last executing test programs: 9m19.950135455s ago: executing program 32 (id=75): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvmmsg(r0, 0x0, 0x0, 0x20, 0x0) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000000)=0x3, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 9m17.380915696s ago: executing program 33 (id=87): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, @none, 0x2}, 0xa) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r1, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa) shutdown(r0, 0x1) 9m16.299265712s ago: executing program 34 (id=94): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x3, 0x0, &(0x7f0000000480)='syzkaller\x00', 0x8}, 0x94) 9m2.137567252s ago: executing program 35 (id=146): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="080086dd0001"], 0xfdef) unshare(0x76020400) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000e9ff0000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b70300002bb91a008500000008000000bc0900000000000045080100002000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffffc40200000800000018220000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000004608efff76000000bf9800000000000056090000000000008500000000020800b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 9m0.763752201s ago: executing program 36 (id=161): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x50, 0x0, 0x100000001, {0x7, 0x28, 0x77, 0x2143040, 0x7f7f, 0x9, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffd}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0x5, 0x5, 0x10000000}}]}}]}, 0x58}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000a80)=@newqdisc={0x70, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbfb, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0x1, 0x5}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x8001, 0x7, 0x7fff, 0x5, 0x3ff, 0x401432d}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xb8a4274557422f5b}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xffffffff, 0xfffffff8, 0x9, 0x3}}]}]}}}]}, 0x70}, 0x1, 0x0, 0x0, 0x55}, 0xc010) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 8m59.992259924s ago: executing program 37 (id=166): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000280)={0x0, 0x0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x44, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}]}]}, 0x44}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x7c}}, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x400000000000235, 0x0) 8m53.540955592s ago: executing program 38 (id=172): unshare(0x22020600) r0 = socket(0x1d, 0x2, 0x6) r1 = socket(0x400000000010, 0x3, 0x0) write(r1, &(0x7f0000000040)="0f03000019002551075c0165ff0ffc02802000030011000500e1000cee0203001a000000", 0x33a) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, 0x0, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, 0x0, 0x0) getsockopt$inet_int(r0, 0x0, 0x5, 0x0, &(0x7f0000000240)) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r3, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, 0x0) 8m47.862217397s ago: executing program 39 (id=178): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000003c40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002440)=""/214, 0xd6}}], 0x1, 0x8309, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff3a) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = bpf$ITER_CREATE(0xb, 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, 0x0, 0xd0) write$cgroup_int(r2, 0x0, 0x0) 8m44.930172853s ago: executing program 40 (id=187): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000540)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0x9}]}, &(0x7f00000002c0)=0x22) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000080)={r2, 0x6}, 0x8) 8m44.150569526s ago: executing program 41 (id=191): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) unshare(0x400) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) 8m40.499366033s ago: executing program 42 (id=198): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffefff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0x3}, {}, {0x2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x80, '\x00', 0x8, 0x461b, 0xa, 0xfffffff9}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x480d8}, 0x4000000) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x70bd28, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0x3}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 8m32.886835061s ago: executing program 43 (id=206): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f00000000c0)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc084}, 0x880) 8m28.626277685s ago: executing program 44 (id=214): r0 = socket(0x2, 0x3, 0x67) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000380)={0x1d, r2}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000000)={0x1d, r3}, 0x10) 8m26.107572904s ago: executing program 45 (id=225): write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000740)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000001fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000009a5ab6e10c00000000000000040000000000000000000000000000000000000000000000ffffffffffffffff000000000020000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008000000000000000001000000000000004400050000000000000000000000000000000000000000003c"], 0xfc}, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = socket(0x8000000010, 0x2, 0x0) write(r2, &(0x7f00000002c0)="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", 0xfc) 8m25.232152601s ago: executing program 46 (id=230): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x880) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000140)={'ip_vti0\x00', 0x0, 0x700, 0x20, 0x341, 0x0, {{0xf, 0x4, 0x1, 0x8, 0x3c, 0x6b, 0x0, 0xa, 0x29, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x42}, {[@generic={0x94, 0xc, "74141141c1e93e03fc23"}, @cipso={0x86, 0x1c, 0x0, [{0x1, 0x11, "727c983251ed15de07ec8a9ae94d31"}, {0x6, 0x3, "ee"}, {0x2, 0x2}]}]}}}}}) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0xa, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb10000000800894f4820", 0x1fffe, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 8m16.19516905s ago: executing program 47 (id=238): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) unshare(0x2c020400) clock_gettime(0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000004c0)=@newtaction={0x50, 0x30, 0xb, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff2, 0x9}}]}, {0x4}, {0xc}, {0xc, 0x9}}}]}]}, 0x50}}, 0x0) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e23, 0x8001, @empty, 0xffffff5d}, 0x1c) listen(r4, 0x50) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r5, &(0x7f0000000200)={0xa, 0x4e23, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) r6 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e23, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}, 0x100000b}, 0x1c) listen(r6, 0xb) listen(r5, 0x50) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x0, @dev}, 0x2}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) 8m15.992681509s ago: executing program 5 (id=240): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x109001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) close(0x3) 8m13.284049696s ago: executing program 5 (id=241): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4, 0x8000001, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000) writev(r0, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff29}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff78, 0x0, 0x0}, &(0x7f0000000340)=0x40) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x800000) 8m13.019860857s ago: executing program 5 (id=242): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed6"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r1, 0xffffffffffffffff, 0x26, 0x0, @void}, 0x10) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x2) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 8m12.851431014s ago: executing program 5 (id=243): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x21000, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0xb101e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount(0x0, 0x0, &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) 8m12.771778308s ago: executing program 5 (id=244): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000002640)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c40)=[@ip_retopts={{0x14, 0x0, 0x7, {[@noop, @ssrr={0x89, 0x3, 0x2f}]}}}], 0x18}}], 0x2, 0xf00) 8m12.681859881s ago: executing program 7 (id=245): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r1], 0x1c}}, 0x8004) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) write$nci(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="414601", @ANYRES8=r9], 0x4) 8m12.451810861s ago: executing program 7 (id=246): unshare(0x22020400) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000001a00)=""/157, &(0x7f0000000700)=0x9d) 8m12.347815996s ago: executing program 7 (id=247): r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, 0x0, 0x1000, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x24000064) bind$netlink(r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000000)=0xfffffffe, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000480)=0x17fe, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0) 8m12.314430857s ago: executing program 5 (id=248): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000002900)=r1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 8m12.057651238s ago: executing program 48 (id=248): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000002900)=r1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 8m12.049530259s ago: executing program 7 (id=250): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x21000, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0xb101e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount(0x0, 0x0, &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) 8m11.982543141s ago: executing program 7 (id=251): connect$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) 8m11.455844884s ago: executing program 7 (id=252): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0xd, &(0x7f0000000000)='\a\x00\x00\x00\x00\x00\x00\x00', 0x8) 8m11.200952935s ago: executing program 49 (id=252): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0xd, &(0x7f0000000000)='\a\x00\x00\x00\x00\x00\x00\x00', 0x8) 8m10.559674843s ago: executing program 9 (id=231): socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x15, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x810) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x20008090}, 0x20009801) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x41000, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3fe}, 0x94) r1 = socket(0x10, 0x80002, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) sendmsg$NL80211_CMD_TESTMODE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000740)={0x24, 0x0, 0x0, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TESTDATA={0x4}, @NL80211_ATTR_TESTDATA={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x20004840) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000180)=[{0x1d, 0xde, 0xa, 0x5}, {0xd, 0x85, 0xd, 0x403}, {0x8, 0x0, 0x6, 0x1}]}) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000040)=ANY=[], 0x6) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, 0x0, 0xa800) 8m10.495182095s ago: executing program 9 (id=254): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000000)=0x9, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000000)={0x1d, r3, 0x3, {}, 0xfe}, 0x18) accept4$packet(r2, 0x0, &(0x7f0000000140), 0x1000) recvfrom$inet(r2, 0x0, 0x0, 0x42, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x1, 0x4, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x80}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x8000}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x24000014) 8m9.343453025s ago: executing program 9 (id=255): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0xfc, 0x0}, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) write(r0, &(0x7f0000000700)="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", 0x101) 8m9.291392787s ago: executing program 9 (id=256): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x21000, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0xb101e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) 8m9.145902913s ago: executing program 9 (id=257): sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0200001900010000ffea2010000900e0000001000000000000000000000000ac1414bb00000000000000000000000000000000ffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000084010500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000ac1414aa000000000000000000000000000000003c00000000000000fe80000000000000000000000000000000000000000000000008000000000000000000007f000001000000000000000000000000000000003200000000000000e00000010000000000000000000000000000800003030000000000000000000000000000ff0100000000000000000000000000010000000033"], 0x23c}}, 0x0) 8m8.687655343s ago: executing program 9 (id=258): r0 = socket$kcm(0x2b, 0x1, 0x0) socket$inet6(0xa, 0x5, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) writev(r1, 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r3) sendmsg$IEEE802154_ADD_IFACE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r4, 0x201, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000054) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c08d) shutdown(r0, 0x1) 8m8.513002791s ago: executing program 50 (id=258): r0 = socket$kcm(0x2b, 0x1, 0x0) socket$inet6(0xa, 0x5, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) writev(r1, 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r3) sendmsg$IEEE802154_ADD_IFACE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r4, 0x201, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000054) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c08d) shutdown(r0, 0x1) 8m1.257054143s ago: executing program 8 (id=239): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, &(0x7f00000016c0)=0x8000007b, 0x4) 8m1.11660766s ago: executing program 8 (id=260): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in=@remote, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe}, 0x9, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, 0x0, {0x8}, {0xffff}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0x8}}}, 0xb8}}, 0x0) 8m0.940659997s ago: executing program 8 (id=261): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000002000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a31000000002800048008000240000000000800014000000005876bd29d76657468315f6d6163767461700000000900010073797a310000000058000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6dfaa0767461700000000800014000000005"], 0xf4}}, 0x0) 8m0.87673194s ago: executing program 8 (id=262): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x21000, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0xb101e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) 8m0.740674785s ago: executing program 8 (id=263): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000080)=ANY=[@ANYBLOB="050000000208"], 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000) sendmsg$can_bcm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4004844) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=@newlink={0x48, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x901b, 0x8181}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 8m0.17179285s ago: executing program 8 (id=264): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f0000001d40)={0x1, &(0x7f0000001d00)=[{0x0, 0x0, 0x0, @link_local}]}) 7m59.874948193s ago: executing program 51 (id=264): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f0000001d40)={0x1, &(0x7f0000001d00)=[{0x0, 0x0, 0x0, @link_local}]}) 7m59.865842853s ago: executing program 0 (id=266): unshare(0x20000400) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, 0x0, 0x0) 7m59.753371398s ago: executing program 0 (id=267): socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x7) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e24, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xc, 0x2}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x80, 0x0, 0x0, &(0x7f0000000000)}, 0x0) 7m59.571880116s ago: executing program 0 (id=268): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000400)=0x8, 0x4) 7m59.47794367s ago: executing program 0 (id=269): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x21000, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0xb101e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) 7m59.168523473s ago: executing program 0 (id=270): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, 0x40, 0x107, 0x70bd2b, 0x0, {0x2, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x84;'}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 7m58.438655825s ago: executing program 0 (id=274): socket(0x200000000000011, 0x2, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31b"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r1, r2, 0x26, 0x0, @void}, 0x10) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 7m58.134815028s ago: executing program 52 (id=274): socket(0x200000000000011, 0x2, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31b"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r1, r2, 0x26, 0x0, @void}, 0x10) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 59.211454676s ago: executing program 4 (id=3074): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1c00000004000000030000000000000001020000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000200"/28], 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map, 0xffffffffffffffff, 0xb, 0x2010}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1200000008000000040000000200000000000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1880000000000700000000001d0e000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000010400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4) sendmsg$inet(r7, &(0x7f0000000100)={0x0, 0xfeff, 0x0}, 0x20000000) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x60, 0x30, 0x9, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_skbedit={0x48, 0x1, 0x0, 0x0, {{0xc}, {0x38, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x0, 0x20020000}}]}, {0x4}, {0xc}, {0xc, 0x9}}}]}]}, 0x60}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0xd, 0xf, &(0x7f0000000780)=ANY=[@ANYBLOB="30edd164e1bb359a8ad5fb06ae8ffd85a969db1d33c12bedea98f71f0057538c78540fbeb263374c60acd25157d044c57475c934e6", @ANYRESOCT=0x0, @ANYRESHEX=r4], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x20040010) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000ef00)=@newtaction={0x68, 0x30, 0x1, 0x70bd27, 0x25dfdbfe, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x2, 0x6, 0x3, 0x1}, 0x9}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x68}}, 0x4) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) r10 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(r10, 0x400443c8, &(0x7f00000001c0)={r0, 0x7ff}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), 0x10, 0x2}, 0x94) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x503800, 0x0) close(r11) r12 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETOFFLOAD(r12, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r11, 0x4010744d, &(0x7f0000000180)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYRESDEC=r13], 0x7c}, 0x1, 0x0, 0x0, 0x803}, 0x0) 58.975669067s ago: executing program 4 (id=3068): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000380)={0x2, 0x5}, 0x4) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x18, 0x1412, 0x1, 0x70bd29, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x18}}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x800700, &(0x7f00000000c0)={[{@data_err_ignore}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@sysvgroups}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x3}}]}, 0x1, 0x46f, &(0x7f0000000bc0)="$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") 58.539372466s ago: executing program 4 (id=3069): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8080, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r2, 0xc0286687, &(0x7f0000000440)={0x3, 0xd, 0xbb, &(0x7f0000000500)=""/187}) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000280)=[@iv={0xe8, 0x117, 0x2, 0xd3, "9b062b0771ac7c43fb2e554ccee741b3d7597b9102551e6e5206626592c02734cb1b1d9f38367e3030cd4b684c831fc5983a504babcd256a52fef77bbf3948c5073486bbb2354ffe837956be17efe86badf73f4ceb52185fd064674f7733d366398af2fd76106ce14a77ead64e287a4a788214f73568fb01c79084af8f901873fbcdb19a8fc016334e72ba70b55de5981ea4ccbb956d2a01a31c292df43dbd5dc19c75485ba99b0c902dace9eb7e89c5a0ac41570ad26ca6495e85e9b622a566d4d0742baa4968a6179433631e9d765dbca612"}, @op={0x18, 0x117, 0x3, 0x1}], 0x100}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000200)="b8010000000f01c166b81c018ed036660fdfdc0f0f92e40000009466ba210066b8090066ef66b8c5000f00d866b813010f00d08fc978c216670f42d366b83e008ec8", 0x42}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 57.927551303s ago: executing program 4 (id=3073): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x0, &(0x7f0000000040)={[{@nodatacow}, {@flushoncommit}]}, 0x11, 0x5109, &(0x7f000000f400)="$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") r0 = creat(&(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x7, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_clone(0x80, &(0x7f0000000380)="776e1cda814e73e3089de102c50f415a41b4", 0x12, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000040)={[0x0, 0x2, 0x80, 0x25, 0x20000004, 0x7f, 0x44233, 0x0, 0x4, 0x9c1, 0x8002, 0x1005, 0xc, 0x4db6, 0x0, 0xfffffdfffffffffd], 0x30000, 0x152783}) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x1}) ioctl$KVM_RUN(r3, 0xae80, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket(0x29, 0x5, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x119, 0xc, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x200, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x2efb, &(0x7f0000000280)={0x0, 0x8918, 0x0, 0x6, 0x37c, 0x0, r0}, &(0x7f0000000100)=0x0, &(0x7f0000000300)) r7 = mmap$IORING_OFF_SQES(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x3000009, 0x4010, r0, 0x10000000) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) unlinkat(r8, &(0x7f0000000040)='./bus\x00', 0x200) syz_io_uring_submit(r6, r7, &(0x7f0000000340)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x9, 0x0, 0x0, 0xffffff01, 0x2, 0x1, {0x0, 0x0, r8}}) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4, 0x32, 0xffffffffffffffff, 0x0) write$P9_RREMOVE(r0, &(0x7f0000000080)={0x7, 0x7b, 0x2}, 0x7) r9 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r9, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x2}}, 0x26) io_submit(r5, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x4030}]) r10 = getegid() setregid(0xffffffffffffffff, r10) 54.527856144s ago: executing program 4 (id=3089): pipe2$watch_queue(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r1, 0xb5) close_range(r0, 0xffffffffffffffff, 0x0) 53.147339764s ago: executing program 4 (id=3093): pipe2$watch_queue(&(0x7f0000000580), 0x80) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = syz_usb_connect(0x5, 0x194, &(0x7f00000001c0)={{0x12, 0x1, 0x250, 0xa4, 0xdd, 0x6b, 0x40, 0x4b4, 0x3101, 0x559b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x182, 0x2, 0x3, 0x4, 0x70, 0x81, [{{0x9, 0x4, 0xea, 0x4, 0x1, 0xe8, 0x3b, 0xb5, 0x3, [@cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, '\\j'}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0xe, 0x7, 0x8, 0xff}, {0x6, 0x24, 0x1a, 0x8}, [@mdlm_detail={0x31, 0x24, 0x13, 0xff, "ffcc68c6eb931b324cba2b1865f045e3dd444edf3186449b2d9235d9487ec084d5c145a8befc2c54ff6ca15c35"}, @obex={0x5, 0x24, 0x15, 0x2}, @mdlm={0x15, 0x24, 0x12, 0x7ff}, @obex={0x5, 0x24, 0x15, 0x6}, @mbim_extended={0x8, 0x24, 0x1c, 0xfffa, 0x0, 0x9}, @dmm={0x7, 0x24, 0x14, 0x2, 0x7}]}], [{{0x9, 0x5, 0xd, 0x0, 0x200, 0x3, 0x8, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x3}]}}]}}, {{0x9, 0x4, 0x4a, 0xf2, 0x3, 0x24, 0xe1, 0xf9, 0x0, [@hid_hid={0x9, 0x21, 0x37d5, 0xd0, 0x1, {0x22, 0xb34}}], [{{0x9, 0x5, 0x0, 0x3, 0x400, 0xd, 0x7, 0x69, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x0, 0xfff}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x8001}]}}, {{0x9, 0x5, 0xe, 0x2, 0x40, 0x4, 0x6, 0x6c, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xff, 0x4}]}}, {{0x9, 0x5, 0xb, 0x6, 0x1cf, 0x8, 0x9, 0x1, [@generic={0xa0, 0x22, "5ddcb72070839e1d11d440068896393c5fa26796fb151c7cf0ccb258c68f73ef136c8f6102a2a232a87135751f84774e095633316bdaf8034d6978a1ccb385ab7181af5f177f48d9202e4d99543d095706201f29504a1014476da66d914f6088e118867f5889cd62c2410eec564e491434926e101796f742dcf3a80bbced2b5e279e308522e65511e61769e6dc5fb794eaac899b80032ba954eeb902d713"}]}}]}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x250, 0xca, 0xfe, 0x3, 0x78, 0x8}, 0x5e, &(0x7f0000000100)={0x5, 0xf, 0x5e, 0x6, [@ssp_cap={0x20, 0x10, 0xa, 0x8, 0x5, 0x4, 0xf, 0x1, [0xc000, 0xff7e00, 0xcf, 0xf, 0xc000]}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x8, 0xb, 0x2}, @ssp_cap={0x10, 0x10, 0xa, 0x7f, 0x1, 0x9, 0x0, 0x9, [0xf]}, @ss_container_id={0x14, 0x10, 0x4, 0x42, "c773b0101c20a00e282510f0f626f41c"}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0x8, 0x7, 0x5, 0xec, 0xff}]}, 0x3, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x438}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0xc0a}}, {0x18, &(0x7f0000000400)=@string={0x18, 0x3, "8d3001522c504b43d49a61311c72ec0773dba6225823"}}]}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-512\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x455a7000) recvmmsg(r3, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000024c0)=""/4096, 0x1000}], 0x1}, 0x1}], 0x1, 0x10000, 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000600)={0x14, &(0x7f00000004c0)={0xc33ce83e0bd6be7d, 0x24, 0x5, {0x5, 0xf, "1adcc2"}}, &(0x7f00000005c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000740)={0x1c, &(0x7f0000000640)={0x20, 0x9, 0x76, "c4cd7bcc31e0b8370abf05ddb364b5739f28a47ed5d615f7768217f363c49a14b56a7dee0c6ea9659eff18dc5f67472fe14d1d8d2b7bebc06244614f050683a1c74ac7a2a2d17dcdd418d910b7b52bed457c4c48f923df7449d172c8d91660d3bddf64e77c6b5daf56114d79953e85ebaaf0b025fb82"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x2c}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0xa}}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000c80)={0x34, &(0x7f0000000480)={0x40, 0xb, 0x1, "e4"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newtaction={0x108, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0xf4, 0x1, [@m_mirred={0xf0, 0x1, 0x0, 0x0, {{0xb}, {0xc4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x5, 0x2, {{0x0, 0x2, 0x2}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x800, 0x4, 0x6, 0x2, 0xfff}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x91, 0x4, 0x9, 0x9}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x400, 0x7, 0xffffffffffffffff, 0x31, 0x8}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0xffffffff, 0x1, 0xfa14}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x38, 0x3, 0x87, 0x8}, 0x2}}]}, {0x4, 0xa}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x108}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x800, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x20008000) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r8 = syz_open_dev$evdev(&(0x7f00000000c0), 0x3, 0x862b01) ioctl$EVIOCSFF(r8, 0x40304580, &(0x7f00000003c0)={0x56, 0x9f7, 0x40, {0x1, 0x1}, {0x4c, 0x82}, @period={0x5b, 0xd, 0x85, 0x62b0, 0x6, {0x91, 0x9, 0x2, 0x800}, 0x0, &(0x7f0000000940)}}) ioctl$KVM_NMI(r7, 0xae9a) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000002c0)={[0x1, 0x5, 0x80, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x3, 0xb3a6, 0x0, 0x9, 0xa, 0xd], 0x0, 0x141d01}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 52.661404136s ago: executing program 53 (id=3093): pipe2$watch_queue(&(0x7f0000000580), 0x80) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = syz_usb_connect(0x5, 0x194, &(0x7f00000001c0)={{0x12, 0x1, 0x250, 0xa4, 0xdd, 0x6b, 0x40, 0x4b4, 0x3101, 0x559b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x182, 0x2, 0x3, 0x4, 0x70, 0x81, [{{0x9, 0x4, 0xea, 0x4, 0x1, 0xe8, 0x3b, 0xb5, 0x3, [@cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, '\\j'}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0xe, 0x7, 0x8, 0xff}, {0x6, 0x24, 0x1a, 0x8}, [@mdlm_detail={0x31, 0x24, 0x13, 0xff, "ffcc68c6eb931b324cba2b1865f045e3dd444edf3186449b2d9235d9487ec084d5c145a8befc2c54ff6ca15c35"}, @obex={0x5, 0x24, 0x15, 0x2}, @mdlm={0x15, 0x24, 0x12, 0x7ff}, @obex={0x5, 0x24, 0x15, 0x6}, @mbim_extended={0x8, 0x24, 0x1c, 0xfffa, 0x0, 0x9}, @dmm={0x7, 0x24, 0x14, 0x2, 0x7}]}], [{{0x9, 0x5, 0xd, 0x0, 0x200, 0x3, 0x8, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x3}]}}]}}, {{0x9, 0x4, 0x4a, 0xf2, 0x3, 0x24, 0xe1, 0xf9, 0x0, [@hid_hid={0x9, 0x21, 0x37d5, 0xd0, 0x1, {0x22, 0xb34}}], [{{0x9, 0x5, 0x0, 0x3, 0x400, 0xd, 0x7, 0x69, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x0, 0xfff}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x8001}]}}, {{0x9, 0x5, 0xe, 0x2, 0x40, 0x4, 0x6, 0x6c, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xff, 0x4}]}}, {{0x9, 0x5, 0xb, 0x6, 0x1cf, 0x8, 0x9, 0x1, [@generic={0xa0, 0x22, "5ddcb72070839e1d11d440068896393c5fa26796fb151c7cf0ccb258c68f73ef136c8f6102a2a232a87135751f84774e095633316bdaf8034d6978a1ccb385ab7181af5f177f48d9202e4d99543d095706201f29504a1014476da66d914f6088e118867f5889cd62c2410eec564e491434926e101796f742dcf3a80bbced2b5e279e308522e65511e61769e6dc5fb794eaac899b80032ba954eeb902d713"}]}}]}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x250, 0xca, 0xfe, 0x3, 0x78, 0x8}, 0x5e, &(0x7f0000000100)={0x5, 0xf, 0x5e, 0x6, [@ssp_cap={0x20, 0x10, 0xa, 0x8, 0x5, 0x4, 0xf, 0x1, [0xc000, 0xff7e00, 0xcf, 0xf, 0xc000]}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x8, 0xb, 0x2}, @ssp_cap={0x10, 0x10, 0xa, 0x7f, 0x1, 0x9, 0x0, 0x9, [0xf]}, @ss_container_id={0x14, 0x10, 0x4, 0x42, "c773b0101c20a00e282510f0f626f41c"}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0x8, 0x7, 0x5, 0xec, 0xff}]}, 0x3, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x438}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0xc0a}}, {0x18, &(0x7f0000000400)=@string={0x18, 0x3, "8d3001522c504b43d49a61311c72ec0773dba6225823"}}]}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-512\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x455a7000) recvmmsg(r3, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000024c0)=""/4096, 0x1000}], 0x1}, 0x1}], 0x1, 0x10000, 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000600)={0x14, &(0x7f00000004c0)={0xc33ce83e0bd6be7d, 0x24, 0x5, {0x5, 0xf, "1adcc2"}}, &(0x7f00000005c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000740)={0x1c, &(0x7f0000000640)={0x20, 0x9, 0x76, "c4cd7bcc31e0b8370abf05ddb364b5739f28a47ed5d615f7768217f363c49a14b56a7dee0c6ea9659eff18dc5f67472fe14d1d8d2b7bebc06244614f050683a1c74ac7a2a2d17dcdd418d910b7b52bed457c4c48f923df7449d172c8d91660d3bddf64e77c6b5daf56114d79953e85ebaaf0b025fb82"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x2c}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0xa}}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000c80)={0x34, &(0x7f0000000480)={0x40, 0xb, 0x1, "e4"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newtaction={0x108, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0xf4, 0x1, [@m_mirred={0xf0, 0x1, 0x0, 0x0, {{0xb}, {0xc4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x5, 0x2, {{0x0, 0x2, 0x2}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x800, 0x4, 0x6, 0x2, 0xfff}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x91, 0x4, 0x9, 0x9}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x400, 0x7, 0xffffffffffffffff, 0x31, 0x8}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0xffffffff, 0x1, 0xfa14}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x38, 0x3, 0x87, 0x8}, 0x2}}]}, {0x4, 0xa}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x108}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x800, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x20008000) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r8 = syz_open_dev$evdev(&(0x7f00000000c0), 0x3, 0x862b01) ioctl$EVIOCSFF(r8, 0x40304580, &(0x7f00000003c0)={0x56, 0x9f7, 0x40, {0x1, 0x1}, {0x4c, 0x82}, @period={0x5b, 0xd, 0x85, 0x62b0, 0x6, {0x91, 0x9, 0x2, 0x800}, 0x0, &(0x7f0000000940)}}) ioctl$KVM_NMI(r7, 0xae9a) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000002c0)={[0x1, 0x5, 0x80, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x3, 0xb3a6, 0x0, 0x9, 0xa, 0xd], 0x0, 0x141d01}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 5.918118949s ago: executing program 2 (id=3323): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r1) r2 = socket(0x28, 0x5, 0x0) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r3, 0x4) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0xfffffffffffffffe}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x80000001, 0x7fffffff, 0xfffffffffffffffe}, 0x0, 0x0) 4.925765274s ago: executing program 2 (id=3327): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r1], 0x1c}}, 0x8004) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) write$nci(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="414601", @ANYRES8=r10], 0x4) 4.31888609s ago: executing program 3 (id=3329): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000e80)=@newtfilter={0x478, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0x448, 0x2, [@TCA_BASIC_POLICE={0x444, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0xffffffffffffffff, 0x8000, 0x6, 0x3e9, {0x4, 0x1, 0x200, 0x0, 0xfc01, 0x8001}, {0x7, 0x0, 0x5, 0x5, 0xfffc}, 0x3235c424, 0x9, 0xffffffff}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x8000, 0x9, 0x7, 0x200, 0x1, 0x1b5, 0x7, 0x2a, 0x8, 0x5, 0x4, 0x28, 0x0, 0x6, 0x400, 0x3, 0x7, 0x1, 0x9, 0x8, 0x2, 0x7a49, 0x5, 0x9, 0xfff, 0xb, 0xfffffff8, 0x8ee, 0x7, 0x4, 0x8, 0x615, 0x5, 0x6, 0x6, 0x5, 0x6, 0x8, 0x8, 0x6, 0x800, 0x5, 0x5, 0xffff, 0x3, 0x6, 0x0, 0x80000000, 0xecc7, 0x8, 0x214, 0x3, 0x40, 0xffff, 0x5, 0x4, 0x7, 0x8, 0x400, 0x80, 0x4, 0x7fff, 0x3, 0x9, 0xd3a, 0x8, 0x9b91, 0x3d, 0xffff, 0x3, 0x8, 0x1, 0x7fff, 0x5, 0x7, 0x5, 0x2, 0xfffffffd, 0x1, 0x4, 0x1, 0x3, 0x9, 0x4, 0x0, 0x5, 0x97, 0x0, 0x0, 0x7, 0x4, 0x7, 0x5, 0x6, 0xd, 0x7ff, 0x8e1, 0x1, 0x6, 0x101, 0x5ed, 0x7ff, 0x0, 0x1, 0xffffffff, 0x3, 0xfff, 0x2c, 0x7, 0xbf, 0x7, 0x7, 0x6, 0xfff, 0x80000001, 0x9, 0x6, 0x3, 0x2, 0x5, 0x4, 0x3000000, 0xfd4, 0x5, 0x2, 0x3a7, 0xcafa, 0x7, 0x7f, 0x7, 0x8000, 0xf, 0x8000, 0x6, 0xa, 0x6, 0x3a2, 0x2, 0x2, 0x401, 0xed8f, 0x800, 0x4, 0x80000001, 0x5, 0x8, 0x0, 0x10000, 0xff, 0x3ff, 0x0, 0xdd48, 0xb085, 0x0, 0x4, 0xfffffffd, 0xffff, 0x0, 0x3, 0x6, 0x8, 0x7, 0x4c482fc5, 0x10, 0x0, 0x422, 0xffffffff, 0x1, 0x4, 0x8, 0xf9, 0x1, 0xe, 0x7, 0x8, 0x9, 0xab50, 0x8, 0x3, 0x4, 0x3, 0x200, 0x3, 0xffffa0be, 0x5, 0x23, 0x5, 0x2, 0x6, 0x1, 0x800, 0x10, 0x4, 0x10000, 0x1, 0x4, 0x759, 0x2, 0x1000, 0x0, 0x3, 0xfffffffd, 0x401, 0x7, 0x8, 0x3, 0x6, 0x400, 0x60, 0x1, 0x400, 0x6, 0x7, 0x0, 0x2, 0x6, 0x8, 0x9887, 0x9, 0x6, 0x5, 0x20ceef0a, 0x82, 0x3, 0xf, 0x7fffffff, 0x5, 0x2, 0x3, 0x3, 0x4d0, 0x3642, 0xc, 0xd, 0x8, 0x8, 0x2, 0x0, 0x8, 0x1, 0x8001, 0x8, 0x4, 0x400, 0x6, 0x5, 0x10001, 0x8, 0xe7, 0x6, 0x53, 0x5, 0x5, 0x7, 0x4]}]}]}}]}, 0x478}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008800) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r3, 0xc}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee", 0x1d}, {&(0x7f0000000c00)="4307ed2e30", 0x5}], 0x2}, 0x4) 4.08370269s ago: executing program 2 (id=3331): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='notify_on_release\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x100000000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r2, 0x6, 0xd, &(0x7f0000000000), 0x0) setsockopt$inet6_int(r2, 0x29, 0x4, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) close(0x3) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffe, 0x4}, 0x0, &(0x7f0000000240)={0x3fd, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x5, 0xc, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f0000000500)={"71eaa9c3af7a29378ce241234a7133b5", 0x0, 0x0, {0x3ff, 0x5}, {0x5, 0x7ff}, 0x9, [0x5, 0xd74, 0x3, 0x1, 0x0, 0x7fffffff, 0x9, 0x7fffffffffffffff, 0x1df8, 0x8, 0x7, 0x1c000000, 0x1, 0x1, 0x8, 0x8000000000000000]}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x6}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) shutdown(r6, 0x1) unshare(0x62040200) r7 = socket(0x10, 0x803, 0x0) getsockname$packet(r7, 0x0, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x4c094) 3.958770176s ago: executing program 3 (id=3333): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='notify_on_release\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x100000000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r2, 0x6, 0xd, &(0x7f0000000000), 0x0) setsockopt$inet6_int(r2, 0x29, 0x4, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) close(0x3) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b7000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffe, 0x4}, 0x0, &(0x7f0000000240)={0x3fd, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x5, 0xc, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f0000000500)={"71eaa9c3af7a29378ce241234a7133b5", 0x0, 0x0, {0x3ff, 0x5}, {0x5, 0x7ff}, 0x9, [0x5, 0xd74, 0x3, 0x1, 0x0, 0x7fffffff, 0x9, 0x7fffffffffffffff, 0x1df8, 0x8, 0x7, 0x1c000000, 0x1, 0x1, 0x8, 0x8000000000000000]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x6}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) shutdown(r6, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f00000000c0)={0x9, 0x40, 0x4000, 0x8, 0x9, 0xdcd, 0xc3}, &(0x7f0000000100)=0x20) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYBLOB], 0x50) unshare(0x62040200) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) getsockname$packet(r7, 0x0, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x4c094) 3.759761695s ago: executing program 2 (id=3334): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfffffff0, &(0x7f0000000100)={&(0x7f0000000400)={0x38, 0x2, 0x6, 0x801, 0x6c, 0x87400, {0x1, 0x0, 0x4}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x0, 0x6, 0x1, 0x0, 0x9c}, @IPSET_ATTR_PROTO={0x0, 0x7, 0x21}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x38}, 0x1, 0x40afc, 0x0, 0x8014}, 0x0) syz_usb_connect(0x2, 0x52, &(0x7f0000000040)=ANY=[@ANYBLOB="120100036ffa680863070120ff2c0102030109024000021109400c0904080601ff8bbd020a240107000d02010205240503"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1f, 0x14, &(0x7f0000001440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffdfffd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @printk={@ld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1ffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r3, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="d0000000010a0500000000000000000004000001750006007cbe62217a5443ea34e88623adf3c91bee832774d582686ec40cdc30e71627670312083f03a63cc8b8fce12224ef01bbabb7730070831a3d8b618b11ac0f367b3ccdec667e6da7a0f1060048dc984a097bbfa72c989fdddfef2627a6de6c1b62a9ba8d85f9054c3eba7da4ed32f66d0806000000080002406098b522fa727d6d000000020900010073797a31000000000c00044000000000000000020900010073797a31000000000c00044000000000000000010900010073797a3100000000"], 0xd0}}, 0x4005) 3.712590157s ago: executing program 3 (id=3335): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r1) r2 = socket(0x28, 0x5, 0x0) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r3, 0x4) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0xfffffffffffffffe}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x80000001, 0x7fffffff, 0xfffffffffffffffe}, 0x0, 0x0) 3.227681968s ago: executing program 1 (id=3338): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x8802, 0x0, 0x1, 0x0, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e75"], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x14c}, 0x137) chdir(&(0x7f0000000100)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xf3}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001b700)=""/102392, 0x18ff8) ioprio_set$uid(0x3, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000028247d423e2ed2403ea8700855cd0079f9f63f68e24d9c1626511a1775e762fbe2e640844aed5de532821825d51259911d40666a1bc7a3884e75b332a15e8f6509aa3a3b2a370acadfc2cdc9d47fb1cc74491ee9cc9efa13456cfa50f04882e3724dfbb76e5dbe803c2e44ad49fba6033835f4715049b1386ca025e5b9b055463a69b5f2b592e3da6fdfab37d8fcf1eddea4885d360dc7f239f5a2fc956fbfc910e8a1ac06c016d013a23c42879d7b9b3650a191c5da228c2056c1771b3f79b1036f6b9d3b880f727f071f27b3e36ff71483ce65eb321c0090bbb3b0278e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x22, &(0x7f0000000240)=0x4, 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r3, 0x400, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$getflags(r4, 0x401) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) 2.606634746s ago: executing program 3 (id=3339): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32], 0x1c}}, 0x8004) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) write$nci(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="414601", @ANYRES8=r10], 0x4) 2.580094997s ago: executing program 1 (id=3340): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r0) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4004052) 2.415554474s ago: executing program 6 (id=3341): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000e80)=@newtfilter={0x478, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0x448, 0x2, [@TCA_BASIC_POLICE={0x444, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0xffffffffffffffff, 0x8000, 0x6, 0x3e9, {0x4, 0x1, 0x200, 0x0, 0xfc01, 0x8001}, {0x7, 0x0, 0x5, 0x5, 0xfffc}, 0x3235c424, 0x9, 0xffffffff}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x8000, 0x9, 0x7, 0x200, 0x1, 0x1b5, 0x7, 0x2a, 0x8, 0x5, 0x4, 0x28, 0x0, 0x6, 0x400, 0x3, 0x7, 0x1, 0x9, 0x8, 0x2, 0x7a49, 0x5, 0x9, 0xfff, 0xb, 0xfffffff8, 0x8ee, 0x7, 0x4, 0x8, 0x615, 0x5, 0x6, 0x6, 0x5, 0x6, 0x8, 0x8, 0x6, 0x800, 0x5, 0x5, 0xffff, 0x3, 0x6, 0x0, 0x80000000, 0xecc7, 0x8, 0x214, 0x3, 0x40, 0xffff, 0x5, 0x4, 0x7, 0x8, 0x400, 0x80, 0x4, 0x7fff, 0x3, 0x9, 0xd3a, 0x8, 0x9b91, 0x3d, 0xffff, 0x3, 0x8, 0x1, 0x7fff, 0x5, 0x7, 0x5, 0x2, 0xfffffffd, 0x1, 0x4, 0x1, 0x3, 0x9, 0x4, 0x0, 0x5, 0x97, 0x0, 0x0, 0x7, 0x4, 0x7, 0x5, 0x6, 0xd, 0x7ff, 0x8e1, 0x1, 0x6, 0x101, 0x5ed, 0x7ff, 0x0, 0x1, 0xffffffff, 0x3, 0xfff, 0x2c, 0x7, 0xbf, 0x7, 0x7, 0x6, 0xfff, 0x80000001, 0x9, 0x6, 0x3, 0x2, 0x5, 0x4, 0x3000000, 0xfd4, 0x5, 0x2, 0x3a7, 0xcafa, 0x7, 0x7f, 0x7, 0x8000, 0xf, 0x8000, 0x6, 0xa, 0x6, 0x3a2, 0x2, 0x2, 0x401, 0xed8f, 0x800, 0x4, 0x80000001, 0x5, 0x8, 0x0, 0x10000, 0xff, 0x3ff, 0x0, 0xdd48, 0xb085, 0x0, 0x4, 0xfffffffd, 0xffff, 0x0, 0x3, 0x6, 0x8, 0x7, 0x4c482fc5, 0x10, 0x0, 0x422, 0xffffffff, 0x1, 0x4, 0x8, 0xf9, 0x1, 0xe, 0x7, 0x8, 0x9, 0xab50, 0x8, 0x3, 0x4, 0x3, 0x200, 0x3, 0xffffa0be, 0x5, 0x23, 0x5, 0x2, 0x6, 0x1, 0x800, 0x10, 0x4, 0x10000, 0x1, 0x4, 0x759, 0x2, 0x1000, 0x0, 0x3, 0xfffffffd, 0x401, 0x7, 0x8, 0x3, 0x6, 0x400, 0x60, 0x1, 0x400, 0x6, 0x7, 0x0, 0x2, 0x6, 0x8, 0x9887, 0x9, 0x6, 0x5, 0x20ceef0a, 0x82, 0x3, 0xf, 0x7fffffff, 0x5, 0x2, 0x3, 0x3, 0x4d0, 0x3642, 0xc, 0xd, 0x8, 0x8, 0x2, 0x0, 0x8, 0x1, 0x8001, 0x8, 0x4, 0x400, 0x6, 0x5, 0x10001, 0x8, 0xe7, 0x6, 0x53, 0x5, 0x5, 0x7, 0x4]}]}]}}]}, 0x478}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008800) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r3, 0xc}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163c", 0x1f}, {&(0x7f0000000c00)="4307ed2e30", 0x5}], 0x2}, 0x4) 2.373308426s ago: executing program 1 (id=3342): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='notify_on_release\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x100000000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r2, 0x6, 0xd, &(0x7f0000000000), 0x0) setsockopt$inet6_int(r2, 0x29, 0x4, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) close(0x3) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffe, 0x4}, 0x0, &(0x7f0000000240)={0x3fd, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x5, 0xc, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f0000000500)={"71eaa9c3af7a29378ce241234a7133b5", 0x0, 0x0, {0x3ff, 0x5}, {0x5, 0x7ff}, 0x9, [0x5, 0xd74, 0x3, 0x1, 0x0, 0x7fffffff, 0x9, 0x7fffffffffffffff, 0x1df8, 0x8, 0x7, 0x1c000000, 0x1, 0x1, 0x8, 0x8000000000000000]}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x6}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) shutdown(r6, 0x1) unshare(0x62040200) r7 = socket(0x10, 0x803, 0x0) getsockname$packet(r7, 0x0, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x4c094) 2.184798614s ago: executing program 3 (id=3343): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='notify_on_release\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x100000000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r2, 0x6, 0xd, &(0x7f0000000000), 0x0) setsockopt$inet6_int(r2, 0x29, 0x4, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) close(0x3) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b7000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffe, 0x4}, 0x0, &(0x7f0000000240)={0x3fd, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x5, 0xc, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f0000000500)={"71eaa9c3af7a29378ce241234a7133b5", 0x0, 0x0, {0x3ff, 0x5}, {0x5, 0x7ff}, 0x9, [0x5, 0xd74, 0x3, 0x1, 0x0, 0x7fffffff, 0x9, 0x7fffffffffffffff, 0x1df8, 0x8, 0x7, 0x1c000000, 0x1, 0x1, 0x8, 0x8000000000000000]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x6}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) shutdown(r6, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f00000000c0)={0x9, 0x40, 0x4000, 0x8, 0x9, 0xdcd, 0xc3}, &(0x7f0000000100)=0x20) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYBLOB], 0x50) unshare(0x62040200) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) getsockname$packet(r7, 0x0, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x4c094) 2.007025142s ago: executing program 6 (id=3344): r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80000) setsockopt(0xffffffffffffffff, 0x4, 0x4, 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000040), r1) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x14, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0xd0}, 0x4000000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, 0x0, 0x90) sendmsg$alg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@assoc={0x18, 0x117, 0x4, 0x46208000}, @assoc={0x18, 0x117, 0x4, 0x7}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}], 0x60, 0x80}, 0x4004080) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x90) 1.959058544s ago: executing program 6 (id=3345): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4044081}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000004c0)={'wg2\x00', 0x0}) sendmmsg$inet(r3, &(0x7f0000006340)=[{{&(0x7f00000000c0)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000140)="3c7c22c1a61bd16399ee3865c1eb220d20e26db69f4e733ad7d8f8511f92eb58f07c911d476905e9df6e641b692d0688dbd30ece7205f0902cd8f2e9b990da9675aeeaf809855259dab99b6e407136cc5582a0d55547ecd8d4d9310b137efa0540f361db18d0e8ae1022a69f4c75a74951e28271c7e9b613163f21a1c330d6fc3ba78206fec7a20e84d835dc48bf32", 0x8f}, {&(0x7f0000000240)="f68b80f8da722ea397252d8a1382d9c7932bbd2b3d96db2c37d6e1081098b2c5831e15e1572492222f69185703f3538e53c26862c6f15b9c06e68c6832348b2b2a368d4b5ec972cb36f0b2440102df1021afe149e33b1b2b3e79a9825cdf7cc47adc64645c70d574351928b658db1d350302246a3183cc664aca90a58588cfa9a11aeb988a231837abe8846ab172058fb173825dcf34fdf12f48f01c2dfd67d291f8559e736d987cc273da0d51ca92c13c6eca58010124f22d1d4d48e99285efa1075851dc6fa6d7c5cf874122f0c652262b4728741c470bc33234b4b5230f8dff6412eae365e3", 0xe7}, {&(0x7f00000003c0)="e2e6ee94b001e7c47fe72cc2f21833cbe8bc81f352034b07af131bb5d66e2eab3ea1b7b14d31e0237112d41ec90ba992304c441be25689e29aa67e39682b0f274498092a031b238b69fefadc2bce8a7c738519a6c41da51e647974856b3e654f4df5183059a4b87dc6b7eb3e99d9ba2e3b7bd8773039c24f608cc190092a6ffd30c080d5f6a0a5dc658259090639394244e0eb993e603de35a5da99ff84db77028ce9c1f9ea24f1b0b281823ad0ec49c9868593d77efce68d0eb4de787612b1fbfba4e60f48090ba9adfe72a2c4aa170f6980128e27caa26ac60b3601a91832bfbeed7250fa7b047", 0xe8}, {&(0x7f0000000640)="765ede3d87baa94f43d33409c67abb634bf5405de3c51f0da6a0a0ab47cd17d4c2d34883a416e86fca67becf59c96f77599be402ed5cc353f6a23dfc548c026cf66e72dd6e1d746d0c34ee06366a5deaa9f8fb17bc102a52840f4431a2b283558e5b0eca5c9cece25b0d858cea742012111c4c704eac4a81544d4624a3e60687f95ea01aae0e7fdeb9174f303976a1291ae131ffe7b94ffeb13ec365807b9d239cbd410150064058339b7abebabebca7ec2b35a3", 0xb4}, {&(0x7f0000000700)="d43f279123a545214e043bfe3344d95a03274ac8d8dd6669f18beee4ff76e0996a394d989eafb2b4266913c6dad4a21c99ca246f5cf41ef750bd9f6163c9274e741f5ee57ecf90", 0x47}, {&(0x7f0000000780)="c7645b13d08076a7cfb0c29ce0ad4dcdad0ac7c2f16c1c54d284a78b2349f0603c24884efff21d7578319800e541856d3e95bc5eb268b3028ba32c9ab1cb719c4cc80250364656d9e6434455a5687213cd344264b03f65335f5b194e5ede7932b4bb2d4b71c64e61120ea9438c96e839f797f7ac438b80925df4490bd2a1e2", 0x7f}, {&(0x7f0000000800)="18590a2e3ed458994dd3b702bb5e678c4b584fc5312ceaf872a14b4bbff3258ac42f34fd6ae107c8a50027f9d78bc8cd6845e9106b5c4ebe0528b8b899d2bbb6b117d7b3ed985cccb0871fbaa6b943a1", 0x50}, {&(0x7f0000000340)="f18b5ccc03469f9552a78a65a9123af2b8119a7310e8fe3c7344309382c30b9422f2906bca4bc277780057f7d8a4a7aa12e8b2809bc9d92c3a", 0x39}], 0x8, &(0x7f0000000900)=[@ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @rand_addr=0x64010102, @loopback}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@timestamp={0x44, 0x14, 0x2e, 0x0, 0xa, [0x4, 0x31fe, 0x400, 0xa]}]}}}], 0x60}}, {{&(0x7f0000000980)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000002b80)=[{&(0x7f00000009c0)}, {&(0x7f0000000a00)="6821930ac2296e72129ff36b7e6cef02bd55765b6158bb827b3b0d95b355e7502d4d137b4afb7ee92b3d741c5e25e01255eedad624f82ad145fb69cdbdd2661af12eddfe36f4b7ee3c47d55a86817925396a58837c88329a93290531cb6c78e1dba97a48cac9b5", 0x67}, {&(0x7f0000000a80)="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", 0x1000}, {&(0x7f0000001a80)="21e6daba7be50d438c65a088ba213e38400107242b97cc4ebe75a9df475e974c835049f9a176a4ae68a601b55e7d777695cc9817f64e8c37408edb9f89cda5547c72434b92583a5a3b74c0b4d6df17969369816cf37e637efa52249ff8e589ac9cc766c7b0160fe1658b5686f8959dc0f561871528aaee247a6000666ad20ae0a6711309dbd9592919cd67d6f4a2b3c192121624b2b5f1a1dd6b405e90e88ee0186a82216b2478457e7c73d104ea1f766f848b17d764fc2fc636dfff91fa0041daddcc697e13196077846ca8b8ac047c5ab5776b8db602e8c5fbcfea48c1480c43860264c3f11693a3231a6aaddf985c462c43cc0261e5de32a8d061c9f9349128be9a376d433b1cc35d546fe15c1ca4d2b6513b3520d995dfa2b8b5504568c5daf3a602e0d7c4e83dd433018aefd3f46395abec505551c7929a710d7c1ecab7dab2037723dec9936b98e2014b6b7eb69a54cd3859767e9e69f2988710f5d3f51f32575665810d39faf770570331ce7be764572d3835c36595183511dc892a6acf4ce1de0d28536f9545fdfb4df3a41311f491eb6e08c9221ee197cc4dc558e640ae610c2f949688f8e753afd927e83bc5bb76e8b51e20988fabeb9bc693004ed10d8e27bb9c7422ec9fca2d9a21f9ac2d58ad0a656ff5072f82bed34b5f8b560b5104815e2fd8b142c3529705102db1ae270199a1fd6f7a40c815178dee48b7aee10baec61e68096e63c79c907c679e766b61cf57884c96a279c3331348bce3f61e843e6ddbd370d40036cf1184dfb5cb7283f6b0620aeaac02b19652040ba300479551f7fa1a7b295c38df30b38fa86efc31264dece3204bd2ac547728c39f9c750e491d67ba0b030a7b53a94f2e13f6275682ee32cfccafa4d7b7b59a7e52cb315ef8a3dde32b0c97ce938e5300bf376764d72d995f93fd70e486c9f347218555402344a8630497de956eac655ceb50c21a558a921391db1c874c9462d384022c8226ffc4ff8524e531e3316353f5af5823b7d2aac1ee83ed063500a5029f1d416289e3be990ed49759b276ff201e692176b7364fd1b61c8222e37f93f0461b30486dbd1a42eef7b3991901ad64b73b3af9e213c34d2f3f4d62589791be417c42d4dfe271e9c41a0e227bdf17c417986d8a12f56fc4996ba4eb7f915991233cced646e8c7f5ad0dc76c5e76eb6052cf441497b2ddd84d23fabd01d86545b86708339e698908a67ea0428eb194cc9556eeb14469f7fc99adbcbfcc99111508079c2a375ab21a0da0e3a561a7888ee2e7771dae4ef5a476c67ea44ab2580ada723adf88b6f72dca2bdf712ff147a9e275528d999ac346cdf72f66a564805a7b1ea71880d698cc0d884b748a7d63debbe95a59bb5bc22a959d59f70d6d5bce2242913730df2519563380e85428a5b81493af2dd092ace0b8ef6c64a677cfe561ccca2ea54bcdd8c99d6f31fb0a68cfb5019118fe8bddb3d299e24f5fac01fb36c5ca62b57e88e639cf0a7afc7a903eeb9a294c394fd8781846d8e26ddb6b6ed0689deee841cd20065dbd3bf18fbf0b3f4a3e6778445841357622def94dbea20f34daf3dbb61be646b1eb964d7d3f04bb23c8d88b27b61faa1f41d355d66e77c3b4da2d1e203c68d19ae48bd15178c7e07a8a93da99649dc60f5179f866b22c8f2a7cc815a86971ced2fe5dd5fe420179d7a3612d759917799dd834e958b4e74657849cab0154ce4ad772830ff5929451a3742a07b2a6647bb160032925fcb5a9ec4752fd983fee362c6ced85616e1b058aa66865ca3eb917c61806b2476fc63e69d4d37179f5b1789685da100cd3bb3524e71fb9385f5eb3e624bbc65eddedd1e284b818c28b63d7b7cbc680c300f6ab8fe881345f3f776927d53f7ba17d2f5c2cfcb330f7e8e74db09f8b586dfb89d8f2de54253713833c897fa0bb857f05276f93ab2592874639e9103cdfa6b175de492dbc069e034a259313442ede3b8180fef7a7bbfc107a3ab942bdb36d9b8510313eec228de4d6d37586631d2ae29c04ae51d17ca18e12ab8d7bb0f0e3c704fbd43e147af281b795c890ff353b44fa68820a41cbb77d409519df67e57d254a3d3409c805a2fdee7b07973f1c210a9b9beecdab84b9cdb3045f57c2aab2b3de9c200af6a1f33db5b4b5d1b79fde6c488d3f692f1e5cf809e5f73848f8f9f1513b91f66e6d34c0c2a8a7fd2a3e91674fd9dd3d68f651056ce7ff5aaf39293c98d62b3c3f13dbed200131aed934dc9123393cc719605a7995aae9102967205a91c30b59cd45ddd8a0d6b914460327525d56a32084a0f30fdc21acbb7bab24543506b9889137024559e01c386fe9e0a1e73ba9abe33b8e843d192f0e10bebe1c271caa4b31f7937528c1139baf981fdb6bedad20262ef0aeeb3391b178f3dc3621e64216c915d4e3c488cd6c75fdae85d639d6c719cb95d8c868805fdd7d753f001e315a956981d72860d6ec353e53f4e8fe176227e9420ace896093689095e9eb162581a845e95794c356d94f285dde430819e9209f0a640b88b212a6b5e2dfe51f31a197a4b87371a7be2b21a0ace037a9bf2da26fc2020a9a1b2a0d20d125b8f24e07441b9db5801e470384d435dee6851e7e39d852c9244d6d1e343aa2f796addfa42ce39f14915cc3efc270d7e699fb97deca463a8e50375b942552d7e288813ec3d9bcff52c3c2466882d9881126178a71a054c2661d11abe2b933e9d74d77232ae0437a05ee64ee6e89b23cee7853185d7c28df7ac2d9609ff31d93a8b45ecc02465e4173eb75b3326dfd72e15d917aee3b5b9c1b1cad980a4b1caf2464206793cdb8cee0fe5b7cc48dbcb9f7bffe16d9159279fb11e2a293a0a2d9d9051a3c0484b5ce18de440fc3b0937231ed9a67f6fe49d4fc02223f07c932f062da17462e641220c1f9d419b248e2fadd48672a736c4e22f8088b8725119fc6f71e6cb28832446cb07e12315a472e2b6cc0a6c0fa8cfde851bae07509ad3788147b078f141f2d15087dd91e24be12a6eb85d6170ec388dca8f988950be8bb6229222af2054cff06fd36f83486d2b6ba26bb65bea7b92ac16c39c31df5a1ab1621e85253ca847b41e3674ebf841795c40c10893e3c8b3abc10b0d77418d5aa0dcdb284ade6a259017f517ceda7a21b6ff0ff577e51a2396e1d9597302fdd9152a8e8161a0c253ea1f6fc38e608f32cbe975f0dcc4ace5c3d0cf92d6a8c834cd9e0136a4a47d0a908a2bc257d522bbf7e45c6b33a63327464b94c6ff687b68cc9941830b0300cd32d9884d08eb50477b8c79bb0de60f9faebe82a7a33f72fbe21fafb7ac2bfdced254b59de78bc636593aff635cfda72754f3b3adea59aeadc171683e528683f75547d1411b9c5320b16cb1c95f0afb4299120912febc5daa0f28c0bb677aeb27cfc4e4fb8b4b7ac959c9ad2e25894750e011198512341a7a4db7219096c02c257e0428a81c6a1cad78afca606d08da2d7456530d56df4bfb98d5ab9f02d6a202b4f4e6c74c73789ac91a6c94a63782cdde751b7ad1012fa79fdf8723e1a580ea18b31e0dbffb20966a278bf7387bb60e7a4bf07a71ba03bdd040b0e8238ac8d48622b71e89cf43fbf3b52342cc7c670b023cb7b1dc4716fbf6832a393b580c173e84f2e00a26385296e2625921eeb8ca9ef4a461ddadad1b49b1ce70243ac18c8dae944a63ec1b3e9b5e1f91253d75155e9372dfb72185e3d3e99c932395390408d2e7f49a1552d5d0d05b1eadc26b21371569f541982f8226ef0e363c354c2d4eb8bf5aae134a7d57d3bf33529e3fdd47505d9d6dec656728cba07856b8ad9e1bf7f23caab6a70d2119b18da04f800aba89b22008b74d852eb0503361befbab7e0c23e4ff92b0666a41331d1fff1f3fcd349d7027faff2ebd5b4d0bb4faf7733db1e4aec34e3c8b4a0b95d30e5d483d00ec5f4fdd1a15e1f878aca133e0c37a2ca0c0ec72c323500e915944cbfc3e74a581203e600719e4c8dedd7e112691f7130754768c5678cdfb0678922e458ba2f917ee65f2f7ff5d7d1573c3f9e432a2e9feb822c26ce07904bfa29b34d120855d4d417af33c20e8dc9c94b435a24815af7a55cab4d9dd7dc82054c04966cc8f4f9da9d76d158e2f6f12635611be8fadfacf6272e091df9b0e90aa1c1c3bd4eaebd160529a111f3c9d079b5b5f505d02220cee45193422cea2182f0d660ddff281df95ec964964788e994814142436e5528bdacdcc6bd7fee1e089af4e6cf194bd871f12a15d4cbf9f2b0c9a87fb26df04a23018bb92c448f86a896284fc4be784473706d2ddb87a426bac3ca33a72b63139946bb9f9c79e81c2e919ba0e0e37c07fbe17bbbececc35aa306c2b7dfee3698c586ca1d891e30f256373a593e4607c3e722577bbfe08ad722a6a47af3fa45617259e61138e5985091cac4faff2bceeea6929ecc62ab0b9b597d6160da5a6b8045bcb3a3738249e0fef5120acad4a42572c3211cbd5c3f0f2699028457e0b04428da40da5781511c17b9534da891e929f2140108dad295ccd10de56edb85289802bd44ea55faa9abc98b098d475bb95a4dca5669f17f6a83ebb5292af11d8d569c43001f91f3558d9a7e5d68f556dfacc811c55ebee0eedf016c5e48a9a405d7cd1cd35fbdaa4934e6e5f38b7c86e3f523fadf52109fd1498d2e01b328a67ef8683d1cd89ead983f3f94c7c33353d4fe3699d12f78ee65ee1f64ac8b5a98c33e464adba6c25291d68b7405b4aadcc27f6fc7067a0f75f4e4c31187ead17122260ed3573a4374814434538b79fdc3080a566f2b876f586d221aa408d031a1f6dafc6dbfd00262942130a53d254725b37e832bbd2542bf0f37b7e0087c2a3c041a6cdb8988a99c0ca799487e5a3e87712e2a870abfcf2e53a85957579777d631d4ac1e3acf0f6b1d90f6845af777315afcafb1f107f9e3c472f60de52d0ea1525fb7f818f441ce0270d0ef4b96f2e51668f41315580188e47bc2fb9a4562d403d6d3f61ae3586ec9f881c32f1b9757611cddf7bde452867ac2ea9cdaf95c9fa7b1d9758d217efbc15339648fdeb351c3785631a2b21f26962cc081d70b31897c91ab12608faf670d6d89144b7ca4a6713530715faf72bb4441a034f4b7229a26e681fb8133bf9ffb9d7bec614ca949b695967b0132c2e89a3c08fe8633a561d6a151110fc70058749bb4b544e9b3ada8f1bc7729abbdc6bd3727f25c1c147ebe78044e48464473b2656ff13a46c33200eb3dc456486934732f4d3dc3715484e8e388119942a5677fe4731d5156c346c4d7674aeb9d7a1b06760e58e53552e2b29fb96255648942c3c2680918b001b3c6c523d815d55080dd2809d274a376a32a3f4335ed6cda53a4fc34154942d74bfef5ead4fff5b5ed3b9b0567310ba1c0ef64d921e113dffb31434ef329225416f9f47b2fdf7fa1e87fac09638e80fb41a860bb565034a674b331ab1de9cc62113544a371701e6f9d460ed9e75cf420aa7e3e5104d11c5abbf02a2794bf703e058f4ae1614d92d290e888cb7ca089f327421fd3b2539fe05a27dad0d0c2ba8679600c3b234087b66547940061419f8177ecef3b971debfd4e9d49ac2ca707f8d6fe2e400bc958bb38577677f7dc0bb8e5580ebe94ff9abceb79a882d9b7c1345c8f3f53b498099a138a99887ced83f8b921c145271bedff0f3c361c4b7d2d5a056036cb76889724987a7aa2708542ed05ce32a1ac61bf715d287771872cb32ae7d155c74df5bc9b2dfcfe538cadc1190820ab1324a40e60d37e31205f5e", 0x1000}, {&(0x7f0000002a80)="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", 0xfb}], 0x5, &(0x7f0000002c00)=[@ip_tos_u8={{0x11}}, @ip_retopts={{0x34, 0x0, 0x7, {[@noop, @timestamp={0x44, 0x20, 0x8, 0x0, 0x0, [0x2, 0x9, 0x2, 0x7, 0x9, 0x5, 0xffff]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_retopts={{0x20, 0x0, 0x7, {[@end, @timestamp={0x44, 0xc, 0x8f, 0x0, 0x0, [0x7f, 0x7ff]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xc60c}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}], 0xd0}}, {{&(0x7f0000002d00)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000002dc0)=[{&(0x7f0000002d40)="733d057947af7d8fba228d35d2adb8053ffe90c431fd2132b8a14b966cb7d23d1122ce32699ee177541219e03fa24f036237ac978e4ea2dd60a71caa32f85169c393d68317", 0x45}], 0x1}}, {{&(0x7f0000002e00)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000005fc0)=[{&(0x7f0000002e40)="90e675565ad0275106f391d1816168aa46bf714e6d7805624d76e048e86f", 0x1e}, {&(0x7f0000002e80)="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", 0x1000}, {&(0x7f0000003e80)="45e0611b69639d9c6311fb6f95f78ab140ccc61813ea5836132b660c4c424c1c5a9d779f1723838509a8542b9c2a352396c74a3b4b2d3d0cfb61b0e04cebcd380587162af8bb8bacea4ff40f485f9fa94be3ead2781c5172df016188a250c511a81c597c2ccc11c6f2f3943f106284933dcd5699d6a71d908e9c57339bc6d8f28e4320eb6a01b78f53e328fa0466148b0f21c74059c09d8362151d912ba5fabb729e211c79b13033641a21109b00cecec2750eb7f785b2aeb41487c1ac82ff8ed15c3734b27a91dafee958f36dc7ed0b19be5a81b6f6ae8688882275f4856a71e159ef19870ad6998c858ac7bcaa8ff19cab5305bb1a70", 0xf7}, {&(0x7f0000003f80)="032a80835fa00f29ffba57b6876a076be62559902166e26cec", 0x19}, {&(0x7f0000003fc0)="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", 0x1000}, {&(0x7f0000004fc0)="d9289265f3a5fe077eca5217cf1760a48547da79e0e99cd8170b5f378d82ba38017bc3a020eb209e93076fec6c0a42ee692e835695da35434894416eabc7d11a0eaabdc8f7730a4330ffed79345d5df6c4497ddfa6586279fe995801c60909bd7769fca3178aea1658f5e0c213dbf000ceacddc2eed99e8e6f5bc00864690a632e6082352bec59f5e79541c0518448d2542317ba8fdbbde29a5ae839b56fd4bf01d16893a77b59789962d5f875fdd44ddacbee8fa815a5bd55050107297d4f1fd24b22d68493beccad44035d277a36537ee74deb85b03c2afca8b256d045364acff6a15e43a4062cdf3dab29116d621979b623e6321b7848ee469101bebdfb457cdc07c64f0a3cab71a02d5551cc7da26206bb64a4d8df0cdb38e6e44f93d95ab4f3b38e09cfbe0ff9c3471664b1c405e85a484192c00d3c99296d2f40ac6fa9c239622bb21ce92ac58fec2bc3c4bf77e62283b03387cdd3c72a82f380767dbc7a8c1795d1df82388347c7befc56812c0d8afffd16819076261350cb586888e2430a8662037728f666712ca53119b760d6406abdbe1e52f8b57deaa60be29c84f65eb0b2a43397ec3957ea69baf0202cc4788cb6e60aa0fee9b667a9bc258be367fa17606d6639e0b1d24ddd9380c7b2a416376addcc379ae4f131d43547921f33b6183e9bba9fd5e00021b58e2053e48aabff2c06a76b3127f279aa15a39c61af803d0f95af88d1832db34b84a94678a1a496c77eb63237659eee5d96675e6daa193418fcd7c82bbf5783fa7eeaef5b60b4b25f306a87ec25639116f1c2683a8fdf95543d83ab3a809a388565c9aa7586ccc33da593671b15f05f924ae9ac999f79877656328e4b9d1942520be01a03035506f87f6db89a44e27e5541b68f83a8d12b1fe8361f247d96ffbdd59a56f110c6611b3d38bb718aa7e0d76d0334c50b93096230c86283f8a3f61e0369d961cd733d570a06ac95859259b173c3ad9796c11ca441d120f8f3c9787a85ad26599045bd06390bf5a93b72dab2479ee3f513274b625637c11e2f25b182587d19e7434a70a819589d392fc839d62463df54b5f23fa6a7601f0593fcebefa8e9f1762d9d10e6243b6dded78435ddc8d4c918c4c47b1b5a3c82df7b69fb15d7ccbadc54f805b9c83901c5d372ae5340b435be510113f5033797672ad18ca38353dce1f0b3c6c870b5cc9a81119cf642610e27528d931348e13ed9bc4346b15ec78c0e9f5bdd2b4e363e698484fe92e5e43bcff7b7e30fc73d7cb15d8bf9e30605bb77def012bee0f673b94deac53f6a4444182a73f214372662800077d3a39c2c7a1ae78e443ce9fe9c29ae7a967794812554ede5090e378d3f30dd4d505508f4f0bb2295be3225d147470b4495d0e20d8f6a6317a7c17e62025b1b67170ccbfefeba367de40981a930779c19ccbd65f5010f45f3fc14dbb145d6911a31f4c64490a4cd41a925b0475e08bbfaa6a71433cd597145fe7d4d5e1b1eb02462c95d8f876e2ffb2e59e791d667d1ac3e315d69ecee926d36a174680ee1c6f4273c739398bf6a502e1a9c6e68be59a47ba14620b58b622ec25b77f88750c7345c20a088dab0cce95411ca7a18a477aaa0dc18bc353628d374d9021761fec1077f7c7cd43f9b84a916147a4f2aa214efa2eaa66f3f4b5773454f428c31f353856f2b0814bacae5eeb097a79f42787160091e8d48c519936f059b6e774a3943f0cda157af8529a9f3dd897cef2883135ba2910b9778988c4db5a66945f5c5dd0a026a6a39ff9f31c432e5f939d48d03fb3f840fffc40a4d40df15d2e42d281a9337cf263e56cf83834b071b8847ca68eacca5b773dc2765e9e5eaf7d14052d233752c543b8c5e9e2f4c3889420756908bd6a96741859a957a5e8590a9b0058d832f96af77512f39021550fa12a13ea9ffcb4c9f53e74eb2a9f6d57abc73fcba4493238b3896e2297215e796e5d65ed4fd1225f56aa19e744704af4e4c59930e73c077a8d398892f2e8d3d1303dd35706f5bbf31b292919d979f1a4c11b65573a192263e825030ff1d3cb5050f26b205ef7bb28c173b0d587801f879e678ffbbb71168e619576575709a54d1ace1cebd4282b286937f7ce08d03a5c7f9a1860f0c3ea897c70f56899e0c969ddcfe43b0a34a6cafaf52291224d86a0c5cbad504d79fdbb18a1aab99927cc8146e0ddba3b10acc514b9344b48d9282955ab92418b93fd49aa82efebc231c0bbc3e184b976803583ae4a5f07546f0ca9a8b9e22bea797a2a866fbbb177a84e02fc1204d1f5940958bb08797233617f0013fe83259dbf4919130f8b5905ccfa71dd9c52ff761eca8575991082728ef6245b103878336c670b47dd8d09aa3a0ec4124b42a404ca41ee194c22bf666cf02a521e5a32a98abcf52ca71fde2cbb23c89b5cf0ff9ef42d946f30eb35ec179b3ae8c5fede762101c3b66c807f6ad8acb72918aefa95b9329241b507f38e94a9d6b33aba2d63cbfff86c52e0326f7a17ef4f19bb575b1f7e518d71266caceee4e22ced051c81fce53806a793717c3bb80094fd42b350ef52c2477a3ad1a9e2deb405ea751cb7053627cd7753c3891160e71bdddcc80ba4b4b6b1241bb4b72ca8650b204f65699d26e913983d7b4a82bea046f19a21efd2ca7a26c7049fcf79056c45cea3be0572967d4e2800a1a6e3e3279490a511d2580ac056d575d9f7547c6785d2b98626d8d41e4e3b72f37736079a44c0893125ae02db23a176d4bf8293195f22a41ae6fe3539532c4fb2e0bb6c91446608ea3f5e54b233a1824a6d9a12cf8fdb18a548d13cd11ddd6372574a80f9884eb33ebf9870686dd043d4ffb5dd818cc2599636ad33cfdbda57faec6275da148691c1132fcf0b11957cc9bc511ee8faa460f5608d83567690711840683f35d4881d54144d25a6bbc78d2b019bc3566824e90e34676dc457bdc191db5f2ff98212d65934e23daf5fb5455c93b37dd071244edd9bf63e2127b69ca5a580968634ef5b499a005821de46296fb8d133846be441d79bdd9de31bc170adc79c0a4c4d2378decea237ab367263498adf1d38c326d220b5df91a54346b1481bc80030491a9c20066c5c7258ad32d75273efb05436fc73baafc8894adf62fe8d0d958f2b63f4a9aee056e041ccae73245fcb809fd79b9699787767b1befa8817580be05bd2ca9eb41356a27a2e5fd5f15d6eec19c0c6f6ab16a3c835eae9ee1f0e79efdccf766e50888b4d1bfe89be57dc9cc7f86ec93b4bd014ebb231639974d019aa35fba40fe99e21e29751c66d3feba3180bd36683751600ec033c46e7f3ae42fc7f072f8eb77709af896fb150367525e3343c403a2524da99f24fe7a4d6bb92bcfa3c8b99ed1a47bb925e1339848a62b3633a0bdd467f386ed971c7a5ab70d1d881aea7a2b6feafd55d56932a9096400036c2303fe404ca05228a45ec6afbb63916afeeddd56a9652c96efb7874c42d1b50888ff5bd2d55700a96188d6a112426a1ee58ec567519ff405f7f22678269db5dcf11fa1c356d9508427e45570787501134f97dfe9438de4d3788e1ec83bf91c31568f167983194dded21d71c08f7b3aca2f1ec94bdf1c769accf9970a217d90270da5d6c85c1ee795bb17a79c47dd13df148f899a092588d448bd12387afa9755ea0fcd1167f4fbffad42da7c0e53b66cf02262bf57e6ebc5701469dc12fdfbec8ad562beb36e589d16a9dc2ac5f3a79c5fd6369e43ffc3f7f09a405f5949d616b21fc276060be4c13766391c3c0474b809e102a6c25e426569cc9316ec739fd6abcdc0a24b307932ee87e79b09fd2230d2b752211a429ba67e6e9afd8dc376d557d8ac4038bce095604a0f90b4a51fabbd219f6155f23c633f5c16e9da5800ae3c5e4b9e46835b0c0fd36be61deb6fed6ade0ac53e094077b9c092464405a76f365af4d90498c24fe7fa4b9fcc408bc5f456f5dc40a8a3210c4845afbb94beaa916ac9c5d373ca6ccab4ca70631434d071a894db37603ab17ced5ca45550da8c997e2611118540787dc93293f77fb8c4ffd551037c8e97e1fd0d58b06acfefc3db5bd3ccfbda459a645104517b0fc9f3536fddeb73842d4039fb26a5f644799330149338ecff22d93087e742fafda99156b1b8a595308101270b64f34ebdc1ab21413363b4829207d3e9077845b36411ce9645313d43c67448f2ef3afa3c41e63474099fcbba669a21cbd954295d663e8ff6a950bcf2e1c2c9f992b6bbebd9bf69918993e7438958dd9a1324066273eb2868cd359c9c58c53eb8ddd0e7205893f1691e57659032e4d57f6f4da9d56fa65d13b09d3e312eb2076e468d70824913c45029ca33415105aae2e957f125b3a33856d21a65c878c15ef12df00e18f125ef136beab487e56296d25ed51957642a2378686a9ff558b9069b916e8c13b10e53154fd41cca6d69fe6ecde72ca5991ee1a4a7b3e871751294fb5c26cf0c37d799293839095a19e958e0986e8209248e22b9af9c5d75d36a9643c0613d925293a124c31f99912f2e43028772470529b2cd83008a49a048031b3dc6197541a0eee63155f8a095e0dc1d241db42da1d8a0bc6a134d9e8eb15634612b339dff73195e526db05ca1b419290316cfba30a3e2a16b374bf22aa8f32571b0ff98a5391eb9e90a196515ce474c2654e6cd09502a4a438a38990136b0526f7cfd111fabc67f0a54e9591fc78ffc16fefa33902d063564b17ebd70a49161c1cbc3aff2d4ef0284f5199dc0d48895cad74adc7d055c03f9d8a9f4f4fe9f222819a2dac1c79a8418516c0261453fb3523b5eaf17d8a56448f28f7dc0eb79b1431e887bea4f2b89aa6a7a26b2de3fc75e6cbf3a03dca9802d046f9a440b96d6b485eebe5d96bd0c49cbc0219ded5033c9d6b8e1f5565169f2273fae30722c3b9cb3f24236c8050ea150fb658f3aac551f8f42293f35f35ec41dc97ccdd61ad844ca13f9a73408b550a2004cc168e2de1ca425304691caca16f702e0dda3dc248df6648c7cdbc423d4ceecce84317cdd2ceaf6b3fdb707b5fe1b475d2b8917393b604e230ef0849f54e256f2ff9b577c2cc4a65a775e3bbc295b11dc3be190888fccbae50d509698bff799c246c8822c75e5d22623defd58cfb991b5f6851241729abf6b3411f6c522503d3926d9d41e9276c378496724ad35b6909e31144caef9dface0f92b9df68d1326d0cec6965b9b9a0fad2e8d88815cc5cf429f743d30f44e7ad72c28ccbceb18b8f780a6a168348a9e452287ba3674b46ab67a56f4ecc53862cb9304a967b8c744091b9a719a0883df97dc55aaaab554396ddba1cfa8b1455e4e6117ce1c96fe262396b72efb71b24c1d1d3557c264ecff751f2bff259f7de1b783da32ee8d369194100ce7deac003d69b62ea848245f188d16874cbaa346603853eb9e390bf6bbdc3d08a73b56f08deffbafadefb2a181e4a456d0b9a76061a5cd90bc8d2adab7b390540a939e5e87ea89eff101cf0ae9c36b3aedf3dc747d775f4197e762e91fa7843dd238955968c9bb5e5b39505aea3e70d72b449b8f87e32310e72e021e10b065c01063adf4133c0d006001a70cd09675602757275f4a02811e900c7675639017280907083f2bf8dd882cc594950cadf61fc9ca81d7645f0cbc0cd388e1b7ccfbba09462723e87aa43869f259474405f5944cb4b990ffc9e707de5514307beb4c1a682d147080612a0a97fc2106996b2f2c8de3805f71aab4db42a08e240e9d62705fc9fb575fd70dd4432515cce5c1073c478391", 0x1000}], 0x6}}, {{&(0x7f0000006040)={0x2, 0x9, @rand_addr=0x64010102}, 0x10, &(0x7f0000006180)=[{&(0x7f0000006080)="58e0ec056aea35230464fd91b2ee424c8634ec5dcd90a837975ad3852cba95566c79988a03eb03c54d13c6d0bcd96ef4e7171aded3287a2f67f69502aa464b319b770e99e37c76b940fdaf1ca64de9dac854580841eafe415fcd108913fb4b92f6489f2f67da208ca4981ff940ce175ef78c9c3cf9856de07e765fc6072b59152a697ca2c7aa5f09d44e4e16d2cf3386ca3e5b40454faec7316a4189197fe8e048680325d304e2a5412ef705801813cb8bf0e7", 0xb3}, {&(0x7f0000006140)="2e576f883b1ae47322604d4b5d7c8f48ad8bf6c58314d9fd1a12d102006d1ea594326f11b755f8da88f3565c25015e22f2dbb73cfbec48d6005c78d75006", 0x3e}], 0x2}}, {{0x0, 0x0, &(0x7f00000062c0)=[{&(0x7f00000061c0)="9ed18d9f49976b8db1a834d1b73c63e0617df80940e153519f5288076b7ac6c8ea91270d6e4babd4693e8414826a86e80a16c1cba13d4a2598c86ca1326e963725e849eff540a2bb603e0b7c66cda0028cbe878453d8d7cefe27d37726672faf519d8bf13faa81fbb86ae7b88ffeecf7ea41c68ba09d89e7feb75163107ea5682ae30439514ceb6911ba71e5ae7865d949e6afaf96e763fed50a9066bd650d9ea900113f0ab20fd9ebc72873beaf5f6c609ac9e5a9f1ab15f8391011e20643d604d6168e73f2e2174699cbc04ce77cffb17d748a436991549ca7882535b7bc5c182187f339db9b1699d17eb2503e4299990c", 0xf2}], 0x1, &(0x7f0000006300)}}], 0x6, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioprio_get$pid(0x1, r6) socket$nl_netfilter(0x10, 0x3, 0xc) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) socket(0x25, 0x5, 0x0) io_uring_setup(0x789f, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c0000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000004c0012800e00010069703665727370616e00000038000280140006002001004000000000000000000000000214000700fc0200000000000000000000000000000400120008000100b15b77ed82dba83d814e266f2fa69ba6bd1c7024c294a4e30baf8030c029449ea3585e511c82222fd39cb61cbb3bc4515de5c41326defbb30add539d21d52315b5f577018b0c39bf815fc6a3bc92bd3c66f32d314d6c95e3fa53bc", @ANYRES32=r5, @ANYBLOB], 0x6c}}, 0x0) 1.879238908s ago: executing program 1 (id=3346): bind$alg(0xffffffffffffffff, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) setsockopt(0xffffffffffffffff, 0x4, 0x4, 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0xd0}, 0x4000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$alg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="78d8f92dbf64605cdd118f48e23e98c60b7983beb3470e13d6338b8e1a1e", 0x1e}, {&(0x7f0000000080)}, {0x0}, {&(0x7f0000000540)}], 0x4, &(0x7f0000000700)=[@assoc={0x18, 0x117, 0x4, 0x46208000}, @assoc={0x18, 0x117, 0x4, 0x7}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}], 0x60, 0x80}, 0x4004080) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x14, 0x0, 0x2, 0x70bd23, 0x25dfdbff, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x90) 1.739493084s ago: executing program 3 (id=3347): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000086d0493c2000000000001090224000100003000090400000503000000092100000801220b0009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb018018"], &(0x7f0000000f80)=""/4094, 0x1a, 0xffe, 0x9}, 0x28) bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0)=@generic={&(0x7f0000000180)='./file0\x00', 0x0, 0x8}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_ep_write(r0, 0x9, 0x3, &(0x7f0000000300)='|@ ') sendmsg$IPSET_CMD_RENAME(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x14, 0x5, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x20005004) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10240}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_IP_TARGET={0x8, 0x8, 0x0, 0x1, [@empty]}, @IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x8}]}}}]}, 0x44}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000480)={0x24, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00220c000000a98aab"], 0x0}, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(r3, 0x7aa, &(0x7f0000000040)={{@local, 0x9}, 0x2, 0x101}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./control\x00', 0x480, &(0x7f0000000000), 0x1, 0x786, &(0x7f0000000f80)="$eJzs3c9rHGUfAPDvbLNJ37Tv27zwwms9BQQNlG5Mja2Ch4oHESwU9Gy7bLahZpMt2U1pQkCLCF4EFQ+CXnq2Wm9e/XHVP8C7B2mpmhYjHiQym9102+ymmzSbbdnPByZ5npnZfOc7z8w8T3aG3QD61mj6IxNxOCI+SCIO1ecnEZGtlQYiTq6vt7qyXEinJNbWXvstqa1ze2W5EE2vSR2oVx6LiO/ejTiS2Ry3srg0ky+VivP1+nh19sJ4ZXHp6PnZ/HRxujh3fGJy8tiJZ08c371c//hx6eCND19+6suTf73z/2vvf5/EyThYX9acx24ZjdH6Psmmu/AuL8Vbux2up5JebwA7kp6a+9bP8jicpOWBXm8SANBl6Sh0DQDoM4n+HwD6TON9gNsry4XG1Nt3JPbWzRcjYv96/o37m+tLBur37PbX7oMO307uujOSRMTILsQfjYjPvn7jajpFl+5DArTy9uWIODsyuvn6n2x6ZmG7nu5gndF76hvxf8o+YHTgfr5Jxz/PtRr/ZTbGP9Fi/DPU4tzdibbn/4bM9V0I01Y6/nuh6dm21ab860b21Wv/ro35ssm586Viem37T0SMRXYorU9sEWPs1t+32i1rHv/9/tGbn6fx09931shcHxi6+zVT+Wr+QXJudvNyxOMDrfJPNto/aTP+Pd1hjFeef+/TdsvS/NN8G9Pm/Ltr7UrEky3b/84TbcmWzyeO1w6H8cZB0cJXP38y3C5+c/un0+rK8loScXX3M20tbf/hrfMfSZqf16xsP8YPVw59225Zi/wLjf+F1rU+/geT12vlwfq8S/lqdX4iYjB5dfP8Y3de26g31k/zH3ui9fm/1fGfjk7Odpj/wI1fv9h5/t2V5j+1rfbffuHa6sy+dvE7a//JWmmsPqeT61+nG/gg+w4AAAAAAAAAAAAAAAAAAAAAAAAAOpWJiIORZHIb5Uwml1v/Du//xXCmVK5Uj5wrL8xNRe27skcim2l81OWhps9Dnah/Hn6jfuye+jMR8d+I+HjoX7V6rlAuTfU6eQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACoO9Dm+/9Tvwz1eusAgK7Z3+sNAAD2nP4fAPqP/h8A+o/+HwD6j/4fAPqP/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAuO33qVDqt/bmyXEjrUxcXF2bKF49OFSszudmFQq5Qnr+Qmy6Xp0vFXKE8e7+/VyqXL0zG3MKl8WqxUh2vLC6dmS0vzFXPnJ/NTxfPFLN7khUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbE9lcWkmXyoV5xUegcJAvdUelu3ZUSHTSGKvgg52K4uHYGd2r9DDixIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAI+SfAAAA///WoyFe") r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x189) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r4, 0x0) pwrite64(r4, &(0x7f0000000280)="7516250d03afc1e56025d00ad5a60244722a98437be18acad9bdee0061ffadce1440e902a516c863322ae46df6118393f39f138d82032d98a682477cf3ca96b37f652d110ac9dfac1f6ae13ddd45ceb4f50bfbbd15c2b0297c3b8a05733ae3685294a622e4372d56e24b272d2d3e021b9fdf0939eaff9cfeabe6e6a6babdab15aa6c3fe20ec305d4ce3b538d0ba03bf653712d5fe2008f6956cb", 0xfffffd55, 0x8) write$FUSE_INIT(r4, &(0x7f00000000c0)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x2, 0xc00, 0x9, 0x5, 0x1, 0x2, 0x0, 0x0, 0x40, 0x3}}, 0x50) syz_emit_ethernet(0xf7, &(0x7f0000000080)={@local, @empty, @val={@val={0x88a8, 0x3, 0x1, 0x3}, {0x8100, 0x4, 0x1, 0x2}}, {@ipv6={0x86dd, @tipc_packet={0x2, 0x6, "69b03d", 0xb9, 0x6, 0xff, @mcast1, @remote, {[@routing={0x87, 0x8, 0x1, 0x96, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @loopback, @empty, @private0={0xfc, 0x0, '\x00', 0x1}]}, @srh={0x2c, 0xa, 0x4, 0x5, 0xc, 0x60, 0x2, [@dev={0xfe, 0x80, '\x00', 0x1d}, @local, @empty, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}], @payload_conn={{{0x19, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x8, 0x0, 0x0, 0xd, 0x0, 0x0, 0x101, 0x7, 0x1, 0x4e21, 0x9}}, [0x0]}}}}}}, 0x0) 1.712586495s ago: executing program 2 (id=3348): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r1) r2 = socket(0x28, 0x5, 0x0) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r3, 0x4) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0xfffffffffffffffe}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x80000001, 0x7fffffff, 0xfffffffffffffffe}, 0x0, 0x0) 1.044758334s ago: executing program 1 (id=3349): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x8802, 0x0, 0x1, 0x0, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e75"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0), 0x4000, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000100)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xf3}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001b700)=""/102392, 0x18ff8) ioprio_set$uid(0x3, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000028247d423e2ed2403ea8700855cd0079f9f63f68e24d9c1626511a1775e762fbe2e640844aed5de532821825d51259911d40666a1bc7a3884e75b332a15e8f6509aa3a3b2a370acadfc2cdc9d47fb1cc74491ee9cc9efa13456cfa50f04882e3724dfbb76e5dbe803c2e44ad49fba6033835f4715049b1386ca025e5b9b055463a69b5f2b592e3da6fdfab37d8fcf1eddea4885d360dc7f239f5a2fc956fbfc910e8a1ac06c016d013a23c42879d7b9b3650a191c5da228c2056c1771b3f79b1036f6b9d3b880f727f071f27b3e36ff71483ce65eb321c0090bbb3b0278e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x22, &(0x7f0000000240)=0x4, 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r4, 0x400, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$getflags(r5, 0x401) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) 915.37267ms ago: executing program 6 (id=3350): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r0) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4004052) 715.400459ms ago: executing program 6 (id=3351): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32], 0x1c}}, 0x8004) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) write$nci(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="414601", @ANYRES8=r10], 0x4) 184.976823ms ago: executing program 1 (id=3352): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000e80)=@newtfilter={0x478, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0x448, 0x2, [@TCA_BASIC_POLICE={0x444, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0xffffffffffffffff, 0x8000, 0x6, 0x3e9, {0x4, 0x1, 0x200, 0x0, 0xfc01, 0x8001}, {0x7, 0x0, 0x5, 0x5, 0xfffc}, 0x3235c424, 0x9, 0xffffffff}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x8000, 0x9, 0x7, 0x200, 0x1, 0x1b5, 0x7, 0x2a, 0x8, 0x5, 0x4, 0x28, 0x0, 0x6, 0x400, 0x3, 0x7, 0x1, 0x9, 0x8, 0x2, 0x7a49, 0x5, 0x9, 0xfff, 0xb, 0xfffffff8, 0x8ee, 0x7, 0x4, 0x8, 0x615, 0x5, 0x6, 0x6, 0x5, 0x6, 0x8, 0x8, 0x6, 0x800, 0x5, 0x5, 0xffff, 0x3, 0x6, 0x0, 0x80000000, 0xecc7, 0x8, 0x214, 0x3, 0x40, 0xffff, 0x5, 0x4, 0x7, 0x8, 0x400, 0x80, 0x4, 0x7fff, 0x3, 0x9, 0xd3a, 0x8, 0x9b91, 0x3d, 0xffff, 0x3, 0x8, 0x1, 0x7fff, 0x5, 0x7, 0x5, 0x2, 0xfffffffd, 0x1, 0x4, 0x1, 0x3, 0x9, 0x4, 0x0, 0x5, 0x97, 0x0, 0x0, 0x7, 0x4, 0x7, 0x5, 0x6, 0xd, 0x7ff, 0x8e1, 0x1, 0x6, 0x101, 0x5ed, 0x7ff, 0x0, 0x1, 0xffffffff, 0x3, 0xfff, 0x2c, 0x7, 0xbf, 0x7, 0x7, 0x6, 0xfff, 0x80000001, 0x9, 0x6, 0x3, 0x2, 0x5, 0x4, 0x3000000, 0xfd4, 0x5, 0x2, 0x3a7, 0xcafa, 0x7, 0x7f, 0x7, 0x8000, 0xf, 0x8000, 0x6, 0xa, 0x6, 0x3a2, 0x2, 0x2, 0x401, 0xed8f, 0x800, 0x4, 0x80000001, 0x5, 0x8, 0x0, 0x10000, 0xff, 0x3ff, 0x0, 0xdd48, 0xb085, 0x0, 0x4, 0xfffffffd, 0xffff, 0x0, 0x3, 0x6, 0x8, 0x7, 0x4c482fc5, 0x10, 0x0, 0x422, 0xffffffff, 0x1, 0x4, 0x8, 0xf9, 0x1, 0xe, 0x7, 0x8, 0x9, 0xab50, 0x8, 0x3, 0x4, 0x3, 0x200, 0x3, 0xffffa0be, 0x5, 0x23, 0x5, 0x2, 0x6, 0x1, 0x800, 0x10, 0x4, 0x10000, 0x1, 0x4, 0x759, 0x2, 0x1000, 0x0, 0x3, 0xfffffffd, 0x401, 0x7, 0x8, 0x3, 0x6, 0x400, 0x60, 0x1, 0x400, 0x6, 0x7, 0x0, 0x2, 0x6, 0x8, 0x9887, 0x9, 0x6, 0x5, 0x20ceef0a, 0x82, 0x3, 0xf, 0x7fffffff, 0x5, 0x2, 0x3, 0x3, 0x4d0, 0x3642, 0xc, 0xd, 0x8, 0x8, 0x2, 0x0, 0x8, 0x1, 0x8001, 0x8, 0x4, 0x400, 0x6, 0x5, 0x10001, 0x8, 0xe7, 0x6, 0x53, 0x5, 0x5, 0x7, 0x4]}]}]}}]}, 0x478}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008800) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r3, 0xc}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163c", 0x1f}, {&(0x7f0000000c00)="4307ed2e30", 0x5}], 0x2}, 0x4) 131.234235ms ago: executing program 2 (id=3353): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x44, r5, 0x207, 0x0, 0x3, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x8}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r6 = socket$packet(0x11, 0x3, 0x300) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r7, 0xc0185879, &(0x7f0000000040)={@id={0x2, 0x0, @a}}) ioctl$USBDEVFS_ALLOC_STREAMS(r7, 0x8008551c, &(0x7f00000000c0)={0x31a2, 0x7, [{0xf}, {0x5}, {0x3}, {}, {0xd}, {0xf}, {0x1, 0x1}]}) sendto$packet(r6, &(0x7f00000005c0)="bad33119c9b55400046981e6352a", 0xe, 0x40, &(0x7f0000000080)={0x11, 0x86dd, r3, 0x1, 0xd8, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) 0s ago: executing program 6 (id=3354): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='notify_on_release\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x100000000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r2, 0x6, 0xd, &(0x7f0000000000), 0x0) setsockopt$inet6_int(r2, 0x29, 0x4, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) close(0x3) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffe, 0x4}, 0x0, &(0x7f0000000240)={0x3fd, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x5, 0xc, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f0000000500)={"71eaa9c3af7a29378ce241234a7133b5", 0x0, 0x0, {0x3ff, 0x5}, {0x5, 0x7ff}, 0x9, [0x5, 0xd74, 0x3, 0x1, 0x0, 0x7fffffff, 0x9, 0x7fffffffffffffff, 0x1df8, 0x8, 0x7, 0x1c000000, 0x1, 0x1, 0x8, 0x8000000000000000]}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x6}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) shutdown(r6, 0x1) unshare(0x62040200) r7 = socket(0x10, 0x803, 0x0) getsockname$packet(r7, 0x0, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x4c094) kernel console output (not intermixed with test programs): 09.343316][T14698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 509.356448][T14698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.367097][T14698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 509.377741][T14698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.387869][T14698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 509.398639][T14698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.410559][T14698] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 509.438202][T14698] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.447573][T14698] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.457143][T14698] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.466692][T14698] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.603555][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 509.611744][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 509.668385][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 509.676419][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 509.877455][T14803] loop3: detected capacity change from 0 to 128 [ 509.892333][T14807] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2764'. [ 509.911048][T14803] EXT4-fs: Ignoring removed nomblk_io_submit option [ 509.962209][T14803] EXT4-fs (loop3): Test dummy encryption mode enabled [ 510.001003][T14803] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 510.023491][T14803] ext4 filesystem being mounted at /58/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 510.081985][T14803] EXT4-fs (loop3): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 510.257169][T13906] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 510.338934][ T3480] IPVS: stop unused estimator thread 0... [ 514.002780][T14862] loop2: detected capacity change from 0 to 128 [ 514.023754][T14862] EXT4-fs: Ignoring removed nomblk_io_submit option [ 514.757536][T14862] EXT4-fs (loop2): Test dummy encryption mode enabled [ 514.793701][T14862] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 514.829104][T14862] ext4 filesystem being mounted at /12/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 514.889224][T14862] EXT4-fs (loop2): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 515.058983][T14576] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 518.330964][T14914] loop2: detected capacity change from 0 to 128 [ 518.381900][T14914] EXT4-fs: Ignoring removed nomblk_io_submit option [ 518.401222][T14914] EXT4-fs (loop2): Test dummy encryption mode enabled [ 518.422788][T14922] syzkaller0: entered promiscuous mode [ 518.429107][T14922] syzkaller0: entered allmulticast mode [ 518.713095][T14914] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 518.757960][T14914] ext4 filesystem being mounted at /15/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 518.965325][T14914] EXT4-fs (loop2): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 519.041644][T14576] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 519.231380][T14939] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2799'. [ 520.618104][T14966] loop3: detected capacity change from 0 to 128 [ 520.635354][T14970] syzkaller0: entered promiscuous mode [ 520.640855][T14970] syzkaller0: entered allmulticast mode [ 520.647643][T14966] EXT4-fs: Ignoring removed nomblk_io_submit option [ 520.682952][T14966] EXT4-fs (loop3): Test dummy encryption mode enabled [ 520.729579][T14966] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 520.765770][T14966] ext4 filesystem being mounted at /69/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 520.820128][T14966] EXT4-fs (loop3): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 520.919242][T13906] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 521.027607][T14978] syzkaller0: entered promiscuous mode [ 521.033197][T14978] syzkaller0: entered allmulticast mode [ 521.176210][T14984] loop3: detected capacity change from 0 to 128 [ 521.191198][T14984] EXT4-fs: Ignoring removed nomblk_io_submit option [ 521.225077][T14984] EXT4-fs (loop3): Test dummy encryption mode enabled [ 521.243900][T14984] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 521.259233][T14984] ext4 filesystem being mounted at /70/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 521.291766][T14984] EXT4-fs (loop3): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 521.476123][T13906] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 523.458264][T15054] syzkaller0: entered promiscuous mode [ 523.472173][T15054] syzkaller0: entered allmulticast mode [ 526.339710][T15083] syzkaller0: entered promiscuous mode [ 526.345609][T15083] syzkaller0: entered allmulticast mode [ 527.785249][T15112] syzkaller0: entered promiscuous mode [ 527.790846][T15112] syzkaller0: entered allmulticast mode [ 530.474888][T15154] ieee802154 phy1 wpan1: encryption failed: -22 [ 530.582750][T15157] syzkaller0: entered promiscuous mode [ 530.610915][T15157] syzkaller0: entered allmulticast mode [ 530.922388][T15170] loop1: detected capacity change from 0 to 128 [ 530.930458][T15170] EXT4-fs: Ignoring removed nomblk_io_submit option [ 530.953804][T15170] EXT4-fs (loop1): Test dummy encryption mode enabled [ 530.991340][T15170] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 531.010157][T15170] ext4 filesystem being mounted at /45/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 531.062048][T15170] EXT4-fs (loop1): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 531.202857][T14408] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 533.815801][T15210] syzkaller0: entered promiscuous mode [ 533.821396][T15210] syzkaller0: entered allmulticast mode [ 534.046870][T15212] loop1: detected capacity change from 0 to 128 [ 534.082849][T15212] EXT4-fs: Ignoring removed nomblk_io_submit option [ 534.117592][T15212] EXT4-fs (loop1): Test dummy encryption mode enabled [ 534.158070][T15212] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 534.197726][T15212] ext4 filesystem being mounted at /49/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 534.310098][T15220] loop3: detected capacity change from 0 to 128 [ 534.318131][T15212] EXT4-fs (loop1): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 534.352349][T15220] EXT4-fs: Ignoring removed nomblk_io_submit option [ 534.365066][T15220] EXT4-fs (loop3): Test dummy encryption mode enabled [ 534.423550][T14408] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 534.446032][T15220] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 534.485922][T15220] ext4 filesystem being mounted at /86/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 534.794131][T15220] EXT4-fs (loop3): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 535.055907][T15231] syzkaller0: entered promiscuous mode [ 535.061405][T15231] syzkaller0: entered allmulticast mode [ 535.129363][T13906] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 539.130797][T15278] loop4: detected capacity change from 0 to 128 [ 539.178776][T15278] EXT4-fs: Ignoring removed nomblk_io_submit option [ 539.217178][T15278] EXT4-fs (loop4): Test dummy encryption mode enabled [ 539.252027][T15278] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 539.281797][T15289] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 539.331008][T15278] ext4 filesystem being mounted at /33/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 539.861079][T15278] EXT4-fs (loop4): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 539.964067][T14698] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 541.352661][T15291] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 543.412016][ T7521] libceph: connect (1)[c::]:6789 error -101 [ 543.420609][ T7521] libceph: mon0 (1)[c::]:6789 connect error [ 543.457672][ T7521] libceph: connect (1)[c::]:6789 error -101 [ 543.488769][ T7521] libceph: mon0 (1)[c::]:6789 connect error [ 543.862063][ T7526] libceph: connect (1)[c::]:6789 error -101 [ 543.869001][ T7526] libceph: mon0 (1)[c::]:6789 connect error [ 544.353357][T15333] ceph: No mds server is up or the cluster is laggy [ 544.397536][ T7526] libceph: connect (1)[c::]:6789 error -101 [ 544.405692][ T7526] libceph: mon0 (1)[c::]:6789 connect error [ 545.684871][ T28] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 546.014299][ T28] usb 4-1: Using ep0 maxpacket: 16 [ 546.096149][ T28] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 546.167284][ T28] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 546.208910][ T28] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 546.310477][ T28] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 546.330093][ T28] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 546.360926][ T28] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.384841][ T28] usb 4-1: Product: syz [ 546.391302][ T28] usb 4-1: Manufacturer: syz [ 546.412268][ T28] usb 4-1: SerialNumber: syz [ 546.551680][T15378] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2925'. [ 546.567110][T15378] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2925'. [ 547.609138][ T28] cdc_ncm 4-1:1.0: invalid descriptor buffer length [ 547.639430][ T28] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 547.660328][ T28] cdc_ncm 4-1:1.0: bind() failure [ 547.676015][ T28] usb 4-1: USB disconnect, device number 2 [ 548.578778][T15396] loop1: detected capacity change from 0 to 4096 [ 548.715816][T15406] syzkaller0: entered promiscuous mode [ 548.721332][T15406] syzkaller0: entered allmulticast mode [ 549.636953][ T27] audit: type=1800 audit(1764447275.063:4): pid=15399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2930" name="file1" dev="loop1" ino=33 res=0 errno=0 [ 549.874049][ T5789] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 550.085261][ T5789] usb 3-1: Using ep0 maxpacket: 32 [ 550.103390][ T5789] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 550.113732][ T5789] usb 3-1: config 0 has no interface number 0 [ 550.139470][ T5789] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 550.151068][ T5789] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.160134][ T5789] usb 3-1: Product: syz [ 550.166436][ T5789] usb 3-1: Manufacturer: syz [ 550.171115][ T5789] usb 3-1: SerialNumber: syz [ 550.179996][ T5789] usb 3-1: config 0 descriptor?? [ 550.192351][ T5789] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 550.438127][ T5789] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 550.533807][ T5789] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 550.888113][T15420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 550.902830][T15420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 550.972379][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 550.983245][ T5789] usb 3-1: USB disconnect, device number 2 [ 551.012200][ T5789] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 551.063648][ T5789] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 551.080794][ T5789] quatech2 3-1:0.51: device disconnected [ 551.600732][T15435] loop1: detected capacity change from 0 to 40427 [ 551.664099][T15435] F2FS-fs (loop1): invalid crc value [ 551.701647][T15435] F2FS-fs (loop1): Found nat_bits in checkpoint [ 551.721969][T15446] syzkaller0: entered promiscuous mode [ 551.741800][T15446] syzkaller0: entered allmulticast mode [ 551.775253][T15448] netlink: 'syz.2.2949': attribute type 10 has an invalid length. [ 552.305177][T15448] veth0_vlan: left promiscuous mode [ 552.328818][T15435] F2FS-fs (loop1): Start checkpoint disabled! [ 552.345122][T15448] veth0_vlan: entered promiscuous mode [ 552.369186][T15435] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 552.386874][T15448] team0: Device veth0_vlan failed to register rx_handler [ 552.461302][T15435] syz.1.2944: attempt to access beyond end of device [ 552.461302][T15435] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 552.515226][T15435] syz.1.2944: attempt to access beyond end of device [ 552.515226][T15435] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 552.585140][ T5833] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 552.633153][T14512] kworker/u4:13: attempt to access beyond end of device [ 552.633153][T14512] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 552.651491][T14512] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 552.677411][T14512] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 552.754165][ T5833] usb 4-1: device descriptor read/64, error -71 [ 552.930132][T15457] loop4: detected capacity change from 0 to 2048 [ 553.008493][T15457] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 553.034245][ T5833] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 553.264011][ T5833] usb 4-1: device descriptor read/64, error -71 [ 553.454641][ T5833] usb usb4-port1: attempt power cycle [ 554.085280][ T5833] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 554.115733][ T5833] usb 4-1: device descriptor read/8, error -71 [ 554.230800][T15481] syzkaller0: entered promiscuous mode [ 554.236418][T15481] syzkaller0: entered allmulticast mode [ 554.408155][T15486] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2959'. [ 554.462327][ T5833] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 554.975873][ T5833] usb 4-1: device descriptor read/8, error -71 [ 555.107201][ T5833] usb usb4-port1: unable to enumerate USB device [ 555.792559][T15493] loop2: detected capacity change from 0 to 40427 [ 555.832098][T15493] F2FS-fs (loop2): invalid crc value [ 555.860657][T15493] F2FS-fs (loop2): Found nat_bits in checkpoint [ 555.998510][T15493] F2FS-fs (loop2): Start checkpoint disabled! [ 556.041777][T15493] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 556.242965][T15493] syz.2.2961: attempt to access beyond end of device [ 556.242965][T15493] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 556.277781][T15493] syz.2.2961: attempt to access beyond end of device [ 556.277781][T15493] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 556.459548][T15510] syzkaller0: entered promiscuous mode [ 556.470656][T15510] syzkaller0: entered allmulticast mode [ 556.536398][T14512] kworker/u4:13: attempt to access beyond end of device [ 556.536398][T14512] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 556.568145][T14512] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 556.583395][T14512] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 556.811347][T15517] loop1: detected capacity change from 0 to 1764 [ 556.935624][T15515] loop1: detected capacity change from 0 to 512 [ 556.967374][T15515] EXT4-fs: Invalid journal IO priority (must be 0-7) [ 557.629032][T15519] loop3: detected capacity change from 0 to 32768 [ 557.677056][T15519] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.2973 (15519) [ 557.736797][T15519] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 557.751510][T15519] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 557.763404][T15519] BTRFS info (device loop3): using free space tree [ 557.916732][T15535] loop2: detected capacity change from 0 to 4096 [ 558.109341][T15519] BTRFS info (device loop3): enabling ssd optimizations [ 558.159729][T15519] BTRFS info (device loop3): auto enabling async discard [ 559.222456][T13906] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 559.977545][ T5782] Bluetooth: hci3: command 0x0406 tx timeout [ 560.008075][T15566] syzkaller0: entered promiscuous mode [ 560.024187][T15566] syzkaller0: entered allmulticast mode [ 560.165758][T15568] netlink: 'syz.1.2981': attribute type 13 has an invalid length. [ 560.173603][T15563] loop4: detected capacity change from 0 to 40427 [ 560.204349][T15563] F2FS-fs (loop4): invalid crc value [ 560.223056][T15563] F2FS-fs (loop4): Found nat_bits in checkpoint [ 560.316082][T15563] F2FS-fs (loop4): Start checkpoint disabled! [ 560.345884][T15563] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 560.372966][T15572] 9pnet_fd: Insufficient options for proto=fd [ 560.388489][T15572] 9pnet_fd: Insufficient options for proto=fd [ 560.399852][T15572] 9pnet_fd: Insufficient options for proto=fd [ 560.409905][T15572] 9pnet_fd: Insufficient options for proto=fd [ 560.422450][T15572] 9pnet_fd: Insufficient options for proto=fd [ 560.442683][T15572] 9pnet_fd: Insufficient options for proto=fd [ 560.455374][T15572] 9pnet_fd: Insufficient options for proto=fd [ 560.464576][ T5789] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 560.479290][T15572] 9pnet_fd: Insufficient options for proto=fd [ 560.487669][T15563] syz.4.2978: attempt to access beyond end of device [ 560.487669][T15563] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 560.502009][T15572] 9pnet_fd: Insufficient options for proto=fd [ 560.516228][T15572] 9pnet_fd: Insufficient options for proto=fd [ 560.526538][T15572] 9pnet_fd: Insufficient options for proto=fd [ 560.537320][T15572] 9pnet_fd: Insufficient options for proto=fd [ 560.541679][T15563] syz.4.2978: attempt to access beyond end of device [ 560.541679][T15563] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 560.560162][T15572] 9pnet_fd: Insufficient options for proto=fd [ 560.567427][T15572] 9pnet_fd: Insufficient options for proto=fd [ 560.576867][T15572] 9pnet_fd: Insufficient options for proto=fd [ 560.583482][T15572] 9pnet_fd: Insufficient options for proto=fd [ 560.594795][T15572] 9pnet_fd: Insufficient options for proto=fd [ 560.602838][T15572] 9pnet_fd: Insufficient options for proto=fd [ 560.614288][T15572] 9pnet_fd: Insufficient options for proto=fd [ 560.627288][T15572] 9pnet_fd: Insufficient options for proto=fd [ 560.637636][T15572] 9pnet_fd: Insufficient options for proto=fd [ 560.644830][T15572] 9pnet_fd: Insufficient options for proto=fd [ 560.651496][T15572] 9pnet_fd: Insufficient options for proto=fd [ 560.658632][T15572] 9pnet_fd: Insufficient options for proto=fd [ 560.667510][T15572] 9pnet_fd: Insufficient options for proto=fd [ 560.674029][ T5789] usb 2-1: Using ep0 maxpacket: 16 [ 560.674437][T15572] 9pnet_fd: Insufficient options for proto=fd [ 560.688800][T15572] 9pnet_fd: Insufficient options for proto=fd [ 560.689630][ T5789] usb 2-1: config 9 has too many interfaces: 124, using maximum allowed: 32 [ 560.696882][T15572] 9pnet_fd: Insufficient options for proto=fd [ 560.713682][T15572] 9pnet_fd: Insufficient options for proto=fd [ 560.747935][T15572] 9pnet_fd: Insufficient options for proto=fd [ 560.763212][ T5789] usb 2-1: config 9 has an invalid descriptor of length 161, skipping remainder of the config [ 560.763631][T15572] 9pnet_fd: Insufficient options for proto=fd [ 560.795724][ T60] kworker/u4:4: attempt to access beyond end of device [ 560.795724][ T60] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 560.810079][ T5789] usb 2-1: config 9 has 0 interfaces, different from the descriptor's value: 124 [ 560.820279][T15572] 9pnet_fd: Insufficient options for proto=fd [ 560.828090][ T60] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 560.840802][ T5789] usb 2-1: New USB device found, idVendor=25c6, idProduct=9002, bcdDevice=41.ba [ 560.851135][ T5789] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.861717][ T5789] usb 2-1: Product: syz [ 560.867105][ T5789] usb 2-1: Manufacturer: syz [ 560.871829][ T5789] usb 2-1: SerialNumber: syz [ 560.881269][T15572] 9pnet_fd: Insufficient options for proto=fd [ 560.903083][ T60] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 561.111925][T15568] binder: 15567:15568 ioctl 8946 200000000240 returned -22 [ 561.170669][T15568] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2981'. [ 561.220200][T15568] binder: 15567:15568 ioctl c0306201 200000000440 returned -11 [ 561.268227][T15568] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2981'. [ 561.302990][T15568] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2981'. [ 561.379586][ T5789] usb 2-1: USB disconnect, device number 2 [ 562.995183][T15607] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2991'. [ 563.057734][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.275473][ T28] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 563.591051][ T28] usb 5-1: Using ep0 maxpacket: 8 [ 563.609206][ T28] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 563.622144][ T28] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 563.631761][ T28] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.640243][ T28] usb 5-1: Product: syz [ 563.644859][ T28] usb 5-1: Manufacturer: syz [ 563.649563][ T28] usb 5-1: SerialNumber: syz [ 563.704670][ T28] usb 5-1: config 0 descriptor?? [ 563.716464][ T28] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 563.731706][ T28] usb 5-1: setting power ON [ 563.741116][ T28] dvb-usb: bulk message failed: -22 (2/0) [ 563.812987][ T28] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 563.828641][ T28] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 563.847631][ T28] usb 5-1: media controller created [ 563.879116][ T28] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 563.920871][ T28] usb 5-1: selecting invalid altsetting 6 [ 563.927264][ T28] usb 5-1: digital interface selection failed (-22) [ 563.945822][ T28] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 563.957269][ T28] usb 5-1: setting power OFF [ 563.962381][ T28] dvb-usb: bulk message failed: -22 (2/0) [ 563.971559][ T28] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 563.981440][T15602] dvb-usb: bulk message failed: -22 (3/0) [ 563.988429][ T28] (NULL device *): no alternate interface [ 563.995702][T15602] cxusb: i2c rd: len=169 is too big! [ 563.995702][T15602] [ 564.031313][T15620] FAULT_INJECTION: forcing a failure. [ 564.031313][T15620] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 564.066422][T15619] cxusb: i2c rd: len=4096 is too big! [ 564.066422][T15619] [ 564.083528][T15620] CPU: 1 PID: 15620 Comm: syz.2.2994 Not tainted syzkaller #0 [ 564.091031][T15620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 564.101128][T15620] Call Trace: [ 564.104427][T15620] [ 564.107388][T15620] dump_stack_lvl+0x16c/0x230 [ 564.112102][T15620] ? show_regs_print_info+0x20/0x20 [ 564.117327][T15620] ? load_image+0x3b0/0x3b0 [ 564.121858][T15620] ? __might_fault+0xaa/0x120 [ 564.126564][T15620] ? __lock_acquire+0x7c80/0x7c80 [ 564.131621][T15620] should_fail_ex+0x39d/0x4d0 [ 564.136331][T15620] _copy_from_user+0x2f/0xe0 [ 564.140952][T15620] ___sys_sendmsg+0x159/0x290 [ 564.145659][T15620] ? __sys_sendmsg+0x270/0x270 [ 564.150468][T15620] ? __lock_acquire+0x7c80/0x7c80 [ 564.155536][T15620] __se_sys_sendmsg+0x1a5/0x270 [ 564.160414][T15620] ? __x64_sys_sendmsg+0x80/0x80 [ 564.165398][T15620] ? lockdep_hardirqs_on+0x98/0x150 [ 564.170630][T15620] do_syscall_64+0x55/0xb0 [ 564.175070][T15620] ? clear_bhb_loop+0x40/0x90 [ 564.179770][T15620] ? clear_bhb_loop+0x40/0x90 [ 564.184479][T15620] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 564.190394][T15620] RIP: 0033:0x7f1bfcf8f749 [ 564.194821][T15620] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 564.214444][T15620] RSP: 002b:00007f1bfdea8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 564.222875][T15620] RAX: ffffffffffffffda RBX: 00007f1bfd1e6090 RCX: 00007f1bfcf8f749 [ 564.230846][T15620] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 564.238813][T15620] RBP: 00007f1bfdea8090 R08: 0000000000000000 R09: 0000000000000000 [ 564.246793][T15620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 564.254775][T15620] R13: 00007f1bfd1e6128 R14: 00007f1bfd1e6090 R15: 00007ffc99931358 [ 564.262761][T15620] [ 564.289803][ T28] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 564.347150][ T28] usb 5-1: USB disconnect, device number 2 [ 564.559257][T15612] loop3: detected capacity change from 0 to 40427 [ 564.583998][T15612] F2FS-fs (loop3): invalid crc value [ 564.596225][T15612] F2FS-fs (loop3): Found nat_bits in checkpoint [ 564.667219][T15612] F2FS-fs (loop3): Start checkpoint disabled! [ 564.683803][T15612] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 564.729707][T15612] syz.3.2992: attempt to access beyond end of device [ 564.729707][T15612] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 564.748696][T15612] syz.3.2992: attempt to access beyond end of device [ 564.748696][T15612] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 564.922852][ T2112] kworker/u4:8: attempt to access beyond end of device [ 564.922852][ T2112] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 564.940039][ T2112] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 564.949316][ T2112] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 566.094306][T15651] loop4: detected capacity change from 0 to 4096 [ 566.141254][T15651] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 566.219478][T15651] ntfs3: loop4: volume is dirty and "force" flag is not set! [ 566.428631][T15654] loop3: detected capacity change from 0 to 4096 [ 566.820321][T15668] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3006'. [ 569.575961][T15703] loop4: detected capacity change from 0 to 8 [ 569.657563][T15703] SQUASHFS error: zlib decompression failed, data probably corrupt [ 569.684938][T15703] SQUASHFS error: Failed to read block 0x9b: -5 [ 569.696280][T15703] SQUASHFS error: Unable to read metadata cache entry [99] [ 569.703690][T15703] SQUASHFS error: Unable to read inode 0x127 [ 570.134481][T15709] loop4: detected capacity change from 0 to 4096 [ 570.278327][T15709] ntfs3: loop4: failed to convert "0080" to maciceland [ 570.309626][T15709] ntfs3: loop4: failed to convert name for inode 1e. [ 570.411480][T15035] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 570.630927][T15035] usb 3-1: Using ep0 maxpacket: 32 [ 570.649442][T15035] usb 3-1: unable to get BOS descriptor or descriptor too short [ 570.661630][T15035] usb 3-1: no configurations [ 570.670148][T15035] usb 3-1: can't read configurations, error -22 [ 570.714089][ T7521] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 570.734120][T15717] loop3: detected capacity change from 0 to 8192 [ 570.747495][T15717] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 570.761225][T15717] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 570.773521][T15717] REISERFS (device loop3): using ordered data mode [ 570.780788][T15717] reiserfs: using flush barriers [ 570.793357][T15717] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 570.811754][T15717] REISERFS (device loop3): checking transaction log (loop3) [ 570.907430][ T7521] usb 5-1: Using ep0 maxpacket: 8 [ 570.915833][ T7521] usb 5-1: config 0 has no interfaces? [ 570.921521][ T7521] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 570.930956][ T7521] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.942890][T15717] REISERFS (device loop3): Using tea hash to sort names [ 570.949372][ T7521] usb 5-1: config 0 descriptor?? [ 570.959966][T15717] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 570.976247][T15717] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 571.547867][T15732] o2cb: This node has not been configured. [ 571.554109][T15732] o2cb: Cluster check failed. Fix errors before retrying. [ 571.561415][T15732] (syz.4.3022,15732,1):user_dlm_register:674 ERROR: status = -22 [ 571.569367][T15732] (syz.4.3022,15732,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1" [ 573.516155][T15035] usb 5-1: USB disconnect, device number 3 [ 574.007023][T15750] loop4: detected capacity change from 0 to 4096 [ 575.250130][T15769] loop3: detected capacity change from 0 to 2048 [ 575.279496][T15769] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 575.289724][T15769] NILFS (loop3): unrecognized mount option "ÿÿÿÿÿÿÿÿÿ01777777777777777777777ÑyM¨ÀÌÚBvâŠ%Ä\Ž¸µ•£ýþ}*Œ9r¦“" [ 575.698153][T15776] block device autoloading is deprecated and will be removed. [ 575.705492][T15778] loop8: detected capacity change from 0 to 8 [ 575.728499][T15778] Dev loop8: unable to read RDB block 8 [ 575.747328][T15778] loop8: unable to read partition table [ 575.774580][T15778] loop8: partition table beyond EOD, truncated [ 575.784070][T15035] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 575.824750][T15778] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 575.974385][T15035] usb 4-1: Using ep0 maxpacket: 16 [ 576.365285][T15035] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 576.395216][T15035] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 576.408846][T15035] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 576.417171][T15035] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 576.427786][T15035] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 576.436731][T15035] usb 4-1: config 0 has no interface number 0 [ 576.442975][T15035] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 576.458332][T15035] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 576.486900][T15035] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 576.543625][T15035] usb 4-1: too many endpoints for config 0 interface 125 altsetting 48: 120, using maximum allowed: 30 [ 576.654017][T15035] usb 4-1: config 0 interface 125 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 120 [ 576.710317][T15035] usb 4-1: config 0 interface 125 has no altsetting 0 [ 576.723464][T15035] usb 4-1: config 0 interface 125 has no altsetting 1 [ 576.742295][T15035] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 576.751504][T15035] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.764011][T15035] usb 4-1: Product: syz [ 576.768199][T15035] usb 4-1: Manufacturer: syz [ 576.772835][T15035] usb 4-1: SerialNumber: syz [ 576.795748][T15035] usb 4-1: config 0 descriptor?? [ 577.193353][T15789] loop2: detected capacity change from 0 to 32768 [ 577.211190][T15789] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.3045 (15789) [ 577.230860][ T7526] usb 4-1: USB disconnect, device number 7 [ 577.256178][T15789] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 577.275119][T15789] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 577.289972][T15789] BTRFS info (device loop2): setting nodatacow, compression disabled [ 577.301558][T15789] BTRFS info (device loop2): force clearing of disk cache [ 577.312794][T15789] BTRFS info (device loop2): enabling ssd optimizations [ 577.320339][T15789] BTRFS info (device loop2): using spread ssd allocation scheme [ 577.329400][T15789] BTRFS info (device loop2): turning off barriers [ 577.336205][T15789] BTRFS info (device loop2): disabling free space tree [ 577.343504][T15789] BTRFS info (device loop2): not using ssd optimizations [ 577.351332][T15789] BTRFS info (device loop2): not using spread ssd allocation scheme [ 577.456017][T15789] BTRFS info (device loop2): rebuilding free space tree [ 577.510866][T15789] BTRFS info (device loop2): disabling free space tree [ 577.518065][T15789] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 577.529895][T15789] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 577.599061][T15789] FAULT_INJECTION: forcing a failure. [ 577.599061][T15789] name failslab, interval 1, probability 0, space 0, times 1 [ 577.615228][T15796] loop4: detected capacity change from 0 to 32768 [ 577.640383][T15789] CPU: 1 PID: 15789 Comm: syz.2.3045 Not tainted syzkaller #0 [ 577.647883][T15789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 577.657953][T15789] Call Trace: [ 577.661249][T15789] [ 577.664191][T15789] dump_stack_lvl+0x16c/0x230 [ 577.668880][T15789] ? show_regs_print_info+0x20/0x20 [ 577.674080][T15789] ? load_image+0x3b0/0x3b0 [ 577.678581][T15789] ? __might_sleep+0xe0/0xe0 [ 577.683158][T15789] ? __lock_acquire+0x7c80/0x7c80 [ 577.688174][T15789] should_fail_ex+0x39d/0x4d0 [ 577.692845][T15789] should_failslab+0x9/0x20 [ 577.697344][T15789] slab_pre_alloc_hook+0x59/0x310 [ 577.702361][T15789] kmem_cache_alloc+0x5a/0x2e0 [ 577.707113][T15789] ? getname_flags+0xbb/0x500 [ 577.711781][T15789] getname_flags+0xbb/0x500 [ 577.716274][T15789] ? syscall_enter_from_user_mode+0x25/0x80 [ 577.722157][T15789] __x64_sys_rmdir+0x3c/0x50 [ 577.726734][T15789] do_syscall_64+0x55/0xb0 [ 577.731136][T15789] ? clear_bhb_loop+0x40/0x90 [ 577.735804][T15789] ? clear_bhb_loop+0x40/0x90 [ 577.740474][T15789] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 577.746359][T15789] RIP: 0033:0x7f1bfcf8f749 [ 577.750761][T15789] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 577.770354][T15789] RSP: 002b:00007f1bfdec9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 577.778758][T15789] RAX: ffffffffffffffda RBX: 00007f1bfd1e5fa0 RCX: 00007f1bfcf8f749 [ 577.786717][T15789] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000100 [ 577.794675][T15789] RBP: 00007f1bfdec9090 R08: 0000000000000000 R09: 0000000000000000 [ 577.802637][T15789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 577.810597][T15789] R13: 00007f1bfd1e6038 R14: 00007f1bfd1e5fa0 R15: 00007ffc99931358 [ 577.818569][T15789] [ 577.832350][T15796] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz.4.3047 (15796) [ 577.904054][T14731] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by udevd (14731) [ 578.015278][T14576] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 578.776460][T15833] fuse: Unknown parameter '000000000000000000000040x0000000000000003' [ 578.834712][T15817] loop1: detected capacity change from 0 to 32768 [ 578.878996][T15817] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.3050 (15817) [ 578.993839][T15817] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 579.024127][T15817] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 579.032854][T15817] BTRFS info (device loop1): setting nodatacow, compression disabled [ 579.077247][T15817] BTRFS info (device loop1): force clearing of disk cache [ 579.108593][T15817] BTRFS info (device loop1): enabling ssd optimizations [ 579.134692][T15817] BTRFS info (device loop1): using spread ssd allocation scheme [ 579.150536][T15817] BTRFS info (device loop1): turning off barriers [ 579.167035][T15837] loop4: detected capacity change from 0 to 47 [ 579.181115][T15817] BTRFS info (device loop1): disabling free space tree [ 579.195813][T15817] BTRFS info (device loop1): not using ssd optimizations [ 579.202941][T15817] BTRFS info (device loop1): not using spread ssd allocation scheme [ 579.316096][T15837] syz.4.3057: attempt to access beyond end of device [ 579.316096][T15837] loop4: rw=2049, sector=48, nr_sectors = 2 limit=47 [ 579.339705][T15817] BTRFS info (device loop1): rebuilding free space tree [ 579.360043][T15837] buffer_io_error: 138 callbacks suppressed [ 579.360058][T15837] Buffer I/O error on dev loop4, logical block 24, lost async page write [ 579.375977][T15837] syz.4.3057: attempt to access beyond end of device [ 579.375977][T15837] loop4: rw=2049, sector=50, nr_sectors = 2 limit=47 [ 579.382900][T15817] BTRFS info (device loop1): disabling free space tree [ 579.390392][T15837] Buffer I/O error on dev loop4, logical block 25, lost async page write [ 579.401153][T15817] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 579.405563][T15837] syz.4.3057: attempt to access beyond end of device [ 579.405563][T15837] loop4: rw=2049, sector=52, nr_sectors = 2 limit=47 [ 579.419752][T15817] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 579.432911][T15837] Buffer I/O error on dev loop4, logical block 26, lost async page write [ 579.447731][T15837] syz.4.3057: attempt to access beyond end of device [ 579.447731][T15837] loop4: rw=2049, sector=54, nr_sectors = 2 limit=47 [ 579.461030][T15837] Buffer I/O error on dev loop4, logical block 27, lost async page write [ 579.762670][T14408] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 579.912147][T15863] tipc: Started in network mode [ 579.919165][T15863] tipc: Node identity ac14140f, cluster identity 4711 [ 579.958860][T15863] tipc: New replicast peer: 255.255.255.255 [ 579.977239][T15863] tipc: Enabled bearer , priority 10 [ 579.984360][ T7521] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 580.000174][T15865] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3061'. [ 580.034306][T15865] tipc: Disabling bearer [ 580.214976][ T7521] usb 3-1: config 0 has no interfaces? [ 580.220521][ T7521] usb 3-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 580.252024][ T7521] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.277511][ T7521] usb 3-1: config 0 descriptor?? [ 580.340576][T15879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 580.361043][T15879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 580.624841][ T787] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 580.694249][ T5929] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 580.698496][ T7526] usb 3-1: USB disconnect, device number 5 [ 580.924049][ T787] usb 4-1: Using ep0 maxpacket: 8 [ 580.932427][ T787] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 580.942728][ T787] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 580.944058][ T5929] usb 2-1: Using ep0 maxpacket: 8 [ 580.951888][ T787] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.967533][ T5929] usb 2-1: config 0 has no interfaces? [ 580.973727][ T5929] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 580.987826][ T5929] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.038798][ T787] usb 4-1: config 0 descriptor?? [ 581.206949][ T787] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 581.389122][ T787] gspca_vc032x: reg_r err -71 [ 581.464094][ T787] vc032x: probe of 4-1:0.0 failed with error -71 [ 581.550603][ T787] usb 4-1: USB disconnect, device number 8 [ 581.917647][ T5929] usb 2-1: config 0 descriptor?? [ 582.203278][T15896] loop4: detected capacity change from 0 to 512 [ 582.219807][T15896] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 582.256335][T15896] EXT4-fs error (device loop4): ext4_xattr_inode_iget:444: inode #11: comm syz.4.3068: iget: bad extra_isize 90 (inode size 256) [ 582.321946][T15896] EXT4-fs error (device loop4): ext4_xattr_inode_iget:449: comm syz.4.3068: error while reading EA inode 11 err=-117 [ 582.352865][T15896] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2872: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 582.390617][T15882] o2cb: This node has not been configured. [ 582.395818][T15896] EXT4-fs error (device loop4): ext4_xattr_inode_iget:444: inode #11: comm syz.4.3068: iget: bad extra_isize 90 (inode size 256) [ 582.398283][T15882] o2cb: Cluster check failed. Fix errors before retrying. [ 582.417718][T15882] (syz.1.3064,15882,0):user_dlm_register:674 ERROR: status = -22 [ 582.426092][T15882] (syz.1.3064,15882,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1" [ 582.458831][T15896] EXT4-fs error (device loop4): ext4_xattr_inode_iget:449: comm syz.4.3068: error while reading EA inode 11 err=-117 [ 582.477478][ T787] usb 2-1: USB disconnect, device number 3 [ 582.484833][T15896] EXT4-fs error (device loop4): ext4_xattr_inode_iget:444: inode #18: comm syz.4.3068: iget: bad extra_isize 90 (inode size 256) [ 582.506548][T15896] EXT4-fs error (device loop4): ext4_xattr_inode_iget:449: comm syz.4.3068: error while reading EA inode 18 err=-117 [ 582.539620][T15896] EXT4-fs error (device loop4): ext4_xattr_inode_iget:444: inode #18: comm syz.4.3068: iget: bad extra_isize 90 (inode size 256) [ 582.555577][T15896] EXT4-fs error (device loop4): ext4_xattr_inode_iget:449: comm syz.4.3068: error while reading EA inode 18 err=-117 [ 582.571729][T15896] EXT4-fs (loop4): 1 orphan inode deleted [ 582.578789][T15896] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 582.644425][T14698] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 584.113597][ T5929] hid-generic 00A0:0006:0003.0001: unknown main item tag 0x0 [ 584.174031][ T5929] hid-generic 00A0:0006:0003.0001: unknown main item tag 0x0 [ 584.211948][ T5929] hid-generic 00A0:0006:0003.0001: unknown main item tag 0x0 [ 584.213594][T15936] loop3: detected capacity change from 0 to 1024 [ 584.232183][ T5929] hid-generic 00A0:0006:0003.0001: unknown main item tag 0x0 [ 584.259983][ T5929] hid-generic 00A0:0006:0003.0001: unknown main item tag 0x0 [ 584.274077][ T5929] hid-generic 00A0:0006:0003.0001: unknown main item tag 0x0 [ 584.299191][ T5929] hid-generic 00A0:0006:0003.0001: unknown main item tag 0x0 [ 584.308934][T15942] FAULT_INJECTION: forcing a failure. [ 584.308934][T15942] name failslab, interval 1, probability 0, space 0, times 0 [ 584.317257][ T5929] hid-generic 00A0:0006:0003.0001: unknown main item tag 0x0 [ 584.337207][T15942] CPU: 1 PID: 15942 Comm: syz.1.3081 Not tainted syzkaller #0 [ 584.344711][T15942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 584.350091][ T5929] hid-generic 00A0:0006:0003.0001: unknown main item tag 0x0 [ 584.354759][T15942] Call Trace: [ 584.354794][T15942] [ 584.354804][T15942] dump_stack_lvl+0x16c/0x230 [ 584.372476][ T5929] hid-generic 00A0:0006:0003.0001: unknown main item tag 0x0 [ 584.373047][T15942] ? show_regs_print_info+0x20/0x20 [ 584.385619][T15942] ? load_image+0x3b0/0x3b0 [ 584.389842][ T5929] hid-generic 00A0:0006:0003.0001: unknown main item tag 0x0 [ 584.390125][T15942] ? __might_sleep+0xe0/0xe0 [ 584.397895][ T5833] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 584.402067][T15942] ? __lock_acquire+0x7c80/0x7c80 [ 584.414574][T15942] should_fail_ex+0x39d/0x4d0 [ 584.419282][T15942] should_failslab+0x9/0x20 [ 584.420183][ T5929] hid-generic 00A0:0006:0003.0001: unknown main item tag 0x0 [ 584.423791][T15942] slab_pre_alloc_hook+0x59/0x310 [ 584.423820][T15942] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 584.423844][T15942] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 584.423865][T15942] __kmem_cache_alloc_node+0x53/0x260 [ 584.423891][T15942] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 584.423913][T15942] __kmalloc+0xa4/0x240 [ 584.423936][T15942] tomoyo_realpath_from_path+0xe3/0x5d0 [ 584.441817][ T5929] hid-generic 00A0:0006:0003.0001: unknown main item tag 0x0 [ 584.441998][T15942] tomoyo_path_number_perm+0x1ea/0x590 [ 584.481220][T15942] ? tomoyo_path_number_perm+0x1ba/0x590 [ 584.486865][T15942] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 584.492329][T15942] ? ksys_write+0x1c1/0x250 [ 584.496857][T15942] ? __fget_files+0x28/0x4d0 [ 584.501461][T15942] security_file_ioctl+0x70/0xa0 [ 584.506401][T15942] __se_sys_ioctl+0x48/0x170 [ 584.510989][T15942] do_syscall_64+0x55/0xb0 [ 584.515401][T15942] ? clear_bhb_loop+0x40/0x90 [ 584.520074][T15942] ? clear_bhb_loop+0x40/0x90 [ 584.524746][T15942] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 584.530630][T15942] RIP: 0033:0x7f275ff8f749 [ 584.535039][T15942] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 584.554656][T15942] RSP: 002b:00007f2760e31038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 584.563069][T15942] RAX: ffffffffffffffda RBX: 00007f27601e5fa0 RCX: 00007f275ff8f749 [ 584.571048][T15942] RDX: 0000000000000000 RSI: 0000000000001274 RDI: 0000000000000003 [ 584.579019][T15942] RBP: 00007f2760e31090 R08: 0000000000000000 R09: 0000000000000000 [ 584.586988][T15942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 584.594953][T15942] R13: 00007f27601e6038 R14: 00007f27601e5fa0 R15: 00007ffe47e2a3c8 [ 584.602930][T15942] [ 584.607288][ T5929] hid-generic 00A0:0006:0003.0001: unknown main item tag 0x0 [ 584.658317][T15942] ERROR: Out of memory at tomoyo_realpath_from_path. [ 584.690200][ T5929] hid-generic 00A0:0006:0003.0001: hidraw0: HID v0.05 Device [syz1] on syz0 [ 584.716116][ T5833] usb 3-1: config 0 has an invalid interface number: 212 but max is 0 [ 584.740869][ T5833] usb 3-1: config 0 has no interface number 0 [ 584.766121][ T5833] usb 3-1: config 0 interface 212 has no altsetting 0 [ 584.794046][ T5833] usb 3-1: New USB device found, idVendor=1ae7, idProduct=0525, bcdDevice=ca.e6 [ 584.806865][ T5833] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.815219][ T5833] usb 3-1: Product: syz [ 584.819489][ T5833] usb 3-1: Manufacturer: syz [ 584.825128][ T5833] usb 3-1: SerialNumber: syz [ 584.836961][ T5833] usb 3-1: config 0 descriptor?? [ 584.849272][ T5833] HFC-S_USB: probe of 3-1:0.212 failed with error -5 [ 585.008895][T15924] loop4: detected capacity change from 0 to 32768 [ 585.027574][T15924] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop4 scanned by syz.4.3073 (15924) [ 585.060652][ T5833] usb 3-1: USB disconnect, device number 6 [ 585.119062][T15924] BTRFS info (device loop4): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 585.129524][T15924] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 585.159872][T15924] BTRFS info (device loop4): setting nodatacow, compression disabled [ 585.185089][T15924] BTRFS info (device loop4): turning on flush-on-commit [ 585.213611][T15924] BTRFS info (device loop4): using free space tree [ 585.364144][T15924] BTRFS info (device loop4): enabling ssd optimizations [ 585.371141][T15924] BTRFS info (device loop4): auto enabling async discard [ 585.516921][T15971] loop1: detected capacity change from 0 to 8192 [ 585.531741][T15971] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 585.544969][ T7526] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 585.554744][T15971] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 585.564344][T15971] REISERFS (device loop1): using ordered data mode [ 585.570961][T15971] reiserfs: using flush barriers [ 585.578953][T15971] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 585.596113][T15971] REISERFS (device loop1): checking transaction log (loop1) [ 585.654128][T14409] Bluetooth: hci0: command tx timeout [ 585.735098][ T7526] usb 4-1: Using ep0 maxpacket: 8 [ 585.736461][T15924] kvm: pic: non byte write [ 585.764223][ T7526] usb 4-1: config 0 has no interfaces? [ 585.769751][ T7526] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 585.781154][T15977] FAULT_INJECTION: forcing a failure. [ 585.781154][T15977] name failslab, interval 1, probability 0, space 0, times 0 [ 585.804035][ T7526] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.814144][T15977] CPU: 1 PID: 15977 Comm: syz.2.3086 Not tainted syzkaller #0 [ 585.821663][T15977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 585.829607][T15971] REISERFS (device loop1): Using tea hash to sort names [ 585.831716][T15977] Call Trace: [ 585.831727][T15977] [ 585.844317][T15971] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 585.844837][T15977] dump_stack_lvl+0x16c/0x230 [ 585.858560][T15977] ? show_regs_print_info+0x20/0x20 [ 585.863786][T15977] ? load_image+0x3b0/0x3b0 [ 585.868315][T15977] ? __might_sleep+0xe0/0xe0 [ 585.872928][T15977] ? __lock_acquire+0x7c80/0x7c80 [ 585.877965][T15977] ? verify_lock_unused+0x140/0x140 [ 585.883160][T15977] should_fail_ex+0x39d/0x4d0 [ 585.887832][T15977] should_failslab+0x9/0x20 [ 585.892325][T15977] slab_pre_alloc_hook+0x59/0x310 [ 585.897372][T15977] kmem_cache_alloc_node+0x60/0x330 [ 585.902560][T15977] ? __alloc_skb+0x108/0x2c0 [ 585.907145][T15977] __alloc_skb+0x108/0x2c0 [ 585.911557][T15977] alloc_skb_with_frags+0xca/0x7c0 [ 585.916669][T15977] ? print_unlock_imbalance_bug+0x160/0x160 [ 585.922554][T15977] sock_alloc_send_pskb+0x857/0x990 [ 585.927755][T15977] ? sock_kzfree_s+0x50/0x50 [ 585.932349][T15977] ? __local_bh_enable_ip+0x12e/0x1c0 [ 585.937716][T15977] ? _local_bh_enable+0xa0/0xa0 [ 585.942563][T15977] raw_sendmsg+0x2a0/0x820 [ 585.946983][T15977] ? raw_getsockopt+0x10/0x10 [ 585.951653][T15977] ? aa_sock_msg_perm+0x94/0x150 [ 585.956579][T15977] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 585.961856][T15977] ? security_socket_sendmsg+0x80/0xa0 [ 585.967306][T15977] __sys_sendto+0x46a/0x620 [ 585.971800][T15977] ? file_end_write+0x159/0x250 [ 585.976645][T15977] ? __ia32_sys_getpeername+0x90/0x90 [ 585.982017][T15977] ? __fget_files+0x44a/0x4d0 [ 585.986693][T15977] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 585.992665][T15977] ? lock_chain_count+0x20/0x20 [ 585.997510][T15977] __x64_sys_sendto+0xde/0xf0 [ 586.002180][T15977] do_syscall_64+0x55/0xb0 [ 586.006587][T15977] ? clear_bhb_loop+0x40/0x90 [ 586.011257][T15977] ? clear_bhb_loop+0x40/0x90 [ 586.015923][T15977] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 586.021801][T15977] RIP: 0033:0x7f1bfcf8f749 [ 586.026209][T15977] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 586.045812][T15977] RSP: 002b:00007f1bfdec9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 586.054215][T15977] RAX: ffffffffffffffda RBX: 00007f1bfd1e5fa0 RCX: 00007f1bfcf8f749 [ 586.062174][T15977] RDX: 0000000000000009 RSI: 0000200000000040 RDI: 0000000000000004 [ 586.070131][T15977] RBP: 00007f1bfdec9090 R08: 0000000000000000 R09: 0000000000000000 [ 586.078094][T15977] R10: 000000006000c804 R11: 0000000000000246 R12: 0000000000000001 [ 586.086054][T15977] R13: 00007f1bfd1e6038 R14: 00007f1bfd1e5fa0 R15: 00007ffc99931358 [ 586.094026][T15977] [ 586.099560][ T7526] usb 4-1: config 0 descriptor?? [ 586.211538][T15971] ALSA: mixer_oss: invalid index -2083389440 [ 586.605867][T15958] o2cb: This node has not been configured. [ 586.611721][T15958] o2cb: Cluster check failed. Fix errors before retrying. [ 586.618942][T15958] (syz.3.3082,15958,0):user_dlm_register:674 ERROR: status = -22 [ 586.626865][T15958] (syz.3.3082,15958,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1" [ 586.667198][ T7526] usb 4-1: USB disconnect, device number 9 [ 586.985305][T15980] loop2: detected capacity change from 0 to 32768 [ 587.069293][T15980] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 587.079575][T15980] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 587.139016][T15980] XFS (loop2): Ending clean mount [ 587.151342][T15980] XFS (loop2): Quotacheck needed: Please wait. [ 587.236726][T15980] XFS (loop2): Quotacheck: Done. [ 587.440444][T14512] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.523492][T14576] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 587.566045][T14512] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.624496][T15978] BTRFS info (device loop4): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 587.700437][T14512] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.862461][T14512] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.083073][T16000] FAULT_INJECTION: forcing a failure. [ 588.083073][T16000] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 588.142761][T16000] CPU: 0 PID: 16000 Comm: syz.2.3091 Not tainted syzkaller #0 [ 588.150263][T16000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 588.160331][T16000] Call Trace: [ 588.163625][T16000] [ 588.166569][T16000] dump_stack_lvl+0x16c/0x230 [ 588.171270][T16000] ? show_regs_print_info+0x20/0x20 [ 588.176492][T16000] ? load_image+0x3b0/0x3b0 [ 588.181015][T16000] ? __lock_acquire+0x7c80/0x7c80 [ 588.186094][T16000] should_fail_ex+0x39d/0x4d0 [ 588.190797][T16000] prepare_alloc_pages+0x1e2/0x5f0 [ 588.195935][T16000] __alloc_pages+0x127/0x460 [ 588.200557][T16000] ? zone_statistics+0x170/0x170 [ 588.205527][T16000] ? handle_mm_fault+0xd1/0x4920 [ 588.210501][T16000] __folio_alloc+0x10/0x20 [ 588.214942][T16000] vma_alloc_folio+0x47a/0x8f0 [ 588.219735][T16000] handle_mm_fault+0x1a38/0x4920 [ 588.224695][T16000] ? handle_mm_fault+0xd1/0x4920 [ 588.229668][T16000] ? lock_vma_under_rcu+0x526/0x650 [ 588.234891][T16000] ? numa_migrate_prep+0x350/0x350 [ 588.240054][T16000] ? do_user_addr_fault+0x1c3/0x12e0 [ 588.245362][T16000] do_user_addr_fault+0xad0/0x12e0 [ 588.250497][T16000] ? rcu_is_watching+0x15/0xb0 [ 588.255280][T16000] exc_page_fault+0x67/0x110 [ 588.259891][T16000] ? clear_bhb_loop+0x40/0x90 [ 588.264587][T16000] asm_exc_page_fault+0x26/0x30 [ 588.269456][T16000] RIP: 0033:0x7f1bfcf3cc5b [ 588.273915][T16000] Code: c0 8b 87 c0 00 00 00 66 0f 6c c0 85 c0 0f 85 44 01 00 00 c7 87 c0 00 00 00 ff ff ff ff 48 8d 84 24 20 21 00 00 48 8d 7c 24 20 <0f> 29 44 24 40 49 89 e4 48 89 44 24 50 8b 43 74 48 89 9c 24 00 01 [ 588.293625][T16000] RSP: 002b:00007f1bfdec6e10 EFLAGS: 00010246 [ 588.299712][T16000] RAX: 00007f1bfdec8f30 RBX: 00007f1bfd1ba640 RCX: 0000000000000000 [ 588.307707][T16000] RDX: 00007f1bfdec8f78 RSI: 00007f1bfcff0df8 RDI: 00007f1bfdec6e30 [ 588.316052][T16000] RBP: 0000000000000009 R08: 0000000000000000 R09: 0000000000000000 [ 588.324039][T16000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 588.332023][T16000] R13: 00007f1bfd1e6038 R14: 00007f1bfd1e5fa0 R15: 00007ffc99931358 [ 588.340030][T16000] [ 588.371995][T16000] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 588.428770][T14512] tipc: Left network mode [ 588.814924][T16014] netlink: 4168 bytes leftover after parsing attributes in process `syz.3.3098'. [ 588.942815][T16015] tipc: Started in network mode [ 588.950338][T16015] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 588.962570][T16020] loop2: detected capacity change from 0 to 2048 [ 588.976691][T16015] tipc: Enabled bearer , priority 10 [ 589.029612][T16020] loop2: p1 < > p4 [ 589.064598][T16020] loop2: p4 size 8388608 extends beyond EOD, truncated [ 589.105824][ T5790] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 589.118863][ T5790] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 589.130645][ T5790] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 589.158033][ T5790] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 589.171708][ T5790] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 589.179260][ T5790] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 589.214801][T16027] loop3: detected capacity change from 0 to 4096 [ 589.246821][T16027] ntfs: (device loop3): parse_options(): Unrecognized mount option dmaskr:$. [ 589.274537][T16027] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 589.298981][T16027] ntfs: (device loop3): parse_options(): The umask option requires an argument. [ 589.678704][T14731] udevd[14731]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 589.702263][T14052] udevd[14052]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 589.841756][T16027] loop3: detected capacity change from 0 to 32768 [ 589.863817][T16027] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.3101 (16027) [ 589.890115][T16039] FAULT_INJECTION: forcing a failure. [ 589.890115][T16039] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 589.919289][T16039] CPU: 0 PID: 16039 Comm: syz.1.3103 Not tainted syzkaller #0 [ 589.926794][T16039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 589.936875][T16039] Call Trace: [ 589.940168][T16039] [ 589.943112][T16039] dump_stack_lvl+0x16c/0x230 [ 589.947816][T16039] ? show_regs_print_info+0x20/0x20 [ 589.953036][T16039] ? load_image+0x3b0/0x3b0 [ 589.957560][T16039] ? __lock_acquire+0x7c80/0x7c80 [ 589.962609][T16039] should_fail_ex+0x39d/0x4d0 [ 589.967312][T16039] prepare_alloc_pages+0x1e2/0x5f0 [ 589.972458][T16039] __alloc_pages+0x127/0x460 [ 589.977074][T16039] ? zone_statistics+0x170/0x170 [ 589.982043][T16039] ? handle_mm_fault+0xd1/0x4920 [ 589.987006][T16039] __folio_alloc+0x10/0x20 [ 589.991445][T16039] vma_alloc_folio+0x47a/0x8f0 [ 589.996230][T16039] handle_mm_fault+0x1a38/0x4920 [ 590.001168][T16039] ? handle_mm_fault+0xd1/0x4920 [ 590.006115][T16039] ? lock_vma_under_rcu+0x526/0x650 [ 590.011310][T16039] ? numa_migrate_prep+0x350/0x350 [ 590.016429][T16039] ? do_user_addr_fault+0x1c3/0x12e0 [ 590.021709][T16039] do_user_addr_fault+0xad0/0x12e0 [ 590.026866][T16039] ? rcu_is_watching+0x15/0xb0 [ 590.031629][T16039] exc_page_fault+0x67/0x110 [ 590.036211][T16039] ? clear_bhb_loop+0x40/0x90 [ 590.040892][T16039] asm_exc_page_fault+0x26/0x30 [ 590.045733][T16039] RIP: 0033:0x7f275ff3cc5b [ 590.050138][T16039] Code: c0 8b 87 c0 00 00 00 66 0f 6c c0 85 c0 0f 85 44 01 00 00 c7 87 c0 00 00 00 ff ff ff ff 48 8d 84 24 20 21 00 00 48 8d 7c 24 20 <0f> 29 44 24 40 49 89 e4 48 89 44 24 50 8b 43 74 48 89 9c 24 00 01 [ 590.069733][T16039] RSP: 002b:00007f2760e2ee10 EFLAGS: 00010246 [ 590.075793][T16039] RAX: 00007f2760e30f30 RBX: 00007f27601ba640 RCX: 0000000000000000 [ 590.083754][T16039] RDX: 00007f2760e30f78 RSI: 00007f275fff0df8 RDI: 00007f2760e2ee30 [ 590.091713][T16039] RBP: 0000000000000009 R08: 0000000000000000 R09: 0000000000000000 [ 590.099672][T16039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 590.107631][T16039] R13: 00007f27601e6038 R14: 00007f27601e5fa0 R15: 00007ffe47e2a3c8 [ 590.115605][T16039] [ 590.132986][T16039] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 590.147156][T16027] BTRFS error (device loop3): open_ctree failed: -4 [ 590.312717][ T5929] tipc: Node number set to 10005162 [ 590.356511][T14512] hsr_slave_0: left promiscuous mode [ 590.369297][T14512] hsr_slave_1: left promiscuous mode [ 590.383585][T14512] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 590.404968][T14512] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 590.419349][T14512] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 590.435080][T14512] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 590.464744][T14512] bridge_slave_1: left allmulticast mode [ 590.500051][T14512] bridge_slave_1: left promiscuous mode [ 590.520062][T14512] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.586630][T14512] bridge_slave_0: left allmulticast mode [ 590.592318][T14512] bridge_slave_0: left promiscuous mode [ 590.625270][T14512] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.688431][T14512] veth1_macvtap: left promiscuous mode [ 590.710080][T14512] veth0_macvtap: left promiscuous mode [ 590.718106][T14512] veth1_vlan: left promiscuous mode [ 590.723552][T14512] veth0_vlan: left promiscuous mode [ 591.196836][T16056] mmap: syz.1.3107 (16056) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 591.294164][T14409] Bluetooth: hci0: command tx timeout [ 591.743563][T14512] team0 (unregistering): Port device team_slave_1 removed [ 591.796379][T14512] team0 (unregistering): Port device team_slave_0 removed [ 591.846211][T14512] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 591.898398][T14512] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 592.457262][T14512] bond0 (unregistering): Released all slaves [ 592.790604][T16025] chnl_net:caif_netlink_parms(): no params data found [ 592.805462][T16068] capability: warning: `syz.1.3111' uses 32-bit capabilities (legacy support in use) [ 593.030495][T16078] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3112'. [ 593.107561][T16025] bridge0: port 1(bridge_slave_0) entered blocking state [ 593.113455][T16080] FAULT_INJECTION: forcing a failure. [ 593.113455][T16080] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 593.127988][T16080] CPU: 1 PID: 16080 Comm: syz.3.3113 Not tainted syzkaller #0 [ 593.135470][T16080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 593.145541][T16080] Call Trace: [ 593.148842][T16080] [ 593.151786][T16080] dump_stack_lvl+0x16c/0x230 [ 593.152315][T16025] bridge0: port 1(bridge_slave_0) entered disabled state [ 593.156492][T16080] ? show_regs_print_info+0x20/0x20 [ 593.156519][T16080] ? load_image+0x3b0/0x3b0 [ 593.156538][T16080] ? __might_fault+0xaa/0x120 [ 593.156555][T16080] ? __lock_acquire+0x7c80/0x7c80 [ 593.171318][T16025] bridge_slave_0: entered allmulticast mode [ 593.173233][T16080] should_fail_ex+0x39d/0x4d0 [ 593.193442][T16025] bridge_slave_0: entered promiscuous mode [ 593.193469][T16080] _copy_from_user+0x2f/0xe0 [ 593.203863][T16080] ___sys_sendmsg+0x159/0x290 [ 593.208573][T16080] ? __sys_sendmsg+0x270/0x270 [ 593.213370][T16080] ? __lock_acquire+0x7c80/0x7c80 [ 593.218412][T16080] __se_sys_sendmsg+0x1a5/0x270 [ 593.223264][T16080] ? __x64_sys_sendmsg+0x80/0x80 [ 593.228206][T16080] ? lockdep_hardirqs_on+0x98/0x150 [ 593.233399][T16080] do_syscall_64+0x55/0xb0 [ 593.237810][T16080] ? clear_bhb_loop+0x40/0x90 [ 593.242482][T16080] ? clear_bhb_loop+0x40/0x90 [ 593.247165][T16080] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 593.253098][T16080] RIP: 0033:0x7fb524f8f749 [ 593.257518][T16080] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 593.277138][T16080] RSP: 002b:00007fb525d8a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 593.285556][T16080] RAX: ffffffffffffffda RBX: 00007fb5251e5fa0 RCX: 00007fb524f8f749 [ 593.293519][T16080] RDX: 0000000004044080 RSI: 0000200000000640 RDI: 0000000000000003 [ 593.301485][T16080] RBP: 00007fb525d8a090 R08: 0000000000000000 R09: 0000000000000000 [ 593.309453][T16080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 593.317439][T16080] R13: 00007fb5251e6038 R14: 00007fb5251e5fa0 R15: 00007ffe95e198a8 [ 593.325430][T16080] [ 593.330490][T16025] bridge0: port 2(bridge_slave_1) entered blocking state [ 593.338959][T16025] bridge0: port 2(bridge_slave_1) entered disabled state [ 593.343152][T14409] Bluetooth: hci0: command tx timeout [ 593.346401][T16025] bridge_slave_1: entered allmulticast mode [ 593.372575][T16025] bridge_slave_1: entered promiscuous mode [ 593.510433][T16025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 593.567283][T16025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 593.650294][T16025] team0: Port device team_slave_0 added [ 593.670963][T16025] team0: Port device team_slave_1 added [ 593.752382][T16025] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 593.782501][T16025] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 593.811101][T16025] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 593.825542][T16025] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 593.832817][T16025] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 593.859489][T16025] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 593.945457][T16025] hsr_slave_0: entered promiscuous mode [ 593.952414][T16025] hsr_slave_1: entered promiscuous mode [ 593.961287][T16025] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 593.969029][T16025] Cannot create hsr debugfs directory [ 594.344690][T16110] FAULT_INJECTION: forcing a failure. [ 594.344690][T16110] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 594.358363][T16110] CPU: 1 PID: 16110 Comm: syz.3.3121 Not tainted syzkaller #0 [ 594.365847][T16110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 594.375899][T16110] Call Trace: [ 594.379170][T16110] [ 594.382094][T16110] dump_stack_lvl+0x16c/0x230 [ 594.386779][T16110] ? show_regs_print_info+0x20/0x20 [ 594.391975][T16110] ? load_image+0x3b0/0x3b0 [ 594.396475][T16110] ? __lock_acquire+0x7c80/0x7c80 [ 594.401510][T16110] ? snprintf+0xdb/0x120 [ 594.405780][T16110] should_fail_ex+0x39d/0x4d0 [ 594.410471][T16110] _copy_to_user+0x2f/0xa0 [ 594.414889][T16110] simple_read_from_buffer+0xe7/0x150 [ 594.420276][T16110] proc_fail_nth_read+0x1e3/0x250 [ 594.425307][T16110] ? proc_fault_inject_write+0x340/0x340 [ 594.430944][T16110] ? fsnotify_perm+0x271/0x5e0 [ 594.435708][T16110] ? proc_fault_inject_write+0x340/0x340 [ 594.441338][T16110] vfs_read+0x27e/0x920 [ 594.445493][T16110] ? kernel_read+0x1e0/0x1e0 [ 594.450081][T16110] ? __fget_files+0x28/0x4d0 [ 594.454665][T16110] ? __fget_files+0x44a/0x4d0 [ 594.459340][T16110] ? __fdget_pos+0x2a3/0x330 [ 594.463946][T16110] ? ksys_read+0x75/0x250 [ 594.468296][T16110] ksys_read+0x147/0x250 [ 594.472547][T16110] ? vfs_write+0x940/0x940 [ 594.476969][T16110] ? lockdep_hardirqs_on+0x98/0x150 [ 594.482171][T16110] do_syscall_64+0x55/0xb0 [ 594.486589][T16110] ? clear_bhb_loop+0x40/0x90 [ 594.491263][T16110] ? clear_bhb_loop+0x40/0x90 [ 594.495938][T16110] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 594.501829][T16110] RIP: 0033:0x7fb524f8e15c [ 594.506235][T16110] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 594.525837][T16110] RSP: 002b:00007fb525d8a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 594.534348][T16110] RAX: ffffffffffffffda RBX: 00007fb5251e5fa0 RCX: 00007fb524f8e15c [ 594.542308][T16110] RDX: 000000000000000f RSI: 00007fb525d8a0a0 RDI: 0000000000000003 [ 594.550269][T16110] RBP: 00007fb525d8a090 R08: 0000000000000000 R09: 0000000000000000 [ 594.558232][T16110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 594.566194][T16110] R13: 00007fb5251e6038 R14: 00007fb5251e5fa0 R15: 00007ffe95e198a8 [ 594.574169][T16110] [ 594.936856][T16025] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 594.947767][T16025] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 594.950089][T16120] FAULT_INJECTION: forcing a failure. [ 594.950089][T16120] name failslab, interval 1, probability 0, space 0, times 0 [ 594.968059][T16120] CPU: 0 PID: 16120 Comm: syz.1.3124 Not tainted syzkaller #0 [ 594.975539][T16120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 594.985606][T16120] Call Trace: [ 594.988889][T16120] [ 594.991809][T16120] dump_stack_lvl+0x16c/0x230 [ 594.996486][T16120] ? show_regs_print_info+0x20/0x20 [ 595.001677][T16120] ? load_image+0x3b0/0x3b0 [ 595.006182][T16120] ? __might_sleep+0xe0/0xe0 [ 595.010776][T16120] ? __lock_acquire+0x7c80/0x7c80 [ 595.015793][T16120] should_fail_ex+0x39d/0x4d0 [ 595.020463][T16120] should_failslab+0x9/0x20 [ 595.024966][T16120] slab_pre_alloc_hook+0x59/0x310 [ 595.029998][T16120] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 595.035709][T16120] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 595.041423][T16120] __kmem_cache_alloc_node+0x53/0x260 [ 595.046804][T16120] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 595.052531][T16120] __kmalloc+0xa4/0x240 [ 595.056685][T16120] tomoyo_realpath_from_path+0xe3/0x5d0 [ 595.062229][T16120] tomoyo_path_number_perm+0x1ea/0x590 [ 595.067685][T16120] ? tomoyo_path_number_perm+0x1ba/0x590 [ 595.073318][T16120] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 595.078775][T16120] ? ksys_write+0x1c1/0x250 [ 595.083283][T16120] ? __fget_files+0x28/0x4d0 [ 595.087880][T16120] security_file_ioctl+0x70/0xa0 [ 595.092812][T16120] __se_sys_ioctl+0x48/0x170 [ 595.097394][T16120] do_syscall_64+0x55/0xb0 [ 595.101810][T16120] ? clear_bhb_loop+0x40/0x90 [ 595.106486][T16120] ? clear_bhb_loop+0x40/0x90 [ 595.111168][T16120] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 595.117062][T16120] RIP: 0033:0x7f275ff8f749 [ 595.121474][T16120] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 595.141167][T16120] RSP: 002b:00007f2760e31038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 595.149575][T16120] RAX: ffffffffffffffda RBX: 00007f27601e5fa0 RCX: 00007f275ff8f749 [ 595.157537][T16120] RDX: 0000200000000000 RSI: 0000000000004b52 RDI: 0000000000000003 [ 595.165514][T16120] RBP: 00007f2760e31090 R08: 0000000000000000 R09: 0000000000000000 [ 595.173486][T16120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 595.181446][T16120] R13: 00007f27601e6038 R14: 00007f27601e5fa0 R15: 00007ffe47e2a3c8 [ 595.189423][T16120] [ 595.194446][ T5833] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 595.203871][T16120] ERROR: Out of memory at tomoyo_realpath_from_path. [ 595.217514][T16025] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 595.229223][T16025] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 595.357029][T16025] 8021q: adding VLAN 0 to HW filter on device bond0 [ 595.387822][T16025] 8021q: adding VLAN 0 to HW filter on device team0 [ 595.393968][ T5833] usb 4-1: Using ep0 maxpacket: 8 [ 595.401527][ T5833] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 595.414041][ T5790] Bluetooth: hci0: command tx timeout [ 595.438734][ T2112] bridge0: port 1(bridge_slave_0) entered blocking state [ 595.445972][ T2112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 595.464872][ T5833] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 595.476933][ T5833] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 595.500947][ T1086] bridge0: port 2(bridge_slave_1) entered blocking state [ 595.508151][ T1086] bridge0: port 2(bridge_slave_1) entered forwarding state [ 595.522177][ T5833] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 595.543045][ T5833] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 595.579102][ T5833] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 595.599926][ T5833] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.616361][ T5833] usb 4-1: config 0 descriptor?? [ 595.814692][ T5790] Bluetooth: hci4: command 0x0406 tx timeout [ 597.634665][T16134] sched: RT throttling activated [ 597.663505][ T5790] Bluetooth: hci0: command tx timeout [ 599.002694][ T5833] usb 4-1: USB disconnect, device number 10 [ 599.245499][T16025] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 599.453064][T16025] veth0_vlan: entered promiscuous mode [ 599.471881][T16025] veth1_vlan: entered promiscuous mode [ 599.508006][T16025] veth0_macvtap: entered promiscuous mode [ 599.523691][T16025] veth1_macvtap: entered promiscuous mode [ 599.550083][T16025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 599.560867][T16025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 599.571817][T16025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 599.582970][T16025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 599.611636][T16025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 599.622483][T16025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 599.635351][T16025] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 599.658747][T16025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 599.672532][T16025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 599.683000][T16025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 599.698087][T16025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 599.708472][T16025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 599.720471][T16025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 599.732241][T16025] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 599.767723][T16025] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.777242][T16025] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.786773][T16025] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.795806][T16025] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.958703][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 599.973791][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 600.068579][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 600.107424][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 600.780796][T16175] loop2: detected capacity change from 0 to 4096 [ 600.791289][T16175] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 600.830110][T16178] FAULT_INJECTION: forcing a failure. [ 600.830110][T16178] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 600.844378][T16178] CPU: 0 PID: 16178 Comm: syz.6.3137 Not tainted syzkaller #0 [ 600.851865][T16178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 600.862024][T16178] Call Trace: [ 600.865323][T16178] [ 600.868259][T16178] dump_stack_lvl+0x16c/0x230 [ 600.872969][T16178] ? show_regs_print_info+0x20/0x20 [ 600.878196][T16178] ? load_image+0x3b0/0x3b0 [ 600.882722][T16178] ? __might_fault+0xaa/0x120 [ 600.887416][T16178] ? __lock_acquire+0x7c80/0x7c80 [ 600.892461][T16178] should_fail_ex+0x39d/0x4d0 [ 600.897165][T16178] _copy_from_user+0x2f/0xe0 [ 600.901773][T16178] ___sys_sendmsg+0x159/0x290 [ 600.906469][T16178] ? __sys_sendmsg+0x270/0x270 [ 600.911299][T16178] ? __lock_acquire+0x7c80/0x7c80 [ 600.916363][T16178] __se_sys_sendmsg+0x1a5/0x270 [ 600.921230][T16178] ? __x64_sys_sendmsg+0x80/0x80 [ 600.926179][T16178] ? lockdep_hardirqs_on+0x98/0x150 [ 600.931368][T16178] do_syscall_64+0x55/0xb0 [ 600.935778][T16178] ? clear_bhb_loop+0x40/0x90 [ 600.940446][T16178] ? clear_bhb_loop+0x40/0x90 [ 600.945113][T16178] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 600.950993][T16178] RIP: 0033:0x7f749838f749 [ 600.955397][T16178] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 600.974996][T16178] RSP: 002b:00007f7499177038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 600.983401][T16178] RAX: ffffffffffffffda RBX: 00007f74985e5fa0 RCX: 00007f749838f749 [ 600.991364][T16178] RDX: 0000000000000000 RSI: 0000200000000980 RDI: 0000000000000003 [ 600.999327][T16178] RBP: 00007f7499177090 R08: 0000000000000000 R09: 0000000000000000 [ 601.007289][T16178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 601.015264][T16178] R13: 00007f74985e6038 R14: 00007f74985e5fa0 R15: 00007fff8d0e9548 [ 601.023254][T16178] [ 601.271403][T16184] netlink: 2 bytes leftover after parsing attributes in process `syz.6.3139'. [ 601.518008][T16191] input: syz0 as /devices/virtual/input/input6 [ 601.622369][T16195] input: syz0 as /devices/virtual/input/input7 [ 601.647157][T16195] FAULT_INJECTION: forcing a failure. [ 601.647157][T16195] name failslab, interval 1, probability 0, space 0, times 0 [ 601.668826][T16195] CPU: 0 PID: 16195 Comm: syz.3.3143 Not tainted syzkaller #0 [ 601.676321][T16195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 601.686388][T16195] Call Trace: [ 601.689678][T16195] [ 601.692620][T16195] dump_stack_lvl+0x16c/0x230 [ 601.697327][T16195] ? show_regs_print_info+0x20/0x20 [ 601.702548][T16195] ? load_image+0x3b0/0x3b0 [ 601.707066][T16195] ? __lock_acquire+0x7c80/0x7c80 [ 601.712108][T16195] should_fail_ex+0x39d/0x4d0 [ 601.716802][T16195] should_failslab+0x9/0x20 [ 601.721322][T16195] slab_pre_alloc_hook+0x59/0x310 [ 601.726340][T16195] ? string+0x26d/0x2b0 [ 601.730487][T16195] ? kasprintf+0xd5/0x120 [ 601.734807][T16195] ? kasprintf+0xd5/0x120 [ 601.739122][T16195] __kmem_cache_alloc_node+0x53/0x260 [ 601.744491][T16195] ? kasprintf+0xd5/0x120 [ 601.748806][T16195] __kmalloc_node_track_caller+0xa2/0x230 [ 601.754521][T16195] kvasprintf+0xdd/0x190 [ 601.758751][T16195] ? bust_spinlocks+0xd0/0xd0 [ 601.763433][T16195] kasprintf+0xd5/0x120 [ 601.767575][T16195] ? mark_lock+0x94/0x320 [ 601.771904][T16195] ? kvasprintf_const+0x240/0x240 [ 601.776917][T16195] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 601.782885][T16195] ? lock_chain_count+0x20/0x20 [ 601.787726][T16195] ? input_dev_release_keys+0x170/0x170 [ 601.793266][T16195] device_get_devnode+0x15e/0x290 [ 601.798292][T16195] devtmpfs_delete_node+0xcc/0x1d0 [ 601.803402][T16195] ? devtmpfs_create_node+0x240/0x240 [ 601.808784][T16195] ? _raw_spin_unlock+0x28/0x40 [ 601.813626][T16195] ? klist_del+0xcc/0x110 [ 601.817943][T16195] ? klist_children_get+0x50/0x50 [ 601.822963][T16195] device_del+0x2cf/0x900 [ 601.827297][T16195] ? __input_unregister_device+0x2ee/0x5f0 [ 601.833098][T16195] ? kill_device+0x160/0x160 [ 601.837682][T16195] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 601.843654][T16195] ? lock_chain_count+0x20/0x20 [ 601.848500][T16195] cdev_device_del+0x27/0xf0 [ 601.853081][T16195] evdev_disconnect+0x4c/0xb0 [ 601.857750][T16195] __input_unregister_device+0x366/0x5f0 [ 601.863416][T16195] input_unregister_device+0x9b/0xf0 [ 601.868696][T16195] uinput_destroy_device+0x6c1/0x8c0 [ 601.873975][T16195] ? uinput_open+0x150/0x150 [ 601.878555][T16195] uinput_release+0x3e/0x50 [ 601.883046][T16195] __fput+0x234/0x970 [ 601.887029][T16195] task_work_run+0x1ce/0x250 [ 601.891620][T16195] ? task_work_cancel+0x240/0x240 [ 601.896646][T16195] ? filp_close+0x10f/0x150 [ 601.901143][T16195] ? exit_to_user_mode_loop+0x3b/0x110 [ 601.906596][T16195] exit_to_user_mode_loop+0xe6/0x110 [ 601.911967][T16195] exit_to_user_mode_prepare+0xf6/0x180 [ 601.917505][T16195] syscall_exit_to_user_mode+0x1a/0x50 [ 601.922976][T16195] do_syscall_64+0x61/0xb0 [ 601.927385][T16195] ? clear_bhb_loop+0x40/0x90 [ 601.932053][T16195] ? clear_bhb_loop+0x40/0x90 [ 601.936722][T16195] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 601.942605][T16195] RIP: 0033:0x7fb524f8f749 [ 601.947011][T16195] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 601.966607][T16195] RSP: 002b:00007fb525d8a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000124 [ 601.975011][T16195] RAX: 0000000000000003 RBX: 00007fb5251e5fa0 RCX: 00007fb524f8f749 [ 601.982990][T16195] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 601.990971][T16195] RBP: 00007fb525d8a090 R08: 0000000000000000 R09: 0000000000000000 [ 601.998947][T16195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 602.006913][T16195] R13: 00007fb5251e6038 R14: 00007fb5251e5fa0 R15: 00007ffe95e198a8 [ 602.014891][T16195] [ 602.285593][T16203] input: syz0 as /devices/virtual/input/input8 [ 602.387859][T16203] loop1: detected capacity change from 0 to 2048 [ 602.430422][T16203] UDF-fs: bad mount option "fileset=00000000000000000095" or missing value [ 602.452233][T16206] netlink: 'syz.6.3148': attribute type 1 has an invalid length. [ 603.770849][T16197] loop2: detected capacity change from 0 to 32768 [ 603.860923][T16197] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 603.874237][T16197] gfs2: fsid=syz:syz: unknown hostdata (gfs2) [ 603.920386][T16208] loop1: detected capacity change from 0 to 32768 [ 604.029403][T16208] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 604.268885][T16208] XFS (loop1): Ending clean mount [ 604.284206][ T5833] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 604.361748][T16208] XFS (loop1): Quotacheck needed: Please wait. [ 604.450011][T16208] XFS (loop1): Quotacheck: Done. [ 604.474104][ T5833] usb 3-1: Using ep0 maxpacket: 16 [ 604.481250][ T5833] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 604.500490][ T5833] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 604.514187][ T5833] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 604.526135][ T5833] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 604.545686][ T5833] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.555973][ T5833] usb 3-1: Product: syz [ 604.560174][ T5833] usb 3-1: Manufacturer: syz [ 604.570445][ T5833] usb 3-1: SerialNumber: syz [ 604.728247][T16232] loop3: detected capacity change from 0 to 32768 [ 604.767856][T16232] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop3 scanned by syz.3.3154 (16232) [ 604.795495][T16232] BTRFS info (device loop3): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 604.806442][T16232] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 604.815817][T16232] BTRFS info (device loop3): setting nodatacow, compression disabled [ 604.830538][T16232] BTRFS info (device loop3): turning on flush-on-commit [ 604.846903][T16232] BTRFS info (device loop3): using free space tree [ 604.846974][T16236] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3150'. [ 604.929471][T16232] BTRFS info (device loop3): enabling ssd optimizations [ 604.945642][T16232] BTRFS info (device loop3): auto enabling async discard [ 604.990923][ T5833] usb 3-1: 0:2 : does not exist [ 605.155176][T14408] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 605.254750][ T5833] usb 3-1: USB disconnect, device number 7 [ 605.345418][T14052] udevd[14052]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 605.556899][T13906] BTRFS info (device loop3): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 606.054065][T14409] Bluetooth: hci1: command 0x0406 tx timeout [ 606.258972][T16276] FAULT_INJECTION: forcing a failure. [ 606.258972][T16276] name failslab, interval 1, probability 0, space 0, times 0 [ 606.272490][T16276] CPU: 0 PID: 16276 Comm: syz.6.3162 Not tainted syzkaller #0 [ 606.279971][T16276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 606.290032][T16276] Call Trace: [ 606.293309][T16276] [ 606.296234][T16276] dump_stack_lvl+0x16c/0x230 [ 606.300911][T16276] ? show_regs_print_info+0x20/0x20 [ 606.306114][T16276] ? load_image+0x3b0/0x3b0 [ 606.310620][T16276] ? __lock_acquire+0x7c80/0x7c80 [ 606.315643][T16276] should_fail_ex+0x39d/0x4d0 [ 606.320317][T16276] should_failslab+0x9/0x20 [ 606.324814][T16276] slab_pre_alloc_hook+0x59/0x310 [ 606.329833][T16276] ? mas_next_slot+0x915/0x980 [ 606.334592][T16276] kmem_cache_alloc+0x5a/0x2e0 [ 606.339346][T16276] ? vm_area_alloc+0x24/0x1d0 [ 606.344021][T16276] vm_area_alloc+0x24/0x1d0 [ 606.348518][T16276] mmap_region+0xc8a/0x2020 [ 606.353021][T16276] ? arch_get_unmapped_area+0x7e0/0x7e0 [ 606.358566][T16276] ? file_mmap_ok+0x170/0x170 [ 606.363323][T16276] ? arch_get_unmapped_area+0x7e0/0x7e0 [ 606.368860][T16276] ? cap_mmap_addr+0x169/0x2d0 [ 606.373612][T16276] ? shmem_get_unmapped_area+0x2e0/0x720 [ 606.379242][T16276] ? file_mmap_ok+0x11c/0x170 [ 606.383918][T16276] do_mmap+0x92f/0x10a0 [ 606.388072][T16276] ? mlock_future_ok+0xf0/0xf0 [ 606.392836][T16276] __se_sys_remap_file_pages+0x782/0x840 [ 606.398470][T16276] ? __x64_sys_remap_file_pages+0xc0/0xc0 [ 606.404196][T16276] ? lock_chain_count+0x20/0x20 [ 606.409056][T16276] ? lockdep_hardirqs_on+0x98/0x150 [ 606.414244][T16276] ? __x64_sys_remap_file_pages+0x20/0xc0 [ 606.419955][T16276] do_syscall_64+0x55/0xb0 [ 606.424366][T16276] ? clear_bhb_loop+0x40/0x90 [ 606.429036][T16276] ? clear_bhb_loop+0x40/0x90 [ 606.433725][T16276] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 606.439624][T16276] RIP: 0033:0x7f749838f749 [ 606.444045][T16276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 606.463649][T16276] RSP: 002b:00007f7499177038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 606.472076][T16276] RAX: ffffffffffffffda RBX: 00007f74985e5fa0 RCX: 00007f749838f749 [ 606.480050][T16276] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000200000ffc000 [ 606.488021][T16276] RBP: 00007f7499177090 R08: 0000000000000000 R09: 0000000000000000 [ 606.495987][T16276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 606.503950][T16276] R13: 00007f74985e6038 R14: 00007f74985e5fa0 R15: 00007fff8d0e9548 [ 606.511928][T16276] [ 606.694186][ T7521] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 606.891276][ T7521] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 606.894450][T16288] binder: 16287:16288 ioctl c018620c 200000000240 returned -22 [ 606.925144][ T7521] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 606.960212][ T7521] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 606.992201][ T7521] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 607.005907][ T7521] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.018167][ T7521] usb 3-1: Product: syz [ 607.026687][ T7521] usb 3-1: Manufacturer: syz [ 607.031308][ T7521] usb 3-1: SerialNumber: syz [ 607.044611][ T7521] cdc_mbim 3-1:1.0: skipping garbage [ 607.050409][ T7521] cdc_mbim 3-1:1.0: CDC Union missing and no IAD found [ 607.062682][ T7521] cdc_mbim 3-1:1.0: bind() failure [ 607.077903][T16290] loop3: detected capacity change from 0 to 4096 [ 607.104144][T16290] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 607.132241][T16292] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3167'. [ 607.484508][T16296] FAULT_INJECTION: forcing a failure. [ 607.484508][T16296] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 607.498908][T16296] CPU: 1 PID: 16296 Comm: syz.3.3169 Not tainted syzkaller #0 [ 607.506401][T16296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 607.516472][T16296] Call Trace: [ 607.519772][T16296] [ 607.522717][T16296] dump_stack_lvl+0x16c/0x230 [ 607.527421][T16296] ? show_regs_print_info+0x20/0x20 [ 607.532731][T16296] ? load_image+0x3b0/0x3b0 [ 607.537263][T16296] ? __might_fault+0xaa/0x120 [ 607.541960][T16296] ? __lock_acquire+0x7c80/0x7c80 [ 607.547021][T16296] should_fail_ex+0x39d/0x4d0 [ 607.551726][T16296] _copy_from_user+0x2f/0xe0 [ 607.556334][T16296] ___sys_sendmsg+0x159/0x290 [ 607.561017][T16296] ? __sys_sendmsg+0x270/0x270 [ 607.565791][T16296] ? __lock_acquire+0x7c80/0x7c80 [ 607.570842][T16296] __se_sys_sendmsg+0x1a5/0x270 [ 607.575696][T16296] ? __x64_sys_sendmsg+0x80/0x80 [ 607.580640][T16296] ? lockdep_hardirqs_on+0x98/0x150 [ 607.585833][T16296] do_syscall_64+0x55/0xb0 [ 607.590245][T16296] ? clear_bhb_loop+0x40/0x90 [ 607.594910][T16296] ? clear_bhb_loop+0x40/0x90 [ 607.599577][T16296] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 607.605460][T16296] RIP: 0033:0x7fb524f8f749 [ 607.609870][T16296] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 607.629466][T16296] RSP: 002b:00007fb525d8a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 607.637886][T16296] RAX: ffffffffffffffda RBX: 00007fb5251e5fa0 RCX: 00007fb524f8f749 [ 607.645857][T16296] RDX: 00000000000040c0 RSI: 00002000000003c0 RDI: 0000000000000003 [ 607.653827][T16296] RBP: 00007fb525d8a090 R08: 0000000000000000 R09: 0000000000000000 [ 607.661796][T16296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 607.669764][T16296] R13: 00007fb5251e6038 R14: 00007fb5251e5fa0 R15: 00007ffe95e198a8 [ 607.677745][T16296] [ 607.844256][T16301] netlink: 'syz.2.3161': attribute type 3 has an invalid length. [ 608.751487][T16310] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3172'. [ 608.787844][T16314] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3171'. [ 609.274177][T15035] usb 3-1: USB disconnect, device number 8 [ 610.248859][T16325] loop2: detected capacity change from 0 to 4096 [ 610.334240][T16325] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 610.465074][T16325] bridge: RTM_DELNEIGH with unconfigured vlan 3 on bridge_slave_1 [ 610.711009][T16345] loop2: detected capacity change from 0 to 16 [ 610.719122][T16345] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 610.753572][T16344] loop6: detected capacity change from 0 to 256 [ 610.894100][T16344] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 612.504082][ T7521] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 612.684544][ T7521] usb 4-1: Using ep0 maxpacket: 16 [ 612.703857][ T7521] usb 4-1: too many configurations: 60, using maximum allowed: 8 [ 612.742116][ T7521] usb 4-1: New USB device found, idVendor=0471, idProduct=032c, bcdDevice=ba.e9 [ 612.764246][ T7521] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=204 [ 612.776548][ T7521] usb 4-1: Product: syz [ 612.780745][ T7521] usb 4-1: Manufacturer: syz [ 612.797897][ T7521] usb 4-1: SerialNumber: syz [ 612.966230][ T7521] usb 4-1: config 0 descriptor?? [ 612.986463][ T7521] pwc: Philips SPC 880NC USB webcam detected. [ 613.001849][T16383] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3191'. [ 613.082969][T16387] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 613.093426][T16387] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 613.190531][ T7521] pwc: Warning: more than 1 configuration available. [ 613.205160][ T7521] pwc: Failed to set LED on/off time (-71) [ 613.211980][ T7521] pwc: send_video_command error -71 [ 613.218050][ T7521] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 613.227454][ T7521] Philips webcam: probe of 4-1:0.0 failed with error -71 [ 613.237495][ T7521] usb 4-1: USB disconnect, device number 11 [ 614.178888][T16394] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 614.194401][T16394] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 614.233749][T16394] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 614.241284][T16394] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 614.252255][T16394] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 614.258966][T16394] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 614.266309][T16394] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 614.272277][T16394] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 614.281366][T16394] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 614.478314][T16410] binder: 16408:16410 ioctl c0389423 2000000003c0 returned -22 [ 614.548358][T16410] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 614.561563][T16414] netlink: 160 bytes leftover after parsing attributes in process `syz.3.3201'. [ 614.570809][T16414] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 614.636237][ T5789] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 614.648215][T16416] syzkaller0: entered promiscuous mode [ 614.653806][T16416] syzkaller0: entered allmulticast mode [ 614.824517][ T5789] usb 7-1: Using ep0 maxpacket: 32 [ 614.836246][ T5789] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 614.847639][ T5789] usb 7-1: config 0 has no interface number 0 [ 614.876263][ T5789] usb 7-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 614.895615][ T5789] usb 7-1: config 0 interface 1 has no altsetting 0 [ 614.906265][ T5789] usb 7-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 614.917766][ T5789] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.925970][ T5789] usb 7-1: Product: syz [ 614.930326][ T5789] usb 7-1: Manufacturer: syz [ 614.935217][ T5789] usb 7-1: SerialNumber: syz [ 614.945544][ T5789] usb 7-1: config 0 descriptor?? [ 615.155283][T16424] loop2: detected capacity change from 0 to 256 [ 615.175155][ T5789] cx231xx 7-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 615.201218][ T5789] cx231xx 7-1:0.1: Failed to read PCB config [ 615.208418][ T5789] cx231xx: probe of 7-1:0.1 failed with error -71 [ 615.230144][ T5789] usb 7-1: USB disconnect, device number 2 [ 615.299741][T16424] FAT-fs (loop2): Directory bread(block 64) failed [ 615.316522][T16424] FAT-fs (loop2): Directory bread(block 65) failed [ 615.326121][T16424] FAT-fs (loop2): Directory bread(block 66) failed [ 615.332831][T16424] FAT-fs (loop2): Directory bread(block 67) failed [ 615.341914][T16424] FAT-fs (loop2): Directory bread(block 68) failed [ 615.348820][T16424] FAT-fs (loop2): Directory bread(block 69) failed [ 615.358876][T16424] FAT-fs (loop2): Directory bread(block 70) failed [ 615.366689][T16424] FAT-fs (loop2): Directory bread(block 71) failed [ 615.373568][T16424] FAT-fs (loop2): Directory bread(block 72) failed [ 615.385102][T16424] FAT-fs (loop2): Directory bread(block 73) failed [ 615.497282][ T5790] Bluetooth: hci3: command 0x0406 tx timeout [ 615.764985][ T5789] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 616.044274][ T5789] usb 7-1: Using ep0 maxpacket: 32 [ 616.088837][ T5789] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 616.171157][ T5789] usb 7-1: config 0 has no interface number 0 [ 616.182306][ T5789] usb 7-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 616.244987][ T5789] usb 7-1: config 0 interface 1 has no altsetting 0 [ 616.294174][ T5789] usb 7-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 616.294497][T14409] Bluetooth: hci0: command 0x0c1a tx timeout [ 616.309359][ T5790] Bluetooth: hci1: command 0x0406 tx timeout [ 616.310602][ T5789] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.315556][ T5782] Bluetooth: hci4: command 0x0406 tx timeout [ 616.334255][ T5789] usb 7-1: Product: syz [ 616.339177][ T5789] usb 7-1: Manufacturer: syz [ 616.344407][ T5789] usb 7-1: SerialNumber: syz [ 616.351338][ T5789] usb 7-1: config 0 descriptor?? [ 616.581419][T16401] loop6: detected capacity change from 0 to 512 [ 616.642190][T16401] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 616.660877][T16401] ext4 filesystem being mounted at /24/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 616.669154][T16449] syzkaller0: entered promiscuous mode [ 616.679910][T16449] syzkaller0: entered allmulticast mode [ 616.690694][T16401] EXT4-fs error (device loop6): ext4_map_blocks:608: inode #2: block 3: comm syz.6.3198: lblock 8 mapped to illegal pblock 3 (length 26) [ 616.733475][T16401] EXT4-fs error (device loop6): ext4_do_update_inode:5244: inode #2: comm syz.6.3198: corrupted inode contents [ 616.767949][T16401] EXT4-fs error (device loop6): ext4_dirty_inode:6120: inode #2: comm syz.6.3198: mark_inode_dirty error [ 616.782248][ T5789] cx231xx 7-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 616.788851][T16401] EXT4-fs error (device loop6): ext4_do_update_inode:5244: inode #2: comm syz.6.3198: corrupted inode contents [ 616.797501][ T5789] cx231xx 7-1:0.1: Identified as Conexant Hybrid TV - RDU253S (card=4) [ 616.807052][T16401] EXT4-fs error (device loop6): __ext4_ext_dirty:202: inode #2: comm syz.6.3198: mark_inode_dirty error [ 616.924537][ T5789] cx231xx 7-1:0.1: cx231xx_send_gpio_cmd: failed with status --110 [ 616.937497][ T5789] cx231xx 7-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 616.946299][ T5789] cx231xx 7-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 616.960374][ T5789] cx231xx 7-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 616.969091][ T5789] cx231xx 7-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 616.977223][ T5789] cx231xx 7-1:0.1: Failed to set devmode to analog: error: -32 [ 617.052448][ T5789] i2c i2c-2: Added multiplexed i2c bus 4 [ 617.110707][ T5789] i2c i2c-2: Added multiplexed i2c bus 5 [ 617.175774][ T5789] cx231xx 7-1:0.1: cx231xx_dev_init: Failed to set Power - errCode [-71]! [ 617.200409][ T5789] cx231xx 7-1:0.1: cx231xx_init_dev: cx231xx_i2c_register - errCode [-71]! [ 617.201074][T16462] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 617.275242][ T5789] cx231xx: probe of 7-1:0.1 failed with error -71 [ 617.328675][ T5789] usb 7-1: USB disconnect, device number 3 [ 617.582145][T16436] Bluetooth: hci3: command 0x0406 tx timeout [ 617.766013][T16025] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 617.933442][T16463] loop2: detected capacity change from 0 to 40427 [ 617.960907][T16463] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x7ffff [ 617.988341][T16463] F2FS-fs (loop2): invalid crc value [ 618.142038][T16463] F2FS-fs (loop2): Found nat_bits in checkpoint [ 618.394479][T16436] Bluetooth: hci1: command 0x0406 tx timeout [ 618.394506][T14409] Bluetooth: hci4: command 0x0406 tx timeout [ 618.394605][ T5790] Bluetooth: hci0: command 0x0c1a tx timeout [ 618.530449][T16463] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 618.656814][T16482] syzkaller0: entered promiscuous mode [ 618.662313][T16482] syzkaller0: entered allmulticast mode [ 618.676494][T16476] f2fs_ckpt-7:2: attempt to access beyond end of device [ 618.676494][T16476] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 618.709957][T16476] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 618.721957][T16476] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 619.161950][T16499] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 620.454008][ T5790] Bluetooth: hci0: command 0x0c1a tx timeout [ 620.677105][T16525] syzkaller0: entered promiscuous mode [ 620.691829][T16525] syzkaller0: entered allmulticast mode [ 620.905821][T16534] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 621.280448][T16551] FAULT_INJECTION: forcing a failure. [ 621.280448][T16551] name failslab, interval 1, probability 0, space 0, times 0 [ 621.295885][T16551] CPU: 0 PID: 16551 Comm: syz.3.3243 Not tainted syzkaller #0 [ 621.303382][T16551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 621.313459][T16551] Call Trace: [ 621.316758][T16551] [ 621.319702][T16551] dump_stack_lvl+0x16c/0x230 [ 621.324414][T16551] ? show_regs_print_info+0x20/0x20 [ 621.329637][T16551] ? load_image+0x3b0/0x3b0 [ 621.334166][T16551] ? __might_sleep+0xe0/0xe0 [ 621.338772][T16551] ? __lock_acquire+0x7c80/0x7c80 [ 621.343817][T16551] should_fail_ex+0x39d/0x4d0 [ 621.348521][T16551] should_failslab+0x9/0x20 [ 621.353056][T16551] slab_pre_alloc_hook+0x59/0x310 [ 621.358103][T16551] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 621.363845][T16551] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 621.369578][T16551] __kmem_cache_alloc_node+0x53/0x260 [ 621.374958][T16551] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 621.380677][T16551] __kmalloc+0xa4/0x240 [ 621.384833][T16551] tomoyo_realpath_from_path+0xe3/0x5d0 [ 621.390384][T16551] tomoyo_path_number_perm+0x1ea/0x590 [ 621.395835][T16551] ? tomoyo_path_number_perm+0x1ba/0x590 [ 621.401464][T16551] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 621.406930][T16551] ? ksys_write+0x1c1/0x250 [ 621.411452][T16551] ? __fget_files+0x28/0x4d0 [ 621.416053][T16551] security_file_ioctl+0x70/0xa0 [ 621.420987][T16551] __se_sys_ioctl+0x48/0x170 [ 621.425571][T16551] do_syscall_64+0x55/0xb0 [ 621.429981][T16551] ? clear_bhb_loop+0x40/0x90 [ 621.434647][T16551] ? clear_bhb_loop+0x40/0x90 [ 621.439316][T16551] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 621.445209][T16551] RIP: 0033:0x7fb524f8f749 [ 621.449619][T16551] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 621.469246][T16551] RSP: 002b:00007fb525d8a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 621.477665][T16551] RAX: ffffffffffffffda RBX: 00007fb5251e5fa0 RCX: 00007fb524f8f749 [ 621.485641][T16551] RDX: 0000200000000000 RSI: 000000004008ae8a RDI: 0000000000000005 [ 621.493609][T16551] RBP: 00007fb525d8a090 R08: 0000000000000000 R09: 0000000000000000 [ 621.501574][T16551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 621.509538][T16551] R13: 00007fb5251e6038 R14: 00007fb5251e5fa0 R15: 00007ffe95e198a8 [ 621.517519][T16551] [ 621.530672][T16551] ERROR: Out of memory at tomoyo_realpath_from_path. [ 621.584564][ T28] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 621.794280][ T28] usb 3-1: Using ep0 maxpacket: 16 [ 621.953795][ T28] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 621.963326][ T28] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.972229][ T28] usb 3-1: Product: syz [ 621.977824][ T28] usb 3-1: Manufacturer: syz [ 621.982540][ T28] usb 3-1: SerialNumber: syz [ 622.025636][ T28] usb 3-1: config 0 descriptor?? [ 622.059267][ T28] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 622.394711][ T28] ssu100: probe of 3-1:0.0 failed with error -110 [ 622.612203][T16566] syzkaller0: entered promiscuous mode [ 622.633487][T16566] syzkaller0: entered allmulticast mode [ 622.975368][ T5789] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 623.166729][ T5789] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 623.186450][ T5789] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 623.209212][ T5789] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 623.453265][ T5789] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 623.468236][ T5789] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 623.486615][ T5789] usb 2-1: Product: syz [ 623.651813][ T5789] usb 2-1: Manufacturer: syz [ 623.661447][ T5789] usb 2-1: SerialNumber: syz [ 624.061894][ T5789] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 624.338787][ T7521] usb 3-1: USB disconnect, device number 9 [ 624.461677][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.536529][ T7526] usb 2-1: USB disconnect, device number 4 [ 624.570100][ T7526] usblp0: removed [ 624.729511][T16613] syzkaller0: entered promiscuous mode [ 624.736742][T16613] syzkaller0: entered allmulticast mode [ 625.703983][ T5929] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 626.010431][ T5929] usb 2-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice=31.00 [ 626.023954][ T5929] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.031988][ T5929] usb 2-1: Product: syz [ 626.049459][ T5929] usb 2-1: Manufacturer: syz [ 626.054563][ T5929] usb 2-1: SerialNumber: syz [ 626.067354][ T5929] usb 2-1: config 0 descriptor?? [ 626.082462][T16645] syzkaller0: entered promiscuous mode [ 626.085471][ T5929] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 626.093854][T16645] syzkaller0: entered allmulticast mode [ 626.111474][ T5929] usb 2-1: Detected FT4232HP [ 626.486764][ T27] audit: type=1326 audit(1764447351.903:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16631 comm="syz.1.3267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f275ff8f749 code=0x7ffc0000 [ 626.515224][ T27] audit: type=1326 audit(1764447351.903:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16631 comm="syz.1.3267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f275ff8f749 code=0x7ffc0000 [ 626.538277][ T27] audit: type=1326 audit(1764447351.903:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16631 comm="syz.1.3267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f275ff8f749 code=0x7ffc0000 [ 626.657821][ T27] audit: type=1326 audit(1764447351.903:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16631 comm="syz.1.3267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f275ff8f749 code=0x7ffc0000 [ 626.754943][ T27] audit: type=1326 audit(1764447351.903:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16631 comm="syz.1.3267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f275ff8f749 code=0x7ffc0000 [ 626.835155][ T27] audit: type=1326 audit(1764447351.903:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16631 comm="syz.1.3267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f275ff8f749 code=0x7ffc0000 [ 626.924222][ T27] audit: type=1326 audit(1764447351.903:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16631 comm="syz.1.3267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f275ff8f749 code=0x7ffc0000 [ 626.999784][ T27] audit: type=1326 audit(1764447351.903:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16631 comm="syz.1.3267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f275ff8f749 code=0x7ffc0000 [ 627.058479][ T27] audit: type=1326 audit(1764447351.903:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16631 comm="syz.1.3267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f275ff8f749 code=0x7ffc0000 [ 627.096808][ T27] audit: type=1326 audit(1764447351.903:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16631 comm="syz.1.3267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f275ff8f749 code=0x7ffc0000 [ 627.999600][T16657] loop1: detected capacity change from 0 to 32768 [ 628.023828][T16657] (syz.1.3267,16657,1):ocfs2_parse_options:1448 ERROR: Unrecognized mount option "" or missing value [ 628.061661][T16657] (syz.1.3267,16657,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 628.105681][T16686] syzkaller0: entered promiscuous mode [ 628.123940][T16686] syzkaller0: entered allmulticast mode [ 628.142932][ T5929] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 628.176226][ T5929] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 628.222916][ T5929] usb 2-1: USB disconnect, device number 5 [ 628.255931][ T5929] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 628.292185][ T5929] ftdi_sio 2-1:0.0: device disconnected [ 629.718377][T16725] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3295'. [ 629.756493][T16722] syzkaller0: entered promiscuous mode [ 629.769335][T16722] syzkaller0: entered allmulticast mode [ 629.804549][T16723] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 629.821406][T16723] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 630.209587][T16735] capability: warning: `syz.6.3299' uses deprecated v2 capabilities in a way that may be insecure [ 630.270535][T16739] FAULT_INJECTION: forcing a failure. [ 630.270535][T16739] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 630.344690][T16739] CPU: 0 PID: 16739 Comm: syz.1.3300 Not tainted syzkaller #0 [ 630.352201][T16739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 630.362272][T16739] Call Trace: [ 630.365567][T16739] [ 630.368511][T16739] dump_stack_lvl+0x16c/0x230 [ 630.373216][T16739] ? show_regs_print_info+0x20/0x20 [ 630.378439][T16739] ? load_image+0x3b0/0x3b0 [ 630.382958][T16739] ? __might_fault+0xaa/0x120 [ 630.387642][T16739] ? __lock_acquire+0x7c80/0x7c80 [ 630.392681][T16739] should_fail_ex+0x39d/0x4d0 [ 630.397384][T16739] _copy_from_user+0x2f/0xe0 [ 630.401999][T16739] ___sys_sendmsg+0x159/0x290 [ 630.406698][T16739] ? __sys_sendmsg+0x270/0x270 [ 630.411477][T16739] ? __lock_acquire+0x7c80/0x7c80 [ 630.416511][T16739] __se_sys_sendmsg+0x1a5/0x270 [ 630.421358][T16739] ? __x64_sys_sendmsg+0x80/0x80 [ 630.426316][T16739] ? lockdep_hardirqs_on+0x98/0x150 [ 630.431526][T16739] do_syscall_64+0x55/0xb0 [ 630.435958][T16739] ? clear_bhb_loop+0x40/0x90 [ 630.440633][T16739] ? clear_bhb_loop+0x40/0x90 [ 630.445313][T16739] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 630.451203][T16739] RIP: 0033:0x7f275ff8f749 [ 630.455615][T16739] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 630.475223][T16739] RSP: 002b:00007f2760e31038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 630.483634][T16739] RAX: ffffffffffffffda RBX: 00007f27601e5fa0 RCX: 00007f275ff8f749 [ 630.491601][T16739] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 630.499562][T16739] RBP: 00007f2760e31090 R08: 0000000000000000 R09: 0000000000000000 [ 630.507525][T16739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 630.515488][T16739] R13: 00007f27601e6038 R14: 00007f27601e5fa0 R15: 00007ffe47e2a3c8 [ 630.523478][T16739] [ 630.862008][ T7521] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 631.085071][ T7521] usb 7-1: config index 0 descriptor too short (expected 8192, got 18) [ 631.094019][ T7521] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 631.105458][ T7521] usb 7-1: config 0 has no interfaces? [ 631.124103][ T7521] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 631.133632][ T7521] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.141779][ T7521] usb 7-1: Product: syz [ 631.146456][ T7521] usb 7-1: Manufacturer: syz [ 631.151145][ T7521] usb 7-1: SerialNumber: syz [ 631.158518][ T7521] usb 7-1: config 0 descriptor?? [ 631.549206][ T5789] usb 7-1: USB disconnect, device number 4 [ 631.789767][T16766] syzkaller0: entered promiscuous mode [ 631.801180][T16766] syzkaller0: entered allmulticast mode [ 632.457914][T15035] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 632.758232][T15035] usb 4-1: Using ep0 maxpacket: 16 [ 632.851394][T15035] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 632.888801][T15035] usb 4-1: config 0 has no interface number 0 [ 632.939313][T15035] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 632.987717][T15035] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 633.072101][T15035] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 633.093790][T15035] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 633.134542][T15035] usb 4-1: Product: syz [ 633.144140][T15035] usb 4-1: SerialNumber: syz [ 633.174989][T16794] syzkaller0: entered promiscuous mode [ 633.184063][T16794] syzkaller0: entered allmulticast mode [ 633.189993][T15035] usb 4-1: config 0 descriptor?? [ 633.198350][T15035] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 633.224021][T15035] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input9 [ 633.459888][ T27] kauditd_printk_skb: 18 callbacks suppressed [ 633.459904][ T27] audit: type=1326 audit(1764447358.883:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16802 comm="syz.6.3321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f749838f749 code=0x7ffc0000 [ 633.509014][T16803] netlink: 'syz.6.3321': attribute type 29 has an invalid length. [ 633.517196][T16803] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3321'. [ 633.526718][ T27] audit: type=1326 audit(1764447358.923:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16802 comm="syz.6.3321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f749838f749 code=0x7ffc0000 [ 633.576714][ T27] audit: type=1326 audit(1764447358.923:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16802 comm="syz.6.3321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f749838f749 code=0x7ffc0000 [ 633.605424][ T27] audit: type=1326 audit(1764447358.923:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16802 comm="syz.6.3321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f749838f749 code=0x7ffc0000 [ 633.638536][T16803] netlink: 'syz.6.3321': attribute type 29 has an invalid length. [ 633.647236][ T27] audit: type=1326 audit(1764447358.923:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16802 comm="syz.6.3321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f749838f749 code=0x7ffc0000 [ 633.657546][T16803] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3321'. [ 633.684075][ T7526] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 633.699173][ T27] audit: type=1326 audit(1764447358.923:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16802 comm="syz.6.3321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f749838f749 code=0x7ffc0000 [ 633.732728][ T27] audit: type=1326 audit(1764447358.923:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16802 comm="syz.6.3321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f749838f749 code=0x7ffc0000 [ 633.773038][ T27] audit: type=1326 audit(1764447358.923:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16802 comm="syz.6.3321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f749838f749 code=0x7ffc0000 [ 633.801632][ T27] audit: type=1326 audit(1764447358.923:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16802 comm="syz.6.3321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f749838f749 code=0x7ffc0000 [ 633.825150][ T27] audit: type=1326 audit(1764447358.923:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16802 comm="syz.6.3321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f749838f749 code=0x7ffc0000 [ 633.988794][ T7526] usb 2-1: unable to get BOS descriptor or descriptor too short [ 634.016826][ T7526] usb 2-1: config 0 has an invalid interface number: 23 but max is 0 [ 634.076491][ T7526] usb 2-1: config 0 has no interface number 0 [ 634.105950][ T7526] usb 2-1: config 0 interface 23 has no altsetting 0 [ 634.151706][ T7526] usb 2-1: New USB device found, idVendor=04dd, idProduct=8003, bcdDevice= d.09 [ 634.352209][ T7526] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.421560][ T7526] usb 2-1: Product: syz [ 634.431668][ T7526] usb 2-1: Manufacturer: syz [ 634.443001][ T7526] usb 2-1: SerialNumber: syz [ 634.460979][ T7526] usb 2-1: config 0 descriptor?? [ 634.844882][T15035] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 635.044010][T15035] usb 7-1: Using ep0 maxpacket: 16 [ 635.052295][T15035] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 635.067462][T15035] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 635.078701][T15035] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.089352][T15035] usb 7-1: Product: syz [ 635.096484][T15035] usb 7-1: Manufacturer: syz [ 635.101260][T15035] usb 7-1: SerialNumber: syz [ 635.112033][T15035] usb 7-1: config 0 descriptor?? [ 635.126419][T15035] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 635.135953][T15035] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 635.460221][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 635.470353][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 635.477758][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 635.485043][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 635.493258][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 635.500569][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 635.507726][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 635.515120][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 635.522390][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 635.531032][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 635.638075][ C0] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 635.649569][ T5789] usb 4-1: USB disconnect, device number 12 [ 635.685869][ T5789] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 635.731785][T15035] em28xx 7-1:0.0: chip ID is em2765 [ 636.618118][ T7526] safe_serial 2-1:0.23: safe_serial converter detected [ 636.655372][ T7526] usb 2-1: safe_serial converter now attached to ttyUSB0 [ 636.688091][ T7526] usb 2-1: USB disconnect, device number 6 [ 636.688500][T15035] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 636.698401][ T7526] safe_serial ttyUSB0: safe_serial converter now disconnected from ttyUSB0 [ 636.719110][ T7526] safe_serial 2-1:0.23: device disconnected [ 636.784171][T15035] em28xx 7-1:0.0: board has no eeprom [ 637.049500][T16830] syzkaller0: entered promiscuous mode [ 637.060985][T16830] syzkaller0: entered allmulticast mode [ 637.177516][T16842] netlink: 'syz.1.3332': attribute type 5 has an invalid length. [ 637.673961][T15734] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 637.863826][T15734] usb 3-1: unable to get BOS descriptor or descriptor too short [ 637.881748][T15734] usb 3-1: not running at top speed; connect to a high speed hub [ 637.892049][T15734] usb 3-1: config 17 has an invalid interface number: 8 but max is 1 [ 637.906916][T16836] em28xx 7-1:0.0: writing to i2c device at 0x0 failed (error=-5) [ 637.915990][T15734] usb 3-1: config 17 has 1 interface, different from the descriptor's value: 2 [ 637.925500][T15734] usb 3-1: config 17 has no interface number 0 [ 637.950904][T15734] usb 3-1: config 17 interface 8 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0 [ 637.964745][T15035] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 637.977722][T15734] usb 3-1: config 17 interface 8 has no altsetting 0 [ 638.047085][T15035] em28xx 7-1:0.0: dvb set to bulk mode. [ 638.079960][ T5929] em28xx 7-1:0.0: Binding DVB extension [ 638.105962][T15734] usb 3-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 638.179638][T15734] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.384560][T15035] usb 7-1: USB disconnect, device number 5 [ 638.491966][T15035] em28xx 7-1:0.0: Disconnecting em28xx [ 638.498167][T15734] usb 3-1: Product: syz [ 638.502357][T15734] usb 3-1: Manufacturer: syz [ 638.520079][T15734] usb 3-1: SerialNumber: syz [ 638.582146][ T5929] em28xx 7-1:0.0: Registering input extension [ 638.628471][T15035] em28xx 7-1:0.0: Closing input extension [ 638.687268][T15035] em28xx 7-1:0.0: Freeing device [ 638.815023][T15734] usb 3-1: selecting invalid altsetting 0 [ 638.871437][T15734] usb 3-1: USB disconnect, device number 10 [ 638.910070][T16871] syzkaller0: entered promiscuous mode [ 638.919743][T16871] syzkaller0: entered allmulticast mode [ 638.930227][T14052] udevd[14052]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.8/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 639.865707][ T7520] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 639.990681][T16891] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6erspan0 [ 640.154196][ T7520] usb 4-1: Using ep0 maxpacket: 8 [ 640.178498][ T7520] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 640.235228][ T7520] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 640.277952][ T7520] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 640.293491][ T7520] usb 4-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 640.422950][ T7520] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.456504][ T7520] usb 4-1: config 0 descriptor?? [ 641.012654][T16888] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 641.025472][ T7520] logitech 0003:046D:C293.0002: nested delimiters [ 641.069270][ T7520] logitech 0003:046D:C293.0002: item 0 4 2 10 parsing failed [ 641.099332][ T7520] logitech 0003:046D:C293.0002: parse failed [ 641.128913][ T7520] logitech: probe of 0003:046D:C293.0002 failed with error -22 [ 641.163832][T16911] syzkaller0: entered promiscuous mode [ 641.179416][T16911] syzkaller0: entered allmulticast mode [ 641.209251][T16910] syzkaller0: entered promiscuous mode [ 641.229142][T16910] syzkaller0: entered allmulticast mode [ 641.270135][T16888] loop3: detected capacity change from 0 to 2048 [ 641.318650][T16888] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 641.346764][ T27] kauditd_printk_skb: 31 callbacks suppressed [ 641.346779][ T27] audit: type=1800 audit(1764447366.773:74): pid=16888 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3347" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 641.350998][T16886] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1215: group 0, [ 641.358547][ T27] audit: type=1800 audit(1764447366.773:75): pid=16888 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3347" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 641.373843][T16886] block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 641.382499][T16888] [ 641.413133][T16888] ====================================================== [ 641.420156][T16888] WARNING: possible circular locking dependency detected [ 641.427174][T16888] syzkaller #0 Not tainted [ 641.431565][T16888] ------------------------------------------------------ [ 641.438572][T16888] syz.3.3347/16888 is trying to acquire lock: [ 641.444635][T16888] ffff88806bdd1ec8 (&ei->xattr_sem){++++}-{3:3}, at: ext4_destroy_inline_data+0x28/0xe0 [ 641.454390][T16888] [ 641.454390][T16888] but task is already holding lock: [ 641.461735][T16888] ffff88805c6e0bd8 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x170/0x2f0 [ 641.471723][T16888] [ 641.471723][T16888] which lock already depends on the new lock. [ 641.471723][T16888] [ 641.472163][T16886] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 641.482103][T16888] [ 641.482103][T16888] the existing dependency chain (in reverse order) is: [ 641.482110][T16888] [ 641.482110][T16888] -> #1 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 641.482135][T16888] percpu_down_read+0x44/0x1a0 [ 641.482159][T16888] ext4_writepages+0x170/0x2f0 [ 641.482178][T16888] do_writepages+0x3a2/0x600 [ 641.497397][T16886] EXT4-fs (loop3): This should not happen!! Data will be lost [ 641.497397][T16886] [ 641.503304][T16888] __writeback_single_inode+0x153/0xee0 [ 641.503335][T16888] writeback_single_inode+0x211/0x720 [ 641.513405][T16886] EXT4-fs (loop3): Total free blocks count 0 [ 641.516969][T16888] write_inode_now+0x161/0x1e0 [ 641.516992][T16888] iput+0x5b2/0x920 [ 641.517006][T16888] ext4_xattr_block_set+0x273a/0x32a0 [ 641.522706][T16886] EXT4-fs (loop3): Free/Dirty block details [ 641.527348][T16888] ext4_expand_extra_isize_ea+0x10ea/0x19e0 [ 641.527374][T16888] __ext4_expand_extra_isize+0x306/0x400 [ 641.527395][T16888] __ext4_mark_inode_dirty+0x45d/0x6e0 [ 641.527411][T16888] ext4_evict_inode+0x7ed/0xea0 [ 641.527427][T16888] evict+0x486/0x870 [ 641.527441][T16888] ext4_orphan_cleanup+0xbd4/0x1400 [ 641.527462][T16888] ext4_fill_super+0x5de4/0x66c0 [ 641.527476][T16888] get_tree_bdev+0x3e4/0x510 [ 641.527491][T16888] vfs_get_tree+0x8c/0x280 [ 641.527504][T16888] do_new_mount+0x24b/0xa40 [ 641.527518][T16888] __se_sys_mount+0x2da/0x3c0 [ 641.527530][T16888] do_syscall_64+0x55/0xb0 [ 641.527550][T16888] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 641.527567][T16888] [ 641.527567][T16888] -> #0 (&ei->xattr_sem){++++}-{3:3}: [ 641.527600][T16888] __lock_acquire+0x2ddb/0x7c80 [ 641.527618][T16888] lock_acquire+0x197/0x410 [ 641.527632][T16888] down_write+0x97/0x1f0 [ 641.527646][T16888] ext4_destroy_inline_data+0x28/0xe0 [ 641.527664][T16888] ext4_do_writepages+0x4c2/0x38d0 [ 641.527681][T16888] ext4_writepages+0x1a8/0x2f0 [ 641.527701][T16888] do_writepages+0x3a2/0x600 [ 641.527722][T16888] filemap_fdatawrite_wbc+0x122/0x180 [ 641.527743][T16888] file_write_and_wait_range+0x171/0x240 [ 641.527764][T16888] generic_buffers_fsync_noflush+0x6f/0x160 [ 641.527784][T16888] ext4_sync_file+0x454/0xc10 [ 641.527798][T16888] ext4_buffered_write_iter+0x2c0/0x350 [ 641.527814][T16888] ext4_file_write_iter+0x1d9/0x1870 [ 641.527828][T16888] vfs_write+0x43b/0x940 [ 641.527846][T16888] __x64_sys_pwrite64+0x195/0x220 [ 641.527865][T16888] do_syscall_64+0x55/0xb0 [ 641.527883][T16888] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 641.527900][T16888] [ 641.527900][T16888] other info that might help us debug this: [ 641.527900][T16888] [ 641.527905][T16888] Possible unsafe locking scenario: [ 641.527905][T16888] [ 641.527910][T16888] CPU0 CPU1 [ 641.527915][T16888] ---- ---- [ 641.527919][T16888] rlock(&sbi->s_writepages_rwsem); [ 641.527932][T16888] lock(&ei->xattr_sem); [ 641.527944][T16888] lock(&sbi->s_writepages_rwsem); [ 641.527958][T16888] lock(&ei->xattr_sem); [ 641.527970][T16888] [ 641.527970][T16888] *** DEADLOCK *** [ 641.527970][T16888] [ 641.527974][T16888] 2 locks held by syz.3.3347/16888: [ 641.527985][T16888] #0: ffff88805c6e6418 (sb_writers#4){.+.+}-{0:0}, at: vfs_write+0x20e/0x940 [ 641.528034][T16888] #1: ffff88805c6e0bd8 ( [ 641.541506][T16886] EXT4-fs (loop3): free_blocks=4096 [ 641.543682][T16888] &sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x170/0x2f0 [ 641.552144][T16886] EXT4-fs (loop3): dirty_blocks=16 [ 641.555524][T16888] [ 641.555524][T16888] stack backtrace: [ 641.555531][T16888] CPU: 0 PID: 16888 Comm: syz.3.3347 Not tainted syzkaller #0 [ 641.555549][T16888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 641.555558][T16888] Call Trace: [ 641.555565][T16888] [ 641.555578][T16888] dump_stack_lvl+0x16c/0x230 [ 641.561406][T16886] EXT4-fs (loop3): Block reservation details [ 641.565124][T16888] ? load_image+0x3b0/0x3b0 [ 641.565146][T16888] ? show_regs_print_info+0x20/0x20 [ 641.565170][T16888] ? print_circular_bug+0x12b/0x1a0 [ 641.571555][T16886] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 641.576900][T16888] check_noncircular+0x2bd/0x3c0 [ 641.576926][T16888] ? print_deadlock_bug+0x5d0/0x5d0 [ 641.584450][T16906] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 641.589441][T16888] ? lockdep_lock+0xe0/0x220 [ 641.589467][T16888] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 641.589489][T16888] ? _find_first_zero_bit+0xd3/0x100 [ 641.945003][T16888] __lock_acquire+0x2ddb/0x7c80 [ 641.949859][T16888] ? __lock_acquire+0x7c80/0x7c80 [ 641.954869][T16888] ? verify_lock_unused+0x140/0x140 [ 641.960055][T16888] ? is_bpf_text_address+0x28f/0x2a0 [ 641.965325][T16888] ? is_bpf_text_address+0x26/0x2a0 [ 641.970508][T16888] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 641.976561][T16888] lock_acquire+0x197/0x410 [ 641.981053][T16888] ? ext4_destroy_inline_data+0x28/0xe0 [ 641.986597][T16888] ? __might_sleep+0xe0/0xe0 [ 641.991172][T16888] ? read_lock_is_recursive+0x20/0x20 [ 641.996526][T16888] ? stack_trace_save+0x9c/0xe0 [ 642.001362][T16888] ? stack_trace_snprint+0xf0/0xf0 [ 642.006457][T16888] ? check_noncircular+0x175/0x3c0 [ 642.011550][T16888] ? __might_sleep+0xe0/0xe0 [ 642.016133][T16888] down_write+0x97/0x1f0 [ 642.020359][T16888] ? ext4_destroy_inline_data+0x28/0xe0 [ 642.025892][T16888] ? down_read_killable+0x340/0x340 [ 642.031070][T16888] ? lockdep_unlock+0x137/0x2d0 [ 642.035904][T16888] ? ext4_journal_check_start+0x178/0x250 [ 642.041615][T16888] ext4_destroy_inline_data+0x28/0xe0 [ 642.046976][T16888] ext4_do_writepages+0x4c2/0x38d0 [ 642.052080][T16888] ? verify_lock_unused+0x140/0x140 [ 642.057259][T16888] ? __lock_acquire+0x1334/0x7c80 [ 642.062272][T16888] ? ext4_normal_submit_inode_data_buffers+0x1b0/0x1b0 [ 642.069112][T16888] ? rcu_read_lock_any_held+0xb4/0x120 [ 642.074557][T16888] ext4_writepages+0x1a8/0x2f0 [ 642.079313][T16888] ? ext4_read_folio+0x2f0/0x2f0 [ 642.084243][T16888] ? __rwlock_init+0x150/0x150 [ 642.088996][T16888] ? do_raw_spin_unlock+0x121/0x230 [ 642.094180][T16888] ? ext4_read_folio+0x2f0/0x2f0 [ 642.099103][T16888] do_writepages+0x3a2/0x600 [ 642.103685][T16888] ? folio_clear_dirty_for_io+0xc30/0xc30 [ 642.109393][T16888] ? __lock_acquire+0x7c80/0x7c80 [ 642.114402][T16888] ? __rwlock_init+0x150/0x150 [ 642.119151][T16888] ? do_raw_spin_unlock+0x121/0x230 [ 642.124337][T16888] filemap_fdatawrite_wbc+0x122/0x180 [ 642.129701][T16888] file_write_and_wait_range+0x171/0x240 [ 642.135320][T16888] ? __filemap_set_wb_err+0x1b0/0x1b0 [ 642.140681][T16888] ? ext4_buffered_write_iter+0xd7/0x350 [ 642.146303][T16888] ? __lock_acquire+0x7c80/0x7c80 [ 642.151321][T16888] generic_buffers_fsync_noflush+0x6f/0x160 [ 642.157205][T16888] ext4_sync_file+0x454/0xc10 [ 642.161868][T16888] ext4_buffered_write_iter+0x2c0/0x350 [ 642.167395][T16888] ext4_file_write_iter+0x1d9/0x1870 [ 642.172685][T16888] ? ext4_file_read_iter+0x670/0x670 [ 642.177973][T16888] vfs_write+0x43b/0x940 [ 642.182216][T16888] ? file_end_write+0x250/0x250 [ 642.187065][T16888] ? __fget_files+0x44a/0x4d0 [ 642.191735][T16888] ? __fdget+0x180/0x210 [ 642.195967][T16888] ? __x64_sys_pwrite64+0xf0/0x220 [ 642.201070][T16888] __x64_sys_pwrite64+0x195/0x220 [ 642.206086][T16888] ? ksys_pwrite64+0x1c0/0x1c0 [ 642.210837][T16888] ? lockdep_hardirqs_on+0x98/0x150 [ 642.216021][T16888] do_syscall_64+0x55/0xb0 [ 642.220444][T16888] ? clear_bhb_loop+0x40/0x90 [ 642.225119][T16888] ? clear_bhb_loop+0x40/0x90 [ 642.229787][T16888] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 642.235669][T16888] RIP: 0033:0x7fb524f8f749 [ 642.240071][T16888] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 642.259669][T16888] RSP: 002b:00007fb525d8a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 642.268070][T16888] RAX: ffffffffffffffda RBX: 00007fb5251e5fa0 RCX: 00007fb524f8f749 [ 642.276024][T16888] RDX: 00000000fffffd55 RSI: 0000200000000280 RDI: 0000000000000008 [ 642.284070][T16888] RBP: 00007fb525013f91 R08: 0000000000000000 R09: 0000000000000000 [ 642.292042][T16888] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000 [ 642.300005][T16888] R13: 00007fb5251e6038 R14: 00007fb5251e5fa0 R15: 00007ffe95e198a8 [ 642.308060][T16888] [ 642.372317][T15734] usb 4-1: USB disconnect, device number 13