last executing test programs: 6m32.725521083s ago: executing program 2 (id=324): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 6m32.683885367s ago: executing program 2 (id=325): epoll_create1(0xb415cda750b06bb) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/stat\x00', 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'batadv_slave_0\x00', 0x600}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000010000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newlink={0x2c, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_VFINFO_LIST={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}}, 0x4004014) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="6c00000010000100000000a99ae8810007"], 0x6c}}, 0x40810) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x14}}, 0x0) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) setsockopt$inet_mreqsrc(r6, 0x0, 0x25, &(0x7f0000000100)={@multicast2, @loopback, @empty}, 0xc) 6m31.649813041s ago: executing program 2 (id=328): syz_open_dev$I2C(0x0, 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/zoneinfo\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000780), &(0x7f00000007c0)='./bus\x00', 0x80, &(0x7f0000000b40)={{}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}, {@allow_other}], [{@appraise_type}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@seclabel}, {@euid_eq}, {@fowner_lt}, {@subj_type={'subj_type', 0x3d, '/proc/sys/net/ipv4/tcp_mtu_probing\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, '[:-++'}}]}}, 0x1, 0x0, &(0x7f0000000c80)="cdd84d4eb2903842c2908aa09dab22be8beef6554c3746e796e1670bd51f9ac0e3") fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000100), &(0x7f0000000180)={'U-', 0x7}, 0x16, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioperm(0x0, 0x3, 0x4) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000005c0)={{0x2, 0xee00, 0x0, 0x0, 0x0, 0x68, 0x800}, 0x0, 0x0, 0x6, 0x7f, 0x8, 0x9, 0x2, 0x7fff, 0x7fff, 0x3}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) sendfile(r5, r0, &(0x7f00000000c0)=0x58, 0x2) creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000002e40)='./bus\x00', &(0x7f0000002e80)='nilfs2\x00', 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000300)=ANY=[@ANYRES16=0x0, @ANYBLOB="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", @ANYRES8=r6, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0a000101", @ANYRES32, @ANYBLOB='\b\x00', @ANYRES32=0x0, @ANYBLOB="080003000200000030000180140002006e69637666300000000000000000000008000100", @ANYRES32, @ANYRES16, @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="d40102808a0005008d83706604ed39f566a4033abbcef090895abad497ebf00dc9ae85830285f9f4595cd3bef3b0a96f5ca900bc4e47d98fffc64f5a032d57dbae478b3dd5a6de717c07857ca676dae6df8851335d78dd33c4875ec1a251d681d15ecc9b3a37ad627a9b2150dfb2e1d7f245e3c33403ccc764312ed07b9a0163b89b83c30c890d52337b483221bf0000b6000500372e9f5d1054885751e95e42dafd256ed519f568d3eb01a9c1bc1b39013e906d2261e7799ff7314778c7e5aac11b18b3e3c6d0b8ddde63ec880e393576b0ef0bf2b28c4780f6254d1a5b4a878d0c3c367c6d63ed005249c5b3b6ed7a359a45c769906e9083fd10587cfc05d0174c0491e198cb097fd80a4771ee55a6a10ee9dd1b945fd00b766a9855570ff3ab0d9b154c0dd1c8645ae878f72d49e668cea8731e9cbf94b4cccc359c7c5e3ff81b225f26a300008b000400c8a021d232228e21b74bf7cba800e467d417dde21fbb8b4bc2413ba114f5e36e4c1df4fff5962ce9cde29add10defe5349e96eaff7107a78f32682f67c0316686ab56df19d7f667a917698a320c57808f639cd29d46d527700285232a2d80c4a2ee8917be0370224c5d21163bf8f0f8cd84b3bee8e8b969f977d47b8227480a895a47eb1e3973d0048000180080003000300000008000300010000001400020067656e657665300000000000", @ANYRES64=r6, @ANYBLOB="080001ab85d29508d35d8d4ac93ab1a8df9f22271de8e2cdeee1ad17049b1c9eceaf6d088c20a856742f31f58fc1e6e8f07e06610ee5369addeaab54329da3bef1978b059df2a260ff010000efb58f2c68aa7707250138a3c1374bce452b6ffdbb52e3edbb9708f600"/118, @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="1800018014000200626f6e645f736c6176655f310000000044000280400003803c00"], 0x538}, 0x1, 0x0, 0x0, 0x40}, 0x2400c080) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90124fc60100c084002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 6m30.812992226s ago: executing program 2 (id=332): mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x200001, 0x0, {0xa, 0x80}, [@RTA_DST={0x8, 0x1, @initdev={0xac, 0x1e, 0xfe, 0x0}}]}, 0x24}}, 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000200)='./bus/file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x1607010, 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29, r2}, './file0\x00'}) 6m30.627961852s ago: executing program 2 (id=335): syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x240) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000f00)=[{{&(0x7f0000000540)=@abs={0x1, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, &(0x7f0000000980)=[@rights={{0x10}}], 0x10, 0x4000800}}], 0x1, 0x0) 6m29.627710075s ago: executing program 2 (id=339): epoll_create1(0xb415cda750b06bb) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/stat\x00', 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'batadv_slave_0\x00', 0x600}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000010000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newlink={0x2c, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_VFINFO_LIST={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}}, 0x4004014) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="6c00000010000100000000a99ae8810007"], 0x6c}}, 0x40810) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x14}}, 0x0) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) setsockopt$inet_mreqsrc(r6, 0x0, 0x25, &(0x7f0000000100)={@multicast2, @loopback, @empty}, 0xc) 6m29.142701526s ago: executing program 32 (id=339): epoll_create1(0xb415cda750b06bb) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/stat\x00', 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'batadv_slave_0\x00', 0x600}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000010000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newlink={0x2c, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_VFINFO_LIST={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}}, 0x4004014) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="6c00000010000100000000a99ae8810007"], 0x6c}}, 0x40810) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x14}}, 0x0) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) setsockopt$inet_mreqsrc(r6, 0x0, 0x25, &(0x7f0000000100)={@multicast2, @loopback, @empty}, 0xc) 55.538883684s ago: executing program 4 (id=1427): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="90", 0x1}], 0x1}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmsg(r2, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000180)=""/74, 0x4a}], 0x3a}, 0x2043) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)={0x5c, 0x4, 0x8, 0x801, 0x0, 0x0, {0x1, 0x0, 0x5}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xd732}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}]}, 0x5c}}, 0x20000009) ioctl$TCSETSF(r0, 0x541d, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000180)='./bus\x00', 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x1, 0x5505, &(0x7f0000002480)="$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") open(&(0x7f00000000c0)='./file7\x00', 0x48cc03, 0x120) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000000040), 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10090) creat(&(0x7f00000000c0)='./bus\x00', 0x0) add_key$user(&(0x7f0000000000), &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000e40)="c9", 0x1, 0xfffffffffffffffe) 51.543554971s ago: executing program 4 (id=1441): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000440), 0x1, 0x4a8, &(0x7f0000000580)="$eJzs3U1rG9caAOBXUpzYjm++7g3cZHETbtqmH8SKZZxAyaZ0kUVJKQ10mzq2YoJly1hyGpssnO6yK6XQQlf9Af0Pge666LqFLrroKhCakBK3UFCZkeTYjuWK1pHA8zww0Zk5E73nWLyH0ZkZTQCZdTr5JxcxEhHfRcTh5urmHU43X54+vjO19vjOVC4ajau/5NL9km3tXdv/72BErEbEYES8fznieu75uLXlldnJSqW82Fov1ucWirXllXM35yZnyjPl+dKFidLYxYnx0u719fqlb7+59/E7jdVHb3+ycPndQ0mzRlp1G/uxm5pdH4ijG7bti4hLLyJYHxRa/Rnqd0P4W5LP798RcSbN/8NRSD9NIAsajUbjj8aBTtWrDWDPyqfHwLn8aEQ0y/n86GjzGP4/MZyvVGv1N25Ul+anm8fKR2Igf+NmpXy+9V3hSAzkkvWxtPxsvbRlfTwiPQb+rDCUro9OVSvTvR3qgC0Obsn/XwvN/Acywld+yC75D9kl/yG75D9kl/yH7JL/kF3yH7JL/kN2yX/ILvkP2SX/IZPeu3IlWRprrfvfp28tL81Wb52bLtdmR+eWpkanqosLozPV6kx6z87cX71fpVpdGCvF0u1ivVyrF2vLK9fmqkvz9Wvpff3XygM96RXQjaOn7v+Qi4jVN4fSJbG/VSdXYW9rNHLR73uQgf4o9HsAAvrG1B9kl+/4wDY/0bvJYKeKhd1vC9Ab+X43AOibsyec/4OsMv8P2WX+H7LLMT5g/h+yx/w/ZNdIh+d//WvDs7vOR8ShiPi+MHCg/awvYC/IP8i1jv/PHn5pZGvt/txv6SmC/RHx0ZdXP789Wa8vjiXbH61vr3/R2r6Lz+oGdl87T9t5DABk19PHd6baSy/jPnyreRFCEnettTRr9rXmJgfTc5TDT3KbrlXI7dK1C6t3I+K/2/U/13reefPMx/CTwnPxj7Vec823SNu7L31uem/in9gQ/38b4p/8x38VyIb7yfhzfrv8y6c5Hev5t3n8Gdmlayfa49/ac+Nffn38K3QY/051GeP4yNKPHePfjTi5bfx2vME01tb4SdvOdhl/7NMrk53qGl9FvBLbx29LSsX63EKxtrxyLv0duZnyfOnCRGns4sR4qZhOURfbE9XbuPfT7/d36v9wh/g79T/Z9lqX/f/g54EHp3eI/+qZ7T//YzvEH4qI17uM//KH5eOd6pL40x36n98hfrJtvMv4D/9/7+sudwUAeqC2vDI7WamUFxUUFBTWC/0emYAX7VnS97slAAAAAAAAAAAAQLd6cTlxv/sIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALAX/BkAAP//VsXUSQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x103042, 0x8) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000280)={0x0, 0x2824, 0x2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) socket$kcm(0xa, 0x3, 0x73) mount$fuse(0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[]) socket$nl_generic(0x10, 0x3, 0x10) gettid() getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) syz_emit_ethernet(0xda, &(0x7f00000001c0)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xcc, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x2b, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x26, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0xe, "9606053d0006ff00800000b6"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @loopback, @multicast2]}, @cipso={0x86, 0x4d, 0x0, [{0x0, 0x7, "4b6cefc500"}, {0x1, 0x12, "8c9300"/16}, {0x0, 0xa, "2189ea43a2149b84"}, {0x0, 0x12, "ffd11634eea26b0faffa0dea2e903528"}, {0x0, 0x9, "02a20948fd7406"}, {0x0, 0x9, "ccf0294e2a3bdb"}]}, @timestamp={0x44, 0x8, 0x0, 0x0, 0x0, [0x0]}, @lsrr={0x83, 0x7, 0x62, [@rand_addr=0x64010100]}]}}, "a815a23d"}}}}}, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r4 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r6, 0x89e3, &(0x7f00000003c0)={0x3, 0x3, 0x9, 0x9, 0x10000, 0x8100}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="c8000000", @ANYRES16=r7, @ANYBLOB="010000000000000000000b00000008000300", @ANYRES32=r8, @ANYBLOB="1c00508009000a00e59e75e84c000000090001"], 0xc8}}, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) 48.968110008s ago: executing program 4 (id=1452): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x48, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x48}}, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/handlers\x00', 0x0, 0x0) close(r2) statx(r2, 0x0, 0x1000, 0x6000, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_GET(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000000914020028bd7000fedbdf2508000100000000000800010000000000080001000200000008000100010000001a8014b82abb856044c50fb6fab013d71be9fd44e17c1a8e1e075bef31b7df39b92347e0e634b7c76fe1b4588521058b1741d369e489b39a6d9ae1c481613f1e680a6bf105985696229a62a3"], 0x30}, 0x1, 0x0, 0x0, 0x4001}, 0x800) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000002200010000000000000000000000000a2c000000060a0bfc0000000000000000020000000900010073797a300000000009"], 0x54}, 0x1, 0x0, 0x0, 0x40820}, 0x0) 48.327954469s ago: executing program 4 (id=1456): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000000)={[{@jqfmt_vfsv0}, {@errors_remount}]}, 0x1, 0x784, &(0x7f00000007c0)="$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") open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) lstat(&(0x7f0000000300)='./bus\x00', &(0x7f00000003c0)) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x3e, 0x0, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000000000000000062997d000000000001000000000000000000000000480000000000"], 0x22) getgid() r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f0000002140)={0x2020}, 0x2020) accept4(r4, &(0x7f0000000180)=@rc={0x1f, @none}, &(0x7f00000000c0)=0x80, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) poll(&(0x7f0000000240), 0x0, 0x4) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(0xffffffffffffffff, 0x110, 0x3) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) accept4$ax25(r5, 0x0, 0x0, 0x80800) socket$inet6_sctp(0xa, 0x5, 0x84) 46.312185222s ago: executing program 4 (id=1463): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000000)={0x1, 0x3, 0x0, 0x0, 0x8}) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f00000000c0)={0x0, 0xd, 0x9, 0x3, 0x9}) 45.308573884s ago: executing program 4 (id=1467): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f000001f980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800, &(0x7f000001fa00)=ANY=[@ANYBLOB='iocharset=macice,umask=00000000000000000000011,iocharset=cp866,errors=remount-ro,keep_last_dots,dmask=00000000000000000000007,sys_tz,errors=remount-ro,fmask=00000000000000000000001,errors=continue,\x00\x00\x00\x00\x00'], 0x5, 0x1510, &(0x7f00000037c0)="$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") mkdir(&(0x7f0000000200)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x0) (fail_nth: 2) 45.154787141s ago: executing program 33 (id=1467): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f000001f980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800, &(0x7f000001fa00)=ANY=[@ANYBLOB='iocharset=macice,umask=00000000000000000000011,iocharset=cp866,errors=remount-ro,keep_last_dots,dmask=00000000000000000000007,sys_tz,errors=remount-ro,fmask=00000000000000000000001,errors=continue,\x00\x00\x00\x00\x00'], 0x5, 0x1510, &(0x7f00000037c0)="$eJzs3Am4TlX7MPD7Xmvt45D0dJLhsNa6N08yLCdJMiTJkCRJkmRKSDrJKwmJQ6akQxKS4ZAMh5AMJ0465nkekyTpJEmmTMn6rlN83t7qe//v/+17/a//uX/Xta9n3c/a99prP/czrL0N33UZWrNxrWoNiQj+LfjrQxIAxALAQAC4DgACACgXVy4uqz+nxKR/7yDsr/VI6tWeAbuauP7ZG9c/e+P6Z29c/+yN65+9cf2zN65/9sb1Zyw72zy94PW8Zd+N7/9nZ/z7/79IZumxX60tfWPXfyGF65+9cf3/1wr+Kztx/bM3rn/2xvXP3rj+2UGOP+3h+mdvXH/GsrOrff+Zt6u7Xe33H2OMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4yx7OGsv0IBwOX21Z4XY4wxxhhjjDHG/jo+x9WeAWOMMcYYY4wxxv7/QxAgQUEAMZADYiEn5AIBANdCHrgOInA9xMENkBduhHyQHwpAQYiHQlAYNBiwQBBCESgKUbgJisHNUBxKQEkoBQ5KQwLcAmXgVigLt0E5uB3Kwx1QASpCJagMd0IVuAuqwt1QDe6B6lADakItuBdqw31QB+6HuvAA1IMHoT48BA3gYWgIj0AjeBQaw2PQBB6HptAMmkMLaPnfyn8JesDL0BN6QRL0hj7wCvSFftAfBsBAeBUGwWswGF6HZBgCQ+ENGAZvwnB4C0bASBgFb8NoeAfGwFgYB+MhBSbARHgXJsF7MBmmwFSYBqkwHWbA+zATZsFs+ADmwIcwF+bBfFgAafARLIRFkA4fw2L4BDJgCSyFZbAcVsBKWAWrYQ2shXWwHjbARtgEm2ELbIVtsB12wE7YBbvhU9gDn8Fe+Bz2wRf/Yv6Zf8jvioCAAgUqVBiDMRiLsZgLc2FuzI15MA9GMIJxGId5MS/mw3xYAAtgPMZjYSyMBg0SEhbBIhjFKBbDYlgci2NJLIkOHSZgApbBW7EslsVyWA7LY3msgBWxIlbGylgFq2BVrIrVsBpWx+pYE2vivXgv9sY6WAfrYl2sh/Uu357ChtgQG2EjbIyNsQk2wabYFJtjc2yJLbEVtsLW2BrbYltsh+2wPbbHREzEDtgBO2JH7ISdsDN2xi7YBbtiN+yGL+UAfBlfxl5YXfTGPtgH+2Jyjv44AAfgqzgIX8PX8HVMxiE4FN/AN/BNHI6ncQSOxFE4CquId3AMjkUS4zEFU3AiTsRJOAkn4xScgtMwFafjDJyBM3EWzsIPcA5+iB/iPJyHCzAN03AhLsJ0TMfFeAYzcAkuxWW4HFfgclyFq3EVrsV1uBY34AbchJtwC27BbbgNd+AO3IUKAD/Fz/AzTMZ9uA/34348gAfwIB7ETMzEQ3gID+NhPIJH8CgexWN4HE/gcTyFp/A0nsGzeBbP43m8gC/Ef9NoV4k1ySCyKKFEjIgRsSJW5BK5RG6RW+QReURERESciBN5RV6RT+QTBUQBES/iRWFRWBhhBIkwBgBEVERFMVFMFBfFRUlRUjjhRIJIEGVEGVFWlBXlxO2ivLhDVBAVRRtXWVQWVURbV1XcLaqJaqK6qCFqilqilqgtaos6oo6oK+qKeqKeqC8eEg1Eb+yPj4isyjQWQ7CJGIpNRTMhL32DtRLDsbVoI9qKp8RIHIHtRSuXKJ4VHcQY7Cj+Jsbi86KzGI9dxIuiq+gmuouXRA/R2vUUvcRk7C36iGnYV/QT/cUAMRNriA9wTs6a4nWRLIaIoeINsQDfFMPFW2KEGClGibfFaPGOGCPGinFivEgRE8RE8a6YJN4Tk8UUMVVME6liupgh3hczxSwxW3wg5ogPxVwxT8wXC0Sa+EgsFItEuvhYLBafiAyxRCwVy8RysUKsFKvEarFGrBXrxHqxQWwUm8RmsUVsFdvEdrFD7BS7xG7xqdgjPhN7xedin/hC7BdfigPiK3FQfC0yxTfikPhWHBbfiSPie3FU/CCOiePihDgpTokfxWlxRpwV58R58ZO4IH4WF4UXIFEKKaWSgYyROWSszClzyWtkbhlcenWvl3HyBplX3ijzyfyygCwo42UhWVhqaaSVJENZRBaVUXmTLCZvlsVlCVlSlpJOlpYJ8hZZRt4qy8rbZDl5uywv75AVZEVZSVaWd8oq8i4JkV+PUV3WkDVlLXmvrC3vk3Xk/bKufEDWkw/K+vIh2UA+LBvKR2Qj+ahsLB+TTeTjsqlsJpvLFrKlfEK2kk/K1rKNbCufku3k07K9fEYmymdlB+kvvUWel53lC7KLfFF2ld1kd/mzvCi97Cl7SYDeso98RfaV/WR/OUAOlK/KQfI1OVi+LpPlEDlUviGHyTflcPmWHCFHylHybTlaviPHyLFynBwvU+QEOVG+KyfJ9+RkOUVOldNkqpwu+18aabaU/zT/3T/IH/zL0TfJzXKL3Cq3ye1yh9wpd8ndcrfcI/fIvXKv3Cf3yf1yvzwgD8iD8qDMlJnykDwkD8vD8og8Io/Ko/KYPC7PyZPylPxRnpZn5Bl5Tp6X5+WFS68BKFRCSaVUoGJUDhWrcqpc6hqVW12r8qjrVERdr+LUDSqvulHlU/lVAVVQxatCqrDSyiirSIWqiCqqouomvPSGUSVVKeVUaZWgbvlX8lUxdbMqrkr8Jv/y/JL+ZH4tVUvVSrVSrVVr1Va1Ve1UO9VetVeJKlF1UB1UR9VRdVKdVGfVWXVRXVRX1VV1V91VD9VD9VQ9VZJKUn3UK6qv6qf6qwFqoHpVDVKD1GA1WCWrZDVUDVXD1DA1XA1XI9QINUqNUqPVaDVGjVHj1DiVolLURDVRTVKT1GQ1WU1VU1WqSlUz1Aw1U81Us9VsNUfNUXPVXDVfzVdpKk0tVAtVukpXi9VilaGWqCVqmVqmVqgVapVapdaoNWqdWqc2qA0qQ21Wm9VWtVVtV9vVTrVT7Va71R61R+1Ve9U+tU/tV/vVAXVAHVQHVabKVIfUIXVYHVZH1BF1VB1Vx9QxdUKdUKfUKXVanVZn1Vl1Xp1XF9QFdVFdzFr2BSIQgQpUEBPEBLFBbJAryBXkDnIHeYI8QSSIBHFBXJA3uDHIF+QPCgQFg/igUFA40IEJbCAuFT0a3BQUC24OigclgpJBqcAFpYOE4JagTHBrUDa4LSgX3B6UD+4IKgQVg0pB5eDOoEpwV1A1uDuoFtwTVA9qBDWDWsG9Qe3gvqBOcH9QN3ggqBc8GNQPHgoaBA8HDYNHgkbBo0Hj4LGgSfB40DRoFjQPWgQt/9LxvT+d/0nXU/fSSbq37qNf0X11P91fD9AD9at6kH5ND9av62Q9RA/Vb+hh+k09XL+lR+iRepR+W4/W7+gxeqwep8frFD1BT9Tv6kn6PT1ZT9FT9TSdqqfrGfp9PVPP0rP1B3qO/lDP1fP0fL1Ap+mP9EK9SKfrj/Vi/YnO0Ev0Ur1ML9cr9Eq9Sq/Wa/RavU6v1xv0Rr1Jb9Zb9Fa9TW/XO/ROvUvv1p/qPfozvVd/rvfpL/R+/aU+oL/SB/XXOlN/ow/pb/Vh/Z0+or/XR/UP+pg+rk/ok/qU/lGf1mf0WX1On9c/6Qv6Z31R+6zFfdbPu1FGmRgTY2JNrMllcpncJrfJY/KYiImYOBNn8pq8Jp/JZwqYAibexJvCprDJQoZMEVPERE3UFDPFTHFT3JQ0JY0zziSYBFPGlDFlTVlTzpQz5U15U8FUMJVMJXOnudPcZe4yd5u7zT3mHlPD1DC1TC1T29Q2dUwdU9fUNfVMPVPf1DcNTAPT0DQ0jUwj09g0Nk1ME9PUNDXNTXPT0rQ0rUwr09q0Nm1NW9POtDPtTXuTaBJNB9PBdDQdTSfTyXQ2nU0X08V0NV1Nd9Pd9DA9TE/T0ySZJNPH9DF9TV/T3/Q3A81AM8gMMoPNYJNsks1QM9QMM8PMcDPcjDAjzaishap5x4wxY804M96kmBQz0Uw0k8wkM9lMNlPNVJNqUs0MM8PMNDPNbDPbzDFzzFwz18w3802aSTMLzUKTbtLNYrPYZJgMs9QsNcvNcrPSrDSrzWqz1qw162G92Wg2ms1ms9lqtprtZrvZaXaa3Wa32WP2mL1mr9ln9pn9Zr85YA6Yg+agyTSZ5pA5ZA6bw+aIOWKOmqPmmDlmTpgT5pQ5ZU6b0+asOWvOm/yXfi+9ibU5bS57jc1tr7V57HX2H+MCtqCNt4VsYattPpv/N7Gx1ha3JWxJW8o6W9om2Ft+F1ewFW0lW9neaavYu2zV38W17X22jr3f1rUP2Fr23t/E9eyDtr59zDZABLDNbCPbwja2j9km9nHb1DazzW0L284+bdvbZ2yifdZ2sM/9Ll5oF9nVdo1da9fZPfYze9aes4ftd/a8/cn2tL3sQPuqHWRfs4Pt6zbZDvldPMq+bUfbd+wYO9aOs+N/F0+102yqnW5n2PftTDvrd3Ga/cjOsel2rp1n59sFv8RZc0q3H9vF9hObYZfYpXaZXW5X2JV21f+d6zK7wW60m+xu+6ndarfZ7XaH3Wl3/RJnncde+7ndZ7+wh+y39oD9yh60R2ym/eaXOOv8jtjv7VH7gz1mj9sT9qQ9ZX+0p+2ZX84/69xP2p/tRestEBKQJEUBxVAOiqWclIuuodx0LeWh6yhC11Mc3UB56UbKR/mpABWkeCpEhUmTIUtEIRWhohSlm+jyOr0klSJHpSmBbqEydCuVpduoHN1O5ekOqkAVqRJVpjupCt1FVeluqkb3UHWqQTWpFt1Ltek+qkP3U116gOrRg1SfHqIG9DA1pEeoET1KjekxakKPU1NqRs2pBbWkJ6gVPUmtqQ21paeoHT1N7ekZSqRnqQM9Rx3pb9SJnqfO9AJ1oRepK3Wj7vQS9aCXqSf1oiTqTX3oFepL/ag/DaCB9CoNotdoML1OyTSEhtIbNIzepOH0Fo2gkTSK3qbR9A6NobE0jsZTCk2gifQuTaL3aDJNoak0jVJpOs2g92kmzaLZ9AHNoQ9pLs2j+bSA0ugjWkiLKJ0+psX0CWXQElpKy2g5raCVtIpW0xpaS+toPW2gjbSJNtMW2krbaDvtoJ20i3bTp7SHPqO99Dntoy9oP31JB+grOkhfUyZ9Q4foWzpM39ER+t73oh/oGB2nE3SSTtGPdJrO0Fk6R+fpJ7pAP9NF8gQhhiKUoQqDMCbMEcaGOcNc4TVh7vDaME94XRgJrw/jwhvCvOGNYb4wf1ggLBjGh4XCwqEOTWhDCsOwSFg0jIY3hcXCm8PiYYmwZFgqdGHpMCG8JSwT3hqWDW8Ly4W3h+XDO8IKYcXwsQcqh3eGVcK7wqrh3WG18J6welgjrBnWCu8Na4f3hXXC+8O64QNh2fDBsH74UNggfDhsGD4SNgofDRuHj4VNwsfDpmGzsHnYImwZPhG2Cp8MW4dtwrbhU2G78OmwffhMmBg+G3YIn/ul/8FFf96fFPYO+4SvhK+E3t8v50cXRNOiH0UXRhdF06MfRxdHP4lmRJdEl0aXRZdHV0RXRldFV0fXRNdG10XXRzdEN0Y3Rb2vlQMcOuGkUy5wMS6Hi3U5XS53jcvtrnV53HUu4q53ce4Gl9fd6PK5/K6AK+jiXSFX2GlnnHXkQlfEFXVRd5Mr5m52xV0JV9KVcs6VdgmuhWvpWrpW7knX2rVxbd1T7in3tHvaPeOecc+6Du4519H9zXVyz7vO7gX3gnvRdXXdXHf3kuvhJuT59TOZ5Pq4Pq6v6+v6u/5uoBvoBrlBbrAb7JJdshvqhrphbpgb7oa7EW6EG+VGudFutBvjxrhxbpxLcSluopvoJrlJbrKb7Ka6qS7VpboZboab6Wa6KrN+PcpcN9fNd/NdmktzC13WmjHdLXaLXYbLcEvdUrfcLXcr3Uq32q12a91at96tdxvdRrfZbXZb3Va33W13O91Ot9vtdnv8db8O6va5/W6/O+AOuIPua5fpvnGH3LfusPvOHXHfu6PuB3fMHXcn3El3yv3oTrsz7qw75867n9wF97O76LxLiUyITIy8G5kUeS8yOTIlMjUyLZIamR6ZEXk/MjMyKzI78kFkTuTDyNzIvMj8yIJIWuSjyMLIokh65OPI4sgnkYzIksjSyLLI8siKiPeFtoa+iC/qo/4mX8zf7Iv7Er6kL+WdL+0T/C2+jL/Vl/W3+XL+dl/e3+Er+Iq+kn/cN/XNfHPfwrf0T/hW/knf2rfxbf1Tvp1/2rf3z/hE/6zv4J/zHf3ffCf/vO/sX/Bd/Iu+q+/mu/uXfA//su/pe/kk39v38a/4vr6f7+8H+IH+VT/Iv+YH+9d9sh/ih/o3/DD/ph/u3/Ij/Eg/KuZtP/ryJTKM9yl+gp/o3/WT/Ht+sp/ip/ppPtVP9zP8+36mn+Vn+w/8HP+hn+vn+fl+gU/zH/mFfpFP9x/7xf4Tn+GXXL6p7Ff6VX61X+PX+nV+vd/gN/pNfrPf4rf6bX673+F3+l1+t//U7/Gf+b3+c7/Pf+H3+y/9Af+VP+i/9pn+G3/If+sP++/8Ef+9P+p/8Mf8cX/Cn/Sn/I/+tD/jz/pz/rz/yV/wP/uL/G/WGGOMMcb+SyZcaYo/6u/9B8+Jv9u5DwBcu61g5t/3Z60o1+f7td1PxLeLAMCzvbo8cnmrXj0pKenSvhkSgqLzAC7/SVCWGLgSL4G28DQkQhso84fz7ye6nad/Mn70doBcf5cTC1fiK+N/+SfjP/HUqIXlw7Nx/4/x5wEUL3olJydciZdAW5X12AbK/sn4+Vv9k/nn/CoFoPXf5eSGK/GV+SfAk/AcJP5mT8YYY4wxxhhj7Ff9RKVOl68/L/+Nzz+6Po9XV3JywJX4n12fM8YYY4wxxhhj7Op7vlv3Z55ITGzT6V9vVP1vZXHjf2rDe4DLzygA+DcHBPiPn8WW/8ixki99dP6xa/k5H8D/jFL+FY2r/MXEGGOMMcYY+8tdWfT/9nl1tSbEGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4xlQ/+J/07sap8jY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxdrX9nwAAAP//geYOMQ==") mkdir(&(0x7f0000000200)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x0) (fail_nth: 2) 13.819854831s ago: executing program 0 (id=1610): epoll_create1(0xb415cda750b06bb) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/stat\x00', 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'batadv_slave_0\x00', 0x600}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) ptrace$ARCH_MAP_VDSO_32(0x1e, r1, 0x3, 0x2002) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newlink={0x2c, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_VFINFO_LIST={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}}, 0x4004014) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="6c00000010000100000000a99ae8810007"], 0x6c}}, 0x40810) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x14}}, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x25, &(0x7f0000000100)={@multicast2, @loopback, @empty}, 0xc) 12.053453699s ago: executing program 0 (id=1615): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xd, 0x3}, {}, {0xffff}}}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000640)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {}, {0x1c, 0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x854, 0x2, [@TCA_ROUTE4_POLICE={0x848, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x57, 0x4, 0xe488, 0x5, 0xe, 0x8, 0xedde, 0x7, 0xd9, 0x2, 0x2, 0x4, 0xebd4, 0x1, 0x0, 0x8, 0x4, 0x3, 0x800000, 0x4, 0x80000001, 0x20000, 0x5, 0x8, 0x0, 0x81, 0xfffffffb, 0x10, 0x1, 0xc, 0x1, 0x81, 0x7, 0x4, 0x7, 0x6, 0x2ce4, 0x6, 0x401, 0x6, 0x8, 0x6, 0x1, 0x5d7e922f, 0x1, 0x81, 0xa9, 0x10001, 0x8, 0x551, 0x7, 0x20, 0x4, 0x4, 0x4, 0x9, 0x9, 0xc94, 0x5, 0x5, 0x7, 0x1, 0x7fff, 0x4, 0x2, 0x5e474286, 0x4, 0x2, 0x4, 0xa, 0x6, 0x9, 0xff, 0x0, 0x2ef6, 0xed8a, 0x5, 0x0, 0xadc3, 0x8, 0x40, 0x1ff, 0x8000, 0x401, 0xe92, 0x0, 0xfffffffe, 0xf5, 0x800, 0xb, 0x10000, 0x6, 0x8001, 0x3, 0xb, 0x5, 0x8f5d, 0xfffffe01, 0x9b4, 0x80000001, 0x3ff, 0xc, 0x58c6, 0xffff1876, 0x4, 0xfffffff9, 0xff, 0x6, 0x1, 0x4, 0x80, 0x8, 0xc9, 0x1, 0x95ca, 0xffffff31, 0x7, 0x81, 0x7, 0x7, 0x4588, 0x2, 0x4, 0x4, 0x6, 0x7fffffff, 0x7a2e, 0x80000001, 0x7, 0x380, 0x8, 0x8, 0x8, 0x2, 0x7, 0x1, 0x8, 0x100, 0x0, 0x7, 0xfffffff7, 0x1, 0xf3c, 0x3, 0xd, 0x3fe9, 0xb6, 0x6, 0x2, 0x3, 0x0, 0x6, 0x7, 0x5, 0xafb9, 0x6, 0x0, 0x3, 0x6, 0xb3, 0x6, 0xfffff001, 0x5, 0x6, 0x2, 0x8, 0x0, 0x0, 0xfffffff9, 0x80000001, 0xc, 0x3, 0x2, 0x6f3, 0x10000, 0x7, 0x2, 0x8, 0x5, 0xb, 0x1, 0x5, 0x0, 0x4, 0xfffffff9, 0x16f, 0x101, 0x4, 0xffffff25, 0x6, 0x400, 0x7fff, 0xf, 0x3, 0x5, 0x4, 0x6, 0x0, 0xfffffb02, 0x7, 0xc, 0x2e8, 0x5, 0x5, 0x100, 0x7f, 0xfffffffa, 0x7, 0x3b, 0x100, 0x400, 0x0, 0xfffffff9, 0x1, 0xe63, 0x4, 0x1, 0xccfc, 0x8, 0x7, 0xc7, 0x1, 0x7ff, 0x10, 0x8, 0x4, 0x10, 0x80000000, 0xa9d4, 0x1, 0x3, 0xc, 0xf, 0x1, 0x0, 0xf, 0x80000001, 0x6, 0x7f, 0x4, 0xfffffffc, 0x8, 0x0, 0x2, 0x0, 0x5, 0x6, 0x4, 0x80, 0x7, 0x8, 0x8, 0x10000, 0x80000001, 0x7, 0x4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2f9, 0x1, 0x20005, 0x0, 0x3, {0x0, 0x0, 0x9, 0xffff, 0x318, 0x5654}, {0xf, 0x1, 0xde7f, 0x9, 0x9, 0x100}, 0x6, 0x8, 0x4}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x80, 0x4, 0x0, 0x200, 0x8, 0x9, 0x9, 0x5, 0x10001, 0x2, 0x6, 0x9, 0x8, 0x0, 0xa, 0xb, 0xb, 0x2, 0x8, 0xffffffff, 0x0, 0x4, 0x2, 0x8000, 0xc9, 0x5, 0x3, 0x3, 0x101, 0x2, 0xbb4, 0xff, 0x0, 0x6, 0x4, 0x9, 0x200, 0x4, 0x7, 0x1, 0xffffffff, 0xfffffffb, 0xa647, 0x63, 0x67, 0x80, 0x0, 0x4, 0x1, 0x0, 0x0, 0x2c4a, 0x1, 0x9, 0x80000000, 0x7, 0xbe7, 0xfffffffc, 0x2, 0xd, 0x9, 0x7fff, 0x3, 0x1ff, 0x0, 0x2, 0x2, 0x7585, 0x4, 0xc, 0x400, 0x51, 0xf0, 0x6, 0x8, 0x3, 0x4, 0xc, 0x18f3, 0x6, 0x7, 0xffff366f, 0x9, 0x0, 0x2216, 0x2, 0x3, 0x9, 0x1, 0x5d69fdd4, 0x5, 0x8, 0x10000, 0x6, 0x6, 0x2, 0x80, 0x9, 0xa0, 0x4, 0x8, 0x7, 0x2c, 0x10, 0x8, 0x9, 0x5, 0x0, 0x2, 0x2, 0x7f, 0xc6, 0x80, 0x6, 0x1, 0xfffffffe, 0xfe40, 0x8, 0x5, 0x0, 0x800, 0x10, 0x2, 0x7, 0x80, 0x5, 0x7, 0x4, 0x1000, 0x7, 0x1, 0x1, 0x750, 0x3, 0x6, 0x9, 0x2, 0x4, 0x8, 0x8, 0x4, 0x8, 0x2, 0x6, 0x9, 0x4, 0x101, 0x5, 0x7, 0x7f, 0x4, 0x7, 0x8, 0x1, 0x3, 0x0, 0xb, 0x2, 0xfffffff9, 0xffffffff, 0x101, 0x35, 0x3, 0x8001, 0x7f, 0x42a, 0x6, 0x233, 0x1, 0x0, 0x6, 0x3, 0x8, 0x6, 0x83, 0xf2d2, 0x8, 0x10, 0x8, 0x3, 0x6, 0x3, 0xbfe, 0x9, 0xe0, 0x0, 0x3, 0x8000, 0x1, 0x6, 0x0, 0x7f, 0x40, 0x101, 0x400, 0xb084, 0x7, 0x81, 0x400, 0x9, 0x9, 0x0, 0x28e3, 0x8000, 0xb9, 0x9a, 0x45, 0x9, 0x914b, 0xd, 0x1, 0x7fff, 0x81, 0x5, 0x8, 0x3, 0x8, 0x2, 0x2, 0xc, 0x129, 0x4, 0xa, 0x3, 0x6, 0x70, 0x6, 0x2, 0x9, 0x2, 0x9, 0x3, 0x7fff, 0x2, 0x3, 0xa, 0x0, 0x6ab9, 0xfffff817, 0x8, 0x6, 0x1, 0x10001, 0x2, 0xfff, 0x7ff, 0x0, 0xfa81, 0x3, 0x10000, 0x6, 0x8, 0xffffff46, 0xdfc7, 0x5, 0x2]}]}, @TCA_ROUTE4_TO={0x8, 0x2, 0x9c}]}}]}, 0x884}}, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000140), 0xa0000, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) chroot(0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000000)='asymmetric\x00', 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r6, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x4, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0x0) 11.686845871s ago: executing program 1 (id=1616): ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) semget(0x3, 0x3, 0x200) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000600)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='system.posix_acl_default\x00', 0x0, 0x1c, 0x0) creat(0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f00000000c0)=0x209b, 0x4) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xe, &(0x7f0000000440), 0x3, 0x440, &(0x7f00000006c0)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r4, &(0x7f00000008c0)="10", 0x1, 0x8000c61) r5 = open(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x127842, 0x0) write$UHID_INPUT(r5, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0xc0185879, &(0x7f0000000080)={@desc={0x1, 0x0, @desc4}}) syz_emit_ethernet(0x3e, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaeaaaaaaaffffffffd56a5dd1638b63a707000000000690780000000000f4ffff8508ffffffff0102"], 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c00000002030300000000000000000000000010080001000100d4bdf94a15d731affc0420244b57160e0000e67cec56a2102c791a8a0cf3f50b6aedacc41f08a739f8f2aca6d89aad01c857357602a986a750ce523ec47ce01526141a0a92b36dcc92a1392ea937919e7c9604114d8c9febd92a3b681e64575ee74b89872c0345d9b156cdd2578a7ccd08a68be09b905fa0d9fb7ea95f5473224bf3edb2af410fc57c4416a075f1fd6bd9322449a00c6cebb9b4fb30a50296a01949fe17c1a81d3a17df428aea599120c207c50e8c3e5c6d596e0a867f1611865c065ceb2c4aa6d3ae6794"], 0x1c}}, 0x0) 11.029050529s ago: executing program 0 (id=1619): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) unshare(0x68060200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x10, 0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x200002) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x3, 0x2) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "e6dd3c3d"}, 0x0, 0x1, {0x0}}) close(r1) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f00000005c0)=ANY=[@ANYBLOB="020086dd0300000000003000000060"], 0xfdef) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4) 9.696153942s ago: executing program 1 (id=1621): ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) semget(0x3, 0x3, 0x200) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000600)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='system.posix_acl_default\x00', 0x0, 0x1c, 0x0) creat(0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f00000000c0)=0x209b, 0x4) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xe, &(0x7f0000000440), 0x3, 0x440, &(0x7f00000006c0)="$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") openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r4 = open(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x127842, 0x0) write$UHID_INPUT(r4, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r5, 0xc0185879, &(0x7f0000000080)={@desc={0x1, 0x0, @desc4}}) syz_emit_ethernet(0x3e, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaeaaaaaaaffffffffd56a5dd1638b63a707000000000690780000000000f4ffff8508ffffffff0102"], 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c00000002030300000000000000000000000010080001000100d4bdf94a15d731affc0420244b57160e0000e67cec56a2102c791a8a0cf3f50b6aedacc41f08a739f8f2aca6d89aad01c857357602a986a750ce523ec47ce01526141a0a92b36dcc92a1392ea937919e7c9604114d8c9febd92a3b681e64575ee74b89872c0345d9b156cdd2578a7ccd08a68be09b905fa0d9fb7ea95f5473224bf3edb2af410fc57c4416a075f1fd6bd9322449a00c6cebb9b4fb30a50296a01949fe17c1a81d3a17df428aea599120c207c50e8c3e5c6d596e0a867f1611865c065ceb2c4aa6d3ae6794"], 0x1c}}, 0x0) 7.283493353s ago: executing program 6 (id=1627): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge_slave_1\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="4400000011002901800000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a800800038004000500080000003e"], 0x44}}, 0x0) (fail_nth: 7) 6.889208926s ago: executing program 1 (id=1629): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xd, 0x3}, {}, {0xffff}}}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000640)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {}, {0x1c, 0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x854, 0x2, [@TCA_ROUTE4_POLICE={0x848, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x57, 0x4, 0xe488, 0x5, 0xe, 0x8, 0xedde, 0x7, 0xd9, 0x2, 0x2, 0x4, 0xebd4, 0x1, 0x0, 0x8, 0x4, 0x3, 0x800000, 0x4, 0x80000001, 0x20000, 0x5, 0x8, 0x0, 0x81, 0xfffffffb, 0x10, 0x1, 0xc, 0x1, 0x81, 0x7, 0x4, 0x7, 0x6, 0x2ce4, 0x6, 0x401, 0x6, 0x8, 0x6, 0x1, 0x5d7e922f, 0x1, 0x81, 0xa9, 0x10001, 0x8, 0x551, 0x7, 0x20, 0x4, 0x4, 0x4, 0x9, 0x9, 0xc94, 0x5, 0x5, 0x7, 0x1, 0x7fff, 0x4, 0x2, 0x5e474286, 0x4, 0x2, 0x4, 0xa, 0x6, 0x9, 0xff, 0x0, 0x2ef6, 0xed8a, 0x5, 0x0, 0xadc3, 0x8, 0x40, 0x1ff, 0x8000, 0x401, 0xe92, 0x0, 0xfffffffe, 0xf5, 0x800, 0xb, 0x10000, 0x6, 0x8001, 0x3, 0xb, 0x5, 0x8f5d, 0xfffffe01, 0x9b4, 0x80000001, 0x3ff, 0xc, 0x58c6, 0xffff1876, 0x4, 0xfffffff9, 0xff, 0x6, 0x1, 0x4, 0x80, 0x8, 0xc9, 0x1, 0x95ca, 0xffffff31, 0x7, 0x81, 0x7, 0x7, 0x4588, 0x2, 0x4, 0x4, 0x6, 0x7fffffff, 0x7a2e, 0x80000001, 0x7, 0x380, 0x8, 0x8, 0x8, 0x2, 0x7, 0x1, 0x8, 0x100, 0x0, 0x7, 0xfffffff7, 0x1, 0xf3c, 0x3, 0xd, 0x3fe9, 0xb6, 0x6, 0x2, 0x3, 0x0, 0x6, 0x7, 0x5, 0xafb9, 0x6, 0x0, 0x3, 0x6, 0xb3, 0x6, 0xfffff001, 0x5, 0x6, 0x2, 0x8, 0x0, 0x0, 0xfffffff9, 0x80000001, 0xc, 0x3, 0x2, 0x6f3, 0x10000, 0x7, 0x2, 0x8, 0x5, 0xb, 0x1, 0x5, 0x0, 0x4, 0xfffffff9, 0x16f, 0x101, 0x4, 0xffffff25, 0x6, 0x400, 0x7fff, 0xf, 0x3, 0x5, 0x4, 0x6, 0x0, 0xfffffb02, 0x7, 0xc, 0x2e8, 0x5, 0x5, 0x100, 0x7f, 0xfffffffa, 0x7, 0x3b, 0x100, 0x400, 0x0, 0xfffffff9, 0x1, 0xe63, 0x4, 0x1, 0xccfc, 0x8, 0x7, 0xc7, 0x1, 0x7ff, 0x10, 0x8, 0x4, 0x10, 0x80000000, 0xa9d4, 0x1, 0x3, 0xc, 0xf, 0x1, 0x0, 0xf, 0x80000001, 0x6, 0x7f, 0x4, 0xfffffffc, 0x8, 0x0, 0x2, 0x0, 0x5, 0x6, 0x4, 0x80, 0x7, 0x8, 0x8, 0x10000, 0x80000001, 0x7, 0x4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2f9, 0x1, 0x20005, 0x0, 0x3, {0x0, 0x0, 0x9, 0xffff, 0x318, 0x5654}, {0xf, 0x1, 0xde7f, 0x9, 0x9, 0x100}, 0x6, 0x8, 0x4}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x80, 0x4, 0x0, 0x200, 0x8, 0x9, 0x9, 0x5, 0x10001, 0x2, 0x6, 0x9, 0x8, 0x0, 0xa, 0xb, 0xb, 0x2, 0x8, 0xffffffff, 0x0, 0x4, 0x2, 0x8000, 0xc9, 0x5, 0x3, 0x3, 0x101, 0x2, 0xbb4, 0xff, 0x0, 0x6, 0x4, 0x9, 0x200, 0x4, 0x7, 0x1, 0xffffffff, 0xfffffffb, 0xa647, 0x63, 0x67, 0x80, 0x0, 0x4, 0x1, 0x0, 0x0, 0x2c4a, 0x1, 0x9, 0x80000000, 0x7, 0xbe7, 0xfffffffc, 0x2, 0xd, 0x9, 0x7fff, 0x3, 0x1ff, 0x0, 0x2, 0x2, 0x7585, 0x4, 0xc, 0x400, 0x51, 0xf0, 0x6, 0x8, 0x3, 0x4, 0xc, 0x18f3, 0x6, 0x7, 0xffff366f, 0x9, 0x0, 0x2216, 0x2, 0x3, 0x9, 0x1, 0x5d69fdd4, 0x5, 0x8, 0x10000, 0x6, 0x6, 0x2, 0x80, 0x9, 0xa0, 0x4, 0x8, 0x7, 0x2c, 0x10, 0x8, 0x9, 0x5, 0x0, 0x2, 0x2, 0x7f, 0xc6, 0x80, 0x6, 0x1, 0xfffffffe, 0xfe40, 0x8, 0x5, 0x0, 0x800, 0x10, 0x2, 0x7, 0x80, 0x5, 0x7, 0x4, 0x1000, 0x7, 0x1, 0x1, 0x750, 0x3, 0x6, 0x9, 0x2, 0x4, 0x8, 0x8, 0x4, 0x8, 0x2, 0x6, 0x9, 0x4, 0x101, 0x5, 0x7, 0x7f, 0x4, 0x7, 0x8, 0x1, 0x3, 0x0, 0xb, 0x2, 0xfffffff9, 0xffffffff, 0x101, 0x35, 0x3, 0x8001, 0x7f, 0x42a, 0x6, 0x233, 0x1, 0x0, 0x6, 0x3, 0x8, 0x6, 0x83, 0xf2d2, 0x8, 0x10, 0x8, 0x3, 0x6, 0x3, 0xbfe, 0x9, 0xe0, 0x0, 0x3, 0x8000, 0x1, 0x6, 0x0, 0x7f, 0x40, 0x101, 0x400, 0xb084, 0x7, 0x81, 0x400, 0x9, 0x9, 0x0, 0x28e3, 0x8000, 0xb9, 0x9a, 0x45, 0x9, 0x914b, 0xd, 0x1, 0x7fff, 0x81, 0x5, 0x8, 0x3, 0x8, 0x2, 0x2, 0xc, 0x129, 0x4, 0xa, 0x3, 0x6, 0x70, 0x6, 0x2, 0x9, 0x2, 0x9, 0x3, 0x7fff, 0x2, 0x3, 0xa, 0x0, 0x6ab9, 0xfffff817, 0x8, 0x6, 0x1, 0x10001, 0x2, 0xfff, 0x7ff, 0x0, 0xfa81, 0x3, 0x10000, 0x6, 0x8, 0xffffff46, 0xdfc7, 0x5, 0x2]}]}, @TCA_ROUTE4_TO={0x8, 0x2, 0x9c}]}}]}, 0x884}}, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000140), 0xa0000, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) chroot(0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000000)='asymmetric\x00', 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r6, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x4, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0x0) 6.885368236s ago: executing program 0 (id=1630): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @multicast1, @multicast2}, &(0x7f0000000280)=0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000031889d5c7bb919944c69726b0f3612b180e548fba63722231fbb17346e177e3cfaedebab383620efc0a0"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) close(0xffffffffffffffff) setsockopt$bt_l2cap_L2CAP_LM(r5, 0x6, 0x3, &(0x7f0000000140)=0xc, 0x4) connect$bt_l2cap(r5, &(0x7f0000000180)={0x1f, 0x0, @fixed}, 0xe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r6, &(0x7f0000000180), 0x400008a, 0x0) getpid() sendmsg$key(r6, &(0x7f0000000140)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000080)={0x0, "4fcb813dd28b42bee2b094a3de6dbfd30a74457bcd1cfd5feffe5c019f45d57f", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r8, 0xc0303e03, &(0x7f0000000180)={"000000149c0286e08ffad43c40fc0a000000ab65a29e23546aad0281b3aff5eb", r8}) 6.824068858s ago: executing program 6 (id=1631): bind$inet6(0xffffffffffffffff, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x8b, 0x100100) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sched_getattr(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xfffffffffffffffe}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000900)={@random="e10931d8640a", @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "ea0c00", 0x10, 0x88, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0x100}}}}}}}}, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() timer_create(0x0, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x8d, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)=[0x0], 0x0, 0x0, 0x0, 0x30}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000440), &(0x7f0000000000)=[0x0, 0x0], 0x0, 0x0, 0x0, 0x0, r3}) 6.152905627s ago: executing program 3 (id=1632): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000006c0)={0x2c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @broadcast}}}]}]}, 0x2c}}, 0x0) openat$sequencer2(0xffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x5169, 0x0, &(0x7f0000000100), &(0x7f0000000000)) syz_io_uring_setup(0x7ddf, &(0x7f0000000280), 0x0, 0x0) gettid() r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1000006, &(0x7f0000000200), 0x2, 0x6}}, 0x20) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f00000001c0)={0x1, 0x0, &(0x7f0000000240)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r2, 0xc01864b1, &(0x7f0000000240)={r4, 0x0, 0xb, 0x4, &(0x7f00000001c0)=[{0x474b, 0x3, 0x2, 0xe27}, {0x5, 0x800, 0xf, 0x2}, {0xffff, 0x2, 0x7, 0x6c0}, {0x57, 0x81, 0x1ff, 0x3}]}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140), 0x106, 0x4}}, 0x20) close_range(r1, 0xffffffffffffffff, 0x0) 5.932059415s ago: executing program 6 (id=1633): syz_open_dev$I2C(0x0, 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/zoneinfo\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000780), &(0x7f00000007c0)='./bus\x00', 0x80, &(0x7f0000000b40)={{}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}, {@allow_other}], [{@appraise_type}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@seclabel}, {@euid_eq}, {@fowner_lt}, {@subj_type={'subj_type', 0x3d, '/proc/sys/net/ipv4/tcp_mtu_probing\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, '[:-++'}}]}}, 0x1, 0x0, &(0x7f0000000c80)="cdd84d4eb2903842c2908aa09dab22be8beef6554c3746e796e1670bd51f9ac0e3") fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000100), &(0x7f0000000180)={'U-', 0x7}, 0x16, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioperm(0x0, 0x3, 0x4) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000005c0)={{0x2, 0xee00, 0x0, 0x0, 0x0, 0x68, 0x800}, 0x0, 0x0, 0x6, 0x7f, 0x8, 0x9, 0x2, 0x7fff, 0x7fff, 0x3}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendfile(0xffffffffffffffff, r0, &(0x7f00000000c0)=0x58, 0x2) creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000002e40)='./bus\x00', &(0x7f0000002e80)='nilfs2\x00', 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000300)=ANY=[@ANYRES16=0x0, @ANYBLOB="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", @ANYRES8=r5, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0a000101", @ANYRES32, @ANYBLOB='\b\x00', @ANYRES32=0x0, @ANYBLOB="080003000200000030000180140002006e69637666300000000000000000000008000100", @ANYRES32, @ANYRES16, @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="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", @ANYRES64=r5, @ANYBLOB="080001ab85d29508d35d8d4ac93ab1a8df9f22271de8e2cdeee1ad17049b1c9eceaf6d088c20a856742f31f58fc1e6e8f07e06610ee5369addeaab54329da3bef1978b059df2a260ff010000efb58f2c68aa7707250138a3c1374bce452b6ffdbb52e3edbb9708f600"/118, @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="1800018014000200626f6e645f736c6176655f310000000044000280400003803c00"], 0x538}, 0x1, 0x0, 0x0, 0x40}, 0x2400c080) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90124fc60100c084002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 4.91983485s ago: executing program 1 (id=1634): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xd, 0x3}, {}, {0xffff}}}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000640)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {}, {0x1c, 0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x854, 0x2, [@TCA_ROUTE4_POLICE={0x848, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x57, 0x4, 0xe488, 0x5, 0xe, 0x8, 0xedde, 0x7, 0xd9, 0x2, 0x2, 0x4, 0xebd4, 0x1, 0x0, 0x8, 0x4, 0x3, 0x800000, 0x4, 0x80000001, 0x20000, 0x5, 0x8, 0x0, 0x81, 0xfffffffb, 0x10, 0x1, 0xc, 0x1, 0x81, 0x7, 0x4, 0x7, 0x6, 0x2ce4, 0x6, 0x401, 0x6, 0x8, 0x6, 0x1, 0x5d7e922f, 0x1, 0x81, 0xa9, 0x10001, 0x8, 0x551, 0x7, 0x20, 0x4, 0x4, 0x4, 0x9, 0x9, 0xc94, 0x5, 0x5, 0x7, 0x1, 0x7fff, 0x4, 0x2, 0x5e474286, 0x4, 0x2, 0x4, 0xa, 0x6, 0x9, 0xff, 0x0, 0x2ef6, 0xed8a, 0x5, 0x0, 0xadc3, 0x8, 0x40, 0x1ff, 0x8000, 0x401, 0xe92, 0x0, 0xfffffffe, 0xf5, 0x800, 0xb, 0x10000, 0x6, 0x8001, 0x3, 0xb, 0x5, 0x8f5d, 0xfffffe01, 0x9b4, 0x80000001, 0x3ff, 0xc, 0x58c6, 0xffff1876, 0x4, 0xfffffff9, 0xff, 0x6, 0x1, 0x4, 0x80, 0x8, 0xc9, 0x1, 0x95ca, 0xffffff31, 0x7, 0x81, 0x7, 0x7, 0x4588, 0x2, 0x4, 0x4, 0x6, 0x7fffffff, 0x7a2e, 0x80000001, 0x7, 0x380, 0x8, 0x8, 0x8, 0x2, 0x7, 0x1, 0x8, 0x100, 0x0, 0x7, 0xfffffff7, 0x1, 0xf3c, 0x3, 0xd, 0x3fe9, 0xb6, 0x6, 0x2, 0x3, 0x0, 0x6, 0x7, 0x5, 0xafb9, 0x6, 0x0, 0x3, 0x6, 0xb3, 0x6, 0xfffff001, 0x5, 0x6, 0x2, 0x8, 0x0, 0x0, 0xfffffff9, 0x80000001, 0xc, 0x3, 0x2, 0x6f3, 0x10000, 0x7, 0x2, 0x8, 0x5, 0xb, 0x1, 0x5, 0x0, 0x4, 0xfffffff9, 0x16f, 0x101, 0x4, 0xffffff25, 0x6, 0x400, 0x7fff, 0xf, 0x3, 0x5, 0x4, 0x6, 0x0, 0xfffffb02, 0x7, 0xc, 0x2e8, 0x5, 0x5, 0x100, 0x7f, 0xfffffffa, 0x7, 0x3b, 0x100, 0x400, 0x0, 0xfffffff9, 0x1, 0xe63, 0x4, 0x1, 0xccfc, 0x8, 0x7, 0xc7, 0x1, 0x7ff, 0x10, 0x8, 0x4, 0x10, 0x80000000, 0xa9d4, 0x1, 0x3, 0xc, 0xf, 0x1, 0x0, 0xf, 0x80000001, 0x6, 0x7f, 0x4, 0xfffffffc, 0x8, 0x0, 0x2, 0x0, 0x5, 0x6, 0x4, 0x80, 0x7, 0x8, 0x8, 0x10000, 0x80000001, 0x7, 0x4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2f9, 0x1, 0x20005, 0x0, 0x3, {0x0, 0x0, 0x9, 0xffff, 0x318, 0x5654}, {0xf, 0x1, 0xde7f, 0x9, 0x9, 0x100}, 0x6, 0x8, 0x4}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x80, 0x4, 0x0, 0x200, 0x8, 0x9, 0x9, 0x5, 0x10001, 0x2, 0x6, 0x9, 0x8, 0x0, 0xa, 0xb, 0xb, 0x2, 0x8, 0xffffffff, 0x0, 0x4, 0x2, 0x8000, 0xc9, 0x5, 0x3, 0x3, 0x101, 0x2, 0xbb4, 0xff, 0x0, 0x6, 0x4, 0x9, 0x200, 0x4, 0x7, 0x1, 0xffffffff, 0xfffffffb, 0xa647, 0x63, 0x67, 0x80, 0x0, 0x4, 0x1, 0x0, 0x0, 0x2c4a, 0x1, 0x9, 0x80000000, 0x7, 0xbe7, 0xfffffffc, 0x2, 0xd, 0x9, 0x7fff, 0x3, 0x1ff, 0x0, 0x2, 0x2, 0x7585, 0x4, 0xc, 0x400, 0x51, 0xf0, 0x6, 0x8, 0x3, 0x4, 0xc, 0x18f3, 0x6, 0x7, 0xffff366f, 0x9, 0x0, 0x2216, 0x2, 0x3, 0x9, 0x1, 0x5d69fdd4, 0x5, 0x8, 0x10000, 0x6, 0x6, 0x2, 0x80, 0x9, 0xa0, 0x4, 0x8, 0x7, 0x2c, 0x10, 0x8, 0x9, 0x5, 0x0, 0x2, 0x2, 0x7f, 0xc6, 0x80, 0x6, 0x1, 0xfffffffe, 0xfe40, 0x8, 0x5, 0x0, 0x800, 0x10, 0x2, 0x7, 0x80, 0x5, 0x7, 0x4, 0x1000, 0x7, 0x1, 0x1, 0x750, 0x3, 0x6, 0x9, 0x2, 0x4, 0x8, 0x8, 0x4, 0x8, 0x2, 0x6, 0x9, 0x4, 0x101, 0x5, 0x7, 0x7f, 0x4, 0x7, 0x8, 0x1, 0x3, 0x0, 0xb, 0x2, 0xfffffff9, 0xffffffff, 0x101, 0x35, 0x3, 0x8001, 0x7f, 0x42a, 0x6, 0x233, 0x1, 0x0, 0x6, 0x3, 0x8, 0x6, 0x83, 0xf2d2, 0x8, 0x10, 0x8, 0x3, 0x6, 0x3, 0xbfe, 0x9, 0xe0, 0x0, 0x3, 0x8000, 0x1, 0x6, 0x0, 0x7f, 0x40, 0x101, 0x400, 0xb084, 0x7, 0x81, 0x400, 0x9, 0x9, 0x0, 0x28e3, 0x8000, 0xb9, 0x9a, 0x45, 0x9, 0x914b, 0xd, 0x1, 0x7fff, 0x81, 0x5, 0x8, 0x3, 0x8, 0x2, 0x2, 0xc, 0x129, 0x4, 0xa, 0x3, 0x6, 0x70, 0x6, 0x2, 0x9, 0x2, 0x9, 0x3, 0x7fff, 0x2, 0x3, 0xa, 0x0, 0x6ab9, 0xfffff817, 0x8, 0x6, 0x1, 0x10001, 0x2, 0xfff, 0x7ff, 0x0, 0xfa81, 0x3, 0x10000, 0x6, 0x8, 0xffffff46, 0xdfc7, 0x5, 0x2]}]}, @TCA_ROUTE4_TO={0x8, 0x2, 0x9c}]}}]}, 0x884}}, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000140), 0xa0000, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) chroot(0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000000)='asymmetric\x00', 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r6, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x4, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0x0) 4.906170923s ago: executing program 3 (id=1635): syz_open_dev$I2C(0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/zoneinfo\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000180)={'U-', 0x7}, 0x16, 0x3) ioperm(0x0, 0x3, 0x4) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000005c0)={{0x2, 0xee00, 0x0, 0x0, 0x0, 0x68, 0x800}, 0x0, 0x0, 0x6, 0x7f, 0x8, 0x9, 0x2, 0x7fff, 0x7fff, 0x3}) 4.889838425s ago: executing program 6 (id=1636): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000020000000200000004"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) close(0xffffffffffffffff) syz_pidfd_open(0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000540)=""/57, 0x39) ioctl$PTP_PEROUT_REQUEST2(r2, 0x40383d0c, &(0x7f00000000c0)={{0x4}, {}, 0x0, 0x4}) read$ptp(r2, 0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) syz_emit_vhci(&(0x7f00000011c0)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}}}, 0xa) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$vimc2(0xffffffffffffff9c, &(0x7f0000004340), 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000002c0)='kfree\x00', r4}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x1ff}]}) 3.888984791s ago: executing program 3 (id=1637): syz_open_dev$I2C(0x0, 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/zoneinfo\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000780), &(0x7f00000007c0)='./bus\x00', 0x80, &(0x7f0000000b40)={{}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}], [{@appraise_type}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@seclabel}, {@euid_eq}, {@fowner_lt}, {@subj_type={'subj_type', 0x3d, '/proc/sys/net/ipv4/tcp_mtu_probing\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, '[:-++'}}]}}, 0x1, 0x0, &(0x7f0000000c80)="cdd84d4eb2903842c2908aa09dab22be8beef6554c3746e796e1670bd51f9ac0e3") fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000100), &(0x7f0000000180)={'U-', 0x7}, 0x16, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioperm(0x0, 0x3, 0x4) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000005c0)={{0x2, 0xee00, 0x0, 0x0, 0x0, 0x68, 0x800}, 0x0, 0x0, 0x6, 0x7f, 0x8, 0x9, 0x2, 0x7fff, 0x7fff, 0x3}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) sendfile(r5, r0, &(0x7f00000000c0)=0x58, 0x2) creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000002e40)='./bus\x00', &(0x7f0000002e80)='nilfs2\x00', 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000300)=ANY=[@ANYRES16=0x0, @ANYBLOB="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", @ANYRES8=r6, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0a000101", @ANYRES32, @ANYBLOB='\b\x00', @ANYRES32=0x0, @ANYBLOB="080003000200000030000180140002006e69637666300000000000000000000008000100", @ANYRES32, @ANYRES16, @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="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", @ANYRES64=r6, @ANYBLOB="080001ab85d29508d35d8d4ac93ab1a8df9f22271de8e2cdeee1ad17049b1c9eceaf6d088c20a856742f31f58fc1e6e8f07e06610ee5369addeaab54329da3bef1978b059df2a260ff010000efb58f2c68aa7707250138a3c1374bce452b6ffdbb52e3edbb9708f600"/118, @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="1800018014000200626f6e645f736c6176655f310000000044000280400003803c00"], 0x538}, 0x1, 0x0, 0x0, 0x40}, 0x2400c080) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90124fc60100c084002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 3.871508679s ago: executing program 5 (id=1638): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='illinois\x00', 0x9) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000004c0)=0x14) sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000040)="4a211935eb4fd6a4f68d0c69193d5aff88633f7e84130536ef67154ab37de4463e2666856fe0cb469b568e26b505e17d50731b8443d183f2c44b0f786749a08350", 0x41}, {&(0x7f00000000c0)="8008c38503", 0x5}, {&(0x7f0000000140)="953a1ce0c1aac53989c788156746e2", 0xf}, {&(0x7f0000000280)="42c6f1a9709d77bae39781f13e636028eee720f3c4457a98830899fb185ed30bbd94ef7e9657984c6dd925335d1d5d76e31bc59347281f8cdb51bc41b821e18a28ff4e240f35ec54ea5b9e92eaef2950b3980bf2a9839e120a26fae6fd4dfb2d0e3be411e5ffa1c0c4d9e76138010fc1634242ff3f27c6dc422610943b717a311aaa2fce9a89dd37bb8f1e78658cbae6dc61a98336ab448780c91f0e163bb93611f098c8687922362d64b2656045569334fe131fb97eb299d72a8ac46751bece9aa7454d9a2a0a8c2cdec9ab41b91acf", 0xd0}, {&(0x7f0000000380)="75f1f80ed9109eaa2246be013c39c777881263ae483fb1c4ddef18750ee1920c53457675bcb71f6cfc86578174317826509c9576dbbe934de917e16db33cafbeb8dc5c4cc0a8fcc969479bd90af4fab7e353f44d80ec9727ee7f979eb7f2ee8436776296fdfeb317254897ced826a5aaf6f2206e9822407b115fe5e6a939f7dd4f1a5578c4c676fd726ddcbcee5503405a0a149e88", 0x95}, {&(0x7f0000000180)="b2e4dec642fd3a9799eb7b7b84f9072c184b26d3a846413cf81aaf070e0613039ad12f71b664901169c51b85761d5ca4a07301f45574d4c8f6", 0x39}], 0x6, &(0x7f00000005c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x1b}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_ttl={{0x14, 0x0, 0x2, 0x40000000}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_tos_u8={{0x11}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @empty, @rand_addr=0x64010101}}}, @ip_retopts={{0x74, 0x0, 0x7, {[@end, @rr={0x7, 0x7, 0x58, [@local]}, @timestamp_prespec={0x44, 0xc, 0x77, 0x3, 0x8, [{@multicast2, 0x9}]}, @generic={0x83, 0x4, "66ce"}, @timestamp_prespec={0x44, 0x24, 0x5, 0x3, 0x0, [{@loopback, 0x1}, {@multicast1, 0x8000}, {@local, 0x6}, {@local, 0x200}]}, @rr={0x7, 0x7, 0x8, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @generic={0x83, 0x10, "8a865e3031b6286f2ba14eed910f"}, @lsrr={0x83, 0xf, 0xdd, [@private=0xa010101, @local, @local]}]}}}], 0x128}, 0x8) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) 3.838300615s ago: executing program 5 (id=1639): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x510, 0x348, 0x18c, 0x203, 0x0, 0x19030000, 0x440, 0x2e0, 0x2e0, 0x440, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x94}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x1, 0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) r0 = syz_open_dev$evdev(&(0x7f0000000800), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x5452, &(0x7f0000000100)={0x1, 0xfffffffffffffdbd, 0x0}) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x862b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) (fail_nth: 1) 3.072014894s ago: executing program 5 (id=1640): ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) semget(0x3, 0x3, 0x200) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000600)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='system.posix_acl_default\x00', 0x0, 0x1c, 0x0) creat(0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f00000000c0)=0x209b, 0x4) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xe, &(0x7f0000000440), 0x3, 0x440, &(0x7f00000006c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r4 = open(0x0, 0x127842, 0x0) write$UHID_INPUT(r4, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r5, 0xc0185879, &(0x7f0000000080)={@desc={0x1, 0x0, @desc4}}) syz_emit_ethernet(0x3e, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaeaaaaaaaffffffffd56a5dd1638b63a707000000000690780000000000f4ffff8508ffffffff0102"], 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c00000002030300000000000000000000000010080001000100d4bdf94a15d731affc0420244b57160e0000e67cec56a2102c791a8a0cf3f50b6aedacc41f08a739f8f2aca6d89aad01c857357602a986a750ce523ec47ce01526141a0a92b36dcc92a1392ea937919e7c9604114d8c9febd92a3b681e64575ee74b89872c0345d9b156cdd2578a7ccd08a68be09b905fa0d9fb7ea95f5473224bf3edb2af410fc57c4416a075f1fd6bd9322449a00c6cebb9b4fb30a50296a01949fe17c1a81d3a17df428aea599120c207c50e8c3e5c6d596e0a867f1611865c065ceb2c4aa6d3ae6794"], 0x1c}}, 0x0) 3.07148809s ago: executing program 1 (id=1641): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x510, 0x348, 0x18c, 0x203, 0x0, 0x19030000, 0x440, 0x2e0, 0x2e0, 0x440, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x94}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x1, 0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x8000000000000001, 0x41a142) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./bus\x00', 0x20008c0, &(0x7f0000000140)={[{@fat=@allow_utime={'allow_utime', 0x3d, 0xff}}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'koi8-u'}}, {@shortname_lower}, {@fat=@check_strict}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@fat=@codepage={'codepage', 0x3d, '864'}}, {@utf8}, {@shortname_winnt}, {@uni_xlateno}, {@uni_xlateno}, {@utf8}, {@uni_xlate}]}, 0x80, 0x364, &(0x7f0000000400)="$eJzs3U1oHOUbAPBnO5vdtNB/cvhDUbCM3gQNbcWDnhJKCsW9qCx+HMTFpiq7UcjiYnLINl7Eo+BRT9486MFDzyIo4s2DVytIVTxoD0LB4sh+z2Z306QYa/D3OyxPnvd95n0nM+xMJtk3Ly5H/dJcXL5x43rMzxeiuHx+OW4WYjGSGLgSk0pTcgDA0XAzy+K3rGefJYVDnhIAcMi61/+XT+Yyb32xV//M1R8Ajrz+z//Hh4kp1/f5WcWvH9q0AIBDNPH8/4Gx5tL4r/qLub8KAACOqqefe/6JlUrEU2k6H7H+dqvaqsbjo/aVy/FqNGItzsRC3Iro3Sh0Xgrd1wsXK6tn0jRtx4+LUe1UtKoR6+1WtXensJJ068txNhZisV/fv9vIsiy58Gll9WzaFRFX2t3xY73Qqs7Fif74352ItTgXafx/oj7iYmX1XNrfQHV9UN+O2Bk9t+jMfykW4puX4nREXIpO7eC2prK6fTZNz2eVsfpWtdzt1zPzCQgAAAAAAAAAAAAAAAAAAAAAANyRpXRocbj+TTZav2dpaUp7d32cXn1/faCd3vpAWTmLLPv1zYer7yQxtj7Q7vV5WtViHLu7uw4AAAAAAAAAAAAAAAAAAAD/Gs3NUtQajbWN5uZWPR+0N5qbxyKik3ntq48/Px6TfW4TFPtj5JrSfmqrXsuSQecs6fc5FrnypDP4YIMfXR3OOD9EebgXU6dRnt3UaJy8/4f3R5n7ksGW/xz1SWL6Dia7ppEP1v/Xm9JBvlHD4Nxt+lzLsmxW+fYLk1VRiCge/MDtHWSd4Mvrr9zzSPPUo93MZ1nPgw8tPHPtvQ9/rtcanZGjewRLG81bWb3W/3r6yTY7SHLnTyF6QSF/JhRnlZe26rWd8aZa8u0vz9777tf7Gz3LZ96Y0ifp7c4nu5tKvaAzzV1Nx6eNNRcHPQStOzlwpz5Yrl3d/v6n/Vbl3iSmLdTx++m/8V0IAAAAAAAAAAAAAAAAAACIsY/HDzL9D/vO7VX12JOHPzMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+OeM/v9/LtiZyOwn+KMdk03ltY1mROlu7yYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP9xfwUAAP//oHptow==") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff) ioctl$EVIOCGMASK(r0, 0x5452, &(0x7f0000000100)={0x1, 0xfffffffffffffdbd, 0x0}) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x862b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) r2 = syz_usb_connect$uac1(0x4, 0xe0, &(0x7f0000000240)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xce, 0x3, 0x1, 0x1, 0x80, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5}, [@feature_unit={0x11, 0x24, 0x6, 0x6, 0x1, 0x5, [0x8, 0xa, 0x7, 0x9, 0x1], 0x8}, @processing_unit={0xc, 0x24, 0x7, 0x3, 0x0, 0x0, "afc92b9c98"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x1, 0xdd, 0x1001}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x4, 0xf9, 0x8, {0x7, 0x25, 0x1, 0x80, 0x8, 0x720}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x2, 0x4, 0x4, 0xc0, "08f6656339961c7c5e"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x2, 0x1, 0x64, "cc7b76c234"}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x1, 0xe832, 0xb1, "91"}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x3, 0x4, 0x2, 0x3a, "2dab9bbef7f5"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x3, 0x1, 0x2f, 0x8, '[Nj'}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0xff, 0x4, 0x4, 0x0, '['}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x9, 0x6, 0x8, {0x7, 0x25, 0x1, 0x3, 0x9}}}}}}}]}}, &(0x7f0000000cc0)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x201, 0x80, 0xf8, 0x0, 0xff, 0x10}, 0x34, &(0x7f0000000380)={0x5, 0xf, 0x34, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0xb6, 0x6}, @ssp_cap={0x10, 0x10, 0xa, 0x2, 0x1, 0x800, 0x1100, 0x8000, [0xff3fc0]}, @wireless={0xb, 0x10, 0x1, 0x8, 0x8, 0x84, 0x54, 0x4, 0x62}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x3, 0x5, 0xf}]}, 0x4, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x401}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x280a}}, {0xfc, &(0x7f0000000b80)=@string={0xfc, 0x3, "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"}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x82c}}]}) syz_usb_control_io$uac1(r2, &(0x7f0000000e40)={0x14, &(0x7f0000000d40)={0x40, 0xe, 0x38, {0x38, 0x3, "0cd724168f932be3ebd67e6f3c7cdab9ebc49287728fbea6a0cf89721084681c530365c340cd940e83bf1e64c093f24481165efc6e24"}}, &(0x7f0000000d80)={0x0, 0x3, 0x82, @string={0x82, 0x3, "1d7c29097b4a513c28abdbce662be61ef4b683ba7e14b631a4fe9d01744191b8a04414115dd723be4e84f0a2953033c817789d6452ffaa515f7d67050586bcade955f5ee0c9c9ff4a529405f5b13cc12399cde757334ac387f59485ec9bc0a4b0dae0aecd194e2bb4c7a9aa15ea7de50693049fc33f22eacd887dad448a82d29"}}}, &(0x7f00000010c0)={0x44, &(0x7f0000000e80)={0x0, 0x14, 0x66, "f8c4a7f756368c23c824a6ab6e84397876dfa23a1cce7e609b7c4a5527c5f570bf3f398edf3e79e0306f9e91bc3d703b7f1ea8415bbe213fdf697603abf8c9adcd6a4bea84142ef995926228ab78fc11882e3052b6db31fcaabc6877fcada409904549d909f8"}, &(0x7f0000000f00)={0x0, 0xa, 0x1, 0x45}, &(0x7f0000000f40)={0x0, 0x8, 0x1, 0x62}, &(0x7f0000000f80)={0x20, 0x81, 0x1, 'q'}, &(0x7f0000000fc0)={0x20, 0x82, 0x2, "c841"}, &(0x7f0000001000)={0x20, 0x83, 0x3, "30a801"}, &(0x7f0000001040)={0x20, 0x84, 0x4, "a7156d41"}, &(0x7f0000001080)={0x20, 0x85, 0x3, "bdda47"}}) 3.029331392s ago: executing program 0 (id=1642): syz_mount_image$ocfs2(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x8b, &(0x7f0000004680)=ANY=[@ANYBLOB="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"], 0x1, 0x4430, &(0x7f0000000240)="$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") r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000000900008500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000640)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x3, 0x0}, &(0x7f0000000540)="8b21d57b0000", 0x0, 0x0, 0x0, 0x0, 0x0}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbfs(0x0, 0x204, 0x0) setsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000001400010000000000000000c90300008008000280ec"], 0x1c}], 0x1}, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0x0, 0x4) ioctl$SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000080)={'gretap0\x00', 0x200}) r7 = syz_open_dev$ttys(0xc, 0x2, 0x0) r8 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r8, 0x0) fspick(r8, &(0x7f00000047c0)='./bus\x00', 0x0) fallocate(r8, 0x0, 0x0, 0x0) close_range(r7, r8, 0x2) fdatasync(r6) 2.995755219s ago: executing program 3 (id=1643): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r2}]}, 0x20}}, 0x0) 2.339772419s ago: executing program 6 (id=1644): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xd, 0x3}, {}, {0xffff}}}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000640)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {}, {0x1c, 0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x854, 0x2, [@TCA_ROUTE4_POLICE={0x848, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x57, 0x4, 0xe488, 0x5, 0xe, 0x8, 0xedde, 0x7, 0xd9, 0x2, 0x2, 0x4, 0xebd4, 0x1, 0x0, 0x8, 0x4, 0x3, 0x800000, 0x4, 0x80000001, 0x20000, 0x5, 0x8, 0x0, 0x81, 0xfffffffb, 0x10, 0x1, 0xc, 0x1, 0x81, 0x7, 0x4, 0x7, 0x6, 0x2ce4, 0x6, 0x401, 0x6, 0x8, 0x6, 0x1, 0x5d7e922f, 0x1, 0x81, 0xa9, 0x10001, 0x8, 0x551, 0x7, 0x20, 0x4, 0x4, 0x4, 0x9, 0x9, 0xc94, 0x5, 0x5, 0x7, 0x1, 0x7fff, 0x4, 0x2, 0x5e474286, 0x4, 0x2, 0x4, 0xa, 0x6, 0x9, 0xff, 0x0, 0x2ef6, 0xed8a, 0x5, 0x0, 0xadc3, 0x8, 0x40, 0x1ff, 0x8000, 0x401, 0xe92, 0x0, 0xfffffffe, 0xf5, 0x800, 0xb, 0x10000, 0x6, 0x8001, 0x3, 0xb, 0x5, 0x8f5d, 0xfffffe01, 0x9b4, 0x80000001, 0x3ff, 0xc, 0x58c6, 0xffff1876, 0x4, 0xfffffff9, 0xff, 0x6, 0x1, 0x4, 0x80, 0x8, 0xc9, 0x1, 0x95ca, 0xffffff31, 0x7, 0x81, 0x7, 0x7, 0x4588, 0x2, 0x4, 0x4, 0x6, 0x7fffffff, 0x7a2e, 0x80000001, 0x7, 0x380, 0x8, 0x8, 0x8, 0x2, 0x7, 0x1, 0x8, 0x100, 0x0, 0x7, 0xfffffff7, 0x1, 0xf3c, 0x3, 0xd, 0x3fe9, 0xb6, 0x6, 0x2, 0x3, 0x0, 0x6, 0x7, 0x5, 0xafb9, 0x6, 0x0, 0x3, 0x6, 0xb3, 0x6, 0xfffff001, 0x5, 0x6, 0x2, 0x8, 0x0, 0x0, 0xfffffff9, 0x80000001, 0xc, 0x3, 0x2, 0x6f3, 0x10000, 0x7, 0x2, 0x8, 0x5, 0xb, 0x1, 0x5, 0x0, 0x4, 0xfffffff9, 0x16f, 0x101, 0x4, 0xffffff25, 0x6, 0x400, 0x7fff, 0xf, 0x3, 0x5, 0x4, 0x6, 0x0, 0xfffffb02, 0x7, 0xc, 0x2e8, 0x5, 0x5, 0x100, 0x7f, 0xfffffffa, 0x7, 0x3b, 0x100, 0x400, 0x0, 0xfffffff9, 0x1, 0xe63, 0x4, 0x1, 0xccfc, 0x8, 0x7, 0xc7, 0x1, 0x7ff, 0x10, 0x8, 0x4, 0x10, 0x80000000, 0xa9d4, 0x1, 0x3, 0xc, 0xf, 0x1, 0x0, 0xf, 0x80000001, 0x6, 0x7f, 0x4, 0xfffffffc, 0x8, 0x0, 0x2, 0x0, 0x5, 0x6, 0x4, 0x80, 0x7, 0x8, 0x8, 0x10000, 0x80000001, 0x7, 0x4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2f9, 0x1, 0x20005, 0x0, 0x3, {0x0, 0x0, 0x9, 0xffff, 0x318, 0x5654}, {0xf, 0x1, 0xde7f, 0x9, 0x9, 0x100}, 0x6, 0x8, 0x4}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x80, 0x4, 0x0, 0x200, 0x8, 0x9, 0x9, 0x5, 0x10001, 0x2, 0x6, 0x9, 0x8, 0x0, 0xa, 0xb, 0xb, 0x2, 0x8, 0xffffffff, 0x0, 0x4, 0x2, 0x8000, 0xc9, 0x5, 0x3, 0x3, 0x101, 0x2, 0xbb4, 0xff, 0x0, 0x6, 0x4, 0x9, 0x200, 0x4, 0x7, 0x1, 0xffffffff, 0xfffffffb, 0xa647, 0x63, 0x67, 0x80, 0x0, 0x4, 0x1, 0x0, 0x0, 0x2c4a, 0x1, 0x9, 0x80000000, 0x7, 0xbe7, 0xfffffffc, 0x2, 0xd, 0x9, 0x7fff, 0x3, 0x1ff, 0x0, 0x2, 0x2, 0x7585, 0x4, 0xc, 0x400, 0x51, 0xf0, 0x6, 0x8, 0x3, 0x4, 0xc, 0x18f3, 0x6, 0x7, 0xffff366f, 0x9, 0x0, 0x2216, 0x2, 0x3, 0x9, 0x1, 0x5d69fdd4, 0x5, 0x8, 0x10000, 0x6, 0x6, 0x2, 0x80, 0x9, 0xa0, 0x4, 0x8, 0x7, 0x2c, 0x10, 0x8, 0x9, 0x5, 0x0, 0x2, 0x2, 0x7f, 0xc6, 0x80, 0x6, 0x1, 0xfffffffe, 0xfe40, 0x8, 0x5, 0x0, 0x800, 0x10, 0x2, 0x7, 0x80, 0x5, 0x7, 0x4, 0x1000, 0x7, 0x1, 0x1, 0x750, 0x3, 0x6, 0x9, 0x2, 0x4, 0x8, 0x8, 0x4, 0x8, 0x2, 0x6, 0x9, 0x4, 0x101, 0x5, 0x7, 0x7f, 0x4, 0x7, 0x8, 0x1, 0x3, 0x0, 0xb, 0x2, 0xfffffff9, 0xffffffff, 0x101, 0x35, 0x3, 0x8001, 0x7f, 0x42a, 0x6, 0x233, 0x1, 0x0, 0x6, 0x3, 0x8, 0x6, 0x83, 0xf2d2, 0x8, 0x10, 0x8, 0x3, 0x6, 0x3, 0xbfe, 0x9, 0xe0, 0x0, 0x3, 0x8000, 0x1, 0x6, 0x0, 0x7f, 0x40, 0x101, 0x400, 0xb084, 0x7, 0x81, 0x400, 0x9, 0x9, 0x0, 0x28e3, 0x8000, 0xb9, 0x9a, 0x45, 0x9, 0x914b, 0xd, 0x1, 0x7fff, 0x81, 0x5, 0x8, 0x3, 0x8, 0x2, 0x2, 0xc, 0x129, 0x4, 0xa, 0x3, 0x6, 0x70, 0x6, 0x2, 0x9, 0x2, 0x9, 0x3, 0x7fff, 0x2, 0x3, 0xa, 0x0, 0x6ab9, 0xfffff817, 0x8, 0x6, 0x1, 0x10001, 0x2, 0xfff, 0x7ff, 0x0, 0xfa81, 0x3, 0x10000, 0x6, 0x8, 0xffffff46, 0xdfc7, 0x5, 0x2]}]}, @TCA_ROUTE4_TO={0x8, 0x2, 0x9c}]}}]}, 0x884}}, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000140), 0xa0000, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) chroot(0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000000)='asymmetric\x00', 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x4, @loopback}, 0x1c) sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0x0) 2.17214646s ago: executing program 3 (id=1645): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x401, 0x300, 0x0, {0x0, 0x12, 0x0, r2, 0x200}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_TLB_DYNAMIC_LB={0x5, 0x1b, 0x31}]}}}]}, 0x3c}}, 0x0) 2.097747174s ago: executing program 5 (id=1646): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000300)=@ipmr_newroute={0x40, 0x18, 0x300, 0x70bd28, 0x25dfdbfc, {0x80, 0x10, 0x10, 0x3, 0xfe, 0x1, 0xff, 0x8, 0x800}, [@RTA_MULTIPATH={0xc, 0x9, {0x4f, 0x0, 0x8}}, @RTA_IP_PROTO={0x5, 0x1b, 0x3a}, @RTA_DST={0x8, 0x1, @rand_addr=0x64010102}, @RTA_DPORT={0x6, 0x1d, 0x4e23}]}, 0x40}}, 0x28044804) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000640)={0x28, 0x0, 0x2710, @any, 0x11}, 0x10) r6 = accept(r4, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="120000000400000004000000a4000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000a837a60d92be8b44eabd4aef93ae7ff74da6576c5fe6820fc3bf233ce890312232bd81dc8f64a42e3622a8da41468942a679f90810f08a843f86ec65e7b8aab39f16990fb4235212a281d553cb7a3cb61445c3c19cbf30817528dc021eedd18ab1038a6ccc767e111cc219c0280fb34ad0756351f1f3f6"], 0x48) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r7, &(0x7f0000000300), &(0x7f00000002c0)=@tcp6=r6}, 0x47) recvmsg$can_bcm(r6, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) 2.061545277s ago: executing program 3 (id=1647): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x11, r0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f00000000c0)={0x1, 0x8, 0x1, 0xfffffffa, @vifc_lcl_ifindex=r3, @local}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0) ptrace$setsig(0x4203, r0, 0x6, &(0x7f0000000000)={0xb, 0xc12f00, 0x9}) 1.108129864s ago: executing program 5 (id=1648): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000000c0)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0) (fail_nth: 7) 1.033131106s ago: executing program 1 (id=1649): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @multicast1, @multicast2}, &(0x7f0000000280)=0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000031889d5c7bb919944c69726b0f3612b180e548fba63722231fbb17346e177e3cfaedebab383620efc0a0"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) close(0xffffffffffffffff) setsockopt$bt_l2cap_L2CAP_LM(r5, 0x6, 0x3, &(0x7f0000000140)=0xc, 0x4) connect$bt_l2cap(r5, &(0x7f0000000180)={0x1f, 0x0, @fixed}, 0xe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r6, &(0x7f0000000180), 0x400008a, 0x0) getpid() sendmsg$key(r6, &(0x7f0000000140)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000080)={0x0, "4fcb813dd28b42bee2b094a3de6dbfd30a74457bcd1cfd5feffe5c019f45d57f", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r8, 0xc0303e03, &(0x7f0000000180)={"000000149c0286e08ffad43c40fc0a000000ab65a29e23546aad0281b3aff5eb", r8, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r9, 0xc0383e04, &(0x7f0000000100)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.032229991s ago: executing program 6 (id=1650): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x18, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) flock(r3, 0x2) r4 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r4, 0x2) r5 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r5, 0x1) close_range(r2, 0xffffffffffffffff, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x501801, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)=""/80, 0x46, 0x50, 0x0, 0x5, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000400)=ANY=[@ANYBLOB="1e00000000000000030000000100000008500000", @ANYRES32=r6, @ANYBLOB="fa0400"/20, @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="0400000002000000030000000d000000000000000000000000000000022f5eceb9586dcbd39004dae046b73a985c656f37d2a1996634daff56"], 0x50) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/12], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x31, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x4) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x4010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) 386.019752ms ago: executing program 5 (id=1651): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xd, 0x3}, {}, {0xffff}}}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000640)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {}, {0x1c, 0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x854, 0x2, [@TCA_ROUTE4_POLICE={0x848, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x57, 0x4, 0xe488, 0x5, 0xe, 0x8, 0xedde, 0x7, 0xd9, 0x2, 0x2, 0x4, 0xebd4, 0x1, 0x0, 0x8, 0x4, 0x3, 0x800000, 0x4, 0x80000001, 0x20000, 0x5, 0x8, 0x0, 0x81, 0xfffffffb, 0x10, 0x1, 0xc, 0x1, 0x81, 0x7, 0x4, 0x7, 0x6, 0x2ce4, 0x6, 0x401, 0x6, 0x8, 0x6, 0x1, 0x5d7e922f, 0x1, 0x81, 0xa9, 0x10001, 0x8, 0x551, 0x7, 0x20, 0x4, 0x4, 0x4, 0x9, 0x9, 0xc94, 0x5, 0x5, 0x7, 0x1, 0x7fff, 0x4, 0x2, 0x5e474286, 0x4, 0x2, 0x4, 0xa, 0x6, 0x9, 0xff, 0x0, 0x2ef6, 0xed8a, 0x5, 0x0, 0xadc3, 0x8, 0x40, 0x1ff, 0x8000, 0x401, 0xe92, 0x0, 0xfffffffe, 0xf5, 0x800, 0xb, 0x10000, 0x6, 0x8001, 0x3, 0xb, 0x5, 0x8f5d, 0xfffffe01, 0x9b4, 0x80000001, 0x3ff, 0xc, 0x58c6, 0xffff1876, 0x4, 0xfffffff9, 0xff, 0x6, 0x1, 0x4, 0x80, 0x8, 0xc9, 0x1, 0x95ca, 0xffffff31, 0x7, 0x81, 0x7, 0x7, 0x4588, 0x2, 0x4, 0x4, 0x6, 0x7fffffff, 0x7a2e, 0x80000001, 0x7, 0x380, 0x8, 0x8, 0x8, 0x2, 0x7, 0x1, 0x8, 0x100, 0x0, 0x7, 0xfffffff7, 0x1, 0xf3c, 0x3, 0xd, 0x3fe9, 0xb6, 0x6, 0x2, 0x3, 0x0, 0x6, 0x7, 0x5, 0xafb9, 0x6, 0x0, 0x3, 0x6, 0xb3, 0x6, 0xfffff001, 0x5, 0x6, 0x2, 0x8, 0x0, 0x0, 0xfffffff9, 0x80000001, 0xc, 0x3, 0x2, 0x6f3, 0x10000, 0x7, 0x2, 0x8, 0x5, 0xb, 0x1, 0x5, 0x0, 0x4, 0xfffffff9, 0x16f, 0x101, 0x4, 0xffffff25, 0x6, 0x400, 0x7fff, 0xf, 0x3, 0x5, 0x4, 0x6, 0x0, 0xfffffb02, 0x7, 0xc, 0x2e8, 0x5, 0x5, 0x100, 0x7f, 0xfffffffa, 0x7, 0x3b, 0x100, 0x400, 0x0, 0xfffffff9, 0x1, 0xe63, 0x4, 0x1, 0xccfc, 0x8, 0x7, 0xc7, 0x1, 0x7ff, 0x10, 0x8, 0x4, 0x10, 0x80000000, 0xa9d4, 0x1, 0x3, 0xc, 0xf, 0x1, 0x0, 0xf, 0x80000001, 0x6, 0x7f, 0x4, 0xfffffffc, 0x8, 0x0, 0x2, 0x0, 0x5, 0x6, 0x4, 0x80, 0x7, 0x8, 0x8, 0x10000, 0x80000001, 0x7, 0x4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2f9, 0x1, 0x20005, 0x0, 0x3, {0x0, 0x0, 0x9, 0xffff, 0x318, 0x5654}, {0xf, 0x1, 0xde7f, 0x9, 0x9, 0x100}, 0x6, 0x8, 0x4}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x80, 0x4, 0x0, 0x200, 0x8, 0x9, 0x9, 0x5, 0x10001, 0x2, 0x6, 0x9, 0x8, 0x0, 0xa, 0xb, 0xb, 0x2, 0x8, 0xffffffff, 0x0, 0x4, 0x2, 0x8000, 0xc9, 0x5, 0x3, 0x3, 0x101, 0x2, 0xbb4, 0xff, 0x0, 0x6, 0x4, 0x9, 0x200, 0x4, 0x7, 0x1, 0xffffffff, 0xfffffffb, 0xa647, 0x63, 0x67, 0x80, 0x0, 0x4, 0x1, 0x0, 0x0, 0x2c4a, 0x1, 0x9, 0x80000000, 0x7, 0xbe7, 0xfffffffc, 0x2, 0xd, 0x9, 0x7fff, 0x3, 0x1ff, 0x0, 0x2, 0x2, 0x7585, 0x4, 0xc, 0x400, 0x51, 0xf0, 0x6, 0x8, 0x3, 0x4, 0xc, 0x18f3, 0x6, 0x7, 0xffff366f, 0x9, 0x0, 0x2216, 0x2, 0x3, 0x9, 0x1, 0x5d69fdd4, 0x5, 0x8, 0x10000, 0x6, 0x6, 0x2, 0x80, 0x9, 0xa0, 0x4, 0x8, 0x7, 0x2c, 0x10, 0x8, 0x9, 0x5, 0x0, 0x2, 0x2, 0x7f, 0xc6, 0x80, 0x6, 0x1, 0xfffffffe, 0xfe40, 0x8, 0x5, 0x0, 0x800, 0x10, 0x2, 0x7, 0x80, 0x5, 0x7, 0x4, 0x1000, 0x7, 0x1, 0x1, 0x750, 0x3, 0x6, 0x9, 0x2, 0x4, 0x8, 0x8, 0x4, 0x8, 0x2, 0x6, 0x9, 0x4, 0x101, 0x5, 0x7, 0x7f, 0x4, 0x7, 0x8, 0x1, 0x3, 0x0, 0xb, 0x2, 0xfffffff9, 0xffffffff, 0x101, 0x35, 0x3, 0x8001, 0x7f, 0x42a, 0x6, 0x233, 0x1, 0x0, 0x6, 0x3, 0x8, 0x6, 0x83, 0xf2d2, 0x8, 0x10, 0x8, 0x3, 0x6, 0x3, 0xbfe, 0x9, 0xe0, 0x0, 0x3, 0x8000, 0x1, 0x6, 0x0, 0x7f, 0x40, 0x101, 0x400, 0xb084, 0x7, 0x81, 0x400, 0x9, 0x9, 0x0, 0x28e3, 0x8000, 0xb9, 0x9a, 0x45, 0x9, 0x914b, 0xd, 0x1, 0x7fff, 0x81, 0x5, 0x8, 0x3, 0x8, 0x2, 0x2, 0xc, 0x129, 0x4, 0xa, 0x3, 0x6, 0x70, 0x6, 0x2, 0x9, 0x2, 0x9, 0x3, 0x7fff, 0x2, 0x3, 0xa, 0x0, 0x6ab9, 0xfffff817, 0x8, 0x6, 0x1, 0x10001, 0x2, 0xfff, 0x7ff, 0x0, 0xfa81, 0x3, 0x10000, 0x6, 0x8, 0xffffff46, 0xdfc7, 0x5, 0x2]}]}, @TCA_ROUTE4_TO={0x8, 0x2, 0x9c}]}}]}, 0x884}}, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000140), 0xa0000, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) chroot(0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000000)='asymmetric\x00', 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r6, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x4, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0x0) 0s ago: executing program 0 (id=1652): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @multicast1, @multicast2}, &(0x7f0000000280)=0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000031889d5c7bb919944c69726b0f3612b180e548fba63722231fbb17346e177e3cfaedebab383620efc0a0"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) close(0xffffffffffffffff) setsockopt$bt_l2cap_L2CAP_LM(r5, 0x6, 0x3, &(0x7f0000000140)=0xc, 0x4) connect$bt_l2cap(r5, &(0x7f0000000180)={0x1f, 0x0, @fixed}, 0xe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r6, &(0x7f0000000180), 0x400008a, 0x0) getpid() sendmsg$key(r6, &(0x7f0000000140)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000080)={0x0, "4fcb813dd28b42bee2b094a3de6dbfd30a74457bcd1cfd5feffe5c019f45d57f", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r8, 0xc0303e03, &(0x7f0000000180)={"000000149c0286e08ffad43c40fc0a000000ab65a29e23546aad0281b3aff5eb", r8}) kernel console output (not intermixed with test programs): ted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 436.213048][ T29] audit: type=1800 audit(1731037817.047:159): pid=11270 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1266" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=18 res=0 errno=0 [ 436.262648][T11284] fuse: Bad value for 'fd' [ 436.386324][T11279] NILFS (nullb0): couldn't find nilfs on the device [ 436.394731][T11279] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1268'. [ 436.412089][T11279] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1268'. [ 436.421580][T11279] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1268'. [ 436.486476][T11287] NILFS (nullb0): couldn't find nilfs on the device [ 436.494486][T11287] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1271'. [ 436.513257][T11287] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1271'. [ 436.522893][T11287] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1271'. [ 436.553056][ T5833] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 436.658156][T11293] loop5: detected capacity change from 0 to 512 [ 436.966178][T11293] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 437.095334][T11293] EXT4-fs (loop5): 1 truncate cleaned up [ 437.103123][T11293] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 437.142864][ T29] audit: type=1800 audit(1731037817.977:160): pid=11293 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1273" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop5" ino=18 res=0 errno=0 [ 437.206633][T11297] fuse: Bad value for 'fd' [ 437.396144][T11296] NILFS (nullb0): couldn't find nilfs on the device [ 437.404423][T11296] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1272'. [ 437.531714][ T7310] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.860287][T11308] tipc: Enabling of bearer rejected, already enabled [ 437.890209][T11308] mkiss: ax0: crc mode is auto. [ 438.632827][T11318] fuse: Bad value for 'fd' [ 438.920512][T11323] NILFS (nullb0): couldn't find nilfs on the device [ 438.932929][T11323] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1279'. [ 439.027573][T11325] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1279'. [ 439.344947][ T25] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 439.751057][T11333] loop5: detected capacity change from 0 to 512 [ 439.806034][T11333] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 439.914960][T11333] EXT4-fs (loop5): 1 truncate cleaned up [ 439.922849][T11333] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 439.963722][ T29] audit: type=1800 audit(1731037820.787:161): pid=11333 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1282" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop5" ino=18 res=0 errno=0 [ 440.114147][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 440.120510][ T25] usb 1-1: config 0 has an invalid interface number: 104 but max is 1 [ 440.128745][ T25] usb 1-1: config 0 has an invalid interface number: 104 but max is 1 [ 440.136954][ T25] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 440.154825][ T25] usb 1-1: config 0 has no interface number 0 [ 440.160939][ T25] usb 1-1: config 0 interface 104 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 440.170836][ T25] usb 1-1: config 0 interface 104 has no altsetting 1 [ 440.179254][ T25] usb 1-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 7.36 [ 440.188873][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.197645][ T25] usb 1-1: Product: syz [ 440.201821][ T25] usb 1-1: Manufacturer: syz [ 440.214911][ T25] usb 1-1: SerialNumber: syz [ 440.220677][ T25] usb 1-1: config 0 descriptor?? [ 440.251291][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.257659][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.440169][ T25] asix 1-1:0.104 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 440.460684][ T25] asix 1-1:0.104: probe with driver asix failed with error -71 [ 440.487895][ T25] usb 1-1: USB disconnect, device number 13 [ 440.487912][ T7310] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.576718][T11342] fuse: Bad value for 'fd' [ 440.908950][T11347] NILFS (nullb0): couldn't find nilfs on the device [ 440.917014][T11347] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1285'. [ 441.497773][T11327] loop4: detected capacity change from 0 to 40427 [ 441.515774][T11327] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x1fffff [ 441.524436][T11327] F2FS-fs (loop4): Unrecognized mount option "noail" or missing value [ 441.792037][T11353] loop3: detected capacity change from 0 to 512 [ 442.131394][T11353] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 442.156085][T11356] overlayfs: failed to resolve './file0': -2 [ 442.199575][T11358] fuse: Bad value for 'fd' [ 442.214209][T11353] EXT4-fs (loop3): 1 truncate cleaned up [ 442.221693][T11353] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 442.267316][ T29] audit: type=1800 audit(1731037823.077:162): pid=11352 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1286" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=18 res=0 errno=0 [ 442.587209][T11368] __nla_validate_parse: 2 callbacks suppressed [ 442.587227][T11368] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1289'. [ 443.749966][T11371] tipc: Enabling of bearer rejected, already enabled [ 443.767738][T11371] mkiss: ax0: crc mode is auto. [ 443.782589][T11367] NILFS (nullb0): couldn't find nilfs on the device [ 444.390869][ T5841] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.574064][T11380] netlink: 87 bytes leftover after parsing attributes in process `syz.4.1297'. [ 444.736858][T11388] loop3: detected capacity change from 0 to 512 [ 444.785114][T11388] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 445.628008][T11392] fuse: Bad value for 'fd' [ 446.033299][T11400] NILFS (nullb0): couldn't find nilfs on the device [ 446.043914][T11400] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1298'. [ 446.079380][T11400] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1298'. [ 446.090185][T11400] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1298'. [ 446.373665][T11388] EXT4-fs (loop3): 1 truncate cleaned up [ 446.381490][T11388] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 446.483462][ T29] audit: type=1800 audit(1731037827.247:163): pid=11388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1295" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=18 res=0 errno=0 [ 446.686742][ T5841] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 446.769158][T11409] fuse: Bad value for 'fd' [ 446.775364][ T765] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 447.336778][ T765] usb 1-1: Using ep0 maxpacket: 16 [ 447.343412][ T765] usb 1-1: config 0 has an invalid interface number: 104 but max is 1 [ 447.352176][ T765] usb 1-1: config 0 has an invalid interface number: 104 but max is 1 [ 447.360442][ T765] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 447.369346][ T765] usb 1-1: config 0 has no interface number 0 [ 447.375478][ T765] usb 1-1: config 0 interface 104 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 447.385400][ T765] usb 1-1: config 0 interface 104 has no altsetting 1 [ 447.405829][ T765] usb 1-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 7.36 [ 447.414916][ T765] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.422910][ T765] usb 1-1: Product: syz [ 447.436676][ T765] usb 1-1: Manufacturer: syz [ 447.441287][ T765] usb 1-1: SerialNumber: syz [ 447.475354][ T765] usb 1-1: config 0 descriptor?? [ 447.558847][T11405] loop1: detected capacity change from 0 to 40427 [ 447.587773][T11405] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x1fffff [ 447.598056][T11405] F2FS-fs (loop1): Unrecognized mount option "noail" or missing value [ 447.642469][T11417] fuse: Bad value for 'fd' [ 447.764869][ T765] asix 1-1:0.104 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 447.775194][ T765] asix 1-1:0.104: probe with driver asix failed with error -71 [ 447.791235][ T765] usb 1-1: USB disconnect, device number 14 [ 447.866348][T11423] NILFS (nullb0): couldn't find nilfs on the device [ 447.878094][T11423] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.1305'. [ 448.119169][T11424] loop3: detected capacity change from 0 to 512 [ 448.157919][T11424] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 448.404934][T11424] EXT4-fs (loop3): 1 truncate cleaned up [ 448.412664][T11424] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 448.453957][ T29] audit: type=1800 audit(1731037829.287:164): pid=11424 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1306" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=18 res=0 errno=0 [ 448.628041][ T5841] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.675554][T11427] NILFS (nullb0): couldn't find nilfs on the device [ 448.739279][T11421] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1304'. [ 449.110593][T11436] tipc: Enabling of bearer rejected, already enabled [ 449.167115][T11435] fuse: Bad value for 'fd' [ 449.298393][T11427] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1304'. [ 449.414334][T11440] NILFS (nullb0): couldn't find nilfs on the device [ 449.435945][T11440] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1309'. [ 449.541388][T11442] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1309'. [ 450.493947][T11457] fuse: Bad value for 'fd' [ 450.609145][T11458] tipc: Enabling of bearer rejected, already enabled [ 450.622070][T11458] mkiss: ax0: crc mode is auto. [ 450.774195][T11462] NILFS (nullb0): couldn't find nilfs on the device [ 450.782189][T11462] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1315'. [ 450.799517][T11462] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1315'. [ 450.809214][T11462] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1315'. [ 451.400771][T11463] loop4: detected capacity change from 0 to 512 [ 451.438580][T11463] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 451.592260][T11463] EXT4-fs (loop4): 1 truncate cleaned up [ 451.600003][T11463] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 451.737822][ T29] audit: type=1800 audit(1731037832.567:165): pid=11467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1314" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=18 res=0 errno=0 [ 451.928902][ T5834] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.934977][T11469] tipc: Enabling of bearer rejected, already enabled [ 451.999965][T11469] mkiss: ax0: crc mode is auto. [ 452.021219][T11476] overlayfs: failed to resolve './file0': -2 [ 452.107053][T11477] FAULT_INJECTION: forcing a failure. [ 452.107053][T11477] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 452.130328][T11477] CPU: 0 UID: 0 PID: 11477 Comm: syz.1.1317 Not tainted 6.12.0-rc6-next-20241107-syzkaller #0 [ 452.140590][T11477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 452.150656][T11477] Call Trace: [ 452.153938][T11477] [ 452.156876][T11477] dump_stack_lvl+0x241/0x360 [ 452.161576][T11477] ? __pfx_dump_stack_lvl+0x10/0x10 [ 452.166794][T11477] ? __pfx__printk+0x10/0x10 [ 452.171398][T11477] ? lock_acquire+0xe3/0x550 [ 452.176003][T11477] ? __pfx_lock_release+0x10/0x10 [ 452.181042][T11477] ? aa_file_perm+0x137/0xf50 [ 452.185739][T11477] ? aa_file_perm+0x3ef/0xf50 [ 452.190422][T11477] should_fail_ex+0x3b0/0x4e0 [ 452.195128][T11477] _copy_from_user+0x2f/0xc0 [ 452.199720][T11477] kstrtouint_from_user+0xc6/0x190 [ 452.204839][T11477] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 452.210567][T11477] ? __pfx_lock_acquire+0x10/0x10 [ 452.215600][T11477] ? __pfx___might_resched+0x10/0x10 [ 452.220899][T11477] proc_fail_nth_write+0xaa/0x2d0 [ 452.225931][T11477] ? common_file_perm+0x1a6/0x210 [ 452.230961][T11477] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 452.236598][T11477] ? bpf_lsm_file_permission+0x9/0x10 [ 452.241978][T11477] ? preempt_count_add+0x93/0x190 [ 452.247011][T11477] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 452.252661][T11477] vfs_write+0x2a3/0xd30 [ 452.256927][T11477] ? __pfx_vfs_write+0x10/0x10 [ 452.261712][T11477] ? __fget_files+0x2a/0x410 [ 452.266313][T11477] ? __fget_files+0x395/0x410 [ 452.271004][T11477] ? __fget_files+0x2a/0x410 [ 452.275609][T11477] ksys_write+0x18f/0x2b0 [ 452.279941][T11477] ? __pfx_ksys_write+0x10/0x10 [ 452.284779][T11477] ? rcu_is_watching+0x15/0xb0 [ 452.289543][T11477] ? rcu_is_watching+0x15/0xb0 [ 452.294295][T11477] do_syscall_64+0xf3/0x230 [ 452.298784][T11477] ? clear_bhb_loop+0x35/0x90 [ 452.303449][T11477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.309335][T11477] RIP: 0033:0x7fb320d7d1ff [ 452.313738][T11477] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 452.333331][T11477] RSP: 002b:00007fb31f1f6030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 452.341732][T11477] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb320d7d1ff [ 452.349690][T11477] RDX: 0000000000000001 RSI: 00007fb31f1f60a0 RDI: 0000000000000005 [ 452.357648][T11477] RBP: 00007fb31f1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 452.365606][T11477] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 452.373563][T11477] R13: 0000000000000000 R14: 00007fb320f36058 R15: 00007ffc2f93cc08 [ 452.381530][T11477] [ 452.530174][T11484] loop0: detected capacity change from 0 to 512 [ 452.539620][T11484] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 452.667926][T11484] EXT4-fs (loop0): 1 truncate cleaned up [ 452.676529][T11484] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 452.722749][ T29] audit: type=1800 audit(1731037833.547:166): pid=11484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1319" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=18 res=0 errno=0 [ 453.230397][T11495] fuse: Bad value for 'fd' [ 453.260916][T11496] loop4: detected capacity change from 0 to 1024 [ 453.465436][T11498] tipc: Enabling of bearer rejected, already enabled [ 453.637755][T11500] NILFS (nullb0): couldn't find nilfs on the device [ 453.646708][T11500] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1323'. [ 453.670538][T11500] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1323'. [ 454.205252][T11496] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 454.277869][ T5829] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 454.323071][T11506] fuse: Bad value for 'fd' [ 454.596322][T11513] NILFS (nullb0): couldn't find nilfs on the device [ 454.604329][T11513] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1327'. [ 454.622138][T11513] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1327'. [ 454.631741][T11513] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1327'. [ 455.144748][T11509] fuse: Bad value for 'fd' [ 455.345661][T11524] fuse: Bad value for 'fd' [ 455.417932][T11526] loop1: detected capacity change from 0 to 512 [ 455.703762][T11528] NILFS (nullb0): couldn't find nilfs on the device [ 455.714375][T11528] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1330'. [ 455.749966][T11528] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1330'. [ 455.760675][T11528] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.1330'. [ 455.959714][T11526] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 456.198420][T11526] EXT4-fs (loop1): 1 truncate cleaned up [ 456.260214][T11526] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 456.314321][T11537] NILFS (nullb0): couldn't find nilfs on the device [ 456.334003][ T29] audit: type=1800 audit(1731037837.137:167): pid=11525 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1329" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=18 res=0 errno=0 [ 456.462446][T11537] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1324'. [ 456.535208][T11540] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1324'. [ 456.560899][ T5833] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.682218][T11547] loop4: detected capacity change from 0 to 512 [ 457.775414][T11547] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 457.816716][T11547] EXT4-fs (loop4): 1 truncate cleaned up [ 457.824447][T11547] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 458.006916][ T29] audit: type=1800 audit(1731037838.697:168): pid=11547 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1334" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=18 res=0 errno=0 [ 458.288976][ T5834] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 458.617609][T11558] tipc: Enabling of bearer rejected, already enabled [ 459.771942][T11566] fuse: Bad value for 'fd' [ 460.069357][T11580] NILFS (nullb0): couldn't find nilfs on the device [ 460.077387][T11580] __nla_validate_parse: 1 callbacks suppressed [ 460.077402][T11580] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1341'. [ 460.100971][T11580] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1341'. [ 460.110534][T11580] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1341'. [ 460.619361][T11583] fuse: Bad value for 'fd' [ 460.848397][T11588] NILFS (nullb0): couldn't find nilfs on the device [ 460.859029][T11588] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1343'. [ 460.895810][T11588] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1343'. [ 460.906644][T11588] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1343'. [ 463.577122][ T5836] Bluetooth: hci4: command 0x040f tx timeout [ 463.968375][T11595] loop5: detected capacity change from 0 to 512 [ 463.980214][T11601] loop0: detected capacity change from 0 to 512 [ 464.225273][T11601] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 464.226635][T11595] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 464.276109][T11601] EXT4-fs (loop0): 1 truncate cleaned up [ 464.280743][T11595] EXT4-fs (loop5): 1 truncate cleaned up [ 464.282366][T11601] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 464.300961][T11595] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 464.346974][ T29] audit: type=1800 audit(1731037845.167:169): pid=11596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1347" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=18 res=0 errno=0 [ 464.395493][ T29] audit: type=1800 audit(1731037845.167:170): pid=11595 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1345" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop5" ino=18 res=0 errno=0 [ 464.509787][T11610] tipc: Enabling of bearer rejected, already enabled [ 464.543031][T11610] mkiss: ax0: crc mode is auto. [ 464.883494][ T7310] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.884601][ T5829] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.998693][T11616] loop0: detected capacity change from 0 to 512 [ 465.009102][T11616] EXT4-fs (loop0): inodes count not valid: 2 vs 32 [ 465.961668][T11626] fuse: Bad value for 'fd' [ 466.102602][T11631] FAULT_INJECTION: forcing a failure. [ 466.102602][T11631] name failslab, interval 1, probability 0, space 0, times 0 [ 466.125473][T11631] CPU: 0 UID: 0 PID: 11631 Comm: syz.3.1357 Not tainted 6.12.0-rc6-next-20241107-syzkaller #0 [ 466.128721][T11630] fuse: Bad value for 'fd' [ 466.135718][T11631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 466.135733][T11631] Call Trace: [ 466.135740][T11631] [ 466.135748][T11631] dump_stack_lvl+0x241/0x360 [ 466.135775][T11631] ? __pfx_dump_stack_lvl+0x10/0x10 [ 466.135796][T11631] ? __pfx__printk+0x10/0x10 [ 466.135818][T11631] ? __pfx___might_resched+0x10/0x10 [ 466.176181][T11631] should_fail_ex+0x3b0/0x4e0 [ 466.180876][T11631] should_failslab+0xac/0x100 [ 466.185569][T11631] kmem_cache_alloc_node_noprof+0x77/0x380 [ 466.191391][T11631] ? __alloc_skb+0x1c3/0x440 [ 466.195997][T11631] __alloc_skb+0x1c3/0x440 [ 466.200425][T11631] ? __pfx___netlink_lookup+0x10/0x10 [ 466.205809][T11631] ? __pfx___alloc_skb+0x10/0x10 [ 466.210757][T11631] ? netlink_autobind+0xd6/0x2f0 [ 466.215703][T11631] ? netlink_autobind+0x2b0/0x2f0 [ 466.220738][T11631] netlink_sendmsg+0x638/0xcb0 [ 466.225516][T11631] ? __pfx_netlink_sendmsg+0x10/0x10 [ 466.230822][T11631] ? aa_sock_msg_perm+0x91/0x160 [ 466.235778][T11631] ? __pfx_netlink_sendmsg+0x10/0x10 [ 466.241071][T11631] __sock_sendmsg+0x221/0x270 [ 466.245755][T11631] ____sys_sendmsg+0x52a/0x7e0 [ 466.250878][T11631] ? __pfx_____sys_sendmsg+0x10/0x10 [ 466.256175][T11631] ? __fget_files+0x2a/0x410 [ 466.260774][T11631] ? __fget_files+0x2a/0x410 [ 466.265425][T11631] __sys_sendmsg+0x269/0x350 [ 466.270032][T11631] ? __pfx_lock_release+0x10/0x10 [ 466.275082][T11631] ? __pfx___sys_sendmsg+0x10/0x10 [ 466.278505][T11635] NILFS (nullb0): couldn't find nilfs on the device [ 466.280198][T11631] ? __pfx_vfs_write+0x10/0x10 [ 466.291528][T11631] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 466.297848][T11631] ? rcu_is_watching+0x15/0xb0 [ 466.302606][T11631] ? rcu_is_watching+0x15/0xb0 [ 466.307358][T11631] do_syscall_64+0xf3/0x230 [ 466.311846][T11631] ? clear_bhb_loop+0x35/0x90 [ 466.316515][T11631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.322401][T11631] RIP: 0033:0x7f235217e719 [ 466.326803][T11631] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 466.346400][T11631] RSP: 002b:00007f2352eb4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 466.354801][T11631] RAX: ffffffffffffffda RBX: 00007f2352335f80 RCX: 00007f235217e719 [ 466.362761][T11631] RDX: 0000000000044000 RSI: 0000000020000140 RDI: 0000000000000003 [ 466.370718][T11631] RBP: 00007f2352eb4090 R08: 0000000000000000 R09: 0000000000000000 [ 466.378675][T11631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 466.386632][T11631] R13: 0000000000000000 R14: 00007f2352335f80 R15: 00007fff211798a8 [ 466.394594][T11631] [ 466.600044][T11636] NILFS (nullb0): couldn't find nilfs on the device [ 466.600682][T11627] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1356'. [ 466.619126][T11636] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1358'. [ 466.624187][T11627] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1356'. [ 466.636093][T11636] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1358'. [ 466.638617][T11627] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1356'. [ 466.646563][T11636] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1358'. [ 467.271236][T11645] FAULT_INJECTION: forcing a failure. [ 467.271236][T11645] name failslab, interval 1, probability 0, space 0, times 0 [ 467.284079][T11645] CPU: 1 UID: 0 PID: 11645 Comm: syz.5.1362 Not tainted 6.12.0-rc6-next-20241107-syzkaller #0 [ 467.294331][T11645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 467.304393][T11645] Call Trace: [ 467.307673][T11645] [ 467.310607][T11645] dump_stack_lvl+0x241/0x360 [ 467.315299][T11645] ? __pfx_dump_stack_lvl+0x10/0x10 [ 467.320509][T11645] ? __pfx__printk+0x10/0x10 [ 467.325115][T11645] ? __pfx___might_resched+0x10/0x10 [ 467.330413][T11645] ? rcu_is_watching+0x15/0xb0 [ 467.335183][T11645] should_fail_ex+0x3b0/0x4e0 [ 467.339875][T11645] should_failslab+0xac/0x100 [ 467.344561][T11645] __kmalloc_noprof+0xdd/0x4c0 [ 467.349335][T11645] ? __netlink_dump_start+0x119/0x790 [ 467.354719][T11645] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 467.360973][T11645] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 467.367058][T11645] ? __pfx___netlink_lookup+0x10/0x10 [ 467.372449][T11645] genl_start+0x182/0x6d0 [ 467.376791][T11645] __netlink_dump_start+0x45c/0x790 [ 467.382019][T11645] genl_rcv_msg+0x88c/0xec0 [ 467.386534][T11645] ? __pfx_genl_rcv_msg+0x10/0x10 [ 467.391560][T11645] ? __dev_queue_xmit+0x1758/0x3f30 [ 467.396771][T11645] ? __pfx_genl_start+0x10/0x10 [ 467.401622][T11645] ? __pfx_genl_dumpit+0x10/0x10 [ 467.406560][T11645] ? __pfx_genl_done+0x10/0x10 [ 467.411325][T11645] ? rcu_is_watching+0x15/0xb0 [ 467.416095][T11645] ? lock_acquire+0xe3/0x550 [ 467.420684][T11645] ? __pfx___dev_queue_xmit+0x10/0x10 [ 467.426068][T11645] ? __pfx_lock_acquire+0x10/0x10 [ 467.431098][T11645] ? __pfx_devlink_nl_health_reporter_dump_get_dumpit+0x10/0x10 [ 467.438736][T11645] ? __pfx___might_resched+0x10/0x10 [ 467.444029][T11645] netlink_rcv_skb+0x1e3/0x430 [ 467.449090][T11645] ? __pfx_genl_rcv_msg+0x10/0x10 [ 467.454116][T11645] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 467.459407][T11645] ? lock_release+0xbf/0xa30 [ 467.464007][T11645] ? __netlink_deliver_tap+0x77e/0x7c0 [ 467.469477][T11645] genl_rcv+0x28/0x40 [ 467.473459][T11645] netlink_unicast+0x7f6/0x990 [ 467.478228][T11645] ? __pfx_netlink_unicast+0x10/0x10 [ 467.483513][T11645] ? __virt_addr_valid+0x183/0x530 [ 467.488631][T11645] ? __check_object_size+0x48e/0x900 [ 467.493923][T11645] netlink_sendmsg+0x8e4/0xcb0 [ 467.498699][T11645] ? __pfx_netlink_sendmsg+0x10/0x10 [ 467.503994][T11645] ? aa_sock_msg_perm+0x91/0x160 [ 467.508946][T11645] ? __pfx_netlink_sendmsg+0x10/0x10 [ 467.514250][T11645] __sock_sendmsg+0x221/0x270 [ 467.518933][T11645] ____sys_sendmsg+0x52a/0x7e0 [ 467.523717][T11645] ? __pfx_____sys_sendmsg+0x10/0x10 [ 467.529015][T11645] ? __fget_files+0x2a/0x410 [ 467.533614][T11645] ? __fget_files+0x2a/0x410 [ 467.538211][T11645] __sys_sendmsg+0x269/0x350 [ 467.542815][T11645] ? __pfx_lock_release+0x10/0x10 [ 467.547848][T11645] ? __pfx___sys_sendmsg+0x10/0x10 [ 467.553408][T11645] ? __pfx_vfs_write+0x10/0x10 [ 467.558190][T11645] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 467.564521][T11645] ? rcu_is_watching+0x15/0xb0 [ 467.569292][T11645] ? rcu_is_watching+0x15/0xb0 [ 467.574064][T11645] do_syscall_64+0xf3/0x230 [ 467.578576][T11645] ? clear_bhb_loop+0x35/0x90 [ 467.583262][T11645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.585551][T11651] loop0: detected capacity change from 0 to 512 [ 467.589156][T11645] RIP: 0033:0x7ffa0e37e719 [ 467.599795][T11645] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 467.619407][T11645] RSP: 002b:00007ffa0f173038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 467.627833][T11645] RAX: ffffffffffffffda RBX: 00007ffa0e535f80 RCX: 00007ffa0e37e719 [ 467.635813][T11645] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 467.643790][T11645] RBP: 00007ffa0f173090 R08: 0000000000000000 R09: 0000000000000000 [ 467.649306][T11634] loop4: detected capacity change from 0 to 32768 [ 467.652188][T11645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 467.658948][T11634] XFS: noikeep mount option is deprecated. [ 467.666520][T11645] R13: 0000000000000000 R14: 00007ffa0e535f80 R15: 00007ffe556607e8 [ 467.666541][T11645] [ 467.688379][T11651] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 467.726390][T11651] EXT4-fs (loop0): 1 truncate cleaned up [ 467.733128][T11651] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 467.754850][ T9919] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 467.819729][T11663] loop1: detected capacity change from 0 to 512 [ 467.829337][T11663] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 467.856915][ T29] audit: type=1800 audit(1731037848.637:171): pid=11650 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1363" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=18 res=0 errno=0 [ 467.914987][ T9919] usb 4-1: Using ep0 maxpacket: 16 [ 467.957231][T11634] XFS (loop4): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 467.972615][T11663] EXT4-fs (loop1): 1 truncate cleaned up [ 467.980438][T11663] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 468.059128][ T9919] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 468.144361][ T29] audit: type=1800 audit(1731037848.847:172): pid=11663 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1361" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=18 res=0 errno=0 [ 468.208110][ T9919] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 468.218949][ T9919] usb 4-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 468.221927][ T5833] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.239401][T11634] XFS (loop4): Ending clean mount [ 468.250839][T11634] XFS (loop4): Quotacheck needed: Please wait. [ 468.263090][ T5829] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.282195][T11634] XFS (loop4): Quotacheck: Done. [ 468.300147][ T9919] usb 4-1: config 0 interface 0 has no altsetting 0 [ 468.306890][ T9919] usb 4-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 468.315991][ T9919] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.328986][ T9919] usb 4-1: config 0 descriptor?? [ 468.359468][T11671] fuse: Bad value for 'user_id' [ 468.364356][T11671] fuse: Bad value for 'user_id' [ 468.425183][ T5834] XFS (loop4): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 469.186877][ T9919] hid-generic 0003:045E:05DA.0001: ignoring exceeding usage max [ 469.196801][ T9919] hid-generic 0003:045E:05DA.0001: hidraw0: USB HID v0.00 Device [HID 045e:05da] on usb-dummy_hcd.3-1/input0 [ 469.641618][T11688] tipc: Enabling of bearer rejected, already enabled [ 469.656208][T11688] mkiss: ax0: crc mode is auto. [ 470.076614][T11692] fuse: Bad value for 'fd' [ 470.356367][T11697] NILFS (nullb0): couldn't find nilfs on the device [ 470.368826][T11697] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1371'. [ 470.541627][T11700] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.1371'. [ 470.555181][T11701] NILFS (nullb0): couldn't find nilfs on the device [ 470.570420][T11694] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1371'. [ 470.581950][T11699] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1372'. [ 470.743780][T11426] usb 4-1: USB disconnect, device number 10 [ 470.788070][T11705] fuse: Bad value for 'fd' [ 471.033005][T11709] NILFS (nullb0): couldn't find nilfs on the device [ 471.958733][T11716] loop4: detected capacity change from 0 to 512 [ 471.991366][T11716] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 472.158579][T11716] EXT4-fs (loop4): 1 truncate cleaned up [ 472.165731][T11716] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 472.175691][T11690] loop0: detected capacity change from 0 to 40427 [ 472.252840][ T29] audit: type=1800 audit(1731037853.077:173): pid=11716 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1376" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=18 res=0 errno=0 [ 472.383060][T11725] loop3: detected capacity change from 0 to 512 [ 473.346915][T11725] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 473.587952][T11725] EXT4-fs (loop3): 1 truncate cleaned up [ 473.595793][T11725] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 473.684287][ T29] audit: type=1800 audit(1731037854.507:174): pid=11725 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1377" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=18 res=0 errno=0 [ 473.835471][ T5834] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 473.895722][ T5841] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 475.810188][T11730] loop1: detected capacity change from 0 to 32768 [ 475.817254][T11730] XFS: ikeep mount option is deprecated. [ 475.973110][T11730] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 476.111234][T11772] NILFS (nullb0): couldn't find nilfs on the device [ 476.119305][T11772] __nla_validate_parse: 5 callbacks suppressed [ 476.119320][T11772] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1386'. [ 476.143375][T11772] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1386'. [ 476.152976][T11772] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1386'. [ 476.375758][T11774] fuse: Bad value for 'fd' [ 476.472604][T11755] loop3: detected capacity change from 0 to 32768 [ 476.533179][T11730] XFS (loop1): Ending clean mount [ 476.540572][T11730] XFS (loop1): Quotacheck needed: Please wait. [ 476.618172][T11776] NILFS (nullb0): couldn't find nilfs on the device [ 476.628854][T11776] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1387'. [ 476.666350][T11776] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1387'. [ 476.679977][T11776] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1387'. [ 476.710054][T11755] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1385 (11755) [ 476.907706][T11730] XFS (loop1): Quotacheck: Done. [ 476.912742][T11755] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 476.953800][T11755] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 476.962719][T11755] BTRFS info (device loop3): using free-space-tree [ 477.088335][ T5833] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 477.166391][T11791] loop5: detected capacity change from 0 to 512 [ 477.173546][T11791] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 477.387037][T11791] EXT4-fs (loop5): 1 truncate cleaned up [ 477.393306][T11791] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 477.404209][T11755] BTRFS info (device loop3): rebuilding free space tree [ 477.427925][ T29] audit: type=1800 audit(1731037858.267:175): pid=11791 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1390" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop5" ino=18 res=0 errno=0 [ 478.204628][ T5841] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 478.223504][ T7310] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 478.303484][T11808] loop0: detected capacity change from 0 to 40427 [ 478.318931][T11808] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x1fffff [ 478.327551][T11808] F2FS-fs (loop0): Unrecognized mount option "noail" or missing value [ 479.639598][T11832] fuse: Bad value for 'fd' [ 479.924632][T11835] NILFS (nullb0): couldn't find nilfs on the device [ 479.933858][T11835] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1396'. [ 479.957690][T11835] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1396'. [ 479.967830][T11835] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1396'. [ 481.043873][T11850] NILFS (nullb0): couldn't find nilfs on the device [ 481.051995][T11850] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1399'. [ 481.669477][T11856] fuse: Bad value for 'fd' [ 482.087332][T11859] NILFS (nullb0): couldn't find nilfs on the device [ 482.095405][T11859] __nla_validate_parse: 2 callbacks suppressed [ 482.095420][T11859] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1401'. [ 482.118915][T11859] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1401'. [ 482.128581][T11859] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1401'. [ 483.724570][T11874] loop3: detected capacity change from 0 to 512 [ 483.731807][T11874] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 483.785021][T11874] EXT4-fs (loop3): 1 truncate cleaned up [ 483.791597][T11874] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 483.876430][ T29] audit: type=1800 audit(1731037864.697:176): pid=11880 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1405" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=18 res=0 errno=0 [ 484.423719][T11883] tipc: Enabling of bearer rejected, already enabled [ 484.436427][T11883] mkiss: ax0: crc mode is auto. [ 484.916828][ T5841] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 486.633847][T11900] netlink: 'syz.1.1411': attribute type 4 has an invalid length. [ 486.714167][T11894] netlink: 'syz.1.1411': attribute type 4 has an invalid length. [ 486.802567][T11905] fuse: Bad value for 'fd' [ 487.136795][T11916] NILFS (nullb0): couldn't find nilfs on the device [ 487.147295][T11916] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1414'. [ 487.371039][T11914] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1414'. [ 487.383424][T11920] NILFS (nullb0): couldn't find nilfs on the device [ 487.550565][T11923] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1417'. [ 488.134443][T11934] fuse: Bad value for 'fd' [ 488.410937][T11940] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1422'. [ 488.428971][T11940] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1422'. [ 488.438608][T11940] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1422'. [ 488.495933][T11941] tipc: Enabling of bearer rejected, already enabled [ 488.584339][T11941] mkiss: ax0: crc mode is auto. [ 489.733891][T11942] loop1: detected capacity change from 0 to 512 [ 489.878689][T11942] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 490.018726][T11942] EXT4-fs (loop1): 1 truncate cleaned up [ 490.026714][T11942] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 490.059006][ T29] audit: type=1800 audit(1731037870.897:177): pid=11942 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1420" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=18 res=0 errno=0 [ 490.521383][ T5833] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 490.725865][T11953] loop5: detected capacity change from 0 to 1024 [ 490.733681][T11953] EXT4-fs: Ignoring removed oldalloc option [ 490.746659][T11953] EXT4-fs (loop5): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 490.855237][T11961] loop3: detected capacity change from 0 to 512 [ 490.882830][T11961] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 491.029905][T11961] EXT4-fs (loop3): 1 truncate cleaned up [ 491.037835][T11961] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 491.092629][ T29] audit: type=1800 audit(1731037871.917:178): pid=11961 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1426" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=18 res=0 errno=0 [ 491.134191][ C0] vkms_vblank_simulate: vblank timer overrun [ 491.221440][T11953] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 491.336830][ T7310] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 491.357830][T11970] loop1: detected capacity change from 0 to 512 [ 491.452281][T11970] EXT4-fs (loop1): orphan cleanup on readonly fs [ 491.481742][T11970] EXT4-fs warning (device loop1): ext4_enable_quotas:7105: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 491.541785][T11970] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 491.593087][ T5841] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 491.608712][T11970] EXT4-fs error (device loop1): ext4_ext_check_inode:524: inode #13: comm syz.1.1429: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 491.629447][T11955] loop4: detected capacity change from 0 to 40427 [ 491.640818][T11955] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x1fffff [ 491.656195][T11955] F2FS-fs (loop4): Unrecognized mount option "noail" or missing value [ 491.659486][T11970] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.1429: couldn't read orphan inode 13 (err -117) [ 491.683751][T11970] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 492.157801][ T5833] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 492.296856][T11988] loop3: detected capacity change from 0 to 512 [ 492.478734][T11990] tipc: Enabling of bearer rejected, already enabled [ 492.495257][T11990] mkiss: ax0: crc mode is auto. [ 492.711495][T11988] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 494.057369][T11988] EXT4-fs (loop3): 1 truncate cleaned up [ 494.063650][T11988] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 494.088630][ T29] audit: type=1800 audit(1731037874.917:179): pid=11987 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1434" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=18 res=0 errno=0 [ 494.133370][T11996] fuse: Bad value for 'fd' [ 494.233622][ T5841] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 494.403727][T12007] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1436'. [ 494.421109][T12007] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1436'. [ 494.430759][T12007] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1436'. [ 494.698110][T12012] loop4: detected capacity change from 0 to 512 [ 494.774184][T12012] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 494.792300][T12012] ext4 filesystem being mounted at /276/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 494.948091][T12034] loop0: detected capacity change from 0 to 512 [ 495.184616][ T765] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 495.522377][T12034] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 496.277927][T12034] EXT4-fs (loop0): 1 truncate cleaned up [ 496.288035][T12034] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 496.393748][ T29] audit: type=1800 audit(1731037877.217:180): pid=12033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1444" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=18 res=0 errno=0 [ 496.450538][T12042] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1441'. [ 496.524640][ T5829] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 496.570349][T12046] fuse: Bad value for 'fd' [ 496.590738][T12044] loop1: detected capacity change from 0 to 4096 [ 496.609797][T12044] NILFS (loop1): invalid segment: Checksum error in segment payload [ 496.617909][ T765] usb 4-1: Using ep0 maxpacket: 16 [ 496.623169][T12044] NILFS (loop1): trying rollback from an earlier position [ 496.639122][T12044] NILFS (loop1): recovery complete [ 496.684446][T12047] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 496.687779][ T765] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 496.706149][ T765] usb 4-1: New USB device found, idVendor=05ac, idProduct=0272, bcdDevice= 0.00 [ 496.715532][ T765] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.727552][ T765] usb 4-1: config 0 descriptor?? [ 496.839163][T12050] NILFS (nullb0): couldn't find nilfs on the device [ 496.847174][T12050] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1450'. [ 496.864556][T12050] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1450'. [ 496.874124][T12050] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1450'. [ 497.101425][ T765] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input5 [ 497.217788][ T5834] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 497.818217][ T5186] bcm5974 4-1:0.0: could not read from device [ 497.827304][T12058] loop1: detected capacity change from 0 to 1024 [ 497.834996][T12058] EXT4-fs: Ignoring removed mblk_io_submit option [ 497.837057][ T765] usb 4-1: USB disconnect, device number 11 [ 497.881905][T12058] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 497.926725][T12070] loop4: detected capacity change from 0 to 2048 [ 497.950460][T12070] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 498.079317][T12079] fuse: Bad value for 'fd' [ 498.089148][ T29] audit: type=1800 audit(1731037878.917:181): pid=12070 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1456" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 498.364643][T12085] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1459'. [ 498.389535][T12079] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1459'. [ 498.406368][T12079] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1459'. [ 498.651978][T12087] loop5: detected capacity change from 0 to 512 [ 498.940140][T12087] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 499.106916][ T5833] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 499.782970][T11994] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 499.827849][T12087] EXT4-fs (loop5): 1 truncate cleaned up [ 499.837670][T12087] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 499.887871][ T29] audit: type=1800 audit(1731037880.717:182): pid=12086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1460" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop5" ino=18 res=0 errno=0 [ 499.931714][T11994] EXT4-fs (loop4): Remounting filesystem read-only [ 500.071731][T12100] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1462'. [ 500.131726][T12101] syz.0.1462(12101): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 500.244283][ T7310] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 500.346240][ T47] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 500.385585][T12106] fuse: Bad value for 'fd' [ 500.495443][T12104] loop3: detected capacity change from 0 to 2048 [ 500.503924][T12104] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 500.515981][T12104] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 500.540175][ T5834] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 500.551839][ T189] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.619317][T12113] NILFS (nullb0): couldn't find nilfs on the device [ 500.629622][T12113] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1464'. [ 500.665726][T12113] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1464'. [ 500.676502][T12113] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.1464'. [ 500.884823][ T189] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.916376][ T47] usb 2-1: unable to get BOS descriptor or descriptor too short [ 500.925739][ T47] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 500.933266][ T29] audit: type=1804 audit(1731037881.767:183): pid=12114 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1465" name="/newroot/316/file1/file1" dev="loop3" ino=1346 res=1 errno=0 [ 500.969575][ T189] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.974849][ T47] usb 2-1: can't read configurations, error -71 [ 501.045640][ T189] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.170456][ T189] bridge_slave_1: left allmulticast mode [ 501.180818][ T189] bridge_slave_1: left promiscuous mode [ 501.189210][ T189] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.198312][ T189] bridge_slave_0: left allmulticast mode [ 501.206553][T12104] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 501.208306][ T189] bridge_slave_0: left promiscuous mode [ 501.213284][T12104] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 501.219176][ T189] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.302798][T12104] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 501.316429][T12104] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 501.341636][T12104] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 501.342909][ T189] tipc: Resetting bearer [ 501.362900][T12104] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 501.489169][ T189] tipc: Disabling bearer [ 501.749820][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.763584][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.101055][ T189] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 502.111292][ T189] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 502.189406][T12167] loop1: detected capacity change from 0 to 512 [ 502.217016][T12167] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 502.269833][ T189] bond0 (unregistering): Released all slaves [ 502.449287][T12167] EXT4-fs (loop1): 1 truncate cleaned up [ 502.457222][T12167] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 502.497654][ T29] audit: type=1800 audit(1731037883.327:184): pid=12167 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1474" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=18 res=0 errno=0 [ 502.613491][T12172] fuse: Bad value for 'fd' [ 502.743677][ T189] tipc: Left network mode [ 502.836012][T12181] NILFS (nullb0): couldn't find nilfs on the device [ 502.846523][T12181] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1475'. [ 502.881946][T12181] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1475'. [ 502.892850][T12181] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1475'. [ 503.177353][ T5833] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 503.227573][T12104] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 503.263027][T12104] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 503.288569][T12192] loop1: detected capacity change from 0 to 256 [ 503.299453][T12192] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 503.316653][T12192] FAULT_INJECTION: forcing a failure. [ 503.316653][T12192] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 503.330287][T12192] CPU: 0 UID: 0 PID: 12192 Comm: syz.1.1477 Not tainted 6.12.0-rc6-next-20241107-syzkaller #0 [ 503.340542][T12192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 503.350602][T12192] Call Trace: [ 503.353886][T12192] [ 503.356824][T12192] dump_stack_lvl+0x241/0x360 [ 503.361522][T12192] ? __pfx_dump_stack_lvl+0x10/0x10 [ 503.366737][T12192] ? __pfx__printk+0x10/0x10 [ 503.371343][T12192] should_fail_ex+0x3b0/0x4e0 [ 503.376037][T12192] strncpy_from_user+0x36/0x270 [ 503.380902][T12192] getname_flags+0xf1/0x540 [ 503.385421][T12192] user_path_at+0x24/0x60 [ 503.389782][T12192] __se_sys_chdir+0xbc/0x220 [ 503.394386][T12192] ? __pfx___se_sys_chdir+0x10/0x10 [ 503.399600][T12192] ? rcu_is_watching+0x15/0xb0 [ 503.404384][T12192] ? rcu_is_watching+0x15/0xb0 [ 503.409157][T12192] do_syscall_64+0xf3/0x230 [ 503.413653][T12192] ? clear_bhb_loop+0x35/0x90 [ 503.418322][T12192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.424206][T12192] RIP: 0033:0x7fb320d7e719 [ 503.428609][T12192] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 503.448201][T12192] RSP: 002b:00007fb321a9a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000050 [ 503.456602][T12192] RAX: ffffffffffffffda RBX: 00007fb320f35f80 RCX: 00007fb320d7e719 [ 503.464564][T12192] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000200003c0 [ 503.472519][T12192] RBP: 00007fb321a9a090 R08: 0000000000000000 R09: 0000000000000000 [ 503.480478][T12192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 503.488438][T12192] R13: 0000000000000000 R14: 00007fb320f35f80 R15: 00007ffc2f93cc08 [ 503.496402][T12192] [ 503.499531][ T5961] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 503.585253][T12201] fuse: Bad value for 'fd' [ 503.666717][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 503.673987][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 503.682001][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 503.689819][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 503.697315][ T5836] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 503.704543][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 503.880241][T12209] NILFS (nullb0): couldn't find nilfs on the device [ 503.888247][T12209] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1478'. [ 503.905578][T12209] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1478'. [ 503.915122][T12209] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1478'. [ 503.974360][ T5961] usb 6-1: Using ep0 maxpacket: 16 [ 503.983821][ T5961] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 503.995435][ T5961] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 504.011974][ T5961] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 504.023468][ T5961] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.031732][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 504.081532][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 504.101325][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 504.160290][ T189] hsr_slave_0: left promiscuous mode [ 504.261634][ T5961] usb 6-1: Product: syz [ 504.267106][ T5961] usb 6-1: Manufacturer: syz [ 504.272026][ T5961] usb 6-1: SerialNumber: syz [ 504.278473][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 504.298272][ T5838] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 504.314688][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 504.501511][ T5961] usb 6-1: config 0 descriptor?? [ 504.515131][ T5961] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 504.524360][ T5961] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 504.536202][ T189] hsr_slave_1: left promiscuous mode [ 504.542164][ T189] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 504.549901][ T189] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 504.581913][ T189] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 504.586746][T12221] loop0: detected capacity change from 0 to 24 [ 504.599238][ T189] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 504.608363][T12221] romfs: Unknown parameter '.log' [ 504.627500][ T189] veth1_macvtap: left promiscuous mode [ 504.633033][ T189] veth0_macvtap: left promiscuous mode [ 504.640254][ T189] veth1_vlan: left promiscuous mode [ 504.648485][ T189] veth0_vlan: left promiscuous mode [ 504.653797][T12221] loop0: detected capacity change from 0 to 1764 [ 504.858370][ T189] team0 (unregistering): Port device team_slave_1 removed [ 504.870988][ T189] team0 (unregistering): Port device team_slave_0 removed [ 504.918127][ T5961] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 504.924681][ T5961] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 504.957325][ T5961] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 504.964691][ T5961] em28xx 6-1:0.0: No AC97 audio processor [ 504.985726][ T5961] usb 6-1: USB disconnect, device number 13 [ 504.994251][ T5961] em28xx 6-1:0.0: Disconnecting em28xx [ 505.005493][ T5961] em28xx 6-1:0.0: Freeing device [ 505.183229][T12243] netlink: 428 bytes leftover after parsing attributes in process `syz.0.1484'. [ 505.192342][T12243] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1484'. [ 505.713928][T12256] fuse: Bad value for 'fd' [ 505.752933][T12259] loop0: detected capacity change from 0 to 1024 [ 505.877870][T12259] hfsplus: xattr searching failed [ 506.032571][T12272] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1488'. [ 506.049843][T12272] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1488'. [ 506.059530][T12272] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.1488'. [ 506.267306][T12271] NILFS (nullb0): couldn't find nilfs on the device [ 506.324174][T12276] fuse: Bad value for 'fd' [ 506.552358][T12286] NILFS (nullb0): couldn't find nilfs on the device [ 506.716495][T12283] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1491'. [ 506.726019][T12283] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1491'. [ 506.735599][T12283] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1491'. [ 506.756448][T12289] NILFS (nullb0): couldn't find nilfs on the device [ 506.765616][T12289] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1492'. [ 506.770791][T12132] chnl_net:caif_netlink_parms(): no params data found [ 506.804651][T12285] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1492'. [ 506.819350][ T5836] Bluetooth: hci1: command tx timeout [ 506.881531][T12291] fuse: Bad value for 'fd' [ 506.896232][T12253] hfsplus: xattr searching failed [ 506.906583][T12253] input: syz0 as /devices/virtual/input/input6 [ 506.907364][ T29] audit: type=1800 audit(1731037887.737:185): pid=12253 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1487" name="file1" dev="loop0" ino=6 res=0 errno=0 [ 506.980169][ T11] hfsplus: b-tree write err: -5, ino 3 [ 508.113542][T12305] loop0: detected capacity change from 0 to 512 [ 508.122548][T12305] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 508.152529][T12310] loop1: detected capacity change from 0 to 256 [ 508.478847][T12305] EXT4-fs (loop0): 1 truncate cleaned up [ 508.486829][T12305] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 508.604238][ T29] audit: type=1800 audit(1731037889.377:186): pid=12305 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1495" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=18 res=0 errno=0 [ 508.664733][T12316] loop3: detected capacity change from 0 to 512 [ 508.720696][T12132] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.730447][ T5829] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 508.735284][T12316] EXT4-fs (loop3): orphan cleanup on readonly fs [ 508.746526][T12132] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.753654][T12132] bridge_slave_0: entered allmulticast mode [ 508.797272][T12132] bridge_slave_0: entered promiscuous mode [ 508.812519][T12316] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 508.844597][T12132] bridge0: port 2(bridge_slave_1) entered blocking state [ 508.851887][T12132] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.859233][T12132] bridge_slave_1: entered allmulticast mode [ 508.866027][T12132] bridge_slave_1: entered promiscuous mode [ 508.884815][ T5836] Bluetooth: hci1: command tx timeout [ 508.891974][T12132] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 508.914456][T12132] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 508.927993][T12316] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 508.946439][T12316] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.1498: attempt to clear invalid blocks 2 len 1 [ 508.962701][T12316] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.1498: invalid indirect mapped block 1819239214 (level 0) [ 508.965277][ T5961] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 509.039532][T12328] NILFS (nullb0): couldn't find nilfs on the device [ 509.162853][T12316] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.1498: invalid indirect mapped block 1819239214 (level 1) [ 509.291462][T12132] team0: Port device team_slave_0 added [ 509.351527][T12132] team0: Port device team_slave_1 added [ 509.380764][T12132] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 509.389969][T12132] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 509.425536][T12316] EXT4-fs (loop3): 1 truncate cleaned up [ 509.444263][T12316] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 509.460037][T12132] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 509.472200][T12132] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 509.483122][T12132] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 509.489410][T12316] EXT4-fs error (device loop3): ext4_lookup:1810: inode #2: comm syz.3.1498: 'file1' linked to parent dir [ 509.529027][T12132] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 509.544844][ T5961] usb 2-1: Using ep0 maxpacket: 16 [ 509.554291][ T5961] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 509.567427][ T5961] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 509.938617][ T5841] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 509.961360][ T5961] usb 2-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 510.033778][ T5961] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.061536][T12132] hsr_slave_0: entered promiscuous mode [ 510.079166][ T5961] usb 2-1: config 0 descriptor?? [ 510.094120][T12132] hsr_slave_1: entered promiscuous mode [ 510.124232][T12132] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 510.139313][T12132] Cannot create hsr debugfs directory [ 510.626411][ T5961] uclogic 0003:5543:0781.0002: No inputs registered, leaving [ 510.637157][ T5961] uclogic 0003:5543:0781.0002: hidraw0: USB HID v0.00 Device [HID 5543:0781] on usb-dummy_hcd.1-1/input0 [ 510.673404][T12349] netlink: 'syz.5.1504': attribute type 2 has an invalid length. [ 510.794875][T12356] fuse: Bad value for 'fd' [ 510.828694][T12132] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 510.910537][T12132] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 511.016980][T12362] NILFS (nullb0): couldn't find nilfs on the device [ 511.027452][T12362] __nla_validate_parse: 4 callbacks suppressed [ 511.027479][T12362] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1505'. [ 511.068664][T12362] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1505'. [ 511.079324][T12362] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.1505'. [ 511.314296][ T5838] Bluetooth: hci1: command tx timeout [ 511.315195][T12132] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 511.347435][T12363] capability: warning: `syz.3.1506' uses deprecated v2 capabilities in a way that may be insecure [ 511.394937][ T5961] usb 2-1: USB disconnect, device number 17 [ 511.594660][T12132] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 511.665578][T12340] loop0: detected capacity change from 0 to 32768 [ 511.675335][T12340] XFS: attr2 mount option is deprecated. [ 511.736735][T12340] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 511.788020][T12340] XFS (loop0): Ending clean mount [ 511.794526][T12340] XFS (loop0): Quotacheck needed: Please wait. [ 511.830558][T12340] XFS (loop0): Quotacheck: Done. [ 511.896200][T12340] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1503'. [ 511.908441][T12132] 8021q: adding VLAN 0 to HW filter on device bond0 [ 511.922685][T12132] 8021q: adding VLAN 0 to HW filter on device team0 [ 511.941813][ T3531] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.948886][ T3531] bridge0: port 1(bridge_slave_0) entered forwarding state [ 511.966023][ T5829] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 511.988585][ T189] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.995703][ T189] bridge0: port 2(bridge_slave_1) entered forwarding state [ 512.047534][T12132] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 512.893640][T12132] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 512.928728][T12420] loop0: detected capacity change from 0 to 256 [ 513.015664][T12420] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 513.045754][T12420] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 513.068476][T12396] loop3: detected capacity change from 0 to 32768 [ 513.080246][T12420] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 513.112769][T12396] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 513.122532][T12420] UDF-fs: Scanning with blocksize 512 failed [ 513.226746][T12420] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 513.263747][T12420] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 513.364987][ T5838] Bluetooth: hci1: command 0x0419 tx timeout [ 513.410268][T12132] veth0_vlan: entered promiscuous mode [ 513.716715][T12132] veth1_vlan: entered promiscuous mode [ 513.734089][T12132] veth0_macvtap: entered promiscuous mode [ 513.753619][T12132] veth1_macvtap: entered promiscuous mode [ 513.766361][T12132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 513.777089][T12132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.787069][T12132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 513.797674][T12132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.807873][T12132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 513.818491][T12132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.828487][T12132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 513.839083][T12132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.852090][ T5841] ocfs2: Unmounting device (7,3) on (node local) [ 513.853254][T12132] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 513.867202][T12132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 513.877672][T12132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.887683][T12132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 513.898482][T12132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.908461][T12132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 513.919072][T12132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.929106][T12132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 513.939660][T12132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.950221][T12132] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 513.966326][T12132] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.978418][T12132] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.987223][T12132] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.995957][T12132] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.011562][T12458] fuse: Bad value for 'fd' [ 514.186369][ T189] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 514.206980][ T189] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 514.281739][T12468] NILFS (nullb0): couldn't find nilfs on the device [ 514.292264][T12468] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1517'. [ 514.327726][T12468] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1517'. [ 514.338590][T12468] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1517'. [ 514.463094][ T765] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 514.490634][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 514.504487][ T5880] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 514.528242][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 514.685633][ T5880] usb 6-1: too many configurations: 67, using maximum allowed: 8 [ 514.703073][ T765] usb 4-1: config 0 has no interfaces? [ 514.708767][ T765] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 514.733553][ T5880] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 514.744651][ T5880] usb 6-1: can't read configurations, error -61 [ 514.751116][ T765] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.762706][ T765] usb 4-1: config 0 descriptor?? [ 514.767229][T12479] libceph: resolve '0..' (ret=-3): failed [ 515.261976][ T5961] usb 4-1: USB disconnect, device number 12 [ 515.289567][ T5880] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 515.445878][ T5836] Bluetooth: hci1: command 0x0419 tx timeout [ 515.506847][ T5880] usb 6-1: too many configurations: 67, using maximum allowed: 8 [ 515.516552][ T5880] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 515.524291][ T5880] usb 6-1: can't read configurations, error -61 [ 515.542055][ T5880] usb usb6-port1: attempt power cycle [ 515.614874][ T5885] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 515.826977][T12519] tipc: Enabling of bearer rejected, already enabled [ 516.166245][ T5885] usb 1-1: config 0 has an invalid interface number: 110 but max is 0 [ 516.174437][ T5885] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 516.195845][ T5880] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 516.208190][ T5885] usb 1-1: config 0 has no interface number 0 [ 516.219236][ T5880] usb 6-1: too many configurations: 67, using maximum allowed: 8 [ 516.228405][ T5880] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 516.236291][ T5880] usb 6-1: can't read configurations, error -61 [ 516.243361][ T5885] usb 1-1: config 0 interface 110 altsetting 0 endpoint 0xD has invalid maxpacket 40068, setting to 64 [ 516.257738][ T5885] usb 1-1: config 0 interface 110 altsetting 0 endpoint 0xC has invalid maxpacket 255, setting to 64 [ 516.268700][ T5885] usb 1-1: config 0 interface 110 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 516.281991][ T5885] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=17.65 [ 516.291262][ T5885] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.305697][ T5885] usb 1-1: config 0 descriptor?? [ 516.311978][T12491] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 516.320248][ T5885] adutux 1-1:0.110: interrupt endpoints not found [ 516.362664][T12530] loop3: detected capacity change from 0 to 512 [ 516.434870][ T5880] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 516.474471][ T5880] usb 6-1: too many configurations: 67, using maximum allowed: 8 [ 516.513381][ T5880] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 516.610543][ T5880] usb 6-1: can't read configurations, error -61 [ 516.628471][ T5880] usb usb6-port1: unable to enumerate USB device [ 516.713121][T12543] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1533'. [ 517.387210][T12556] NILFS (nullb0): couldn't find nilfs on the device [ 517.398056][T12556] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1534'. [ 517.432539][T12556] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1534'. [ 517.443282][T12556] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.1534'. [ 518.023093][T12491] loop0: detected capacity change from 0 to 32768 [ 518.184684][T12565] fuse: Bad value for 'fd' [ 518.343822][T11426] usb 1-1: USB disconnect, device number 15 [ 518.377729][T12572] overlayfs: missing 'lowerdir' [ 518.549920][T12576] NILFS (nullb0): couldn't find nilfs on the device [ 518.558006][T12576] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1537'. [ 518.575470][T12576] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1537'. [ 518.585034][T12576] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1537'. [ 518.943281][T12568] loop6: detected capacity change from 0 to 4096 [ 519.291972][T12568] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512). [ 520.580707][T12599] IPVS: Scheduler module ip_vs_ not found [ 521.023944][T12618] tipc: Enabling of bearer rejected, already enabled [ 521.101190][T12592] loop3: detected capacity change from 0 to 40427 [ 521.114016][T12592] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 521.190916][T12592] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 521.221892][T12606] syz.5.1544 uses obsolete (PF_INET,SOCK_PACKET) [ 521.228611][T12592] F2FS-fs (loop3): build fault injection attr: rate: 17008, type: 0x1fffff [ 521.241532][T12592] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x6 [ 521.286579][T12625] loop0: detected capacity change from 0 to 128 [ 521.300639][T12592] F2FS-fs (loop3): invalid crc value [ 521.311643][ T29] audit: type=1400 audit(1731037902.097:187): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A2F2F26D6 pid=12624 comm="syz.0.1548" [ 521.348654][T12625] /dev/loop0: Can't open blockdev [ 521.476360][T12592] F2FS-fs (loop3): Found nat_bits in checkpoint [ 521.485431][T12639] overlayfs: missing 'lowerdir' [ 521.499461][T12625] Driver unsupported XDP return value 0 on prog (id 526) dev N/A, expect packet loss! [ 521.613429][T12649] fuse: Bad value for 'fd' [ 521.620333][T12592] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 521.629740][T12592] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 521.676935][T12592] syz.3.1542: attempt to access beyond end of device [ 521.676935][T12592] loop3: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 521.774832][ T5885] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 521.827405][T12658] FAULT_INJECTION: forcing a failure. [ 521.827405][T12658] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 522.157390][T12658] CPU: 1 UID: 0 PID: 12658 Comm: syz.6.1555 Not tainted 6.12.0-rc6-next-20241107-syzkaller #0 [ 522.167649][T12658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 522.177685][T12658] Call Trace: [ 522.180944][T12658] [ 522.183855][T12658] dump_stack_lvl+0x241/0x360 [ 522.188520][T12658] ? __pfx_dump_stack_lvl+0x10/0x10 [ 522.193698][T12658] ? __pfx__printk+0x10/0x10 [ 522.198275][T12658] ? snprintf+0xda/0x120 [ 522.202507][T12658] should_fail_ex+0x3b0/0x4e0 [ 522.207193][T12658] _copy_to_user+0x31/0xb0 [ 522.211613][T12658] simple_read_from_buffer+0xca/0x150 [ 522.216976][T12658] proc_fail_nth_read+0x1e9/0x250 [ 522.221999][T12658] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 522.227532][T12658] ? bpf_lsm_file_permission+0x9/0x10 [ 522.232890][T12658] ? security_file_permission+0x74/0x280 [ 522.238502][T12658] ? rw_verify_area+0x55e/0x6f0 [ 522.243342][T12658] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 522.248872][T12658] vfs_read+0x1fc/0xb70 [ 522.253016][T12658] ? __pfx___mutex_lock+0x10/0x10 [ 522.258029][T12658] ? __pfx_vfs_read+0x10/0x10 [ 522.262728][T12658] ? __fget_files+0x2a/0x410 [ 522.267367][T12658] ? __fget_files+0x395/0x410 [ 522.272034][T12658] ? __fget_files+0x2a/0x410 [ 522.276610][T12658] ksys_read+0x18f/0x2b0 [ 522.280839][T12658] ? __pfx_ksys_read+0x10/0x10 [ 522.285589][T12658] ? rcu_is_watching+0x15/0xb0 [ 522.290335][T12658] ? rcu_is_watching+0x15/0xb0 [ 522.295082][T12658] do_syscall_64+0xf3/0x230 [ 522.299572][T12658] ? clear_bhb_loop+0x35/0x90 [ 522.304229][T12658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.310112][T12658] RIP: 0033:0x7fbf5b57d15c [ 522.314511][T12658] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 522.334102][T12658] RSP: 002b:00007fbf5c332030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 522.342499][T12658] RAX: ffffffffffffffda RBX: 00007fbf5b735f80 RCX: 00007fbf5b57d15c [ 522.350453][T12658] RDX: 000000000000000f RSI: 00007fbf5c3320a0 RDI: 0000000000000005 [ 522.358408][T12658] RBP: 00007fbf5c332090 R08: 0000000000000000 R09: 0000000000000000 [ 522.366363][T12658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 522.374313][T12658] R13: 0000000000000000 R14: 00007fbf5b735f80 R15: 00007ffcf6a1ea08 [ 522.382286][T12658] [ 522.459137][ T5841] syz-executor: attempt to access beyond end of device [ 522.459137][ T5841] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 522.475079][ T5841] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 522.478550][ T5961] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 522.556014][ T5885] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 522.566306][ T5885] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 522.576432][ T5885] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 522.585654][ T5885] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 522.593710][ T5885] usb 1-1: SerialNumber: syz [ 522.648563][ T5961] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 522.659623][ T5961] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 522.667919][T12671] tipc: Enabling of bearer rejected, already enabled [ 522.671316][ T5961] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 522.688294][ T5961] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.720929][T12645] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 522.732679][ T5961] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 522.811575][T12625] netlink: 'syz.0.1548': attribute type 21 has an invalid length. [ 522.820116][T12625] netlink: 'syz.0.1548': attribute type 1 has an invalid length. [ 522.841799][ T5885] usb 1-1: 0:2 : does not exist [ 522.851895][ T5885] usb 1-1: unit 5 not found! [ 522.896410][ T5885] usb 1-1: USB disconnect, device number 16 [ 522.929947][T12667] loop6: detected capacity change from 0 to 32768 [ 522.941981][T12667] (syz.6.1556,12667,0):ocfs2_parse_options:1448 ERROR: Unrecognized mount option "000000000000000000000000000000000000000000000000000000000000000" or missing value [ 522.962711][T12667] (syz.6.1556,12667,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 523.085855][ T5837] udevd[5837]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 523.187206][T12683] FAULT_INJECTION: forcing a failure. [ 523.187206][T12683] name failslab, interval 1, probability 0, space 0, times 0 [ 523.199878][T12683] CPU: 0 UID: 0 PID: 12683 Comm: syz.6.1561 Not tainted 6.12.0-rc6-next-20241107-syzkaller #0 [ 523.210125][T12683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 523.220186][T12683] Call Trace: [ 523.223474][T12683] [ 523.226415][T12683] dump_stack_lvl+0x241/0x360 [ 523.231113][T12683] ? __pfx_dump_stack_lvl+0x10/0x10 [ 523.236328][T12683] ? __pfx__printk+0x10/0x10 [ 523.240927][T12683] ? lock_release+0xbf/0xa30 [ 523.245526][T12683] ? rcu_is_watching+0x15/0xb0 [ 523.250302][T12683] ? lock_acquire+0xe3/0x550 [ 523.254900][T12683] ? unwind_next_frame+0x18e6/0x22d0 [ 523.260193][T12683] ? deref_stack_reg+0x17c/0x210 [ 523.265140][T12683] should_fail_ex+0x3b0/0x4e0 [ 523.269829][T12683] should_failslab+0xac/0x100 [ 523.274517][T12683] ? skb_clone+0x20c/0x390 [ 523.278939][T12683] kmem_cache_alloc_noprof+0x70/0x380 [ 523.284323][T12683] skb_clone+0x20c/0x390 [ 523.288576][T12683] ? dev_queue_xmit_nit+0x220/0xc10 [ 523.293791][T12683] dev_queue_xmit_nit+0x419/0xc10 [ 523.298825][T12683] ? dev_queue_xmit_nit+0x2b/0xc10 [ 523.303940][T12683] ? validate_xmit_skb+0x977/0xf90 [ 523.309046][T12683] dev_hard_start_xmit+0x15f/0x7e0 [ 523.314151][T12683] ? __pfx_validate_xmit_skb+0x10/0x10 [ 523.319611][T12683] __dev_queue_xmit+0x1b56/0x3f30 [ 523.324638][T12683] ? kasan_save_track+0x51/0x80 [ 523.329485][T12683] ? do_syscall_64+0xf3/0x230 [ 523.334153][T12683] ? __dev_queue_xmit+0x2da/0x3f30 [ 523.339268][T12683] ? __pfx___dev_queue_xmit+0x10/0x10 [ 523.344634][T12683] ? __copy_skb_header+0x437/0x5b0 [ 523.349740][T12683] ? __asan_memcpy+0x40/0x70 [ 523.354322][T12683] ? __copy_skb_header+0x437/0x5b0 [ 523.359428][T12683] ? __skb_clone+0x454/0x6c0 [ 523.364024][T12683] ? skb_clone+0x240/0x390 [ 523.368432][T12683] __netlink_deliver_tap+0x54d/0x7c0 [ 523.373715][T12683] ? netlink_deliver_tap+0x2e/0x1b0 [ 523.378902][T12683] netlink_deliver_tap+0x19d/0x1b0 [ 523.384015][T12683] netlink_unicast+0x7c4/0x990 [ 523.388787][T12683] ? __pfx_netlink_unicast+0x10/0x10 [ 523.394072][T12683] ? __virt_addr_valid+0x183/0x530 [ 523.399179][T12683] ? __check_object_size+0x48e/0x900 [ 523.404456][T12683] netlink_sendmsg+0x8e4/0xcb0 [ 523.409216][T12683] ? __pfx_netlink_sendmsg+0x10/0x10 [ 523.414495][T12683] ? aa_sock_msg_perm+0x91/0x160 [ 523.419422][T12683] ? __pfx_netlink_sendmsg+0x10/0x10 [ 523.424696][T12683] __sock_sendmsg+0x221/0x270 [ 523.429360][T12683] ____sys_sendmsg+0x52a/0x7e0 [ 523.434120][T12683] ? __pfx_____sys_sendmsg+0x10/0x10 [ 523.439399][T12683] ? __fget_files+0x2a/0x410 [ 523.443978][T12683] ? __fget_files+0x2a/0x410 [ 523.448572][T12683] __sys_sendmsg+0x269/0x350 [ 523.453155][T12683] ? __pfx_lock_release+0x10/0x10 [ 523.458176][T12683] ? __pfx___sys_sendmsg+0x10/0x10 [ 523.463284][T12683] ? __pfx_vfs_write+0x10/0x10 [ 523.468056][T12683] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 523.474368][T12683] ? rcu_is_watching+0x15/0xb0 [ 523.479122][T12683] ? rcu_is_watching+0x15/0xb0 [ 523.483873][T12683] do_syscall_64+0xf3/0x230 [ 523.488362][T12683] ? clear_bhb_loop+0x35/0x90 [ 523.493024][T12683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.498912][T12683] RIP: 0033:0x7fbf5b57e719 [ 523.503315][T12683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 523.522910][T12683] RSP: 002b:00007fbf5c332038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 523.531315][T12683] RAX: ffffffffffffffda RBX: 00007fbf5b735f80 RCX: 00007fbf5b57e719 [ 523.539277][T12683] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 523.547242][T12683] RBP: 00007fbf5c332090 R08: 0000000000000000 R09: 0000000000000000 [ 523.555202][T12683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 523.563168][T12683] R13: 0000000000000000 R14: 00007fbf5b735f80 R15: 00007ffcf6a1ea08 [ 523.571131][T12683] [ 523.659802][T12673] loop5: detected capacity change from 0 to 32768 [ 523.669432][T12673] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1559 (12673) [ 523.686653][T11245] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.704272][T12673] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 523.714839][T12673] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 523.723505][T12673] BTRFS info (device loop5): using free-space-tree [ 523.846042][T12694] overlayfs: missing 'lowerdir' [ 523.886808][T12709] fuse: Bad value for 'fd' [ 523.969111][ T7310] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 524.398396][ T5880] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 524.625212][ T5880] usb 7-1: Using ep0 maxpacket: 32 [ 524.640441][ T5880] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 524.708249][ T5880] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 524.733877][ T5880] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 524.758806][ T5883] usb 2-1: USB disconnect, device number 18 [ 524.793141][ T5880] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.826204][T12724] tipc: Enabling of bearer rejected, already enabled [ 524.897749][ T5880] usb 7-1: config 0 descriptor?? [ 524.914627][T12728] loop0: detected capacity change from 0 to 512 [ 524.946185][T12726] loop1: detected capacity change from 0 to 2048 [ 525.002073][T12726] Alternate GPT is invalid, using primary GPT. [ 525.008440][T12726] loop1: p1 p2 p3 [ 525.024562][ T5201] Alternate GPT is invalid, using primary GPT. [ 525.031503][ T5201] loop1: p1 p2 p3 [ 525.125503][T12590] Bluetooth: hci1: command 0x0419 tx timeout [ 525.320126][T12711] ntfs3(nullb0): Primary boot signature is not NTFS. [ 525.534859][T12711] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 525.558877][T12748] overlayfs: missing 'lowerdir' [ 525.619775][ T5882] udevd[5882]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 525.637548][T12753] fuse: Bad value for 'fd' [ 525.667669][T12755] loop5: detected capacity change from 0 to 128 [ 525.674653][T12755] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 525.742742][ T5880] usbhid 7-1:0.0: can't add hid device: -71 [ 525.762444][ T5880] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 525.790193][ T5880] usb 7-1: USB disconnect, device number 2 [ 525.790314][T12758] loop0: detected capacity change from 0 to 64 [ 525.808884][T12758] hfs: Unknown parameter 'func' [ 525.979794][T12761] loop0: detected capacity change from 0 to 64 [ 526.224837][ T5885] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 526.396367][ T5885] usb 1-1: Using ep0 maxpacket: 16 [ 526.407420][ T5885] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 526.442364][ T5885] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 526.462926][ T5885] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 526.518302][T12776] FAULT_INJECTION: forcing a failure. [ 526.518302][T12776] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 526.545339][T12776] CPU: 1 UID: 0 PID: 12776 Comm: syz.1.1584 Not tainted 6.12.0-rc6-next-20241107-syzkaller #0 [ 526.555601][T12776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 526.565656][T12776] Call Trace: [ 526.568934][T12776] [ 526.571863][T12776] dump_stack_lvl+0x241/0x360 [ 526.576548][T12776] ? __pfx_dump_stack_lvl+0x10/0x10 [ 526.581754][T12776] ? __pfx__printk+0x10/0x10 [ 526.586347][T12776] ? get_sigframe+0x5e2/0x800 [ 526.591039][T12776] should_fail_ex+0x3b0/0x4e0 [ 526.595722][T12776] _copy_to_user+0x31/0xb0 [ 526.600143][T12776] copy_siginfo_to_user+0x24/0xc0 [ 526.605177][T12776] x64_setup_rt_frame+0x7b7/0xd20 [ 526.610212][T12776] ? _raw_spin_unlock_irq+0x44/0x50 [ 526.615426][T12776] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 526.620981][T12776] arch_do_signal_or_restart+0x458/0x860 [ 526.626623][T12776] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 526.632783][T12776] ? schedule+0x155/0x320 [ 526.637118][T12776] syscall_exit_to_user_mode+0xc9/0x370 [ 526.642670][T12776] do_syscall_64+0x100/0x230 [ 526.647270][T12776] ? clear_bhb_loop+0x35/0x90 [ 526.651955][T12776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.657858][T12776] RIP: 0033:0x7fb320d7e717 [ 526.662276][T12776] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 526.681883][T12776] RSP: 002b:00007fb321a9a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 526.690307][T12776] RAX: 0000000000000000 RBX: 00007fb320f35f80 RCX: 00007fb320d7e719 [ 526.692973][ T5885] usb 1-1: New USB device found, idVendor=056a, idProduct=0022, bcdDevice= 0.00 [ 526.698268][T12776] RDX: 0000000000000039 RSI: 0000000020000540 RDI: 0000000000000003 [ 526.698286][T12776] RBP: 00007fb321a9a090 R08: 0000000000000000 R09: 0000000000000000 [ 526.698298][T12776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 526.698311][T12776] R13: 0000000000000000 R14: 00007fb320f35f80 R15: 00007ffc2f93cc08 [ 526.698331][T12776] [ 526.708958][ T5885] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.761938][ T5885] usb 1-1: config 0 descriptor?? [ 526.873277][T12780] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1585'. [ 526.929385][T12782] sp0: Synchronizing with TNC [ 526.962578][T12785] loop3: detected capacity change from 0 to 128 [ 527.020815][T12787] overlayfs: missing 'lowerdir' [ 527.056319][T12790] fuse: Bad value for 'fd' [ 527.465490][T12793] NILFS (nullb0): couldn't find nilfs on the device [ 527.472803][T12792] NILFS (nullb0): couldn't find nilfs on the device [ 527.473760][T12793] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1590'. [ 527.481854][T12792] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1589'. [ 527.497472][T12793] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1590'. [ 527.504763][T12792] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1589'. [ 527.507114][T12793] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.1590'. [ 527.517914][T12792] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1589'. [ 527.543055][ T5883] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 527.602085][T12799] loop6: detected capacity change from 0 to 4096 [ 527.727398][ T5883] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 527.738250][ T5883] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 527.748190][ T5883] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 527.758915][ T5883] usb 4-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 527.772706][ T5883] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.790004][ T5883] usb 4-1: config 0 descriptor?? [ 527.799341][ T5883] gspca_main: spca561-2.14.0 probing abcd:cdee [ 528.224100][T12816] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 528.336316][ T5883] spca561 4-1:0.0: probe with driver spca561 failed with error -22 [ 528.546684][ T5883] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 529.342150][ T5883] usb 4-1: MIDIStreaming interface descriptor not found [ 529.728442][T12811] loop5: detected capacity change from 0 to 8192 [ 529.751511][T12811] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 529.776149][ T5885] usbhid 1-1:0.0: can't add hid device: -71 [ 529.782149][ T5885] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 529.805997][ T5885] usb 1-1: USB disconnect, device number 17 [ 530.061019][ T25] usb 4-1: USB disconnect, device number 13 [ 530.144848][ T5883] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 530.166700][ T5885] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 530.296902][ T5883] usb 6-1: Using ep0 maxpacket: 32 [ 530.300112][T12838] overlayfs: missing 'lowerdir' [ 530.304615][ T5883] usb 6-1: config 5 has an invalid interface number: 82 but max is 0 [ 530.319101][ T5883] usb 6-1: config 5 has no interface number 0 [ 530.326682][ T5883] usb 6-1: config 5 interface 82 altsetting 252 has a duplicate endpoint with address 0xD, skipping [ 530.353099][ T5883] usb 6-1: config 5 interface 82 altsetting 252 has an invalid descriptor for endpoint zero, skipping [ 530.355514][ T5885] usb 1-1: Using ep0 maxpacket: 16 [ 530.371240][ T5885] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 530.377550][T12836] kvm: emulating exchange as write [ 530.382493][ T5885] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 530.389516][ T5883] usb 6-1: config 5 interface 82 altsetting 252 endpoint 0xC has an invalid bInterval 25, changing to 7 [ 530.397732][ T5885] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 530.421367][ T5885] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 530.433266][ T5885] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.462719][ T5885] usb 1-1: config 0 descriptor?? [ 530.523244][ T5883] usb 6-1: config 5 interface 82 altsetting 252 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 530.534559][ T5883] usb 6-1: config 5 interface 82 altsetting 252 has a duplicate endpoint with address 0x5, skipping [ 530.545492][ T5883] usb 6-1: config 5 interface 82 altsetting 252 endpoint 0x7 has an invalid bInterval 196, changing to 11 [ 530.557103][ T5883] usb 6-1: config 5 interface 82 altsetting 252 endpoint 0x6 has invalid maxpacket 1007, setting to 64 [ 530.568215][ T5883] usb 6-1: config 5 interface 82 altsetting 252 has an endpoint descriptor with address 0x19, changing to 0x9 [ 530.579908][ T5883] usb 6-1: config 5 interface 82 altsetting 252 has a duplicate endpoint with address 0x7, skipping [ 530.590720][ T5883] usb 6-1: config 5 interface 82 has no altsetting 0 [ 530.694560][ T5883] usb 6-1: New USB device found, idVendor=095a, idProduct=3003, bcdDevice=cf.c9 [ 530.714559][ T5883] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.722756][ T5883] usb 6-1: Product: 簨垶ࣱ햎᢮錵遹雷땻뽠⿙측ࢋ腩깶뜈䲞萋쒲慭킈ﳃ徠⑘ᜱ쎵蔭䯘蟄쬓օ戜鮓至 掞ு쨃㲙觡༟ķӭ⼃댵 [ 530.751709][ T5883] usb 6-1: Manufacturer: Ὦ态✝⮈Ꮂ≆ꆋꂈ龠ʠ鎪갋䜛뢩薍溘괥謻Ỉ켊㆟魫㆛㒘蔽盤槶ഋ椃砄Ὓ鹅읹駙軔雂Ｏ於毰玌᳴㛘ซ裨ಇ瓮఍⇌㏍ᐄ◶☲䒧ಶ恥ǃ黎ჟ⦵쪪뒬徧밸䔏ꨩᥞ騧籍﬑璩幔䜎 [ 530.922640][ T5883] usb 6-1: SerialNumber: syz [ 531.046894][T12848] fuse: Bad value for 'fd' [ 531.216350][ T5883] kaweth 6-1:5.82: Firmware present in device. [ 531.223027][ T5883] kaweth 6-1:5.82: Error reading configuration (-71), no net device created [ 531.283395][T12851] NILFS (nullb0): couldn't find nilfs on the device [ 531.291807][T12851] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1603'. [ 531.301338][T12851] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1603'. [ 531.311332][T12851] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1603'. [ 531.540559][ T5883] kaweth 6-1:5.82: probe with driver kaweth failed with error -5 [ 531.559108][ T5883] usb 6-1: USB disconnect, device number 18 [ 531.571789][T12853] loop3: detected capacity change from 0 to 4096 [ 531.582294][T12853] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512). [ 531.627006][ T5885] usbhid 1-1:0.0: can't add hid device: -71 [ 531.638234][ T5885] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 531.696878][ T5885] usb 1-1: USB disconnect, device number 18 [ 531.709048][T12861] fuse: Bad value for 'fd' [ 531.941746][T12873] NILFS (nullb0): couldn't find nilfs on the device [ 531.952184][T12873] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1606'. [ 531.988446][T12873] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1606'. [ 531.999088][T12873] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1606'. [ 532.943605][T12878] loop1: detected capacity change from 0 to 32768 [ 532.954097][T12878] XFS: ikeep mount option is deprecated. [ 532.961660][T12878] XFS: noikeep mount option is deprecated. [ 534.085024][T12878] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 534.175599][T12898] loop3: detected capacity change from 0 to 128 [ 534.370446][T12878] XFS (loop1): Ending clean mount [ 534.377515][T12878] XFS (loop1): Quotacheck needed: Please wait. [ 534.404016][T12898] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 534.426128][T12878] XFS (loop1): Quotacheck: Done. [ 534.495822][T12898] ext4 filesystem being mounted at /340/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 534.538918][ T5833] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 534.914787][ T5841] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 535.174690][T12952] fuse: Bad value for 'fd' [ 535.250871][T12960] loop1: detected capacity change from 0 to 512 [ 535.262079][T12960] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 535.354353][T12960] EXT4-fs (loop1): 1 truncate cleaned up [ 535.362165][T12960] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 535.453810][ T29] audit: type=1800 audit(1731037916.267:188): pid=12960 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1616" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=18 res=0 errno=0 [ 535.806457][T12971] loop6: detected capacity change from 0 to 164 [ 535.872195][T12972] NILFS (nullb0): couldn't find nilfs on the device [ 535.880352][T12972] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1618'. [ 535.897813][T12972] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1618'. [ 535.907414][T12972] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1618'. [ 536.528944][ T5833] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 536.547362][T12946] loop5: detected capacity change from 0 to 40427 [ 536.845046][T12982] fuse: Bad value for 'fd' [ 536.863064][T12946] F2FS-fs (loop5): build fault injection attr: rate: 690, type: 0x1fffff [ 536.961062][T12946] F2FS-fs (loop5): Unrecognized mount option "noail" or missing value [ 537.038791][T12986] NILFS (nullb0): couldn't find nilfs on the device [ 537.049283][T12986] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1622'. [ 537.084829][T12986] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1622'. [ 537.095483][T12986] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1622'. [ 537.751916][T13002] loop1: detected capacity change from 0 to 512 [ 537.776224][T13002] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 538.801136][T13002] EXT4-fs (loop1): 1 truncate cleaned up [ 538.807542][T13002] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 538.827368][ T29] audit: type=1800 audit(1731037919.667:189): pid=12998 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1621" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=18 res=0 errno=0 [ 538.956533][T13011] fuse: Bad value for 'fd' [ 538.958693][T13010] FAULT_INJECTION: forcing a failure. [ 538.958693][T13010] name failslab, interval 1, probability 0, space 0, times 0 [ 538.976406][T13010] CPU: 0 UID: 0 PID: 13010 Comm: syz.6.1627 Not tainted 6.12.0-rc6-next-20241107-syzkaller #0 [ 538.986666][T13010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 538.996727][T13010] Call Trace: [ 539.000009][T13010] [ 539.002944][T13010] dump_stack_lvl+0x241/0x360 [ 539.007633][T13010] ? __pfx_dump_stack_lvl+0x10/0x10 [ 539.012848][T13010] ? __pfx__printk+0x10/0x10 [ 539.017452][T13010] ? __pfx___might_resched+0x10/0x10 [ 539.022749][T13010] ? trace_contention_end+0x3c/0x120 [ 539.028043][T13010] should_fail_ex+0x3b0/0x4e0 [ 539.032728][T13010] should_failslab+0xac/0x100 [ 539.037413][T13010] kmem_cache_alloc_node_noprof+0x77/0x380 [ 539.043228][T13010] ? __alloc_skb+0x1c3/0x440 [ 539.047827][T13010] __alloc_skb+0x1c3/0x440 [ 539.052251][T13010] ? nla_find+0x124/0x140 [ 539.056587][T13010] ? __pfx___alloc_skb+0x10/0x10 [ 539.061534][T13010] ? netlink_ack_tlv_len+0x6e/0x200 [ 539.066740][T13010] netlink_ack+0x13f/0xa30 [ 539.071167][T13010] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 539.076640][T13010] netlink_rcv_skb+0x262/0x430 [ 539.081417][T13010] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 539.086885][T13010] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 539.092194][T13010] ? netlink_deliver_tap+0x2e/0x1b0 [ 539.097412][T13010] netlink_unicast+0x7f6/0x990 [ 539.102196][T13010] ? __pfx_netlink_unicast+0x10/0x10 [ 539.107496][T13010] ? __virt_addr_valid+0x183/0x530 [ 539.112625][T13010] ? __check_object_size+0x48e/0x900 [ 539.117927][T13010] netlink_sendmsg+0x8e4/0xcb0 [ 539.122714][T13010] ? __pfx_netlink_sendmsg+0x10/0x10 [ 539.128010][T13010] ? aa_sock_msg_perm+0x91/0x160 [ 539.132934][T13010] ? __pfx_netlink_sendmsg+0x10/0x10 [ 539.138214][T13010] __sock_sendmsg+0x221/0x270 [ 539.142918][T13010] ____sys_sendmsg+0x52a/0x7e0 [ 539.147703][T13010] ? __pfx_____sys_sendmsg+0x10/0x10 [ 539.153004][T13010] ? __fget_files+0x2a/0x410 [ 539.157615][T13010] ? __fget_files+0x2a/0x410 [ 539.162225][T13010] __sys_sendmsg+0x269/0x350 [ 539.166835][T13010] ? __pfx_lock_release+0x10/0x10 [ 539.171872][T13010] ? __pfx___sys_sendmsg+0x10/0x10 [ 539.177005][T13010] ? __pfx_vfs_write+0x10/0x10 [ 539.181793][T13010] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 539.188130][T13010] ? rcu_is_watching+0x15/0xb0 [ 539.192913][T13010] ? rcu_is_watching+0x15/0xb0 [ 539.197689][T13010] do_syscall_64+0xf3/0x230 [ 539.202200][T13010] ? clear_bhb_loop+0x35/0x90 [ 539.206884][T13010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.212792][T13010] RIP: 0033:0x7fbf5b57e719 [ 539.217214][T13010] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 539.236834][T13010] RSP: 002b:00007fbf5c332038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 539.245266][T13010] RAX: ffffffffffffffda RBX: 00007fbf5b735f80 RCX: 00007fbf5b57e719 [ 539.253246][T13010] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000004 [ 539.261228][T13010] RBP: 00007fbf5c332090 R08: 0000000000000000 R09: 0000000000000000 [ 539.269213][T13010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 539.277193][T13010] R13: 0000000000000000 R14: 00007fbf5b735f80 R15: 00007ffcf6a1ea08 [ 539.285204][T13010] [ 539.329276][ T5833] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 539.415965][T13025] NILFS (nullb0): couldn't find nilfs on the device [ 539.428583][T13025] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1626'. [ 539.472862][T13025] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1626'. [ 540.216052][ T29] audit: type=1326 audit(1731037921.057:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13033 comm="syz.3.1632" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f235217e719 code=0x0 [ 540.303361][T13042] fuse: Bad value for 'fd' [ 540.535849][T13047] NILFS (nullb0): couldn't find nilfs on the device [ 540.543918][T13047] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1633'. [ 540.553342][T13047] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1633'. [ 540.562971][T13047] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.1633'. [ 542.327099][T13069] fuse: Bad value for 'fd' [ 542.384466][T13074] FAULT_INJECTION: forcing a failure. [ 542.384466][T13074] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 542.402900][T13074] CPU: 0 UID: 0 PID: 13074 Comm: syz.5.1639 Not tainted 6.12.0-rc6-next-20241107-syzkaller #0 [ 542.413172][T13074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 542.423235][T13074] Call Trace: [ 542.426517][T13074] [ 542.429453][T13074] dump_stack_lvl+0x241/0x360 [ 542.434145][T13074] ? __pfx_dump_stack_lvl+0x10/0x10 [ 542.439346][T13074] ? __pfx__printk+0x10/0x10 [ 542.443922][T13074] ? rcu_is_watching+0x15/0xb0 [ 542.448669][T13074] ? trace_contention_end+0x3c/0x120 [ 542.453934][T13074] ? __pfx_lock_release+0x10/0x10 [ 542.458937][T13074] ? __mutex_lock+0x37f/0xee0 [ 542.463598][T13074] ? aa_file_perm+0x137/0xf50 [ 542.468256][T13074] should_fail_ex+0x3b0/0x4e0 [ 542.472918][T13074] _copy_from_user+0x2f/0xc0 [ 542.477485][T13074] input_event_from_user+0x1e2/0x4a0 [ 542.482752][T13074] ? __pfx_input_event_from_user+0x10/0x10 [ 542.488540][T13074] ? rcu_is_watching+0x15/0xb0 [ 542.493285][T13074] evdev_write+0x470/0x790 [ 542.497683][T13074] ? __pfx_evdev_write+0x10/0x10 [ 542.502602][T13074] ? bpf_lsm_file_permission+0x9/0x10 [ 542.507956][T13074] ? security_file_permission+0x74/0x280 [ 542.513565][T13074] ? rw_verify_area+0x1c3/0x6f0 [ 542.518397][T13074] ? __pfx_evdev_write+0x10/0x10 [ 542.523314][T13074] vfs_write+0x2a3/0xd30 [ 542.527547][T13074] ? __pfx_vfs_write+0x10/0x10 [ 542.532291][T13074] ? __fget_files+0x2a/0x410 [ 542.536862][T13074] ? __fget_files+0x395/0x410 [ 542.541519][T13074] ? __fget_files+0x2a/0x410 [ 542.546090][T13074] ksys_write+0x18f/0x2b0 [ 542.550396][T13074] ? __pfx_ksys_write+0x10/0x10 [ 542.555225][T13074] ? rcu_is_watching+0x15/0xb0 [ 542.559967][T13074] ? rcu_is_watching+0x15/0xb0 [ 542.564710][T13074] do_syscall_64+0xf3/0x230 [ 542.569194][T13074] ? clear_bhb_loop+0x35/0x90 [ 542.573849][T13074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.579724][T13074] RIP: 0033:0x7ffa0e37e719 [ 542.584119][T13074] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 542.603720][T13074] RSP: 002b:00007ffa0f173038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 542.612113][T13074] RAX: ffffffffffffffda RBX: 00007ffa0e535f80 RCX: 00007ffa0e37e719 [ 542.620065][T13074] RDX: 0000000000002250 RSI: 0000000020000040 RDI: 0000000000000004 [ 542.628013][T13074] RBP: 00007ffa0f173090 R08: 0000000000000000 R09: 0000000000000000 [ 542.635967][T13074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 542.643918][T13074] R13: 0000000000000000 R14: 00007ffa0e535f80 R15: 00007ffe556607e8 [ 542.651871][T13074] [ 542.767041][T13076] NILFS (nullb0): couldn't find nilfs on the device [ 542.777528][T13076] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1637'. [ 542.813895][T13076] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1637'. [ 542.824704][T13076] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1637'. [ 543.055927][ T29] audit: type=1326 audit(1731037923.897:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13058 comm="syz.6.1636" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbf5b57e719 code=0x0 [ 543.158595][T13081] loop1: detected capacity change from 0 to 256 [ 543.201571][T13081] FAT-fs (loop1): Directory bread(block 64) failed [ 543.289130][T13085] loop5: detected capacity change from 0 to 512 [ 543.323519][T13085] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 543.353900][T13085] EXT4-fs (loop5): 1 truncate cleaned up [ 543.362049][T13085] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 543.831058][T13081] FAT-fs (loop1): Directory bread(block 65) failed [ 543.846687][T13081] FAT-fs (loop1): Directory bread(block 66) failed [ 543.853440][T13081] FAT-fs (loop1): Directory bread(block 67) failed [ 543.860171][T13081] FAT-fs (loop1): Directory bread(block 68) failed [ 543.867668][T13081] FAT-fs (loop1): Directory bread(block 69) failed [ 543.874539][T13081] FAT-fs (loop1): Directory bread(block 70) failed [ 543.881282][T13081] FAT-fs (loop1): Directory bread(block 71) failed [ 543.887946][T13081] FAT-fs (loop1): Directory bread(block 72) failed [ 543.894507][T13081] FAT-fs (loop1): Directory bread(block 73) failed [ 543.954852][ T29] audit: type=1800 audit(1731037924.787:192): pid=13081 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1641" name="file1" dev="loop1" ino=1048614 res=0 errno=0 [ 544.067454][T13101] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 544.086196][ T7310] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 544.571984][T13111] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.614163][T13111] bridge_slave_1 (unregistering): left allmulticast mode [ 544.646369][T13111] bridge_slave_1 (unregistering): left promiscuous mode [ 544.684614][T13111] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.010267][T13091] loop0: detected capacity change from 0 to 32768 [ 545.096741][T13091] ocfs2: Readonly device (7,0) detected. Cluster services will not be used for this mount. Recovery will be skipped. [ 545.110449][T13091] ocfs2: Mounting device (7,0) on (node local, slot 65535) with ordered data mode. [ 545.176387][T13121] FAULT_INJECTION: forcing a failure. [ 545.176387][T13121] name failslab, interval 1, probability 0, space 0, times 0 [ 545.200261][T13121] CPU: 0 UID: 0 PID: 13121 Comm: syz.5.1648 Not tainted 6.12.0-rc6-next-20241107-syzkaller #0 [ 545.210523][T13121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 545.220579][T13121] Call Trace: [ 545.223862][T13121] [ 545.226797][T13121] dump_stack_lvl+0x241/0x360 [ 545.231486][T13121] ? __pfx_dump_stack_lvl+0x10/0x10 [ 545.236693][T13121] ? __pfx__printk+0x10/0x10 [ 545.241284][T13121] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 545.247433][T13121] ? kernel_text_address+0xa7/0xe0 [ 545.252536][T13121] ? __kernel_text_address+0xd/0x40 [ 545.257723][T13121] should_fail_ex+0x3b0/0x4e0 [ 545.262390][T13121] should_failslab+0xac/0x100 [ 545.267055][T13121] kmem_cache_alloc_node_noprof+0x77/0x380 [ 545.272849][T13121] ? __alloc_skb+0x1c3/0x440 [ 545.277428][T13121] ? stack_trace_save+0x118/0x1d0 [ 545.282452][T13121] __alloc_skb+0x1c3/0x440 [ 545.286862][T13121] ? __pfx___alloc_skb+0x10/0x10 [ 545.291792][T13121] ? kasan_save_track+0x51/0x80 [ 545.296633][T13121] ? kasan_save_track+0x3f/0x80 [ 545.301474][T13121] __pskb_copy_fclone+0xb1/0x10c0 [ 545.306487][T13121] ? __asan_memset+0x23/0x50 [ 545.311066][T13121] ? lockdep_init_map_type+0xa1/0x910 [ 545.316425][T13121] tipc_msg_reassemble+0x1be/0x590 [ 545.321526][T13121] ? __pfx_tipc_msg_reassemble+0x10/0x10 [ 545.327146][T13121] ? lock_release+0xbf/0xa30 [ 545.331725][T13121] ? __raw_spin_lock_init+0x45/0x100 [ 545.337001][T13121] tipc_mcast_xmit+0x24c/0x19c0 [ 545.341848][T13121] ? __might_fault+0xc6/0x120 [ 545.346517][T13121] ? __pfx_tipc_mcast_xmit+0x10/0x10 [ 545.351792][T13121] ? _copy_from_iter+0x377/0x1e70 [ 545.356808][T13121] ? kmem_cache_alloc_node_noprof+0x22c/0x380 [ 545.362866][T13121] ? __build_skb_around+0x245/0x3d0 [ 545.368055][T13121] ? __alloc_skb+0x2d5/0x440 [ 545.372631][T13121] ? __pfx__copy_from_iter+0x10/0x10 [ 545.377907][T13121] ? __pfx___alloc_skb+0x10/0x10 [ 545.382834][T13121] ? tipc_bcast_stop+0xc0/0xc0 [ 545.387588][T13121] ? rcu_is_watching+0x15/0xb0 [ 545.392342][T13121] ? tipc_msg_build+0x42a/0x1070 [ 545.397265][T13121] ? __check_object_size+0x98/0x900 [ 545.402458][T13121] ? tipc_msg_build+0x4b3/0x1070 [ 545.407385][T13121] ? __pfx_lock_release+0x10/0x10 [ 545.412399][T13121] tipc_send_group_bcast+0x8bd/0xbd0 [ 545.417687][T13121] ? __pfx_tipc_send_group_bcast+0x10/0x10 [ 545.423486][T13121] ? tipc_dest_list_purge+0x158/0x190 [ 545.428848][T13121] ? __pfx_woken_wake_function+0x10/0x10 [ 545.434475][T13121] __tipc_sendmsg+0x24bd/0x35f0 [ 545.439321][T13121] ? lock_release+0xbf/0xa30 [ 545.443898][T13121] ? __pfx___tipc_sendmsg+0x10/0x10 [ 545.449088][T13121] ? rcu_is_watching+0x15/0xb0 [ 545.453840][T13121] ? lock_release+0xbf/0xa30 [ 545.458415][T13121] ? __pfx_lock_acquire+0x10/0x10 [ 545.463428][T13121] ? lock_release+0xbf/0xa30 [ 545.468006][T13121] ? deref_stack_reg+0x17c/0x210 [ 545.472928][T13121] ? aa_label_sk_perm+0x4f3/0x6c0 [ 545.477940][T13121] ? __pfx_lock_release+0x10/0x10 [ 545.482953][T13121] ? stack_trace_save+0x118/0x1d0 [ 545.487967][T13121] ? deref_stack_reg+0x17c/0x210 [ 545.492888][T13121] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 545.498245][T13121] ? preempt_count_add+0x93/0x190 [ 545.503261][T13121] ? 0xffffffffa00060c0 [ 545.507399][T13121] ? is_bpf_text_address+0x285/0x2a0 [ 545.512674][T13121] ? is_bpf_text_address+0x26/0x2a0 [ 545.517862][T13121] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 545.524007][T13121] ? rcu_is_watching+0x15/0xb0 [ 545.528760][T13121] ? lock_acquire+0xe3/0x550 [ 545.533337][T13121] ? tipc_sendmsg+0x47/0x70 [ 545.537824][T13121] ? rcu_is_watching+0x15/0xb0 [ 545.542575][T13121] ? tipc_sendmsg+0x47/0x70 [ 545.547062][T13121] ? lock_release+0xbf/0xa30 [ 545.551639][T13121] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 545.557958][T13121] ? __local_bh_enable_ip+0x168/0x200 [ 545.563323][T13121] ? tipc_sendmsg+0x47/0x70 [ 545.567811][T13121] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 545.573518][T13121] ? do_raw_spin_unlock+0x13c/0x8b0 [ 545.578707][T13121] ? __pfx_tipc_sendmsg+0x10/0x10 [ 545.583718][T13121] tipc_sendmsg+0x55/0x70 [ 545.588036][T13121] __sock_sendmsg+0x221/0x270 [ 545.592702][T13121] ____sys_sendmsg+0x52a/0x7e0 [ 545.597464][T13121] ? __pfx_____sys_sendmsg+0x10/0x10 [ 545.602736][T13121] ? __fget_files+0x2a/0x410 [ 545.607317][T13121] ? __fget_files+0x2a/0x410 [ 545.611898][T13121] __sys_sendmsg+0x269/0x350 [ 545.616479][T13121] ? __pfx_lock_release+0x10/0x10 [ 545.621487][T13121] ? __pfx___sys_sendmsg+0x10/0x10 [ 545.626593][T13121] ? __pfx_vfs_write+0x10/0x10 [ 545.631354][T13121] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 545.637665][T13121] ? rcu_is_watching+0x15/0xb0 [ 545.642431][T13121] ? rcu_is_watching+0x15/0xb0 [ 545.647183][T13121] do_syscall_64+0xf3/0x230 [ 545.651677][T13121] ? clear_bhb_loop+0x35/0x90 [ 545.656342][T13121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.662225][T13121] RIP: 0033:0x7ffa0e37e719 [ 545.666624][T13121] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 545.686215][T13121] RSP: 002b:00007ffa0f173038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 545.694615][T13121] RAX: ffffffffffffffda RBX: 00007ffa0e535f80 RCX: 00007ffa0e37e719 [ 545.702575][T13121] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000006 [ 545.710534][T13121] RBP: 00007ffa0f173090 R08: 0000000000000000 R09: 0000000000000000 [ 545.718490][T13121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 545.726455][T13121] R13: 0000000000000000 R14: 00007ffa0e535f80 R15: 00007ffe556607e8 [ 545.734416][T13121] [ 546.331866][ T5829] ocfs2: Unmounting device (7,0) on (node local) [ 546.341005][ T5829] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN PTI [ 546.353616][ T5829] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 546.362038][ T5829] CPU: 1 UID: 0 PID: 5829 Comm: syz-executor Not tainted 6.12.0-rc6-next-20241107-syzkaller #0 [ 546.372371][ T5829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 546.382433][ T5829] RIP: 0010:ocfs2_evict_inode+0xdd3/0x4680 [ 546.388262][ T5829] Code: 00 00 4c 89 e0 48 c1 e8 03 42 80 3c 30 00 74 08 4c 89 e7 e8 1f 74 7d fe 4c 01 f3 4d 8b 24 24 49 83 c4 08 4c 89 e0 48 c1 e8 03 <42> 80 3c 30 00 74 08 4c 89 e7 e8 fe 73 7d fe 49 8b 3c 24 49 81 c7 [ 546.407880][ T5829] RSP: 0018:ffffc9000402f320 EFLAGS: 00010202 [ 546.413961][ T5829] RAX: 0000000000000001 RBX: fffff52000805e78 RCX: ffff888034065a00 [ 546.421949][ T5829] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 546.429926][ T5829] RBP: ffffc9000402fa70 R08: ffffffff838c68be R09: 1ffff1100bb7e0be [ 546.437891][ T5829] R10: dffffc0000000000 R11: ffffed100bb7e0bf R12: 0000000000000008 [ 546.445854][ T5829] R13: 1ffff1100bb7e0ec R14: dffffc0000000000 R15: ffff88805dbf0878 [ 546.453815][ T5829] FS: 000055558af6f500(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 546.462733][ T5829] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 546.469307][ T5829] CR2: 00007fbf5b5618a0 CR3: 000000006383e000 CR4: 00000000003526f0 [ 546.477272][ T5829] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 546.485235][ T5829] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 546.493196][ T5829] Call Trace: [ 546.496464][ T5829] [ 546.499383][ T5829] ? __die_body+0x5f/0xb0 [ 546.503705][ T5829] ? die_addr+0xb0/0xe0 [ 546.507850][ T5829] ? exc_general_protection+0x3dd/0x5d0 [ 546.513392][ T5829] ? up_write+0x1a9/0x590 [ 546.517713][ T5829] ? asm_exc_general_protection+0x26/0x30 [ 546.523430][ T5829] ? ocfs2_evict_inode+0xd1e/0x4680 [ 546.528622][ T5829] ? ocfs2_evict_inode+0xdd3/0x4680 [ 546.533812][ T5829] ? __pfx__prb_read_valid+0x10/0x10 [ 546.539087][ T5829] ? arch_scale_cpu_capacity+0x16/0xb0 [ 546.544534][ T5829] ? __pfx_ocfs2_evict_inode+0x10/0x10 [ 546.549985][ T5829] ? rcu_is_watching+0x15/0xb0 [ 546.554743][ T5829] ? __switch_to+0xe93/0x1c30 [ 546.559418][ T5829] ? sched_clock_cpu+0x76/0x490 [ 546.564262][ T5829] ? rcu_is_watching+0x15/0xb0 [ 546.569015][ T5829] ? rcu_is_watching+0x15/0xb0 [ 546.573766][ T5829] ? lock_release+0xbf/0xa30 [ 546.578346][ T5829] ? __pfx_lock_acquire+0x10/0x10 [ 546.583358][ T5829] ? deref_stack_reg+0x17c/0x210 [ 546.588285][ T5829] ? __pfx_lock_release+0x10/0x10 [ 546.593299][ T5829] ? stack_trace_save+0x118/0x1d0 [ 546.598319][ T5829] ? unwind_next_frame+0x18e6/0x22d0 [ 546.603592][ T5829] ? deref_stack_reg+0x17c/0x210 [ 546.608523][ T5829] ? preempt_count_add+0x93/0x190 [ 546.613541][ T5829] ? rcu_is_watching+0x15/0xb0 [ 546.618294][ T5829] ? lock_release+0xbf/0xa30 [ 546.622872][ T5829] ? do_raw_spin_lock+0x14f/0x370 [ 546.627886][ T5829] ? __pfx_lock_release+0x10/0x10 [ 546.632897][ T5829] ? do_raw_spin_unlock+0x13c/0x8b0 [ 546.638084][ T5829] ? rcu_is_watching+0x15/0xb0 [ 546.642836][ T5829] ? _raw_spin_unlock+0x28/0x50 [ 546.647677][ T5829] ? writeback_single_inode+0x400/0x660 [ 546.653213][ T5829] ? write_inode_now+0x1dd/0x260 [ 546.658143][ T5829] ? rcu_is_watching+0x15/0xb0 [ 546.662895][ T5829] ? lock_release+0xbf/0xa30 [ 546.667473][ T5829] ? inode_wait_for_writeback+0x111/0x2a0 [ 546.673182][ T5829] ? __pfx_lock_release+0x10/0x10 [ 546.678192][ T5829] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 546.684255][ T5829] ? do_raw_spin_unlock+0x13c/0x8b0 [ 546.689450][ T5829] ? __pfx_ocfs2_evict_inode+0x10/0x10 [ 546.694905][ T5829] evict+0x4e8/0x9b0 [ 546.698790][ T5829] ? __pfx_evict+0x10/0x10 [ 546.703194][ T5829] ? iput+0x713/0xa50 [ 546.707170][ T5829] ocfs2_free_slot_info+0x94/0x270 [ 546.712275][ T5829] ? destroy_workqueue+0x86f/0xc40 [ 546.717386][ T5829] ocfs2_delete_osb+0x58/0x180 [ 546.722138][ T5829] ocfs2_dismount_volume+0x594/0x8f0 [ 546.727415][ T5829] ? __pfx_ocfs2_dismount_volume+0x10/0x10 [ 546.733213][ T5829] ? __pfx_evict_inodes+0x10/0x10 [ 546.738226][ T5829] ? __pfx_ocfs2_put_super+0x10/0x10 [ 546.743502][ T5829] generic_shutdown_super+0x139/0x2d0 [ 546.748868][ T5829] kill_block_super+0x44/0x90 [ 546.753535][ T5829] deactivate_locked_super+0xc4/0x130 [ 546.758897][ T5829] cleanup_mnt+0x41f/0x4b0 [ 546.763305][ T5829] task_work_run+0x24f/0x310 [ 546.767888][ T5829] ? __pfx_task_work_run+0x10/0x10 [ 546.772986][ T5829] ? __x64_sys_umount+0x123/0x170 [ 546.777998][ T5829] ? rcu_is_watching+0x15/0xb0 [ 546.782754][ T5829] syscall_exit_to_user_mode+0x168/0x370 [ 546.788382][ T5829] do_syscall_64+0x100/0x230 [ 546.792959][ T5829] ? clear_bhb_loop+0x35/0x90 [ 546.797624][ T5829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.803510][ T5829] RIP: 0033:0x7f7dbab7fa47 [ 546.807913][ T5829] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 546.827505][ T5829] RSP: 002b:00007ffee7418248 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 546.835907][ T5829] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f7dbab7fa47 [ 546.843867][ T5829] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffee7418300 [ 546.851826][ T5829] RBP: 00007ffee7418300 R08: 0000000000000000 R09: 0000000000000000 [ 546.859786][ T5829] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffee7419380 [ 546.867747][ T5829] R13: 00007f7dbabf123c R14: 0000000000084c2e R15: 00007ffee74193c0 [ 546.875711][ T5829] [ 546.878722][ T5829] Modules linked in: [ 546.883758][ T5829] ---[ end trace 0000000000000000 ]--- [ 546.893614][ T5829] RIP: 0010:ocfs2_evict_inode+0xdd3/0x4680 [ 546.899881][ T5829] Code: 00 00 4c 89 e0 48 c1 e8 03 42 80 3c 30 00 74 08 4c 89 e7 e8 1f 74 7d fe 4c 01 f3 4d 8b 24 24 49 83 c4 08 4c 89 e0 48 c1 e8 03 <42> 80 3c 30 00 74 08 4c 89 e7 e8 fe 73 7d fe 49 8b 3c 24 49 81 c7 [ 546.919828][ T5829] RSP: 0018:ffffc9000402f320 EFLAGS: 00010202 [ 546.926738][ T5829] RAX: 0000000000000001 RBX: fffff52000805e78 RCX: ffff888034065a00 [ 546.934910][ T5829] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 546.943441][ T5829] RBP: ffffc9000402fa70 R08: ffffffff838c68be R09: 1ffff1100bb7e0be [ 547.006777][ T5829] R10: dffffc0000000000 R11: ffffed100bb7e0bf R12: 0000000000000008 [ 547.014804][ T5829] R13: 1ffff1100bb7e0ec R14: dffffc0000000000 R15: ffff88805dbf0878 [ 547.022781][ T5829] FS: 000055558af6f500(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 547.031752][ T5829] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 547.038371][ T5829] CR2: 000000110c3b684b CR3: 000000006383e000 CR4: 00000000003526f0 [ 547.046434][ T5829] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 547.054408][ T5829] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 547.068122][ T5829] Kernel panic - not syncing: Fatal exception [ 547.074432][ T5829] Kernel Offset: disabled [ 547.078740][ T5829] Rebooting in 86400 seconds..