last executing test programs: 13m15.234202066s ago: executing program 32 (id=462): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, 0x0, 0x1000c810) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000540), 0x2}, 0x3}], 0x4000048, 0x0, 0x0) 12m3.839836929s ago: executing program 33 (id=779): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x9102}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40480, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x300, r5, 0x3f, 0xb604}, 0x80, &(0x7f0000003340)=[{&(0x7f0000000180)="27030200590214000600006fb96dbcf7", 0x10}, {&(0x7f0000000f00)="0b676ae7ce0aa301d6ff23b6557b3e02be56268cb67cc8df76c62092c9dc73bf02e2fbfd0d14f594db9a8faca2d1ee15bc4c2c588479eb0b462fed8714ae90e42c4c1477864b7c37d96279e5c380cb5f53b2983f7e1ec1fb074a8d4be7374be1c9b65b8587e435b5dc319cd5d25258ed81710608c0331449192c63736d71c7fbb72bd9ef8a3be726b464f445638ea32879fe12b88ebe8e141ba4b0efe8ae02c225a3c07cbd1c65a5f9a57267f88213743ea2ab323a2f8f1c50ecca7b6ee9a0fea79147e75e0eca42d7cf6d4d9a1e658e44cd8dc36a7b91cca77237962b41d760dd6e3aed631486ad0f453ef4501e60f923d992103a3845a67fca331897cac2bd51790acf2661efa41d90eda2061ce1aa53cbeab80229844f3954fe9ac6447af516907739ea3e6bbb832770194e6e655ec3a7ab80374b17059080c1fa21970d0147401a1ca1e58e3c86d77d116f4208299d7a3665898b2009c3752c786e4b45042b51366a133974ec564c9d2f0d7cbad234223a19b52e0efeccd654fd2bdd57df81cd7b478ef2b59f8446075d812f9d62e63d1b38375765aa7d63965484ef4d9b0b90ec00b39ac0430cbfee05cd73c34ad9922f50292d69194220339e3c923a9121d0e5ab3b7fc0bc6a33cc87d4cc23eb20", 0x1d1}, {&(0x7f00000022c0)="03b08259909695eb5ca0294fba511a888314cac2cc4b8fcfa8a6395f98c9495276871c1415f144fc9b74b6be1832c68c5a06cd992e2fa712186cb328d237fb2b3daa49d29c7221005ae22dfd2fa279a3a0ebe73b3093e6f66d7ab7e24362e64a1bbd1f4e7a6e2f2cf522cf9b4437037aed5091737c0883648a89f0c8ad70436a97e52561c4ac61cc619e5cc62e9a9b0fec63d844d5d10a", 0x97}], 0x3}, 0x0) 10m20.981950068s ago: executing program 34 (id=1391): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) 9m37.038636711s ago: executing program 35 (id=1550): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) sendmsg$kcm(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000800)="8bef", 0x2}], 0x1}, 0x24008800) close(r0) 9m27.002737961s ago: executing program 36 (id=1596): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000101050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e65740000000c0007800800"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x31, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x20000040) r2 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 8m30.464727956s ago: executing program 37 (id=1691): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) 8m7.210981636s ago: executing program 7 (id=1746): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x9102}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40480, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x7fffffff, 0x635d, 0x5, 0xffffffff, 0x407}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd, 0x101}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x300, r6, 0x3f, 0xb604}, 0x80, &(0x7f0000003340)=[{&(0x7f0000000180)="27030200590214000600006fb96dbcf7", 0x10}, {&(0x7f0000000f00)="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", 0x1d1}, {&(0x7f00000022c0)="03b08259909695eb5ca0294fba511a888314cac2cc4b8fcfa8a6395f98c9495276871c1415f144fc9b74b6be1832c68c5a06cd992e2fa712186cb328d237fb2b3daa49d29c7221005ae22dfd2fa279a3a0ebe73b3093e6f66d7ab7e24362e64a1bbd1f4e7a6e2f2cf522cf9b4437037aed5091737c0883648a89f0c8ad70436a97e52561c4ac61cc619e5cc62e9a9b0fec63d844d5d10a", 0x97}], 0x3}, 0x0) 8m5.998412444s ago: executing program 7 (id=1752): syz_open_dev$loop(&(0x7f0000000240), 0x75f, 0xa8182) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x0, &(0x7f0000000000)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x787, &(0x7f0000001000)="$eJzs3ctrXNUfAPDvnSRNk/b3SwRB6yogaKB0YmpsFVxUXIhgoaBr22EyDTWTTMlMShMCtojgRlBxIeimax9159bHVv8LF9JSNS1WXEjkzqOdNjPppM3MBPL5wMmcc++dnPOdcx/nzr3MDWDPmkj/ZCIORcRHScRYfXoSEUPV3GDEidpyt9fX8mlKYmPjzT+S6jK31tfy0fSe1IF64cmI+PH9iMOZzfWWV1bnc8ViYalenqosnJ8qr6weObeQmyvMFRaPTc/MHD3+wvFjOxfrX7+sHrz+8WvPfnPin/eeuPrhT0mciIP1ec1x7JSJmKh/JkPpR3iPV3e6sj5L+t0AHkq6aQ7UtvI4FGMxUM21MdLLlgEA3fJuRGwAAHtM4vgPAHtM43uAW+tr+Ubq7zcSvXXjlYjYX4u/cX2zNmewfs1uf/U66Oit5J4rI0lEjO9A/RMR8cV3b3+Vpqj3g2tpQC9cuhwRZ8YnNu//k033LGzXc1vN3BiuvkzcN3mvHX+gn75Pxz8vthr/Ze6Mf6LF+Ge4xbb7MB68/Weu7UA1baXjv5eb7m273RR/3fhAvfS/6phvKDl7rlhI923/j4jJGBpOy9PVRVuP3CZv/nuzXf3N478/P3nny7T+9PXuEplrg8P3vmc2V8k9atwNNy5HPDXYKv7kTv8nbca/pzqs4/WXPvi83bw0/jTeRtocf3dtXIl4pmX/3+3LZMv7E6eqq8NUY6Vo4dtfPxttV39z/6cprb9xLtALaf+Pbh3/eNJ8v2Z5+3X8fGXsh3bzHhx/6/V/X/JWNb+vPu1irlJZmo7Yl7yxefrRu+9tlBvLp/FPPt16+69V23r9T88Jz3QY/+D1379++Pi7K41/dlv9v/3M1dvzA+3q76z/Z6q5yfqUTvZ/nTbwUT47AAAAAAAAAAAAAAAAAAAAAAAAAOhUJiIORpLJ3slnMtls7Rnej8doplgqVw6fLS0vzkb1WdnjMZRp/NTlWNPvoU7Xfw+/UT56X/n5iHgsIj4dHqmWs/lScbbfwQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA3YE2z/9P/Tbc79YBAF2zv98NAAB6zvEfAPae7R3/R7rWDgCgd5z/A8De0/Hx/0x32wEA9I7zfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALrs1MmTadr4e30tn5ZnL6wsz5cuHJktlOezC8v5bL60dD47VyrNFQvZfGmh7T+6VHsplkrnZ2Jx+eJUpVCuTJVXVk8vlJYXK6fPLeTmCqcLQz2LDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6V15Znc8Vi4UlmS0zI7ujGbsmMxi7ohkyXcs07yVG+reDAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjl/gsAAP//IIYqoQ==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) symlink(&(0x7f0000000500)='./file0/file0\x00', &(0x7f0000000540)='./file0\x00') removexattr(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="6f73782e001b138cfaafcbd2950f707fff2673d1fe915fea68b57bfb597a51c194af881a5be9f6e3d9c5d84917b69aed0c26b392109396e032bcc65c19ea4b6918058aeb62def854d591885d093ace12095e2b55b4bd10eda840f657"]) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x20132, 0xffffffffffffffff, 0xb299b000) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/lru_gen\x00', 0x2, 0x0) write(r2, &(0x7f0000000800)='- 1 0 0', 0x7) 8m4.633703026s ago: executing program 7 (id=1762): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00'}) setsockopt$packet_add_memb(r0, 0x107, 0x1, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@newtfilter={0x24, 0x11, 0x1, 0x70bd22, 0x25dfdbff, {0x0, 0x0, 0x74, r3, {0x5, 0x10}, {0x1, 0xfff1}, {0x2, 0xe}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x3604c8a4}, 0x810) 8m2.33502432s ago: executing program 7 (id=1770): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xd, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1, r0}, 0xc) 8m1.941583313s ago: executing program 7 (id=1773): migrate_pages(0x0, 0xfc, 0x0, &(0x7f0000000240)=0x1) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000", 0x47}], 0x1) r1 = socket$inet6(0x10, 0x2, 0x4) syz_open_procfs(0x0, &(0x7f00000003c0)='net/tcp\x00') sendto$inet6(r1, &(0x7f0000000400)="4c00000012001f15b9409b4c00c00a00a578409b000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) 8m1.211884698s ago: executing program 7 (id=1778): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000080)='syzkaller\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)='\x00', r0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000101050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e65740000000c00078008000640"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x31, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x20000040) r2 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 7m45.405615329s ago: executing program 38 (id=1778): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000080)='syzkaller\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)='\x00', r0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000101050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e65740000000c00078008000640"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x31, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x20000040) r2 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 7m15.067184876s ago: executing program 5 (id=1913): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r0, &(0x7f0000006280)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x800000}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000004280)="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", 0x2000, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x90, 0x0, 0x0, {0x1, 0xfffffffffffffffe, 0x0, 0x0, 0xc, 0xe93f, {0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0x77, 0xd, 0xfffe, 0x9, 0x2, 0x3, 0xc000, 0x2, r2, 0xee01}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_set$uid(0x3, r2, 0x2004) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x200000087}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x40000000015, 0x5, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) bind$inet(r4, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) getsockopt(r5, 0x200000000114, 0x2715, 0x0, &(0x7f0000000400)) sendmsg$SEG6_CMD_SETHMAC(r3, 0x0, 0x4894) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$btrfs(&(0x7f0000000140), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000300)={[{@discard}, {@fatal_errors_bug}, {@discard}]}, 0xf4, 0x559e, &(0x7f000000ac40)="$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") r6 = open(&(0x7f0000000440)='./file1\x00', 0x4242, 0x1df2a23c5997faa6) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f00)=ANY=[@ANYBLOB="020000001a0001000000800000000000543fb44492"], 0x1c}}, 0x0) syz_open_dev$sg(&(0x7f0000000240), 0xa, 0x80) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0x10) write$FUSE_CREATE_OPEN(r6, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x1, 0x0, 0x405, 0x2, 0x80000001, 0x1, {0x3, 0xff, 0x3, 0xed, 0x200, 0xd615, 0x9, 0x535, 0xfffffffe, 0x1000, 0x4000000, 0x0, 0xffffffffffffffff, 0x5, 0x2000000}}, {0x0, 0x13}}}, 0xa0) sendfile(r6, r6, &(0x7f0000000080), 0x7f03) 7m11.412674384s ago: executing program 5 (id=1919): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)={0x20, 0x90069109b15ef6c8, 0x1d, "4d61501d01000000000000001000000000008007000000000000380400"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000200)=ANY=[@ANYBLOB="403f0100000080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000d80)={0x34, &(0x7f0000000a80)=ANY=[@ANYBLOB="401605"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000680)={0x44, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7m6.781290509s ago: executing program 5 (id=1931): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gre={{0x8}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x3f00, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) 7m3.082434279s ago: executing program 5 (id=1934): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbaf, &(0x7f0000002f00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x18b341, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x1a0001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x3}}) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0xffffffffffffffff, 0x2, 0x7, 0x1, 0x8}}) write$P9_RREADLINK(r2, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000140)=ANY=[@ANYBLOB="0400000000000000ff"]) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0xfffffe00, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/class/thermal/cooling_device0/cur_state\x00', 0x1, 0x0) write(r3, &(0x7f0000000080)='-04', 0x3) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_access\x00', &(0x7f0000001440)=ANY=[@ANYBLOB="0200000001000000000000000400050000000000100000000000000020"], 0x24, 0x3) setresgid(0xee00, 0xee01, 0x0) setgroups(0x0, 0x0) setresuid(0x0, 0xee00, 0x0) open(&(0x7f0000000100)='./file1\x00', 0x14b042, 0x8c) 7m0.403066809s ago: executing program 5 (id=1945): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1212000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) r3 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x38, 0x0, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f00000002c0)=[{0x20, 0x5, 0x0, 0xfffff024}, {0x6, 0x4}]}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r4, 0x2000012, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) ioctl$TUNGETVNETLE(r0, 0x40107447, &(0x7f0000000180)) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) socket$kcm(0x10, 0x2, 0x10) write$cgroup_type(r5, &(0x7f0000000280), 0x9) 6m58.899392472s ago: executing program 5 (id=1949): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03000000000000000000020000000900020073797a310000000008000340000000010900010073"], 0x34}}, 0x0) 6m57.882878591s ago: executing program 39 (id=1949): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03000000000000000000020000000900020073797a310000000008000340000000010900010073"], 0x34}}, 0x0) 5m10.507091919s ago: executing program 3 (id=2217): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffff000000000000ffffffff18150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000807b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e00000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000000)={0x20, 0x1, 0x100, "ff00000000000000050023000000010000000000008600", 0x2036315a}) ioctl$XFS_IOC_DIOINFO(r1, 0x800c581e, &(0x7f00000000c0)) sendmsg$inet(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0x2}], 0x1, 0x0, 0x0, 0x800300}, 0x20004801) recvmsg(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0, 0x0, 0x60}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x0) recvmsg(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x101) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001400)={0x18, 0x41, 0x107, 0xfffffffe, 0xfffffffb, {0x1, 0x7c}, [@nested={0x4, 0x2e}]}, 0x18}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x18, 0x30, 0x871a15abc695fb3f, 0x70bd27, 0x1, {}, [{0x4}]}, 0x18}}, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0xb940, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_usb_connect$lan78xx(0x0, 0x3f, &(0x7f0000000400)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000180)) 5m3.127460311s ago: executing program 3 (id=2228): bpf$MAP_CREATE(0x1300, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000009a00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x15, 0x0, 0x0) 5m2.406428015s ago: executing program 3 (id=2233): syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="02c9"], 0xf) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_window_scaling\x00', 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r0, 0x11a, 0x2, &(0x7f0000000040)=@gcm_256={{0x303}, "dd2191f6d4753883", "7cd1b1a4c99c0b581800cc05a4ef69ca1be8bc076c1e21cc4b9cdb6408b0eedd", "342e90dc", "908ba6ae8cddecf3"}, 0x38) 5m1.906192992s ago: executing program 3 (id=2237): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbaf, &(0x7f0000002f00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x18b341, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x1a0001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x3}}) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0xffffffffffffffff, 0x2, 0x7, 0x1, 0x8}}) write$P9_RREADLINK(r2, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000140)=ANY=[@ANYBLOB="0400000000000000ff"]) r3 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0xfffffe00, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/class/thermal/cooling_device0/cur_state\x00', 0x1, 0x0) write(r4, &(0x7f0000000080)='-04', 0x3) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_access\x00', &(0x7f0000001440)=ANY=[@ANYBLOB="0200000001000000000000000400050000000000100000000000000020"], 0x24, 0x3) setresgid(0xee00, 0xee01, 0x0) setgroups(0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xffffffb0) setresuid(0x0, 0xee00, 0x0) open(&(0x7f0000000100)='./file1\x00', 0x14b042, 0x8c) keyctl$reject(0x13, r3, 0xffffffffffffff7d, 0x8aa, r3) 4m58.697453469s ago: executing program 3 (id=2248): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100003020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe4a, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 4m57.363324844s ago: executing program 3 (id=2251): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x400c054}, 0x4000) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x24040880}, 0x800) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x2000000) 4m54.139771596s ago: executing program 40 (id=2251): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x400c054}, 0x4000) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x24040880}, 0x800) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x2000000) 4m29.842767074s ago: executing program 9 (id=2295): bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000180)={{0xffffffffffffffff, 0x2, 0x7, 0x1, 0x8}}) write$P9_RREADLINK(r0, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000140)=ANY=[@ANYBLOB="0400000000000000ff"]) keyctl$reject(0x13, 0x0, 0xffffffffffffff7d, 0x8aa, 0x0) 4m27.049857477s ago: executing program 9 (id=2298): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0xe}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_mount_image$xfs(&(0x7f0000000180), &(0x7f0000015ac0)='./file0\x00', 0x2, &(0x7f0000000200)={[{@nolargeio}, {@ikeep}]}, 0x1, 0x15b6c, &(0x7f000002b640)="$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") timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) timer_settime(r0, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000000100)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) syz_emit_ethernet(0x26, &(0x7f00000007c0)={@link_local, @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x3, 0x32, 0x18, 0x4068, 0x0, 0xd2, 0x89, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, "8f84e8eb"}}}}, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() io_uring_enter(r1, 0x1017, 0x550e, 0x0, &(0x7f0000000000)={[0xcb]}, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) syz_open_procfs$userns(r2, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_NUM(r5, 0x4008af10, &(0x7f0000000100)={0x1, 0x4}) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) fdatasync(r1) 4m16.657115568s ago: executing program 9 (id=2318): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003173610ef171e7206de010203010902f3c8010000000009040000000206"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000000)={0x2c, &(0x7f0000000080)={0x20, 0x30, 0x2, "60f0"}, 0x0, 0x0, 0x0, 0x0}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x1, 0x8, 0xb}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001000000", @ANYRES32, @ANYBLOB="0000000000000000000803000000200000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x3}, 0x4) getsockopt$packet_int(r2, 0x107, 0x15, 0x0, &(0x7f0000001600)) socketpair(0x1, 0x5, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xce, 0x7, &(0x7f0000006680)) set_robust_list(&(0x7f00000002c0)={0x0, 0x80000000}, 0x18) openat$tun(0xffffffffffffff9c, 0x0, 0x40000, 0x0) bpf$MAP_LOOKUP_ELEM(0x5, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000256738328c28b1e1681628bcd0914300000000180100002020641c00000000002008007b1af8ff00000000bfa100000000000007010000f8ffffffb70200000800004eb70300000000000085000000060000001811000077d779134382c10a648975aba4f3240e5da4b0b7db73c3c8d18545dc739ea227f718ee776117939c199e9a7e801af19e55d210c5f1c35ae01a9e9baed8293bd545ee6b78faccbdffefd0e9c0ab03c7ab247cd3215aafb3e34df69e9dae4a57ff40f994", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x5, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x2}, {}]}]}, {0x0, [0x0, 0x2e, 0x7f]}}, &(0x7f0000000340)=""/149, 0x39, 0x95, 0x1}, 0x28) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000580)={r4}, 0xc) setsockopt$netlink_NETLINK_CAP_ACK(r3, 0x10e, 0xa, &(0x7f0000000300), 0x4) prctl$PR_SET_TSC(0x1a, 0x1) syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000f00)='./file0\x00', 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB='V'], 0x1, 0xeb0, &(0x7f0000000f80)="$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") 4m7.987834174s ago: executing program 9 (id=2341): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbaf, &(0x7f0000002f00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x18b341, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x1a0001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x3}}) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0xffffffffffffffff, 0x2, 0x7, 0x1, 0x8}}) write$P9_RREADLINK(r2, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000140)=ANY=[@ANYBLOB="0400000000000000ff"]) r3 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0xfffffe00, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/class/thermal/cooling_device0/cur_state\x00', 0x1, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_access\x00', &(0x7f0000001440)=ANY=[@ANYBLOB="0200000001000000000000000400050000000000100000000000000020"], 0x24, 0x3) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xffffffb0) setresuid(0x0, 0xee00, 0x0) keyctl$update(0x2, r3, 0x0, 0x0) keyctl$reject(0x13, r3, 0xffffffffffffff7d, 0x8aa, r3) 4m3.518586481s ago: executing program 9 (id=2352): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/softnet_stat\x00') sendfile(r0, r0, &(0x7f0000000040)=0x87, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x2, &(0x7f0000000000)=0x80000000000003) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0xc0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000042, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) unlink(&(0x7f0000000040)='./file0/file1\x00') r5 = socket$unix(0x1, 0x2, 0x0) bind$unix(r5, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000000)=0x7f, 0x4) 4m2.444813489s ago: executing program 9 (id=2357): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="020d00001c000000000000000000050005000600000000000a00000000000000fc010000000000000000000000000000000000000000000004000400000000000000000000000000000000000000000000000000000000000200120002000200bb6b6e000000000006003200000000000000000000000000fe880000000000000000000000000001fc01000000000000000000000000000005000500000000000a00000000000000000000000000000000000000000000000000000000000000040003"], 0xe0}}, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) writev(r0, &(0x7f0000000900)=[{0x0}, {&(0x7f0000000740)='\fu', 0x2}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) 4m0.460373861s ago: executing program 41 (id=2357): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="020d00001c000000000000000000050005000600000000000a00000000000000fc010000000000000000000000000000000000000000000004000400000000000000000000000000000000000000000000000000000000000200120002000200bb6b6e000000000006003200000000000000000000000000fe880000000000000000000000000001fc01000000000000000000000000000005000500000000000a00000000000000000000000000000000000000000000000000000000000000040003"], 0xe0}}, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) writev(r0, &(0x7f0000000900)=[{0x0}, {&(0x7f0000000740)='\fu', 0x2}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) 10.021416846s ago: executing program 0 (id=3178): socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x400000000010, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x28}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$P9_RSTATFS(0xffffffffffffffff, 0x0, 0x72) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, 0x0, &(0x7f0000000300)) syz_emit_vhci(0x0, 0xb) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r6, @ANYBLOB="08002600940900000800b7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 9.061176333s ago: executing program 1 (id=3181): setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_access\x00', &(0x7f0000001440)=ANY=[@ANYBLOB="02000000010000000000000004000500000000001000"], 0x24, 0x3) setresgid(0xee00, 0xee01, 0x0) setgroups(0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xffffffb0) setresuid(0x0, 0xee00, 0x0) open(&(0x7f0000000100)='./file1\x00', 0x14b042, 0x8c) 7.663503419s ago: executing program 0 (id=3183): setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x802, @empty, 0xfffffffe}}, 0x80000, 0x0, 0x0, 0x0, 0xb3550aa4ba878396, 0x0, 0x4}, 0x9c) r0 = add_key$user(&(0x7f0000000380), &(0x7f0000000080), &(0x7f0000000000)="15", 0x1, 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r1}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'streebog512-generic\x00'}}) 7.662289207s ago: executing program 8 (id=3184): r0 = socket$inet6(0xa, 0x80001, 0x0) getsockopt$bt_hci(r0, 0x0, 0x60, &(0x7f00001e3000)=""/30, &(0x7f0000d23000)=0x44) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r1, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f0000000200)='./file0\x00', 0x4) (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200810, &(0x7f0000000580)={[{@block_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@nombcache}, {@sysvgroups}, {@noinit_itable}, {@dioread_lock}, {@nogrpid}, {@bh}, {@grpjquota}]}, 0xfc, 0x57b, &(0x7f0000000800)="$eJzs3d1rW+UfAPDvSZu9/37rYAz1Qgq7cDKXrq0vE4TNS9HhQO9naLMymi6jScdaB9su3I03MgQRB+If4L2Xw3/Av2KggyGj6IUXVk56smV56Uua2cx8PnC25znnpN/z5DnPk+/JSUgAQ2s8/ScX8XJEfJVEHG7aNhrZxvH1/VYf35hJlyTW1j75PYkkW9fYP8n+P5hVXoqIn7+IOJlrj1tdXpkvlsulxaw+UVu4OlFdXjl1eaE4V5orXZmanj7z1vTUu++83WPL2oO+fuHPbz++/8GZL4+vfvPjwyN3kzgXh7JtTe1IegyYutVcGY/x7I/l41zLjpM7CDKIdvKksXtGsnGej3QOOBwj2agH/vtuRsQaMJxGTAAwrBp5QOPavvl6fiN/Nz32Rfbo/fULoPb2j66/NxL76tdGB1aTZ66M0uvdsT7ET2P89Nu9u+kSLe+ntLrZh3gADbduR8Tp0dH2+S/J5r/ene70JmyL1hhbff0Bdu5+mv+80Sn/yT3Jf6JD/nOww9jtxebjP/ewD2G6SvO/9zrmv0+mrrGRrPa/es6XTy5dLpdOR8T/I+JE5Pem9Y3u55xZfdA1V27O/9Iljd/IBbPjeDi699nHzBZrxZ20udmj2xGvPM1/k2ib//fVc93W/k+fjwtbjHGsdO/Vbts2b3+z/mfAaz9EvNax/5/e0Uo2vj85UT8fJhpnRbs/7hz7pVv87bW//9L+P7Bx+8eS5vu11e3H+H7fX6Vu23o9//ckn9bLe7J114u12uJkxJ7ko/b1U08f26g39k/bf+L4xvNfp/N/f0R8tsX23zl6p+uug9D/s9vq/2cK+bY1HQoPPvz8u27xt9b/b9ZLJ7I1W5n/tnJcvZ3NAAAAAAAAMLhyEXEoklzhSTmXKxTWP99xNA7kypVq7eSlytKV2ah/V3Ys8rnGne7DTZ+HmMw+D9uoT7XUpyPiSER8PbK/Xi/MVMqzu914AAAAAAAAAAAAAAAAAAAAGBAHu3z/P/XryG4fHfDc+clvGF6bjv9+/NITMJC8/sPwMv5heBn/MLyMfxhexj8ML+MfhpfxD8PL+AcAAAAAAAAAAAAAAAAAAAAAAAAAAIC+unD+fLqsrT6+MZPWZ68tL81Xrp2aLVXnCwtLM4WZyuLVwlylMlcuFWYqC5v9vXKlcnVyKpauT9RK1dpEdXnl4kJl6Urt4uWF4lzpYin/r7QKAAAAAAAAAAAAAAAAAAAAXizV5ZX5YrlcWlToWjgbA3EYPReSzXr5bHYy9BRidPcbqPAcCrs8MQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAk38CAAD//2iMNWI=") (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./bus\x00', 0x0, &(0x7f00000003c0)={[{@abort}, {@noauto_da_alloc}, {@dioread_nolock}, {@test_dummy_encryption}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@nojournal_checksum}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0xfd, 0xba6, &(0x7f00000017c0)="$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") (async) pwritev2(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r3, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) ioctl$EXT4_IOC_MOVE_EXT(r2, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0x7fff, 0x3, 0xc, 0x6}) (async) renameat2(r1, &(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) (async) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000040)=0x8, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff000f000071106600000000009500000000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) 7.427877845s ago: executing program 1 (id=3185): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0x1}, {0x6, 0x0, 0x1}]}, 0x10) sendmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="784116f2", 0x4}], 0x1}, 0xa4}], 0x1, 0x0) (fail_nth: 1) 7.070397742s ago: executing program 1 (id=3186): r0 = syz_usb_connect(0x2, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba8010203010902270201020010000904"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x5, 0x2d, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x63, 0x86, 0x35, 0x10, 0xcf3, 0x1010, 0x3687, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7f, 0x4, 0x50, 0x0, "", [{{0x9, 0x4, 0x7c, 0xb, 0x0, 0xa4, 0xca, 0xd4}}]}}]}}, &(0x7f0000000180)={0x0, 0x0, 0x8, &(0x7f00000001c0)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0xb}]}}) syz_usb_connect$midi(0x0, 0xf0, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xde, 0x1, 0x1, 0x7, 0x20, 0x8, "", {{{0x9, 0x4, 0x0, 0x0, 0x7, 0x1, 0x3, 0x20, 0x5, [@midi_in_jack={0x6, 0x24, 0x2, 0x3, 0xfc, 0x5}, @ms_header={0x7, 0x24, 0x1, 0x5, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x0, 0x5}, @midi_in_jack={0x6, 0x24, 0x2, 0x3, 0xad, 0x28}, @midi_in_jack={0x6, 0x24, 0x2, 0x0, 0x1, 0x1}, @midi_in_jack={0x6, 0x24, 0x2, 0x3, 0x80, 0x4}], [{{0x9, 0x5, 0xe, 0x0, 0x200, 0x1, 0x20, 0x4, {0x8, 0x25, 0x1, 0x4, "51a0313d"}}}, {{0x9, 0x5, 0x89, 0xc, 0x10, 0x2, 0x3, 0x1, {0xf, 0x25, 0x1, 0xb, "70662de980a1af18898ded"}}}, {{0x9, 0x5, 0x5, 0x1, 0x8, 0xb1, 0x8, 0x0, {0x13, 0x25, 0x1, 0xf, "ef2e529e48eaca643bbe5d34302a08"}}}, {{0x9, 0x5, 0x8, 0xc, 0x8, 0x4, 0x81, 0x4, {0x11, 0x25, 0x1, 0xd, "8d5baf620c57321d269799ba8f"}}}, {{0x9, 0x5, 0x2, 0xc, 0x3ff, 0x0, 0x2a, 0x8, {0x14, 0x25, 0x1, 0x10, "658eed783f3f541a12bc3c0e297301a9"}}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0x1, 0x9, 0x6, {0xd, 0x25, 0x1, 0x9, "f9ba7ea5e8263f8964"}}}, {{0x9, 0x5, 0xe, 0x4, 0x8, 0xa, 0x8, 0x2, {0xc, 0x25, 0x1, 0x8, "280e0e59e686a056"}}}]}}}}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x200, 0x1, 0xee, 0x79, 0x8}, 0x6a, &(0x7f0000000240)={0x5, 0xf, 0x6a, 0x4, [@generic={0x21, 0x10, 0x3, "8eeb36f1dca739fe6368403c9bf109bc897415593dede579214b97a5b295"}, @generic={0x33, 0x10, 0xb, "09256c31b88afa95aef1be008e10a0e85de60a5c99e33b02918828befcab6ccd26f3edbae79d23b1b73e600f5058d441"}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0xd, 0x6, 0x324}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x8, 0x4, 0x7b03}]}, 0x3, [{0x41, &(0x7f00000002c0)=@string={0x41, 0x3, "97a27e9b6667f1ce4ce8e7c03c6dacc315dcf888208c041af75dc4c1dfdac3896e8114f5a7c6e0711e1a4610813e5527e0cbb35f67a705ea1cabc092b59cb7"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x40d}}, {0xad, &(0x7f0000000380)=@string={0xad, 0x3, "6f6a87910de4da11c1b120b8153c72c3bbc82096b0161ebb028b0c85a2d5c8285fb15e79e2114ac74b921a564e06151fa8802fc0b971ead33f990f758b0d7cc8605b9304105be7e369854c7836718cbcfd8ae34ef0ffd0aa8bf564ae78bcf8bac5c71e36f53f510f2f1d8cf26c37b5bae18a536d3cbca44029a56c648ae33d50faeb3250bccd9dd21c53c68f151b5081ce66b36ab29c861512c33ef9b1cc7fbcf4b4ace7a7d26fb274163a"}}]}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f00000018c0)={0x2c, &(0x7f00000016c0)={0x40, 0x7, 0x2, '3{'}, 0x0, 0x0, 0x0, 0x0}) 7.069711929s ago: executing program 4 (id=3187): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0x1}, {0x6, 0x0, 0x1}]}, 0x10) sendmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="784116f2", 0x4}], 0x1}, 0xa4}], 0x1, 0x20004004) setitimer(0x3f, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) syz_usb_connect(0x1, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x300, 0x1, 0x85, 0x2c, 0x8, 0x525, 0xa4a3, 0xfd97, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x7, 0x0, 0x6, "", [{{0x9, 0x4, 0x8, 0xa, 0x0, 0xa6, 0x41, 0xa8, 0xed}}]}}]}}, &(0x7f0000000980)={0x0, 0x0, 0x5, 0x0, 0x1, [{0x0, 0x0}]}) ioctl$FS_IOC_GETFSLABEL(r2, 0x800452d3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f00000003c0)={0x1d, r4, 0x0, {0x2, 0xf0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r3, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}], 0x1}}], 0x1, 0x41) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f00000000c0)={0x1d, r6}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000700)='./sys\x00', &(0x7f0000000800)='sysfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/usb/drivers/r8152/new_id\x00', 0x1, 0x0) write(r7, &(0x7f0000000300)="f5428fad", 0x4) sendmsg$can_j1939(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x1}}, 0x18, &(0x7f0000000180)={&(0x7f0000000280)="4dfb0cf0d556f1327d", 0x9}}, 0x200440ee) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x2d41, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r8, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f0000000240)={0x50, 0x0, r9, {0x7, 0x1f, 0x1, 0x41840, 0x0, 0xfffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r8, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101081, 0x11) ioctl$HIDIOCGUSAGES(r10, 0xd01c4813, &(0x7f00000005c0)={{0x1, 0x2, 0x0, 0x100, 0xf518, 0x6}, 0x322, [0x8, 0x6, 0x0, 0x7, 0x1, 0x1, 0x810, 0x5, 0x9, 0x9, 0xffff, 0x3, 0x80, 0x6e2d, 0x0, 0x7, 0x7, 0x2, 0x7, 0x9, 0x5, 0x2, 0x8, 0x80000000, 0x70, 0x7, 0xaac69a7f, 0x5, 0xf, 0x8, 0x0, 0xe5, 0x7a0, 0x40, 0xff, 0x4, 0xb9ba, 0x3, 0x41d, 0x7fff, 0x8, 0x5, 0x3, 0x4, 0x5, 0x100, 0x10, 0x7fff, 0x4, 0x8, 0x7ff, 0xfffffffb, 0x8, 0x5dd, 0xff, 0x0, 0x5, 0x3, 0x1e, 0x2, 0x3, 0x1, 0x5, 0x8, 0x19e, 0x3, 0x94, 0x0, 0x7, 0x5, 0x8, 0xffff5d5a, 0x4, 0x3, 0x9, 0xf0b1, 0x5, 0x7, 0xa835, 0x3, 0x4, 0x7, 0x4ec, 0x6, 0x821, 0x5, 0x6, 0x2, 0xaf06, 0x7, 0x47, 0x3, 0x1, 0x0, 0x4, 0xb, 0xdfd, 0x6, 0x5, 0x4, 0x9, 0x1, 0x1c8000, 0x8, 0x4000, 0x7, 0x4, 0x1, 0x6, 0xb, 0xc, 0xa84, 0x9, 0x6, 0xa5d, 0x7f, 0x9, 0xff5, 0x2, 0x8, 0x58f25d90, 0x0, 0x5, 0x60000, 0x9, 0x7, 0x0, 0x4, 0x7, 0x3, 0x9, 0x20000000, 0x358, 0x9, 0x9b8, 0xa, 0x2cb, 0x8, 0x7ff, 0x2, 0xe7b, 0x6, 0x3, 0x7ffffffc, 0x2, 0x6, 0x7, 0xa, 0x7, 0x7, 0x3, 0x7, 0xffc00000, 0x1, 0xc9e7036, 0x0, 0x9, 0x5, 0x4, 0x6, 0x6, 0x40, 0x5, 0x7, 0x4, 0x10, 0xa09f, 0x81, 0x9, 0xff, 0x9, 0x6, 0x6, 0xa4d, 0x8d0, 0x7, 0x0, 0x0, 0x785, 0x2, 0xbec, 0x0, 0x1274d9f6, 0x1, 0x3054, 0x0, 0x2ad, 0x200, 0x3, 0xffffffc0, 0xb, 0x7, 0x532, 0x5, 0x1, 0xffffffff, 0xd, 0xfffffff6, 0x5, 0x9, 0x401, 0x6, 0x7, 0x1, 0x40, 0x2, 0x7, 0x1, 0xa280000, 0x800, 0x5, 0xd7a, 0x6, 0x5, 0x3, 0x5, 0xd984, 0x2, 0x1d07, 0xfffffff9, 0x1, 0x80000000, 0x6, 0x8, 0x100, 0x80, 0xe, 0x7ff, 0x0, 0x1, 0x3, 0x8001, 0x6116, 0x7, 0x1, 0x1b0, 0x100, 0x4, 0x100, 0x2d, 0x6, 0x6, 0x401, 0x3, 0x8001, 0x8001, 0x0, 0x6, 0x5, 0x5, 0x1, 0x7, 0x2, 0x6, 0x3, 0x0, 0xfffffff9, 0x5, 0x3, 0x4, 0x3, 0x3, 0x3, 0x400, 0x10001, 0x40, 0xeac, 0xfffffffe, 0x81, 0x7, 0x10, 0x10001, 0x6e99, 0x6, 0xfffffff0, 0x1, 0x4, 0x9, 0x7f, 0x7, 0x2, 0x3, 0x8, 0xc, 0xff, 0x80, 0x0, 0x80, 0x3, 0xdb6, 0xd, 0x7, 0x4b23, 0x2, 0x4f66, 0x2, 0x1, 0x6ae, 0x3, 0x80000001, 0x40, 0xfff, 0x5, 0xffffff80, 0x0, 0x1ff7, 0x10001, 0x1, 0x10000, 0x7, 0x3, 0x2ec, 0xa, 0x9, 0x10001, 0x0, 0x3, 0x9, 0xec, 0x101, 0x7, 0x7, 0x8, 0x8, 0x5, 0xfc, 0x9, 0x5, 0x1, 0x6, 0x8001, 0x0, 0x8, 0x0, 0x6, 0x400, 0x4, 0x5, 0xb51, 0x8, 0x6, 0x7, 0xb98, 0x8001, 0xffffffff, 0x8, 0x80000000, 0xfffffff8, 0x5, 0x10001, 0x3, 0x48, 0x9, 0x4, 0x0, 0x0, 0x8001, 0x0, 0x7, 0x3ff, 0x2, 0x6, 0x3, 0x0, 0x0, 0xffffff81, 0x90, 0x9, 0xae, 0x1, 0x5, 0x4, 0x8, 0x8, 0x10001, 0x5, 0x0, 0x7, 0x8, 0x2, 0x0, 0x7fff, 0x8, 0x4, 0x0, 0x9, 0x6, 0x1, 0x1c000, 0x8, 0x4d4, 0x7, 0x59e, 0xae0, 0x2, 0x5, 0x1, 0x200, 0x8, 0x7, 0x8, 0xcc, 0x0, 0x7a, 0x6, 0x3, 0x34e, 0x7, 0x0, 0xffa, 0x5, 0xb, 0x60, 0x2, 0x8, 0xc19, 0x7, 0x6, 0x7, 0x4, 0x40, 0xfffffffb, 0x6, 0xef1, 0x8b38, 0x8, 0xfee8, 0xfffffff8, 0x2, 0x0, 0x1, 0x9, 0x1, 0x7, 0x3, 0xe, 0x6, 0x384f347, 0x3, 0x6, 0xb, 0x6, 0x3, 0x0, 0x5, 0xd, 0x81, 0x8001000, 0x3, 0x6, 0x0, 0x6, 0x9, 0x1, 0xffff, 0xfbb, 0x4, 0x3, 0x3, 0x6, 0x0, 0xcf, 0x3ff, 0x3, 0x6, 0x3f, 0x1, 0x6, 0x8c0, 0x0, 0x7, 0x10, 0xffffffff, 0x9, 0x25f4ce02, 0x9, 0x3, 0x2c, 0xfff, 0x6, 0x84f7, 0xef1, 0x0, 0x4, 0x9, 0x8001, 0xeea, 0x20af91b8, 0x9, 0x9, 0x3, 0x7, 0x7, 0x6, 0x10, 0x200, 0xc2, 0x1, 0x0, 0x1, 0xf70, 0xff66, 0x1, 0x0, 0x7fff, 0x5, 0xf20, 0x0, 0x7fff, 0x2, 0x6, 0x4, 0x66a0, 0x0, 0x7, 0x4, 0x1ff, 0x9, 0x8, 0xff, 0x9, 0x9, 0x3, 0xe, 0x1, 0x6, 0x7, 0x5, 0x3, 0x3bb, 0xb8cb, 0x10001, 0x132, 0x8, 0x0, 0x9, 0x7, 0x2, 0x4, 0x8001, 0x0, 0x3, 0x2, 0x8, 0x18e2, 0x5, 0x800, 0x5, 0xc, 0x52a1, 0x9, 0x2, 0x3, 0x6, 0xd, 0x0, 0x2, 0x140, 0x3, 0x0, 0x200, 0x436, 0x3, 0x4, 0x418, 0x5, 0x1, 0x401, 0x3, 0x53d, 0x401, 0x10, 0x35, 0x7f, 0x7ff, 0xfffffff8, 0x5a, 0x2, 0xffff7fff, 0x0, 0x7ff, 0xf83c, 0x9, 0x400, 0x3, 0xe, 0x3, 0x771, 0x8001, 0x4f, 0x200, 0x7b61, 0x53a, 0x5, 0x101, 0x2, 0x6e1, 0x8, 0x6, 0xffff, 0x7, 0x5, 0x1, 0x4efa, 0x511, 0x8, 0xfffff3d1, 0xffff0001, 0x7ff, 0x3, 0x1, 0x29cd, 0x8000, 0xfff, 0x2, 0x4, 0x2, 0xfffffffb, 0x8, 0x7f, 0x1000, 0x80000000, 0xa789, 0x9, 0x6, 0xfff, 0x0, 0xa3, 0x1b26, 0xe, 0x6, 0xc4e, 0xe, 0x0, 0x5, 0x120, 0x2, 0xfffffff4, 0xa4, 0x1, 0x5, 0x3ff, 0x80000001, 0x3ff, 0x7, 0x2, 0x4, 0xfffffe00, 0x8, 0x0, 0x200, 0x3bb0fa23, 0xb, 0x5, 0x2, 0x6, 0xcf5, 0x8, 0x9, 0x81, 0x4, 0x2, 0x3, 0x4, 0x6, 0x80000001, 0x8, 0x1, 0x3, 0x2, 0x40, 0x10, 0x3, 0x0, 0x6, 0x800, 0x9, 0x401, 0x976a, 0x22c, 0x400, 0x1ff, 0xf219, 0x5, 0xffff, 0x800, 0x7, 0x5, 0xfffffffc, 0x0, 0x800, 0xf61, 0xba, 0x7a7c, 0x7, 0x5, 0x86d, 0x7f, 0x5, 0xfffffffa, 0x4, 0xf3d5, 0x7, 0x2, 0x1, 0xffffea8a, 0x9, 0x2, 0x6, 0x1, 0xbc, 0x0, 0xe, 0x2, 0x5, 0x6, 0x31, 0x4, 0x8, 0x6, 0x0, 0x3bc000, 0x6, 0x325, 0x3ff, 0x8, 0xfff, 0x2, 0x1, 0xd4, 0x3, 0x8000, 0xffffffc0, 0x6, 0x7, 0xa330, 0x6, 0xe9c, 0x1, 0xb6b, 0x3ff, 0x6, 0x35e, 0x3, 0x4, 0x7, 0xb, 0xfffffffe, 0x6, 0x8, 0x5, 0x85, 0x0, 0x8, 0x400, 0x8, 0x9, 0x0, 0x7fffffff, 0x86, 0x1, 0x2feb, 0x0, 0x40, 0xb, 0xba34, 0xc, 0x3, 0xc, 0x8000, 0xc, 0x8001, 0x5, 0x3ff, 0xfffff304, 0x401, 0x4, 0x1, 0x7, 0x0, 0x4, 0xf, 0x0, 0x2, 0x4, 0xb9, 0x6, 0x4, 0x5, 0x40, 0x80000001, 0x3ff, 0x1, 0x7ff, 0xe2, 0xe8d0, 0x8, 0x0, 0x9, 0x7, 0x8ab, 0x8, 0xff, 0x1003, 0x3, 0x2, 0x9e3a, 0x35, 0x8, 0x4800000, 0x5, 0x1, 0x7fffffff, 0x5, 0x4, 0x1b6e847d, 0x5, 0x2, 0x8, 0x800, 0x8, 0x100, 0x2d337d63, 0xfffffff8, 0x2, 0x1, 0xf5be, 0x0, 0x0, 0x44, 0x5f7, 0x65, 0x2, 0x7, 0x7f, 0xf, 0x2, 0x96c3, 0x8000, 0x65f6, 0x2, 0x3, 0x9, 0x4, 0x0, 0x4, 0xd, 0x5, 0xab85, 0x3, 0x7, 0x5, 0x7, 0x5, 0xffffffff, 0x3, 0x9, 0x9, 0x8, 0xc56, 0x0, 0x7, 0xf850, 0x7fffffff, 0x2, 0x6, 0xc, 0xa6, 0x8, 0x7, 0x0, 0x76, 0xffffffff, 0x10, 0x5, 0x0, 0x493, 0x7, 0x7, 0x200, 0x4, 0x80000001, 0xf, 0xb, 0x7ff, 0x5, 0x1, 0xd, 0x0, 0x5b363544, 0x7ff, 0xffff7fff, 0x6, 0x2, 0x2, 0xfffffff2, 0xc, 0x9c02, 0xffffffff, 0x8, 0x101, 0x1, 0x0, 0x5, 0xfffffffb, 0x1, 0x1, 0x2, 0x8, 0x2, 0x1, 0x81, 0x3, 0x5, 0x1, 0x5, 0x1, 0x0, 0x2b, 0x5, 0x5, 0xab81, 0x7f, 0x8be4, 0x3, 0xe, 0xd, 0x83, 0xa, 0x6, 0x7295, 0x1ad, 0x1, 0x4, 0xffffffff, 0x7, 0x1, 0xffffffff, 0x1e49, 0x3, 0x0, 0x400, 0x6, 0x9, 0x400, 0x6, 0x9, 0x8, 0xa, 0x7fffffff, 0x4, 0x1, 0x0, 0x8, 0x20000, 0x9, 0x8, 0x7, 0x3, 0x1, 0x3, 0x2, 0x7ff, 0x5f5affef, 0x4da8, 0x6, 0x9, 0x6, 0xc, 0x9, 0x9, 0x4, 0x8, 0xb, 0x9, 0x10, 0x7, 0xfffffff3, 0xa3e5, 0xa, 0x9, 0x6, 0xfffffffa, 0x7, 0x3, 0x0, 0x7, 0x3, 0x5, 0x1, 0x2, 0x3, 0x1, 0x3e4, 0x2, 0x8, 0x8, 0x8, 0x9, 0x7f, 0x635, 0x80, 0x0, 0x1, 0x8, 0x7, 0x0, 0x3ff, 0x2, 0x7, 0x27, 0x2, 0x77, 0x9, 0x2add, 0x7, 0x6, 0x3, 0x80000001, 0x1, 0x9b5, 0x4, 0x9, 0x344]}) syz_emit_ethernet(0x5e, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaa0d00000000000088a8340081001d0008050004f33fb7a0f0060587bfffd2d254f46cb0b24e8f86a89c73653386ae358eaa87310e6d48f783c75c481eee0392c9a7f42fce8b15a0a5a5c35aa04585463926c11c000000000000"], 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@o_path={&(0x7f0000000080)='./file0\x00', 0x0, 0x18, r0}, 0x18) 6.820865237s ago: executing program 0 (id=3188): r0 = socket$netlink(0x10, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000340)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000140)="541498aede863d83334d5d20c0b9710d101d73db89ac63bd012b70686e86f98ec11616ca2e44cbc2abf71ebabd99ccf69bfb760ca98a663a4da3617620c9c02d18a7d5bd25f4f541f20e8bdc0190e42f4a7d859be223a4bcdf2c3e117941a7a427e2cfce34d0ccce5c87a395d230c16a32a4bce5a35a782ee73896693bf0a2957e61a9f3bdd98ab58d9de9ac94513a8804363167345afcfb683e13ca3aeb7fde67cf", 0xa2, r0}, 0x68) r1 = socket(0x10, 0x803, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff}) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000080)=0x7) fstat(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000440)={0x1f2b, 0x9, {r3}, {r4}, 0x9, 0x1}) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r5, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, r5, 0x40083, 0x4}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @sit={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x80}, @IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x7ff}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}, @IFLA_IPTUN_LINK={0x8, 0x1, r5}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x24048014}, 0x4040) 6.654896262s ago: executing program 8 (id=3189): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) setpriority(0x1, 0xffffffffffffffff, 0x3) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) creat(&(0x7f0000000080)='./bus\x00', 0x0) socket$inet6(0xa, 0x3, 0x7) (async) r1 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000000)=0x2, 0x4) bind$inet6(r1, &(0x7f0000000580)={0xa, 0x4e20, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}, 0x1c) (async) bind$inet6(r1, &(0x7f0000000580)={0xa, 0x4e20, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}, 0x1c) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) (async) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) syz_open_dev$vim2m(&(0x7f0000000100), 0x80000000000000, 0x2) (async) r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x80000000000000, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x4}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x4}) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) fsopen(&(0x7f0000002200)='ramfs\x00', 0x0) (async) r3 = fsopen(&(0x7f0000002200)='ramfs\x00', 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) ioctl$vim2m_VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_mount_image$ntfs3(&(0x7f0000000040), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x400, &(0x7f00000001c0)=ANY=[@ANYBLOB='sparse,acl,nohidden,iocharset=cp1250r1, &(0x7f0000000000)='!\x00', 0x20000, &(0x7f0000000080)={@align=0x8000000000000001, {0x3aa, 0xb3, 0xa, 0xab81}}, 0x7, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0x40}, 0x1, &(0x7f0000000200)=[{0x2, 0x9, &(0x7f0000000140)='\\\x00', &(0x7f00000001c0)="e1ffead49793d5cc30f7930a7de00a08781eb7b36f87a9e97571f554e7", 0x1d}]}) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[], 0x154}}, 0x0) 5.950010387s ago: executing program 8 (id=3194): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x6, 0x100010, 0xffffffffffffffff, 0xd910d000) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x9) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x4) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000003c0)="00214500002800000000400600000a0000010a000002005000500000000100000001501003e800000001", 0x2a}], 0x1, 0x0, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000003c0)="00214500002800000000400600000a0000010a000002005000500000000100000001501003e800000000", 0x2a}], 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x16) 5.827380568s ago: executing program 2 (id=3195): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000240)={'rti802\x00', [0x100, 0x4, 0x13600, 0x4, 0x0, 0x10005, 0x79, 0x0, 0x80008, 0x8, 0x2, 0x64, 0x5, 0x1, 0x6, 0xfd, 0x6, 0x9, 0x3, 0x7fffffff, 0x6, 0xca9f, 0x9, 0x20001e58, 0x3, 0xf39e, 0x7ff, 0x1539b804, 0x7, 0x801, 0x2]}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "0f6b01fa00a20c00", "9e8ecc7cb535247672a2eff75b30ff2bb17b550800", "0002d900", "a1014200000102a0"}, 0x38) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="500000001214d9ec29bd7000fcd9df25080003000100000008000180"], 0x50}, 0x1, 0x0, 0x0, 0x2000c091}, 0x400c080) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="001c86dd0700100000002800000060ec97000fc83a00fe8000000000000000000000000000aaff0200"/51], 0xffe) 5.698687268s ago: executing program 4 (id=3196): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x2, 0x4, 0xf, 0xbf1f}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000020000000000000000000000085000000d0", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.498424954s ago: executing program 1 (id=3197): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x200000005c832, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x1) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000040)={@broadcast, @multicast2}, 0xc) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f"], 0x57) setsockopt$inet_mreqsrc(r1, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) 5.498121384s ago: executing program 0 (id=3198): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000005000000080000000f"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r3}, 0xc) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'erspan0\x00', &(0x7f0000000200)={'gre0\x00', 0x0, 0x8000, 0x80, 0xdce0, 0x8, {{0x6, 0x4, 0x2, 0xd, 0x18, 0x64, 0x0, 0x6, 0x4, 0x0, @broadcast, @local, {[@noop]}}}}}) r5 = syz_open_procfs(0x0, &(0x7f00000021c0)='maps\x00') ioctl$PPPIOCSFLAGS1(r5, 0xc0686611, &(0x7f00000005c0)=0xd000002) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r5) sendmsg$NL80211_CMD_SET_MAC_ACL(r5, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x6c, r6, 0x4, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x58, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x4) r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x0, 0x0) fchown(r7, 0x0, 0xee01) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xfffffee1) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200000, 0x6, 0xa, 0x2, 0x8a56}) mknodat$null(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x150d, 0x103) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180024f85700000400"/29], &(0x7f00000000c0)='syzkaller\x00', 0xf, 0xeb, &(0x7f0000000100)=""/235, 0x40f00, 0x14, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x8, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000002c0)=[r5], &(0x7f0000000300)=[{0x0, 0x1, 0x10, 0xb}, {0x3, 0x2, 0x10}, {0x0, 0x4, 0x1, 0xb}, {0x1, 0x20, 0x10, 0x2}, {0x3, 0x1, 0x5, 0xc}, {0x0, 0x4, 0xd, 0xb}], 0x10, 0x101}, 0x94) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000080)=ANY=[@ANYRES32=r1]) 4.158125652s ago: executing program 4 (id=3199): socket$alg(0x26, 0x5, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) epoll_wait(r0, 0x0, 0x0, 0x1) 4.093542954s ago: executing program 6 (id=3200): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xfff1, 0xd}}}, 0x24}}, 0x804) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x2, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0) 3.718438395s ago: executing program 8 (id=3201): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000440)={0x2b}, 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000000)={r3, 0x3, 0x6, @remote}, 0x10) mount_setattr(0xffffffffffffffff, 0x0, 0x1800, &(0x7f00000000c0)={0x82, 0x1000f0, 0x100000}, 0x20) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@newtfilter={0x24, 0x11, 0x1, 0x70bd22, 0x25dfdbff, {0x0, 0x0, 0x74, r3, {0x5, 0x10}, {0x1, 0xfff1}, {0x2, 0xe}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x3604c8a4}, 0x810) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000002c0)={@dev={0xfe, 0x80, '\x00', 0x11}, 0x4, r3}) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2f, &(0x7f0000000180)={0x2, {{0xa, 0x4e23, 0x9, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x9}}, {{0xa, 0x4e20, 0x10000005, @local, 0x40}}}, 0x108) getsockopt$inet6_buf(r4, 0x29, 0x30, &(0x7f0000000180)=""/214, &(0x7f0000000080)=0xd6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=ANY=[@ANYBLOB="58010000100013070000000000000000fc020000000000000000000000000001fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141417000000000000000000000000000004d533000000e000000100000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000220000000000000000000000000000000200000000000000000000005c001400636d616328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000003509fe8fd57fd44aa5074c50bc700e530c001c00", @ANYRES32=0x0, @ANYBLOB="06"], 0x158}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffffc, @loopback, 0x5}, 0x1c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000002b40)={0xffffffffffffffff, &(0x7f0000001a80), 0x0}, 0x20) 3.718241694s ago: executing program 2 (id=3202): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r1 = io_uring_setup(0x664b, &(0x7f0000000500)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r1, 0x19, &(0x7f0000000180)={0xfd, 0x1}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb86dd6000200000142f01fc000000000000000000000000000000fc00000000000000000000000000000000008906", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5040000090780003ddede10c47801b1aab1491115c29cdcefe7354a78ceb5500fceb51c8353125d99070cba03e6c26d17bda5fc257b0228741f803fe7b6055287cb056fefb"], 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port1\x00', 0x511e3659902362b, 0x100040, 0x1b35, 0x7, 0x4, 0x2, 0x0, 0x0, 0x7, 0x4}) 3.46543894s ago: executing program 1 (id=3203): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x2, 0x4, 0xf, 0xbf1f}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000020000000000000000000000085000000d000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x601c2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r5, &(0x7f00000001c0)={@val={0x0, 0x2306}, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x3ffd, 0x0, 0x3, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0xa014, 0x6558, 0x8}}}}}}, 0x2e) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r8 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r8, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f00000000c0), 0x4000, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYRESHEX=r8]) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r3}, 0xc) 3.395317016s ago: executing program 4 (id=3204): syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x210841, &(0x7f0000000040)=ANY=[], 0xff, 0x17f, &(0x7f0000000340)="$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") listxattr(&(0x7f0000005580)='./file0\x00', 0x0, 0x0) 2.789155335s ago: executing program 2 (id=3205): r0 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x5, 0x0, 0x9, 0xf1ba, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8001) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r2, 0x0) (fail_nth: 1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) 2.784351758s ago: executing program 6 (id=3206): r0 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x5, 0x0, 0x9, 0xf1ba, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_mount_image$erofs(&(0x7f00000003c0), &(0x7f0000000000)='./file0\x00', 0x801c, &(0x7f0000000400)=ANY=[], 0x0, 0x1b5, &(0x7f0000000640)="$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") sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8001) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) creat(&(0x7f0000000000)='./file0\x00', 0x42) 2.71895093s ago: executing program 0 (id=3207): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000691000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0}, 0x68) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x20040810) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000100)={0xf, 0x1f, 0x2, 0x2}, 0x51) prlimit64(0x0, 0x1, &(0x7f0000000140)={0x5, 0x4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x4f64, 0xc000, 0x4, 0x4040c1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000040000000100000009000100000000", @ANYRES32, @ANYBLOB='\x00'], 0x48) io_uring_enter(r0, 0x11f0, 0xe912, 0x16, 0x0, 0xfffffffffffffff9) 2.419825763s ago: executing program 4 (id=3208): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) read$FUSE(0xffffffffffffffff, &(0x7f0000001280)={0x2020, 0x0, 0x0, 0x0}, 0x2020) quotactl_fd$Q_SETINFO(r0, 0xffffffff80000601, r2, &(0x7f00000032c0)={0x2, 0x400, 0x0, 0x3}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001140)=ANY=[@ANYBLOB="840100001a0001002bbd700000010000ff0200000000000000000000000000004e20071c4e210006020000200200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d433000000fc00000000000000000000000000000001030000000000000f000000000000000600000000000001fffbffffffffffff1c25080000000000a637fffffffffffffcffffffffffffff0000000000000000fffffffeffffffff0000000000000000ff01000000000000fefffffffffffffffefffffffc030000800000008000000005350000020001062000000000000000480003006c7a7300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c0014"], 0x184}}, 0x844) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000540)=""/165, 0xa5}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f0000000080)=""/137, &(0x7f0000000140)=0x89) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="210f00000000000000002000000008000300", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) 2.234737043s ago: executing program 6 (id=3209): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000600)="580000001500192340834b80040d8c560a06ffffff7f00004e220000000058000b480400945f64009400050038925abf000000800000008004000000ff0109000062e5061d0000000800030006010001418e01400004fcff8e", 0x59}], 0x1) lseek(r0, 0x84e, 0x2) 2.233202993s ago: executing program 8 (id=3210): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x4000010, 0xffffffffffffffff, 0xec776000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000037000701fefffffffedbdf1c812f6235dcbbf92145e2a525037c000006000780fd2e0000"], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0), 0x20000, 0x0) read$FUSE(r4, &(0x7f0000001600)={0x2020}, 0x2020) connect$unix(r3, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) r5 = socket$unix(0x1, 0x1, 0x0) connect$unix(r5, &(0x7f0000000400)=@file={0x1, './file0\x00'}, 0x6e) 2.014636902s ago: executing program 2 (id=3211): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x2, 0x4, 0xf, 0xbf1f}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000020000000000000000000000085000000d000000018", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.825374844s ago: executing program 6 (id=3212): r0 = openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x200000, 0xa, 0xa}, 0x18) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000080)={0x28, r1, 0x303, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x20044080}, 0x0) (fail_nth: 1) 502.79089ms ago: executing program 2 (id=3213): socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x1, @empty, 0x3}], 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_enter(0xffffffffffffffff, 0x8af, 0xc0b8, 0x0, &(0x7f0000000100)={[0x6]}, 0x8) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0x7) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 338.536714ms ago: executing program 6 (id=3214): socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x1, @empty, 0x3}], 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_enter(0xffffffffffffffff, 0x8af, 0xc0b8, 0x0, &(0x7f0000000100)={[0x6]}, 0x8) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0x7) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) (fail_nth: 1) 335.099072ms ago: executing program 4 (id=3215): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000c300)=ANY=[], 0x64}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, &(0x7f0000000640)={0x14, &(0x7f0000000180)={0x40, 0x22, 0x2, {0x2, 0x6}}, &(0x7f0000000580)={0x0, 0x3, 0x95, @string={0x95, 0x3, "fd6e13cb8e650f2adecca71cdc33d871c9c00a2fea05dad0df3a621c9a2591dc118093d3e4860c765543538373a2df94ed5a6ca113a83d89bbc02c8bb4549ca218d71b545279e331a351ada616a1a2cff59727153da2691d9fe673bd495c6d32cee992cb34b5e633043c4206f0967eea9cd707a45ff569e90b48a1feffd00931d1c6a4073969dcc1698ce58e3a72a0876d9f88"}}}, &(0x7f0000000880)={0x44, &(0x7f0000000680)={0x20, 0xf}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0x10}, &(0x7f0000000740)={0x20, 0x81, 0x2, '9V'}, &(0x7f0000000780)={0x20, 0x82, 0x2, "70c7"}, &(0x7f0000000bc0)=ANY=[@ANYBLOB="208301000000328869f3ed8e643c990c163f04a744624f09da9531ee79adbfe5860430a7c6dc3d49bc6b44c3a99d216a410b4501f56a6b9b6fb27313bef9a1f9f77545e40d312c06617864484653a360a3027bff207d0c2d8fe3e62255355002750f375220bbbc9414736e0f69a08780d847d84c34f1bf493667a740ecaaa74603da3f997f65857ec819f7abb91629390b0b14f4139498b10fe69fa5adbecf71515e3aad885ff7332540076945e1af8ca4c4f8d2cf672873bd8b59e2387daf14ce4d479521ba72c531cc16f3de"], &(0x7f0000000800)={0x20, 0x84, 0x2, "75ae"}, &(0x7f0000000840)={0x20, 0x85, 0x3, "0cc3ae"}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, &(0x7f0000000140)={0x14, &(0x7f0000000040)={0x40, 0xa, 0x8d, {0x8d, 0xf, "b364cbb9a79469d546731c00e581ae95e068fb331ba49dd3ae22235436145fda2c2fdf3a16a04e2ec18104bb82f67e021ebb000d42fca2d19a438d74fdb5b0a32b9984149f847e4f3810697864f6e26244e3991ee68cde0a2dd15259e0a6268e4a5e3669ac90407c2cd305ab0ad6ddf81161e6eb45513b97ddbc36a7b541794f66ef2500b0be46f45e8c66"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x441}}}, &(0x7f0000000400)={0x34, &(0x7f0000000200)={0x40, 0x20, 0x97, "face27e5d3b7ad9784bb917a355f952d66ecd9253bba1026c5a6c3d88aafdf6e06d261c1a6af2de5f6a7c16234f536f4e96905b0c8cd963b3f70afecbe7b7cf286382e8d4a616c0682218f2c04919cafa2b45ab15aeb296e3d1cf7902ca7f0812a44e7ef797717847a000145a1a2e6ae104ed2a8c1d805194cd254e67ff87741493bde24fdbd0040a8d307299998c276a7b6583b939eb3"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0xb8}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000340)={0xc0, 0xa1, 0x4, 0xfffffffc}, &(0x7f0000000380)={0x40, 0xa0, 0x4, 0x5}, &(0x7f00000003c0)={0xc0, 0xa2, 0x2f, "b6129e7c1a3f792ccb57dcbca5adc4aaf55145678f21519f0d2bb8c36bd77fc41d2dc6b89e4235b990590f24e7f207"}}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000004c0)={0x84, &(0x7f00000001c0)=ANY=[@ANYBLOB="010f02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 326.23802ms ago: executing program 0 (id=3216): r0 = syz_usb_connect(0x2, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba8010203010902270201020010000904"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x5, 0x2d, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x63, 0x86, 0x35, 0x10, 0xcf3, 0x1010, 0x3687, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7f, 0x4, 0x50, 0x0, "", [{{0x9, 0x4, 0x7c, 0xb, 0x0, 0xa4, 0xca, 0xd4}}]}}]}}, &(0x7f0000000180)={0x0, 0x0, 0x8, &(0x7f00000001c0)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0xb}]}}) syz_usb_connect$midi(0x0, 0xd5, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc3, 0x1, 0x1, 0x7, 0x20, 0x8, "", {{{0x9, 0x4, 0x0, 0x0, 0x6, 0x1, 0x3, 0x20, 0x5, [@midi_in_jack={0x6, 0x24, 0x2, 0x3, 0xfc, 0x5}, @ms_header={0x7, 0x24, 0x1, 0x5, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x0, 0x5}, @midi_in_jack={0x6, 0x24, 0x2, 0x3, 0xad, 0x28}, @midi_in_jack={0x6, 0x24, 0x2, 0x0, 0x1, 0x1}, @midi_in_jack={0x6, 0x24, 0x2, 0x3, 0x80, 0x4}], [{{0x9, 0x5, 0xe, 0x0, 0x200, 0x1, 0x20, 0x4, {0x8, 0x25, 0x1, 0x4, "51a0313d"}}}, {{0x9, 0x5, 0x89, 0xc, 0x10, 0x2, 0x3, 0x1, {0xf, 0x25, 0x1, 0xb, "70662de980a1af18898ded"}}}, {{0x9, 0x5, 0x8, 0xc, 0x8, 0x4, 0x81, 0x4, {0x12, 0x25, 0x1, 0xe, "8d5baf620c57321d269799ba8fa0"}}}, {{0x9, 0x5, 0x2, 0xc, 0x3ff, 0x0, 0x2a, 0x8, {0x14, 0x25, 0x1, 0x10, "658eed783f3f541a12bc3c0e297301a9"}}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0x1, 0x9, 0x6, {0xd, 0x25, 0x1, 0x9, "f9ba7ea5e8263f8964"}}}, {{0x9, 0x5, 0xe, 0x4, 0x8, 0xa, 0x8, 0x2, {0xc, 0x25, 0x1, 0x8, "280e0e59e686a056"}}}]}}}}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x200, 0x1, 0xee, 0x79, 0x8}, 0x6a, &(0x7f0000000240)={0x5, 0xf, 0x6a, 0x4, [@generic={0x21, 0x10, 0x3, "8eeb36f1dca739fe6368403c9bf109bc897415593dede579214b97a5b295"}, @generic={0x33, 0x10, 0xb, "09256c31b88afa95aef1be008e10a0e85de60a5c99e33b02918828befcab6ccd26f3edbae79d23b1b73e600f5058d441"}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0xd, 0x6, 0x324}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x8, 0x4, 0x7b03}]}, 0x3, [{0x41, &(0x7f00000002c0)=@string={0x41, 0x3, "97a27e9b6667f1ce4ce8e7c03c6dacc315dcf888208c041af75dc4c1dfdac3896e8114f5a7c6e0711e1a4610813e5527e0cbb35f67a705ea1cabc092b59cb7"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x40d}}, {0xad, &(0x7f0000000380)=@string={0xad, 0x3, "6f6a87910de4da11c1b120b8153c72c3bbc82096b0161ebb028b0c85a2d5c8285fb15e79e2114ac74b921a564e06151fa8802fc0b971ead33f990f758b0d7cc8605b9304105be7e369854c7836718cbcfd8ae34ef0ffd0aa8bf564ae78bcf8bac5c71e36f53f510f2f1d8cf26c37b5bae18a536d3cbca44029a56c648ae33d50faeb3250bccd9dd21c53c68f151b5081ce66b36ab29c861512c33ef9b1cc7fbcf4b4ace7a7d26fb274163a"}}]}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f00000018c0)={0x2c, &(0x7f00000016c0)={0x40, 0x7, 0x2, '3{'}, 0x0, 0x0, 0x0, 0x0}) 206.543749ms ago: executing program 8 (id=3217): r0 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_SEND_ZC={0x2f, 0x0, 0x2c, 0xffffffffffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x1}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x5) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async, rerun: 32) r4 = fsmount(0xffffffffffffffff, 0x1, 0x0) (rerun: 32) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f0000000480)={0x60, 0x0, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000000/0x1000)=nil, 0xffff, &(0x7f0000000040)=[{0x7, 0xf3d, 0x3}, {0x5, 0x4, 0x9}], 0x2, 0x8, 0x794d0c54e99a0286, 0x11, 0x40}) (async, rerun: 64) r5 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64) getsockopt$IP_SET_OP_GET_BYNAME(r5, 0x0, 0x53, 0x0, &(0x7f0000000200)) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000ffff27bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x40}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000200)='./file0\x00') (async) chmod(&(0x7f0000000040)='./file0/file0\x00', 0x374) (async, rerun: 32) lchown(&(0x7f00000001c0)='./file0\x00', 0xee00, 0x0) (async, rerun: 32) unlink(&(0x7f0000000240)='./file0\x00') (async) socket$inet6_mptcp(0xa, 0x1, 0x106) 0s ago: executing program 6 (id=3218): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x800) openat$tun(0xffffffffffffff9c, 0x0, 0x600000, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r1, r1, 0x0, 0x20000005) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) sendfile(r2, r1, 0x0, 0x1002000ff) kernel console output (not intermixed with test programs): etected capacity change from 0 to 4096 [ 602.578015][T12244] EXT4-fs: Ignoring removed mblk_io_submit option [ 602.588701][T12244] ext4: Unknown parameter 'in' [ 603.785364][T12254] fuse: Unknown parameter '±Å/¸?0({ðü2ÇèNÝ'$oíÔÚ]ˆÆ[°iò¨²qô ­ÔœÑôqþfÍlH÷u0xffffffffffffffff' [ 604.006862][T12010] team0: Port device team_slave_1 added [ 604.099006][T12226] tipc: Enabling of bearer rejected, failed to enable media [ 604.310104][T12010] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 604.319170][T12010] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 604.322722][T12010] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 604.385256][T12010] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 604.385286][T12010] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 604.385325][T12010] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 605.191916][T12010] hsr_slave_0: entered promiscuous mode [ 605.192785][T12010] hsr_slave_1: entered promiscuous mode [ 605.217064][T12010] debugfs: 'hsr0' already exists in 'hsr' [ 605.217108][T12010] Cannot create hsr debugfs directory [ 606.476515][T12291] loop5: detected capacity change from 0 to 4096 [ 606.571229][T12291] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 607.433262][T12306] tipc: Enabling of bearer rejected, failed to enable media [ 607.825192][T12318] loop9: detected capacity change from 0 to 32768 [ 607.889965][T12318] ocfs2: Slot 0 on device (7,9) was already allocated to this node! [ 607.904152][T12318] JBD2: Ignoring recovery information on journal [ 607.986958][T12318] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 608.024847][ T31] audit: type=1800 audit(1787915788.775:128): pid=12318 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1896" name="file1" dev="loop9" ino=17058 res=0 errno=0 [ 608.230281][T11486] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 608.689272][T12314] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 608.872703][T10884] ocfs2: Unmounting device (7,9) on (node local) [ 608.942744][T12327] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1899'. [ 609.610388][ T5625] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 609.781220][ T5625] usb 10-1: Using ep0 maxpacket: 16 [ 609.787981][ T5625] usb 10-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe [ 609.799175][ T5625] usb 10-1: config 4 has an invalid interface number: 9 but max is 0 [ 609.799195][ T5625] usb 10-1: config 4 has no interface number 0 [ 609.799227][ T5625] usb 10-1: config 4 interface 9 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 609.799248][ T5625] usb 10-1: config 4 interface 9 altsetting 2 endpoint 0x84 has invalid wMaxPacketSize 0 [ 609.799266][ T5625] usb 10-1: config 4 interface 9 altsetting 2 bulk endpoint 0x84 has invalid maxpacket 0 [ 609.799285][ T5625] usb 10-1: config 4 interface 9 has no altsetting 0 [ 609.861491][ T5625] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.861531][ T5625] usb 10-1: Product: syz [ 609.861558][ T5625] usb 10-1: Manufacturer: syz [ 609.861576][ T5625] usb 10-1: SerialNumber: syz [ 609.920853][T12333] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 609.939273][ T5272] 8021q: adding VLAN 0 to HW filter on device eth1 [ 609.971396][ T5625] usb 10-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 610.873901][ T10] usb 10-1: USB disconnect, device number 11 [ 610.887142][ T50] usb 10-1: Failed to submit usb control message: -71 [ 610.887190][ T50] usb 10-1: unable to send the bmi data to the device: -71 [ 610.887219][ T50] usb 10-1: unable to get target info from device [ 610.887238][ T50] usb 10-1: could not get target info (-71) [ 610.887266][ T50] usb 10-1: could not probe fw (-71) [ 611.302837][T12368] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1912'. [ 611.575946][T12370] loop5: detected capacity change from 0 to 32768 [ 611.600609][T12370] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1913 (12370) [ 611.618403][T12370] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 611.618444][T12370] BTRFS info (device loop5): using sha256 checksum algorithm [ 611.821295][T12370] BTRFS info (device loop5): enabling ssd optimizations [ 611.821333][T12370] BTRFS info (device loop5): turning on sync discard [ 611.821361][T12370] BTRFS info (device loop5): enabling free space tree [ 611.873250][ T31] audit: type=1800 audit(1787915792.625:129): pid=12370 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1913" name="file1" dev="loop5" ino=260 res=0 errno=0 [ 614.852141][T12010] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 614.914636][T12010] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 614.940352][T12010] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 615.013177][T12010] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 615.031762][T12010] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 615.078292][T12010] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 615.079019][T12010] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 615.145069][T12010] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 615.363177][T11486] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 616.056035][T12010] 8021q: adding VLAN 0 to HW filter on device bond0 [ 616.099386][T12425] loop9: detected capacity change from 0 to 4096 [ 616.144419][ T9] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 616.193433][T12010] 8021q: adding VLAN 0 to HW filter on device team0 [ 616.235484][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 616.235589][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 616.272408][T12425] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 616.314220][ T9] usb 6-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 616.330662][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 616.330856][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 616.330883][ T9] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 616.330908][ T9] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 616.330947][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.406491][ T6582] bridge0: port 2(bridge_slave_1) entered blocking state [ 616.406601][ T6582] bridge0: port 2(bridge_slave_1) entered forwarding state [ 619.303679][ T10] usb 6-1: USB disconnect, device number 23 [ 619.551037][T10884] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 619.695455][T12451] netlink: 'syz.5.1931': attribute type 1 has an invalid length. [ 619.787239][ T5272] 8021q: adding VLAN 0 to HW filter on device eth2 [ 620.188746][T12456] loop9: detected capacity change from 0 to 32768 [ 620.214574][T12456] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.1930 (12456) [ 620.252494][T12456] BTRFS info (device loop9): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 620.252538][T12456] BTRFS info (device loop9): using sha256 checksum algorithm [ 620.345570][T12451] macvlan2: entered promiscuous mode [ 620.355962][T12451] macvlan2: entered allmulticast mode [ 620.448877][T12456] BTRFS info (device loop9): enabling ssd optimizations [ 620.448917][T12456] BTRFS info (device loop9): turning on sync discard [ 620.448946][T12456] BTRFS info (device loop9): enabling free space tree [ 620.483328][ T31] audit: type=1800 audit(1787915801.245:130): pid=12456 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1930" name="file1" dev="loop9" ino=260 res=0 errno=0 [ 623.584587][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.584654][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 623.607016][T12487] loop5: detected capacity change from 0 to 4096 [ 623.725644][T12487] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 623.801760][T10884] BTRFS info (device loop9): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 624.696346][T12512] loop9: detected capacity change from 0 to 256 [ 624.761753][T12512] msdos: Unknown parameter 'nod' [ 625.277434][T12010] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 625.718430][T11486] EXT4-fs error (device loop5): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 131109 [ 625.758558][T11486] EXT4-fs error (device loop5): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 131109 [ 626.710622][T12534] fuse: Unknown parameter '±Å/¸?0({ðü2ÇèNÝ'$oíÔÚ]ˆÆ[°iò¨²qô ­ÔœÑôqþfÍlH÷u0xffffffffffffffff' [ 627.088213][T11486] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 627.524919][ T143] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.771490][ T5272] 8021q: adding VLAN 0 to HW filter on device eth3 [ 627.989904][ T143] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.195944][ T143] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.506183][ T143] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.725188][T12010] veth0_vlan: entered promiscuous mode [ 628.794870][T12010] veth1_vlan: entered promiscuous mode [ 629.479078][T12010] veth0_macvtap: entered promiscuous mode [ 629.487466][T12565] loop9: detected capacity change from 0 to 4096 [ 629.576350][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 629.591653][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 629.600580][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 629.611834][T12565] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 629.628945][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 629.638955][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 629.930396][T12010] veth1_macvtap: entered promiscuous mode [ 630.439054][T12010] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 630.500462][ T143] bridge_slave_1: left allmulticast mode [ 630.500504][ T143] bridge_slave_1: left promiscuous mode [ 630.500747][ T143] bridge0: port 2(bridge_slave_1) entered disabled state [ 630.548771][ T143] bridge_slave_0: left allmulticast mode [ 630.558229][ T143] bridge_slave_0: left promiscuous mode [ 630.564111][ T143] bridge0: port 1(bridge_slave_0) entered disabled state [ 630.625281][T10884] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 631.407270][T12610] loop9: detected capacity change from 0 to 256 [ 631.425295][T12610] msdos: Unknown parameter 'nod' [ 631.722164][T12616] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1967'. [ 631.740962][T11488] Bluetooth: hci0: command tx timeout [ 632.604365][ T143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 632.637323][ T143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 632.655708][ T143] bond0 (unregistering): Released all slaves [ 632.706318][T12010] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 632.739924][ T5272] 8021q: adding VLAN 0 to HW filter on device eth4 [ 632.931138][ T6293] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.931408][ T6293] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.931659][ T6293] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.931796][ T6293] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.824686][T11488] Bluetooth: hci0: command tx timeout [ 634.429481][ T143] hsr_slave_0: left promiscuous mode [ 634.442944][ T143] hsr_slave_1: left promiscuous mode [ 634.443659][ T143] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 634.443695][ T143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 634.479913][ T143] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 634.492515][ T143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 634.566904][ T143] veth1_macvtap: left promiscuous mode [ 634.575056][ T143] veth0_macvtap: left promiscuous mode [ 634.581914][ T143] veth1_vlan: left promiscuous mode [ 634.590655][ T143] veth0_vlan: left promiscuous mode [ 635.909492][T11488] Bluetooth: hci0: command tx timeout [ 636.718673][ T31] audit: type=1326 audit(1787915817.465:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12662 comm="syz.9.1978" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f23c0d9e159 code=0x0 [ 637.649645][ T143] team0 (unregistering): Port device team_slave_1 removed [ 637.740337][ T143] team0 (unregistering): Port device team_slave_0 removed [ 637.842296][ T10] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 638.078998][T11488] Bluetooth: hci0: command tx timeout [ 638.452488][ T10] usb 10-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 638.470585][ T10] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 638.470638][ T10] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 638.470670][ T10] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 638.470696][ T10] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 638.472721][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.329586][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 639.329623][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 639.469443][ T10] gud 10-1:1.0: Failed to get connectors (error=-71) [ 639.469486][ T10] gud 10-1:1.0: probe with driver gud failed with error -71 [ 639.572756][ T10] usb 10-1: USB disconnect, device number 12 [ 640.335201][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 640.335238][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 641.079279][T12712] loop9: detected capacity change from 0 to 4096 [ 641.163057][T12712] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 641.921527][ T5915] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 642.084457][ T5915] usb 5-1: unable to get BOS descriptor or descriptor too short [ 642.084515][ T5915] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 642.106755][ T5915] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 642.106791][ T5915] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 642.131997][ T5915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 642.132035][ T5915] usb 5-1: Product: syz [ 642.132062][ T5915] usb 5-1: Manufacturer: syz [ 642.132080][ T5915] usb 5-1: SerialNumber: syz [ 642.188260][T12739] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1992'. [ 642.211891][ T5915] usb 5-1: selecting invalid altsetting 1 [ 642.212472][ T5915] usb 5-1: unit 6 not found! [ 642.245066][T12741] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1992'. [ 642.547486][T12574] bridge0: port 1(bridge_slave_0) entered blocking state [ 642.550508][T12574] bridge0: port 1(bridge_slave_0) entered disabled state [ 642.550654][T12574] bridge_slave_0: entered allmulticast mode [ 642.586666][T12574] bridge_slave_0: entered promiscuous mode [ 642.806036][T12574] bridge0: port 2(bridge_slave_1) entered blocking state [ 642.816784][T12574] bridge0: port 2(bridge_slave_1) entered disabled state [ 642.825749][T12574] bridge_slave_1: entered allmulticast mode [ 643.818507][T12574] bridge_slave_1: entered promiscuous mode [ 645.032836][ T5915] usb 5-1: 2:0: failed to get current value for ch 0 (-71) [ 645.374536][T10884] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 645.404787][T12574] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 645.489482][T12574] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 645.578280][ T5915] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 645.626738][ T5915] usb 5-1: USB disconnect, device number 18 [ 645.793666][T11419] udevd[11419]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 645.888885][T12574] team0: Port device team_slave_0 added [ 645.948390][T12574] team0: Port device team_slave_1 added [ 646.489923][T12767] loop9: detected capacity change from 0 to 8 [ 646.490701][T12767] squashfs: Unknown parameter '‚' [ 646.888737][T12574] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 646.896017][T12574] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 646.896065][T12574] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 646.948733][T12574] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 646.957200][T12574] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 646.957227][T12574] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 647.314519][T12574] hsr_slave_0: entered promiscuous mode [ 647.330601][T12574] hsr_slave_1: entered promiscuous mode [ 647.342021][T12574] debugfs: 'hsr0' already exists in 'hsr' [ 647.351865][T12574] Cannot create hsr debugfs directory [ 652.495823][T12811] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2010'. [ 659.605982][T12866] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2025'. [ 660.033933][T12873] netlink: 14 bytes leftover after parsing attributes in process `syz.9.2028'. [ 663.340867][ T5736] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 664.600104][ T5736] usb 10-1: unable to get BOS descriptor or descriptor too short [ 664.600162][ T5736] usb 10-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 664.624494][ T5736] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 664.624515][ T5736] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 664.651630][ T5736] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.651666][ T5736] usb 10-1: Product: syz [ 664.651694][ T5736] usb 10-1: Manufacturer: syz [ 664.651712][ T5736] usb 10-1: SerialNumber: syz [ 664.682022][T11488] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 664.733775][ T5736] usb 10-1: selecting invalid altsetting 1 [ 664.748308][ T5736] usb 10-1: unit 6 not found! [ 666.095530][T12574] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 666.897622][ T5736] usb 10-1: 2:0: cannot get min/max values for control 1 (id 2) [ 666.958059][T12574] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 666.958785][T12574] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 667.028483][T12574] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 667.058448][T12574] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 667.089121][T12904] openvswitch: netlink: Flow key attr not present in new flow. [ 667.105235][T12574] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 667.450631][ T5736] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 667.794099][ T5736] usb 10-1: USB disconnect, device number 13 [ 667.815844][T12904] bridge_slave_0: left allmulticast mode [ 667.815881][T12904] bridge_slave_0: left promiscuous mode [ 667.816077][T12904] bridge0: port 1(bridge_slave_0) entered disabled state [ 667.917791][T12904] bridge_slave_1: left allmulticast mode [ 667.917828][T12904] bridge_slave_1: left promiscuous mode [ 667.918011][T12904] bridge0: port 2(bridge_slave_1) entered disabled state [ 667.956415][T12858] udevd[12858]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 668.039246][T12904] bond0: (slave bond_slave_0): Releasing backup interface [ 668.432365][T12904] bond0: (slave bond_slave_1): Releasing backup interface [ 670.203509][T12904] team0: Port device team_slave_0 removed [ 670.256426][T12904] team0: Port device team_slave_1 removed [ 670.268914][T12904] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 670.372357][T12904] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 670.407500][T12904] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 670.421138][T12904] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 670.453390][T12904] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 670.475164][T12574] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 670.516042][T12574] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 670.649239][T12928] netlink: 14 bytes leftover after parsing attributes in process `syz.9.2043'. [ 671.354773][T12944] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2045'. [ 672.787731][T12574] 8021q: adding VLAN 0 to HW filter on device bond0 [ 672.871867][T12574] 8021q: adding VLAN 0 to HW filter on device team0 [ 673.178818][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 673.178934][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 673.396567][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 673.396668][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 673.646649][T12574] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 674.195707][ T5735] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 674.485603][ T5735] usb 10-1: unable to get BOS descriptor or descriptor too short [ 674.485661][ T5735] usb 10-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 674.494575][ T5735] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 674.494595][ T5735] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 674.841066][ T5735] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.841105][ T5735] usb 10-1: Product: syz [ 674.841133][ T5735] usb 10-1: Manufacturer: syz [ 674.841151][ T5735] usb 10-1: SerialNumber: syz [ 674.933919][ T5735] usb 10-1: selecting invalid altsetting 1 [ 674.949168][ T5735] usb 10-1: unit 6 not found! [ 677.722138][ T5735] usb 10-1: 2:0: failed to get current value for ch 0 (-71) [ 678.018984][T12986] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2057'. [ 678.196907][ T31] audit: type=1800 audit(1787915858.945:132): pid=12992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.2059" name="file" dev="configfs" ino=34359 res=0 errno=0 [ 678.264003][ T5735] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 678.292245][T12992] mass_storage.0/lun.0: unable to open backing file: file0 [ 678.322869][ T5735] usb 10-1: USB disconnect, device number 14 [ 678.457210][T12858] udevd[12858]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 680.178048][ T31] audit: type=1326 audit(1787915860.925:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13019 comm="syz.9.2066" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f23c0d9e159 code=0x0 [ 680.435838][T12574] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 680.843940][T12574] veth0_vlan: entered promiscuous mode [ 680.905543][T12574] veth1_vlan: entered promiscuous mode [ 681.072649][T13056] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2076'. [ 681.106800][T12574] veth0_macvtap: entered promiscuous mode [ 681.145190][ T31] audit: type=1326 audit(1787915861.895:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13051 comm="syz.0.2075" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8eaab9e159 code=0x0 [ 681.178732][T12574] veth1_macvtap: entered promiscuous mode [ 681.292560][T12574] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 681.338140][T12574] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 681.426950][ T6293] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.427008][ T6293] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.427054][ T6293] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.436027][ T199] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.360082][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 682.395350][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 682.703224][T13076] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2082'. [ 684.546343][T13078] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2083'. [ 684.594534][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 684.594568][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 685.022962][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.023029][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.437670][T11488] Bluetooth: hci4: SCO packet for unknown connection handle 0 [ 685.803957][T13101] loop9: detected capacity change from 0 to 256 [ 685.841393][T13101] msdos: Unknown parameter 'nod' [ 686.711244][T13101] loop9: detected capacity change from 0 to 131072 [ 686.711926][T13101] xfs: Deprecated parameter 'ikeep' [ 686.711961][T13101] XFS: ikeep mount option is deprecated. [ 687.119437][ T31] audit: type=1800 audit(1787915867.865:135): pid=13105 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2091" name="file" dev="configfs" ino=34923 res=0 errno=0 [ 687.142360][T13101] XFS (loop9): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 687.361210][T13101] XFS (loop9): Starting recovery (logdev: internal) [ 687.387561][T13119] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2093'. [ 687.430040][ T31] audit: type=1326 audit(1787915868.175:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13106 comm="syz.0.2092" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8eaab9e159 code=0x0 [ 687.544049][T13101] XFS (loop9): Ending recovery (logdev: internal) [ 687.545563][T13105] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 688.497554][T10884] XFS (loop9): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 695.839577][T11488] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 695.842208][T13158] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 695.850025][T13158] i2c i2c-0: Failed to register i2c client wusb3801 at 0x04 (-16) [ 696.990657][T13181] openvswitch: netlink: Flow key attr not present in new flow. [ 697.298056][T13181] bridge_slave_0: left allmulticast mode [ 697.335848][T13181] bridge_slave_0: left promiscuous mode [ 697.336113][T13181] bridge0: port 1(bridge_slave_0) entered disabled state [ 697.468743][ T31] audit: type=1326 audit(1787915878.215:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13188 comm="syz.0.2110" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8eaab9e159 code=0x0 [ 698.110883][ T188] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 698.271383][ T188] usb 10-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 698.345384][ T188] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.345427][ T188] usb 10-1: Product: syz [ 698.345456][ T188] usb 10-1: Manufacturer: syz [ 698.345474][ T188] usb 10-1: SerialNumber: syz [ 698.731980][T13181] bridge_slave_1: left allmulticast mode [ 698.732022][T13181] bridge_slave_1: left promiscuous mode [ 698.732281][T13181] bridge0: port 2(bridge_slave_1) entered disabled state [ 698.966497][T13181] bond0: (slave bond_slave_0): Releasing backup interface [ 699.121250][T13181] bond0: (slave bond_slave_1): Releasing backup interface [ 701.148580][T13181] team0: Port device team_slave_0 removed [ 701.212661][T13181] team0: Port device team_slave_1 removed [ 701.258807][T13181] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 701.258847][T13181] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 701.285327][T13181] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 701.285362][T13181] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 701.335846][T13181] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 701.523686][T11488] Bluetooth: hci4: SCO packet for unknown connection handle 0 [ 701.617894][ T188] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 701.617963][ T188] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 701.617997][ T188] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 701.784263][ T188] lan78xx 10-1:1.0: probe with driver lan78xx failed with error -71 [ 701.882802][ T188] usb 10-1: USB disconnect, device number 15 [ 702.106794][T13225] loop3: detected capacity change from 0 to 256 [ 702.142715][T13225] msdos: Unknown parameter 'nod' [ 703.231065][T13225] loop3: detected capacity change from 0 to 131072 [ 703.231760][T13225] xfs: Deprecated parameter 'ikeep' [ 703.231795][T13225] XFS: ikeep mount option is deprecated. [ 703.308434][T13225] XFS (loop3): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 703.539237][T13225] XFS (loop3): Starting recovery (logdev: internal) [ 703.619042][T13225] XFS (loop3): Ending recovery (logdev: internal) [ 704.537372][T13258] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2126'. [ 705.155856][T12574] XFS (loop3): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 707.354762][T11488] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 710.648958][ T31] audit: type=1326 audit(1787915891.395:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13307 comm="syz.8.2141" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6a3259e159 code=0x0 [ 715.087590][T13374] openvswitch: netlink: Flow key attr not present in new flow. [ 715.432011][T13374] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 716.589792][T13388] loop9: detected capacity change from 0 to 131072 [ 716.590630][T13388] xfs: Deprecated parameter 'ikeep' [ 716.590666][T13388] XFS: ikeep mount option is deprecated. [ 716.677341][T13388] XFS (loop9): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 716.906995][T13388] XFS (loop9): Starting recovery (logdev: internal) [ 717.035832][T13388] XFS (loop9): Ending recovery (logdev: internal) [ 717.397201][ T31] audit: type=1326 audit(1787915898.145:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13399 comm="syz.8.2162" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6a3259e159 code=0x0 [ 717.639431][T11488] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 717.945648][T10884] XFS (loop9): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 718.431734][T13407] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 718.431912][T13407] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 718.432054][T13407] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 718.432215][T13407] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 718.432351][T13407] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 718.432475][T13407] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 718.432529][T13407] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 718.538465][T13407] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 718.832804][T13422] loop9: detected capacity change from 0 to 256 [ 718.833685][T13422] msdos: Unknown parameter 'nod' [ 719.991598][ T52] Bluetooth: hci4: command 0x0406 tx timeout [ 720.468982][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 720.469070][ T52] Bluetooth: hci6: command 0x0419 tx timeout [ 720.469115][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 720.469144][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 720.469174][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 720.813361][T13446] program syz.3.2172 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 720.972769][T13450] openvswitch: netlink: Flow key attr not present in new flow. [ 721.595863][T13450] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 722.384426][T13462] loop9: detected capacity change from 0 to 131072 [ 722.385275][T13462] xfs: Deprecated parameter 'ikeep' [ 722.385318][T13462] XFS: ikeep mount option is deprecated. [ 722.466707][T13462] XFS (loop9): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 722.476041][ T5625] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 722.541710][T11488] Bluetooth: hci0: command 0x0c1a tx timeout [ 722.642520][ T5625] usb 4-1: unable to get BOS descriptor or descriptor too short [ 722.642580][ T5625] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 722.670716][ T5625] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 722.670806][ T5625] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 722.699477][ T5625] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.699517][ T5625] usb 4-1: Product: syz [ 722.699545][ T5625] usb 4-1: Manufacturer: syz [ 722.699564][ T5625] usb 4-1: SerialNumber: syz [ 722.732697][T13462] XFS (loop9): Starting recovery (logdev: internal) [ 722.805722][ T5625] usb 4-1: selecting invalid altsetting 1 [ 722.813305][ T5625] usb 4-1: unit 6 not found! [ 722.841295][T13462] XFS (loop9): Ending recovery (logdev: internal) [ 723.658611][T10884] XFS (loop9): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 723.971626][ T5625] usb 4-1: 2:0: failed to get current value for ch 0 (-71) [ 724.329362][ T5625] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 724.357318][ T5625] usb 4-1: USB disconnect, device number 24 [ 724.619201][T12858] udevd[12858]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 724.636478][T11488] Bluetooth: hci0: command 0x0c1a tx timeout [ 727.132082][T13497] loop3: detected capacity change from 0 to 32768 [ 727.871452][T13497] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2187 (13497) [ 728.745817][T13497] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 728.745861][T13497] BTRFS info (device loop3): using crc32c checksum algorithm [ 728.985331][T13497] BTRFS info (device loop3): enabling ssd optimizations [ 728.985397][T13497] BTRFS info (device loop3): turning on flush-on-commit [ 728.985426][T13497] BTRFS info (device loop3): enabling free space tree [ 728.985445][T13497] BTRFS info (device loop3): enabling auto defrag [ 728.985465][T13497] BTRFS info (device loop3): use lzo compression, level 1 [ 728.985487][T13497] BTRFS info (device loop3): max_inline set to 4096 [ 729.588616][T13521] pim6reg: entered allmulticast mode [ 729.658712][T12574] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 729.760664][T13521] openvswitch: netlink: IP tunnel dst address not specified [ 729.760713][T13521] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 733.135788][T13562] loop9: detected capacity change from 0 to 4096 [ 733.189490][T13562] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 733.519711][T13573] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2204'. [ 734.452871][T10884] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 734.669136][T13592] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2211'. [ 734.962726][T13590] 8021q: adding VLAN 0 to HW filter on device bond1 [ 734.988619][T13600] loop3: detected capacity change from 0 to 1024 [ 735.386898][T13594] 8021q: adding VLAN 0 to HW filter on device bond1 [ 735.396679][T13594] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 735.418410][T13594] bond1: (slave gre1): Error -95 calling set_mac_address [ 735.666215][T13595] macvlan2: entered promiscuous mode [ 735.666253][T13595] macvlan2: entered allmulticast mode [ 735.666771][T13595] bond1: entered promiscuous mode [ 735.667268][T13595] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 735.731844][T13595] bond1: left promiscuous mode [ 738.328997][T13626] openvswitch: netlink: Flow key attr not present in new flow. [ 738.570455][T13626] bridge_slave_0: left allmulticast mode [ 738.570497][T13626] bridge_slave_0: left promiscuous mode [ 738.570692][T13626] bridge0: port 1(bridge_slave_0) entered disabled state [ 738.635058][T13639] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2223'. [ 739.290852][ T9] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 739.454003][ T9] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 739.491224][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 739.494829][ T9] usb 4-1: Product: syz [ 739.494888][ T9] usb 4-1: Manufacturer: syz [ 739.494907][ T9] usb 4-1: SerialNumber: syz [ 739.658609][T13626] bridge_slave_1: left allmulticast mode [ 739.658653][T13626] bridge_slave_1: left promiscuous mode [ 739.658877][T13626] bridge0: port 2(bridge_slave_1) entered disabled state [ 739.797184][T13626] bond0: (slave bond_slave_0): Releasing backup interface [ 739.900491][T13626] bond0: (slave bond_slave_1): Releasing backup interface [ 740.085645][T13626] team0: Port device team_slave_0 removed [ 742.425527][T13626] team0: Port device team_slave_1 removed [ 742.435987][T13626] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 742.448872][T13626] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 742.473084][T13626] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 742.496466][T13626] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 742.518492][T13626] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 742.888654][ T9] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 742.888720][ T9] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 742.888754][ T9] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 742.945967][ T9] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 743.037227][ T9] usb 4-1: USB disconnect, device number 25 [ 743.834218][T11488] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 744.282452][T11408] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 744.442846][T11408] usb 10-1: unable to get BOS descriptor or descriptor too short [ 744.442905][T11408] usb 10-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 744.464396][T11408] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 744.464418][T11408] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 744.493905][T11408] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 744.493944][T11408] usb 10-1: Product: syz [ 744.493970][T11408] usb 10-1: Manufacturer: syz [ 744.493988][T11408] usb 10-1: SerialNumber: syz [ 744.571080][T11408] usb 10-1: selecting invalid altsetting 1 [ 744.587527][T11408] usb 10-1: unit 6 not found! [ 744.683763][T13689] loop3: detected capacity change from 0 to 4096 [ 744.752662][T13689] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 744.941918][T11408] usb 10-1: 2:0: cannot get min/max values for control 1 (id 2) [ 746.519557][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.519629][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 746.589813][T11408] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 746.647414][T11408] usb 10-1: USB disconnect, device number 16 [ 746.778622][T13220] udevd[13220]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 747.420682][T13719] pim6reg: entered allmulticast mode [ 747.486218][T12574] EXT4-fs error (device loop3): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 131109 [ 747.516544][T12574] EXT4-fs error (device loop3): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 131109 [ 747.536598][T13720] xt_hashlimit: size too large, truncated to 1048576 [ 747.626749][T13719] sctp: [Deprecated]: syz.9.2245 (pid 13719) Use of int in max_burst socket option. [ 747.626749][T13719] Use struct sctp_assoc_value instead [ 747.732669][T13723] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2247'. [ 748.250440][T13726] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2247'. [ 750.929359][ T31] audit: type=1804 audit(1787915931.675:140): pid=13734 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2250" name="file0" dev="tmpfs" ino=261 res=1 errno=0 [ 751.599585][ T1167] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.857632][ T1167] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.041046][ T1167] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.212717][T13753] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2253'. [ 752.223279][T13752] xt_hashlimit: size too large, truncated to 1048576 [ 752.326146][T13756] xt_hashlimit: size too large, truncated to 1048576 [ 752.537915][ T1167] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.054784][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 753.072623][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 753.085946][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 753.096341][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 753.110588][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 753.319046][T13771] loop9: detected capacity change from 0 to 256 [ 753.319959][T13771] msdos: Unknown parameter 'nod' [ 755.104428][T13782] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2262'. [ 755.182992][ T52] Bluetooth: hci0: command tx timeout [ 757.397563][ T52] Bluetooth: hci0: command tx timeout [ 759.039024][ T1167] bond0 (unregistering): Released all slaves [ 759.421767][T11488] Bluetooth: hci0: command tx timeout [ 760.183536][ T1167] hsr_slave_0: left promiscuous mode [ 760.199129][ T1167] hsr_slave_1: left promiscuous mode [ 760.245426][ T1167] veth1_macvtap: left promiscuous mode [ 760.245478][ T1167] veth0_macvtap: left promiscuous mode [ 760.245576][ T1167] veth1_vlan: left promiscuous mode [ 760.245637][ T1167] veth0_vlan: left promiscuous mode [ 761.501027][T11488] Bluetooth: hci0: command tx timeout [ 763.796134][T13830] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2272'. [ 764.047021][T13867] FAULT_INJECTION: forcing a failure. [ 764.047021][T13867] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 764.057363][T13867] CPU: 0 UID: 0 PID: 13867 Comm: syz.9.2277 Tainted: G L syzkaller #0 PREEMPT(full) [ 764.057394][T13867] Tainted: [L]=SOFTLOCKUP [ 764.057402][T13867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 764.057414][T13867] Call Trace: [ 764.057421][T13867] [ 764.057430][T13867] dump_stack_lvl+0xe8/0x150 [ 764.057465][T13867] should_fail_ex+0x410/0x560 [ 764.057498][T13867] prepare_alloc_pages+0x223/0x600 [ 764.057535][T13867] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 764.057558][T13867] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 764.057582][T13867] ? __pfx_policy_nodemask+0x10/0x10 [ 764.057605][T13867] ? srso_alias_return_thunk+0x5/0xfbef5 [ 764.057627][T13867] ? lock_acquire+0x115/0x350 [ 764.057648][T13867] ? srso_alias_return_thunk+0x5/0xfbef5 [ 764.057674][T13867] alloc_pages_mpol+0x21e/0x390 [ 764.057702][T13867] folio_alloc_mpol_noprof+0x39/0x160 [ 764.057728][T13867] vma_alloc_folio_noprof+0xe1/0x1e0 [ 764.057754][T13867] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 764.057780][T13867] ? do_pte_missing+0x2f93/0x34b0 [ 764.057815][T13867] do_pte_missing+0x173a/0x34b0 [ 764.057860][T13867] handle_mm_fault+0x1a53/0x3750 [ 764.057895][T13867] ? handle_mm_fault+0xf1/0x3750 [ 764.057929][T13867] ? __pfx_handle_mm_fault+0x10/0x10 [ 764.057952][T13867] ? lock_vma_under_rcu+0x45a/0x500 [ 764.058004][T13867] do_user_addr_fault+0xa4f/0x1340 [ 764.058030][T13867] ? srso_alias_return_thunk+0x5/0xfbef5 [ 764.058053][T13867] ? srso_alias_return_thunk+0x5/0xfbef5 [ 764.058076][T13867] ? trace_page_fault_user+0x84/0x1e0 [ 764.058097][T13867] exc_page_fault+0x6a/0xc0 [ 764.058124][T13867] asm_exc_page_fault+0x26/0x30 [ 764.058143][T13867] RIP: 0033:0x7f23c0c551a3 [ 764.058160][T13867] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 764.058175][T13867] RSP: 002b:00007f23c1bc5470 EFLAGS: 00010202 [ 764.058192][T13867] RAX: 0000000000000000 RBX: 00007f23c1bc5530 RCX: 00007f23b6a00000 [ 764.058206][T13867] RDX: 00007f23c1bc56d0 RSI: 0000000000000001 RDI: 00007f23c1bc55d0 [ 764.058219][T13867] RBP: 0000000000000000 R08: 0000000000000008 R09: 00000000000000b8 [ 764.058231][T13867] R10: 00000000000000d2 R11: 00007f23c1bc5530 R12: 000000000000011e [ 764.058244][T13867] R13: 00007f23c0e55000 R14: 0000000000000068 R15: 00007f23c1bc55d0 [ 764.058273][T13867] [ 764.058311][T13867] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 764.193113][T13867] loop9: detected capacity change from 0 to 8 [ 766.647554][T13879] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2281'. [ 766.679176][T13875] 9p: Bad value for 'rfdno' [ 766.982871][T13887] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2281'. [ 770.011916][T13904] netlink: 116 bytes leftover after parsing attributes in process `syz.4.2286'. [ 770.240078][T11408] libceph: connect (1)[c::]:6789 error -101 [ 770.268929][T11408] libceph: mon0 (1)[c::]:6789 connect error [ 770.288469][T13904] ceph: No mds server is up or the cluster is laggy [ 770.841779][ T9] usb 10-1: new full-speed USB device number 17 using dummy_hcd [ 771.004589][ T9] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 771.034999][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 771.035039][ T9] usb 10-1: Product: syz [ 771.035066][ T9] usb 10-1: Manufacturer: syz [ 771.035085][ T9] usb 10-1: SerialNumber: syz [ 771.093324][ T9] usb 10-1: config 0 descriptor?? [ 771.348109][ T9] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 771.389800][T13769] bridge0: port 1(bridge_slave_0) entered blocking state [ 771.402254][T13769] bridge0: port 1(bridge_slave_0) entered disabled state [ 771.409802][T13769] bridge_slave_0: entered allmulticast mode [ 771.444267][T13769] bridge_slave_0: entered promiscuous mode [ 771.479697][T13769] bridge0: port 2(bridge_slave_1) entered blocking state [ 771.479821][T13769] bridge0: port 2(bridge_slave_1) entered disabled state [ 771.479986][T13769] bridge_slave_1: entered allmulticast mode [ 771.536345][T13769] bridge_slave_1: entered promiscuous mode [ 771.782683][T13769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 771.819669][T13769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 772.069170][T13769] team0: Port device team_slave_0 added [ 772.096753][T13769] team0: Port device team_slave_1 added [ 772.323843][T13769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 772.332678][T13769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 772.359295][T13769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 772.383510][T13769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 772.390845][T13769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 772.419200][T13769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 772.666127][ T9] dvb_usb_rtl28xxu 10-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 772.786283][T13769] hsr_slave_0: entered promiscuous mode [ 772.804475][T13769] hsr_slave_1: entered promiscuous mode [ 772.816546][T13769] debugfs: 'hsr0' already exists in 'hsr' [ 772.822539][T13769] Cannot create hsr debugfs directory [ 776.212061][ T9] usb 10-1: USB disconnect, device number 17 [ 781.960419][T13977] loop9: detected capacity change from 0 to 131072 [ 781.961373][T13977] xfs: Deprecated parameter 'ikeep' [ 781.961404][T13977] XFS: ikeep mount option is deprecated. [ 782.062013][T13977] XFS (loop9): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 782.205581][T13977] XFS (loop9): Starting recovery (logdev: internal) [ 782.482962][T13977] XFS (loop9): Ending recovery (logdev: internal) [ 782.934331][T13990] Illegal XDP return value 3544903463 on prog (id 237) dev N/A, expect packet loss! [ 785.864601][T14022] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.2306'. [ 787.844841][T14036] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 788.174264][T13769] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 788.205956][T13769] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 788.206655][T13769] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 788.240228][T13769] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 788.296667][T13769] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 788.353891][T13769] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 788.367265][T13769] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 788.410012][T13769] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 788.909949][T14054] No control pipe specified [ 788.972466][T13769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 789.088637][T13769] 8021q: adding VLAN 0 to HW filter on device team0 [ 789.143833][ T5890] bridge0: port 1(bridge_slave_0) entered blocking state [ 789.143938][ T5890] bridge0: port 1(bridge_slave_0) entered forwarding state [ 789.206530][ T6582] bridge0: port 2(bridge_slave_1) entered blocking state [ 789.206633][ T6582] bridge0: port 2(bridge_slave_1) entered forwarding state [ 789.700297][T10884] XFS (loop9): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 789.954620][T14065] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2317'. [ 790.084681][T14069] netlink: 'syz.0.2319': attribute type 10 has an invalid length. [ 790.084719][T14069] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2319'. [ 790.558819][T14077] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.2320'. [ 790.799989][T14080] xt_cgroup: invalid path, errno=-2 [ 790.877798][T14080] CIFS: Attempting to mount //127.0.0.1/share [ 791.527253][T14080] CIFS: VFS: cifs_mount failed w/return code = -112 [ 793.909790][T13769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 794.217748][T13769] veth0_vlan: entered promiscuous mode [ 794.276832][T14120] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2328'. [ 794.475477][T13769] veth1_vlan: entered promiscuous mode [ 794.802303][T14124] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2328'. [ 795.179890][T13769] veth0_macvtap: entered promiscuous mode [ 795.256826][T13769] veth1_macvtap: entered promiscuous mode [ 795.393231][T13769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 795.434653][T13769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 795.531190][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.531247][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.531293][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.531328][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.754483][ T188] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 795.827097][T14143] fuse: fd is not a fuse device [ 795.931052][ T188] usb 10-1: Using ep0 maxpacket: 16 [ 795.936981][ T188] usb 10-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 795.957210][ T188] usb 10-1: config index 0 descriptor too short (expected 51443, got 18) [ 795.974608][ T188] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 795.974646][ T188] usb 10-1: Product: syz [ 795.974673][ T188] usb 10-1: Manufacturer: syz [ 795.974692][ T188] usb 10-1: SerialNumber: syz [ 796.037299][ T188] r8152-cfgselector 10-1: Unknown version 0x0000 [ 796.037341][ T188] r8152-cfgselector 10-1: config 0 descriptor?? [ 796.080420][ T6293] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 796.080455][ T6293] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 796.099551][ T31] audit: type=1326 audit(1787915976.845:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14141 comm="syz.0.2330" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eaab9e159 code=0x7ffc0000 [ 796.099596][ T31] audit: type=1326 audit(1787915976.845:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14141 comm="syz.0.2330" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eaab9e159 code=0x7ffc0000 [ 796.159225][ T31] audit: type=1326 audit(1787915976.885:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14141 comm="syz.0.2330" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eaab9e159 code=0x7ffc0000 [ 796.159299][ T31] audit: type=1326 audit(1787915976.885:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14141 comm="syz.0.2330" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eaab9e159 code=0x7ffc0000 [ 796.231805][ T31] audit: type=1326 audit(1787915976.975:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14141 comm="syz.0.2330" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8eaab5e98e code=0x7ffc0000 [ 796.231886][ T31] audit: type=1326 audit(1787915976.985:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14141 comm="syz.0.2330" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eaab9e159 code=0x7ffc0000 [ 796.231939][ T31] audit: type=1326 audit(1787915976.985:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14141 comm="syz.0.2330" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eaab9e159 code=0x7ffc0000 [ 796.326952][ T31] audit: type=1326 audit(1787915977.075:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14141 comm="syz.0.2330" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eaab9e159 code=0x7ffc0000 [ 796.327013][ T31] audit: type=1326 audit(1787915977.075:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14141 comm="syz.0.2330" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eaab9e159 code=0x7ffc0000 [ 796.393190][ T31] audit: type=1326 audit(1787915977.145:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14141 comm="syz.0.2330" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8eaab5e98e code=0x7ffc0000 [ 796.475377][ T188] r8152-cfgselector 10-1: Unknown version 0x0000 [ 796.475727][ T188] r8152-cfgselector 10-1: No union descriptors [ 796.561418][T14146] netlink: 16410 bytes leftover after parsing attributes in process `syz.4.2332'. [ 796.628715][ T6293] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 796.628752][ T6293] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 796.709864][ T5915] r8152-cfgselector 10-1: USB disconnect, device number 18 [ 797.020716][T14135] loop9: detected capacity change from 0 to 4096 [ 797.044722][T14135] nilfs2: Unknown parameter 'V' [ 797.313957][T14156] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2252'. [ 797.418542][T14159] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2334'. [ 797.729308][T14169] FAULT_INJECTION: forcing a failure. [ 797.729308][T14169] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 797.729365][T14169] CPU: 0 UID: 0 PID: 14169 Comm: syz.1.2337 Tainted: G L syzkaller #0 PREEMPT(full) [ 797.729392][T14169] Tainted: [L]=SOFTLOCKUP [ 797.729399][T14169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 797.729414][T14169] Call Trace: [ 797.729422][T14169] [ 797.729431][T14169] dump_stack_lvl+0xe8/0x150 [ 797.729464][T14169] should_fail_ex+0x410/0x560 [ 797.729497][T14169] _copy_from_user+0x2d/0xb0 [ 797.729517][T14169] wext_handle_ioctl+0xc7/0x1d0 [ 797.729542][T14169] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 797.729562][T14169] ? hook_file_ioctl+0x1f2/0x600 [ 797.729606][T14169] sock_ioctl+0x159/0x7e0 [ 797.729631][T14169] ? __pfx_sock_ioctl+0x10/0x10 [ 797.729653][T14169] ? __fget_files+0x2a/0x420 [ 797.729678][T14169] ? __fget_files+0x3a2/0x420 [ 797.729702][T14169] ? __fget_files+0x2a/0x420 [ 797.729729][T14169] ? srso_alias_return_thunk+0x5/0xfbef5 [ 797.729751][T14169] ? srso_alias_return_thunk+0x5/0xfbef5 [ 797.729775][T14169] ? __pfx_sock_ioctl+0x10/0x10 [ 797.729797][T14169] __se_sys_ioctl+0xfc/0x170 [ 797.729818][T14169] do_syscall_64+0x166/0x520 [ 797.729843][T14169] ? trace_irq_disable+0x3b/0x140 [ 797.729861][T14169] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 797.729886][T14169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 797.729905][T14169] RIP: 0033:0x7f605a39e159 [ 797.729922][T14169] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 797.729938][T14169] RSP: 002b:00007f605b251028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 797.729958][T14169] RAX: ffffffffffffffda RBX: 00007f605a625fa0 RCX: 00007f605a39e159 [ 797.729972][T14169] RDX: 0000200000000000 RSI: 0000000000008b32 RDI: 0000000000000003 [ 797.729984][T14169] RBP: 00007f605b251090 R08: 0000000000000000 R09: 0000000000000000 [ 797.729997][T14169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 797.730009][T14169] R13: 00007f605a626038 R14: 00007f605a625fa0 R15: 00007fff205bf678 [ 797.730038][T14169] [ 798.368375][T14182] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2340'. [ 800.524002][T14181] loop9: detected capacity change from 0 to 4096 [ 800.618776][T14181] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 801.192113][T14196] loop1: detected capacity change from 0 to 32768 [ 801.193113][T14196] BTRFS warning: v1 space cache is deprecated, falling back to no space cache [ 801.234319][T14196] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2344 (14196) [ 801.270427][T14196] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 801.270469][T14196] BTRFS info (device loop1): using crc32c checksum algorithm [ 801.486709][T14196] BTRFS info (device loop1): rebuilding free space tree [ 801.519864][T14196] BTRFS info (device loop1): disabling free space tree [ 801.519949][T14196] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 801.519981][T14196] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 801.560712][T14196] BTRFS info (device loop1): enabling ssd optimizations [ 801.560879][T14196] BTRFS info (device loop1): turning on async discard [ 801.560906][T14196] BTRFS info (device loop1): force clearing of disk cache [ 801.560927][T14196] BTRFS info (device loop1): use zstd compression, level 3 [ 802.259130][T13769] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 802.849180][T10884] EXT4-fs error (device loop9): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 131109 [ 802.868595][T10884] EXT4-fs error (device loop9): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 131109 [ 803.296337][T14264] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2354'. [ 803.523254][T10884] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 803.596461][T14271] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2356'. [ 803.869187][T14264] syz_tun (unregistering): left allmulticast mode [ 804.913190][ T165] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 805.200362][T14287] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6tnl0, syncid = 0, id = 0 [ 805.348435][T14251] loop1: detected capacity change from 0 to 32768 [ 805.391703][T14251] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2349 (14251) [ 805.432568][T14251] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 805.432613][T14251] BTRFS info (device loop1): using crc32c checksum algorithm [ 805.580577][ T165] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 805.639723][T14251] BTRFS info (device loop1): enabling ssd optimizations [ 805.639778][T14251] BTRFS info (device loop1): turning on flush-on-commit [ 805.639809][T14251] BTRFS info (device loop1): enabling free space tree [ 805.639828][T14251] BTRFS info (device loop1): enabling auto defrag [ 805.639849][T14251] BTRFS info (device loop1): use lzo compression, level 1 [ 805.639871][T14251] BTRFS info (device loop1): max_inline set to 4096 [ 805.689461][ T5272] 8021q: adding VLAN 0 to HW filter on device eth7 [ 806.368950][ T165] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.987384][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 807.987461][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.133277][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 808.147308][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 808.163181][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 808.180603][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 808.189891][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 808.278771][T13769] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 808.505085][T14327] veth0_to_team: entered promiscuous mode [ 808.824378][ T165] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 809.765487][T14347] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2369'. [ 810.051255][ T165] pim6reg: left allmulticast mode [ 810.314121][T11488] Bluetooth: hci2: command tx timeout [ 810.409081][T14357] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2372'. [ 810.487153][T14358] loop1: detected capacity change from 0 to 128 [ 810.688311][T14358] FAT-fs (loop1): Directory bread(block 1048) failed [ 810.695247][T14358] FAT-fs (loop1): Directory bread(block 1049) failed [ 810.702825][T14358] FAT-fs (loop1): Directory bread(block 1050) failed [ 810.709874][T14358] FAT-fs (loop1): Directory bread(block 1051) failed [ 810.709922][T14358] FAT-fs (loop1): Directory bread(block 1052) failed [ 810.709949][T14358] FAT-fs (loop1): Directory bread(block 1053) failed [ 810.709975][T14358] FAT-fs (loop1): Directory bread(block 1054) failed [ 810.710000][T14358] FAT-fs (loop1): Directory bread(block 1055) failed [ 811.124297][T11488] Bluetooth: hci6: SCO packet for unknown connection handle 0 [ 811.572718][ T165] bond0 (unregistering): Released all slaves [ 811.729957][ T5272] 8021q: adding VLAN 0 to HW filter on device eth8 [ 811.744180][T14376] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2378'. [ 813.136845][T11488] Bluetooth: hci2: command tx timeout [ 815.180898][ T52] Bluetooth: hci2: command tx timeout [ 815.790490][T14393] fuse: fd is not a fuse device [ 815.817631][T14393] fuse: fd is not a fuse device [ 816.059105][ T165] hsr_slave_0: left promiscuous mode [ 816.074989][ T165] hsr_slave_1: left promiscuous mode [ 816.135571][ T165] veth1_macvtap: left promiscuous mode [ 816.148744][ T165] veth0_macvtap: left promiscuous mode [ 816.155184][ T165] veth1_vlan: left promiscuous mode [ 816.155242][ T165] veth0_vlan: left promiscuous mode [ 817.908739][ T52] Bluetooth: hci2: command tx timeout [ 818.968844][T14428] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2391'. [ 819.807646][T14442] loop1: detected capacity change from 0 to 512 [ 819.819677][T14442] EXT4-fs: Ignoring removed i_version option [ 819.831739][T14442] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 819.905860][T14442] EXT4-fs error (device loop1) in ext4_process_orphan:346: Corrupt filesystem [ 819.934096][T14442] loop1: lost filesystem error report for type 5 error -117 [ 819.940760][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 819.940793][ C0] EXT4-fs (loop1): initial error at time 1787916000: ext4_process_orphan:346 [ 819.940831][ C0] EXT4-fs (loop1): last error at time 1787916000: ext4_process_orphan:346 [ 819.968832][T14442] EXT4-fs (loop1): 2 truncates cleaned up [ 819.996992][T14442] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 820.249261][T13769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 820.768290][T14456] overlayfs: failed to clone upperpath [ 820.989705][T14436] netlink: 72 bytes leftover after parsing attributes in process `syz.8.2393'. [ 821.895050][T14469] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2399'. [ 824.586241][T14319] bridge0: port 1(bridge_slave_0) entered blocking state [ 824.598658][T14319] bridge0: port 1(bridge_slave_0) entered disabled state [ 825.310444][T14319] bridge_slave_0: entered allmulticast mode [ 825.332586][T14319] bridge_slave_0: entered promiscuous mode [ 825.447267][T14319] bridge0: port 2(bridge_slave_1) entered blocking state [ 825.455152][T14319] bridge0: port 2(bridge_slave_1) entered disabled state [ 825.466729][T14319] bridge_slave_1: entered allmulticast mode [ 825.483960][T14319] bridge_slave_1: entered promiscuous mode [ 825.804148][T14319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 825.835563][T14517] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2411'. [ 825.835817][T14517] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2411'. [ 825.836003][T14517] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2411'. [ 825.836200][T14517] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2411'. [ 825.836380][T14517] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2411'. [ 825.836574][T14517] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2411'. [ 825.836759][T14517] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2411'. [ 825.836940][T14517] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2411'. [ 825.930048][T14319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 826.283368][T14319] team0: Port device team_slave_0 added [ 826.324966][T14319] team0: Port device team_slave_1 added [ 826.436287][T14534] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2414'. [ 826.698396][T14319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 826.708043][T14319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 827.033068][T14319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 827.064741][T14319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 827.073728][T14319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 827.100815][T14319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 827.485409][T14319] hsr_slave_0: entered promiscuous mode [ 827.515587][T14319] hsr_slave_1: entered promiscuous mode [ 827.522192][T14319] debugfs: 'hsr0' already exists in 'hsr' [ 827.538507][T14319] Cannot create hsr debugfs directory [ 828.269565][ T52] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 829.478458][T14559] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 829.492394][T14559] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 829.492560][T14559] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 829.492688][T14559] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 829.492812][T14559] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 829.492866][T14559] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 829.719553][T14559] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 829.740273][T14559] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 829.749020][T14559] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 829.785935][T14559] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 831.002381][T11488] Bluetooth: hci4: command 0x0406 tx timeout [ 831.831035][ T52] Bluetooth: hci6: command 0x0419 tx timeout [ 831.831089][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 831.831129][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 831.831158][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 831.843705][T11488] Bluetooth: hci0: command 0x0c1a tx timeout [ 832.751611][ T9] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 833.917580][T11488] Bluetooth: hci0: command 0x0c1a tx timeout [ 833.917633][T11488] Bluetooth: hci2: command 0x0c1a tx timeout [ 833.962660][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 833.968299][ T9] usb 2-1: New USB device found, idVendor=04b4, idProduct=6831, bcdDevice=6b.27 [ 834.806073][ T9] usb 2-1: config 2 has an invalid interface number: 32 but max is 0 [ 834.806111][ T9] usb 2-1: config 2 has no interface number 0 [ 834.806149][ T9] usb 2-1: config 2 interface 32 has no altsetting 0 [ 834.843243][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.843282][ T9] usb 2-1: Product: syz [ 834.843311][ T9] usb 2-1: Manufacturer: syz [ 834.843329][ T9] usb 2-1: SerialNumber: syz [ 835.413060][T14584] loop1: detected capacity change from 0 to 512 [ 835.478401][T14584] EXT4-fs (loop1): Test dummy encryption mode enabled [ 835.514448][T14584] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 835.539287][T14584] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 835.557503][T14584] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 835.836783][T14615] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 835.899458][T14612] xt_CT: You must specify a L4 protocol and not use inversions on it [ 835.981207][T11488] Bluetooth: hci0: command 0x0c1a tx timeout [ 835.987457][ T5629] Bluetooth: hci2: command 0x0c1a tx timeout [ 836.167724][ T9] ums-cypress 2-1:2.32: USB Mass Storage device detected [ 836.329052][ T9] usb 2-1: USB disconnect, device number 23 [ 836.364540][ T5629] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 836.860612][T13769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 839.226355][ T10] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 839.422622][ T10] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 839.433193][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 839.433245][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 839.433277][ T10] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 839.433302][ T10] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 839.433341][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 839.726841][T14319] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 839.762920][T14319] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 839.799419][T14319] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 839.849112][T14319] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 839.882145][T14319] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 839.938247][T14319] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 840.034944][T14319] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 840.091074][T14319] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 840.155821][T14673] lo: entered promiscuous mode [ 840.155857][T14673] lo: entered allmulticast mode [ 840.169406][T14673] tunl0: entered promiscuous mode [ 840.178727][T14673] tunl0: entered allmulticast mode [ 840.212293][T14673] gre0: entered promiscuous mode [ 840.218293][T14673] gre0: entered allmulticast mode [ 840.230376][T14673] gretap0: entered promiscuous mode [ 840.239966][T14673] gretap0: entered allmulticast mode [ 840.252092][T14673] erspan0: entered promiscuous mode [ 840.259295][T14673] erspan0: entered allmulticast mode [ 840.275203][T14673] ip_vti0: entered promiscuous mode [ 840.275242][T14673] ip_vti0: entered allmulticast mode [ 840.276250][T14673] ip6_vti0: entered promiscuous mode [ 840.276272][T14673] ip6_vti0: entered allmulticast mode [ 840.312837][T14673] sit0: entered promiscuous mode [ 840.312874][T14673] sit0: entered allmulticast mode [ 840.329809][T14673] ip6tnl0: entered promiscuous mode [ 840.335639][T14673] ip6tnl0: entered allmulticast mode [ 840.343380][T14673] ip6gre0: entered promiscuous mode [ 840.353417][T14673] ip6gre0: entered allmulticast mode [ 840.365610][T14673] syz_tun: entered promiscuous mode [ 840.376643][T14673] ip6gretap0: entered promiscuous mode [ 840.383270][T14673] ip6gretap0: entered allmulticast mode [ 840.397661][T14673] bridge0: entered promiscuous mode [ 840.404892][T14673] bridge0: entered allmulticast mode [ 840.416039][ T10] gud 2-1:1.0: Failed to get connectors (error=-5) [ 840.416084][ T10] gud 2-1:1.0: probe with driver gud failed with error -5 [ 840.618192][ T5625] usb 2-1: USB disconnect, device number 24 [ 840.858637][T14690] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2453'. [ 840.951894][T14319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 841.048917][T14690] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 841.066993][T14319] 8021q: adding VLAN 0 to HW filter on device team0 [ 841.113604][ T165] bridge0: port 1(bridge_slave_0) entered blocking state [ 841.113708][ T165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 841.205685][ T5890] bridge0: port 2(bridge_slave_1) entered blocking state [ 841.205785][ T5890] bridge0: port 2(bridge_slave_1) entered forwarding state [ 841.258760][T14690] overlayfs: failed to set xattr on upper [ 841.258796][T14690] overlayfs: ...falling back to redirect_dir=nofollow. [ 841.258809][T14690] overlayfs: ...falling back to index=off. [ 841.258821][T14690] overlayfs: ...falling back to uuid=null. [ 841.258833][T14690] overlayfs: ...falling back to xino=off. [ 841.258852][T14690] overlayfs: maximum fs stacking depth exceeded [ 843.448314][T14731] loop1: detected capacity change from 0 to 128 [ 843.527074][ T31] kauditd_printk_skb: 83 callbacks suppressed [ 843.527117][ T31] audit: type=1800 audit(1787916024.275:234): pid=14731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2462" name="file1" dev="loop1" ino=1048903 res=0 errno=0 [ 844.372494][T14751] netlink: 'syz.2.2468': attribute type 1 has an invalid length. [ 844.805403][T14751] bond4: entered promiscuous mode [ 844.805447][T14751] bond4: entered allmulticast mode [ 844.805754][T14751] 8021q: adding VLAN 0 to HW filter on device bond4 [ 845.418814][T14319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 846.277713][T14813] loop1: detected capacity change from 0 to 2048 [ 846.319838][T14813] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 847.337929][T14319] veth0_vlan: entered promiscuous mode [ 847.354273][T14830] loop1: detected capacity change from 0 to 64 [ 847.475845][T14319] veth1_vlan: entered promiscuous mode [ 847.706592][T14319] veth0_macvtap: entered promiscuous mode [ 847.748466][ T31] audit: type=1800 audit(1787916028.495:235): pid=14830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2486" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 847.809841][T14319] veth1_macvtap: entered promiscuous mode [ 847.956713][T14319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 848.029712][T14319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 848.143332][T14259] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 848.144317][T14259] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 848.196346][T14259] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 848.196409][T14259] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 848.372944][T14855] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2492'. [ 849.103997][T14252] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 849.210183][T14252] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 849.444004][ T143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 849.444041][ T143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 850.041433][T14873] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2497'. [ 850.041471][T14873] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2497'. [ 850.482421][T14882] FAULT_INJECTION: forcing a failure. [ 850.482421][T14882] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 850.482473][T14882] CPU: 0 UID: 0 PID: 14882 Comm: syz.6.2359 Tainted: G L syzkaller #0 PREEMPT(full) [ 850.482500][T14882] Tainted: [L]=SOFTLOCKUP [ 850.482508][T14882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 850.482526][T14882] Call Trace: [ 850.482533][T14882] [ 850.482542][T14882] dump_stack_lvl+0xe8/0x150 [ 850.482574][T14882] should_fail_ex+0x410/0x560 [ 850.482607][T14882] _copy_from_user+0x2d/0xb0 [ 850.482627][T14882] trace_parse_run_command+0xb8/0x380 [ 850.482647][T14882] ? __pfx_create_or_delete_trace_uprobe+0x10/0x10 [ 850.482670][T14882] ? __pfx_probes_write+0x10/0x10 [ 850.482690][T14882] vfs_write+0x296/0xba0 [ 850.482725][T14882] ? __pfx_vfs_write+0x10/0x10 [ 850.482754][T14882] ? __fget_files+0x2a/0x420 [ 850.482782][T14882] ? srso_alias_return_thunk+0x5/0xfbef5 [ 850.482805][T14882] ? __fget_files+0x3a2/0x420 [ 850.482829][T14882] ? __fget_files+0x2a/0x420 [ 850.482857][T14882] ? srso_alias_return_thunk+0x5/0xfbef5 [ 850.482883][T14882] ksys_write+0x150/0x270 [ 850.482912][T14882] ? __pfx_ksys_write+0x10/0x10 [ 850.482950][T14882] do_syscall_64+0x166/0x520 [ 850.482975][T14882] ? trace_irq_disable+0x3b/0x140 [ 850.482993][T14882] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 850.483018][T14882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 850.483037][T14882] RIP: 0033:0x7f671ed9e159 [ 850.483054][T14882] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 850.483070][T14882] RSP: 002b:00007f671fce9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 850.483090][T14882] RAX: ffffffffffffffda RBX: 00007f671f025fa0 RCX: 00007f671ed9e159 [ 850.483104][T14882] RDX: 000000000000000f RSI: 0000200000000180 RDI: 0000000000000004 [ 850.483116][T14882] RBP: 00007f671fce9090 R08: 0000000000000000 R09: 0000000000000000 [ 850.483128][T14882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 850.483140][T14882] R13: 00007f671f026038 R14: 00007f671f025fa0 R15: 00007ffdb0bc6948 [ 850.483169][T14882] [ 851.676193][T14909] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2507'. [ 852.192218][T14912] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2507'. [ 856.327163][T14980] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2523'. [ 857.593070][T14996] fuse: fd is not a fuse device [ 857.957117][ T188] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 858.137555][ T188] usb 2-1: New USB device found, idVendor=2040, idProduct=2400, bcdDevice= 0.00 [ 858.152546][ T188] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 858.152601][ T188] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 858.152650][ T188] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 858.502866][ T188] pvrusb2: Hardware description: WinTV PVR USB2 Model 24xxx [ 861.064860][ T2352] usb 2-1: Direct firmware load for v4l-pvrusb2-24xxx-01.fw failed with error -2 [ 861.927485][ T2352] usb 2-1: Falling back to sysfs fallback for: v4l-pvrusb2-24xxx-01.fw [ 862.055199][T15031] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2534'. [ 862.055249][T15031] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2534'. [ 862.190118][ T10] usb 2-1: USB disconnect, device number 25 [ 862.498818][T15042] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 862.692469][T15050] CacheFiles: Failed to register: -95 [ 862.838856][T15057] CIFS mount error: No usable UNC path provided in device string! [ 862.838856][T15057] [ 862.850332][T15057] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 863.166289][T15068] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2545'. [ 865.271189][T15078] xt_LOG: level 115 >= 8 [ 865.424949][T15089] loop6: detected capacity change from 0 to 16 [ 865.624003][T15089] erofs (device loop6): mounted with root inode @ nid 36. [ 865.700207][ T31] audit: type=1800 audit(1787916046.445:236): pid=15089 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2547" name="file1" dev="loop6" ino=86 res=0 errno=0 [ 866.104549][ T188] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 866.265120][ T188] usb 7-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00 [ 866.284682][ T188] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 866.284722][ T188] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 866.284751][ T188] usb 7-1: config 0 interface 0 has no altsetting 0 [ 866.284783][ T188] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 866.336247][ T188] usb 7-1: config 0 descriptor?? [ 866.344580][T15089] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 867.664220][T15147] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2562'. [ 868.618655][ T188] usbhid 7-1:0.0: can't add hid device: -71 [ 868.618755][ T188] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 868.649602][ T188] usb 7-1: USB disconnect, device number 6 [ 869.071678][T15161] syzkaller0: entered promiscuous mode [ 869.071717][T15161] syzkaller0: entered allmulticast mode [ 869.102600][T15161] FAULT_INJECTION: forcing a failure. [ 869.102600][T15161] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 869.102648][T15161] CPU: 0 UID: 0 PID: 15161 Comm: syz.1.2566 Tainted: G L syzkaller #0 PREEMPT(full) [ 869.102675][T15161] Tainted: [L]=SOFTLOCKUP [ 869.102683][T15161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 869.102695][T15161] Call Trace: [ 869.102702][T15161] [ 869.102710][T15161] dump_stack_lvl+0xe8/0x150 [ 869.102743][T15161] should_fail_ex+0x410/0x560 [ 869.102775][T15161] _copy_from_user+0x2d/0xb0 [ 869.102795][T15161] __sys_sendto+0x2a9/0x5a0 [ 869.102824][T15161] ? ksys_write+0x1e6/0x270 [ 869.102854][T15161] ? __pfx___sys_sendto+0x10/0x10 [ 869.102881][T15161] ? __mutex_unlock_slowpath+0x731/0x900 [ 869.102932][T15161] ? __pfx_ksys_write+0x10/0x10 [ 869.102964][T15161] __x64_sys_sendto+0xde/0x100 [ 869.102996][T15161] do_syscall_64+0x166/0x520 [ 869.103020][T15161] ? trace_irq_disable+0x3b/0x140 [ 869.103045][T15161] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 869.103069][T15161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 869.103089][T15161] RIP: 0033:0x7f605a39e159 [ 869.103105][T15161] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 869.103121][T15161] RSP: 002b:00007f605b251028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 869.103141][T15161] RAX: ffffffffffffffda RBX: 00007f605a625fa0 RCX: 00007f605a39e159 [ 869.103156][T15161] RDX: 0000000000000002 RSI: 0000200000000440 RDI: 0000000000000006 [ 869.103168][T15161] RBP: 00007f605b251090 R08: 00002000000001c0 R09: 0000000000000014 [ 869.103181][T15161] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000001 [ 869.103193][T15161] R13: 00007f605a626038 R14: 00007f605a625fa0 R15: 00007fff205bf678 [ 869.103222][T15161] [ 869.348807][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.348873][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.708963][ T5625] hid_parser_main: 6 callbacks suppressed [ 870.721794][ T5625] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 870.836265][ T5625] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 870.847537][ T5272] 8021q: adding VLAN 0 to HW filter on device eth5 [ 871.770210][T15204] netdevsim netdevsim2 netdevsim0: IPsec offload requires 128 bit authentication [ 873.080610][T11408] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 873.228296][T11408] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 873.258587][T15216] orangefs_mount: mount request failed with -4 [ 873.305244][T15232] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2580'. [ 873.305287][T15232] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2580'. [ 874.036266][T15228] bridge0: port 2(bridge_slave_1) entered disabled state [ 874.036802][T15228] bridge0: port 1(bridge_slave_0) entered disabled state [ 874.410077][T15256] loop1: detected capacity change from 0 to 16 [ 874.423717][T15256] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 874.692984][T15256] ieee802154 phy0 wpan0: encryption failed: -22 [ 874.726180][T15228] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 874.784603][T15228] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 876.155477][T15231] batman_adv: batadv0: Adding interface: macsec1 [ 876.163392][T15231] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 876.190295][T15231] batman_adv: batadv0: Interface activated: macsec1 [ 876.236205][ T5272] 8021q: adding VLAN 0 to HW filter on device eth6 [ 876.260991][ T50] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 876.270130][ T50] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 876.279449][ T50] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 876.289065][ T50] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 876.724805][T15268] loop1: detected capacity change from 0 to 32768 [ 876.837811][T15268] netlink: 184 bytes leftover after parsing attributes in process `syz.1.2592'. [ 876.898712][T15268] Bluetooth: MGMT ver 1.23 [ 876.898764][T15268] Bluetooth: hci0: unsupported parameter 5135 [ 876.898794][T15268] Bluetooth: hci0: unsupported parameter 8192 [ 876.898810][T15268] Bluetooth: hci0: unsupported parameter 5135 [ 876.898827][T15268] Bluetooth: hci0: unsupported parameter 8192 [ 877.572186][T15301] loop6: detected capacity change from 0 to 1024 [ 877.790841][T15301] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2600'. [ 878.961115][T15311] cgroup: Invalid name [ 881.044321][T15308] FAULT_INJECTION: forcing a failure. [ 881.044321][T15308] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 881.044375][T15308] CPU: 0 UID: 0 PID: 15308 Comm: syz.1.2603 Tainted: G L syzkaller #0 PREEMPT(full) [ 881.044402][T15308] Tainted: [L]=SOFTLOCKUP [ 881.044410][T15308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 881.044421][T15308] Call Trace: [ 881.044429][T15308] [ 881.044437][T15308] dump_stack_lvl+0xe8/0x150 [ 881.044470][T15308] should_fail_ex+0x410/0x560 [ 881.044503][T15308] _copy_from_user+0x2d/0xb0 [ 881.044522][T15308] get_timespec64+0x96/0x1b0 [ 881.044545][T15308] ? __pfx_get_timespec64+0x10/0x10 [ 881.044574][T15308] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 881.044608][T15308] __se_sys_pselect6+0x13a/0x320 [ 881.044637][T15308] ? __pfx___se_sys_pselect6+0x10/0x10 [ 881.044660][T15308] ? __pfx_ksys_write+0x10/0x10 [ 881.044690][T15308] ? srso_alias_return_thunk+0x5/0xfbef5 [ 881.044713][T15308] ? arch_syscall_is_vdso_sigreturn+0x11f/0x1a0 [ 881.044733][T15308] ? srso_alias_return_thunk+0x5/0xfbef5 [ 881.044754][T15308] ? __x64_sys_pselect6+0x21/0xf0 [ 881.044779][T15308] do_syscall_64+0x166/0x520 [ 881.044805][T15308] ? trace_irq_disable+0x3b/0x140 [ 881.044823][T15308] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 881.044848][T15308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 881.044867][T15308] RIP: 0033:0x7f605a39e159 [ 881.044884][T15308] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 881.044900][T15308] RSP: 002b:00007f605b251028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 881.044920][T15308] RAX: ffffffffffffffda RBX: 00007f605a625fa0 RCX: 00007f605a39e159 [ 881.044935][T15308] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 881.044946][T15308] RBP: 00007f605b251090 R08: 0000200000000240 R09: 0000000000000000 [ 881.044959][T15308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 881.044970][T15308] R13: 00007f605a626038 R14: 00007f605a625fa0 R15: 00007fff205bf678 [ 881.045000][T15308] [ 881.411786][ T5625] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 881.594487][ T5625] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 881.609945][ T5625] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 881.610005][ T5625] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 881.671034][ T5625] usb 7-1: config 0 descriptor?? [ 881.704892][ T5625] pwc: Askey VC010 type 2 USB webcam detected. [ 882.171785][ T5625] pwc: recv_control_msg error -32 req 02 val 2b00 [ 882.180714][ T5625] pwc: recv_control_msg error -32 req 02 val 2700 [ 882.205101][ T5625] pwc: recv_control_msg error -32 req 02 val 2c00 [ 882.217007][ T5625] pwc: recv_control_msg error -32 req 04 val 1000 [ 882.229883][ T5625] pwc: recv_control_msg error -32 req 04 val 1300 [ 882.245229][ T5625] pwc: recv_control_msg error -32 req 04 val 1400 [ 882.257905][ T5625] pwc: recv_control_msg error -32 req 02 val 2000 [ 882.273556][ T5625] pwc: recv_control_msg error -32 req 02 val 2100 [ 882.284168][ T5625] pwc: recv_control_msg error -32 req 04 val 1500 [ 882.504009][ T5625] pwc: recv_control_msg error -32 req 02 val 2400 [ 882.734986][ T5625] pwc: recv_control_msg error -32 req 02 val 2900 [ 882.949533][ T5625] pwc: recv_control_msg error -71 req 04 val 1100 [ 882.956495][ T5625] pwc: recv_control_msg error -71 req 04 val 1200 [ 882.979260][T15350] netlink: 666 bytes leftover after parsing attributes in process `syz.1.2614'. [ 883.005357][ T5625] pwc: Registered as video103. [ 883.031130][ T5625] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input24 [ 883.069258][ T5625] usb 7-1: USB disconnect, device number 7 [ 883.904157][T15373] FAULT_INJECTION: forcing a failure. [ 883.904157][T15373] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 883.904213][T15373] CPU: 0 UID: 0 PID: 15373 Comm: syz.6.2621 Tainted: G L syzkaller #0 PREEMPT(full) [ 883.904244][T15373] Tainted: [L]=SOFTLOCKUP [ 883.904251][T15373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 883.904263][T15373] Call Trace: [ 883.904271][T15373] [ 883.904279][T15373] dump_stack_lvl+0xe8/0x150 [ 883.904311][T15373] should_fail_ex+0x410/0x560 [ 883.904344][T15373] _copy_from_user+0x2d/0xb0 [ 883.904364][T15373] ___sys_sendmsg+0x1c6/0x360 [ 883.904382][T15373] ? srso_alias_return_thunk+0x5/0xfbef5 [ 883.904404][T15373] ? __lock_acquire+0x6df/0x2e50 [ 883.904429][T15373] ? __pfx____sys_sendmsg+0x10/0x10 [ 883.904478][T15373] ? __fget_files+0x2a/0x420 [ 883.904502][T15373] ? srso_alias_return_thunk+0x5/0xfbef5 [ 883.904524][T15373] ? __fget_files+0x3a2/0x420 [ 883.904558][T15373] __x64_sys_sendmsg+0x1b1/0x290 [ 883.904587][T15373] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 883.904625][T15373] do_syscall_64+0x166/0x520 [ 883.904650][T15373] ? trace_irq_disable+0x3b/0x140 [ 883.904669][T15373] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 883.904693][T15373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 883.904713][T15373] RIP: 0033:0x7f671ed9e159 [ 883.904730][T15373] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 883.904747][T15373] RSP: 002b:00007f671fce9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 883.904767][T15373] RAX: ffffffffffffffda RBX: 00007f671f025fa0 RCX: 00007f671ed9e159 [ 883.904782][T15373] RDX: 0000000000008000 RSI: 0000200000000100 RDI: 0000000000000003 [ 883.904795][T15373] RBP: 00007f671fce9090 R08: 0000000000000000 R09: 0000000000000000 [ 883.904807][T15373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 883.904820][T15373] R13: 00007f671f026038 R14: 00007f671f025fa0 R15: 00007ffdb0bc6948 [ 883.904850][T15373] [ 884.628286][T15381] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2623'. [ 885.075126][T15394] netlink: 'syz.6.2626': attribute type 5 has an invalid length. [ 887.402013][T15416] netlink: 'syz.0.2630': attribute type 9 has an invalid length. [ 888.179937][T15433] fuse: fd is not a fuse device [ 888.238113][T15436] fuse: fd is not a fuse device [ 889.561909][ T5629] Bluetooth: hci6: SCO packet for unknown connection handle 0 [ 891.895361][T15458] fuse: Bad value for 'fd' [ 892.005050][T15467] loop1: detected capacity change from 0 to 128 [ 892.030069][T15467] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 892.113131][ T5735] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 892.491602][ T9] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 892.711258][T14250] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 893.140616][T15486] futex_wake_op: syz.8.2651 tries to shift op by 36; fix this program [ 893.743484][T14259] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 893.743709][T14259] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 894.043755][T15462] loop6: detected capacity change from 0 to 40427 [ 894.231028][T11408] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 894.976618][T15525] netlink: 'syz.2.2660': attribute type 10 has an invalid length. [ 894.981120][T15525] team0: Device veth0_vlan failed to register rx_handler [ 895.995014][T11408] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 896.171655][T11408] usb 7-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 896.182409][T11408] usb 7-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 896.203417][T11408] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 896.203454][T11408] usb 7-1: Product: syz [ 896.203483][T11408] usb 7-1: Manufacturer: syz [ 896.203501][T11408] usb 7-1: SerialNumber: syz [ 896.275626][T11408] usb 7-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 896.527926][T11408] usb 7-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 896.576140][T11408] usb 7-1: USB disconnect, device number 8 [ 897.061815][T11408] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 897.225793][T11408] usb 7-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 897.238157][T11408] usb 7-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 897.263515][T11408] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 897.263557][T11408] usb 7-1: Product: syz [ 897.263591][T11408] usb 7-1: Manufacturer: syz [ 897.263609][T11408] usb 7-1: SerialNumber: syz [ 897.367366][T11408] usb 7-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 897.494429][T15581] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2677'. [ 897.518176][T15547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 897.527269][T15547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 897.557577][T15547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 897.573696][T15547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 897.619162][T11408] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 897.630539][T11408] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 897.630585][T11408] usb 7-1: media controller created [ 897.729974][T11408] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 897.901042][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 898.428028][T11408] usb 7-1: USB disconnect, device number 9 [ 900.216594][T15610] FAULT_INJECTION: forcing a failure. [ 900.216594][T15610] name failslab, interval 1, probability 0, space 0, times 0 [ 900.254193][T15610] CPU: 0 UID: 0 PID: 15610 Comm: syz.6.2686 Tainted: G L syzkaller #0 PREEMPT(full) [ 900.254223][T15610] Tainted: [L]=SOFTLOCKUP [ 900.254231][T15610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 900.254243][T15610] Call Trace: [ 900.254251][T15610] [ 900.254260][T15610] dump_stack_lvl+0xe8/0x150 [ 900.254292][T15610] should_fail_ex+0x410/0x560 [ 900.254326][T15610] should_failslab+0xa8/0x100 [ 900.254351][T15610] __kmalloc_noprof+0xfe/0x720 [ 900.254380][T15610] ? rcu_is_watching+0x16/0xb0 [ 900.254403][T15610] ? tomoyo_realpath_from_path+0xef/0x640 [ 900.254423][T15610] ? tomoyo_realpath_from_path+0xef/0x640 [ 900.254451][T15610] tomoyo_realpath_from_path+0xef/0x640 [ 900.254480][T15610] ? tomoyo_path_number_perm+0x219/0x5f0 [ 900.254508][T15610] tomoyo_path_number_perm+0x246/0x5f0 [ 900.254539][T15610] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 900.254565][T15610] ? srso_alias_return_thunk+0x5/0xfbef5 [ 900.254588][T15610] ? __lock_acquire+0x6df/0x2e50 [ 900.254609][T15610] ? srso_alias_return_thunk+0x5/0xfbef5 [ 900.254648][T15610] ? srso_alias_return_thunk+0x5/0xfbef5 [ 900.254670][T15610] ? hook_file_ioctl+0x1f2/0x600 [ 900.254717][T15610] ? __fget_files+0x2a/0x420 [ 900.254745][T15610] ? __fget_files+0x2a/0x420 [ 900.254770][T15610] ? __fget_files+0x3a2/0x420 [ 900.254794][T15610] ? __fget_files+0x2a/0x420 [ 900.254823][T15610] security_file_ioctl+0xc3/0x2a0 [ 900.254851][T15610] __se_sys_ioctl+0x47/0x170 [ 900.254874][T15610] do_syscall_64+0x166/0x520 [ 900.254899][T15610] ? trace_irq_disable+0x3b/0x140 [ 900.254918][T15610] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 900.254943][T15610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 900.254963][T15610] RIP: 0033:0x7f671ed9e159 [ 900.254980][T15610] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 900.254996][T15610] RSP: 002b:00007f671fce9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 900.255017][T15610] RAX: ffffffffffffffda RBX: 00007f671f025fa0 RCX: 00007f671ed9e159 [ 900.255031][T15610] RDX: 0000200000000080 RSI: 000000004008744b RDI: 0000000000000008 [ 900.255044][T15610] RBP: 00007f671fce9090 R08: 0000000000000000 R09: 0000000000000000 [ 900.255057][T15610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 900.255069][T15610] R13: 00007f671f026038 R14: 00007f671f025fa0 R15: 00007ffdb0bc6948 [ 900.255099][T15610] [ 900.300958][T15610] ERROR: Out of memory at tomoyo_realpath_from_path. [ 904.021725][ T9] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 904.192303][ T9] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 904.207494][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 904.220301][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 904.247787][ T9] usb 7-1: config 0 descriptor?? [ 904.278011][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 904.806870][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 904.815050][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 904.830340][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 904.841197][ T9] pwc: recv_control_msg error -32 req 04 val 1000 [ 904.850063][ T9] pwc: recv_control_msg error -32 req 04 val 1300 [ 904.863976][ T9] pwc: recv_control_msg error -32 req 04 val 1400 [ 904.875218][ T9] pwc: recv_control_msg error -32 req 02 val 2000 [ 904.886481][ T9] pwc: recv_control_msg error -32 req 02 val 2100 [ 904.904610][ T9] pwc: recv_control_msg error -32 req 04 val 1500 [ 905.177030][ T9] pwc: recv_control_msg error -32 req 02 val 2400 [ 905.397398][ T9] pwc: recv_control_msg error -32 req 02 val 2900 [ 905.607361][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 905.615737][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 905.642738][ T9] pwc: Registered as video103. [ 905.665096][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input25 [ 905.712626][ T9] usb 7-1: USB disconnect, device number 10 [ 906.460899][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 906.614470][T15709] FAULT_INJECTION: forcing a failure. [ 906.614470][T15709] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 906.614523][T15709] CPU: 0 UID: 0 PID: 15709 Comm: syz.6.2714 Tainted: G L syzkaller #0 PREEMPT(full) [ 906.614550][T15709] Tainted: [L]=SOFTLOCKUP [ 906.614558][T15709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 906.614570][T15709] Call Trace: [ 906.614578][T15709] [ 906.614587][T15709] dump_stack_lvl+0xe8/0x150 [ 906.614626][T15709] should_fail_ex+0x410/0x560 [ 906.614660][T15709] _copy_from_user+0x2d/0xb0 [ 906.614680][T15709] __sys_connect+0x155/0x450 [ 906.614710][T15709] ? __pfx___sys_connect+0x10/0x10 [ 906.614749][T15709] ? __pfx_ksys_write+0x10/0x10 [ 906.614787][T15709] __x64_sys_connect+0x7a/0x90 [ 906.614815][T15709] do_syscall_64+0x166/0x520 [ 906.614842][T15709] ? trace_irq_disable+0x3b/0x140 [ 906.614860][T15709] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 906.614886][T15709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 906.614906][T15709] RIP: 0033:0x7f671ed9e159 [ 906.614923][T15709] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 906.614939][T15709] RSP: 002b:00007f671fce9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 906.614960][T15709] RAX: ffffffffffffffda RBX: 00007f671f025fa0 RCX: 00007f671ed9e159 [ 906.614975][T15709] RDX: 000000000000000c RSI: 00002000000014c0 RDI: 0000000000000003 [ 906.614987][T15709] RBP: 00007f671fce9090 R08: 0000000000000000 R09: 0000000000000000 [ 906.615000][T15709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 906.615012][T15709] R13: 00007f671f026038 R14: 00007f671f025fa0 R15: 00007ffdb0bc6948 [ 906.615042][T15709] [ 909.339503][T15725] devtmpfs: Too few inodes for current use [ 909.464768][T15721] loop6: detected capacity change from 0 to 1024 [ 912.864794][ T31] audit: type=1326 audit(1787916093.615:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15758 comm="syz.1.2729" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f605a39e159 code=0x0 [ 913.121935][T14247] IPVS: starting estimator thread 0... [ 913.158343][T15774] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2732'. [ 913.210912][T15773] IPVS: using max 33 ests per chain, 79200 per kthread [ 916.016068][T15809] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 916.016669][T15809] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 916.060044][T15817] FAULT_INJECTION: forcing a failure. [ 916.060044][T15817] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 916.075344][T15817] CPU: 0 UID: 0 PID: 15817 Comm: syz.6.2742 Tainted: G L syzkaller #0 PREEMPT(full) [ 916.075376][T15817] Tainted: [L]=SOFTLOCKUP [ 916.075384][T15817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 916.075396][T15817] Call Trace: [ 916.075405][T15817] [ 916.075415][T15817] dump_stack_lvl+0xe8/0x150 [ 916.075452][T15817] should_fail_ex+0x410/0x560 [ 916.075486][T15817] _copy_from_user+0x2d/0xb0 [ 916.075506][T15817] do_sock_getsockopt+0x200/0x7e0 [ 916.075543][T15817] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 916.075588][T15817] ? __fget_files+0x3a2/0x420 [ 916.075620][T15817] ? __fget_files+0x2a/0x420 [ 916.075652][T15817] __x64_sys_getsockopt+0x1a4/0x240 [ 916.075691][T15817] do_syscall_64+0x166/0x520 [ 916.075717][T15817] ? trace_irq_disable+0x3b/0x140 [ 916.075737][T15817] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 916.075762][T15817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 916.075781][T15817] RIP: 0033:0x7f671ed9e159 [ 916.075799][T15817] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 916.075815][T15817] RSP: 002b:00007f671fcc8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 916.075836][T15817] RAX: ffffffffffffffda RBX: 00007f671f026090 RCX: 00007f671ed9e159 [ 916.075851][T15817] RDX: 000000000000006d RSI: 0000000000000084 RDI: 0000000000000003 [ 916.075863][T15817] RBP: 00007f671fcc8090 R08: 0000200000000700 R09: 0000000000000000 [ 916.075877][T15817] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000001 [ 916.075889][T15817] R13: 00007f671f026128 R14: 00007f671f026090 R15: 00007ffdb0bc6948 [ 916.075919][T15817] [ 916.324881][T15809] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 916.325652][T15809] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 916.599459][T15809] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 916.694133][T15809] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 916.771909][T15809] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 916.772541][T15809] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 916.830213][T15809] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 916.846550][T15809] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 917.298547][T15830] loop6: detected capacity change from 0 to 128 [ 917.327350][T15830] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 919.228530][T15847] sctp: [Deprecated]: syz.4.2753 (pid 15847) Use of int in max_burst socket option deprecated. [ 919.228530][T15847] Use struct sctp_assoc_value instead [ 923.100897][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 924.488830][T15905] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2763'. [ 925.853701][ T2352] pvrusb2: request_firmware fatal error with code=-110 [ 925.853736][ T2352] pvrusb2: Failure uploading firmware1 [ 925.853759][ T2352] pvrusb2: Device initialization was not successful. [ 925.853772][ T2352] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 925.853787][ T2352] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 925.860982][ T10] pvrusb2: Device being rendered inoperable [ 926.503023][T15901] IPVS: Scheduler module ip_vs_sip not found [ 929.543430][ T5272] 8021q: adding VLAN 0 to HW filter on device eth9 [ 929.551490][ T50] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 929.551761][ T50] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 929.551800][ T50] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 929.551836][ T50] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 930.258070][T15981] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2784'. [ 931.059837][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.059887][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 934.185503][T16031] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2799'. [ 935.134214][ T5272] 8021q: adding VLAN 0 to HW filter on device eth10 [ 938.656647][T16108] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2821'. [ 938.656697][T16108] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2821'. [ 939.510123][T16118] ipvlan2: entered allmulticast mode [ 939.522658][T16118] ip6gretap0: entered allmulticast mode [ 941.500905][T14250] IPVS: starting estimator thread 0... [ 941.590885][T16142] IPVS: using max 33 ests per chain, 79200 per kthread [ 943.688598][T16165] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 943.759467][T16165] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 943.778592][T16165] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 943.938855][T16165] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 944.105611][T16165] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 944.463211][T16184] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2844'. [ 945.959846][T16205] fuse: fd is not a fuse device [ 947.310716][T16238] netlink: 136 bytes leftover after parsing attributes in process `syz.4.2856'. [ 948.635046][ T5272] 8021q: adding VLAN 0 to HW filter on device eth11 [ 951.609794][T16293] netlink: 'syz.2.2869': attribute type 4 has an invalid length. [ 951.672332][T16293] netlink: 'syz.2.2869': attribute type 4 has an invalid length. [ 955.771396][ T5272] 8021q: adding VLAN 0 to HW filter on device eth12 [ 955.936207][T16348] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2885'. [ 957.013187][T16356] netlink: 'syz.6.2887': attribute type 4 has an invalid length. [ 957.071661][T16364] netlink: 'syz.6.2887': attribute type 4 has an invalid length. [ 957.688962][T16376] siw: device registration error -23 [ 958.126875][T16385] xt_hashlimit: size too large, truncated to 1048576 [ 958.350122][ T5629] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 960.448720][T16410] veth0: entered promiscuous mode [ 960.462892][T16410] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2903'. [ 960.514020][T16408] trusted_key: syz.6.2901 sent an empty control message without MSG_MORE. [ 961.530308][T16433] netlink: 'syz.8.2908': attribute type 4 has an invalid length. [ 961.586560][T16439] netlink: 'syz.8.2908': attribute type 4 has an invalid length. [ 964.641161][ T5629] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 966.790998][T16497] netlink: 'syz.8.2927': attribute type 4 has an invalid length. [ 966.849528][T16500] netlink: 'syz.8.2927': attribute type 4 has an invalid length. [ 967.694884][ T12] IPVS: starting estimator thread 0... [ 967.820930][T16515] IPVS: using max 33 ests per chain, 79200 per kthread [ 967.868345][T16516] overlayfs: failed to clone upperpath [ 968.495200][ T5272] 8021q: adding VLAN 0 to HW filter on device eth13 [ 969.358074][ T31] audit: type=1326 audit(1787916150.105:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16530 comm="syz.4.2939" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f302d397ed7 code=0x0 [ 969.384914][ T31] audit: type=1326 audit(1787916150.145:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16530 comm="syz.4.2939" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f302d397ed7 code=0x0 [ 969.410678][ T31] audit: type=1326 audit(1787916150.145:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16530 comm="syz.4.2939" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f302d397ed7 code=0x0 [ 973.430019][ T5272] 8021q: adding VLAN 0 to HW filter on device eth14 [ 973.858825][T16577] netlink: 'syz.8.2946': attribute type 4 has an invalid length. [ 973.898594][T16579] netlink: 'syz.8.2946': attribute type 4 has an invalid length. [ 975.252533][T16601] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2953'. [ 976.243830][ T12] IPVS: starting estimator thread 0... [ 976.333957][T16620] IPVS: using max 32 ests per chain, 76800 per kthread [ 978.628588][ T5272] 8021q: adding VLAN 0 to HW filter on device eth15 [ 979.415509][T16655] netlink: 'syz.2.2968': attribute type 4 has an invalid length. [ 979.464151][T16655] netlink: 'syz.2.2968': attribute type 4 has an invalid length. [ 981.072641][T16685] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2973'. [ 983.447522][ T5272] 8021q: adding VLAN 0 to HW filter on device eth16 [ 989.959266][T16748] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2990'. [ 990.397408][T16762] veth0: entered promiscuous mode [ 990.407259][T16762] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2993'. [ 992.256380][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.256452][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.193388][T16792] tipc: Started in network mode [ 993.193434][T16792] tipc: Node identity 4, cluster identity 4711 [ 993.193463][T16792] tipc: Node number set to 4 [ 994.196603][ T31] audit: type=1326 audit(1787916174.945:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16802 comm="syz.6.3001" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f671ed9e159 code=0x0 [ 995.514805][T16836] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3011'. [ 996.729844][T16860] fuse: fd is not a fuse device [ 1000.690356][T16913] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1001.035893][T16922] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3027'. [ 1004.592673][T16968] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3037'. [ 1005.598794][T16990] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3043'. [ 1006.039804][ T5272] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1008.075200][T17026] IPVS: lblcr: FWM 3 0x00000003 - no destination available [ 1009.585430][T17046] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3060'. [ 1009.585476][T17046] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3060'. [ 1010.704925][ T5272] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1011.118974][T17076] fuse: Bad value for 'fd' [ 1014.341840][T17119] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3080'. [ 1014.595348][T17128] netlink: 'syz.0.3083': attribute type 4 has an invalid length. [ 1014.660827][T17132] netlink: 'syz.0.3083': attribute type 4 has an invalid length. [ 1015.865493][ T5272] 8021q: adding VLAN 0 to HW filter on device eth19 [ 1017.531765][T17173] sctp: [Deprecated]: syz.8.3090 (pid 17173) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1017.531765][T17173] Use struct sctp_sack_info instead [ 1017.954856][T17183] fuse: fd is not a fuse device [ 1020.076934][T17214] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3105'. [ 1020.245540][ T5272] 8021q: adding VLAN 0 to HW filter on device eth20 [ 1023.155304][T17278] xt_ecn: cannot match TCP bits for non-tcp packets [ 1023.179999][T17278] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3125'. [ 1023.285725][T17283] fuse: fd is not a fuse device [ 1023.906718][T14244] IPVS: starting estimator thread 0... [ 1024.001539][T17291] IPVS: using max 33 ests per chain, 79200 per kthread [ 1024.106366][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807afc7800: rx timeout, send abort [ 1024.117327][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807afc7800: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 1025.272070][T17314] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3134'. [ 1025.272110][T17314] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3134'. [ 1025.371945][T17320] fuse: fd is not a fuse device [ 1025.820713][ T31] audit: type=1326 audit(1787916206.565:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17324 comm="syz.2.3138" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40f4d9e159 code=0x7ffc0000 [ 1025.846322][ T31] audit: type=1326 audit(1787916206.565:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17324 comm="syz.2.3138" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40f4d9e159 code=0x7ffc0000 [ 1025.889916][ T31] audit: type=1326 audit(1787916206.635:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17324 comm="syz.2.3138" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f40f4d9e159 code=0x7ffc0000 [ 1025.889991][ T31] audit: type=1326 audit(1787916206.635:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17324 comm="syz.2.3138" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40f4d9e159 code=0x7ffc0000 [ 1025.890044][ T31] audit: type=1326 audit(1787916206.635:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17324 comm="syz.2.3138" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40f4d9e159 code=0x7ffc0000 [ 1025.947461][ T31] audit: type=1326 audit(1787916206.705:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17324 comm="syz.2.3138" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f40f4d9e159 code=0x7ffc0000 [ 1025.947505][ T31] audit: type=1326 audit(1787916206.705:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17324 comm="syz.2.3138" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40f4d9e159 code=0x7ffc0000 [ 1025.947543][ T31] audit: type=1326 audit(1787916206.705:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17324 comm="syz.2.3138" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40f4d9e159 code=0x7ffc0000 [ 1026.450521][T17334] fuse: Bad value for 'fd' [ 1027.155017][ T199] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1027.170929][T14249] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1027.181374][ T50] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1027.181414][ T50] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1027.566508][T17352] netlink: 'syz.4.3144': attribute type 4 has an invalid length. [ 1027.594225][T17352] netlink: 'syz.4.3144': attribute type 4 has an invalid length. [ 1028.834656][T17372] xt_hashlimit: max too large, truncated to 1048576 [ 1028.834987][T17372] xt_IDLETIMER: timeout value is zero [ 1029.429468][ T5629] Bluetooth: hci6: ACL packet for unknown connection handle 201 [ 1031.162105][T17416] netlink: 'syz.2.3160': attribute type 4 has an invalid length. [ 1031.216368][T17419] netlink: 'syz.2.3160': attribute type 4 has an invalid length. [ 1032.141378][ T31] audit: type=1326 audit(1787916212.895:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17426 comm="syz.0.3162" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8eaab9e159 code=0x0 [ 1032.300056][T17440] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3165'. [ 1032.528013][T17445] ip_tables: iptables: counters copy to user failed while replacing table [ 1035.968168][T17482] netlink: 'syz.8.3176': attribute type 4 has an invalid length. [ 1036.029024][T17487] netlink: 'syz.8.3176': attribute type 4 has an invalid length. [ 1039.579455][T17526] fuse: fd is not a fuse device [ 1039.911378][ T31] audit: type=1800 audit(1787916220.655:251): pid=17536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3191" name="nullb0" dev="tmpfs" ino=575 res=0 errno=0 [ 1040.794030][T17556] netlink: 'syz.1.3197': attribute type 4 has an invalid length. [ 1041.026299][T17556] netlink: 'syz.1.3197': attribute type 4 has an invalid length. [ 1042.898724][T17581] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3201'. [ 1046.298596][T17632] [ 1046.300974][T17632] ====================================================== [ 1046.307967][T17632] WARNING: possible circular locking dependency detected [ 1046.314962][T17632] syzkaller #0 Tainted: G L [ 1046.320913][T17632] ------------------------------------------------------ [ 1046.327903][T17632] syz.6.3218/17632 is trying to acquire lock: [ 1046.333967][T17632] ffff88802bb11588 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}, at: ima_file_truncate+0xb6/0x170 [ 1046.344228][T17632] [ 1046.344228][T17632] but task is already holding lock: [ 1046.351599][T17632] ffff888026396460 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 1046.360335][T17632] [ 1046.360335][T17632] which lock already depends on the new lock. [ 1046.360335][T17632] [ 1046.370711][T17632] [ 1046.370711][T17632] the existing dependency chain (in reverse order) is: [ 1046.379726][T17632] [ 1046.379726][T17632] -> #4 (sb_writers#5){.+.+}-{0:0}: [ 1046.387102][T17632] sb_start_write+0x4d/0x1d0 [ 1046.392204][T17632] mnt_want_write+0x41/0x90 [ 1046.397217][T17632] lookup_open+0x1e6/0x1a40 [ 1046.402227][T17632] path_openat+0x677/0x1d60 [ 1046.407237][T17632] do_file_open+0x23e/0x4a0 [ 1046.412247][T17632] filp_open+0x16d/0x1d0 [ 1046.417007][T17632] fsg_lun_open+0x6c/0xdf0 [ 1046.421929][T17632] fsg_store_file+0x19e/0x400 [ 1046.427111][T17632] configfs_write_iter+0x337/0x430 [ 1046.432733][T17632] vfs_write+0x612/0xba0 [ 1046.437482][T17632] ksys_write+0x150/0x270 [ 1046.442319][T17632] do_syscall_64+0x166/0x520 [ 1046.447416][T17632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1046.453812][T17632] [ 1046.453812][T17632] -> #3 (&common->filesem){++++}-{4:4}: [ 1046.461532][T17632] down_read+0x4a/0x330 [ 1046.466197][T17632] fsg_show_file+0x2d/0x140 [ 1046.471209][T17632] configfs_read_iter+0x2b7/0x620 [ 1046.476779][T17632] __kernel_read+0x4ca/0x960 [ 1046.481878][T17632] integrity_kernel_read+0x89/0xd0 [ 1046.487500][T17632] ima_calc_file_hash+0x451/0x890 [ 1046.493029][T17632] ima_collect_measurement+0x51b/0xa00 [ 1046.499016][T17632] process_measurement+0x1272/0x1c10 [ 1046.504805][T17632] ima_file_check+0xe1/0x130 [ 1046.509900][T17632] security_file_post_open+0xb3/0x260 [ 1046.515781][T17632] path_openat+0x1485/0x1d60 [ 1046.520879][T17632] do_file_open+0x23e/0x4a0 [ 1046.525888][T17632] do_sys_openat2+0x115/0x200 [ 1046.531069][T17632] __x64_sys_openat+0x138/0x170 [ 1046.536423][T17632] do_syscall_64+0x166/0x520 [ 1046.541521][T17632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1046.547938][T17632] [ 1046.547938][T17632] -> #2 (&p->frag_sem){.+.+}-{4:4}: [ 1046.555312][T17632] down_read+0x4a/0x330 [ 1046.559998][T17632] configfs_write_iter+0x238/0x430 [ 1046.565621][T17632] vfs_write+0x612/0xba0 [ 1046.570391][T17632] ksys_write+0x150/0x270 [ 1046.575229][T17632] do_syscall_64+0x166/0x520 [ 1046.580326][T17632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1046.586717][T17632] [ 1046.586717][T17632] -> #1 (&buffer->mutex#2){+.+.}-{4:4}: [ 1046.594440][T17632] __mutex_lock+0x19d/0x1550 [ 1046.599542][T17632] configfs_read_iter+0x70/0x620 [ 1046.604993][T17632] __kernel_read+0x4ca/0x960 [ 1046.610091][T17632] integrity_kernel_read+0x89/0xd0 [ 1046.615713][T17632] ima_calc_file_hash+0x451/0x890 [ 1046.621239][T17632] ima_collect_measurement+0x51b/0xa00 [ 1046.627202][T17632] process_measurement+0x1272/0x1c10 [ 1046.632989][T17632] ima_file_check+0xe1/0x130 [ 1046.638076][T17632] security_file_post_open+0xb3/0x260 [ 1046.643953][T17632] path_openat+0x1485/0x1d60 [ 1046.649051][T17632] do_file_open+0x23e/0x4a0 [ 1046.654061][T17632] do_sys_openat2+0x115/0x200 [ 1046.659239][T17632] __x64_sys_openat+0x138/0x170 [ 1046.664590][T17632] do_syscall_64+0x166/0x520 [ 1046.669691][T17632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1046.676086][T17632] [ 1046.676086][T17632] -> #0 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}: [ 1046.684668][T17632] __lock_acquire+0x15ff/0x2e50 [ 1046.690017][T17632] lock_acquire+0x115/0x350 [ 1046.695019][T17632] __mutex_lock+0x19d/0x1550 [ 1046.700115][T17632] ima_file_truncate+0xb6/0x170 [ 1046.705467][T17632] security_file_truncate+0x118/0x240 [ 1046.711344][T17632] path_openat+0x1569/0x1d60 [ 1046.716445][T17632] do_file_open+0x23e/0x4a0 [ 1046.721455][T17632] do_sys_openat2+0x115/0x200 [ 1046.726637][T17632] __x64_sys_openat+0x138/0x170 [ 1046.731991][T17632] do_syscall_64+0x166/0x520 [ 1046.737084][T17632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1046.743475][T17632] [ 1046.743475][T17632] other info that might help us debug this: [ 1046.743475][T17632] [ 1046.753675][T17632] Chain exists of: [ 1046.753675][T17632] &ima_iint_mutex_key[depth] --> &common->filesem --> sb_writers#5 [ 1046.753675][T17632] [ 1046.767486][T17632] Possible unsafe locking scenario: [ 1046.767486][T17632] [ 1046.774911][T17632] CPU0 CPU1 [ 1046.780248][T17632] ---- ---- [ 1046.785585][T17632] rlock(sb_writers#5); [ 1046.789817][T17632] lock(&common->filesem); [ 1046.796831][T17632] lock(sb_writers#5); [ 1046.803494][T17632] lock(&ima_iint_mutex_key[depth]); [ 1046.808846][T17632] [ 1046.808846][T17632] *** DEADLOCK *** [ 1046.808846][T17632] [ 1046.816960][T17632] locks held by syz.6.3218/17632: 1, last CPU#0: [ 1046.823261][T17632] #0: ffff888026396460 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 1046.832406][T17632] [ 1046.832406][T17632] stack backtrace: [ 1046.838276][T17632] CPU: 0 UID: 0 PID: 17632 Comm: syz.6.3218 Tainted: G L syzkaller #0 PREEMPT(full) [ 1046.849210][T17632] Tainted: [L]=SOFTLOCKUP [ 1046.853508][T17632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1046.863538][T17632] Call Trace: [ 1046.866811][T17632] [ 1046.869724][T17632] dump_stack_lvl+0xe8/0x150 [ 1046.874305][T17632] print_circular_bug+0x2e2/0x300 [ 1046.879315][T17632] check_noncircular+0x12f/0x150 [ 1046.884241][T17632] __lock_acquire+0x15ff/0x2e50 [ 1046.889078][T17632] ? kasan_quarantine_put+0xbb/0x1f0 [ 1046.894354][T17632] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1046.899973][T17632] lock_acquire+0x115/0x350 [ 1046.904457][T17632] ? ima_file_truncate+0xb6/0x170 [ 1046.909466][T17632] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1046.915082][T17632] __mutex_lock+0x19d/0x1550 [ 1046.919659][T17632] ? ima_file_truncate+0xb6/0x170 [ 1046.924669][T17632] ? ima_file_truncate+0xb6/0x170 [ 1046.929673][T17632] ? __pfx___mutex_lock+0x10/0x10 [ 1046.934687][T17632] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1046.940301][T17632] ? apparmor_file_truncate+0x39f/0x470 [ 1046.945850][T17632] ? __pfx_apparmor_file_truncate+0x10/0x10 [ 1046.951731][T17632] ima_file_truncate+0xb6/0x170 [ 1046.956567][T17632] security_file_truncate+0x118/0x240 [ 1046.961929][T17632] path_openat+0x1569/0x1d60 [ 1046.966519][T17632] do_file_open+0x23e/0x4a0 [ 1046.971013][T17632] ? __pfx_do_file_open+0x10/0x10 [ 1046.976035][T17632] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1046.981736][T17632] ? _raw_spin_unlock+0x28/0x50 [ 1046.986569][T17632] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1046.992184][T17632] ? alloc_fd+0x651/0x6c0 [ 1046.996519][T17632] do_sys_openat2+0x115/0x200 [ 1047.001181][T17632] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1047.006800][T17632] ? __se_sys_futex+0x3a8/0x450 [ 1047.011660][T17632] ? __pfx_do_sys_openat2+0x10/0x10 [ 1047.016858][T17632] ? rcu_is_watching+0x16/0xb0 [ 1047.021610][T17632] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1047.027233][T17632] __x64_sys_openat+0x138/0x170 [ 1047.032101][T17632] do_syscall_64+0x166/0x520 [ 1047.036682][T17632] ? trace_irq_disable+0x3b/0x140 [ 1047.041686][T17632] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1047.047738][T17632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1047.053614][T17632] RIP: 0033:0x7f671ed9e159 [ 1047.058011][T17632] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1047.077601][T17632] RSP: 002b:00007f671fce9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1047.086006][T17632] RAX: ffffffffffffffda RBX: 00007f671f025fa0 RCX: 00007f671ed9e159 [ 1047.093961][T17632] RDX: 00000000000a4242 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1047.101912][T17632] RBP: 00007f671ee35024 R08: 0000000000000000 R09: 0000000000000000 [ 1047.109881][T17632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1047.117831][T17632] R13: 00007f671f026038 R14: 00007f671f025fa0 R15: 00007ffdb0bc6948 [ 1047.125792][T17632] [ 1053.665923][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 1053.672715][ T1306] ieee802154 phy1 wpan1: encryption failed: -22