last executing test programs: 18m5.737391268s ago: executing program 32 (id=397): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f00000000c0)={0x0, 0xc000}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r4, 0x4010ae68, &(0x7f0000000000)={0x2000}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, &(0x7f0000000140)) syz_read_part_table(0x61c, &(0x7f0000000000)="$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") r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000700)={'ip_vti0\x00', &(0x7f0000000680)={'syztnl1\x00', r6, 0x20, 0x8, 0x8, 0xff, {{0x15, 0x4, 0x1, 0xb, 0x54, 0x64, 0x0, 0x8, 0x29, 0x0, @local, @multicast2, {[@ssrr={0x89, 0x1f, 0x10, [@local, @local, @remote, @multicast2, @dev={0xac, 0x14, 0x14, 0x2f}, @rand_addr=0x64010100, @private=0xa010101]}, @timestamp={0x44, 0x8, 0xcc, 0x0, 0xb, [0x7f]}, @cipso={0x86, 0x17, 0x0, [{0x5, 0x8, "9700b95c7346"}, {0x7, 0x9, "c18824b67088bd"}]}]}}}}}) 16m51.574435686s ago: executing program 3 (id=595): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) syz_usb_connect(0x2, 0x24, &(0x7f0000000340)={{0x12, 0x1, 0x110, 0x4f, 0x21, 0x85, 0x8, 0x16d6, 0x1, 0xb2cd, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0x0, 0x50, 0x9, [{{0x9, 0x4, 0xf4, 0x0, 0x0, 0x1c, 0xb9, 0xfb, 0x6}}]}}]}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], 0x448}}, 0x0) 16m48.690908176s ago: executing program 3 (id=605): syz_mount_image$minix(&(0x7f0000000580), &(0x7f0000000440)='./bus\x00', 0x53000, &(0x7f0000000540)=ANY=[], 0xfe, 0x189, &(0x7f0000001300)="$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") openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x921}, 0x18, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x201c840, &(0x7f0000000240)={[{@discard}, {@noload}]}, 0x64, 0x537, &(0x7f0000000f80)="$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") r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000500), 0x8002, 0x0) ioctl$RTC_PLL_GET(r3, 0x80207011, &(0x7f0000000600)) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f00000008c0)={0x48}) landlock_restrict_self(r0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r5 = syz_usb_connect(0x2, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0xe3, 0xdd, 0xef, 0x20, 0x1d50, 0x60a1, 0xa14f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9d, 0x14, 0x4e}}]}}]}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@delqdisc={0x68, 0x25, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xffe5, 0xf}, {0x6, 0xfff1}, {0x4, 0x10}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xffff}, @qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0xc1, 0x7, 0x8001, 0x8, 0x40, 0xfffffffd, 0xe03, 0x4}}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x7}]}, 0x68}, 0x1, 0x0, 0x0, 0x2400b091}, 0x3000c81c) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r4, 0x40045542, &(0x7f0000000880)=0x91eb) r6 = creat(&(0x7f0000000400)='./bus\x00', 0x20) r7 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) write$binfmt_elf64(r6, &(0x7f00000002c0)=ANY=[], 0x76) dup3(r7, r6, 0x0) finit_module(r7, 0x0, 0x100000000000000) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x88, &(0x7f0000000040)={[{@norecovery}, {@usrquota}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@nouid32}, {@noinit_itable}, {@auto_da_alloc}, {@jqfmt_vfsv1}]}, 0x3, 0x446, &(0x7f0000000b80)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000240)) rmdir(&(0x7f0000000000)='./bus\x00') syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000640)={0x44, &(0x7f00000001c0)=ANY=[@ANYBLOB="000020020020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 16m46.493835954s ago: executing program 3 (id=609): r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000380)=0x4, 0x4) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r3, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x17, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0xa4}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x1, 0x20}, {0x65, 0x0, 0x6}}, [@printk={@lld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x2, 0xa, 0x9}, {0x7, 0x0, 0x3, 0x9}, {}, {}, {0x15}}], {{0x5, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, 0x0, 0xe, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x1, @dev={0xfe, 0x80, '\x00', 0x42}, 0x9, 0x1}, 0x20) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r5, 0x8001000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2c8, 0x0, 0x11, 0x148, 0xd0, 0x0, 0x230, 0x2a8, 0x2a8, 0x230, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x5, 0x3]}, {0xffffffffffffffff}}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00', {}, {}, 0x0, 0x0, 0x4}, 0x0, 0x100, 0x160, 0x0, {}, [@common=@ttl={{0x28}}, @common=@unspec=@physdev={{0x68}, {'batadv_slave_0\x00', {0xff}, 'ip_vti0\x00', {0xff}, 0xf}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x0, 0x1, 0x5, 0x2, 0x0, 0x1], 0x1, 0x1}, {0x0, [0x0, 0x4, 0x6, 0x4, 0x1, 0x4], 0x4, 0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000140)={'\x00', 0x5, 0x6, 0x0, 0x7ff, 0x2, 0xffffffffffffffff}) fcntl$setown(r5, 0x8, r6) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005480), 0x0, 0x40000) 16m45.489234943s ago: executing program 3 (id=613): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x40, 0x6, 0x8, 0x1}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r0, 0x2}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, r1}, 0x38) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@noinit_itable}, {@dax_inode}, {@nolazytime}, {@abort}, {@dax_inode}, {@lazytime}, {@noload}, {}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$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") mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c}) syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x1, 0x89, &(0x7f0000000180)="$eJzs0qENAjEABdDPrYFgA3a4UQgSHAqCun1YhRHYAIHFQJoWQT0hubyX/Ca/31T0+rwsMyWrKXl1DsfTbrOvZ5ilIcnYUv5A6fexbou23x7n7Sf/fi8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/MKQdd+/Lt4BAAD//9+0I9A=") openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000007c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e120800050000000401a800167c2000014002000000035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cee0090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd8}], 0x1}, 0x0) sendmsg$kcm(r2, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0x1}, {0x0, 0x2}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x40) getdents(r4, 0xfffffffffffffffd, 0x58) socket$kcm(0x29, 0x3, 0x0) 16m42.274197046s ago: executing program 3 (id=619): r0 = gettid() prlimit64(r0, 0x8, &(0x7f0000000000)={0x3, 0x8001}, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x101000, 0x81) timer_create(0x3, &(0x7f0000000080)={0x0, 0x5, 0x4, @tid=r0}, &(0x7f00000000c0)=0x0) timer_settime(r2, 0x0, &(0x7f0000000100)={{0x77359400}, {0x77359400}}, 0x0) ptrace$ARCH_MAP_VDSO_X32(0x1e, r0, 0x7, 0x2001) prctl$PR_SET_DUMPABLE(0x4, 0x2) syz_usb_connect(0x3, 0xea9, &(0x7f0000000140)={{0x12, 0x1, 0x7dc92941e5fe762, 0x66, 0x2e, 0x1f, 0x8, 0x5c6, 0x9034, 0x21ef, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe97, 0x4, 0x8, 0x20, 0x20, 0x81, [{{0x9, 0x4, 0x3, 0x5, 0xd, 0xdc, 0xc5, 0x41, 0x8, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "b386fe"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0xfffffffc, 0x9, 0xee, 0x4}, {0x6, 0x24, 0x1a, 0x81}}], [{{0x9, 0x5, 0xdc605f3871696e0e, 0x0, 0x200, 0x7, 0xff, 0x9}}, {{0x9, 0x5, 0x9, 0x10, 0x40, 0x0, 0x5, 0x3, [@generic={0x1a, 0x23, "e70c369730e49890d37a46353b004aa58b8702140752e569"}, @generic={0x9e, 0x1a, "965801969cc95c104710d9d745acd7a6f1ba2d8ac11094ac4399f454dacde24e1aa5e0d83ded52cd4fb2f13d828ab43db6fec05faa5231ded84968f8c3ac86b0e080c5bac1a42f1647b3cce95b0950c2a20544494cae6d02e1a81961ea1825af7f6aa3dab53a372b24a2aa1a33deedaaf15c84440753621f03335f200855b10fd431937aed1da130079ba7ce2e2c5d949d3c6730b4ee38b72f4d469c"}]}}, {{0x9, 0x5, 0xa, 0x8, 0x3ff, 0x8, 0xa8, 0x9, [@generic={0xa4, 0x5, "fb60b99b0d22fae36cbf85f5a76e3dce82cfec09007f26f8d18cd4c53d33315fcd4f9ac8e3d5b97fce7f1208220339413db6a764d080f05becc889b4760155aeefb2408b1608cecf091360f71824ec0fa6d7592408cd02ee67a3dbfaf52c14a2c0de814fcd52f13de357aacd3a3cd1f2513f1b50996d52dd00bb4bd2e300e34d0552a901ff10b70e4933cc091893c86d11a1b0eabcbc21add66437fec0f9464a630e"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xe8, 0xfff9}]}}, {{0x9, 0x5, 0xa, 0x0, 0x200, 0x6, 0x7, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xd8, 0x2}]}}, {{0x9, 0x5, 0x0, 0x3, 0x20, 0xb, 0x7, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xf4, 0xf}]}}, {{0x9, 0x5, 0x0, 0x10, 0x3ff, 0x2, 0xa, 0x6}}, {{0x9, 0x5, 0x7, 0x0, 0x8, 0x2, 0x1, 0x7, [@generic={0xf6, 0x22, "6ac26b143f1e9b4cc34023c7d84a1aefdab2d3cca56c97745650e312dd6503d05324c86a56a5eeb82abe786d3b49916995bc6422450469a34686851931f5e63d0f446dd0ed3c1e3b5da4d974457d6f90e85b93045492430033fcb65371cec409265481efc7068b2968353ece7d5c75ea2e0efa94f786ecb7258d381c65ff4a9d0a32f3051aa755aa59921132ae8c9a75f0b1d01a1f4c6e7f9c9db0578f6475520060d08d42897982dac2fe062783b1eacc9c32316821547dbe3cd2e306887d48eb80eeece920a8e2800ac1ebbe3bcd44cd19acfc219dbf3b77ebac526390c243aa7bb0f53565f7c80cb1e58042fed7a244d503d5"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x20, 0x5, 0x6, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x5e, 0x3}]}}, {{0x9, 0x5, 0x0, 0x2, 0x8, 0x2, 0x6, 0x0, [@generic={0xcd, 0x22, "3b580f91ccbd6d08b09616589d273ccb242c855593ad9399a14e94542d1a96ed2638cef419af8c2878ed4c18b0297e02c2d767a59936d773e2aee6f2c937495d04793d69297a3972392c4b074a201b3c11b648b83fa72c489d412f6aa84d47483bea211aaa92036e78628332a9bafc38dbe4d89d5a8c2011aa8b8a7ad6a95432a0d8f33c4f30ee4545b66cdd1aca94fcc2897900fd5fa7b1974fed260a76f0354b14471233fbb373b1b865ffceaa6b7fc42e4ff82dc36f665d8c83c90bfa6182f8e9bf8a50aead3d53f374"}]}}, {{0x9, 0x5, 0xa, 0x2, 0x0, 0x94, 0x9, 0x2}}, {{0x9, 0x5, 0x0, 0x0, 0x5df, 0x5, 0x5, 0x7e, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4b, 0x40}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x81, 0x1000}]}}, {{0x9, 0x5, 0x0, 0x10, 0x8, 0x3, 0xaf, 0xe8, [@uac_iso={0x7, 0x25, 0x1, 0xc1, 0x9, 0xfff}]}}, {{0x9, 0x5, 0xa, 0x4, 0x400, 0x7, 0x9, 0x80}}]}}, {{0x9, 0x4, 0x7b, 0xd1, 0xe, 0xff, 0xff, 0xff, 0x8, [@uac_as, @cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, ']'}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x5, 0xf801, 0x1, 0x4}, {0x6, 0x24, 0x1a, 0x8, 0x38}, [@mdlm_detail={0x33, 0x24, 0x13, 0x7b, "5176d7c7be4b0056a4296b1bd97f4ff4558c033496ede5a655fcef619828e219fc22333084b99b87e1037c62c4f1e2"}, @network_terminal={0x7, 0x24, 0xa, 0x4, 0x0, 0x5, 0x1}, @call_mgmt={0x5, 0x24, 0x1, 0x3}, @obex={0x5, 0x24, 0x15, 0x6}]}], [{{0x9, 0x5, 0x8, 0x4, 0x3ff, 0x70, 0x8, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0xfff4}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x7b, 0x8000}]}}, {{0x9, 0x5, 0xb, 0x10, 0x8, 0x4, 0x7, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x6}, @generic={0x100, 0x31, "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"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x10, 0xfa, 0x7, 0x81, [@generic={0x70, 0x2, "94b8d4921d8cb925c2c7e81c04ae1a07f3284c80dc6a23ac2dadfeb41a9ba2d0ecd463935b34ed95bab562de02c13f895ef6fe0d6844e6648e86f21e39c57e716ccde59e6cc9c82ea826586ebb5e17c1d24f13c9fb6723f75a1e64af65759dceef5b5e95a599a5087bc9c74ce25d"}, @generic={0xaa, 0x9, "7999a74b5e674b27bf30a761748f0a6dd53dbd42e8077be205642ed90a9ba2057180616ab3f269524ba99bb132507f69bef73f04a3f12293d34b670eaa810f3ad47ef71ba24f42f1659a12e37775ad2148b78215f9675f41be5684b5c6d03d484343da3e37d0c298a3a5ea0bf2b84ffb8a8177f49c158dee751e1a792f5ca8304fadf34fa4772101c53c56d01ca94ed9af5108fabb26ccd1cfefcbf448deb8b4389bbfd73c7d7d89"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x0, 0x6, 0x2, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x5}, @generic={0x89, 0x9, "4c5e1cb4b83a1855db788b4f848db8c96482eedd5b7c3f75d0deea0d390b27d83d6d76b1a5eb4f8c4509cca30afec392ea7ba9a9ba39ce4d6f4bdbac2c9415c55086206524de52c5730474c26bb0808cde287bbd04dd9dfad73902f6571c8cb1726475fe573a7029b6c3d38ab9170232dfce62cfe809dac6d9dcaae1694cf1f5e951b7a8868d6f"}]}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x10, 0x5, 0x1}}, {{0x9, 0x5, 0x2, 0x10, 0x10, 0x80, 0x7f, 0x5}}, {{0x9, 0x5, 0x9, 0x10, 0x200, 0xd6, 0x9, 0x9}}, {{0x9, 0x5, 0x6, 0x0, 0x400, 0x2, 0x7, 0x2, [@generic={0x63, 0xf, "ab41b8b36d7fd211db1b5db27730a80e3be973160583de7ca1571d03f5807e78d10d9534882e1b8a5a315a1073aed6e29c9e830d2b02306707c9524e84932b99090b2cd6d0e03830ad570813eebc48791232818e19b4c98b7d4c0d248bc646127f"}]}}, {{0x9, 0x5, 0xc, 0xc, 0x40, 0x81, 0xa, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xc, 0x7}]}}, {{0x9, 0x5, 0x2, 0x10, 0x200, 0x0, 0x8, 0xff}}, {{0x9, 0x5, 0x9, 0x0, 0x40, 0x6, 0x9, 0x9, [@generic={0x9b, 0x30, "b1f0ac7d5b9c97a1f3de052b3b3ceb5d8d07d296be8733e2f1dda5fc90a19facc2a729036239764959499f3c093fecdcb933961203c7dd7be1b61d558f9263bf87cdcd01e82f8267fc9c5719a1274ea143b6b91ed5a6466cb82c5bdf9d4358ac3e58546eb2e16fc422416618c4ac0f15ad8004d6431aaa4bafe417a9fb3bcdf36cbab80205662645239ecf9b7edfabce6d04a4d22885afda4b"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0xfff7}]}}, {{0x9, 0x5, 0x0, 0x10, 0x3ff, 0x8, 0x5b, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xf, 0xfff7}]}}, {{0x9, 0x5, 0x6, 0x10, 0x3ff, 0x3, 0x10}}, {{0x9, 0x5, 0x8, 0x8, 0x400, 0x2, 0x9, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0xbc609d7b6a493df7, 0xcb, 0x3}, @generic={0x77, 0x22, "3f75fcac432f10d293c0eb4b373c6b8c55b55bfef5dcdf159a1ed25bc42317845fc13d729dc928da349eaaa6579a4cc1bada183c09b2a7ae12ae181ffd6d01f4c88e0a392b2e9f6fdd203f3402a175b6f471f3064862caee82a5904d5b25d05c69ba9f0547d616b57c97ce535e8843b18462894b0e"}]}}]}}, {{0x9, 0x4, 0x9f, 0x10, 0x8, 0xd3, 0x54, 0x43, 0x2, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, '0d'}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x7, 0xfffa, 0x101, 0x3}, [@acm={0x4, 0x24, 0x2, 0x8}, @acm={0x4, 0x24, 0x2, 0xe}, @country_functional={0x6, 0x24, 0x7, 0x7, 0xb}, @mbim_extended={0x8, 0x24, 0x1c, 0xae, 0xb8, 0x2}, @network_terminal={0x7, 0x24, 0xa, 0x94, 0x5, 0xe6, 0x5}]}], [{{0x9, 0x5, 0x5, 0x1, 0x40, 0x81, 0x2, 0x4}}, {{0x9, 0x5, 0x9, 0x2, 0x3ff, 0x3, 0xa, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xf7, 0x4}]}}, {{0x9, 0x5, 0xc, 0x2, 0x8, 0x2, 0x3, 0x3, [@generic={0xb0, 0x24, "2d30691c8abe5baefc7ea5d5136b57be4535585e95b272cbf75fa9ac30507335f1e985a59c9f6397e0646db41ce8c2ebd29f58ce1351b18fe697b9dd14a4505503c9d0086e021ae2d7edd1469abcf806c5e2b6d7580270727751119628806e3cc89f82a852be0b74c5cb41d39b5ab5f78dc6fb43430d1ee61bbf4a3225af9c48b2dd3be0ff4ccac1cfc74c7d6b2a05bcdd0b50fe53fdc125e68c953155e3d52f1de047d9a247b5f7d6d70fdba3d1"}, @generic={0x2e, 0x31, "3f77ff5eab061df5b28d74d4bf160751c4bc028f0a7c62d48a3c0c9c60ad167b13ef2b953d18902195e17301"}]}}, {{0x9, 0x5, 0x1, 0xc, 0x8, 0x2, 0x26, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0xda8e}]}}, {{0x9, 0x5, 0x1, 0x4, 0x20, 0x8, 0x8e, 0xc, [@generic={0x17, 0x8, "3dcd2754222f9902881cef9c67af39d2981b1c6760"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0x2, 0x1, 0x7}}, {{0x9, 0x5, 0xd, 0x8, 0x8, 0x2, 0x3, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x3}]}}, {{0x9, 0x5, 0x7, 0x4, 0x8, 0x4, 0x10, 0x9b, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x3}]}}]}}, {{0x9, 0x4, 0xd8, 0x8, 0xf, 0xff, 0x2, 0x1, 0x7, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "bbff7635"}, {0x5, 0x24, 0x0, 0x24}, {0xd, 0x24, 0xf, 0x1, 0x40, 0x8, 0x800, 0x4}, [@country_functional={0x6, 0x24, 0x7, 0x5b, 0x4}, @network_terminal={0x7, 0x24, 0xa, 0x4, 0xf7, 0x0, 0x1}, @mbim_extended={0x8, 0x24, 0x1c, 0x3, 0x9, 0xc34}, @mdlm_detail={0x2a, 0x24, 0x13, 0x8, "69c1f5795848bf0083071328633c9941c2a764e0dd80f6719492701c7ae929686a9cc3d9b2d6"}, @network_terminal={0x7, 0x24, 0xa, 0x3d, 0x7, 0x0, 0xa0}]}], [{{0x9, 0x5, 0x6, 0x10, 0x200, 0x7f, 0x4, 0x6, [@generic={0xd2, 0x9, "d66d47313812e1bf5d75a850128332b6c948d71aa0969385c1f5e0ad0ca204a95745cf092772573cfa9289e18556eb7225651436cf4a1733809a342c57e29009814026889c298022c0e619ede306751d8f2c02d9187cff394120158d1ff0252de0875b98b73478c20cc853bd4ff249ba2fcf1cd79e1b3b283afee6fd49d135757cedc389d4b3cb199b4b046b14dd1a7324c73ad26dada3eedebdbf604ff666cb4f653d424bc3fee6d7df54edfb9148f8f19d4c2da28b6e0d0a624781b2a2729911bc20972b1c505b200dc11d08b50121"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x3ff, 0x80, 0xb}}, {{0x9, 0x5, 0x3, 0x10, 0x8, 0x93, 0x2, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0xfff7}]}}, {{0x9, 0x5, 0x0, 0xd, 0x200, 0xff, 0x7f, 0x6}}, {{0x9, 0x5, 0x6, 0x8, 0x400, 0x5, 0x9, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xbd, 0x101}, @generic={0xb2, 0xf, "d00d134b01bb27fa0c7865d093859f192410cc0d0fe9ea9e8897766b4a0536ee48d18d259d58d9270b0250662e233d6f1caf18ebf39039deec33890897e7550a7b96cf678f8d105183274c4354b23415a30dc3dde98b4a442ceb12c3fbed7a574f568b052273917ea29a66c6375a2a0041dab3a04ebfd8e57b27a7910e2118d5091acab8539a109ca476284e8f05440bb4a72253a3a1722b5939e0ba58c2b55ecddf1231b7272f84cf5ce7b64bb19f6c"}]}}, {{0x9, 0x5, 0x18, 0x10, 0x40, 0x81, 0x8, 0x37}}, {{0x9, 0x5, 0x80, 0x0, 0x400, 0xf9, 0x1, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x1, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x5}]}}, {{0x9, 0x5, 0x9, 0x0, 0x3ff, 0xae, 0xfc, 0x9, [@generic={0x86, 0x9, "606990f37f0d3ff459db30e34a5f43cce17b12708ad231de36fddbd088941662608eb0be764e0a1a6f275127dea65cbd0e8a8d722d97ade5c9915e0e2028dbe2f2f7f74b6363980701a197a8880c2ded6e19ecdb33e69622b42db6eb2224cecbd2f177785ae17a1d3b323e79443839d07e09441001518133444854197e9152fda78a16b1"}, @generic={0x12, 0xe, "7a832c195c544c4d052f939ea622e448"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x8, 0xff, 0x9, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xff, 0x1}]}}, {{0x9, 0x5, 0xc, 0x4, 0x3ff, 0x4, 0x86, 0x7, [@generic={0x13, 0x22, "c8dcd4f71b359f91e10c0c5e806545bf74"}, @generic={0x2e, 0x8, "fcb3501a523f5b9758de57d8a89d7401b18aaee3fdec45e7c66e102b8dceab94e6adbe2098400d7f2b4eeaa8"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x8, 0x5, 0x6, 0x8}}, {{0x9, 0x5, 0x88, 0x8, 0x400, 0x5, 0x5, 0x1, [@generic={0x42, 0x3, "072dfef9b8fa8fb5ac2e86ebae0422344885221ff95467ec599159b9d6b6f249c35674663e0ec6048b8e7a70726c4193460e57634c469e529af415f8fccf0a22"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0xb4, 0xfff2}]}}, {{0x9, 0x5, 0xc, 0x10, 0x400, 0xc, 0xb2, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xd, 0x1}]}}, {{0x9, 0x5, 0xa, 0x4, 0x400, 0x7, 0x81, 0x29}}, {{0x9, 0x5, 0x2, 0x10, 0x200, 0x2, 0xb, 0x5}}]}}]}}]}}, &(0x7f0000001100)={0xa, &(0x7f0000001000)={0xa, 0x6, 0x300, 0xf0, 0x8, 0x2, 0x8, 0x7}, 0x20, &(0x7f0000001040)={0x5, 0xf, 0x20, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x9, "2755dadcaaf1870110921ef3afa6badd"}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x5, 0x2}]}, 0x2, [{0x4, &(0x7f0000001080)=@lang_id={0x4, 0x3, 0x812}}, {0x4, &(0x7f00000010c0)=@lang_id={0x4, 0x3, 0x804}}]}) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000001140)={0x0, 0x0, 0xdddd0000, 0x1000, &(0x7f0000ffc000/0x1000)=nil, 0xe62, r1}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000001200)={0x1, 0x5}, 0x8) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000001240)={'geneve0\x00', {0x2, 0x4e24, @remote}}) write$tcp_mem(r1, &(0x7f0000001280)={0x7, 0x20, 0x0, 0x20, 0x3d7}, 0x48) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000001300), 0x440, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r3, 0xc028ae92, &(0x7f0000001340)={0x1ff, 0x9}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000001380)) recvmsg(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f00000013c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000001540)=[{&(0x7f0000001440)=""/119, 0x77}, {&(0x7f00000014c0)=""/116, 0x74}], 0x2, &(0x7f0000001580)=""/219, 0xdb}, 0x0) prlimit64(r0, 0x0, 0x0, &(0x7f00000016c0)) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000001700)={0x6, 0x8, {r0}, {}, 0x100000001, 0x6}) sched_setscheduler(r4, 0x5, &(0x7f0000001740)=0x1) 16m40.498234476s ago: executing program 3 (id=626): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x14, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb4}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x109140, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x9c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20014840}, 0xc010) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, &(0x7f0000000500)=""/64}, 0x20) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 16m39.363510716s ago: executing program 33 (id=626): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x14, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb4}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x109140, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x9c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20014840}, 0xc010) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, &(0x7f0000000500)=""/64}, 0x20) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 7m3.046300417s ago: executing program 5 (id=2013): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x14, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd4}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x109140, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x9c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20014840}, 0xc010) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, &(0x7f0000000500)=""/64}, 0x20) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 7m1.185081398s ago: executing program 5 (id=2015): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b70800000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x30, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x14, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc8}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x109140, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x9c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20014840}, 0xc010) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, &(0x7f0000000500)=""/64}, 0x20) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 7m0.767599356s ago: executing program 5 (id=2021): socket$tipc(0x1e, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="180000002d00090026bd7000000000000400000004001d"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x40084) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@map=r5, r6, 0x5}, 0x20) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r7, 0xffffffffffffffff, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$TIOCSTI(r9, 0x5412, &(0x7f00000001c0)) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000090000000a20000000000a05140000000000000000010000000900010073797a300000000058000000160a09000900000000000000010000000900010073797a30000000000900020073797a32000000002c00038018000380140001006d6163736563300000000000000000000800024000000000080001400000000014000000110001"], 0xa0}}, 0x0) 6m58.629735208s ago: executing program 5 (id=2028): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x2048c5, &(0x7f0000000400)={[{@shortname_winnt}, {@shortname_winnt}, {@rodir}, {@fat=@discard}, {@fat=@flush}, {@shortname_winnt}, {@numtail}, {@fat=@dmask={'dmask', 0x3d, 0x100}}, {@fat=@tz_utc}, {@uni_xlate}, {@utf8no}, {@shortname_winnt}]}, 0x0, 0x274, &(0x7f0000000a00)="$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") ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000340)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x284, 0x30, 0x300, 0x71bd2a, 0x25dfdbff, {}, [{0x270, 0x1, [@m_ife={0xb4, 0x1a, 0x0, 0x0, {{0x8}, {0x34, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @broadcast}, @TCA_IFE_SMAC={0xa, 0x4, @local}, @TCA_IFE_SMAC={0xa, 0x4, @broadcast}, @TCA_IFE_DMAC={0xa, 0x3, @multicast}]}, {0x5c, 0x6, "09e5f8bd05c911e495bdf5c0011b274bb654c58e67b946baa981d7876625983388d05c9e0eba1c5a1233afe53453b8228b3f3916f92a3dc698043b12151e2093609c744c2ee19975ece7a2ed5a1115121d15304cda49c8a9"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_nat={0x124, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0xf9, 0x6, "07d06a2aacf3da584e5d010c6312b560dabf6f5230a09ed45298afdae8a2eb781db2aad89ab5ce5df76f4c70f66a9184c6178fa6f728d835f83b9fff0354c92b16d8cde179f13666c5c6f78c17a6f9af4a4f9ba2c078b265b00dd3ee8a59f9dcde1c873015aae7ba5fe28ed60fb339ff8b9d9aa0d7dcf5f7d871ce403af0a07909e9bb3abe24faf398668e5517107941ac2b0bb9126f15246677de2308c8a93714e4ce3091e81898d8e3b81a057c0b7ddb562c97670acd6be99769a2178146942dd5d32403ccc6a6896b2a38b435e65b769c664b0ca553cff0b2e70cf22eca8b2e948723445e36ef8aedda02ce57beffc8fed0b602"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_bpf={0x38, 0x10, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_simple={0x5c, 0x2, 0x0, 0x0, {{0xb}, {0x4}, {0x2e, 0x6, "644cfabbe56834b72d4965b0f9c601f7e7e0a903f719e150808ef459921b7b7a784878285ded9060f202"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x284}, 0x1, 0x0, 0x0, 0x24040810}, 0x20040800) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000580)={0x5, 0xba61}) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r1, &(0x7f0000002140)={0x2020}, 0x2100) pselect6(0x40, &(0x7f0000000000)={0x9dc, 0x2d, 0x5, 0x0, 0x1, 0x4, 0x0, 0x6b}, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x14, 0x15, 0x1, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000180)={0xe02, 0x403, 0x202, 0xf, 0x3, 0x100000, 0x6, 0x0, r6}, 0x20) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x3d}}) 6m57.370435014s ago: executing program 5 (id=2033): open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r1 = open(&(0x7f00000001c0)='.\x00', 0x141400, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000180c0000000c002ca9790167cc9572870000020000001000"/47], 0x0, 0x26, 0x0, 0x9}, 0x28) getdents(r1, &(0x7f0000000280)=""/4096, 0x9005) close(r1) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$KVM_NMI(r1, 0xae9a) 6m56.552732394s ago: executing program 5 (id=2035): open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r3 = open(&(0x7f00000001c0)='.\x00', 0x141400, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000180c0000000c002ca9790167cc9572870000020000001000"/47], 0x0, 0x26, 0x0, 0x9}, 0x28) getdents(r3, &(0x7f0000000280)=""/4096, 0x9005) close(r3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000480)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0x110}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x1, 0xb, 0xa, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {}, {0x18, 0x6, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x2) 6m56.075859287s ago: executing program 34 (id=2035): open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r3 = open(&(0x7f00000001c0)='.\x00', 0x141400, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000180c0000000c002ca9790167cc9572870000020000001000"/47], 0x0, 0x26, 0x0, 0x9}, 0x28) getdents(r3, &(0x7f0000000280)=""/4096, 0x9005) close(r3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000480)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0x110}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x1, 0xb, 0xa, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {}, {0x18, 0x6, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x2) 6m31.006055687s ago: executing program 2 (id=2076): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getdents64(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b70300000000000085000000730000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="9feb010018000000000000002c00002c00000009000000040000000000000e0400000000000000060000000000000f0100000009000000000000000f03000000e104180000002e616130610000"], &(0x7f0000000900)=""/179, 0x4d, 0xb3, 0x1}, 0x28) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000100)) r5 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000140)=0x1) write$snddsp(r5, &(0x7f0000000200)="a3", 0x1) 6m26.857272598s ago: executing program 2 (id=2085): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x3c, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x1f, 0x1, 0x0, 0x1, [@generic="1c00ac61a831f65783946ecc0b0f422846a78241801394348a5e03"]}, @nested={0x4, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 6m26.723808742s ago: executing program 2 (id=2086): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) lremovexattr(0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x804810, &(0x7f0000000280)={[{@quota}, {@dioread_lock}]}, 0x26, 0x754, &(0x7f00000002c0)="$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") unlinkat(0xffffffffffffff9c, &(0x7f00000003c0)='./file2\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@volatile}], [], 0x2c}) r0 = socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000000002) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) r2 = fsopen(&(0x7f0000000380)='nfsd\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) connect$unix(r4, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x238}}, 0x0) sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x98, 0x0, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0x64, 0xa8, @random="6b8807e6c91e5975a3345daa5d0888f36e2b5d4f9a51fda814208778dfdd48cb9bc5c5924583b39d7314e14ef484bc87c198c40a892b1dcc4633a39c18d0755be743eceef6c598ee7534f78888af6ad2de0133a51a6f463f054dfd460bfb3472"}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000}, 0x14) close_range(r0, 0xffffffffffffffff, 0x0) 6m23.675918149s ago: executing program 2 (id=2091): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x2048c5, &(0x7f0000000400)={[{@shortname_winnt}, {@shortname_winnt}, {@rodir}, {@fat=@discard}, {@fat=@flush}, {@shortname_winnt}, {@numtail}, {@fat=@dmask={'dmask', 0x3d, 0x100}}, {@fat=@tz_utc}, {@uni_xlate}, {@utf8no}, {@shortname_winnt}]}, 0x0, 0x274, &(0x7f0000000a00)="$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") ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000340)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x284, 0x30, 0x300, 0x71bd2a, 0x25dfdbff, {}, [{0x270, 0x1, [@m_ife={0xb4, 0x1a, 0x0, 0x0, {{0x8}, {0x34, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @broadcast}, @TCA_IFE_SMAC={0xa, 0x4, @local}, @TCA_IFE_SMAC={0xa, 0x4, @broadcast}, @TCA_IFE_DMAC={0xa, 0x3, @multicast}]}, {0x5c, 0x6, "09e5f8bd05c911e495bdf5c0011b274bb654c58e67b946baa981d7876625983388d05c9e0eba1c5a1233afe53453b8228b3f3916f92a3dc698043b12151e2093609c744c2ee19975ece7a2ed5a1115121d15304cda49c8a9"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_nat={0x124, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0xf9, 0x6, "07d06a2aacf3da584e5d010c6312b560dabf6f5230a09ed45298afdae8a2eb781db2aad89ab5ce5df76f4c70f66a9184c6178fa6f728d835f83b9fff0354c92b16d8cde179f13666c5c6f78c17a6f9af4a4f9ba2c078b265b00dd3ee8a59f9dcde1c873015aae7ba5fe28ed60fb339ff8b9d9aa0d7dcf5f7d871ce403af0a07909e9bb3abe24faf398668e5517107941ac2b0bb9126f15246677de2308c8a93714e4ce3091e81898d8e3b81a057c0b7ddb562c97670acd6be99769a2178146942dd5d32403ccc6a6896b2a38b435e65b769c664b0ca553cff0b2e70cf22eca8b2e948723445e36ef8aedda02ce57beffc8fed0b602"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_bpf={0x38, 0x10, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_simple={0x5c, 0x2, 0x0, 0x0, {{0xb}, {0x4}, {0x2e, 0x6, "644cfabbe56834b72d4965b0f9c601f7e7e0a903f719e150808ef459921b7b7a784878285ded9060f202"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x284}, 0x1, 0x0, 0x0, 0x24040810}, 0x20040800) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000580)={0x5, 0xba61}) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r1, &(0x7f0000002140)={0x2020}, 0x2100) 6m22.747467664s ago: executing program 2 (id=2095): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x3c, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x1f, 0x1, 0x0, 0x1, [@generic="1c00ac61a831f65783946ecc0b0f422846a78241801394348a5e03"]}, @nested={0x4, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 6m18.774479807s ago: executing program 2 (id=2102): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000", @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0xc0a2) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)) sendmsg$nl_xfrm(r0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x40, r2, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x40}}, 0x0) 6m17.757269206s ago: executing program 35 (id=2102): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000", @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0xc0a2) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)) sendmsg$nl_xfrm(r0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x40, r2, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x40}}, 0x0) 4m3.478373384s ago: executing program 6 (id=2416): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getdents64(0xffffffffffffffff, &(0x7f00000004c0)=""/225, 0xe1) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="9feb010018000000000000002c00002c00000009000000040000000000000e0400000000000000"], &(0x7f0000000900)=""/179, 0x4d, 0xb3, 0x1}, 0x28) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) lsetxattr$security_capability(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000100), 0x0, 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) 4m2.283453098s ago: executing program 6 (id=2417): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)}], 0x1, 0x0) sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000080)='a', 0x4101}], 0x1, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) 4m0.397434905s ago: executing program 6 (id=2421): syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_udp(0xa, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9}, 0x48) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="120000000400000008000000080000000000", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0700000000000000000000000000000000004817"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, 0x0, 0x0}, 0x94) r5 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r4, &(0x7f0000000100), &(0x7f00000001c0)=@tcp=r5}, 0x20) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r6) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x34, r7, 0x1, 0x70bd2e, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8, 0xd, 0x1}]}, 0x34}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x218080, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8b37, &(0x7f0000000000)={'wlan1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) 3m58.859648809s ago: executing program 6 (id=2424): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x2048c5, &(0x7f0000000400)={[{@shortname_winnt}, {@shortname_winnt}, {@rodir}, {@fat=@discard}, {@fat=@flush}, {@shortname_winnt}, {@numtail}, {@fat=@dmask={'dmask', 0x3d, 0x100}}, {@fat=@tz_utc}, {@uni_xlate}, {@utf8no}, {@shortname_winnt}]}, 0x0, 0x274, &(0x7f0000000a00)="$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") ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000340)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000540)='mounts\x00') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x284, 0x30, 0x300, 0x71bd2a, 0x25dfdbff, {}, [{0x270, 0x1, [@m_ife={0xb4, 0x1a, 0x0, 0x0, {{0x8}, {0x34, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @broadcast}, @TCA_IFE_SMAC={0xa, 0x4, @local}, @TCA_IFE_SMAC={0xa, 0x4, @broadcast}, @TCA_IFE_DMAC={0xa, 0x3, @multicast}]}, {0x5c, 0x6, "09e5f8bd05c911e495bdf5c0011b274bb654c58e67b946baa981d7876625983388d05c9e0eba1c5a1233afe53453b8228b3f3916f92a3dc698043b12151e2093609c744c2ee19975ece7a2ed5a1115121d15304cda49c8a9"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_nat={0x124, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0xf9, 0x6, "07d06a2aacf3da584e5d010c6312b560dabf6f5230a09ed45298afdae8a2eb781db2aad89ab5ce5df76f4c70f66a9184c6178fa6f728d835f83b9fff0354c92b16d8cde179f13666c5c6f78c17a6f9af4a4f9ba2c078b265b00dd3ee8a59f9dcde1c873015aae7ba5fe28ed60fb339ff8b9d9aa0d7dcf5f7d871ce403af0a07909e9bb3abe24faf398668e5517107941ac2b0bb9126f15246677de2308c8a93714e4ce3091e81898d8e3b81a057c0b7ddb562c97670acd6be99769a2178146942dd5d32403ccc6a6896b2a38b435e65b769c664b0ca553cff0b2e70cf22eca8b2e948723445e36ef8aedda02ce57beffc8fed0b602"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_bpf={0x38, 0x10, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_simple={0x5c, 0x2, 0x0, 0x0, {{0xb}, {0x4}, {0x2e, 0x6, "644cfabbe56834b72d4965b0f9c601f7e7e0a903f719e150808ef459921b7b7a784878285ded9060f202"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x284}, 0x1, 0x0, 0x0, 0x24040810}, 0x20040800) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r1, &(0x7f0000002140)={0x2020}, 0x2100) 3m57.839557882s ago: executing program 6 (id=2428): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r6, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x20000811) close(r1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x1}}, 0x2e) close(r0) socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r8, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x1, &(0x7f00000001c0)=@ccm_128={{0x304}, "2371fc31ccccb7db", "375c8cf618576b0c8e03dd9be5908fb9", "adbee8fc", "372639e28ade0290"}, 0x28) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 3m53.462116092s ago: executing program 6 (id=2434): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@local, 0x8000000, 0x0, 0x3, 0x1, 0xfffc, 0xffff}, 0x20) setresuid(0x0, 0xee01, 0xee00) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x34, 0x18, 0xa, 0xb00, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xbc}}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001740)={{{@in6=@ipv4={""/10, ""/2, @local}, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000001840)=0xe8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(r1, 0xffffffb3, &(0x7f0000000240)=0x2) lstat(&(0x7f0000001880)='./file0\x00', &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r5, r5) r6 = getpid() sched_setscheduler(r6, 0x6, &(0x7f0000000200)=0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000002e40)={{{@in=@broadcast, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@private2}}, &(0x7f0000002f40)=0xe8) fstat(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, 0x0) r10 = dup(r9) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000034c0)) getuid() r11 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) r12 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r12, &(0x7f0000005500)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x11c0) fchown(r11, r13, r14) r15 = syz_open_dev$loop(&(0x7f0000003500), 0x0, 0x4a280) r16 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x82400, 0x184) lseek(r16, 0x8, 0x1) getdents(r16, 0x0, 0x40) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003600)=[{{&(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f00000016c0)=[{&(0x7f0000000240)="250f35122b4e2662d8a881d1fa98e02d0117def88d4a808a3197f9d6a94f121e23d3da579a9c2911fed62b2ea2fdfe52ddccad0c18037d79441d7345f4785a420a4604663e7cc4039b331cc16f2a65895b49b165f6311d639d47846929b03a844ce3003f05fc22a029bbffab0259389ec26697af86afffff50de875de8dfd0dce8154de4bd3a454b35e6003f92201192887908d08951a7260d8569064c7637185e3f72f97ec358c50aad9847682249e4f81548a073b121406203bf02698889ab1da2b9054601b7a829b5b2a17cb7", 0xce}, {&(0x7f0000003740)="58194886cbf67079562d1a784ebb125e2500f3a1592efb906821f8e4fe8f4830ab3dea3742c9c90fc829b881fe9a89b6a2b9eda543ca4312a01dce30d955edade8cacb269f22f4c29a45000048a88dd794e075655cf0af3e287af3e6221e794415bc88ed234319e28ee919c4d95a8494ed8d7ad454d152a67f7c8a300b62ef6911e10a1b7889bbe93ad664b9cd186abd6c7b8c7cab", 0x95}, {&(0x7f0000000400)="c20396acc76ad0428740e91db051e623e9458b9698f29d038d4b58c06ddd0f7124421b72348b16c341950b05d1288363ad9ce8a2ffb77713af189b3e0e5271e3e4f9c650241d0c7e4bb8f550f62ff804bbd55afaad08a4ee632119e09d72ca50f37ce0909e543befffec34f0a2d0846ca50f603e9ae844a502ca7dd0b596bc464e628d8357e5276425a16d", 0x8b}, {&(0x7f0000000080)="ed0fbb4507e9731766dff2d1d4bb8630", 0x10}, {&(0x7f00000004c0)="3b31eb96dbf8211a1e75390e02368d73bcf01eb51b0d47ab6d7d3fb4757681dbb5f159cce84470288eb4ac5a730f8d7b70c882bf6fde3d81d92773ed2ff0f6634b10831acb1dc5be2b4b1854", 0x4c}, {&(0x7f0000003800)="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", 0x1000}, {&(0x7f0000001540)="08bcf000e225257b6145739d994fa04f6024e2f310c17c0fe0c00afb4cd6598a8a8c2177d70de55d9d711f804901353b4f1c5eea1452321cd76c0c04055fe8fbb076fa33846bb6d75a33193a0817db023df193a25b6ad73aa0f6d69d8d79336c5551a1211c76a98750d1780af0d58f15228eeef87ed7889f7302b59b21c87e0c9f877e563396c07c2d798ee0a175b659afde00af73f205b4d4d041e9ffdeca85c38742e36ac956e340e4ed104028a6d1dbb479f66c73d071c59ceb6792b27f258818101be6a37c0616ac9371803096f0537b5c4e048fb32f9c4dab300115ae", 0xdf}, {&(0x7f0000001640)="bb6b9292cb9224e10d9348bcb570d40f074a36e47946d4bcf33d21deeaad76612d332b4776a148105b55ef805806484bbe60a63806200320c90ec8f1c0764c0f04d68a3aec1c4c782a30ad3fef8c744726fd553fd4b0041519299453cb8e04f2cfa2c6ca6f57", 0x66}], 0x8, &(0x7f0000001940)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r1, r2, r5}}}], 0x40}}, {{&(0x7f0000001980)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000002dc0)=[{&(0x7f0000001a00)="c1a4c02664b540e6cf70b06dc74401a38952d5f0dd0a252d592636813e6dd0c36020b480b25328b5b3f626f47dac4b76ac2e72622c797d4e01749d0498081583229b4a7d1160d3bc4600112c46bd6a22105ecf22887aef392c88b4a8c78dcf89b6c1d1c92aeccfd94b65b3531534b77296293a21797b3715322ba61de0d96225ba10ebb5bb7f2e894ce56d9f5bb0cba5e9f51e775754f8a542659b50d14ffd5801dc93f96dba56489520de0ad3315a93a38be4136168439bf972c82488d172f39b169df2b2fc07b20e16c0487cd9cb9365716dd29aa9efd247de2b1768420e3ed979bfa75d56b72799eb1042af7253f77aab8ebd9b9bf072fc05b8da64837646c45be5b960903e111331a1003dea4b7a11888c41a161f5ce5294880e44ba0a5d9e1d9f0b49b6941d102e42127a45a083fec731cf6c82a501faa8292ab9e95f5941d77db69f364bd9f21372970b61deac5cec0c62af621efc9d15d30fe4fdf4ade625d61ac43d8d18700734005d95f376f48b71a0a74be533bd9a2f96170af781e8d231a1f764ee558391147fcd9c9965b65283b425586d94eb9773c2308702f34fa6fa280438cd4ea4fda44e60eba9b1268df4cc43cc9ddff49c486d227ec6e87b1a8c4198948c4a61b16d2787405eade8d25439eda389dbe803f53afaa7f5776fa7323ccb50184625b403a554306773ce64f2a4f33e94b07ebbfe71f23aff94eba52dfbe420f7f5b56610231ddf794019d075a319a705340dc4072a64fcaf30442a60877c29562e2880e038e12f5c261d75c952b5ba9c6029f8ce4ae849ad3ae401a10b1a64c3f39f491287ead168e0613f7a6aba70cf93329984782b22b49f501c137018ef48ee6d4d829b54e5a07d00bc16b325ea6ae63ea789726d2d595397a80c23f3d000992ae38ead426281a4b05a345e1b74b3efca2095ac87e31fbc0100cf9414f814b494fcc4b9809ba913521ec983a3f471f9d658a56bdc30755f72f7571fb813a5e845a7f05da2daf15c11b63b06bdd0a9bf7607ce4d00e96519bdd48810b91b2dd6c156a350eac54cdf6c8d1f8990c3f65babc105d4f45188694f625d605f4a862ad05cc6d2a24ccda21fcfb88e6327bcf1687d8b98f48fd31557b7c227a0205a144ace0c83042f9014a2b1fdfa306cfb9e0c5497497aef6e369fdd1c27a96ce2364b393b7ebd3c4027e672bf3da60ad7c0f95723770a60182d3b46f8dafbf882e2c4d399c163769dc627dd5eb4d20dbe9a82f55cc7555e433e9b9fc8606ab9087b1580b903b80db1581bc97878a699d1fb41530e4897a1bbc27b2d10d494664ea5023cb8a10e658f7ca80e637ff633f5b1c9680ca8b67448903928398ec0300de2010b580200cfa769ebe397fe6a9e476382753d08689a5bda2f4357336bab262c508a879cea9a4f1c6b4188ad6827b0186e3419d3d8edb99c8567b624c25e129a594f0f65c09d02aef6442fa02cfc2a7bc718cae951693449bcac105122f0721da3d6a413d8533dbbe8acf1afcb2afc43174008062bfaa7ffbcd5edc94b49b220530ffaeb79e2623d9a91820f653d1d60f14aab2eb8bcd12bcc136da45e9e008c260a7b415684a131fdb1ea1282002c8fa6cbfefebd13a7e1f18764dade293ce71a632e3ef6b28461b464f27d1a06193174e3cba24d65489559bcd592dd698d704454daf819ff821d02f698cb4464f9803f86b5e3c3c205e099bb7e7b6f3f2162ff4b03608e57f2494d4fdb5e782b174b8a8a7dc53059223f11f7078bcf6b3871471122806ae93e0c3464a173a71e9af04ce5370f7f0a56511d3bd69da67ddb441532ed996e82000bbb4fea59183358e9f2febaeb9535fd74a64e63e7b4d2e56f22b7766cc342c546fff8b2cd22cbafe8257223a5fc3e6dfa9070bdaacbf800bd9aba91f3cc78d9148ddb5f7e8c41a55de158e4ef3c024bb2a0f7f1e159ec68edbcb81c4e7a855ef1fb84a2d1cb1a8f680ab2a270d12999f9e9bfd98b32dc14775eb24f022d4e274992ee829547d9c7483bb2ada82d65e8243ed08b9ce9fc3c656bb06288df8e8c2e0819fa7b9db42986c868cbe559322cbd64fbd093c3c646be54d948185961882cbdf77051892dd9a4585c1259bed2968de815af461881a62ccc448d35d3e2b23d08896fae24a0667ac55559ba2226acba39453836d9f5c39d2d048745750e86fe5f80bbcdd09c2fa4ac21dba30eb7123933f4deaa8a251659f44b01bbbb3c9ee9583e4dce86fc3568e560bfde061f1cf589562b1e7949f80072ac0e0e3f4c5ad93c181e25d27b116ff1b38e69e085145e7b44ff21dd9edcfeacf1bea48c3fb042f6cf981ede83672f0687a16eb7afce1b9d0bd6c5c23e38333eafc57bc30ee581a5da6fa4b52f202cb866b97afcd54de41e80b7cddef9fa1b58359e278b90a382b6c1e0f0d9065d2eaf16de1a44b0ba584275bd58199d40509043a92269fa64296e4e0d5394f056ed8a52d7062b00427ab421d24e7ac514f408869a090b43334af1db92ca4d32b21b1097e6da9b1b770bfadd1c4c17b210abcea04e73b9a444aeb0d1107d9ad3760324e2e74b087aee1fbadefb2a0cf2fe2ef0af816afa00005f890f5357d5a171a1e472113115dd7bb0e060ca1c39be6d7d7908e12ac7452b51592bc9d23c143944e6a9bb8d18969d771412b6c4a3adc026a1de4cfdebe090cfae659e18553587cffd67dd53da8ab357915ab74cf1c3f38ae67df364b07cf5ce1350d9f89172265da56254c2ba300975f263853a9db6ecbae74a5a85f2d5e9dbbf7dff440f8457dc733d25db29d742437aa8a239dd41f41ae7cc6459a0a3a1b5dde4478973a9054b0333b37a4c02f44de947da4030a968b4a0d95505545349d56836b61928410e50a7b62fc76ff468721a7d777cc789971dcb721fc668274a7f25f559b9004138d8139a85a7a6e661a8a98165d444e192cbdc6cfb40ac91a6ac172b2f8557e697578a0308403c908ee97538556cd87cce3ee572a8e413c71b843a500eefbca03832d2d3c2035173ff65979262a3c800b167496def309c9f95fdf8cfe08761d2526c477d815ab5fe1ac3c38d10283e6b8f7c1afe22989078740c95de283d48272cd8eba65bfa84cd727f253e6e52418972990ab371940f1409458e108857b6af26dd6d76b33a0a0634641fbf9edce3eb8303cd31e2b21ada19391212c781bd4470fba1883a1b086fbe3fc0b4aa0ac7abdc44fac8af778831849a2858ec906f50d6211b595452daa137685620039512225c678645ddba5812761e33fa6d518324b84733aa8c6477227f8df5e24d72574192c91cbdbceea20a10d0f7b6d4fac59bcf1c1eb4722641ee0b5acde979a94a6cdaa0dd250d14836fda7fc40803a29e8a97ded6cc4d43008bd31662579c26a1cd4c06d220477ba79521af36a70ffc773f03d64930b8f7ab8abf50dbf3faec7a5f01421cc8e77c5bb65ea3d317e4e6cab00d73ee2c2f38750c29546c5ffb62fbb6a4a6e0ccd1233faf1ecbabef11ab677bce5942c6408a2bac8c1e5844d52c0576d6c8bcba739f1b9bd6e3c9bdd7f3116bbb806baa85bc3ccd31ab93c95fb845b1cf577895edeb98fe3dd1909aac3b7ced0981a74f8b69a892a776fdae938a475b0abd6b75de4627c37df7e5556512196afed0a4ab2006929b55f1c7d6344b93783f9f1398032d0718d85d713d6cc01b5d8c95fccf3709f19658f918d1f604a32d4f6ff673b9c67a8ac473908402a1eb59bd81560ced7c08ece1f5fc3c85ca2c36a86350f692b66a4b0bf80bbb109d68d9a560a158c7ed62093ecb309c7c53de090ae042447165885137d67b0a7952d211b68c462509230de99fd3dc2883bc6298eef2e6961143ff919064a47b4eb70333e97779a2cf22973f14b65e0d92daab18e317c631f7dd29c0a984ee38cc36fe57e31d453d14299d355e9a70dae5165fa1e7d57e8d421535b0dac789bb06a8e07189bafed49071b90a7e6210feedeec4ef86143518e39a7eb2d735868606493a6d3978331eb0e94d5c279cb7843149fe9d6ecb02875d3ae1acd468038e57f18f0473e0284eb30c9cc55898111b47336cf8a1875dab47c03a7530805105616554794f6bc84ac59368b2f21a94941915c448c043c633c7458e7f0b15ef6a8d08efe57ddc0ddd5a09d9ead800db592e67dffaa2c11d5e4669f772d93581049641eeae252994b56bb25493ac04c0f4b3c3beadb294b153398c93e76964dbdfca2247fa76c4be33d912cfd3a8f3bb41a2f0844f3abc97c11e77b8b8ee4b5d6d0a091aafef2c487f29a267e9108578e8254696ff9affe62dba70dffbd832b154c0afc66d14d602aec6b8215f054627841e025e84176a86cff7d021d8d6295122a9546a9249c9da76a20e470ad1307a5cb20bc01035f532a7becb84233ff1598f7843b4b91dd97687449a081257683262479da25e5bec76153a4b0bda97e833be57c421767949d6e915ef52e1eb2d2fe48fa8c15f37bae1a791ed57e5a9d870faa7337fc21865efe73a5ae1e470d2eb24b520812e849174110a6122b1474a3e47194ac46c8f9f9155673700506cf20778093a6f3e1d1c9c4d7ce53d18073d88c2969e1c7c2e08a19ed0427875dd65a060aaf658f05dc7ba50e9435ddacbb3aeccdf0ac92aafdc145faf8180f6831fe8dac1e813258f3271bae4b1f49fbf8b8ff13bf8584d8ce025ef51c7597ecfb45a35112247b45ffb6c13f2c549b2c3aac2763c213648fb910d55f28f0f358e3436e4fd556d4da90ffbd153cccff18fbf694692b163a32d7b3347d05b00e3beafcb3fa5d8e49c8f9c67b99d794be2dae024380a270e2c1859c10687f356893ca8e720ac1bb4a78aaf62ba8393a12a1772b3362ec916fbd76ad99190df497f82615ca143a6d0ee8e1bec4c221b06b54d736143164524f40fade0271ea7277a4a5866857a854266f3ed4bd915a1ac30d0bef769de5db3beaae66662e1e59830339bd2a2d85ae6ddbff53c69e45fc1838acdd02e699adcd6cc6ba4155ac22d35dba70cdd34be046ceccc3a5bc9a7f35a2c05247e1bb097384e24e7dd6c3844a0a37f8043b5f9a50ae13d345e7ce4afc2e3aa942557591cbe791e2e4625c198f1a57eec6466c170710493532ccdaa47fe81eba240ee17045c7af28f2473bbb5df7607a88e8c28b1fda314a8edb7b057d9156f048bef6b45f972914b2d71bfd950290165423b69ac26979f29b9d6a8cb2cb28eca907517adfd71642504c8ca9d725a91ce6641eeda4bf00912975c14038971dbf0d5e4f760eec705a331e72b2e5d1d7fd6a8e0b9a480e185c31a732981be637d16bd4a9bfcbcb0c9d660c86883985e00a287129fbdea798b8df84f39cb4208a39579d6581dff43afdd77c3c543325675f1864feac96167407daf767c73758019ee2627f82b940b7e21a192caf75f4c337d2db88aefb454eb7264c3aa514bde2c4216e1d276d41383dc04a0f5598c28840b3f1caf497a85346f188a829b64a5544bcb6e2feb204d18f302ad4da1cb1d69c56329013c948eecac74d5685a756b05f9e387e5763ddec804f9b5102e268e6fa416ae371fa4f4dea53df2bb729cfbec78a26371b1a8b8a5f51b48e5de5961e872c7e6e265570d6c3678d197bc2c32c4d76117a59208c62451e3f35df8c1393d1b95adc994ef8a2ebe40aa320d083e41b8e1d0efe5bddaa28b4b0dcab3bd674a9ec3d9fe43866b12835af36a929a0a1236d150289a9455521c1ed799b94da36545d820a646ab1a30fbff93c97b91a6b7b807cb74dfd80e47689b579ef7bdcde6", 0x1000}, {&(0x7f0000000340)="695f1e82565737433ffac81d439d5b8b6c49999bbb4d544a5bda84e7b0ce1a71c8af35c950ecc0636279e359f8b274d9f88515e52a49c9dab7b8760bb2327f8a739cd8ec8874bda9a1a8cdd141e8e114c03a8bb976ca19ac1a08fdf5eb48aedd2cef587a122780dd64d212d12395fc6fcbf599c32225cafe8bad181be750de63d4e3b63b0bd1c2c68fe36045032960dfeb3fe0499c90aa3386773234db52648ac8a3361c6e1208934b360d30", 0xac}, {&(0x7f0000002ac0)="00f2c20681d55b2f0083", 0xa}, {&(0x7f0000002b00)="a484f34b7c157d5c035b", 0xa}, {&(0x7f0000002b40)="f7654c31db13da87fcb4eb91164c2591dded2bd87878c02b748b9e67ea7833db222a29933a29d080950db1be61e32ac12799107d6098c06ff5c05dd261dcc5d85d5a3be3a4ea05a8260fe859b6209fc7d858c8c0caaffb4857c22429b49c8d159de2287c2aa4728ec8f2e5a7c8af86a795cf594b7f025ea259ed5663dac0454e2d3990fad85978b508a7570e2a0687a001f5014e6fa16c03758e762bda8dc3fe65e72a37022a80530103db5617c87637f1fb96dc62b1acb8457bcd323baf4d9aef536d66b2bf0e4ff430cf2f0d7f10675b01ca0a6752621c", 0xd8}, {&(0x7f0000002c40)="f51066128dfce2372dbeda49000581fe2068c719c271c47dd55377422097b6e527134eeb72207e238246e765fd24ce22511fa347d231584ebef9c1f640de09212109e8e4e1be0fb10339901d52333aafef4bddd62b9c5b674528e7f364701f3b6fff0b1538ca65dac85e3087a62dcf63e91d6fa67896c4a4d9a77de8482e92216cb3aa8a3261e26afe921bd896dcac1540478b35466340476d554a4bb93ae323e1a65b7901393b8711524a773d7b6735befe315e3d0cfa20306384c3d7d48afeae456d4682681f389faafa0db6", 0xcd}, {&(0x7f0000002d40)="c37f24e89d834c97f85274f33089cb53c7177b2bef1b4af449503ba931cd2ba616fb15670611fb059fe53d33aa27e1b943ecb720b8352d42b2ec7b139ca73944970ebd801b8bf1ce80db", 0x4a}], 0x7, &(0x7f0000003000)=[@rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {r6, r7, r8}}}], 0x30, 0x4000000}}, {{&(0x7f0000003040)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003440), 0x0, &(0x7f0000003540)=[@cred={{0x1c, 0x1, 0x2, {r4, r2, r14}}}, @rights={{0x20, 0x1, 0x1, [r15, r11, 0xffffffffffffffff, r9]}}, @rights={{0x2c, 0x1, 0x1, [r0, r15, r10, r0, r0, r0, r0]}}], 0x70, 0x800}}], 0x3, 0x8810) 3m52.021616263s ago: executing program 36 (id=2434): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@local, 0x8000000, 0x0, 0x3, 0x1, 0xfffc, 0xffff}, 0x20) setresuid(0x0, 0xee01, 0xee00) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x34, 0x18, 0xa, 0xb00, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xbc}}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001740)={{{@in6=@ipv4={""/10, ""/2, @local}, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000001840)=0xe8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(r1, 0xffffffb3, &(0x7f0000000240)=0x2) lstat(&(0x7f0000001880)='./file0\x00', &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r5, r5) r6 = getpid() sched_setscheduler(r6, 0x6, &(0x7f0000000200)=0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000002e40)={{{@in=@broadcast, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@private2}}, &(0x7f0000002f40)=0xe8) fstat(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, 0x0) r10 = dup(r9) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000034c0)) getuid() r11 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) r12 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r12, &(0x7f0000005500)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x11c0) fchown(r11, r13, r14) r15 = syz_open_dev$loop(&(0x7f0000003500), 0x0, 0x4a280) r16 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x82400, 0x184) lseek(r16, 0x8, 0x1) getdents(r16, 0x0, 0x40) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003600)=[{{&(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f00000016c0)=[{&(0x7f0000000240)="250f35122b4e2662d8a881d1fa98e02d0117def88d4a808a3197f9d6a94f121e23d3da579a9c2911fed62b2ea2fdfe52ddccad0c18037d79441d7345f4785a420a4604663e7cc4039b331cc16f2a65895b49b165f6311d639d47846929b03a844ce3003f05fc22a029bbffab0259389ec26697af86afffff50de875de8dfd0dce8154de4bd3a454b35e6003f92201192887908d08951a7260d8569064c7637185e3f72f97ec358c50aad9847682249e4f81548a073b121406203bf02698889ab1da2b9054601b7a829b5b2a17cb7", 0xce}, {&(0x7f0000003740)="58194886cbf67079562d1a784ebb125e2500f3a1592efb906821f8e4fe8f4830ab3dea3742c9c90fc829b881fe9a89b6a2b9eda543ca4312a01dce30d955edade8cacb269f22f4c29a45000048a88dd794e075655cf0af3e287af3e6221e794415bc88ed234319e28ee919c4d95a8494ed8d7ad454d152a67f7c8a300b62ef6911e10a1b7889bbe93ad664b9cd186abd6c7b8c7cab", 0x95}, {&(0x7f0000000400)="c20396acc76ad0428740e91db051e623e9458b9698f29d038d4b58c06ddd0f7124421b72348b16c341950b05d1288363ad9ce8a2ffb77713af189b3e0e5271e3e4f9c650241d0c7e4bb8f550f62ff804bbd55afaad08a4ee632119e09d72ca50f37ce0909e543befffec34f0a2d0846ca50f603e9ae844a502ca7dd0b596bc464e628d8357e5276425a16d", 0x8b}, {&(0x7f0000000080)="ed0fbb4507e9731766dff2d1d4bb8630", 0x10}, {&(0x7f00000004c0)="3b31eb96dbf8211a1e75390e02368d73bcf01eb51b0d47ab6d7d3fb4757681dbb5f159cce84470288eb4ac5a730f8d7b70c882bf6fde3d81d92773ed2ff0f6634b10831acb1dc5be2b4b1854", 0x4c}, {&(0x7f0000003800)="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", 0x1000}, {&(0x7f0000001540)="08bcf000e225257b6145739d994fa04f6024e2f310c17c0fe0c00afb4cd6598a8a8c2177d70de55d9d711f804901353b4f1c5eea1452321cd76c0c04055fe8fbb076fa33846bb6d75a33193a0817db023df193a25b6ad73aa0f6d69d8d79336c5551a1211c76a98750d1780af0d58f15228eeef87ed7889f7302b59b21c87e0c9f877e563396c07c2d798ee0a175b659afde00af73f205b4d4d041e9ffdeca85c38742e36ac956e340e4ed104028a6d1dbb479f66c73d071c59ceb6792b27f258818101be6a37c0616ac9371803096f0537b5c4e048fb32f9c4dab300115ae", 0xdf}, {&(0x7f0000001640)="bb6b9292cb9224e10d9348bcb570d40f074a36e47946d4bcf33d21deeaad76612d332b4776a148105b55ef805806484bbe60a63806200320c90ec8f1c0764c0f04d68a3aec1c4c782a30ad3fef8c744726fd553fd4b0041519299453cb8e04f2cfa2c6ca6f57", 0x66}], 0x8, &(0x7f0000001940)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r1, r2, r5}}}], 0x40}}, {{&(0x7f0000001980)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000002dc0)=[{&(0x7f0000001a00)="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", 0x1000}, {&(0x7f0000000340)="695f1e82565737433ffac81d439d5b8b6c49999bbb4d544a5bda84e7b0ce1a71c8af35c950ecc0636279e359f8b274d9f88515e52a49c9dab7b8760bb2327f8a739cd8ec8874bda9a1a8cdd141e8e114c03a8bb976ca19ac1a08fdf5eb48aedd2cef587a122780dd64d212d12395fc6fcbf599c32225cafe8bad181be750de63d4e3b63b0bd1c2c68fe36045032960dfeb3fe0499c90aa3386773234db52648ac8a3361c6e1208934b360d30", 0xac}, {&(0x7f0000002ac0)="00f2c20681d55b2f0083", 0xa}, {&(0x7f0000002b00)="a484f34b7c157d5c035b", 0xa}, {&(0x7f0000002b40)="f7654c31db13da87fcb4eb91164c2591dded2bd87878c02b748b9e67ea7833db222a29933a29d080950db1be61e32ac12799107d6098c06ff5c05dd261dcc5d85d5a3be3a4ea05a8260fe859b6209fc7d858c8c0caaffb4857c22429b49c8d159de2287c2aa4728ec8f2e5a7c8af86a795cf594b7f025ea259ed5663dac0454e2d3990fad85978b508a7570e2a0687a001f5014e6fa16c03758e762bda8dc3fe65e72a37022a80530103db5617c87637f1fb96dc62b1acb8457bcd323baf4d9aef536d66b2bf0e4ff430cf2f0d7f10675b01ca0a6752621c", 0xd8}, {&(0x7f0000002c40)="f51066128dfce2372dbeda49000581fe2068c719c271c47dd55377422097b6e527134eeb72207e238246e765fd24ce22511fa347d231584ebef9c1f640de09212109e8e4e1be0fb10339901d52333aafef4bddd62b9c5b674528e7f364701f3b6fff0b1538ca65dac85e3087a62dcf63e91d6fa67896c4a4d9a77de8482e92216cb3aa8a3261e26afe921bd896dcac1540478b35466340476d554a4bb93ae323e1a65b7901393b8711524a773d7b6735befe315e3d0cfa20306384c3d7d48afeae456d4682681f389faafa0db6", 0xcd}, {&(0x7f0000002d40)="c37f24e89d834c97f85274f33089cb53c7177b2bef1b4af449503ba931cd2ba616fb15670611fb059fe53d33aa27e1b943ecb720b8352d42b2ec7b139ca73944970ebd801b8bf1ce80db", 0x4a}], 0x7, &(0x7f0000003000)=[@rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {r6, r7, r8}}}], 0x30, 0x4000000}}, {{&(0x7f0000003040)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003440), 0x0, &(0x7f0000003540)=[@cred={{0x1c, 0x1, 0x2, {r4, r2, r14}}}, @rights={{0x20, 0x1, 0x1, [r15, r11, 0xffffffffffffffff, r9]}}, @rights={{0x2c, 0x1, 0x1, [r0, r15, r10, r0, r0, r0, r0]}}], 0x70, 0x800}}], 0x3, 0x8810) 2m39.014239301s ago: executing program 0 (id=2474): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) lremovexattr(0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x804810, &(0x7f0000000280)={[{@quota}, {@dioread_lock}]}, 0x26, 0x754, &(0x7f00000002c0)="$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") unlinkat(0xffffffffffffff9c, &(0x7f00000003c0)='./file2\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@volatile}], [], 0x2c}) r0 = socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000000002) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r1 = fsopen(&(0x7f0000000380)='nfsd\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) munmap(&(0x7f0000104000/0x1000)=nil, 0x1000) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x238}}, 0x0) sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x98, 0x0, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0x64, 0xa8, @random="6b8807e6c91e5975a3345daa5d0888f36e2b5d4f9a51fda814208778dfdd48cb9bc5c5924583b39d7314e14ef484bc87c198c40a892b1dcc4633a39c18d0755be743eceef6c598ee7534f78888af6ad2de0133a51a6f463f054dfd460bfb3472"}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000}, 0x14) close_range(r0, 0xffffffffffffffff, 0x0) 2m35.006140103s ago: executing program 0 (id=2481): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef42d430f6296b72a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed40000000022278d00031e5388ee5c867ddd58211d6ece3ccb0cd2b6d3cffd962867a3a2f624f992daa94a6a556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff020000000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409e011f1264d43f153b3d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7000026a4e739c60f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf3f704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eedd9068ca1457870eb30d219e23ccc8e06dddeb61799257ab5000013c86ba99523d61a00000000c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb8629aeec90e6d1857da822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae200f279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522e8dff8bc570a93fbdb688c3aef810000007a6ea6"], 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x20000811) close(0xffffffffffffffff) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x1}}, 0x2e) 2m33.738329355s ago: executing program 0 (id=2485): r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000380)=0x4, 0x4) bind$l2tp6(r0, 0x0, 0x0) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r3, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x17, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0xa4}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x1, 0x20}, {0x65, 0x0, 0x6}}, [@printk={@lld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x2, 0xa, 0x9}, {0x7, 0x0, 0x3, 0x9}, {}, {}, {0x15}}], {{0x5, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, 0x0, 0xe, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) connect$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x1, @dev={0xfe, 0x80, '\x00', 0x42}, 0x9, 0x1}, 0x20) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r5, 0x8001000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2c8, 0x0, 0x11, 0x148, 0xd0, 0x0, 0x230, 0x2a8, 0x2a8, 0x230, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x5, 0x3]}, {0xffffffffffffffff}}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00', {}, {}, 0x0, 0x0, 0x4}, 0x0, 0x100, 0x160, 0x0, {}, [@common=@ttl={{0x28}}, @common=@unspec=@physdev={{0x68}, {'batadv_slave_0\x00', {0xff}, 'ip_vti0\x00', {0xff}, 0xf}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x0, 0x1, 0x5, 0x2, 0x0, 0x1], 0x1, 0x1}, {0x0, [0x0, 0x4, 0x6, 0x4, 0x1, 0x4], 0x4, 0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000140)={'\x00', 0x5, 0x6, 0x0, 0x7ff, 0x2, 0xffffffffffffffff}) fcntl$setown(r5, 0x8, r6) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005480), 0x0, 0x40000) 2m30.874773266s ago: executing program 0 (id=2487): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x2048c5, &(0x7f0000000400)={[{@shortname_winnt}, {@shortname_winnt}, {@rodir}, {@fat=@discard}, {@fat=@flush}, {@shortname_winnt}, {@numtail}, {@fat=@dmask={'dmask', 0x3d, 0x100}}, {@fat=@tz_utc}, {@uni_xlate}, {@utf8no}, {@shortname_winnt}]}, 0x0, 0x274, &(0x7f0000000a00)="$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") ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000340)) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x284, 0x30, 0x300, 0x71bd2a, 0x25dfdbff, {}, [{0x270, 0x1, [@m_ife={0xb4, 0x1a, 0x0, 0x0, {{0x8}, {0x34, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @broadcast}, @TCA_IFE_SMAC={0xa, 0x4, @local}, @TCA_IFE_SMAC={0xa, 0x4, @broadcast}, @TCA_IFE_DMAC={0xa, 0x3, @multicast}]}, {0x5c, 0x6, "09e5f8bd05c911e495bdf5c0011b274bb654c58e67b946baa981d7876625983388d05c9e0eba1c5a1233afe53453b8228b3f3916f92a3dc698043b12151e2093609c744c2ee19975ece7a2ed5a1115121d15304cda49c8a9"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_nat={0x124, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0xf9, 0x6, "07d06a2aacf3da584e5d010c6312b560dabf6f5230a09ed45298afdae8a2eb781db2aad89ab5ce5df76f4c70f66a9184c6178fa6f728d835f83b9fff0354c92b16d8cde179f13666c5c6f78c17a6f9af4a4f9ba2c078b265b00dd3ee8a59f9dcde1c873015aae7ba5fe28ed60fb339ff8b9d9aa0d7dcf5f7d871ce403af0a07909e9bb3abe24faf398668e5517107941ac2b0bb9126f15246677de2308c8a93714e4ce3091e81898d8e3b81a057c0b7ddb562c97670acd6be99769a2178146942dd5d32403ccc6a6896b2a38b435e65b769c664b0ca553cff0b2e70cf22eca8b2e948723445e36ef8aedda02ce57beffc8fed0b602"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_bpf={0x38, 0x10, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_simple={0x5c, 0x2, 0x0, 0x0, {{0xb}, {0x4}, {0x2e, 0x6, "644cfabbe56834b72d4965b0f9c601f7e7e0a903f719e150808ef459921b7b7a784878285ded9060f202"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x284}, 0x1, 0x0, 0x0, 0x24040810}, 0x20040800) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002140)={0x2020}, 0x2100) 2m30.476603815s ago: executing program 0 (id=2489): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280), 0x0) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x30, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x14, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x9c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20014840}, 0xc010) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, &(0x7f0000000500)=""/64}, 0x20) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2m29.539973627s ago: executing program 0 (id=2491): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r3}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x64}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x3b, 0x10, 0x0, 0x1800}, 0x48) 2m28.598007654s ago: executing program 37 (id=2491): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r3}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x64}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x3b, 0x10, 0x0, 0x1800}, 0x48) 2.594505337s ago: executing program 8 (id=4146): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e80000085"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x18) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x20}) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000100)={&(0x7f0000ffb000/0x1000)=nil, 0x1000}) 2.042834766s ago: executing program 4 (id=4152): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='tlb_flush\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000003, 0x4c831, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 1.981561938s ago: executing program 9 (id=4153): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) io_getevents(0x0, 0x4, 0x4, &(0x7f00000000c0)=[{}, {}, {}, {}], 0x0) io_destroy(0x0) 1.782555817s ago: executing program 9 (id=4156): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x18d6, &(0x7f0000000040)={0x0, 0x3}, 0x0, 0x0) syz_io_uring_setup(0xc44, &(0x7f00000002c0)={0x0, 0xec25, 0x8, 0x0, 0x40000333, 0x0, r0}, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) fanotify_init(0x200, 0x0) syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x8a6f, 0x100, 0x22, 0x335}, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000600), 0x8) syz_open_dev$mouse(0x0, 0x0, 0x8042) r1 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r3}, 0x1e) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r2], &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000280)=[0x7fffffff]}) 1.763241354s ago: executing program 4 (id=4158): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101600, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0x4018aee3, 0x0) 1.58423549s ago: executing program 4 (id=4161): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x1, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.554618505s ago: executing program 9 (id=4162): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x18e0}}, 0x0) 1.478897374s ago: executing program 8 (id=4165): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0xf11, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 1.428129941s ago: executing program 9 (id=4166): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa3}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 1.336558095s ago: executing program 4 (id=4168): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='tlb_flush\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000003, 0x4c831, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 1.315450585s ago: executing program 8 (id=4169): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@getnexthop={0x18, 0x76, 0x805, 0x4004, 0x25dfdbff, {0x3}}, 0x18}}, 0x40080c0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x18000000000002a0, 0x6a, 0xfe, &(0x7f0000000080)="b9e203076008008cb89e08f086dd", 0x0, 0xfffffdff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.24248066s ago: executing program 1 (id=4171): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x3, 0xc, &(0x7f0000000e00)=ANY=[@ANYBLOB="180200000000000000000000000000008500000011000000180100002020692500000000002020207b1af8ff00000000bfa110000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000300)="3b651463d6698d625fef2e24f1ca", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.24236956s ago: executing program 9 (id=4172): syz_open_dev$sg(&(0x7f0000000100), 0xf9ba, 0x28540) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) openat$random(0xffffffffffffff9c, &(0x7f0000001880), 0x40101, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0) 1.165123943s ago: executing program 8 (id=4173): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x18d6, &(0x7f0000000040)={0x0, 0x3}, 0x0, 0x0) syz_io_uring_setup(0xc44, &(0x7f00000002c0)={0x0, 0xec25, 0x8, 0x0, 0x40000333, 0x0, r0}, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) fanotify_init(0x200, 0x0) syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x8a6f, 0x100, 0x22, 0x335}, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000600), 0x8) syz_open_dev$mouse(0x0, 0x0, 0x8042) r1 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r3}, 0x1e) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r2], &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000280)=[0x7fffffff]}) 1.15475225s ago: executing program 4 (id=4175): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x18) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x20}) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000100)={&(0x7f0000ffb000/0x1000)=nil, 0x1000}) 1.043670115s ago: executing program 1 (id=4176): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x18e0}}, 0x0) 1.04293568s ago: executing program 7 (id=4177): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e000000001800", @ANYRES32], 0x50}, 0x1, 0xba01}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000", 0x17}], 0x1}, 0x404c080) 948.432619ms ago: executing program 8 (id=4178): pipe2(0x0, 0x4800) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}}, 0x0) 915.447584ms ago: executing program 7 (id=4179): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x1, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 896.93523ms ago: executing program 1 (id=4180): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c80)={&(0x7f0000000b80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@typedef={0x5, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x2e, 0x5f, 0x61, 0x5f, 0x2e, 0x30]}}, 0x0, 0x2c, 0x0, 0x1, 0x7fffffff}, 0x28) 755.194942ms ago: executing program 8 (id=4181): socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340), 0x1c9243, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r0, 0x7fff) syz_open_dev$tty1(0xc, 0x4, 0x3) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x47}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0x0, 0x9, 0x0, 0x1, 0x7fffffff}, 0x0, 0x0) 746.232951ms ago: executing program 1 (id=4182): bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) 690.972584ms ago: executing program 7 (id=4183): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@getnexthop={0x18, 0x76, 0x805, 0x4004, 0x25dfdbff, {0x3}}, 0x18}}, 0x40080c0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x18000000000002a0, 0x6a, 0xfe, &(0x7f0000000080)="b9e203076008008cb89e08f086dd", 0x0, 0xfffffdff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 562.563294ms ago: executing program 1 (id=4184): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0xa0}]}, &(0x7f0000000180)='syzkaller\x00', 0x5, 0xd2, &(0x7f00000002c0)=""/210}, 0x94) 562.418185ms ago: executing program 7 (id=4185): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00T\x00=\t\x00\x00', @ANYRES32=r2, @ANYBLOB="20000200", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000020000100", @ANYRES32=r2], 0x58}}, 0x0) 499.853787ms ago: executing program 7 (id=4186): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) 479.782059ms ago: executing program 1 (id=4187): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000280)='./bus\x00', 0x2000898, &(0x7f0000000180)={[{@barrier}, {@autodefrag}, {@ref_verify}, {@enospc_debug}, {@noflushoncommit}, {@usebackuproot}, {@max_inline={'max_inline', 0x3d, [0x37, 0x37, 0x6b, 0x37]}}, {@thread_pool={'thread_pool', 0x3d, 0x6}}, {@ssd_spread}]}, 0x1, 0x55ae, &(0x7f0000005600)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x0) 404.108577ms ago: executing program 7 (id=4188): sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x44050) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2, 0x0, 0x7}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c0260000410007010000000007000000017c00000400fc80a72601"], 0x26c0}}, 0x4010) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0x541b, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 6.797885ms ago: executing program 9 (id=4189): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e000000001800", @ANYRES32], 0x50}, 0x1, 0xba01}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000", 0x17}], 0x1}, 0x404c080) 0s ago: executing program 4 (id=4190): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000215c1800000c0a010300000000000000000700000a0900020073797a31000000000900010073797a3000000000301803802c180080080003400000000220180b801c18018008000100636d70001018028034040380f40001001a536cc601903447c4d1316b434f0f0df7197676fbac4b653eb16a126741d889f7a11ce74f2e0aabbeb14220b3c221ce781b97b9ea076645dd970c3d9b03ffb67b5f8037799d5e4243a71751b7fd608d1dc64071d88de5a46bd6b21e8f5402cd8917c3308d3a9fd1a71d67f8aaff5484991f8ab3eb94f1ccc8d13435a10d8cf7518745620643bba6bd2bd5a12db61ebe50941d4f11c1225c3b2284a63addf87d3c6490a7adb1bb4efa8515aba6be408482710359becce142b796e52c933d11eec49585f4cecd3be276956e0dda85fea617518663c5a72a18942df8aa94b16e7221854bd25b341b129a23dc34fc37b017300002800900020073797a32000000000900020073797a300000000008000340000000040900020073797a3000000000180002800900020073797a300000000008000180fffffffb3800028008000180fffffffb080003400000000408000340000000020900020073797a310000000008000180ffffffff08000180fffffffb3d000100c47132f09de91a2c2ad60d846673bc985da578ff0ac797eb590e88f0ba59120850df808b04657e9deed8c2f02a55f7a08a9c7c30c64a8578e90000004800028009000200"], 0x18e0}}, 0x0) kernel console output (not intermixed with test programs): [T16404] xtLookup: xtSearch returned -5 [ 1193.471546][T16404] free_index: error reading directory table [ 1193.486839][ T2977] bridge_slave_1: left promiscuous mode [ 1193.495513][ T2977] bridge0: port 2(bridge_slave_1) entered disabled state [ 1193.541400][ T2977] bridge_slave_0: left allmulticast mode [ 1193.590986][ T2977] bridge_slave_0: left promiscuous mode [ 1193.598351][ T2977] bridge0: port 1(bridge_slave_0) entered disabled state [ 1193.613574][ T5925] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1193.623120][ T5925] usb 9-1: config 6 has an invalid interface number: 200 but max is 0 [ 1193.651105][ T5925] usb 9-1: config 6 has no interface number 0 [ 1193.657297][ T5925] usb 9-1: config 6 interface 200 has no altsetting 0 [ 1193.697347][ T5925] usb 9-1: New USB device found, idVendor=05d8, idProduct=810c, bcdDevice=18.5f [ 1193.742477][ T5925] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1193.772250][ T5925] usb 9-1: Product: syz [ 1193.789289][ T5925] usb 9-1: Manufacturer: syz [ 1193.794109][ T5925] usb 9-1: SerialNumber: syz [ 1193.816498][T16423] loop7: detected capacity change from 0 to 1024 [ 1194.000060][ T5841] Bluetooth: hci2: command tx timeout [ 1195.043007][ T5841] Bluetooth: hci4: command tx timeout [ 1195.632604][ T2977] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1195.645088][ T2977] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1195.674968][ T2977] bond0 (unregistering): Released all slaves [ 1195.861862][T16443] loop9: detected capacity change from 0 to 256 [ 1195.875746][T16443] exfat: Deprecated parameter 'utf8' [ 1195.892171][T16443] exfat: Deprecated parameter 'namecase' [ 1195.897980][T16443] exfat: Deprecated parameter 'utf8' [ 1195.946202][T16443] exFAT-fs (loop9): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 1196.170163][ T30] audit: type=1326 audit(1750793718.486:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16442 comm="syz.9.2502" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f65e118e929 code=0x0 [ 1196.172252][ T2977] bond1 (unregistering): Released all slaves [ 1196.201346][T16444] exFAT-fs (loop9): start_clu is invalid cluster(0x400) [ 1196.225906][ T5841] Bluetooth: hci2: command tx timeout [ 1197.020486][T16447] FAULT_INJECTION: forcing a failure. [ 1197.020486][T16447] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1197.037310][ T2977] bond2 (unregistering): Released all slaves [ 1197.060373][T16447] CPU: 0 UID: 0 PID: 16447 Comm: syz.9.2503 Not tainted 6.16.0-rc3-next-20250624-syzkaller #0 PREEMPT(full) [ 1197.060408][T16447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1197.060422][T16447] Call Trace: [ 1197.060431][T16447] [ 1197.060442][T16447] dump_stack_lvl+0x189/0x250 [ 1197.060482][T16447] ? __pfx____ratelimit+0x10/0x10 [ 1197.060511][T16447] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1197.060545][T16447] ? __pfx__printk+0x10/0x10 [ 1197.060570][T16447] ? __might_fault+0xb0/0x130 [ 1197.060614][T16447] should_fail_ex+0x414/0x560 [ 1197.060652][T16447] _copy_from_user+0x2d/0xb0 [ 1197.060684][T16447] ___sys_sendmsg+0x158/0x2a0 [ 1197.060712][T16447] ? __pfx____sys_sendmsg+0x10/0x10 [ 1197.060784][T16447] ? __fget_files+0x2a/0x420 [ 1197.060804][T16447] ? __fget_files+0x3a0/0x420 [ 1197.060836][T16447] __x64_sys_sendmsg+0x19b/0x260 [ 1197.060863][T16447] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1197.060899][T16447] ? __pfx_ksys_write+0x10/0x10 [ 1197.060928][T16447] ? rcu_is_watching+0x15/0xb0 [ 1197.060966][T16447] ? do_syscall_64+0xbe/0x3b0 [ 1197.061000][T16447] do_syscall_64+0xfa/0x3b0 [ 1197.061027][T16447] ? lockdep_hardirqs_on+0x9c/0x150 [ 1197.061054][T16447] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1197.061078][T16447] ? clear_bhb_loop+0x60/0xb0 [ 1197.061104][T16447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1197.061127][T16447] RIP: 0033:0x7f65e118e929 [ 1197.061147][T16447] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1197.061166][T16447] RSP: 002b:00007f65deff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1197.061189][T16447] RAX: ffffffffffffffda RBX: 00007f65e13b5fa0 RCX: 00007f65e118e929 [ 1197.061205][T16447] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1197.061221][T16447] RBP: 00007f65deff6090 R08: 0000000000000000 R09: 0000000000000000 [ 1197.061235][T16447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1197.061250][T16447] R13: 0000000000000000 R14: 00007f65e13b5fa0 R15: 00007ffdd7c21c88 [ 1197.061284][T16447] [ 1197.452427][ T5841] Bluetooth: hci4: command tx timeout [ 1197.516324][T16449] openvswitch: netlink: Key type 8620 is out of range max 32 [ 1197.697253][ T2977] bond3 (unregistering): Released all slaves [ 1197.960328][ T2977] bond4 (unregistering): Released all slaves [ 1198.167774][ T2977] bond5 (unregistering): Released all slaves [ 1198.389881][ T2977] bond6 (unregistering): Released all slaves [ 1198.453310][ T5841] Bluetooth: hci2: command tx timeout [ 1198.619174][ T2977] bond7 (unregistering): Released all slaves [ 1198.880153][T16456] loop9: detected capacity change from 0 to 2048 [ 1198.909599][ T2977] bond8 (unregistering): Released all slaves [ 1199.019362][T16456] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1199.142277][T16456] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1199.181303][ T5925] dvb-usb: found a 'Artec T14 - USB2.0 DVB-T' in warm state. [ 1199.210877][T16467] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2508'. [ 1199.214859][ T5925] dvb-usb: bulk message failed: -71 (3/0) [ 1199.305931][ T5925] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1199.347142][T16456] overlayfs: failed to create directory ./file0/index (errno: 28); mounting read-only [ 1199.382466][ T5925] dvb-usb: Artec T14 - USB2.0 DVB-T error while loading driver (-23) [ 1199.393651][ T5925] dvb_usb_dibusb_mc 9-1:6.200: probe with driver dvb_usb_dibusb_mc failed with error -23 [ 1199.408101][T16456] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 1199.438495][ T5925] usb 9-1: USB disconnect, device number 9 [ 1199.526527][ T2977] tipc: Left network mode [ 1199.564149][T16383] bridge0: port 1(bridge_slave_0) entered blocking state [ 1199.579918][T16383] bridge0: port 1(bridge_slave_0) entered disabled state [ 1199.587219][T16383] bridge_slave_0: entered allmulticast mode [ 1199.781919][ T5841] Bluetooth: hci4: command tx timeout [ 1199.792160][T16383] bridge_slave_0: entered promiscuous mode [ 1199.817695][T16383] bridge0: port 2(bridge_slave_1) entered blocking state [ 1199.829302][T16383] bridge0: port 2(bridge_slave_1) entered disabled state [ 1199.838924][T16480] loop8: detected capacity change from 0 to 2048 [ 1200.057642][T16383] bridge_slave_1: entered allmulticast mode [ 1200.086292][T16383] bridge_slave_1: entered promiscuous mode [ 1200.129064][T16484] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1200.164399][T16480] FAULT_INJECTION: forcing a failure. [ 1200.164399][T16480] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1200.168413][ T30] audit: type=1800 audit(1750793722.246:375): pid=16480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2511" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 1200.233979][T16485] NILFS error (device loop8): nilfs_lookup: deleted inode referenced: 12 [ 1200.237512][T16480] CPU: 1 UID: 0 PID: 16480 Comm: syz.8.2511 Not tainted 6.16.0-rc3-next-20250624-syzkaller #0 PREEMPT(full) [ 1200.237556][T16480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1200.237573][T16480] Call Trace: [ 1200.237584][T16480] [ 1200.237595][T16480] dump_stack_lvl+0x189/0x250 [ 1200.237640][T16480] ? __pfx____ratelimit+0x10/0x10 [ 1200.237674][T16480] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1200.237712][T16480] ? __pfx__printk+0x10/0x10 [ 1200.237741][T16480] ? fs_reclaim_acquire+0x7d/0x100 [ 1200.237778][T16480] should_fail_ex+0x414/0x560 [ 1200.237821][T16480] prepare_alloc_pages+0x213/0x610 [ 1200.237858][T16480] __alloc_frozen_pages_noprof+0x123/0x370 [ 1200.237892][T16480] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1200.237943][T16480] alloc_pages_mpol+0x232/0x4a0 [ 1200.237985][T16480] alloc_pages_noprof+0xa9/0x190 [ 1200.238026][T16480] folio_alloc_noprof+0x1e/0x30 [ 1200.238063][T16480] filemap_alloc_folio_noprof+0xdf/0x470 [ 1200.238103][T16480] ? filemap_get_entry+0xad/0x2f0 [ 1200.238125][T16480] ? filemap_get_entry+0xad/0x2f0 [ 1200.238152][T16480] ? filemap_get_entry+0x28f/0x2f0 [ 1200.238177][T16480] ? __pfx_filemap_alloc_folio_noprof+0x10/0x10 [ 1200.238231][T16480] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1200.238270][T16480] __filemap_get_folio+0x3f2/0xaf0 [ 1200.238310][T16480] nilfs_grab_buffer+0xab/0x490 [ 1200.238348][T16480] nilfs_mdt_submit_block+0xaf/0x830 [ 1200.238385][T16480] ? __lock_acquire+0xab9/0xd20 [ 1200.238421][T16480] ? __pfx_nilfs_mdt_submit_block+0x10/0x10 [ 1200.238476][T16480] nilfs_mdt_read_block+0x46/0x320 [ 1200.238523][T16480] nilfs_mdt_get_block+0x14b/0xb30 [ 1200.238579][T16480] ? __pfx_nilfs_mdt_get_block+0x10/0x10 [ 1200.238618][T16480] ? do_raw_spin_unlock+0x122/0x240 [ 1200.238651][T16480] nilfs_palloc_get_block+0x18d/0x2b0 [ 1200.238696][T16480] nilfs_palloc_get_entry_block+0x8c/0xa0 [ 1200.238737][T16480] nilfs_dat_translate+0x94/0x3f0 [ 1200.238772][T16480] ? __pfx_nilfs_dat_translate+0x10/0x10 [ 1200.238815][T16480] nilfs_direct_lookup_contig+0x12e/0x360 [ 1200.238852][T16480] ? __pfx_nilfs_direct_lookup_contig+0x10/0x10 [ 1200.238887][T16480] ? down_read+0x1ad/0x2e0 [ 1200.238927][T16480] nilfs_bmap_lookup_contig+0x8e/0x160 [ 1200.238968][T16480] nilfs_get_block+0x1fb/0x8f0 [ 1200.239013][T16480] ? __pfx_nilfs_get_block+0x10/0x10 [ 1200.239048][T16480] ? iov_iter_extract_bvec_pages+0x729/0x7d0 [ 1200.239095][T16480] ? blk_start_plug+0x6f/0x1b0 [ 1200.239123][T16480] ? __pfx_nilfs_get_block+0x10/0x10 [ 1200.239156][T16480] __blockdev_direct_IO+0x16fc/0x3490 [ 1200.239239][T16480] ? __pfx___blockdev_direct_IO+0x10/0x10 [ 1200.239283][T16480] ? __pfx_nilfs_get_block+0x10/0x10 [ 1200.239327][T16480] ? __pfx_filemap_write_and_wait_range+0x10/0x10 [ 1200.239398][T16480] ? __alloc_frozen_pages_noprof+0x1d6/0x370 [ 1200.239453][T16480] nilfs_direct_IO+0xed/0x120 [ 1200.239491][T16480] generic_file_read_iter+0x319/0x510 [ 1200.239538][T16480] copy_splice_read+0x54f/0x9b0 [ 1200.239592][T16480] ? __pfx_copy_splice_read+0x10/0x10 [ 1200.239646][T16480] ? aa_file_perm+0x13e/0x11b0 [ 1200.239685][T16480] ? aa_file_perm+0x13e/0x11b0 [ 1200.239729][T16480] ? __pfx_filemap_splice_read+0x10/0x10 [ 1200.239755][T16480] splice_direct_to_actor+0x4d0/0xcc0 [ 1200.239821][T16480] ? __pfx_direct_splice_actor+0x10/0x10 [ 1200.239858][T16480] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1200.239909][T16480] do_splice_direct+0x181/0x270 [ 1200.239952][T16480] ? __pfx_do_splice_direct+0x10/0x10 [ 1200.239991][T16480] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1200.240025][T16480] ? rw_verify_area+0x258/0x650 [ 1200.240064][T16480] do_sendfile+0x4da/0x7e0 [ 1200.240106][T16480] ? __pfx_vfs_write+0x10/0x10 [ 1200.240148][T16480] ? __pfx_do_sendfile+0x10/0x10 [ 1200.240174][T16480] ? __fget_files+0x3a0/0x420 [ 1200.240211][T16480] __se_sys_sendfile64+0x13e/0x190 [ 1200.240240][T16480] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 1200.240261][T16480] ? rcu_is_watching+0x15/0xb0 [ 1200.240303][T16480] ? do_syscall_64+0xbe/0x3b0 [ 1200.240343][T16480] do_syscall_64+0xfa/0x3b0 [ 1200.240376][T16480] ? lockdep_hardirqs_on+0x9c/0x150 [ 1200.240406][T16480] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1200.240431][T16480] ? clear_bhb_loop+0x60/0xb0 [ 1200.240462][T16480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1200.240485][T16480] RIP: 0033:0x7fabc358e929 [ 1200.240509][T16480] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1200.240539][T16480] RSP: 002b:00007fabc447b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1200.240567][T16480] RAX: ffffffffffffffda RBX: 00007fabc37b5fa0 RCX: 00007fabc358e929 [ 1200.240586][T16480] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000007 [ 1200.240602][T16480] RBP: 00007fabc447b090 R08: 0000000000000000 R09: 0000000000000000 [ 1200.240618][T16480] R10: 0000000000fffe80 R11: 0000000000000246 R12: 0000000000000001 [ 1200.240633][T16480] R13: 0000000000000000 R14: 00007fabc37b5fa0 R15: 00007ffe35a1b638 [ 1200.240674][T16480] [ 1200.805962][T16485] Remounting filesystem read-only [ 1200.847026][T14082] NILFS (loop8): disposed unprocessed dirty file(s) when detaching log writer [ 1201.736462][T15651] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1201.986686][ T5841] Bluetooth: hci4: command tx timeout [ 1202.108801][T16383] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1202.276983][T16383] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1203.435934][T16508] netlink: 248 bytes leftover after parsing attributes in process `syz.8.2516'. [ 1203.533598][T16383] team0: Port device team_slave_0 added [ 1203.668751][T16512] loop7: detected capacity change from 0 to 256 [ 1203.740870][T16512] exfat: Deprecated parameter 'utf8' [ 1203.819753][T16512] exfat: Deprecated parameter 'namecase' [ 1203.917885][T16512] exfat: Deprecated parameter 'utf8' [ 1204.219850][T16512] exFAT-fs (loop7): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 1204.398960][T16383] team0: Port device team_slave_1 added [ 1204.719348][T16523] exFAT-fs (loop7): start_clu is invalid cluster(0x400) [ 1204.726928][ T30] audit: type=1326 audit(1750793726.503:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16511 comm="syz.7.2517" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0e6818e929 code=0x0 [ 1205.010038][ T2977] hsr_slave_0: left promiscuous mode [ 1205.066534][ T2977] hsr_slave_1: left promiscuous mode [ 1205.079353][ T2977] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1205.176282][ T2977] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1205.183833][ T2977] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1205.233579][T16528] loop7: detected capacity change from 0 to 8 [ 1205.244551][ T2977] veth1_vlan: left promiscuous mode [ 1205.250258][ T2977] veth0_vlan: left promiscuous mode [ 1205.296689][T16528] SQUASHFS error: xz decompression failed, data probably corrupt [ 1205.315753][T16528] SQUASHFS error: Failed to read block 0x108: -5 [ 1205.334405][T16528] SQUASHFS error: Unable to read metadata cache entry [106] [ 1205.351545][T16528] SQUASHFS error: Unable to read inode 0x11f [ 1205.466782][T16531] openvswitch: netlink: Key type 12291 is out of range max 32 [ 1206.237293][ T2977] team0 (unregistering): Port device team_slave_1 removed [ 1206.302506][ T2977] team0 (unregistering): Port device team_slave_0 removed [ 1208.303355][T16542] loop7: detected capacity change from 0 to 512 [ 1208.401581][T16542] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1208.427003][T16546] loop8: detected capacity change from 0 to 2048 [ 1208.431736][T16383] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1208.440342][T16383] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1208.496081][T16542] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1208.507598][T16383] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1208.565136][T16546] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1208.600350][T16410] chnl_net:caif_netlink_parms(): no params data found [ 1208.634618][T16383] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1208.641604][T16383] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1208.669284][T16546] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1208.749792][T16383] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1208.783419][ T5984] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1208.860433][T16554] overlayfs: failed to create directory ./file0/index (errno: 28); mounting read-only [ 1208.911244][T16554] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 1209.292501][T13746] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1209.315320][T16383] hsr_slave_0: entered promiscuous mode [ 1209.325294][T16383] hsr_slave_1: entered promiscuous mode [ 1209.338270][T16383] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1209.384158][ T5984] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1209.393844][T16383] Cannot create hsr debugfs directory [ 1209.411408][ T5984] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1209.456472][ T5984] usb 10-1: config 0 descriptor?? [ 1209.503754][ T5984] cp210x 10-1:0.0: cp210x converter detected [ 1209.701915][T16548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1209.711085][T16548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1209.920542][T16567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1209.938376][T16567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1210.471181][ T5984] cp210x 10-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1210.491841][ T5984] cp210x 10-1:0.0: failed to get vendor val 0x3711 size 2: -121 [ 1210.504504][ T5984] cp210x 10-1:0.0: GPIO initialisation failed: -121 [ 1210.529123][T16410] bridge0: port 1(bridge_slave_0) entered blocking state [ 1210.530332][ T5984] usb 10-1: cp210x converter now attached to ttyUSB0 [ 1210.536415][T16410] bridge0: port 1(bridge_slave_0) entered disabled state [ 1210.550469][T16410] bridge_slave_0: entered allmulticast mode [ 1210.587056][T16410] bridge_slave_0: entered promiscuous mode [ 1210.612902][T16572] FAULT_INJECTION: forcing a failure. [ 1210.612902][T16572] name failslab, interval 1, probability 0, space 0, times 0 [ 1210.664892][T16572] CPU: 1 UID: 0 PID: 16572 Comm: syz.7.2527 Not tainted 6.16.0-rc3-next-20250624-syzkaller #0 PREEMPT(full) [ 1210.664922][T16572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1210.664935][T16572] Call Trace: [ 1210.664943][T16572] [ 1210.664952][T16572] dump_stack_lvl+0x189/0x250 [ 1210.664987][T16572] ? __pfx____ratelimit+0x10/0x10 [ 1210.665013][T16572] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1210.665043][T16572] ? __pfx__printk+0x10/0x10 [ 1210.665071][T16572] ? __pfx___might_resched+0x10/0x10 [ 1210.665101][T16572] ? fs_reclaim_acquire+0x7d/0x100 [ 1210.665125][T16572] should_fail_ex+0x414/0x560 [ 1210.665158][T16572] should_failslab+0xa8/0x100 [ 1210.665192][T16572] kmem_cache_alloc_lru_noprof+0x78/0x3d0 [ 1210.665221][T16572] ? __d_alloc+0x36/0x7a0 [ 1210.665247][T16572] __d_alloc+0x36/0x7a0 [ 1210.665276][T16572] d_alloc_parallel+0xe5/0x15e0 [ 1210.665321][T16572] ? __lock_acquire+0xab9/0xd20 [ 1210.665347][T16572] ? __pfx_d_alloc_parallel+0x10/0x10 [ 1210.665376][T16572] ? __raw_spin_lock_init+0x45/0x100 [ 1210.665399][T16572] ? __init_waitqueue_head+0xa9/0x150 [ 1210.665425][T16572] __lookup_slow+0x116/0x3d0 [ 1210.665452][T16572] ? __pfx___lookup_slow+0x10/0x10 [ 1210.665489][T16572] ? down_read+0x1ad/0x2e0 [ 1210.665521][T16572] lookup_one_unlocked+0x127/0x250 [ 1210.665549][T16572] ovl_lookup_single+0x2c8/0xd70 [ 1210.665587][T16572] ? __pfx_ovl_lookup_single+0x10/0x10 [ 1210.665627][T16572] ovl_lookup_layer+0x377/0x450 [ 1210.665657][T16572] ? seqcount_lockdep_reader_access+0x122/0x1c0 [ 1210.665685][T16572] ovl_lookup+0x471/0x1bc0 [ 1210.665717][T16572] ? d_alloc_parallel+0x2f0/0x15e0 [ 1210.665756][T16572] ? d_alloc_parallel+0x14ae/0x15e0 [ 1210.665796][T16572] ? __pfx_ovl_lookup+0x10/0x10 [ 1210.665821][T16572] ? __lock_acquire+0xab9/0xd20 [ 1210.665846][T16572] ? __pfx_d_alloc_parallel+0x10/0x10 [ 1210.665868][T16572] ? look_up_lock_class+0x74/0x170 [ 1210.665898][T16572] ? __raw_spin_lock_init+0x45/0x100 [ 1210.665921][T16572] ? __init_waitqueue_head+0xa9/0x150 [ 1210.665948][T16572] __lookup_slow+0x294/0x3d0 [ 1210.665973][T16572] ? __pfx___lookup_slow+0x10/0x10 [ 1210.666013][T16572] ? down_read+0x1ad/0x2e0 [ 1210.666043][T16572] lookup_slow+0x53/0x70 [ 1210.666068][T16572] walk_component+0x2d2/0x400 [ 1210.666087][T16572] ? path_lookupat+0x156/0x430 [ 1210.666111][T16572] path_lookupat+0x163/0x430 [ 1210.666141][T16572] filename_lookup+0x212/0x570 [ 1210.666170][T16572] ? __pfx_filename_lookup+0x10/0x10 [ 1210.666218][T16572] ? strncpy_from_user+0x150/0x290 [ 1210.666248][T16572] ? getname_flags+0x1e5/0x540 [ 1210.666273][T16572] user_path_at+0x3a/0x60 [ 1210.666297][T16572] do_fchownat+0x105/0x270 [ 1210.666321][T16572] ? __pfx_do_fchownat+0x10/0x10 [ 1210.666359][T16572] ? __pfx_ksys_write+0x10/0x10 [ 1210.666386][T16572] ? rcu_is_watching+0x15/0xb0 [ 1210.666426][T16572] __x64_sys_lchown+0x85/0xa0 [ 1210.666449][T16572] do_syscall_64+0xfa/0x3b0 [ 1210.666477][T16572] ? lockdep_hardirqs_on+0x9c/0x150 [ 1210.666502][T16572] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1210.666524][T16572] ? clear_bhb_loop+0x60/0xb0 [ 1210.666551][T16572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1210.666572][T16572] RIP: 0033:0x7f0e6818e929 [ 1210.666593][T16572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1210.666612][T16572] RSP: 002b:00007f0e69011038 EFLAGS: 00000246 ORIG_RAX: 000000000000005e [ 1210.666635][T16572] RAX: ffffffffffffffda RBX: 00007f0e683b5fa0 RCX: 00007f0e6818e929 [ 1210.666651][T16572] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 1210.666665][T16572] RBP: 00007f0e69011090 R08: 0000000000000000 R09: 0000000000000000 [ 1210.666679][T16572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1210.666692][T16572] R13: 0000000000000000 R14: 00007f0e683b5fa0 R15: 00007ffccc471178 [ 1210.666726][T16572] [ 1211.059418][ T5984] usb 10-1: USB disconnect, device number 5 [ 1211.072014][ T5984] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1211.122967][ T5984] cp210x 10-1:0.0: device disconnected [ 1211.211616][ T2977] IPVS: stop unused estimator thread 0... [ 1211.220903][T16410] bridge0: port 2(bridge_slave_1) entered blocking state [ 1211.228046][T16410] bridge0: port 2(bridge_slave_1) entered disabled state [ 1211.237781][T16410] bridge_slave_1: entered allmulticast mode [ 1211.245710][T16410] bridge_slave_1: entered promiscuous mode [ 1211.280524][T14082] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1211.582088][T16410] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1211.705064][T16410] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1211.724575][T16583] loop8: detected capacity change from 0 to 2048 [ 1212.181518][T16592] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1212.221247][T16583] NILFS error (device loop8): nilfs_lookup: deleted inode referenced: 12 [ 1212.266136][T16583] Remounting filesystem read-only [ 1212.293150][T16593] NILFS error (device loop8): nilfs_lookup: deleted inode referenced: 12 [ 1212.306605][T16410] team0: Port device team_slave_0 added [ 1212.346997][T16410] team0: Port device team_slave_1 added [ 1212.413445][T16595] netlink: 248 bytes leftover after parsing attributes in process `syz.9.2532'. [ 1212.440934][T14082] NILFS (loop8): disposed unprocessed dirty file(s) when detaching log writer [ 1212.457045][ T2977] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1213.315319][T16599] loop7: detected capacity change from 0 to 1024 [ 1213.452890][T16410] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1213.460058][T16410] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1213.497657][T16410] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1213.580032][ T2977] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1213.626695][T16410] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1213.633690][T16410] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1213.668618][ T5940] usb 8-1: new full-speed USB device number 24 using dummy_hcd [ 1213.732741][T16410] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1213.799211][ T2977] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1213.832993][ T5940] usb 8-1: config 0 has an invalid interface number: 112 but max is 0 [ 1213.863372][ T5940] usb 8-1: config 0 has no interface number 0 [ 1213.869535][ T5940] usb 8-1: config 0 interface 112 altsetting 0 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 1213.900947][ T5940] usb 8-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice=fb.16 [ 1213.951049][ T5940] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1213.963313][ T5940] usb 8-1: Product: syz [ 1213.967565][ T5940] usb 8-1: Manufacturer: syz [ 1213.974664][ T5940] usb 8-1: SerialNumber: syz [ 1213.995624][ T5940] usb 8-1: config 0 descriptor?? [ 1214.003009][ T2977] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1214.057204][T16601] loop8: detected capacity change from 0 to 32768 [ 1214.074208][T16410] hsr_slave_0: entered promiscuous mode [ 1214.082502][T16410] hsr_slave_1: entered promiscuous mode [ 1214.089394][T16410] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1214.103290][T16410] Cannot create hsr debugfs directory [ 1214.227957][T16602] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2534'. [ 1214.276804][ T5940] mvusb_mdio 8-1:0.112: probe with driver mvusb_mdio failed with error -5 [ 1215.701971][ T2977] bridge_slave_1: left allmulticast mode [ 1215.715365][ T2977] bridge_slave_1: left promiscuous mode [ 1215.739593][ T2977] bridge0: port 2(bridge_slave_1) entered disabled state [ 1215.750176][T16630] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2541'. [ 1215.825412][ T2977] bridge_slave_0: left allmulticast mode [ 1215.845083][T16632] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2541'. [ 1215.846980][ T2977] bridge_slave_0: left promiscuous mode [ 1215.887899][ T2977] bridge0: port 1(bridge_slave_0) entered disabled state [ 1216.938895][ T5853] usb 8-1: USB disconnect, device number 24 [ 1217.642763][ T2977] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1217.750113][ T2977] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1217.761820][ T2977] bond0 (unregistering): Released all slaves [ 1218.025975][ T2977] bond1 (unregistering): Released all slaves [ 1218.299400][ T2977] bond2 (unregistering): Released all slaves [ 1218.602850][ T2977] bond3 (unregistering): Released all slaves [ 1218.905814][ T2977] bond4 (unregistering): Released all slaves [ 1219.106749][ T2977] bond5 (unregistering): Released all slaves [ 1219.314510][ T2977] bond6 (unregistering): Released all slaves [ 1219.491104][ T2977] bond7 (unregistering): Released all slaves [ 1219.642876][ T2977] bond8 (unregistering): Released all slaves [ 1219.715625][T16630] mac80211_hwsim hwsim25 wlan0: entered promiscuous mode [ 1220.576425][T16686] netlink: zone id is out of range [ 1220.868281][T16686] netlink: set zone limit has 4 unknown bytes [ 1223.507209][T16699] dvmrp1: entered allmulticast mode [ 1223.513023][T16704] dvmrp1: left allmulticast mode [ 1223.691348][T16383] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1224.081266][T16722] loop7: detected capacity change from 0 to 16 [ 1224.141075][T16722] erofs (device loop7): invalid checksum 0xe62de0bb, 0xc6d5fae7 expected [ 1224.200300][ T5839] udevd[5839]: incorrect erofs checksum on /dev/loop7 [ 1224.263123][T16722] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1224.882934][T16722] CIFS mount error: No usable UNC path provided in device string! [ 1224.882934][T16722] [ 1224.967718][T16722] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1225.205316][T16736] loop7: detected capacity change from 0 to 128 [ 1225.309478][ T2977] hsr_slave_0: left promiscuous mode [ 1225.322477][T16736] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 548, start 00000401) [ 1225.341591][ T2977] hsr_slave_1: left promiscuous mode [ 1225.347720][ T2977] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1225.355707][T16736] FAT-fs (loop7): Filesystem has been set read-only [ 1225.355879][T16736] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 548, start 00000401) [ 1225.450829][ T2977] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1225.460830][ T2977] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1225.614248][ T2977] veth1_vlan: left promiscuous mode [ 1225.641344][ T2977] veth0_vlan: left promiscuous mode [ 1226.207644][T11845] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1226.431881][T11845] usb 9-1: Using ep0 maxpacket: 32 [ 1226.443187][T11845] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1226.450982][T11845] usb 9-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1226.462396][T11845] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1226.545217][T11845] usb 9-1: config 0 descriptor?? [ 1227.025487][ T5925] IPVS: starting estimator thread 0... [ 1227.227643][T16771] IPVS: using max 25 ests per chain, 60000 per kthread [ 1227.543877][T11845] usb 9-1: USB disconnect, device number 10 [ 1228.039727][ T2977] team0 (unregistering): Port device team_slave_1 removed [ 1228.121500][ T2977] team0 (unregistering): Port device team_slave_0 removed [ 1229.048598][T16383] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1229.064508][T16764] netlink: 'syz.7.2588': attribute type 9 has an invalid length. [ 1229.072836][T16764] netlink: 61951 bytes leftover after parsing attributes in process `syz.7.2588'. [ 1229.219387][T16383] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1230.006865][T16383] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1230.515905][T16822] kvm: pic: non byte write [ 1230.996653][T16839] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2613'. [ 1231.148757][T16383] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1231.301459][ T5981] IPVS: starting estimator thread 0... [ 1231.456464][T16845] IPVS: using max 24 ests per chain, 57600 per kthread [ 1231.779658][T16383] 8021q: adding VLAN 0 to HW filter on device team0 [ 1231.826116][T16383] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1231.836591][T16383] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1231.890575][ T2977] IPVS: stop unused estimator thread 0... [ 1231.943816][T16410] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1232.018307][ T7359] bridge0: port 1(bridge_slave_0) entered blocking state [ 1232.025561][ T7359] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1232.078515][ T7359] bridge0: port 2(bridge_slave_1) entered blocking state [ 1232.085782][ T7359] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1232.154262][T16410] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1232.193670][T16410] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1232.217954][T16859] loop9: detected capacity change from 0 to 128 [ 1232.232876][T16410] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1232.310016][T16859] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1232.372653][T16859] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1232.458007][T15651] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1232.491596][T16383] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1232.751432][T16410] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1232.828599][T16410] 8021q: adding VLAN 0 to HW filter on device team0 [ 1232.883008][ T7360] bridge0: port 1(bridge_slave_0) entered blocking state [ 1232.890236][ T7360] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1232.929543][ T7360] bridge0: port 2(bridge_slave_1) entered blocking state [ 1232.936818][ T7360] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1233.120915][T16410] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1233.330936][T16383] veth0_vlan: entered promiscuous mode [ 1233.392066][T16383] veth1_vlan: entered promiscuous mode [ 1233.491397][T16383] veth0_macvtap: entered promiscuous mode [ 1233.553224][T16383] veth1_macvtap: entered promiscuous mode [ 1233.607306][T16907] loop9: detected capacity change from 0 to 128 [ 1233.616878][T16383] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1233.653859][T16907] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 1233.657775][T16383] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1233.680415][T16907] FAT-fs (loop9): Filesystem has been set read-only [ 1233.688311][T16907] FAT-fs (loop9): error, fat_free: invalid cluster chain (i_pos 548) [ 1233.707647][T16907] FAT-fs (loop9): error, fat_free: invalid cluster chain (i_pos 548) [ 1233.740913][ T2977] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1233.776283][ T2977] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1233.804216][ T2977] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1233.836558][ T2977] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1233.951050][T16410] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1234.126910][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1234.166138][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1235.323820][T16410] veth0_vlan: entered promiscuous mode [ 1235.351318][ T2979] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1235.359805][T16410] veth1_vlan: entered promiscuous mode [ 1235.376416][ T2979] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1235.559301][T16410] veth0_macvtap: entered promiscuous mode [ 1235.607687][T16410] veth1_macvtap: entered promiscuous mode [ 1235.665801][T16410] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1235.714057][T16410] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1237.083952][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1237.160546][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1237.171873][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1237.200987][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1237.365898][ T7360] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1237.385163][ T7360] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1237.482408][ T7360] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1237.501349][ T7360] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1239.125400][T16998] loop9: detected capacity change from 0 to 16 [ 1239.134246][T16998] erofs (device loop9): invalid checksum 0xe62de0bb, 0xc6d5fae7 expected [ 1239.383206][T17003] loop8: detected capacity change from 0 to 4096 [ 1239.419774][T17003] ntfs3(loop8): Different NTFS sector size (1024) and media sector size (512). [ 1239.468737][T17003] ntfs3(loop8): Failed to load $Extend (-22). [ 1239.496736][T17003] ntfs3(loop8): Failed to initialize $Extend. [ 1240.031598][T17033] loop9: detected capacity change from 0 to 1024 [ 1240.071488][T17033] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1240.105787][T17033] EXT4-fs error (device loop9): ext4_ext_check_inode:523: inode #11: comm syz.9.2686: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 1240.133398][T17033] EXT4-fs error (device loop9): ext4_orphan_get:1398: comm syz.9.2686: couldn't read orphan inode 11 (err -117) [ 1240.148293][T17033] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1240.246972][T15651] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1240.427678][T17049] loop9: detected capacity change from 0 to 4096 [ 1240.452055][T17049] ntfs3(loop9): Different NTFS sector size (1024) and media sector size (512). [ 1240.516717][T17049] ntfs3(loop9): Failed to load $Extend (-22). [ 1240.531469][T17049] ntfs3(loop9): Failed to initialize $Extend. [ 1241.290310][T13764] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 1241.301965][T17082] loop4: detected capacity change from 0 to 4096 [ 1241.322342][T17082] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512). [ 1241.366586][T17082] ntfs3(loop4): Failed to load $Extend (-22). [ 1241.372828][T17082] ntfs3(loop4): Failed to initialize $Extend. [ 1241.474220][T13764] usb 8-1: Using ep0 maxpacket: 32 [ 1241.486877][T13764] usb 8-1: config 0 has an invalid interface number: 132 but max is 0 [ 1241.508568][T13764] usb 8-1: config 0 has no interface number 0 [ 1241.527541][T13764] usb 8-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1241.556412][T13764] usb 8-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1241.578352][T13764] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1241.586762][T13764] usb 8-1: Product: syz [ 1241.603055][T13764] usb 8-1: Manufacturer: syz [ 1241.608039][T13764] usb 8-1: SerialNumber: syz [ 1241.626180][T13764] usb 8-1: config 0 descriptor?? [ 1241.656097][T13764] em28xx 8-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1241.678983][T13764] em28xx 8-1:0.132: Video interface 132 found: [ 1242.113485][T13764] em28xx 8-1:0.132: unknown em28xx chip ID (0) [ 1242.491840][ T5841] Bluetooth: hci1: command 0x0406 tx timeout [ 1242.684179][T13764] em28xx 8-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 1242.700218][T13764] em28xx 8-1:0.132: board has no eeprom [ 1242.786949][T13764] em28xx 8-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1242.795188][T13764] em28xx 8-1:0.132: analog set to bulk mode. [ 1242.830296][T17134] netlink: zone id is out of range [ 1243.124620][T17134] netlink: set zone limit has 4 unknown bytes [ 1243.463354][ T43] em28xx 8-1:0.132: Registering V4L2 extension [ 1243.532624][ T30] audit: type=1804 audit(1750793762.800:377): pid=17137 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2733" name="/newroot/27/file0" dev="tmpfs" ino=159 res=1 errno=0 [ 1243.599968][T13764] usb 8-1: USB disconnect, device number 25 [ 1243.607408][T13764] em28xx 8-1:0.132: Disconnecting em28xx [ 1244.390890][ T43] em28xx 8-1:0.132: Config register raw data: 0xffffffed [ 1244.403897][ T43] em28xx 8-1:0.132: AC97 chip type couldn't be determined [ 1244.420375][ T43] em28xx 8-1:0.132: No AC97 audio processor [ 1244.452379][ T43] usb 8-1: Decoder not found [ 1244.474797][ T43] em28xx 8-1:0.132: failed to create media graph [ 1244.512846][ T43] em28xx 8-1:0.132: V4L2 device video103 deregistered [ 1244.527041][ T43] em28xx 8-1:0.132: Remote control support is not available for this card. [ 1244.542839][T13764] em28xx 8-1:0.132: Closing input extension [ 1244.602669][T13764] em28xx 8-1:0.132: Freeing device [ 1245.122955][T17177] netlink: zone id is out of range [ 1245.284207][T17177] netlink: set zone limit has 4 unknown bytes [ 1245.812409][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1245.818917][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1246.024587][T17184] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2753'. [ 1246.076887][T17186] loop8: detected capacity change from 0 to 2048 [ 1246.098640][T17186] EXT4-fs (loop8): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 1246.308099][T17186] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1246.321814][T17186] ext4 filesystem being mounted at /110/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1246.824638][T14082] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1246.954353][T17205] loop4: detected capacity change from 0 to 1024 [ 1246.976227][T17205] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1247.045467][T17205] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #11: comm syz.4.2761: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 1247.278595][T17205] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.2761: couldn't read orphan inode 11 (err -117) [ 1247.395784][T17215] netlink: zone id is out of range [ 1247.730444][T17215] netlink: set zone limit has 4 unknown bytes [ 1247.991254][T17205] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1248.223548][T16383] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1248.938748][ T43] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 1249.151208][T17248] 9pnet_fd: Insufficient options for proto=fd [ 1249.218113][T17246] loop1: detected capacity change from 0 to 1024 [ 1249.275589][T17246] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1249.304191][ T43] usb 8-1: Using ep0 maxpacket: 32 [ 1249.313364][ T43] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1249.321782][ T43] usb 8-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1249.336845][T17246] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #11: comm syz.1.2778: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 1249.346361][ T43] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1249.374201][ T43] usb 8-1: config 0 descriptor?? [ 1249.418616][T17246] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.2778: couldn't read orphan inode 11 (err -117) [ 1249.444903][T17246] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1249.569230][T16410] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1249.727174][T17271] loop9: detected capacity change from 0 to 16 [ 1249.753440][T17271] erofs (device loop9): invalid checksum 0xe62de0bb, 0xc6d5fae7 expected [ 1249.782663][T17271] CIFS mount error: No usable UNC path provided in device string! [ 1249.782663][T17271] [ 1249.807462][T17271] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1249.848754][ T43] usbhid 8-1:0.0: can't add hid device: -71 [ 1249.855071][ T43] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1249.893518][ T43] usb 8-1: USB disconnect, device number 26 [ 1250.660460][T17290] loop8: detected capacity change from 0 to 1024 [ 1250.684152][T17290] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1250.799341][T17290] EXT4-fs error (device loop8): ext4_ext_check_inode:523: inode #11: comm syz.8.2798: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 1250.872581][T17302] loop7: detected capacity change from 0 to 16 [ 1250.887790][T17302] erofs (device loop7): invalid checksum 0xe62de0bb, 0xc6d5fae7 expected [ 1250.904723][T17302] CIFS mount error: No usable UNC path provided in device string! [ 1250.904723][T17302] [ 1250.916000][T17302] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1250.929137][T17290] EXT4-fs error (device loop8): ext4_orphan_get:1398: comm syz.8.2798: couldn't read orphan inode 11 (err -117) [ 1250.961169][T17290] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1251.116383][T14082] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1251.240307][T17318] 9pnet_fd: Insufficient options for proto=fd [ 1251.474263][T17322] loop4: detected capacity change from 0 to 4096 [ 1251.586833][T17332] loop1: detected capacity change from 0 to 16 [ 1251.604980][T17332] erofs (device loop1): invalid checksum 0xe62de0bb, 0xc6d5fae7 expected [ 1251.647661][T17335] loop8: detected capacity change from 0 to 1024 [ 1251.657320][T17332] CIFS mount error: No usable UNC path provided in device string! [ 1251.657320][T17332] [ 1251.673632][T17335] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1251.699854][T17332] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1251.712842][ T5984] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 1251.762771][T17335] EXT4-fs error (device loop8): ext4_ext_check_inode:523: inode #11: comm syz.8.2820: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 1251.795450][T17335] EXT4-fs error (device loop8): ext4_orphan_get:1398: comm syz.8.2820: couldn't read orphan inode 11 (err -117) [ 1251.999369][ T5984] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1252.039622][T17335] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1252.148787][ T5984] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1252.370792][ T5984] usb 8-1: config 0 descriptor?? [ 1252.378204][T14082] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1252.419799][ T5984] cp210x 8-1:0.0: cp210x converter detected [ 1252.654606][T17330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1252.663507][T17330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1252.723473][T17354] 9pnet_fd: Insufficient options for proto=fd [ 1253.437570][T17365] loop1: detected capacity change from 0 to 16 [ 1253.461929][T17368] loop4: detected capacity change from 0 to 1024 [ 1253.468881][T17365] erofs (device loop1): invalid checksum 0xe62de0bb, 0xc6d5fae7 expected [ 1253.475904][T17368] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1253.509053][T17365] CIFS mount error: No usable UNC path provided in device string! [ 1253.509053][T17365] [ 1253.527132][ T5984] cp210x 8-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1253.535941][T17365] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1253.545692][T17368] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #11: comm syz.4.2834: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 1253.568645][ T5984] cp210x 8-1:0.0: failed to get vendor val 0x3711 size 2: -121 [ 1253.576770][ T5984] cp210x 8-1:0.0: GPIO initialisation failed: -121 [ 1253.578349][T17368] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.2834: couldn't read orphan inode 11 (err -117) [ 1253.600451][ T5984] usb 8-1: cp210x converter now attached to ttyUSB0 [ 1253.642461][T17368] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1253.761611][T13764] usb 8-1: USB disconnect, device number 27 [ 1253.782227][T13764] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1253.799791][T16383] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1253.820024][T13764] cp210x 8-1:0.0: device disconnected [ 1254.079163][T17396] loop9: detected capacity change from 0 to 16 [ 1254.093283][T17396] erofs (device loop9): invalid checksum 0xe62de0bb, 0xc6d5fae7 expected [ 1254.119244][T17396] CIFS mount error: No usable UNC path provided in device string! [ 1254.119244][T17396] [ 1254.150290][T17396] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1254.441280][T17411] 9pnet_fd: Insufficient options for proto=fd [ 1254.678590][T17425] loop9: detected capacity change from 0 to 16 [ 1254.692955][T17425] erofs (device loop9): invalid checksum 0xe62de0bb, 0xc6d5fae7 expected [ 1254.732828][T17425] CIFS mount error: No usable UNC path provided in device string! [ 1254.732828][T17425] [ 1254.759187][T17425] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1254.811424][T17434] netlink: 'syz.8.2865': attribute type 10 has an invalid length. [ 1254.834560][T17434] bridge0: port 2(bridge_slave_1) entered disabled state [ 1254.843567][T17434] bridge0: port 1(bridge_slave_0) entered disabled state [ 1254.869752][T17434] bridge0: port 2(bridge_slave_1) entered blocking state [ 1254.877043][T17434] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1254.884640][T17434] bridge0: port 1(bridge_slave_0) entered blocking state [ 1254.891942][T17434] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1254.958946][T17434] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1255.302699][T17458] loop8: detected capacity change from 0 to 16 [ 1255.430840][T17464] loop4: detected capacity change from 0 to 16 [ 1255.442920][T17464] erofs (device loop4): invalid checksum 0xe62de0bb, 0xc6d5fae7 expected [ 1255.491629][T17464] CIFS mount error: No usable UNC path provided in device string! [ 1255.491629][T17464] [ 1255.526222][T17464] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1255.593559][T17470] loop8: detected capacity change from 0 to 16 [ 1255.614238][T17470] erofs (device loop8): invalid checksum 0xe62de0bb, 0xc6d5fae7 expected [ 1255.631593][T17472] netlink: 'syz.1.2884': attribute type 10 has an invalid length. [ 1255.640370][T17472] bridge0: port 2(bridge_slave_1) entered disabled state [ 1255.648174][T17472] bridge0: port 1(bridge_slave_0) entered disabled state [ 1255.700325][T17472] bridge0: port 2(bridge_slave_1) entered blocking state [ 1255.707613][T17472] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1255.716902][T17472] bridge0: port 1(bridge_slave_0) entered blocking state [ 1255.724132][T17472] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1255.749217][T17472] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1255.955867][T17487] 9pnet_fd: Insufficient options for proto=fd [ 1255.963302][T17486] loop7: detected capacity change from 0 to 1024 [ 1256.007223][T17486] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1256.055236][T17486] EXT4-fs error (device loop7): ext4_ext_check_inode:523: inode #11: comm syz.7.2889: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 1256.076224][T17486] EXT4-fs error (device loop7): ext4_orphan_get:1398: comm syz.7.2889: couldn't read orphan inode 11 (err -117) [ 1256.093594][T17486] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1256.203532][T17499] loop9: detected capacity change from 0 to 16 [ 1256.223050][T13746] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1256.250949][T17499] erofs (device loop9): invalid checksum 0xe62de0bb, 0xc6d5fae7 expected [ 1256.312549][T17499] CIFS mount error: No usable UNC path provided in device string! [ 1256.312549][T17499] [ 1256.341414][T17499] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1257.234051][T17516] loop9: detected capacity change from 0 to 16 [ 1257.295083][T17516] erofs (device loop9): invalid checksum 0xe62de0bb, 0xc6d5fae7 expected [ 1257.521621][T17526] loop8: detected capacity change from 0 to 16 [ 1258.158767][T17554] netlink: zone id is out of range [ 1258.328439][T17554] netlink: set zone limit has 4 unknown bytes [ 1259.462980][T17588] loop4: detected capacity change from 0 to 128 [ 1259.464380][ T43] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 1259.550783][T17589] netlink: zone id is out of range [ 1259.782447][T17589] netlink: set zone limit has 4 unknown bytes [ 1260.146740][ T43] usb 8-1: Using ep0 maxpacket: 32 [ 1260.172305][ T43] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1260.187099][ T43] usb 8-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1260.232037][ T43] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1260.330883][ T43] usb 8-1: config 0 descriptor?? [ 1260.657627][T17607] loop4: detected capacity change from 0 to 1024 [ 1260.703652][T17607] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1260.771551][T17607] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #11: comm syz.4.2945: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 1260.803462][T17607] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.2945: couldn't read orphan inode 11 (err -117) [ 1260.875862][T17607] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1261.000926][ T5853] usb 8-1: USB disconnect, device number 28 [ 1261.049592][T16383] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1261.173323][T17623] netlink: zone id is out of range [ 1261.454542][T17623] netlink: set zone limit has 4 unknown bytes [ 1262.056737][T17641] 9pnet_fd: Insufficient options for proto=fd [ 1263.045380][T17685] capability: warning: `syz.9.2980' uses deprecated v2 capabilities in a way that may be insecure [ 1264.013479][T17738] loop4: detected capacity change from 0 to 16 [ 1264.521098][T17746] loop4: detected capacity change from 0 to 16 [ 1264.562419][T17746] erofs (device loop4): invalid checksum 0xe62de0bb, 0xc6d5fae7 expected [ 1264.640506][T17746] CIFS mount error: No usable UNC path provided in device string! [ 1264.640506][T17746] [ 1264.654762][T17746] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1265.678773][T17777] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1266.131224][T17779] loop4: detected capacity change from 0 to 2048 [ 1266.270653][T17779] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 1266.353120][T17783] netlink: 'syz.1.3026': attribute type 10 has an invalid length. [ 1266.371687][T17779] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1266.396725][T17783] bridge0: port 2(bridge_slave_1) entered disabled state [ 1266.404020][T17783] bridge0: port 1(bridge_slave_0) entered disabled state [ 1266.414278][T17779] ext4 filesystem being mounted at /86/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1266.594906][T16383] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1266.687052][T17798] loop1: detected capacity change from 0 to 16 [ 1266.742013][T17798] erofs (device loop1): invalid checksum 0xe62de0bb, 0xc6d5fae7 expected [ 1266.883636][T17808] loop9: detected capacity change from 0 to 128 [ 1266.901649][T17808] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 1266.988076][T17808] FAT-fs (loop9): Filesystem has been set read-only [ 1266.995154][T17808] FAT-fs (loop9): error, fat_free: invalid cluster chain (i_pos 548) [ 1267.080138][T17808] FAT-fs (loop9): error, fat_free: invalid cluster chain (i_pos 548) [ 1267.318374][T17819] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1267.938392][T17828] netlink: 'syz.9.3044': attribute type 10 has an invalid length. [ 1267.950875][T17828] bridge0: port 3(syz_tun) entered disabled state [ 1267.957632][T17828] bridge0: port 2(bridge_slave_1) entered disabled state [ 1267.967090][T17828] bridge0: port 1(bridge_slave_0) entered disabled state [ 1268.008818][T17833] 9pnet_fd: Insufficient options for proto=fd [ 1268.038926][T17828] bridge0: port 3(syz_tun) entered blocking state [ 1268.045556][T17828] bridge0: port 3(syz_tun) entered forwarding state [ 1268.052644][T17828] bridge0: port 2(bridge_slave_1) entered blocking state [ 1268.059910][T17828] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1268.067548][T17828] bridge0: port 1(bridge_slave_0) entered blocking state [ 1268.074774][T17828] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1268.114133][T17828] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1268.271107][T17845] loop7: detected capacity change from 0 to 128 [ 1268.311938][T17845] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 1268.344363][T17845] FAT-fs (loop7): Filesystem has been set read-only [ 1268.391145][T17845] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 548) [ 1268.417232][T17845] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 548) [ 1268.620820][T17859] 9pnet_fd: Insufficient options for proto=fd [ 1268.797479][ T5984] IPVS: starting estimator thread 0... [ 1268.847593][T17866] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1268.903583][T17865] IPVS: using max 28 ests per chain, 67200 per kthread [ 1269.585442][ T5984] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1269.653844][T17883] loop4: detected capacity change from 0 to 128 [ 1269.715881][T17883] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 1269.739899][T17883] FAT-fs (loop4): Filesystem has been set read-only [ 1269.752869][T17883] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 548) [ 1269.763123][T17883] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 548) [ 1269.772148][ T5984] usb 10-1: Using ep0 maxpacket: 32 [ 1269.810278][ T5984] usb 10-1: config 0 has an invalid interface number: 132 but max is 0 [ 1269.822376][ T5984] usb 10-1: config 0 has no interface number 0 [ 1269.828629][ T5984] usb 10-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1269.873348][ T5984] usb 10-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1269.892355][ T5984] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1269.926576][ T5984] usb 10-1: Product: syz [ 1269.931439][ T5984] usb 10-1: Manufacturer: syz [ 1269.938408][ T5984] usb 10-1: SerialNumber: syz [ 1269.958860][ T5984] usb 10-1: config 0 descriptor?? [ 1269.972431][ T5984] em28xx 10-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1270.002724][ T5984] em28xx 10-1:0.132: Video interface 132 found: [ 1270.032410][T17892] loop8: detected capacity change from 0 to 4096 [ 1270.052493][T17892] ntfs3(loop8): Different NTFS sector size (1024) and media sector size (512). [ 1270.147557][T17900] loop7: detected capacity change from 0 to 1024 [ 1270.173034][T17900] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1270.190962][T17894] loop1: detected capacity change from 0 to 2048 [ 1270.219059][T17894] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 1270.238715][T17900] EXT4-fs error (device loop7): ext4_ext_check_inode:523: inode #11: comm syz.7.3079: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 1270.267129][T17892] ntfs3(loop8): Failed to load $Extend (-22). [ 1270.271410][T17900] EXT4-fs error (device loop7): ext4_orphan_get:1398: comm syz.7.3079: couldn't read orphan inode 11 (err -117) [ 1270.274315][T17892] ntfs3(loop8): Failed to initialize $Extend. [ 1270.315362][T17900] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1270.330426][T17894] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1270.439965][ T5984] em28xx 10-1:0.132: unknown em28xx chip ID (0) [ 1270.462573][T17894] ext4 filesystem being mounted at /92/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1270.480777][T17907] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1270.757020][T17902] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 10: padding at end of block bitmap is not set [ 1270.948850][T13746] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1270.959813][T16410] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1271.162115][T17915] 9pnet_fd: Insufficient options for proto=fd [ 1271.234885][ T5984] em28xx 10-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 1271.271649][ T5984] em28xx 10-1:0.132: board has no eeprom [ 1271.289876][T17918] loop8: detected capacity change from 0 to 256 [ 1271.360148][ T5984] em28xx 10-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1271.370713][ T5984] em28xx 10-1:0.132: analog set to bulk mode. [ 1271.376887][ T5853] em28xx 10-1:0.132: Registering V4L2 extension [ 1271.421714][ T5984] usb 10-1: USB disconnect, device number 6 [ 1271.446826][ T5984] em28xx 10-1:0.132: Disconnecting em28xx [ 1271.548788][T17931] loop8: detected capacity change from 0 to 128 [ 1271.557081][T17927] loop1: detected capacity change from 0 to 2048 [ 1271.582554][T17927] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 1271.659821][T17927] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1271.678051][T17927] ext4 filesystem being mounted at /95/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1271.824870][ T5853] em28xx 10-1:0.132: Config register raw data: 0xffffffed [ 1271.853565][T16410] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1271.869428][ T5853] em28xx 10-1:0.132: AC97 chip type couldn't be determined [ 1271.894312][ T5853] em28xx 10-1:0.132: No AC97 audio processor [ 1271.912581][ T5853] usb 10-1: Decoder not found [ 1271.925685][ T5853] em28xx 10-1:0.132: failed to create media graph [ 1271.974813][ T5853] em28xx 10-1:0.132: V4L2 device video103 deregistered [ 1272.004392][ T5853] em28xx 10-1:0.132: Remote control support is not available for this card. [ 1272.019363][T17947] loop7: detected capacity change from 0 to 16 [ 1272.060426][ T5984] em28xx 10-1:0.132: Closing input extension [ 1272.076711][T17947] erofs (device loop7): invalid checksum 0xe62de0bb, 0xc6d5fae7 expected [ 1272.131443][ T5984] em28xx 10-1:0.132: Freeing device [ 1272.144843][T17947] CIFS mount error: No usable UNC path provided in device string! [ 1272.144843][T17947] [ 1272.283356][T17952] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1272.309115][T17947] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1273.157554][T17970] loop9: detected capacity change from 0 to 2048 [ 1273.192232][T17970] EXT4-fs (loop9): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 1273.258795][T17970] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1273.284514][T17970] ext4 filesystem being mounted at /169/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1273.385714][T15651] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1273.451703][T17987] loop4: detected capacity change from 0 to 128 [ 1273.637979][ T5984] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 1273.831753][T17994] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1274.323713][T17991] loop9: detected capacity change from 0 to 4096 [ 1274.349318][T17996] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3116'. [ 1274.363408][ T5984] usb 8-1: Using ep0 maxpacket: 32 [ 1274.373808][T17991] ntfs3(loop9): Different NTFS sector size (1024) and media sector size (512). [ 1274.421150][ T5984] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1274.438766][ T5984] usb 8-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1274.460193][ T5984] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1274.490697][T17991] ntfs3(loop9): Failed to load $Extend (-22). [ 1274.508328][ T5984] usb 8-1: config 0 descriptor?? [ 1274.517851][T17991] ntfs3(loop9): Failed to initialize $Extend. [ 1274.817349][T18012] loop4: detected capacity change from 0 to 2048 [ 1274.850507][T18012] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 1274.904308][T18012] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1274.909564][T18018] loop9: detected capacity change from 0 to 16 [ 1274.925956][T18018] erofs (device loop9): invalid checksum 0xe62de0bb, 0xc6d5fae7 expected [ 1274.935103][T18012] ext4 filesystem being mounted at /107/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1274.973586][ T5984] usbhid 8-1:0.0: can't add hid device: -71 [ 1274.979766][ T5984] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1275.032372][ T5984] usb 8-1: USB disconnect, device number 29 [ 1275.102961][T18025] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3129'. [ 1275.144456][T16383] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1275.293828][T13764] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1275.448445][ T43] IPVS: starting estimator thread 0... [ 1275.498386][T18034] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1275.636104][T18033] IPVS: using max 24 ests per chain, 57600 per kthread [ 1275.962180][T13764] usb 9-1: config 0 has an invalid interface number: 84 but max is 0 [ 1275.993431][T13764] usb 9-1: config 0 has an invalid interface number: 66 but max is 0 [ 1276.003399][T13764] usb 9-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 1276.016281][T13764] usb 9-1: config 0 has no interface number 0 [ 1276.023769][T13764] usb 9-1: config 0 has no interface number 1 [ 1276.030152][T13764] usb 9-1: config 0 interface 84 altsetting 0 endpoint 0x4 has invalid maxpacket 1560, setting to 64 [ 1276.051290][T13764] usb 9-1: config 0 interface 84 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1276.120339][T13764] usb 9-1: too many endpoints for config 0 interface 66 altsetting 153: 216, using maximum allowed: 30 [ 1276.181213][T13764] usb 9-1: config 0 interface 66 altsetting 153 bulk endpoint 0x5 has invalid maxpacket 32 [ 1276.198379][T13764] usb 9-1: config 0 interface 66 altsetting 153 has an endpoint descriptor with address 0x12, changing to 0x2 [ 1276.231627][T13764] usb 9-1: config 0 interface 66 altsetting 153 has an endpoint descriptor with address 0xE6, changing to 0x86 [ 1276.256978][T13764] usb 9-1: config 0 interface 66 altsetting 153 endpoint 0x86 has invalid maxpacket 34869, setting to 1024 [ 1276.274681][T13764] usb 9-1: config 0 interface 66 altsetting 153 bulk endpoint 0x86 has invalid maxpacket 1024 [ 1276.293532][T13764] usb 9-1: config 0 interface 66 altsetting 153 has 3 endpoint descriptors, different from the interface descriptor's value: 216 [ 1276.335957][T13764] usb 9-1: config 0 interface 66 has no altsetting 0 [ 1276.349192][T13764] usb 9-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=ca.f3 [ 1276.364977][T13764] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1276.375824][T13764] usb 9-1: Product: syz [ 1276.380055][T13764] usb 9-1: Manufacturer: syz [ 1276.393128][T13764] usb 9-1: SerialNumber: syz [ 1276.411319][T13764] usb 9-1: config 0 descriptor?? [ 1276.433728][T13764] ljca 9-1:0.84: bulk endpoints not found [ 1276.513493][ T5925] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 1276.530145][T18052] loop1: detected capacity change from 0 to 16 [ 1276.539297][T18052] erofs (device loop1): invalid checksum 0xe62de0bb, 0xc6d5fae7 expected [ 1276.672613][ T5925] usb 8-1: Using ep0 maxpacket: 32 [ 1276.699834][T13764] ljca 9-1:0.66: probe with driver ljca failed with error -71 [ 1276.709147][ T5925] usb 8-1: config 0 has an invalid interface number: 132 but max is 0 [ 1276.726188][ T5925] usb 8-1: config 0 has no interface number 0 [ 1276.741720][ T5925] usb 8-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1276.752048][T13764] usb 9-1: USB disconnect, device number 11 [ 1276.765675][ T5925] usb 8-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1276.777738][ T5925] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1276.789415][ T5925] usb 8-1: Product: syz [ 1276.794051][ T5925] usb 8-1: Manufacturer: syz [ 1276.799919][ T5925] usb 8-1: SerialNumber: syz [ 1276.829235][ T5925] usb 8-1: config 0 descriptor?? [ 1276.861423][ T5925] em28xx 8-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1276.941298][ T5925] em28xx 8-1:0.132: Video interface 132 found: [ 1277.122442][T18066] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1277.751234][ T5925] em28xx 8-1:0.132: unknown em28xx chip ID (0) [ 1277.992170][T18080] loop4: detected capacity change from 0 to 2048 [ 1277.999081][ T30] audit: type=1804 audit(1750793795.056:378): pid=18079 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3151" name="/newroot/109/file0" dev="tmpfs" ino=581 res=1 errno=0 [ 1278.047431][T18080] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 1278.079386][T18080] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1278.131807][T18080] ext4 filesystem being mounted at /112/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1278.198667][ T5925] em28xx 8-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 1278.258617][ T5925] em28xx 8-1:0.132: board has no eeprom [ 1278.329191][T16383] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1278.341441][ T5925] em28xx 8-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1278.349323][ T5925] em28xx 8-1:0.132: analog set to bulk mode. [ 1278.411238][ T926] em28xx 8-1:0.132: Registering V4L2 extension [ 1278.454008][ T5925] usb 8-1: USB disconnect, device number 30 [ 1278.475125][ T5925] em28xx 8-1:0.132: Disconnecting em28xx [ 1278.619806][T18101] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1279.437480][ T926] em28xx 8-1:0.132: Config register raw data: 0xffffffed [ 1279.451563][ T926] em28xx 8-1:0.132: AC97 chip type couldn't be determined [ 1279.469794][ T926] em28xx 8-1:0.132: No AC97 audio processor [ 1279.516332][ T926] usb 8-1: Decoder not found [ 1279.520990][ T926] em28xx 8-1:0.132: failed to create media graph [ 1279.551872][ T926] em28xx 8-1:0.132: V4L2 device video103 deregistered [ 1279.576008][ T926] em28xx 8-1:0.132: Remote control support is not available for this card. [ 1279.609311][ T5925] em28xx 8-1:0.132: Closing input extension [ 1279.638738][ T5925] em28xx 8-1:0.132: Freeing device [ 1279.672013][T18118] loop9: detected capacity change from 0 to 1024 [ 1279.693825][T18118] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1279.731715][T18118] EXT4-fs error (device loop9): ext4_ext_check_inode:523: inode #11: comm syz.9.3167: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 1279.786361][T18118] EXT4-fs error (device loop9): ext4_orphan_get:1398: comm syz.9.3167: couldn't read orphan inode 11 (err -117) [ 1279.828151][T18118] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1279.888196][T15651] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1280.368964][T18146] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1281.947314][T18168] loop8: detected capacity change from 0 to 256 [ 1282.206286][T18179] netlink: 'syz.8.3191': attribute type 10 has an invalid length. [ 1282.237008][T18179] bridge0: port 2(bridge_slave_1) entered disabled state [ 1282.244354][T18179] bridge0: port 1(bridge_slave_0) entered disabled state [ 1282.566771][T18188] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1283.415499][T18207] loop7: detected capacity change from 0 to 256 [ 1283.567355][ T5984] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1283.738327][ T5984] usb 9-1: Using ep0 maxpacket: 32 [ 1283.756031][ T5984] usb 9-1: config 0 has an invalid interface number: 132 but max is 0 [ 1283.766393][ T5984] usb 9-1: config 0 has no interface number 0 [ 1283.781192][ T5984] usb 9-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1283.810953][ T5984] usb 9-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1283.831307][ T5984] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1283.866638][ T5984] usb 9-1: Product: syz [ 1283.870879][ T5984] usb 9-1: Manufacturer: syz [ 1283.876399][ T5984] usb 9-1: SerialNumber: syz [ 1283.885477][ T5984] usb 9-1: config 0 descriptor?? [ 1283.898260][ T5984] em28xx 9-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1283.915571][ T5984] em28xx 9-1:0.132: Video interface 132 found: [ 1284.085089][T18241] loop9: detected capacity change from 0 to 256 [ 1284.123348][ T5925] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1284.144642][T14962] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 1284.297875][ T5925] usb 5-1: config 0 has an invalid interface number: 84 but max is 0 [ 1284.315827][T14962] usb 8-1: Using ep0 maxpacket: 32 [ 1284.321468][ T5925] usb 5-1: config 0 has an invalid interface number: 66 but max is 0 [ 1284.329473][ T5984] em28xx 9-1:0.132: unknown em28xx chip ID (0) [ 1284.336281][ T5925] usb 5-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 1284.349485][ T5925] usb 5-1: config 0 has no interface number 0 [ 1284.353972][T14962] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1284.356983][ T5925] usb 5-1: config 0 has no interface number 1 [ 1284.373656][T14962] usb 8-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1284.378375][ T5925] usb 5-1: config 0 interface 84 altsetting 0 endpoint 0x4 has invalid maxpacket 1560, setting to 64 [ 1284.394112][T14962] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1284.398523][ T5925] usb 5-1: config 0 interface 84 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1284.422994][ T5925] usb 5-1: too many endpoints for config 0 interface 66 altsetting 153: 216, using maximum allowed: 30 [ 1284.423456][T14962] usb 8-1: config 0 descriptor?? [ 1284.440209][ T5925] usb 5-1: config 0 interface 66 altsetting 153 bulk endpoint 0x5 has invalid maxpacket 32 [ 1284.451974][ T5925] usb 5-1: config 0 interface 66 altsetting 153 has an endpoint descriptor with address 0x12, changing to 0x2 [ 1284.469288][ T5925] usb 5-1: config 0 interface 66 altsetting 153 has an endpoint descriptor with address 0xE6, changing to 0x86 [ 1284.481553][ T5925] usb 5-1: config 0 interface 66 altsetting 153 endpoint 0x86 has invalid maxpacket 34869, setting to 1024 [ 1284.506737][ T5925] usb 5-1: config 0 interface 66 altsetting 153 bulk endpoint 0x86 has invalid maxpacket 1024 [ 1284.518340][ T5925] usb 5-1: config 0 interface 66 altsetting 153 has 3 endpoint descriptors, different from the interface descriptor's value: 216 [ 1284.539552][ T5925] usb 5-1: config 0 interface 66 has no altsetting 0 [ 1284.558437][ T5925] usb 5-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=ca.f3 [ 1284.568014][ T5925] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1284.587868][ T5925] usb 5-1: Product: syz [ 1284.592089][ T5925] usb 5-1: Manufacturer: syz [ 1284.609177][ T5925] usb 5-1: SerialNumber: syz [ 1284.627242][ T5925] usb 5-1: config 0 descriptor?? [ 1284.655312][ T5925] ljca 5-1:0.84: bulk endpoints not found [ 1284.782706][ T5984] em28xx 9-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 1284.799954][ T5984] em28xx 9-1:0.132: board has no eeprom [ 1284.859577][ T5925] ljca 5-1:0.66: probe with driver ljca failed with error -71 [ 1284.871554][ T5984] em28xx 9-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1284.885804][ T5984] em28xx 9-1:0.132: analog set to bulk mode. [ 1284.892018][ T5925] usb 5-1: USB disconnect, device number 39 [ 1284.903221][T14962] usbhid 8-1:0.0: can't add hid device: -71 [ 1284.921677][T11845] em28xx 9-1:0.132: Registering V4L2 extension [ 1284.928245][T14962] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1284.939458][ T5984] usb 9-1: USB disconnect, device number 12 [ 1284.949334][ T5984] em28xx 9-1:0.132: Disconnecting em28xx [ 1284.957062][T14962] usb 8-1: USB disconnect, device number 31 [ 1285.207955][T11845] em28xx 9-1:0.132: Config register raw data: 0xffffffed [ 1285.220260][T11845] em28xx 9-1:0.132: AC97 chip type couldn't be determined [ 1285.230681][T11845] em28xx 9-1:0.132: No AC97 audio processor [ 1285.250400][T11845] usb 9-1: Decoder not found [ 1285.255158][T11845] em28xx 9-1:0.132: failed to create media graph [ 1285.272440][T11845] em28xx 9-1:0.132: V4L2 device video103 deregistered [ 1285.284671][T11845] em28xx 9-1:0.132: Remote control support is not available for this card. [ 1285.297447][ T5984] em28xx 9-1:0.132: Closing input extension [ 1285.319753][ T5984] em28xx 9-1:0.132: Freeing device [ 1285.607665][T18286] loop9: detected capacity change from 0 to 16 [ 1285.619996][T11845] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1285.636390][T18286] erofs (device loop9): invalid checksum 0xe62de0bb, 0xc6d5fae7 expected [ 1285.660027][T18286] CIFS mount error: No usable UNC path provided in device string! [ 1285.660027][T18286] [ 1285.692679][T18286] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1285.823833][T11845] usb 2-1: Using ep0 maxpacket: 32 [ 1285.852332][T11845] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1285.870558][T11845] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1285.897792][T11845] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1285.909260][T11845] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1285.920499][T11845] usb 2-1: config 0 descriptor?? [ 1285.928190][T11845] hub 2-1:0.0: USB hub found [ 1286.066330][T18309] loop7: detected capacity change from 0 to 2048 [ 1286.073149][ T5925] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1286.082989][T18309] EXT4-fs (loop7): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 1286.127864][T18309] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1286.164209][T11845] hub 2-1:0.0: config failed, can't read hub descriptor (err -90) [ 1286.186101][T18309] ext4 filesystem being mounted at /214/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1286.261388][ T5925] usb 10-1: Using ep0 maxpacket: 32 [ 1286.278939][ T5925] usb 10-1: config 0 has an invalid interface number: 132 but max is 0 [ 1286.299234][ T5925] usb 10-1: config 0 has no interface number 0 [ 1286.314667][ T5925] usb 10-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1286.337568][ T5925] usb 10-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1286.362982][ T5925] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1286.374649][T13746] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1286.375615][ T5925] usb 10-1: Product: syz [ 1286.397572][ T5925] usb 10-1: Manufacturer: syz [ 1286.402705][ T5925] usb 10-1: SerialNumber: syz [ 1286.404781][T11845] usbhid 2-1:0.0: can't add hid device: -71 [ 1286.420174][ T5925] usb 10-1: config 0 descriptor?? [ 1286.432347][T11845] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1286.455004][ T5925] em28xx 10-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1286.466207][T18322] loop8: detected capacity change from 0 to 16 [ 1286.472552][ T5925] em28xx 10-1:0.132: Video interface 132 found: [ 1286.482625][T11845] usb 2-1: USB disconnect, device number 5 [ 1286.489742][T18322] erofs (device loop8): invalid checksum 0xe62de0bb, 0xc6d5fae7 expected [ 1286.509305][T18322] CIFS mount error: No usable UNC path provided in device string! [ 1286.509305][T18322] [ 1286.533816][T18322] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1286.861849][ T5925] em28xx 10-1:0.132: unknown em28xx chip ID (0) [ 1287.082802][T18349] loop8: detected capacity change from 0 to 16 [ 1287.098141][T18349] erofs (device loop8): invalid checksum 0xe62de0bb, 0xc6d5fae7 expected [ 1287.113321][T18349] CIFS mount error: No usable UNC path provided in device string! [ 1287.113321][T18349] [ 1287.125099][T18349] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1287.308972][ T5925] em28xx 10-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 1287.322069][ T5925] em28xx 10-1:0.132: board has no eeprom [ 1287.404925][ T5925] em28xx 10-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1287.412931][ T5925] em28xx 10-1:0.132: analog set to bulk mode. [ 1287.431396][ T926] em28xx 10-1:0.132: Registering V4L2 extension [ 1287.449391][ T5925] usb 10-1: USB disconnect, device number 7 [ 1287.457054][ T5925] em28xx 10-1:0.132: Disconnecting em28xx [ 1287.723773][ T926] em28xx 10-1:0.132: Config register raw data: 0xffffffed [ 1287.742637][ T926] em28xx 10-1:0.132: AC97 chip type couldn't be determined [ 1287.768284][ T926] em28xx 10-1:0.132: No AC97 audio processor [ 1287.789480][ T926] usb 10-1: Decoder not found [ 1287.799486][ T926] em28xx 10-1:0.132: failed to create media graph [ 1287.806771][T18380] loop4: detected capacity change from 0 to 16 [ 1287.816805][ T926] em28xx 10-1:0.132: V4L2 device video103 deregistered [ 1287.837422][T18380] erofs (device loop4): invalid checksum 0xe62de0bb, 0xc6d5fae7 expected [ 1287.849541][ T926] em28xx 10-1:0.132: Remote control support is not available for this card. [ 1287.872528][T18380] CIFS mount error: No usable UNC path provided in device string! [ 1287.872528][T18380] [ 1287.884386][ T5925] em28xx 10-1:0.132: Closing input extension [ 1287.893999][T18380] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1287.921214][ T5925] em28xx 10-1:0.132: Freeing device [ 1288.090046][T18390] netlink: 48 bytes leftover after parsing attributes in process `syz.9.3286'. [ 1288.116866][T18390] netlink: 'syz.9.3286': attribute type 10 has an invalid length. [ 1288.142822][T18390] bridge0: port 3(syz_tun) entered disabled state [ 1288.149559][T18390] bridge0: port 2(bridge_slave_1) entered disabled state [ 1288.156912][T18390] bridge0: port 1(bridge_slave_0) entered disabled state [ 1288.496057][T18412] loop9: detected capacity change from 0 to 16 [ 1288.511929][T18412] erofs (device loop9): invalid checksum 0xe62de0bb, 0xc6d5fae7 expected [ 1288.542918][T18412] CIFS mount error: No usable UNC path provided in device string! [ 1288.542918][T18412] [ 1288.567468][T18409] loop7: detected capacity change from 0 to 4096 [ 1288.574824][T18412] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1288.934955][T18425] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3304'. [ 1288.971744][T18425] netlink: 'syz.4.3304': attribute type 10 has an invalid length. [ 1289.030354][T18425] bridge0: port 2(bridge_slave_1) entered disabled state [ 1289.038158][T18425] bridge0: port 1(bridge_slave_0) entered disabled state [ 1289.069777][T18425] bridge0: port 2(bridge_slave_1) entered blocking state [ 1289.077081][T18425] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1289.084718][T18425] bridge0: port 1(bridge_slave_0) entered blocking state [ 1289.091937][T18425] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1289.122985][T18425] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1290.087922][T11845] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 1290.095709][ T5984] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1290.260165][T11845] usb 8-1: Using ep0 maxpacket: 32 [ 1290.277995][T11845] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1290.284850][ T5984] usb 10-1: Using ep0 maxpacket: 16 [ 1290.299680][T11845] usb 8-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1290.324491][ T5984] usb 10-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1290.340806][T11845] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1290.354784][ T5984] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1290.367126][ T5984] usb 10-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 1290.379350][T11845] usb 8-1: config 0 descriptor?? [ 1290.384629][ T5984] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1290.410391][ T5984] usb 10-1: config 0 descriptor?? [ 1290.844380][T11845] usbhid 8-1:0.0: can't add hid device: -71 [ 1290.857615][T11845] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1290.888322][T11845] usb 8-1: USB disconnect, device number 32 [ 1291.084934][T18517] 9pnet_fd: Insufficient options for proto=fd [ 1291.093313][ T5984] usbhid 10-1:0.0: can't add hid device: -71 [ 1291.099484][ T5984] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1291.130754][ T5984] usb 10-1: USB disconnect, device number 8 [ 1291.559237][T18541] 9pnet_fd: Insufficient options for proto=fd [ 1291.826817][T18551] loop4: detected capacity change from 0 to 2048 [ 1291.885714][T18551] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 1291.965060][T18551] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1292.018882][T18551] ext4 filesystem being mounted at /164/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1292.188097][T16383] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1292.204526][T11845] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1292.241064][T18578] 9pnet_fd: Insufficient options for proto=fd [ 1292.387187][T11845] usb 2-1: Using ep0 maxpacket: 32 [ 1292.397374][T11845] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1292.407975][T11845] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1292.423951][T11845] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1292.458805][T11845] usb 2-1: config 0 descriptor?? [ 1292.696413][T13764] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1292.794262][T18601] loop9: detected capacity change from 0 to 2048 [ 1292.805094][T18601] EXT4-fs (loop9): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 1292.847945][T18601] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1292.860374][T18601] ext4 filesystem being mounted at /222/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1292.871364][T13764] usb 5-1: Using ep0 maxpacket: 16 [ 1292.879581][T13764] usb 5-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1292.899489][T13764] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1292.906707][T13764] usb 5-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 1292.916145][T13764] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1292.928407][T13764] usb 5-1: config 0 descriptor?? [ 1292.991029][T15651] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1293.122376][T11845] usbhid 2-1:0.0: can't add hid device: -71 [ 1293.131625][T11845] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1293.146769][T11845] usb 2-1: USB disconnect, device number 6 [ 1293.597474][T13764] usbhid 5-1:0.0: can't add hid device: -71 [ 1293.603599][T13764] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1293.642713][T13764] usb 5-1: USB disconnect, device number 40 [ 1293.760488][T18631] loop8: detected capacity change from 0 to 2048 [ 1293.792772][T18631] EXT4-fs (loop8): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 1293.854757][T18631] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1293.892654][T18631] ext4 filesystem being mounted at /245/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1293.948182][T18639] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3404'. [ 1293.998205][T18639] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3404'. [ 1294.041498][T14082] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1294.065984][T18639] netlink: 'syz.9.3404': attribute type 10 has an invalid length. [ 1294.567859][ T926] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1294.759507][ T926] usb 10-1: Using ep0 maxpacket: 32 [ 1294.830412][ T926] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1294.897050][ T926] usb 10-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1294.966115][ T926] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1295.063235][ T926] usb 10-1: config 0 descriptor?? [ 1295.748467][ T926] usbhid 10-1:0.0: can't add hid device: -71 [ 1295.774219][ T926] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1295.815340][ T926] usb 10-1: USB disconnect, device number 9 [ 1295.873649][T18700] 9pnet_fd: Insufficient options for proto=fd [ 1296.459943][T18730] 9pnet_fd: Insufficient options for proto=fd [ 1296.619894][T18739] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3448'. [ 1296.665153][T18739] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3448'. [ 1296.734222][T18747] netlink: 'syz.8.3448': attribute type 10 has an invalid length. [ 1297.062070][T18762] 9pnet_fd: Insufficient options for proto=fd [ 1297.186273][ T5925] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1297.356897][ T5925] usb 5-1: Using ep0 maxpacket: 32 [ 1297.377968][ T5925] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1297.401511][ T5925] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1297.479005][ T5925] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1297.609280][ T5925] usb 5-1: config 0 descriptor?? [ 1297.945207][T18780] vlan2: entered promiscuous mode [ 1297.951302][T18780] bond0: entered promiscuous mode [ 1297.957071][T18780] bond_slave_0: entered promiscuous mode [ 1297.963461][T18780] bond_slave_1: entered promiscuous mode [ 1297.970213][T18780] bridge0: entered promiscuous mode [ 1298.046282][T18782] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3469'. [ 1298.101130][T18783] netlink: 'syz.7.3469': attribute type 10 has an invalid length. [ 1298.105396][T18782] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3469'. [ 1298.139539][T18783] bridge0: port 3(syz_tun) entered disabled state [ 1298.146486][T18783] bridge0: port 2(bridge_slave_1) entered disabled state [ 1298.153928][T18783] bridge0: port 1(bridge_slave_0) entered disabled state [ 1298.297640][T18783] bridge0: port 3(syz_tun) entered blocking state [ 1298.304281][T18783] bridge0: port 3(syz_tun) entered forwarding state [ 1298.311305][T18783] bridge0: port 2(bridge_slave_1) entered blocking state [ 1298.318540][T18783] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1298.326175][T18783] bridge0: port 1(bridge_slave_0) entered blocking state [ 1298.333443][T18783] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1298.381022][ T5925] usbhid 5-1:0.0: can't add hid device: -71 [ 1298.388491][ T5925] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1298.398017][T18783] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1298.423590][ T5925] usb 5-1: USB disconnect, device number 41 [ 1298.622851][T18796] loop9: detected capacity change from 0 to 1024 [ 1298.648434][T18796] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1298.689245][T18796] EXT4-fs error (device loop9): ext4_ext_check_inode:523: inode #11: comm syz.9.3474: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 1298.740997][T18796] EXT4-fs error (device loop9): ext4_orphan_get:1398: comm syz.9.3474: couldn't read orphan inode 11 (err -117) [ 1298.791739][T18796] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1298.917247][T15651] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1299.079264][ T30] audit: type=1326 audit(1750793814.786:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18811 comm="syz.9.3481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65e118e929 code=0x7ffc0000 [ 1299.221573][ T30] audit: type=1326 audit(1750793814.786:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18811 comm="syz.9.3481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65e118e929 code=0x7ffc0000 [ 1299.761350][ T30] audit: type=1326 audit(1750793814.786:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18811 comm="syz.9.3481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f65e118e929 code=0x7ffc0000 [ 1299.797341][ T30] audit: type=1326 audit(1750793814.786:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18811 comm="syz.9.3481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65e118e929 code=0x7ffc0000 [ 1299.820267][ T30] audit: type=1326 audit(1750793814.786:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18811 comm="syz.9.3481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f65e118e929 code=0x7ffc0000 [ 1299.845093][ T30] audit: type=1326 audit(1750793814.786:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18811 comm="syz.9.3481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65e118e929 code=0x7ffc0000 [ 1299.963286][ T30] audit: type=1326 audit(1750793814.786:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18811 comm="syz.9.3481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f65e118e929 code=0x7ffc0000 [ 1300.018908][ T30] audit: type=1326 audit(1750793814.786:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18811 comm="syz.9.3481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65e118e929 code=0x7ffc0000 [ 1300.050780][ T30] audit: type=1326 audit(1750793814.786:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18811 comm="syz.9.3481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f65e118e929 code=0x7ffc0000 [ 1300.074263][ T30] audit: type=1326 audit(1750793814.786:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18811 comm="syz.9.3481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65e118e929 code=0x7ffc0000 [ 1300.299668][T18835] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 1300.523703][T18851] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3497'. [ 1300.545293][T18851] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3497'. [ 1300.576570][T18851] netlink: 'syz.9.3497': attribute type 10 has an invalid length. [ 1301.150816][T18882] netlink: 136 bytes leftover after parsing attributes in process `syz.9.3513'. [ 1301.175596][T18884] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3514'. [ 1301.194370][T18884] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3514'. [ 1301.223220][T18886] tipc: Started in network mode [ 1301.228316][T18886] tipc: Node identity 4, cluster identity 4711 [ 1301.234550][T18886] tipc: Node number set to 4 [ 1301.263979][T18884] netlink: 'syz.4.3514': attribute type 10 has an invalid length. [ 1301.305429][T18884] bridge0: port 2(bridge_slave_1) entered disabled state [ 1301.312832][T18884] bridge0: port 1(bridge_slave_0) entered disabled state [ 1301.570906][T11845] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 1301.762649][T11845] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1301.793006][T11845] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1301.814792][T18904] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3523'. [ 1301.824969][T11845] usb 8-1: config 0 descriptor?? [ 1302.499641][T18935] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3537'. [ 1302.519572][ T5925] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 1302.552649][T18935] 8021q: VLANs not supported on gre0 [ 1302.691323][T11845] ath6kl: Failed to submit usb control message: -71 [ 1302.698149][T11845] ath6kl: unable to send the bmi data to the device: -71 [ 1302.733736][ T5925] usb 9-1: Using ep0 maxpacket: 32 [ 1302.740412][T11845] ath6kl: Unable to send get target info: -71 [ 1302.746991][ T5925] usb 9-1: config 0 has an invalid interface number: 132 but max is 0 [ 1302.747023][ T5925] usb 9-1: config 0 has no interface number 0 [ 1302.747076][ T5925] usb 9-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1302.749923][ T5925] usb 9-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1302.819093][T11845] ath6kl: Failed to init ath6kl core: -71 [ 1302.832735][T11845] ath6kl_usb 8-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1302.834316][ T5925] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1302.860537][ T5925] usb 9-1: Product: syz [ 1302.877625][ T5925] usb 9-1: Manufacturer: syz [ 1302.892391][ T5925] usb 9-1: SerialNumber: syz [ 1302.905024][T11845] usb 8-1: USB disconnect, device number 33 [ 1302.915118][ T5925] usb 9-1: config 0 descriptor?? [ 1302.945483][ T5925] em28xx 9-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1302.966695][ T5925] em28xx 9-1:0.132: Video interface 132 found: [ 1303.377574][ T5925] em28xx 9-1:0.132: unknown em28xx chip ID (0) [ 1303.393727][T18966] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3553'. [ 1303.834702][ T5925] em28xx 9-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 1303.877493][ T5925] em28xx 9-1:0.132: board has no eeprom [ 1303.952266][ T5925] em28xx 9-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1303.978514][ T5925] em28xx 9-1:0.132: analog set to bulk mode. [ 1303.996326][ T43] em28xx 9-1:0.132: Registering V4L2 extension [ 1304.016826][ T5925] usb 9-1: USB disconnect, device number 13 [ 1304.039673][ T5925] em28xx 9-1:0.132: Disconnecting em28xx [ 1304.313683][ T43] em28xx 9-1:0.132: Config register raw data: 0xffffffed [ 1304.326419][ T43] em28xx 9-1:0.132: AC97 chip type couldn't be determined [ 1304.344470][ T43] em28xx 9-1:0.132: No AC97 audio processor [ 1304.356722][ T43] usb 9-1: Decoder not found [ 1304.369068][ T43] em28xx 9-1:0.132: failed to create media graph [ 1304.375463][ T43] em28xx 9-1:0.132: V4L2 device video103 deregistered [ 1304.408946][ T43] em28xx 9-1:0.132: Remote control support is not available for this card. [ 1304.434867][ T5925] em28xx 9-1:0.132: Closing input extension [ 1304.442886][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 1304.442906][ T30] audit: type=1326 audit(1750793819.790:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19016 comm="syz.7.3577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e6818e929 code=0x7ffc0000 [ 1304.477610][T11845] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1304.485070][ T5925] em28xx 9-1:0.132: Freeing device [ 1304.515337][ T30] audit: type=1326 audit(1750793819.790:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19016 comm="syz.7.3577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e6818e929 code=0x7ffc0000 [ 1304.593608][ T30] audit: type=1326 audit(1750793819.790:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19016 comm="syz.7.3577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f0e6818e929 code=0x7ffc0000 [ 1304.657990][ T30] audit: type=1326 audit(1750793819.790:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19016 comm="syz.7.3577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e6818e929 code=0x7ffc0000 [ 1304.658130][T11845] usb 10-1: Using ep0 maxpacket: 32 [ 1304.715392][ T30] audit: type=1326 audit(1750793819.790:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19016 comm="syz.7.3577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e6818e929 code=0x7ffc0000 [ 1304.761657][T11845] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1304.768630][T11845] usb 10-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1304.786273][ T30] audit: type=1326 audit(1750793819.790:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19016 comm="syz.7.3577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0e6818e929 code=0x7ffc0000 [ 1304.818260][T11845] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1304.839152][T11845] usb 10-1: config 0 descriptor?? [ 1304.845391][ T30] audit: type=1326 audit(1750793819.790:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19016 comm="syz.7.3577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e6818e929 code=0x7ffc0000 [ 1304.878888][ T30] audit: type=1326 audit(1750793819.790:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19016 comm="syz.7.3577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e6818e929 code=0x7ffc0000 [ 1304.967747][ T30] audit: type=1326 audit(1750793819.800:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19016 comm="syz.7.3577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0e6818e929 code=0x7ffc0000 [ 1305.046503][ T30] audit: type=1326 audit(1750793819.800:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19016 comm="syz.7.3577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e6818e929 code=0x7ffc0000 [ 1305.079767][T19037] loop8: detected capacity change from 0 to 512 [ 1305.089976][T19037] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1305.134018][T19037] EXT4-fs (loop8): 1 truncate cleaned up [ 1305.163020][T19037] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1305.211833][T19042] loop4: detected capacity change from 0 to 1024 [ 1305.216630][T19037] EXT4-fs error (device loop8): ext4_generic_delete_entry:2668: inode #2: block 13: comm syz.8.3586: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 1305.233074][T19042] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1305.275651][T19037] EXT4-fs error (device loop8) in ext4_delete_entry:2739: Corrupt filesystem [ 1305.336444][T19037] EXT4-fs warning (device loop8): ext4_rename_delete:3726: inode #2: comm syz.8.3586: Deleting old file: nlink 4, error=-117 [ 1305.601158][T11845] usbhid 10-1:0.0: can't add hid device: -71 [ 1305.873693][T11845] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1305.983777][T11845] usb 10-1: USB disconnect, device number 10 [ 1306.020468][T14082] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1306.062436][T16383] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1307.258413][T19106] loop7: detected capacity change from 0 to 16 [ 1307.708855][T19130] loop7: detected capacity change from 0 to 256 [ 1308.239384][T19157] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3641'. [ 1308.280853][T19157] dummy0: entered promiscuous mode [ 1308.295950][T19157] dummy0: left promiscuous mode [ 1308.341088][T19160] 9pnet: Could not find request transport: fd0x0000000000000003 [ 1309.261346][T19217] loop7: detected capacity change from 0 to 2048 [ 1309.279373][T19217] EXT4-fs (loop7): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 1309.305038][T19217] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1309.317768][T13764] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1309.331245][T19221] loop8: detected capacity change from 0 to 16 [ 1309.348429][T19217] ext4 filesystem being mounted at /296/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1309.361672][ T5853] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1309.446080][T13746] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1309.511185][T13764] usb 10-1: Using ep0 maxpacket: 32 [ 1309.524838][T13764] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1309.541500][ T5853] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1309.550677][T13764] usb 10-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1309.571297][ T5853] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1309.576609][T13764] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1309.593582][ T5853] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1309.603394][T13764] usb 10-1: config 0 descriptor?? [ 1309.650168][ T5853] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1309.695493][T19206] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1309.712693][ T5853] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1309.947311][T11845] usb 5-1: USB disconnect, device number 42 [ 1310.103142][T19251] loop1: detected capacity change from 0 to 2048 [ 1310.123264][T19251] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 1310.192513][T19251] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1310.219740][T19251] ext4 filesystem being mounted at /236/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1310.268088][T13764] usbhid 10-1:0.0: can't add hid device: -71 [ 1310.274374][T13764] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1310.289816][T13764] usb 10-1: USB disconnect, device number 11 [ 1310.327538][T16410] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1310.767336][T19282] netlink: 'syz.7.3698': attribute type 10 has an invalid length. [ 1310.780360][T19282] bridge0: port 3(syz_tun) entered disabled state [ 1310.787217][T19282] bridge0: port 2(bridge_slave_1) entered disabled state [ 1310.794515][T19282] bridge0: port 1(bridge_slave_0) entered disabled state [ 1311.053694][T19297] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3705'. [ 1311.099911][T19297] gretap0: entered promiscuous mode [ 1311.111343][T19297] gretap0: left promiscuous mode [ 1311.421484][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1311.431788][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1312.053493][T19344] loop9: detected capacity change from 0 to 1024 [ 1312.070901][T19344] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1312.094019][T19344] EXT4-fs error (device loop9): ext4_ext_check_inode:523: inode #11: comm syz.9.3728: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 1312.145812][T19344] EXT4-fs error (device loop9): ext4_orphan_get:1398: comm syz.9.3728: couldn't read orphan inode 11 (err -117) [ 1312.169584][T19344] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1312.230301][T15651] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1313.481146][T19379] loop8: detected capacity change from 0 to 512 [ 1313.504458][T19379] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1313.561366][T19379] EXT4-fs (loop8): 1 truncate cleaned up [ 1313.593462][T19379] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1313.665434][T19379] EXT4-fs error (device loop8): ext4_generic_delete_entry:2668: inode #2: block 13: comm syz.8.3742: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 1313.701120][T19386] netlink: 5064 bytes leftover after parsing attributes in process `syz.1.3745'. [ 1313.709432][T19379] EXT4-fs error (device loop8) in ext4_delete_entry:2739: Corrupt filesystem [ 1313.726151][T19379] EXT4-fs warning (device loop8): ext4_rename_delete:3726: inode #2: comm syz.8.3742: Deleting old file: nlink 4, error=-117 [ 1313.828820][T14082] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1313.966740][T19392] netlink: 'syz.1.3748': attribute type 10 has an invalid length. [ 1314.447810][T19404] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3752'. [ 1315.623985][T19404] 8021q: VLANs not supported on ip6gre0 [ 1316.020300][T19414] netlink: zone id is out of range [ 1316.053239][T19414] netlink: set zone limit has 4 unknown bytes [ 1316.074973][T11845] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1316.256010][T11845] usb 9-1: Using ep0 maxpacket: 32 [ 1316.276185][T11845] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1316.290414][T19430] netlink: 'syz.9.3764': attribute type 10 has an invalid length. [ 1316.300658][T11845] usb 9-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1316.315516][T19433] loop7: detected capacity change from 0 to 16 [ 1316.329311][T11845] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1316.372529][T11845] usb 9-1: config 0 descriptor?? [ 1316.447205][T19436] loop4: detected capacity change from 0 to 1024 [ 1316.461630][T19437] netlink: 64 bytes leftover after parsing attributes in process `syz.7.3768'. [ 1316.463670][T19436] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1316.500021][T19436] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #11: comm syz.4.3767: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 1316.523991][T19436] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.3767: couldn't read orphan inode 11 (err -117) [ 1316.550741][T19436] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1316.767697][T16383] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1316.982077][T19457] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3778'. [ 1317.011991][T19457] 8021q: VLANs not supported on ip6gre0 [ 1317.062290][T13764] usb 9-1: USB disconnect, device number 14 [ 1317.083349][T19461] netlink: 'syz.1.3779': attribute type 10 has an invalid length. [ 1317.603090][T19490] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3793'. [ 1317.651522][T19490] netlink: 'syz.4.3793': attribute type 10 has an invalid length. [ 1318.079371][T19518] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1318.226843][T19523] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3810'. [ 1318.270422][T19523] netlink: 'syz.7.3810': attribute type 10 has an invalid length. [ 1318.285768][T19528] loop1: detected capacity change from 0 to 16 [ 1318.417149][T19533] bridge: RTM_NEWNEIGH with invalid ether address [ 1318.860953][T19556] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3826'. [ 1318.903808][T19562] Driver unsupported XDP return value 0 on prog (id 1221) dev N/A, expect packet loss! [ 1318.916711][T19556] netlink: 'syz.7.3826': attribute type 10 has an invalid length. [ 1319.083343][T19571] bridge: RTM_NEWNEIGH with invalid ether address [ 1319.128109][T19577] loop9: detected capacity change from 0 to 512 [ 1319.147016][T19577] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1319.172904][T19577] EXT4-fs (loop9): 1 truncate cleaned up [ 1319.180530][T19577] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1319.259329][T19577] EXT4-fs error (device loop9): ext4_generic_delete_entry:2668: inode #2: block 13: comm syz.9.3837: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 1319.366826][T19577] EXT4-fs error (device loop9) in ext4_delete_entry:2739: Corrupt filesystem [ 1319.409356][T19577] EXT4-fs warning (device loop9): ext4_rename_delete:3726: inode #2: comm syz.9.3837: Deleting old file: nlink 4, error=-117 [ 1319.457196][T19595] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3846'. [ 1319.590495][T19602] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1319.603997][T15651] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1321.342651][T19672] loop9: detected capacity change from 0 to 1024 [ 1321.454965][T19672] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1321.546885][T19685] netlink: 64 bytes leftover after parsing attributes in process `syz.7.3885'. [ 1321.805337][T19700] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3892'. [ 1322.492167][T19709] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3895'. [ 1322.516833][T15651] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1322.752212][T19718] netlink: 48 bytes leftover after parsing attributes in process `syz.9.3897'. [ 1322.771353][T19718] netlink: 'syz.9.3897': attribute type 10 has an invalid length. [ 1322.828733][T19720] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3900'. [ 1323.207459][T19736] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3908'. [ 1323.270036][T19734] loop7: detected capacity change from 0 to 1024 [ 1323.328275][T19734] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1323.553605][T13746] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1323.624813][T19753] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3913'. [ 1323.776595][T19762] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3919'. [ 1323.800202][T19762] team0: entered promiscuous mode [ 1323.811254][T19766] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3920'. [ 1323.825350][T19762] team_slave_0: entered promiscuous mode [ 1323.857552][T19762] team_slave_1: entered promiscuous mode [ 1323.866303][T19762] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1323.882603][T19762] team0: left promiscuous mode [ 1323.890599][T19762] team_slave_0: left promiscuous mode [ 1323.896272][T19762] team_slave_1: left promiscuous mode [ 1324.043629][T19773] loop7: detected capacity change from 0 to 1024 [ 1324.225560][T19773] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1324.408311][T13746] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1324.586758][T19707] Bluetooth: hci2: command 0x0406 tx timeout [ 1324.597494][T14083] Bluetooth: hci4: command 0x0406 tx timeout [ 1325.403163][T19812] loop9: detected capacity change from 0 to 1024 [ 1325.453462][T19823] __nla_validate_parse: 2 callbacks suppressed [ 1325.453479][T19823] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3943'. [ 1325.454294][T19812] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1325.460940][T19823] netlink: 'syz.8.3943': attribute type 10 has an invalid length. [ 1325.650509][T19827] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3945'. [ 1325.743637][T15651] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1325.880565][T19838] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3949'. [ 1325.895411][T19838] 8021q: VLANs not supported on ip6gre0 [ 1326.061277][T19846] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3954'. [ 1326.071807][T19848] loop9: detected capacity change from 0 to 16 [ 1326.099977][T19846] netlink: 'syz.7.3954': attribute type 10 has an invalid length. [ 1326.306708][T19858] loop1: detected capacity change from 0 to 1024 [ 1326.321268][T19866] loop9: detected capacity change from 0 to 1024 [ 1326.345452][T19858] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1326.367040][T19866] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1326.431505][T19866] EXT4-fs error (device loop9): ext4_ext_check_inode:523: inode #11: comm syz.9.3962: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 1326.456442][T19875] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3965'. [ 1326.469067][T19866] EXT4-fs error (device loop9): ext4_orphan_get:1398: comm syz.9.3962: couldn't read orphan inode 11 (err -117) [ 1326.498452][T19866] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1326.543127][T16410] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1326.677907][T15651] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1326.843786][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 1326.843804][ T30] audit: type=1804 audit(1750793840.755:468): pid=19888 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3973" name="/newroot/272/file0" dev="tmpfs" ino=1419 res=1 errno=0 [ 1326.902391][T19893] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 1327.125856][T19908] loop4: detected capacity change from 0 to 256 [ 1327.192843][T19908] exfat: Deprecated parameter 'utf8' [ 1327.250335][T19908] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6d3f72e, utbl_chksum : 0xe619d30d) [ 1327.616866][T19937] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3995'. [ 1327.630428][T19935] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3994'. [ 1327.773623][T19942] bridge: RTM_NEWNEIGH with invalid ether address [ 1327.793941][T19945] loop4: detected capacity change from 0 to 16 [ 1328.005016][T19958] loop9: detected capacity change from 0 to 256 [ 1328.012242][T19958] exfat: Deprecated parameter 'utf8' [ 1328.057481][T19953] loop4: detected capacity change from 0 to 1024 [ 1328.135455][T19958] exFAT-fs (loop9): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6d3f72e, utbl_chksum : 0xe619d30d) [ 1328.159089][T19953] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1328.350074][T16383] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1328.472818][ T30] audit: type=1804 audit(1750793842.270:469): pid=19972 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.4009" name="/newroot/374/file0" dev="tmpfs" ino=1976 res=1 errno=0 [ 1328.542661][T19979] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4010'. [ 1328.694689][T19989] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4017'. [ 1328.873790][T19997] loop9: detected capacity change from 0 to 256 [ 1328.896283][T19997] exfat: Deprecated parameter 'utf8' [ 1328.952869][T19997] exFAT-fs (loop9): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6d3f72e, utbl_chksum : 0xe619d30d) [ 1328.988025][ T30] audit: type=1804 audit(1750793842.766:470): pid=20005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.4023" name="/newroot/324/file0" dev="tmpfs" ino=1679 res=1 errno=0 [ 1329.124283][T20011] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4025'. [ 1329.144201][T20011] team0: entered promiscuous mode [ 1329.149978][T20011] team_slave_0: entered promiscuous mode [ 1329.155935][T20011] team_slave_1: entered promiscuous mode [ 1329.167320][T20011] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1329.191391][T20011] team0: left promiscuous mode [ 1329.200908][T20011] team_slave_0: left promiscuous mode [ 1329.210450][T20011] team_slave_1: left promiscuous mode [ 1329.640726][T20033] bridge: RTM_NEWNEIGH with invalid ether address [ 1330.077211][T20048] loop8: detected capacity change from 0 to 32768 [ 1330.889165][T20096] vlan2: entered promiscuous mode [ 1330.906512][T20096] bond0: entered promiscuous mode [ 1330.925846][T20096] bond_slave_0: entered promiscuous mode [ 1330.941581][T20096] bond_slave_1: entered promiscuous mode [ 1330.994043][T20096] bridge0: entered promiscuous mode [ 1331.859248][T20142] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1332.212750][T20149] __nla_validate_parse: 1 callbacks suppressed [ 1332.212783][T20149] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4088'. [ 1332.250129][T20149] team0: entered promiscuous mode [ 1332.266677][T20149] team_slave_0: entered promiscuous mode [ 1332.284467][T20149] team_slave_1: entered promiscuous mode [ 1332.304715][T20149] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1332.337290][T20149] team0: left promiscuous mode [ 1332.342244][T20149] team_slave_0: left promiscuous mode [ 1332.370353][T20149] team_slave_1: left promiscuous mode [ 1332.877610][T20162] loop4: detected capacity change from 0 to 1024 [ 1332.889295][T20162] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1332.902701][T20162] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 1332.948731][T20162] JBD2: no valid journal superblock found [ 1332.964092][T20162] EXT4-fs (loop4): Could not load journal inode [ 1333.540244][T20193] loop8: detected capacity change from 0 to 1024 [ 1333.664253][T20193] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1333.779390][T14082] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1334.350580][T20227] netlink: zone id is out of range [ 1334.352726][T20225] bridge: RTM_NEWNEIGH with invalid ether address [ 1334.414076][T20228] loop9: detected capacity change from 0 to 1024 [ 1334.507701][T20228] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1334.556991][T20227] netlink: set zone limit has 4 unknown bytes [ 1334.912360][T20237] loop4: detected capacity change from 0 to 32768 [ 1334.934873][T15651] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1335.231531][T20246] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4131'. [ 1335.597153][T20254] bridge: RTM_NEWNEIGH with invalid ether address [ 1335.981461][T20272] loop7: detected capacity change from 0 to 1024 [ 1336.087581][T20268] loop4: detected capacity change from 0 to 1024 [ 1336.230971][T20267] loop9: detected capacity change from 0 to 32768 [ 1336.253758][T20272] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1336.294855][T20268] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1336.373195][T20272] EXT4-fs error (device loop7): ext4_ext_check_inode:523: inode #11: comm syz.7.4143: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 1336.404544][T20272] EXT4-fs error (device loop7): ext4_orphan_get:1398: comm syz.7.4143: couldn't read orphan inode 11 (err -117) [ 1336.435342][T16383] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1336.475941][T20272] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1336.641976][T13746] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1337.780735][T20345] netlink: 5080 bytes leftover after parsing attributes in process `syz.1.4176'. [ 1337.802838][T20347] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4177'. [ 1337.949261][T20352] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4178'. [ 1337.962982][T20352] 8021q: VLANs not supported on ip6tnl0 [ 1338.625959][T20368] loop1: detected capacity change from 0 to 32768 [ 1338.633493][T20368] btrfs: Deprecated parameter 'usebackuproot' [ 1338.639980][T20368] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 1338.671878][T20368] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.4187 (20368) [ 1338.701498][T20368] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1338.712274][T20368] BTRFS info (device loop1): using sha256 (sha256-x86_64) checksum algorithm [ 1338.721313][T20368] BTRFS info (device loop1): using free-space-tree [ 1338.816492][T20378] netlink: zone id is out of range [ 1338.860829][T20368] [ 1338.863211][T20368] ====================================================== [ 1338.863435][T20378] netlink: set zone limit has 4 unknown bytes [ 1338.870237][T20368] WARNING: possible circular locking dependency detected [ 1338.870258][T20368] 6.16.0-rc3-next-20250624-syzkaller #0 Not tainted [ 1338.870272][T20368] ------------------------------------------------------ [ 1338.870300][T20368] syz.1.4187/20368 is trying to acquire lock: [ 1338.870313][T20368] ffffffff8e6e8cc8 (uuid_mutex){+.+.}-{4:4}, at: btrfs_read_chunk_tree+0xef/0x2170 [ 1338.870375][T20368] [ 1338.870375][T20368] but task is already holding lock: [ 1338.870384][T20368] ffff88804714a0e0 (&type->s_umount_key#119/1){+.+.}-{4:4}, at: alloc_super+0x204/0x970 [ 1338.870460][T20368] [ 1338.870460][T20368] which lock already depends on the new lock. [ 1338.870460][T20368] [ 1338.870470][T20368] [ 1338.870470][T20368] the existing dependency chain (in reverse order) is: [ 1338.870480][T20368] [ 1338.870480][T20368] -> #1 (&type->s_umount_key#119/1){+.+.}-{4:4}: [ 1338.870527][T20368] lock_acquire+0x120/0x360 [ 1338.886387][T20385] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4189'. [ 1338.890192][T20368] down_write_nested+0x9d/0x200 [ 1338.890222][T20368] alloc_super+0x204/0x970 [ 1338.912444][T20388] netlink: 5080 bytes leftover after parsing attributes in process `syz.4.4190'. [ 1338.912601][T20368] sget_fc+0x329/0xa40 [ 1338.995494][T20368] btrfs_get_tree+0x4c6/0x12d0 [ 1339.000909][T20368] vfs_get_tree+0x92/0x2b0 [ 1339.005869][T20368] do_new_mount+0x24a/0xa40 [ 1339.010926][T20368] __se_sys_mount+0x317/0x410 [ 1339.016125][T20368] do_syscall_64+0xfa/0x3b0 [ 1339.021163][T20368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1339.027588][T20368] [ 1339.027588][T20368] -> #0 (uuid_mutex){+.+.}-{4:4}: [ 1339.034820][T20368] validate_chain+0xb9b/0x2140 [ 1339.040119][T20368] __lock_acquire+0xab9/0xd20 [ 1339.045325][T20368] lock_acquire+0x120/0x360 [ 1339.050364][T20368] __mutex_lock+0x182/0xe80 [ 1339.055400][T20368] btrfs_read_chunk_tree+0xef/0x2170 [ 1339.061214][T20368] open_ctree+0x17f2/0x3a10 [ 1339.066256][T20368] btrfs_get_tree+0xc6f/0x12d0 [ 1339.071568][T20368] vfs_get_tree+0x92/0x2b0 [ 1339.076528][T20368] do_new_mount+0x24a/0xa40 [ 1339.081574][T20368] __se_sys_mount+0x317/0x410 [ 1339.086799][T20368] do_syscall_64+0xfa/0x3b0 [ 1339.091889][T20368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1339.098319][T20368] [ 1339.098319][T20368] other info that might help us debug this: [ 1339.098319][T20368] [ 1339.108544][T20368] Possible unsafe locking scenario: [ 1339.108544][T20368] [ 1339.115995][T20368] CPU0 CPU1 [ 1339.121361][T20368] ---- ---- [ 1339.126731][T20368] lock(&type->s_umount_key#119/1); [ 1339.132043][T20368] lock(uuid_mutex); [ 1339.138553][T20368] lock(&type->s_umount_key#119/1); [ 1339.146382][T20368] lock(uuid_mutex); [ 1339.150372][T20368] [ 1339.150372][T20368] *** DEADLOCK *** [ 1339.150372][T20368] [ 1339.158516][T20368] 1 lock held by syz.1.4187/20368: [ 1339.163626][T20368] #0: ffff88804714a0e0 (&type->s_umount_key#119/1){+.+.}-{4:4}, at: alloc_super+0x204/0x970 [ 1339.173868][T20368] [ 1339.173868][T20368] stack backtrace: [ 1339.179762][T20368] CPU: 0 UID: 0 PID: 20368 Comm: syz.1.4187 Not tainted 6.16.0-rc3-next-20250624-syzkaller #0 PREEMPT(full) [ 1339.179788][T20368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1339.179801][T20368] Call Trace: [ 1339.179810][T20368] [ 1339.179819][T20368] dump_stack_lvl+0x189/0x250 [ 1339.179851][T20368] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1339.179878][T20368] ? __pfx__printk+0x10/0x10 [ 1339.179899][T20368] ? print_lock_name+0xde/0x100 [ 1339.179919][T20368] print_circular_bug+0x2ee/0x310 [ 1339.179950][T20368] check_noncircular+0x134/0x160 [ 1339.179981][T20368] validate_chain+0xb9b/0x2140 [ 1339.180019][T20368] __lock_acquire+0xab9/0xd20 [ 1339.180045][T20368] ? btrfs_read_chunk_tree+0xef/0x2170 [ 1339.180064][T20368] lock_acquire+0x120/0x360 [ 1339.180085][T20368] ? btrfs_read_chunk_tree+0xef/0x2170 [ 1339.180110][T20368] __mutex_lock+0x182/0xe80 [ 1339.180134][T20368] ? btrfs_read_chunk_tree+0xef/0x2170 [ 1339.180157][T20368] ? btrfs_read_chunk_tree+0xef/0x2170 [ 1339.180177][T20368] ? __pfx___mutex_lock+0x10/0x10 [ 1339.180203][T20368] ? rcu_is_watching+0x15/0xb0 [ 1339.180229][T20368] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 1339.180254][T20368] ? btrfs_read_chunk_tree+0xcd/0x2170 [ 1339.180275][T20368] btrfs_read_chunk_tree+0xef/0x2170 [ 1339.180297][T20368] ? btrfs_root_node+0xae/0x4a0 [ 1339.180320][T20368] ? btrfs_root_node+0x459/0x4a0 [ 1339.180340][T20368] ? btrfs_root_node+0xae/0x4a0 [ 1339.180361][T20368] ? __pfx_btrfs_root_node+0x10/0x10 [ 1339.180385][T20368] ? __pfx_btrfs_read_chunk_tree+0x10/0x10 [ 1339.180404][T20368] ? load_super_root+0x2b2/0x3f0 [ 1339.180424][T20368] ? __pfx_load_super_root+0x10/0x10 [ 1339.180451][T20368] ? read_extent_buffer+0x120/0x5e0 [ 1339.180469][T20368] ? open_ctree+0x17ea/0x3a10 [ 1339.180491][T20368] open_ctree+0x17f2/0x3a10 [ 1339.180510][T20368] ? bdi_register_va+0x58d/0x740 [ 1339.180529][T20368] ? open_ctree+0xa1a/0x3a10 [ 1339.180556][T20368] ? __pfx_open_ctree+0x10/0x10 [ 1339.180580][T20368] btrfs_get_tree+0xc6f/0x12d0 [ 1339.180606][T20368] vfs_get_tree+0x92/0x2b0 [ 1339.180633][T20368] do_new_mount+0x24a/0xa40 [ 1339.180676][T20368] __se_sys_mount+0x317/0x410 [ 1339.180696][T20368] ? __pfx___se_sys_mount+0x10/0x10 [ 1339.180714][T20368] ? do_syscall_64+0xbe/0x3b0 [ 1339.180737][T20368] ? __x64_sys_mount+0x20/0xc0 [ 1339.180753][T20368] do_syscall_64+0xfa/0x3b0 [ 1339.180775][T20368] ? lockdep_hardirqs_on+0x9c/0x150 [ 1339.180796][T20368] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1339.180813][T20368] ? clear_bhb_loop+0x60/0xb0 [ 1339.180833][T20368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1339.180850][T20368] RIP: 0033:0x7f9f905900ca [ 1339.180867][T20368] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1339.180884][T20368] RSP: 002b:00007f9f91468e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1339.180902][T20368] RAX: ffffffffffffffda RBX: 00007f9f91468ef0 RCX: 00007f9f905900ca [ 1339.180915][T20368] RDX: 00002000000055c0 RSI: 0000200000000280 RDI: 00007f9f91468eb0 [ 1339.180928][T20368] RBP: 00002000000055c0 R08: 00007f9f91468ef0 R09: 0000000002000898 [ 1339.180941][T20368] R10: 0000000002000898 R11: 0000000000000246 R12: 0000200000000280 [ 1339.180953][T20368] R13: 00007f9f91468eb0 R14: 00000000000055ae R15: 0000200000000180 [ 1339.180972][T20368] [ 1339.180996][ C0] vkms_vblank_simulate: vblank timer overrun [ 1339.509288][ C0] vkms_vblank_simulate: vblank timer overrun [ 1339.677826][T20368] BTRFS info (device loop1): rebuilding free space tree [ 1339.736869][T16410] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d