last executing test programs: 2m45.239606567s ago: executing program 1 (id=13): r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000040), 0x0) syz_mount_image$vfat(&(0x7f00000079c0), &(0x7f0000000200)='./file0\x00', 0x410, &(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRESDEC], 0xfd, 0x2b2, &(0x7f0000000680)="$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") syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./bus\x00', 0x1a404ac, &(0x7f0000000280)=ANY=[@ANYRESHEX, @ANYRESOCT, @ANYRES8, @ANYRESOCT, @ANYRES16, @ANYRESHEX], 0x0, 0x0, &(0x7f0000000000)) syz_open_dev$sndctrl(0x0, 0xffffffffffffffff, 0x40000) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r1 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000300)) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, 0x1407, 0x100, 0x70bd2d, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r3) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) r4 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[], 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x164}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) mkdirat(0xffffffffffffffff, &(0x7f0000000200)='./bus/file0\x00', 0x43) renameat2(0xffffffffffffffff, &(0x7f0000000240)='./bus\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x2) 2m43.452305627s ago: executing program 1 (id=20): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x40}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000680)={0x18, 0x3d, 0x1, 0x70bd23, 0x25dfdbfc, {0x4}, [@nested={0x4, 0x16}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20040000) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x240, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000400), r4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x2, &(0x7f0000000380)=ANY=[@ANYBLOB="850000007f00000095"], &(0x7f0000000880)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002abd7000fddbdf2500000000080002000000000008000100", @ANYRES32=0x0, @ANYBLOB="3363beea395072291d6416fda13c8d766e308dc64cbb7455bc0d5d6c42e6b12ba66c3c32893e8ea8547e4143bfc992cc05f778f51b44bca85e9775b2da75bd"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x8004) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, &(0x7f0000000140)='#\x00') r6 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f00000006c0)={0x8c, r5, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_PEER_ADDR6={0x14, 0xb, @empty}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_PEER_ADDR6={0x14, 0xb, @mcast2}, @GTPA_TID={0xc, 0x3, 0x10}, @GTPA_PEER_ADDR6={0x14, 0xb, @empty}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000800}, 0x41) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000007200010304000000ffdbdf2507000000", @ANYRES32=0x0, @ANYBLOB='\b'], 0x20}, 0x1, 0xf00, 0x0, 0x48000}, 0x0) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r8 = syz_io_uring_setup(0x83f, &(0x7f00000000c0)={0x0, 0xadfa, 0x100, 0x3, 0x8002ab}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x21b, 0x109880}) io_uring_enter(r8, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 2m38.102106986s ago: executing program 1 (id=29): r0 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x8}}]}}]}, 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newtfilter={0x7c, 0x28, 0xd27, 0x0, 0x100, {0x0, 0x0, 0x0, r2, {0x10}, {0x8}, {0xfff1, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4c, 0x2, [@TCA_CGROUP_ACT={0x48, 0x1, [@m_skbmod={0x44, 0x16, 0x0, 0x0, {{0xb}, {0x18, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0xa2e}, @TCA_SKBMOD_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x14}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') read$FUSE(r4, &(0x7f0000004040)={0x2020}, 0x2020) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001380), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r5, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000c0000000800050000e200f3080006"], 0x24}}, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0x6c, r6, 0x212, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}]}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x80000000}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@empty}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7fff}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x82) 2m34.3471097s ago: executing program 1 (id=39): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r1, 0x0, 0x2, 0x8) fcntl$setstatus(r1, 0x4, 0x2000) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x1a, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0x1000}) r6 = io_uring_setup(0x1612, &(0x7f0000000200)={0x0, 0x0, 0x800}) io_uring_register$IORING_REGISTER_BUFFERS2(r6, 0xf, &(0x7f0000001580)={0x3, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/168, 0xa8}, {0x0}, {&(0x7f0000000280)=""/4086, 0xff6}], &(0x7f0000001540)=[0x2]}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r6, 0x10, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001a80)=[{0x0}], 0x0, 0x1}, 0x20) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) vmsplice(r0, &(0x7f0000000200)=[{&(0x7f0000000300)='yT', 0x2}], 0x1, 0x4) sendfile(r2, r1, 0x0, 0x8) 2m30.12232699s ago: executing program 1 (id=51): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x1d64, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c250000000000202020"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}, 0xf5ff}], 0xf00, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r2, 0x0, 0x2000, 0x2000, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000180)=""/114, 0x0, 0x0, 0xd8, 0xc4, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52cee499399a00be4b710e9246d7bca28cc8346eb84414e45f3f4633f4acb77bf8cc38c4c16fe035905db79cdc0be634a915662c4cac58ae94706f86ea320f339c21399b5bb7607044916c63c528ab4149718d6215a9a3749113c268e49b2b9dae91ed804e5ac5d4ec7ac9c5fd67a76f9a2b06f7304f6e81221a751008e786e1edde82cf1ecb76cb4cd71cf781ea3a19b917a1e215b1a6c7ee605b32b91eaae38517fde4303d5f2b1e63e9e52ae4b197fd72de1f71801e1f9f1369d1f530", &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee523318878ee704a8d9502b566cad45587cb74ea8259c1c0a926fc09499395b2db5af40bb6f4c526", 0x0, 0x8000}, 0x24) socket$xdp(0x2c, 0x3, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448cb, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) socket$inet(0x2, 0x2, 0x0) write(r5, &(0x7f0000000040)="05000000010000", 0x7) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r6, 0x5) setsockopt$inet6_tcp_int(r6, 0x6, 0xa, &(0x7f0000000000)=0x8, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000001f80)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd600a96460014060000000000000000000000000000000000fe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002b7009f780000"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffa8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2m29.171732715s ago: executing program 1 (id=53): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x8, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0101000000000000000001000400bc00010073797a300000002c000000030a01020000000000000000010000020900010073797a30000000000900030073cde5310000000078000000030a011c00000000000000000100004bdc0008800c00014000000000000000000c0001400000000000007fff0c00014000000000000000060c00014000000000000000010c00014000000000000000000c00014000000000000000060c00024000000000000000010900010073797a3000"], 0xec}, 0x1, 0x0, 0x0, 0x8040}, 0x20000881) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x80000000000000a, 0x2, 0x0) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, 0x0, &(0x7f00000001c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)={0x20, 0x19, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x44}, 0x40090) sendmsg$nl_route(r2, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000040)=@ipv4_delrule={0x1c, 0x21, 0x403, 0x80000200, 0x0, {0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}}, 0x1c}}, 0x80) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000300)={0x1f, 0x2}, 0x6) write$bt_hci(r4, &(0x7f0000001ec0)=ANY=[@ANYBLOB="011f04fc02c0"], 0x6) syz_mount_image$xfs(&(0x7f00000000c0), &(0x7f0000009780)='./file0\x00', 0x0, &(0x7f0000000080)={[{@sysvgroups}, {@gqnoenforce}, {@noquota}, {@ikeep}, {@lazytime}]}, 0x1, 0x9772, &(0x7f000001c680)="$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") syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000180)={[{@iocharset={'iocharset', 0x3d, 'cp850'}}, {@fmask={'fmask', 0x3d, 0x9e}}, {@errors_remount}, {@iocharset={'iocharset', 0x3d, 'iso8859-7'}}, {@fmask={'fmask', 0x3d, 0x5}}, {@dmask}, {@gid}, {@dmask={'dmask', 0x3d, 0x1}}, {@errors_continue}, {}], [{@hash}, {@obj_role}, {@subj_role={'subj_role', 0x3d, 'iso8859-7'}}, {@fowner_eq}, {@fscontext={'fscontext', 0x3d, 'system_u'}}]}, 0x1, 0x152f, &(0x7f00000037c0)="$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") mount$nfs(&(0x7f0000000400)='.\x03~\xf3\xf5\x95\xa01\xc3\x99\x8a\x17\x930x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000010000000f000000080034000400000008000300", @ANYRES32=r3, @ANYBLOB="050033"], 0x2c}}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x6, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x19}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r4, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 1m10.643036257s ago: executing program 0 (id=261): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0xa, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000001080)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r1, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x58, 0x0, 0x9, 0x101, 0x0, 0x0, {}, [@NFCTH_POLICY={0x10, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}, @NFCTH_TUPLE={0x4, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x2, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @dev}}}]}, @NFCTH_PRIV_DATA_LEN={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x58}}, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, &(0x7f0000000000)={0x0, 0x84d4, 0x9, 0x0, 0x2dc}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x508) syz_emit_ethernet(0x5e, &(0x7f00000003c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x28, 0x3a, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @private1, @private1}}}}}}, 0x0) 1m10.330848007s ago: executing program 0 (id=263): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x2, 0x800000000004, @tid=r0}, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) r1 = socket(0x28, 0x5, 0x0) listen(r1, 0x0) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120100008dc83140300860002b1301020301090212f801010000000904"], 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)={0x40, 0x10}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) shutdown(r2, 0x1) sendmmsg$unix(r2, &(0x7f0000002600)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}], 0x1, 0x4000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000200), 0x101001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r4, 0x40045010, &(0x7f0000000240)=0xfffffff4) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0xffffffffffffff11) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) pipe2(&(0x7f0000000040), 0x80800) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x2}]}}, 0x0, 0x26, 0x0, 0xa, 0x0, 0x0, @void, @value}, 0x28) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x1) 1m7.766841037s ago: executing program 0 (id=264): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x40000, &(0x7f0000000280)=ANY=[], 0x1, 0x0, 0x0) fsetxattr$security_capability(r2, &(0x7f0000000180), &(0x7f0000000240)=@v2={0x2000000, [{0x0, 0x2}, {0x7, 0x3}]}, 0x14, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000300)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@nolazytime}, {@dioread_nolock}, {@test_dummy_encryption}, {@nobarrier}, {@nodelalloc}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}, {@barrier_val={'barrier', 0x3d, 0xc}}, {@nogrpid}]}, 0x1, 0xbb7, &(0x7f00000017c0)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000000)) 1m5.030928344s ago: executing program 0 (id=275): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0xa, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000001080)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r1, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x58, 0x0, 0x9, 0x101, 0x0, 0x0, {}, [@NFCTH_POLICY={0x10, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}, @NFCTH_TUPLE={0x4, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x2, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @dev}}}]}, @NFCTH_PRIV_DATA_LEN={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x58}}, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, &(0x7f0000000000)={0x0, 0x84d4, 0x9, 0x0, 0x2dc}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x508) syz_emit_ethernet(0x5e, &(0x7f00000003c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x28, 0x3a, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @private1, @private1}}}}}}, 0x0) 1m3.818903524s ago: executing program 0 (id=280): openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) syz_open_dev$mouse(&(0x7f00000000c0), 0xcaba, 0x200) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) r1 = syz_open_dev$loop(&(0x7f0000000180), 0x1, 0x40) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000000)={'a', ' *:* ', 'w\x00'}, 0x8) r3 = userfaultfd(0x801) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x1c0}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r4 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x19, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x30, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x30}}, 0x60800) write$cgroup_devices(r4, &(0x7f00000000c0)={'c', ' *:* ', 'rwm\x00'}, 0xa) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r7 = openat$cgroup_devices(r6, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r7, &(0x7f0000000280)={'c', ' *:* ', 'rm\x00'}, 0x9) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x5) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="660a0000a4070038b467a70300000000000006898bed00000000004a6bdb14bc5588f9"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1m3.012506698s ago: executing program 33 (id=280): openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) syz_open_dev$mouse(&(0x7f00000000c0), 0xcaba, 0x200) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) r1 = syz_open_dev$loop(&(0x7f0000000180), 0x1, 0x40) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000000)={'a', ' *:* ', 'w\x00'}, 0x8) r3 = userfaultfd(0x801) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x1c0}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r4 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x19, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x30, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x30}}, 0x60800) write$cgroup_devices(r4, &(0x7f00000000c0)={'c', ' *:* ', 'rwm\x00'}, 0xa) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r7 = openat$cgroup_devices(r6, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r7, &(0x7f0000000280)={'c', ' *:* ', 'rm\x00'}, 0x9) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x5) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="660a0000a4070038b467a70300000000000006898bed00000000004a6bdb14bc5588f9"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 16.404917244s ago: executing program 4 (id=408): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="6e6f646973636172642c64697361626c655f6578741f6964656e746966792c6e6f5f686561702c616c6c6f635f6d6f64653d72657573652c6e6f71756f74612c64697361626c655f726f6c6c5f666f72776172642c6261636b67726f756e645f67633d6f6e2c6e6f67635f6d657267652c636865636b706f696e743d64697361626c652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c6d6f64653d61646170746976652c6e6f696e6c696e655f64656e7472792c6e6f696e6c696e655f64656e7472792c00"], 0x1, 0x5505, &(0x7f0000002480)="$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") r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) fdatasync(r0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) getuid() r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0xc0185879, &(0x7f0000000080)={@id={0x1000000, 0x0, @c}}) unlinkat(r2, &(0x7f0000000100)='./file0\x00', 0x200) r3 = geteuid() setresuid(r1, r3, r3) socket$nl_route(0x10, 0x3, 0x0) 12.842874788s ago: executing program 2 (id=417): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x40}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000680)={0x18, 0x3d, 0x1, 0x70bd23, 0x25dfdbfc, {0x4}, [@nested={0x4, 0x16}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20040000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x240, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000400), r3) r5 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f00000006c0)={0x8c, r4, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_PEER_ADDR6={0x14, 0xb, @empty}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_PEER_ADDR6={0x14, 0xb, @mcast2}, @GTPA_TID={0xc, 0x3, 0x10}, @GTPA_PEER_ADDR6={0x14, 0xb, @empty}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000800}, 0x41) r6 = syz_io_uring_setup(0x83f, &(0x7f00000000c0)={0x0, 0xadfa, 0x100, 0x3, 0x8002ab}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x21b, 0x109880}) io_uring_enter(r6, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 12.763695856s ago: executing program 4 (id=418): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000cc0)=@delchain={0x1bc, 0x65, 0x2, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x8}, {0x0, 0x9}, {0x6}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}, @filter_kind_options=@f_route={{0xa}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x6, 0x22}}, @filter_kind_options=@f_route={{0xa}, {0x168, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0x100, 0x6, [@m_vlan={0xfc, 0x13, 0x0, 0x0, {{0x9}, {0x4}, {0xcd, 0x6, "4536d5ba67cb41f3417191a0b4758169ba997e9dbec50e599419b7f290f4ee70efc0bdcb1d84cd2098b9c95fa81553821d25bbee1244fda18d438c3a5d696ee14197d17ea59071f0fd93760930ba453b3e23095f617d12282ec3f8190afeb1ac2e8d254fdac5b6ea11185f9256c3bab37a15cafe5f112d56723f0fb5c49b6449e58fc91a26d527012f701a9cfebef7787238f0d549914d85db8de6456cd08e0cd88f542f218759aebb2337e303783a52c6e45d646c6ef46ddb4aac282b8605eabf8141749876b4d391"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}]}, @TCA_ROUTE4_POLICE={0x4c, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x7ff, 0xffffffffffffffff, 0x3, 0xa, 0x6, {0x7, 0x2, 0x1, 0x9, 0x0, 0x4}, {0x10, 0x2, 0x6, 0xfffe, 0x1, 0xeaa1}, 0x6, 0x200, 0x7}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xa71}]}]}}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x81}, 0x8000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 12.208544288s ago: executing program 5 (id=419): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000240)='./file0\x00', 0x8c0, &(0x7f0000000100)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c696e74722c6e6f61636c2c001967b9b8a6cdd636d75428f2c5e8054d01858eef552755576e749526b36860cf2511040d1ce5a743ffd83d29d1ba3a54a59d8c7aa249f08d3c8c6d04ac105d67934db6190d59f2323b55a5a4"], 0x1, 0x4431, &(0x7f00000088c0)="$eJzs3b9PHFceAPA3Az6Dz/ZhnwufdNKtdJbudHdC4OoSLAVjbAw2ceTELtKsF1jbJAtrwRKlcEE6S6kipYhSWImUjspCSu38CWlSOrWlpEgTKZIVop2dxcywGzaEhdj6fIod5v2G78zbN8Xw4lTt7vxyYX65UFosVGdvL58tvFetrCyUQ7xPWvZ/aP/6pzPduE5+rc0v92zktHLtwqU3b54N4au5b55ubGxshLre0NLwlp9//OH+7NZjU5yrU2+3dWt75e0Qwqlt46rrCSH0hRCiEML5NG0sPfaHEI6leTfvf3irsEejefSkfK74bPrB+siZqbWH6+1/9yiETyt/+9+dhe/+2TPy7X/2qHsAAAAAAAAAAAAAAAAAAF5wE9ev3XhjaDg8jkLvWrT9fd2J9Nju/diNPfOP7v+yAAAAAAAAAAAAAAAAAAAA8Af1/P3/QnSyxfv/4+lxtE39jde6P0a6Z/L1a+MXh4bT/d+jbfn/T5O+P98TTrTY9z2///v5XP3W+79v72e3muNr9jsQongwcx7Hg4MhfJ5u/H46OhJXqsu1/96urizO7dkwXljZ+Dd2789EJ93Qv8P4x2O59ru///9ft11N9fNbe3eJvdSy8e9pW+6LD6KO7v8LuXr7EX92Lxv/3iStf2uB0cYEUI//R707x38813634n88hFCI6mMtZGaA+hqmnt5uvUJWNv6HkrTM1Jn+Idvd/z/l4n8x1/5Bzf+r+S8iWsrG/09JWl+mxOHkM4l/vPP9fynX/kHEvz7+Vd//HcnGvxHr0JspkvwlO53/J3Ltt43/4d837htxOs7jUeYKWIsa6e3+Xx1Z2fj3bct//vwXd7T+u5yrv1/Pf81+m89/zen/31Hj+Y/WsvHvb1uu0/t/Mlev2/P/aLL+Y7ey8T+SpGXXzgPJZ6fxn8q13634J08lfc34P59Pfj7cSP/M+q8j2fj/uZEYby2xmnwm679o5/X/lVz7B7H+q49/Ne5ury+LbPyPti1Xj//XHXz/X83V6378Qxiy1t+1bPyPtS2X3P99O8d/Olev2/H/VzcbBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgBjKXHgRDFg5nzOB4cDOFCen46HIlmSnPFmUp19t3lEMbT9EI4Gd2pVGdKleL8YnWuXCxVKtXZEC6m+adCX7RcqdaKC6V7lzbb6o/ulktLtZlyqRZCmEjT/x6ONduama8tlO6FEC5v5v0lri7du1taLM7NL706NDQ0FCY3x3AiKr9fKy/WGr03ckOY2qw7EG0ZXJJ9ZXMsR6N3qitLi6VKkn51S51KdbZU2VJnOs37OJyIaksri7OlWrlYqd5p9neQRtPj+OT1t65fHd6WfytqHMf2d1gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/EaPR175JITQ2ziLQwijzR+iVuUfPSmfKz6bfrA+cmZq7eH603blAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgF3bgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwS8eoCQRRGIDfTIokXY6Rakm6tBsCISmyQfAEegwPo0fxEt7BwsLWQgTZRV13YRutvq95MD8z78E8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGCY71E1/n97j0jxtH+MWE5X6/P8t67zz+77D3eYkdv5+au+Tn+YrvKP+mhT5mO6284m0VEbi9aetPfpss9z71x9+9Y3X9P3JVIuIqKs89eUc1EMewsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgwA4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24FgAAAAAQJi/dRR9GwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC/AgAA////gRtE") r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000080)={@private, @remote}, &(0x7f00000001c0)=0xc) write$P9_RLOCK(r0, &(0x7f0000000000)={0x8, 0x35, 0x1, 0x3}, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x12e) truncate(&(0x7f0000000140)='./file1\x00', 0x3f00) truncate(&(0x7f00000000c0)='./file1\x00', 0x3) 11.917504377s ago: executing program 2 (id=421): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x12c, @rand_addr=0x64010102}]}, &(0x7f0000000180)=0x10) 11.838641324s ago: executing program 4 (id=422): r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x4102, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) 11.383134691s ago: executing program 2 (id=423): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KDSETMODE(r0, 0x4b45, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x300, 0x0, 0x101, 0x300}}) 11.35739954s ago: executing program 4 (id=424): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r1, 0x0, 0x2, 0x8) fcntl$setstatus(r1, 0x4, 0x2000) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x1a, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f0000001580)={0x3, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/168, 0xa8}, {0x0}, {&(0x7f0000000280)=""/4086, 0xff6}], &(0x7f0000001540)=[0x2]}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001a80)=[{0x0}], 0x0, 0x1}, 0x20) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) vmsplice(r0, &(0x7f0000000200)=[{&(0x7f0000000300)='yT', 0x2}], 0x1, 0x4) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[], 0x18c6) sendfile(r2, r1, 0x0, 0x8) 9.92240107s ago: executing program 2 (id=427): openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x5, 0x8000, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x5b76c000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffd) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0xffffff1f}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb71658bda99b49720fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) recvmsg$kcm(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/45, 0x2d}, 0x202) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) getdents64(r1, 0x0, 0x0) getdents(r1, &(0x7f0000000200)=""/68, 0x44) 8.055234381s ago: executing program 6 (id=430): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000007200010304000000ffdbdf2507000000", @ANYRES32=0x0], 0x20}, 0x1, 0xf00, 0x0, 0x48000}, 0x0) 8.054706142s ago: executing program 5 (id=431): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r1, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) read(r2, &(0x7f0000000040)=""/148, 0xffffff96) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x14, 0x4, 0xa, 0x201, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) r3 = syz_open_dev$video(&(0x7f0000000080), 0x3, 0x80) ioctl$VIDIOC_QUERYCTRL(r3, 0xc0445624, &(0x7f00000000c0)={0x8000004, 0x101, "679c2e845e3ede57000000000000000000000000000000004000", 0x8, 0x0, 0x0, 0x1, 0x8}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30"], 0xec}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000080)={@link_local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "b33883", 0x10, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], @ndisc_ra={0xc0}}}}}}, 0x0) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$udf(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0xe01, &(0x7f0000000100)={[{@shortad}, {@partition={'partition', 0x3d, 0x5}}, {@noadinicb}, {@gid_ignore}, {@dmode={'dmode', 0x3d, 0x1}}, {@volume={'volume', 0x3d, 0x6}}, {@gid_forget}]}, 0x1, 0x49c, &(0x7f0000000a40)="$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") 7.956789398s ago: executing program 3 (id=432): rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000480)='./file2\x00') mkdir(&(0x7f00000000c0)='./file1\x00', 0x41) 7.65669677s ago: executing program 6 (id=433): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x40}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000680)={0x18, 0x3d, 0x1, 0x70bd23, 0x25dfdbfc, {0x4}, [@nested={0x4, 0x16}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20040000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x240, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f00000006c0)={0x8c, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_PEER_ADDR6={0x14, 0xb, @empty}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_PEER_ADDR6={0x14, 0xb, @mcast2}, @GTPA_TID={0xc, 0x3, 0x10}, @GTPA_PEER_ADDR6={0x14, 0xb, @empty}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000800}, 0x41) r4 = syz_io_uring_setup(0x83f, &(0x7f00000000c0)={0x0, 0xadfa, 0x100, 0x3, 0x8002ab}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x21b, 0x109880}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 7.62855029s ago: executing program 3 (id=434): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000cc0)=@delchain={0x1bc, 0x65, 0x2, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x8}, {0x0, 0x9}, {0x6}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}, @filter_kind_options=@f_route={{0xa}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x6, 0x22}}, @filter_kind_options=@f_route={{0xa}, {0x168, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0x100, 0x6, [@m_vlan={0xfc, 0x13, 0x0, 0x0, {{0x9}, {0x4}, {0xcd, 0x6, "4536d5ba67cb41f3417191a0b4758169ba997e9dbec50e599419b7f290f4ee70efc0bdcb1d84cd2098b9c95fa81553821d25bbee1244fda18d438c3a5d696ee14197d17ea59071f0fd93760930ba453b3e23095f617d12282ec3f8190afeb1ac2e8d254fdac5b6ea11185f9256c3bab37a15cafe5f112d56723f0fb5c49b6449e58fc91a26d527012f701a9cfebef7787238f0d549914d85db8de6456cd08e0cd88f542f218759aebb2337e303783a52c6e45d646c6ef46ddb4aac282b8605eabf8141749876b4d391"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}]}, @TCA_ROUTE4_POLICE={0x4c, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x7ff, 0xffffffffffffffff, 0x3, 0xa, 0x6, {0x7, 0x2, 0x1, 0x9, 0x0, 0x4}, {0x10, 0x2, 0x6, 0xfffe, 0x1, 0xeaa1}, 0x6, 0x200, 0x7}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xa71}]}]}}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x81}, 0x8000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {0x0}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 6.646541813s ago: executing program 6 (id=435): clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3b9ac9ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021500000000c0a01030000000000000000070000090900020073797a31000000000900010073797a30000000002400038020000080080003400000000214000b8010000180080001006475700004000280140000001000010000000000000000000084000a"], 0xd4}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 6.472253426s ago: executing program 3 (id=436): socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) (fail_nth: 2) 6.471488421s ago: executing program 5 (id=437): clock_gettime(0x0, &(0x7f0000000680)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@initdev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@loopback}}, &(0x7f0000000280)=0xe8) mount$nfs4(&(0x7f0000000000)='#! ', &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x100000, &(0x7f00000002c0)={[{}, {'cgroup.controllers\x00'}, {}], [{@fowner_lt={'fowner<', r2}}, {@subj_role={'subj_role', 0x3d, '&#'}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@dont_appraise}, {@flag='rw'}]}) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, 0x0, &(0x7f0000000580)) syz_usb_connect(0x0, 0x4bc, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000845dcf0886124620b705010203010902aa04010003f00109047a0008ff04010009050100100000ff0909050a1000020101070905080e0800"], 0x0) 5.750848686s ago: executing program 7 (id=438): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x1d64, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c250000000000202020"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}, 0xf5ff}], 0xf00, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r2, 0x0, 0x2000, 0x2000, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000180)=""/114, 0x0, 0x0, 0xd8, 0xc4, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52cee499399a00be4b710e9246d7bca28cc8346eb84414e45f3f4633f4acb77bf8cc38c4c16fe035905db79cdc0be634a915662c4cac58ae94706f86ea320f339c21399b5bb7607044916c63c528ab4149718d6215a9a3749113c268e49b2b9dae91ed804e5ac5d4ec7ac9c5fd67a76f9a2b06f7304f6e81221a751008e786e1edde82cf1ecb76cb4cd71cf781ea3a19b917a1e215b1a6c7ee605b32b91eaae38517fde4303d5f2b1e63e9e52ae4b197fd72de1f71801e1f9f1369d1f530", &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee523318878ee704a8d9502b566cad45587cb74ea8259c1c0a926fc09499395b2db5af40bb6f4c526", 0x0, 0x8000}, 0x24) socket$xdp(0x2c, 0x3, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448cb, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) socket$inet(0x2, 0x2, 0x0) write(r5, &(0x7f0000000040)="05000000010000", 0x7) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r6, 0x5) setsockopt$inet6_tcp_int(r6, 0x6, 0xa, &(0x7f0000000000)=0x8, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000001f80)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd600a96460014060000000000000000000000000000000000fe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002b7009f780000"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffa8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 5.679527904s ago: executing program 3 (id=439): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newtaction={0xe68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x7, 0x1, 0x10000000, 0x4, 0xaee}, 0x7, 0x7}, [{0x8, 0xfffff000, 0x2, 0x9, 0x1ff, 0xafe}, {0xe, 0xfffffffe, 0x1, 0x9, 0x4, 0x7}, {0x2, 0xfe73, 0x6, 0x7, 0x2, 0x10000}, {0x4320, 0x3bf6, 0x4, 0x8, 0xffffff9d, 0x4}, {0x6, 0x40, 0x3, 0x986, 0xffff6d72, 0xbf5}, {0x7ff, 0x9ef, 0x1, 0x3, 0x78b, 0x81}, {0x7f, 0x5752, 0x0, 0x9, 0x7}, {0x9, 0xf7b, 0xa000, 0x8, 0x5, 0xa17}, {0x7, 0x200, 0x1000, 0x9, 0x4, 0x1}, {0x7, 0x80000000, 0x40, 0x3, 0xfffffff2, 0x8}, {0x5, 0xfff, 0xe4af, 0x5, 0x8, 0x7}, {0x6, 0xd, 0x230, 0x400, 0x6971, 0xfff}, {0x6, 0x8, 0x6, 0x2, 0x4, 0x3}, {0x81, 0x3, 0x4, 0x7, 0x9, 0xaa7}, {0x5, 0x5, 0x4, 0x80, 0x0, 0x100}, {0x4, 0x8, 0x9, 0x1, 0x2, 0x9}, {0x2690, 0x7ff, 0xd, 0xd, 0x2, 0x722dadd0}, {0x4b, 0x5, 0x9, 0x9, 0x279, 0x3}, {0x7, 0x7b5a, 0x4, 0x0, 0xfffffffb, 0x7fffffff}, {0x0, 0x0, 0x6fbc79d2, 0x9, 0x401, 0x5}, {0x0, 0x527e, 0xc5, 0x4, 0x80, 0x7}, {0x4, 0xd, 0x5, 0xbd52, 0x80, 0xef35}, {0x9, 0x8, 0x4, 0x8001, 0xfffffff8, 0x1}, {0x3, 0x8, 0xd, 0x8, 0x9, 0x400}, {0x8000, 0x74dfe8ce, 0x956b, 0x4, 0x2, 0xfffffff4}, {0xf2, 0x1ee, 0x5, 0xfffffd14, 0x9, 0x40}, {0x0, 0xd, 0x9, 0x8, 0xffffffff, 0x1}, {0xfffff125, 0x1000, 0x1ff, 0xfffffffe, 0x3, 0x1}, {0x0, 0xfffffff9, 0x6, 0x3, 0x7fffffff, 0x2}, {0xec, 0x8, 0x8f1, 0xfffffffb, 0xa, 0x10000}, {0x8, 0x726, 0x6, 0x8, 0xfff, 0x9}, {0x5, 0x9, 0x3, 0x5, 0x3, 0x2}, {0x4, 0x10000, 0x5, 0xfffffffe, 0x7f, 0x6}, {0x400, 0xf, 0xcf, 0xc, 0x4022, 0x4}, {0x4, 0x7, 0x7fffffff, 0xfff, 0x6, 0x1}, {0xffff, 0x3, 0xb5, 0x433, 0x6, 0x6}, {0x10000, 0x0, 0x1ff, 0x9, 0x20, 0x4}, {0x4, 0x9, 0x594, 0xf90, 0xc, 0x3}, {0x0, 0x657a0ecc, 0x10000, 0xa4, 0x0, 0x3}, {0x8, 0xde, 0x2, 0x4, 0x8001, 0x2}, {0x2, 0xe4, 0xe, 0x2, 0x0, 0x9}, {0x3, 0xff, 0x6, 0x7, 0xd7d9, 0x9}, {0x42, 0x2, 0x6, 0x0, 0xae47, 0x5}, {0x6, 0x9c, 0x5, 0x80, 0x7fffffff, 0x5}, {0x7, 0x3, 0x3, 0x9, 0x0, 0x4}, {0x7ff, 0x2, 0x8, 0x8, 0x3de, 0x5}, {0x1, 0x1, 0x4, 0x800, 0x0, 0x8}, {0xff, 0x5, 0x401, 0x4, 0xffffffff, 0x80}, {0x4, 0x0, 0x6, 0x5, 0x9, 0x5}, {0x3, 0x80000001, 0xb, 0x1, 0x80000000}, {0x0, 0xfffffff7, 0x84e5, 0x7f, 0x3a}, {0x8000, 0x7, 0x2, 0xd8, 0xa}, {0x9, 0x1000, 0x8, 0x6, 0x1}, {0x0, 0x9, 0x9, 0xd, 0x7fffffff, 0xfffffc00}, {0x1, 0x0, 0x9, 0x2, 0xc0, 0xfffff44c}, {0x4, 0x2, 0xfffffff3, 0x9, 0xbe, 0x4}, {0x6, 0x3, 0x0, 0x7fff, 0x2, 0x7ff}, {0x400, 0x7, 0x80000000, 0x5, 0xfffffff7, 0x1}, {0x7, 0x100000, 0x200, 0x9, 0xbc, 0xf}, {0x1ff, 0xfffffffc, 0x1, 0x4, 0x1, 0x2}, {0x10000, 0x3, 0x5, 0x111, 0x7, 0x2}, {0x1d, 0x3, 0xda62, 0x4, 0x2, 0x8}, {0xb8000000, 0xfffffff8, 0x7, 0x8, 0x0, 0x49}, {0x8, 0x401, 0x9, 0x332a, 0x1, 0x2}, {0xfa0, 0x6, 0x2, 0x7, 0x8, 0x80}, {0x10001, 0x1, 0x400, 0x9, 0x6, 0xdbce}, {0x1, 0x57f, 0x800, 0xe49, 0x0, 0xa81c}, {0x5, 0x8, 0xa, 0x10, 0x6, 0x8}, {0x7f, 0xf, 0x1, 0x5, 0x401}, {0x7f, 0x4, 0x6, 0x2, 0x3}, {0x625, 0x80000001, 0xfc4, 0xfffffffd, 0x7}, {0x6, 0xfffffffc, 0x95db, 0x3d0b, 0x3, 0x80000001}, {0x7fff, 0x2, 0xffffff7f, 0x383, 0x8, 0x1}, {0x9, 0x4, 0x3, 0x80000000, 0xae, 0x9}, {0x9, 0xffffff80, 0xffff, 0xfff, 0x3, 0x3ff}, {0x47, 0x2, 0xb2f9, 0xbf, 0x1ff, 0x9}, {0xe, 0x310, 0x2, 0xad0, 0x7fffffff, 0x859}, {0x7, 0x6, 0x2, 0x1, 0x6, 0x3}, {0x7bf65384, 0x8, 0xe87, 0x215ac34e, 0x3, 0xfffffffd}, {0x3, 0x2, 0x200, 0x7, 0x2, 0x6}, {0x3, 0x0, 0x3, 0x80000001, 0xc3, 0xa9d}, {0x8, 0x200, 0x8, 0x8, 0xc, 0x2}, {0x4, 0x4, 0x13ca, 0x74, 0x2, 0x1}, {0x2, 0x2, 0x1, 0x7fff, 0x4, 0x3}, {0x80000000, 0x4, 0x899, 0xfff, 0x0, 0x2}, {0x5, 0x0, 0x0, 0x1, 0x3, 0x3}, {0x400, 0x5, 0x3ff, 0x3, 0xd, 0x5}, {0x2, 0x20000000, 0x0, 0x6, 0x81, 0x5}, {0x6, 0x7ff, 0x1, 0x40, 0x9, 0x7}, {0x8, 0x0, 0xd, 0x6, 0x5, 0x3}, {0x3, 0x9, 0x1, 0x3b1c, 0x2, 0x6}, {0x4, 0x49354bbb, 0x2, 0x3, 0x7, 0x9}, {0x5, 0x2, 0x10, 0x8, 0x2, 0x400}, {0xfff, 0x54, 0x8, 0xc, 0x0, 0x6}, {0x401, 0x6, 0xff, 0x6, 0x3, 0x3}, {0x80000000, 0x7d, 0x2, 0xb, 0x81, 0x3}, {0xc45c, 0xa, 0x8, 0x2, 0x4, 0x2}, {0x7, 0x6, 0x86, 0x9, 0x3, 0x8001}, {0x3a, 0x7eb, 0x4, 0x9, 0x9, 0x5}, {0x7011, 0xfff, 0x9, 0x1, 0x8, 0x2}, {0x1000001, 0xff, 0x8, 0x2968, 0x2, 0xfffffffc}, {0x1, 0x9, 0xc402, 0x1, 0x100, 0xc72}, {0xfffffff9, 0x5, 0x81, 0x26, 0x9, 0x1}, {0x7ff, 0x81, 0xfffffff8, 0x401, 0x5, 0x3ff}, {0x6, 0x6, 0xd, 0x0, 0x6e5f, 0x80}, {0x4, 0x7, 0xb, 0x0, 0x0, 0x6}, {0x0, 0x4, 0x81, 0x4, 0x10, 0x4}, {0x7, 0x4, 0x81, 0x6, 0x2f, 0x6}, {0x3, 0xff, 0x2, 0x7f, 0x4, 0x5}, {0x4, 0x8, 0xd, 0x1, 0x5, 0x4}, {0xcab, 0xd, 0x4, 0xf, 0x8, 0x7}, {0x1, 0x2, 0x3, 0x5, 0x7, 0x34}, {0x0, 0x6, 0x10000, 0x8, 0xbb, 0x7fffffff}, {0x2, 0x9, 0x9, 0x9, 0x80, 0x7}, {0x39e3, 0x9, 0x0, 0x0, 0x31, 0x3}, {0xfffffffc, 0x4, 0x0, 0xbe50, 0x40, 0x7}, {0xe, 0x5, 0x7, 0xffffffff, 0xd, 0x1}, {0x5, 0x1000, 0x9, 0x4, 0x24e, 0x1}, {0x7, 0x7, 0x7, 0x80000000, 0x5, 0x5}, {0x7, 0x9, 0x4, 0x8dad, 0x6, 0x7}, {0x1, 0x101, 0x3, 0x7, 0x4, 0x7}, {0x3ff, 0x3, 0x5, 0x2, 0x0, 0x2}, {0x2, 0x5, 0x7, 0x5, 0x2, 0x8}, {0x3c, 0x3409, 0x3, 0x5, 0x997c, 0x2df0}, {0x2, 0x9, 0x10001, 0x8711, 0x800}, {0x81, 0x0, 0x1, 0x1db, 0x0, 0xb}, {0x2, 0x9, 0x2, 0x5, 0x0, 0x7}, {0x8, 0xdfd3, 0x8, 0x2, 0xfffffffe, 0x2}], [{0x4}, {0x1, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {}, {0x6}, {0x2}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x5}, {0x2}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x5}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0xe691a73254f1a9a5, 0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {}, {0x2}, {0x4, 0x1}, {0x0, 0x3}, {0x2, 0x1}, {0x2}, {0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x1}, {}, {0x5}, {0x0, 0x1}, {0x5}, {}, {0x5, 0x2}, {0x5}, {0x5, 0x1}, {}, {0x2}, {}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x2}, {0x2}, {0x3}, {0x5}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {}, {}, {0x0, 0x1}, {}, {0x1, 0x708aee799a2a8f33}, {0x4}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x2}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x1}, {0x3}, {0x2}, {0x4}, {0x4, 0x1}, {0x2}, {0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xe68}, 0x1, 0x0, 0x0, 0x4}, 0x20000015) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 5.443408027s ago: executing program 6 (id=440): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r0, &(0x7f0000000300)="0b8393b6167aa5d73dad0a66a7c9277d481343d806b77c2ca991d28a336cca04457118d40ecc80b9e740666d460730b94c5c0f5ade0536edc69b7b01a28dac44547b236e712cfeef6b66091959ab54409799dc141471577771cafeb2e47e0d8c3a082d43b66e00d8fb10219bab625c4d6b4e53c2426d990a77a751f0683f6525b98b3bacac1e6cbc7bbfb43df09f22499138d888935edf692d52ccdb7341c9e56bf5349fbf8741c3c4659dc7bee069", 0xaf) write$qrtrtun(r0, &(0x7f0000000780)="9d8dfa5e53b6183d874f9e93a18dd009a09582ff682bd07dc3d28385a8f3f9e18418950d4dfe49f13a19e24320444a7d6c121741ba3dc510dba4f980bbd9a315424fa0a1622da79faba79788908354e467989e8458e6f5f76e0e4e781bfca4c928c956321dd514877569805db6602f1584a8bd051f13bad882bea021ffb5ce918a1f87f1d479ec93772d6ecaaf8891f7678f2037ccced78ea5c1aa805f1b9f5a2c39", 0xa2) write$UHID_INPUT(r0, &(0x7f0000001300)={0x8, {"af0014920c989bde943127351c7e048fe805d44569c987d51286ac5e80b0961cfe3629729c82e28c53b31e3ecbb8722bff9c0906027d5cb6fbd929cb4b5e657cc88a443809e6a720828c27b6519e7c18904d67528373733934aa5240afd60544d489e1ec3779ac45095c12c6c5f13c086306dfbbd31926b74150ff2c87db2be1d995e9b3a16fb7360de12618b05d94c291acfcdab84c919de60133f54a0a18d2517c1d0de417ae39fec1c9fa306573205051a9880da1f213b9a27c22b72d42d92b7b260b41bcc1868a0404936774ea5209f02929ec3eef4298818ddb708de6c0e1fda05436037d7d4042d2de3adebc8a62f58ec6ccb4160435c4393ba913250b56ec2fce544a01a5a3ce4363fd497fb256910f31e9416f5b719d64f931bd6d71b54787841b3e49e01fe6ac9598ddb5ef1aeb3d1cabb75845d46806a494b6cf89ec9c8203b92dd0dadc5a3c02545cd005b5f26b7d2b848cb684cb58245d591472d5109e7fbe1175656d729fdd689af57802b33d7d53d427aa57eb0af7a63d9f73be83cd9c12bd06463083b4cc853aad416e9faf484fa069d3b7599b6fc6d94152811403201b91da2547ff6721b0ea237c37464b47b3b4f37384e50ba5773a63356991a5abef659e089cc95e5c3b6d8428115efcf9e89e2743b167d7b9824392d868c159fd1264bea8b9b8b26769d15a27df3af350e2a6e9e37b35c153bf980e8ad15de3b0f3add5f98eb2cbc03eeb2b04e6fb032991d7a88b14c7d2cf2959fc4ed27c4c93c13f5760d0803f10afb91effb45967b4793c58e4bc2e4348c93b4e59f1544a01e89530f6056cda3f972050ae79d9297af71cce0d82c764db2422967f05c9847715c66321e8ab0075a361e8fd78a956074945e687ec1ad01f8dfeb7f3ae2c25daff35617a5d752ad5b019689f10c789d0196f73011f5a4e002aebb676ccb2d8b92ff6c1eb60de10ed0d42f2d19fe96786938eca0fd09a3f16f7b52ef806183282c05ff9fccf96abd096b442c73c494c78c4161ce0599bf6e637664f5dbefa129e69a0d53525d77f871716052385649c1249a402a4a9ecadfd7182a4aba3fc48d76890dfe8a5442ff1b833b95fdb7ae5f052e5c18e9b0ad482ed80c4567f0d0645e6525e3390195b3a4314ab063ffca639d2b181efe15d5bb09e967900fd55ad9db7f6ba99268e0d7e2785c5b14f801b16b6fe9966bb3fa88352bc2ca79aa9a77ec5f9c271dcc62b6124a4d5ed1014fa6eb98521d4be4ca4323311d39e44002e71469326056d98af69fd42eed1dfec48d191587b35e2641abe8c80a2553b92cb43feea49505b5b5ca35dfaf06c693730033ebcad45b6b8026d4722b5c7e13d69269808f438816f77a7b1ed2d31ab44968657e70a51e8d98e520e3628014a09e55f36ca5c4c630d687b20e5a7bdfd6d43613fd3738c8ec1464561586987388885b7a424c949a3110e5de795ffdcf1ef43fb8b5b0364cdb0e9a62c1c6922f08125d456f0ee5d58fa670ff071a8d5b57c06efe30d960f9a67d3dd7dd6ec13c799f9b89d90593ba794c5c582f8bd583af0a59043a1da36cee8e2cc173610960e33300ec48cf7281887ffe66e7ec113a29ed339556d84d638ae9554bb20f2a7695da8bcad10e5f155fe5d54eb511087f7abb4a8ae9e78e233b1e079a44c9cdf2529ed3166c24f80a2bda3b2dfdd2e1c2f650cc35fccf8cb17c03681c6f379f535eeaf46caa1dd95f0b72ea6cf301f2d713844b36c7e90e052528f04a668e1dc5ed11e95bbb86268c712af3f6c77d538c9d3dafeceaacc7ba6b20d9266d75c7470d627725700bfd36a9faf5488532a0871a00e18466f3499e3e3270513168d05f52472045b8558d3fb7880805b6fe3a56b3df9eaea72d147f94ee09e763fcf66d0c71b708fb842bbe619eeeaf483fa717864ab435ca03503285591364727a3615582c80d2023897f7bfdda9b00d095ec11f42482f3851a9232ed09ec6733d54020a9e3b98cb3a014f094e9d968672632a30f967a6d2f00c64fb0aefbeb64510edca5496c9f69379f71412f08fe6afeeb604040a42f00290bc04a40f66f0b84c9c6d7e4d1bc213ed49142215b259be08a0a305c68cbec769ce195ea62b7a2ce632da0a98b469284fd7802bb8c47943ac1c8a7a2b0ee36ed45cde2d13cc00ecc11ca9516d9e917fa28d703566b8d5743c5aba0da662f0446768c6d0df6773d1b0c46dac6a6213aa7b5095a8bd9f34048394a8baac9ec65d740ad8acb8eb683702eaf509c30b547bf355561ca00841efdccd413295a430344d17d2d5f4f435d0a33fafe1b4f6826e9d91436b379cc46039551997e54692487562f65a406b769f2856d37c87a73e2e3738c9afdfa5e0f088bbd2799c7c722c23a7cc37266af557beecb9cc8340bc76ba85a147530f3a9bd8cfe82358c0d799f0687540d463e0f010d1e914f043027284292bf31af75301e27689910393e41f877832797dd7c184249e7b2ec0a79b0decb9a3eead5b3c82ac60fe1485829bf75b8af597b5fd9e47460ebb6d809733eb790027094b019ef2bfb76d75876a5e1e312e80e841c5e074c78b35be6a4070c99372dbb13dc27966a8d448b8e3225b11af907985f3142d41da70a682166814fce9e535cca37058bbb3a02894f6ada82c266e763f431d7e1926da2fc86805b02d6af712c82e7a36e667bd3091661be9cc0cdbd3b3cc690594cf8bac39dd9dac1f883cfb0e500759b0e5dc36721b3ed452addc26d39733a2d76d852d897298009dea9546bae66e9aac7f35277e025d440ca93fdec4bbd58970a130fc79056af96f81b0461ef0e16d4fb12014313438a4bb95b2f9cac98e24a713ed14b539ceddf55e90b6c000044a24be6597e2c5a397a772d7c493ad53a05d6076b584ee7c1615ee7f9de627ac9d7d0d4a12b5a080a9c4977da436704bc9eb9f1d25ba91498e4b575550a69aab83e9157a910c4b2907ea97bcc171dcb7ff6fa982dee16d5c5aaaf93fcc225a6c67c96e54ead190f9c6f949b8025988a46d29c86cf18623882d5aa996a3ece81881ba63e0e7d62b585a179631c7e22f924be7aad5699af389c6651c92848153007d9929683648c8a3fb102a50d9a3e9c83e6cabeae5f97d7faad7a803f8c6dbd9237fa4bec7b33db2cc4db5cd7b3baf1c4f4ddc1f16ec6484cbd1adecab06617045b2d5bac8d1bf97a37ed2780a967a678095a6849cabd87256dbe46f52c960ba8ead52e666a131abfb019d2ac7dd2b055bf91168322b23821a522d241f27a2e7ef892d589a0e55b606167e53b0725a089cae5ef65f02f8a2f32dedb370bf2dc34dac5218be294e755915b399cece7e5c3fa887909961a3d626e4a43bab7edd193a9bc0a7a764640943a635fec7722ff8b3add819b26b78c4e54ff970c15d6b27971cd135d288f081a66e792a8ee5b2d89d5945a99f4216ac21fd9a61e305b4a908f4cbe38e5ccd5eab65f5962877a570524809dffa4ca0ed90d505601d7d244273f20cc47feca7259bd1362e334be459e25a59d4873fc8ede03744c88599a5e5f2a6fb0ca08d085e40c8bd71a0777f7715153e71f4a67f6bb73bbbcd766a9dd4287671dcf6b7daacc4f4b81b32ea0d0381fc32807fe9393249e596d3d5ae4bc5a1cb3e48d63478679eb381fbe8cafd2c6890ba29c1af695f2597c6b472a163b7584dde7327933b9d5e88e0d77e3a3d526a619966dde7f82c7ab7a67a59ded2c880ee0e2f736f054b7d99cc68df48c28d76ab12762c85d07a1f3215d3d4ef2ebd65b0f7eacf62ec12997ccdada731992513263a06e063c27eccfdb3c9d1199136c1a2c3d6b5ea6b2e96c9aa6be3bfbda408b2779ad4eba91809a495c1b872e40d49b0acf4b19b4677e6ea8d07b9a621816c4c5f0e5aa364d4803567da0b2b646604563b31aaa298130576690cbab52bf1ddad7c64a7a416ceb36d6b3202f377ed003e8d74cabd4a6a7be18c95716022cc30c45157d6743785746cf8b0e21ec3208336ab0a43ad9c058fffa3021f84ca8b037dea55254ab944493ca03d025a4b42df3e5b830b81471cddf81fd14aed18e45cfed27b1ef015827942f833a0eee4cc0fcd57f0180f83f32e17d27e4784e42eb1a256404aa6e12f9daabddb907230b20693f3bc74723be6808d95c6463ef7bb6bc4a756fdc805ef4077303e5cd504e6c1754ee8303ee92b94808782984f75c0df49436d3859c092133b0545dac0d8f84fc95a1f0f38e4ecbe3f935d33e86b97bb11ca6f502a602bc7e05b4e6514ddc8ae4d8231874b350b32f96ff6cfbe03f1bf5a0fda73c15eca00afe85c026f5e34e699910ab16502b224b8f383a9a863ca351a1e87c17baadb3f7141aa1295a2a6be4d88d1347da9c356ba9b3bfcc678b58add1b224a0c9b7c3cc4c828abc56acd320e8a8ad22da90a0cf6ae40a471c150581da040297aed0e4889c5963bd8c1415acecbd932f9acda87315e3b2dade276b8324dc7d95141cdd8c4fba82c834a95f9efeb2c74c31e7fd32f96a6a68d9e9942c0bdc55bedd1617e47420877b9f640094a37ceea39656468215ebe789a277f585adc1cc0285b53e33afae1616b0806aeed78b6cc4da54e3bdfa3d49ead4e4fa3623f86a4dfa3042ed403684c62a5d148a30c99c24c3cf9a8858e02800e49e0eed84472a559c9f208f6c3310050e4c5948320b5b4eeefe583bb0bcc0bc01356e76e3465f66a7d0c56ca7abc069db5bd7ad20ec01307f391b5bc890b5034271ee31d5bd374a9422a08ce949667512c8d0bb60eb5d4d22fa0e2a5d172edc7b7386abe63222ef8fc5c676828a1441c5ed19ed5827b0d73d568efc51f46f65ea4f205ac26924d6a7f11477fe23049e0de65bd534c81756556c1cd8bc70b3ce71e4e13d44500773e0767bc735c98f0e1d06dc79e43b946a2faaf698e188cf5909e433edbc546beffcbdea76064ff9d5d56273ca05af42c541b896bc5a942665599c9a8f52db36dbd6d42e8f9bb3446df5f44e3971eb408d0c63381b4aa5997441e01a5eff9fa51d82b7d60d8c3ead784e50b562db074b19e855e8290896b808611c40ed7e0691f758103208900d69cd4c86310318d339eeb473b4bea27be94622560cf35416eea7333bb72110afe202dfcc55c755ed32ea9b4851378b554546b52ebd71b90828733ac3040daf1e3d23bfcadd20bb9248731ab11155aebd259b7e693ebad5d43e6a85f14ea317f31eca905634f9e8d5b1ff73dc5dbd2bbeef6c2965932c885969e00e1939685b472c097b4504c9e6f273e1038045e5ac4010ac232288b77de7d3433a143292f145465b6d1f9020aa4f8405bda4310059b82ad8fd41e698a7824456e11f44e577dc5d5a0eb93b98421a2867c3d40627f9061c1d5689205915c7a91da42348ad3bd12038d84175bddaee423b73c93aebf873c850ef44d66324a80ad0cf268998d71fac6988cb0b1879ebcb6c4c3bce2c45daf73db246bc55fb8221341ef760f5f5264113a437e03cbcf03bb276cdc4100138afc6a1eeb9d90e7f43ce8abbd8be6b9c5b54920f76f07d1557167292feb4c970da3f582d40c0661af8f043e01db8016e2600f655175fa7d705bda3a14d1733ccf6603b7f8709b71f2046211468460791330234fa21f417e6a68cdb1d4496808923a87d02f0ebfb09e102a7c9f7c870c082d6993d10e0de2dbe119ac811848661ab30ab8d7a528acf262bf7d21c2f235e5638be58171b61bed99ac3fef801562aabcf3feff77fe9498d09de3e9c3cf18914392433030595aa31d9c79abc29350a2a2a1d0c2f311246", 0x1000}}, 0x1006) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x3c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x0, 0x0) fcntl$setlease(r4, 0x400, 0x0) mq_unlink(&(0x7f0000000340)='eth0\x00') r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000040)={0xa0000004}) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) poll(&(0x7f00000000c0)=[{r5, 0x1009}], 0x1, 0x8000007) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f00000008c0)=[{0x6}]}) close_range(r6, 0xffffffffffffffff, 0x0) 5.143107469s ago: executing program 2 (id=441): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)="b25b365cfe54a7c6fc7ea6155a71b613b02d1645aab67271075189c3540c4dd19ebfb3c4acf87f2eeb258e62cc6ae96db360d874500cb86b4185ee533bf708", 0x3f}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62071e7ec69f658d5a52d7eb7ea31db43f8cf570f335a80860ac4cc240dc149d8468493db8aad089f590d62e0bcb9d1dcee636ee311ee51839b7201745baef82209b2ab741dc5ea481ae9dcebe39b1101a42a8c82de46107541c240ad0d9ee4a9340cffd72aaea692a60993637c81d23a0d0ebbae66f1eb2771df2482c043d8715ae788b56cc91eaa4d6bbdec82d8f91eb822d0b5f3ebd86", 0xa5}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f0000002b40)='-', 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000000540)="f2e659a0b00d26c2ee15", 0xa}, {&(0x7f0000002e40)="d4", 0x1}], 0x2}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd16e01d56b414499264923beda58d7da0313c1ccafe53965750f25bdaa6b56a87307ec23d48b6f35ce49a813a2bc3cb23fdf42826bdc16788ff466919594de5bf8a1fa5d825947271ade4a95efeb170c", 0x53}, {&(0x7f0000001340)="b8", 0x1}, {&(0x7f0000000500)="01", 0x1}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000140)}, {&(0x7f0000000340)="e4", 0x1}], 0x2}}], 0x4, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) 5.142365288s ago: executing program 3 (id=442): r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000040), 0x0) syz_mount_image$vfat(&(0x7f00000079c0), &(0x7f0000000200)='./file0\x00', 0x410, &(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRESDEC], 0xfd, 0x2b2, &(0x7f0000000680)="$eJzs3M1qE1EUwPFj0o80tU0WRVAQD7pRF0MbX8AgLYgBpTaiLoSpnWjImJRMrETEdufWp3BRXLoT1Bfoxp0Ld9JNFwpuulAjnczYSRxTq00mNP8fhLm5957cO1/hzMDM1s3nD0oFxyiYNYklVGIia7Itkt4peY54y5hbHpGgNTk3/vXDyeu3bl/J5nKz86pz2YULGVWdPPXm0ZOXp9/Vxm+8mnw9KhvpO1tfMp82jm0c3/qx4P96paamLlYqNXPRtnSp6JQM1Wu2ZTqWFsuOVW1pL9iV5eW6muWlieRy1XIcNct1LVl1rVW0Vq2rec8svlDDMHQiKYMmvu+I/Pr8vJntymQQhbGwymo1a8ZDG/PrvZgUAADoLyH5v6e7+f/9oqNFR8t75f8x2Xf+Xx7U/D9g6u+6kf8fJkc3JfQqcCf/T7ac0SJy/nsPZwYAAAAAAAAAAAAAAAAAAAAAAP7HdqORajQaKX/pf0ZFJCEi/veo54nu+OP+9x7z6rT/R3s8Vxy8wIN7CRH72Up+Jd9cNtuzBSmKLZZMD4t8c48HT7M8dzk3O62utLy1V7341ZV83D0+3Hhf2osXkbVA/EwzXlvjhyUZHD8jKZmSj2HjZ0LjR+TsmUC8ISl5f1cqYsuSe1zvxj+dUb10NdcWP+b2AwAAAADgMDD0l9+u3912Q/3XhrS1Nyt37w9Iao/7A23X10NyYii69QYAAAAAYJA49ccl07atKoWWwkUR6dgn6k031icbqouF2M4+6Pnon/1Toz82woEWNh82V82rSXTqHOGfEgAAAICu2E36o54JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACDq8M7wxJeF7fG7/8v7x4LDBfv/RoCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/eNnAAAA//9j2Bbi") syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./bus\x00', 0x1a404ac, &(0x7f0000000280)=ANY=[@ANYRESHEX, @ANYRESOCT, @ANYRES8, @ANYRESOCT, @ANYRES16, @ANYRESHEX], 0x0, 0x0, &(0x7f0000000000)) syz_open_dev$sndctrl(0x0, 0xffffffffffffffff, 0x40000) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000300)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r2) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) socket$inet6(0xa, 0x6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x28a, &(0x7f0000000480)={0x0, 0x4d2, 0x4000, 0x0, 0x1e6}, &(0x7f0000000500), &(0x7f0000000540)) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x164}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) mkdirat(0xffffffffffffffff, &(0x7f0000000200)='./bus/file0\x00', 0x43) renameat2(0xffffffffffffffff, &(0x7f0000000240)='./bus\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x2) 4.82760811s ago: executing program 4 (id=443): r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000040), 0x0) syz_mount_image$vfat(&(0x7f00000079c0), &(0x7f0000000200)='./file0\x00', 0x410, &(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRESDEC], 0xfd, 0x2b2, &(0x7f0000000680)="$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") syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./bus\x00', 0x1a404ac, &(0x7f0000000280)=ANY=[@ANYRESHEX, @ANYRESOCT, @ANYRES8, @ANYRESOCT, @ANYRES16, @ANYRESHEX], 0x0, 0x0, &(0x7f0000000000)) syz_open_dev$sndctrl(0x0, 0xffffffffffffffff, 0x40000) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r1 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000300)) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, 0x1407, 0x100, 0x70bd2d, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r3) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) socket$inet6(0xa, 0x6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x28a, &(0x7f0000000480)={0x0, 0x4d2, 0x4000, 0x0, 0x1e6}, &(0x7f0000000500), &(0x7f0000000540)) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x164}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) mkdirat(0xffffffffffffffff, &(0x7f0000000200)='./bus/file0\x00', 0x43) renameat2(0xffffffffffffffff, &(0x7f0000000240)='./bus\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x2) 4.793509309s ago: executing program 2 (id=444): r0 = syz_usb_connect$uac1(0x0, 0xad, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029b0003010000000904000000010100000a2401000000020102092408000000004c58062404000052072405000053f10b24050000133b9bda531c092405fc0596efc359090401000001020000090401010101020000090501090000000000072501000600000904020000010200000904020101010200000b2402017f0200018b7e8e072401000000000905820910"], 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_io_uring_setup(0x22f, &(0x7f0000000080)={0x0, 0x1, 0x10100, 0x3}, &(0x7f0000000300)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r1, 0x7a98, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f00000008c0)=ANY=[]}, 0x0) syz_usb_control_io(r0, &(0x7f00000021c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="04080406c9c3c5cd41c41a11c50006"], 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r5, 0x408c5333, &(0x7f0000000400)={0x100, 0x4, 0x0, 'queue1\x00', 0x4}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) setreuid(0x0, 0xee00) getsockopt$rose(0xffffffffffffffff, 0x104, 0x5, 0x0, &(0x7f0000002180)) socket(0x1d, 0x5, 0x1004002) pipe(&(0x7f0000000180)) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r8, 0x4b67, &(0x7f0000001ec0)={0x7, &(0x7f0000000100)=[{0x0, 0x1000}, {0x6, 0x72}, {0x6, 0x400}, {0x9}, {0x267, 0x4}, {0x7, 0x2286}, {0x7}]}) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="04050400c9"], 0x7) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) syz_usb_control_io(r0, 0x0, 0x0) 4.792005576s ago: executing program 7 (id=445): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000007200010304000000ffdbdf2507000000"], 0x20}, 0x1, 0xf00, 0x0, 0x48000}, 0x0) 3.979768561s ago: executing program 7 (id=446): rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000480)='./file2\x00') mkdir(&(0x7f00000000c0)='./file1\x00', 0x41) 3.283321004s ago: executing program 6 (id=447): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) (fail_nth: 2) 3.089995437s ago: executing program 3 (id=448): syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) migrate_pages(0x0, 0x4, &(0x7f0000000000)=0x200000007f, &(0x7f0000000300)=0xa) r0 = memfd_secret(0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') sync_file_range(r1, 0xb770, 0x4, 0x4) syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000400)=ANY=[], 0x1, 0xf04, &(0x7f0000000f40)="$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") r2 = syz_open_dev$vbi(&(0x7f0000000140), 0x1, 0x2) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000380)='./bus\x00', 0x8, &(0x7f0000001180)={[{@barrier}, {@autodefrag}, {@ref_verify}, {@max_inline={'max_inline', 0x3d, [0x54]}}, {@clear_cache}, {@commit={'commit', 0x3d, 0x9}}, {@noenospc_debug}, {@barrier}, {@nospace_cache}]}, 0x1, 0x55a3, &(0x7f0000005680)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r3, &(0x7f0000000080)='2', 0x1, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001a0001800000000000000a0080000000", @ANYRESOCT=0x0], 0x24}, 0x1, 0x0, 0x0, 0x20008002}, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file7\x00', 0x5) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2) ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f0000000040)={0x5, @raw_data="bd0aef2d3e67c1d06b522f13ad26a98c6d8a7cdfabd3751acc81b3fc48407aa357e34e0656951bfd76f2518c27e968213613fbd85c81cb55f9979b932d8bcb54715ff51f5c14d95718531d1b2d1928e84fb05e5607ca70da12af99dc3729a3fb03e429acdca48a544a183ae67c9088027232aa2089967ba8ca082e765eb1b4b7ad75e9171588441b94ccd987a53e809881f4869d3bee371f0badc7061d0e018c7a1c5cf400000000ce410a9ddf81e8d271406035007b7af0a4cf9ff8f85a7be994ffe4a29c74f763"}) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140, 0x82) r6 = fanotify_init(0x81, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000240)=0xff) fanotify_mark(r6, 0x4, 0x40001032, r5, 0x0) prlimit64(0x0, 0x7, &(0x7f00000003c0), 0x0) read$FUSE(r6, &(0x7f00000057c0)={0x2020}, 0x2020) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r7, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r7, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) sendto(r7, &(0x7f0000000580)="1db4d479c5faee911d50fbdf12a30d564a0e77ad426077a9f0ca1475183db32443011ff10125d8c755793dc1ae99ad602c7cca2944de604d849a1e3b22905b0d26e9ff30b83f38a29b2530d22bdb6e73ef2a359249c3e29408dd3e0eb42bf3d6ecf7d9f619498b76fd75d31fd01df2", 0x6f, 0x8094, 0x0, 0x0) sendto$inet(r7, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x0, 0x0, 0x0) 3.08290535s ago: executing program 5 (id=449): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000cc0)=@delchain={0x1bc, 0x65, 0x2, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x8}, {0x0, 0x9}, {0x6}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}, @filter_kind_options=@f_route={{0xa}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x6, 0x22}}, @filter_kind_options=@f_route={{0xa}, {0x168, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0x100, 0x6, [@m_vlan={0xfc, 0x13, 0x0, 0x0, {{0x9}, {0x4}, {0xcd, 0x6, "4536d5ba67cb41f3417191a0b4758169ba997e9dbec50e599419b7f290f4ee70efc0bdcb1d84cd2098b9c95fa81553821d25bbee1244fda18d438c3a5d696ee14197d17ea59071f0fd93760930ba453b3e23095f617d12282ec3f8190afeb1ac2e8d254fdac5b6ea11185f9256c3bab37a15cafe5f112d56723f0fb5c49b6449e58fc91a26d527012f701a9cfebef7787238f0d549914d85db8de6456cd08e0cd88f542f218759aebb2337e303783a52c6e45d646c6ef46ddb4aac282b8605eabf8141749876b4d391"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}]}, @TCA_ROUTE4_POLICE={0x4c, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x7ff, 0xffffffffffffffff, 0x3, 0xa, 0x6, {0x7, 0x2, 0x1, 0x9, 0x0, 0x4}, {0x10, 0x2, 0x6, 0xfffe, 0x1, 0xeaa1}, 0x6, 0x200, 0x7}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xa71}]}]}}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x81}, 0x8000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {0x0}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 3.070741506s ago: executing program 7 (id=450): r0 = shmget$private(0x0, 0x3000, 0x40, &(0x7f0000877000/0x3000)=nil) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='contention_end\x00', r1}, 0x18) mremap(&(0x7f000062b000/0x2000)=nil, 0x1d5000, 0x40000000, 0x3, &(0x7f00009f6000/0x3000)=nil) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4c831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) pread64(r2, &(0x7f0000001240)=""/102400, 0x19000, 0x1000004100) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x19a) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)={0x54, r4, 0x1, 0x70bd2d, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x28, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x24, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}]}]}]}]}, 0x54}}, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000040)='cpu.idle\x00', 0x2, 0x0) sendfile(r6, r6, 0x0, 0x93) shmctl$SHM_LOCK(r0, 0xb) 2.457612824s ago: executing program 6 (id=451): personality(0x500006) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000001e00000000000000000000e20c"], &(0x7f0000000300)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) prlimit64(0x0, 0x7, &(0x7f00000003c0)={0x2}, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000200)=0x8000000) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r2, &(0x7f0000000100)="287a830408df3748951ac705be570f8e1e7b2c3180c175a11e7241af7f939b3cd52cb60b46b2d53b3647c79f8cbd85eddc336498e292745f0d2035cbcbaae0a550091bd2b98e35220205b01208bab07ae1891c3cc65378f3f9fbc1823bf2fd37197110b10efd4ac2f08ee6990476811707f6dfc824127bec4913d01741652c34e781ad6a17bf36ae370eb6c6ef72c5e217c958fe51fba0c880502c8998d899ab3bd47900d6355f9875779c1f29dbf25fcbd1bea495e89c201a54be6bff30030b4a4d8508363da44f4285c9ea9a072289bfc66c7e7c081c82357404018546322cf17e087db9e37a43ff3f0582", &(0x7f0000000240)=""/128}, 0x20) 2.456653447s ago: executing program 5 (id=452): r0 = socket$igmp6(0xa, 0x3, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x350, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x100, 0x130, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x3b0) syz_emit_ethernet(0x5e, &(0x7f00000003c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x28, 0x3a, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @private1, @private1}}}}}}, 0x0) 2.33901081s ago: executing program 7 (id=453): ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80085504, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$SIOCGSTAMP(r3, 0x8906, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x600) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) splice(r4, 0x0, r5, 0x0, 0x39000, 0x0) close(0xffffffffffffffff) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r6, 0x0) 2.295865595s ago: executing program 4 (id=454): r0 = gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, 0x0, 0x6048844) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f0000000040)=0x700) waitid(0x11, 0x0, 0x0, 0x8, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') rename(&(0x7f0000000400)='./bus\x00', &(0x7f0000000f00)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) syz_pidfd_open(r0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000280)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x2, 0x0, 0x0, 0x5, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, {[@ssrr={0x89, 0xb, 0xc6, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local]}, @generic={0x83, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0xe02}}}}}}, 0x0) mknod(&(0x7f0000000100)='./file1/file3\x00', 0xc000, 0x7) renameat2(0xffffffffffffff9c, &(0x7f0000002200)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000021c0)='./file1/file3\x00', 0x2) 2.078704788s ago: executing program 5 (id=455): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r1, 0x0, 0x2, 0x8) fcntl$setstatus(r1, 0x4, 0x2000) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x1a, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f0000001580)={0x3, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/168, 0xa8}, {0x0}, {&(0x7f0000000280)=""/4086, 0xff6}], &(0x7f0000001540)=[0x2]}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001a80)=[{0x0}], 0x0, 0x1}, 0x20) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) vmsplice(r0, &(0x7f0000000200)=[{&(0x7f0000000300)='yT', 0x2}], 0x1, 0x4) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[], 0x18c6) sendfile(r2, r1, 0x0, 0x8) 0s ago: executing program 7 (id=456): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)="b25b365cfe54a7c6fc7ea6155a71b613b02d1645aab67271075189c3540c4dd19ebfb3c4acf87f2eeb258e62cc6ae96db360d874500cb86b4185ee533bf708", 0x3f}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62071e7ec69f658d5a52d7eb7ea31db43f8cf570f335a80860ac4cc240dc149d8468493db8aad089f590d62e0bcb9d1dcee636ee311ee51839b7201745baef82209b2ab741dc5ea481ae9dcebe39b1101a42a8c82de46107541c240ad0d9ee4a9340cffd72aaea692a60993637c81d23a0d0ebbae66f1eb2771df2482c043d8715ae788b56cc91eaa4d6bbdec82d8f91eb822d0b5f3ebd86", 0xa5}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f0000002b40)='-', 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000000540)="f2e659a0b00d26c2ee15", 0xa}, {&(0x7f0000002e40)="d4", 0x1}], 0x2}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd16e01d56b414499264923beda58d7da0313c1ccafe53965750f25bdaa6b56a87307ec23d48b6f35ce49a813a2bc3cb23fdf42826bdc16788ff466919594de5bf8a1fa5d825947271ade4a95efeb170c", 0x53}, {&(0x7f0000001340)="b8", 0x1}, {&(0x7f0000000500)="01", 0x1}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000140)}, {&(0x7f0000000340)="e4", 0x1}], 0x2}}], 0x4, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.249359][ T5830] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 153.258996][ T6349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.312700][ T6349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.369938][ T6598] loop4: detected capacity change from 0 to 32768 [ 153.385114][ T6349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.415814][ T6598] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.140 (6598) [ 153.440013][ T5830] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 153.451013][ T6349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.451035][ T6349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.451051][ T6349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.451069][ T6349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.563396][ T6349] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 153.677710][ T6598] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 153.725253][ T48] usb 1-1: USB disconnect, device number 6 [ 153.780192][ T6598] BTRFS info (device loop4): using sha256 (sha256-ni) checksum algorithm [ 153.894346][ T6349] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.909675][ T5830] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 153.919597][ T5830] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 153.930623][ T5830] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.943122][ T6608] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 153.943771][ T5824] ocfs2: Unmounting device (7,3) on (node local) [ 153.954741][ T5830] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 153.973221][ T6349] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.039957][ T5986] udevd[5986]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 154.056106][ T6349] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.056147][ T6349] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.204131][ T6519] hfsplus: b-tree write err: -5, ino 4 [ 154.225148][ T5830] usb 3-1: USB disconnect, device number 6 [ 154.308615][ T6598] BTRFS info (device loop4): rebuilding free space tree [ 154.409719][ T30] audit: type=1326 audit(1747210653.038:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6626 comm="syz.3.144" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb5d658e969 code=0x0 [ 154.534065][ T6598] BTRFS info (device loop4): disabling free space tree [ 154.605061][ T6598] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 154.647325][ T6598] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 154.672880][ T6638] loop0: detected capacity change from 0 to 2048 [ 154.730136][ T6638] EXT4-fs: inline encryption not supported [ 154.770426][ T6127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.779898][ T6638] EXT4-fs: Ignoring removed i_version option [ 154.815365][ T6127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.926709][ T6638] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.932721][ T6598] netlink: 4 bytes leftover after parsing attributes in process `syz.4.140'. [ 154.951893][ T6519] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.971039][ T6519] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.087391][ T6638] EXT4-fs (loop0): shut down requested (2) [ 155.472244][ T5834] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.592522][ T5833] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 155.613346][ T5930] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 155.797888][ T5930] usb 7-1: Using ep0 maxpacket: 16 [ 155.807558][ T6662] bond_slave_0: entered promiscuous mode [ 155.813330][ T6662] bond_slave_1: entered promiscuous mode [ 155.849830][ T5930] usb 7-1: config index 0 descriptor too short (expected 64036, got 36) [ 155.879804][ T6662] vlan2: entered promiscuous mode [ 155.895304][ T5930] usb 7-1: config 0 has an invalid interface number: 0 but max is -1 [ 155.910006][ T6662] bond0: entered promiscuous mode [ 155.960964][ T5930] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 155.986838][ T5930] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.089256][ T6668] loop3: detected capacity change from 0 to 256 [ 156.722089][ T5930] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 156.754794][ T5930] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.842151][ T5930] usb 7-1: config 0 descriptor?? [ 157.338905][ T5930] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 157.377987][ T5930] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 157.427611][ T5930] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 157.464252][ T5930] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 157.470097][ T6681] loop2: detected capacity change from 0 to 512 [ 157.574203][ T6681] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 157.575636][ T5930] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 157.620156][ T5930] mcp2221 0003:04D8:00DD.0003: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0 [ 157.677618][ C1] usb 7-1: input irq status -75 received [ 157.767862][ T6681] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.807197][ T5930] usb 7-1: USB disconnect, device number 2 [ 157.898990][ T6681] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.206348][ T6694] netlink: 12 bytes leftover after parsing attributes in process `syz.3.158'. [ 158.222101][ T6694] vlan2: entered promiscuous mode [ 158.239334][ T6694] bridge0: entered promiscuous mode [ 158.630335][ T5823] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.840980][ T6674] loop5: detected capacity change from 0 to 32768 [ 158.924351][ T6674] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.154 (6674) [ 159.081749][ T6674] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 159.087729][ T6718] loop0: detected capacity change from 0 to 2048 [ 159.129240][ T6674] BTRFS info (device loop5): using crc32c (crc32c-x86_64) checksum algorithm [ 159.175334][ T6718] EXT4-fs: inline encryption not supported [ 159.181360][ T6674] BTRFS info (device loop5): disk space caching is enabled [ 159.220253][ T6718] EXT4-fs: Ignoring removed i_version option [ 159.236471][ T6674] BTRFS warning (device loop5): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 159.340739][ T6718] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.395840][ T30] audit: type=1326 audit(1747210658.008:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6719 comm="syz.3.164" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb5d658e969 code=0x0 [ 159.423657][ T6718] EXT4-fs (loop0): shut down requested (2) [ 159.573082][ T6674] BTRFS info (device loop5): rebuilding free space tree [ 159.755980][ T6674] BTRFS info (device loop5): disabling free space tree [ 159.812717][ T5834] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.850448][ T6674] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 159.896940][ T6674] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 160.145974][ T6754] vlan2: entered promiscuous mode [ 160.198979][ T5826] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 160.367460][ T6758] loop3: detected capacity change from 0 to 128 [ 160.405685][ T6760] netlink: 20 bytes leftover after parsing attributes in process `syz.4.171'. [ 160.416483][ T6758] vfat: Unknown parameter '0000000000000000000318446744073709551615' [ 160.963187][ T6766] netlink: 20 bytes leftover after parsing attributes in process `syz.3.170'. [ 161.462133][ T5926] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 161.535735][ T6772] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 161.590832][ T6774] FAULT_INJECTION: forcing a failure. [ 161.590832][ T6774] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 161.649584][ T6772] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 161.730409][ T6774] CPU: 1 UID: 0 PID: 6774 Comm: syz.2.173 Not tainted 6.15.0-rc6-syzkaller-00051-g405e6c37c89e #0 PREEMPT(full) [ 161.730433][ T6774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 161.730444][ T6774] Call Trace: [ 161.730451][ T6774] [ 161.730458][ T6774] dump_stack_lvl+0x189/0x250 [ 161.730492][ T6774] ? __pfx_dump_stack_lvl+0x10/0x10 [ 161.730518][ T6774] ? __pfx__printk+0x10/0x10 [ 161.730550][ T6774] should_fail_ex+0x414/0x560 [ 161.730574][ T6774] _copy_to_user+0x31/0xb0 [ 161.730602][ T6774] simple_read_from_buffer+0xe1/0x170 [ 161.730629][ T6774] proc_fail_nth_read+0x1df/0x250 [ 161.730658][ T6774] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 161.730687][ T6774] ? srso_alias_return_thunk+0x5/0xfbef5 [ 161.730707][ T6774] ? rw_verify_area+0x258/0x650 [ 161.730727][ T6774] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 161.730755][ T6774] vfs_read+0x200/0x980 [ 161.730781][ T6774] ? __pfx___mutex_lock+0x10/0x10 [ 161.730806][ T6774] ? __pfx_vfs_read+0x10/0x10 [ 161.730828][ T6774] ? __fget_files+0x2a/0x420 [ 161.730856][ T6774] ? srso_alias_return_thunk+0x5/0xfbef5 [ 161.730876][ T6774] ? __fget_files+0x3a0/0x420 [ 161.730899][ T6774] ? __fget_files+0x2a/0x420 [ 161.730926][ T6774] ? srso_alias_return_thunk+0x5/0xfbef5 [ 161.730951][ T6774] ksys_read+0x145/0x250 [ 161.730970][ T6774] ? __pfx_filldir+0x10/0x10 [ 161.730992][ T6774] ? __pfx_ksys_read+0x10/0x10 [ 161.731016][ T6774] ? do_syscall_64+0xba/0x210 [ 161.731044][ T6774] do_syscall_64+0xf6/0x210 [ 161.731068][ T6774] ? srso_alias_return_thunk+0x5/0xfbef5 [ 161.731087][ T6774] ? exc_page_fault+0x91/0x110 [ 161.731111][ T6774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.731128][ T6774] RIP: 0033:0x7f1ed4b8d37c [ 161.731144][ T6774] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 161.731158][ T6774] RSP: 002b:00007f1ed5a2c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 161.731176][ T6774] RAX: ffffffffffffffda RBX: 00007f1ed4db6080 RCX: 00007f1ed4b8d37c [ 161.731189][ T6774] RDX: 000000000000000f RSI: 00007f1ed5a2c0a0 RDI: 0000000000000004 [ 161.731200][ T6774] RBP: 00007f1ed5a2c090 R08: 0000000000000000 R09: 0000000000000000 [ 161.731211][ T6774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.731221][ T6774] R13: 0000000000000000 R14: 00007f1ed4db6080 R15: 00007ffc95c2a0c8 [ 161.731248][ T6774] [ 161.735310][ T5926] usb 7-1: config index 0 descriptor too short (expected 63506, got 18) [ 161.927110][ C1] vkms_vblank_simulate: vblank timer overrun [ 162.101237][ T6776] loop5: detected capacity change from 0 to 64 [ 162.178008][ T5926] usb 7-1: New USB device found, idVendor=0830, idProduct=0060, bcdDevice=13.2b [ 162.208393][ T5926] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.218169][ T5926] usb 7-1: Product: syz [ 162.224303][ T5926] usb 7-1: Manufacturer: syz [ 162.228931][ T5926] usb 7-1: SerialNumber: syz [ 162.462644][ T5926] usb 7-1: palm_os_4_probe - error -32 getting connection info [ 162.583854][ T5926] visor 7-1:1.0: Handspring Visor / Palm OS converter detected [ 163.079291][ T5926] usb 7-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 163.122145][ T6786] FAULT_INJECTION: forcing a failure. [ 163.122145][ T6786] name failslab, interval 1, probability 0, space 0, times 0 [ 163.167235][ T5926] usb 7-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 163.176651][ T6786] CPU: 0 UID: 0 PID: 6786 Comm: syz.2.176 Not tainted 6.15.0-rc6-syzkaller-00051-g405e6c37c89e #0 PREEMPT(full) [ 163.176681][ T6786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 163.176696][ T6786] Call Trace: [ 163.176704][ T6786] [ 163.176714][ T6786] dump_stack_lvl+0x189/0x250 [ 163.176758][ T6786] ? __pfx_dump_stack_lvl+0x10/0x10 [ 163.176795][ T6786] ? __pfx__printk+0x10/0x10 [ 163.176827][ T6786] ? __pfx___might_resched+0x10/0x10 [ 163.176849][ T6786] ? srso_alias_return_thunk+0x5/0xfbef5 [ 163.176886][ T6786] should_fail_ex+0x414/0x560 [ 163.176922][ T6786] should_failslab+0xa8/0x100 [ 163.176958][ T6786] __kmalloc_noprof+0xcb/0x4f0 [ 163.177003][ T6786] ? bpf_test_init+0xc2/0x170 [ 163.177036][ T6786] bpf_test_init+0xc2/0x170 [ 163.177068][ T6786] bpf_prog_test_run_skb+0x1e9/0x1560 [ 163.177095][ T6786] ? __fget_files+0x2a/0x420 [ 163.177132][ T6786] ? __fget_files+0x2a/0x420 [ 163.177164][ T6786] ? srso_alias_return_thunk+0x5/0xfbef5 [ 163.177206][ T6786] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 163.177237][ T6786] bpf_prog_test_run+0x2ac/0x340 [ 163.177276][ T6786] __sys_bpf+0x4a4/0x860 [ 163.177310][ T6786] ? __pfx___sys_bpf+0x10/0x10 [ 163.177358][ T6786] ? ksys_write+0x1f0/0x250 [ 163.177385][ T6786] ? rcu_is_watching+0x15/0xb0 [ 163.177427][ T6786] __x64_sys_bpf+0x7c/0x90 [ 163.177457][ T6786] do_syscall_64+0xf6/0x210 [ 163.177492][ T6786] ? srso_alias_return_thunk+0x5/0xfbef5 [ 163.177521][ T6786] ? exc_page_fault+0x91/0x110 [ 163.177554][ T6786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.177578][ T6786] RIP: 0033:0x7f1ed4b8e969 [ 163.177599][ T6786] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.177618][ T6786] RSP: 002b:00007f1ed5a4d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 163.177644][ T6786] RAX: ffffffffffffffda RBX: 00007f1ed4db5fa0 RCX: 00007f1ed4b8e969 [ 163.177662][ T6786] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 163.177678][ T6786] RBP: 00007f1ed5a4d090 R08: 0000000000000000 R09: 0000000000000000 [ 163.177694][ T6786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.177709][ T6786] R13: 0000000000000000 R14: 00007f1ed4db5fa0 R15: 00007ffc95c2a0c8 [ 163.177745][ T6786] [ 163.535750][ T5926] usb 7-1: USB disconnect, device number 3 [ 163.620086][ T5926] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 163.714893][ T5926] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 163.726684][ T6790] loop0: detected capacity change from 0 to 2048 [ 163.737313][ T6793] loop3: detected capacity change from 0 to 128 [ 163.768624][ T6790] EXT4-fs: inline encryption not supported [ 163.770176][ T5926] visor 7-1:1.0: device disconnected [ 163.792886][ T6793] affs: No valid root block on device loop3 [ 163.803289][ T6790] EXT4-fs: Ignoring removed i_version option [ 163.957253][ T6790] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.030993][ T6793] loop3: detected capacity change from 0 to 4096 [ 164.045238][ T6793] ntfs3(loop3): ino=3, mi_enum_attr [ 164.052828][ T6793] ntfs3(loop3): Failed to load $Volume (-22). [ 164.054657][ T6790] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 164.204316][ T6804] loop4: detected capacity change from 0 to 1024 [ 164.222560][ T6793] raw_sendmsg: syz.3.181 forgot to set AF_INET. Fix it! [ 164.295453][ T30] audit: type=1326 audit(1747210662.928:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6794 comm="syz.2.182" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1ed4b8e969 code=0x0 [ 164.345540][ T6804] netlink: 'syz.4.185': attribute type 2 has an invalid length. [ 164.363574][ T5834] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.789512][ T6827] 9pnet_fd: Insufficient options for proto=fd [ 165.962453][ T30] audit: type=1326 audit(1747210664.328:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6817 comm="syz.0.186" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc7f8d8e969 code=0x0 [ 166.450027][ T6822] loop5: detected capacity change from 0 to 512 [ 166.680138][ T6822] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 166.821587][ T6834] tipc: Can't bind to reserved service type 0 [ 166.845798][ T6822] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 166.847128][ T6820] syzkaller0: entered promiscuous mode [ 166.909159][ T6820] syzkaller0: entered allmulticast mode [ 166.983656][ T6822] EXT4-fs (loop5): 1 truncate cleaned up [ 167.004080][ T6836] loop2: detected capacity change from 0 to 128 [ 167.004657][ T6822] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.025006][ T6836] vfat: Unknown parameter '0000000000000000000318446744073709551615' [ 167.049885][ T5926] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 167.219113][ T5926] usb 4-1: Using ep0 maxpacket: 32 [ 167.241812][ T5926] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 167.267124][ T5926] usb 4-1: config 0 has no interface number 0 [ 167.273683][ T5926] usb 4-1: too many endpoints for config 0 interface 1 altsetting 0: 43, using maximum allowed: 30 [ 167.288746][ T5926] usb 4-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 43 [ 167.360855][ T6842] netlink: 20 bytes leftover after parsing attributes in process `syz.2.193'. [ 167.433222][ T5926] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 167.479812][ T5926] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.502266][ T5926] usb 4-1: Product: syz [ 167.525164][ T5926] usb 4-1: Manufacturer: syz [ 167.535945][ T5926] usb 4-1: SerialNumber: syz [ 168.245078][ T5926] usb 4-1: config 0 descriptor?? [ 168.255637][ T5926] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 168.267579][ T5926] usb 4-1: selecting invalid altsetting 1 [ 168.293257][ T6846] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 168.300222][ T5926] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 168.348833][ T5926] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 168.393994][ T5926] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 168.415023][ T5926] usb 4-1: media controller created [ 168.445599][ T5926] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 168.458760][ T6831] usb 4-1: dvb_usb_ce6230: I2C read not implemented [ 169.269673][ T6852] Falling back ldisc for ttyprintk. [ 169.273295][ T5926] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 169.338222][ T5926] zl10353_read_register: readreg error (reg=127, ret==-71) [ 169.440760][ T5926] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 169.690325][ T5926] usb 4-1: USB disconnect, device number 4 [ 170.054800][ T6865] loop3: detected capacity change from 0 to 2048 [ 170.082613][ T6865] EXT4-fs: inline encryption not supported [ 170.124622][ T6865] EXT4-fs: Ignoring removed i_version option [ 170.214442][ T6865] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.271758][ T6865] EXT4-fs (loop3): shut down requested (2) [ 170.328393][ T5824] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.399680][ T5842] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 170.708984][ T6874] loop3: detected capacity change from 0 to 256 [ 170.716256][ T6874] vfat: Unknown parameter 'ioch|rset' [ 170.952710][ T6877] netlink: 8 bytes leftover after parsing attributes in process `syz.2.201'. [ 171.697012][ T5826] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.943819][ T6884] IPVS: length: 124 != 58111033560 [ 172.042828][ T6892] xt_hashlimit: size too large, truncated to 1048576 [ 172.148761][ T6894] fuse: Bad value for 'fd' [ 172.275506][ T6893] loop2: detected capacity change from 0 to 512 [ 172.414343][ T5926] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 172.607035][ T5926] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 173.115867][ T6893] EXT4-fs (loop2): orphan cleanup on readonly fs [ 173.278232][ T5926] usb 6-1: New USB device found, idVendor=1c4f, idProduct=0059, bcdDevice= 0.00 [ 173.420612][ T6893] EXT4-fs warning (device loop2): ext4_enable_quotas:7170: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 173.439939][ T5926] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.538415][ T6893] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 173.597052][ T6893] EXT4-fs error (device loop2): ext4_ext_check_inode:524: inode #13: comm syz.2.206: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 173.688185][ T6893] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.206: couldn't read orphan inode 13 (err -117) [ 173.766774][ T5926] usb 6-1: config 0 descriptor?? [ 173.781500][ T6899] netlink: 20 bytes leftover after parsing attributes in process `syz.0.207'. [ 173.787209][ T6893] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 174.099549][ T5926] usbhid 6-1:0.0: can't add hid device: -71 [ 174.156191][ T5926] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 174.232444][ T5926] usb 6-1: USB disconnect, device number 7 [ 174.291912][ T6927] tmpfs: Unknown parameter 'grpquota_inode_hardRimit' [ 174.478351][ T5823] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.504664][ T48] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 174.546817][ T6932] netlink: 12 bytes leftover after parsing attributes in process `syz.4.212'. [ 174.609751][ T6934] netlink: 52 bytes leftover after parsing attributes in process `syz.4.212'. [ 174.717286][ T48] usb 7-1: Using ep0 maxpacket: 32 [ 174.796784][ T48] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 174.800378][ T6937] trusted_key: encrypted_key: insufficient parameters specified [ 174.910252][ T6937] loop2: detected capacity change from 0 to 1024 [ 174.945519][ T48] usb 7-1: config 0 has no interface number 0 [ 175.274594][ T48] usb 7-1: too many endpoints for config 0 interface 1 altsetting 0: 43, using maximum allowed: 30 [ 175.298697][ T48] usb 7-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 43 [ 175.461198][ T48] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 175.541105][ T48] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.577126][ T48] usb 7-1: Product: syz [ 175.594927][ T48] usb 7-1: Manufacturer: syz [ 175.620765][ T48] usb 7-1: SerialNumber: syz [ 175.659135][ T5926] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 175.674218][ T48] usb 7-1: config 0 descriptor?? [ 175.705534][ T48] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 175.730417][ T48] usb 7-1: selecting invalid altsetting 1 [ 175.738038][ T48] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 175.774025][ T48] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 175.789368][ T5893] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 175.797099][ T5891] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 175.838445][ T48] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 175.849949][ T5926] usb 3-1: Using ep0 maxpacket: 32 [ 175.878838][ T5926] usb 3-1: unable to get BOS descriptor or descriptor too short [ 175.898747][ T48] usb 7-1: media controller created [ 175.903489][ T6926] usb 7-1: dvb_usb_ce6230: I2C read not implemented [ 175.922588][ T5926] usb 3-1: config 128 has an invalid interface number: 127 but max is 3 [ 175.946478][ T5926] usb 3-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 175.979594][ T5893] usb 6-1: Using ep0 maxpacket: 16 [ 175.989105][ T5891] usb 5-1: Using ep0 maxpacket: 16 [ 176.006978][ T5893] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.009100][ T5926] usb 3-1: config 128 has 2 interfaces, different from the descriptor's value: 4 [ 176.038950][ T5891] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 176.060928][ T48] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 176.069062][ T5893] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.095744][ T5891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.104818][ T5926] usb 3-1: config 128 has no interface number 0 [ 176.125694][ T5893] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 176.129397][ T5926] usb 3-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 1828, setting to 1024 [ 176.138716][ T5891] usb 5-1: Product: syz [ 176.179897][ T48] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 176.184845][ T5893] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 176.203206][ T5891] usb 5-1: Manufacturer: syz [ 176.210685][ T5891] usb 5-1: SerialNumber: syz [ 176.214810][ T6948] syzkaller0: entered promiscuous mode [ 176.215338][ T5893] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.233130][ T48] zl10353_read_register: readreg error (reg=127, ret==-71) [ 176.237381][ T5891] r8152-cfgselector 5-1: Unknown version 0x0000 [ 176.255664][ T5891] r8152-cfgselector 5-1: config 0 descriptor?? [ 176.262153][ T5926] usb 3-1: too many endpoints for config 128 interface 1 altsetting 16: 82, using maximum allowed: 30 [ 176.266065][ T6948] syzkaller0: entered allmulticast mode [ 176.296451][ T48] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 176.314845][ T5893] usb 6-1: config 0 descriptor?? [ 176.357218][ T5926] usb 3-1: config 128 interface 1 altsetting 16 has 0 endpoint descriptors, different from the interface descriptor's value: 82 [ 176.410144][ T5926] usb 3-1: config 128 interface 127 has no altsetting 0 [ 176.428556][ T5926] usb 3-1: config 128 interface 1 has no altsetting 0 [ 176.469299][ T48] usb 7-1: USB disconnect, device number 4 [ 176.481195][ T5926] usb 3-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 176.531209][ T5926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.575919][ T5926] usb 3-1: Product: syz [ 176.593235][ T5926] usb 3-1: Manufacturer: syz [ 176.614078][ T5926] usb 3-1: SerialNumber: syz [ 176.633977][ T6936] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 176.740406][ T6944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.759783][ T6944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.784908][ T5893] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 176.812954][ T5893] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 176.825261][ T5893] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 176.854405][ T5893] microsoft 0003:045E:07DA.0004: No inputs registered, leaving [ 176.875157][ T6955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.922816][ T6955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.932986][ T5893] microsoft 0003:045E:07DA.0004: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 176.986973][ T5893] microsoft 0003:045E:07DA.0004: no inputs found [ 176.995983][ T5893] microsoft 0003:045E:07DA.0004: could not initialize ff, continuing anyway [ 177.080858][ T6957] loop5: detected capacity change from 0 to 1024 [ 177.238023][ T6128] hfsplus: b-tree write err: -5, ino 4 [ 177.946984][ T6962] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 178.145117][ T6966] loop2: detected capacity change from 0 to 512 [ 178.154948][ T5926] usb 3-1: USB disconnect, device number 7 [ 178.207330][ T6966] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 178.258464][ T6966] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 178.328025][ T6966] System zones: 0-1, 15-15, 18-18, 34-34 [ 178.356638][ T5888] udevd[5888]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 178.381052][ T6966] EXT4-fs (loop2): orphan cleanup on readonly fs [ 178.409517][ T6966] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 178.436364][ T6966] EXT4-fs warning (device loop2): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 178.455045][ T6966] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 178.481172][ T6966] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.220: bad orphan inode 16 [ 178.493349][ T6966] ext4_test_bit(bit=15, block=18) = 1 [ 178.512944][ T6966] is_bad_inode(inode)=0 [ 178.526755][ T6966] NEXT_ORPHAN(inode)=0 [ 178.537316][ T6966] max_ino=32 [ 178.551866][ T6966] i_nlink=2 [ 178.576867][ T6966] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 178.721780][ T6966] EXT4-fs error (device loop2): ext4_ext_check_inode:524: inode #13: comm syz.2.220: pblk 0 bad header/extent: invalid magic - magic f300, entries 1, max 4(0), depth 0(0) [ 178.748896][ T6966] EXT4-fs error (device loop2): ext4_ext_check_inode:524: inode #13: comm syz.2.220: pblk 0 bad header/extent: invalid magic - magic f300, entries 1, max 4(0), depth 0(0) [ 179.655158][ T6966] netlink: 60 bytes leftover after parsing attributes in process `syz.2.220'. [ 180.009129][ T5842] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 180.230707][ T6942] net_ratelimit: 135 callbacks suppressed [ 180.230724][ T6942] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 180.295329][ T6953] netlink: 136 bytes leftover after parsing attributes in process `syz.4.214'. [ 180.332129][ T6953] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 180.815222][ T48] usb 6-1: USB disconnect, device number 8 [ 180.824891][ T5823] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.834327][ T5926] r8152-cfgselector 5-1: USB disconnect, device number 4 [ 181.060001][ T6985] netlink: 12 bytes leftover after parsing attributes in process `syz.4.226'. [ 181.093350][ T6977] netlink: 20 bytes leftover after parsing attributes in process `syz.6.223'. [ 181.151797][ T6988] netlink: 52 bytes leftover after parsing attributes in process `syz.4.226'. [ 181.163585][ T6992] x_tables: duplicate entry at hook 1 [ 181.281207][ T6994] FAULT_INJECTION: forcing a failure. [ 181.281207][ T6994] name failslab, interval 1, probability 0, space 0, times 0 [ 181.340533][ T6994] CPU: 0 UID: 0 PID: 6994 Comm: syz.3.229 Not tainted 6.15.0-rc6-syzkaller-00051-g405e6c37c89e #0 PREEMPT(full) [ 181.340566][ T6994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 181.340582][ T6994] Call Trace: [ 181.340591][ T6994] [ 181.340600][ T6994] dump_stack_lvl+0x189/0x250 [ 181.340645][ T6994] ? __pfx_dump_stack_lvl+0x10/0x10 [ 181.340683][ T6994] ? __pfx__printk+0x10/0x10 [ 181.340715][ T6994] ? __pfx___might_resched+0x10/0x10 [ 181.340739][ T6994] ? srso_alias_return_thunk+0x5/0xfbef5 [ 181.340776][ T6994] should_fail_ex+0x414/0x560 [ 181.340808][ T6994] should_failslab+0xa8/0x100 [ 181.340845][ T6994] __kmalloc_cache_noprof+0x70/0x3d0 [ 181.340879][ T6994] ? __se_sys_mount+0x165/0x410 [ 181.340911][ T6994] ? memdup_user+0x99/0xd0 [ 181.340942][ T6994] __se_sys_mount+0x165/0x410 [ 181.340976][ T6994] ? srso_alias_return_thunk+0x5/0xfbef5 [ 181.341012][ T6994] ? __pfx___se_sys_mount+0x10/0x10 [ 181.341051][ T6994] ? srso_alias_return_thunk+0x5/0xfbef5 [ 181.341080][ T6994] ? __x64_sys_mount+0x20/0xc0 [ 181.341118][ T6994] do_syscall_64+0xf6/0x210 [ 181.341153][ T6994] ? srso_alias_return_thunk+0x5/0xfbef5 [ 181.341180][ T6994] ? exc_page_fault+0x91/0x110 [ 181.341213][ T6994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.341237][ T6994] RIP: 0033:0x7fb5d658e969 [ 181.341258][ T6994] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.341280][ T6994] RSP: 002b:00007fb5d74df038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 181.341306][ T6994] RAX: ffffffffffffffda RBX: 00007fb5d67b5fa0 RCX: 00007fb5d658e969 [ 181.341324][ T6994] RDX: 0000200000000100 RSI: 00002000000000c0 RDI: 0000200000000080 [ 181.341342][ T6994] RBP: 00007fb5d74df090 R08: 0000200000000140 R09: 0000000000000000 [ 181.341360][ T6994] R10: 0000000002200840 R11: 0000000000000246 R12: 0000000000000001 [ 181.341376][ T6994] R13: 0000000000000000 R14: 00007fb5d67b5fa0 R15: 00007ffd3f460d38 [ 181.341413][ T6994] [ 181.625305][ T6996] loop2: detected capacity change from 0 to 1024 [ 181.726486][ T7001] loop4: detected capacity change from 0 to 1024 [ 181.735560][ T7001] EXT4-fs: Ignoring removed mblk_io_submit option [ 181.752816][ T6996] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.876878][ T7010] trusted_key: encrypted_key: insufficient parameters specified [ 181.927601][ T7010] loop0: detected capacity change from 0 to 1024 [ 182.385526][ T7001] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.493373][ T7008] tipc: Enabling of bearer rejected, failed to enable media [ 182.612766][ T7020] trusted_key: encrypted_key: insufficient parameters specified [ 182.808773][ T7020] loop5: detected capacity change from 0 to 1024 [ 183.004293][ T48] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 183.094107][ T7019] netlink: 161716 bytes leftover after parsing attributes in process `syz.2.230'. [ 183.212128][ T7019] netlink: zone id is out of range [ 183.279651][ T48] usb 1-1: Using ep0 maxpacket: 32 [ 183.285438][ T7019] netlink: zone id is out of range [ 183.321183][ T7019] netlink: zone id is out of range [ 183.344910][ T7019] netlink: zone id is out of range [ 183.350378][ T7019] netlink: zone id is out of range [ 183.355852][ T7019] netlink: zone id is out of range [ 183.361167][ T7019] netlink: zone id is out of range [ 183.366536][ T7019] netlink: zone id is out of range [ 183.372452][ T48] usb 1-1: unable to get BOS descriptor or descriptor too short [ 183.381329][ T48] usb 1-1: config 128 has an invalid interface number: 127 but max is 3 [ 183.389750][ T48] usb 1-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 183.406805][ T48] usb 1-1: config 128 has 2 interfaces, different from the descriptor's value: 4 [ 183.417524][ T7022] netlink: 4 bytes leftover after parsing attributes in process `syz.4.233'. [ 183.427471][ T48] usb 1-1: config 128 has no interface number 0 [ 183.449133][ T48] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 1828, setting to 1024 [ 183.512395][ T48] usb 1-1: too many endpoints for config 128 interface 1 altsetting 16: 82, using maximum allowed: 30 [ 183.547700][ T5823] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.590905][ T48] usb 1-1: config 128 interface 1 altsetting 16 has 0 endpoint descriptors, different from the interface descriptor's value: 82 [ 183.655713][ T7024] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 183.706833][ T48] usb 1-1: config 128 interface 127 has no altsetting 0 [ 183.769312][ T48] usb 1-1: config 128 interface 1 has no altsetting 0 [ 183.802483][ T48] usb 1-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 183.832720][ T5830] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 183.841689][ T48] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.917401][ T48] usb 1-1: Product: syz [ 183.938624][ T48] usb 1-1: Manufacturer: syz [ 183.979254][ T48] usb 1-1: SerialNumber: syz [ 183.994070][ T7002] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 184.009390][ T5830] usb 6-1: Using ep0 maxpacket: 32 [ 184.027243][ T5830] usb 6-1: unable to get BOS descriptor or descriptor too short [ 184.045221][ T5830] usb 6-1: config 128 has an invalid interface number: 127 but max is 3 [ 184.075302][ T5830] usb 6-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 184.124886][ T5830] usb 6-1: config 128 has 2 interfaces, different from the descriptor's value: 4 [ 184.156737][ T5830] usb 6-1: config 128 has no interface number 0 [ 184.164974][ T5830] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 1828, setting to 1024 [ 184.178659][ T5830] usb 6-1: too many endpoints for config 128 interface 1 altsetting 16: 82, using maximum allowed: 30 [ 184.876509][ T5830] usb 6-1: config 128 interface 1 altsetting 16 has 0 endpoint descriptors, different from the interface descriptor's value: 82 [ 184.947021][ T5830] usb 6-1: config 128 interface 127 has no altsetting 0 [ 184.994020][ T5830] usb 6-1: config 128 interface 1 has no altsetting 0 [ 185.027067][ T5830] usb 6-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 185.052722][ T5830] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.102060][ T5830] usb 6-1: Product: syz [ 185.118489][ T5830] usb 6-1: Manufacturer: syz [ 185.125783][ T5830] usb 6-1: SerialNumber: syz [ 185.177130][ T7015] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 185.530208][ T7046] loop6: detected capacity change from 0 to 64 [ 185.684674][ T5842] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 186.639197][ T7006] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 187.728434][ T48] usb 1-1: USB disconnect, device number 7 [ 187.822407][ T1030] hfsplus: b-tree write err: -5, ino 4 [ 187.996252][ T12] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 188.000599][ T5830] usb 6-1: USB disconnect, device number 9 [ 188.011060][ T5986] udevd[5986]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 188.030921][ T7054] FAULT_INJECTION: forcing a failure. [ 188.030921][ T7054] name failslab, interval 1, probability 0, space 0, times 0 [ 188.030956][ T7054] CPU: 1 UID: 0 PID: 7054 Comm: syz.6.247 Not tainted 6.15.0-rc6-syzkaller-00051-g405e6c37c89e #0 PREEMPT(full) [ 188.030986][ T7054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 188.031001][ T7054] Call Trace: [ 188.031010][ T7054] [ 188.031020][ T7054] dump_stack_lvl+0x189/0x250 [ 188.031065][ T7054] ? __pfx_dump_stack_lvl+0x10/0x10 [ 188.031103][ T7054] ? __pfx__printk+0x10/0x10 [ 188.031135][ T7054] ? __pfx___might_resched+0x10/0x10 [ 188.031166][ T7054] should_fail_ex+0x414/0x560 [ 188.031198][ T7054] ? vmemdup_user+0x26/0xd0 [ 188.031223][ T7054] should_failslab+0xa8/0x100 [ 188.031260][ T7054] __kvmalloc_node_noprof+0x168/0x5e0 [ 188.031296][ T7054] ? vmemdup_user+0x26/0xd0 [ 188.031328][ T7054] vmemdup_user+0x26/0xd0 [ 188.031356][ T7054] map_get_next_key+0x1be/0x5f0 [ 188.031392][ T7054] ? srso_alias_return_thunk+0x5/0xfbef5 [ 188.031421][ T7054] ? security_bpf+0x7e/0x300 [ 188.031457][ T7054] __sys_bpf+0x7bf/0x860 [ 188.031491][ T7054] ? __pfx___sys_bpf+0x10/0x10 [ 188.031540][ T7054] ? ksys_write+0x1f0/0x250 [ 188.031569][ T7054] ? rcu_is_watching+0x15/0xb0 [ 188.031606][ T7054] __x64_sys_bpf+0x7c/0x90 [ 188.031636][ T7054] do_syscall_64+0xf6/0x210 [ 188.031671][ T7054] ? srso_alias_return_thunk+0x5/0xfbef5 [ 188.031699][ T7054] ? exc_page_fault+0x91/0x110 [ 188.031733][ T7054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.031757][ T7054] RIP: 0033:0x7f0e1e78e969 [ 188.031778][ T7054] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 188.031799][ T7054] RSP: 002b:00007f0e1f5a4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 188.031824][ T7054] RAX: ffffffffffffffda RBX: 00007f0e1e9b5fa0 RCX: 00007f0e1e78e969 [ 188.031843][ T7054] RDX: 0000000000000020 RSI: 0000200000000280 RDI: 0000000000000004 [ 188.031859][ T7054] RBP: 00007f0e1f5a4090 R08: 0000000000000000 R09: 0000000000000000 [ 188.031875][ T7054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 188.031889][ T7054] R13: 0000000000000000 R14: 00007f0e1e9b5fa0 R15: 00007fff65843898 [ 188.031927][ T7054] [ 188.183294][ T7052] loop2: detected capacity change from 0 to 8192 [ 188.199074][ T12] EXT4-fs (loop4): This should not happen!! Data will be lost [ 188.199074][ T12] [ 188.209742][ T1030] hfsplus: b-tree write err: -5, ino 4 [ 188.224658][ T12] EXT4-fs (loop4): Total free blocks count 0 [ 188.309107][ T12] EXT4-fs (loop4): Free/Dirty block details [ 188.315139][ T12] EXT4-fs (loop4): free_blocks=68451041280 [ 188.321184][ T12] EXT4-fs (loop4): dirty_blocks=16384 [ 188.327515][ T12] EXT4-fs (loop4): Block reservation details [ 188.364702][ T12] EXT4-fs (loop4): i_reserved_data_blocks=1024 [ 188.414390][ T7052] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 188.502204][ T6636] udevd[6636]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 188.561438][ T13] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 188.643481][ T13] EXT4-fs (loop4): This should not happen!! Data will be lost [ 188.643481][ T13] [ 188.835102][ T7064] tipc: Enabling of bearer rejected, failed to enable media [ 189.108710][ T7074] loop6: detected capacity change from 0 to 63 [ 190.149569][ T7075] syzkaller0: entered promiscuous mode [ 190.155091][ T7075] syzkaller0: entered allmulticast mode [ 190.607534][ T24] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 190.849188][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 190.934554][ T24] usb 7-1: unable to get BOS descriptor or descriptor too short [ 190.993207][ T24] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 191.048695][ T24] usb 7-1: config 1 has no interface number 1 [ 191.091472][ T24] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 191.103389][ T7086] loop3: detected capacity change from 0 to 1024 [ 191.151734][ T24] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 191.176541][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.193208][ T7086] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.297842][ T7090] netlink: 161716 bytes leftover after parsing attributes in process `syz.3.258'. [ 191.309604][ T7090] net_ratelimit: 138 callbacks suppressed [ 191.309666][ T7090] netlink: zone id is out of range [ 191.320586][ T7090] netlink: zone id is out of range [ 191.325711][ T7090] netlink: zone id is out of range [ 191.330898][ T7090] netlink: zone id is out of range [ 191.336083][ T7090] netlink: zone id is out of range [ 191.341294][ T7090] netlink: zone id is out of range [ 191.346436][ T7090] netlink: zone id is out of range [ 191.351709][ T7090] netlink: zone id is out of range [ 191.356857][ T7090] netlink: zone id is out of range [ 191.362126][ T7090] netlink: zone id is out of range [ 192.098953][ T24] usb 7-1: Product: syz [ 192.103236][ T24] usb 7-1: Manufacturer: syz [ 192.107837][ T24] usb 7-1: SerialNumber: syz [ 192.142163][ T7078] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 192.460353][ T5824] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.485526][ T24] usb 7-1: 2:1: invalid format type 0x1001 is detected, processed as PCM [ 192.885616][ T24] usb 7-1: failed to enable PITCH for EP 0x82 [ 192.926966][ T24] usb 7-1: USB disconnect, device number 5 [ 193.070247][ T6636] udevd[6636]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 193.103377][ T7092] netlink: 20 bytes leftover after parsing attributes in process `syz.2.259'. [ 193.228329][ T7097] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 193.286675][ T7100] netlink: 'syz.0.261': attribute type 1 has an invalid length. [ 193.315154][ T7100] netlink: 'syz.0.261': attribute type 2 has an invalid length. [ 193.500107][ T5833] EXT4-fs: 6 callbacks suppressed [ 193.500126][ T5833] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.528763][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.537412][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.679694][ T24] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 193.859635][ T5830] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 193.946669][ T24] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 193.959288][ T24] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 194.023217][ T24] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 194.032732][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 194.044013][ T5830] usb 1-1: config index 0 descriptor too short (expected 63506, got 18) [ 194.067729][ T24] usb 7-1: SerialNumber: syz [ 194.076574][ T5830] usb 1-1: New USB device found, idVendor=0830, idProduct=0060, bcdDevice=13.2b [ 194.086257][ T5830] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.137894][ T5830] usb 1-1: Product: syz [ 194.164409][ T5830] usb 1-1: Manufacturer: syz [ 194.177164][ T5830] usb 1-1: SerialNumber: syz [ 194.323872][ T7103] netlink: 36 bytes leftover after parsing attributes in process `syz.6.262'. [ 194.412775][ T5830] visor 1-1:1.0: Handspring Visor / Palm OS converter detected [ 194.425399][ T5830] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 194.459282][ T5830] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 195.279926][ T5842] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 195.386066][ T5926] usb 1-1: USB disconnect, device number 8 [ 195.395542][ T5926] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 195.449966][ T5926] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 195.477862][ T5926] visor 1-1:1.0: device disconnected [ 196.128707][ T7115] evm: overlay not supported [ 196.176765][ T7115] loop0: detected capacity change from 0 to 4096 [ 196.442876][ T7115] EXT4-fs (loop0): Test dummy encryption mode enabled [ 196.486063][ T7115] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.540614][ T24] usb 7-1: 0:2 : does not exist [ 196.549324][ T24] usb 7-1: unit 5: unexpected type 0x0b [ 196.591575][ T7124] loop4: detected capacity change from 0 to 8 [ 196.618701][ T24] usb 7-1: USB disconnect, device number 6 [ 196.654382][ T7126] loop5: detected capacity change from 0 to 256 [ 196.659072][ T7123] netlink: 16 bytes leftover after parsing attributes in process `syz.4.266'. [ 196.681479][ T7126] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 196.692175][ T7126] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 196.726144][ T7126] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 196.767544][ T7124] unable to read id index table [ 196.952793][ T5888] udevd[5888]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 198.103967][ T7115] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 198.214255][ T7115] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.264: bg 0: block 232: padding at end of block bitmap is not set [ 198.269834][ T7145] loop5: detected capacity change from 0 to 1024 [ 198.422659][ T7145] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.585239][ T7149] loop6: detected capacity change from 0 to 1024 [ 198.711611][ T7150] netlink: 161716 bytes leftover after parsing attributes in process `syz.5.273'. [ 198.818116][ T7150] net_ratelimit: 136 callbacks suppressed [ 198.818161][ T7150] netlink: zone id is out of range [ 198.925386][ T7150] netlink: zone id is out of range [ 198.972899][ T7149] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.989345][ T7150] netlink: zone id is out of range [ 199.091463][ T7150] netlink: zone id is out of range [ 199.096629][ T7150] netlink: zone id is out of range [ 199.148762][ T5834] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.168370][ T7150] netlink: zone id is out of range [ 199.214432][ T7150] netlink: zone id is out of range [ 199.272960][ T7154] netlink: 161716 bytes leftover after parsing attributes in process `syz.6.274'. [ 199.289375][ T7150] netlink: zone id is out of range [ 199.310384][ T7155] netlink: 52 bytes leftover after parsing attributes in process `syz.4.276'. [ 199.330548][ T7150] netlink: zone id is out of range [ 199.361075][ T7154] netlink: zone id is out of range [ 199.519992][ T7131] loop2: detected capacity change from 0 to 32768 [ 199.554950][ T5826] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.614895][ T6349] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.733592][ T7131] syz.2.268: attempt to access beyond end of device [ 199.733592][ T7131] loop14: rw=0, sector=8, nr_sectors = 8 limit=0 [ 199.800452][ T7131] lbmIODone: I/O error in JFS log [ 199.837280][ T7131] *** Log Format Error ! *** [ 199.890811][ T7131] lmLogInit: exit(-22) [ 199.919169][ T24] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 199.939505][ T7131] lmLogOpen: exit(-22) [ 200.006175][ T7138] loop3: detected capacity change from 0 to 32768 [ 200.035749][ T7164] tipc: Enabling of bearer rejected, failed to enable media [ 200.089902][ T30] audit: type=1800 audit(1747210698.708:51): pid=7138 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.270" name="file1" dev="loop3" ino=4 res=0 errno=0 [ 200.129134][ T5893] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 200.141338][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 200.156238][ T24] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 200.208960][ T24] usb 5-1: config 0 has no interface number 0 [ 200.235057][ T24] usb 5-1: too many endpoints for config 0 interface 1 altsetting 0: 43, using maximum allowed: 30 [ 200.285835][ T24] usb 5-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 43 [ 200.291236][ T7162] syzkaller0: entered promiscuous mode [ 200.342530][ T24] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 200.358947][ T5893] usb 6-1: config index 0 descriptor too short (expected 63506, got 18) [ 200.359421][ T7162] syzkaller0: entered allmulticast mode [ 200.378582][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.397331][ T24] usb 5-1: Product: syz [ 200.411881][ T24] usb 5-1: Manufacturer: syz [ 200.416783][ T5893] usb 6-1: New USB device found, idVendor=0830, idProduct=0060, bcdDevice=13.2b [ 200.431645][ T24] usb 5-1: SerialNumber: syz [ 200.434527][ T5893] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.452797][ T24] usb 5-1: config 0 descriptor?? [ 200.474811][ T5893] usb 6-1: Product: syz [ 200.489610][ T5893] usb 6-1: Manufacturer: syz [ 200.492086][ T24] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 200.494198][ T5893] usb 6-1: SerialNumber: syz [ 200.511183][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.529074][ T24] usb 5-1: selecting invalid altsetting 1 [ 200.539656][ T24] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 200.566234][ T24] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 200.598499][ T24] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 200.617705][ T24] usb 5-1: media controller created [ 200.655641][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 200.683519][ T7157] usb 5-1: dvb_usb_ce6230: I2C read not implemented [ 200.786722][ T5893] visor 6-1:1.0: Handspring Visor / Palm OS converter detected [ 200.840001][ T5893] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 200.888679][ T5893] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 200.986631][ T7168] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 201.845975][ T24] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 201.955940][ T24] zl10353_read_register: readreg error (reg=127, ret==-110) [ 202.224527][ T5830] usb 6-1: USB disconnect, device number 10 [ 202.265780][ T5830] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 202.307079][ T5830] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 202.337211][ T5830] visor 6-1:1.0: device disconnected [ 202.676470][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 202.687054][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 202.695701][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 202.726513][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 202.744746][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 202.868789][ T7175] fuse: Bad value for 'fd' [ 203.039733][ T5842] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 203.123773][ T24] usb 5-1: USB disconnect, device number 5 [ 203.322232][ T5830] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 203.482984][ T5830] usb 4-1: Using ep0 maxpacket: 32 [ 203.497745][ T5830] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 203.515286][ T5830] usb 4-1: config 0 has no interface number 0 [ 203.529876][ T5830] usb 4-1: too many endpoints for config 0 interface 1 altsetting 0: 43, using maximum allowed: 30 [ 203.552233][ T5830] usb 4-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 43 [ 203.586604][ T5830] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 203.609137][ T5830] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.617198][ T5830] usb 4-1: Product: syz [ 203.633275][ T5830] usb 4-1: Manufacturer: syz [ 203.648927][ T5830] usb 4-1: SerialNumber: syz [ 203.658145][ T5830] usb 4-1: config 0 descriptor?? [ 203.673087][ T5830] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 203.689069][ T5830] usb 4-1: selecting invalid altsetting 1 [ 203.697352][ T5830] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 203.729982][ T5830] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 203.745779][ T5830] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 203.771560][ T5830] usb 4-1: media controller created [ 203.796326][ T5830] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 204.017570][ T7183] loop4: detected capacity change from 0 to 32768 [ 204.140415][ T7183] JBD2: Ignoring recovery information on journal [ 204.254429][ T7183] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 204.477447][ T5833] ocfs2: Unmounting device (7,4) on (node local) [ 204.799444][ T5842] Bluetooth: hci4: command tx timeout [ 204.832226][ T7184] loop3: detected capacity change from 0 to 40427 [ 204.844526][ T7184] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 204.851954][ T7184] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 204.862588][ T7184] F2FS-fs (loop3): build fault injection attr: rate: 17008, type: 0x3fffff [ 204.879519][ T5830] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 204.887228][ T5830] zl10353_read_register: readreg error (reg=127, ret==-110) [ 204.899123][ T7179] usb 4-1: dvb_usb_ce6230: I2C read not implemented [ 204.908365][ T5830] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 204.974440][ T5830] usb 4-1: USB disconnect, device number 5 [ 205.481764][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.791901][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.918859][ T7202] loop3: detected capacity change from 0 to 1024 [ 205.962589][ T7208] netlink: 'syz.4.294': attribute type 1 has an invalid length. [ 206.031467][ T7208] loop4: detected capacity change from 0 to 1024 [ 206.038851][ T7208] hfsplus: Unknown parameter 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 206.115192][ T7206] syzkaller0: entered promiscuous mode [ 206.156076][ T7206] syzkaller0: entered allmulticast mode [ 206.347618][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.394174][ T7216] loop5: detected capacity change from 0 to 512 [ 206.416117][ T7216] EXT4-fs: Ignoring removed i_version option [ 206.449207][ T7216] EXT4-fs: Ignoring removed mblk_io_submit option [ 206.509375][ T7216] EXT4-fs: Ignoring removed i_version option [ 206.534898][ T7216] EXT4-fs (loop5): invalid first ino: 0 [ 206.889380][ T5842] Bluetooth: hci4: command tx timeout [ 208.008703][ T7221] team_slave_0: entered promiscuous mode [ 208.014573][ T7221] team_slave_1: entered promiscuous mode [ 208.032692][ T7221] vlan0: entered promiscuous mode [ 208.037766][ T7221] team0: entered promiscuous mode [ 208.150630][ T7234] loop2: detected capacity change from 0 to 512 [ 208.164696][ T7227] tipc: Enabling of bearer rejected, failed to enable media [ 208.190945][ T7234] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 208.287929][ T7234] EXT4-fs (loop2): 1 truncate cleaned up [ 208.336133][ T7236] loop6: detected capacity change from 0 to 2048 [ 208.356415][ T7234] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.570186][ T7246] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 208.650333][ T7236] FAULT_INJECTION: forcing a failure. [ 208.650333][ T7236] name failslab, interval 1, probability 0, space 0, times 0 [ 208.678463][ T7236] CPU: 1 UID: 0 PID: 7236 Comm: syz.6.304 Not tainted 6.15.0-rc6-syzkaller-00051-g405e6c37c89e #0 PREEMPT(full) [ 208.678498][ T7236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 208.678509][ T7236] Call Trace: [ 208.678517][ T7236] [ 208.678525][ T7236] dump_stack_lvl+0x189/0x250 [ 208.678559][ T7236] ? __pfx_dump_stack_lvl+0x10/0x10 [ 208.678586][ T7236] ? __pfx__printk+0x10/0x10 [ 208.678610][ T7236] ? __pfx___might_resched+0x10/0x10 [ 208.678633][ T7236] should_fail_ex+0x414/0x560 [ 208.678657][ T7236] should_failslab+0xa8/0x100 [ 208.678684][ T7236] kmem_cache_alloc_noprof+0x73/0x3c0 [ 208.678708][ T7236] ? security_inode_alloc+0x39/0x330 [ 208.678735][ T7236] security_inode_alloc+0x39/0x330 [ 208.678761][ T7236] inode_init_always_gfp+0x9ed/0xdc0 [ 208.678791][ T7236] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 208.678819][ T7236] alloc_inode+0x82/0x1b0 [ 208.678843][ T7236] new_inode+0x22/0x170 [ 208.678871][ T7236] shmem_get_inode+0x346/0xe90 [ 208.678899][ T7236] ? _raw_spin_unlock+0x28/0x50 [ 208.678926][ T7236] __shmem_file_setup+0x16d/0x2d0 [ 208.678953][ T7236] __se_sys_memfd_create+0x308/0x780 [ 208.678975][ T7236] do_syscall_64+0xf6/0x210 [ 208.678999][ T7236] ? srso_alias_return_thunk+0x5/0xfbef5 [ 208.679032][ T7236] ? exc_page_fault+0x91/0x110 [ 208.679065][ T7236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.679088][ T7236] RIP: 0033:0x7f0e1e78e969 [ 208.679109][ T7236] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.679130][ T7236] RSP: 002b:00007f0e1f5a3e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 208.679155][ T7236] RAX: ffffffffffffffda RBX: 000000000000056f RCX: 00007f0e1e78e969 [ 208.679173][ T7236] RDX: 00007f0e1f5a3ef0 RSI: 0000000000000000 RDI: 00007f0e1e811444 [ 208.679190][ T7236] RBP: 0000200000003780 R08: 00007f0e1f5a3bb7 R09: 00007f0e1f5a3e40 [ 208.679207][ T7236] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000c80 [ 208.679229][ T7236] R13: 00007f0e1f5a3ef0 R14: 00007f0e1f5a3eb0 R15: 0000200000000340 [ 208.679267][ T7236] [ 209.061708][ T5842] Bluetooth: hci4: command tx timeout [ 209.062272][ T7241] loop4: detected capacity change from 0 to 32768 [ 209.152105][ T7245] trusted_key: encrypted_key: insufficient parameters specified [ 209.181137][ T7245] loop5: detected capacity change from 0 to 1024 [ 209.221151][ T7241] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 209.571937][ T7254] netlink: 40 bytes leftover after parsing attributes in process `syz.4.305'. [ 210.169292][ T5926] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 210.379148][ T5926] usb 6-1: Using ep0 maxpacket: 32 [ 210.401535][ T5926] usb 6-1: unable to get BOS descriptor or descriptor too short [ 210.540565][ T12] bridge_slave_1: left allmulticast mode [ 210.559893][ T5926] usb 6-1: config 128 has an invalid interface number: 127 but max is 3 [ 210.568278][ T5926] usb 6-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 210.588823][ T12] bridge_slave_1: left promiscuous mode [ 210.628825][ T5926] usb 6-1: config 128 has 2 interfaces, different from the descriptor's value: 4 [ 210.640018][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.669575][ T5833] ocfs2: Unmounting device (7,4) on (node local) [ 210.681905][ T5926] usb 6-1: config 128 has no interface number 0 [ 210.688274][ T5926] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 1828, setting to 1024 [ 210.939108][ T5926] usb 6-1: too many endpoints for config 128 interface 1 altsetting 16: 82, using maximum allowed: 30 [ 210.954474][ T12] bridge_slave_0: left allmulticast mode [ 210.959246][ T5926] usb 6-1: config 128 interface 1 altsetting 16 has 0 endpoint descriptors, different from the interface descriptor's value: 82 [ 210.988919][ T7266] FAULT_INJECTION: forcing a failure. [ 210.988919][ T7266] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 210.999086][ T5926] usb 6-1: config 128 interface 127 has no altsetting 0 [ 211.017545][ T5926] usb 6-1: config 128 interface 1 has no altsetting 0 [ 211.183529][ T7267] loop3: detected capacity change from 0 to 8 [ 211.929069][ T7266] CPU: 0 UID: 0 PID: 7266 Comm: syz.6.311 Not tainted 6.15.0-rc6-syzkaller-00051-g405e6c37c89e #0 PREEMPT(full) [ 211.929105][ T7266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 211.929120][ T7266] Call Trace: [ 211.929130][ T7266] [ 211.929140][ T7266] dump_stack_lvl+0x189/0x250 [ 211.929182][ T7266] ? srso_alias_return_thunk+0x5/0xfbef5 [ 211.929215][ T7266] ? __pfx_dump_stack_lvl+0x10/0x10 [ 211.929280][ T7266] ? __pfx__printk+0x10/0x10 [ 211.929308][ T7266] ? srso_alias_return_thunk+0x5/0xfbef5 [ 211.929349][ T7266] should_fail_ex+0x414/0x560 [ 211.929382][ T7266] prepare_alloc_pages+0x213/0x610 [ 211.929433][ T7266] __alloc_frozen_pages_noprof+0x123/0x370 [ 211.929463][ T7266] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 211.929492][ T7266] ? srso_alias_return_thunk+0x5/0xfbef5 [ 211.929527][ T7266] ? policy_nodemask+0x27c/0x720 [ 211.929559][ T7266] ? srso_alias_return_thunk+0x5/0xfbef5 [ 211.929587][ T7266] ? __lock_acquire+0xaac/0xd20 [ 211.929628][ T7266] alloc_pages_mpol+0x232/0x4a0 [ 211.929669][ T7266] vma_alloc_folio_noprof+0xe4/0x200 [ 211.929708][ T7266] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 211.929751][ T7266] ? srso_alias_return_thunk+0x5/0xfbef5 [ 211.929786][ T7266] folio_prealloc+0x30/0x180 [ 211.929825][ T7266] __handle_mm_fault+0x2b28/0x5380 [ 211.929856][ T7266] ? mt_find+0x15c/0x5f0 [ 211.929912][ T7266] ? __pfx___handle_mm_fault+0x10/0x10 [ 211.929965][ T7266] ? srso_alias_return_thunk+0x5/0xfbef5 [ 211.929993][ T7266] ? find_vma+0xe7/0x160 [ 211.930029][ T7266] ? __pfx_find_vma+0x10/0x10 [ 211.930067][ T7266] handle_mm_fault+0x3f6/0x8c0 [ 211.930113][ T7266] do_user_addr_fault+0x764/0x1390 [ 211.930160][ T7266] exc_page_fault+0x68/0x110 [ 211.930194][ T7266] asm_exc_page_fault+0x26/0x30 [ 211.930218][ T7266] RIP: 0010:_copy_to_iter+0x47f/0x15a0 [ 211.930254][ T7266] Code: 00 00 e8 64 9b 09 fd 48 8b 5c 24 40 48 89 df 4c 8b 7c 24 30 44 89 fe e8 6f 96 6b fd 0f 01 cb 48 8b 7c 24 28 4c 89 f9 48 89 de a4 0f 1f 00 0f 01 ca 4c 8b 74 24 08 49 29 cf 4d 01 fd 48 8b 44 [ 211.930276][ T7266] RSP: 0018:ffffc90004267920 EFLAGS: 00050256 [ 211.930297][ T7266] RAX: ffffffff84b65601 RBX: ffff888057ad4000 RCX: 0000000000000027 [ 211.930316][ T7266] RDX: 0000000000000000 RSI: ffff888057ad4000 RDI: 0000200000001f40 [ 211.930334][ T7266] RBP: ffffc90004267a70 R08: ffff888057ad4026 R09: 1ffff1100af5a804 [ 211.930353][ T7266] R10: dffffc0000000000 R11: ffffed100af5a805 R12: dffffc0000000000 [ 211.930372][ T7266] R13: 0000000000000000 R14: 00007ffffffff000 R15: 0000000000000027 [ 211.930398][ T7266] ? _copy_to_iter+0x3d1/0x15a0 [ 211.930455][ T7266] ? __pfx__copy_to_iter+0x10/0x10 [ 211.930484][ T7266] ? srso_alias_return_thunk+0x5/0xfbef5 [ 211.930516][ T7266] ? srso_alias_return_thunk+0x5/0xfbef5 [ 211.930544][ T7266] ? fput+0xa0/0xd0 [ 211.930580][ T7266] ? __pfx_sock_show_fdinfo+0x10/0x10 [ 211.930604][ T7266] ? srso_alias_return_thunk+0x5/0xfbef5 [ 211.930632][ T7266] ? seq_show+0x5f5/0x750 [ 211.930673][ T7266] seq_read_iter+0xbeb/0xe10 [ 211.930726][ T7266] seq_read+0x2e2/0x3d0 [ 211.930763][ T7266] ? __pfx_seq_read+0x10/0x10 [ 211.930805][ T7266] ? srso_alias_return_thunk+0x5/0xfbef5 [ 211.930833][ T7266] ? rw_verify_area+0x258/0x650 [ 211.930860][ T7266] ? __pfx_seq_read+0x10/0x10 [ 211.930888][ T7266] vfs_read+0x200/0x980 [ 211.930924][ T7266] ? __pfx___mutex_lock+0x10/0x10 [ 211.930958][ T7266] ? __pfx_vfs_read+0x10/0x10 [ 211.930990][ T7266] ? __fget_files+0x2a/0x420 [ 211.931026][ T7266] ? srso_alias_return_thunk+0x5/0xfbef5 [ 211.931049][ T7266] ? __fget_files+0x3a0/0x420 [ 211.931077][ T7266] ? __fget_files+0x2a/0x420 [ 211.931112][ T7266] ? srso_alias_return_thunk+0x5/0xfbef5 [ 211.931141][ T7266] ksys_read+0x145/0x250 [ 211.931165][ T7266] ? rcu_is_watching+0x15/0xb0 [ 211.931185][ T7266] ? __pfx_ksys_read+0x10/0x10 [ 211.931214][ T7266] ? do_syscall_64+0xba/0x210 [ 211.931254][ T7266] do_syscall_64+0xf6/0x210 [ 211.931281][ T7266] ? srso_alias_return_thunk+0x5/0xfbef5 [ 211.931304][ T7266] ? exc_page_fault+0x91/0x110 [ 211.931332][ T7266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.931352][ T7266] RIP: 0033:0x7f0e1e78e969 [ 211.931372][ T7266] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.931390][ T7266] RSP: 002b:00007f0e1f5a4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 211.931412][ T7266] RAX: ffffffffffffffda RBX: 00007f0e1e9b5fa0 RCX: 00007f0e1e78e969 [ 211.931428][ T7266] RDX: 0000000000002020 RSI: 0000200000001f40 RDI: 0000000000000005 [ 211.931443][ T7266] RBP: 00007f0e1f5a4090 R08: 0000000000000000 R09: 0000000000000000 [ 211.931458][ T7266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.931470][ T7266] R13: 0000000000000000 R14: 00007f0e1e9b5fa0 R15: 00007fff65843898 [ 211.931505][ T7266] [ 211.935211][ T5831] Bluetooth: hci1: command 0x0406 tx timeout [ 211.938847][ T5131] Bluetooth: hci3: command 0x0406 tx timeout [ 211.947215][ T56] Bluetooth: hci2: command 0x0406 tx timeout [ 211.957351][ T5131] Bluetooth: hci5: command 0x0406 tx timeout [ 211.960738][ T5831] Bluetooth: hci4: command tx timeout [ 211.981836][ T7267] SQUASHFS error: zlib decompression failed, data probably corrupt [ 212.447434][ T7267] SQUASHFS error: Failed to read block 0x9b: -5 [ 212.453708][ T7267] SQUASHFS error: Unable to read metadata cache entry [99] [ 212.460926][ T7267] SQUASHFS error: Unable to read inode 0x127 [ 212.505411][ T12] bridge_slave_0: left promiscuous mode [ 212.538035][ T878] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 212.574865][ T5926] usb 6-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 212.580853][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.611210][ T5926] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.729329][ T878] usb 5-1: Using ep0 maxpacket: 32 [ 212.765131][ T878] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 212.818201][ T5926] usb 6-1: can't set config #128, error -71 [ 212.825921][ T5926] usb 6-1: USB disconnect, device number 11 [ 212.899497][ T878] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 212.978514][ T878] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 213.034357][ T6023] hfsplus: b-tree write err: -5, ino 4 [ 213.052575][ T878] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 213.079073][ T878] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 213.121802][ T878] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 213.141884][ T878] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.144999][ T5823] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.158460][ T878] usb 5-1: Product: syz [ 213.184784][ T878] usb 5-1: Manufacturer: syz [ 213.216700][ T878] usb 5-1: SerialNumber: syz [ 213.246769][ T7273] loop6: detected capacity change from 0 to 256 [ 213.254330][ T878] usb 5-1: config 0 descriptor?? [ 213.290451][ T7273] exfat: Deprecated parameter 'namecase' [ 213.333188][ T7273] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 213.916100][ T878] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 213.942149][ T878] input input12: Device does not respond to id packet M [ 213.960751][ T878] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 213.966786][ T878] input input12: Device does not respond to id packet P [ 213.990255][ T878] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 214.029104][ T878] input input12: Device does not respond to id packet B [ 214.049163][ T878] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 214.055241][ T878] input input12: Device does not respond to id packet N [ 214.087925][ T878] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 214.100673][ T878] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 214.115996][ T878] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 214.128067][ T878] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 214.177698][ T878] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input12 [ 214.238566][ T7277] loop2: detected capacity change from 0 to 32768 [ 214.247976][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 214.265851][ T878] usb 5-1: USB disconnect, device number 6 [ 214.272137][ T12] bond_slave_0: left promiscuous mode [ 214.284704][ T7277] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.315 (7277) [ 214.311249][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 214.349482][ T12] bond_slave_1: left promiscuous mode [ 214.382478][ T12] bond0 (unregistering): Released all slaves [ 214.403057][ T7277] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 214.460555][ T7277] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 214.509595][ T7277] BTRFS info (device loop2): disk space caching is enabled [ 214.516864][ T7277] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 214.546495][ T7285] tipc: Enabling of bearer rejected, failed to enable media [ 214.834843][ T7286] syzkaller0: entered promiscuous mode [ 214.840675][ T7286] syzkaller0: entered allmulticast mode [ 214.845251][ T7310] netlink: 52 bytes leftover after parsing attributes in process `syz.6.319'. [ 214.858010][ T7172] chnl_net:caif_netlink_parms(): no params data found [ 214.866000][ T7277] BTRFS info (device loop2): rebuilding free space tree [ 214.950741][ T7277] BTRFS info (device loop2): disabling free space tree [ 214.957798][ T7277] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 214.998926][ T7277] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 215.132622][ T7277] BTRFS error (device loop2): balance: mixed groups data and metadata options must be the same [ 215.232430][ T7321] netlink: 20 bytes leftover after parsing attributes in process `syz.6.322'. [ 215.271901][ T5823] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 216.909176][ T878] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 217.040393][ T878] usb 3-1: device descriptor read/64, error -71 [ 217.280815][ T878] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 217.419126][ T878] usb 3-1: device descriptor read/64, error -71 [ 217.530316][ T878] usb usb3-port1: attempt power cycle [ 217.899377][ T878] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 217.943417][ T878] usb 3-1: device descriptor read/8, error -71 [ 218.194382][ T7355] loop4: detected capacity change from 0 to 2048 [ 218.200948][ T878] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 218.209188][ T7350] netlink: 224 bytes leftover after parsing attributes in process `syz.6.328'. [ 218.218158][ T7350] netlink: 224 bytes leftover after parsing attributes in process `syz.6.328'. [ 218.752993][ T7350] netlink: 38 bytes leftover after parsing attributes in process `syz.6.328'. [ 218.767618][ T878] usb 3-1: device descriptor read/8, error -71 [ 218.857333][ T7355] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 218.919452][ T878] usb usb3-port1: unable to enumerate USB device [ 218.932520][ T7355] FAULT_INJECTION: forcing a failure. [ 218.932520][ T7355] name failslab, interval 1, probability 0, space 0, times 0 [ 218.997664][ T7355] CPU: 1 UID: 0 PID: 7355 Comm: syz.4.329 Not tainted 6.15.0-rc6-syzkaller-00051-g405e6c37c89e #0 PREEMPT(full) [ 218.997699][ T7355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 218.997715][ T7355] Call Trace: [ 218.997723][ T7355] [ 218.997734][ T7355] dump_stack_lvl+0x189/0x250 [ 218.997780][ T7355] ? __pfx_dump_stack_lvl+0x10/0x10 [ 218.997816][ T7355] ? __pfx__printk+0x10/0x10 [ 218.997849][ T7355] ? __pfx___might_resched+0x10/0x10 [ 218.997873][ T7355] ? srso_alias_return_thunk+0x5/0xfbef5 [ 218.997910][ T7355] should_fail_ex+0x414/0x560 [ 218.997943][ T7355] should_failslab+0xa8/0x100 [ 218.997980][ T7355] kmem_cache_alloc_lru_noprof+0x78/0x3d0 [ 218.998014][ T7355] ? __d_alloc+0x31/0x6f0 [ 218.998042][ T7355] __d_alloc+0x31/0x6f0 [ 218.998071][ T7355] d_alloc+0x4b/0x190 [ 218.998094][ T7355] ? lookup_one_qstr_excl_raw+0xb4/0x280 [ 218.998138][ T7355] lookup_one_qstr_excl_raw+0xc8/0x280 [ 218.998182][ T7355] do_renameat2+0x401/0xc50 [ 218.998243][ T7355] ? __pfx_do_renameat2+0x10/0x10 [ 218.998272][ T7355] ? srso_alias_return_thunk+0x5/0xfbef5 [ 218.998321][ T7355] ? srso_alias_return_thunk+0x5/0xfbef5 [ 218.998349][ T7355] ? getname_flags+0x1e5/0x540 [ 218.998390][ T7355] __x64_sys_rename+0x82/0x90 [ 218.998423][ T7355] do_syscall_64+0xf6/0x210 [ 218.998457][ T7355] ? srso_alias_return_thunk+0x5/0xfbef5 [ 218.998485][ T7355] ? exc_page_fault+0x91/0x110 [ 218.998518][ T7355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.998542][ T7355] RIP: 0033:0x7fa54fd8e969 [ 218.998563][ T7355] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 218.998584][ T7355] RSP: 002b:00007fa550cc2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 218.998610][ T7355] RAX: ffffffffffffffda RBX: 00007fa54ffb5fa0 RCX: 00007fa54fd8e969 [ 218.998628][ T7355] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000200000000000 [ 218.998645][ T7355] RBP: 00007fa550cc2090 R08: 0000000000000000 R09: 0000000000000000 [ 218.998661][ T7355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 218.998676][ T7355] R13: 0000000000000000 R14: 00007fa54ffb5fa0 R15: 00007ffde9306908 [ 218.998714][ T7355] [ 219.802332][ T5893] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 219.980895][ T5893] usb 7-1: too many configurations: 38, using maximum allowed: 8 [ 220.019883][ T5893] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 220.019981][ T7384] loop2: detected capacity change from 0 to 512 [ 220.028998][ T5893] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.058948][ T5893] usb 7-1: Product: syz [ 220.064455][ T5893] usb 7-1: Manufacturer: syz [ 220.084430][ T7384] EXT4-fs: Ignoring removed mblk_io_submit option [ 220.089051][ T5893] usb 7-1: SerialNumber: syz [ 220.103263][ T7172] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.111052][ T7384] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 220.133447][ T5893] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 220.146373][ T7172] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.168314][ T7388] loop4: detected capacity change from 0 to 128 [ 220.176835][ T7384] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 220.178916][ T7172] bridge_slave_0: entered allmulticast mode [ 220.200996][ T7391] loop5: detected capacity change from 0 to 256 [ 220.208709][ T7388] vfat: Unknown parameter '0000000000000000000318446744073709551615' [ 220.248802][ T5892] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 220.259702][ T7172] bridge_slave_0: entered promiscuous mode [ 220.270140][ T7384] EXT4-fs (loop2): orphan cleanup on readonly fs [ 220.303152][ T7384] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.339: Invalid block bitmap block 0 in block_group 0 [ 220.350529][ T7391] Cannot find add_set index 0 as target [ 220.436290][ T7384] EXT4-fs (loop2): Remounting filesystem read-only [ 220.472965][ T12] hsr_slave_0: left promiscuous mode [ 220.516500][ T7395] netlink: 20 bytes leftover after parsing attributes in process `syz.4.340'. [ 220.520436][ T7384] Quota error (device loop2): write_blk: dquota write failed [ 220.579418][ T12] hsr_slave_1: left promiscuous mode [ 220.586033][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.615130][ T7384] Quota error (device loop2): write_blk: dquota write failed [ 220.660377][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.702155][ T7368] syz.6.332 uses obsolete (PF_INET,SOCK_PACKET) [ 220.719980][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.727415][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.762324][ T7399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.789184][ T7384] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 220.850667][ T7399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.962825][ T7384] EXT4-fs (loop2): 1 orphan inode deleted [ 221.028032][ T7384] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 221.074007][ T12] veth1_macvtap: left promiscuous mode [ 221.109472][ T12] veth0_macvtap: left promiscuous mode [ 221.130601][ T7401] loop5: detected capacity change from 0 to 4096 [ 221.141803][ T12] veth1_vlan: left promiscuous mode [ 221.165869][ T12] veth0_vlan: left promiscuous mode [ 221.342874][ T7401] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 221.369154][ T5892] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 221.381474][ T5892] ath9k_htc: Failed to initialize the device [ 221.412136][ T7401] ntfs3(loop5): $Secure::$SDH is corrupted. [ 221.418235][ T7401] ntfs3(loop5): Failed to initialize $Secure (-22). [ 221.468915][ T5892] usb 7-1: ath9k_htc: USB layer deinitialized [ 221.839291][ T7410] loop4: detected capacity change from 0 to 256 [ 221.896913][ T7410] exfat: Deprecated parameter 'namecase' [ 222.201916][ T7410] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 222.604501][ T30] audit: type=1326 audit(1747210721.238:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7415 comm="syz.4.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa54fd8e969 code=0x7ffc0000 [ 222.661092][ T30] audit: type=1326 audit(1747210721.278:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7415 comm="syz.4.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7fa54fd8e969 code=0x7ffc0000 [ 222.726967][ T5892] usb 7-1: USB disconnect, device number 7 [ 223.093823][ T30] audit: type=1326 audit(1747210721.278:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7415 comm="syz.4.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa54fd8e969 code=0x7ffc0000 [ 223.451973][ T30] audit: type=1326 audit(1747210721.278:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7415 comm="syz.4.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa54fd8e969 code=0x7ffc0000 [ 225.769391][ T5926] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 225.884071][ T12] team0 (unregistering): Port device team_slave_1 removed [ 225.934902][ T5926] usb 6-1: Using ep0 maxpacket: 16 [ 225.943267][ T5926] usb 6-1: config 0 has an invalid interface number: 243 but max is 0 [ 225.946403][ T12] team0 (unregistering): Port device team_slave_0 removed [ 225.953927][ T5926] usb 6-1: config 0 has no interface number 0 [ 225.969818][ T5926] usb 6-1: New USB device found, idVendor=06cd, idProduct=010c, bcdDevice=d0.ce [ 225.980554][ T5926] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.988816][ T5926] usb 6-1: Product: syz [ 225.994658][ T5926] usb 6-1: Manufacturer: syz [ 226.000764][ T5926] usb 6-1: SerialNumber: syz [ 226.019850][ T5926] usb 6-1: config 0 descriptor?? [ 226.031371][ T5926] keyspan 6-1:0.243: Keyspan 1 port adapter converter detected [ 226.041448][ T5926] keyspan 6-1:0.243: found no endpoint descriptor for endpoint 84 [ 226.060991][ T5926] keyspan 6-1:0.243: found no endpoint descriptor for endpoint 81 [ 226.069746][ T5926] keyspan 6-1:0.243: found no endpoint descriptor for endpoint 82 [ 226.077925][ T5926] keyspan 6-1:0.243: found no endpoint descriptor for endpoint 1 [ 226.088486][ T5926] keyspan 6-1:0.243: found no endpoint descriptor for endpoint 2 [ 226.096942][ T5926] keyspan 6-1:0.243: found no endpoint descriptor for endpoint 83 [ 226.105999][ T5926] keyspan 6-1:0.243: found no endpoint descriptor for endpoint 3 [ 226.118445][ T5926] usb 6-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 226.548741][ T7172] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.558748][ T7172] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.566119][ T7172] bridge_slave_1: entered allmulticast mode [ 226.575465][ T7172] bridge_slave_1: entered promiscuous mode [ 226.715769][ T5926] usb 6-1: USB disconnect, device number 12 [ 226.733880][ T7446] loop3: detected capacity change from 0 to 256 [ 226.751946][ T5823] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.756187][ T5926] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 226.841390][ T5926] keyspan 6-1:0.243: device disconnected [ 226.893861][ T7446] Cannot find add_set index 0 as target [ 226.976118][ T7172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.028399][ T7172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.044483][ T7452] loop2: detected capacity change from 0 to 16 [ 227.106118][ T7452] erofs (device loop2): mounted with root inode @ nid 36. [ 227.109712][ T7451] vlan0: entered promiscuous mode [ 227.217080][ T7454] loop3: detected capacity change from 0 to 256 [ 227.290229][ T7452] erofs (device loop2): corrupted dir block 8200 @ nid 36 [ 227.516900][ T7172] team0: Port device team_slave_0 added [ 227.591115][ T7172] team0: Port device team_slave_1 added [ 227.709554][ T7457] binder: BINDER_SET_CONTEXT_MGR already set [ 227.728247][ T7457] binder: 7456:7457 ioctl 4018620d 200000000040 returned -16 [ 227.793330][ T7457] binder: 7456:7457 ioctl c0306201 200000001440 returned -11 [ 228.493926][ T7463] binder: 7462:7463 ioctl c0306201 2000000003c0 returned -14 [ 228.541230][ T7455] syz.2.354 (7455): drop_caches: 2 [ 228.620913][ T7172] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.627932][ T7172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.668613][ T7467] loop4: detected capacity change from 0 to 512 [ 228.710366][ T7467] EXT4-fs: Ignoring removed orlov option [ 228.764686][ T7448] loop6: detected capacity change from 0 to 32768 [ 228.800299][ T7172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.826645][ T7448] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.355 (7448) [ 228.900837][ T7172] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 228.914465][ T7467] Quota error (device loop4): v2_read_file_info: Can't read info structure [ 228.957758][ T7172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.962664][ T7467] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-5, ino=4). Please run e2fsck to fix. [ 229.007340][ T7448] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 229.037464][ T7448] BTRFS info (device loop6): using crc32c (crc32c-x86_64) checksum algorithm [ 229.046920][ T7448] BTRFS info (device loop6): using free-space-tree [ 229.102682][ T7471] loop3: detected capacity change from 0 to 2048 [ 229.164755][ T7172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.187542][ T7467] EXT4-fs (loop4): mount failed [ 229.469135][ T7471] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 229.537997][ T5888] udevd[5888]: incorrect nilfs2 checksum on /dev/loop3 [ 229.552365][ T7471] NILFS (loop3): mounting unchecked fs [ 229.623761][ T7448] BTRFS info (device loop6): rebuilding free space tree [ 229.666017][ T7471] NILFS (loop3): recovery complete [ 229.692065][ T7505] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 229.769461][ T30] audit: type=1800 audit(1747210728.398:56): pid=7471 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.361" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 230.892808][ T6349] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 231.652586][ T7172] hsr_slave_0: entered promiscuous mode [ 231.850329][ T7172] hsr_slave_1: entered promiscuous mode [ 231.883712][ T7517] loop3: detected capacity change from 0 to 1024 [ 231.891430][ T7172] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 231.932332][ T7172] Cannot create hsr debugfs directory [ 232.070326][ T7517] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 232.240434][ T7517] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (2136!=20869) [ 232.329546][ T7517] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 232.373665][ T7517] EXT4-fs error (device loop3): ext4_get_journal_inode:5798: comm syz.3.365: inode #1: comm syz.3.365: iget: illegal inode # [ 232.464714][ T7517] EXT4-fs (loop3): no journal found [ 232.548272][ T7517] EXT4-fs (loop3): can't get journal size [ 232.637459][ T7517] EXT4-fs (loop3): failed to initialize system zone (-117) [ 232.637568][ T7517] EXT4-fs (loop3): mount failed [ 233.267052][ T7535] loop3: detected capacity change from 0 to 128 [ 233.369427][ T7535] vfat: Unknown parameter '0000000000000000000318446744073709551615' [ 233.542588][ T7540] netlink: 20 bytes leftover after parsing attributes in process `syz.3.369'. [ 233.853738][ T7546] FAULT_INJECTION: forcing a failure. [ 233.853738][ T7546] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 233.914941][ T7546] CPU: 1 UID: 0 PID: 7546 Comm: syz.4.372 Not tainted 6.15.0-rc6-syzkaller-00051-g405e6c37c89e #0 PREEMPT(full) [ 233.914978][ T7546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 233.914994][ T7546] Call Trace: [ 233.915003][ T7546] [ 233.915013][ T7546] dump_stack_lvl+0x189/0x250 [ 233.915060][ T7546] ? __pfx_dump_stack_lvl+0x10/0x10 [ 233.915097][ T7546] ? __pfx__printk+0x10/0x10 [ 233.915138][ T7546] should_fail_ex+0x414/0x560 [ 233.915171][ T7546] _copy_to_user+0x31/0xb0 [ 233.915211][ T7546] do_tcp_getsockopt+0x1748/0x2610 [ 233.915254][ T7546] ? __pfx_do_tcp_getsockopt+0x10/0x10 [ 233.915289][ T7546] ? sock_recv_errqueue+0x4c0/0x510 [ 233.915321][ T7546] ? srso_alias_return_thunk+0x5/0xfbef5 [ 233.915353][ T7546] ? srso_alias_return_thunk+0x5/0xfbef5 [ 233.915382][ T7546] ? _parse_integer_limit+0x1ae/0x1f0 [ 233.915411][ T7546] ? srso_alias_return_thunk+0x5/0xfbef5 [ 233.915440][ T7546] ? aa_label_sk_perm+0x413/0x560 [ 233.915474][ T7546] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 233.915502][ T7546] ? srso_alias_return_thunk+0x5/0xfbef5 [ 233.915538][ T7546] ? srso_alias_return_thunk+0x5/0xfbef5 [ 233.915580][ T7546] ? srso_alias_return_thunk+0x5/0xfbef5 [ 233.915617][ T7546] ? srso_alias_return_thunk+0x5/0xfbef5 [ 233.915644][ T7546] ? __lock_acquire+0xaac/0xd20 [ 233.915692][ T7546] ? srso_alias_return_thunk+0x5/0xfbef5 [ 233.915737][ T7546] tcp_getsockopt+0x89/0x130 [ 233.915766][ T7546] ? sock_recv_errqueue+0x4c0/0x510 [ 233.915793][ T7546] ? sock_recv_errqueue+0x4c0/0x510 [ 233.915825][ T7546] do_sock_getsockopt+0x360/0x650 [ 233.915863][ T7546] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 233.915897][ T7546] ? do_syscall_64+0x40/0x210 [ 233.915931][ T7546] ? __fget_files+0x2a/0x420 [ 233.915969][ T7546] ? __fget_files+0x3a0/0x420 [ 233.916002][ T7546] ? __fget_files+0x2a/0x420 [ 233.916045][ T7546] __x64_sys_getsockopt+0x1a5/0x250 [ 233.916079][ T7546] ? do_syscall_64+0x40/0x210 [ 233.916113][ T7546] ? do_syscall_64+0x40/0x210 [ 233.916148][ T7546] do_syscall_64+0xf6/0x210 [ 233.916185][ T7546] ? srso_alias_return_thunk+0x5/0xfbef5 [ 233.916213][ T7546] ? exc_page_fault+0x91/0x110 [ 233.916246][ T7546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.916269][ T7546] RIP: 0033:0x7fa54fd8e969 [ 233.916302][ T7546] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.916324][ T7546] RSP: 002b:00007fa550cc2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 233.916349][ T7546] RAX: ffffffffffffffda RBX: 00007fa54ffb5fa0 RCX: 00007fa54fd8e969 [ 233.916368][ T7546] RDX: 0000000000000009 RSI: 0000000000000006 RDI: 0000000000000003 [ 233.916383][ T7546] RBP: 00007fa550cc2090 R08: 0000200000000040 R09: 0000000000000000 [ 233.916399][ T7546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.916414][ T7546] R13: 0000000000000000 R14: 00007fa54ffb5fa0 R15: 00007ffde9306908 [ 233.916452][ T7546] [ 234.334909][ T7521] loop6: detected capacity change from 0 to 40427 [ 234.344041][ T7521] F2FS-fs (loop6): Insane cp_payload (553648128 >= 504) [ 234.449837][ T7521] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 234.484870][ T7531] loop5: detected capacity change from 0 to 32768 [ 234.499291][ T7521] F2FS-fs (loop6): build fault injection attr: rate: 17008, type: 0x3fffff [ 234.508045][ T7521] F2FS-fs (loop6): norecovery requires readonly mount [ 234.508149][ T7531] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.368 (7531) [ 234.647655][ T7531] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 234.704455][ T7531] BTRFS info (device loop5): using sha256 (sha256-ni) checksum algorithm [ 234.749587][ T7172] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 234.775041][ T7531] BTRFS info (device loop5): using free-space-tree [ 234.834942][ T7172] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 235.447378][ T7172] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 235.573348][ T7172] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 235.592337][ T7531] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 235.592745][ T7531] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 235.714742][ T7531] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 235.900696][ T7531] BTRFS error (device loop5): open_ctree failed: -12 [ 235.949524][ T878] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 236.131033][ T5882] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 236.147677][ T878] usb 5-1: config index 0 descriptor too short (expected 63506, got 18) [ 236.200236][ T878] usb 5-1: New USB device found, idVendor=0830, idProduct=0060, bcdDevice=13.2b [ 236.220961][ T878] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.250892][ T878] usb 5-1: Product: syz [ 236.255182][ T878] usb 5-1: Manufacturer: syz [ 236.308970][ T878] usb 5-1: SerialNumber: syz [ 236.352557][ T5882] usb 4-1: Using ep0 maxpacket: 16 [ 236.372024][ T5882] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 236.411981][ T7172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.417333][ T7583] overlayfs: failed to decode file handle (len=12, type=251, flags=0, err=-22) [ 236.419117][ T5882] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 236.511296][ T5882] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 236.536088][ T7172] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.555128][ T878] visor 5-1:1.0: Handspring Visor / Palm OS converter detected [ 236.583616][ T5882] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 236.638380][ T878] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 236.654062][ T6128] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.661338][ T6128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.716092][ T5882] usb 4-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 236.737826][ T878] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 236.746626][ T5882] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.775879][ T5882] usb 4-1: Product: syz [ 237.143357][ T7548] loop2: detected capacity change from 0 to 32768 [ 237.426684][ T5882] usb 4-1: Manufacturer: syz [ 237.683668][ T5882] usb 4-1: SerialNumber: syz [ 237.938112][ T5882] usb 4-1: config 0 descriptor?? [ 237.984344][ T6128] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.991690][ T6128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.038062][ T24] usb 5-1: USB disconnect, device number 7 [ 238.084613][ T24] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 238.157493][ T24] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 238.212130][ T24] visor 5-1:1.0: device disconnected [ 238.382204][ T5882] rc_core: IR keymap rc-xbox-dvd not found [ 238.388095][ T5882] Registered IR keymap rc-empty [ 238.524572][ T5882] rc rc0: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 238.755015][ T7610] loop2: detected capacity change from 0 to 128 [ 238.767782][ T5882] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input13 [ 238.887182][ T5882] usb 4-1: USB disconnect, device number 6 [ 238.890114][ T7610] vfat: Unknown parameter '0000000000000000000318446744073709551615' [ 238.893175][ C0] xbox_remote 4-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19 [ 239.148621][ T7618] netlink: 20 bytes leftover after parsing attributes in process `syz.2.385'. [ 241.641424][ T7632] loop4: detected capacity change from 0 to 512 [ 241.650697][ T7632] EXT4-fs: Ignoring removed mblk_io_submit option [ 241.881076][ T7172] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 241.912855][ T7632] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.940099][ T7632] ext4 filesystem being mounted at /70/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 242.517529][ T7643] loop2: detected capacity change from 0 to 8 [ 242.591314][ T7643] unable to read id index table [ 242.715687][ T7648] loop5: detected capacity change from 0 to 512 [ 242.904927][ T7654] netlink: 4 bytes leftover after parsing attributes in process `syz.2.393'. [ 243.146316][ T7648] loop5: detected capacity change from 0 to 512 [ 243.277668][ T5833] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.300532][ T48] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 243.512897][ T48] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 243.556871][ T48] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 243.685909][ T48] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 243.740502][ T48] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 243.793202][ T48] usb 4-1: SerialNumber: syz [ 244.068044][ T48] usb 4-1: bad CDC descriptors [ 244.943210][ T7651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.992754][ T7172] veth0_vlan: entered promiscuous mode [ 244.998836][ T7651] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.008578][ T30] audit: type=1326 audit(1747210743.618:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7661 comm="syz.4.394" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa54fd8e969 code=0x0 [ 245.257658][ T7172] veth1_vlan: entered promiscuous mode [ 245.636125][ T7651] loop3: detected capacity change from 0 to 64 [ 245.724542][ T7690] loop5: detected capacity change from 0 to 256 [ 245.780788][ T7651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.792530][ T7690] FAT-fs (loop5): Directory bread(block 64) failed [ 245.799100][ T30] audit: type=1326 audit(1747210744.418:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7679 comm="syz.6.398" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0e1e78e969 code=0x0 [ 245.823130][ T7690] FAT-fs (loop5): Directory bread(block 65) failed [ 245.836908][ T7690] FAT-fs (loop5): Directory bread(block 66) failed [ 245.844926][ T7690] FAT-fs (loop5): Directory bread(block 67) failed [ 245.875091][ T7651] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.888399][ T7690] FAT-fs (loop5): Directory bread(block 68) failed [ 245.903733][ T7172] veth0_macvtap: entered promiscuous mode [ 245.943174][ T7690] FAT-fs (loop5): Directory bread(block 69) failed [ 245.957074][ T7172] veth1_macvtap: entered promiscuous mode [ 246.009568][ T7690] FAT-fs (loop5): Directory bread(block 70) failed [ 246.075033][ T7690] FAT-fs (loop5): Directory bread(block 71) failed [ 246.105836][ T7690] FAT-fs (loop5): Directory bread(block 72) failed [ 246.159331][ T7690] FAT-fs (loop5): Directory bread(block 73) failed [ 246.176091][ T7172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.216721][ T7172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.265705][ T7172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.306836][ T7172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.344303][ T7172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.366625][ T7702] netlink: 20 bytes leftover after parsing attributes in process `syz.5.399'. [ 246.376177][ T7172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.398812][ T7172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.412407][ T7172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.423250][ T7172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.465029][ T7172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.477019][ T7172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.494111][ T7172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.532970][ T7172] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.564038][ T7172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.575574][ T7172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.585542][ T7172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.596115][ T7172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.607697][ T7172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.637061][ T7172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.657553][ T7172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.706691][ T7172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.744859][ T7172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.789306][ T7172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.816363][ T7172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.838398][ T7172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.858356][ T7172] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.896820][ T7714] bridge_slave_0: default FDB implementation only supports local addresses [ 246.990642][ T7172] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.033939][ T7172] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.092603][ T7172] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.279874][ T7172] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.324737][ T5904] usb 4-1: USB disconnect, device number 7 [ 247.393326][ T7724] FAULT_INJECTION: forcing a failure. [ 247.393326][ T7724] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 247.406694][ T7724] CPU: 0 UID: 0 PID: 7724 Comm: syz.5.405 Not tainted 6.15.0-rc6-syzkaller-00051-g405e6c37c89e #0 PREEMPT(full) [ 247.406731][ T7724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 247.406746][ T7724] Call Trace: [ 247.406757][ T7724] [ 247.406768][ T7724] dump_stack_lvl+0x189/0x250 [ 247.406814][ T7724] ? __pfx_dump_stack_lvl+0x10/0x10 [ 247.406852][ T7724] ? __pfx__printk+0x10/0x10 [ 247.406894][ T7724] should_fail_ex+0x414/0x560 [ 247.406927][ T7724] strncpy_from_user+0x36/0x290 [ 247.406957][ T7724] getname_flags+0xf3/0x540 [ 247.407000][ T7724] do_sys_openat2+0xbc/0x1c0 [ 247.407027][ T7724] ? __pfx_do_sys_openat2+0x10/0x10 [ 247.407055][ T7724] ? srso_alias_return_thunk+0x5/0xfbef5 [ 247.407084][ T7724] ? ksys_write+0x1f0/0x250 [ 247.407112][ T7724] ? rcu_is_watching+0x15/0xb0 [ 247.407145][ T7724] __x64_sys_openat+0x138/0x170 [ 247.407175][ T7724] do_syscall_64+0xf6/0x210 [ 247.407211][ T7724] ? srso_alias_return_thunk+0x5/0xfbef5 [ 247.407240][ T7724] ? exc_page_fault+0x91/0x110 [ 247.407274][ T7724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.407298][ T7724] RIP: 0033:0x7fa3cf78e969 [ 247.407320][ T7724] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 247.407341][ T7724] RSP: 002b:00007fa3d0576038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 247.407367][ T7724] RAX: ffffffffffffffda RBX: 00007fa3cf9b6160 RCX: 00007fa3cf78e969 [ 247.407386][ T7724] RDX: 0000000000008041 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 247.407404][ T7724] RBP: 00007fa3d0576090 R08: 0000000000000000 R09: 0000000000000000 [ 247.407420][ T7724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 247.407436][ T7724] R13: 0000000000000000 R14: 00007fa3cf9b6160 R15: 00007ffffc3c1768 [ 247.407474][ T7724] [ 248.589567][ T1030] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.619071][ T1030] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.649930][ T878] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 248.736747][ T5990] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.869107][ T5990] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.947799][ T878] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 248.958616][ T878] usb 6-1: New USB device strings: Mfr=9, Product=2, SerialNumber=3 [ 248.972209][ T24] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 248.994982][ T878] usb 6-1: Product: syz [ 249.011730][ T878] usb 6-1: Manufacturer: syz [ 249.025351][ T878] usb 6-1: SerialNumber: syz [ 249.079864][ T878] usb 6-1: config 0 descriptor?? [ 249.141010][ T24] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 249.167157][ T24] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 249.197298][ T24] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 249.237744][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.309081][ T878] hso 6-1:0.0: Failed to find BULK IN ep [ 249.322772][ T7742] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 249.336290][ T878] usb-storage 6-1:0.0: USB Mass Storage device detected [ 249.355307][ T24] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 249.564609][ T7742] netlink: 20 bytes leftover after parsing attributes in process `syz.2.411'. [ 249.613648][ T878] usb 6-1: USB disconnect, device number 13 [ 249.685853][ T5892] usb 3-1: USB disconnect, device number 12 [ 249.797634][ T7756] FAULT_INJECTION: forcing a failure. [ 249.797634][ T7756] name failslab, interval 1, probability 0, space 0, times 0 [ 249.875366][ T7756] CPU: 0 UID: 0 PID: 7756 Comm: syz.7.281 Not tainted 6.15.0-rc6-syzkaller-00051-g405e6c37c89e #0 PREEMPT(full) [ 249.875404][ T7756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 249.875420][ T7756] Call Trace: [ 249.875429][ T7756] [ 249.875439][ T7756] dump_stack_lvl+0x189/0x250 [ 249.875486][ T7756] ? __pfx_dump_stack_lvl+0x10/0x10 [ 249.875522][ T7756] ? __pfx__printk+0x10/0x10 [ 249.875554][ T7756] ? __pfx___might_resched+0x10/0x10 [ 249.875585][ T7756] should_fail_ex+0x414/0x560 [ 249.875616][ T7756] should_failslab+0xa8/0x100 [ 249.875652][ T7756] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 249.875687][ T7756] ? __alloc_skb+0x112/0x2d0 [ 249.875725][ T7756] __alloc_skb+0x112/0x2d0 [ 249.875761][ T7756] netlink_sendmsg+0x5c6/0xb30 [ 249.875803][ T7756] ? __pfx_netlink_sendmsg+0x10/0x10 [ 249.875837][ T7756] ? srso_alias_return_thunk+0x5/0xfbef5 [ 249.875865][ T7756] ? aa_sock_msg_perm+0x94/0x160 [ 249.875896][ T7756] ? srso_alias_return_thunk+0x5/0xfbef5 [ 249.875924][ T7756] ? srso_alias_return_thunk+0x5/0xfbef5 [ 249.875953][ T7756] ? __pfx_netlink_sendmsg+0x10/0x10 [ 249.875984][ T7756] __sock_sendmsg+0x21c/0x270 [ 249.876015][ T7756] ____sys_sendmsg+0x505/0x830 [ 249.876057][ T7756] ? __pfx_____sys_sendmsg+0x10/0x10 [ 249.876102][ T7756] ? srso_alias_return_thunk+0x5/0xfbef5 [ 249.876130][ T7756] ? import_iovec+0x74/0xa0 [ 249.876171][ T7756] ___sys_sendmsg+0x21f/0x2a0 [ 249.876209][ T7756] ? __pfx____sys_sendmsg+0x10/0x10 [ 249.876288][ T7756] ? __fget_files+0x2a/0x420 [ 249.876337][ T7756] ? srso_alias_return_thunk+0x5/0xfbef5 [ 249.876365][ T7756] ? __fget_files+0x3a0/0x420 [ 249.876411][ T7756] __x64_sys_sendmsg+0x19b/0x260 [ 249.876450][ T7756] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 249.876506][ T7756] ? do_syscall_64+0xba/0x210 [ 249.876544][ T7756] do_syscall_64+0xf6/0x210 [ 249.876577][ T7756] ? srso_alias_return_thunk+0x5/0xfbef5 [ 249.876605][ T7756] ? exc_page_fault+0x91/0x110 [ 249.876638][ T7756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.876661][ T7756] RIP: 0033:0x7f21b158e969 [ 249.876682][ T7756] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 249.876704][ T7756] RSP: 002b:00007f21b24ab038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 249.876730][ T7756] RAX: ffffffffffffffda RBX: 00007f21b17b5fa0 RCX: 00007f21b158e969 [ 249.876748][ T7756] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 249.876765][ T7756] RBP: 00007f21b24ab090 R08: 0000000000000000 R09: 0000000000000000 [ 249.876781][ T7756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 249.876796][ T7756] R13: 0000000000000000 R14: 00007f21b17b5fa0 R15: 00007ffc848aef88 [ 249.876837][ T7756] [ 250.349892][ T7730] loop4: detected capacity change from 0 to 40427 [ 250.358917][ T7730] F2FS-fs (loop4): Unrecognized mount option "disable_extidentify" or missing value [ 250.885545][ T7769] capability: warning: `syz.6.414' uses 32-bit capabilities (legacy support in use) [ 251.219296][ T24] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 251.409841][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 251.557400][ T24] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 3 [ 251.590604][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 251.601269][ T24] usb 7-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 251.610778][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.626072][ T24] usb 7-1: config 0 descriptor?? [ 251.758292][ T7769] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 252.170397][ T24] usb 7-1: USB disconnect, device number 8 [ 254.239831][ T5837] Bluetooth: hci4: command 0x0405 tx timeout [ 254.380455][ T7785] loop5: detected capacity change from 0 to 32768 [ 254.390867][ T7808] team0: Port device team_slave_1 removed [ 254.464685][ T7785] ocfs2: Slot 0 on device (7,5) was already allocated to this node! [ 254.756451][ T7785] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 255.013321][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.028771][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.269832][ T5830] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 255.639262][ T5830] usb 8-1: Using ep0 maxpacket: 16 [ 255.701936][ T5830] usb 8-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=29.82 [ 255.739257][ T5830] usb 8-1: New USB device strings: Mfr=83, Product=5, SerialNumber=10 [ 255.783200][ T5830] usb 8-1: Product: syz [ 255.788818][ T5826] ocfs2: Unmounting device (7,5) on (node local) [ 255.808802][ T5830] usb 8-1: Manufacturer: syz [ 255.831477][ T5830] usb 8-1: SerialNumber: syz [ 255.880782][ T5830] usb 8-1: config 0 descriptor?? [ 255.890682][ T7830] netlink: 8 bytes leftover after parsing attributes in process `syz.6.430'. [ 255.980688][ T5830] usb 8-1: selecting invalid altsetting 1 [ 256.190282][ T7835] netlink: 24 bytes leftover after parsing attributes in process `syz.5.431'. [ 256.224611][ T5830] snd-usb-audio 8-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 256.253930][ T7838] loop5: detected capacity change from 0 to 128 [ 256.272960][ T7838] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 256.296917][ T7838] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 256.907671][ T5986] udevd[5986]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 257.082625][ T5837] Bluetooth: hci6: command 0x0406 tx timeout [ 257.479534][ T7853] FAULT_INJECTION: forcing a failure. [ 257.479534][ T7853] name failslab, interval 1, probability 0, space 0, times 0 [ 257.565439][ T7853] CPU: 1 UID: 0 PID: 7853 Comm: syz.3.436 Not tainted 6.15.0-rc6-syzkaller-00051-g405e6c37c89e #0 PREEMPT(full) [ 257.565476][ T7853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 257.565492][ T7853] Call Trace: [ 257.565502][ T7853] [ 257.565512][ T7853] dump_stack_lvl+0x189/0x250 [ 257.565558][ T7853] ? __pfx_dump_stack_lvl+0x10/0x10 [ 257.565596][ T7853] ? __pfx__printk+0x10/0x10 [ 257.565625][ T7853] ? __pfx___might_resched+0x10/0x10 [ 257.565650][ T7853] ? srso_alias_return_thunk+0x5/0xfbef5 [ 257.565688][ T7853] should_fail_ex+0x414/0x560 [ 257.565721][ T7853] should_failslab+0xa8/0x100 [ 257.565759][ T7853] kmem_cache_alloc_noprof+0x73/0x3c0 [ 257.565792][ T7853] ? security_inode_alloc+0x39/0x330 [ 257.565830][ T7853] security_inode_alloc+0x39/0x330 [ 257.565864][ T7853] inode_init_always_gfp+0x9ed/0xdc0 [ 257.565905][ T7853] ? __pfx_sock_alloc_inode+0x10/0x10 [ 257.565929][ T7853] alloc_inode+0x82/0x1b0 [ 257.565962][ T7853] __sock_create+0x12d/0x9f0 [ 257.565987][ T7853] ? fput+0xa0/0xd0 [ 257.566026][ T7853] ? srso_alias_return_thunk+0x5/0xfbef5 [ 257.566056][ T7853] ? srso_alias_return_thunk+0x5/0xfbef5 [ 257.566084][ T7853] ? rcu_is_watching+0x15/0xb0 [ 257.566112][ T7853] __sys_socket+0xd7/0x1b0 [ 257.566144][ T7853] __x64_sys_socket+0x7a/0x90 [ 257.566174][ T7853] do_syscall_64+0xf6/0x210 [ 257.566209][ T7853] ? srso_alias_return_thunk+0x5/0xfbef5 [ 257.566237][ T7853] ? exc_page_fault+0x91/0x110 [ 257.566271][ T7853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.566295][ T7853] RIP: 0033:0x7fb5d658e969 [ 257.566316][ T7853] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 257.566346][ T7853] RSP: 002b:00007fb5d74df038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 257.566372][ T7853] RAX: ffffffffffffffda RBX: 00007fb5d67b5fa0 RCX: 00007fb5d658e969 [ 257.566391][ T7853] RDX: 0000000000000002 RSI: 0000000000000003 RDI: 000000000000000f [ 257.566406][ T7853] RBP: 00007fb5d74df090 R08: 0000000000000000 R09: 0000000000000000 [ 257.566422][ T7853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 257.566438][ T7853] R13: 0000000000000000 R14: 00007fb5d67b5fa0 R15: 00007ffd3f460d38 [ 257.566476][ T7853] [ 257.831930][ T7853] net_ratelimit: 282 callbacks suppressed [ 257.831953][ T7853] socket: no more sockets [ 258.094850][ T24] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 258.201289][ T878] usb 8-1: USB disconnect, device number 2 [ 258.249525][ T24] usb 6-1: device descriptor read/64, error -71 [ 258.619876][ T24] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 258.759703][ T24] usb 6-1: device descriptor read/64, error -71 [ 258.772178][ T30] audit: type=1326 audit(1747210758.406:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7863 comm="syz.6.440" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0e1e78e969 code=0x0 [ 258.852275][ T7873] loop3: detected capacity change from 0 to 128 [ 258.906572][ T7873] vfat: Unknown parameter '0000000000000000000318446744073709551615' [ 258.923424][ T24] usb usb6-port1: attempt power cycle [ 259.238301][ T7879] netlink: 20 bytes leftover after parsing attributes in process `syz.3.442'. [ 259.289306][ T24] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 259.359564][ T7885] netlink: 8 bytes leftover after parsing attributes in process `syz.7.445'. [ 259.375867][ T7883] loop4: detected capacity change from 0 to 128 [ 259.388698][ T24] usb 6-1: device descriptor read/8, error -71 [ 259.576733][ T7883] vfat: Unknown parameter '0000000000000000000318446744073709551615' [ 259.715191][ T24] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 259.789451][ T5892] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 259.802172][ T24] usb 6-1: device descriptor read/8, error -71 [ 259.894472][ T7892] netlink: 20 bytes leftover after parsing attributes in process `syz.4.443'. [ 260.021442][ T24] usb usb6-port1: unable to enumerate USB device [ 260.149261][ T5892] usb 3-1: Using ep0 maxpacket: 16 [ 260.182747][ T5892] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 260.351963][ T5892] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 260.428249][ T5892] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 260.496671][ T5892] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 260.580908][ T7898] FAULT_INJECTION: forcing a failure. [ 260.580908][ T7898] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 260.617334][ T5892] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 260.679252][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.704860][ T7898] CPU: 0 UID: 0 PID: 7898 Comm: syz.6.447 Not tainted 6.15.0-rc6-syzkaller-00051-g405e6c37c89e #0 PREEMPT(full) [ 260.704897][ T7898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 260.704913][ T7898] Call Trace: [ 260.704924][ T7898] [ 260.704934][ T7898] dump_stack_lvl+0x189/0x250 [ 260.704979][ T7898] ? srso_alias_return_thunk+0x5/0xfbef5 [ 260.705013][ T7898] ? __pfx_dump_stack_lvl+0x10/0x10 [ 260.705050][ T7898] ? __pfx__printk+0x10/0x10 [ 260.705077][ T7898] ? srso_alias_return_thunk+0x5/0xfbef5 [ 260.705117][ T7898] should_fail_ex+0x414/0x560 [ 260.705146][ T7898] prepare_alloc_pages+0x213/0x610 [ 260.705192][ T7898] __alloc_frozen_pages_noprof+0x123/0x370 [ 260.705219][ T7898] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 260.705247][ T7898] ? process_measurement+0x72d/0x1a40 [ 260.705279][ T7898] ? policy_nodemask+0x27c/0x720 [ 260.705321][ T7898] ? srso_alias_return_thunk+0x5/0xfbef5 [ 260.705346][ T7898] ? __lock_acquire+0xaac/0xd20 [ 260.705382][ T7898] alloc_pages_mpol+0x232/0x4a0 [ 260.705418][ T7898] vma_alloc_folio_noprof+0xe4/0x200 [ 260.705453][ T7898] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 260.705491][ T7898] ? srso_alias_return_thunk+0x5/0xfbef5 [ 260.705522][ T7898] folio_prealloc+0x30/0x180 [ 260.705555][ T7898] __handle_mm_fault+0x2b28/0x5380 [ 260.705583][ T7898] ? srso_alias_return_thunk+0x5/0xfbef5 [ 260.705629][ T7898] ? __pfx___handle_mm_fault+0x10/0x10 [ 260.705678][ T7898] ? srso_alias_return_thunk+0x5/0xfbef5 [ 260.705702][ T7898] ? find_vma+0xe7/0x160 [ 260.705731][ T7898] ? __pfx_find_vma+0x10/0x10 [ 260.705763][ T7898] handle_mm_fault+0x3f6/0x8c0 [ 260.705802][ T7898] do_user_addr_fault+0x764/0x1390 [ 260.705843][ T7898] exc_page_fault+0x68/0x110 [ 260.705874][ T7898] asm_exc_page_fault+0x26/0x30 [ 260.705895][ T7898] RIP: 0010:_copy_to_user+0x85/0xb0 [ 260.705928][ T7898] Code: e8 f0 30 07 fd 4d 39 fc 72 3d 4d 39 ec 77 38 e8 81 2e 07 fd 4c 89 f7 89 de e8 97 29 69 fd 0f 01 cb 4c 89 ff 48 89 d9 4c 89 f6 a4 0f 1f 00 48 89 cb 0f 01 ca 48 89 d8 5b 41 5c 41 5d 41 5e 41 [ 260.705947][ T7898] RSP: 0018:ffffc90005317b10 EFLAGS: 00050256 [ 260.705967][ T7898] RAX: ffffffff84b8c301 RBX: 0000000000000040 RCX: 0000000000000040 [ 260.705982][ T7898] RDX: 0000000000000000 RSI: ffffc90005317ba0 RDI: 0000200000033a80 [ 260.705997][ T7898] RBP: ffffc90005317c50 R08: ffffc90005317bdf R09: 1ffff92000a62f7b [ 260.706014][ T7898] R10: dffffc0000000000 R11: fffff52000a62f7c R12: 0000200000033ac0 [ 260.706030][ T7898] R13: 00007ffffffff000 R14: ffffc90005317ba0 R15: 0000200000033a80 [ 260.706055][ T7898] ? _copy_to_user+0x1/0xb0 [ 260.706096][ T7898] ? __pfx_virtio_read+0x10/0x10 [ 260.706124][ T7898] rng_dev_read+0x3f2/0x770 [ 260.706158][ T7898] ? __pfx_rng_dev_read+0x10/0x10 [ 260.706183][ T7898] ? srso_alias_return_thunk+0x5/0xfbef5 [ 260.706215][ T7898] ? srso_alias_return_thunk+0x5/0xfbef5 [ 260.706240][ T7898] ? security_file_permission+0x75/0x290 [ 260.706277][ T7898] ? srso_alias_return_thunk+0x5/0xfbef5 [ 260.706301][ T7898] ? rw_verify_area+0x258/0x650 [ 260.706336][ T7898] vfs_readv+0x5a5/0x840 [ 260.706367][ T7898] ? __pfx_rng_dev_read+0x10/0x10 [ 260.706400][ T7898] ? __pfx_vfs_readv+0x10/0x10 [ 260.706444][ T7898] ? srso_alias_return_thunk+0x5/0xfbef5 [ 260.706472][ T7898] ? __fget_files+0x2a/0x420 [ 260.706508][ T7898] ? srso_alias_return_thunk+0x5/0xfbef5 [ 260.706532][ T7898] ? __fget_files+0x3a0/0x420 [ 260.706561][ T7898] ? __fget_files+0x2a/0x420 [ 260.706595][ T7898] ? srso_alias_return_thunk+0x5/0xfbef5 [ 260.706626][ T7898] __x64_sys_preadv+0x197/0x2a0 [ 260.706653][ T7898] ? rcu_is_watching+0x15/0xb0 [ 260.706676][ T7898] ? __pfx___x64_sys_preadv+0x10/0x10 [ 260.706710][ T7898] ? do_syscall_64+0xba/0x210 [ 260.706743][ T7898] do_syscall_64+0xf6/0x210 [ 260.706773][ T7898] ? srso_alias_return_thunk+0x5/0xfbef5 [ 260.706798][ T7898] ? exc_page_fault+0x91/0x110 [ 260.706827][ T7898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.706848][ T7898] RIP: 0033:0x7f0e1e78e969 [ 260.706867][ T7898] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 260.706885][ T7898] RSP: 002b:00007f0e1f5a4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 260.706906][ T7898] RAX: ffffffffffffffda RBX: 00007f0e1e9b5fa0 RCX: 00007f0e1e78e969 [ 260.706922][ T7898] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 260.706936][ T7898] RBP: 00007f0e1f5a4090 R08: 0000000000000000 R09: 0000000000000000 [ 260.706949][ T7898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 260.706963][ T7898] R13: 0000000000000000 R14: 00007f0e1e9b5fa0 R15: 00007fff65843898 [ 260.706996][ T7898] [ 261.197539][ T5892] usb 3-1: Product: syz [ 261.201845][ T5892] usb 3-1: Manufacturer: syz [ 261.206460][ T5892] usb 3-1: SerialNumber: syz [ 263.614946][ T7929] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 263.929668][ T31] INFO: task syz.1.53:6230 blocked for more than 143 seconds. [ 264.082493][ T5892] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 264.122744][ T5892] usb 3-1: 2:1 : format type 0 is detected, processed as PCM [ 264.169137][ T31] Not tainted 6.15.0-rc6-syzkaller-00051-g405e6c37c89e #0 [ 264.201778][ T7907] loop3: detected capacity change from 0 to 4096 [ 264.232783][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 264.262842][ T31] task:syz.1.53 state:D stack:27904 pid:6230 tgid:6196 ppid:5819 task_flags:0x400040 flags:0x00004004 [ 264.438492][ T31] Call Trace: [ 264.442581][ T31] [ 264.445543][ T31] __schedule+0x16e2/0x4cd0 [ 264.457620][ T7907] NILFS (loop3): error -4 creating segctord thread [ 264.463350][ T31] ? schedule+0x165/0x360 [ 264.475038][ T31] ? __pfx___schedule+0x10/0x10 [ 264.494624][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 264.500845][ T5892] usb 3-1: USB disconnect, device number 13 [ 264.515742][ T31] ? schedule+0x91/0x360 [ 264.907389][ T31] schedule+0x165/0x360 [ 264.921107][ T31] schedule_preempt_disabled+0x13/0x30 [ 264.927835][ T31] rwsem_down_write_slowpath+0xbec/0x1030 [ 264.941485][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 264.947426][ T31] ? rwsem_down_write_slowpath+0x7ec/0x1030 [ 264.954824][ T31] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 264.972884][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 264.989181][ T31] ? __lock_acquire+0xaac/0xd20 [ 264.995694][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 265.005911][ T31] down_write+0x1ab/0x1f0 [ 265.012342][ T31] ? __pfx_down_write+0x10/0x10 [ 265.035508][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 265.049084][ T31] ? mnt_get_write_access+0x68/0x2a0 [ 265.059331][ T31] vfs_setxattr+0x144/0x2f0 [ 265.064454][ T31] ? __pfx_vfs_setxattr+0x10/0x10 [ 265.079060][ T31] ? mnt_get_write_access+0x223/0x2a0 [ 265.093404][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 265.108252][ T31] filename_setxattr+0x274/0x600 [ 265.121209][ T31] ? __pfx_filename_setxattr+0x10/0x10 [ 265.133485][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 265.155056][ T31] ? getname_flags+0x1e5/0x540 [ 265.175718][ T31] path_setxattrat+0x364/0x3a0 [ 265.180915][ T31] ? __pfx_path_setxattrat+0x10/0x10 [ 265.186326][ T31] ? count_memcg_event_mm+0x92/0x3b0 [ 265.192960][ T31] ? rcu_is_watching+0x15/0xb0 [ 265.197848][ T31] __x64_sys_lsetxattr+0xbf/0xe0 [ 265.228335][ T31] do_syscall_64+0xf6/0x210 [ 265.241409][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 265.247104][ T31] ? exc_page_fault+0x91/0x110 [ 265.264868][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.273896][ T31] RIP: 0033:0x7f785838e969 [ 265.278402][ T31] RSP: 002b:00007f78591d2038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 265.295410][ T31] RAX: ffffffffffffffda RBX: 00007f78585b6160 RCX: 00007f785838e969 [ 265.303786][ T31] RDX: 0000200000000340 RSI: 0000200000000180 RDI: 0000200000000040 [ 265.318816][ T31] RBP: 00007f7858410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 265.351700][ T31] R10: 00000000000000d4 R11: 0000000000000246 R12: 0000000000000000 [ 265.365101][ T31] R13: 0000000000000001 R14: 00007f78585b6160 R15: 00007ffccbf67fc8 [ 265.382470][ T31] [ 265.385699][ T31] [ 265.385699][ T31] Showing all locks held in the system: [ 265.396849][ T31] 1 lock held by khungtaskd/31: [ 265.412314][ T31] #0: ffffffff8df3dce0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 265.426347][ T31] 2 locks held by kworker/u8:3/54: [ 265.437720][ T31] #0: ffff88801afce948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 265.459418][ T31] #1: ffffc9000120fc60 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 265.482376][ T31] 2 locks held by kworker/u8:5/1030: [ 265.488025][ T31] #0: ffff8880b8839b58 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 265.516663][ T31] #1: ffff8880b8823b08 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x39e/0x6d0 [ 265.560219][ T31] 2 locks held by getty/5577: [ 265.567367][ T31] #0: ffff88802fef20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 265.591252][ T31] #1: ffffc900030062f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 265.621978][ T31] 1 lock held by syz-executor/5833: [ 265.642221][ T31] #0: ffffffff8df437b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f4/0x730 [ 265.670144][ T31] 4 locks held by syz.1.53/6198: [ 265.692322][ T31] #0: ffff8880110b0420 (sb_writers#18){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 265.714806][ T31] #1: ffff8880781da230 (&sb->s_type->i_mutex_key#26){+.+.}-{4:4}, at: vfs_setxattr+0x144/0x2f0 [ 265.755814][ T31] #2: ffff8880110b0610 (sb_internal#3){.+.+}-{0:0}, at: xfs_trans_alloc_inode+0x13c/0x4a0 [ 265.794022][ T31] #3: ffff8880781da018 (&xfs_nondir_ilock_class){+.+.}-{4:4}, at: xfs_trans_alloc_inode+0x161/0x4a0 [ 265.820741][ T31] 2 locks held by syz.1.53/6230: [ 265.836347][ T31] #0: ffff8880110b0420 (sb_writers#18){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 265.858737][ T31] #1: ffff8880781da230 (&sb->s_type->i_mutex_key#26){+.+.}-{4:4}, at: vfs_setxattr+0x144/0x2f0 [ 265.870532][ T31] 1 lock held by dhcpcd-run-hook/7940: [ 265.876120][ T31] #0: ffff888031789868 (&pipe->mutex){+.+.}-{4:4}, at: anon_pipe_read+0xd14/0x1040 [ 265.886047][ T31] 1 lock held by dhcpcd-run-hook/7954: [ 265.892052][ T31] #0: ffff8880b8839b58 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 265.909584][ T31] [ 265.961650][ T31] ============================================= [ 265.961650][ T31] [ 265.984174][ T31] NMI backtrace for cpu 0 [ 265.984198][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc6-syzkaller-00051-g405e6c37c89e #0 PREEMPT(full) [ 265.984230][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 265.984245][ T31] Call Trace: [ 265.984254][ T31] [ 265.984265][ T31] dump_stack_lvl+0x189/0x250 [ 265.984306][ T31] ? __wake_up_klogd+0xd9/0x110 [ 265.984336][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 265.984369][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 265.984405][ T31] ? __pfx__printk+0x10/0x10 [ 265.984446][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 265.984476][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 265.984499][ T31] ? _printk+0xcf/0x120 [ 265.984529][ T31] ? __pfx__printk+0x10/0x10 [ 265.984556][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 265.984592][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 265.984622][ T31] watchdog+0xfee/0x1030 [ 265.984658][ T31] ? watchdog+0x1de/0x1030 [ 265.984701][ T31] kthread+0x711/0x8a0 [ 265.984736][ T31] ? __pfx_watchdog+0x10/0x10 [ 265.984767][ T31] ? __pfx_kthread+0x10/0x10 [ 265.984797][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 265.984826][ T31] ? __pfx_kthread+0x10/0x10 [ 265.984856][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 265.984883][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 265.984911][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 265.984943][ T31] ? __pfx_kthread+0x10/0x10 [ 265.984972][ T31] ret_from_fork+0x4e/0x80 [ 265.984997][ T31] ? __pfx_kthread+0x10/0x10 [ 265.985028][ T31] ret_from_fork_asm+0x1a/0x30 [ 265.985069][ T31] [ 265.985078][ T31] Sending NMI from CPU 0 to CPUs 1: [ 266.161204][ C1] NMI backtrace for cpu 1 [ 266.161224][ C1] CPU: 1 UID: 0 PID: 54 Comm: kworker/u8:3 Not tainted 6.15.0-rc6-syzkaller-00051-g405e6c37c89e #0 PREEMPT(full) [ 266.161251][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 266.161266][ C1] Workqueue: bat_events batadv_nc_worker [ 266.161296][ C1] RIP: 0010:rcu_is_watching+0x17/0xb0 [ 266.161319][ C1] Code: 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 57 41 56 53 65 ff 05 a0 76 ce 10 e8 fb 47 af 09 89 c3 <83> f8 08 73 65 49 bf 00 00 00 00 00 fc ff df 4c 8d 34 dd 20 fc 96 [ 266.161344][ C1] RSP: 0018:ffffc9000120fa00 EFLAGS: 00000286 [ 266.161362][ C1] RAX: 0000000000000001 RBX: 0000000000000001 RCX: c7a91856fb692c00 [ 266.161377][ C1] RDX: 0000000000000000 RSI: ffffffff8bc1d800 RDI: ffffffff8bc1d7c0 [ 266.161393][ C1] RBP: ffffffff8b243dc2 R08: 0000000000000000 R09: 0000000000000000 [ 266.161407][ C1] R10: 0000000000000000 R11: ffffffff8b243dc2 R12: 0000000000000002 [ 266.161421][ C1] R13: ffffffff8df3dce0 R14: 0000000000000000 R15: 0000000000000000 [ 266.161439][ C1] FS: 0000000000000000(0000) GS:ffff8881261c7000(0000) knlGS:0000000000000000 [ 266.161457][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 266.161472][ C1] CR2: 00007f3d8c913000 CR3: 0000000031aef000 CR4: 0000000000350ef0 [ 266.161489][ C1] Call Trace: [ 266.161497][ C1] [ 266.161507][ C1] lock_acquire+0x5f/0x360 [ 266.161542][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 266.161571][ C1] ? batadv_nc_worker+0xd2/0x610 [ 266.161596][ C1] ? batadv_nc_worker+0xd2/0x610 [ 266.161622][ C1] batadv_nc_worker+0xef/0x610 [ 266.161645][ C1] ? batadv_nc_worker+0xd2/0x610 [ 266.161671][ C1] ? process_scheduled_works+0x9ec/0x17a0 [ 266.161694][ C1] process_scheduled_works+0xade/0x17a0 [ 266.161735][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 266.161777][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 266.161808][ C1] worker_thread+0x8a0/0xda0 [ 266.161837][ C1] ? __kthread_parkme+0x7b/0x200 [ 266.161871][ C1] kthread+0x711/0x8a0 [ 266.161902][ C1] ? __pfx_worker_thread+0x10/0x10 [ 266.161924][ C1] ? __pfx_kthread+0x10/0x10 [ 266.161950][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 266.161977][ C1] ? __pfx_kthread+0x10/0x10 [ 266.162003][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 266.162028][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 266.162052][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 266.162080][ C1] ? __pfx_kthread+0x10/0x10 [ 266.162106][ C1] ret_from_fork+0x4e/0x80 [ 266.162129][ C1] ? __pfx_kthread+0x10/0x10 [ 266.162155][ C1] ret_from_fork_asm+0x1a/0x30 [ 266.162187][ C1] [ 266.437881][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 266.444798][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc6-syzkaller-00051-g405e6c37c89e #0 PREEMPT(full) [ 266.456642][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 266.466726][ T31] Call Trace: [ 266.470024][ T31] [ 266.472954][ T31] dump_stack_lvl+0x99/0x250 [ 266.477566][ T31] ? __asan_memcpy+0x40/0x70 [ 266.482176][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 266.487398][ T31] ? __pfx__printk+0x10/0x10 [ 266.492008][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 266.497661][ T31] panic+0x2db/0x790 [ 266.501584][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 266.507240][ T31] ? __pfx_panic+0x10/0x10 [ 266.511674][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 266.517318][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 266.523144][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 266.528784][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 266.534171][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 266.540339][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 266.545986][ T31] watchdog+0x102d/0x1030 [ 266.550331][ T31] ? watchdog+0x1de/0x1030 [ 266.554770][ T31] kthread+0x711/0x8a0 [ 266.558850][ T31] ? __pfx_watchdog+0x10/0x10 [ 266.563535][ T31] ? __pfx_kthread+0x10/0x10 [ 266.568137][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 266.573795][ T31] ? __pfx_kthread+0x10/0x10 [ 266.578427][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 266.583637][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 266.589282][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 266.594489][ T31] ? __pfx_kthread+0x10/0x10 [ 266.599087][ T31] ret_from_fork+0x4e/0x80 [ 266.603516][ T31] ? __pfx_kthread+0x10/0x10 [ 266.608119][ T31] ret_from_fork_asm+0x1a/0x30 [ 266.612910][ T31] [ 266.616248][ T31] Kernel Offset: disabled [ 266.620584][ T31] Rebooting in 86400 seconds..