last executing test programs: 24m3.714137996s ago: executing program 32 (id=219): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "560400", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x0, 0x0, 0x4}}}}}}}, 0x0) 23m29.189884013s ago: executing program 33 (id=346): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000fefffffb0000000000000000850000004100000085000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 23m16.247191309s ago: executing program 34 (id=386): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x13, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) 23m8.938935252s ago: executing program 35 (id=399): socket$inet(0x2, 0x4000000000000001, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x16, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@generic={0x6, 0x5, 0x1, 0x4, 0x8}, @map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0x7}, @alu={0x7, 0x1, 0x6, 0x3, 0x0, 0x20, 0x10}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000380)='GPL\x00', 0x83, 0x56, &(0x7f00000003c0)=""/86, 0x40f00, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0xfffffffe, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x1, 0xa, 0x1, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000540)=[0x1, 0x1], 0x0, 0x10, 0xe4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000240)='afs_make_vl_call\x00', r1, 0x0, 0x6}, 0x18) ioctl$sock_netdev_private(r0, 0x8943, &(0x7f0000000000)) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), r3) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)={0x5c, r7, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_SEC_DEVKEY={0x40, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_ID={0x28, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6a}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x6}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x6}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x5396ebcfacd913b0}, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEV(r2, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x2c, r4, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0102}}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x440c0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r9) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x38, r10, 0x513, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0xd7}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x841}, 0x40080) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4208, r12) r13 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r11) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') bpf$OBJ_GET_MAP(0x7, &(0x7f0000000940)=@generic={&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0x8}, 0x18) sendmsg$NL80211_CMD_JOIN_OCB(r11, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x68, r14, 0x4, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x2d}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1a}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x319}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x7d}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0xd0}, 0x40040) sendmsg$TIPC_NL_KEY_SET(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x18, r13, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x408c4}, 0x4000004) 23m4.040703537s ago: executing program 36 (id=408): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) fsopen(&(0x7f0000000000)='sockfs\x00', 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b4b, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) futex(0x0, 0x83, 0x1, 0x0, 0x0, 0x1) futex_waitv(&(0x7f0000019340)=[{0xdc1, 0x0, 0x2}, {0x6fac509e, &(0x7f00000192c0)=0x40, 0x82}], 0x2, 0x0, &(0x7f00000193c0)={0x0, 0x3938700}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r3, 0x0, 0x0, 0xc2a) 23m0.727464392s ago: executing program 37 (id=415): r0 = socket(0x10, 0x80002, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000000)={0x0, @rand_addr, @multicast2}, &(0x7f0000000080)=0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@bridge_getneigh={0x8c, 0x1e, 0x100, 0x70bd2b, 0x25dfdbfc, {0x7, 0x0, 0x0, r1, 0x808, 0x20040}, [@IFLA_PORT_SELF={0x58, 0x19, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x3}, @IFLA_PORT_VF={0x8, 0x1, 0x6}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x80}, @IFLA_PORT_VF={0x8, 0x1, 0x7}, @IFLA_PORT_PROFILE={0xa, 0x2, '**$*}\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x1}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x9}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x5}, @IFLA_PORT_VF={0x8, 0x1, 0x2}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xa}]}, @IFLA_GROUP={0x8, 0x1b, 0xda45}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x8c}, 0x9}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x404}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x48}}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 22m42.709082648s ago: executing program 38 (id=422): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="190000000400000008000000"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) readahead(0xffffffffffffffff, 0x1, 0x9) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r3}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@quota}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x434, &(0x7f0000000940)="$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") r4 = creat(&(0x7f0000000340)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r5 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x42) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x13, 0x0, "ef359f41a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4eb4b78c66ee677df701905b9aafab4ffffffff00", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "d300e6d6ae9ef30bea2a004000"}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r6, &(0x7f00000003c0)='\x00', 0x1, 0x9000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), 0x0}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000480)={'gretap0\x00', &(0x7f0000000600)={'gretap0\x00', 0x0, 0x40, 0x7, 0x0, 0x2, {{0x18, 0x4, 0x2, 0x3e, 0x60, 0x64, 0x0, 0x1, 0x4, 0x0, @broadcast, @broadcast, {[@generic={0x89, 0xb, "8c2197cf98a21baae6"}, @noop, @end, @end, @ssrr={0x89, 0x7, 0xe5, [@empty]}, @end, @lsrr={0x83, 0x1f, 0x56, [@remote, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1]}, @ra={0x94, 0x4}, @generic={0x82, 0x10, "212bf2f0a4bedbaf85fa98f0cf66"}]}}}}}) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f00000006c0)={0x0, @rand_addr, @broadcast}, &(0x7f0000000700)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000740)={'batadv_slave_0\x00'}) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x1f00, {0x0, 0x0, 0x74, 0x0, {0xb, 0xfff2}, {}, {0xe, 0xc}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) 22m30.878603909s ago: executing program 7 (id=428): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32, @ANYBLOB="0000000000000000c3"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, 0x0, 0x8) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 22m30.045429606s ago: executing program 7 (id=429): sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x14, 0x2, 0x3, 0x5}, 0x14}}, 0x20050000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000000000000"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22m27.378009984s ago: executing program 39 (id=429): sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x14, 0x2, 0x3, 0x5}, 0x14}}, 0x20050000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000000000000"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6m53.242438606s ago: executing program 40 (id=3631): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000280), &(0x7f0000000240)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x2000040, &(0x7f0000002140)=ANY=[], 0x11, 0x6c2, &(0x7f0000001f80)="$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") r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000001900), 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r4 = msgget$private(0x0, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x2) msgsnd(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000fe"], 0x8, 0x0) msgrcv(r4, 0x0, 0x0, 0x1, 0x1000) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040014}, 0x20000000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) write$UHID_CREATE2(r0, &(0x7f00000005c0)={0xb, {'syz1\x00', 'syz1\x00', 'syz0\x00', 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "9c"}}, 0x119) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) write$UHID_INPUT2(r0, 0x0, 0x6) lsetxattr$trusted_overlay_upper(&(0x7f00000004c0)='./file1\x00', &(0x7f0000000480), 0x0, 0x0, 0x0) setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)=ANY=[@ANYBLOB='osx.:'], 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='2', 0x1, 0x4fed0) 6m36.047974133s ago: executing program 41 (id=3650): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000340)={0x30, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x1, 0x5d}, @val={0x8}, @val={0xc, 0x99, {0xfffffff6, 0x3b}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x73367535592b9ab3}, 0x0) 6m31.760739093s ago: executing program 42 (id=3661): bpf$PROG_LOAD(0x5, 0x0, 0x0) 6m31.64939288s ago: executing program 3 (id=3663): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000180)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/76, 0x0, 0xeeee0000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000640)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000240)=0x1) 6m30.61079815s ago: executing program 3 (id=3665): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_open_procfs(0x0, &(0x7f0000000100)='mountstats\x00') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2200890, 0x0) 6m29.516193411s ago: executing program 3 (id=3666): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) mount(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r0}, 0x10) prctl$PR_SET_THP_DISABLE(0x29, 0x0) 6m28.737283832s ago: executing program 3 (id=3667): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 6m27.857226413s ago: executing program 3 (id=3669): syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0x4}}, 0x9) 6m26.798431207s ago: executing program 3 (id=3671): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x18) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = fcntl$getown(r1, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r3, r2, 0x0, 0x5, &(0x7f00000000c0)='ext4\x00'}, 0x30) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x84) syslog(0x4, &(0x7f0000000140)=""/179, 0xb3) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x5}, @hci_rp_read_def_err_data_reporting={{0x8}, {0x0, 0x61}}}}, 0x8) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f00000000c0)={0x0, 0x747, 0x3, 0x4, 0xfb, 0x8, 0x101}, 0xc) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg(r4, &(0x7f0000009880)=[{{0x0, 0x0, &(0x7f0000006bc0)=[{&(0x7f0000006b80)="de95", 0x2}], 0x1}}], 0x1, 0x20044840) ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0x4bfb, 0x0) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000040)='./file0\x00', 0x2000000) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r6, 0x81785501, &(0x7f0000000080)=""/34) 6m25.046781793s ago: executing program 43 (id=3671): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x18) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = fcntl$getown(r1, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r3, r2, 0x0, 0x5, &(0x7f00000000c0)='ext4\x00'}, 0x30) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x84) syslog(0x4, &(0x7f0000000140)=""/179, 0xb3) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x5}, @hci_rp_read_def_err_data_reporting={{0x8}, {0x0, 0x61}}}}, 0x8) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f00000000c0)={0x0, 0x747, 0x3, 0x4, 0xfb, 0x8, 0x101}, 0xc) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg(r4, &(0x7f0000009880)=[{{0x0, 0x0, &(0x7f0000006bc0)=[{&(0x7f0000006b80)="de95", 0x2}], 0x1}}], 0x1, 0x20044840) ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0x4bfb, 0x0) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000040)='./file0\x00', 0x2000000) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r6, 0x81785501, &(0x7f0000000080)=""/34) 6m24.921795327s ago: executing program 8 (id=3673): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000100)) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_REAPURB(r0, 0x4004550d, &(0x7f0000000140)) 6m24.213468676s ago: executing program 8 (id=3674): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4050811}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220f00000003a8407a730b93bf0280b3"], 0x0}, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x29, 0x8001, 0x40000000, 0x9, 0x5, 0x8, 0x10000, 0x0, 0x0, 0x10, 0x3f0}}, 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000001040)="1cae43ea708cbd003deb43", 0xb, 0x6) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGREPORT(r2, 0x400c4807, &(0x7f00000000c0)={0x3}) 6m20.929207399s ago: executing program 8 (id=3675): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x187842, 0x3) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000240)={0x3920e, 0xffffffffffffffff, 0x3, 0x0, 0x8, 0x8010000}) 6m20.313857717s ago: executing program 8 (id=3676): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 6m19.637838971s ago: executing program 8 (id=3677): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x2c, r1, 0xc31, 0x0, 0x1, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4}]}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4021}, 0x0) 6m18.245191413s ago: executing program 8 (id=3678): r0 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) fsmount(r0, 0x0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(0x0, 0x6, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="61154c000000000061138c0000000000bfa00000000000001503000008004e002d35010000000000950041000000000069163a0000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ff3d4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076ebae3f55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932c9a6aa57f1ad2e99e0e67ab93716d20000009fbb0f53acbb40b4f8e2739670b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc401000000cc43010000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000f4000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c6939628950000000000000001c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be19637302f3b41eae50509fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b30410856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff010404faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202ee1192b81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9b5a8ded5de8206c812439ab129ae818837ee1562078fc524a3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18402cde8b0100010000000000abc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059acaba9eaea93f811d434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d545ffffffff00000000a1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf857689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873df904c2bdbef81f246d26f4b40df949e12bdac18533d4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684ee54c0a263c806aabac2f66cb052f847c62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961ef4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fc0407de31d6e5532f360d379f20f054692b47207922fe6c14eba96c9a7ae906abc1ae1ae8c4fae92883cfa1978a04bb000000000000000000000000000000884efcecca45ea4ab2ec097668456a6ff12854997f5aed737d5205ace5c0b64f87ef10784d0479cb44ca077e0c4ce6ff880e2ce3de63853a9740e9233683bfc8636bee293aeeb680b399a296e6f44c07b5fc5d9d359af007f23004a7acb6df23664ea209620b4fe0f4df81c33bd8ca2335cb4b50881937379b45a301175c3e8eb32970564ec8e25c46ee3bae079faedaad94276cfa251be8256c4c37fc84a25c3a2feb39e94a5266a10716d4a3cef499fa176018054e9149a1c9d20a809ce3"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x54) 6m17.105551737s ago: executing program 44 (id=3678): r0 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) fsmount(r0, 0x0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(0x0, 0x6, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x54) 6m0.942909751s ago: executing program 1 (id=3680): r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000740)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000940)=ANY=[@ANYBLOB="380000001000370400000000fbdbdf2500000000", @ANYRES32=r2, @ANYBLOB="9601011f00a01f0018001680140001"], 0x38}, 0x1, 0x0, 0x0, 0x404c841}, 0x0) 6m0.190237799s ago: executing program 1 (id=3681): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) fchdir(r0) mount(0x0, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) 5m58.689390385s ago: executing program 1 (id=3682): getpid() sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000480)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = dup2(r1, r1) sendmmsg$unix(r2, &(0x7f0000008380), 0x400000000000174, 0x4008890) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000b93760000000000000000000000000000000000000000000200000000000000010000000000000044000500ac141400000000000000000000000000000000003c00000000000000000000000000000000000000000000000000000001"], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x20040000) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_vhci(0x0, 0xe) socket$inet6_tcp(0xa, 0x1, 0x0) 5m58.015486818s ago: executing program 1 (id=3683): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 5m57.28687462s ago: executing program 1 (id=3684): syz_usb_connect(0x3, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x81, 0x78, 0x11, 0x40, 0xdeb4, 0x8b81, 0xb126, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2d, 0x5, 0xd0, 0x0, [{{0x9, 0x4, 0xcd, 0x4, 0x0, 0x8, 0x1, 0x1, 0x4}}]}}]}}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) 5m56.537477246s ago: executing program 1 (id=3685): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) 5m54.703967146s ago: executing program 45 (id=3685): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) 5m53.286948374s ago: executing program 7 (id=3679): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x543, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x2a08000, &(0x7f0000000140)={[{@mblk_io_submit}, {@resuid={'resuid', 0x3d, 0xee00}}]}, 0xfc, 0x474, &(0x7f00000003c0)="$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") openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_CAP_HYPERV_SYNIC(r2, 0x4068aea3, &(0x7f00000003c0)) 5m52.325687813s ago: executing program 7 (id=3691): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x24060400) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) r1 = getpid() syz_pidfd_open(r1, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 5m52.213148467s ago: executing program 0 (id=3692): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f00000000c0), 0x2, 0x51a, &(0x7f0000001200)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x1efb7e, 0x86d7ae2592eaaba6) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x14113e, 0x1a1) write$binfmt_script(r1, &(0x7f0000000080), 0x208e24b) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40086610, &(0x7f0000000140)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 5m51.116595574s ago: executing program 7 (id=3695): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet(0x2, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000600), 0x0, 0x10000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000000180)=@v2={0x2, @aes128, 0x1, '\x00', @b}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000200)}}], 0x1, 0xc8000) prlimit64(0x0, 0xe, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r4, &(0x7f0000000740)=[{&(0x7f0000000680)="deddaf11864cf0da799a0b2e7e087b07637908a962cbc8402050204da2b724aefe5df09c3fda5621285882d268e338023c1bdc05615adbea221ee54993b050ebbae4ed6b91c4af98124b1c32dd4d6a2e17d2575665b35e16b89b85f2d7b3097a0703747b4d6e8cb706491b2749c2bd424f47f8be2866bc6de0c7962df5", 0x7d}], 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) socket$nl_route(0x10, 0x3, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x2, &(0x7f0000002780)={0x0, 0x989680}) 5m50.705397755s ago: executing program 0 (id=3696): setreuid(0x0, 0xee01) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee9, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBENT(r0, 0x4b46, 0x0) 5m50.141644326s ago: executing program 7 (id=3698): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, 0x0, 0x15) r3 = dup(r0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 5m44.375306309s ago: executing program 46 (id=3698): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, 0x0, 0x15) r3 = dup(r0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 5m44.305155165s ago: executing program 0 (id=3700): socket$inet6(0xa, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r0, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo/4\x00') preadv(r1, &(0x7f0000001600)=[{&(0x7f0000000040)=""/35, 0x2b}], 0x1, 0x0, 0x0) 5m38.702873037s ago: executing program 0 (id=3704): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x24060400) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) r1 = getpid() syz_pidfd_open(r1, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 5m37.327246648s ago: executing program 0 (id=3705): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000300)=0x100000001, 0x1d) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x3}, @mss, @mss={0x2, 0xff}, @mss={0x2, 0x6}, @sack_perm, @timestamp, @sack_perm, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="3ce2de4d8d957a8de4e490b6cd03b988d4edef164bd3377aa381b5f50b7ca414516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077283644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe102e7f726263f28aef1bc12a069063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cdecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93ae93b2361956b3e80c38c5fd29b5c1b5d7ce67edc856a8dc0ba54cee53de9a48c131389426bd06ec7c695add357934fc0321f0d3d7982e4fe5a0039decc491a663afd02facb08dd9695f854c7b031d9af8bd7350897996b5208b23030cc0feb84570730eaf24b9f2ac05d0feb3be07a29f887095f36f3c8f0e77e45509acd14a5be4a1572dd4cd1231087b830fa03e071571d4abd694710ef140469cf6df8a59839aafe046a5bffb97e5247be901789eafd726ba090337a2c49207e6b900c7e982472e6aac70e5d52ca2c1bab47b1f6d00f9601e2281686c21f770ae96e0ffec4b30496d012fa00958f794cdbd721bd155cae87", 0x109e8, 0x805, 0x0, 0x6) 5m36.258413716s ago: executing program 0 (id=3706): r0 = io_uring_setup(0x5323, &(0x7f00000000c0)={0x0, 0x6852, 0x10, 0x3, 0x2002}) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0) 5m32.774450734s ago: executing program 47 (id=3706): r0 = io_uring_setup(0x5323, &(0x7f00000000c0)={0x0, 0x6852, 0x10, 0x3, 0x2002}) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0) 12.135512737s ago: executing program 9 (id=4327): timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_RUN(r0, 0xae80, 0x0) r1 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x81, 0x90a82) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e20, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80}}, 0x48f4, 0x8, 0x3, 0xfffffff7, 0x366d}, &(0x7f0000000240)=0x98) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x1f, 0x12, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10}, [@btf_id={0x18, 0x9, 0x3, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xda8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x9a, &(0x7f00000001c0)=""/154, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r3, 0x40045542, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) 11.263450498s ago: executing program 9 (id=4330): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2, &(0x7f0000010140)={[{@oldalloc}, {@noquota}, {@lazytime}, {@jqfmt_vfsv1}, {@i_version}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2004}}, {@stripe={'stripe', 0x3d, 0x20}}, {@lazytime}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@usrquota}, {@bsdgroups}]}, 0x1, 0x562, &(0x7f0000001080)="$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") bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x10, 0x2, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x5e, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000007000000080009000200000008000b"], 0x2c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r8 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r8, &(0x7f0000000100)="e5786a0d000000000000c83b", 0xffffff9b, 0x0, &(0x7f0000000140)={0x2, 0x0, @multicast2}, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00', 0x0}) syz_usb_connect$uac1(0x1, 0xd9, &(0x7f0000000440)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc7, 0x3, 0x1, 0xb2, 0x50, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x2}, [@extension_unit={0xa, 0x24, 0x8, 0x4, 0x2, 0x7e, "1df1f6"}, @selector_unit={0xb, 0x24, 0x5, 0x5, 0x7, "0c157e53e87f"}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x0, 0x2, 0xdc, 0x4, 0x2, 0xb}, @extension_unit={0xc, 0x24, 0x8, 0x4, 0x3, 0x9, "d53bba96a0"}, @mixer_unit={0xb, 0x24, 0x4, 0x1, 0x0, "df866e6f671c"}, @feature_unit={0xd, 0x24, 0x6, 0x2, 0x6, 0x3, [0x3, 0x1, 0x7], 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0xf, 0x2, 0x1, 0x0, "b858a636"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x2, 0x1, 0x3, {0x7, 0x25, 0x1, 0x80, 0x7, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x4, 0x8, 0x1007}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x50, 0x1, 0x5, 0x7, "77bac4923230e863"}]}, {{0x9, 0x5, 0x82, 0x9, 0x5df, 0x8, 0x46, 0x8, {0x7, 0x25, 0x1, 0x0, 0xf, 0xede6}}}}}}}]}}, &(0x7f0000000900)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x201, 0x2, 0x6, 0x10, 0xff, 0xc8}, 0x7c, &(0x7f0000000340)={0x5, 0xf, 0x7c, 0x2, [@generic={0x6d, 0x10, 0x3, "959f912e404de95f7dab9c835d350677811db92de4760d60e7584deff37fde9a60945d9a93f4c9d76b0b678eb0eea3504c6519cdfdeabf66de5e18eabff626f65052ec9640718d8f3cb83a158ffb866e2a4ac6d89bb94edf82ae33871164d34f24f768498a10c71a1967"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0x2, 0xf, 0x7}]}, 0x5, [{0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x1c09}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x438}}, {0xf8, &(0x7f0000000600)=@string={0xf8, 0x3, "937f3deaf87dbddf67809636e19398e10ab6f4eab612e075fe02f4e7bca1340cc7c0101a22719e978d4baef6bde0369fae01342f60642dd2813a1308fec1a260c6ce8afb53a6b6ae338475460142a3988e5d73a374146c693081d61e0fa83064f61c234177af2c4e3ce4e81620d1ee29280dad22b9c0281b127b2987c6e9675c96ace58b4f18766814a20c5941462125519ed4357627439da193b315c0c719b349d5ac65bfba09cee312c2356feb90c8230f6251f48c2b419467a0c79ca0c0b6dfa03646dc87b78e0b868c6447b0f2cad3d3fe8ecddace187979c525c4be52ce81a6020117c71d39a0297366a4b2dc14d09a004fbc55"}}, {0x94, &(0x7f0000000840)=@string={0x94, 0x3, "7b45f597e2cf3a6934e261be31c2ba2be87939d9ea99155722946e7a10f0c1757fc359788f0b0a342b4f063aecd71336393dbe0ae391000fd9a10c994baf331ab8d6807c2337d257c87ecea1004f4c519103f9e8eb453e884f8e86d69e117d79cff74d43e1fd698c1a60d4ad10430f00f4a8a7ba0d35ea9ff8a1ac7fc10abd40ab5aca5b88e7c12c6d99f77aa9a47f44e1c4"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x438}}]}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x100000, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e00000000400002800600010000000000340003800c0001000ffe0000000000000c00010094040000000000000c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r9, @ANYBLOB="080003"], 0x80}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) syz_emit_ethernet(0x82, &(0x7f0000000200)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x18, 0x10, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x10, 0xf989, "6080356e793ca9d55b8ef24e"}, @window={0x3, 0x3}, @generic={0x0, 0xe, "04f6fea52eb715ea7022d662"}, @sack={0x5, 0x1a, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @exp_fastopen={0xfe, 0x4}]}}}}}}}, 0x0) 11.179862445s ago: executing program 6 (id=4331): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000003c0009000000000000000000030000000400000008000900", @ANYRES32=0x0, @ANYBLOB="1b9bffa73f3ce081e9a0993b1d440040c56ce704802c1e36201395701a0b541c229debfa69ca0afc30940b8b03befcbf439443a14bcf9878dcff52ea6723d06e6a19"], 0x20}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, 0x0, 0x38}, 0x0) socket$inet6(0xa, 0x3, 0x3c) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f28000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r3, 0x0, 0x0}, 0x20) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1f, &(0x7f0000000340)=""/61, &(0x7f00000003c0)=0x3d) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000000075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a30"], 0xec}}, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x3c, r5, 0x1, 0x70bd2e, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0xfffffff1}]}, 0x3c}}, 0x0) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYRESDEC=r1], 0x78}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r8, 0x112, 0x4, 0x0, &(0x7f00000000c0)) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3014850, &(0x7f00000001c0)={[{@quota}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpjquota}, {@norecovery}, {@dioread_lock}]}, 0x3, 0x4d1, &(0x7f0000000b80)="$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") setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, 0x0, 0x0) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r9, &(0x7f0000000f80)=""/4096, 0x1000) r10 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0x28400, 0x0) ioctl$VT_SETMODE(r10, 0x5602, &(0x7f0000000480)={0xc, 0x5, 0xe61, 0x86, 0x8000}) close_range(r6, 0xffffffffffffffff, 0x0) 8.407263922s ago: executing program 6 (id=4338): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x402, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000100)=@assoc_value, &(0x7f0000000280)=0x8) 7.288504736s ago: executing program 6 (id=4343): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000100)={r4, 0x2, 0x6, @local}, 0x10) close_range(r2, 0xffffffffffffffff, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000002880), r1) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000002980)={&(0x7f0000002840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002940)={&(0x7f00000028c0)=ANY=[@ANYBLOB="60000400", @ANYRES16=r5, @ANYBLOB="040025bd7000ffdbdf254c0000000c00a60001040000000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000029c0)={'wlan0\x00', 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000002a40), r1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x3, 0x403, 0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x200000, 0xfffffffc, 0x760e, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x10000000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xa9a4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xedc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x80000, 0x0, 0xfffffff8, 0x0, 0x0, 0x79, 0xfffffffd, 0x0, 0x0, 0x0, 0x2, 0x47, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x7fff0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x200, 0xfffffffd, 0x0, 0x9, 0x0, 0x20], [0x0, 0xfffffffc, 0x0, 0x6, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0xffffffff, 0x89, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0xfffffffe, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xfffffffe, 0x351e, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffff8, 0x8, 0x0, 0x9907], [0xb, 0x1, 0x10, 0x0, 0xc429, 0x0, 0xfffffffe, 0x4, 0x200000, 0x0, 0x0, 0x10, 0x0, 0x0, 0x804, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x2, 0x0, 0x4, 0x0, 0xfd32, 0x6, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0x100000, 0xa]}, 0x45c) syz_emit_ethernet(0x79, &(0x7f00000004c0)=ANY=[], 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r11, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r10, @ANYBLOB="01e5c300000000fb04003b1c210008000300", @ANYRES32=r9, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001100)={0x28, r6, 0x5, 0x10, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0x4}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x8894}, 0x0) r12 = socket$inet(0x2b, 0x801, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r12, 0x0, 0x41, 0x0, 0x68) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000010000100000000000000001822fc790a38000000050a01020000000000000000010020000c00024000000000000000010900010073797a31000000000ca704800800014000000005140000001100ff0000000000000000000000000a"], 0x60}}, 0x0) 7.012646948s ago: executing program 9 (id=4344): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000780)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_WRITE(r1, &(0x7f0000000200)={0x18, 0xfffffffffffffff5, r2, {0xb}}, 0x18) socket$inet6(0xa, 0x4, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000100)=0x4, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, 0x1c) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x348, 0x148, 0x4c, 0x1a, 0x0, 0x73, 0x278, 0x258, 0x258, 0x278, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x148, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0x7}}, @common=@unspec=@connlimit={{0x40}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a8) socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000000c0)=0xffffffff, 0x4) r4 = gettid() r5 = socket$kcm(0x29, 0x5, 0x0) r6 = syz_io_uring_setup(0x50b, &(0x7f0000000400)={0x0, 0x4db9, 0x20, 0x20, 0x2c5}, &(0x7f0000000340)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x40, 0x0, r5, 0x0, 0x0, 0x0, 0x10}) io_uring_enter(r6, 0x23fb, 0xc54e, 0x4, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r9 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r9, &(0x7f0000000040)={0x1d, r10, 0x2}, 0x18) sendmsg$TIPC_NL_MEDIA_SET(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4008c14}, 0x40) recvmmsg(r9, &(0x7f000000d0c0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x10020, 0x0) close(r9) 6.585418804s ago: executing program 4 (id=4346): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x50, 0x2, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @empty}}}]}]}, 0x50}}, 0x40) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000140)=0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) (async) sendto$inet6(r1, &(0x7f0000000580)='B', 0x1, 0x40020, &(0x7f0000000680)={0xa, 0x4e23, 0x3, @private1, 0x800}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={r3, 0xe}, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_TABLE={0x8, 0x3, 0x9}}]}, 0x30}}, 0x0) (async) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x101880a, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1, 0x550b, &(0x7f00000079c0)="$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") (async) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000000)=0x200000) 6.345904396s ago: executing program 6 (id=4348): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x402, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000100)=@assoc_value, &(0x7f0000000280)=0x8) (fail_nth: 3) 6.233079952s ago: executing program 2 (id=4349): r0 = socket$inet6(0xa, 0x3, 0x2f) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) connect$inet6(r0, &(0x7f0000000a80)={0xa, 0x4e22, 0x6, @remote, 0x751a4693}, 0x1c) 5.803809714s ago: executing program 4 (id=4350): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001200)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, 0x0, 0x0, 0x0) 5.13729798s ago: executing program 9 (id=4351): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ed50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000dc0)={0x38, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x38}}, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r5, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) 5.115817814s ago: executing program 2 (id=4352): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$inet(0x2, 0x3, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='net/raw\x00') preadv(r2, &(0x7f00000001c0)=[{&(0x7f00000017c0)=""/4108, 0x100c}], 0x1, 0x0, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r4, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r4, 0x26, &(0x7f0000000180)) fcntl$lock(r4, 0x6, &(0x7f0000000000)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r7}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r8}, 0x10) setitimer(0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000080)={0x0, 0x21, "f732c5fa8a591fe2f3d8ddc7ca3ad05db5a8a756a57c76450ae09cf977183a3d6c"}, &(0x7f00000000c0)=0x29) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) setsockopt$MRT_DEL_MFC(r1, 0x0, 0xcd, &(0x7f0000000240)={@dev={0xac, 0x14, 0x14, 0x37}, @local, 0x1, "6927ef1bf6214a9b68084b7a27a7397bc6eeaf324e22c727f6fa7b79a1579bff", 0x8, 0x2, 0x8, 0x40}, 0x3c) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000000)={'netpci0\x00', 0x2}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001540)=ANY=[@ANYBLOB="140000001000010000000000000000000202000a4c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a300000a228c290b63de8c98fbbf9ab1f0000000800034000000044140000001000010000000000000000000000000a"], 0x74}}, 0x0) ioctl$TUNSETOFFLOAD(r10, 0x400454c9, 0x13) ioctl$TUNGETSNDBUF(r10, 0x800454d3, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000100)={r9, 0x1}, 0x8) socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) 4.941696011s ago: executing program 5 (id=4353): syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) (async) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async, rerun: 64) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async, rerun: 64) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @union={0x0, 0x0, 0x0, 0xb, 0x0, 0x2}]}}, 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) (async) mount$bind(0x0, 0x0, 0x0, 0x101091, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(0x0, 0x0, 0x0, 0x31001, 0x0) (async) r3 = getpid() mount$bind(&(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x1041, 0x0) (async) r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) syz_clone(0xfdba2180, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r0) (async, rerun: 64) r6 = socket$packet(0x11, 0x3, 0x300) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'veth0_to_bond\x00', 0x0}) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000000)={r7, 0x1, 0x6, @broadcast}, 0x10) (async) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000040)={r7, 0x1, 0x6, @local}, 0x10) (async) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdc03, {0x0, 0x0, 0x0, r7, {0xc}, {0xfff3}, {0x6}}}, 0x24}}, 0x20040000) (async, rerun: 32) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async, rerun: 32) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r9, r11}, 0x10) (async) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x44, r5, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000800}, 0x8084) (async, rerun: 64) umount2(&(0x7f0000000040)='.\x00', 0x2) (rerun: 64) 4.819663525s ago: executing program 6 (id=4354): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2, &(0x7f0000010140)={[{@oldalloc}, {@noquota}, {@lazytime}, {@jqfmt_vfsv1}, {@i_version}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2004}}, {@stripe={'stripe', 0x3d, 0x20}}, {@lazytime}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@usrquota}, {@bsdgroups}]}, 0x1, 0x562, &(0x7f0000001080)="$eJzs3c1rHOUfAPDvbHb7/vs1hVJURAI9WKndNIkvFTzUo2ixoPe6JNNQsumW7KY0sWB7sBcvUgQRC+Jd7x6L/4B/RUELRUrQg5fIbGbTbbObt26abffzgWmfZ2aSZ77zzPfJMzu7bAADayT7pxDxckR8k0QcbttWjHzjyMp+Sw+vT2ZLEsvLn/6VRJKva+2f5P8fzCsvRcRvX0WcLKxtt76wOFOpVtO5vD7amL0yWl9YPHVptjKdTqeXxycmzrw9Mf7eu+/0LNY3zv/z/Sd3Pzzz9fGl7365f+R2EmfjUL6tPY6ncKO9MhIj+TkpxdkndhzrQWP9JNntA2BbhvI8L0U2BhwutbIeePF9GRHLwIBKtpj/e40X8IJozQNa9/Y9ug9+bjz4YOUGaG38xZXXRmJf897owFLy2J1Rdr873IP2szZ+/fPO7WyJ3r0OAbChGzcj4nSxuHb8S/Lxb/tOb2KfJ9sw/sGzczeb/7zZaf5TWJ3/RIf5z8EOubsdG+d/4X4Pmukqm/+933H+u/rQangor/2vOecrJRcvVdNsbPt/RJyI0t6svt7znDNL95a7bWuf/2VL1n5rLpgfx/3i3sd/ZqrSqDxNzO0e3Ix4peP8N1nt/6RD/2fn4/wm2ziW3nmt27aN499Zyz9FvN6x/x890UrWfz452rweRltXxVp/3zr2e7f2dzv+rP8PrB//cNL+vLa+9TZ+3Pdv2m3bdq//PclnzfKefN21SqMxNxaxJ/l47frxRz/bqrf2z+I/cXz98a/T9b8/Ij7fZPy3jv786vbj31lZ/FNb6v+tF+599MUP3drfXP+/1SydyNdsZvzb7AE+zbkDAAAAAACAflOIiEORFMqr5UKhXF55f8fROFCo1uqNkxdr85enovlZ2eEoFVpPug+3vR9iLH8/bKs+/kR9IiKORMS3Q/ub9fJkrTq128EDAAAAAAAAAAAAAAAAAABAnzjY5fP/mT+GdvvogB3nK79hcG2Y/734piegL/n7D4NL/sPgkv8wuOQ/DC75D4NL/sPgkv8wuOQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAA9NT5c+eyZXnp4fXJrD51dWF+pnb11FRanynPzk+WJ2tzV8rTtdp0NS1P1mY3+n3VWu3K2HjMXxttpPXGaH1h8cJsbf5y48Kl2cp0eiEtPZOoAAAAAAAAAAAAAAAAAAAA4PlSX1icqVSr6VyPCoWI6OkvVFhTyPrtRrFfznOxPw5DoceF3R6ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCR/wIAAP//f14x3A==") bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x10, 0x2, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x5e, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000007000000080009000200000008000b"], 0x2c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r8 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r8, &(0x7f0000000100)="e5786a0d000000000000c83b", 0xffffff9b, 0x0, &(0x7f0000000140)={0x2, 0x0, @multicast2}, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00', 0x0}) syz_usb_connect$uac1(0x1, 0xd9, &(0x7f0000000440)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc7, 0x3, 0x1, 0xb2, 0x50, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x2}, [@extension_unit={0xa, 0x24, 0x8, 0x4, 0x2, 0x7e, "1df1f6"}, @selector_unit={0xb, 0x24, 0x5, 0x5, 0x7, "0c157e53e87f"}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x0, 0x2, 0xdc, 0x4, 0x2, 0xb}, @extension_unit={0xc, 0x24, 0x8, 0x4, 0x3, 0x9, "d53bba96a0"}, @mixer_unit={0xb, 0x24, 0x4, 0x1, 0x0, "df866e6f671c"}, @feature_unit={0xd, 0x24, 0x6, 0x2, 0x6, 0x3, [0x3, 0x1, 0x7], 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0xf, 0x2, 0x1, 0x0, "b858a636"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x2, 0x1, 0x3, {0x7, 0x25, 0x1, 0x80, 0x7, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x4, 0x8, 0x1007}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x50, 0x1, 0x5, 0x7, "77bac4923230e863"}]}, {{0x9, 0x5, 0x82, 0x9, 0x5df, 0x8, 0x46, 0x8, {0x7, 0x25, 0x1, 0x0, 0xf, 0xede6}}}}}}}]}}, &(0x7f0000000900)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x201, 0x2, 0x6, 0x10, 0xff, 0xc8}, 0x7c, &(0x7f0000000340)={0x5, 0xf, 0x7c, 0x2, [@generic={0x6d, 0x10, 0x3, "959f912e404de95f7dab9c835d350677811db92de4760d60e7584deff37fde9a60945d9a93f4c9d76b0b678eb0eea3504c6519cdfdeabf66de5e18eabff626f65052ec9640718d8f3cb83a158ffb866e2a4ac6d89bb94edf82ae33871164d34f24f768498a10c71a1967"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0x2, 0xf, 0x7}]}, 0x5, [{0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x1c09}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x438}}, {0xf8, &(0x7f0000000600)=@string={0xf8, 0x3, "937f3deaf87dbddf67809636e19398e10ab6f4eab612e075fe02f4e7bca1340cc7c0101a22719e978d4baef6bde0369fae01342f60642dd2813a1308fec1a260c6ce8afb53a6b6ae338475460142a3988e5d73a374146c693081d61e0fa83064f61c234177af2c4e3ce4e81620d1ee29280dad22b9c0281b127b2987c6e9675c96ace58b4f18766814a20c5941462125519ed4357627439da193b315c0c719b349d5ac65bfba09cee312c2356feb90c8230f6251f48c2b419467a0c79ca0c0b6dfa03646dc87b78e0b868c6447b0f2cad3d3fe8ecddace187979c525c4be52ce81a6020117c71d39a0297366a4b2dc14d09a004fbc55"}}, {0x94, &(0x7f0000000840)=@string={0x94, 0x3, "7b45f597e2cf3a6934e261be31c2ba2be87939d9ea99155722946e7a10f0c1757fc359788f0b0a342b4f063aecd71336393dbe0ae391000fd9a10c994baf331ab8d6807c2337d257c87ecea1004f4c519103f9e8eb453e884f8e86d69e117d79cff74d43e1fd698c1a60d4ad10430f00f4a8a7ba0d35ea9ff8a1ac7fc10abd40ab5aca5b88e7c12c6d99f77aa9a47f44e1c4"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x438}}]}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x100000, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e00000000400002800600010000000000340003800c0001000ffe0000000000000c00010094040000000000000c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r9, @ANYBLOB="080003"], 0x80}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) syz_emit_ethernet(0x82, &(0x7f0000000200)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x18, 0x10, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x10, 0xf989, "6080356e793ca9d55b8ef24e"}, @window={0x3, 0x3}, @generic={0x0, 0xe, "04f6fea52eb715ea7022d662"}, @sack={0x5, 0x1a, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @exp_fastopen={0xfe, 0x4}]}}}}}}}, 0x0) 4.543164511s ago: executing program 5 (id=4355): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@typedef={0x7}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x5f]}}, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r0, &(0x7f000001a240)=""/102400, 0x19000, 0x80000000000000) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffffc, 0x2, 0x1, 0x2, 0xf, 0xfff7}, &(0x7f0000000040)=0x20) 4.179820985s ago: executing program 5 (id=4356): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x260, 0x0, 0xa, 0xd0e0000, 0x0, 0x100, 0x1c8, 0x1d8, 0x1d8, 0x1c8, 0x1d8, 0x3, 0x0, {[{{@ip={@broadcast, @multicast1, 0x0, 0x0, 'ip6tnl0\x00', 'veth1_macvtap\x00', {}, {}, 0x11}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x4, 0x2, 0x1, 0xc}}, @common=@unspec=@mac={{0x30}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x800}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x48}}, 0x20000080) 4.017701439s ago: executing program 4 (id=4357): socket$pptp(0x18, 0x1, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$key(0xf, 0x3, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) socket$rxrpc(0x21, 0x2, 0xa) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_io_uring_setup(0x24fc, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) socket$tipc(0x1e, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ_FIXED) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 3.889027894s ago: executing program 2 (id=4358): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000100)={r4, 0x2, 0x6, @local}, 0x10) close_range(r2, 0xffffffffffffffff, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000002880), r1) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000002980)={&(0x7f0000002840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002940)={&(0x7f00000028c0)=ANY=[@ANYBLOB="60000400", @ANYRES16=r5, @ANYBLOB="040025bd7000ffdbdf254c0000000c00a60001040000000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000029c0)={'wlan0\x00', 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000002a40), r1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x3, 0x403, 0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x200000, 0xfffffffc, 0x760e, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x10000000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xa9a4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xedc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x80000, 0x0, 0xfffffff8, 0x0, 0x0, 0x79, 0xfffffffd, 0x0, 0x0, 0x0, 0x2, 0x47, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x7fff0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x200, 0xfffffffd, 0x0, 0x9, 0x0, 0x20], [0x0, 0xfffffffc, 0x0, 0x6, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0xffffffff, 0x89, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0xfffffffe, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xfffffffe, 0x351e, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffff8, 0x8, 0x0, 0x9907], [0xb, 0x1, 0x10, 0x0, 0xc429, 0x0, 0xfffffffe, 0x4, 0x200000, 0x0, 0x0, 0x10, 0x0, 0x0, 0x804, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x2, 0x0, 0x4, 0x0, 0xfd32, 0x6, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0x100000, 0xa]}, 0x45c) syz_emit_ethernet(0x79, &(0x7f00000004c0)=ANY=[], 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r11, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r10, @ANYBLOB="01e5c300000000fb04003b1c210008000300", @ANYRES32=r9, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001100)={0x28, r6, 0x5, 0x10, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0x4}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x8894}, 0x0) r12 = socket$inet(0x2b, 0x801, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r12, 0x0, 0x41, 0x0, 0x68) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000010000100000000000000001822fc790a38000000050a01020000000000000000010020000c00024000000000000000010900010073797a31000000000ca704800800014000000005140000001100ff0000000000000000000000000a"], 0x60}}, 0x0) 3.631477854s ago: executing program 5 (id=4359): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x86, &(0x7f00000001c0)=ANY=[@ANYBLOB="591a1d9a2bdb0171c22500e2ffffff0029907800000000e0010000000000649078200200000000000000000000bfd885dd2002c02142c4391145badd28007f0ffc0e896f38da0000000200000096ece3eb6bf21c2bd010341dacf9515e15b67daf000000588ecf4afe9c0000bb3b212195c4b058ef92da6daea381706500000000000000"], 0x0) sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x84}, 0x40081) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0xff, 0x0}, 0x40000000}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff0100000000000000000000000000010000000000000000000000000020000000e7ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006ce11bc3008b071000900000000000000000000000000009444000000002000000000000005"], 0x310) r1 = socket$inet6(0xa, 0x2, 0x8) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x400, &(0x7f0000000280)={[{@noinit_itable}, {@orlov}]}, 0x1, 0x4ab, &(0x7f0000000f00)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r4, @ANYBLOB="08002600901500140800570080"], 0x2c}}, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20) r6 = socket$igmp(0x2, 0x3, 0x2) r7 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r7, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x70, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x400000001300, 0x400000001330], 0x0, 0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000044f50000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000"]}, 0x108) r8 = socket(0x200000100000011, 0x803, 0x0) sendmsg$inet(r2, &(0x7f0000000600)={&(0x7f0000000380)={0x2, 0x6e22, @multicast2}, 0x10, &(0x7f0000000900)=[{&(0x7f0000000580)="46bd535386c5e6849fe76446aa154a1d2f1f69fb623339cd580127db027772ec81770ecde14c7ef53e9dce2b745cd1cf49799f095804829ce33c5b6114", 0x3d}, {&(0x7f00000007c0)="0830cb438cddac7e38958a521a4128a061bc0a3b9e1d37b8e17892e041e2ee85564c9d9a948f428b74cd9362deaec568ac7df760c7c694b7a38d1abc41fbe7eb80463be0a91d1735ce72fc96bcb25f2b78b6b086ecf4c7fe9b8d8e5429c52ed8d18ab237a10f5469469e7f91074b964d5205da657a98d0e70ce13a9e5ef842eb8e52383b30a60ae256f5aabef8c99fcf910f5a1a2c284ba8b3a032642aff195803659936e7f7b346caf31e98eb96fe667a69041cf61a227624ebb13f211e8c78ca12902d380a1479e56e37a27de15258fbeb9e79dfc7d5ddeeadaee047b0291522a361739975e783f3af1c97cff4695bb48c3c89c760a0bc3ab9", 0x54}, {&(0x7f0000000980)="4455cd90a1d63df3c4e5426a5ec8489c036404ad7acaed8ed2d2da401293138ec8ad219d1940813b0c0a505f54727975bf8b72852ae96b6c95768918bd4d41f45a56ff1afbbe4397ee57f5f40e4b96d5b820cd14ca6a9d22240893ca3d92dfd48a4013867d7bcdd40fa1f16d290c74de8a33c4bbd0bb2752bcc23abb58bf05a5095903c6f4b17daf0a26429b0748862533a550e90c07200ec41ed9d8581beb8b12cd10f4de5a09cdc0f3a4e890700bf20de7a2", 0xb3}, {&(0x7f0000000700)="5855ca685c2bfb03d7c87e9138686e5135e0f9dc8c3f074b6512b2743aa5a2b6f41ef4143330f7b18eff88973d8f40d029fea887b6c5839c271f04e1332e669998eb4a8e4d54678d1a46d9d9ebb4d5c1bbf4e4291a0db2a04274c310aa7b00a90931904845dc0b8abdd086ab5bf03f146288d7ac86a8b5483ce69892b041f3adf9316000440323232e6f158b976eaccc3efc30b3213860cd0ff280", 0x14}, {&(0x7f0000000a40)="97d6d523b50027eef2acb291a32445beb9b818e070d198c5a985b71a7b67e3f4bcbc340a100a3063a3f1ad2385e2b4c92c34588743a8f06ddde69f5a415752622bdfe11146e0661aa936a71c0ae0a5e44a850ce225b9171f12d396e5805405dd1342d6cd5e43575ce21999bcf6c8a2f28735df4c602f9cb9819d3e5b2e41b6f1ff1d974d75d7f2b976257f4b697bea14aa734c0b83c8c5f18a5e", 0x37}, {&(0x7f0000000640)="895a27c3b41a5de9e383ee840b0a481fbf366f9a66e2384df8b073efbc208a800de5dbafdfffe16eb4a79893706d4b0c2129973e81536bc34dc01bd4dd0a33e32f04bb38f8a0a8ec3e911b8c4b869c93e1c19827acbd52e4b751a49b1db0ad36fb9a4e249fd2330be79a76bb591eff955a8a48df906adc8f2f47f327ac", 0xb}, {&(0x7f0000000b00)="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", 0xe6}, {&(0x7f0000001e00)="3df74115606a85d51c666caef767dfb398a1edfdccc0ae39acffe4b0265fb0d87480d2dae329f832254128d383ddbc3968c8f819d59d212dfb1abc85a9eaf3925dffdd402fb57858fa3853e87ebbbe892628abd4204dd2ebf57d5b819f190bec176419af771a6abb4acc656eaa47968ce3e09bff79457b1dfdcf42504e1a45c20d6a61ecec0ab7302a7b2baba513a02f9b431b554fa65595b80cb72ab6d7d28f04f8e338e2e03ca011e28b6f91e14542b1028ca3bb0ede91ff9a55e081e3808ef8ed8252eb1b2783969ae1d5bd5514061bd9df73fffba2b3c687153d293d5defe6530f948ef0164897cc4464f1ca1bbd16065ae24ed57611750acf62519811d4eb2f1e9739f3c7f394a3ac1278ddf8aa2e6e58415a638da8038c7cf8466513abf294d1a11f05217b499e806f235df786ad9835d202d21ca5e5b7e44c19429775514938cab19a46a7e4159523689ea7afc7680fe771925869051dbe359d48e7f2e1ad6c53c50db8de754fa5a136b94bf4d09a524e995da9d62bfe822e6179123c5ff3216ee41460c14f4366a6c765aa6f90aca8a93c399010f8df352b997212771ead29adcf7b962de7e0a80a41f171879e8d2d639b55a4e2d3da3ce8f916a4171892a2f9c7bc2022c183d87b47eae71c30f135a479ab39b0a15a9d22125298015707cd5acd91dce7ec5f0584a2670c75d942a9b0c8e49ce62192237f077d87fe56a68e38c82e4611dfbe4f23a10f67ffaeb663733b1f6242cf882dd2c0e560e73f1320007d7f10cee467ca0580749072d75c08b405c75a78fb9de5cf8a376bcc4f47a12d3d898957ee9cad8c1ed9cb3ebc3cfc83dc5cf203bb64de322865d3e4a7097d7051f66775d072ccb59c7cfb8094cfab3914734664de5900cc01e691c074a27436789290ce1754d1050c1eb37b04580cf70c06415cdc0bc80f91baf8086e6dedd85fb4918a494bc8b4e657fc39a0c98149fba2678cab436147244cde88ebb73ca47e0510eeaf3949e72f8fa287f7b3921c3e42d91ef103d427958cadf48792de22af30db632bcd054235b2823344725c1d00232694f4a389bc5c74f6116ebd7b8b900485adc9ac01b4604cbf3900e34a4946a7bf45ac349fd106219e5fec31094f8e63a3f9ddb15deb27d4ec7bc11e8720fb2033d656f9a5f442de6377c5e7f097a41b10f1444001d799a5f482d3aa2aef03b49bfe62bdfeff2530adb66ddbd43576a34f87a667775610210f0152004ad7d4df9f6b014d6a121bb028ed146570cb3e35ee90025fc9232af86d3f58aa75770895377586fca1ea48a49304c43d22be9152ad2672722f30ae386ac0707e555e6bb71e97a8078066fcce4adee70c1d4656b380dcdc50e498006f41af233e06d50127dc3cec3168ab6142cb017a192276319f04296157aa9b8d3ffb3da1303c1a5b3f41d44360f99eb54829a0e06e202b9997510d749caecbaecdfb949f9b2016e034e758880695faca0563d8cba2dc110667c980c984afe6bbed3ecf5022d682fac81344537ad36f3dc0d644838f7855b1d8071f355c7d475b4f533cb96e98b97c4102318467bf085521a34b2862e2f31d49c57abdb1e09f0f8c305b6dd14e0f55d8e61f0fd33a383c71084e157200c857e4ae83d2cc52eb86ac2300491d1a759298aeea2de82e545b95c5bd86f9d8b30092ec25123389c0c313e24f41c1c0fe1a8356688b50a45796811d12c9edeea755d32dee0974bc1de3f74edead924531ba9d185f35dc1de57f9230b65297757f6792f6f390be3774c914bdd05a87102e7c72fce0352a673c5685476aab8e089bceedca8b1f0c14e0f6b281c96a62b71bcd0023fd50d6e3d3188d55e74cdb3f9e1cf1239692d2edc48a6c8c5b8b5dbf1b53e086ba849dac447269e2c5612f4485b3d62b3e1258bd0922bff31bb6dfac7979d76cfbc3bf18d9bb5261c1f934fa29bd01eecbde851c2055145aa42e72ac289add8e71ae5c83e7c1adeb1d8d7620dd72f8d2c3d06cbf610d29ecc96d9d93fce88abb047d78c095c9ea23e8e839b5bf91a38af32b2ec0c8f950179967b1e8db679b904fe21033aef071ca4f2a15f636a2690bfcd003a7b578a683701213c5c387f53e2f3c7487d8ce0be463441d5d8467a92d1bbeff0047ddecd18860c70f7d159f087cf032a97f185c18820d7c45a1812a996e52645b1575c145b7e901ed7353ec847292a07211ae419068d687a90ece4edc004e356ee443593c782653b141c6f82e10c7fa7d4e07566e0774aed4f0ba5709e8122f3939846ea683f59e49a0c5f5aa6f9f0bf773514c60d489d60b4611cae5e197718bc6a7b7e7005d1a4bdb5da55a77d17380e625b9ec25470a83b28f635e58f65e433fd5007c3c3f63f91ba5863d253ea3dcfd21e46d7059e6f244d4efaaf161fabf1be41d27dc5780f2310093d40e5bea3715e99d9b40fb4aa406242d154d01c3b0423a20cd382079254c0f88881ad00a3be42681f599e313db1da7357811fb8e5f0e84f10c2d815e93f01d16945a03ed535bdca3aa5882397b0f0f02c41ab079f26d93faac5a43cd7b5f25d79224bef7bcf19793d30fa5d8a8434680db8de74fbe5508fd1f3dfb1bb964abe7ae12dc6b1aee76730f8e109bd319d3bcecbeceff6e4762c426c88e85dc5063b6373e12796c90bfccd95212fe3a188d8f80ca7bb4ebed25d216ca3741f2d94735c736b77b45a353fd9f33db9cb867cd813cec49bf380a53b21478830625d792161ee3f5a3a3b5a8b7c6de6c84e8adf1d1c54f7dfcacfebd15ff2450055f6b1c41eb6db179d47b6e45df211152a9b032ef5fb294770b8c294441c9b3a7723ee3b39ec4aa84ab72ef263d5aaf41579844e14c58878f6c490d134b6236760fc4a8623af689bb2328f9a8daf467361d2593a709bf89c4b64dabf43c12096b14e3aba051a72ae327e2de5d4ad7703a041dc931d3622865ac35971b03e6226b9b2f3885b018016f278d61ec61645b599f210dd9026c12ddb2f8db47fc70562019e8b8db39dcf1777e87a47b473345d3265d7bfc258aa36d8fe2510584c25300728e051102136aeec69a2fb53bec52e14fc0282435156b266088fd9076c5878ddd7e5ffb9104e6c70d3f60c1b9892657f7e02e9cfe30122fdd27244f3bbc7db624aea39c41645b756ffe4a1dea89fb5b4c7136012283df3c407c3355463c3b5c2e07568d663025155e3145166a89d3365a02a1420b9523edc380726c627dbda85cfd1e82068afc638c8e2d7b83a44829bae4b452549bf149d70845208432755a671eb968b664aac0d9a0eb4735385cad713910c1ee526bdb266202ac966b50958714a6514ba46d6449d2b68cb4e6f9fe884365b196aba6617eac7e6d1ae2c2ef4abd37a134065a66398e9c85a07ea9d13029eb7df5e956e3e5118250d68b01c0334c350e21e3825f5f27752514299bfc43b80fe19eea622944ce984ff337080c45fba8d63711808615d6fc0c1e87605aa6b03b4cba6003550e7004878a470e03a85a9766db10aa7fbf9cf4fda14dbab7ceb13e2466bd19476395d160e822cbed3594a6fe38dafe24df9479d28922d8f4c3fb899279afef5d1fb1e35a8fed8ff90eed18c0250138c6a36b37384bcf01a6564ecfe3d18487a86149a42d9fd3aaa895d6259fbf0515c6c4454e254195841f0a9a0d181a4bdcb64c03e42d10e8dfceeb55ecaf8698d6164d1688400745ada82dccf6f3aad333d9ad57e602efeb5c08c330a6a0a71f66ca89775459628118e014dd644061bdca11b3e583d997a9e9beb5dbc93c241fcd7ec5c46fcd2846c506defc7d087149492e95f742780b3795362b7b3ebff9a0598ab6a5bbf9b34e90a82d52d5aa4349ef327ff01ef87d74a77a435f8b7428abd881ddb2ec4bbacf1b35602357bcf17f7e3a6110a278c0f54d2c46d4c24037d1abdfe1924b0c4c3b031bae5db8db13a4015eaddc24ef9710afb57323f71a966076fd9d80739ce3b54486da3d8917f0383015eec7ba72f4c9852554f9ea10482dfaf6a6ac678fb79b2ff619cbd848229e415542f89a94617df2b2266027734840603ae7921a4eb6e41f3ad18d97f844a9859a96bf82ebbdc4ee0aa54b4efd7ea637c067dbd369a6381416ec7782fa3b98693dd3cf97d98bd7dc80fecd451ba50b7da3b19f2cb811f3575af7c59db78f8ffaf4e0c870053879db4c1a854ec9acdead93014c84f65e04361d79912cd46aa001d8363513d5dc763dda6564f409b09eaf28c11b76be762746d7a32fdc815e7e8fbd935f03c2d6bc8f4f81953178a073dedd61d735b7a25bf191e555b6612b9afaefae7ae13e43544748175633efed942a1635a9e94376f86b5666ae6fb17a99b6856ea108fde4f2b8ede171a365279bb7efb2e2c55cc0ae8053d6921d50cd62745d8c770c4fb18288648ac0c9102221c321eabbca24b63971b5aeb0f3a122389e80ebcbeda93c46dd2d27ea4dbdfa7c702905cdf7cebabe6b4458742e2081054f990a0b08733d50e1aaed111642ff515e2e8322f4d96f10f6e61b0be6606681c1caa796cc3ca1f1c243b0e474235066a5480a6909774be52108191078f89ce0b75bebe74e73e1bb0cf94e1f31d4f4d06b8b4f8b8e7557f55652b8c9a555c67aaf630e45f40d685fe6fbb26c6c01a12cfc5481032c2b089cc26e4cfe9ea2c1eaa174d4a34f40ef37921c0c2314af018524b1956973948dd4fc759bec007638dcc7a90753a167b81d72afb5f223985d521b93375aecc3cd00271910382e95e4a5d51900545b85510edbc72899d35422784155efd784598ab59d36c2439bddb4248070fd0faa613566efe4d9a5ca890299353b015e68d15e81cdb76ab1013ef52a915ff0c040eb973fe4bf3d4384774d7cfcf645719bc00e6c47fa76c55a38e140a7a0261eb7555661c31d47437e2fa0c7bba95dc1e58320c02b94d148dcb9cdd6003b078d54c63c39efc654670df69fd4a01f36be50f4abf6d2f970d11a6c6d5d0e3f5ae7641a4d3375551ffee54a61441e61023afd0501bfbaddc15024fb909c20dd1df10965a4e4e9ddf39ac84b816f7ea3c0589aae4525550cad39f77e50035d5be6a83e4f0acaae61da90f6b014e80589c57d12188efff415de92738217ec10aef23b1dc37f5d4fa8af42b0cf08c38336f0360cfde1429fc01cdefafeef1c68f0cfd016c8add2feb48cf6328972df3bb51ae752205aa0bc559348564522b81ea3dd095c4dc3176eae290e1629d9ad1a4342b51c009a1893bb525b9452d9c1d9886e52c14c4296d1d2bb40d67c5aa462915bf0426e8fc81771cd3ae4a1673f47a7754a6a21cafeed527e1e05d7353eff0609ff5b0f85a77d483b83878ffbef6dab2b3f318e448ca1bf0b871419becb8b91614fc0d32b431a9160065e4ccb220fc5f8cf779ef7c4026bc23673756236e42b462669544ac5ed02ed6c93652c39ca698a0ecc7c69521fa42cdf0eeb4fbc8eace6751e9645611c672b7fe5bd2bc44b13ceb98b7a7874fba7824a9314ae144191b11f66265f42cb9ba74ee572baaa3757d94077fb34745face4308efc8413cdfe594365a39caa4799a18d6c6b6639884209bc4e0b3ecd507248b6e1b4983e4b56fec9cc294dea317ee758a3facfaec61b989d3b6e0e76dfbb5426b0b6cb1b17c960f3ab4c01e0cd9415561d8ba1da1560a0065277d47eacf01798c3e63b9d7a4906de1bc9a397b65803805dfa01c69df0c749ebf34f6a67bb8bc0fad50bf7e5b31cc6ff3ffb8c87178565bff55a656cb1af18a51734ee6161d4df35ff1387cc6c86dd53985f22", 0x1000}], 0x8, &(0x7f0000000580)=ANY=[], 0x38}, 0x20000081) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r8, &(0x7f0000000100)="4d01000000000000002f00e566a5dea20414090b", 0x14, 0x0, &(0x7f0000000440)={0x11, 0x10, r10, 0x1, 0x2, 0x6, @local}, 0x14) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 3.271760648s ago: executing program 2 (id=4360): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$RTC_PIE_ON(r0, 0x7005) r1 = epoll_create(0x10000e9) r2 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r3 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) syz_open_dev$vim2m(&(0x7f0000000000), 0xb173, 0x2) ftruncate(r3, 0xffff) fcntl$addseals(r3, 0x409, 0x7) r4 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000100)={r3, 0x0, 0x0, 0x1000}) openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000080)={0x30000009}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x1, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x4, 0x400000000, 0x4, 0x7fffffff}, 0x0, 0x0) 3.164824446s ago: executing program 9 (id=4361): syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x90, &(0x7f0000000080)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xdf0, &(0x7f0000002640)="$eJzs3ctvXFf9APBzx3acV39xGvdnE0JsGkrMI3aTWpQdrhQWFVKF1D8AVSEtKW55pCxapVLSBVsilf4BVF3DgkfJolLUVVA3IP6Bqis2oapUIEJqjWyfMx5/PaM7fo7H8/lIZ87ce+6955yZe+/cuY9zEjCwGiuv8/OTVUpv3Xnz8oOp4f8sj5lqTjG98jqchxZSSiPN+VIaC8tbGF2NP/vkxpXW+PMcV+lSqlLVHJ+eud+c91hK6WaaTnfTWHr244nbL37w9OJ7p26duvz6zL3dqT0AAAyWB99752d/Of/dGyf/+7uzC2m0Ob4cny/k4eP5uH+hWh3OUfN/QNUSVy3DxaEw3XAOjTDdUJvpWvMZCdMNd8i/5Hc4zBenG63Jf6hlXLt6Qz9b+x9fNWbXDTcas7Or/8mXfTh0qJp9+dri89d7VFBgx306lU/xCUKvwm/Pr66MvS7HXod9UOelE73c+wCsidcNN7gZzyxsT3Npw93lf/+pRvv5YQfs9frfIf8jPc6/1/Xft/m/c8seh51zUNemUq+yHR3Pw/E6wnCYb7Pbf1levB4x0mU5O11H6JfrC53KObTH5diqTuWP68VB9aUcl8/hbEhv3X7id9ov3zHQ3gPn/4V+DOUHutfl6POw1OP9D7B/xfvmlrKSHu/ri+mjNemHa9KP1KQfrUk/VpMOg+z3r/wq3a7W/ufH//SbPR9WzrM9lOP/22R54vnILvNvnsY5tMn8dij/png/MexrM/8+8+kv7v413v//ebj//1z+LR3LO4iywcXz6s17/8ODwY0O0z0civNQm+lX3o+vn64aX1tOatnPbCjH5Pr5TnSa7sz66cbCdEfzscjhUN54fHI0zFeOP8p+tXxew6G+I6Eeh0I5yjdzMseHQ31OdqpXOJF9KEw3ksOpUK/xUK9Hwnz/H+pVTa6vVzx/XsozEcbH6yRluvC1bfhdit9FfC7j0Ry/keO3c/x+jj9qk+8gKutjp/v/y/o5mUaq568tXn08D5f19N7QyOjy+KFfv3ttj4sObFO3z/9MpvXP/xxvjh9ptO4XTqyNX9lfXGwub/34Sx3GP5GHy+/Zj4aOrIyfvfKTxR/udOVhwF1/9bUfP7e4ePXn3njjjTfNN73eMwG7be6Vl346d/3V1y5ce+m5F66+cPXli49/+1tPPPnk/NzKUf1c67E9cLCs/ej3uiQAAAAAAAAAAABA16oj7UfnuK592/I8eXk+PT4fT38o31tZG0o7BuX5z07tupTnN0/uQRnZeXvxOFGv6wi090/t/+6DkI+mel6O/gg/ONr7MuxuWNizvJaWtOIP7A+97v+vtHtY4uMX/n5yOZTJ7j+1fn8Z2y+E7djv/c8dzPxHe5x/6jr/ne7/r9lwctf7v9Bj1tjW8v3DgyN/a8k2ne42/1j/0g7s+Oby/2POv9TmsdRd/ku/CfnHhkq79KeQ/9Eu899Q/zNby//dnH/52GbOdZv/aomrxvpyxPPGpR3AeN64+HOof2nbb9P132JHbXdy/jDI+qWfyc3ql/4/OynLLfvBvHtuXqcr7W/H/g42W/7S7nf5HXgkLL+q+X3T/2d/q+v/s6x/c/r/hAPnQ9f/9jIM7YMyCEIzLC0t9bTrk0Htd2W/6PXnv51jyO329bbd/HdCrz//OrH/z/h/Kfb/GdNj/58xPfb/GdNj/1oxPfb/GT/P2P9nTJ8Iy439g07WpH+hJv10TA8r3Bdr5j9Tkx7/v8X06Zr0szXpUzXpD9ekP1qTfq4m/Ss16Y/VpJ+vSZ+pST/ovpzjRt4VDlr9YZDFfiNt/zA4yvWfTtv/eE060L9iv85x+/5qTTrQv8p9HrZvGEBV+xY74vn2ch73jRy/neP3c/zRrhWQvfC1HH89x9/I8TdzfCHHszmey7G+IfvbL/9x+uztau0+vxMhfcP9pHF3ke8njc8DxHZiLnZZnnh9brP3s050mc9u5b/Fx0EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+kZj5XV+frJK6a07b17+1/h3vr88Zqo5xfTK63AeWkgpjaSUqjw8HJZ3c3Q1/uyTG1faxVW6tPJahtMz95vzHlueP02nu2ksPfvxxO0XP3h68b1Tt05dfn3m3u7UHgAAAAbD/wIAAP//f1LhJg==") r0 = openat(0xffffffffffffff9c, &(0x7f0000002600)='./file1\x00', 0x105042, 0x0) truncate(&(0x7f0000000000)='./file1\x00', 0x100002) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2, 0x11, r0, 0x0) read(r0, &(0x7f0000000400)=""/4096, 0x1000) 2.705987574s ago: executing program 2 (id=4362): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) mmap$usbmon(&(0x7f0000c9d000/0x4000)=nil, 0x4000, 0x2000008, 0x810, r2, 0x1ff) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet6(0xa, 0x3, 0x2f) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) connect$inet6(r3, &(0x7f0000000a80)={0xa, 0x4e22, 0x6, @remote, 0x751a4693}, 0x1c) 2.671654951s ago: executing program 5 (id=4363): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x10, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f0000000240)='./file1\x00', 0x800010, &(0x7f0000000280)=ANY=[@ANYBLOB="61636c2c6469726563745f696f2c6e6f7265636f766572792c6673636b2c6a6f75726e616c5f666c7573685f64697361626c65642c6e6f7265546f766572792c62747265655f6e6f64655f6d656d5f7074725f6f7074696d697a6174696f6e2c7265636f6e7374727563745f616c6c6f632c6e6f5f646174615f696f2c686173682c00b295c33d64584b8b4431047a78c2c8b04ad5eeafb1a23b0a9f449065bafab11f7669f4d6235ca22b0b30accc451cccb8c7f44e43573887b43eb29d37ac4a03fee57a842943435e8ebf677ad06133154ec71db2b958f413a04e3cba5110fbf8caa3ecd1ff269f48cae618a7e30e0b46f958e8f6df8aecca00fea88f0846fee2f01a09f4890fb42f5b7dc233f9863b8493a7675a56a5875cf2ea73136f04f0b9315ec66df7f5ed56de865262363a5d0d06eb87ab1eb4c71a3c5efc689832b91420bbc070b4c99900ad00859a089142aa8013204c5e06761fca", @ANYRES32=0x0], 0x1, 0x5975, &(0x7f0000000400)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) fcntl$dupfd(r0, 0x406, r0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000005, 0x3032, 0xffffffffffffffff, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @private=0xa010101}]}, &(0x7f0000000080)=0x10) 2.604223171s ago: executing program 4 (id=4364): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) epoll_create1(0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) connect$netlink(0xffffffffffffffff, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = eventfd(0x8800a6) write$eventfd(r1, &(0x7f0000000000)=0xfffffffffffffff7, 0x8) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000000)={0x8, {{0xa, 0x4e20, 0x5, @private2, 0x3}}}, 0x88) 1.692968657s ago: executing program 4 (id=4365): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x0, 0x6}, 0xc) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000040)={@mcast2}, 0x14) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000000), 0x4) sendto$inet6(r0, &(0x7f0000000300)="b0e97187542b490c44825694ab6f3bb381a4537975418ee23221543758482ffb6fb1d71a8a86a710b1e327e79b6efa12c5df0f1affd2c20945441ec61bb7615570a10b97d334b2e01b547bf43c743419177130b24157e6f46ea68a71a990ee8cb211463678e8f63bcde0745a351778bb060cacff72fc8899", 0x78, 0x20000841, &(0x7f0000000040)={0xa, 0x4e21, 0x1, @rand_addr=' \x01\x00', 0x3ff}, 0x1c) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000200)='J', 0x1}], 0x1) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0x900, 0x12) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r3 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'xfrm0\x00'}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$USBDEVFS_GET_CAPABILITIES(r6, 0x8004551a, &(0x7f0000000380)) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r7, 0x0, 0x1, &(0x7f0000000180)=""/2, &(0x7f00000001c0)=0x2) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1700000055000106000000000000000007"], 0x38}}, 0x0) 1.213109909s ago: executing program 6 (id=4366): r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fchdir(r0) r1 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x8, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x52, &(0x7f0000000640)=ANY=[@ANYBLOB="aaaaaaaaaaaa89ab9b4c72ca86dd607927f3001c2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000008"], 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) r3 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r6 = socket(0x2a, 0x2, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001d00d78d40150724e490000007000000", @ANYRES32=r9, @ANYBLOB="8000a6000a000200d82ea1bc01700000060005"], 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) io_uring_enter(r3, 0x47bc, 0x0, 0x0, 0x0, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv4_delroute={0x24, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x80, 0x0, 0xff, 0x4, 0xff, 0xa}, [@RTA_DST={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x22}}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40040810) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000500)=ANY=[@ANYRES32=r11, @ANYRES16=r7, @ANYBLOB="190c6c558b91ea62bd45e49f04d40eab51b559fe9aab1b230dc06c2bd817d086d6157119a3f46f549e21c89956e6af797628557859bbd0d6a52e00a3d8d2ba9839b048873bdeec867ee04021eeb7dfbd3e03f103d3e03733b5b95ef3654235ff030000a97067416c3f06af4597e6b1c625d5817fd800005416024dd357e0c13b0969135ad62ba04d00b60cab9961830bca227e623ed5f91b000000", @ANYRESHEX=r4], 0x0, 0x0}) r12 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io(r12, &(0x7f0000000740)={0x2c, &(0x7f0000000380)={0x0, 0x9, 0x8d, {0x8d, 0x9, "f3143a70163fe491060bbe9771218c2290f62329028e3019512a396e318e241a6a7b6b118312849235ec7079264fd2f432e2ecae43ed726220a9f4c66387945089128784832f492a2bdc202deebc16c144ab4d3005e3c669ce0caa5a96d4c82819eb0bf336d4f294586579d1fdf27f4e05ef84df63524526ecc2c3dff4fec9bdb530f8667bce09138c28ab"}}, &(0x7f0000000680)={0x0, 0x3, 0xb2, @string={0xb2, 0x3, "fde91a4afa8ca16499e7393a3239f1c06c143fc3f7052fc19f45b1b5f1b14a8045a6c9a70eb7314c9f260cf0cf206f6e553809712d5ea67513327c764a367d35d624a3ab6762a2d9923a44027980d96e40152f2f59197389752c6f6188e2dbc8b0e2f8b29b1049484f98762bc51553dbc2f85d17f8304beebe2a06270426b665377fa624d2d385c8300ae0cd43c3d7e6212aa23e4c0f4f9c4529410af408a396330d70da6622334d2b8bd320f39d7827"}}, &(0x7f0000000440)={0x0, 0xf, 0xc, {0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x14, 0x9, 0x0, 0x5}]}}, &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x80, 0x80, 0x2, 'SL`v', "f04c2b98"}}, &(0x7f0000000600)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x80, 0x8, 0x4, 0x3, 0x80, 0x2}}}, &(0x7f00000010c0)={0x84, &(0x7f0000000780)={0x0, 0x18, 0xa7, "cbabee58e85e1d6a72fe0d05f834eee7360e045604e7f933de638f5676b18ee39dc9d4b2a6a9b89233a3771ea643f8ce2a576f2e18a681b627cc1b2e0e766a03afdee47e7ad9347e4bdac5f8e69aeebe02b74cd7fc7c004293542a526a5fb545aeb4dd13d8230cb77bf6563a709e937fcc505588feab4ce4a4849e9224296ffda57498e6d1b0c5b15ff68b753a28d5a37006250c1dfbe98110ccc4d346be71b2945855907bbf6c"}, &(0x7f0000000840)={0x0, 0xa, 0x1, 0x10}, &(0x7f0000000880)={0x0, 0x8, 0x1, 0x6}, &(0x7f00000008c0)={0x20, 0x0, 0x4, {0x3, 0x3}}, &(0x7f0000000900)={0x20, 0x0, 0x8, {0x20, 0x1, [0xf]}}, &(0x7f0000000940)={0x40, 0x7, 0x2, 0x9}, &(0x7f0000000980)={0x40, 0x9, 0x1, 0xe}, &(0x7f00000009c0)={0x40, 0xb, 0x2, '%I'}, &(0x7f0000000a00)={0x40, 0xf, 0x2, 0xc4}, &(0x7f0000000a40)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000a80)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000ac0)={0x40, 0x19, 0x2, "9251"}, &(0x7f0000000fc0)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000001000)={0x40, 0x1c, 0x1, 0x10}, &(0x7f0000001040)={0x40, 0x1e, 0x1}, &(0x7f0000001080)={0x40, 0x21, 0x1, 0x1}}) 773.203008ms ago: executing program 2 (id=4367): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400840) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000200)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x4000, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(0xffffffffffffffff, 0x48e9, 0x0, 0x2, 0x0, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r5, 0x5412, &(0x7f00000000c0)=0x13) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r6, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000001ec0)={0x4c, 0x0, 0xb, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_NAME={0x8, 0x1, '{)-\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000c80) ioctl$TCSETA(r5, 0x5406, &(0x7f0000000340)={0xff02, 0x4e34, 0x0, 0x5, 0x0, "5f730000a9003f00"}) ioctl$TIOCL_GETMOUSEREPORTING(r5, 0x5412, &(0x7f00000006c0)=0x5f) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002040)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x0, 0x1, 0x1, 0x0, 0x9}, @NFTA_IMMEDIATE_DREG={0x0, 0x1, 0x1, 0x0, 0xd}, @NFTA_IMMEDIATE_DATA={0x0, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x0, 0x1, "7ad9f67dde02718ba73447b9c086ff026bcde20484afb9545eee85375f4ad0e60d5fa7e147433f2d9690523e376cd0412949aabdf49fc4a1aadd16df1575e700a871867b19f13a0a59548b43eb371e7536d53d2196efb370e25af0159f9b82da3a3ef81604ff3dd92ad472dcc7a90686e960300ea53627b13d5b0ec4390bb615"}, @NFTA_DATA_VALUE={0x0, 0x1, "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"}, @NFTA_DATA_VALUE={0x0, 0x1, "e9a4b877a0e9ff1e157a6cb028a8ad7273635fced0075302e25cefee7cfd9661e0448b269fa440134e5b767fabf360b073ed2b3f147a848d45c87016afebc2f9215cbccfcdda30e5446607a96fe4a7088cbe32ee456fd8562fc2e410f790d5c507a46b6a714432b740339ae4a8602744a43ff1aacd88404846eeb6faa098803d48fbea320eb3451327dc1e21db9d10cb4235380d69ee719ef7105e106f1169671ee8be68b3e3d4b48b70cabd100d25ebb729ad229c23308ea72616e6c947dfae5f293339d08324593cd3b798"}]}, @NFTA_IMMEDIATE_DREG, @NFTA_IMMEDIATE_DATA={0x0, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_IMMEDIATE_DREG={0x0, 0x1, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0xfffffffffffffe13, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "03"}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x40480e0}, 0x4008014) openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/consoles\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000180)={&(0x7f00000000c0)=[0x0], 0x1}) r9 = fsopen(&(0x7f0000000100)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000040)='source', &(0x7f0000000740)='//\xf2b\x06\b\xba\xdfXo\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b/Q9\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\\\x14\\//\xff\xea\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000002a40), r1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x3, 0x403, 0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x200000, 0xfffffffc, 0x760e, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x10000000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xa9a4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xedc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x80000, 0x0, 0xfffffff8, 0x0, 0x0, 0x79, 0xfffffffd, 0x0, 0x0, 0x0, 0x2, 0x47, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x7fff0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x200, 0xfffffffd, 0x0, 0x9, 0x0, 0x20], [0x0, 0xfffffffc, 0x0, 0x6, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0xffffffff, 0x89, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0xfffffffe, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xfffffffe, 0x351e, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffff8, 0x8, 0x0, 0x9907], [0xb, 0x1, 0x10, 0x0, 0xc429, 0x0, 0xfffffffe, 0x4, 0x200000, 0x0, 0x0, 0x10, 0x0, 0x0, 0x804, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x2, 0x0, 0x4, 0x0, 0xfd32, 0x6, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0x100000, 0xa]}, 0x45c) syz_emit_ethernet(0x79, &(0x7f00000004c0)=ANY=[], 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r10, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r9, @ANYBLOB="01e5c300000000fb04003b1c210008000300", @ANYRES32=r8, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001100)={0x28, r5, 0x5, 0x10, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0x4}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x8894}, 0x0) r11 = socket$inet(0x2b, 0x801, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r11, 0x0, 0x41, 0x0, 0x68) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000010000100000000000000001822fc790a38000000050a01020000000000000000010020000c00024000000000000000010900010073797a31000000000ca704800800014000000005140000001100ff0000000000000000000000000a"], 0x60}}, 0x0) kernel console output (not intermixed with test programs): ] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1458.783852][T18469] loop5: detected capacity change from 0 to 1024 [ 1458.859967][T18469] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1459.057627][ T30] audit: type=1800 audit(1741666555.774:1413): pid=18469 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3729" name="file1" dev="loop5" ino=839 res=0 errno=0 [ 1461.301283][T18484] loop5: detected capacity change from 0 to 2048 [ 1461.335566][T18484] ext3: Unknown parameter 'permit_directio' [ 1461.489648][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1461.498061][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1461.784963][T14974] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1461.785058][T14974] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1461.785596][T14974] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1461.785684][T14974] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1461.929402][T18490] loop5: detected capacity change from 0 to 256 [ 1462.074039][T18490] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x5a3acfb0, utbl_chksum : 0xe619d30d) [ 1462.442159][ T3548] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1462.450404][ T3548] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1462.690548][T18494] loop6: detected capacity change from 0 to 1024 [ 1462.699824][T18494] hfsplus: Unknown parameter '‡ÑÝÛy¥0zØÅÇ ‡õ0|h¼§÷¤'K–ä8ŽÝõó)Oï÷~ÿõ}ÿ$«áð•uý|TŸD×Ï¿µ‘noo-¶¦¶§óâVœ‹zDT"ª½FYéµ|‰¯GD’—${óþòÕ·?ýbû³ÎV5_²ú•Q톨fmæKÌGÄT¾TÛ£Çvß×ßÍ' [ 1464.344059][T18358] veth0_vlan: entered promiscuous mode [ 1464.383010][T18358] veth1_vlan: entered promiscuous mode [ 1464.919995][T18358] veth0_macvtap: entered promiscuous mode [ 1465.001969][T18358] veth1_macvtap: entered promiscuous mode [ 1465.145103][T18358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1465.159851][T18358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1465.173672][T18358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1465.184889][T18358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1465.197442][T18358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1465.208246][T18358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1465.218342][T18358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1465.229615][T18358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1465.248510][T18510] loop2: detected capacity change from 0 to 256 [ 1465.251720][T18358] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1465.293642][T18358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1465.304396][T18358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1465.314846][T18358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1465.327978][T18358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1465.338130][T18358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1465.351194][T18358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1465.361882][T18358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1465.372605][T18358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1465.387548][T18358] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1465.588275][T18358] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1465.597476][T18358] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1465.606569][T18358] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1465.615655][T18358] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1465.688923][T18517] loop5: detected capacity change from 0 to 2048 [ 1465.731827][T18519] loop9: detected capacity change from 0 to 512 [ 1465.800000][T18517] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1465.837033][T18510] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 1465.867299][T18519] EXT4-fs warning (device loop9): dx_probe:893: inode #2: comm syz.9.3737: dx entry: limit 1024 != root limit 124 [ 1465.879834][T18519] EXT4-fs warning (device loop9): dx_probe:966: inode #2: comm syz.9.3737: Corrupt directory, running e2fsck is recommended [ 1466.026150][ T30] audit: type=1800 audit(1741666562.335:1414): pid=18517 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3736" name="file1" dev="loop5" ino=1346 res=0 errno=0 [ 1466.044170][T18519] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -117 [ 1466.080146][T18519] EXT4-fs error (device loop9): ext4_xattr_ibody_find:2240: inode #15: comm syz.9.3737: corrupted in-inode xattr: invalid ea_ino [ 1466.140906][T18519] EXT4-fs (loop9): Remounting filesystem read-only [ 1466.150218][T18519] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1466.312488][T18523] EXT4-fs warning (device loop9): dx_probe:893: inode #2: comm syz.9.3737: dx entry: limit 1024 != root limit 124 [ 1466.325860][T18523] EXT4-fs warning (device loop9): dx_probe:966: inode #2: comm syz.9.3737: Corrupt directory, running e2fsck is recommended [ 1466.351536][T18523] EXT4-fs warning (device loop9): dx_probe:893: inode #2: comm syz.9.3737: dx entry: limit 1024 != root limit 124 [ 1466.371822][T18523] EXT4-fs warning (device loop9): dx_probe:966: inode #2: comm syz.9.3737: Corrupt directory, running e2fsck is recommended [ 1467.907222][T18532] loop5: detected capacity change from 0 to 256 [ 1472.010187][T18300] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1472.127430][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1472.134400][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1472.296001][T18542] input: syz1 as /devices/virtual/input/input14 [ 1472.732926][ T5875] usb 10-1: new high-speed USB device number 38 using dummy_hcd [ 1472.943626][ T5875] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1472.953217][ T5875] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1472.994807][ T5875] usb 10-1: config 0 descriptor?? [ 1473.014923][ T5875] cp210x 10-1:0.0: cp210x converter detected [ 1473.202165][T18555] loop5: detected capacity change from 0 to 2048 [ 1473.314632][T18555] Alternate GPT is invalid, using primary GPT. [ 1473.322110][T18555] loop5: p1 p2 p3 [ 1473.467305][ T5875] cp210x 10-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1473.510533][ T5875] usb 10-1: cp210x converter now attached to ttyUSB0 [ 1473.708129][T18084] usb 10-1: USB disconnect, device number 38 [ 1473.725568][T18084] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1473.793246][T18084] cp210x 10-1:0.0: device disconnected [ 1473.893985][ T5875] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1474.278992][ T5875] usb 7-1: Using ep0 maxpacket: 16 [ 1474.503738][ T5875] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1474.515571][ T5875] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1474.525835][ T5875] usb 7-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 1474.535282][ T5875] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1474.751649][ T5875] usb 7-1: config 0 descriptor?? [ 1475.282129][ T5875] hid-multitouch 0003:1FD2:6007.0006: item fetching failed at offset 3/5 [ 1475.317770][ T5875] hid-multitouch 0003:1FD2:6007.0006: probe with driver hid-multitouch failed with error -22 [ 1475.486593][ T5875] usb 7-1: USB disconnect, device number 3 [ 1475.500684][T18577] loop2: detected capacity change from 0 to 16 [ 1475.545577][T18577] erofs (device loop2): rootino(nid 36) is not a directory(i_mode 66300) [ 1481.962385][ T4962] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1481.970738][ T4962] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1482.209473][ T4109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1482.219412][ T4109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1482.445184][ T5875] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1482.641607][ T5875] usb 3-1: Using ep0 maxpacket: 16 [ 1483.093545][ T5875] usb 3-1: config 0 has no interfaces? [ 1483.586400][ T5875] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1483.595743][ T5875] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1483.604155][ T5875] usb 3-1: Product: syz [ 1483.608599][ T5875] usb 3-1: Manufacturer: syz [ 1483.613314][ T5875] usb 3-1: SerialNumber: syz [ 1484.582361][ T5875] usb 3-1: config 0 descriptor?? [ 1484.750359][T18615] loop5: detected capacity change from 0 to 2048 [ 1485.000835][T18605] netlink: 'syz.2.3756': attribute type 12 has an invalid length. [ 1485.031354][T18615] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 1485.040067][T18615] UDF-fs: Scanning with blocksize 512 failed [ 1485.649037][T15249] usb 3-1: USB disconnect, device number 34 [ 1485.676470][T18615] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1486.170853][T18256] UDF-fs: warning (device loop5): udf_evict_inode: Inode 818 (mode 100755) has inode size 2049 different from extent length 3072. Filesystem need not be standards compliant. [ 1486.635750][T18632] loop6: detected capacity change from 0 to 512 [ 1486.675500][T18632] ext4: Unknown parameter 'obj_user' [ 1492.188201][T18643] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3768'. [ 1505.009921][T15249] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1505.281041][T15249] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1505.291810][T15249] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1505.301037][T15249] usb 6-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 1505.310225][T15249] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1505.420171][T15249] usb 6-1: config 0 descriptor?? [ 1507.145579][T15249] Bluetooth: Can't get version to change to load ram patch err [ 1507.153378][T15249] Bluetooth: Loading patch file failed [ 1507.159202][T15249] ath3k 6-1:0.0: probe with driver ath3k failed with error -71 [ 1507.756178][T15249] usb 6-1: USB disconnect, device number 45 [ 1508.079320][T18707] netlink: 'syz.9.3791': attribute type 21 has an invalid length. [ 1508.087487][T18707] netlink: 'syz.9.3791': attribute type 6 has an invalid length. [ 1508.098447][T18707] netlink: 132 bytes leftover after parsing attributes in process `syz.9.3791'. [ 1512.126680][T18727] loop4: detected capacity change from 0 to 16 [ 1512.143581][T18727] erofs (device loop4): mounted with root inode @ nid 36. [ 1512.683758][T18727] bio_check_eod: 2 callbacks suppressed [ 1512.683836][T18727] syz.4.3798: attempt to access beyond end of device [ 1512.683836][T18727] loop4: rw=0, sector=14546590680, nr_sectors = 16 limit=16 [ 1512.705947][T18727] erofs (device loop4): read error -5 @ 43 of nid 36 [ 1512.874231][T18729] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1512.883480][T18729] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1512.892778][T18729] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1512.902090][T18729] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1517.191235][T15249] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1518.922041][ T5800] Bluetooth: hci1: command 0x0406 tx timeout [ 1519.734900][T16289] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1519.743474][T16289] Bluetooth: hci4: Injecting HCI hardware error event [ 1519.752389][ T5800] Bluetooth: hci4: hardware error 0x00 [ 1523.536670][T15249] usb 7-1: Using ep0 maxpacket: 32 [ 1523.852272][T15249] usb 7-1: device descriptor read/all, error -71 [ 1523.988540][T18747] loop9: detected capacity change from 0 to 1024 [ 1525.354695][ T5800] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1526.436359][T18752] loop5: detected capacity change from 0 to 1024 [ 1532.029209][T18779] netlink: 116 bytes leftover after parsing attributes in process `syz.9.3810'. [ 1537.375271][T18792] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3817'. [ 1538.161191][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1538.167864][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.118999][T18826] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3828'. [ 1547.743578][T18830] loop2: detected capacity change from 0 to 4096 [ 1548.447170][T18837] loop9: detected capacity change from 0 to 2048 [ 1549.086744][T18837] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1549.192074][ T5875] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1549.532496][ T5875] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 1549.647029][ T5875] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1549.656232][ T5875] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1549.668050][ T5875] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1549.860929][ T5875] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1549.870507][ T5875] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1549.881839][ T5875] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1550.043277][ T5875] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1550.052727][ T5875] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1550.068125][ T5875] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1550.108237][ T5875] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1550.117711][ T5875] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1550.129639][ T5875] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1550.149081][ T5875] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1550.158891][ T5875] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1550.170276][ T5875] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1550.229546][ T5875] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1550.238826][ T5875] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1550.250122][ T5875] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1550.580148][ T5875] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1550.592473][ T5875] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1550.604722][ T5875] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1550.636931][ T5875] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1550.646347][ T5875] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1550.657585][ T5875] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1550.687859][ T5875] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1550.700356][ T5875] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1550.710427][ T5875] usb 6-1: Product: syz [ 1550.714808][ T5875] usb 6-1: Manufacturer: syz [ 1550.719733][ T5875] usb 6-1: SerialNumber: syz [ 1550.812951][ T5875] usb 6-1: config 0 descriptor?? [ 1550.860235][ T5875] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 1553.504333][ T5875] usb 6-1: USB disconnect, device number 46 [ 1553.538523][ T5875] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 1553.764847][T18300] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1556.795454][T18875] loop9: detected capacity change from 0 to 32768 [ 1556.808440][T18875] jfs: Bad value for 'gid' [ 1556.813270][T18875] jfs: Bad value for 'gid' [ 1557.719456][T18875] loop9: detected capacity change from 0 to 32768 [ 1557.729837][T15249] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1558.338723][T15249] usb 3-1: Using ep0 maxpacket: 8 [ 1559.229476][T15249] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1559.238166][T15249] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1559.277543][T15249] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1559.288216][T15249] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1559.298900][T15249] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1559.312911][T15249] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1559.322482][T15249] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1561.860264][T15249] usb 3-1: can't set config #16, error -71 [ 1561.901058][T15249] usb 3-1: USB disconnect, device number 35 [ 1562.661990][ T5800] Bluetooth: hci3: command 0x0406 tx timeout [ 1566.705138][T16289] Bluetooth: hci2: command 0x0405 tx timeout [ 1569.161292][ T5800] Bluetooth: hci2: command 0x0405 tx timeout [ 1570.687691][T16289] Bluetooth: hci2: unexpected event for opcode 0x200c [ 1571.302526][ T30] audit: type=1326 audit(1741666659.535:1415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18920 comm="syz.6.3857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f378d169 code=0x7fc00000 [ 1571.803187][ T30] audit: type=1326 audit(1741666660.458:1416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18934 comm="syz.5.3862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd32fb8d169 code=0x7ffc0000 [ 1571.826417][ T30] audit: type=1326 audit(1741666660.458:1417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18934 comm="syz.5.3862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd32fb8d169 code=0x7ffc0000 [ 1578.116865][T15249] usb 10-1: new high-speed USB device number 39 using dummy_hcd [ 1580.804580][T15249] usb 10-1: Using ep0 maxpacket: 8 [ 1581.698943][T15249] usb 10-1: device descriptor read/all, error -71 [ 1582.695928][T18984] xt_CT: No such helper "pptp" [ 1592.519907][T19013] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1594.656664][T19017] netlink: 80 bytes leftover after parsing attributes in process `syz.9.3890'. [ 1594.670581][T19017] netlink: 80 bytes leftover after parsing attributes in process `syz.9.3890'. [ 1597.396294][T19032] loop9: detected capacity change from 0 to 512 [ 1597.512158][T19032] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 1597.560920][T19032] EXT4-fs (loop9): orphan cleanup on readonly fs [ 1597.593051][T19032] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.3896: invalid indirect mapped block 256 (level 2) [ 1597.700731][T19032] EXT4-fs (loop9): 2 truncates cleaned up [ 1597.708463][T19032] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1597.778201][ T30] audit: type=1326 audit(1741666684.439:1418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19034 comm="syz.2.3897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b6e18d169 code=0x7ffc0000 [ 1597.847406][ T30] audit: type=1326 audit(1741666684.457:1419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19034 comm="syz.2.3897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7f7b6e18d169 code=0x7ffc0000 [ 1597.874760][ T30] audit: type=1326 audit(1741666684.457:1420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19034 comm="syz.2.3897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b6e18d169 code=0x7ffc0000 [ 1597.898099][ T30] audit: type=1326 audit(1741666684.457:1421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19034 comm="syz.2.3897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b6e18d169 code=0x7ffc0000 [ 1599.181529][T18300] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1605.342846][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1605.349337][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1621.912263][T15249] usb 10-1: new high-speed USB device number 41 using dummy_hcd [ 1621.955480][T19109] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3918'. [ 1622.139665][T15249] usb 10-1: Using ep0 maxpacket: 16 [ 1622.185574][T15249] usb 10-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 8.00 [ 1622.195183][T15249] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1622.203497][T15249] usb 10-1: Product: syz [ 1622.208048][T15249] usb 10-1: Manufacturer: syz [ 1622.212944][T15249] usb 10-1: SerialNumber: syz [ 1622.295715][T15249] usb 10-1: config 0 descriptor?? [ 1622.328749][T15249] ftdi_sio 10-1:0.0: FTDI USB Serial Device converter detected [ 1622.338210][T15249] usb 10-1: Detected FT4232H [ 1622.365229][T19111] loop2: detected capacity change from 0 to 164 [ 1623.585007][T15249] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1623.601112][T15249] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1623.649758][T15249] usb 10-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1623.694975][T15249] usb 10-1: USB disconnect, device number 41 [ 1623.767320][T15249] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1623.777863][T15249] ftdi_sio 10-1:0.0: device disconnected [ 1623.854981][T19120] loop2: detected capacity change from 0 to 512 [ 1623.912655][T19120] EXT4-fs: Ignoring removed oldalloc option [ 1623.925612][T19120] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1624.048154][T19120] EXT4-fs (loop2): 1 truncate cleaned up [ 1624.059909][T19120] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1626.419042][T18318] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 1626.556028][T18318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1629.548829][T19140] loop9: detected capacity change from 0 to 2048 [ 1629.764425][T19140] ext3: Unknown parameter 'permit_directio' [ 1630.633342][T19140] 9pnet_fd: Insufficient options for proto=fd [ 1631.814561][T19144] loop5: detected capacity change from 0 to 2048 [ 1632.122211][T19144] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1632.134922][T19144] ext4 filesystem being mounted at /48/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1633.871980][T18256] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1634.184348][T19157] lo: entered allmulticast mode [ 1634.203365][T19157] lo: left allmulticast mode [ 1634.212945][T18084] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1634.426113][T18084] usb 7-1: Using ep0 maxpacket: 16 [ 1634.488250][T18084] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 8.00 [ 1634.497704][T18084] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1634.506099][T18084] usb 7-1: Product: syz [ 1634.510495][T18084] usb 7-1: Manufacturer: syz [ 1634.515336][T18084] usb 7-1: SerialNumber: syz [ 1634.567043][T18084] usb 7-1: config 0 descriptor?? [ 1634.586703][T18084] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected [ 1634.596680][T18084] usb 7-1: Detected FT4232H [ 1635.078362][T18084] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1635.090771][T18084] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1635.104519][T18084] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1635.124751][T18084] usb 7-1: USB disconnect, device number 6 [ 1635.157267][T18084] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1635.158191][T18084] ftdi_sio 7-1:0.0: device disconnected [ 1635.411852][T19164] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3939'. [ 1635.507363][T19164] vlan2: entered allmulticast mode [ 1637.655528][T19184] loop6: detected capacity change from 0 to 32768 [ 1638.748891][T19184] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1638.759674][T19184] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1638.860737][T19184] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1638.872241][T19184] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1638.969336][T19190] netlink: 200 bytes leftover after parsing attributes in process `syz.6.3944'. [ 1640.061117][T19184] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1640.071808][T19184] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1640.231524][T19184] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1640.242283][T19184] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1641.342232][T19184] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 1641.350965][T19184] netdevsim netdevsim6 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 1641.389107][T19184] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 1641.397729][T19184] netdevsim netdevsim6 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 1641.438584][T19184] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 1641.447292][T19184] netdevsim netdevsim6 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 1641.475052][T19184] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 1641.493117][T19184] netdevsim netdevsim6 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 1643.158988][T19204] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3950'. [ 1643.215448][T19204] vlan2: entered allmulticast mode [ 1643.331939][T19202] lo: entered allmulticast mode [ 1643.371846][T19202] lo: left allmulticast mode [ 1644.113499][T19214] loop9: detected capacity change from 0 to 2048 [ 1644.176204][T19214] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1647.627356][T18084] usb 10-1: new high-speed USB device number 42 using dummy_hcd [ 1648.376314][T19226] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3957'. [ 1648.758457][ T5875] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1648.998532][ T5875] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1649.009135][ T5875] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1649.019281][ T5875] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1649.032398][ T5875] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1649.043539][ T5875] usb 6-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1649.053198][ T5875] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1649.452993][ T5875] usb 6-1: config 0 descriptor?? [ 1649.709046][ T5875] hdpvr 6-1:0.0: firmware version 0x0 dated [ 1649.715569][ T5875] hdpvr 6-1:0.0: untested firmware, the driver might not work. [ 1649.865432][T19237] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3962'. [ 1650.188460][T19227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1650.197576][T19227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1650.438077][T10725] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 1650.582156][ T5875] hdpvr 6-1:0.0: Could not setup controls [ 1650.591010][ T5875] hdpvr 6-1:0.0: registering videodev failed [ 1650.629042][T10725] usb 3-1: config 0 has no interfaces? [ 1650.635238][T10725] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1650.644822][T10725] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1650.678823][ T5875] hdpvr 6-1:0.0: probe with driver hdpvr failed with error -71 [ 1650.742342][T10725] usb 3-1: config 0 descriptor?? [ 1650.817569][ T5875] usb 6-1: USB disconnect, device number 47 [ 1650.877573][T19250] lo: entered allmulticast mode [ 1650.926807][T19250] lo: left allmulticast mode [ 1654.899442][T19259] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3966'. [ 1655.155319][ T5875] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1655.366411][ T5875] usb 7-1: Using ep0 maxpacket: 32 [ 1655.389786][ T5875] usb 7-1: config 0 has an invalid interface number: 207 but max is 0 [ 1655.398445][ T5875] usb 7-1: config 0 has an invalid descriptor of length 19, skipping remainder of the config [ 1655.409020][ T5875] usb 7-1: config 0 has no interface number 0 [ 1655.593982][ T5875] usb 7-1: New USB device found, idVendor=0079, idProduct=c819, bcdDevice=4a.1c [ 1655.603498][ T5875] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1655.612011][ T5875] usb 7-1: Product: syz [ 1655.616394][ T5875] usb 7-1: Manufacturer: syz [ 1655.621334][ T5875] usb 7-1: SerialNumber: syz [ 1655.835119][ T5875] usb 7-1: config 0 descriptor?? [ 1656.112121][T19262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1656.121391][T19262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1656.446613][ T5875] usb 7-1: USB disconnect, device number 7 [ 1656.588627][T18084] usb 3-1: USB disconnect, device number 36 [ 1657.273878][T19279] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3974'. [ 1657.782656][T19283] loop6: detected capacity change from 0 to 1764 [ 1657.919065][T19283] iso9660: Corrupted directory entry in block 0 of inode 1792 [ 1658.244221][T19291] lo: entered allmulticast mode [ 1659.356381][T19291] lo: left allmulticast mode [ 1662.408278][T19304] loop9: detected capacity change from 0 to 512 [ 1662.459935][T19304] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 1662.522650][T19304] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c118, mo2=0002] [ 1662.576414][T19304] EXT4-fs error (device loop9): ext4_xattr_ibody_find:2240: inode #15: comm syz.9.3982: corrupted in-inode xattr: e_value size too large [ 1662.701027][T19304] EXT4-fs error (device loop9): ext4_orphan_get:1394: comm syz.9.3982: couldn't read orphan inode 15 (err -117) [ 1662.728100][T19304] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1662.913148][T19307] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 1662.925627][T19307] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 1663.651675][T18300] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1664.404538][T19325] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3989'. [ 1664.682548][T19330] loop5: detected capacity change from 0 to 2048 [ 1664.814242][T19330] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1664.826994][T19330] ext4 filesystem being mounted at /61/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1665.183994][T18256] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1665.496473][T10666] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1665.802746][T10666] usb 7-1: Using ep0 maxpacket: 8 [ 1665.906821][T10666] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1665.917444][T10666] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 6 [ 1666.239161][T10666] usb 7-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 1666.248589][T10666] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=221 [ 1666.257109][T10666] usb 7-1: SerialNumber: syz [ 1666.436618][T10666] usb 7-1: config 0 descriptor?? [ 1666.506757][T10666] usb 7-1: bad CDC descriptors [ 1666.513542][T10666] cdc_acm 7-1:0.0: Zero length descriptor references [ 1666.520651][T10666] cdc_acm 7-1:0.0: probe with driver cdc_acm failed with error -22 [ 1666.813142][T10666] usb 7-1: USB disconnect, device number 8 [ 1671.323543][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1671.334199][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1671.956359][T19377] loop2: detected capacity change from 0 to 2048 [ 1672.238035][T19377] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1672.251401][T19377] ext4 filesystem being mounted at /49/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1672.394209][T19381] loop9: detected capacity change from 0 to 1024 [ 1672.689369][T18318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1672.732850][T10725] usb 10-1: new full-speed USB device number 43 using dummy_hcd [ 1672.934832][T10725] usb 10-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 1672.944609][T10725] usb 10-1: config 0 has an invalid interface number: 2 but max is -1 [ 1672.953171][T10725] usb 10-1: config 0 has an invalid interface number: 2 but max is -1 [ 1672.962203][T10725] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1672.978091][T10725] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1672.987492][T10725] usb 10-1: config 0 has no interface number 0 [ 1672.998910][T10725] usb 10-1: config 0 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1673.181437][T10725] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1673.191052][T10725] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1673.199523][T10725] usb 10-1: Product: syz [ 1673.204004][T10725] usb 10-1: Manufacturer: syz [ 1673.209036][T10725] usb 10-1: SerialNumber: syz [ 1673.228825][T10725] usb 10-1: config 0 descriptor?? [ 1673.304930][T15249] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1673.310170][T19396] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1673.323089][T19396] netdevsim netdevsim6 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1673.466421][T19381] hfsplus: extend alloc file! (8192,512,16777719) [ 1673.497481][T19399] netlink: 200 bytes leftover after parsing attributes in process `syz.6.4011'. [ 1673.508287][T10725] usb 10-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 1673.516889][T10725] usb 10-1: MIDIStreaming interface descriptor not found [ 1673.560212][T19396] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1673.570592][T19396] netdevsim netdevsim6 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1673.587318][T15249] usb 3-1: Using ep0 maxpacket: 16 [ 1673.611206][T15249] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 1673.619964][T15249] usb 3-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 1673.631583][T15249] usb 3-1: config 0 has no interface number 0 [ 1673.674089][T19396] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1673.682629][T15249] usb 3-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 1673.684319][T19396] netdevsim netdevsim6 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1673.693435][T15249] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1673.712466][T15249] usb 3-1: Product: syz [ 1673.717022][T15249] usb 3-1: Manufacturer: syz [ 1673.721840][T15249] usb 3-1: SerialNumber: syz [ 1673.807634][T10725] usb 10-1: USB disconnect, device number 43 [ 1673.851566][T19396] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1673.861886][T19396] netdevsim netdevsim6 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1673.888744][T15249] usb 3-1: config 0 descriptor?? [ 1674.223825][T19396] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 1674.232632][T19396] netdevsim netdevsim6 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 1674.261846][T19396] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 1674.270550][T19396] netdevsim netdevsim6 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 1674.301212][T19396] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 1674.308683][T15249] usb 3-1: USB disconnect, device number 37 [ 1674.309820][T19396] netdevsim netdevsim6 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 1674.350639][T19396] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 1674.359363][T19396] netdevsim netdevsim6 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 1675.532082][T19411] loop6: detected capacity change from 0 to 32768 [ 1675.572148][T19411] [ 1675.572148][T19411] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1675.572148][T19411] [ 1675.595634][T19411] [ 1675.595634][T19411] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1675.595634][T19411] [ 1675.606477][T19411] [ 1675.606477][T19411] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1675.606477][T19411] [ 1675.617258][T19411] [ 1675.617258][T19411] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1675.617258][T19411] [ 1675.627955][T19411] [ 1675.627955][T19411] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1675.627955][T19411] [ 1675.642852][ T113] [ 1675.642852][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1675.642852][ T113] [ 1675.859047][T19418] loop9: detected capacity change from 0 to 2048 [ 1675.869726][ T14] read_mapping_page failed! [ 1675.875050][ T14] ERROR: (device loop6): txAbort: [ 1675.875050][ T14] [ 1675.910972][T15249] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 1675.948253][T19418] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1675.961455][T19418] ext4 filesystem being mounted at /59/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1675.999247][ T14] ERROR: (device loop6): remounting filesystem as read-only [ 1676.007375][ T14] jfs_write_inode: jfs_commit_inode failed! [ 1676.019520][T18061] [ 1676.019520][T18061] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1676.019520][T18061] [ 1676.048702][T18061] [ 1676.048702][T18061] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1676.048702][T18061] [ 1676.116471][T15249] usb 3-1: config 0 has no interfaces? [ 1676.122442][T15249] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1676.131749][T15249] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1676.191046][T15249] usb 3-1: config 0 descriptor?? [ 1676.407221][T18300] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1676.634138][T19419] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1676.956786][T19434] loop9: detected capacity change from 0 to 1024 [ 1676.967994][T19434] EXT4-fs: Ignoring removed nobh option [ 1677.039485][T19434] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1677.050967][T19419] kvm: pic: level sensitive irq not supported [ 1677.066357][T19419] picdev_read: 112 callbacks suppressed [ 1677.066515][T19419] kvm: pic: non byte read [ 1677.221824][T19434] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.4025: bg 0: block 456: padding at end of block bitmap is not set [ 1677.411146][T15249] usb 3-1: USB disconnect, device number 38 [ 1677.440624][T19440] loop6: detected capacity change from 0 to 2048 [ 1677.479171][T19440] EXT4-fs (loop6): DAX unsupported by block device. [ 1677.536231][T18300] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1678.012496][T19454] lo: entered allmulticast mode [ 1678.026979][T19454] lo: left allmulticast mode [ 1678.916964][T19464] loop5: detected capacity change from 0 to 2048 [ 1679.118414][T19460] loop9: detected capacity change from 0 to 32768 [ 1679.144692][T19460] [ 1679.144692][T19460] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1679.144692][T19460] [ 1679.149989][T19464] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1679.168281][T19464] ext4 filesystem being mounted at /72/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1679.185274][T19460] [ 1679.185274][T19460] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1679.185274][T19460] [ 1679.197620][T19460] [ 1679.197620][T19460] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1679.197620][T19460] [ 1679.213213][T19460] [ 1679.213213][T19460] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1679.213213][T19460] [ 1679.225483][T19460] [ 1679.225483][T19460] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1679.225483][T19460] [ 1679.252210][ T114] [ 1679.252210][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1679.252210][ T114] [ 1679.410151][ T3885] read_mapping_page failed! [ 1679.418132][ T3885] ERROR: (device loop9): txAbort: [ 1679.418132][ T3885] [ 1679.429420][ T3885] ERROR: (device loop9): remounting filesystem as read-only [ 1679.442086][ T3885] jfs_write_inode: jfs_commit_inode failed! [ 1679.456163][T18300] [ 1679.456163][T18300] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1679.456163][T18300] [ 1679.480668][T18300] [ 1679.480668][T18300] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1679.480668][T18300] [ 1679.598690][T18256] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1679.725456][T19478] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1680.367068][T19492] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1680.493242][T19492] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1680.570598][T19492] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1680.627868][T19494] netlink: 200 bytes leftover after parsing attributes in process `syz.4.4044'. [ 1680.668682][T19492] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1680.927647][T19492] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1680.961461][T19492] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1680.994356][T19492] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1681.022141][T19492] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1681.348859][ T30] audit: type=1326 audit(1741666761.521:1422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19501 comm="syz.5.4046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd32fb8d169 code=0x7ffc0000 [ 1681.372758][ T30] audit: type=1326 audit(1741666761.540:1423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19501 comm="syz.5.4046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=265 compat=0 ip=0x7fd32fb8d169 code=0x7ffc0000 [ 1681.398757][ T30] audit: type=1326 audit(1741666761.549:1424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19501 comm="syz.5.4046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd32fb8d169 code=0x7ffc0000 [ 1681.424545][ T30] audit: type=1326 audit(1741666761.549:1425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19501 comm="syz.5.4046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd32fb8d169 code=0x7ffc0000 [ 1681.447584][ T30] audit: type=1326 audit(1741666761.549:1426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19501 comm="syz.5.4046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd32fb8d169 code=0x7ffc0000 [ 1681.707050][ T30] audit: type=1326 audit(1741666761.669:1427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19501 comm="syz.5.4046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd32fb8d169 code=0x7ffc0000 [ 1681.731129][ T30] audit: type=1326 audit(1741666761.669:1428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19501 comm="syz.5.4046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd32fb8d169 code=0x7ffc0000 [ 1681.754541][ T30] audit: type=1326 audit(1741666761.669:1429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19501 comm="syz.5.4046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd32fb8d169 code=0x7ffc0000 [ 1681.782297][ T30] audit: type=1326 audit(1741666761.669:1430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19501 comm="syz.5.4046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7fd32fb8d169 code=0x7ffc0000 [ 1681.807130][ T30] audit: type=1326 audit(1741666761.669:1431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19501 comm="syz.5.4046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd32fb8d169 code=0x7ffc0000 [ 1683.280336][T19529] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 1683.287146][T19529] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1683.295357][T19529] vhci_hcd vhci_hcd.0: Device attached [ 1683.525946][T18084] vhci_hcd: vhci_device speed not set [ 1683.589940][T18084] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 1683.995586][T19530] vhci_hcd: connection reset by peer [ 1684.004744][T18470] vhci_hcd: stop threads [ 1684.009214][T18470] vhci_hcd: release socket [ 1684.014101][T18470] vhci_hcd: disconnect device [ 1684.516698][T19551] loop9: detected capacity change from 0 to 512 [ 1684.531677][T19551] EXT4-fs: Ignoring removed oldalloc option [ 1684.570977][T19553] overlayfs: failed to clone upperpath [ 1684.571594][T19551] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1684.680796][T19551] EXT4-fs (loop9): 1 truncate cleaned up [ 1684.688640][T19551] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1685.026828][T18300] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1685.615597][T19564] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1685.661108][T19562] loop5: detected capacity change from 0 to 32768 [ 1685.746306][T19562] [ 1685.746306][T19562] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1685.746306][T19562] [ 1685.792880][T19562] [ 1685.792880][T19562] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1685.792880][T19562] [ 1685.803852][T19562] [ 1685.803852][T19562] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1685.803852][T19562] [ 1685.814617][T19562] [ 1685.814617][T19562] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1685.814617][T19562] [ 1685.825316][T19562] [ 1685.825316][T19562] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1685.825316][T19562] [ 1685.876449][T19564] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1685.894210][ T113] [ 1685.894210][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1685.894210][ T113] [ 1685.917245][T19567] netlink: 200 bytes leftover after parsing attributes in process `syz.2.4069'. [ 1686.081672][ T4274] read_mapping_page failed! [ 1686.086549][ T4274] ERROR: (device loop5): txAbort: [ 1686.086549][ T4274] [ 1686.114143][T19573] CIFS: VFS: Malformed UNC in devname [ 1686.141707][T19564] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1686.175116][ T4274] ERROR: (device loop5): remounting filesystem as read-only [ 1686.182834][ T4274] jfs_write_inode: jfs_commit_inode failed! [ 1686.233018][T18256] [ 1686.233018][T18256] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1686.233018][T18256] [ 1686.261071][T18256] [ 1686.261071][T18256] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1686.261071][T18256] [ 1686.287152][T19564] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1686.576753][T19564] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1686.604701][T19564] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1686.630988][T19564] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1686.666648][T19564] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1686.739812][T19577] loop9: detected capacity change from 0 to 2048 [ 1686.971413][T19577] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1686.987537][T19577] ext4 filesystem being mounted at /69/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1687.629449][T18300] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1688.855068][T19596] loop2: detected capacity change from 0 to 512 [ 1688.902689][T19596] EXT4-fs: Ignoring removed oldalloc option [ 1688.921701][T19594] loop9: detected capacity change from 0 to 2048 [ 1689.020237][T19596] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1689.056033][T19594] NILFS (loop9): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1689.112081][T19596] EXT4-fs (loop2): 1 truncate cleaned up [ 1689.119736][T19596] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1689.157712][T19598] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1689.182004][T18084] vhci_hcd: vhci_device speed not set [ 1689.437381][T18318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1690.326293][T19613] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1690.431745][T19621] loop2: detected capacity change from 0 to 512 [ 1690.446407][T19622] netlink: 200 bytes leftover after parsing attributes in process `syz.5.4085'. [ 1690.464171][T19621] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 1690.511750][T19613] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1690.587463][T19621] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c118, mo2=0002] [ 1690.609485][T19621] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.4087: corrupted in-inode xattr: e_value size too large [ 1690.629754][T19621] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.4087: couldn't read orphan inode 15 (err -117) [ 1690.720392][T19613] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1690.746698][T19621] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1691.001553][T19613] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1691.483725][T19613] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1691.510113][T19613] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1691.526540][T19629] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1691.545068][T19613] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1691.571783][T19613] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1691.573994][T18318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1692.169310][T19637] loop2: detected capacity change from 0 to 512 [ 1692.211513][T19635] loop5: detected capacity change from 0 to 1024 [ 1692.229393][T19637] EXT4-fs: Ignoring removed oldalloc option [ 1692.250996][T19635] EXT4-fs: Ignoring removed oldalloc option [ 1692.257423][T19635] EXT4-fs: Ignoring removed i_version option [ 1692.264490][T19635] EXT4-fs: Invalid journal IO priority (must be 0-7) [ 1692.272099][T19637] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1692.389938][T19635] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4093'. [ 1692.392403][T19637] EXT4-fs (loop2): 1 truncate cleaned up [ 1692.407345][T19637] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1692.569892][T19647] netlink: 'syz.4.4096': attribute type 10 has an invalid length. [ 1692.715569][T15249] usb 6-1: new low-speed USB device number 48 using dummy_hcd [ 1692.833575][T18318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1692.942636][T15249] usb 6-1: Invalid ep0 maxpacket: 64 [ 1693.086999][T15249] usb 6-1: new low-speed USB device number 49 using dummy_hcd [ 1693.269921][T15249] usb 6-1: Invalid ep0 maxpacket: 64 [ 1693.289769][T15249] usb usb6-port1: attempt power cycle [ 1693.486406][T19661] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1693.670848][T19661] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1693.688124][T15249] usb 6-1: new low-speed USB device number 50 using dummy_hcd [ 1693.729464][T15249] usb 6-1: Invalid ep0 maxpacket: 64 [ 1693.768700][T19665] netlink: 200 bytes leftover after parsing attributes in process `syz.2.4103'. [ 1693.830193][T19661] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1693.908316][T15249] usb 6-1: new low-speed USB device number 51 using dummy_hcd [ 1693.954280][T15249] usb 6-1: Invalid ep0 maxpacket: 64 [ 1693.978961][T19661] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1694.033470][T15249] usb usb6-port1: unable to enumerate USB device [ 1694.324639][T19661] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1694.351098][T19661] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1694.377764][T19661] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1694.404481][T19661] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1694.424737][T19669] kvm: kvm [19667]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 1695.782584][T19678] loop2: detected capacity change from 0 to 4096 [ 1696.130604][T10725] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1696.140582][T19678] ntfs3(loop2): $Secure::$SII is corrupted. [ 1696.146874][T19678] ntfs3(loop2): Failed to initialize $Secure (-22). [ 1696.293896][T10725] usb 7-1: device descriptor read/64, error -71 [ 1696.481670][T19678] loop2: detected capacity change from 0 to 2048 [ 1696.608739][T19678] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1696.638366][T10725] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1696.683812][T19704] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1696.735009][T19678] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4109'. [ 1696.790225][T10725] usb 7-1: device descriptor read/64, error -71 [ 1696.851563][T19708] netlink: 200 bytes leftover after parsing attributes in process `syz.9.4119'. [ 1696.978463][T10725] usb usb7-port1: attempt power cycle [ 1697.082579][T19704] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1697.265568][T19704] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1697.377026][T10725] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1697.432294][T10725] usb 7-1: device descriptor read/8, error -71 [ 1697.440476][T19713] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4120'. [ 1697.461041][T19704] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1697.640498][T19718] loop2: detected capacity change from 0 to 512 [ 1697.690207][T10725] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1697.700783][T19718] EXT4-fs: Ignoring removed oldalloc option [ 1697.722555][T19718] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1697.735955][T10725] usb 7-1: device descriptor read/8, error -71 [ 1697.799935][T19704] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1697.826207][T19704] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1697.859959][T19704] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1697.888263][T19704] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1697.922819][T10725] usb usb7-port1: unable to enumerate USB device [ 1697.990398][T19718] EXT4-fs (loop2): 1 truncate cleaned up [ 1697.998436][T19718] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1698.935074][T18318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1700.020017][T15249] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1700.236917][T15249] usb 7-1: Using ep0 maxpacket: 8 [ 1700.259673][T15249] usb 7-1: config 11 has an invalid interface number: 95 but max is 0 [ 1700.268123][T15249] usb 7-1: config 11 has an invalid descriptor of length 0, skipping remainder of the config [ 1700.279948][T15249] usb 7-1: config 11 has no interface number 0 [ 1700.286370][T15249] usb 7-1: config 11 interface 95 altsetting 64 has an endpoint descriptor with address 0xFB, changing to 0x8B [ 1700.303937][T15249] usb 7-1: config 11 interface 95 altsetting 64 endpoint 0x8 has invalid wMaxPacketSize 0 [ 1700.315784][T15249] usb 7-1: config 11 interface 95 altsetting 64 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1700.329334][T15249] usb 7-1: config 11 interface 95 has no altsetting 0 [ 1700.727074][T15249] usb 7-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=dc.4d [ 1700.737079][T15249] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1700.749822][T15249] usb 7-1: Product: syz [ 1700.754220][T15249] usb 7-1: Manufacturer: syz [ 1700.760851][T15249] usb 7-1: SerialNumber: syz [ 1701.071354][T15249] usbtouchscreen 7-1:11.95: probe with driver usbtouchscreen failed with error -71 [ 1701.118676][T15249] usb 7-1: USB disconnect, device number 13 [ 1701.797089][T18084] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1701.811794][T19759] loop5: detected capacity change from 0 to 1024 [ 1701.833887][T19769] netlink: 60 bytes leftover after parsing attributes in process `syz.9.4138'. [ 1701.844499][T19759] EXT4-fs: Ignoring removed nobh option [ 1701.855392][T19759] EXT4-fs: Ignoring removed bh option [ 1701.862333][T19766] netlink: 60 bytes leftover after parsing attributes in process `syz.9.4138'. [ 1701.879657][T19766] netlink: 60 bytes leftover after parsing attributes in process `syz.9.4138'. [ 1701.941130][T19759] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1701.993123][T18084] usb 3-1: Using ep0 maxpacket: 16 [ 1702.000632][T19759] overlayfs: failed to resolve './file1': -2 [ 1702.005624][T18084] usb 3-1: config 8 has an invalid interface number: 39 but max is 0 [ 1702.015398][T18084] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1702.025843][T18084] usb 3-1: config 8 has no interface number 0 [ 1702.032152][T18084] usb 3-1: config 8 interface 39 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1702.045473][T18084] usb 3-1: config 8 interface 39 has no altsetting 0 [ 1702.076679][T19759] overlayfs: failed to resolve './file1': -2 [ 1702.148279][T18084] usb 3-1: New USB device found, idVendor=05ac, idProduct=c6e7, bcdDevice=62.77 [ 1702.158051][T18084] usb 3-1: New USB device strings: Mfr=19, Product=2, SerialNumber=3 [ 1702.166442][T18084] usb 3-1: Product: syz [ 1702.170819][T18084] usb 3-1: Manufacturer: syz [ 1702.175647][T18084] usb 3-1: SerialNumber: syz [ 1702.666138][T19782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1702.949396][T19782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1703.172683][T18256] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1704.372527][T18084] ipheth 3-1:8.39: Unable to find endpoints [ 1704.461343][T18084] usb 3-1: USB disconnect, device number 39 [ 1705.550144][T19801] syzkaller0: entered promiscuous mode [ 1705.555863][T19801] syzkaller0: entered allmulticast mode [ 1705.704301][T19801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1705.713494][T19801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1705.750740][T19794] loop9: detected capacity change from 0 to 8192 [ 1705.961030][T18084] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 1706.186447][T18084] usb 6-1: config 0 has an invalid interface number: 11 but max is 0 [ 1706.194896][T18084] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1706.205341][T18084] usb 6-1: config 0 has no interface number 0 [ 1706.211742][T18084] usb 6-1: config 0 interface 11 has no altsetting 0 [ 1706.218856][T18084] usb 6-1: New USB device found, idVendor=1871, idProduct=0306, bcdDevice=1a.d2 [ 1706.228159][T18084] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1706.339258][T18084] usb 6-1: config 0 descriptor?? [ 1706.604954][T18084] usb 6-1: string descriptor 0 read error: -71 [ 1706.621229][T18084] usb 6-1: Found UVC 0.00 device (1871:0306) [ 1706.628397][T18084] usb 6-1: No valid video chain found. [ 1706.645812][T19818] loop2: detected capacity change from 0 to 2048 [ 1706.870688][T18084] usb 6-1: USB disconnect, device number 52 [ 1706.887546][T19818] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1706.900440][T19818] ext4 filesystem being mounted at /75/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1707.322696][T18318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1708.421579][T19839] x_tables: duplicate underflow at hook 1 [ 1709.630433][T19853] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4167'. [ 1710.549628][T19867] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4175'. [ 1710.597394][T10727] usb 7-1: new full-speed USB device number 14 using dummy_hcd [ 1710.857724][ T30] kauditd_printk_skb: 49 callbacks suppressed [ 1710.857799][ T30] audit: type=1326 audit(1741666788.731:1481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19871 comm="syz.4.4176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54c98d169 code=0x7ffc0000 [ 1710.887254][ T30] audit: type=1326 audit(1741666788.731:1482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19871 comm="syz.4.4176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54c98d169 code=0x7ffc0000 [ 1710.910405][ T30] audit: type=1326 audit(1741666788.741:1483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19871 comm="syz.4.4176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=265 compat=0 ip=0x7fc54c98d169 code=0x7ffc0000 [ 1710.933368][ T30] audit: type=1326 audit(1741666788.741:1484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19871 comm="syz.4.4176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54c98d169 code=0x7ffc0000 [ 1710.959078][ T30] audit: type=1326 audit(1741666788.768:1485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19871 comm="syz.4.4176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc54c98d169 code=0x7ffc0000 [ 1710.982995][ T30] audit: type=1326 audit(1741666788.768:1486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19871 comm="syz.4.4176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54c98d169 code=0x7ffc0000 [ 1711.550069][T19869] loop9: detected capacity change from 0 to 40427 [ 1711.562470][ T30] audit: type=1326 audit(1741666788.925:1487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19871 comm="syz.4.4176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc54c98d169 code=0x7ffc0000 [ 1711.585577][ T30] audit: type=1326 audit(1741666788.925:1488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19871 comm="syz.4.4176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54c98d169 code=0x7ffc0000 [ 1711.608480][ T30] audit: type=1326 audit(1741666788.925:1489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19871 comm="syz.4.4176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc54c98d169 code=0x7ffc0000 [ 1711.635579][ T30] audit: type=1326 audit(1741666788.925:1490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19871 comm="syz.4.4176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54c98d169 code=0x7ffc0000 [ 1711.672228][T19869] F2FS-fs (loop9): build fault injection attr: rate: 690, type: 0x1fffff [ 1711.682902][T19869] F2FS-fs (loop9): heap/no_heap options were deprecated [ 1711.698008][T10727] usb 7-1: config 0 has no interfaces? [ 1711.704057][T10727] usb 7-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1711.713529][T10727] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1711.733992][T10727] usb 7-1: config 0 descriptor?? [ 1711.739575][T19869] F2FS-fs (loop9): invalid crc value [ 1711.774640][T19869] F2FS-fs (loop9): Found nat_bits in checkpoint [ 1712.053469][T19869] F2FS-fs (loop9): Start checkpoint disabled! [ 1712.105257][T19869] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6 [ 1712.321453][T19862] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1712.722888][T19889] kvm: pic: level sensitive irq not supported [ 1712.723244][T19889] kvm: pic: non byte read [ 1713.195715][T19894] loop5: detected capacity change from 0 to 1024 [ 1713.212105][T19894] EXT4-fs: Ignoring removed nobh option [ 1713.218162][T19894] EXT4-fs: Ignoring removed bh option [ 1713.233569][T10727] usb 7-1: USB disconnect, device number 14 [ 1713.662171][T19894] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 1713.798283][T19894] overlay: ./file1 is not a directory [ 1713.816510][T19902] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4186'. [ 1713.825872][T19902] netlink: 'syz.4.4186': attribute type 6 has an invalid length. [ 1713.839525][T19902] netlink: 'syz.4.4186': attribute type 5 has an invalid length. [ 1713.847459][T19902] netlink: 'syz.4.4186': attribute type 4 has an invalid length. [ 1713.983820][T19902] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4186'. [ 1713.993298][T19902] netlink: 112 bytes leftover after parsing attributes in process `syz.4.4186'. [ 1714.003822][T19902] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4186'. [ 1714.020716][T18256] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 1714.457579][T19910] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4190'. [ 1714.692030][T19914] loop6: detected capacity change from 0 to 512 [ 1714.697236][T19913] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1714.808371][T19914] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1714.821719][T19914] ext4 filesystem being mounted at /114/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1714.906666][T19922] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4182'. [ 1715.413066][T18061] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1715.658805][T19919] loop5: detected capacity change from 0 to 32768 [ 1715.672198][T19919] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.4193 (19919) [ 1715.719490][T19919] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1715.734779][T19919] BTRFS info (device loop5): using crc32c (crc32c-x86_64) checksum algorithm [ 1715.743908][T19919] BTRFS info (device loop5): disk space caching is enabled [ 1715.753151][T19919] BTRFS warning (device loop5): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 1715.975260][T19919] BTRFS info (device loop5): rebuilding free space tree [ 1716.007262][T19919] BTRFS info (device loop5): disabling free space tree [ 1716.014579][T19919] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1716.024564][T19919] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1716.284758][T19943] loop6: detected capacity change from 0 to 2048 [ 1716.480888][T19943] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1716.493963][T19943] ext4 filesystem being mounted at /115/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1716.775756][T19943] netlink: 72 bytes leftover after parsing attributes in process `syz.6.4195'. [ 1717.252975][T19919] BTRFS warning (device loop5): failed to trim 1 device(s), last error -512 [ 1717.255119][T18061] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1717.458955][T18256] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1717.753874][T19962] loop9: detected capacity change from 0 to 256 [ 1718.103459][T19968] loop6: detected capacity change from 0 to 2048 [ 1718.254365][T19968] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a842e01c, mo2=0002] [ 1718.282822][T19974] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4207'. [ 1718.305819][T19968] System zones: 0-7 [ 1718.312146][T19968] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1718.351012][T19971] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4206'. [ 1718.394107][ T30] kauditd_printk_skb: 50 callbacks suppressed [ 1718.394183][ T30] audit: type=1326 audit(1741666795.726:1541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19975 comm="syz.5.4203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd32fb8d169 code=0x7ffc0000 [ 1718.424153][ T30] audit: type=1326 audit(1741666795.726:1542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19975 comm="syz.5.4203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd32fb8d169 code=0x7ffc0000 [ 1718.448870][ T30] audit: type=1326 audit(1741666795.726:1543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19975 comm="syz.5.4203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=265 compat=0 ip=0x7fd32fb8d169 code=0x7ffc0000 [ 1718.472194][ T30] audit: type=1326 audit(1741666795.726:1544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19975 comm="syz.5.4203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd32fb8d169 code=0x7ffc0000 [ 1718.498804][ T30] audit: type=1326 audit(1741666795.726:1545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19975 comm="syz.5.4203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd32fb8d169 code=0x7ffc0000 [ 1718.522857][ T30] audit: type=1326 audit(1741666795.726:1546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19975 comm="syz.5.4203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd32fb8d169 code=0x7ffc0000 [ 1718.545822][ T30] audit: type=1326 audit(1741666795.726:1547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19975 comm="syz.5.4203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd32fb8d169 code=0x7ffc0000 [ 1718.546037][ T30] audit: type=1326 audit(1741666795.726:1548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19975 comm="syz.5.4203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd32fb8d169 code=0x7ffc0000 [ 1718.546245][ T30] audit: type=1326 audit(1741666795.735:1549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19975 comm="syz.5.4203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd32fb8d169 code=0x7ffc0000 [ 1718.546460][ T30] audit: type=1326 audit(1741666795.735:1550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19975 comm="syz.5.4203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd32fb8d169 code=0x7ffc0000 [ 1719.004119][T18061] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1720.302690][T20003] loop6: detected capacity change from 0 to 256 [ 1721.206821][T20017] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4221'. [ 1721.339231][T20024] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4222'. [ 1722.248973][T20026] netlink: 'syz.5.4224': attribute type 10 has an invalid length. [ 1722.296501][T20026] veth0_vlan: left promiscuous mode [ 1722.308457][T20026] veth0_vlan: entered promiscuous mode [ 1722.328186][T20026] team0: Device veth0_vlan failed to register rx_handler [ 1723.289358][T10727] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1723.425172][T20032] could not allocate digest TFM handle sha512-ce [ 1723.506931][T10727] usb 3-1: Using ep0 maxpacket: 16 [ 1723.573727][T10727] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 1723.583109][T10727] usb 3-1: config 0 descriptor has 1 excess byte, ignoring [ 1723.590555][T10727] usb 3-1: config 0 has no interface number 0 [ 1723.654065][T10727] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1723.664671][T10727] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1723.673465][T10727] usb 3-1: Product: syz [ 1723.677874][T10727] usb 3-1: Manufacturer: syz [ 1723.682857][T10727] usb 3-1: SerialNumber: syz [ 1723.788816][T10727] usb 3-1: config 0 descriptor?? [ 1723.805249][T10727] usb 3-1: Found UVC 0.00 device syz (046d:08f3) [ 1723.812006][T10727] usb 3-1: No valid video chain found. [ 1724.134632][T20046] loop2: detected capacity change from 0 to 512 [ 1724.229991][T20046] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1724.243433][T20046] ext4 filesystem being mounted at /95/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1724.343216][T10727] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1724.501040][T15249] usb 3-1: USB disconnect, device number 40 [ 1724.570087][T10727] usb 7-1: config 0 has an invalid interface number: 98 but max is 0 [ 1724.582015][T10727] usb 7-1: config 0 has no interface number 0 [ 1724.623988][T10727] usb 7-1: New USB device found, idVendor=2c7c, idProduct=0801, bcdDevice=4a.43 [ 1724.633743][T10727] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1724.641980][T10727] usb 7-1: Product: syz [ 1724.646686][T10727] usb 7-1: Manufacturer: syz [ 1724.651504][T10727] usb 7-1: SerialNumber: syz [ 1724.670867][T10727] usb 7-1: config 0 descriptor?? [ 1724.692651][T10727] qmi_wwan 7-1:0.98: More than one union descriptor, skipping ... [ 1725.200295][T20055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1725.209473][T20055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1725.509384][T18318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1725.519492][ T30] kauditd_printk_skb: 50 callbacks suppressed [ 1725.519566][ T30] audit: type=1326 audit(1741666802.268:1601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20074 comm="syz.4.4235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54c98d169 code=0x7ffc0000 [ 1725.548945][ T30] audit: type=1326 audit(1741666802.286:1602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20074 comm="syz.4.4235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=265 compat=0 ip=0x7fc54c98d169 code=0x7ffc0000 [ 1725.571858][ T30] audit: type=1326 audit(1741666802.286:1603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20074 comm="syz.4.4235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54c98d169 code=0x7ffc0000 [ 1726.064434][ T30] audit: type=1326 audit(1741666802.378:1604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20074 comm="syz.4.4235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc54c98d169 code=0x7ffc0000 [ 1726.090382][ T30] audit: type=1326 audit(1741666802.397:1605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20074 comm="syz.4.4235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54c98d169 code=0x7ffc0000 [ 1726.113290][ T30] audit: type=1326 audit(1741666802.397:1606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20074 comm="syz.4.4235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc54c98d169 code=0x7ffc0000 [ 1726.136270][ T30] audit: type=1326 audit(1741666802.397:1607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20074 comm="syz.4.4235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54c98d169 code=0x7ffc0000 [ 1726.162907][ T30] audit: type=1326 audit(1741666802.415:1608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20074 comm="syz.4.4235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc54c98d169 code=0x7ffc0000 [ 1726.186969][ T30] audit: type=1326 audit(1741666802.415:1609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20074 comm="syz.4.4235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54c98d169 code=0x7ffc0000 [ 1726.189667][T20067] loop9: detected capacity change from 0 to 40427 [ 1726.210268][ T30] audit: type=1326 audit(1741666802.424:1610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20074 comm="syz.4.4235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7fc54c98d169 code=0x7ffc0000 [ 1726.648304][T18068] IPVS: starting estimator thread 0... [ 1726.700615][T20082] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4236'. [ 1726.745912][T20080] IPVS: using max 240 ests per chain, 12000 per kthread [ 1727.445060][T10727] qmi_wwan 7-1:0.98: probe with driver qmi_wwan failed with error -22 [ 1727.490255][T10727] usb 7-1: USB disconnect, device number 15 [ 1728.212814][T20095] loop9: detected capacity change from 0 to 8 [ 1728.270982][T20095] Dev loop9: unable to read RDB block 8 [ 1728.277109][T20095] loop9: unable to read partition table [ 1728.307561][T20095] loop9: partition table beyond EOD, truncated [ 1728.314120][T20095] loop_reread_partitions: partition scan of loop9 (þ被x󟣑– ) failed (rc=-5) [ 1728.344560][T20099] loop2: detected capacity change from 0 to 1024 [ 1728.478876][T10727] IPVS: starting estimator thread 0... [ 1728.610154][T20102] IPVS: using max 240 ests per chain, 12000 per kthread [ 1729.140894][T20114] loop2: detected capacity change from 0 to 64 [ 1729.198500][T20115] loop6: detected capacity change from 0 to 512 [ 1729.273280][T20119] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4251'. [ 1729.325679][T20115] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1729.338902][T20115] ext4 filesystem being mounted at /125/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1729.979370][T20128] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4252'. [ 1729.999360][T18061] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1731.383482][T20134] loop6: detected capacity change from 0 to 512 [ 1731.500853][T20136] loop5: detected capacity change from 0 to 8 [ 1731.527448][T20134] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1731.540709][T20134] ext4 filesystem being mounted at /127/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1731.599412][T20136] SQUASHFS error: xz decompression failed, data probably corrupt [ 1731.607871][T20136] SQUASHFS error: Failed to read block 0x108: -5 [ 1731.614544][T20136] SQUASHFS error: Unable to read metadata cache entry [106] [ 1731.622050][T20136] SQUASHFS error: Unable to read inode 0x0 [ 1731.911334][T18061] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1732.219713][T20136] loop5: detected capacity change from 0 to 128 [ 1732.296475][T20136] VFS: Found a Xenix FS (block size = 512) on device loop5 [ 1732.311502][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 1732.311577][ T30] audit: type=1326 audit(1741666808.551:1651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20143 comm="syz.6.4260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f378d169 code=0x7ffc0000 [ 1732.419695][T20136] syz.5.4258: attempt to access beyond end of device [ 1732.419695][T20136] loop5: rw=2049, sector=2066843070, nr_sectors = 1 limit=128 [ 1732.434253][T20136] Buffer I/O error on dev loop5, logical block 2066843070, lost async page write [ 1732.444722][T20136] syz.5.4258: attempt to access beyond end of device [ 1732.444722][T20136] loop5: rw=2049, sector=8767744, nr_sectors = 1 limit=128 [ 1732.460113][T20136] Buffer I/O error on dev loop5, logical block 8767744, lost async page write [ 1732.469443][T20136] syz.5.4258: attempt to access beyond end of device [ 1732.469443][T20136] loop5: rw=2049, sector=13269809, nr_sectors = 1 limit=128 [ 1732.488479][T20136] Buffer I/O error on dev loop5, logical block 13269809, lost async page write [ 1732.499211][T20136] syz.5.4258: attempt to access beyond end of device [ 1732.499211][T20136] loop5: rw=2049, sector=1157, nr_sectors = 1 limit=128 [ 1732.513105][T20136] Buffer I/O error on dev loop5, logical block 1157, lost async page write [ 1732.522034][T20136] syz.5.4258: attempt to access beyond end of device [ 1732.522034][T20136] loop5: rw=2049, sector=3211264, nr_sectors = 1 limit=128 [ 1732.536814][T20136] Buffer I/O error on dev loop5, logical block 3211264, lost async page write [ 1732.546019][T20136] syz.5.4258: attempt to access beyond end of device [ 1732.546019][T20136] loop5: rw=2049, sector=8768635, nr_sectors = 1 limit=128 [ 1732.560178][T20136] Buffer I/O error on dev loop5, logical block 8768635, lost async page write [ 1732.569478][T20136] syz.5.4258: attempt to access beyond end of device [ 1732.569478][T20136] loop5: rw=2049, sector=13466417, nr_sectors = 1 limit=128 [ 1732.583753][T20136] Buffer I/O error on dev loop5, logical block 13466417, lost async page write [ 1732.601166][T20136] syz.5.4258: attempt to access beyond end of device [ 1732.601166][T20136] loop5: rw=2049, sector=209285, nr_sectors = 1 limit=128 [ 1732.615721][T20136] Buffer I/O error on dev loop5, logical block 209285, lost async page write [ 1732.643429][ T30] audit: type=1326 audit(1741666808.643:1652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20143 comm="syz.6.4260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fd1f378d169 code=0x7ffc0000 [ 1732.666673][ T30] audit: type=1326 audit(1741666808.643:1653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20143 comm="syz.6.4260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f378d169 code=0x7ffc0000 [ 1732.689852][ T30] audit: type=1326 audit(1741666808.643:1654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20143 comm="syz.6.4260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f378d169 code=0x7ffc0000 [ 1732.716245][ T30] audit: type=1326 audit(1741666808.837:1655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20145 comm="syz.4.4261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54c98d169 code=0x7ffc0000 [ 1732.741292][ T30] audit: type=1326 audit(1741666808.837:1656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20145 comm="syz.4.4261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54c98d169 code=0x7ffc0000 [ 1732.826892][T20142] syz.5.4258: attempt to access beyond end of device [ 1732.826892][T20142] loop5: rw=2049, sector=2066843070, nr_sectors = 1 limit=128 [ 1732.832715][T20125] loop2: detected capacity change from 0 to 32768 [ 1732.841328][T20142] Buffer I/O error on dev loop5, logical block 2066843070, lost async page write [ 1732.891400][T20136] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4258'. [ 1732.968055][T20142] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4258'. [ 1732.977562][T20142] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4258'. [ 1733.121867][T20125] [ 1733.121867][T20125] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1733.121867][T20125] [ 1733.126703][T20150] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4262'. [ 1733.132974][T20125] read_mapping_page failed! [ 1733.151003][T20125] diRead: diIAGRead returned -5 [ 1733.708928][T18256] sysv_free_block: trying to free block not in datazone [ 1733.774572][T18256] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1734.890585][T20172] loop6: detected capacity change from 0 to 1024 [ 1734.940837][T20172] EXT4-fs: Ignoring removed oldalloc option [ 1734.947178][T20172] EXT4-fs: Ignoring removed i_version option [ 1734.953710][T20172] EXT4-fs: Invalid journal IO priority (must be 0-7) [ 1735.185583][T20171] loop9: detected capacity change from 0 to 2048 [ 1735.325776][T20171] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a002e018, mo2=0002] [ 1735.334751][T18084] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1735.437105][T20171] System zones: 0-4 [ 1735.495425][T20171] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1735.508564][T20171] ext4 filesystem being mounted at /100/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1735.557203][T18084] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1735.568703][T18084] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1735.580151][T18084] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1735.594056][T18084] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1735.685570][T18084] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1735.695203][T18084] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1735.707325][T18084] usb 7-1: Manufacturer: syz [ 1735.759026][T18084] usb 7-1: config 0 descriptor?? [ 1735.998469][ T30] audit: type=1326 audit(1741666811.965:1657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20179 comm="syz.2.4274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b6e18d169 code=0x7ffc0000 [ 1736.021647][ T30] audit: type=1326 audit(1741666811.965:1658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20179 comm="syz.2.4274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=265 compat=0 ip=0x7f7b6e18d169 code=0x7ffc0000 [ 1736.048190][ T30] audit: type=1326 audit(1741666811.965:1659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20179 comm="syz.2.4274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b6e18d169 code=0x7ffc0000 [ 1736.218939][T18084] appleir 0003:05AC:8243.0007: unknown main item tag 0x0 [ 1736.246505][T18084] appleir 0003:05AC:8243.0007: No inputs registered, leaving [ 1736.264747][ T30] audit: type=1326 audit(1741666812.039:1660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20179 comm="syz.2.4274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7b6e18d169 code=0x7ffc0000 [ 1736.305271][T18084] appleir 0003:05AC:8243.0007: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.6-1/input0 [ 1736.440828][T20184] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4276'. [ 1736.460566][T20184] fuse: Unknown parameter 'rootmŽde' [ 1736.507522][T20172] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4271'. [ 1736.552433][T20172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1736.552893][T20172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1736.564924][T10727] usb 7-1: USB disconnect, device number 16 [ 1737.932888][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1737.939537][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1738.479756][T18300] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1739.482202][T10727] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1739.762169][T10727] usb 3-1: Using ep0 maxpacket: 8 [ 1739.856441][T10727] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1740.013878][T10727] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1740.023593][T10727] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1740.035646][T10727] usb 3-1: Product: syz [ 1740.040035][T10727] usb 3-1: Manufacturer: syz [ 1740.046336][T10727] usb 3-1: SerialNumber: syz [ 1740.163175][T15249] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1740.255927][T10727] usb 3-1: config 0 descriptor?? [ 1740.311071][T10727] streamzap 3-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 1740.387058][T15249] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1740.399249][T15249] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1740.409571][T15249] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1740.422933][T15249] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1740.432235][T15249] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1740.490104][T15249] usb 7-1: config 0 descriptor?? [ 1740.837715][T10727] usb 3-1: USB disconnect, device number 41 [ 1740.972550][T15249] plantronics 0003:047F:FFFF.0008: unbalanced collection at end of report description [ 1740.988534][T15249] plantronics 0003:047F:FFFF.0008: parse failed [ 1740.995544][T15249] plantronics 0003:047F:FFFF.0008: probe with driver plantronics failed with error -22 [ 1741.484732][T20218] FAULT_INJECTION: forcing a failure. [ 1741.484732][T20218] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1741.498804][T20218] CPU: 1 UID: 0 PID: 20218 Comm: syz.5.4287 Tainted: G W 6.14.0-rc6-syzkaller-00003-g4d872d51bc9d #0 [ 1741.498966][T20218] Tainted: [W]=WARN [ 1741.499016][T20218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1741.499095][T20218] Call Trace: [ 1741.499147][T20218] [ 1741.499197][T20218] dump_stack_lvl+0x216/0x2d0 [ 1741.499349][T20218] dump_stack+0x1e/0x24 [ 1741.499465][T20218] should_fail_ex+0x767/0x830 [ 1741.499652][T20218] should_fail+0x2a/0x40 [ 1741.499806][T20218] should_fail_usercopy+0x2e/0x40 [ 1741.499974][T20218] _copy_from_user+0x35/0x110 [ 1741.500149][T20218] get_timespec64+0x5c/0x2d0 [ 1741.500321][T20218] ? __x64_sys_mq_timedreceive+0xc4/0x350 [ 1741.500477][T20218] __x64_sys_mq_timedreceive+0x111/0x350 [ 1741.500645][T20218] x64_sys_call+0x1cd3/0x3c30 [ 1741.500784][T20218] do_syscall_64+0xcd/0x1e0 [ 1741.500928][T20218] ? clear_bhb_loop+0x25/0x80 [ 1741.501089][T20218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1741.501246][T20218] RIP: 0033:0x7fd32fb8d169 [ 1741.501348][T20218] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1741.501461][T20218] RSP: 002b:00007fd330978038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f3 [ 1741.501587][T20218] RAX: ffffffffffffffda RBX: 00007fd32fda5fa0 RCX: 00007fd32fb8d169 [ 1741.501684][T20218] RDX: 00000000000000fd RSI: 0000400000001880 RDI: 0000000000000003 [ 1741.501771][T20218] RBP: 00007fd330978090 R08: 00004000000003c0 R09: 0000000000000000 [ 1741.501862][T20218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1741.501942][T20218] R13: 0000000000000000 R14: 00007fd32fda5fa0 R15: 00007fff299d76e8 [ 1741.502050][T20218] [ 1742.379545][T20220] loop2: detected capacity change from 0 to 1024 [ 1742.402391][T20220] EXT4-fs: Ignoring removed oldalloc option [ 1742.409073][T20220] EXT4-fs: Ignoring removed i_version option [ 1742.415481][T20220] EXT4-fs: Invalid journal IO priority (must be 0-7) [ 1742.458542][T20222] FAULT_INJECTION: forcing a failure. [ 1742.458542][T20222] name failslab, interval 1, probability 0, space 0, times 0 [ 1742.475789][T20222] CPU: 1 UID: 0 PID: 20222 Comm: syz.5.4289 Tainted: G W 6.14.0-rc6-syzkaller-00003-g4d872d51bc9d #0 [ 1742.475942][T20222] Tainted: [W]=WARN [ 1742.475991][T20222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1742.476069][T20222] Call Trace: [ 1742.476122][T20222] [ 1742.476168][T20222] dump_stack_lvl+0x216/0x2d0 [ 1742.476310][T20222] dump_stack+0x1e/0x24 [ 1742.476414][T20222] should_fail_ex+0x767/0x830 [ 1742.476599][T20222] should_failslab+0x17f/0x210 [ 1742.476767][T20222] __kmalloc_cache_node_noprof+0xcc/0xdf0 [ 1742.476912][T20222] ? kmsan_get_metadata+0x13e/0x1c0 [ 1742.477065][T20222] ? __get_vm_area_node+0x180/0x3b0 [ 1742.477229][T20222] ? kmsan_get_metadata+0x13e/0x1c0 [ 1742.477384][T20222] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1742.477561][T20222] __get_vm_area_node+0x180/0x3b0 [ 1742.477718][T20222] ? kmsan_get_metadata+0x13e/0x1c0 [ 1742.477880][T20222] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1742.478051][T20222] __vmalloc_node_range_noprof+0x441/0x26b0 [ 1742.478222][T20222] ? bpf_prog_alloc_no_stats+0x5a/0x750 [ 1742.478383][T20222] ? __update_load_avg_se+0x179/0x11a0 [ 1742.478576][T20222] ? kmsan_get_metadata+0x13e/0x1c0 [ 1742.478737][T20222] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 1742.478893][T20222] ? kmsan_get_metadata+0x13e/0x1c0 [ 1742.479053][T20222] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1742.479215][T20222] ? bpf_prog_alloc_no_stats+0x5a/0x750 [ 1742.479375][T20222] __vmalloc_noprof+0x91/0xb0 [ 1742.479542][T20222] ? bpf_prog_alloc_no_stats+0x5a/0x750 [ 1742.479699][T20222] bpf_prog_alloc_no_stats+0x5a/0x750 [ 1742.479862][T20222] ? ns_capable+0x122/0x1d0 [ 1742.479985][T20222] bpf_prog_alloc+0x4e/0x330 [ 1742.480134][T20222] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1742.480310][T20222] bpf_prog_load+0xf58/0x2e10 [ 1742.480498][T20222] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 1742.480648][T20222] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1742.480801][T20222] ? security_bpf+0x85/0x5a0 [ 1742.480956][T20222] ? _copy_from_user+0xcf/0x110 [ 1742.481114][T20222] __sys_bpf+0x770/0xd90 [ 1742.481287][T20222] __x64_sys_bpf+0xa0/0xe0 [ 1742.481435][T20222] x64_sys_call+0x329c/0x3c30 [ 1742.481582][T20222] do_syscall_64+0xcd/0x1e0 [ 1742.481729][T20222] ? clear_bhb_loop+0x25/0x80 [ 1742.481891][T20222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1742.482052][T20222] RIP: 0033:0x7fd32fb8d169 [ 1742.482149][T20222] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1742.482263][T20222] RSP: 002b:00007fd330978038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1742.482385][T20222] RAX: ffffffffffffffda RBX: 00007fd32fda5fa0 RCX: 00007fd32fb8d169 [ 1742.482488][T20222] RDX: 0000000000000094 RSI: 0000400000000200 RDI: 0000000000000005 [ 1742.482573][T20222] RBP: 00007fd330978090 R08: 0000000000000000 R09: 0000000000000000 [ 1742.482652][T20222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1742.482727][T20222] R13: 0000000000000001 R14: 00007fd32fda5fa0 R15: 00007fff299d76e8 [ 1742.482838][T20222] [ 1742.793107][T20222] syz.5.4289: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1742.815125][T20222] CPU: 1 UID: 0 PID: 20222 Comm: syz.5.4289 Tainted: G W 6.14.0-rc6-syzkaller-00003-g4d872d51bc9d #0 [ 1742.815282][T20222] Tainted: [W]=WARN [ 1742.815335][T20222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1742.815415][T20222] Call Trace: [ 1742.815466][T20222] [ 1742.815514][T20222] dump_stack_lvl+0x216/0x2d0 [ 1742.815655][T20222] dump_stack+0x1e/0x24 [ 1742.815772][T20222] warn_alloc+0x455/0x650 [ 1742.815944][T20222] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1742.816143][T20222] __vmalloc_node_range_noprof+0x4c9/0x26b0 [ 1742.816332][T20222] ? __update_load_avg_se+0x179/0x11a0 [ 1742.816529][T20222] ? kmsan_get_metadata+0x13e/0x1c0 [ 1742.816685][T20222] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 1742.816842][T20222] ? kmsan_get_metadata+0x13e/0x1c0 [ 1742.816999][T20222] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1742.817169][T20222] ? bpf_prog_alloc_no_stats+0x5a/0x750 [ 1742.817337][T20222] __vmalloc_noprof+0x91/0xb0 [ 1742.817511][T20222] ? bpf_prog_alloc_no_stats+0x5a/0x750 [ 1742.817679][T20222] bpf_prog_alloc_no_stats+0x5a/0x750 [ 1742.817848][T20222] ? ns_capable+0x122/0x1d0 [ 1742.817972][T20222] bpf_prog_alloc+0x4e/0x330 [ 1742.818127][T20222] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1742.818302][T20222] bpf_prog_load+0xf58/0x2e10 [ 1742.818497][T20222] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 1742.818662][T20222] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1742.818824][T20222] ? security_bpf+0x85/0x5a0 [ 1742.818982][T20222] ? _copy_from_user+0xcf/0x110 [ 1742.819155][T20222] __sys_bpf+0x770/0xd90 [ 1742.819338][T20222] __x64_sys_bpf+0xa0/0xe0 [ 1742.819492][T20222] x64_sys_call+0x329c/0x3c30 [ 1742.819632][T20222] do_syscall_64+0xcd/0x1e0 [ 1742.819789][T20222] ? clear_bhb_loop+0x25/0x80 [ 1742.819952][T20222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1742.820131][T20222] RIP: 0033:0x7fd32fb8d169 [ 1742.820230][T20222] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1742.820346][T20222] RSP: 002b:00007fd330978038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1742.820478][T20222] RAX: ffffffffffffffda RBX: 00007fd32fda5fa0 RCX: 00007fd32fb8d169 [ 1742.820577][T20222] RDX: 0000000000000094 RSI: 0000400000000200 RDI: 0000000000000005 [ 1742.820664][T20222] RBP: 00007fd330978090 R08: 0000000000000000 R09: 0000000000000000 [ 1742.820748][T20222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1742.820828][T20222] R13: 0000000000000001 R14: 00007fd32fda5fa0 R15: 00007fff299d76e8 [ 1742.820936][T20222] [ 1743.081729][T20222] Mem-Info: [ 1743.081795][T20222] active_anon:30886 inactive_anon:0 isolated_anon:0 [ 1743.081795][T20222] active_file:21580 inactive_file:39564 isolated_file:0 [ 1743.081795][T20222] unevictable:19975 dirty:180 writeback:0 [ 1743.081795][T20222] slab_reclaimable:5593 slab_unreclaimable:25370 [ 1743.081795][T20222] mapped:40949 shmem:26555 pagetables:1330 [ 1743.081795][T20222] sec_pagetables:0 bounce:0 [ 1743.081795][T20222] kernel_misc_reclaimable:0 [ 1743.081795][T20222] free:316265 free_pcp:2966 free_cma:0 [ 1743.082093][T20222] Node 0 active_anon:123544kB inactive_anon:0kB active_file:86320kB inactive_file:158180kB unevictable:78364kB isolated(anon):0kB isolated(file):0kB mapped:163796kB dirty:720kB writeback:0kB shmem:104684kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5744kB pagetables:5320kB sec_pagetables:0kB all_unreclaimable? no [ 1743.082397][T20222] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:32kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1743.082682][T20222] Node 0 DMA free:4096kB boost:0kB min:160kB low:200kB high:240kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:4096kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1743.083015][T20222] lowmem_reserve[]: 0 928 1241 1241 1241 [ 1743.083281][T20222] Node 0 DMA32 free:304692kB boost:0kB min:36108kB low:45132kB high:54156kB reserved_highatomic:0KB active_anon:107928kB inactive_anon:0kB active_file:80588kB inactive_file:76496kB unevictable:76828kB writepending:684kB present:3129332kB managed:951124kB mlocked:0kB bounce:0kB free_pcp:10268kB local_pcp:3932kB free_cma:0kB [ 1743.083620][T20222] lowmem_reserve[]: 0 0 312 312 312 [ 1743.083876][T20222] Node 0 Normal free:15832kB boost:0kB min:12708kB low:15884kB high:19060kB reserved_highatomic:0KB active_anon:15616kB inactive_anon:0kB active_file:5732kB inactive_file:81684kB unevictable:1536kB writepending:36kB present:1048580kB managed:320496kB mlocked:0kB bounce:0kB free_pcp:1620kB local_pcp:1372kB free_cma:0kB [ 1743.084200][T20222] lowmem_reserve[]: 0 0 0 0 0 [ 1743.084457][T20222] Node 1 Normal free:940440kB boost:0kB min:41128kB low:51408kB high:61688kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:1037024kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1743.084770][T20222] lowmem_reserve[]: 0 0 0 0 0 [ 1743.085032][T20222] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB [ 1743.085747][T20222] Node 0 DMA32: 3*4kB (UE) 3*8kB (UME) 689*16kB (UM) 34*32kB (UM) 75*64kB (UM) 174*128kB (UME) 45*256kB (UME) 26*512kB (UME) 11*1024kB (UME) 6*2048kB (UME) 53*4096kB (UM) = 304692kB [ 1743.086830][T20222] Node 0 Normal: 16*4kB (UME) 203*8kB (UME) 194*16kB (UME) 89*32kB (UM) 38*64kB (UME) 9*128kB (M) 6*256kB (UME) 2*512kB (E) 2*1024kB (E) 0*2048kB 0*4096kB = 15832kB [ 1743.089300][T20222] Node 1 Normal: 3*4kB (UME) 4*8kB (UME) 12*16kB (UME) 9*32kB (UME) 7*64kB (E) 6*128kB (ME) 3*256kB (UM) 4*512kB (UME) 2*1024kB (UM) 2*2048kB (UM) 227*4096kB (UM) = 940492kB [ 1743.090374][T20222] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1743.090478][T20222] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1743.090577][T20222] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1743.090674][T20222] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1743.090772][T20222] 106885 total pagecache pages [ 1743.090831][T20222] 0 pages in swap cache [ 1743.090883][T20222] Free swap = 124708kB [ 1743.090936][T20222] Total swap = 124996kB [ 1743.090993][T20222] 2097051 pages RAM [ 1743.091046][T20222] 0 pages HighMem/MovableOnly [ 1743.091098][T20222] 1518866 pages reserved [ 1743.091152][T20222] 0 pages cma reserved [ 1743.144142][T15249] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1743.176106][T10727] usb 7-1: USB disconnect, device number 17 [ 1743.410654][T15249] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1743.410819][T15249] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1743.410976][T15249] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1743.411112][T15249] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1743.416114][T15249] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1743.416261][T15249] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1743.416384][T15249] usb 3-1: Manufacturer: syz [ 1743.420979][T15249] usb 3-1: config 0 descriptor?? [ 1743.932244][T15249] appleir 0003:05AC:8243.0009: unknown main item tag 0x0 [ 1743.945024][T15249] appleir 0003:05AC:8243.0009: No inputs registered, leaving [ 1743.960579][T15249] appleir 0003:05AC:8243.0009: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 1744.223984][T20220] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4288'. [ 1744.266598][T20220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1744.267056][T20220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1744.291764][T15249] usb 3-1: USB disconnect, device number 42 [ 1746.055719][T20242] loop2: detected capacity change from 0 to 32768 [ 1746.145654][T20242] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1746.475354][T20254] loop6: detected capacity change from 0 to 8 [ 1746.630419][T20242] bridge0: entered promiscuous mode [ 1746.642110][T20242] bridge0: port 3(macsec1) entered blocking state [ 1746.649218][T20242] bridge0: port 3(macsec1) entered disabled state [ 1746.656407][T20242] macsec1: entered allmulticast mode [ 1746.661917][T20242] bridge0: entered allmulticast mode [ 1746.671043][T20254] SQUASHFS error: Failed to read block 0x738: -5 [ 1746.677924][T20254] SQUASHFS error: Unable to read metadata cache entry [736] [ 1746.692397][T20242] macsec1: left allmulticast mode [ 1746.697723][T20242] bridge0: left allmulticast mode [ 1746.709209][T20242] bridge0: left promiscuous mode [ 1747.172383][T20257] FAULT_INJECTION: forcing a failure. [ 1747.172383][T20257] name failslab, interval 1, probability 0, space 0, times 0 [ 1747.185647][T20257] CPU: 1 UID: 0 PID: 20257 Comm: syz.5.4300 Tainted: G W 6.14.0-rc6-syzkaller-00003-g4d872d51bc9d #0 [ 1747.185807][T20257] Tainted: [W]=WARN [ 1747.185860][T20257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1747.185937][T20257] Call Trace: [ 1747.185988][T20257] [ 1747.186036][T20257] dump_stack_lvl+0x216/0x2d0 [ 1747.186185][T20257] dump_stack+0x1e/0x24 [ 1747.186300][T20257] should_fail_ex+0x767/0x830 [ 1747.186482][T20257] should_failslab+0x17f/0x210 [ 1747.186657][T20257] __kmalloc_noprof+0x176/0x1230 [ 1747.186794][T20257] ? kfree+0x20/0xdb0 [ 1747.186914][T20257] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1747.187084][T20257] ? tomoyo_realpath_from_path+0x104/0xaa0 [ 1747.187219][T20257] ? tomoyo_path_perm+0x10a/0x940 [ 1747.187377][T20257] ? kmsan_get_metadata+0x13e/0x1c0 [ 1747.187548][T20257] tomoyo_realpath_from_path+0x104/0xaa0 [ 1747.187699][T20257] ? __srcu_read_lock+0x76/0xd0 [ 1747.187836][T20257] tomoyo_path_perm+0x235/0x940 [ 1747.188039][T20257] tomoyo_path_truncate+0x34/0x40 [ 1747.188181][T20257] security_path_truncate+0x1dd/0x5b0 [ 1747.188328][T20257] vfs_truncate+0x7b8/0x900 [ 1747.188484][T20257] do_sys_truncate+0x104/0x240 [ 1747.188638][T20257] __x64_sys_truncate+0x6c/0xa0 [ 1747.188786][T20257] x64_sys_call+0x2e19/0x3c30 [ 1747.188927][T20257] do_syscall_64+0xcd/0x1e0 [ 1747.189087][T20257] ? clear_bhb_loop+0x25/0x80 [ 1747.189249][T20257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1747.189408][T20257] RIP: 0033:0x7fd32fb8d169 [ 1747.189506][T20257] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1747.189620][T20257] RSP: 002b:00007fd330978038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 1747.189746][T20257] RAX: ffffffffffffffda RBX: 00007fd32fda5fa0 RCX: 00007fd32fb8d169 [ 1747.189843][T20257] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000400000000100 [ 1747.189928][T20257] RBP: 00007fd330978090 R08: 0000000000000000 R09: 0000000000000000 [ 1747.190011][T20257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1747.190097][T20257] R13: 0000000000000000 R14: 00007fd32fda5fa0 R15: 00007fff299d76e8 [ 1747.190201][T20257] [ 1747.190253][T20257] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1747.224839][T18318] (syz-executor,18318,0):ocfs2_inode_is_valid_to_delete:886 ERROR: Skipping delete of system file 72 [ 1747.452218][T20258] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4299'. [ 1747.586425][T20254] ip6erspan0: entered promiscuous mode [ 1747.638272][T18318] ocfs2: Unmounting device (7,2) on (node local) [ 1747.804054][T20261] loop9: detected capacity change from 0 to 128 [ 1747.838890][T20261] EXT4-fs: Ignoring removed nobh option [ 1748.067755][T20261] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1748.202516][T20261] ext4 filesystem being mounted at /104/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1748.542425][T18300] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1749.081814][T20275] loop9: detected capacity change from 0 to 1024 [ 1749.132851][T20275] EXT4-fs: Ignoring removed oldalloc option [ 1749.139355][T20275] EXT4-fs: Ignoring removed i_version option [ 1749.145773][T20275] EXT4-fs: Invalid journal IO priority (must be 0-7) [ 1749.548565][T18084] usb 10-1: new high-speed USB device number 44 using dummy_hcd [ 1749.814021][T18084] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1749.826029][T18084] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1749.837459][T18084] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1749.847666][T18084] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1750.151940][T18084] usb 10-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1750.161633][T18084] usb 10-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1750.170283][T18084] usb 10-1: Manufacturer: syz [ 1750.211156][T20281] loop2: detected capacity change from 0 to 40427 [ 1750.249332][T20281] F2FS-fs (loop2): invalid crc value [ 1750.296725][T20281] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1750.319255][T18084] usb 10-1: config 0 descriptor?? [ 1750.592433][T20281] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 1750.818236][T18318] syz-executor: attempt to access beyond end of device [ 1750.818236][T18318] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1750.832773][T18318] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1750.869931][T18084] appleir 0003:05AC:8243.000A: unknown main item tag 0x0 [ 1751.148856][T18084] appleir 0003:05AC:8243.000A: No inputs registered, leaving [ 1751.167847][T18084] appleir 0003:05AC:8243.000A: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.9-1/input0 [ 1751.179330][T20275] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4306'. [ 1751.195019][T20299] loop6: detected capacity change from 0 to 512 [ 1751.493414][T20275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1751.502658][T20275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1751.603528][T15249] usb 10-1: USB disconnect, device number 44 [ 1751.941102][T20304] lo: entered allmulticast mode [ 1751.963174][T20304] lo: left allmulticast mode [ 1753.048147][T20313] Process accounting resumed [ 1753.175089][T20319] dccp_invalid_packet: P.CsCov 9 exceeds packet length 28 [ 1753.218751][T20319] lo: entered promiscuous mode [ 1753.223971][T20319] lo: entered allmulticast mode [ 1753.401360][T20319] No control pipe specified [ 1753.728025][T20328] loop2: detected capacity change from 0 to 512 [ 1753.833650][T20328] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1753.846986][T20328] ext4 filesystem being mounted at /109/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1754.142702][T20328] overlayfs: conflicting lowerdir path [ 1754.425586][T20340] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1754.493533][T18318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1754.496318][T20340] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4326'. [ 1754.603745][T20342] lo: entered allmulticast mode [ 1754.644398][T20342] lo: left allmulticast mode [ 1754.838553][T20344] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4329'. [ 1755.477816][T20350] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4331'. [ 1755.560173][T20350] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4331'. [ 1755.615715][T20352] loop9: detected capacity change from 0 to 1024 [ 1755.650538][T18084] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1755.724167][T20352] EXT4-fs: Ignoring removed oldalloc option [ 1755.730813][T20352] EXT4-fs: Ignoring removed i_version option [ 1755.737310][T20352] EXT4-fs: Invalid journal IO priority (must be 0-7) [ 1755.857933][T18084] usb 3-1: Using ep0 maxpacket: 8 [ 1755.914333][T18084] usb 3-1: config 0 has an invalid interface number: 247 but max is 0 [ 1755.923117][T18084] usb 3-1: config 0 has no interface number 0 [ 1755.967220][T20350] loop6: detected capacity change from 0 to 512 [ 1755.988680][T18084] usb 3-1: New USB device found, idVendor=12d1, idProduct=9d3f, bcdDevice=16.4e [ 1755.999058][T18084] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1756.011296][T18084] usb 3-1: Product: syz [ 1756.015686][T18084] usb 3-1: Manufacturer: syz [ 1756.021848][T18084] usb 3-1: SerialNumber: syz [ 1756.126644][T18084] usb 3-1: config 0 descriptor?? [ 1756.145837][T18084] option 3-1:0.247: GSM modem (1-port) converter detected [ 1756.180962][T20350] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1756.300135][T18068] usb 10-1: new high-speed USB device number 45 using dummy_hcd [ 1756.437925][T20350] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1756.456207][T20350] ext4 filesystem being mounted at /146/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1756.591702][T18068] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1756.603131][T18068] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1756.614799][T18068] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1756.624894][T18068] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1756.810949][T18068] usb 10-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1756.820641][T18068] usb 10-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1756.829071][T18068] usb 10-1: Manufacturer: syz [ 1756.884152][T18068] usb 10-1: config 0 descriptor?? [ 1757.000090][T20363] loop5: detected capacity change from 0 to 64 [ 1757.405087][T20364] ip6erspan0: entered promiscuous mode [ 1757.488057][T18068] appleir 0003:05AC:8243.000B: unknown main item tag 0x0 [ 1757.525143][T18068] appleir 0003:05AC:8243.000B: No inputs registered, leaving [ 1757.572336][T18068] appleir 0003:05AC:8243.000B: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.9-1/input0 [ 1757.780118][T18061] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1757.822613][T20352] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4330'. [ 1757.987225][T20352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1757.996472][T20352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1758.179582][T10725] usb 10-1: USB disconnect, device number 45 [ 1758.759845][T10725] usb 3-1: USB disconnect, device number 43 [ 1758.767804][T10725] option 3-1:0.247: device disconnected [ 1759.032146][T20382] netlink: 'syz.4.4341': attribute type 1 has an invalid length. [ 1759.107115][T20382] bond1: entered promiscuous mode [ 1759.120100][T20382] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1759.221430][T20386] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1759.242568][T20386] bond1: (slave bond2): making interface the new active one [ 1759.250303][T20386] bond2: entered promiscuous mode [ 1759.258960][T20386] bond1: (slave bond2): Enslaving as an active interface with an up link [ 1759.265589][T20382] No such timeout policy "syz0" [ 1759.358933][T20388] lo: entered allmulticast mode [ 1759.369140][T20388] lo: left allmulticast mode [ 1759.852021][T20398] xt_l2tp: v2 doesn't support IP mode [ 1759.958337][T20401] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4346'. [ 1760.432729][T20411] FAULT_INJECTION: forcing a failure. [ 1760.432729][T20411] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1760.450926][T20411] CPU: 0 UID: 0 PID: 20411 Comm: syz.6.4348 Tainted: G W 6.14.0-rc6-syzkaller-00003-g4d872d51bc9d #0 [ 1760.451093][T20411] Tainted: [W]=WARN [ 1760.451142][T20411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1760.451223][T20411] Call Trace: [ 1760.451274][T20411] [ 1760.451322][T20411] dump_stack_lvl+0x216/0x2d0 [ 1760.451464][T20411] dump_stack+0x1e/0x24 [ 1760.451579][T20411] should_fail_ex+0x767/0x830 [ 1760.451764][T20411] should_fail+0x2a/0x40 [ 1760.451923][T20411] should_fail_usercopy+0x2e/0x40 [ 1760.452108][T20411] _copy_to_user+0x34/0x120 [ 1760.452272][T20411] ? sctp_getsockopt_pf_expose+0x707/0x7e0 [ 1760.452444][T20411] sctp_getsockopt_pf_expose+0x724/0x7e0 [ 1760.452623][T20411] sctp_getsockopt+0x611/0x12a0 [ 1760.452789][T20411] ? __pfx_sctp_getsockopt+0x10/0x10 [ 1760.452948][T20411] sock_common_getsockopt+0xa1/0xe0 [ 1760.453132][T20411] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 1760.453301][T20411] do_sock_getsockopt+0x5d3/0x9c0 [ 1760.453459][T20411] __x64_sys_getsockopt+0x449/0x590 [ 1760.453620][T20411] x64_sys_call+0x1554/0x3c30 [ 1760.453764][T20411] do_syscall_64+0xcd/0x1e0 [ 1760.453916][T20411] ? clear_bhb_loop+0x25/0x80 [ 1760.454086][T20411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1760.454251][T20411] RIP: 0033:0x7fd1f378d169 [ 1760.454351][T20411] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1760.454466][T20411] RSP: 002b:00007fd1f460a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1760.454589][T20411] RAX: ffffffffffffffda RBX: 00007fd1f39a5fa0 RCX: 00007fd1f378d169 [ 1760.454688][T20411] RDX: 0000000000000083 RSI: 0000000000000084 RDI: 0000000000000003 [ 1760.454766][T20411] RBP: 00007fd1f460a090 R08: 0000400000000280 R09: 0000000000000000 [ 1760.454856][T20411] R10: 0000400000000100 R11: 0000000000000246 R12: 0000000000000001 [ 1760.454942][T20411] R13: 0000000000000000 R14: 00007fd1f39a5fa0 R15: 00007ffc4fac5dc8 [ 1760.455053][T20411] [ 1761.723845][T20416] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4352'. [ 1761.759607][T20416] netpci0: tun_chr_ioctl cmd 2147767507 [ 1761.857561][T20426] loop6: detected capacity change from 0 to 1024 [ 1761.936148][T20426] EXT4-fs: Ignoring removed oldalloc option [ 1761.942645][T20426] EXT4-fs: Ignoring removed i_version option [ 1761.949408][T20426] EXT4-fs: Invalid journal IO priority (must be 0-7) [ 1762.180334][T20431] xt_l2tp: invalid flags combination: c [ 1762.450152][T18068] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1762.520580][T20435] lo: entered allmulticast mode [ 1762.565519][T20435] lo: left allmulticast mode [ 1762.721281][T18068] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1762.732554][T18068] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1762.743833][T18068] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1762.753894][T18068] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1762.836896][T18068] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1762.846378][T18068] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1762.854708][T18068] usb 7-1: Manufacturer: syz [ 1762.885648][T20440] loop5: detected capacity change from 0 to 512 [ 1762.926408][T18068] usb 7-1: config 0 descriptor?? [ 1762.929926][T20440] EXT4-fs: Ignoring removed orlov option [ 1763.046210][T20440] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1763.059769][T20440] ext4 filesystem being mounted at /130/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1763.465016][T18068] appleir 0003:05AC:8243.000C: unknown main item tag 0x0 [ 1763.491960][T18068] appleir 0003:05AC:8243.000C: No inputs registered, leaving [ 1763.534521][T18256] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1763.541707][T18068] appleir 0003:05AC:8243.000C: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.6-1/input0 [ 1763.763959][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 1763.764032][ T30] audit: type=1326 audit(1741666837.561:1687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20452 comm="syz.4.4364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54c98d169 code=0x7ffc0000 [ 1763.764247][ T30] audit: type=1326 audit(1741666837.561:1688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20452 comm="syz.4.4364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54c98d169 code=0x7ffc0000 [ 1763.764456][ T30] audit: type=1326 audit(1741666837.588:1689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20452 comm="syz.4.4364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fc54c98d169 code=0x7ffc0000 [ 1763.764665][ T30] audit: type=1326 audit(1741666837.588:1690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20452 comm="syz.4.4364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54c98d169 code=0x7ffc0000 [ 1763.765815][ T30] audit: type=1326 audit(1741666837.588:1691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20452 comm="syz.4.4364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fc54c98d169 code=0x7ffc0000 [ 1763.789090][ T30] audit: type=1326 audit(1741666837.607:1692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20452 comm="syz.4.4364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54c98d169 code=0x7ffc0000 [ 1763.789310][ T30] audit: type=1326 audit(1741666837.607:1693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20452 comm="syz.4.4364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54c98d169 code=0x7ffc0000 [ 1763.790225][T20426] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4354'. [ 1763.803622][T20426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1763.804078][T20426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1763.806467][ T30] audit: type=1326 audit(1741666837.625:1694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20452 comm="syz.4.4364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fc54c98d169 code=0x7ffc0000 [ 1763.806673][ T30] audit: type=1326 audit(1741666837.625:1695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20452 comm="syz.4.4364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54c98d169 code=0x7ffc0000 [ 1763.806880][ T30] audit: type=1326 audit(1741666837.625:1696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20452 comm="syz.4.4364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54c98d169 code=0x7ffc0000 [ 1763.924738][T10725] usb 7-1: USB disconnect, device number 18 [ 1764.351142][T20449] loop9: detected capacity change from 0 to 4096 [ 1764.527312][T20449] NILFS (loop9): invalid segment: Checksum error in segment payload [ 1764.527439][T20449] NILFS (loop9): trying rollback from an earlier position [ 1764.528626][T20449] NILFS (loop9): invalid segment: Checksum error in segment payload [ 1764.528720][T20449] NILFS (loop9): error -22 while searching super root [ 1764.660563][T20456] loop5: detected capacity change from 0 to 32768 [ 1764.816920][T20456] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,no_data_io [ 1764.818662][T20456] bcachefs (loop5): recovering from clean shutdown, journal seq 10 [ 1764.819538][T20456] bcachefs (loop5): Version upgrade from 1.3: rebalance_work to 1.7: mi_btree_bitmap incomplete [ 1764.819538][T20456] Doing compatible version upgrade from 1.3: rebalance_work to 1.20: directory_size [ 1764.819538][T20456] running recovery passes: check_allocations,check_extents_to_backpointers,check_subvols,check_inodes,check_dirents [ 1764.821140][T20456] bcachefs (loop5): dropping and reconstructing all alloc info [ 1764.822713][T20456] bcachefs (loop5): insufficient writeable journal devices available: have 0, need 1 [ 1764.822713][T20456] rw journal devs: [ 1765.180372][T20456] bcachefs (loop5): accounting_read... done [ 1765.189733][T20456] bcachefs (loop5): alloc_read... done [ 1765.195723][T20456] bcachefs (loop5): stripes_read... done [ 1765.202031][T20456] bcachefs (loop5): snapshots_read... done [ 1765.211582][T20456] bcachefs (loop5): done starting filesystem [ 1765.534005][T18068] usb 7-1: new full-speed USB device number 19 using dummy_hcd [ 1765.693960][T20477] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4367'. [ 1765.813160][T18068] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1765.824505][T18068] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1765.836350][T18068] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 1766.002060][T18068] usb 7-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1766.011610][T18068] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1766.019852][T18068] usb 7-1: Product: syz [ 1766.024398][T18068] usb 7-1: Manufacturer: syz [ 1766.029223][T18068] usb 7-1: SerialNumber: syz [ 1766.101611][T18068] usb 7-1: config 0 descriptor?? [ 1766.128167][T18470] ===================================================== [ 1766.135605][T18470] BUG: KMSAN: uninit-value in bch2_write_inode+0xd45/0x12b0 [ 1766.143382][T18470] bch2_write_inode+0xd45/0x12b0 [ 1766.148631][T18470] bch2_vfs_write_inode+0x8a/0x150 [ 1766.154189][T18470] __writeback_single_inode+0x8da/0x1290 [ 1766.160126][T18470] writeback_sb_inodes+0xac4/0x1c90 [ 1766.165774][T18470] wb_writeback+0x4df/0xcb0 [ 1766.170562][T18470] wb_workfn+0x40b/0x1940 [ 1766.175275][T18470] process_scheduled_works+0xc1a/0x1e80 [ 1766.181165][T18470] worker_thread+0xea7/0x14f0 [ 1766.186165][T18470] kthread+0x6b9/0xef0 [ 1766.190525][T18470] ret_from_fork+0x6d/0x90 [ 1766.195310][T18470] ret_from_fork_asm+0x1a/0x30 [ 1766.200371][T18470] [ 1766.202916][T18470] Local variable io_opts.i118 created at: [ 1766.208979][T18470] bch2_write_inode+0x871/0x12b0 [ 1766.214207][T18470] bch2_vfs_write_inode+0x8a/0x150 [ 1766.223908][T18470] [ 1766.226359][T18470] CPU: 1 UID: 0 PID: 18470 Comm: kworker/u8:3 Tainted: G W 6.14.0-rc6-syzkaller-00003-g4d872d51bc9d #0 [ 1766.240716][T18470] Tainted: [W]=WARN [ 1766.244751][T18470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1766.255145][T18470] Workqueue: writeback wb_workfn (flush-bcachefs-20) [ 1766.261633][T20471] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1766.262293][T18470] ===================================================== [ 1766.276666][T18470] Disabling lock debugging due to kernel taint [ 1766.283117][T18470] Kernel panic - not syncing: kmsan.panic set ... [ 1766.289673][T18470] CPU: 1 UID: 0 PID: 18470 Comm: kworker/u8:3 Tainted: G B W 6.14.0-rc6-syzkaller-00003-g4d872d51bc9d #0 [ 1766.302306][T18470] Tainted: [B]=BAD_PAGE, [W]=WARN [ 1766.307443][T18470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1766.317661][T18470] Workqueue: writeback wb_workfn (flush-bcachefs-20) [ 1766.324613][T18470] Call Trace: [ 1766.328010][T18470] [ 1766.331053][T18470] dump_stack_lvl+0x216/0x2d0 [ 1766.335902][T18470] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1766.341934][T18470] dump_stack+0x1e/0x24 [ 1766.346270][T18470] panic+0x4e2/0xcf0 [ 1766.350373][T18470] ? kmsan_get_metadata+0x61/0x1c0 [ 1766.355702][T18470] kmsan_report+0x2c7/0x2d0 [ 1766.360396][T18470] ? kmsan_get_metadata+0x60/0x1c0 [ 1766.365702][T18470] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1766.371707][T18470] ? __msan_warning+0x95/0x120 [ 1766.376642][T18470] ? bch2_write_inode+0xd45/0x12b0 [ 1766.381933][T18470] ? bch2_vfs_write_inode+0x8a/0x150 [ 1766.387420][T18470] ? __writeback_single_inode+0x8da/0x1290 [ 1766.393403][T18470] ? writeback_sb_inodes+0xac4/0x1c90 [ 1766.398947][T18470] ? wb_writeback+0x4df/0xcb0 [ 1766.403781][T18470] ? wb_workfn+0x40b/0x1940 [ 1766.408496][T18470] ? process_scheduled_works+0xc1a/0x1e80 [ 1766.414446][T18470] ? worker_thread+0xea7/0x14f0 [ 1766.419465][T18470] ? kthread+0x6b9/0xef0 [ 1766.423869][T18470] ? ret_from_fork+0x6d/0x90 [ 1766.428630][T18470] ? ret_from_fork_asm+0x1a/0x30 [ 1766.433737][T18470] ? kmsan_get_metadata+0x13e/0x1c0 [ 1766.439132][T18470] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 1766.445664][T18470] ? kmsan_get_metadata+0x13e/0x1c0 [ 1766.451055][T18470] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1766.457067][T18470] ? kmsan_get_metadata+0x13e/0x1c0 [ 1766.462466][T18470] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1766.468485][T18470] ? bch2_inode_opts_get+0xd03/0xe40 [ 1766.473957][T18470] ? kmsan_get_metadata+0x13e/0x1c0 [ 1766.479348][T18470] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1766.485364][T18470] __msan_warning+0x95/0x120 [ 1766.490138][T18470] bch2_write_inode+0xd45/0x12b0 [ 1766.495268][T18470] ? __bch2_inode_peek+0x221/0x890 [ 1766.500564][T18470] ? __pfx_inode_update_times_fn+0x10/0x10 [ 1766.506610][T18470] bch2_vfs_write_inode+0x8a/0x150 [ 1766.511925][T18470] ? __pfx_bch2_vfs_write_inode+0x10/0x10 [ 1766.517853][T18470] __writeback_single_inode+0x8da/0x1290 [ 1766.523684][T18470] writeback_sb_inodes+0xac4/0x1c90 [ 1766.529118][T18470] ? kmsan_get_metadata+0x13e/0x1c0 [ 1766.534516][T18470] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1766.540529][T18470] wb_writeback+0x4df/0xcb0 [ 1766.545207][T18470] ? queue_io+0x451/0x780 [ 1766.549715][T18470] wb_workfn+0x40b/0x1940 [ 1766.554253][T18470] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1766.560288][T18470] ? __pfx_wb_workfn+0x10/0x10 [ 1766.565255][T18470] process_scheduled_works+0xc1a/0x1e80 [ 1766.571053][T18470] worker_thread+0xea7/0x14f0 [ 1766.575888][T18470] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1766.581909][T18470] kthread+0x6b9/0xef0 [ 1766.586138][T18470] ? __pfx_worker_thread+0x10/0x10 [ 1766.591416][T18470] ? __pfx_kthread+0x10/0x10 [ 1766.596175][T18470] ret_from_fork+0x6d/0x90 [ 1766.600763][T18470] ? __pfx_kthread+0x10/0x10 [ 1766.605522][T18470] ret_from_fork_asm+0x1a/0x30 [ 1766.610474][T18470] [ 1766.613851][T18470] Kernel Offset: disabled [ 1766.618237][T18470] Rebooting in 86400 seconds..