.619565][ T5799] bcachefs (loop4): clean shutdown complete, journal seq 4 [ 600.671718][ T5799] bcachefs (loop4): marking filesystem clean [ 600.860182][ T5799] bcachefs (loop4): shutdown complete [ 601.137080][ T1075] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 601.147129][ T1075] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 601.416904][ T4058] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 601.425958][ T4058] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 601.906858][ T8879] overlayfs: failed to clone upperpath [ 603.414294][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 603.421424][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 603.755852][ T8903] netlink: 28 bytes leftover after parsing attributes in process `syz.2.977'. [ 604.499700][ T8909] netlink: 'syz.3.979': attribute type 8 has an invalid length. [ 604.507783][ T8909] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.979'. [ 604.559442][ T8911] netlink: 'syz.3.979': attribute type 8 has an invalid length. [ 604.567486][ T8911] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.979'. [ 604.572604][ T8909] netlink: 4 bytes leftover after parsing attributes in process `syz.3.979'. [ 604.658625][ T8915] netlink: 4 bytes leftover after parsing attributes in process `syz.3.979'. [ 605.679173][ T8932] overlayfs: failed to clone upperpath [ 606.318029][ T8941] netlink: 68 bytes leftover after parsing attributes in process `syz.2.987'. [ 607.154464][ T8953] input: syz0 as /devices/virtual/input/input11 [ 607.161481][ T8953] input: failed to attach handler leds to device input11, error: -6 [ 607.483387][ T8959] loop6: detected capacity change from 0 to 128 [ 607.545309][ T8959] udf: Unknown parameter '184467440737095516150xffffffffffffffff18446744073709551615' [ 607.613997][ T8956] loop4: detected capacity change from 0 to 2048 [ 607.683037][ T8956] udf: Bad value for 'partition' [ 609.031619][ T37] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 609.185944][ T5854] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 609.237435][ T37] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 609.249319][ T37] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 609.259830][ T37] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 609.269456][ T37] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.315501][ T8976] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 609.373626][ T37] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 609.391289][ T5854] usb 3-1: Using ep0 maxpacket: 32 [ 609.414391][ T5854] usb 3-1: unable to get BOS descriptor or descriptor too short [ 609.439273][ T5854] usb 3-1: config 128 has an invalid interface number: 127 but max is 3 [ 609.450195][ T5854] usb 3-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 609.461483][ T5854] usb 3-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 609.470972][ T5854] usb 3-1: config 128 has no interface number 0 [ 609.477531][ T5854] usb 3-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 609.488270][ T5854] usb 3-1: config 128 interface 127 has no altsetting 0 [ 609.580173][ T5854] usb 3-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 609.589774][ T5854] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.598101][ T5854] usb 3-1: Product: syz [ 609.602861][ T5854] usb 3-1: Manufacturer: syz [ 609.607745][ T5854] usb 3-1: SerialNumber: syz [ 609.969851][ T8992] overlayfs: failed to clone upperpath [ 610.400275][ T5854] usb 3-1: USB disconnect, device number 20 [ 610.817104][ T8660] udevd[8660]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:128.127/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 611.941740][ T3635] bond0: (slave bridge0): link status definitely down, disabling slave [ 611.950789][ T3635] bond0: now running without any active interface! [ 612.344281][ T9] usb 5-1: USB disconnect, device number 19 [ 612.807910][ T9023] gfs2: path_lookup on c::: returned error -2 [ 613.575557][ T9033] FAULT_INJECTION: forcing a failure. [ 613.575557][ T9033] name failslab, interval 1, probability 0, space 0, times 0 [ 613.589248][ T9033] CPU: 0 UID: 0 PID: 9033 Comm: syz.4.1014 Tainted: G W 6.16.0-rc4-syzkaller #0 PREEMPT(undef) [ 613.589423][ T9033] Tainted: [W]=WARN [ 613.589474][ T9033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 613.589567][ T9033] Call Trace: [ 613.589618][ T9033] [ 613.589670][ T9033] __dump_stack+0x26/0x30 [ 613.589850][ T9033] dump_stack_lvl+0x1df/0x270 [ 613.590030][ T9033] dump_stack+0x1e/0x25 [ 613.590189][ T9033] should_fail_ex+0x7dc/0x8a0 [ 613.590380][ T9033] should_failslab+0x15b/0x200 [ 613.590598][ T9033] __kmalloc_noprof+0x182/0x1310 [ 613.590743][ T9033] ? tomoyo_file_ioctl+0x3d/0x50 [ 613.590922][ T9033] ? tomoyo_realpath_from_path+0xeb/0x9f0 [ 613.591096][ T9033] ? __msan_warning+0x1b/0x30 [ 613.591260][ T9033] ? filter_irq_stacks+0x13f/0x190 [ 613.591403][ T9033] ? kmsan_get_metadata+0xfb/0x160 [ 613.591621][ T9033] tomoyo_realpath_from_path+0xeb/0x9f0 [ 613.591814][ T9033] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 613.592030][ T9033] ? __srcu_read_lock+0x5e/0xd0 [ 613.592209][ T9033] tomoyo_path_number_perm+0x1d0/0x7d0 [ 613.592362][ T9033] ? stack_depot_save_flags+0x35/0x7b0 [ 613.592555][ T9033] ? kmsan_get_metadata+0xfb/0x160 [ 613.592751][ T9033] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 613.593013][ T9033] tomoyo_file_ioctl+0x3d/0x50 [ 613.593197][ T9033] security_file_ioctl+0x141/0x590 [ 613.593414][ T9033] __se_sys_ioctl+0xbb/0x400 [ 613.593613][ T9033] __x64_sys_ioctl+0x97/0xe0 [ 613.593799][ T9033] x64_sys_call+0x1ebe/0x3db0 [ 613.593992][ T9033] do_syscall_64+0xd9/0x210 [ 613.594130][ T9033] ? irqentry_exit+0x16/0x60 [ 613.594319][ T9033] ? clear_bhb_loop+0x40/0x90 [ 613.594476][ T9033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.594640][ T9033] RIP: 0033:0x7f0ec298e929 [ 613.594754][ T9033] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 613.594886][ T9033] RSP: 002b:00007f0ec37b6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 613.595028][ T9033] RAX: ffffffffffffffda RBX: 00007f0ec2bb5fa0 RCX: 00007f0ec298e929 [ 613.595135][ T9033] RDX: 0000200000000040 RSI: 0000000000008b2a RDI: 0000000000000003 [ 613.595234][ T9033] RBP: 00007f0ec37b6090 R08: 0000000000000000 R09: 0000000000000000 [ 613.595325][ T9033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 613.595416][ T9033] R13: 0000000000000000 R14: 00007f0ec2bb5fa0 R15: 00007ffdf1082808 [ 613.595558][ T9033] [ 613.595684][ T9033] ERROR: Out of memory at tomoyo_realpath_from_path. [ 614.849223][ T5854] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 615.064159][ T5854] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 615.079722][ T5854] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 615.092169][ T5854] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 615.101809][ T5854] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.296680][ T9045] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 615.336589][ T5854] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 616.025602][ T9046] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1012'. [ 616.868391][ T9065] loop6: detected capacity change from 0 to 1024 [ 617.096774][ T9065] hfsplus: Unknown parameter '\Đ+ jC+[' [ 618.052110][ T30] audit: type=1326 audit(1751249606.236:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9076 comm="syz.4.1029" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0ec298e929 code=0x0 [ 618.316615][ T5854] usb 3-1: USB disconnect, device number 21 [ 619.041156][ T9091] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1033'. [ 619.912970][ T9] usb 3-1: new low-speed USB device number 22 using dummy_hcd [ 620.164817][ T9] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 620.174480][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.248116][ T9] usb 3-1: config 0 descriptor?? [ 620.627458][ T9106] loop4: detected capacity change from 0 to 2048 [ 620.695532][ T9106] ext4: Unknown parameter 'dont_hash' [ 620.862689][ T9112] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1041'. [ 620.873815][ T9112] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1041'. [ 620.884414][ T9112] nbd: socks must be embedded in a SOCK_ITEM attr [ 621.283395][ T9120] overlayfs: failed to clone upperpath [ 621.762816][ T9124] loop4: detected capacity change from 0 to 4096 [ 621.840115][ T9124] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 621.861453][ T9124] EXT4-fs: Cannot change quota options when quota turned on [ 622.188531][ T9] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 622.200160][ T9] asix 3-1:0.0: probe with driver asix failed with error -71 [ 622.279641][ T9] usb 3-1: USB disconnect, device number 22 [ 622.468381][ T9124] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 623.335215][ T9136] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 624.519769][ T9151] loop4: detected capacity change from 0 to 512 [ 625.136173][ T9154] loop4: detected capacity change from 0 to 1024 [ 625.189935][ T9154] hfsplus: failed to load extents file [ 625.954165][ T9165] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 626.203821][ T9169] netlink: 'syz.4.1057': attribute type 1 has an invalid length. [ 626.311870][ T9169] 8021q: adding VLAN 0 to HW filter on device bond1 [ 626.921351][ T9180] usb usb1: usbfs: process 9180 (syz.2.1061) did not claim interface 1 before use [ 626.963784][ T9182] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 628.547242][ T9198] loop6: detected capacity change from 0 to 512 [ 628.670617][ T9203] FAULT_INJECTION: forcing a failure. [ 628.670617][ T9203] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 628.684559][ T9203] CPU: 0 UID: 0 PID: 9203 Comm: syz.4.1068 Tainted: G W 6.16.0-rc4-syzkaller #0 PREEMPT(undef) [ 628.684738][ T9203] Tainted: [W]=WARN [ 628.684791][ T9203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 628.684877][ T9203] Call Trace: [ 628.684938][ T9203] [ 628.684991][ T9203] __dump_stack+0x26/0x30 [ 628.685169][ T9203] dump_stack_lvl+0x1df/0x270 [ 628.685360][ T9203] dump_stack+0x1e/0x25 [ 628.685521][ T9203] should_fail_ex+0x7dc/0x8a0 [ 628.685710][ T9203] should_fail+0x2a/0x40 [ 628.685851][ T9203] should_fail_usercopy+0x2e/0x40 [ 628.686046][ T9203] _copy_from_user+0x33/0x100 [ 628.686215][ T9203] do_sock_getsockopt+0x1f6/0x980 [ 628.686396][ T9203] __x64_sys_getsockopt+0x32e/0x520 [ 628.686547][ T9203] ? kmsan_save_stack_with_flags+0x60/0x60 [ 628.686756][ T9203] ? kmsan_save_stack_with_flags+0x60/0x60 [ 628.686953][ T9203] x64_sys_call+0x165d/0x3db0 [ 628.687141][ T9203] do_syscall_64+0xd9/0x210 [ 628.687290][ T9203] ? irqentry_exit+0x16/0x60 [ 628.687490][ T9203] ? clear_bhb_loop+0x40/0x90 [ 628.687658][ T9203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 628.687814][ T9203] RIP: 0033:0x7f0ec298e929 [ 628.687931][ T9203] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 628.688055][ T9203] RSP: 002b:00007f0ec37b6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 628.688196][ T9203] RAX: ffffffffffffffda RBX: 00007f0ec2bb5fa0 RCX: 00007f0ec298e929 [ 628.688300][ T9203] RDX: 0000000000000076 RSI: 0000000000000084 RDI: 0000000000000004 [ 628.688388][ T9203] RBP: 00007f0ec37b6090 R08: 00002000000000c0 R09: 0000000000000000 [ 628.688493][ T9203] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 628.688589][ T9203] R13: 0000000000000000 R14: 00007f0ec2bb5fa0 R15: 00007ffdf1082808 [ 628.688725][ T9203] [ 630.674196][ T9205] netlink: 'syz.3.1069': attribute type 10 has an invalid length. [ 630.684007][ T9205] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1069'. [ 630.890886][ T9221] netlink: 'syz.0.1073': attribute type 1 has an invalid length. [ 630.987125][ T9221] 8021q: adding VLAN 0 to HW filter on device bond4 [ 632.343560][ T5854] usb 5-1: new low-speed USB device number 20 using dummy_hcd [ 632.492660][ T9248] loop6: detected capacity change from 0 to 512 [ 632.607413][ T5854] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 632.617495][ T5854] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.708235][ T5854] usb 5-1: config 0 descriptor?? [ 632.749730][ T37] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 632.949432][ T37] usb 3-1: Using ep0 maxpacket: 16 [ 632.971098][ T9248] loop6: detected capacity change from 0 to 1024 [ 632.996648][ T37] usb 3-1: config 4 has an invalid interface number: 9 but max is 0 [ 633.005935][ T37] usb 3-1: config 4 has no interface number 0 [ 633.012740][ T37] usb 3-1: config 4 interface 9 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 633.023366][ T37] usb 3-1: config 4 interface 9 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 633.034164][ T37] usb 3-1: config 4 interface 9 has no altsetting 0 [ 633.089713][ T9248] hfsplus: failed to load extents file [ 633.102565][ T37] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe [ 633.112684][ T37] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.121362][ T37] usb 3-1: Product: syz [ 633.126043][ T37] usb 3-1: Manufacturer: syz [ 633.131442][ T37] usb 3-1: SerialNumber: syz [ 633.265163][ T9250] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 633.321042][ T9254] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1087'. [ 633.330821][ T9254] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1087'. [ 633.356000][ T9250] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 633.472046][ T9254] bridge0: port 1(vlan2) entered blocking state [ 633.479489][ T9254] bridge0: port 1(vlan2) entered disabled state [ 633.487156][ T9254] vlan2: entered allmulticast mode [ 633.493002][ T9254] bridge0: entered allmulticast mode [ 633.573276][ T37] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 633.587703][ T9261] netlink: 'syz.0.1088': attribute type 1 has an invalid length. [ 633.602330][ T9254] vlan2: left allmulticast mode [ 633.609741][ T9254] bridge0: left allmulticast mode [ 633.657086][ T3635] usb 3-1: Failed to submit usb control message: -71 [ 633.664722][ T3635] usb 3-1: unable to send the bmi data to the device: -71 [ 633.672525][ T3635] usb 3-1: unable to get target info from device [ 633.679499][ T3635] usb 3-1: could not get target info (-71) [ 633.685921][ T3635] usb 3-1: could not probe fw (-71) [ 633.694189][ T37] usb 3-1: USB disconnect, device number 23 [ 633.788702][ T9261] 8021q: adding VLAN 0 to HW filter on device bond5 [ 634.185416][ T5854] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 634.196057][ T5854] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 634.208265][ T5854] asix 5-1:0.0: probe with driver asix failed with error -71 [ 634.390901][ T5854] usb 5-1: USB disconnect, device number 20 [ 634.828735][ T9271] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1091'. [ 635.492052][ T9281] dummy0: entered promiscuous mode [ 635.497793][ T9281] vlan2: entered promiscuous mode [ 638.936901][ T9323] netlink: 'syz.0.1109': attribute type 1 has an invalid length. [ 639.200439][ T5847] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 639.250228][ T9332] ieee802154 phy0 wpan0: encryption failed: -22 [ 639.389497][ T5847] usb 7-1: Using ep0 maxpacket: 32 [ 639.435259][ T5847] usb 7-1: config 1 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 64, changing to 10 [ 639.448622][ T5847] usb 7-1: config 1 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 639.462508][ T5847] usb 7-1: config 1 interface 0 has no altsetting 0 [ 639.490769][ T5847] usb 7-1: New USB device found, idVendor=056a, idProduct=0317, bcdDevice= 0.40 [ 639.500520][ T5847] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.509172][ T5847] usb 7-1: Product: syz [ 639.513620][ T5847] usb 7-1: Manufacturer: 䑜힞濨뵘ꍥᬲ剠셊瞶푅厾罖㸗昼匢拚ᲊ茺酁嫉뷠뤽簹莣桾ꌗ⇲㎏䔱剬畔䍈睚퓅䷃앨쪴廜䀮❸捐瑻쓲掞㝝녂츔޻瀢㖸笗냚켖꣒疞盾ꭵ䜺叵⠋릻ዺ᥸橺挢옻ͷ⩉හ壕ₕ䟞液죠뮞笨氯ڠ쯛뺱䍱鰆嚣⃏柪䨛〹컝鯉ꩱܧ톔☩ꫯ䕪灅㉦゛䫽斢뷶䓢ꄀ沲э [ 639.551375][ T5847] usb 7-1: SerialNumber: syz [ 639.719827][ T9337] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1112'. [ 640.169495][ T5847] usbhid 7-1:1.0: can't add hid device: -71 [ 640.176247][ T5847] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 640.287720][ T5847] usb 7-1: USB disconnect, device number 2 [ 640.470454][ T9345] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1114'. [ 641.177544][ T5847] usb 5-1: new low-speed USB device number 21 using dummy_hcd [ 641.408741][ T5847] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 641.418705][ T5847] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.450377][ T5847] usb 5-1: config 0 descriptor?? [ 641.569466][ T5854] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 641.766891][ T5854] usb 7-1: Using ep0 maxpacket: 16 [ 641.822936][ T5854] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 641.835051][ T5854] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 641.845585][ T5854] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 641.859080][ T5854] usb 7-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 641.868600][ T5854] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.072049][ T5854] usb 7-1: config 0 descriptor?? [ 642.808331][ T9356] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1117'. [ 642.882306][ T5854] usbhid 7-1:0.0: can't add hid device: -71 [ 642.889403][ T5854] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 642.929824][ T5854] usb 7-1: USB disconnect, device number 3 [ 643.001089][ T5847] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 643.011920][ T5847] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 643.026569][ T5847] asix 5-1:0.0: probe with driver asix failed with error -71 [ 643.204985][ T5847] usb 5-1: USB disconnect, device number 21 [ 647.020740][ T9409] loop6: detected capacity change from 0 to 512 [ 647.082627][ T9409] EXT4-fs: Ignoring removed oldalloc option [ 647.329896][ T9409] EXT4-fs error (device loop6): ext4_xattr_inode_iget:433: comm syz.6.1134: Parent and EA inode have the same ino 15 [ 647.390094][ T9409] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 647.404510][ T9409] EXT4-fs error (device loop6): ext4_xattr_inode_iget:433: comm syz.6.1134: Parent and EA inode have the same ino 15 [ 647.467353][ T9409] EXT4-fs (loop6): 1 orphan inode deleted [ 647.476393][ T9409] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 647.522207][ T9417] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1136'. [ 647.935890][ T8500] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 650.007428][ T9451] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1145'. [ 650.019096][ T9451] nbd: must specify at least one socket [ 651.713479][ T9466] loop6: detected capacity change from 0 to 4096 [ 651.734902][ T9467] loop4: detected capacity change from 0 to 4096 [ 651.894583][ T9467] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 652.009816][ T9466] NILFS (loop6): invalid segment: Checksum error in segment payload [ 652.018172][ T9466] NILFS (loop6): trying rollback from an earlier position [ 652.087707][ T9466] NILFS (loop6): recovery complete [ 652.142579][ T9481] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 652.296470][ T9470] bond0: option mode: unable to set because the bond device has slaves [ 652.814697][ T9487] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 653.899345][ T5854] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 654.081018][ T5854] usb 3-1: Using ep0 maxpacket: 32 [ 654.115311][ T5854] usb 3-1: config 0 has an invalid descriptor of length 22, skipping remainder of the config [ 654.126155][ T5854] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 654.251177][ T5854] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 654.261416][ T5854] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.270104][ T5854] usb 3-1: Product: syz [ 654.274536][ T5854] usb 3-1: Manufacturer: syz [ 654.279787][ T5854] usb 3-1: SerialNumber: syz [ 654.340376][ T9499] loop4: detected capacity change from 0 to 4096 [ 654.411593][ T5854] usb 3-1: config 0 descriptor?? [ 654.524163][ T9506] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 654.783518][ T9509] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 654.928177][ T9509] Remounting filesystem read-only [ 654.992177][ T9513] loop6: detected capacity change from 0 to 256 [ 655.104621][ T9513] FAULT_INJECTION: forcing a failure. [ 655.104621][ T9513] name failslab, interval 1, probability 0, space 0, times 0 [ 655.120206][ T9513] CPU: 0 UID: 0 PID: 9513 Comm: syz.6.1163 Tainted: G W 6.16.0-rc4-syzkaller #0 PREEMPT(undef) [ 655.120387][ T9513] Tainted: [W]=WARN [ 655.120439][ T9513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 655.120528][ T9513] Call Trace: [ 655.120581][ T9513] [ 655.120637][ T9513] __dump_stack+0x26/0x30 [ 655.120817][ T9513] dump_stack_lvl+0x1df/0x270 [ 655.121012][ T9513] dump_stack+0x1e/0x25 [ 655.121174][ T9513] should_fail_ex+0x7dc/0x8a0 [ 655.121370][ T9513] should_failslab+0x15b/0x200 [ 655.121583][ T9513] kmem_cache_alloc_noprof+0xf0/0xec0 [ 655.121741][ T9513] ? security_inode_alloc+0x85/0x6f0 [ 655.121924][ T9513] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 655.122131][ T9513] ? kmsan_get_metadata+0xfb/0x160 [ 655.122354][ T9513] security_inode_alloc+0x85/0x6f0 [ 655.122537][ T9513] inode_init_always_gfp+0x754/0x8a0 [ 655.122764][ T9513] alloc_inode+0x129/0x4a0 [ 655.122971][ T9513] __sock_create+0x206/0xf60 [ 655.123160][ T9513] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 655.123365][ T9513] sock_create_kern+0x54/0x70 [ 655.123559][ T9513] mptcp_subflow_create_socket+0xc2/0xf90 [ 655.123774][ T9513] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 655.123997][ T9513] __mptcp_nmpc_sk+0x150/0xb20 [ 655.124198][ T9513] ? kmsan_get_metadata+0xfb/0x160 [ 655.124399][ T9513] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 655.124619][ T9513] mptcp_connect+0xa9/0x1800 [ 655.124778][ T9513] ? kmsan_get_metadata+0xfb/0x160 [ 655.124982][ T9513] ? kmsan_get_metadata+0xfb/0x160 [ 655.125179][ T9513] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 655.125394][ T9513] ? __pfx_mptcp_connect+0x10/0x10 [ 655.125556][ T9513] __inet_stream_connect+0x2d3/0x1760 [ 655.125716][ T9513] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 655.125900][ T9513] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 655.126118][ T9513] ? __local_bh_enable_ip+0x75/0xb0 [ 655.126272][ T9513] ? _raw_spin_unlock_bh+0x2d/0x40 [ 655.126461][ T9513] ? lock_sock_nested+0x1f5/0x210 [ 655.126643][ T9513] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 655.126859][ T9513] inet_stream_connect+0x69/0xd0 [ 655.127028][ T9513] __sys_connect+0x517/0x680 [ 655.127223][ T9513] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 655.127427][ T9513] ? kmsan_get_metadata+0xfb/0x160 [ 655.127623][ T9513] ? __pfx_inet_stream_connect+0x10/0x10 [ 655.127801][ T9513] __x64_sys_connect+0x95/0x100 [ 655.128020][ T9513] x64_sys_call+0x23bb/0x3db0 [ 655.128209][ T9513] do_syscall_64+0xd9/0x210 [ 655.128360][ T9513] ? irqentry_exit+0x16/0x60 [ 655.128559][ T9513] ? clear_bhb_loop+0x40/0x90 [ 655.128720][ T9513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.128872][ T9513] RIP: 0033:0x7fdfa878e929 [ 655.128991][ T9513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 655.129111][ T9513] RSP: 002b:00007fdfa9586038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 655.129244][ T9513] RAX: ffffffffffffffda RBX: 00007fdfa89b5fa0 RCX: 00007fdfa878e929 [ 655.129335][ T9513] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000003 [ 655.129425][ T9513] RBP: 00007fdfa9586090 R08: 0000000000000000 R09: 0000000000000000 [ 655.129518][ T9513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 655.129607][ T9513] R13: 0000000000000000 R14: 00007fdfa89b5fa0 R15: 00007ffc768c8c28 [ 655.129740][ T9513] [ 655.472385][ T9513] socket: no more sockets [ 656.551695][ T9529] loop6: detected capacity change from 0 to 512 [ 656.889803][ T5847] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 656.998629][ T9] usb 3-1: USB disconnect, device number 24 [ 657.119407][ T5847] usb 5-1: Using ep0 maxpacket: 16 [ 657.168184][ T5847] usb 5-1: no configurations [ 657.173699][ T5847] usb 5-1: can't read configurations, error -22 [ 657.389853][ T5847] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 657.413604][ T9529] EXT4-fs error (device loop6): ext4_orphan_get:1393: inode #15: comm syz.6.1168: iget: bad extended attribute block 1 [ 657.536754][ T9529] EXT4-fs error (device loop6): ext4_orphan_get:1398: comm syz.6.1168: couldn't read orphan inode 15 (err -117) [ 657.643225][ T9529] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 657.652062][ T5847] usb 5-1: Using ep0 maxpacket: 16 [ 657.696983][ T5847] usb 5-1: no configurations [ 657.702162][ T5847] usb 5-1: can't read configurations, error -22 [ 657.738483][ T5847] usb usb5-port1: attempt power cycle [ 657.883493][ T9525] IPv6: sit1: Disabled Multicast RS [ 657.894173][ T9525] sit1: entered allmulticast mode [ 658.130003][ T9] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 658.140165][ T5847] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 658.192519][ T5847] usb 5-1: Using ep0 maxpacket: 16 [ 658.219884][ T5847] usb 5-1: no configurations [ 658.224809][ T5847] usb 5-1: can't read configurations, error -22 [ 658.336020][ T9] usb 7-1: not running at top speed; connect to a high speed hub [ 658.392723][ T9] usb 7-1: config 1 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 658.404335][ T9] usb 7-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 658.418660][ T9] usb 7-1: config 1 interface 0 has no altsetting 0 [ 658.440131][ T5847] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 658.505566][ T5847] usb 5-1: Using ep0 maxpacket: 16 [ 658.514919][ T5847] usb 5-1: no configurations [ 658.520305][ T5847] usb 5-1: can't read configurations, error -22 [ 658.556960][ T9] usb 7-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.40 [ 658.566818][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.575367][ T9] usb 7-1: Product: ࠦ㰉퀊ዻ쑘쉭舄ᖛꉊ祜僶⃰뇌쓭趷蹨ཬ늭뉳벳槗復ￔ㹣ᆓ髊叙뀓ợ⮙〟茧ꮡ삨篨﷡黑脦ꢽ榄䝶㨳霧칠헹崕넼揅ᅪ؅禶斮듺饣鞑裺瘜㫶珤㛏㗅枅룛⧘插悘搩흃玻岫㿶᭞ꓼ幈뒦癮撖㋷圔繼畮뎡墔ᭉꦥஃ逘ꪍ臣Ỿ浺 [ 658.609221][ T9] usb 7-1: Manufacturer: В [ 658.614014][ T9] usb 7-1: SerialNumber: ы [ 658.632325][ T5847] usb usb5-port1: unable to enumerate USB device [ 658.736139][ T9529] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 658.829769][ T9538] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 13: invalid block bitmap [ 659.271151][ T9] usbhid 7-1:1.0: can't add hid device: -71 [ 659.277886][ T9] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 659.350947][ T9] usb 7-1: USB disconnect, device number 4 [ 660.094069][ T8500] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 661.873615][ T9580] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1176'. [ 662.209940][ T9591] netlink: 84 bytes leftover after parsing attributes in process `syz.6.1187'. [ 664.559622][ T9624] netlink: 'syz.2.1198': attribute type 10 has an invalid length. [ 664.619117][ T9624] bond0: (slave veth1_to_bond): Enslaving as an active interface with a down link [ 664.846685][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 664.853882][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 665.564866][ T9630] loop4: detected capacity change from 0 to 4096 [ 665.634811][ T9635] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1190'. [ 665.681868][ T9637] netlink: 76 bytes leftover after parsing attributes in process `syz.6.1202'. [ 665.699280][ T9630] NILFS (loop4): invalid segment: Checksum error in segment payload [ 665.707619][ T9630] NILFS (loop4): trying rollback from an earlier position [ 665.822680][ T9630] NILFS (loop4): recovery complete [ 665.878546][ T9640] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 667.698585][ T9662] loop4: detected capacity change from 0 to 2048 [ 667.876177][ T9662] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 668.492434][ T9670] netlink: 'syz.6.1211': attribute type 32 has an invalid length. [ 668.501253][ T9670] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1211'. [ 668.511186][ T9670] (unnamed net_device) (uninitialized): option coupled_control: invalid value (115) [ 669.135444][ T9679] gfs2: path_lookup on c::: returned error -2 [ 669.337551][ T9685] loop6: detected capacity change from 0 to 512 [ 669.424602][ T9685] EXT4-fs error (device loop6): ext4_orphan_get:1393: inode #15: comm syz.6.1217: iget: bad extended attribute block 1 [ 669.483374][ T9685] EXT4-fs error (device loop6): ext4_orphan_get:1398: comm syz.6.1217: couldn't read orphan inode 15 (err -117) [ 669.527395][ T9685] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 669.945905][ T9] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 670.139300][ T9] usb 7-1: not running at top speed; connect to a high speed hub [ 670.193859][ T9] usb 7-1: config 1 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 670.205442][ T9] usb 7-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 670.219121][ T9] usb 7-1: config 1 interface 0 has no altsetting 0 [ 670.297956][ T9] usb 7-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.40 [ 670.307727][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.316600][ T9] usb 7-1: Product: ࠦ㰉퀊ዻ쑘쉭舄ᖛꉊ祜僶⃰뇌쓭趷蹨ཬ늭뉳벳槗復ￔ㹣ᆓ髊叙뀓ợ⮙〟茧ꮡ삨篨﷡黑脦ꢽ榄䝶㨳霧칠헹崕넼揅ᅪ؅禶斮듺饣鞑裺瘜㫶珤㛏㗅枅룛⧘插悘搩흃玻岫㿶᭞ꓼ幈뒦癮撖㋷圔繼畮뎡墔ᭉꦥஃ逘ꪍ臣Ỿ浺 [ 670.348652][ T9] usb 7-1: Manufacturer: В [ 670.353620][ T9] usb 7-1: SerialNumber: ы [ 670.568170][ T9685] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 670.749542][ T5847] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 670.808286][ T9685] EXT4-fs error (device loop6): ext4_map_blocks:780: inode #2: block 13: comm syz.6.1217: lblock 0 mapped to illegal pblock 13 (length 1) [ 670.911259][ T5847] usb 3-1: device descriptor read/64, error -71 [ 671.109886][ T9] usbhid 7-1:1.0: can't add hid device: -71 [ 671.116720][ T9] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 671.192314][ T9] usb 7-1: USB disconnect, device number 5 [ 671.203489][ T5847] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 671.380671][ T5847] usb 3-1: device descriptor read/64, error -71 [ 671.504842][ T5847] usb usb3-port1: attempt power cycle [ 671.720095][ T9716] overlayfs: failed to resolve './file0': -2 [ 671.875178][ T8500] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 671.920720][ T5847] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 671.968659][ T5847] usb 3-1: device descriptor read/8, error -71 [ 672.182000][ T9722] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1223'. [ 672.254443][ T5847] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 672.322176][ T5847] usb 3-1: device descriptor read/8, error -71 [ 672.456458][ T5847] usb usb3-port1: unable to enumerate USB device [ 673.370935][ T9735] netlink: 76 bytes leftover after parsing attributes in process `syz.6.1229'. [ 673.913168][ T9748] 9pnet_fd: Insufficient options for proto=fd [ 674.718058][ T9753] loop4: detected capacity change from 0 to 512 [ 674.918365][ T9753] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #15: comm syz.4.1236: iget: bad extended attribute block 1 [ 675.079555][ T9753] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.1236: couldn't read orphan inode 15 (err -117) [ 675.175091][ T9753] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 675.219273][ T9755] netlink: 'syz.2.1237': attribute type 4 has an invalid length. [ 675.227499][ T9755] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.1237'. [ 675.645751][ T5847] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 675.864875][ T5847] usb 5-1: not running at top speed; connect to a high speed hub [ 675.935686][ T5847] usb 5-1: config 1 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 675.947200][ T5847] usb 5-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 675.960908][ T5847] usb 5-1: config 1 interface 0 has no altsetting 0 [ 676.027340][ T5847] usb 5-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.40 [ 676.037143][ T5847] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.045704][ T5847] usb 5-1: Product: ࠦ㰉퀊ዻ쑘쉭舄ᖛꉊ祜僶⃰뇌쓭趷蹨ཬ늭뉳벳槗復ￔ㹣ᆓ髊叙뀓ợ⮙〟茧ꮡ삨篨﷡黑脦ꢽ榄䝶㨳霧칠헹崕넼揅ᅪ؅禶斮듺饣鞑裺瘜㫶珤㛏㗅枅룛⧘插悘搩흃玻岫㿶᭞ꓼ幈뒦癮撖㋷圔繼畮뎡墔ᭉꦥஃ逘ꪍ臣Ỿ浺 [ 676.077637][ T5847] usb 5-1: Manufacturer: В [ 676.082733][ T5847] usb 5-1: SerialNumber: ы [ 676.089591][ T9770] tipc: Can't bind to reserved service type 1 [ 676.152454][ T9753] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 676.380527][ T9753] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #2: block 13: comm syz.4.1236: lblock 0 mapped to illegal pblock 13 (length 1) [ 676.799542][ T5847] usbhid 5-1:1.0: can't add hid device: -71 [ 676.806298][ T5847] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 676.901298][ T5847] usb 5-1: USB disconnect, device number 26 [ 677.221479][ T9758] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 13: invalid block bitmap [ 677.672562][ T5799] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 678.179734][ T30] audit: type=1326 audit(1751249666.366:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9796 comm="syz.0.1251" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f237098e929 code=0x0 [ 678.397679][ T9806] overlayfs: failed to resolve './file1': -2 [ 678.899439][ T9815] bond0: option mode: unable to set because the bond device has slaves [ 678.959327][ T9806] loop4: detected capacity change from 0 to 2048 [ 679.110753][ T9806] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 679.624166][ T9824] FAULT_INJECTION: forcing a failure. [ 679.624166][ T9824] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 679.638022][ T9824] CPU: 1 UID: 0 PID: 9824 Comm: syz.6.1257 Tainted: G W 6.16.0-rc4-syzkaller #0 PREEMPT(undef) [ 679.638205][ T9824] Tainted: [W]=WARN [ 679.638258][ T9824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 679.638348][ T9824] Call Trace: [ 679.638401][ T9824] [ 679.638456][ T9824] __dump_stack+0x26/0x30 [ 679.638637][ T9824] dump_stack_lvl+0x1df/0x270 [ 679.638832][ T9824] dump_stack+0x1e/0x25 [ 679.638993][ T9824] should_fail_ex+0x7dc/0x8a0 [ 679.639189][ T9824] should_fail+0x2a/0x40 [ 679.639339][ T9824] should_fail_usercopy+0x2e/0x40 [ 679.639515][ T9824] _copy_from_user+0x33/0x100 [ 679.639681][ T9824] ___sys_sendmsg+0x11b/0x3b0 [ 679.639852][ T9824] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 679.640074][ T9824] ? __rcu_read_unlock+0x6d/0xd0 [ 679.640231][ T9824] ? __fget_files+0x3b4/0x4a0 [ 679.640376][ T9824] ? __fget_files+0x3b9/0x4a0 [ 679.640525][ T9824] ? kmsan_get_metadata+0xfb/0x160 [ 679.640734][ T9824] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 679.640947][ T9824] __x64_sys_sendmsg+0x211/0x3e0 [ 679.641093][ T9824] ? fput+0x113/0x160 [ 679.641240][ T9824] ? kmsan_get_metadata+0xfb/0x160 [ 679.641435][ T9824] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 679.641633][ T9824] ? kmsan_get_metadata+0xfb/0x160 [ 679.641855][ T9824] x64_sys_call+0x32fb/0x3db0 [ 679.642054][ T9824] do_syscall_64+0xd9/0x210 [ 679.642203][ T9824] ? irqentry_exit+0x16/0x60 [ 679.642402][ T9824] ? clear_bhb_loop+0x40/0x90 [ 679.642562][ T9824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.642721][ T9824] RIP: 0033:0x7fdfa878e929 [ 679.642831][ T9824] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 679.642961][ T9824] RSP: 002b:00007fdfa9586038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 679.643098][ T9824] RAX: ffffffffffffffda RBX: 00007fdfa89b5fa0 RCX: 00007fdfa878e929 [ 679.643205][ T9824] RDX: 0000000000000040 RSI: 0000200000000280 RDI: 0000000000000004 [ 679.643300][ T9824] RBP: 00007fdfa9586090 R08: 0000000000000000 R09: 0000000000000000 [ 679.643393][ T9824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 679.643481][ T9824] R13: 0000000000000000 R14: 00007fdfa89b5fa0 R15: 00007ffc768c8c28 [ 679.643616][ T9824] [ 680.520265][ T5854] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 680.726438][ T5854] usb 3-1: config 0 has an invalid interface number: 3 but max is 0 [ 680.735320][ T5854] usb 3-1: config 0 has no interface number 0 [ 680.742494][ T5854] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 680.752049][ T5854] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.872064][ T5854] usb 3-1: config 0 descriptor?? [ 680.901101][ T9838] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1260'. [ 680.933528][ T5854] cp210x 3-1:0.3: cp210x converter detected [ 681.397233][ T5854] cp210x 3-1:0.3: failed to get vendor val 0x000e size 3: -32 [ 681.456634][ T5854] usb 3-1: cp210x converter now attached to ttyUSB0 [ 681.591148][ T9849] ceph: Unexpected value for 'acl' [ 682.610552][ T5847] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 682.662245][ T9850] loop6: detected capacity change from 0 to 8192 [ 682.975944][ T9854] loop4: detected capacity change from 0 to 64 [ 683.872852][ T5854] usb 3-1: USB disconnect, device number 29 [ 684.029837][ T5854] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 684.042918][ T5854] cp210x 3-1:0.3: device disconnected [ 685.258171][ T9879] overlayfs: failed to resolve './file1': -2 [ 686.154178][ T9879] loop6: detected capacity change from 0 to 2048 [ 686.380152][ T9879] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 687.246975][ T9893] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1277'. [ 687.689855][ T5847] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 687.895419][ T5847] usb 7-1: Using ep0 maxpacket: 16 [ 687.945469][ T5847] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 687.957441][ T5847] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 687.967898][ T5847] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 687.982809][ T5847] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 687.992810][ T5847] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 688.273068][ T5847] usb 7-1: config 0 descriptor?? [ 688.627649][ T9900] loop6: detected capacity change from 0 to 512 [ 688.770361][ T9900] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 688.981493][ T9900] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 689.055242][ T9900] EXT4-fs (loop6): orphan cleanup on readonly fs [ 689.250497][ T9900] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #16: comm syz.6.1279: corrupted inode contents [ 689.349478][ T9900] EXT4-fs (loop6): Remounting filesystem read-only [ 689.408389][ T9900] EXT4-fs (loop6): 1 truncate cleaned up [ 689.583745][ T3992] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 689.595258][ T3992] Quota error (device loop6): write_blk: dquota write failed [ 689.603237][ T3992] Quota error (device loop6): remove_free_dqentry: Can't write block (5) with free entries [ 689.613676][ T3992] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 689.628392][ T3992] Quota error (device loop6): write_blk: dquota write failed [ 689.637991][ T3992] Quota error (device loop6): free_dqentry: Can't move quota data block (5) to free list [ 689.648597][ T3992] EXT4-fs (loop6): Quota write (off=8, len=24) cancelled because transaction is not started [ 689.660265][ T3992] Quota error (device loop6): v2_write_file_info: Can't write info structure [ 689.670028][ T3992] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 690.058355][ T9900] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 690.456673][ T9910] IPv6: sit1: Disabled Multicast RS [ 690.470587][ T9910] sit1: entered allmulticast mode [ 690.617047][ T5847] usbhid 7-1:0.0: can't add hid device: -71 [ 690.630718][ T5847] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 690.650842][ T5847] usb 7-1: USB disconnect, device number 6 [ 691.133109][ T9925] mmap: syz.4.1288 (9925) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 691.324497][ T9926] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1284'. [ 691.337360][ T8500] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 692.000515][ T9934] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1291'. [ 692.010210][ T9934] nbd: socks must be embedded in a SOCK_ITEM attr [ 692.509087][ T49] Bluetooth: hci5: command 0x0406 tx timeout [ 693.143387][ T9943] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1296'. [ 693.152936][ T9943] netlink: 'syz.6.1296': attribute type 2 has an invalid length. [ 694.689570][ T9950] loop6: detected capacity change from 0 to 32768 [ 694.699871][ T9950] XFS: noikeep mount option is deprecated. [ 694.824711][ T9950] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 695.822254][ T9950] XFS (loop6): Ending clean mount [ 695.869492][ T9950] XFS (loop6): Quotacheck needed: Please wait. [ 696.039534][ T9950] XFS (loop6): Quotacheck: Done. [ 696.191312][ T9966] gfs2: path_lookup on c::: returned error -2 [ 697.098307][ T8500] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 698.039752][ T9978] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1309'. [ 699.481324][ T9992] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 699.500493][ T9992] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 699.520851][ T9992] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 699.548006][ T9992] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 699.570388][ T9992] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 700.417801][ T9996] loop6: detected capacity change from 0 to 4096 [ 700.438898][ T9996] ntfs3: Unknown parameter '/dev/loop#' [ 700.596220][ T9996] loop9: detected capacity change from 0 to 8 [ 700.640439][ T9996] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 700.646204][ T9996] loop9: partition table partially beyond EOD, truncated [ 700.654789][ T9996] loop9: p1 size 81768186 extends beyond EOD, truncated [ 700.803822][T10005] loop6: detected capacity change from 0 to 256 [ 701.273004][T10005] FAT-fs (loop6): Directory bread(block 64) failed [ 701.280073][T10005] FAT-fs (loop6): Directory bread(block 65) failed [ 701.287052][T10005] FAT-fs (loop6): Directory bread(block 66) failed [ 701.295930][T10005] FAT-fs (loop6): Directory bread(block 67) failed [ 701.303308][T10005] FAT-fs (loop6): Directory bread(block 68) failed [ 701.310374][T10005] FAT-fs (loop6): Directory bread(block 69) failed [ 701.317409][T10005] FAT-fs (loop6): Directory bread(block 70) failed [ 701.324494][T10005] FAT-fs (loop6): Directory bread(block 71) failed [ 701.331805][T10005] FAT-fs (loop6): Directory bread(block 72) failed [ 701.338643][T10005] FAT-fs (loop6): Directory bread(block 73) failed [ 701.618141][T10013] loop4: detected capacity change from 0 to 1024 [ 701.631173][ T9992] Bluetooth: hci6: command tx timeout [ 701.871995][T10013] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 701.975843][T10013] EXT4-fs error (device loop4): ext4_free_inode:354: comm syz.4.1322: bit already cleared for inode 15 [ 702.140058][T10013] tmpfs: Group quota block hardlimit too large. [ 702.291351][ T8660] udevd[8660]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 702.451440][T10026] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 702.640179][T10021] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 702.746092][T10024] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 702.963537][ T5799] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 703.103863][ T9991] chnl_net:caif_netlink_parms(): no params data found [ 703.636815][ T1104] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.704267][ T9992] Bluetooth: hci6: command tx timeout [ 703.809439][ T1104] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.990637][ T1104] team0: Port device netdevsim1 removed [ 704.003511][ T1104] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.339301][T10044] kAFS: unparsable volume name [ 704.351880][ T1104] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.619122][ T1104] bond1 (unregistering): (slave gretap1): Releasing active interface [ 705.819902][ T9992] Bluetooth: hci6: command tx timeout [ 705.980226][ T5847] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 706.004768][ T1104] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 706.122723][T10062] netlink: 'syz.6.1339': attribute type 1 has an invalid length. [ 706.161231][ T1104] bond0 (unregistering): Released all slaves [ 706.211593][ T5847] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 706.221492][ T5847] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 706.230042][ T5847] usb 3-1: Product: syz [ 706.234507][ T5847] usb 3-1: Manufacturer: syz [ 706.239531][ T5847] usb 3-1: SerialNumber: syz [ 706.305968][ T5847] usb 3-1: config 0 descriptor?? [ 706.332636][ T5847] ch341 3-1:0.0: ch341-uart converter detected [ 706.343891][ T1104] bond1 (unregistering): Released all slaves [ 706.379319][ T1104] bond2 (unregistering): Released all slaves [ 706.419901][ T1104] bond3 (unregistering): Released all slaves [ 706.445398][T10067] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 706.461378][ T1104] bond4 (unregistering): Released all slaves [ 706.489250][ T1104] bond5 (unregistering): Released all slaves [ 706.886734][T10062] 8021q: adding VLAN 0 to HW filter on device bond1 [ 706.997171][T10065] 8021q: adding VLAN 0 to HW filter on device bond1 [ 707.006649][T10065] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 707.031615][T10065] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 707.108898][T10063] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 707.257562][ T9991] bridge0: port 1(bridge_slave_0) entered blocking state [ 707.265609][ T9991] bridge0: port 1(bridge_slave_0) entered disabled state [ 707.273780][ T9991] bridge_slave_0: entered allmulticast mode [ 707.283884][ T9991] bridge_slave_0: entered promiscuous mode [ 707.391729][ T9991] bridge0: port 2(bridge_slave_1) entered blocking state [ 707.400377][ T9991] bridge0: port 2(bridge_slave_1) entered disabled state [ 707.408224][ T9991] bridge_slave_1: entered allmulticast mode [ 707.418110][ T9991] bridge_slave_1: entered promiscuous mode [ 707.495788][ T1104] mac80211_hwsim hwsim4 wlan0 (unregistering): left promiscuous mode [ 707.642984][T10058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 707.655276][T10058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 707.869628][ T9992] Bluetooth: hci6: command tx timeout [ 708.170612][ T5847] ch341-uart ttyUSB0: failed to read break control: -71 [ 708.178057][ T5847] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 708.321417][ T9991] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 708.348060][T10081] overlayfs: failed to clone upperpath [ 708.359881][ T5847] usb 3-1: USB disconnect, device number 30 [ 708.369471][ T5847] ch341 3-1:0.0: device disconnected [ 708.610321][ T9991] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 709.499583][ T1104] hsr_slave_0: left promiscuous mode [ 709.530501][ T1104] hsr_slave_1: left promiscuous mode [ 709.594061][ T1104] veth1_macvtap: left promiscuous mode [ 709.601010][ T1104] veth0_macvtap: left promiscuous mode [ 710.951868][T10107] loop4: detected capacity change from 0 to 256 [ 711.253360][ T3992] smc: removing ib device syz1 [ 711.474087][ T9991] team0: Port device team_slave_0 added [ 711.510257][ T9991] team0: Port device team_slave_1 added [ 713.163931][ T9991] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 713.172921][ T9991] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 713.199927][ T9991] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 713.621277][ T9991] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 713.628557][ T9991] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 713.656828][ T9991] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 713.921260][T10119] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1355'. [ 714.243066][T10120] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 714.690190][T10117] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 715.331109][ T9991] hsr_slave_0: entered promiscuous mode [ 715.345180][ T9991] hsr_slave_1: entered promiscuous mode [ 716.727158][T10142] loop4: detected capacity change from 0 to 2048 [ 716.975493][T10142] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 717.027130][ T9991] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 717.212580][ T9991] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 717.319602][T10136] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1353'. [ 717.330949][ T9991] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 717.488246][ T9991] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 717.906408][T10136] loop6: detected capacity change from 0 to 1024 [ 717.971500][T10136] hfsplus: Unknown parameter '\Đ+ jC+[' [ 718.976424][ T9991] 8021q: adding VLAN 0 to HW filter on device bond0 [ 719.206877][ T9991] 8021q: adding VLAN 0 to HW filter on device team0 [ 719.346569][ T1104] bridge0: port 1(bridge_slave_0) entered blocking state [ 719.354421][ T1104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 719.393768][ T37] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 719.458351][ T1104] bridge0: port 2(bridge_slave_1) entered blocking state [ 719.466103][ T1104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 719.583443][ T37] usb 5-1: Using ep0 maxpacket: 32 [ 719.617571][T10165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 719.632859][T10165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 719.670833][ T37] usb 5-1: device descriptor read/all, error -71 [ 720.625517][T10179] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 720.885495][T10178] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 722.113173][ T9991] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 722.603497][ T30] audit: type=1326 audit(1751249710.806:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10197 comm="syz.2.1373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7698e929 code=0x7ffc0000 [ 722.626809][ T30] audit: type=1326 audit(1751249710.806:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10197 comm="syz.2.1373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7698e929 code=0x7ffc0000 [ 722.723992][T10195] loop6: detected capacity change from 0 to 2048 [ 722.751630][T10198] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 722.821929][ T30] audit: type=1326 audit(1751249710.856:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10197 comm="syz.2.1373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fad7698e929 code=0x7ffc0000 [ 722.845173][T10195] ext4: Unknown parameter 'dont_hash' [ 722.852205][ T30] audit: type=1326 audit(1751249710.856:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10197 comm="syz.2.1373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7698e929 code=0x7ffc0000 [ 722.875800][ T30] audit: type=1326 audit(1751249710.856:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10197 comm="syz.2.1373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7698e929 code=0x7ffc0000 [ 722.899730][ T30] audit: type=1326 audit(1751249710.866:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10197 comm="syz.2.1373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fad7698e929 code=0x7ffc0000 [ 722.922794][ T30] audit: type=1326 audit(1751249710.876:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10197 comm="syz.2.1373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7698e929 code=0x7ffc0000 [ 722.945840][ T30] audit: type=1326 audit(1751249710.886:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10197 comm="syz.2.1373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fad7698e929 code=0x7ffc0000 [ 722.969068][ T30] audit: type=1326 audit(1751249710.886:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10197 comm="syz.2.1373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7698e929 code=0x7ffc0000 [ 722.993424][ T30] audit: type=1326 audit(1751249710.896:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10197 comm="syz.2.1373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fad7698e929 code=0x7ffc0000 [ 725.531204][T10242] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 725.584034][ T5849] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 725.593778][ T5849] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 725.697751][ T9991] veth0_vlan: entered promiscuous mode [ 725.710470][ T12] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 725.773503][T10242] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 725.819244][ T4058] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 725.837559][ T9991] veth1_vlan: entered promiscuous mode [ 725.946004][T10245] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 725.964627][ T8766] wlan1: authentication with 08:02:11:00:00:00 timed out [ 726.171290][ T9991] veth0_macvtap: entered promiscuous mode [ 726.211383][ T9991] veth1_macvtap: entered promiscuous mode [ 726.316009][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 726.322946][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 726.420803][ T9991] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 726.505324][ T9991] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 726.622043][ T9991] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.631364][ T9991] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.640716][ T9991] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.649924][ T9991] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 727.755604][T10269] loop4: detected capacity change from 0 to 1024 [ 728.109286][T10269] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 728.333613][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 728.333700][ T30] audit: type=1326 audit(1751249716.526:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10266 comm="syz.4.1387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ec298e929 code=0x7ffc0000 [ 728.501200][ T30] audit: type=1326 audit(1751249716.576:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10266 comm="syz.4.1387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ec298e929 code=0x7ffc0000 [ 728.524590][ T30] audit: type=1326 audit(1751249716.586:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10266 comm="syz.4.1387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0ec298e929 code=0x7ffc0000 [ 728.550164][ T30] audit: type=1326 audit(1751249716.586:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10266 comm="syz.4.1387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ec298e929 code=0x7ffc0000 [ 728.570864][T10269] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 728.573251][ T30] audit: type=1326 audit(1751249716.586:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10266 comm="syz.4.1387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ec298e929 code=0x7ffc0000 [ 728.606899][ T30] audit: type=1326 audit(1751249716.586:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10266 comm="syz.4.1387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0ec298e929 code=0x7ffc0000 [ 728.630371][ T30] audit: type=1326 audit(1751249716.616:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10266 comm="syz.4.1387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ec298e929 code=0x7ffc0000 [ 728.654414][ T30] audit: type=1326 audit(1751249716.646:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10266 comm="syz.4.1387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0ec298e929 code=0x7ffc0000 [ 728.677690][ T30] audit: type=1326 audit(1751249716.646:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10266 comm="syz.4.1387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ec298e929 code=0x7ffc0000 [ 728.700785][ T30] audit: type=1326 audit(1751249716.656:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10266 comm="syz.4.1387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0ec298e929 code=0x7ffc0000 [ 729.103978][ T5799] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 730.313015][T10309] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 730.313015][T10309] The task syz.6.1391 (10309) triggered the difference, watch for misbehavior. [ 731.364936][ T37] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 731.374674][ T37] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 731.390772][T10319] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 731.512079][T10324] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 731.591195][T10319] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 732.322104][ T3635] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 732.442691][ T3992] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 732.569397][ T3842] wlan1: authentication with 08:02:11:00:00:00 timed out [ 733.549492][T10345] loop6: detected capacity change from 0 to 2048 [ 733.624017][T10345] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 733.727175][T10345] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 736.101950][T10372] gfs2: path_lookup on c::: returned error -2 [ 736.522730][ T3635] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 736.531443][ T3635] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 736.910737][ T4058] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 736.919111][ T4058] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 737.431133][T10392] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1412'. [ 738.271250][T10396] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1310'. [ 738.280915][T10396] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1310'. [ 739.433541][T10414] netlink: zone id is out of range [ 739.638355][T10415] loop6: detected capacity change from 0 to 2048 [ 739.872497][T10415] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 740.006790][T10415] EXT4-fs (loop6): shut down requested (1) [ 740.027727][T10427] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1423'. [ 740.061616][T10415] netlink: 'syz.6.1420': attribute type 1 has an invalid length. [ 740.160454][T10415] 8021q: adding VLAN 0 to HW filter on device bond2 [ 740.280220][T10432] ceph: Unexpected value for 'acl' [ 740.539042][ T37] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 740.678580][ T8500] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 740.775880][ T37] usb 3-1: Using ep0 maxpacket: 32 [ 740.835426][ T37] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 740.845592][ T37] usb 3-1: config 0 has no interface number 0 [ 740.924891][ T37] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 740.935789][ T37] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.945537][ T37] usb 3-1: Product: syz [ 740.950127][ T37] usb 3-1: Manufacturer: syz [ 740.954996][ T37] usb 3-1: SerialNumber: syz [ 741.113588][ T37] usb 3-1: config 0 descriptor?? [ 741.183398][ T37] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 741.219863][T10436] loop4: detected capacity change from 0 to 2048 [ 741.371928][ T37] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 741.417723][T10436] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 741.499842][ T37] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 741.612854][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 741.677408][ T37] usb 3-1: USB disconnect, device number 31 [ 741.692482][T10435] netlink: 'syz.4.1425': attribute type 10 has an invalid length. [ 741.714055][T10435] team0: Device hsr_slave_1 failed to register rx_handler [ 741.748214][ T37] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 741.847189][ T37] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 741.862530][ T37] quatech2 3-1:0.51: device disconnected [ 741.979770][T10444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 741.990274][T10444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 742.179255][ T5849] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 742.402389][ T5849] usb 5-1: Using ep0 maxpacket: 32 [ 742.520656][ T5849] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 742.531659][ T5849] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.540291][ T5849] usb 5-1: Product: syz [ 742.544756][ T5849] usb 5-1: Manufacturer: syz [ 742.550044][ T5849] usb 5-1: SerialNumber: syz [ 742.729341][ T5849] usb 5-1: config 0 descriptor?? [ 743.184661][T10461] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1431'. [ 743.194536][T10461] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1431'. [ 743.831271][ T5849] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: failure sending bit rate [ 743.840370][ T5849] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: probe with driver RobotFuzz Open Source InterFace, OSIF failed with error -71 [ 743.973454][ T5849] usb 5-1: USB disconnect, device number 30 [ 745.677702][T10492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 746.108452][T10489] loop4: detected capacity change from 0 to 2048 [ 746.365049][T10489] NILFS (loop4): invalid segment: Magic number mismatch [ 746.372888][T10489] NILFS (loop4): trying rollback from an earlier position [ 746.534249][T10487] loop7: detected capacity change from 0 to 8192 [ 746.600279][T10489] NILFS (loop4): invalid segment: Checksum error in segment payload [ 746.608597][T10489] NILFS (loop4): error -22 while searching super root [ 746.649828][T10487] NILFS (loop7): broken superblock, retrying with spare superblock (blocksize = 1024) [ 746.767704][T10487] NILFS (loop7): broken superblock, retrying with spare superblock (blocksize = 2048) [ 746.778122][T10487] NILFS (loop7): mounting unchecked fs [ 746.815143][T10504] FAULT_INJECTION: forcing a failure. [ 746.815143][T10504] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 746.829094][T10504] CPU: 0 UID: 0 PID: 10504 Comm: syz.6.1445 Tainted: G W 6.16.0-rc4-syzkaller #0 PREEMPT(undef) [ 746.829277][T10504] Tainted: [W]=WARN [ 746.829331][T10504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 746.829412][T10504] Call Trace: [ 746.829469][T10504] [ 746.829521][T10504] __dump_stack+0x26/0x30 [ 746.829715][T10504] dump_stack_lvl+0x1df/0x270 [ 746.829900][T10504] dump_stack+0x1e/0x25 [ 746.830062][T10504] should_fail_ex+0x7dc/0x8a0 [ 746.830260][T10504] should_fail+0x2a/0x40 [ 746.830413][T10504] should_fail_usercopy+0x2e/0x40 [ 746.830606][T10504] _copy_from_user+0x33/0x100 [ 746.830774][T10504] do_sock_getsockopt+0x1f6/0x980 [ 746.830957][T10504] __x64_sys_getsockopt+0x32e/0x520 [ 746.831104][T10504] ? kmsan_save_stack_with_flags+0x60/0x60 [ 746.831314][T10504] ? kmsan_save_stack_with_flags+0x60/0x60 [ 746.831516][T10504] x64_sys_call+0x165d/0x3db0 [ 746.831714][T10504] do_syscall_64+0xd9/0x210 [ 746.831862][T10504] ? irqentry_exit+0x16/0x60 [ 746.832062][T10504] ? clear_bhb_loop+0x40/0x90 [ 746.832222][T10504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 746.832379][T10504] RIP: 0033:0x7fdfa878e929 [ 746.832489][T10504] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 746.832623][T10504] RSP: 002b:00007fdfa9586038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 746.832763][T10504] RAX: ffffffffffffffda RBX: 00007fdfa89b5fa0 RCX: 00007fdfa878e929 [ 746.832869][T10504] RDX: 000000000000001a RSI: 0000000000000084 RDI: 0000000000000004 [ 746.832957][T10504] RBP: 00007fdfa9586090 R08: 0000200000000180 R09: 0000000000000000 [ 746.833055][T10504] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 746.833149][T10504] R13: 0000000000000000 R14: 00007fdfa89b5fa0 R15: 00007ffc768c8c28 [ 746.833283][T10504] [ 747.424068][T10487] NILFS (loop7): recovery complete [ 747.520631][T10508] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 749.504978][T10530] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1453'. [ 751.633982][T10553] IPv6: sit1: Disabled Multicast RS [ 751.644546][T10553] sit1: entered allmulticast mode [ 752.365443][ T9] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 752.586212][ T9] usb 7-1: device descriptor read/64, error -71 [ 752.645579][T10562] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 752.813998][T10558] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 752.879051][ T9] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 752.943657][T10562] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 753.069216][ T9] usb 7-1: device descriptor read/64, error -71 [ 753.183314][ T9] usb usb7-port1: attempt power cycle [ 753.609894][ T9] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 753.679310][ T9] usb 7-1: device descriptor read/8, error -71 [ 753.948357][ T9] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 754.018121][ T9] usb 7-1: device descriptor read/8, error -71 [ 754.147756][ T9] usb usb7-port1: unable to enumerate USB device [ 754.318641][T10575] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1467'. [ 755.068062][T10590] IPv6: sit1: Disabled Multicast RS [ 755.078933][T10590] sit1: entered allmulticast mode [ 755.329583][ T5849] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 755.622626][ T5849] usb 3-1: config 0 has an invalid interface number: 216 but max is 0 [ 755.631464][ T5849] usb 3-1: config 0 has no interface number 0 [ 755.637851][ T5849] usb 3-1: config 0 interface 216 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 755.649316][ T5849] usb 3-1: config 0 interface 216 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 755.831952][T10588] loop7: detected capacity change from 0 to 32768 [ 755.926385][T10588] XFS (loop7): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 756.067979][ T5849] usb 3-1: New USB device found, idVendor=0499, idProduct=1002, bcdDevice=df.d7 [ 756.080137][ T5849] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 756.088452][ T5849] usb 3-1: Product: syz [ 756.094061][ T5849] usb 3-1: Manufacturer: syz [ 756.099360][ T5849] usb 3-1: SerialNumber: syz [ 756.272133][ T5849] usb 3-1: config 0 descriptor?? [ 756.374213][ T5849] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 756.434409][T10588] XFS (loop7): Ending clean mount [ 756.543582][T10588] netlink: 'syz.7.1471': attribute type 10 has an invalid length. [ 756.551979][T10588] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1471'. [ 756.584734][T10588] team0: Port device netdevsim1 added [ 756.784275][ T5849] snd-usb-audio 3-1:0.216: probe with driver snd-usb-audio failed with error -2 [ 756.916348][ T5849] usb 3-1: USB disconnect, device number 32 [ 757.054564][ T8988] udevd[8988]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.216/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 757.137702][ T9991] XFS (loop7): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 757.249397][ T9] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 757.420157][ T9] usb 5-1: device descriptor read/64, error -71 [ 757.699218][ T9] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 757.870392][ T9] usb 5-1: device descriptor read/64, error -71 [ 758.009423][ T9] usb usb5-port1: attempt power cycle [ 758.406933][ T9] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 758.471326][ T9] usb 5-1: device descriptor read/8, error -71 [ 758.739213][ T9] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 758.851438][ T9] usb 5-1: device descriptor read/8, error -71 [ 758.977640][ T9] usb usb5-port1: unable to enumerate USB device [ 759.510009][T10634] loop7: detected capacity change from 0 to 32768 [ 759.612405][T10634] XFS (loop7): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 759.781065][T10648] IPv6: sit1: Disabled Multicast RS [ 759.791610][T10648] sit1: entered allmulticast mode [ 760.076392][T10634] XFS (loop7): Ending clean mount [ 760.223876][T10634] netlink: 'syz.7.1482': attribute type 10 has an invalid length. [ 760.232989][T10634] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1482'. [ 760.350757][T10639] loop6: detected capacity change from 0 to 2048 [ 760.398310][ T9991] XFS (loop7): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 760.515085][T10639] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 760.789599][T10657] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1489'. [ 762.061901][T10662] loop7: detected capacity change from 0 to 32768 [ 762.200100][T10662] XFS (loop7): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 762.566864][T10662] XFS (loop7): Ending clean mount [ 762.702350][T10662] netlink: 'syz.7.1488': attribute type 10 has an invalid length. [ 762.711059][T10662] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1488'. [ 762.890437][ T9991] XFS (loop7): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 763.201226][T10682] loop6: detected capacity change from 0 to 2048 [ 763.495128][T10682] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 764.332704][T10700] loop4: detected capacity change from 0 to 8 [ 764.372564][T10700] squashfs: Unknown parameter '' [ 764.730270][T10705] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1501'. [ 765.489484][T10713] 9pnet_fd: Insufficient options for proto=fd [ 766.070722][ T5847] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 766.279624][ T5847] usb 8-1: device descriptor read/64, error -71 [ 766.559395][ T5847] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 766.771772][ T5847] usb 8-1: device descriptor read/64, error -71 [ 766.893170][ T5847] usb usb8-port1: attempt power cycle [ 767.170589][T10732] ip6tnl1: entered promiscuous mode [ 767.280396][ T5847] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 767.359817][ T5847] usb 8-1: device descriptor read/8, error -71 [ 767.649220][ T5847] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 767.682148][ T5847] usb 8-1: device descriptor read/8, error -71 [ 767.809797][ T5847] usb usb8-port1: unable to enumerate USB device [ 768.640139][ T5849] usb 7-1: new low-speed USB device number 11 using dummy_hcd [ 768.885476][ T5849] usb 7-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 768.897487][ T5849] usb 7-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 768.909059][ T5849] usb 7-1: config 0 interface 0 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 768.922434][ T5849] usb 7-1: config 0 interface 0 has no altsetting 0 [ 768.934417][ T5849] usb 7-1: New USB device found, idVendor=28bd, idProduct=0074, bcdDevice= 0.00 [ 768.944904][ T5849] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 769.110021][ T5849] usb 7-1: config 0 descriptor?? [ 769.120290][T10748] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 769.134460][T10748] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 769.227231][T10761] FAULT_INJECTION: forcing a failure. [ 769.227231][T10761] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 769.241541][T10761] CPU: 1 UID: 0 PID: 10761 Comm: syz.2.1519 Tainted: G W 6.16.0-rc4-syzkaller #0 PREEMPT(undef) [ 769.241728][T10761] Tainted: [W]=WARN [ 769.241782][T10761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 769.241861][T10761] Call Trace: [ 769.241915][T10761] [ 769.241973][T10761] __dump_stack+0x26/0x30 [ 769.242154][T10761] dump_stack_lvl+0x1df/0x270 [ 769.242341][T10761] dump_stack+0x1e/0x25 [ 769.242499][T10761] should_fail_ex+0x7dc/0x8a0 [ 769.242685][T10761] should_fail+0x2a/0x40 [ 769.242835][T10761] should_fail_usercopy+0x2e/0x40 [ 769.243024][T10761] _copy_from_user+0x33/0x100 [ 769.243189][T10761] ___sys_sendmsg+0x11b/0x3b0 [ 769.243351][T10761] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 769.243573][T10761] ? __rcu_read_unlock+0x6d/0xd0 [ 769.243726][T10761] ? __fget_files+0x3b4/0x4a0 [ 769.243869][T10761] ? __fget_files+0x3b9/0x4a0 [ 769.244019][T10761] ? kmsan_get_metadata+0xfb/0x160 [ 769.244204][T10761] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 769.244411][T10761] __x64_sys_sendmsg+0x211/0x3e0 [ 769.244560][T10761] ? fput+0x113/0x160 [ 769.244738][T10761] ? kmsan_get_metadata+0xfb/0x160 [ 769.244937][T10761] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 769.245147][T10761] ? kmsan_get_metadata+0xfb/0x160 [ 769.245366][T10761] x64_sys_call+0x32fb/0x3db0 [ 769.245552][T10761] do_syscall_64+0xd9/0x210 [ 769.245700][T10761] ? clear_bhb_loop+0x40/0x90 [ 769.245864][T10761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 769.246017][T10761] RIP: 0033:0x7fad7698e929 [ 769.246129][T10761] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 769.246254][T10761] RSP: 002b:00007fad77718038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 769.246395][T10761] RAX: ffffffffffffffda RBX: 00007fad76bb5fa0 RCX: 00007fad7698e929 [ 769.246501][T10761] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 769.246594][T10761] RBP: 00007fad77718090 R08: 0000000000000000 R09: 0000000000000000 [ 769.246685][T10761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 769.246770][T10761] R13: 0000000000000000 R14: 00007fad76bb5fa0 R15: 00007fffcb29d368 [ 769.246899][T10761] [ 771.689613][ T5849] usbhid 7-1:0.0: can't add hid device: -71 [ 771.696534][ T5849] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 771.763619][T10782] loop7: detected capacity change from 0 to 2048 [ 771.845943][ T5849] usb 7-1: USB disconnect, device number 11 [ 771.881239][T10782] udf: Bad value for 'partition' [ 772.600063][ T5847] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 772.869412][ T5847] usb 7-1: device descriptor read/64, error -71 [ 773.159139][ T5847] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 773.399905][ T5847] usb 7-1: device descriptor read/64, error -71 [ 773.517337][T10795] loop4: detected capacity change from 0 to 512 [ 773.540040][ T5847] usb usb7-port1: attempt power cycle [ 773.939438][ T5847] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 773.999138][ T5847] usb 7-1: device descriptor read/8, error -71 [ 774.270050][ T5847] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 774.364678][ T5847] usb 7-1: device descriptor read/8, error -71 [ 774.504289][ T5847] usb usb7-port1: unable to enumerate USB device [ 775.314682][T10820] ip6gre1: entered allmulticast mode [ 775.742326][T10827] FAULT_INJECTION: forcing a failure. [ 775.742326][T10827] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 775.756352][T10827] CPU: 0 UID: 0 PID: 10827 Comm: syz.6.1542 Tainted: G W 6.16.0-rc4-syzkaller #0 PREEMPT(undef) [ 775.756536][T10827] Tainted: [W]=WARN [ 775.756588][T10827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 775.756670][T10827] Call Trace: [ 775.756720][T10827] [ 775.756774][T10827] __dump_stack+0x26/0x30 [ 775.756947][T10827] dump_stack_lvl+0x1df/0x270 [ 775.757137][T10827] dump_stack+0x1e/0x25 [ 775.757300][T10827] should_fail_ex+0x7dc/0x8a0 [ 775.757501][T10827] should_fail+0x2a/0x40 [ 775.757655][T10827] should_fail_usercopy+0x2e/0x40 [ 775.757838][T10827] _copy_from_user+0x33/0x100 [ 775.758003][T10827] ___sys_sendmsg+0x11b/0x3b0 [ 775.758171][T10827] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 775.758393][T10827] ? __rcu_read_unlock+0x6d/0xd0 [ 775.758546][T10827] ? __fget_files+0x3b4/0x4a0 [ 775.758686][T10827] ? __fget_files+0x3b9/0x4a0 [ 775.758829][T10827] ? kmsan_get_metadata+0xfb/0x160 [ 775.759018][T10827] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 775.759229][T10827] __x64_sys_sendmsg+0x211/0x3e0 [ 775.759368][T10827] ? fput+0x113/0x160 [ 775.759523][T10827] ? kmsan_get_metadata+0xfb/0x160 [ 775.759711][T10827] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 775.759908][T10827] ? kmsan_get_metadata+0xfb/0x160 [ 775.760119][T10827] x64_sys_call+0x32fb/0x3db0 [ 775.760310][T10827] do_syscall_64+0xd9/0x210 [ 775.760469][T10827] ? irqentry_exit+0x16/0x60 [ 775.760656][T10827] ? clear_bhb_loop+0x40/0x90 [ 775.760811][T10827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 775.760964][T10827] RIP: 0033:0x7fdfa878e929 [ 775.761068][T10827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 775.761193][T10827] RSP: 002b:00007fdfa9586038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 775.761328][T10827] RAX: ffffffffffffffda RBX: 00007fdfa89b5fa0 RCX: 00007fdfa878e929 [ 775.761441][T10827] RDX: 0000000000004000 RSI: 0000200000000280 RDI: 0000000000000003 [ 775.761538][T10827] RBP: 00007fdfa9586090 R08: 0000000000000000 R09: 0000000000000000 [ 775.761631][T10827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 775.761719][T10827] R13: 0000000000000000 R14: 00007fdfa89b5fa0 R15: 00007ffc768c8c28 [ 775.761857][T10827] [ 776.913651][T10833] Bluetooth: Error in BCSP hdr checksum [ 777.061171][T10840] FAULT_INJECTION: forcing a failure. [ 777.061171][T10840] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 777.076662][T10840] CPU: 0 UID: 0 PID: 10840 Comm: syz.4.1546 Tainted: G W 6.16.0-rc4-syzkaller #0 PREEMPT(undef) [ 777.076837][T10840] Tainted: [W]=WARN [ 777.076888][T10840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 777.076970][T10840] Call Trace: [ 777.077028][T10840] [ 777.077079][T10840] __dump_stack+0x26/0x30 [ 777.077254][T10840] dump_stack_lvl+0x1df/0x270 [ 777.077437][T10840] dump_stack+0x1e/0x25 [ 777.077600][T10840] should_fail_ex+0x7dc/0x8a0 [ 777.077795][T10840] should_fail+0x2a/0x40 [ 777.077949][T10840] should_fail_usercopy+0x2e/0x40 [ 777.078140][T10840] _copy_from_user+0x33/0x100 [ 777.078318][T10833] loop6: detected capacity change from 0 to 256 [ 777.078304][T10840] __sys_bpf+0x2c8/0xe60 [ 777.078501][T10840] __x64_sys_bpf+0xa4/0xf0 [ 777.078673][T10840] x64_sys_call+0x2c3b/0x3db0 [ 777.078893][T10840] do_syscall_64+0xd9/0x210 [ 777.079067][T10840] ? irqentry_exit+0x16/0x60 [ 777.079279][T10840] ? clear_bhb_loop+0x40/0x90 [ 777.079458][T10840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 777.079635][T10840] RIP: 0033:0x7f0ec298e929 [ 777.079758][T10840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 777.079906][T10840] RSP: 002b:00007f0ec37b6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 777.080077][T10840] RAX: ffffffffffffffda RBX: 00007f0ec2bb5fa0 RCX: 00007f0ec298e929 [ 777.080199][T10840] RDX: 0000000000000020 RSI: 00002000000001c0 RDI: 0000000000000002 [ 777.080307][T10840] RBP: 00007f0ec37b6090 R08: 0000000000000000 R09: 0000000000000000 [ 777.080412][T10840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 777.080512][T10840] R13: 0000000000000000 R14: 00007f0ec2bb5fa0 R15: 00007ffdf1082808 [ 777.080662][T10840] [ 777.532712][ T3842] Bluetooth: Error in BCSP hdr checksum [ 777.635939][T10842] loop7: detected capacity change from 0 to 1024 [ 777.796456][ T3842] Bluetooth: Error in BCSP hdr checksum [ 777.982055][T10842] hfsplus: Unknown parameter '\Đ+ jC+[' [ 778.538939][T10852] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 778.707243][T10852] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 778.770000][T10855] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 778.900841][ T9992] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 779.520520][T10867] ip6gre1: entered allmulticast mode [ 780.466273][T10877] loop6: detected capacity change from 0 to 2048 [ 780.922229][T10877] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 781.215299][T10877] EXT4-fs error (device loop6): ext4_ext_precache:632: inode #2: comm syz.6.1558: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 781.638196][ T9992] Bluetooth: hci3: unexpected event for opcode 0x2042 [ 781.851650][ T8500] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 783.385697][T10913] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 783.460403][T10874] loop4: detected capacity change from 0 to 1024 [ 783.491223][ T9] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 783.553606][T10919] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 783.574130][T10874] hfsplus: Unknown parameter '\Đ+ jC+[' [ 783.609771][T10913] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 783.679069][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 783.733664][ T9] usb 7-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 783.743548][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.831427][ T9] usb 7-1: config 0 descriptor?? [ 783.876424][ T9] gspca_main: sunplus-2.14.0 probing 041e:400b [ 784.222060][T10912] random: crng reseeded on system resumption [ 784.440575][ T9] gspca_sunplus: reg_w_riv err -110 [ 784.446384][ T9] sunplus 7-1:0.0: probe with driver sunplus failed with error -110 [ 784.585719][ T9] usb 7-1: USB disconnect, device number 16 [ 785.750506][ T9992] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 785.759651][ T9992] Bluetooth: hci3: Injecting HCI hardware error event [ 785.767348][ T9992] Bluetooth: hci3: hardware error 0x00 [ 786.052566][T10940] overlayfs: failed to clone upperpath [ 787.742480][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 787.749508][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 787.781692][ T9992] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 790.532510][T10977] fuse: Bad value for 'fd' [ 790.556452][T10979] overlayfs: upper fs does not support tmpfile. [ 790.909465][ T9] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 791.176803][ T9] usb 5-1: not running at top speed; connect to a high speed hub [ 791.222221][ T9] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 791.233762][ T9] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 791.428430][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 791.438396][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.446949][ T9] usb 5-1: Product: ﹭ඤᑴ팵靠볒웋ᢉ厳ꦩ줏謹፱뺲稣칳㴰幹퐉 [ 791.457111][ T9] usb 5-1: Manufacturer: Ѕ [ 791.462087][ T9] usb 5-1: SerialNumber: 遈ｍ젔漫浔渍臶熒㉓綠ꣂ璉ൂꡒ價귵弘ꜜ䠎䷑￤Ḗㄼ쎺ोꟀ㆐ [ 791.923630][T10996] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 792.041048][ T9] cdc_ncm 5-1:1.0: bind() failure [ 792.060845][ T9] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 792.068061][ T9] cdc_ncm 5-1:1.1: bind() failure [ 792.255204][ T9] usb 5-1: USB disconnect, device number 35 [ 793.424876][T11013] loop4: detected capacity change from 0 to 1024 [ 793.826020][T11020] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1601'. [ 793.840522][T11013] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1598'. [ 793.921935][T11022] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1598'. [ 794.403195][T11027] FAULT_INJECTION: forcing a failure. [ 794.403195][T11027] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 794.417047][T11027] CPU: 1 UID: 0 PID: 11027 Comm: syz.6.1603 Tainted: G W 6.16.0-rc4-syzkaller #0 PREEMPT(undef) [ 794.417226][T11027] Tainted: [W]=WARN [ 794.417281][T11027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 794.417369][T11027] Call Trace: [ 794.417424][T11027] [ 794.417479][T11027] __dump_stack+0x26/0x30 [ 794.417667][T11027] dump_stack_lvl+0x1df/0x270 [ 794.417851][T11027] dump_stack+0x1e/0x25 [ 794.418018][T11027] should_fail_ex+0x7dc/0x8a0 [ 794.418215][T11027] should_fail+0x2a/0x40 [ 794.418372][T11027] should_fail_usercopy+0x2e/0x40 [ 794.418563][T11027] _copy_to_user+0x35/0x120 [ 794.418729][T11027] simple_read_from_buffer+0x1b2/0x340 [ 794.418943][T11027] proc_fail_nth_read+0x1d2/0x2c0 [ 794.419114][T11027] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 794.419276][T11027] vfs_read+0x279/0xf00 [ 794.419451][T11027] ? stack_depot_save_flags+0x35/0x7b0 [ 794.419618][T11027] ? kmsan_get_metadata+0xfb/0x160 [ 794.419811][T11027] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 794.420034][T11027] __x64_sys_read+0x1fb/0x4d0 [ 794.420250][T11027] x64_sys_call+0x39db/0x3db0 [ 794.420443][T11027] do_syscall_64+0xd9/0x210 [ 794.420603][T11027] ? irqentry_exit+0x16/0x60 [ 794.420798][T11027] ? clear_bhb_loop+0x40/0x90 [ 794.420963][T11027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 794.421117][T11027] RIP: 0033:0x7fdfa878d33c [ 794.421229][T11027] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 794.421359][T11027] RSP: 002b:00007fdfa9586030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 794.421498][T11027] RAX: ffffffffffffffda RBX: 00007fdfa89b5fa0 RCX: 00007fdfa878d33c [ 794.421605][T11027] RDX: 000000000000000f RSI: 00007fdfa95860a0 RDI: 0000000000000004 [ 794.421698][T11027] RBP: 00007fdfa9586090 R08: 0000000000000000 R09: 0000000000000000 [ 794.421791][T11027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 794.421878][T11027] R13: 0000000000000000 R14: 00007fdfa89b5fa0 R15: 00007ffc768c8c28 [ 794.422012][T11027] [ 794.838266][ T3796] hfsplus: b-tree write err: -5, ino 4 [ 795.549623][T11023] loop7: detected capacity change from 0 to 1024 [ 795.697784][T11023] hfsplus: Unknown parameter '\Đ+ jC+[' [ 796.430637][T11048] xt_CT: You must specify a L4 protocol and not use inversions on it [ 796.917711][T11054] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1613'. [ 797.607607][T11064] IPv6: sit1: Disabled Multicast RS [ 797.617994][T11064] sit1: entered allmulticast mode [ 797.650103][T11057] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1610'. [ 799.585469][T11087] syz.6.1622 (11087): /proc/11087/oom_adj is deprecated, please use /proc/11087/oom_score_adj instead. [ 799.680305][ T5847] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 799.880030][ T5847] usb 8-1: Using ep0 maxpacket: 8 [ 799.905635][ T5847] usb 8-1: config 0 has an invalid interface number: 68 but max is 0 [ 799.914594][ T5847] usb 8-1: config 0 has an invalid interface number: 4 but max is 0 [ 799.923147][ T5847] usb 8-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 799.932559][ T5847] usb 8-1: config 0 has no interface number 0 [ 799.939257][ T5847] usb 8-1: config 0 has no interface number 1 [ 799.945813][ T5847] usb 8-1: config 0 interface 68 altsetting 147 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 799.959637][ T5847] usb 8-1: config 0 interface 4 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 11 [ 799.973153][ T5847] usb 8-1: config 0 interface 68 has no altsetting 0 [ 799.980356][ T5847] usb 8-1: config 0 interface 4 has no altsetting 0 [ 800.012227][T11087] loop6: detected capacity change from 0 to 1024 [ 800.089872][T11087] hfsplus: Unknown parameter './file0' [ 800.123565][ T5847] usb 8-1: New USB device found, idVendor=04b4, idProduct=1002, bcdDevice=60.7a [ 800.133351][ T5847] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.142032][ T5847] usb 8-1: Product: syz [ 800.146483][ T5847] usb 8-1: Manufacturer: syz [ 800.151680][ T5847] usb 8-1: SerialNumber: syz [ 800.242379][ T5847] usb 8-1: config 0 descriptor?? [ 801.104060][T11108] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1627'. [ 801.113930][T11108] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1627'. [ 801.740099][ T5849] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 801.833497][T11088] loop7: detected capacity change from 0 to 32768 [ 802.053746][ T5849] usb 7-1: Using ep0 maxpacket: 32 [ 802.129646][ T5849] usb 7-1: config 0 has an invalid interface number: 12 but max is 0 [ 802.138218][ T5849] usb 7-1: config 0 has no interface number 0 [ 802.144996][ T5849] usb 7-1: config 0 interface 12 has no altsetting 0 [ 802.353103][ T5849] usb 7-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 802.364803][ T5849] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.374252][ T5849] usb 7-1: Product: syz [ 802.378888][ T5849] usb 7-1: Manufacturer: syz [ 802.383776][ T5849] usb 7-1: SerialNumber: syz [ 802.406277][T11088] workqueue: Failed to create a rescuer kthread for wq "bcachefs": -EINTR [ 802.406791][T11088] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 802.616584][ T5849] usb 7-1: config 0 descriptor?? [ 802.659053][T11121] xt_CT: You must specify a L4 protocol and not use inversions on it [ 803.342318][T11088] bcachefs: bch2_fs_get_tree() error: ENOMEM_fs_other_alloc [ 803.526263][ T5847] videodev: could not get a free minor [ 803.532215][ T5847] dsbr100 8-1:0.4: couldn't register video device [ 803.539991][ T5847] dsbr100 8-1:0.4: probe with driver dsbr100 failed with error -23 [ 803.810577][T11124] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1630'. [ 803.953445][T11129] loop6: detected capacity change from 0 to 128 [ 803.994920][ T5847] usb 8-1: USB disconnect, device number 6 [ 804.039517][T11129] vfat: Unknown parameter '*' [ 804.423304][ T37] IPVS: starting estimator thread 0... [ 804.506499][ T5849] f81534 7-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 804.517790][ T5849] f81534 7-1:0.12: f81534_find_config_idx: read failed: -71 [ 804.526932][ T5849] f81534 7-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 804.535170][ T5849] f81534 7-1:0.12: probe with driver f81534 failed with error -71 [ 804.549495][T11135] IPVS: using max 192 ests per chain, 9600 per kthread [ 804.792387][ T5849] usb 7-1: USB disconnect, device number 17 [ 806.040881][ T5847] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 806.323056][ T5847] usb 8-1: config 0 has too many interfaces: 202, using maximum allowed: 32 [ 806.332468][ T5847] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 202 [ 806.342936][ T5847] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 806.535731][ T5847] usb 8-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 806.550366][ T5847] usb 8-1: New USB device strings: Mfr=33, Product=2, SerialNumber=3 [ 806.560699][ T5847] usb 8-1: Product: syz [ 806.565175][ T5847] usb 8-1: Manufacturer: syz [ 806.570322][ T5847] usb 8-1: SerialNumber: syz [ 806.685819][ T5847] usb 8-1: config 0 descriptor?? [ 806.740769][ T5847] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 806.917387][T11144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 807.040164][T11144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 807.356538][T11165] loop4: detected capacity change from 0 to 16 [ 807.380962][ T5849] usb 7-1: new full-speed USB device number 18 using dummy_hcd [ 807.513654][ T5847] usb 8-1: USB disconnect, device number 7 [ 807.676681][ T5849] usb 7-1: unable to get BOS descriptor or descriptor too short [ 807.772266][ T5849] usb 7-1: not running at top speed; connect to a high speed hub [ 807.900089][ T5849] usb 7-1: config 1 has an invalid interface number: 138 but max is 0 [ 807.909632][ T5849] usb 7-1: config 1 has no interface number 0 [ 807.916137][ T5849] usb 7-1: config 1 interface 138 altsetting 252 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 807.930454][ T5849] usb 7-1: config 1 interface 138 has no altsetting 0 [ 808.039426][ T8993] udevd[8993]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 808.301752][ T5849] usb 7-1: New USB device found, idVendor=0cb8, idProduct=050b, bcdDevice= 0.00 [ 808.311427][ T5849] usb 7-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 808.320298][ T5849] usb 7-1: Product: syz [ 808.324753][ T5849] usb 7-1: SerialNumber: syz [ 809.017750][ T5849] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 809.489273][ T5849] usb 7-1: USB disconnect, device number 18 [ 809.964208][T11182] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1647'. [ 809.973906][T11182] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1647'. [ 810.187066][T11187] loop4: detected capacity change from 0 to 64 [ 810.737609][ T8717] udevd[8717]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.138/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 812.759332][ T5849] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 812.911069][T11217] loop7: detected capacity change from 0 to 2048 [ 812.969160][ T5849] usb 5-1: Using ep0 maxpacket: 16 [ 813.021476][ T5849] usb 5-1: config 0 has an invalid interface number: 151 but max is 0 [ 813.030273][ T5849] usb 5-1: config 0 has no interface number 0 [ 813.036645][ T5849] usb 5-1: too many endpoints for config 0 interface 151 altsetting 63: 116, using maximum allowed: 30 [ 813.049133][ T5849] usb 5-1: config 0 interface 151 altsetting 63 has 0 endpoint descriptors, different from the interface descriptor's value: 116 [ 813.063170][ T5849] usb 5-1: config 0 interface 151 has no altsetting 0 [ 813.166996][T11217] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 813.198511][ T5849] usb 5-1: New USB device found, idVendor=25c6, idProduct=9002, bcdDevice=62.ba [ 813.209056][ T5849] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 813.219460][ T5849] usb 5-1: Product: syz [ 813.223935][ T5849] usb 5-1: Manufacturer: syz [ 813.230026][ T5849] usb 5-1: SerialNumber: syz [ 813.361765][ T5849] usb 5-1: config 0 descriptor?? [ 813.956225][ T5849] usb 5-1: can't set first interface for hiFace device. [ 813.963910][ T5849] snd-usb-hiface 5-1:0.151: probe with driver snd-usb-hiface failed with error -5 [ 814.171332][ T5849] usb 5-1: USB disconnect, device number 36 [ 814.631636][T11237] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1667'. [ 814.709353][T11242] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1667'. [ 815.311895][T11245] ceph: Unexpected value for 'acl' [ 815.633592][ T5847] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 815.845557][ T5847] usb 8-1: Using ep0 maxpacket: 32 [ 815.874358][ T5847] usb 8-1: config 0 has an invalid interface number: 51 but max is 0 [ 815.884812][ T5847] usb 8-1: config 0 has no interface number 0 [ 816.009527][ T5847] usb 8-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 816.019444][ T5847] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 816.027747][ T5847] usb 8-1: Product: syz [ 816.032515][ T5847] usb 8-1: Manufacturer: syz [ 816.037395][ T5847] usb 8-1: SerialNumber: syz [ 816.106127][ T5847] usb 8-1: config 0 descriptor?? [ 816.147726][ T5847] quatech2 8-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 816.260428][T11266] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1674'. [ 816.379340][ T5847] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 816.483373][ T5847] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 816.566258][ C0] usb 8-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 816.613961][ T5847] usb 8-1: USB disconnect, device number 8 [ 816.655953][T11270] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1676'. [ 816.691458][ T5847] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 816.816039][ T5847] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 816.832268][ T5847] quatech2 8-1:0.51: device disconnected [ 816.834462][T11270] bridge0: port 3(macvlan2) entered blocking state [ 816.845455][T11270] bridge0: port 3(macvlan2) entered disabled state [ 816.869446][T11270] macvlan2: entered allmulticast mode [ 816.875151][T11270] bridge0: entered allmulticast mode [ 816.946319][T11270] macvlan2: left allmulticast mode [ 816.952353][T11270] bridge0: left allmulticast mode [ 817.057312][T11275] 9pnet_fd: Insufficient options for proto=fd [ 818.108387][T11293] veth1_to_hsr: entered allmulticast mode [ 818.126577][T11293] A link change request failed with some changes committed already. Interface veth1_to_hsr may have been left with an inconsistent configuration, please check. [ 818.155568][T11295] loop4: detected capacity change from 0 to 64 [ 818.289650][T11295] BFS-fs: bfs_fill_super(): Impossible last inode number 63507505 > 513 on loop4 [ 819.095667][T11293] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1681'. [ 819.105561][T11293] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 819.247745][T11293] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 820.509667][T11311] loop6: detected capacity change from 0 to 32768 [ 820.633061][T11311] bcachefs (loop6): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=zstd,background_compression=gzip,str_hash=crc32c,journal_flush_disabled,reconstruct_alloc [ 820.633220][T11311] allowing incompatible features above 0.0: (unknown version) [ 820.633320][T11311] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 820.677855][T11311] bcachefs (loop6): Using encoding defined by superblock: utf8-12.1.0 [ 820.687350][T11311] bcachefs (loop6): recovering from clean shutdown, journal seq 10 [ 820.699079][T11311] bcachefs (loop6): Version upgrade required: [ 820.699079][T11311] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 820.699079][T11311] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 820.699079][T11311] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 820.906947][T11311] bcachefs (loop6): dropping and reconstructing all alloc info [ 821.120324][T11311] bcachefs (loop6): accounting_read... done [ 821.162874][T11311] bcachefs (loop6): alloc_read... done [ 821.175488][T11311] bcachefs (loop6): snapshots_read... done [ 821.235725][T11311] bcachefs (loop6): check_allocations... [ 821.429588][T11317] loop7: detected capacity change from 0 to 32768 [ 821.445621][T11317] XFS: attr2 mount option is deprecated. [ 821.454135][ T37] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 821.491490][T11311] done [ 821.523975][T11311] bcachefs (loop6): going read-write [ 821.549486][T11317] XFS (loop7): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 821.623361][T11311] bcachefs (loop6): journal_replay... [ 821.745687][ T37] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 821.763414][ T37] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 821.773859][ T37] usb 5-1: New USB device found, idVendor=0582, idProduct=0029, bcdDevice=bb.9d [ 821.784036][ T37] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 821.860546][T11313] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 821.885449][ T37] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 822.202581][T11317] XFS (loop7): Ending clean mount [ 822.215993][T11317] XFS (loop7): Quotacheck needed: Please wait. [ 822.247157][T11311] done [ 822.247398][T11341] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 822.307699][T11311] bcachefs (loop6): check_alloc_info... done [ 822.430759][T11317] XFS (loop7): Quotacheck: Done. [ 822.450209][T11311] bcachefs (loop6): check_lrus... done [ 822.482832][T11311] bcachefs (loop6): check_btree_backpointers... [ 822.508087][T11341] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 822.551600][T11311] done [ 822.554652][T11311] bcachefs (loop6): check_backpointers_to_extents... done [ 822.593903][T11311] bcachefs (loop6): check_extents_to_backpointers... [ 822.603991][T11311] bcachefs (loop6): scanning for missing backpointers in 7/128 buckets [ 822.646844][T11342] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 822.691316][T11311] done [ 822.732383][T11311] bcachefs (loop6): check_alloc_to_lru_refs... [ 822.761263][ T5847] usb 5-1: USB disconnect, device number 37 [ 822.830986][T11311] done [ 822.917619][T11311] bcachefs (loop6): bucket_gens_init... done [ 823.055171][T11311] bcachefs (loop6): check_snapshot_trees... done [ 823.106406][T11311] bcachefs (loop6): check_snapshots... [ 823.112555][T11311] bcachefs (loop6): snapshot points to missing/incorrect tree: [ 823.112669][T11311] u64s 8 type snapshot 0:4294967295:0 len 0 ver 0: subvol parent 0 children 0 0 subvol 1 tree 0, fixing [ 823.246142][T11311] done [ 823.281935][T11311] bcachefs (loop6): check_subvols... [ 823.390648][ T9991] XFS (loop7): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 823.481769][T11311] done [ 823.492929][T11311] bcachefs (loop6): check_subvol_children... done [ 823.529653][T11311] bcachefs (loop6): delete_dead_snapshots... done [ 823.601538][T11311] bcachefs (loop6): check_inodes... [ 823.610307][T11311] bcachefs (loop6): inode points to dirent that does not point back: [ 823.610424][T11311] u64s 8 type dirent 4096:8130059955150870709:U32_MAX len 0 ver 0: lost+found -> 4097 type dir [ 823.610522][T11311] inum: 15361:4294967295 [ 823.610593][T11311] mode=40700 [ 823.610655][T11311] flags=(15300000) [ 823.610724][T11311] journal_seq=1 [ 823.610790][T11311] hash_seed=a9fcff247692d1ca [ 823.610866][T11311] hash_type=siphash [ 823.610938][T11311] bi_size=0 [ 823.611002][T11311] bi_sectors=0 [ 823.611067][T11311] bi_version=0 [ 823.611132][T11311] bi_atime=200535484 [ 823.611202][T11311] bi_ctime=200535484 [ 823.611268][T11311] bi_mtime=200535484 [ 823.611337][T11311] bi_otime=200535484 [ 823.611405][T11311] bi_uid=0 [ 823.611470][T11311] bi_gid=0 [ 823.611535][T11311] bi_nlink=0 [ 823.611601][T11311] bi_generation=0 [ 823.611668][T11311] bi_dev=0 [ 823.611732][T11311] bi_data_checksum=0 [ 823.611800][T11311] bi_compression=0 [ 823.611868][T11311] bi_project=0 [ 823.611939][T11311] bi_background_compression=0 [ 823.612010][T11311] bi_data_replicas=0 [ 823.612078][T11311] bi_promote_target=0 [ 823.612147][T11311] bi_foreground_target=0 [ 823.612220][T11311] bi_background_target=0 [ 823.612292][T11311] bi_erasure_code=0 [ 823.612360][T11311] bi_fields_set=0 [ 823.612428][T11311] bi_dir=4096 [ 823.612494][T11311] bi_dir_offset=8130059955150870709 [ 823.612567][T11311] bi_subvol=0 [ 823.612651][T11311] bi_parent_subvol=0 [ 823.612717][T11311] bi_nocow=0 [ 823.612780][T11311] bi_depth=0 [ 823.612841][T11311] bi_inodes_32bit=0 [ 823.612918][T11311] bi_casefold=0, fixing [ 823.838422][T11311] done [ 823.901392][T11311] bcachefs (loop6): check_extents... [ 823.908582][T11311] bcachefs (loop6): key in missing inode, found keys: [ 823.914840][T11311] u64s 7 type inline_data 536936447:18446744073560915976:U32_MAX len 8 ver 0: datalen 16: 73797a6b616c6c657273000000000000 [ 823.914951][T11311] , fixing [ 823.995324][T11311] done [ 824.061018][T11311] bcachefs (loop6): check_indirect_extents... done [ 824.109277][T11311] bcachefs (loop6): check_dirents... [ 824.121241][T11311] bcachefs (loop6): dirent points to missing inode: [ 824.121347][T11311] u64s 8 type dirent 4096:8130059955150870709:U32_MAX len 0 ver 0: lost+found -> 4097 type dir, fixing [ 824.205578][T11311] done [ 824.225744][T11311] bcachefs (loop6): check_xattrs... done [ 824.313180][T11311] bcachefs (loop6): check_root... done [ 824.363024][T11311] bcachefs (loop6): check_unreachable_inodes... [ 824.370780][T11311] bcachefs (loop6): unreachable inode: [ 824.370885][T11311] inum: 15361:4294967295 [ 824.370953][T11311] mode=40700 [ 824.371016][T11311] flags=(4300000) [ 824.371079][T11311] journal_seq=25 [ 824.371146][T11311] hash_seed=a9fcff247692d1ca [ 824.371217][T11311] hash_type=siphash [ 824.371283][T11311] bi_size=0 [ 824.371348][T11311] bi_sectors=0 [ 824.371410][T11311] bi_version=0 [ 824.371476][T11311] bi_atime=200535484 [ 824.371541][T11311] bi_ctime=200535484 [ 824.371606][T11311] bi_mtime=200535484 [ 824.371669][T11311] bi_otime=200535484 [ 824.371734][T11311] bi_uid=0 [ 824.371794][T11311] bi_gid=0 [ 824.371857][T11311] bi_nlink=0 [ 824.371926][T11311] bi_generation=0 [ 824.371993][T11311] bi_dev=0 [ 824.372052][T11311] bi_data_checksum=0 [ 824.372118][T11311] bi_compression=0 [ 824.372184][T11311] bi_project=0 [ 824.372249][T11311] bi_background_compression=0 [ 824.372317][T11311] bi_data_replicas=0 [ 824.372379][T11311] bi_promote_target=0 [ 824.372444][T11311] bi_foreground_target=0 [ 824.372508][T11311] bi_background_target=0 [ 824.372574][T11311] bi_erasure_code=0 [ 824.372638][T11311] bi_fields_set=0 [ 824.372700][T11311] bi_dir=0 [ 824.372763][T11311] bi_dir_offset=0 [ 824.372825][T11311] bi_subvol=0 [ 824.372897][T11311] bi_parent_subvol=0 [ 824.372965][T11311] bi_nocow=0 [ 824.373028][T11311] bi_depth=0 [ 824.373092][T11311] bi_inodes_32bit=0 [ 824.373156][T11311] bi_casefold=0, fixing [ 824.558481][T11311] bcachefs (loop6): creating //lost+found in subvol 1 snapshot 4294967295 [ 824.582019][T11311] bcachefs (loop6): creating //lost+found in subvol 1 snapshot 4294967295 [ 824.607934][T11311] bcachefs (loop6): creating //lost+found in subvol 1 snapshot 4294967295 [ 824.622385][T11311] bcachefs (loop6): got lostfound inum 4097 [ 824.638127][T11311] bcachefs (loop6): creating //lost+found in subvol 1 snapshot 4294967295 [ 824.652824][T11311] bcachefs (loop6): got lostfound inum 4097 [ 824.660071][T11311] bcachefs (loop6): reattached at (disconnected) [ 824.754950][T11311] done [ 824.786226][T11311] bcachefs (loop6): check_subvolume_structure... done [ 824.882453][T11311] bcachefs (loop6): check_directory_structure... done [ 824.901025][T11311] bcachefs (loop6): check_nlinks... [ 824.906799][T11311] bcachefs (loop6): inode 536870914 type reg has wrong i_nlink (2780562353, should be 1), fixing [ 824.961031][T11311] done [ 825.003728][T11311] bcachefs (loop6): check_rebalance_work... done [ 825.018356][T11311] bcachefs (loop6): resume_logged_ops... done [ 825.032353][T11311] bcachefs (loop6): delete_dead_inodes... done [ 825.050220][T11311] bcachefs (loop6): set_fs_needs_rebalance... done [ 825.293256][T11311] bcachefs (loop6): Fixed errors, running fsck a second time to verify fs is clean [ 825.304780][T11311] bcachefs (loop6): check_alloc_info... done [ 825.361613][T11311] bcachefs (loop6): check_lrus... done [ 825.379346][T11311] bcachefs (loop6): check_btree_backpointers... done [ 825.396095][T11311] bcachefs (loop6): check_backpointers_to_extents... done [ 825.419382][T11311] bcachefs (loop6): check_extents_to_backpointers... done [ 825.441710][T11311] bcachefs (loop6): check_alloc_to_lru_refs... done [ 825.475246][T11311] bcachefs (loop6): bucket_gens_init... done [ 825.525330][T11311] bcachefs (loop6): check_snapshot_trees... done [ 825.555744][T11311] bcachefs (loop6): check_snapshots... done [ 825.579473][T11311] bcachefs (loop6): check_subvols... [ 825.579836][T11311] ===================================================== [ 825.593308][T11311] BUG: KMSAN: uninit-value in bch2_check_subvols+0x1297/0x48c0 [ 825.601479][T11311] bch2_check_subvols+0x1297/0x48c0 [ 825.609032][T11311] __bch2_run_recovery_passes+0x49e/0x1330 [ 825.615134][T11311] bch2_run_recovery_passes+0x284/0x310 [ 825.621172][T11311] bch2_fs_recovery+0x53bf/0x66d0 [ 825.626532][T11311] bch2_fs_start+0x1159/0x1920 [ 825.631436][T11350] Bluetooth: hci6: command 0x0406 tx timeout [ 825.637805][T11311] bch2_fs_get_tree+0x113a/0x2ae0 [ 825.643241][T11311] vfs_get_tree+0xb3/0x5c0 [ 825.647929][T11311] do_new_mount+0x738/0x1610 [ 825.652986][T11311] path_mount+0x6db/0x1e90 [ 825.657665][T11311] __se_sys_mount+0x6eb/0x7d0 [ 825.662929][T11311] __x64_sys_mount+0xe4/0x150 [ 825.667906][T11311] x64_sys_call+0xfa7/0x3db0 [ 825.673028][T11311] do_syscall_64+0xd9/0x210 [ 825.677770][T11311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 825.684181][T11311] [ 825.686644][T11311] Uninit was created at: [ 825.691356][T11311] ___kmalloc_large_node+0x2e2/0x460 [ 825.696959][T11311] __kmalloc_large_node_noprof+0x3f/0x1f0 [ 825.704770][T11311] __kvmalloc_node_noprof+0x9f/0x1530 [ 825.712406][T11311] btree_node_data_alloc+0xe2/0x5f0 [ 825.717920][T11311] __bch2_btree_node_mem_alloc+0x1eb/0x880 [ 825.724366][T11311] bch2_fs_btree_cache_init+0x4fc/0xd20 [ 825.730313][T11311] bch2_fs_open+0x46ac/0x54e0 [ 825.735248][T11311] bch2_fs_get_tree+0x955/0x2ae0 [ 825.740604][T11311] vfs_get_tree+0xb3/0x5c0 [ 825.745323][T11311] do_new_mount+0x738/0x1610 [ 825.750441][T11311] path_mount+0x6db/0x1e90 [ 825.755131][T11311] __se_sys_mount+0x6eb/0x7d0 [ 825.760304][T11311] __x64_sys_mount+0xe4/0x150 [ 825.765289][T11311] x64_sys_call+0xfa7/0x3db0 [ 825.770488][T11311] do_syscall_64+0xd9/0x210 [ 825.775250][T11311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 825.781855][T11311] [ 825.784355][T11311] CPU: 0 UID: 0 PID: 11311 Comm: syz.6.1688 Tainted: G W 6.16.0-rc4-syzkaller #0 PREEMPT(undef) [ 825.796843][T11311] Tainted: [W]=WARN [ 825.800957][T11311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 825.813169][T11311] ===================================================== [ 825.820489][T11311] Disabling lock debugging due to kernel taint [ 825.826828][T11311] Kernel panic - not syncing: kmsan.panic set ... [ 825.833452][T11311] CPU: 0 UID: 0 PID: 11311 Comm: syz.6.1688 Tainted: G B W 6.16.0-rc4-syzkaller #0 PREEMPT(undef) [ 825.845757][T11311] Tainted: [B]=BAD_PAGE, [W]=WARN [ 825.850961][T11311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 825.861234][T11311] Call Trace: [ 825.864685][T11311] [ 825.867874][T11311] __dump_stack+0x26/0x30 [ 825.872477][T11311] dump_stack_lvl+0x53/0x270 [ 825.877428][T11311] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 825.883546][T11311] dump_stack+0x1e/0x25 [ 825.887942][T11311] panic+0x4bd/0xd50 [ 825.892123][T11311] kmsan_report+0x31c/0x320 [ 825.896913][T11311] ? __msan_warning+0x1b/0x30 [ 825.901838][T11311] ? bch2_check_subvols+0x1297/0x48c0 [ 825.907474][T11311] ? __bch2_run_recovery_passes+0x49e/0x1330 [ 825.913704][T11311] ? bch2_run_recovery_passes+0x284/0x310 [ 825.919679][T11311] ? bch2_fs_recovery+0x53bf/0x66d0 [ 825.925119][T11311] ? bch2_fs_start+0x1159/0x1920 [ 825.930280][T11311] ? bch2_fs_get_tree+0x113a/0x2ae0 [ 825.935719][T11311] ? vfs_get_tree+0xb3/0x5c0 [ 825.940553][T11311] ? do_new_mount+0x738/0x1610 [ 825.945558][T11311] ? path_mount+0x6db/0x1e90 [ 825.950398][T11311] ? __se_sys_mount+0x6eb/0x7d0 [ 825.955490][T11311] ? __x64_sys_mount+0xe4/0x150 [ 825.960591][T11311] ? x64_sys_call+0xfa7/0x3db0 [ 825.965605][T11311] ? do_syscall_64+0xd9/0x210 [ 825.970498][T11311] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 825.976790][T11311] ? bch2_trans_iter_exit+0x34a/0x3f0 [ 825.982397][T11311] ? __bch2_bkey_get_val_typed+0x516/0x5e0 [ 825.988464][T11311] ? __bch2_bkey_get_val_typed+0xf1/0x5e0 [ 825.994520][T11311] ? kmsan_get_metadata+0xfb/0x160 [ 825.999942][T11311] __msan_warning+0x1b/0x30 [ 826.004715][T11311] bch2_check_subvols+0x1297/0x48c0 [ 826.010241][T11311] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 826.016842][T11311] ? kmsan_get_metadata+0xfb/0x160 [ 826.022225][T11311] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 826.028835][T11311] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 826.035222][T11311] ? bch2_check_subvols+0x202/0x48c0 [ 826.040771][T11311] ? bch2_check_subvols+0x202/0x48c0 [ 826.046417][T11311] ? __pfx_bch2_check_subvols+0x10/0x10 [ 826.052224][T11311] __bch2_run_recovery_passes+0x49e/0x1330 [ 826.058360][T11311] bch2_run_recovery_passes+0x284/0x310 [ 826.064169][T11311] bch2_fs_recovery+0x53bf/0x66d0 [ 826.069411][T11311] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 826.076008][T11311] ? __rcu_read_unlock+0x6d/0xd0 [ 826.081153][T11311] ? __closure_wake_up+0x164/0x180 [ 826.086586][T11311] bch2_fs_start+0x1159/0x1920 [ 826.091737][T11311] bch2_fs_get_tree+0x113a/0x2ae0 [ 826.097140][T11311] ? __pfx_bch2_fs_get_tree+0x10/0x10 [ 826.102799][T11311] vfs_get_tree+0xb3/0x5c0 [ 826.107497][T11311] ? mount_capable+0x99/0x100 [ 826.112418][T11311] do_new_mount+0x738/0x1610 [ 826.117349][T11311] ? kmsan_get_metadata+0xfb/0x160 [ 826.122722][T11311] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 826.128826][T11311] path_mount+0x6db/0x1e90 [ 826.133527][T11311] ? user_path_at+0x32d/0x3d0 [ 826.138464][T11311] __se_sys_mount+0x6eb/0x7d0 [ 826.143414][T11311] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 826.149758][T11311] __x64_sys_mount+0xe4/0x150 [ 826.154710][T11311] x64_sys_call+0xfa7/0x3db0 [ 826.159557][T11311] do_syscall_64+0xd9/0x210 [ 826.164353][T11311] ? irqentry_exit+0x16/0x60 [ 826.169198][T11311] ? clear_bhb_loop+0x40/0x90 [ 826.174092][T11311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 826.180207][T11311] RIP: 0033:0x7fdfa87900ca [ 826.184809][T11311] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 826.204913][T11311] RSP: 002b:00007fdfa9585e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 826.213557][T11311] RAX: ffffffffffffffda RBX: 00007fdfa9585ef0 RCX: 00007fdfa87900ca [ 826.221710][T11311] RDX: 00002000000000c0 RSI: 0000200000000000 RDI: 00007fdfa9585eb0 [ 826.229882][T11311] RBP: 00002000000000c0 R08: 00007fdfa9585ef0 R09: 0000000000800000 [ 826.238091][T11311] R10: 0000000000800000 R11: 0000000000000246 R12: 0000200000000000 [ 826.246277][T11311] R13: 00007fdfa9585eb0 R14: 000000000000593f R15: 0000200000005c80 [ 826.254489][T11311] [ 826.257994][T11311] Kernel Offset: disabled [ 826.262428][T11311] Rebooting in 86400 seconds..