last executing test programs: 13.551233544s ago: executing program 0 (id=299): memfd_create(&(0x7f0000000380)='\x103q}2\x9a\xce\xaf\x03\xdfyR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7R\x94\xaf\xbb\xdcM\x90k\xd6\x05\r\x84\x87\x1e?\x10\x95SWFO{\x1f\x1b!\xd5\x991D\x1c\b\x8c`\xeaSA\x90m\xb6&\xd0\xf1\xb3\xed:\x82\xbd\xe3i|BL\x1f\x9d\x00\x00\xc5\xb8$\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\r\xd6h\x80\x8fQ|\xf5d\x10\x10\xd7\t\x00\x00\x00\x00\x00\x00\x00<\xfeeS\xb2l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfaa\xd3\xf1\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7~x\xb8vo\xe6\x15@\xc9\"CY\x11\xb9u\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D4E^7%8\x94y\x90\xf0l\xa0\'L%\xd4\xda\xee\x81\x98\xcc\xfd\xa2\x89$\x9by\xf1\xbb\x01\xb7\xcd\xbf\x99\x1f\x90@b\x03\xb3\xe0CfU\x16{\xbey\xa1cs\x96U\x11\xdb*\xdf\xcdG\xc7z\x85\x8aE\xf7\xd5\x9dAj\xe3\xfb\xc4\xa0\x14\x87\x19\x17\xed\xd1\x185%Q%\x81\xfaK\x82\xec=\xa3\xb8~\xb6O\xbd\x19*\xdb\x1c\x10\xa4\x8dIl\xc1\xceG\xd0h\xa1\xab:dP\xb6\xa0BR\xbe\x03\xac\xd9\x87\x00@\x80\x94\xd88\xc9\x03\x97\x17r\x85#\x7f\x8cu\x8f\xcc\x7fF\xb5\xea\xa6\xc1\x9d\xac\x89\xc9\xa1tuJw\xee\x1a\xe73\xa8\xadS\xd1\x11#d\xc2\xcfdj\x9ec\x93\xd5K\x90*_3\x89\v\xab\x04ih\x12\x93\xc5m\x8f~{\xe5\x85\xa5g\x00\x00\x00\xe45Q\xab%\xa8[\xf3\x17\x94\xf8\xdfq\xff\xd2?\xafW\xde\x1bW]\x1f\aaV\xc5\xc82*\xc7\xc5\"C}L\x10e\xc6\x90\xc0\xf9z\xb6+/d\x86\xf2\xbe\xc9:u\t\\e\x05)\xe4\xd2\xc4\x1a\xc9\xac\xdb\x925\x02\x94@\xa2\xe1\xee\x16\xb4\x98\xff\x0f\xbb\xb2\x81\xcf\x13g6l\xcc\xc8\x02\v\xa2\xb2\xf6\xbf@d\xcecC\x9fVz\xf4\x14\xa5\x8b|\xe1\xc0\xfa3X\xf4\xd9L\xe6\x8f\x9dy\x0fX.\xc5EQ\xd1/\xa1\xd0\x03>\xf0\x90\x13B\xe2\x97\x8b!\xf7\"\xecX\x92\xab\xbc^\xb2\x80@\xcc+\xbbp\xdc|N\xd3[=G\xb2\xe1\x9c\xc5\x81y\x84\xef\xacQ\x01\xdd\xe7<\xb8\xf1Hn\x86\xa6\xe3\x18N\x19\"[-\xdb\xef\xc3\xe0\xa8}', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000cf000000080000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000056a9dee2c2ac9ff244c453ba06"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f0000001d80), &(0x7f0000001d40)=r0}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x18) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB, @ANYRESHEX, @ANYRESOCT]) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r1, &(0x7f0000000300), 0x0}, 0x20) r2 = syz_clone(0x2000000, &(0x7f0000000240)="808dae83b9c77d657af2f462607ce25009f667774764c6844bb269edcc586e783598fa70e18a89bf760a0b9fe5d68bf384d5936fa2d70f2adc1c4de2e61b279d74631c05a0e9640da2c44f7ce0acf707f43a9b0715b07b8aa19f64a6316bc030238a13e015f77a56083700c3bd63c841eb2fede20c54eff8bc9be4f8f5f884e54ea793526003e2d9487381f6161f721b4d2aebac5ad312", 0x97, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000600)="7c61556fb0e63e3d692ca9148e904a126840bcbe64e2d2ca7253fc5dd25020cd2f5e60cded89e3a495b4b284af164a70fb00658a372e4d8fc2ef75a67847c11be3fb4891fa233f8e7c0a74492c689e1277460cba55c9305a190e02426822cd1dc4f6f459ce499d47da6fa14b3ada18217666f6d9874779c2a46d273670f5c368ba44bce665bf3e68814b15922adbc538b429ed32ebe9392e1c24eb9170e87a0185a9d1e7b1cbf20c13d5b54fb4b8fe56c7") ptrace$ARCH_SET_CPUID(0x1e, r2, 0x1, 0x1012) 11.871075388s ago: executing program 0 (id=303): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) epoll_create1(0x0) socket(0x1, 0x80802, 0x0) epoll_create1(0x0) socket(0x840000000002, 0x3, 0x100) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x801, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x80001, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="540000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0) (fail_nth: 7) 9.376117951s ago: executing program 0 (id=309): r0 = io_uring_setup(0x553c, &(0x7f0000000180)={0x0, 0xac72, 0x40, 0x200, 0x24a}) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r2, 0x29, 0x48, &(0x7f00000000c0)=0xa, 0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000340)={0x0, 0x32, "85bbac481af71cfc928869e6ab9e37b2c4acb78699fc404bb87907000000000000005404887579c5f29a2571e900b7a7dbaa"}, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x2a5) socket(0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000005c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010000000000000000003600000008000300", @ANYRES32=r6], 0x1c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0xb5e0}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) ioctl$HIDIOCAPPLICATION(r7, 0x4802, 0xfffffffffffffffd) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x7}, @hci_rp_read_enc_key_size={{}, {0x1, 0xc9, 0x3f}}}}, 0xa) io_uring_register$IORING_UNREGISTER_PBUF_RING(r0, 0x15, 0x0, 0x1) 9.102457844s ago: executing program 4 (id=310): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000400)='./bus\x00', 0x800, &(0x7f0000000280)=ANY=[@ANYRES8=0x0, @ANYRESDEC=0x0, @ANYRES64, @ANYRESHEX=0x0], 0x1, 0x36e, &(0x7f0000000f80)="$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") open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r0 = open(0x0, 0x185102, 0x11) r1 = fsopen(&(0x7f0000000040)='ceph\x00', 0x0) io_uring_enter(r0, 0x303d, 0x2f6a, 0xd, &(0x7f0000000200)={[0x44916b6d]}, 0x8) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000100)='source', &(0x7f0000000400)='#\n$)-.\xc7\x9d\xb2a\r\xd7\xef\xc5\x112s\x88\n\x13\xfa\xd5?\xc7\xfd&\x9e\x94\x9fN\x1aG\xd8\xde\x18\xe8\xa3\b\xf7s\x13h\x8d\r\xbb|&#\xe9\xa3\'\x91>C\x1bV*\xeb\f\xdb\x89\xb7}@\x8f\x97\x18\xce\x92\xc9\xa8\x1c\x9dp\xfe.\x84\x9f\x8d\x1e+Hq\x89\x83\xbb\x9dC\xd6Hy\xfao\x04\xa4\xb6\x88\xdb\xa1b\xae\xa7\x87=/o\xf3\x96\x00\x00\x00\x00\x00\b\x00\x00\x01\xab\x90Q\xe8r\xe7\r\'-06,\xff\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\x04Qr\xb9\xe495\x12E\x06\xe5\x8f\x83Vb\xf1\xbc\xb9E\xef\x11\x1a\x9bH$\x1f^\x9dX%0\xcc\xc9\x86\xaa\xd0\x9c\a\x00\x003\xf7\xc9\x14\xd3\xdb\x97v\x9c\xbd%fN1\xd4[\xa0\x0f\xdd.\x15\xf1)\xd6\xd8\x1cb\xc5\xd9=c\xb5<|+K*\x9f\x01u\xb0\xe4\x98_\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\xca\xdd\xf2aq\x19\xcc0xffffffffffffffff]) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) pselect6(0x40, &(0x7f0000000500), 0x0, &(0x7f0000000140)={0x1ff, 0x75fd}, 0x0, 0x0) write$rfkill(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000be02e708cf100355678f0102030109022d00010806007c0904bc0003e404ac000905040310000607030905050308000e0e9a0905fdff07"], 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x10, &(0x7f0000000040)=0x7fff, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x12, 0x2, &(0x7f00000000c0)=@raw=[@map_fd={0x18, 0xb, 0x1, 0x0, r3}], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x81, &(0x7f00000002c0)=""/129, 0x41000, 0x12, '\x00', 0x0, @fallback, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r3, 0x6, &(0x7f0000000380)=[r3], &(0x7f0000000440)=[{0x4, 0x5, 0x9, 0xc}, {0x2, 0x4, 0x5, 0xc}, {0x3, 0x5, 0x10, 0xc}, {0x2, 0x2, 0x4, 0x5}, {0x2, 0x5, 0x3}, {0x3, 0x5, 0x5, 0xb}], 0x10, 0xd, @void, @value}, 0x94) r5 = syz_open_dev$vcsn(&(0x7f0000000580), 0xc017, 0x4000) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f00000005c0)=0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000002580)={{r5}, r6, 0x2, @inherit={0x68, &(0x7f0000000600)={0x0, 0x4, 0x80000001, 0x9, {0x20, 0x9, 0x3, 0x0, 0x7}, [0xf77c, 0x4, 0xc27, 0x0]}}, @name="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"}) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x5c}}, 0x0) syz_mount_image$udf(&(0x7f0000000c40), &(0x7f0000000c80)='./file0\x00', 0x800000, &(0x7f0000000d00)=ANY=[@ANYBLOB='umask=00000000000000000177777,gid=', @ANYRESDEC=r0, @ANYBLOB="2c66696c657365743d30303030303030303030303030303030303030303030303030303030303030303132372c756e64656c6574802c6e6f7374726963742c6c6f6e6761642c6c6f6e6761642c73686f727461642c766f6c756d653d30303030303030303030303030303030303030362c00"], 0x1, 0xc3a, &(0x7f0000001940)="$eJzs3V1oXOl5B/DnnSOtJW/SzG42zodzMbCBbL3ZRbK8axVvQI4VkQXjNSsrFwsFjy3ZHVYayZJcvKEEFxJKSFtccpHLGjaB3tVXLYQG3KttCQHRq9KL4rYbs72bBNKWXkThzLwjjbS2paxtfax/P2P/Z848Z+Y9s3pGZ2bPOycAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIivff3k0HDa7VEAADvpzOSbQyN+/wPAE+Wc9/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGwtRRHfiRTvfr+VzrevdwycbjSvXpsan7j3aoMpUlSiaNeXfweGj44ce+XV46PdfPD6j9rn443Jcydrp+bnFhZnlpZmpmtTzcbF+emZbd/Dw66/2ZH2E1Cbe/vq9KVLS7WjL49suPla9e6Bpw9VT4weHnmrWzs1PjEx2VPT17/FY2x1e4/0u42eJ8RTUcQ3IsV7L32Q6hFRiYfvhS1eOx63wegr+6+9EVPjE+0NmW3Um8vljamSq/oiqj0rjXV75KP24k4Zi7he/ncqB3yk3LzJhfpi/cLsTO1sfXG5sdyYb6ZKZ7Tl9lSjEqMpYiEiWsVuD569pj+KOBYp7v6qlS5ERNHtgxfPTL45NLL1HfTtwCDv87DVImIl9kHPwh51IIr4q0jxg/NDcTH3Vbtt3o/4cpmvRVwp83aKG/l6Kl8gRiN+6fcJ7Gt9UcTPI8V8aqXpbu+39ytPf7P2evPSfE9td79y378/2En2TdjDBqKIC+09/lb66B92AQAAAAAAAAAAAAA7o4ifRIpbcy+kheidU9poXq6dq1+Y7RwV3D32v5bXWl1dXa2mTtZyDuUcy3k25/mcCzmv57yR82bOWzlv51zJeSdnK2dU8uPnrOUcyjmW82zO8zkXcl7PeSPnzZy3ct7OuZLzTs5WzjDvCQAAAAAAAAAAAAAAAAAAgEdsMIqYiBQ33/3j9nmlo31e+k+dGD0z/lzvOeM/u8X9lLUvR8RPYnvn5O3P5xpPlfLPo98uYGsDUcS38/n//nS3BwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOwJlSjiO5Hih79upUgRMRZxPjp5p9jt0QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAApYFUxKlI8d9fH2hfX4mIL0TEb1bLPxH/t7rZbo8YAAAAAAAAAAAAAAAAAAAAPoZSEVcixY/ea6VqRFyr3j3w9KHqidHDI28VUUQqS3rr35g8d7J2an5uYXFmaWlmujbVbFycn57Z7sMNnG40r16bGp94LBuzpcHHPP7BgVPzC+8sNi7/0fI9bz84cPLC0vJi/eK9b47B6IsY6l1ypD3gqfGJ9qBnG/Vme9VUuc8A+yJq290YAAAAAAAAAAAAAAAAAAAA9oyDqYjxSPH8T4+l7rzxvs6c/092rhVrtT/+k/XvApjdlF293x+wnctpuwM90p54X5san5iY7Fnc1//h0nJMKRXxmUhx+B8+154Pn+LgPefGl3V/HilG//9YrqseLuvGNlQNHJkan6idmW++dHJ2dv5ifbl+YXamNrlQv7jtLw4AAAAAAAAAAAAAAAAAAACABziYiviLSHHs9ZXUPe98nv/f17nWM///tYjuaecH0sZc057b/3vtuf2dy586Mfr60efvt/xxzP8vx5RSEb+JFM/89efa59Pvzv8f2lRb1v0oUvz8u1/MdZWnyrrh7uZ07vFSY3ZmqKx9MVJ872y3Ntq1r+baT6/XDpe1/xgpnv3DjbXHc+1z67VHy9q7kWLizL1rP7NeO1LWDkaKr/xZrVt7sKz9Wq49tF778sX52entPr08mcr+//dI8aXhb6Tuz/x9+7/n+z+ub8o1H+r5B19+VP1f7Vl2Pff1au7/4S36/0qk+MsbX8x1nd47mm9/pv3vev9/L1L8/ic31r6Sa59drx3e7mbBbir7/58jxcqdf137mc/9nztrvUN7+/8LfRuzu1+wW/3/TM+yah7XyO/4XMCTZumdb71dn52dWdztC/17YxiP/cIn8hO/V8bjwj678Ikd6txdfFECdkS5//8/keKrV4rUfR+b9//zC836+////fb6/v+JTblml/b/n+1ZdiK/a+nvixhYnlvo/2zEwNI733qpMVe/PHN5pjkyMnr8D44NHz0+3P9U9839+qVtP3ew35X9/3ak+PHf/sva59gb3//f+/O/g5tyzS71/6d7t2nD3tG2nwp44pT9/zeR4t9ufrD2/5se9Plf93O+F57fmIPdol3q/+d6ltXyP6M9y14oIk5u97EAAAAAAAAAAGCfOJiK+Gmk+LvWP62d837j8T/xpW5t7/F/97MXzv8PADxY+ft/MlL87OBXUvc7ZLZz/P/0plyzS8f/HupZNr1D85q3/SQDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBHlKKIA5Hi3e+30p2ivN4xcLrRvHptanzi3qsNpkhRiaJdX/4dGD46cuyVV4+PdvPB6z9qn483Js+drJ2an1tYnFlampmuTTUbF+enZ7Z9Dw+7/mZH2k9Abe7tq9OXLi3Vjr48suHma9W7B54+VD0xenjkrW7t1PjExGRPTV//R370D0mP7q74GHkqivhZpHjvpQ/SfxQRlXj4XtjiteNxG4y+sv/aGzE1PtHekNlGvblc3pgquaovotqz0li3R3agFx/KWMT1iKiUAz5Sbt7kQn2xfmF2pna2vrjcWG7MN1OlM9pye6pRidEUsRARrWK3B89e0x9F/H2kuPurVvrPIqLo9sGLZybfHBrZ+g76dmCQ93nYahGxEvugZ2GPOhBFPBcpfnB+KP6r6PRVu23ej/hyma9FXCnzdoob+XoqXyBGI37p9wnsa31RxNlIMZ9a6f0i9357v/L0N2uvNy/N99R29yv3/fuDnWTfhD1sIIr4RXuPv5V+4fc5AAAAAAAAAAAAAOxxRXw1UtyaeyG154euzSltNC/XztUvzHYO6+8e+1/La62urq5WUydrOYdyjuU8m/N8zoWc13PeyHkz562ct3Ou5LyTs5UzKvnxc9ZyDuUcy3k25/mcCzmv57yR82bOWzlv51zJeSdnK2c4ThoAAAAAAAAAAAAAAAAAgMekEkV8N1L88NettFp0zi97Pjp5517zXM19hY+N3wYAAP//Hbg/1A==") 7.68659213s ago: executing program 4 (id=313): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000600)={@val={0x2000}, @val={0x1, 0x4, 0x8001, 0x8, 0x6de, 0x9}, @eth={@local, @empty, @void, {@mpls_mc={0x8848, {[{0x401}, {0x40}, {0x4, 0x0, 0x1}], @llc={@llc={0x0, 0x4e, "c5", "4b5b7e1b9076a13daa67b16f141bf12d70662bc39ae42923d3ca8eca7f50ce3694e20b0b02b086d46504447b68cedb3d51f28c480f70aa2eec03d22b1c8662d02c1257858fc53f31a8a49ec6bd0464c560a3609134039f604adcd1f5e108e4cc4fe4e7f502f661e55f37"}}}}}}}, 0x95) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@func_proto={0x0, 0x0, 0x0, 0xd, 0xa}, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x2}]}]}, {0x0, [0x0, 0x5f]}}, &(0x7f0000000f40)=""/4089, 0x3c, 0xff9, 0x8, 0x0, 0x0, @void, @value}, 0x20) syz_mount_image$fuse(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x0, 0x1, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000240)={0x1d, r5}, 0x18) r6 = socket$can_j1939(0x1d, 0x2, 0x7) connect$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5, 0x3}, 0x18) bind$can_j1939(r6, &(0x7f0000000040)={0x1d, r5, 0x3}, 0x18) sendmmsg(r4, &(0x7f0000003e40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000280)='\"', 0x1}], 0x1}}], 0x2, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000540)={r3, @in6={{0xa, 0x4e21, 0x7, @empty, 0x1}}, 0x7, 0xe}, 0x90) mount$cgroup(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000280), 0x10, &(0x7f0000001500)={[{@name}]}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r0, &(0x7f0000000600)={@val={0x2000}, @val={0x1, 0x4, 0x8001, 0x8, 0x6de, 0x9}, @eth={@local, @empty, @void, {@mpls_mc={0x8848, {[{0x401}, {0x40}, {0x4, 0x0, 0x1}], @llc={@llc={0x0, 0x4e, "c5", "4b5b7e1b9076a13daa67b16f141bf12d70662bc39ae42923d3ca8eca7f50ce3694e20b0b02b086d46504447b68cedb3d51f28c480f70aa2eec03d22b1c8662d02c1257858fc53f31a8a49ec6bd0464c560a3609134039f604adcd1f5e108e4cc4fe4e7f502f661e55f37"}}}}}}}, 0x95) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@func_proto={0x0, 0x0, 0x0, 0xd, 0xa}, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x2}]}]}, {0x0, [0x0, 0x5f]}}, &(0x7f0000000f40)=""/4089, 0x3c, 0xff9, 0x8, 0x0, 0x0, @void, @value}, 0x20) (async) syz_mount_image$fuse(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x0, 0x1, 0x0, 0x0) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) bind$can_j1939(r4, &(0x7f0000000240)={0x1d, r5}, 0x18) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) connect$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5, 0x3}, 0x18) (async) bind$can_j1939(r6, &(0x7f0000000040)={0x1d, r5, 0x3}, 0x18) (async) sendmmsg(r4, &(0x7f0000003e40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000280)='\"', 0x1}], 0x1}}], 0x2, 0x0) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000540)={r3, @in6={{0xa, 0x4e21, 0x7, @empty, 0x1}}, 0x7, 0xe}, 0x90) (async) mount$cgroup(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000280), 0x10, &(0x7f0000001500)={[{@name}]}) (async) 7.527983505s ago: executing program 2 (id=314): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, 0x0) syz_open_dev$rtc(&(0x7f0000000100), 0x0, 0x0) r1 = syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000f00)='./file0\x00', 0x0, &(0x7f0000000f40)={[], [], 0x2c}, 0x1, 0xec6, &(0x7f0000001e40)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) mkdirat(r1, &(0x7f00000003c0)='./file1/file3\x00', 0x100) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0/file3\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file1\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) lchown(&(0x7f0000000600)='./file1\x00', r2, 0xffffffffffffffff) r3 = syz_open_dev$swradio(&(0x7f00000001c0), 0x1, 0x2) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r3, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, '\x00', @bt={0x5, 0x7ff, 0x7, 0x9, 0x0, 0x98, 0x4, 0xd}}) setxattr$security_capability(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), &(0x7f0000000340)=@v3={0x3000000, [{0x7ff, 0x7}, {0x8, 0x7ff}], r2}, 0x18, 0x0) quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f00000000c0)=@sr0, r2, &(0x7f0000000140)) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_XCRS(r4, 0x8188aea6, &(0x7f0000000000)={0x5, 0x8, [{0x9, 0x0, 0x80}, {0xeb1cc6e4, 0x0, 0x8000000000000000}, {0x3}, {0x7}, {0x7, 0x0, 0x5}]}) 7.07417774s ago: executing program 3 (id=315): socket$inet6_tcp(0xa, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r0}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r2}, 0x10) close(0x4) 6.735125429s ago: executing program 0 (id=316): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYRES8=r0, @ANYRES16=r0, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x39, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, 0x0, 0x20024091) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a1202, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x20001400) write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="80fd", @ANYRES64=r1], 0x9) 6.438916791s ago: executing program 4 (id=317): r0 = add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffb) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) keyctl$get_security(0x11, r0, &(0x7f0000001a00)=""/3, 0x3) 6.037869418s ago: executing program 3 (id=318): r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="680000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000004000128009000100697069700000000030000280040013000500040004000000060011000000000008000300000000000500040000000000080014000000000008000300", @ANYRES32=r1, @ANYBLOB="5b3f823d81631787b39941c735dd454cbdc0dab5cb4169690a2440903810c7820a2f548360235ad9b4809059d2220a99bc4feb5afcafabd76ad10ebcded452f17a25ab2c622ac29fe898e6b48a84997cc0bccac9b2fb13bc9eda6fcf61bef9176e78ceae"], 0x68}, 0x1, 0xd}, 0x0) 5.552269246s ago: executing program 4 (id=319): r0 = socket$inet(0x2, 0x800, 0xeffffffe) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)={0x20, 0x2, 0x2, 0x301, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x4}, @CTA_EXPECT_ZONE={0x6}]}, 0x20}}, 0x0) r3 = accept$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000080)=0x10) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000100)={0x0, 'dvmrp0\x00', {0x3}, 0x5}) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f00000000c0)={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, "f7e21a82d725ee5b5ec0cb5d9df4a0ab76492d56da3b8cfb76a0b98f91cbd648", 0xfffffff8, 0x7, 0x1, 0x3ff}, 0x3c) socket$inet(0x2, 0x3, 0x2) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x12}}}}}, 0x0) bind$inet(r0, 0x0, 0x0) 5.214964272s ago: executing program 2 (id=320): socket$inet_mptcp(0x2, 0x1, 0x106) syz_open_procfs(0xffffffffffffffff, &(0x7f00000006c0)='net/route\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r1, 0x8, 0x3, 0x2}) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 5.024538135s ago: executing program 3 (id=321): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = userfaultfd(0x80001) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000280)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r2, &(0x7f0000001340)=[{&(0x7f0000001380)=""/151, 0x97}], 0x1) ioctl$TCSETS(r2, 0x5402, &(0x7f00000014c0)={0xfffffffe, 0x9, 0x0, 0x0, 0x0, "076a140000000000000000000600"}) ioctl$TCSETS(r2, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "000080f100df000000a7d9de16c708db7200"}) r3 = syz_open_pts(r2, 0x42) r4 = dup3(r3, r2, 0x0) write$UHID_INPUT(r4, &(0x7f00000001c0)={0xd, {"08c39ee52f329f1698b1c4865f8b0a0a5eee9f496a0809c3d21c25867b6edda88489ab4c09fe0a7f1e8640aa8e344f412df0d69475a5d6570e21f31fac7dfb4aa7ade0e851582d5c1abdd809580cb34c9e48576b1c73ed76013256fca058ada3db47d86cc75b33cf762b67fe61f152618c49a40858f68794a4fc484ab73ccd254ba3d147f5feddaf91dacc238c0a8096f79597ca1e6da781fcf37a0141a335c6a7577d2d53c6e552a7be208381bb31d1d3e0e92ea651655217535734b286d3f19780a4c720075a36a734151f8c00e651cb3a6bbe30e3f6aee48750436da6471e965e81f38134674fcb697108fb7345010bb8fa15fba9b33355d7858327171ab9c68f6c21b2ffbff4eb061dab80bc77a4a7769e7ff73bcd98790e09415bfc5978cf5af45c3ec9ef9c1a39f766c59d59590281038dbcb765580ba2b3f141d5bbfc40910a0894cd1f22d2a8b6d4e4778debef99438b54d44b4b7568de2777431a5b2f3e8d1a45a60a468f5e33e8ef534f803dfb6798c270f52edf031ecd996bb78c4e92961c63c079676d77412ebc6074e5f235417785e7a14b14ce7626b015071c154cc2bf8f4499b93293e9997c23df4c7a1498cf12414fb31eb873728e4f613b540d22e7ca718f18da5b82ed24995e4309c3af4a2e1097465bf09728082d09e71ea365522035eb9772b8e072f8454777ee304dacd59d3eb9f933f151fa14f8c38eadbeba04810a2dea7a66824f09235c13a45f07870210d0d310ce3ae6284577bd4e65f32700f6723727926cb52e4f27776a1dab0f6668327ab5cf1893879a635261f2e0d9923ccecbf5b80f10a8275c1515f47930d614e787f14c105d3a4f8faf8e7f738cf4eae4fc39ef3db3cb87794ace87f7239b69dc4ab4e5ae57cdfbd309e847d99600ef14b51faead01e8ade57d24270bc13a1787896096eeacb8ab1c93d31d93cfb244bb09ecfecf336362a5656db7df327cbb9aeb898f8af229c7bb9452805f2b4510c5df86b6d564e01f000000167ade5205331523a6392af2bea9e6db0ba5480cbf1b202714233289c4017cb66e83c0c8b6e88bedb922162d0ceecf6c5da173bbefe6781ab7720d2be6cca378db650c69d4228141ae190922fbbaddb86c7f0fe138b704e8305b3bcc7910b2280d96d71dafdbfa876b0013fc4de586f85d9ee077b6349becbdca8bd989a51c4c76ed8a8cc691a65078e0272a62edec8236a779f0cbffeda49dcdccd4def7064e0d77ae5a8c64f3057b4a3a0d4457d33f2bc6c112378315411baa4bb126fe540d750491fc58fbb66911ef82bce5ed76872dbcd8e05dea2f3f347a653aa39ab5d75e71671bfeb924e71476134dbf91e3f287fd853cc34bf81e717edd41aa04b6fbeb43cf2074f0c8fe5350401b6cff801c147a3b58b972aa5652629a9fd8b1df2852708ce958d4e9974ec4383aa5da4e3f75fdc85981e97b75863546f67a8703673b6fe2c26f0e9eeb8c45c26f673adac55fa5d69b82ae7d032fd3b26866047e8c029b90a62794a89c11398944b398b4177b2dcc5a743c16d4a5333b1e30af678d3db8df849c1753db067a6f94bab00c0dd3c7e94a8675924c89bda98ac09e10bcdf83f5114b9b466c413477a5cdc48c857230798934bcc1f0eb3a2d2944b139e459af32e515785f46ed4e97cdcb23c7e4dc7c4f91b5b5ca5228344aeb6652fffaf31325c7429bc70a5f6beaaa98ef190dffdeccc94bd814b3edfdd48243bf34291076ab5438ee00e924a827d5b453df42d24144fe1a45bb6c84fcbb2143d0a561c1e867c1279bdf0a47061ea77a84f36c720aff785f0db10eda84c767b5f3874f9455c0f026735ded32f0403ef7dbcf97d2233d59c670114ddf89314ba74fc248bcbdbf43c24e46304e229b3cf583aa410f4dfd119152495da8737518ee2a05a8ca1f004be3c551408f2e4013e444b63bf2bb26ddeae505642dffcc989ee241c48741181b506e22fdc4530319522780c74bf786852dc66ebbb51f8ecbb1e35de09ef7afe589bb8a31c5d63477db5d5e7174694ea04cfa98057d39127a4e5eedb4897a491c6693acd0a036abf846f3b6f3006e5e5fd586f29a4a8a31abbccf732e4f1b88187a72d669c16302657e9cbbeb9322662e111edc7771526400b6123d0f8207bcaa38bee07043e36e223d418ac948d65e7acfe72cc3fdcf03a3e43ecfec8ae489ddba09126709c5c7968829e3504de8a5010c9372de09476a7b96b04d7aed2486d8f89f21f075321abe350024abe00a81f87df3dc372fc3206496776c26b6958243070bda4cace3e358da5d39a3945765c2ba4b002b06efd416af66f3343f218ed84550ea83f02f9a5c3fc677ea60987aa25f0406d6154081cfdc074814a2465accdfa102858f5a52c9eae293c56ddcaf8f6926d3dd0ccb51a30c960d6b7e473038ebd3702b5106f6bc040efdfd7169fd3f2dc42ff23de26a239e13b74278729fd7e843b38a35c55fd50181ac13a9cbbbfd8feb36afaeb1993349c0ac5a0c44ffd92919dfe272b0f8ed7df7198cd299715f021109a58dced4753d3c7ddd6e9ea01596f18b2fe7000000004ccfca57aed5b5cebdff65de480a56bd53f4c7f83ddef00d7c9686311d1fce76f320bb3222a11db30ba6ed31535d8fda61e694478ca9935d72719b8d6b9be88ae3df30b60ee251b919b4d1734b994c62accdf855488b351738331b462eccf27efdc5577d7a5548579dc90d227a42ac010f33a720dc3cf0a63454f8b07c775287495761a058ec1e28e6aaf8057241f4ef8b5de56e279355bb66630c4ddf35e7c2cfff26a4241b1df0379d2a1e9f959e46d3843f89844ead50aff44640fcbc4a1edb033afff7cc9e57c4f8d31900764233e11fa4c28e547788c1b00de4268df692ba3415a9ad90fa712f9618f5ecff57da32809380eeff040cd3b23f508614c72b303cec3bcd732708303b166193366a062b9cea536f28478c387e626744c6a611a8e7162d274efccc84eee8eb31d3310c86752777dd5b5ffe234e895c54909f19a4aabcf3c15b90c02170409e314fd90e766ec4ba93c8ec6321237a980ad3c32fb2fab69e57541ea7f5427a85c2c57d40f9ebe9de5572f46a4713fb28e0af42d0adef3e29195aa41a3ba318181512eebfadffede4e35ff7f975928edc5d4d9f2d931fb44b30e1df55e66c52e1648e9cdaf71221b57c6a6b087428ccc57ade5b1531341cba2be452b426c434c70fd8c493337d4995cbd76ea1dd545226e3eb59d5f94ffb5352f87a4a66cd7c5e88322404fd397c46e198646a9c819d0eb1f10e54d8a3ea912f1cb134ff1095aa7325287f6ea9af8c13b67d6abcbb70dbc06838ecb33e45b60f6cb832c3e72d1401770f66bd02f35a2d007815ab676099e31f5102000000c0e83d5e7107c8dc5830c9cddb9781185b94d7f2814c5058ba3ac54c268741c5728f4997a9628602c2a36090162379f3f37c47619b3e7c7397a5913b7060b51e0c7f7226ff1135444f866f89a4b74136cbd3acb7178bd63183b3fd9cd19fdeb6fcc6341910ad4605da76a9af4bfb8b75fcd666f8188902b380ae560d9aa04f8f9b0ac5c109d1824a470726e06a49d955f8f71c8a86081e75b13f62600deb941da181eaff544cd559c467d8dae432debd22e7a7b3e1ad731a5b9470f5f60423dda061ff899c07c79f3da34f38e1d8182d6ee0c36c602945509167be440382a8a8a759b20e41638fd57152029b190b5701d30a86f579e2d0cc53a2f809ca9bd3aba1eb2772a7acc35c4d983afa83a9baea35c0ed4931234719636cf8f5fe1884bde6cebbdf23bd62b1ebf0a5cb78c27295349bd7d5cf28c4ee4689497238fd3aa71a417914e6892667a56bd69dc2e5882cfb67df71494e9a9199e025892e4e7435f727636cd988cc7563d28db5133f649849c5b3973a3428de10ad39d96146b22acc50f50eee5a038876452b960686892de40efe30081ccdaa2bf64af78d5988026e529b36c62a21378ac42d220d0dd878010178e374e6dbb2b61206066d04e729ed03c6fd9a4e00547fe9304aec0925d85a0acd07fdc5d48c1a1cff656916f5d25952327792255e0d606a32517781cc3d737ec753eb95b5b5b95dabd8946907ab54cc85d05b475e2e5486c6fc070417198d3a50910e2949d20d3fa68fd327934cff5171224942b8f18d88947763a7c710d09c4b269bdf2d3e715329917fb70728a4a0530999b755ba8fc04deabf4bc4bcffc4d62d491538c65078122bf2c263ae0020af67cfc9cf19e5b929e086af281fb43d5504d728935c5cfac136eb81703d50fddb39a5a713b2914c6acd9b2d07819cf7bba495ac5734fe423e611d309b80eeafcf9053d51b0ab3c29d5ca5eb8861ffc1ebc4d53f361b8991baecb52860c15202f979e34054fcde869d018103ccd6d914a70f1840fc6aaf426beec975ddb980b19b0f4cc2ca393c0b9e6ebe5e7d1c9fc1ef7a1c91378f0b73262993fb80667ecf62bac3c47cbd002ae1b87b8dc3ec99d5c987765d778868eb55022cc3bed14b8f934a584bcc98fa0b4f6e6982ab8d8a2bb49f9074ef429dd7b8db332a96ccec6983a97be7c8634c02e7937ffc8d613b83aa375886bf40a87ec062090382f874bf2c8e5fbb58ac18a46c4d9e85af3ca21bdacb7755f49776b0eb3972ff682c84beb07d74cbe2764e378253e72128991b73d2730704a5448280e8a0fd8cc87d4cddcffbfe5525ae3d2304877a3988e33c8e12bf77793e753f25840e9af2ce56bdb999fc62623a2298b4244534f662eb398a2577c72f6cfd5174697dcee151d4f3a7293b11de3889c43744da4165aca4e4a1e926d37ae4d7471584a06f3641f2037a74a58c2397a594f29d142d59f91bb57e24e1a3f30f68c626033cc34895c1b16d62e3a375c3e09f5dbd9338cd3a500643143cd404b57019c648c3ec31d696233fe16efc3c4c84aca0830ca8b9fbf1144b98d82f41e4cf67631c74cdcf8d9c8b8556b876ff1592683ccac0b47a26cb3a2cb1b917f433bb54e0b53deae9ac4b1cd0594c1fa0e6744e7ed88fdac60901e3da989f3b0d7c12b140cc576fa1b0e8e705321d37c303691aafc9fed9c3dc419078d0925ead56455ea5f3cd57941e410c1c14c2e8972d7cca44fcaca1f64fc817f4a41b6d9fb237fed159cb09e788ae560726537f49cb64b9f60915d402e0931355c55ad792cde758548b1af54b196e414046d4af3579a6c30ceac3d68bbfd2adef309c064e759a9f0dd69d682a3880b8ff27b69abffaa45ee7e65d8f1f6e40c188f6249fdf72220b4c87243217ba0292b9e9b67ebeda4fb83406216a4d765812bafeff34cc57f7d2cd1608282079c076055b9cabffe5fa491b970291bc2672540ccc15ed877d7dbe3ef683724c715ace770905e48c2dc6a44e1fc095773676d070eac00ee3834b07590cba7093f56b678313870471c81599d34c53fc03ec6c913d8ba3f604ace8da12d2025cbb5000bc062f4db65a6feacaf3915206d1c15ce7e78c17dc2ea32cb57d6fab0a22d487c77118e75016006f812541ec8180a321287a2d57248d4ee4a19706a19d802c70e250c3b0fc400a0b5cdc06537d2f55fd5300be4eeeaab8cc481a84b6a5e17d8c47ec92fe40710d4ec3530a94ca16710ade2ec7562398106e0ddbb6c8af6412166afd99d45d29a3a967e58decd0d6fc5bebb98d639b5606efd358a43d635d50f0ccb8472197da604994e7fb700243d5f7e45700", 0x1000}}, 0xffffff5c) ioctl$TCSETSF2(r4, 0x402c542d, &(0x7f0000000080)={0xfffffbff, 0x3, 0x5, 0x0, 0x7, "a1f505599f8404212554f63cc93cd5d3a2cecc", 0x10, 0x6}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f000067d000/0x2000)=nil, &(0x7f000053d000/0x1000)=nil, 0x2000}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000c1c000/0x1000)=nil, 0x400000, 0x0, 0x2}) socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto(&(0x7f0000000040)='/dev/kvm\x00', r5) r6 = gettid() rt_tgsigqueueinfo(0x0, r6, 0x1f, &(0x7f0000000300)={0x0, 0x0, 0x1}) capset(&(0x7f0000000200)={0x20080522, r6}, 0x0) move_pages(r6, 0x1, &(0x7f0000000100)=[&(0x7f0000451000/0x2000)=nil], &(0x7f00000001c0)=[0x6, 0x5], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0xa) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 4.962024164s ago: executing program 0 (id=322): r0 = fsopen(&(0x7f0000000440)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r3}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x8, r3, 0xb}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000240)={0x0, 0x0, 0x8, r3, 0x7}) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x1, 0x197, &(0x7f00000008c0)="$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") r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r4, &(0x7f0000000400)=[{{&(0x7f0000000080)={0x2, 0x4e22, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@ip_tos_u8={{0x18}}], 0x18}}], 0x1, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f00000003c0)={0x1, 0x4, 0x1, 0x0, 0x3, [{0x80000001, 0x4, 0x8, '\x00', 0x2340}, {0x3, 0x0, 0x1ff, '\x00', 0x108}, {0x49a, 0x4, 0x2, '\x00', 0x40c}]}) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x1a4243c, &(0x7f0000002e80)=ANY=[@ANYRES16, @ANYRES16, @ANYBLOB="12a4095a2aac12f0bfcb206d982e44066381388d27f14002d8d7431d3947f6399c7ff9f5193fc0398653e5a67bbb319f02bf4ac6f6ccd5acbfe1350cc3a6d2d48cf6c089ddf67171ffb3b15988e7b394c5daf3e12ca05e4dbdad7edd45f10cbc296a53a530d4c2d203ee650d5fff3a9b5aae78794fe84327e508172cdd72eeff5af4d6db9379bef20dde8e64b91d31a84ce8a7598bb78cc85108874811fc650f0520a5", @ANYRES32, @ANYRES32, @ANYRES16, @ANYRES16=0x0, @ANYBLOB="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", @ANYRESDEC, @ANYRES16], 0x0, 0x0, &(0x7f0000000000)) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x400000000000000, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0xff02, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r6, &(0x7f0000000580)=ANY=[@ANYBLOB="5300000002"], 0x8) r7 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, 0x0, 0x0) setsockopt$inet6_mreq(r7, 0x29, 0x15, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 4.70735444s ago: executing program 4 (id=323): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000400)='./bus\x00', 0x800, &(0x7f0000000280)=ANY=[@ANYRES8=0x0, @ANYRESDEC=0x0, @ANYRES64, @ANYRESHEX=0x0], 0x1, 0x36e, &(0x7f0000000f80)="$eJzs3c9rI2UYwPEnaZpMumyTgygK0ge96GVoq2c1yC6IAZfuRtwVhNntREPGpMyESERsPXkVb/4DgsseFzwsqP9AL97WixdP9iIIuog4Mr/SJJ00aTZL0/b7gTZP8r7PzPvmF88byJuD9776uFn3zLrVkayhkhEReSRSlqwkMtFFXlLsycuX/nz4/PWbt96uVKtXtlSvVm68sqmqq2s/fPJZMe72oCD75Q8OxPht/+n9Zw/+u/FRw9OGp612Ry293f61Y912bN1ueE1T9ZpjW56tjZZnu1F7O2qvO+2dnZ5are3LKzuu7XlqtXratHvaaWvH7an1odVoqWmaenklbbjnmDFDTu3u1pZVmfGEd2bMw7z94/v+Mc2uW7GWRMzikZba3Sc6LgAAsJBG6v9vkhqhLNl+QZmJ1wL5MB5eBgT1fxKH9X+wWDis/++98FPn0rv3V+P6/0E+rf5/9Zcof6j+D84+9/r/u5HrRyuiM2/3JJ0fq/7HYlgbfkX+frhijwX1f/Bq6K/ov3j/3noYUP8DAAAAAAAAAAAAAAAAAAAAAHAWPPL9ku/7peQy+Tv8CkF8Pbl23BeNceaMe/wL8Y4C/ecDzqXrN2+JEX5xL7cq4nzZrXVr0WXcnnRcl5L8Gz4fYtGGE3thowbK8qOz260txwlL4f+KiIojtmxIScpD+WF89a3qlQ2NRPnh+Xe7tUxuJcivSyPM35SSPJWev5man5eXXhzIN6UkP9+RtjiyHb+PJfmfb6i++U51JL8Y9kvz+pN9SAAAAAAAmDtT1YiXz+Xh9W+0fjdN1bT2YC0vg+vzo58P9NfX66nr81zpudzpzh0AAAAAgIvCy3/atBzHdr3e2KAok/oU4qONNOVkwpGDIDdFn6HgYRgsH9dnaWCG0x45H/+CxrTDcL2eTD3mJPirIKl3ZrKF61CTkX6vThkk85+is3HSh8D1siefu+16a8F4dKbpDATJx0bj+si1WY88Lkh2zp3U+Zmvv/17tlNk4l17B5teu29MmGkYZEZu2ZvwpP3D9yeOZzn93eL7WX5kBgAAAMCCSIr+opfc8sbpDggAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAtortukjQlOe44AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAovg/AAD//5h69bA=") open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r0 = open(0x0, 0x185102, 0x11) r1 = fsopen(&(0x7f0000000040)='ceph\x00', 0x0) io_uring_enter(r0, 0x303d, 0x2f6a, 0xd, &(0x7f0000000200)={[0x44916b6d]}, 0x8) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000100)='source', &(0x7f0000000400)='#\n$)-.\xc7\x9d\xb2a\r\xd7\xef\xc5\x112s\x88\n\x13\xfa\xd5?\xc7\xfd&\x9e\x94\x9fN\x1aG\xd8\xde\x18\xe8\xa3\b\xf7s\x13h\x8d\r\xbb|&#\xe9\xa3\'\x91>C\x1bV*\xeb\f\xdb\x89\xb7}@\x8f\x97\x18\xce\x92\xc9\xa8\x1c\x9dp\xfe.\x84\x9f\x8d\x1e+Hq\x89\x83\xbb\x9dC\xd6Hy\xfao\x04\xa4\xb6\x88\xdb\xa1b\xae\xa7\x87=/o\xf3\x96\x00\x00\x00\x00\x00\b\x00\x00\x01\xab\x90Q\xe8r\xe7\r\'-06,\xff\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\x04Qr\xb9\xe495\x12E\x06\xe5\x8f\x83Vb\xf1\xbc\xb9E\xef\x11\x1a\x9bH$\x1f^\x9dX%0\xcc\xc9\x86\xaa\xd0\x9c\a\x00\x003\xf7\xc9\x14\xd3\xdb\x97v\x9c\xbd%fN1\xd4[\xa0\x0f\xdd.\x15\xf1)\xd6\xd8\x1cb\xc5\xd9=c\xb5<|+K*\x9f\x01u\xb0\xe4\x98_\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\xca\xdd\xf2aq\x19\xcc0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="21003300d0800000080211000000080211000001505050505050000000000000", @ANYRES8=r5], 0x40}}, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) 3.051502425s ago: executing program 2 (id=327): r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x325200, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r0, &(0x7f0000000040)="ae66a78285fc025005", &(0x7f0000001180)=""/4096}, 0x20) 2.855758024s ago: executing program 2 (id=328): socket$inet6_tcp(0xa, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r0}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r2}, 0x10) close(0x4) 2.800801546s ago: executing program 1 (id=329): r0 = add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffb) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) keyctl$get_security(0x11, r0, &(0x7f0000001a00)=""/3, 0x3) 2.414804455s ago: executing program 1 (id=330): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSBRK(r0, 0x5427) 2.139425172s ago: executing program 2 (id=331): r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="680000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000004000128009000100697069700000000030000280040013000500040004000000060011000000000008000300000000000500040000000000080014000000000008000300", @ANYRES32=r1, @ANYBLOB="5b3f823d81631787b39941c735dd454cbdc0dab5cb4169690a2440903810c7820a2f548360235ad9b4809059d2220a99bc4feb5afcafabd76ad10ebcded452f17a25ab2c622ac29fe898e6b48a84997cc0bccac9b2fb13bc9eda6fcf61bef9176e78ceae"], 0x68}, 0x1, 0xd}, 0x0) 2.134271736s ago: executing program 3 (id=332): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYRES8=r0, @ANYRES16=r0, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x39, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, 0x0, 0x20024091) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a1202, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x20001400) write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="80fd", @ANYRES64=r1], 0x9) 1.726471785s ago: executing program 1 (id=333): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) epoll_create1(0x0) socket(0x1, 0x80802, 0x0) epoll_create1(0x0) r0 = socket(0x840000000002, 0x3, 0x100) sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="0215000906225700000027bd7000ffdbdf2502001000000004d4000004d300027080040300008000"/50], 0x30}}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet(0x2, 0x80001, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r6, &(0x7f0000000000)={0x24, @long}, 0xf) getpeername$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000300)=0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000380)={'tunl0\x00', &(0x7f0000000340)={'ip_vti0\x00', r7, 0x20, 0x7, 0x0, 0x6, {{0x6, 0x4, 0x1, 0x3, 0x18, 0x1, 0x0, 0x0, 0x2f, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@noop]}}}}}) socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r5, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$sock_inet_SIOCDELRT(r9, 0x890c, &(0x7f0000000040)={0x0, {0x2, 0x4e21, @private=0xa010101}, {0x2, 0x4e20, @multicast1}, {0x2, 0x4e20, @multicast2}, 0x11, 0x0, 0x0, 0x0, 0xa, 0x0, 0x6, 0x5, 0xf}) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="54001f32d0f53c0600000000000086aa91924a9463224ddd0000", @ANYRES32=0x0, @ANYRES16=r1, @ANYRES32=r10, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0) 1.056098389s ago: executing program 1 (id=334): getgroups(0x3, &(0x7f0000000000)=[0xee00, 0x0, 0xffffffffffffffff]) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) pselect6(0x40, &(0x7f0000000500), 0x0, &(0x7f0000000140)={0x1ff, 0x75fd}, 0x0, 0x0) write$rfkill(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000be02e708cf100355678f0102030109022d00010806007c0904bc0003e404ac000905040310000607030905050308000e0e9a0905fdff07"], 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x10, &(0x7f0000000040)=0x7fff, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x12, 0x2, &(0x7f00000000c0)=@raw=[@map_fd={0x18, 0xb, 0x1, 0x0, r3}], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x81, &(0x7f00000002c0)=""/129, 0x41000, 0x12, '\x00', 0x0, @fallback, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r3, 0x6, &(0x7f0000000380)=[r3], &(0x7f0000000440)=[{0x4, 0x5, 0x9, 0xc}, {0x2, 0x4, 0x5, 0xc}, {0x3, 0x5, 0x10, 0xc}, {0x2, 0x2, 0x4, 0x5}, {0x2, 0x5, 0x3}, {0x3, 0x5, 0x5, 0xb}], 0x10, 0xd, @void, @value}, 0x94) r5 = syz_open_dev$vcsn(&(0x7f0000000580), 0xc017, 0x4000) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f00000005c0)=0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000002580)={{r5}, r6, 0x2, @inherit={0x68, &(0x7f0000000600)={0x0, 0x4, 0x80000001, 0x9, {0x20, 0x9, 0x3, 0x0, 0x7}, [0xf77c, 0x4, 0xc27, 0x0]}}, @name="414d7787ad81e9d81b870c89e069806c6798764c1cbc43498793f94060e9f4b1d30de8b70e49724c36bdc066a58a4a67a3d087a2f7984e391fd4b6e845b0b95bbbb811c2bd9fe59156158cb28d8d123530cb23b2e129000dd3c3bf10d47a6ee082cbd2a0574b8d667137a9b47faee40c2a0b90ef4038de3994e2567e2f4f438e8ee28414b0cacfd7490913ee59136982e622cd322f41eae945a280d4de37ec1fc591225f0acd8b6247f81c6c6732e4c9b7250a8cc6b79af15529f643c1914444367c9fd04f475102feb6bdf962dcf93860cf4a39e9e59a1cf3aef6b8546f89e26e7afc0e4818b94de205999e3cab8dc53f8d7a6371591891b8af34d1a668866c70fe6997c64bdb151f4a9f8f62745bdc3724b9951bd1f997599ff9382dd479d4df8ee720da2268e59e884bc0aadf763725e02b771f6f876e0cdea91898773336acc2d9c0de21e7e0612f4660a87be3071ff7adb74e86136d9ec44c092765c5c0dea965130679b4b25baa138f09eb9c6d4b323c8c296fc88437759a72389bb1682dbb4166e586a410a254a2ecae969cc3a55ce811f3264bf041edb2207c5f670fd53e82cc8e1e7d7fe02aa3168328a455c29e8eccffb7194fe99f3b07931b32ef841cc1aacffd94481b787201ea166730bd54a2d8da94e60f5664253d1de49f8f34ce243130c9197dd14c66c7ef6d483ee82ef8f030bdf32495dd35cfc98be469d711ec1aa0093960b5ec1c4678bd195887cfe1106948a0fb34c79f34081e15950ef06130c8c3d5bb77a7aefcac564ab15904301caa5f5440d56e012d1236a993dcc9bf3bc20cf2b02d75230ae67c05056e95a9df50d81a3ad5d7e6936db9ba2454967e5b39385e2ff5ab4e2c72a8d12c5855f682cf49c23b4555ea7378fe9d6f7a33e94bd69cbbff41f8dc3ffd83025439b55e38ff33c0c4e4593ce89d68f1577cb71ea5b0d8b7a205ce9f40ae8f9597dbf8f064f68f2b51439f3a7790f1082721943fe5178d1e8a869354bbb578275cfb150b01e2ad36292a71f7a1512ea4f513416952a2aa6c30186a527f51876786b1020054731ab25e1f522145ffdc8c0dcf0b8d03bebb203b1cb1499d02ad559c8ee29db3d13afb8f89ac30ded7bc0250d4279f3157bb4b9eb2f2c101100157766459294a1562e0c8696e5f036b3639b82b5513783563ac36456f0c3dd8a0fce821562c3194db9eaa5f6247c9726ce97504d82d702a2bee398575664908c896f2490d2c9a2c33d0b7cfefe37b01ec7cb1bb4076d1a4382f60c390159453ef35c250a6ab09ba5d0ac8ddea1174b631b9af1612753c5ae61321f42bb9e563806f114f296e6d2bc446566751d7c6a5734f7440400cf7ddaa4187fb562f44632d5e54595d216955e011550021068c5667e155183c7bf18887bdd97ecd5ea537edf24951fb525c79ee9aae1dcb8acfdfb8963cc433cf8f72f09a9389c368a46da3324fac5dd78dbad70a09da57b9ddb8349cd9b9508d6db065821608fbad1bf43eedbfa476ff7ac63ecaa102d830dee6b0918c44898b59142edfb115cf354f70b47421e724464335288741137b3fd5c9bd09d3fa0e71cc3ace3c53977ca8bf878cc57145e6e996b9ca27230124a96f681d5ea5e2aa3df45d02ee485e7deb90d14b9ed5b5eb5d2030f87804cec4be28cafc83128c0fe16e15ad0d383d01f5f7f1bc372845c0f2c5157421e9f8dabe279f1ea5c3a7ce84a8a589f33c02b57e4a6e77a0a7c937c2dc40a0e687dce5caa743009dd98843a9f70611e0534edc60030f59bb1a0a76757b24484ca233bab5fb0d29456e0070a103353090a07cbc0b395e744f7135b598c61e9e42dd33c33bf99676ca53e3ec43ef1ad962919c2f126f55e09197eec552701ae78fad88ff9dfe49993401010dc9a225326ee30c555881664d36428e45defe74c68dff033714342bfdc2432d742704ff5564a3f35c1841821f5a98b697c14207365ec500c85a807c8adc9998e51740510469d915c226ba71bf94c3fe0bf553563ecb57b6be8057c60b04ca2bc8649284dd2fbd73db0296c9c6e5a469b8407649b3576c9a84cb6864da323b0072311cf003ada75e5f23c6f03510eed0d368b1db7641c32be5318037ea285ce8400867146f01a918f27a1d9779c3ed80344c635411d9bd3e5f511735c908d22d7fb2cf61386a40cdeca0197c7d3a94986fdeccc77b87f7f15482b1adade890b141ac757060253d3362089e26f5cb24b1045699d02b2e62b2a2bb69d63635aad46ab6daf7d8c10d7be7a4d4ec3be285fd546a4290bfe08caf9624373afc89fb765ed551ef0e5a16c26cdc82d85d4c6ea10401e2dc0a5f3ffbad39d1761ff813e8430571a88a4d66c1aee34fbf6a4a80109860dd7f1ca66bb245a10c6a024bd94d8965098235efe127ec0ef10b3a2cebee720b99bb0b1f4239b2b0cc54d29adfb3da857b458607efe9434453f4294b7721e908eae71727afcb08cf8be44edbf2990ec7c6b4c9bea041177603ccd5c0de47456039608c74d06ed61b441a1a8b4ffd62a26210614916bf335643d46cf14d931f45c8438322621b8c143f382240e2621d178356bbb789ad709ff1284d55b2c7741ded1556e80223fd0a4b9fc3cf54685afc5caab07e7d3f13a6cbc292513f2049e5db23447af4c830e2b2fe31aae3f69f579f73205f5d48bad082ac896dbfb10e24f3ef31eb8ddafd6573f9a3b1305be5f41bbb3e9bfc6e0e1d8fb107b7e7d83bb31f593737d5655eac2de8f36c4c8eda3a8510ee00b2c00ac7075aa145da1e2b88d9d00f34f3183c2139efce7e595f15760bef1faf139f52f433ebae6a5177741d8cb1a34b07b743c4c0ded0c3e45c392a5aef50f13c72f2c2404b7911dafe8e611e048021745ec16f3c0ed0a0eca6abd7e4178f4ae7ab706de40bffbff4073dd8ec1668cee49b8a9bbb1d06a8f1bfc53c35cbf12b81c23f530475481011b5cacff2fa977ee36fdef0d6dc51a93df2d0dc315d170000f49d1ba1c462b04f88b5be506d836ebddc912bdb94ca657ebfd31947138d8448e1684a5f2f38c54252d46b1f1afa1851b2cb6c7d30951a1f005d849554156e1fefe29c8b68c5c76234b17ec447eaa14e9e2977f3c6e7b18b518e16abf81a44b2bc0a339869cb796aa0f81cca45f17aaf49e5420104e49cbc39f37c77e72a26f760f4bffa973b3c205e61f852154f5eaac1d9236a53e3c253957ce6c516ff090db59b92832b2851d37dbd17a97795bca38213fe2c4297525f646398e454f46148616db37a773bbc8e5eb24592f036d2839a5c3dc2b6a6de72ce8db91d721d58b728dfde8fe4697ec9dbc8af234df3a1f68992cb3853513baa1f7d9183bbb838bffae5e1bdac9c2ff18253093dbdd1e76ed60fe135bc50b1adb12a17cfb2b79a2df033d4ff488618f89d049b5cca36f0a0d5f5a88281701a275f6958c2dbd284c6c251bd94cb8648e2941d4b9aec3c17921df92e3b4f381930bc310e2974c667e06245f53a861727d2d5366939ef730e0ce39fbd31ca13ae6f09f89790eba54ec36a1967ee8b71a34dcb5de76ca8d3b800f5c567b89d486b9806527db391b04bccb9de68d5720aca9a8e499c3ffd4ed46e6c62c87b779774e0adb742279877477dad491b59ce8872718aec3c69f489e87a8483a7a249f6951ca4d4bd35b1a04a71d58e90287021f755e7eb196bc0bd2510fbeca0bc60a74edb0305239f743f2f13e84bd216b1652b3939819c9603dd2c97816921f08d4c89d69d5a3720cd07b992df44f4ed347c44b9eb8a162e37819c36b88beef205f078d8beda3a674ef6b7b3df29fa1ecb9281d0f22e5c525a5ab6f3a4b32899e675c33ab2714ea8b1ec3c0c2f389bf39eff88a2e57b827cace28344728d218905ec95e6a5ee7d7dc774bcef752dfeec698f5501447518b28b04f7018fd6969884a591a3ab4ff23c8117f2a7e39151d07e65aba0498417c49d32ffeaf630d22fbc24961c29a4f49459420091799ffb3146f00215d8ca82881813279162f04a1f3d6a44ab65066323941a80486e437d3ede8617f37d9c27d285104b0b4bf9f9e30c33758cd2ceb1306acacbdbab8e70cce4b27bcb981aaf9a3430e2b127e77815ae03c48f9cd166f08b65258e0435e4992b49dbe788e3ec28579f8b53ee1c06aa9313ee1347a5a8884c9039c416961bd35b83b953a06dfe885af0ec4045aa614d70063ca14e84b2180a9219b0d88670d4361567468dbbae0c79985a131c116d58444fad3accfd4a343347107378468c690f1de533eb414b48b3b71491e51eb07f5d84b7b56a9c37f3850fcab9534c6b621ecc8726c1f7e9de7899a90fa111cda009979568d258ad8c8b0412612feb6a5846e4f66b5293dee407684fe43136d0c545f5600b0d705a6e2d67d692aacaded591e1b80f084c730bf64c1a750ed6fc1a874a1e1d46fa4fb883d1dd04e9b4ce6beed7cd03d56e0daf7e3f39373e7409e76459922983db4148127cae90fb4241469d20744e7bd83b5a7973dfaa11abd82d8fc06580bc46199ec8a11161e27e4577cc8a69d6ff6010694671a134b1b7527c7ba95ebc59c30d72c78a03d58c17c012b29b3f7522ea1ab6f537299b1afa77fe21bfeb04a0c5dc7b14332a3a5810fea2d4890999c4e32b82b6d07ec8ff6738915987f5a30d25a8993e6b6bf3badf3c7b12de54a9e3c7ee914d3b036f6d7be551d7e1063997109f9bcbb5a5d9483d056ba091397be354d45a6e0e4885ef50756f44dcca9c5acf11a559c357c41230233a559af6a4802623e573246966694162627b2284645ffb89f423e9f3fd075fa77a8033eb68a25ebfedeb83bbd435bbe38b9084f3f7a8ca0267f17fd1b2d639a650d8666e6bf405635a5b3a0d108045617eb1e2cbd955dffccf74f9bc4eee8feab6b3a7b4e31ce4199eaf13ac5d5adc6252aa41163ba4b1917b33124d4cc22183372ef675f6d7095e42a3aa3c2bbd052d6f16762bdc4789daa51b1ac52dd1ff94a247fda674e88dee331ba08719565fbb91b6c29c503e6c6c7812ef95945e1a3a941513db96100bad038a2babb09e1c2cac824e80a22d95dff92467ecdbf5dd501c673e2894f5461c193326c9c1eab69549bb4dcb06782d8808a27f82c1cb7bba858d2a0fb5dda518c55d6d553ce2c2b080be0c4f6140b819a9f53ddebcb2d4a3802e0349465b48da018dcdf8950fd400b012159bbdc050ea4af1fee5ebc0a014296f87f0458a87ae0acf406302e8a7ffeb4538717cdc4e7491c132ccb8db5f1bf25f6af1d326c8eaf31b8f6fcb25ebaa7201d2c4fbde6c9d9d6f8c189611284850297845eca9b2600fba6c498bc1cc08e790c120f8d2185171be513b376dfe4ccb8f8bc5a6b582e35319fac5d7d9a92d2363ad7d63bb012bb7d52d016a989cd6871c20999cb14fd5b3eab323464cb196b53e73d0345a1e7e748d8d0138c85f2fdf48c2c4a38d484bd4304d0307d66ddb71db5243c85ad2c2314c5e6021d2e85869d2c5e690eaa4af3ed821478128040d130d83cd1dda863f5630c861101c1f3ec25f13b533282f4967e5f8ac4b3798267b62353de056fbe4a5b633a641d3153fa0414c917e1194ab58583a83d43b3510590639234a159b2c07cd270575320be154853cddf2a20034e7b62a9835f93dc29715e4cf50cfb0bd0edc0f8c772bcc652aa5ed3a66599d5a88212b604d51f5b4d8d51d70eeb6ac19518e8c1f20"}) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x5c}}, 0x0) syz_mount_image$udf(&(0x7f0000000c40), &(0x7f0000000c80)='./file0\x00', 0x800000, &(0x7f0000000d00)=ANY=[@ANYBLOB='umask=00000000000000000177777,gid=', @ANYRESDEC=r0, @ANYBLOB="2c66696c657365743d30303030303030303030303030303030303030303030303030303030303030303132372c756e64656c6574802c6e6f7374726963742c6c6f6e6761642c6c6f6e6761642c73686f727461642c766f6c756d653d30303030303030303030303030303030303030362c00"], 0x1, 0xc3a, &(0x7f0000001940)="$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") 777.698844ms ago: executing program 2 (id=335): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x5, &(0x7f00000005c0)=ANY=[@ANYRESHEX], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000005900)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000100)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f00000002c0)={0x60, 0x1, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0}) r2 = socket$isdn_base(0x22, 0x3, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0002e489641500aac823a1fb28149c206011c2be86ff04441853a8478dbd8cbca6bf488cac8b90aedb9785e971b723f2511f7758351bce7c100922ff03ba687fd505caa45be3dcc8c8a8b6648858863a489328fbef7152e8e69e0e1094fd6cad5a2fa760542d67f0b5d02daf177a8eb398b533c7cea670954cb0bf597a4ba2caa7bc72b9581b7e4935cc49a5c3f8a41ef85697efb890465cf169c2eb97bc84082dad", @ANYRES32=r4, @ANYBLOB="0c0099000e0000001b00000008003700000000000a0006000802110000010000"], 0x3c}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010100000000000000002b00000008000300", @ANYRES32=r7, @ANYBLOB="050034003c00000008009f000a0000000800a1390500000005001801240000000500190105000000080026006c09"], 0x4c}}, 0x0) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000800000008000300", @ANYRES32=r10], 0x30}, 0x1, 0x0, 0x0, 0x40880}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r3, @ANYBLOB="00022bbd7000fbdbdf251300000008000300", @ANYRES32=r7, @ANYBLOB="0c00990007000000480000000a000600ffffffffffff000008001400d145208784b0613155069ad10310fe9349", @ANYRES32=r10, @ANYBLOB="0600b5001e0300001c00810005000100030000000500020081000000050001001b0000000500e400000000000600ed00d206000006001200060000000600ed00740400000500740005000000240013008382e0020cc88682b005129616e0249b8489121b98c80684928584899b1b1298"], 0xac}, 0x1, 0x0, 0x0, 0x40}, 0x1) r11 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r11, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r11, 0x3b88, &(0x7f00000002c0)={0xc, r12}) ioctl$IOMMU_VFIO_IOAS$GET(r11, 0x3b88, &(0x7f0000000300)={0xc, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r11, 0x3b85, &(0x7f0000000140)={0x28, 0x7, r13, 0x0, &(0x7f0000fee000/0xf000)=nil, 0xf000}) ioctl$IOMMU_VFIO_SET_IOMMU(r11, 0x3b66, 0x1) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r11, 0x3b72, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000ff2f00000000000001"]) r14 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x22301, 0x0) ioctl$SNDCTL_DSP_SETFMT(r14, 0xc0045005, &(0x7f0000000080)=0x100) ioctl$SNDCTL_DSP_SPEED(r14, 0xc0045002, &(0x7f0000000040)) write$binfmt_script(r14, &(0x7f0000000180)={'#! ', './file0', [{0x20, '\x00\x00\xfc\xff'}, {0x20, '\":/(\xa7'}, {0x20, '/dev/audio\x00\xbf\xd6.\xe9g;]\x85\x11\xf5\xdc\xa8\xcc\xac\x94\xda\xd0\x04!\xb2\x9f+4\x06\xf6\xad[\x02\xbc\xd1\xf1\xb4\xa3\xaf\x92\xe69:\xd6LC\x8fw\x7f\xe9\xed\xaeh\xf6%\xe3=\xaa\xa6\xfar0*\x96\x935\x878\xb1\f7\x81\v\xe3\xf3;?\xdf\x03\x83\xfa\xb1\xb4\x05UZ\x89\f/\xb4@\xfb\x0f\x8eZ\xa7v^\xa4\x1a\x89p\xba\f\xe3\xe0\xfc\xe1\x86\xa9I\x0e\xb1\xb8L\x16\xa3\x1eN\x12Nr\xf7\xe7\xc5\xc9n!f\xc5\x85Ou\xbc\xae&\xe4\x95s\x95\xb4\xde|c\xb4\x92\xfe\xf6\xcc\xc5\x98\xc6\xf2&}\xe9\xa9\xcb\xbfp\x9c\x8am\xb5q\xee\x94\xcf\xbd\x18T\xee\nZ\xbb\xd7\x84\x0f\xd5S$\x98'}], 0xa, "b7ef1c3e568656655c186e4e60a4215394a5e5b7d866178878c05fa87a33827f49f06be514c801ff3d10e24e53081d5b8e7790cd94560779d1952b90e4d3ffc9e829494aa707b13b6cab38f20af5dc90d6ab615fecbdb3e432a6cd672f28a81d7a6ffc21b0bb34b4dc92fc87513ef736"}, 0x143) ioctl$SNDCTL_DSP_SYNC(r14, 0x5001, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, 0x0) 242.816305ms ago: executing program 0 (id=336): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000400)='./bus\x00', 0x800, &(0x7f0000000280)=ANY=[@ANYRES8=0x0, @ANYRESDEC=0x0, @ANYRES64, @ANYRESHEX=0x0], 0x1, 0x36e, &(0x7f0000000f80)="$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") open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r0 = open(0x0, 0x185102, 0x11) r1 = fsopen(&(0x7f0000000040)='ceph\x00', 0x0) io_uring_enter(r0, 0x303d, 0x2f6a, 0xd, &(0x7f0000000200)={[0x44916b6d]}, 0x8) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000100)='source', &(0x7f0000000400)='#\n$)-.\xc7\x9d\xb2a\r\xd7\xef\xc5\x112s\x88\n\x13\xfa\xd5?\xc7\xfd&\x9e\x94\x9fN\x1aG\xd8\xde\x18\xe8\xa3\b\xf7s\x13h\x8d\r\xbb|&#\xe9\xa3\'\x91>C\x1bV*\xeb\f\xdb\x89\xb7}@\x8f\x97\x18\xce\x92\xc9\xa8\x1c\x9dp\xfe.\x84\x9f\x8d\x1e+Hq\x89\x83\xbb\x9dC\xd6Hy\xfao\x04\xa4\xb6\x88\xdb\xa1b\xae\xa7\x87=/o\xf3\x96\x00\x00\x00\x00\x00\b\x00\x00\x01\xab\x90Q\xe8r\xe7\r\'-06,\xff\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\x04Qr\xb9\xe495\x12E\x06\xe5\x8f\x83Vb\xf1\xbc\xb9E\xef\x11\x1a\x9bH$\x1f^\x9dX%0\xcc\xc9\x86\xaa\xd0\x9c\a\x00\x003\xf7\xc9\x14\xd3\xdb\x97v\x9c\xbd%fN1\xd4[\xa0\x0f\xdd.\x15\xf1)\xd6\xd8\x1cb\xc5\xd9=c\xb5<|+K*\x9f\x01u\xb0\xe4\x98_\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\xca\xdd\xf2aq\x19\xcc [ 282.833057][ T5523] dump_stack_lvl+0x216/0x2d0 [ 282.838096][ T5523] dump_stack+0x1e/0x30 [ 282.842570][ T5523] should_fail_ex+0x748/0x7f0 [ 282.847600][ T5523] should_fail+0x2a/0x40 [ 282.852167][ T5523] should_fail_usercopy+0x2e/0x40 [ 282.857553][ T5523] copy_page_from_iter_atomic+0x505/0x3100 [ 282.863774][ T5523] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 282.870163][ T5523] generic_perform_write+0x8d1/0x1080 [ 282.875964][ T5523] shmem_file_write_iter+0x2ba/0x2f0 [ 282.881646][ T5523] vfs_write+0xb28/0x1540 [ 282.886368][ T5523] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 282.892566][ T5523] ksys_write+0x20f/0x4c0 [ 282.897263][ T5523] __x64_sys_write+0x93/0xe0 [ 282.902194][ T5523] x64_sys_call+0x306a/0x3ba0 [ 282.907262][ T5523] do_syscall_64+0xcd/0x1e0 [ 282.912068][ T5523] ? clear_bhb_loop+0x25/0x80 [ 282.917110][ T5523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.923390][ T5523] RIP: 0033:0x7f69b357c9df [ 282.928099][ T5523] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 282.948106][ T5523] RSP: 002b:00007f69b4327df0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 282.956894][ T5523] RAX: ffffffffffffffda RBX: 0000000000020000 RCX: 00007f69b357c9df [ 282.965173][ T5523] RDX: 0000000000020000 RSI: 00007f69a8c00000 RDI: 0000000000000004 [ 282.973441][ T5523] RBP: 0000000000000000 R08: 0000000000000000 R09: 00000000000001ce [ 282.981704][ T5523] R10: 00000000000001c8 R11: 0000000000000293 R12: 0000000000000004 [ 282.989974][ T5523] R13: 00007f69b4327ef0 R14: 00007f69b4327eb0 R15: 00007f69a8c00000 [ 282.998263][ T5523] [ 283.091789][ T5523] loop2: detected capacity change from 0 to 256 [ 283.099396][ T4529] bridge_slave_0: left allmulticast mode [ 283.107260][ T4529] bridge_slave_0: left promiscuous mode [ 283.117033][ T4529] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.372497][ T5184] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 283.389442][ T5184] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 283.400479][ T5184] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 283.420355][ T5184] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 283.432324][ T5184] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 283.442098][ T5184] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 284.618143][ T4529] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 284.722947][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 284.723030][ T29] audit: type=1326 audit(1727032501.032:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5539 comm="syz.1.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81acb7def9 code=0x7ffc0000 [ 284.753270][ T29] audit: type=1326 audit(1727032501.032:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5539 comm="syz.1.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81acb7def9 code=0x7ffc0000 [ 284.776487][ T29] audit: type=1326 audit(1727032501.042:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5539 comm="syz.1.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7f81acb7def9 code=0x7ffc0000 [ 284.789431][ T4529] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 284.799709][ T29] audit: type=1326 audit(1727032501.042:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5539 comm="syz.1.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81acb7def9 code=0x7ffc0000 [ 284.835574][ T29] audit: type=1326 audit(1727032501.042:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5539 comm="syz.1.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f81acb7def9 code=0x7ffc0000 [ 284.849684][ T5541] loop1: detected capacity change from 0 to 256 [ 284.859841][ T29] audit: type=1326 audit(1727032501.042:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5539 comm="syz.1.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81acb7def9 code=0x7ffc0000 [ 284.887252][ T29] audit: type=1326 audit(1727032501.042:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5539 comm="syz.1.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f81acb7c890 code=0x7ffc0000 [ 284.915896][ T29] audit: type=1326 audit(1727032501.042:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5539 comm="syz.1.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f81acb7f727 code=0x7ffc0000 [ 284.948334][ T29] audit: type=1326 audit(1727032501.042:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5539 comm="syz.1.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f81acb7def9 code=0x7ffc0000 [ 284.973113][ T29] audit: type=1326 audit(1727032501.042:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5539 comm="syz.1.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f81acb7f727 code=0x7ffc0000 [ 285.082489][ T4529] bond0 (unregistering): Released all slaves [ 285.084784][ T5541] exfat: Unknown parameter '' [ 286.133165][ T5184] Bluetooth: hci2: command tx timeout [ 286.287457][ T5548] loop0: detected capacity change from 0 to 128 [ 287.094593][ T5548] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 287.164018][ T5548] ext4 filesystem being mounted at /7/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 287.933938][ T4529] hsr_slave_0: left promiscuous mode [ 287.945355][ T4529] hsr_slave_1: left promiscuous mode [ 287.958145][ T5559] loop3: detected capacity change from 0 to 4096 [ 287.968309][ T5559] EXT4-fs: Ignoring removed nomblk_io_submit option [ 288.013238][ T4529] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 288.021123][ T4529] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 288.068761][ T5559] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.145905][ T4529] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 288.153952][ T4529] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 288.177959][ T5187] Bluetooth: hci2: command tx timeout [ 288.317621][ T4529] veth1_macvtap: left promiscuous mode [ 288.323914][ T4529] veth0_macvtap: left promiscuous mode [ 288.329890][ T4529] veth1_vlan: left promiscuous mode [ 288.336045][ T4529] veth0_vlan: left promiscuous mode [ 288.649170][ T5578] loop2: detected capacity change from 0 to 2048 [ 288.876610][ T5578] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 289.095142][ T5567] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 289.144746][ T5567] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 289.158714][ T5567] EXT4-fs (loop2): This should not happen!! Data will be lost [ 289.158714][ T5567] [ 289.169949][ T5567] EXT4-fs (loop2): Total free blocks count 0 [ 289.177508][ T5567] EXT4-fs (loop2): Free/Dirty block details [ 289.185236][ T5567] EXT4-fs (loop2): free_blocks=2415919104 [ 289.191331][ T5567] EXT4-fs (loop2): dirty_blocks=16 [ 289.198295][ T5567] EXT4-fs (loop2): Block reservation details [ 289.198391][ T5567] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 289.301123][ T5567] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 289.617685][ T4529] team0 (unregistering): Port device team_slave_1 removed [ 289.777186][ T4529] team0 (unregistering): Port device team_slave_0 removed [ 290.155472][ T5185] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.251919][ T5198] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 290.262326][ T5187] Bluetooth: hci2: command tx timeout [ 290.477753][ T5526] chnl_net:caif_netlink_parms(): no params data found [ 290.688825][ T1241] ieee802154 phy0 wpan0: encryption failed: -22 [ 290.696291][ T1241] ieee802154 phy1 wpan1: encryption failed: -22 [ 291.272041][ T5598] ipvlan2: entered promiscuous mode [ 291.282939][ T5598] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 292.417217][ T5187] Bluetooth: hci2: command tx timeout [ 293.429504][ T5619] loop0: detected capacity change from 0 to 1024 [ 293.842031][ T5622] loop2: detected capacity change from 0 to 512 [ 293.916880][ T5619] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 294.023452][ T5625] loop1: detected capacity change from 0 to 128 [ 294.040745][ T5526] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.049703][ T5526] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.057870][ T5526] bridge_slave_0: entered allmulticast mode [ 294.067401][ T5526] bridge_slave_0: entered promiscuous mode [ 294.101472][ T5622] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 294.280663][ T5625] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 294.367279][ T5622] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 294.380616][ T5622] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 294.425890][ T5625] ext4 filesystem being mounted at /11/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 294.478830][ T5526] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.487001][ T5526] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.497740][ T5526] bridge_slave_1: entered allmulticast mode [ 294.507321][ T5526] bridge_slave_1: entered promiscuous mode [ 294.518675][ T5619] xt_CT: No such helper "snmp" [ 294.588030][ T5614] loop3: detected capacity change from 0 to 32768 [ 294.871511][ T5614] ERROR: (device loop3): dbAlloc: unable to allocate blocks [ 294.871511][ T5614] [ 294.888185][ T5614] ERROR: (device loop3): remounting filesystem as read-only [ 294.901904][ T5614] jfs_create: dtInsert returned -EIO [ 294.907564][ T5614] ERROR: (device loop3): txAbort: [ 294.907564][ T5614] [ 295.031799][ T5198] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.228174][ T5526] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 295.252199][ T5526] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 295.491621][ T5180] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.499656][ T5526] team0: Port device team_slave_0 added [ 295.603095][ T5526] team0: Port device team_slave_1 added [ 296.326242][ T5526] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 296.333879][ T5526] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 296.360376][ T5526] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 296.463596][ T5649] process 'syz.2.69' launched './file0' with NULL argv: empty string added [ 296.927407][ T5526] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 296.934932][ T5526] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 296.961639][ T5526] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 297.359267][ T5181] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 297.776167][ T5645] loop3: detected capacity change from 0 to 32768 [ 297.988356][ T5645] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 298.296025][ T5657] pimreg3: entered allmulticast mode [ 298.374274][ T5526] hsr_slave_0: entered promiscuous mode [ 298.591593][ T5526] hsr_slave_1: entered promiscuous mode [ 298.714650][ T5526] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 298.722883][ T5526] Cannot create hsr debugfs directory [ 298.823729][ T5241] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 298.984718][ T5241] usb 2-1: device descriptor read/64, error -71 [ 299.298826][ T5241] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 299.523560][ T5241] usb 2-1: device descriptor read/64, error -71 [ 299.644720][ T5241] usb usb2-port1: attempt power cycle [ 300.060281][ T5241] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 300.138509][ T5241] usb 2-1: device descriptor read/8, error -71 [ 300.423095][ T5676] loop2: detected capacity change from 0 to 128 [ 300.423115][ T5241] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 300.454381][ T5241] usb 2-1: device descriptor read/8, error -71 [ 300.586755][ T5241] usb usb2-port1: unable to enumerate USB device [ 300.655342][ T5676] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 300.738428][ T5676] ext4 filesystem being mounted at /21/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 300.865824][ T5185] ocfs2: Unmounting device (7,3) on (node local) [ 301.049587][ T5682] loop0: detected capacity change from 0 to 512 [ 301.103240][ T5682] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 301.395330][ T5682] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 301.411310][ T5682] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 301.558135][ T5526] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 301.743614][ T5526] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 301.956391][ T5688] loop1: detected capacity change from 0 to 128 [ 302.031087][ T5198] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.191747][ T5180] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 302.216673][ T5526] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 302.373748][ T5694] tmpfs: Bad value for 'size' [ 302.543089][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 302.543172][ T29] audit: type=1326 audit(1727032518.692:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5693 comm="syz.0.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdca0f7def9 code=0x7ffc0000 [ 302.572917][ T29] audit: type=1326 audit(1727032518.692:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5693 comm="syz.0.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdca0f7def9 code=0x7ffc0000 [ 302.596066][ T29] audit: type=1326 audit(1727032518.692:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5693 comm="syz.0.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdca0f7def9 code=0x7ffc0000 [ 302.618954][ T29] audit: type=1326 audit(1727032518.692:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5693 comm="syz.0.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fdca0f7c797 code=0x7ffc0000 [ 302.643810][ T29] audit: type=1326 audit(1727032518.692:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5693 comm="syz.0.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdca0f7def9 code=0x7ffc0000 [ 302.655545][ T5688] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 302.667077][ T29] audit: type=1326 audit(1727032518.692:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5693 comm="syz.0.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fdca0f7def9 code=0x7ffc0000 [ 302.701254][ T29] audit: type=1326 audit(1727032518.702:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5693 comm="syz.0.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdca0f7def9 code=0x7ffc0000 [ 302.723868][ T29] audit: type=1326 audit(1727032518.702:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5693 comm="syz.0.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdca0f7def9 code=0x7ffc0000 [ 302.741436][ T5688] ext4 filesystem being mounted at /13/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 302.748409][ T29] audit: type=1326 audit(1727032518.702:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5693 comm="syz.0.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdca0f7def9 code=0x7ffc0000 [ 302.801792][ T29] audit: type=1326 audit(1727032518.712:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5693 comm="syz.0.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdca0f7fe17 code=0x7ffc0000 [ 302.844048][ T5526] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 303.014363][ T5702] FAULT_INJECTION: forcing a failure. [ 303.014363][ T5702] name failslab, interval 1, probability 0, space 0, times 1 [ 303.028689][ T5702] CPU: 1 UID: 0 PID: 5702 Comm: syz.0.83 Not tainted 6.11.0-syzkaller-08481-g88264981f208 #0 [ 303.039191][ T5702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 303.049544][ T5702] Call Trace: [ 303.053042][ T5702] [ 303.056190][ T5702] dump_stack_lvl+0x216/0x2d0 [ 303.061218][ T5702] dump_stack+0x1e/0x30 [ 303.065690][ T5702] should_fail_ex+0x748/0x7f0 [ 303.070744][ T5702] should_failslab+0x17f/0x210 [ 303.075894][ T5702] __kmalloc_node_noprof+0x177/0xf50 [ 303.081550][ T5702] ? __kvmalloc_node_noprof+0xc0/0x2d0 [ 303.087464][ T5702] __kvmalloc_node_noprof+0xc0/0x2d0 [ 303.093135][ T5702] ? strlen+0x44/0x90 [ 303.097425][ T5702] alloc_netdev_mqs+0x12f/0x1bd0 [ 303.102738][ T5702] ? __pfx_ipvlan_link_setup+0x10/0x10 [ 303.108591][ T5702] rtnl_create_link+0x50f/0x12b0 [ 303.113870][ T5702] ? __pfx_ipvlan_link_setup+0x10/0x10 [ 303.119920][ T5702] rtnl_newlink+0x2b8a/0x4200 [ 303.125079][ T5702] ? kmsan_get_metadata+0x13e/0x1c0 [ 303.130679][ T5702] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 303.136865][ T5702] ? __pfx_rtnl_newlink+0x10/0x10 [ 303.142261][ T5702] ? __pfx_rtnl_newlink+0x10/0x10 [ 303.147659][ T5702] rtnetlink_rcv_msg+0x12fc/0x1410 [ 303.153184][ T5702] ? kmsan_get_metadata+0x13e/0x1c0 [ 303.158797][ T5702] netlink_rcv_skb+0x375/0x650 [ 303.163894][ T5702] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 303.169774][ T5702] ? __pfx_rtnetlink_rcv+0x10/0x10 [ 303.175264][ T5702] rtnetlink_rcv+0x34/0x40 [ 303.180321][ T5702] netlink_unicast+0xf52/0x1260 [ 303.185583][ T5702] netlink_sendmsg+0x10da/0x11e0 [ 303.190960][ T5702] ? __pfx_netlink_sendmsg+0x10/0x10 [ 303.196575][ T5702] ? __pfx_netlink_sendmsg+0x10/0x10 [ 303.202193][ T5702] __sock_sendmsg+0x30f/0x380 [ 303.207240][ T5702] ____sys_sendmsg+0x877/0xb60 [ 303.212422][ T5702] ___sys_sendmsg+0x28d/0x3c0 [ 303.217484][ T5702] ? kmsan_get_metadata+0x13e/0x1c0 [ 303.223085][ T5702] ? __rcu_read_unlock+0x7b/0xe0 [ 303.228387][ T5702] ? __fget_files+0x4f5/0x5c0 [ 303.233437][ T5702] ? kmsan_get_metadata+0x13e/0x1c0 [ 303.239028][ T5702] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 303.245250][ T5702] __x64_sys_sendmsg+0x301/0x490 [ 303.250606][ T5702] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 303.256819][ T5702] x64_sys_call+0x2da0/0x3ba0 [ 303.261870][ T5702] do_syscall_64+0xcd/0x1e0 [ 303.266694][ T5702] ? clear_bhb_loop+0x25/0x80 [ 303.271734][ T5702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.277992][ T5702] RIP: 0033:0x7fdca0f7def9 [ 303.282683][ T5702] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 303.302642][ T5702] RSP: 002b:00007fdca1de7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 303.311420][ T5702] RAX: ffffffffffffffda RBX: 00007fdca1135f80 RCX: 00007fdca0f7def9 [ 303.319698][ T5702] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 303.327961][ T5702] RBP: 00007fdca1de7090 R08: 0000000000000000 R09: 0000000000000000 [ 303.336213][ T5702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 303.344481][ T5702] R13: 0000000000000000 R14: 00007fdca1135f80 R15: 00007ffd9889a088 [ 303.352765][ T5702] [ 303.885011][ T5708] netlink: 8 bytes leftover after parsing attributes in process `syz.2.81'. [ 304.122194][ T5526] 8021q: adding VLAN 0 to HW filter on device bond0 [ 304.308683][ T5712] netlink: 24 bytes leftover after parsing attributes in process `syz.3.84'. [ 304.485988][ T5526] 8021q: adding VLAN 0 to HW filter on device team0 [ 304.645244][ T80] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.653267][ T80] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.888814][ T80] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.896769][ T80] bridge0: port 2(bridge_slave_1) entered forwarding state [ 305.515382][ T4811] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 305.802784][ T4811] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 305.814875][ T4811] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 305.826693][ T4811] usb 3-1: config 0 has no interface number 0 [ 305.833265][ T4811] usb 3-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice=3f.99 [ 305.842769][ T4811] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.998362][ T5181] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 306.311768][ T5724] loop3: detected capacity change from 0 to 512 [ 306.338884][ T4811] usb 3-1: config 0 descriptor?? [ 306.481840][ T5716] loop0: detected capacity change from 0 to 32768 [ 306.723894][ T5724] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 306.733487][ T5716] ERROR: (device loop0): dbAlloc: unable to allocate blocks [ 306.733487][ T5716] [ 306.741351][ T5724] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 306.752470][ T5716] ERROR: (device loop0): remounting filesystem as read-only [ 306.767307][ T5716] jfs_mkdir: dtInsert returned -EIO [ 306.772795][ T5716] ERROR: (device loop0): txAbort: [ 306.772795][ T5716] [ 306.864062][ T5731] program syz.0.85 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 306.944109][ T5734] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 307.703785][ T5263] usb 3-1: USB disconnect, device number 2 [ 308.107492][ T5185] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.130198][ T5735] loop1: detected capacity change from 0 to 32768 [ 309.147931][ T5526] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 309.394048][ T5735] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 310.323491][ T5752] loop3: detected capacity change from 0 to 512 [ 310.374063][ T5752] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 310.556634][ T5752] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 310.570180][ T5752] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 310.746628][ T5750] loop2: detected capacity change from 0 to 2048 [ 310.818690][ T5750] EXT4-fs (loop2): The Hurd can't support 64-bit file systems [ 311.244149][ T5765] loop2: detected capacity change from 0 to 8 [ 311.254074][ T5765] squashfs: Unknown parameter '' [ 311.275954][ T5185] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.254855][ T5526] veth0_vlan: entered promiscuous mode [ 312.320520][ T5526] veth1_vlan: entered promiscuous mode [ 312.361318][ T5773] loop0: detected capacity change from 0 to 64 [ 312.450385][ T5526] veth0_macvtap: entered promiscuous mode [ 312.476852][ T5526] veth1_macvtap: entered promiscuous mode [ 312.533434][ T5526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 312.544324][ T5526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.554488][ T5526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 312.568070][ T5526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.578914][ T5526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 312.589921][ T5526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.600073][ T5526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 312.610862][ T5526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.626897][ T5526] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 312.646732][ T5526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 312.657670][ T5526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.670886][ T5526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 312.682319][ T5526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.692462][ T5526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 312.703512][ T5526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.713706][ T5526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 312.724879][ T5526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.740732][ T5526] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 312.761746][ T5526] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.774128][ T5526] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.784106][ T5526] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.793372][ T5526] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.057624][ T5181] ocfs2: Unmounting device (7,1) on (node local) [ 314.446415][ T5771] loop2: detected capacity change from 0 to 32768 [ 314.532915][ T5771] JBD2: Ignoring recovery information on journal [ 314.766395][ T5771] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 315.290366][ T5180] ocfs2: Unmounting device (7,2) on (node local) [ 316.764543][ T5806] loop1: detected capacity change from 0 to 128 [ 316.825245][ T5811] loop3: detected capacity change from 0 to 128 [ 316.841614][ T5810] FAULT_INJECTION: forcing a failure. [ 316.841614][ T5810] name failslab, interval 1, probability 0, space 0, times 0 [ 316.854937][ T5810] CPU: 1 UID: 0 PID: 5810 Comm: syz.2.104 Not tainted 6.11.0-syzkaller-08481-g88264981f208 #0 [ 316.865547][ T5810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 316.876055][ T5810] Call Trace: [ 316.879598][ T5810] [ 316.882751][ T5810] dump_stack_lvl+0x216/0x2d0 [ 316.887773][ T5810] dump_stack+0x1e/0x30 [ 316.892233][ T5810] should_fail_ex+0x748/0x7f0 [ 316.897310][ T5810] should_failslab+0x17f/0x210 [ 316.902456][ T5810] __kmalloc_noprof+0x175/0xf30 [ 316.907681][ T5810] ? iter_file_splice_write+0x1f5/0x1da0 [ 316.913713][ T5810] ? kmsan_get_metadata+0x13e/0x1c0 [ 316.919345][ T5810] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 316.925564][ T5810] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 316.931752][ T5810] iter_file_splice_write+0x1f5/0x1da0 [ 316.937600][ T5810] ? kmsan_get_metadata+0x13e/0x1c0 [ 316.943209][ T5810] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 316.949432][ T5810] ? end_current_label_crit_section+0x124/0x2a0 [ 316.956084][ T5810] ? apparmor_file_permission+0x3e/0x50 [ 316.961994][ T5810] ? kmsan_get_metadata+0x13e/0x1c0 [ 316.967677][ T5810] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 316.973892][ T5810] ? __pfx_iter_file_splice_write+0x10/0x10 [ 316.980194][ T5810] do_splice+0x216e/0x3200 [ 316.985024][ T5810] ? kmsan_get_metadata+0x13e/0x1c0 [ 316.990606][ T5810] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 316.996790][ T5810] ? __se_sys_splice+0x1b1/0x8f0 [ 317.002050][ T5810] ? filter_irq_stacks+0x60/0x1a0 [ 317.007448][ T5810] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 317.014264][ T5810] ? pipe_clear_nowait+0x13b/0x160 [ 317.020140][ T5810] __se_sys_splice+0x5ad/0x8f0 [ 317.025253][ T5810] __x64_sys_splice+0x11f/0x1a0 [ 317.030457][ T5810] x64_sys_call+0x3349/0x3ba0 [ 317.035528][ T5810] do_syscall_64+0xcd/0x1e0 [ 317.040394][ T5810] ? clear_bhb_loop+0x25/0x80 [ 317.045435][ T5810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.051686][ T5810] RIP: 0033:0x7f69b357def9 [ 317.056376][ T5810] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 317.076361][ T5810] RSP: 002b:00007f69b4328038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 317.085165][ T5810] RAX: ffffffffffffffda RBX: 00007f69b3735f80 RCX: 00007f69b357def9 [ 317.093520][ T5810] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000006 [ 317.101796][ T5810] RBP: 00007f69b4328090 R08: 0000000000001000 R09: 0000000000000000 [ 317.110086][ T5810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 317.118361][ T5810] R13: 0000000000000000 R14: 00007f69b3735f80 R15: 00007ffdae20b618 [ 317.126759][ T5810] [ 317.163073][ T5806] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 317.299436][ T5806] ext4 filesystem being mounted at /15/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 318.032282][ T5804] loop0: detected capacity change from 0 to 4096 [ 318.047378][ T5804] EXT4-fs: Ignoring removed nomblk_io_submit option [ 318.439757][ T5824] loop2: detected capacity change from 0 to 2048 [ 318.481152][ T5804] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 318.516177][ T5824] loop2: p2 p3 < > p4 < p5 > [ 318.521187][ T5824] loop2: partition table partially beyond EOD, truncated [ 318.530218][ T5824] loop2: p2 start 16908804 is beyond EOD, truncated [ 318.537360][ T5824] loop2: p3 start 4284289 is beyond EOD, truncated [ 319.051721][ T5824] loop2: p5 start 16908804 is beyond EOD, truncated [ 319.131827][ T5198] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.335679][ T4619] loop2: p2 p3 < > p4 < p5 > [ 319.340687][ T4619] loop2: partition table partially beyond EOD, truncated [ 319.357933][ T4619] loop2: p2 start 16908804 is beyond EOD, truncated [ 319.366186][ T4619] loop2: p3 start 4284289 is beyond EOD, truncated [ 319.523276][ T4619] loop2: p5 start 16908804 is beyond EOD, truncated [ 320.025505][ T5521] udevd[5521]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 320.129362][ T5843] netlink: 20 bytes leftover after parsing attributes in process `syz.2.108'. [ 320.903222][ T5181] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 321.491560][ T5840] loop3: detected capacity change from 0 to 32768 [ 321.534228][ T3702] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.542487][ T3702] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.754436][ T5521] udevd[5521]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 321.776496][ T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.787606][ T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.845958][ T5855] FAULT_INJECTION: forcing a failure. [ 321.845958][ T5855] name failslab, interval 1, probability 0, space 0, times 0 [ 321.859259][ T5855] CPU: 1 UID: 0 PID: 5855 Comm: syz.0.107 Not tainted 6.11.0-syzkaller-08481-g88264981f208 #0 [ 321.869863][ T5855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 321.880213][ T5855] Call Trace: [ 321.883774][ T5855] [ 321.886935][ T5855] dump_stack_lvl+0x216/0x2d0 [ 321.891952][ T5855] dump_stack+0x1e/0x30 [ 321.896418][ T5855] should_fail_ex+0x748/0x7f0 [ 321.901484][ T5855] should_failslab+0x17f/0x210 [ 321.906636][ T5855] kmem_cache_alloc_node_noprof+0xeb/0xb80 [ 321.912815][ T5855] ? __alloc_skb+0x1e9/0x7b0 [ 321.917757][ T5855] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 321.923992][ T5855] __alloc_skb+0x1e9/0x7b0 [ 321.928786][ T5855] alloc_skb_with_frags+0xc8/0xd00 [ 321.934364][ T5855] ? kmsan_get_metadata+0x13e/0x1c0 [ 321.939949][ T5855] ? kmsan_get_metadata+0x13e/0x1c0 [ 321.945530][ T5855] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 321.951684][ T5855] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 321.957851][ T5855] sock_alloc_send_pskb+0xa81/0xbf0 [ 321.963389][ T5855] packet_sendmsg+0x7319/0xa370 [ 321.968544][ T5855] ? do_syscall_64+0xcd/0x1e0 [ 321.973525][ T5855] ? kmsan_get_metadata+0x13e/0x1c0 [ 321.979062][ T5855] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 321.985227][ T5855] ? aa_label_sk_perm+0x677/0x7b0 [ 321.990600][ T5855] ? filter_irq_stacks+0x60/0x1a0 [ 321.995982][ T5855] ? kmsan_get_metadata+0x13e/0x1c0 [ 322.001566][ T5855] ? __pfx_packet_sendmsg+0x10/0x10 [ 322.007046][ T5855] ? __pfx_packet_sendmsg+0x10/0x10 [ 322.012524][ T5855] __sock_sendmsg+0x30f/0x380 [ 322.017520][ T5855] __sys_sendto+0x67f/0x830 [ 322.022336][ T5855] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 322.028990][ T5855] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 322.035464][ T5855] ? ksys_write+0x404/0x4c0 [ 322.040278][ T5855] __x64_sys_sendto+0x125/0x1d0 [ 322.045465][ T5855] x64_sys_call+0x3373/0x3ba0 [ 322.050624][ T5855] do_syscall_64+0xcd/0x1e0 [ 322.055400][ T5855] ? clear_bhb_loop+0x25/0x80 [ 322.060395][ T5855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.066645][ T5855] RIP: 0033:0x7fdca0f7def9 [ 322.071303][ T5855] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 322.091311][ T5855] RSP: 002b:00007fdca1de7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 322.100060][ T5855] RAX: ffffffffffffffda RBX: 00007fdca1135f80 RCX: 00007fdca0f7def9 [ 322.108390][ T5855] RDX: 0000000000010048 RSI: 00000000200000c0 RDI: 0000000000000003 [ 322.116712][ T5855] RBP: 00007fdca1de7090 R08: 0000000020000540 R09: 0000000000000014 [ 322.125041][ T5855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 322.133316][ T5855] R13: 0000000000000000 R14: 00007fdca1135f80 R15: 00007ffd9889a088 [ 322.141563][ T5855] [ 322.263091][ T5840] JBD2: journal reset failed [ 322.267948][ T5840] (syz.3.106,5840,1):ocfs2_journal_load:1145 ERROR: Failed to load journal! [ 322.277190][ T5840] (syz.3.106,5840,1):ocfs2_check_volume:2425 ERROR: ocfs2 journal load failed! -4 [ 322.585462][ T5852] loop2: detected capacity change from 0 to 2048 [ 323.515568][ T5852] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 323.882048][ T5847] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 324.007029][ T5847] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 324.020423][ T5847] EXT4-fs (loop2): This should not happen!! Data will be lost [ 324.020423][ T5847] [ 324.030520][ T5847] EXT4-fs (loop2): Total free blocks count 0 [ 324.041980][ T5847] EXT4-fs (loop2): Free/Dirty block details [ 324.049681][ T5847] EXT4-fs (loop2): free_blocks=2415919104 [ 324.055903][ T5847] EXT4-fs (loop2): dirty_blocks=16 [ 324.061422][ T5847] EXT4-fs (loop2): Block reservation details [ 324.067792][ T5847] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 324.088357][ T5872] nvme_fabrics: missing parameter 'transport=%s' [ 324.095096][ T5872] nvme_fabrics: missing parameter 'nqn=%s' [ 324.115747][ T5847] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 325.231638][ T5889] loop0: detected capacity change from 0 to 128 [ 325.367610][ T5889] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 325.474409][ T5889] ext4 filesystem being mounted at /29/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 326.590655][ T5884] loop4: detected capacity change from 0 to 4096 [ 326.684388][ T5884] EXT4-fs: Ignoring removed nomblk_io_submit option [ 326.745570][ T5895] netlink: 20 bytes leftover after parsing attributes in process `syz.2.119'. [ 326.879605][ T5884] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 327.016361][ T5887] loop3: detected capacity change from 0 to 32768 [ 327.119280][ T5198] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 327.222811][ T5887] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 328.205714][ T5905] loop1: detected capacity change from 0 to 512 [ 328.241105][ T5905] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 328.428017][ T5905] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 328.446777][ T5905] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 328.567535][ T5910] loop0: detected capacity change from 0 to 1024 [ 328.726496][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 328.726606][ T29] audit: type=1800 audit(1727032545.052:62): pid=5912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.123" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 328.867893][ T5526] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.877069][ T29] audit: type=1800 audit(1727032545.102:63): pid=5905 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.123" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 329.085028][ T5905] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 329.179213][ T5910] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 329.306339][ T5905] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 16 with error 28 [ 329.319886][ T5905] EXT4-fs (loop1): This should not happen!! Data will be lost [ 329.319886][ T5905] [ 329.330086][ T5905] EXT4-fs (loop1): Total free blocks count 0 [ 329.336579][ T5905] EXT4-fs (loop1): Free/Dirty block details [ 329.343332][ T5905] EXT4-fs (loop1): free_blocks=39626 [ 329.348928][ T5905] EXT4-fs (loop1): dirty_blocks=16 [ 329.354480][ T5905] EXT4-fs (loop1): Block reservation details [ 329.366001][ T5905] EXT4-fs (loop1): i_reserved_data_blocks=16 [ 329.502093][ T5910] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 329.518628][ T5910] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 329.532114][ T5910] EXT4-fs (loop0): This should not happen!! Data will be lost [ 329.532114][ T5910] [ 329.542266][ T5910] EXT4-fs (loop0): Total free blocks count 0 [ 329.548674][ T5910] EXT4-fs (loop0): Free/Dirty block details [ 329.555156][ T5910] EXT4-fs (loop0): free_blocks=68451041280 [ 329.566891][ T5910] EXT4-fs (loop0): dirty_blocks=16 [ 329.572280][ T5910] EXT4-fs (loop0): Block reservation details [ 329.579893][ T5910] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 329.690542][ T5181] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.649145][ T5198] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.934736][ T5185] ocfs2: Unmounting device (7,3) on (node local) [ 331.339673][ T5932] loop4: detected capacity change from 0 to 2048 [ 331.756853][ T5932] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 331.848516][ T5943] loop0: detected capacity change from 0 to 128 [ 331.959582][ T5950] loop3: detected capacity change from 0 to 128 [ 331.994400][ T5943] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 332.013685][ T5943] ext4 filesystem being mounted at /31/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 332.126136][ T5928] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 332.147224][ T5928] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 332.160521][ T5928] EXT4-fs (loop4): This should not happen!! Data will be lost [ 332.160521][ T5928] [ 332.170739][ T5928] EXT4-fs (loop4): Total free blocks count 0 [ 332.179148][ T5928] EXT4-fs (loop4): Free/Dirty block details [ 332.185461][ T5928] EXT4-fs (loop4): free_blocks=2415919104 [ 332.191466][ T5928] EXT4-fs (loop4): dirty_blocks=16 [ 332.197016][ T5928] EXT4-fs (loop4): Block reservation details [ 332.203984][ T5928] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 332.219333][ T5932] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 332.706187][ T5960] syzkaller0: entered promiscuous mode [ 332.711968][ T5960] syzkaller0: entered allmulticast mode [ 333.053823][ T1850] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 333.311660][ T1850] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 333.324664][ T1850] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 333.338284][ T1850] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 333.347861][ T1850] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.458804][ T1850] usb 4-1: config 0 descriptor?? [ 333.738150][ T5969] fuse: Bad value for 'fd' [ 334.021222][ T1850] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 334.030693][ T1850] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 334.063960][ T1850] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 334.108624][ T1850] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 334.145392][ T5263] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 334.203835][ T4811] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 334.306725][ T5198] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 334.325331][ T5263] usb 2-1: not running at top speed; connect to a high speed hub [ 334.342626][ C1] hrtimer: interrupt took 203366 ns [ 334.428569][ T4811] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 334.440803][ T4811] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 334.452074][ T4811] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 334.461812][ T4811] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.586795][ T5263] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 334.598792][ T5263] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 334.653520][ T1850] usb 4-1: USB disconnect, device number 2 [ 334.765499][ T4811] usb 3-1: config 0 descriptor?? [ 334.804653][ T5263] usb 2-1: New USB device found, idVendor=056a, idProduct=0314, bcdDevice= 0.40 [ 334.816886][ T5263] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.825979][ T5263] usb 2-1: Product: ᠁ [ 334.830437][ T5263] usb 2-1: Manufacturer: Ⴤ핃ꛨᘪ館尲甝䛐ꠏ䉄狚Ⲩ蠺톞ꢱ⶞ꆴ൏䗆츽゙ፍ폼Ϸꃇ괕逜홝 [ 335.097896][ T5977] loop0: detected capacity change from 0 to 64 [ 335.885288][ T5966] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 335.932435][ T5966] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 336.901881][ T4811] pyra 0003:1E7D:2CF6.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.2-1/input0 [ 337.191324][ T5975] loop4: detected capacity change from 0 to 32768 [ 337.230071][ T4811] pyra 0003:1E7D:2CF6.0002: couldn't init struct pyra_device [ 337.238194][ T4811] pyra 0003:1E7D:2CF6.0002: couldn't install mouse [ 337.259195][ T5263] usbhid 2-1:1.0: can't add hid device: -71 [ 337.266163][ T5263] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 337.283296][ T5263] usb 2-1: USB disconnect, device number 6 [ 337.398705][ T4811] pyra 0003:1E7D:2CF6.0002: probe with driver pyra failed with error -5 [ 337.631333][ T5975] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 338.017038][ T5983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.184045][ T5983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.305742][ T5526] ocfs2: Unmounting device (7,4) on (node local) [ 339.099395][ T6008] loop3: detected capacity change from 0 to 2048 [ 339.136208][ T4811] usb 3-1: USB disconnect, device number 3 [ 339.185184][ T6016] loop1: detected capacity change from 0 to 128 [ 339.410013][ T6016] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 339.427324][ T6008] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 339.452377][ T6016] ext4 filesystem being mounted at /26/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 339.745875][ T5997] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 339.832222][ T6028] loop0: detected capacity change from 0 to 128 [ 339.849883][ T5997] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 339.862698][ T5997] EXT4-fs (loop3): This should not happen!! Data will be lost [ 339.862698][ T5997] [ 339.873068][ T5997] EXT4-fs (loop3): Total free blocks count 0 [ 339.879343][ T5997] EXT4-fs (loop3): Free/Dirty block details [ 339.885773][ T5997] EXT4-fs (loop3): free_blocks=2415919104 [ 339.891803][ T5997] EXT4-fs (loop3): dirty_blocks=16 [ 339.897299][ T5997] EXT4-fs (loop3): Block reservation details [ 339.908881][ T5997] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 339.924937][ T6003] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 340.157419][ T6028] syzkaller0: entered promiscuous mode [ 340.163491][ T6028] syzkaller0: entered allmulticast mode [ 340.289306][ T6022] loop4: detected capacity change from 0 to 2048 [ 340.378190][ T6022] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 340.467328][ T6022] UDF-fs: error (device loop4): udf_rename: failed to find renamed entry again in directory (ino 1367) [ 340.690758][ T6021] dccp_close: ABORT with 52 bytes unread [ 342.090342][ T6042] loop3: detected capacity change from 0 to 1024 [ 342.295835][ T6042] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 342.557296][ T6046] loop0: detected capacity change from 0 to 512 [ 343.189309][ T6037] loop2: detected capacity change from 0 to 32768 [ 343.315124][ T5181] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 343.329507][ T6048] netlink: 28 bytes leftover after parsing attributes in process `syz.0.162'. [ 343.418233][ T6037] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 343.493736][ T6048] cgroup: Unknown subsys name 'cpuset' [ 343.798157][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 343.879132][ T6050] netlink: 68 bytes leftover after parsing attributes in process `syz.0.162'. [ 343.904017][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 344.106261][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 344.413202][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 344.714603][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 344.734688][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 344.936832][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 344.976653][ T6019] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 345.113781][ T1850] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 345.160487][ T5185] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.351562][ T1850] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 345.361189][ T1850] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 345.371482][ T1850] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 345.381705][ T1850] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 345.392176][ T1850] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 345.402673][ T1850] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 345.413040][ T1850] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 345.423313][ T1850] usb 2-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping [ 345.595771][ T1850] usb 2-1: New USB device found, idVendor=2040, idProduct=4903, bcdDevice=f6.b5 [ 345.605534][ T1850] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.614079][ T1850] usb 2-1: Product: syz [ 345.618537][ T1850] usb 2-1: Manufacturer: syz [ 345.623564][ T1850] usb 2-1: SerialNumber: syz [ 345.731918][ T6061] loop4: detected capacity change from 0 to 512 [ 345.791268][ T1850] usb 2-1: config 0 descriptor?? [ 345.969090][ T6061] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 345.983346][ T6061] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 346.025833][ T6055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.115518][ T6055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.585447][ T6065] loop0: detected capacity change from 0 to 2048 [ 346.758068][ T6065] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 346.910629][ T5180] ocfs2: Unmounting device (7,2) on (node local) [ 346.957332][ T6058] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 347.264892][ T5526] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.340854][ T6058] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 347.354231][ T6058] EXT4-fs (loop0): This should not happen!! Data will be lost [ 347.354231][ T6058] [ 347.365191][ T6058] EXT4-fs (loop0): Total free blocks count 0 [ 347.371630][ T6058] EXT4-fs (loop0): Free/Dirty block details [ 347.378285][ T6058] EXT4-fs (loop0): free_blocks=2415919104 [ 347.394953][ T6058] EXT4-fs (loop0): dirty_blocks=16 [ 347.397243][ T6055] loop1: detected capacity change from 0 to 4096 [ 347.400363][ T6058] EXT4-fs (loop0): Block reservation details [ 347.413738][ T6058] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 347.727554][ T6058] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 347.744042][ T6055] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 348.314446][ T6055] ntfs3: loop1: Failed to read $AttrDef (-4). [ 348.759272][ T6082] loop4: detected capacity change from 0 to 2048 [ 348.867181][ T1850] hdpvr 2-1:0.0: unexpected answer of status request, len -71 [ 348.875427][ T1850] hdpvr 2-1:0.0: device init failed [ 348.881143][ T1850] hdpvr 2-1:0.0: probe with driver hdpvr failed with error -12 [ 348.893166][ T6082] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 349.024591][ T1850] usb 2-1: USB disconnect, device number 7 [ 349.051206][ T6082] UDF-fs: error (device loop4): udf_rename: failed to find renamed entry again in directory (ino 1367) [ 349.624887][ T6092] loop1: detected capacity change from 0 to 128 [ 349.763928][ T6093] netlink: 32 bytes leftover after parsing attributes in process `syz.2.175'. [ 349.849658][ T6092] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 349.866553][ T6092] ext4 filesystem being mounted at /28/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 350.937982][ T6105] netlink: 'syz.4.176': attribute type 3 has an invalid length. [ 350.946522][ T6105] netlink: 'syz.4.176': attribute type 3 has an invalid length. [ 350.954942][ T6105] netlink: 12 bytes leftover after parsing attributes in process `syz.4.176'. [ 351.282413][ T6107] loop2: detected capacity change from 0 to 2048 [ 351.419764][ T6107] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 351.914674][ T4811] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 352.114914][ T1241] ieee802154 phy0 wpan0: encryption failed: -22 [ 352.121897][ T1241] ieee802154 phy1 wpan1: encryption failed: -22 [ 352.143125][ T4811] usb 3-1: Using ep0 maxpacket: 8 [ 352.207401][ T4811] usb 3-1: config 135 has an invalid interface number: 230 but max is 0 [ 352.216511][ T4811] usb 3-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 352.227322][ T4811] usb 3-1: config 135 has no interface number 0 [ 352.234279][ T4811] usb 3-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 352.372993][ T6111] loop0: detected capacity change from 0 to 4096 [ 352.446135][ T6111] EXT4-fs: Ignoring removed nomblk_io_submit option [ 352.573394][ T4811] usb 3-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 352.583210][ T4811] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.591544][ T4811] usb 3-1: Product: syz [ 352.596203][ T4811] usb 3-1: Manufacturer: syz [ 352.604990][ T4811] usb 3-1: SerialNumber: syz [ 352.715240][ T6111] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 353.091125][ T4811] usb 3-1: Found UVC 0.00 device syz (18ec:3288) [ 353.099069][ T4811] usb 3-1: No valid video chain found. [ 353.245721][ T5181] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 353.333248][ T4811] usb 3-1: USB disconnect, device number 4 [ 354.246137][ T6121] loop3: detected capacity change from 0 to 32768 [ 354.587554][ T6121] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 354.687015][ T5180] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.220562][ T6128] loop4: detected capacity change from 0 to 2048 [ 355.401121][ T6128] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 355.580768][ T6128] UDF-fs: error (device loop4): udf_rename: failed to find renamed entry again in directory (ino 1367) [ 355.609927][ T5198] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.244730][ T6149] loop2: detected capacity change from 0 to 1764 [ 357.256071][ T6149] iso9660: Unknown parameter 'uid<00000000004294967295' [ 357.596622][ T5185] ocfs2: Unmounting device (7,3) on (node local) [ 357.994535][ T6155] loop1: detected capacity change from 0 to 128 [ 358.062786][ T6155] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 358.129200][ T6155] ext4 filesystem being mounted at /34/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 359.603064][ T6170] loop0: detected capacity change from 0 to 4096 [ 359.635901][ T6170] EXT4-fs: Ignoring removed nomblk_io_submit option [ 359.755066][ T6170] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 359.842104][ T6176] loop3: detected capacity change from 0 to 2048 [ 360.129716][ T6176] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 360.334137][ T6176] UDF-fs: error (device loop3): udf_rename: failed to find renamed entry again in directory (ino 1367) [ 360.717296][ T6175] dccp_close: ABORT with 52 bytes unread [ 361.157693][ T5181] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 362.207322][ T6182] loop4: detected capacity change from 0 to 32768 [ 362.319685][ T6182] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 363.412000][ T5198] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.189840][ T6200] netlink: 8 bytes leftover after parsing attributes in process `syz.3.212'. [ 364.702001][ T6196] loop1: detected capacity change from 0 to 32768 [ 365.213831][ T5182] Bluetooth: hci1: command 0x0406 tx timeout [ 365.220196][ T5182] Bluetooth: hci0: command 0x0406 tx timeout [ 365.226693][ T5182] Bluetooth: hci3: command 0x0406 tx timeout [ 365.233193][ T5182] Bluetooth: hci4: command 0x0406 tx timeout [ 365.836316][ T5526] ocfs2: Unmounting device (7,4) on (node local) [ 367.235706][ T6215] loop0: detected capacity change from 0 to 128 [ 367.508154][ T6215] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 367.644757][ T6215] ext4 filesystem being mounted at /47/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 367.763783][ T6209] loop2: detected capacity change from 0 to 32768 [ 367.906824][ T6216] loop1: detected capacity change from 0 to 2048 [ 368.017574][ T6222] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 368.219669][ T6209] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 368.342310][ T6216] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 368.532208][ T6228] trusted_key: encrypted_key: insufficient parameters specified [ 368.641060][ T6216] UDF-fs: error (device loop1): udf_rename: failed to find renamed entry again in directory (ino 1367) [ 369.122861][ T6213] dccp_close: ABORT with 52 bytes unread [ 369.135615][ T1850] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 369.355674][ T1850] usb 5-1: Using ep0 maxpacket: 8 [ 369.412226][ T1850] usb 5-1: config 8 has an invalid interface number: 188 but max is 0 [ 369.421109][ T1850] usb 5-1: config 8 has no interface number 0 [ 369.427877][ T1850] usb 5-1: config 8 interface 188 altsetting 0 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 369.440059][ T1850] usb 5-1: config 8 interface 188 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 369.714718][ T5180] ocfs2: Unmounting device (7,2) on (node local) [ 369.749489][ T1850] usb 5-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=8f.67 [ 369.759307][ T1850] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.767824][ T1850] usb 5-1: Product: syz [ 369.772271][ T1850] usb 5-1: Manufacturer: syz [ 369.777318][ T1850] usb 5-1: SerialNumber: syz [ 370.566734][ T5198] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 371.186872][ T6232] loop4: detected capacity change from 0 to 2048 [ 371.365222][ T5240] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 371.590748][ T5240] usb 1-1: Using ep0 maxpacket: 32 [ 371.610396][ T5240] usb 1-1: config 0 has an invalid interface number: 61 but max is 0 [ 371.619302][ T5240] usb 1-1: config 0 has no interface number 0 [ 371.626164][ T5240] usb 1-1: config 0 interface 61 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 371.724279][ T5240] usb 1-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=3b.80 [ 371.734182][ T5240] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.742978][ T5240] usb 1-1: Product: syz [ 371.747574][ T5240] usb 1-1: Manufacturer: syz [ 371.760235][ T5240] usb 1-1: SerialNumber: syz [ 371.871967][ T5240] usb 1-1: config 0 descriptor?? [ 372.168957][ T6241] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 372.816180][ T6249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.676025][ T6249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.546135][ T6247] loop2: detected capacity change from 0 to 32768 [ 374.850767][ T6247] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 376.235079][ T1850] comedi comedi0: driver 'vmk80xx' has successfully auto-configured 'K8055 (VM110)'. [ 376.291069][ T1850] usb 5-1: USB disconnect, device number 2 [ 377.922010][ T5240] usb 1-1: Found UVC 251.00 device syz (045e:0721) [ 377.929185][ T5240] usb 1-1: No valid video chain found. [ 378.897649][ T5240] usb 1-1: USB disconnect, device number 2 [ 379.066159][ T5184] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 379.158459][ T5184] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 379.159388][ T6264] loop3: detected capacity change from 0 to 32768 [ 379.177449][ T5184] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 379.205281][ T5184] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 379.217821][ T5184] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 379.234064][ T5184] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 379.354660][ T6270] loop1: detected capacity change from 0 to 128 [ 379.464121][ T6264] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 379.508292][ T6264] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 380.036980][ T6270] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 380.195962][ T5180] ocfs2: Unmounting device (7,2) on (node local) [ 380.218420][ T6270] ext4 filesystem being mounted at /41/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 381.271883][ T6271] chnl_net:caif_netlink_parms(): no params data found [ 381.373349][ T5184] Bluetooth: hci5: command tx timeout [ 382.436728][ T6294] trusted_key: encrypted_key: insufficient parameters specified [ 382.590928][ T5181] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 382.845109][ T5263] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 383.073153][ T34] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.346233][ T34] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.362822][ T5263] usb 3-1: Using ep0 maxpacket: 8 [ 383.572953][ T5184] Bluetooth: hci5: command tx timeout [ 383.842181][ T6303] fuse: Bad value for 'group_id' [ 383.847845][ T6303] fuse: Bad value for 'group_id' [ 383.963048][ T5263] usb 3-1: config 8 has an invalid interface number: 188 but max is 0 [ 383.971591][ T5263] usb 3-1: config 8 has no interface number 0 [ 383.978157][ T5263] usb 3-1: config 8 interface 188 altsetting 0 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 383.990476][ T5263] usb 3-1: config 8 interface 188 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 384.024568][ T6307] binder_alloc: binder_alloc_mmap_handler: 6302 20ffd000-21000000 already mapped failed -16 [ 384.103849][ T34] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.203421][ T6271] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.211321][ T6271] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.219532][ T6271] bridge_slave_0: entered allmulticast mode [ 384.229395][ T6271] bridge_slave_0: entered promiscuous mode [ 384.251146][ T6271] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.259207][ T6271] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.267424][ T6271] bridge_slave_1: entered allmulticast mode [ 384.277205][ T6271] bridge_slave_1: entered promiscuous mode [ 384.343779][ T5263] usb 3-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=8f.67 [ 384.357034][ T5263] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.366817][ T5263] usb 3-1: Product: syz [ 384.371287][ T5263] usb 3-1: Manufacturer: syz [ 384.376473][ T5263] usb 3-1: SerialNumber: syz [ 384.377706][ T34] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.628443][ T5185] ocfs2: Unmounting device (7,3) on (node local) [ 384.809392][ T6271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 384.910972][ T6271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 385.453966][ T34] bridge_slave_1: left allmulticast mode [ 385.460049][ T34] bridge_slave_1: left promiscuous mode [ 385.469704][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.613120][ T5184] Bluetooth: hci5: command tx timeout [ 385.621898][ T34] bridge_slave_0: left allmulticast mode [ 385.628178][ T34] bridge_slave_0: left promiscuous mode [ 385.635120][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.808502][ T6295] loop2: detected capacity change from 0 to 2048 [ 386.606171][ T5263] comedi comedi0: driver 'vmk80xx' has successfully auto-configured 'K8055 (VM110)'. [ 386.688491][ T6319] loop1: detected capacity change from 0 to 128 [ 386.698644][ T5263] usb 3-1: USB disconnect, device number 5 [ 386.821057][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 386.867424][ T6319] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 386.886108][ T6319] ext4 filesystem being mounted at /46/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 386.965131][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 387.037510][ T34] bond0 (unregistering): Released all slaves [ 387.693391][ T5184] Bluetooth: hci5: command tx timeout [ 387.720463][ T6327] loop0: detected capacity change from 0 to 1024 [ 387.795122][ T6271] team0: Port device team_slave_0 added [ 387.813354][ T6271] team0: Port device team_slave_1 added [ 388.401079][ T6327] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 388.880282][ T6271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 388.888756][ T6271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 388.916209][ T6271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 389.318493][ T6271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 389.326006][ T6271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 389.352811][ T6271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 389.434644][ T5198] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.643074][ T34] hsr_slave_0: left promiscuous mode [ 389.680622][ T34] hsr_slave_1: left promiscuous mode [ 389.744124][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 389.752041][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 389.845833][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 389.854182][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 390.103563][ T34] veth1_macvtap: left promiscuous mode [ 390.109521][ T34] veth0_macvtap: left promiscuous mode [ 390.115663][ T34] veth1_vlan: left promiscuous mode [ 390.121300][ T34] veth0_vlan: left promiscuous mode [ 390.194665][ T5181] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 391.438784][ T6331] loop3: detected capacity change from 0 to 32768 [ 391.710993][ T6331] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 392.833836][ T6348] futex_wake_op: syz.2.257 tries to shift op by 32; fix this program [ 393.035830][ T34] team0 (unregistering): Port device team_slave_1 removed [ 393.186899][ T6350] loop2: detected capacity change from 0 to 512 [ 393.295731][ T34] team0 (unregistering): Port device team_slave_0 removed [ 393.984114][ T6350] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 394.040187][ T6344] loop1: detected capacity change from 0 to 32768 [ 394.043706][ T6350] EXT4-fs (loop2): orphan cleanup on readonly fs [ 394.234617][ T6350] Quota error (device loop2): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 394.246921][ T6350] EXT4-fs warning (device loop2): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 394.268712][ T5185] ocfs2: Unmounting device (7,3) on (node local) [ 394.329169][ T6350] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 394.376460][ T6344] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 394.424435][ T6271] hsr_slave_0: entered promiscuous mode [ 394.436585][ T6271] hsr_slave_1: entered promiscuous mode [ 394.451990][ T6271] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 394.460061][ T6271] Cannot create hsr debugfs directory [ 394.476019][ T6350] EXT4-fs error (device loop2): ext4_orphan_get:1388: inode #16: comm syz.2.257: casefold flag without casefold feature [ 394.637872][ T6350] EXT4-fs error (device loop2): ext4_orphan_get:1393: comm syz.2.257: couldn't read orphan inode 16 (err -117) [ 394.822685][ T6350] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 394.975867][ T6350] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.148240][ T6364] loop2: detected capacity change from 0 to 128 [ 397.150462][ T6372] trusted_key: encrypted_key: insufficient parameters specified [ 397.671991][ T5181] ocfs2: Unmounting device (7,1) on (node local) [ 397.867715][ T1850] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 398.212821][ T1850] usb 4-1: Using ep0 maxpacket: 8 [ 398.571356][ T1850] usb 4-1: config 8 has an invalid interface number: 188 but max is 0 [ 398.583636][ T1850] usb 4-1: config 8 has no interface number 0 [ 398.590093][ T1850] usb 4-1: config 8 interface 188 altsetting 0 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 398.602414][ T1850] usb 4-1: config 8 interface 188 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 398.766255][ T6388] loop1: detected capacity change from 0 to 128 [ 398.794603][ T6271] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 398.896149][ T6271] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 398.923199][ T1850] usb 4-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=8f.67 [ 398.933038][ T1850] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.941462][ T1850] usb 4-1: Product: syz [ 398.946124][ T1850] usb 4-1: Manufacturer: syz [ 398.951007][ T1850] usb 4-1: SerialNumber: syz [ 398.971411][ T6388] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 399.009252][ T6388] ext4 filesystem being mounted at /48/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 399.035027][ T6271] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 399.225241][ T6271] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 401.763286][ T6395] loop2: detected capacity change from 0 to 32768 [ 401.968919][ T6395] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 402.069880][ T1850] comedi comedi0: driver 'vmk80xx' has successfully auto-configured 'K8055 (VM110)'. [ 402.295547][ T1850] usb 4-1: USB disconnect, device number 3 [ 402.448686][ T5181] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 402.789600][ T6271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 403.230548][ T6271] 8021q: adding VLAN 0 to HW filter on device team0 [ 403.520556][ T6251] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.528607][ T6251] bridge0: port 1(bridge_slave_0) entered forwarding state [ 403.886198][ T6251] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.894196][ T6251] bridge0: port 2(bridge_slave_1) entered forwarding state [ 404.355279][ T6412] nbd3: detected capacity change from 0 to 22 [ 404.363680][ T6412] block nbd3: shutting down sockets [ 404.761936][ T6271] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 404.846155][ T43] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 404.855788][ T43] Buffer I/O error on dev nbd3, logical block 0, async page read [ 404.865632][ T5691] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 404.875384][ T5691] Buffer I/O error on dev nbd3, logical block 0, async page read [ 404.886952][ T5691] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 404.899738][ T5691] Buffer I/O error on dev nbd3, logical block 0, async page read [ 404.908075][ T5691] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 404.917721][ T5691] Buffer I/O error on dev nbd3, logical block 0, async page read [ 404.926077][ T5691] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 404.939103][ T5691] Buffer I/O error on dev nbd3, logical block 0, async page read [ 404.948216][ T5691] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 404.957792][ T5691] Buffer I/O error on dev nbd3, logical block 0, async page read [ 404.966191][ T5691] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 404.975752][ T5691] Buffer I/O error on dev nbd3, logical block 0, async page read [ 404.984091][ T5691] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 404.996633][ T5691] Buffer I/O error on dev nbd3, logical block 0, async page read [ 405.005507][ T5691] ldm_validate_partition_table(): Disk read failed. [ 405.013102][ T5691] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 405.022713][ T5691] Buffer I/O error on dev nbd3, logical block 0, async page read [ 405.034864][ T5691] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 405.046290][ T5691] Buffer I/O error on dev nbd3, logical block 0, async page read [ 405.056841][ T5691] Dev nbd3: unable to read RDB block 0 [ 405.063362][ T5691] nbd3: unable to read partition table [ 405.099531][ T5691] nbd3: partition table beyond EOD, truncated [ 405.276981][ T6407] loop0: detected capacity change from 0 to 32768 [ 405.484054][ T6414] netlink: 12 bytes leftover after parsing attributes in process `syz.3.271'. [ 405.556864][ T6407] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 405.570173][ T5691] ldm_validate_partition_table(): Disk read failed. [ 405.578126][ T5691] Dev nbd3: unable to read RDB block 0 [ 405.584893][ T5691] nbd3: unable to read partition table [ 405.714692][ T5691] nbd3: partition table beyond EOD, truncated [ 405.763751][ T6407] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 405.769807][ T6424] loop1: detected capacity change from 0 to 256 [ 405.996032][ T6424] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 407.206333][ T6271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 407.305539][ T5180] ocfs2: Unmounting device (7,2) on (node local) [ 409.266260][ T5198] ocfs2: Unmounting device (7,0) on (node local) [ 409.355991][ T6451] trusted_key: encrypted_key: insufficient parameters specified [ 409.552663][ T6452] loop3: detected capacity change from 0 to 128 [ 409.733167][ T6452] hpfs: bad mount options. [ 409.857462][ T6456] loop2: detected capacity change from 0 to 128 [ 410.132714][ T4811] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 410.802132][ T6271] veth0_vlan: entered promiscuous mode [ 410.863647][ T4811] usb 2-1: Using ep0 maxpacket: 8 [ 410.962991][ T4811] usb 2-1: config 8 has an invalid interface number: 188 but max is 0 [ 410.975391][ T4811] usb 2-1: config 8 has no interface number 0 [ 410.983382][ T4811] usb 2-1: config 8 interface 188 altsetting 0 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 410.995616][ T4811] usb 2-1: config 8 interface 188 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 411.183020][ T6271] veth1_vlan: entered promiscuous mode [ 411.290602][ T6226] coredump: 142(syz.3.221): written to core: VMAs: 36, size 82870272; core: 62088246 bytes, pos 82878464 [ 411.405432][ T6271] veth0_macvtap: entered promiscuous mode [ 411.444603][ T6271] veth1_macvtap: entered promiscuous mode [ 411.563833][ T6271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.574803][ T6271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.589414][ T6271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.601637][ T6271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.611870][ T6271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.623086][ T6271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.633377][ T6271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.644256][ T6271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.663041][ T6271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 411.783494][ T6271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 411.799067][ T6271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.810529][ T6271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 411.821441][ T6271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.831829][ T6271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 411.842731][ T6271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.852995][ T6271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 411.863901][ T6271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.879533][ T6271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 411.907637][ T6271] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.917307][ T6271] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.926571][ T6271] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.935962][ T6271] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.005215][ T4811] usb 2-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=8f.67 [ 412.014780][ T4811] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.023274][ T4811] usb 2-1: Product: syz [ 412.027707][ T4811] usb 2-1: Manufacturer: syz [ 412.033535][ T4811] usb 2-1: SerialNumber: syz [ 412.983356][ T6464] loop2: detected capacity change from 0 to 32768 [ 413.521776][ T6464] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 413.573971][ T1241] ieee802154 phy0 wpan0: encryption failed: -22 [ 413.580993][ T1241] ieee802154 phy1 wpan1: encryption failed: -22 [ 414.119637][ T4811] usb 2-1: can't set config #8, error -71 [ 414.133648][ T4811] usb 2-1: USB disconnect, device number 8 [ 414.731170][ T6474] loop0: detected capacity change from 0 to 512 [ 414.940373][ T6474] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 414.954487][ T6474] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 415.105205][ T4811] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 415.302119][ T4811] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 415.310369][ T4811] usb 2-1: can't read configurations, error -61 [ 415.556068][ T4811] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 415.801671][ T4811] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 415.809886][ T4811] usb 2-1: can't read configurations, error -61 [ 415.851172][ T4811] usb usb2-port1: attempt power cycle [ 416.051545][ T5240] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 416.273580][ T5240] usb 1-1: Using ep0 maxpacket: 8 [ 416.309104][ T4811] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 416.360673][ T5240] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 416.370587][ T5240] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.438070][ T5240] usb 1-1: config 0 descriptor?? [ 416.814112][ T5180] ocfs2: Unmounting device (7,2) on (node local) [ 417.458618][ T4811] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 417.466979][ T4811] usb 2-1: can't read configurations, error -61 [ 417.613080][ T4811] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 418.487739][ T4811] usb 2-1: device descriptor read/8, error -71 [ 418.710428][ T6491] loop3: detected capacity change from 0 to 32768 [ 418.732003][ T4811] usb usb2-port1: unable to enumerate USB device [ 419.279345][ T6491] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 419.494018][ T6499] loop2: detected capacity change from 0 to 256 [ 419.504584][ T6499] exfat: Deprecated parameter 'namecase' [ 419.510677][ T6499] exfat: Deprecated parameter 'namecase' [ 419.518488][ T5240] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 419.529065][ T5240] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 419.541099][ T5240] asix 1-1:0.0: probe with driver asix failed with error -71 [ 419.597727][ T5240] usb 1-1: USB disconnect, device number 3 [ 419.698361][ T6499] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1fdf94bc, utbl_chksum : 0xe619d30d) [ 420.123002][ T5198] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.171285][ T6504] coredump: 211(syz.2.289): failed when seeking, error -22 [ 420.179279][ T6504] coredump: 211(syz.2.289): Error writing out the process memory [ 420.191596][ T6504] coredump: 211(syz.2.289): failed when seeking, error -22 [ 420.201046][ T6504] coredump: 211(syz.2.289): written to core: VMAs: 6, size 13258752; core: 3030 bytes, pos 3052 [ 420.610416][ T5185] ocfs2: Unmounting device (7,3) on (node local) [ 420.677157][ T6510] trusted_key: encrypted_key: insufficient parameters specified [ 420.960385][ T6515] FAULT_INJECTION: forcing a failure. [ 420.960385][ T6515] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 420.974415][ T6515] CPU: 1 UID: 0 PID: 6515 Comm: syz.0.292 Not tainted 6.11.0-syzkaller-08481-g88264981f208 #0 [ 420.985182][ T6515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 420.995608][ T6515] Call Trace: [ 420.999120][ T6515] [ 421.002335][ T6515] dump_stack_lvl+0x216/0x2d0 [ 421.007355][ T6515] dump_stack+0x1e/0x30 [ 421.011820][ T6515] should_fail_ex+0x748/0x7f0 [ 421.016947][ T6515] should_fail+0x2a/0x40 [ 421.021553][ T6515] should_fail_usercopy+0x2e/0x40 [ 421.027087][ T6515] _copy_to_user+0x33/0x110 [ 421.031978][ T6515] simple_read_from_buffer+0x199/0x340 [ 421.037895][ T6515] proc_fail_nth_read+0x1e5/0x2c0 [ 421.043302][ T6515] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 421.049580][ T6515] vfs_read+0x29b/0xf60 [ 421.054118][ T6515] ? kmsan_get_metadata+0x13e/0x1c0 [ 421.059837][ T6515] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 421.066580][ T6515] ksys_read+0x20f/0x4c0 [ 421.071339][ T6515] __x64_sys_read+0x93/0xe0 [ 421.076352][ T6515] x64_sys_call+0x3055/0x3ba0 [ 421.081516][ T6515] do_syscall_64+0xcd/0x1e0 [ 421.086367][ T6515] ? clear_bhb_loop+0x25/0x80 [ 421.091459][ T6515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.097907][ T6515] RIP: 0033:0x7fdca0f7c93c [ 421.102740][ T6515] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 421.122898][ T6515] RSP: 002b:00007fdca1de7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 421.131712][ T6515] RAX: ffffffffffffffda RBX: 00007fdca1135f80 RCX: 00007fdca0f7c93c [ 421.140293][ T6515] RDX: 000000000000000f RSI: 00007fdca1de70a0 RDI: 0000000000000004 [ 421.148657][ T6515] RBP: 00007fdca1de7090 R08: 0000000000000000 R09: 0000000000000000 [ 421.157217][ T6515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 421.165679][ T6515] R13: 0000000000000000 R14: 00007fdca1135f80 R15: 00007ffd9889a088 [ 421.174078][ T6515] [ 422.023516][ T5235] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 422.085617][ T6521] netlink: 'syz.0.296': attribute type 21 has an invalid length. [ 422.093844][ T6521] netlink: 168 bytes leftover after parsing attributes in process `syz.0.296'. [ 422.185317][ T5235] usb 3-1: Using ep0 maxpacket: 8 [ 422.223170][ T5235] usb 3-1: config 8 has an invalid interface number: 188 but max is 0 [ 422.231726][ T5235] usb 3-1: config 8 has no interface number 0 [ 422.240955][ T5235] usb 3-1: config 8 interface 188 altsetting 0 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 422.254236][ T5235] usb 3-1: config 8 interface 188 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 422.362431][ T5235] usb 3-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=8f.67 [ 422.372337][ T5235] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.380952][ T5235] usb 3-1: Product: syz [ 422.386827][ T5235] usb 3-1: Manufacturer: syz [ 422.391801][ T5235] usb 3-1: SerialNumber: syz [ 423.065522][ T6532] loop1: detected capacity change from 0 to 128 [ 423.356307][ T3472] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.369052][ T3472] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.453401][ T6534] 9pnet_fd: Insufficient options for proto=fd [ 423.589557][ T6511] loop2: detected capacity change from 0 to 2048 [ 423.890723][ T3472] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.899884][ T3472] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.003395][ T4811] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 424.259821][ T5235] comedi comedi0: driver 'vmk80xx' has successfully auto-configured 'K8055 (VM110)'. [ 424.273201][ T4811] usb 4-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 424.287064][ T4811] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.296942][ T4811] usb 4-1: Product: syz [ 424.301443][ T4811] usb 4-1: Manufacturer: syz [ 424.306589][ T4811] usb 4-1: SerialNumber: syz [ 424.358915][ T4811] usb 4-1: config 0 descriptor?? [ 424.399479][ T5235] usb 3-1: USB disconnect, device number 6 [ 424.479958][ T4811] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 425.430684][ T6547] sctp: [Deprecated]: syz.3.300 (pid 6547) Use of int in max_burst socket option deprecated. [ 425.430684][ T6547] Use struct sctp_assoc_value instead [ 426.062306][ T6546] netlink: 8 bytes leftover after parsing attributes in process `syz.0.303'. [ 426.073588][ T6546] FAULT_INJECTION: forcing a failure. [ 426.073588][ T6546] name failslab, interval 1, probability 0, space 0, times 0 [ 426.086918][ T6546] CPU: 0 UID: 0 PID: 6546 Comm: syz.0.303 Not tainted 6.11.0-syzkaller-08481-g88264981f208 #0 [ 426.097520][ T6546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 426.107864][ T6546] Call Trace: [ 426.111372][ T6546] [ 426.114526][ T6546] dump_stack_lvl+0x216/0x2d0 [ 426.119548][ T6546] dump_stack+0x1e/0x30 [ 426.124006][ T6546] should_fail_ex+0x748/0x7f0 [ 426.129052][ T6546] should_failslab+0x17f/0x210 [ 426.134206][ T6546] __kmalloc_node_noprof+0x177/0xf50 [ 426.139869][ T6546] ? __kvmalloc_node_noprof+0xc0/0x2d0 [ 426.145726][ T6546] __kvmalloc_node_noprof+0xc0/0x2d0 [ 426.151397][ T6546] ? strlen+0x44/0x90 [ 426.155681][ T6546] alloc_netdev_mqs+0x12f/0x1bd0 [ 426.161094][ T6546] ? __pfx_vlan_setup+0x10/0x10 [ 426.166314][ T6546] rtnl_create_link+0x50f/0x12b0 [ 426.171637][ T6546] ? __pfx_vlan_setup+0x10/0x10 [ 426.176868][ T6546] rtnl_newlink+0x2b8a/0x4200 [ 426.181990][ T6546] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 426.188717][ T6546] ? kmsan_get_metadata+0x13e/0x1c0 [ 426.194340][ T6546] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 426.200544][ T6546] ? __pfx_rtnl_newlink+0x10/0x10 [ 426.206043][ T6546] ? __pfx_rtnl_newlink+0x10/0x10 [ 426.211526][ T6546] rtnetlink_rcv_msg+0x12fc/0x1410 [ 426.217040][ T6546] ? kmsan_get_metadata+0x13e/0x1c0 [ 426.222655][ T6546] netlink_rcv_skb+0x375/0x650 [ 426.227771][ T6546] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 426.233094][ T44] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 426.233553][ T6546] ? __pfx_rtnetlink_rcv+0x10/0x10 [ 426.246501][ T6546] rtnetlink_rcv+0x34/0x40 [ 426.251283][ T6546] netlink_unicast+0xf52/0x1260 [ 426.256494][ T6546] netlink_sendmsg+0x10da/0x11e0 [ 426.261744][ T6546] ? __pfx_netlink_sendmsg+0x10/0x10 [ 426.267345][ T6546] ? __pfx_netlink_sendmsg+0x10/0x10 [ 426.273216][ T6546] __sock_sendmsg+0x30f/0x380 [ 426.278205][ T6546] ____sys_sendmsg+0x877/0xb60 [ 426.283342][ T6546] ___sys_sendmsg+0x28d/0x3c0 [ 426.288401][ T6546] ? kmsan_get_metadata+0x13e/0x1c0 [ 426.293953][ T6546] ? __rcu_read_unlock+0x7b/0xe0 [ 426.299212][ T6546] ? __fget_files+0x4f5/0x5c0 [ 426.304220][ T6546] ? kmsan_get_metadata+0x13e/0x1c0 [ 426.309749][ T6546] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 426.315909][ T6546] __x64_sys_sendmsg+0x301/0x490 [ 426.321205][ T6546] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 426.327365][ T6546] x64_sys_call+0x2da0/0x3ba0 [ 426.332385][ T6546] do_syscall_64+0xcd/0x1e0 [ 426.337193][ T6546] ? clear_bhb_loop+0x25/0x80 [ 426.342196][ T6546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.348411][ T6546] RIP: 0033:0x7fdca0f7def9 [ 426.353084][ T6546] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 426.373128][ T6546] RSP: 002b:00007fdca1de7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 426.381893][ T6546] RAX: ffffffffffffffda RBX: 00007fdca1135f80 RCX: 00007fdca0f7def9 [ 426.390134][ T6546] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000011 [ 426.398365][ T6546] RBP: 00007fdca1de7090 R08: 0000000000000000 R09: 0000000000000000 [ 426.406586][ T6546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 426.414801][ T6546] R13: 0000000000000000 R14: 00007fdca1135f80 R15: 00007ffd9889a088 [ 426.423057][ T6546] [ 426.661669][ T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 426.673432][ T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 426.683777][ T44] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 426.697637][ T44] usb 3-1: New USB device found, idVendor=056a, idProduct=0317, bcdDevice= 0.00 [ 426.707725][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.984852][ T44] usb 3-1: config 0 descriptor?? [ 427.044044][ T4811] usb 4-1: USB disconnect, device number 4 [ 427.595522][ T6565] loop4: detected capacity change from 0 to 128 [ 427.778587][ T44] wacom 0003:056A:0317.0003: unknown main item tag 0x0 [ 427.796021][ T44] wacom 0003:056A:0317.0003: Unknown device_type for 'HID 056a:0317'. Assuming pen. [ 427.925775][ T44] wacom 0003:056A:0317.0003: hidraw0: USB HID v0.00 Device [HID 056a:0317] on usb-dummy_hcd.2-1/input0 [ 427.948364][ T44] input: Wacom Intuos Pro L Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0317.0003/input/input5 [ 428.108776][ T44] usb 3-1: USB disconnect, device number 7 [ 428.124690][ T6570] trusted_key: encrypted_key: insufficient parameters specified [ 428.144627][ T5184] Bluetooth: hci4: failed to read key size for handle 201 [ 428.152220][ T5184] Bluetooth: hci4: unexpected event for opcode 0x1408 [ 428.470539][ T6562] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 428.754476][ T5241] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 428.983738][ T5241] usb 2-1: Using ep0 maxpacket: 8 [ 429.057701][ T5241] usb 2-1: config 8 has an invalid interface number: 188 but max is 0 [ 429.066500][ T5241] usb 2-1: config 8 has no interface number 0 [ 429.073170][ T5241] usb 2-1: config 8 interface 188 altsetting 0 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 429.085528][ T5241] usb 2-1: config 8 interface 188 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 429.242062][ T5241] usb 2-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=8f.67 [ 429.251855][ T5241] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.260494][ T5241] usb 2-1: Product: syz [ 429.265047][ T5241] usb 2-1: Manufacturer: syz [ 429.270145][ T5241] usb 2-1: SerialNumber: syz [ 430.144613][ T6577] loop2: detected capacity change from 0 to 4096 [ 430.593367][ T6589] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 430.656647][ T6571] loop1: detected capacity change from 0 to 2048 [ 432.135033][ T6600] loop4: detected capacity change from 0 to 128 [ 432.178728][ T5184] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 432.188173][ T5184] Bluetooth: hci4: Injecting HCI hardware error event [ 432.198714][ T5193] Bluetooth: hci4: hardware error 0x00 [ 432.695039][ T5241] comedi comedi0: driver 'vmk80xx' has successfully auto-configured 'K8055 (VM110)'. [ 432.809917][ T5241] usb 2-1: USB disconnect, device number 13 [ 432.858354][ T6609] loop0: detected capacity change from 0 to 128 [ 433.036482][ T6611] mmap: syz.1.324 (6611) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 434.642773][ T5193] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 435.726281][ T6634] trusted_key: encrypted_key: insufficient parameters specified [ 435.979493][ T6618] loop4: detected capacity change from 0 to 32768 [ 436.044942][ T6618] JBD2: Ignoring recovery information on journal [ 436.179090][ T6618] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 436.325479][ T5235] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 436.453650][ T29] audit: type=1804 audit(1727032652.772:64): pid=6618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.326" name="/newroot/7/file1/bus" dev="loop4" ino=17058 res=1 errno=0 [ 436.502609][ T6618] ===================================================== [ 436.509871][ T6618] BUG: KMSAN: uninit-value in from_kuid+0x41e/0x990 [ 436.516984][ T6618] from_kuid+0x41e/0x990 [ 436.521481][ T6618] ocfs2_setattr+0x254/0x3140 [ 436.526784][ T6618] notify_change+0x1a8e/0x1b80 [ 436.531795][ T6618] do_truncate+0x22a/0x2b0 [ 436.536589][ T6618] path_openat+0x5c3c/0x6200 [ 436.541483][ T6618] do_filp_open+0x20e/0x590 [ 436.546635][ T6618] do_sys_openat2+0x1bf/0x2f0 [ 436.551596][ T6618] __x64_sys_openat+0x2a1/0x310 [ 436.557325][ T6618] x64_sys_call+0x120e/0x3ba0 [ 436.562281][ T6618] do_syscall_64+0xcd/0x1e0 [ 436.567143][ T6618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.582024][ T6618] [ 436.584721][ T6618] Local variable newattrs created at: [ 436.590323][ T6618] do_truncate+0x4c/0x2b0 [ 436.595038][ T6618] path_openat+0x5c3c/0x6200 [ 436.599872][ T6618] [ 436.602327][ T6618] CPU: 1 UID: 0 PID: 6618 Comm: syz.4.326 Not tainted 6.11.0-syzkaller-08481-g88264981f208 #0 [ 436.610730][ T5235] usb 2-1: Using ep0 maxpacket: 8 [ 436.614820][ T6618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 436.614896][ T6618] ===================================================== [ 436.637544][ T6618] Disabling lock debugging due to kernel taint [ 436.644136][ T6618] Kernel panic - not syncing: kmsan.panic set ... [ 436.650753][ T6618] CPU: 1 UID: 0 PID: 6618 Comm: syz.4.326 Tainted: G B 6.11.0-syzkaller-08481-g88264981f208 #0 [ 436.662720][ T6618] Tainted: [B]=BAD_PAGE [ 436.666998][ T6618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 436.677209][ T6618] Call Trace: [ 436.680612][ T6618] [ 436.683664][ T6618] dump_stack_lvl+0x216/0x2d0 [ 436.688629][ T6618] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 436.694692][ T6618] dump_stack+0x1e/0x30 [ 436.699021][ T6618] panic+0x4e2/0xcf0 [ 436.703168][ T6618] ? kmsan_get_metadata+0x91/0x1c0 [ 436.708540][ T6618] kmsan_report+0x2c7/0x2d0 [ 436.713272][ T6618] ? __pfx_ocfs2_inode_cache_io_unlock+0x10/0x10 [ 436.719882][ T6618] ? kmsan_get_metadata+0x13e/0x1c0 [ 436.725320][ T6618] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 436.731406][ T6618] ? __msan_warning+0x95/0x120 [ 436.736418][ T6618] ? from_kuid+0x41e/0x990 [ 436.741151][ T6618] ? ocfs2_setattr+0x254/0x3140 [ 436.746220][ T6618] ? notify_change+0x1a8e/0x1b80 [ 436.751367][ T6618] ? do_truncate+0x22a/0x2b0 [ 436.756244][ T6618] ? path_openat+0x5c3c/0x6200 [ 436.761233][ T6618] ? do_filp_open+0x20e/0x590 [ 436.766131][ T6618] ? do_sys_openat2+0x1bf/0x2f0 [ 436.771329][ T6618] ? __x64_sys_openat+0x2a1/0x310 [ 436.776615][ T6618] ? x64_sys_call+0x120e/0x3ba0 [ 436.781747][ T6618] ? do_syscall_64+0xcd/0x1e0 [ 436.786628][ T6618] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.792947][ T6618] ? kmsan_get_metadata+0x13e/0x1c0 [ 436.798397][ T6618] ? kmsan_get_metadata+0x13e/0x1c0 [ 436.803840][ T6618] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 436.810423][ T6618] ? kmsan_get_metadata+0x13e/0x1c0 [ 436.815879][ T6618] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 436.822541][ T6618] ? kmsan_get_metadata+0x13e/0x1c0 [ 436.827991][ T6618] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 436.834050][ T6618] ? kmsan_get_metadata+0x13e/0x1c0 [ 436.839663][ T6618] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 436.845835][ T6618] __msan_warning+0x95/0x120 [ 436.850746][ T6618] from_kuid+0x41e/0x990 [ 436.855226][ T6618] ocfs2_setattr+0x254/0x3140 [ 436.860349][ T6618] ? __pfx_ocfs2_setattr+0x10/0x10 [ 436.865687][ T6618] ? notify_change+0x1a6f/0x1b80 [ 436.870832][ T6618] ? __pfx_ocfs2_setattr+0x10/0x10 [ 436.876272][ T6618] notify_change+0x1a8e/0x1b80 [ 436.881245][ T6618] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 436.887927][ T6618] do_truncate+0x22a/0x2b0 [ 436.892585][ T6618] path_openat+0x5c3c/0x6200 [ 436.897386][ T6618] ? do_filp_open+0x4b/0x590 [ 436.902451][ T6618] ? kmsan_get_metadata+0x13e/0x1c0 [ 436.907927][ T6618] do_filp_open+0x20e/0x590 [ 436.912835][ T6618] do_sys_openat2+0x1bf/0x2f0 [ 436.917775][ T6618] __x64_sys_openat+0x2a1/0x310 [ 436.922892][ T6618] x64_sys_call+0x120e/0x3ba0 [ 436.927801][ T6618] do_syscall_64+0xcd/0x1e0 [ 436.932482][ T6618] ? clear_bhb_loop+0x25/0x80 [ 436.937384][ T6618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.943768][ T6618] RIP: 0033:0x7f553677def9 [ 436.948349][ T6618] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 436.968198][ T6618] RSP: 002b:00007f553755c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 436.976910][ T6618] RAX: ffffffffffffffda RBX: 00007f5536935f80 RCX: 00007f553677def9 [ 436.985062][ T6618] RDX: 0000000000007a05 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 436.993208][ T6618] RBP: 00007f55367f0b76 R08: 0000000000000000 R09: 0000000000000000 [ 437.001361][ T6618] R10: 0000000000001700 R11: 0000000000000246 R12: 0000000000000000 [ 437.009752][ T6618] R13: 0000000000000000 R14: 00007f5536935f80 R15: 00007fff3a5ea248 [ 437.017911][ T6618] [ 437.021432][ T6618] Kernel Offset: disabled [ 437.025842][ T6618] Rebooting in 86400 seconds..