last executing test programs: 12m22.758298065s ago: executing program 32 (id=254): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket(0x2a, 0x2, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03", 0x3}], 0x1}, 0x0) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x4) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB, @ANYRES32=r4], 0x1c}}, 0x4008054) write$nci(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14) write$nci(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="500238", @ANYRES64=r0], 0x3b) socket$netlink(0x10, 0x3, 0x0) 12m19.416707645s ago: executing program 33 (id=261): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="d800000000000000f9ffffffffffffff00000000000000000200000000000000020000000000008000010000000000000200000009000000060000000000000006000000000000000000000000000000ff0000000000008003000000000000000000000000000000ffffff7f58000000ffffffff0080000009000000", @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="010000000400000000000000000000000000200003000000000000002b00"], 0x0, 0x0, 0x0}) getdents64(r4, &(0x7f0000000100)=""/134, 0x86) syz_fuse_handle_req(r0, &(0x7f000000a3c0)="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", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="10"], 0x0, 0x0, 0x0, 0x0}) getdents(r4, &(0x7f0000000340)=""/151, 0x97) 11m20.159266356s ago: executing program 2 (id=367): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = syz_io_uring_setup(0x10d, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xffffffff, 0xa0}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r0, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r1, 0x47f5, 0x0, 0x0, 0x0, 0x0) 11m18.030909844s ago: executing program 2 (id=371): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd5, 0x7, 0xdf, 0x8, 0x10c4, 0x8244, 0xdc00, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3}}]}}]}}, 0x0) syz_open_dev$mouse(&(0x7f0000000080), 0x699e, 0x1340) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x74, 0x30, 0x1, 0x2, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8}, @TCA_MPLS_TTL={0x5, 0x7, 0x25}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0xa2b, 0x8, 0x7, 0x0, 0x6}, 0x1}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000780)={0x1c, &(0x7f0000000200)={0x40, 0x14}, 0x0, 0x0}) 11m14.735418304s ago: executing program 2 (id=377): unshare(0x2c040600) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r0, 0x0, 0x0}, 0x10) 11m13.355931097s ago: executing program 2 (id=381): socket(0x10, 0x3, 0x6) socket(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000000)={[{@numtail}, {@shortname_lower}, {@shortname_win95}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'ascii'}}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@shortname_win95}, {@shortname_mixed}, {@shortname_win95}, {@fat=@usefree}, {@shortname_winnt}, {@shortname_win95}, {@numtail}, {@numtail}, {@fat=@discard}, {@nonumtail}, {@fat=@codepage={'codepage', 0x3d, '865'}}, {@numtail}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}]}, 0x1, 0x36b, &(0x7f0000000a00)="$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") syz_clone(0x200011, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) 11m11.410695527s ago: executing program 2 (id=386): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = syz_io_uring_setup(0x10d, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xffffffff, 0xa0}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r0, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r1, 0x47f5, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) 11m9.958994362s ago: executing program 2 (id=390): syz_mount_image$bfs(&(0x7f00000001c0), &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4, &(0x7f0000000600)=ANY=[], 0x8, 0xad, &(0x7f0000000040)="$eJzs0btpA0EUBdC7H/xJ7ALcg3tw6twVbOjQkY3BjlSGOlArKmE7ULCpkhHLrkChEAhJcA7MzA3mwYW33q5e8pSUv6SUUu6SPGbKX98/nx/v490kyTJt7jPZv9y4ej4P486fp7x5y+L/4E8//HZ9la4fyuyChQEAgJPVeZ1TdfxQm6Q5VyMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA67ILAAD//1vZIlc=") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.time\x00', 0x275a, 0x0) (fail_nth: 1) 11m5.902731382s ago: executing program 34 (id=390): syz_mount_image$bfs(&(0x7f00000001c0), &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4, &(0x7f0000000600)=ANY=[], 0x8, 0xad, &(0x7f0000000040)="$eJzs0btpA0EUBdC7H/xJ7ALcg3tw6twVbOjQkY3BjlSGOlArKmE7ULCpkhHLrkChEAhJcA7MzA3mwYW33q5e8pSUv6SUUu6SPGbKX98/nx/v490kyTJt7jPZv9y4ej4P486fp7x5y+L/4E8//HZ9la4fyuyChQEAgJPVeZ1TdfxQm6Q5VyMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA67ILAAD//1vZIlc=") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.time\x00', 0x275a, 0x0) (fail_nth: 1) 9m28.535680165s ago: executing program 6 (id=656): r0 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x88600, 0x0) ioctl$FBIOPUT_CON2FBMAP(r1, 0x4610, &(0x7f00000002c0)={0x808001c, 0x2000}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000040)={0x0, 0x31, 0x9, "682dfa3f6b97149f7a"}, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, &(0x7f0000009d00)) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000040)=ANY=[@ANYBLOB='\r\x00\x00\x00\x00\x00\x00\x00']) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xf}, {0xffff, 0xffff}, {0x6, 0x9}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x7ff, 0x8, 0x400, 0x12, 0x11, 0x15, 0x5}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x2}, 0x0) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f00000009c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000980)={&(0x7f0000000800)={0x168, 0x12, 0x200, 0x70bd2b, 0x25dfdbff, {0x1f, 0x1, 0x3, 0x4, {0x4e23, 0x4e23, [0xfffffffa, 0x7, 0x0, 0x4], [0x3, 0x1, 0x1ff, 0x2a76], 0x0, [0x4, 0x6]}, 0x8, 0x7}, [@INET_DIAG_REQ_BYTECODE={0x2d, 0x1, "e9f7b0cf457042e6da3af244edd516cd45fd245a5148be17bbc41ba01f3ab2555eb57f3bc13ec90821"}, @INET_DIAG_REQ_BYTECODE={0x9b, 0x1, "7f094c1d85b2b2003db0fa02a9b9c5fd7ea047dd891852c51e980331fa59d18706972edbfca04f550de406b8e25ece6ca7370f0213d3404e8dc140b8343728baccd8bc0b909f230e3551b40f5548147334e3ab42cedd086064bc89908656506c7cea15166b30f2e646e0fcee2b60ff58f6b3e68ab5df74b42b5fd227b154a31fc4bec6a05c6f5bde39d3a3e64bf325a05072bf067be249"}, @INET_DIAG_REQ_BYTECODE={0x3b, 0x1, "e5bc5898247e8147ef4d5b0d3408228a3c2665a4b2153bf81bf628a1e5dc0dd7863459104b78c579ecf9dd735201467b11e30f9ad6de70"}, @INET_DIAG_REQ_BYTECODE={0xf, 0x1, "4a61badedc03eda8d2de7e"}, @INET_DIAG_REQ_BYTECODE={0x4}]}, 0x168}, 0x1, 0x0, 0x0, 0x4000880}, 0x20000800) syz_usb_connect$rtl8150(0x4, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0xffffffffffffffcf, 0x70bd29, 0x25dfdbf6, {0x0, 0x0, 0x0, 0x0, 0x2686a, 0x5d22a}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x12}}}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x69d16}]}, 0x3c}}, 0x20040010) syz_clone(0x8800000, &(0x7f00000005c0)="42748ab04ab4ef5b1b7ecee6e26b2f1cc994518f76367faedc36474ba7ac68f282ba6e1f6431e81cbaf2fd1e48216c867c9444d0abb3f58cf3947695aa9e7f2172d20fb746936c344deb", 0x4a, &(0x7f00000006c0), &(0x7f0000000700), &(0x7f0000000740)="a502823216bce2246f76adf2d074f22c3f0f38a24c86fd9de22c7ab80807114df81994d7f71c7024a7fbee55ab974e0a5c93ff233b2bc701ae85ee0bf8eeb98a6865c2d02e") ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000480)=0xffffffffffffffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r3, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x408) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000640)="82", 0x1}], 0x1}, 0x400c9c1) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 9m24.661702496s ago: executing program 6 (id=665): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x30, r1, 0x207, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x30}}, 0x4008080) 9m23.294925742s ago: executing program 6 (id=667): syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x8) poll(&(0x7f00000014c0)=[{0xffffffffffffffff, 0x84}, {0xffffffffffffffff, 0x2000}, {0xffffffffffffffff, 0x10}, {0xffffffffffffffff, 0x1187}, {0xffffffffffffffff, 0x6}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x44}, {}, {r1, 0x11d4}], 0x9, 0x10000) r2 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000280)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x2014050, 0x0) r4 = creat(&(0x7f0000000100)='./file0/file0\x00', 0xbc9dc8fbd81cb4a1) fcntl$lock(r4, 0x6, &(0x7f0000000000)={0x1, 0x2, 0x7fffffffffffffff, 0xfffffffffffffff7}) truncate(&(0x7f00000007c0)='./file0/file0\x00', 0x7ff) keyctl$revoke(0x3, r3) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a317053870dd28a79321fcad7ff0fbcb566a99af14c31ed46ad59300", 0x1c}, 0x48, 0xffffffffffffffff) syz_usb_control_io$hid(r2, &(0x7f00000009c0)={0x24, &(0x7f0000000440)={0x20, 0x22, 0x5, {0x5, 0x3, "89effb"}}, &(0x7f0000000480)={0x0, 0x3, 0x10, @string={0x10, 0x3, "1cf1a108bc6f4c1826959612bf06"}}, &(0x7f0000000780)={0x0, 0x22, 0x1c, {[@main=@item_4={0x3, 0x0, 0x8, "58b7c914"}, @local=@item_012={0x2, 0x2, 0x3, "6818"}, @main=@item_012={0x1, 0x0, 0x8, "b9"}, @main=@item_012={0x2, 0x0, 0xb, "699b"}, @global=@item_4={0x3, 0x1, 0x7, "d19c4e82"}, @local=@item_4={0x3, 0x2, 0x0, "6347be2b"}, @main=@item_4={0x3, 0x0, 0xa, "109691d2"}]}}, &(0x7f0000000980)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5efe, 0xf8, 0x1, {0x22, 0xc9}}}}, &(0x7f0000000c00)={0x2c, &(0x7f0000000a00)={0x0, 0x5, 0xe9, "34fd4d8c9bc39bbf1b2f6faea0a21dcc3611b9513b7532414191e6385294b57df5050489b451931a936dedc5c156909e6f4358394cd6671589963f2bb334a26cd4303ff63ee883b7d687a2a5f2013b89413bad06d594e2d9fb09b66e9efaf3a34b2a8901716bcbb67b36d18e8a920a6b638271cf71badbb6b2647f96a22e2d5b3f93da39a824ecf48feac03d4b1b111ea4a16e652f9a6dc162da13313eef9dd133df089da9b37bc9a39860fb474576f07d4c625c6575a16e8acf6c157835bb98f5d475c424363d753ae049407b4364dbe995af30aa4181958fc3db14f18f9edb988ccf08eb26671156"}, &(0x7f0000000b00)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0xf}, &(0x7f0000000b80)={0x20, 0x1, 0x1, "a2"}, &(0x7f0000000bc0)={0x20, 0x3, 0x1, 0x7}}) syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000dc0)='./file1\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00a717cf64394a00dc299b573660f498c4d99aac48af10923f703f53e58070c2bf4575228d0e471df7101ac03b8d48a1b0fc276e395f25b63e9a27cd2ab98888989eec154d97b4dbcf"], 0x2, 0xa09, &(0x7f0000001540)="$eJzs3UuMHEfdAPDq2Z31M5/H+WyyOCaxCSThkd14vZiHBXEUX7DiiFukiIvlOMHCMQhHgkQ52D5xI1FkrjzEKZcIEBK5ICsnLpGIJS45BQ4csIwUiQME7EW7WzU7+/eMemZt73h2fj+ptqa6aqaqZ3t6erq7qhIwthpLf+fnp6uULr3z5tG/P/y3LYtLnmiXaC39nexINVNKVU5Phtf7cGI5vv7Raye7xVWaW/pb0umZa+3nbkspnU/70uXUSnsuXXnjvbmnj184dnH/+28dvnpn1h4AAMbLty4fnt/9lz/dv/Pjtx84kja1l5fj81ZOb8/H/UfygX85/m+k1emqI3SaCuUmc2iEchNdynXW0wzlJnvUPxVet9mj3Kaa+ic6lnVbbxhlZTtupaoxsyrdaMzMLP8mT0u/66eqmbOnz7xwbkgNBW67fz6YUtonCMI4hoUdw94DASyL1wtvcj6eWbg17Veb7K/+a082uj8fboP13v7VP1r1/+qCPQ63z0bdmsp6lc/R9pyO1xHi/UuDfv7L68XrEc0+29nrOsKoXF/o1c6JdW7HWvVqf9wuNqqv57i8D98I+Z2fn/g/HZX/MdDdv5z/F4SxDQvD3gEBd61439xCVvLjfX0xf1NN/uaa/C01+Vtr8rfV5MM4++3LP0mvVyu/8+Nv+kHPh5XzbPfk+P8GbE88Hzlo/fG+30Hdav3xfmK4m/3+xLOnvvL8c1eW7/+v2tv/jby978vpVv5sXc4FyvnCeF69fe9/a3U9jR7l7g3tuadL+aXHu1aXq3atvE7q2M/c1I7p1c/b0avc3tXlWqHclhw2h/bG45Ot4Xnl+KPsV8v7NRnWtxnWYyq0o+xXduY4tgPWomyPve7/L9vndGpWL5w+c+rxnC7b6R8nmpsWlx9Y53YDt67f/j/TaXX/n+3t5c1G535hx8ryqnO/0ArL53osP5jT5XvuOxNblpbPnPzemedv98rDmDv3yqvfPXHmzKkfeOCBBx60Hwx7zwTcabMvv/T92XOvvPrY6ZdOvHjqxVNnDx46dHBu7tBXD87PLh3Xz3Ye3QMbycqX/rBbAgAAAAAAAAAAAPTrh8eOXvnzu1/+YLn//0r/v9L/v9z5W/r//zj0/4/95Es/+NIPcGeX/KUyYYDVqVCumcP/h/buCvXsDs/7RI7b8/jl/v+lujiua2nPfWF5HL+3lAvDCdw0XspUGIMkzhf46RxfzPEvEwxRtaX74hzXjW9dtvUyPoVxKUZT+b+VraGMY1L6f/ca16ns/3euQxu5/dajO+Gw1xHo7h/G/xaEsQ0LC2bxAO4Ow57/s5z3LPHZP3xz82Ioxa49uXp/GccvhVtxt88/qf6NNf9ne/67vvd/Yca81trq/ffPrn7QUW3a02/9cf3LONC7Bqv/41x/WZtHUn/1L/wi1B8vCPXpP6H+rX3Wf9P6711b/f/N9Ze37dGH+q1/ucVVY3U74nnjcv0vnjcurof1L2N7Drz+a5yo8UauH8bZqMwzO6hRmf+3l3gfxpdyuuwIy30Ocb6TQdtf7q8o3wO7w+tXNd9v5v8dbV/Lcd3nocz/W7bHVpd0oyPd7PLebtR9DYyqD13/E4SxDQsLC3f2hFaNoVbO0N//Yf9OGHb9w37/68T5f+MxfJz/N+bH+X9jfpz/N+bH+fVifpz/N76fcf7fmH9feN04P/B0Tf4na/L31OTfX5O/tyb/UzX5+2vyH6jJf7Am/96a/Idq8j9Tk//ZmvyHa/Ifrcn/XE3+Rlf6o4zr+sM4i/3zfP5hfJTrP70+/7tq8oHR9dO3Dzz13G++3Vru/z/VPh9SruMdyelm/u38o5yO171TR3ox792c/mvIv9vPd8A4ieNnxO/3R2rygdFV7vPy+YYxVHUfsaffcat6HeczWj6f4y/k+Is5fizHMzmezfGBHM+tU/u4M5769e8Ov16t/N7fEfL7vZ889geK40Qd7LM98fzAoPezx3H8BnWr9a+xOxgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDQNJb+zs9PVyldeufNo88ePz27uOSJdonW0t/JjlSz/byUHs/xRI5/nh9c/+i1k53xjcV4KqUqzaUqVe3l6Zlr7Zq2pZTOp33pcmqlPZeuvPHe3NPHLxy7uP/9tw5fvYNvAQAAAGx4/wsAAP//2XsNow==") r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x101000, 0x26) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r5, 0x40186e8d, &(0x7f0000000040)={@id={0x2, 0x0, @a}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r7}, 0xc) syz_usb_control_io$rtl8150(r0, &(0x7f0000000180)={0x14, &(0x7f0000000040)={0x20, 0x23, 0xea, {0xea, 0x10, "a1c91339586f610dcf402605b58879f5d48b085c89ecd719161d33585553c8a64a215238f34d53a9a9bcb7f254553b0e1196e01ac48a1e05a4c57d05e1b41271a7da8247a3bb9fd71a21aaef0385192866a06fbf9184bb9e186a61548e9502e006cc9d34d27e41d2d4799257bfe6d7f040819a3d89583f419cd6fc2aa13f84f15d1171017ea6090bf72c5576f66bbdb3a4ffe099f44d065eee1a6a739ff6d319f459189aa1310d8fa57ccdeae93695ab0c11b9fac6625e6371293c655a583fed281f871d7694042796fd1d73188c570c54db7c6e29705fa6deb4923904a80423549a936c418efd3c"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xf0ff}}}, &(0x7f0000000380)={0x2c, &(0x7f0000000e00)={0x0, 0xd, 0x58, "5bc0ba16ad49acd7dbbfad67b2c30fad5ab46afecbea0fd5e1e00323911aa5396fdd7cfca20cf4adb64216e65fe795348ad853e770709c42f7821d44b0c6f5a65b35cc3224d32338e1b6854c69c230b337d34da100000000"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0xbd}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000001f80)=ANY=[@ANYBLOB="c00503000000c06a08000000cd81289e0400000000000000bdf92408b979d2c20afc2794339adbf23764b3b69a5756db5306ad5edacda28fd8eb9faf1ec2ccf903a0f2ef936c5d2f86c47927712b29fb38328c886d2af460fce34f465d627fdf46eaf6ab6e6c8ed09b6e694f1fea93e53dd0548f5c11bbafb9ded93535639e5629c5eb28d2abd0f50aef29"], &(0x7f0000000340)={0x40, 0x5, 0x3, "3e6288"}}) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000d80)={0x0, 0xa, 0x4, "e8012fdc"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, &(0x7f00000013c0)={0x84, &(0x7f0000000c40)={0x20, 0x17, 0x8f, "e550d31edb8ee87010d0f304384ac8177ccc4912226f3d7fa928289e30bc394a44f3c5e73d9ea2020a39a023e1dbc3b679a00721fa2aa8d86629875ee2368e6fe487f46c0528d2690e22c7adc7352dd1426c96853ed235a05e6c545e6bc1b773ae94f16f77ede6784926d6088880d680a6e4a0849b9bd01ca1df331b62a09a1e5e39ea10b59d31441bd4e7b39c633a"}, &(0x7f0000001000)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000001040)={0x0, 0x8, 0x1, 0x17}, &(0x7f0000001080)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f00000010c0)={0x20, 0x0, 0x4, {0x120, 0x10}}, &(0x7f0000001100)={0x40, 0x7, 0x2, 0x9}, &(0x7f0000001140)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000001180)={0x40, 0xb, 0x2, "0be3"}, &(0x7f0000000300)={0x40, 0xf, 0x2, 0xfff}, &(0x7f0000001200)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}, &(0x7f0000001240)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000001280)={0x40, 0x19, 0x2, 'zq'}, &(0x7f00000012c0)={0x40, 0x1a, 0x2, 0x5}, &(0x7f0000001300)={0x40, 0x1c, 0x1, 0xc8}, &(0x7f0000001340)={0x40, 0x1e, 0x1, 0x49}, &(0x7f0000001380)={0x40, 0x21, 0x1, 0x5a}}) 9m18.9172498s ago: executing program 6 (id=678): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$iso9660(&(0x7f0000000800), &(0x7f0000000000)='./file0\x00', 0x200000, &(0x7f0000000680)=ANY=[@ANYBLOB="73657373696f6e3d3078303030303030303030303030303030372c73657373696f6e3d3078303030303030303030303030303030642c636865636b3d7374726963742c636865636b3d7374726963742c646d6f64653d3078303030303030303030203030303030342c6d61703d6f66662c757466382c696f636861727365743d6575632d6a702c827466382c6d61703ddc7ad960e75e61"], 0x0, 0x3fc, &(0x7f0000000280)="$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") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x48100, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0xfb) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x82) syz_mount_image$fuse(0x0, &(0x7f00000005c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000240), 0x20045a, &(0x7f0000000200)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) syz_mount_image$fuse(&(0x7f00000000c0), &(0x7f00000004c0)='./file0\x00', 0xa0, &(0x7f00000004c0)=ANY=[], 0xff, 0x0, 0x0) r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f0000000280), 0x83, 0x4a7, &(0x7f0000001900)="$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") r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40100, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, 0x0) rename(&(0x7f0000000080)='./file1\x00', &(0x7f0000001140)='./file0/file0\x00') r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r3, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) syz_mount_image$squashfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x1, 0x234, &(0x7f0000000000)="$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") 9m16.964472582s ago: executing program 6 (id=681): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) socket$key(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$igmp(0x2, 0x3, 0x2) r0 = socket(0x2, 0x3, 0x6) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff0009240605060201000009240300030300", @ANYRES8=r0, @ANYBLOB="07b0cf7e2c89cc"], 0x0) 9m15.354207519s ago: executing program 6 (id=685): socket$nl_netfilter(0x10, 0x3, 0xc) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000711817000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socket(0x10, 0x803, 0x6) socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r0}, &(0x7f0000000280), &(0x7f0000000340)=r1}, 0x20) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00000005c0)=ANY=[], 0x0) 9m12.522550309s ago: executing program 35 (id=685): socket$nl_netfilter(0x10, 0x3, 0xc) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000711817000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socket(0x10, 0x803, 0x6) socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r0}, &(0x7f0000000280), &(0x7f0000000340)=r1}, 0x20) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00000005c0)=ANY=[], 0x0) 6m1.333249404s ago: executing program 1 (id=1118): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TESTMODE(r0, &(0x7f0000000300)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1e0, r1, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x9, 0x2a}}}}, [@NL80211_ATTR_TESTDATA={0xd6, 0x45, "50ce32851957caa94e867215267f0dec12d2194461dd861a0c78a4e7e76ff2ac1ea82f90c590fc5d4fc5547ab5c8f25dbf68379c0fc4ad6f1516f793bd082c1a067f2bb26531802355052173852ffbb8ff2dcbb1a36e3309258577416ac3f6f4d0b3241650cf8a6f5758c51218cea9a0818b4a1dd1d92703bf76f39f7864b39796114fc7a9d0527bf1fb3d1aa99dadb664756f864e51b6ce75474fbf93631d69d4638b6a468f32492a4bc16368fd45c55ceb58f76bc07e0cecb13baa8704488433e9bf142a829b93b8d194954969b9a20c29"}, @NL80211_ATTR_TESTDATA={0xab, 0x45, "a6074f18159906acc50ef733392514fc469852d544aecfede0674116530440b17f0f6ab199c4caee5ff8f5d05dbb045a72f2eb716582ed2bf24b755e6239e0a454b6656c4a16f6ddc8791db0de186b812a1b0e72fdcf83dd07fbd51d2a9bc4785be61035621c47bef75dfdd1ee6af89fdc60c71f7caf0ddde290cdb09ac86d475150ec806b4bfff07c29bc84289d06137390d112800f9a0006d41d0830d290901240ef19f56bd9"}, @NL80211_ATTR_TESTDATA={0x22, 0x45, "50d21fc948bfb995a606da95ebf07f1fa5990b7a8fe3b402ad60d695f9a2"}, @NL80211_ATTR_TESTDATA={0xd, 0x45, "b98e453cbc279149d4"}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x4040855}, 0x4085) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, r1, 0x8, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3, 0x7e}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x10) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000004c0), 0x400800, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000500)='io.stat\x00', 0x0, 0x0) bind$l2tp6(r6, &(0x7f0000000540)={0xa, 0x0, 0x0, @private2, 0x5, 0x3}, 0x20) syz_emit_ethernet(0x1da, &(0x7f0000000580)={@remote, @local, @val={@val={0x88a8, 0x2, 0x0, 0x2}, {0x8100, 0x1, 0x1}}, {@ipv6={0x86dd, @udp={0x5, 0x6, "c41b9a", 0x19c, 0x11, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[@routing={0x89, 0xa, 0x1, 0x1b, 0x0, [@mcast2, @local, @empty, @mcast2, @local]}, @hopopts={0x33, 0x0, '\x00', [@pad1]}, @dstopts={0x2f, 0x7, '\x00', [@hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x2e}}, @jumbo={0xc2, 0x4, 0xfffffffe}, @generic={0x4, 0x15, "3db59b117d129f7069ee20a2d58246d2c4b63f9d2b"}, @enc_lim={0x4, 0x1, 0x3}, @jumbo={0xc2, 0x4, 0x3}]}, @srh={0x0, 0xa, 0x4, 0x5, 0x80, 0x18, 0x119, [@private2, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00', @remote]}], {0x4e22, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "b128f756ff8be1464c36cc30e22e9a8a75880550c3b47d538f7e5da58cc5679b", "a5c0f69964c0119d6b9c49fde0592cce9ea39d2871371f1ee61b3efd1c6eb4e4efe289c0e4d4e32bf2f8b7aa937a08a3", "61761babc5a4d75b896f1d88ce41cc2418dc373a46382000655be46e", {"1e14d056e48536e3cd4a36de0c2370da", "beeaea9faecb744b95fdb63ab3644601"}}}}}}}}, &(0x7f0000000780)={0x1, 0x4, [0x71f, 0x7d7, 0xb23, 0x211]}) write$dsp(r6, &(0x7f00000007c0)="6c9ea030e57a50452286f6e2819405936f6145fc3f0b882f2c526e48fb25f7561bc4e0515ae8b4e2b5444b2f7676378aab", 0x31) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000840)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000800)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f0000000880)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x9, @loopback, 0x10}, r7}}, 0x30) ioctl$VHOST_SET_VRING_ERR(r6, 0x4008af22, &(0x7f00000008c0)={0x1, r6}) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$VHOST_SET_VRING_CALL(r6, 0x4008af21, &(0x7f0000000900)) socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$NL80211_CMD_GET_POWER_SAVE(r6, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x28, r1, 0x8, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xf8000000, 0x78}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000800}, 0x8000) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), r5) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r8, 0x300, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack={{}, {0x8}, @broadcast}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end={{}, {0x7ffd}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040}, 0x20000400) openat$cgroup_pressure(r5, &(0x7f0000000bc0)='io.pressure\x00', 0x2, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000c40), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r9, &(0x7f0000000d80)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000d40)={&(0x7f0000000c80)={0x94, r10, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x40, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x28, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}]}, 0x94}, 0x1, 0x0, 0x0, 0x40000}, 0x814) sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x28, r8, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x588, 0x3}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000840}, 0x8084) r11 = socket$packet(0x11, 0x3, 0x300) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000ec0)={0x8001, 0x7, 0x0, 0x7f, '\x00', '\x00', '\x00', 0x4, 0x1, 0x10000, 0x0, "1dbbb1dc6dbe591082edfec939e0d1ca"}) r12 = open$dir(&(0x7f0000001000)='./file0\x00', 0x0, 0x90) splice(r12, &(0x7f0000001040)=0x74c2, r11, &(0x7f0000001080)=0x9, 0x6, 0x18) 5m57.713805596s ago: executing program 1 (id=1127): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000500)={0x200, 0x1, &(0x7f0000000180)=[r1], &(0x7f0000000200), &(0x7f0000000340)=[0x0], &(0x7f0000000340), 0x0, 0xfffffffffffffffc}) 5m54.771218896s ago: executing program 1 (id=1133): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002080)=@delchain={0x484, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0x2}, {0x0, 0x1}, {0x5}}, [@TCA_CHAIN={0x8, 0xb, 0x4}, @filter_kind_options=@f_u32={{0x8}, {0x450, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x4, 0xfff3}}, @TCA_U32_POLICE={0x444, 0x6, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x3, 0x66, 0x5, 0x1, 0xc, 0xee4, 0x7, 0x0, 0xe69, 0x7, 0x6, 0x0, 0x0, 0x6, 0xf51, 0x1, 0x419, 0xebe, 0x8000, 0xa, 0x9, 0xfffffff5, 0xc, 0x0, 0x7, 0x4, 0x5, 0x5, 0x9, 0xf419, 0x7f, 0xc, 0x7, 0x37b, 0xeaa, 0x5, 0x1, 0x8, 0x80, 0x10, 0x1, 0x3, 0xfe4, 0x3, 0x0, 0x8001, 0x5608f104, 0x1, 0x7, 0x4, 0x9, 0xffff, 0x400, 0x938, 0x53dccb74, 0x1ff, 0x6a, 0x5, 0x5, 0x3f1, 0x2, 0x7, 0x200, 0x7a0, 0xce2420ac, 0x0, 0x1, 0x2, 0x6, 0xffffffff, 0x4, 0x7, 0x80000000, 0x2, 0x0, 0x3, 0x1, 0x6961, 0x3ff, 0x9, 0x9, 0x9, 0x3, 0x8, 0x80000001, 0x8, 0x80000001, 0x2, 0x7fff, 0x6f, 0x8e7, 0x6, 0x8, 0x1, 0x800, 0x10001, 0x401, 0x9d7, 0xbad, 0xf, 0x0, 0x1000, 0x5, 0x0, 0x3, 0x6, 0x1d7, 0x0, 0x1ff, 0x0, 0xc0, 0x4, 0x3, 0x2ac1c23d, 0x400, 0x8, 0xffffff20, 0xffff, 0x1, 0x3, 0x0, 0x7, 0x0, 0xb, 0x0, 0x1709af17, 0x3ff, 0x6, 0xff, 0xec00000, 0x4, 0x0, 0x7, 0x1, 0x2, 0x741f0ae5, 0x1, 0x80, 0x5, 0x0, 0x6b2c, 0x101, 0xff, 0x7f, 0x6, 0x4d6f, 0xffffffff, 0x6, 0xe234, 0x1, 0x10, 0xd2, 0x88, 0x1, 0x8, 0x8, 0x1000, 0x2, 0x5, 0x3, 0x4, 0x8, 0x1ff, 0xfff, 0x7, 0x8, 0x9, 0x4, 0x42d, 0x7, 0x3, 0x39f, 0xa0000, 0x0, 0xfffffff7, 0x7, 0xdcf, 0x7, 0x7fffffff, 0xfffffffa, 0x8001, 0x0, 0x4, 0x200, 0x2c, 0x34b, 0x33, 0x1, 0xb05, 0x8, 0xa2d, 0x7fffffff, 0x42, 0x4, 0x4, 0x200, 0x5, 0x4, 0x59, 0x0, 0x8, 0x9, 0xd737, 0x80000000, 0x4, 0x7f, 0x5, 0x2d, 0x1, 0xa, 0x10, 0x4, 0x6, 0x2, 0x8, 0x3, 0x9, 0x1, 0x60000, 0x3, 0x4, 0x8baa, 0x4, 0x20000000, 0x9, 0x1, 0x1, 0x6, 0x80000001, 0xc, 0x10, 0x4, 0x4, 0x80000001, 0x6, 0x800, 0x0, 0x3, 0xc, 0xb49e, 0x6, 0x5, 0x10, 0x0, 0x9, 0x1, 0x4, 0x6, 0xc, 0x3, 0xfffffff5, 0xb441, 0xfffffff9, 0x3, 0x8000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x6, 0x0, 0xffffff7f, 0x7, {0x8, 0x0, 0x9ec, 0x2, 0xffff}, {0x6, 0x2, 0xfffc, 0x38, 0x688f, 0xfffffff9}, 0x7, 0xb563, 0x9}}]}]}}]}, 0x484}}, 0x20004880) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) 5m52.561672974s ago: executing program 1 (id=1140): syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x3, 0x3, 0x17) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r4, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)=[{0x0}], 0x1}, 0x3) close(r1) 5m50.146130601s ago: executing program 1 (id=1143): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000500)={0x200, 0x1, &(0x7f0000000180)=[r1], &(0x7f0000000200), &(0x7f0000000340)=[0x0], &(0x7f0000000340), 0x0, 0xfffffffffffffffc}) 5m48.843704572s ago: executing program 1 (id=1147): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000340)={0x40, 0xf, 0x1, 'V'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000580)={0x34, &(0x7f0000000400)={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0}) 5m32.834886944s ago: executing program 36 (id=1147): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000340)={0x40, 0xf, 0x1, 'V'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000580)={0x34, &(0x7f0000000400)={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0}) 4m10.257514696s ago: executing program 8 (id=1331): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, 0xa, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xfdd}]}, 0x28}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) (fail_nth: 3) 4m9.161881728s ago: executing program 8 (id=1333): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000fc0)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xb}, {0x0, 0xfff3}, {0xd, 0x300}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0xc1f5}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_ACT={0x0, 0x9, 0x0, 0x1, [@m_mirred={0x0, 0x4, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x0, 0x2, {{0x2, 0x88, 0x7, 0x8001, 0x3}, 0x1}}, @TCA_MIRRED_PARMS={0x0, 0x2, {{0x2, 0x6, 0x0, 0xe, 0x7}, 0x4, r2}}, @TCA_MIRRED_PARMS={0x0, 0x2, {{0x0, 0x9, 0x4, 0xc, 0x21f}, 0xb908b0738123de3, r2}}]}, {0x0, 0x6, "bfbed12fb9aab2c9ff3239fe94f4dd1742c53136248f3899bb53c6e1a12fd7b632c2f51453c4"}, {0x0, 0x7, {0x1}}, {0x0, 0x8, {0x0, 0x1}}}}, @m_ct={0x0, 0x6, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_CT_MARK_MASK, @TCA_CT_PARMS={0x0, 0x1, {0xa6, 0x7, 0x0, 0xa, 0xe1b}}]}, {0x0, 0x6, "37ff080e7845f95be1d1a8867e2d70c12f9f46ea3356b07d200dfbf4e0d4294979ebaeb64026b02d24b5a19014cba9083d930117c1302d62dd219cc7ba90e7d7fcedb3b48314a8bbded3fde95e1d1e4dd16ed823a7d14048cd66ce43e8f8eebcd3c72f78a04e9a4f3d7af5a1bc208064f96767856ffae0742a1fe9c25d5e8cd2447599162855c400bce72048d3151723ae0209dee45904b9842e1e438516df02ed478c36eac56a0ae34eda70c0d166d84deb82b682ed52116e3b856fab42712e3daea6ca0438e5b427588f03e8fd8959bca128dc590a689b526533665a668c6288bb44e042e8946877afca0718ab472523d0ca7a9060b0975e40e38cf6f5"}, {0x0, 0x7, {0x0, 0x1}}, {0x0, 0x8, {0x3, 0x1}}}}, @m_csum={0x0, 0x6, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x0, 0x1, {{0x2, 0xd, 0x5, 0xc, 0x7d}, 0x52}}, @TCA_CSUM_PARMS={0x0, 0x1, {{0x9c9, 0x101, 0xffffffffffffffff, 0x8001}, 0x4b}}, @TCA_CSUM_PARMS={0x0, 0x1, {{0x0, 0x1, 0x2, 0x689, 0x6}, 0x69}}, @TCA_CSUM_PARMS={0x0, 0x1, {{0x3d, 0x4, 0x10000000, 0x3, 0xe851}, 0x15}}]}, {0x0, 0x6, "3d7e56cb01f42fac4a68ed0704895c192fdb734f627657b2ba4a0fe361"}, {0x0, 0x7, {0x1, 0x1}}, {0x0, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getpgrp(0x0) io_setup(0x3, &(0x7f0000000040)=0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd27, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e}, [@FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[], 0x28}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) close(r6) r7 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000380)=@base={0x1f, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000640), 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}}) io_submit(r3, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x7, 0x1, r5, &(0x7f0000000080)="dfee4789648d65bd18599c9c91a9ed9c14976dc77180773ca3270b686be1", 0x1e, 0x6, 0x0, 0x3, r6}]) 4m7.357367092s ago: executing program 8 (id=1336): r0 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x88600, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000680)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_SCROLLCONSOLE(r1, 0x541c, &(0x7f0000009d00)) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000040)=ANY=[@ANYBLOB='\r\x00\x00\x00\x00\x00\x00\x00']) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xf}, {0xffff, 0xffff}, {0x6, 0x9}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x7ff, 0x8, 0x400, 0x12, 0x11, 0x15, 0x5}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x2}, 0x0) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f00000009c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000980)={&(0x7f0000000800)={0x168, 0x12, 0x200, 0x70bd2b, 0x25dfdbff, {0x1f, 0x1, 0x3, 0x4, {0x4e23, 0x4e23, [0xfffffffa, 0x7, 0x0, 0x4], [0x3, 0x1, 0x1ff, 0x2a76], 0x0, [0x4, 0x6]}, 0x8, 0x7}, [@INET_DIAG_REQ_BYTECODE={0x2d, 0x1, "e9f7b0cf457042e6da3af244edd516cd45fd245a5148be17bbc41ba01f3ab2555eb57f3bc13ec90821"}, @INET_DIAG_REQ_BYTECODE={0x9b, 0x1, "7f094c1d85b2b2003db0fa02a9b9c5fd7ea047dd891852c51e980331fa59d18706972edbfca04f550de406b8e25ece6ca7370f0213d3404e8dc140b8343728baccd8bc0b909f230e3551b40f5548147334e3ab42cedd086064bc89908656506c7cea15166b30f2e646e0fcee2b60ff58f6b3e68ab5df74b42b5fd227b154a31fc4bec6a05c6f5bde39d3a3e64bf325a05072bf067be249"}, @INET_DIAG_REQ_BYTECODE={0x3b, 0x1, "e5bc5898247e8147ef4d5b0d3408228a3c2665a4b2153bf81bf628a1e5dc0dd7863459104b78c579ecf9dd735201467b11e30f9ad6de70"}, @INET_DIAG_REQ_BYTECODE={0xf, 0x1, "4a61badedc03eda8d2de7e"}, @INET_DIAG_REQ_BYTECODE={0x4}]}, 0x168}, 0x1, 0x0, 0x0, 0x4000880}, 0x20000800) syz_usb_connect$rtl8150(0x4, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0xffffffffffffffcf, 0x70bd29, 0x25dfdbf6, {0x0, 0x0, 0x0, 0x0, 0x2686a, 0x5d22a}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x12}}}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x69d16}]}, 0x3c}}, 0x20040010) syz_clone(0x8800000, &(0x7f00000005c0)="42748ab04ab4ef5b1b7ecee6e26b2f1cc994518f76367faedc36474ba7ac68f282ba6e1f6431e81cbaf2fd1e48216c867c9444d0abb3f58cf3947695aa9e7f2172d20fb746936c344deb", 0x4a, &(0x7f00000006c0), &(0x7f0000000700), &(0x7f0000000740)="a502823216bce2246f76adf2d074f22c3f0f38a24c86fd9de22c7ab80807114df81994d7f71c7024a7fbee55ab974e0a5c93ff233b2bc701ae85ee0bf8eeb98a6865c2d02e") ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000480)=0xffffffffffffffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r3, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x408) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000640)="82", 0x1}], 0x1}, 0x400c9c1) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4m3.035558812s ago: executing program 8 (id=1343): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x2048c5, &(0x7f0000000580)=ANY=[@ANYBLOB=',shortname=winnt,nonumtail=0,nfs=nostale_ro,uni_xlate=1,shortname=lower,sys_immutable,showexec,utf8=0,nonumtail=0,discard,utf8=0,utf8=0,shortname=win95,\x00', @ANYBLOB='\x00\x00\x00\x00', @ANYRESHEX=0xee00, @ANYRES64, @ANYRES8, @ANYRES8, @ANYRES32], 0x0, 0x2b6, &(0x7f0000000dc0)="$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") r2 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r2, &(0x7f0000002c00)={0x2020}, 0x2020) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) r4 = accept$alg(r3, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x10) sendmmsg$alg(r4, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000003c40)="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", 0x1001}], 0x1, 0x0, 0x0, 0x81}], 0x1, 0x20041001) recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000002c40)=""/4088, 0xff8}, {&(0x7f00000000c0)=""/28, 0x1c}], 0x2}, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="15e3000000000000140012800400010000000076746170002100028008000500", @ANYRES32=r5, @ANYBLOB="0a000100aaaaaaaaaabb0000"], 0x48}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) syz_clone3(&(0x7f0000000040)={0x8050100, 0x0, 0x0, 0x0, {0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, {r7}}, 0x58) 4m0.697191953s ago: executing program 8 (id=1346): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000027c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x4000000000000e9, 0x40040) close(0x3) 3m59.47081935s ago: executing program 8 (id=1349): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$netrom(r0, &(0x7f0000000100)=""/218, 0xda, 0x0, &(0x7f0000000280)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x2}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x60, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x4000000, @mcast1, 0xfffff801}}, {0x14, 0x2, @in={0x2, 0x4e20, @private=0xa010102}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x60}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB="48010000100001000000000000000000e00000020000000000000000000000000a010101000000000000000000000000000000004e2100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffdfff0000000000000000000000000000000033000000fe8000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000000004000000010000000000000000000a000000000000000000000048000100736861323536000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048460000000000000000000000000008001d00000000000800220003"], 0x148}}, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) socket$igmp6(0xa, 0x3, 0x2) socket(0x2, 0x80805, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x3, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x1ff, 0x7fffffff}, 0x0, 0x0) sendmmsg$inet(r3, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000280)='S8', 0x2}], 0x1}}], 0x1, 0x20008000) shutdown(r3, 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0xb, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x18, 0x2, [@TCA_TBF_RATE64={0xb, 0x4, 0x2204d2b4bfe26deb}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x44}}, 0x44080) 3m56.651565089s ago: executing program 37 (id=1349): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$netrom(r0, &(0x7f0000000100)=""/218, 0xda, 0x0, &(0x7f0000000280)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x2}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x60, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x4000000, @mcast1, 0xfffff801}}, {0x14, 0x2, @in={0x2, 0x4e20, @private=0xa010102}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x60}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB="48010000100001000000000000000000e00000020000000000000000000000000a010101000000000000000000000000000000004e2100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffdfff0000000000000000000000000000000033000000fe8000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000000004000000010000000000000000000a000000000000000000000048000100736861323536000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048460000000000000000000000000008001d00000000000800220003"], 0x148}}, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) socket$igmp6(0xa, 0x3, 0x2) socket(0x2, 0x80805, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x3, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x1ff, 0x7fffffff}, 0x0, 0x0) sendmmsg$inet(r3, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000280)='S8', 0x2}], 0x1}}], 0x1, 0x20008000) shutdown(r3, 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0xb, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x18, 0x2, [@TCA_TBF_RATE64={0xb, 0x4, 0x2204d2b4bfe26deb}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x44}}, 0x44080) 2m58.436095408s ago: executing program 3 (id=1444): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000dc0)={0x0, &(0x7f0000000200), 0x0, r1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000500)={0x200, 0x1, &(0x7f0000000180)=[r1], &(0x7f0000000200), &(0x7f0000000340)=[0x0], &(0x7f0000000340), 0x0, 0xfffffffffffffffc}) 2m57.388933219s ago: executing program 3 (id=1448): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000500)={0x200, 0x1, &(0x7f0000000180)=[r1], &(0x7f0000000200), &(0x7f0000000340)=[0x0], &(0x7f0000000340), 0x0, 0xfffffffffffffffc}) 2m56.353624857s ago: executing program 3 (id=1451): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_int(r0, 0x6, 0x2, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) memfd_secret(0x80000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x2a000, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r2, @ANYRES8=r3], 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 2m55.039482159s ago: executing program 3 (id=1454): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="18008000a363e2e59151c370fbdbdf25000000000a000000"], 0x18}, 0x1, 0x0, 0x0, 0x8004}, 0x20000000) r1 = syz_mount_image$fuse(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x2, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB="2c766f6f746d6f64653d303030303030343030303030303030303031349c58df782c757365725f69643d", @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC=0xee00, @ANYBLOB=',blksize=0x0000000000001000,max_read=0x000000000000007f,blksize=0x0000000000000a00,default_permissions,max_read=0x0000000000000001,smackfsfloor=/#+.$[+]])^,\x00'], 0x1, 0x0, &(0x7f0000000380)="e6ffb5556610c2d58630a6692f56623b1d1989a4ba9b5bb8960ea7aa78c9220b8b200e5286ab2460eafb2b880d229ca23f6bc5bf98cc") mount_setattr(r1, &(0x7f00000003c0)='./file0\x00', 0x900, &(0x7f0000000580)={0x7a, 0x100000, 0x90000}, 0x20) syz_mount_image$hfs(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x1200001, &(0x7f00000001c0)=ANY=[@ANYRESHEX, @ANYRESHEX=0x0, @ANYRESOCT=0x0], 0x2, 0x345, &(0x7f0000000940)="$eJzs3U1r1E4cB/DvJJtt9t/Sf2wrBU9SLXgqbT0oXixSvPgGPEixtlsojRW0ghbE6lnEmyB49OZZ9C3oRXwDeupBPOmlCBqZyWQz2c6k2+1DuvT7Add0Mw+/2ZkkMy3tgIiOrSuzX9+c35T/RADAB3AJ8ACEQA3ASYyG91fXdizIbx0JpDnFtjQLq01b1lC+ePnXkcxfw4AqhQ5UkiTJtx1T/TyUWKg6wryCDR7Qp69ndT489MgOxkbaruPF6GGxhS08wGCV4RARUfX089/TT4kBPX/3PGBcz8N7/flfmN9sVRfHkdB6/ut1VyLk5/O/OiXXe8trcXMxXcLJ3veyVaKtLOuYSPKPu450ZPn9xpTLqMVOxeI1lpbj5sSGKuApLmtGshH1ulhYQMIVbT1NNWZZm5Yoa3u5ftWGQLZh2hH/cFmN1gXwh+94aa9u7lMHMYmP4rOYExFeYbE1/6slQnaT6qmo7VJJ4590l6haGaWpCq3Mwz+hKjmla8D7t3krG67PNYQvY7GRpYj2+XuUxfmi7s6FIRS/rZC2bsrdOpVrGKgJtWowc023Ev225hppr6uxFMTNiYU7sWvQ7y/rik48F9fFGH7gHWaN+b8nU4/DfWWGZmOESqlHRml7aiqlox8L1KV5e1dXJilXi9drR3me4RYuYvDew/WV+Thu3q3+IBtdXWY/vc/xpANRD0f5jvzfSINQHgQA9q3Sv0mSWE/VcBhdEKimXnidN3l9ZV7oe97eqpB3zrZTM+7EAGYA6HeyO0I3tT9u5erLC9whV6Tq+iV7W71TGJBBdpBFpU5lQ/dgeierqnDKR19HV0qji0qvPVqZj7u6E1GPyTsdozeqDoaqIOcLIl3/GeuVSXXXkS9RyfonKH7Z2JbAKHHKsQIaUq//dbaCaxXrnCf2Zwd/5C3fveY6cw4421ajh6zGJ+3FRjpOHMWfSu7+RxliFl9wk9//JyIiIiIiIiIiIiIiIiIiIiIiIiLqNbv9bYRufp2gWOPmMfzDG0REREREREREREREREREREREREREREREe2Ps/wv4aseYum3/37KdmhQ/3Qcq7Hb/X+Ovakd+B/v/io1e3ouM6Ej4FwAA//9lQFiS") syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x47, 0xc11, &(0x7f0000000d00)="$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") openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x22802, 0x184) unlink(&(0x7f0000000100)='./file1\x00') link(&(0x7f00000078c0)='./file1\x00', 0x0) unlink(&(0x7f0000000140)='./file1\x00') r2 = accept4$llc(0xffffffffffffffff, &(0x7f00000000c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000140)=0x10, 0x80000) r3 = socket$nl_route(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000480)}, {0x0}, {&(0x7f0000001480)="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", 0x101}], 0x3) syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x8002) r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x10) write$P9_RVERSION(r4, &(0x7f0000000400)=ANY=[@ANYRESHEX, @ANYBLOB="ca"], 0x13) ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5393, &(0x7f0000000280)) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x1, 0x3, 0x8000000000007, 0xaa, 0x3, 0x1, {0x0, 0x180, 0x20fe, 0x5, 0x87, 0xd615, 0x8000009, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) r5 = syz_io_uring_setup(0x1a3, &(0x7f0000000640)={0x0, 0x7167, 0x2000, 0x0, 0xcc}, &(0x7f0000000480)=0x0, &(0x7f00000001c0)=0x0) creat(&(0x7f0000000280)='./file0\x00', 0x175) mount$cgroup2(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x1000846, &(0x7f00000002c0)={[{@memory_hugetlb_accounting}]}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0xb2752a96f73d6e14, 0x0, 0x0, 0x0, 0x23456}) io_uring_enter(r5, 0x47bc, 0x3, 0x0, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9403000010000104f04e93294c00000000001700", @ANYRES32=0x0, @ANYBLOB="00000000000000001400350076657468305f6d61637674617000000005001100050000000a000200aaaaaaaaaa0e00004c0316"], 0x394}}, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, &(0x7f0000000180)={'wg2\x00'}) 2m52.73926798s ago: executing program 3 (id=1461): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x440880, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x6, [@typedef={0x4, 0x0, 0x0, 0x7}, @restrict={0x0, 0x0, 0x0, 0xb, 0x1}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0xfffffffd, [{0x0, 0x2}]}]}, {0x0, [0x0, 0x0, 0x0, 0xda]}}, 0x0, 0x4e, 0x0, 0x1}, 0x28) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000140)=0x3) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r2, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000380)={0x0, 0x83a5, 0x1, [0x5]}, 0xa) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x0, @loopback}, 0x4, 0x2000, 0x3}}, 0x2e) syz_emit_ethernet(0x4c, &(0x7f00000002c0)=ANY=[@ANYBLOB="0180c2000000ece65fbcee5586dd6001010000161100fe8000000000000000000000000000bbfe8000000000000000000000000000aa00030e220016907839f29f10718684f9c795aae3cd2f4cd19664d80a7d0d99d4f0fc853ee482e7688900f2b2a24c09bb7894124380c4d910fc47bfa654b425b7b94968a0f55cef0bf5c6e4dce9092d7a"], 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x80044940, &(0x7f00000010c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$msdos(&(0x7f00000003c0), &(0x7f0000000340)='.\x00', 0x126a4b5, &(0x7f0000005180)=ANY=[@ANYRES16=r9, @ANYRESHEX=0x0, @ANYRES16=r7, @ANYRES16=r9, @ANYRESDEC=r8, @ANYRES16=r6, @ANYRES16, @ANYBLOB="9a7f40ad4c7145903a868b9020e1e8899ed5747db23004fc9d248900abcaa6b065cf0800930a71dcd8b8955d93c78b9d4e5e06d8d5c9ac9b75d177754d6eba23e6d2be546c0dfecdf61baf732950a5729c01fbdc11e36cb411be200a9135657acd97d21ee46aac313ebdddd9265af16558dd3e5ba4836659a6abfe08aad84276acf949bdaa34bdf7f7b2dfb2fe8b9d6d225dcecebeb6e15f649994728842bd99fc94897d24315ac2d17bf6c2acfbfa8464d80f36304f88b906b78ab359be3479db5b0e7555f04416807c2202d6551f2425440be741dbe053e0bfeb845623e722a9293843f1cf0a71119dcadf7e353af4da52aed3086d6e5a095774248be9a1b1418dec1c03a2cb0ece0840ebeaaf7b67867da45943b700e2d6dad775ae6f33e55aa86ca84c336c91e3b7d7224f7a9a10d5b45a6ce0769d875415bea136b5508e5e0a88290792da3b11b2284a3d757c301cec78b55d3fcfa073615ccb089f66c5b9a5c84f6c1bb78c3370c4687eab260711fa05525687c7709e15cddea061f70798cbf940ad929eb80f33ad8bb4fcd322dd0558f111d7d01351147976b425a27e573402490055054cf3d80bebde6a89f3086170633740f08780aac3a73f17eaeda8deb642c2887962596b4d78c0ffffb28d0e64073b0641f89cf83a69afaaea03ba6070838fdbdaccb81630a6fdaa77fc10146013b9fd79e965a320daf81c1a51f032a3f462f2740e579eb116cad80b4e233326bf94fea52184517accf608b1fbfb395942869841b9ca0f314beff6b2dc0a74d7599012274b24775f0382e72907c1f0c571b994f048c0266feb775d893fec84e5733cd66a96cd45b60f63743b17b05d99c427a2d00a27fef17cadf128059a2e227b80701755b0bc706f32255c8cd619fa995cc7649f28337361a62cff46669fa4cf095a2d148987a9fafa6e1fb9f59b5ac5ff10a4c62e0187a3c75a983f7f5211142c6c09170a13e29c2044e5568bda8055cee4722e445e83ea01307c42cbe63a5bc529e1200e5874f7500275abacd6cc0e3bf8fd38ab7bab39f54d180d60892e2e3a713a3e654c89b8e9ba4474909991844514c04b655c66ccd6f2a17e29ff69d343ebac7ac5e1510ad4ff52e6a932a97bb0d814259da6545022152dd63f06219a1d66ec2278b694876ed6195b0543b8c9289b8438e8ee57dd38bcdb045a6fc4cede28effaa0354afbd4190fcbccd9a0e91508e4399e0e30a0bfdedcc19454b6dd7c2785a6e4fe74a0ece1d683ad07d76eafec02fb0d88debfeacd3531413185da0ffa4fb9b5e6d5a916f7bb5d51efc8ab61e4953fc6b2d1e670769f3ca56d51b804ceb118278acc90422e1f51e448a27d2fe4f93c88cf7c6148474bf650902dd6dd96541044113d244cf938150ec426e7ed63e1f153bbe328f4232552b104c8dee60b0c4e4c25f2605e97cc6f4263d32e8340be2d167137682373ae4cd501fdc9c5359b40f52803a5e4c0e04a5de0412c5cbd4d05e6135a1209d4b2dff50d39e481f1d1b01ed71004fb0c18e736af8ab176f833a439a85c9132e6d2296f665771c6a284eadc08c94ffa520dcc37fd6426c152364699514b15d4df6732fff39834e8ba29688b19db27a970d9d7fbee973c76bee04fb6164963969ebde0f785606781d63726736d8b60a713d5f72207a23f6f00420fdf24d14c069f36a7e236620481cc7a63857cc1355bac8d4f9a3f32785ad4d9d81719077a816b33b98006c322ee473aa9f8f83fae86a4d421104b298a9e42357c44b773e3504b3f9eb5b29330411b776b78fdb6dd9713dd1aee0cc9c7ee8bd23a50d4c8babaf6d74bc25377009a8c57c941f80e58ac08c93a275656cbad3864df9e791305d66103ab30983b07553ede5b5d5b0aab157f805eb6c11c75dd7f297c2cc9110551131a797164dec422b13799f1c261464c765a62c201eb9c8686eee94642d59f429cd137cba0d1a8126dcdfc28ea5c201526c61164a86f480dfde0c60fdf6afd3cd64719de1d89b5a362e058054a9db73aaffac324b04e8903060e1f14ca4ac31c82183066e6d581685efbe3452a20a665166b03808220770d66051971b61d8114376e22a4511cae9fdf7bbed68bb9f45b57eee1c15775730ef1434731d7b82a7cbcd6155396263984edfcea62196189da0ba9908d7d5ef514d75a3e1d4ae42654365083873fc4ce969fa4fac51d640be8d948bb9464d1a7e494c8df98bd5a569ff7fe1aca542c34610148a8f1dc9d60ff0f761270577f286a362f32164184ffce3ad132637e9f0381e9ce76a11f296f9d1e835cdc44926104e1df4d0a282a84b9fbc23064bfcab0d221c6e3124ae8ba6022e62f170dcc2d655f73b40f83fd65f5c705bc1f9e8df13adeadff9e1fe4660a55be7dc969cfffaed607190162dcd09d0cd86a297b22142b88f0eb28dd1a45152a4f4f2dca0d96d39fa594349040f486cd486af619b7083236cf90324cddc6f1ed0f6a103c8d936d7f2f31d420ef50931838e66721bff7494617b6b4bc385f3e51b3f81cf5d6953ac7fddc0f3466682911b38bc7f082e0c18e3ae0badf7f3fd3e186ebc2bab71fa26f77bb14cd97e6761c93c8c25887c0ef1f3dc1d8d86ce0fb73190f66f4deca77977e8d6064bfeeac3fad2bc50488c144e2a1a82fcc1e1c12ac54bf3e2d468e8f53241e4a6ad9e466746a45b053452ded5caa20461881d78d8235e986ba8b77e83601655d2650bf1b64ce17c75314216b43bbd1101a2e12e57525bb7d3b136a70635bdac8af24367a24ce2fe2a72ef2b0e56ff8dc62a82946f86f9b6b1418a89b1971372dfe7d5ce2e6611befff721f04a19bce7f90b1551a4cdead136662c50513fdde6f9d4a199c3907ed8799f231f54dd8347c71d829ff8ddc5d96b5aac2fe58652c81ff7f54e2568119dff2763ef435aa420630dacc7e9414340ee8688f46c7a8ab96d860937641042b3cdf6857ff1d2d4e47cec1f23e65fe541f38cb96b132666f999002e89cd1896ca58c2e63b87382e1a6c1ee9afa56cf3ba923fa9c989e20bff313f37252632fdcff03fbdd2d334ee93baf75c1bdae30feaa81fb2ac1b63c42dda06f20ce8c9d003eb3efed7931def342fb874fce92763f6f477c7f589b75d2129419fc4cb7a8893a1d3f94533ed9fdf9f21fc254fd80aa74750833d390327a2107e761240928d35a36c5eaca61fd848116b8dd7ec8157928bc2dd87f7756aa517cf6a61d2009fd4ba0579ca3b3129cfd5403546f5ab6d0575799a008fc67da9658427636d8f806d9b8cad64aee438d0a9b45957f31a5afe3ed894add9acadfd347246099c6ff0b4ec6f19ac61557daf8739e528185ab1468ca72d6d72e4f026e371e540b774b6576df3014dcc9e91b2cd1f0403a4fcaa6627b22682bb54f92150c2917acaee1972b2b03bc2bd37fdb9e7352c654d94ef196b7229e4da5ee62b7d395ecdd5177f2563242ea49ff78151a4a816a94e89b03f41c7e6684f8be3e5802e9338e7cbd3b43f708c062f944a59f31b02ca9a177e6b681accee8785d2467d2d78636be4330febaa3f6907db07992a2de74e459f3ae8ee6adae20cbc75aabd2d5d3424de0ddcc3ddd981c3a4966c57f8fdb1c42db87395f0bc800ff8ddb4c228a7d793d8a997885494a8578f5433d3f82886ea573641bf16065efbc25718c88f7277ce04c94af560d8deb7968496f849d3fad78741272b08bf7aec3f3c777428d3b8b897333ae5afb6823af63cb7347601ee2e8d4e21b21a12e6d42f66a1aac26d296bc68a998d8ba179ed5f756c2efd8a7acc0e3f08093bb4a83d37f15b4fe07c90858058ad1ff0e21bb7bf4363079c5d452dba5972b21c8f41daf6f11a51d321d3c1d544190238036d907d965ff469ce4895eb7675f3e94a15f83b837b892a40390d87d76e9b15eda02366299d3dd93943466bceeb2f9e465adccc08e1a02c3ac01815931627ed327e0ffbe09563221a365b88c4f2449bd3634920d5bfbde7cdc92c4cb16a579f35f07dafc87ce6ce4de7bf9e8ff0e80b81cdab8f2164a25a0a6929679ce9ae0dc2ac7ed41a787446676f091597551dc2e8c054224bac6652bba5fb675c0b2c94d2faac160f11b7b96fc96415aca8a47fa03658b8afa24b6bd97f7dbeead9ae5f7ec1cb0d000055f41a5043c6c4c97212398b168b5cb9ee650726eabcc31b6712e815fdaae77885350884fb36d6d5444d5e5500a7d636d4eced14b9d411c765b36a4be06ca9be2965d6d6c06c3b6bcb38babeb2999ee71295d48926bf6e39363fabf74de5e57aa0b59f9dddeca142d0c50ab7ff198196c69c971e6ab591220f4e42d6525e2dbd99b6c57949c854e4ee0e4581f9e3e160b3f66b01f23f4d0472c0a1f307837ac8dac0a257d09ab82975148dcd764fe6359a5f21b9cbe2ae7b9b277489a8b3285b8289a84ff854508b4488ffcf68f47ec7a5c18a8c3d06e26b32f754ac74ea8e93a554147fd3b3daf1fbe924e2e389cac13a5f80f3a21dbd250d3917f7b5acfc739a63f2b3d6b3f099efb4be7a842215c89fc87bd8550d11ba2a4af0f111ab124503b26feeae3be3ee24168dd4553a226b9168edb11c3e61bc850adf995b4d6f1aace6db0b91f805c3d1789a3e6b470e5470968f429d5b05c8f76ca2981e37f5bde4ad00a09755c76774ead7d93f3f41255b1d56152e3699b133b2e0b277427c992323d1b4d8c438434e9e901ddd43788f80cb9a975e9dd1671ce16be5ff8033d5da824f00fd78b540edbcd69a2e9aff03e31af9afefb809434f52b4a1239fdd241ed3a268258addde19d1724155a1a4c877bd59b0659b7a786886f6ffcb5999d1f9c007d615020926f7165a9ddd4aaa3c7b631d30cc951e328131d99282ac06a18f88373092320ea5308f06c376e711aecda4cd1c2b639d9ea7a2613d4e9eaa9a0ef72774fdec622f7d131b45135d577897bf686b460a371083070139ea544bda15012251d6c8e7163c25412841faefba76765648ca7cd1b423403a654b6b5754588ae6c309621477db20f7c9236af1e422ebd3fb6d6a712e7a6d00d58416b7d65a53a2514bf51bedfe9207f16a4d79418600389b98ea8b9e06b8da708a86f191e567925af39a09ac9fd7902e8f8e77567baf1b75c05ba1eb7089b424801405afc982a8d79c80fada184a1ab3bab526a3b0a5e20d2dc6bcdd2c5cb7c49f735f3e8f4d36a388ca805876ae08f0e3acca5dd864c1fa1552068bf799095221480374fd2dcaeddb74be93470eff4fe278e190f0a131f32340ada9cca518af769f42943875f4c5707beee2179771da21cd66405b9973648bd047a516d1cf902fa1f0fcdcbc3f4c1f20fc22f9a7e9f4c3a52576399604c46f83ede44f542d06d54e6e8a1e693a2cfcbb16c178d1bace976133e72cc4533bd02b1c4ec2cc22097435aff5a682ca7227414895450831560fa682493f4814ce8fbdb190f8ce2b533ed9582638511bda93aeae5d0690f745b788db622864ba3fb60952f119427fbe66754c5c038c5fb2cb87c326d65862e353c14950bd1fa7c70e36323e9cf90c81f6275e59c7926acac1560a0b6bbc7a850817f2effa19d485315a219d49e293f871278294d02765cf72caa2f438de3337ed205bf68ff6ddaaa5e4b80de5fba022dfcf9cf074a319678df11eb77b3ef66e512b67ba5182265a60eaf457691e973d23cbaf6000537f886695074ebb616f9cdad9de7c6fe9ecfbd13d537d64c34a7c90ca56b50e60d6a7067e391e63561793edf6ed3c2eeb8555909a59ce73da1f096d41fb42de44494128324a9", @ANYRESHEX=0x0, @ANYRES32=r5], 0x5, 0x0, &(0x7f0000000000)) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={r5, 0x3}) 2m48.804907249s ago: executing program 3 (id=1469): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$netrom(r0, &(0x7f0000000100)=""/218, 0xda, 0x0, &(0x7f0000000280)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x2}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x60, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x4000000, @mcast1, 0xfffff801}}, {0x14, 0x2, @in={0x2, 0x4e20, @private=0xa010102}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x60}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB="48010000100001000000000000000000e00000020000000000000000000000000a010101000000000000000000000000000000004e2100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffdfff0000000000000000000000000000000033000000fe8000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000000004000000010000000000000000000a000000000000000000000048000100736861323536000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048460000000000000000000000000008001d00000000000800220003"], 0x148}}, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) socket$igmp6(0xa, 0x3, 0x2) syz_open_dev$dvb_frontend(&(0x7f0000000200), 0x2, 0x0) unshare(0x20000400) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x3, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x1ff, 0x7fffffff}, 0x0, 0x0) sendmmsg$inet(r2, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000280)='S8', 0x2}], 0x1}}], 0x1, 0x20008000) shutdown(r2, 0x1) 2m44.178084663s ago: executing program 38 (id=1469): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$netrom(r0, &(0x7f0000000100)=""/218, 0xda, 0x0, &(0x7f0000000280)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x2}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x60, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x4000000, @mcast1, 0xfffff801}}, {0x14, 0x2, @in={0x2, 0x4e20, @private=0xa010102}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x60}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB="48010000100001000000000000000000e00000020000000000000000000000000a010101000000000000000000000000000000004e2100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffdfff0000000000000000000000000000000033000000fe8000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000000004000000010000000000000000000a000000000000000000000048000100736861323536000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048460000000000000000000000000008001d00000000000800220003"], 0x148}}, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) socket$igmp6(0xa, 0x3, 0x2) syz_open_dev$dvb_frontend(&(0x7f0000000200), 0x2, 0x0) unshare(0x20000400) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x3, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x1ff, 0x7fffffff}, 0x0, 0x0) sendmmsg$inet(r2, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000280)='S8', 0x2}], 0x1}}], 0x1, 0x20008000) shutdown(r2, 0x1) 22.10093234s ago: executing program 5 (id=1728): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$netrom(r0, &(0x7f0000000100)=""/218, 0xda, 0x0, &(0x7f0000000280)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x2}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB="48010000100001000000000000000000e00000020000000000000000000000000a010101000000000000000000000000000000004e2100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffdfff0000000000000000000000000000000033000000fe8000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000000004000000010000000000000000000a000000000000000000000048000100736861323536000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048460000000000000000000000000008001d00000000000800220003"], 0x148}}, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) socket$igmp6(0xa, 0x3, 0x2) syz_open_dev$dvb_frontend(&(0x7f0000000200), 0x2, 0x0) unshare(0x20000400) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x3, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x1ff, 0x7fffffff}, 0x0, 0x0) sendmmsg$inet(r2, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000280)='S8', 0x2}], 0x1}}], 0x1, 0x20008000) shutdown(r2, 0x1) 18.061916129s ago: executing program 5 (id=1734): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r0) getsockname$packet(r0, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = add_key$user(&(0x7f0000000180), &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000480)='.', 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xf1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r2, r3, r2}, &(0x7f00000001c0)=""/241, 0xf1, &(0x7f0000000000)={&(0x7f0000000140)={'rmd160\x00'}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x1}}]}, 0x38}}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0036000000ffffffffffffffffffe7ee000000000000000002000000000000000000", 0x58}], 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@gettclass={0x24, 0x2a, 0x129, 0x870bd2c, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x3}, {}, {0x0, 0xe}}}, 0x24}}, 0x40004) 15.684590044s ago: executing program 5 (id=1739): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000340)=@generic={&(0x7f0000000300)='./cgroup/file0\x00', 0x0, 0x1c}, 0x18) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000380)=r1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='veth1_to_bond\x00', 0x10) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89101) mount_setattr(r3, &(0x7f0000001d80)='.\x00', 0x8800, &(0x7f0000001dc0)={0x0, 0x0, 0x80000}, 0x20) r4 = openat2(r2, &(0x7f0000000040)='./cgroup/file0\x00', &(0x7f0000000440)={0x4400, 0x0, 0x13}, 0x18) r5 = syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x30d4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) r6 = memfd_create(&(0x7f0000000100)=';e\x00\x00\xa4\xd8\xe0\x9c\x7f9\x8aZ]3N\xbb\xe1^\x9c\xe1\x9b6s$0Y\xf8\x90\x00\x00\x00\x00\xd2~l\xf6\x12\xde\xdd\xd5\x1d\x96\xb0a\xad\xcd\x16\xd8G\xae\xd9DZm\xabO\xad\x11%\x7f`@\x16c\xc0\xb6\x1f\xe3\x00\x1a_\xc7\xbf\xa7T\xbe\x13\x8b\xb3r\x8fL\xe6\xba\xe7\x18\xb4$BIj\xa3\xc9\xc6|\x9b\x88\xddPx\x02I\xde\xe8\xcd\x02\xc1\xedc2\x06\xcbM\xfb\x13jZ\x96\xeej\x9b\xe4XjN\xb9>\xdf3U\r \x8dh8T/h)\x90\xff\x8d\xd9\x89\xab\xf8P\xacYtk\xa3\xed\xfa*8\x13\b\xce\xf8z\xed\xadnz\x96\xa3\x9a9R\xd9]\xe11We\xfe3\xe06\x1a^\x04^\xef\xa3\x0fU\x9b1\xc6J\x83\x9d[\\a\xfd\xdc\xa1\xcd\xbe\x9b\xc5z7\xe8VP\x89\x16MK`\xe5\x137\b\x00\x00\x00\xd5\x01\xea\x98\xe6Z\x95j\xe3\x0ek>\x14\x80\rXS\xce\xf9\x0e\x89\xc4\xc6\x1bOm4Lla\r\xce\x17\xb5r&\xf3\x96\xbc\xc39\xa7\x95\xd9F\x17', 0x0) r7 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r8 = userfaultfd(0x1) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r7, 0x20, &(0x7f00000005c0)="1c681411f7a496c0dacc6a3c24465b016f64b4c00b5f7c691cb24cb8000000001a0000200000000000201500", 0x0, 0x48) ioctl$UFFDIO_WAKE(r8, 0x8010aa02, &(0x7f00000002c0)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) close_range(r6, 0xffffffffffffffff, 0x0) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002340), 0x40800) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r3, {0x401}}, './cgroup/file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r9, 0xc058534f, &(0x7f0000000000)={{0x0, 0x1}, 0x1, 0x140, 0x2, {0x4, 0x1}, 0xe, 0x900}) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000002c0)=0x4000) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x1c, 0x0, 0x301, 0x0, 0x0, {0x2b}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) syz_clone(0x1000, &(0x7f0000000100)="bf1c6d6a9c14d1691325a794025dd1957d4f80aff3880da66e6829ef91a338ac01937a3361950a6025c4deb1caa4eb2016884c76ce2561185cc1c6a320ac6df1b5bbfb9d791699170c4009d7cc3953f41e3c66", 0x53, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)="b0cbc1712c186e29d19fbca26a20ed9e6ff5a6fbafc105f6518c36360b31a72e0c03f3012b6669f629ab90c98160533ab38cb5a72593e939ded5e0df50b896451246153b88374d0e7117be0c60ce18339d4b0688b3f82dd31de5a8dfd678c7979dfe4b8c564661957eac53fd6872ae7305afccf89b4f9b97d56dc5f6eb464c073ce221b0db73764e28a6204336437cf55bd78eab2a193ff65c8c28bb1e4a96ef6f3e0c7468a2bf2997cfad39cdb1873450f25d43d8cc") syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000000)={0x2c, &(0x7f0000000080)={0x20, 0x22, 0x57, {0x57, 0xf, "a708d14cdc9474240d2428073864ff9e4b8b450c3ecad38cdf681ecd78df1126724e16650b0300000000000000b1801b815fc76e51d1b81cab776fb71bba93dcb452692bc02cc14d116bce17ce0bf2fc4bf7441799"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0xa, 0x2, 0x9) 11.87302791s ago: executing program 5 (id=1745): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000306010400000000000000000200e70405000100"], 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x80) 11.778666474s ago: executing program 0 (id=1746): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) poll(&(0x7f0000000040)=[{r0, 0x1020}], 0x1, 0x4) (fail_nth: 2) 11.703611002s ago: executing program 4 (id=1747): gettid() socket$inet6(0xa, 0x2, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000009740)='./file0\x00', 0x4000000, &(0x7f0000000080)={[{@filestreams}, {@usrquota}, {@noalign}, {@pquota}, {@grpquota}, {}, {@prjquota}, {@usrquota}, {@gquota}, {@attr2}]}, 0x1, 0x97a5, &(0x7f0000009780)="$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") renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2) 9.966741857s ago: executing program 7 (id=1748): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000003800)=@newtaction={0x494, 0x30, 0x12f, 0x0, 0x0, {}, [{0x480, 0x1, [@m_police={0x47c, 0x1, 0x0, 0x0, {{0xb}, {0x450, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000000, 0x0, 0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x8001, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xb, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff35, 0x0, 0x0, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x200, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x400, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8c, 0x1, 0x5, 0x0, 0x0, 0x8, 0x0, 0xe, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x1, 0x7, 0x4, 0x1, {0x7, 0x0, 0x3, 0x7, 0x7, 0x80000001}, {0x4, 0x2, 0x2, 0xa, 0x1ff, 0x1c0000}, 0x9, 0xc0, 0xdf72c67}}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffff22ff}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x494}}, 0x0) 9.330978474s ago: executing program 0 (id=1750): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r0) getsockname$packet(r0, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = add_key$user(&(0x7f0000000180), &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000480)='.', 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xf1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r2, r3, r2}, &(0x7f00000001c0)=""/241, 0xf1, &(0x7f0000000000)={&(0x7f0000000140)={'rmd160\x00'}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x1}}]}, 0x38}}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0036000000ffffffffffffffffffe7ee000000000000000002000000000000000000", 0x58}], 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@gettclass={0x24, 0x2a, 0x129, 0x870bd2c, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x3}, {}, {0x0, 0xe}}}, 0x24}}, 0x40004) 8.998707292s ago: executing program 4 (id=1751): socket(0x10, 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e20, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000240)=0x2, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f0000000100)={0x11}) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0xc0, 0xffffffff, 0xffffffff, 0xc0, 0xffffffff, 0x150, 0xffffff7a, 0xffffffff, 0x150, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) r3 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0xbd84, 0x0, 0x1, 0x101}, &(0x7f0000000100)=0x0, &(0x7f0000000640)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x8, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0xda1a0b6210925d15, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1}) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1100000000000000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="b067083330229c7e7541438ae5e5a49a36809f2aa8f6b080b5668e06316d28a3099158a230b07bf6c216f5d7185019b128989c7caf187e697992c25460378b12c642099b10c5f6d523b139d993bafd3237c1ca66a335e0ded42f8bbc8bf6d214a652d3d31239221d2027124d309a33a26149228481dfb164fb883bd04b8cd16fb3363c9c0187bab50f75646af95fe4310da095e9832b8ed1ec07c88c222e721eac8de9d63506a9102f172817f72618", @ANYRES64=0x0], 0x20) io_uring_enter(r3, 0x22d2, 0x20, 0x0, 0x0, 0x0) 8.892334418s ago: executing program 5 (id=1752): r0 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x88600, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000040)={0x0, 0x31, 0x9, "682dfa3f6b97149f7a"}, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_SCROLLCONSOLE(r1, 0x541c, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000800)={0x168, 0x12, 0x200, 0x70bd2b, 0x25dfdbff, {0x1f, 0x1, 0x3, 0x4, {0x4e23, 0x4e23, [0xfffffffa, 0x7, 0x0, 0x4], [0x3, 0x1, 0x1ff, 0x2a76], 0x0, [0x4, 0x6]}, 0x8, 0x7}, [@INET_DIAG_REQ_BYTECODE={0x2d, 0x1, "e9f7b0cf457042e6da3af244edd516cd45fd245a5148be17bbc41ba01f3ab2555eb57f3bc13ec90821"}, @INET_DIAG_REQ_BYTECODE={0x9b, 0x1, "7f094c1d85b2b2003db0fa02a9b9c5fd7ea047dd891852c51e980331fa59d18706972edbfca04f550de406b8e25ece6ca7370f0213d3404e8dc140b8343728baccd8bc0b909f230e3551b40f5548147334e3ab42cedd086064bc89908656506c7cea15166b30f2e646e0fcee2b60ff58f6b3e68ab5df74b42b5fd227b154a31fc4bec6a05c6f5bde39d3a3e64bf325a05072bf067be249"}, @INET_DIAG_REQ_BYTECODE={0x3b, 0x1, "e5bc5898247e8147ef4d5b0d3408228a3c2665a4b2153bf81bf628a1e5dc0dd7863459104b78c579ecf9dd735201467b11e30f9ad6de70"}, @INET_DIAG_REQ_BYTECODE={0xf, 0x1, "4a61badedc03eda8d2de7e"}, @INET_DIAG_REQ_BYTECODE={0x4}]}, 0x168}, 0x1, 0x0, 0x0, 0x4000880}, 0x20000800) syz_usb_connect$rtl8150(0x4, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0xffffffffffffffcf, 0x70bd29, 0x25dfdbf6, {0x0, 0x0, 0x0, 0x0, 0x2686a, 0x5d22a}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x12}}}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x69d16}]}, 0x3c}}, 0x20040010) syz_clone(0x8800000, &(0x7f00000005c0)="42748ab04ab4ef5b1b7ecee6e26b2f1cc994518f76367faedc36474ba7ac68f282ba6e1f6431e81cbaf2fd1e48216c867c9444d0abb3f58cf3947695aa9e7f2172d20fb746936c344deb", 0x4a, &(0x7f00000006c0), &(0x7f0000000700), &(0x7f0000000740)="a502823216bce2246f76adf2d074f22c3f0f38a24c86fd9de22c7ab80807114df81994d7f71c7024a7fbee55ab974e0a5c93ff233b2bc701ae85ee0bf8eeb98a6865c2d02e") ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000480)=0xffffffffffffffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r3, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x408) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000640)="82", 0x1}], 0x1}, 0x400c9c1) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 8.786997613s ago: executing program 7 (id=1753): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x40810}, 0x4084) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_VFIO_SET_IOMMU(r1, 0x3b66, 0x1) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x2, 0x0, 0x0, 0x0, 0x0, 0xeeef0000}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) 7.896620384s ago: executing program 9 (id=1754): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000fc0)=@newtfilter={0x48, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xb}, {0x0, 0xfff3}, {0xd, 0x300}}, [@filter_kind_options=@f_flow={{0x9}, {0x18, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0xc1f5}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_ACT={0x4}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 7.769777262s ago: executing program 7 (id=1755): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000340)=@generic={&(0x7f0000000300)='./cgroup/file0\x00', 0x0, 0x1c}, 0x18) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000380)=r1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='veth1_to_bond\x00', 0x10) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89101) mount_setattr(r3, &(0x7f0000001d80)='.\x00', 0x8800, &(0x7f0000001dc0)={0x0, 0x0, 0x80000}, 0x20) r4 = openat2(r2, &(0x7f0000000040)='./cgroup/file0\x00', &(0x7f0000000440)={0x4400, 0x0, 0x13}, 0x18) r5 = syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x30d4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) r6 = memfd_create(&(0x7f0000000100)=';e\x00\x00\xa4\xd8\xe0\x9c\x7f9\x8aZ]3N\xbb\xe1^\x9c\xe1\x9b6s$0Y\xf8\x90\x00\x00\x00\x00\xd2~l\xf6\x12\xde\xdd\xd5\x1d\x96\xb0a\xad\xcd\x16\xd8G\xae\xd9DZm\xabO\xad\x11%\x7f`@\x16c\xc0\xb6\x1f\xe3\x00\x1a_\xc7\xbf\xa7T\xbe\x13\x8b\xb3r\x8fL\xe6\xba\xe7\x18\xb4$BIj\xa3\xc9\xc6|\x9b\x88\xddPx\x02I\xde\xe8\xcd\x02\xc1\xedc2\x06\xcbM\xfb\x13jZ\x96\xeej\x9b\xe4XjN\xb9>\xdf3U\r \x8dh8T/h)\x90\xff\x8d\xd9\x89\xab\xf8P\xacYtk\xa3\xed\xfa*8\x13\b\xce\xf8z\xed\xadnz\x96\xa3\x9a9R\xd9]\xe11We\xfe3\xe06\x1a^\x04^\xef\xa3\x0fU\x9b1\xc6J\x83\x9d[\\a\xfd\xdc\xa1\xcd\xbe\x9b\xc5z7\xe8VP\x89\x16MK`\xe5\x137\b\x00\x00\x00\xd5\x01\xea\x98\xe6Z\x95j\xe3\x0ek>\x14\x80\rXS\xce\xf9\x0e\x89\xc4\xc6\x1bOm4Lla\r\xce\x17\xb5r&\xf3\x96\xbc\xc39\xa7\x95\xd9F\x17', 0x0) r7 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r8 = userfaultfd(0x1) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r7, 0x20, &(0x7f00000005c0)="1c681411f7a496c0dacc6a3c24465b016f64b4c00b5f7c691cb24cb8000000001a0000200000000000201500", 0x0, 0x48) ioctl$UFFDIO_WAKE(r8, 0x8010aa02, &(0x7f00000002c0)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) close_range(r6, 0xffffffffffffffff, 0x0) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002340), 0x40800) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r3, {0x401}}, './cgroup/file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r9, 0xc058534f, &(0x7f0000000000)={{0x0, 0x1}, 0x1, 0x140, 0x2, {0x4, 0x1}, 0xe, 0x900}) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000002c0)=0x4000) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x1c, r10, 0x301, 0x0, 0x0, {0x2b}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) syz_clone(0x1000, &(0x7f0000000100)="bf1c6d6a9c14d1691325a794025dd1957d4f80aff3880da66e6829ef91a338ac01937a3361950a6025c4deb1caa4eb2016884c76ce2561185cc1c6a320ac6df1b5bbfb9d791699170c4009d7cc3953f41e3c66", 0x53, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)="b0cbc1712c186e29d19fbca26a20ed9e6ff5a6fbafc105f6518c36360b31a72e0c03f3012b6669f629ab90c98160533ab38cb5a72593e939ded5e0df50b896451246153b88374d0e7117be0c60ce18339d4b0688b3f82dd31de5a8dfd678c7979dfe4b8c564661957eac53fd6872ae7305afccf89b4f9b97d56dc5f6eb464c073ce221b0db73764e28a6204336437cf55bd78eab2a193ff65c8c28bb1e4a96ef6f3e0c7468a2bf2997cfad39cdb1873450f25d43d8cc") syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000000)={0x2c, &(0x7f0000000080)={0x20, 0x22, 0x57, {0x57, 0xf, "a708d14cdc9474240d2428073864ff9e4b8b450c3ecad38cdf681ecd78df1126724e16650b0300000000000000b1801b815fc76e51d1b81cab776fb71bba93dcb452692bc02cc14d116bce17ce0bf2fc4bf7441799"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0xa, 0x2, 0x9) 7.265919814s ago: executing program 0 (id=1756): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) acct(&(0x7f00000005c0)='./file0/file0\x00') write$FUSE_INIT(r0, &(0x7f00000002c0)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x5090880b, 0x0, 0x10, 0xd, 0x40, 0x0, 0x0, 0x2f, 0x1}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000004540)="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", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x80, {0x6, 0x2, 0x9, 0xfffffffffffffffe, 0xa001, 0x1ff, {0xc, 0x6, 0x6, 0x7d, 0x4, 0x3f47, 0xc05, 0x6, 0xd, 0x6000, 0x1, r2, r3, 0xe6f, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.298847908s ago: executing program 9 (id=1757): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x7c}, [@ldst={0x6, 0x3, 0x0, 0x0, 0xb}], {0x95, 0x0, 0xc00}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 5.196174332s ago: executing program 4 (id=1758): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000280)={0x0, 0x7, 0x0, 0x81, 0xffffffff}) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x9) r0 = socket$kcm(0x10, 0x2, 0x4) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)="22899b2bfc1f", 0x6}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, 0x0, &(0x7f0000000080)) sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5c00000014006b04000000d86e6c1d000a847ea6ea6567e75110623400cdd46b44dacff32c6e020075e300250002000f000000172f71d34460bc24eab5560000000ebab8bebf9367140051f60a64c9f4d4778037e786a6d0bdd70000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x14c, 0x24, 0xd0f, 0x0, 0xfffffffd, {0x60, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "0988fa63eb8cd320a614263eaa3008a9d6a12c269213b5127b7f64552526fa546ed160bd4dd5ec3676a0816a6978f3addb307fd5b5ce337060210ee901d2776ddd050f478417a8fbae5ecfc62afa751d5ef0730b91a289c05afa92042fc17692f47aa0ea89a66437db9e7e4071409a582b3dc60bc2003bc8d4af050000007ed12c1395d32771f376a5b839b62711be5529f62975bec15c9910b040b093954471dd16ec7b547c0a7335a1d5b89292ce0f853963f7a011f00c1d955bd4b50e7c1255ff39c6ebb85cdfc7ee093657e84b60a7a5f75f9bc78cd157a6024f84b2499782cba06f0502aec6d89a061f087bf35f1dffb27200"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x6, 0x8, 0x9, 0xa, 0xe, 0xd, 0x6}}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4000050}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r6, 0x5607, 0x2a) ioctl$VT_ACTIVATE(r6, 0x5606, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x4c, r5, 0x2, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x3, 0x3a}}}}, [@NL80211_ATTR_BSS_BASIC_RATES={0xa, 0x24, [{0x16, 0x1}, {0x9, 0x1}, {0x16, 0x1}, {0x12, 0x1}, {0x6, 0x1}, {0x4}]}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x5}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x200088d5) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7fffffffffffffff, 0xc0, &(0x7f0000006680)) msgsnd(0x0, 0x0, 0x8, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r8, 0x8008976) ioctl$FIDEDUPERANGE(r8, 0xc0189436, &(0x7f00000001c0)=ANY=[@ANYBLOB="0800000000000000000000000000000003"]) 5.184758716s ago: executing program 7 (id=1759): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$netrom(r0, &(0x7f0000000100)=""/218, 0xda, 0x0, &(0x7f0000000280)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x2}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB="48010000100001000000000000000000e00000020000000000000000000000000a010101000000000000000000000000000000004e2100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffdfff0000000000000000000000000000000033000000fe8000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000000004000000010000000000000000000a000000000000000000000048000100736861323536000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048460000000000000000000000000008001d00000000000800220003"], 0x148}}, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) socket$igmp6(0xa, 0x3, 0x2) syz_open_dev$dvb_frontend(&(0x7f0000000200), 0x2, 0x0) unshare(0x20000400) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x3, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x1ff, 0x7fffffff}, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000280)='S8', 0x2}], 0x1}}], 0x1, 0x20008000) shutdown(0xffffffffffffffff, 0x1) 4.775220561s ago: executing program 0 (id=1760): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = socket$inet_icmp(0x2, 0x2, 0x1) sendmmsg$inet(r2, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f0000000840)=[{0x0}, {&(0x7f0000001480)="76bfec8a4de7a2b2", 0x8}], 0x2}}], 0x1, 0x20004804) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)={0x10000000}) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, r1, 0x200, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x10014}, 0x4008008) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r6 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x3, &(0x7f0000000180)=[{0x8, 0x4, 0xfc, 0xd60}, {0x9, 0x61, 0x49, 0x9}, {0x3ff, 0x5, 0xc, 0x6}]}) preadv(r7, &(0x7f0000001cc0)=[{&(0x7f0000000200)=""/126, 0x7e}], 0x1, 0x0, 0xa3) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r8, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(r8, &(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x0, 0x1000000, 0x0, 0x0, 0x4}}, 0x50) write$FUSE_LSEEK(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x7fffffffffffffff}}, 0x18) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x2000009, 0x4d032, 0xffffffffffffffff, 0x0) tkill(r6, 0xb) close_range(r0, 0xffffffffffffffff, 0x0) 4.772182675s ago: executing program 9 (id=1761): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x6000084) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000306010400000000000000000200e7040500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x80) 3.213008334s ago: executing program 4 (id=1762): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$SYNC_IOC_MERGE(r0, 0xc0303e03, &(0x7f0000000000)={"f11dbbc1bcd660a77ec8bc68b5705104741bb3e58507ad6246413f7952b2bd85", r0, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r1, 0xc0383e04, &(0x7f0000000080)={""/32, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000380)=[{}, {}, {}, {}, {}]}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r3, &(0x7f0000000b80)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x7ffe, @mcast2, 0x4}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000080)="8000102e7577d401", 0x8}], 0x1, &(0x7f00000006c0)=ANY=[@ANYBLOB="10000000000000002900000004"], 0x30}}], 0x1, 0x4000084) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000090603000000000000000000050000000900020073797a310000000005000100070000003000078005000700ff0000000c00018008000140000000000c00028008000140e00000020c00148008000140ffffffff2e026ad9d633600bc46c64f7643054d8a77af3c3e1c881af80387eb6aa3c93be71bf"], 0x58}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000009, 0x12, r0, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x2, 0x1, 0x1003, {0xa, 0x4e24, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x403}}}, 0x3a) 2.770075299s ago: executing program 9 (id=1763): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000003800)=@newtaction={0x494, 0x30, 0x12f, 0x0, 0x0, {}, [{0x480, 0x1, [@m_police={0x47c, 0x1, 0x0, 0x0, {{0xb}, {0x450, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000000, 0x0, 0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x8001, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xb, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff35, 0x0, 0x0, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x200, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x400, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8c, 0x1, 0x5, 0x0, 0x0, 0x8, 0x0, 0xe, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1]}], [], [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x1, 0x7, 0x4, 0x1, {0x7, 0x0, 0x3, 0x7, 0x7, 0x80000001}, {0x4, 0x2, 0x2, 0xa, 0x1ff, 0x1c0000}, 0x9, 0xc0, 0xdf72c67}}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffff22ff}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x494}}, 0x0) 2.646382572s ago: executing program 7 (id=1764): socket$kcm(0x10, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x20000000ed071, 0xffffffffffffffff, 0xfffff000) mmap$xdp(&(0x7f000078b000/0x4000)=nil, 0x4000, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x80000000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="0000800000000180c200230007dd6012000800183a00000000000000000000000000000000010000000000000000000000000000000183009078000936c0fe8000000000000000000000000800bb"], 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x26}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x80000, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') fchdir(0xffffffffffffffff) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000380)={r5, 0xffffffffffffffff, 0x0, r0}, 0x10) lseek(r5, 0x2, 0x1) sendto$llc(r2, 0x0, 0x0, 0x10004000, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r3}, &(0x7f00000001c0), &(0x7f0000000300)=r4}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r4, 0x5, 0x0, 0x0, &(0x7f00000003c0), 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)}, 0x40800) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r6, 0x0, 0x2, 0x0, 0x0) 2.205186764s ago: executing program 4 (id=1765): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x40810}, 0x4084) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_VFIO_SET_IOMMU(r1, 0x3b66, 0x1) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x2, 0x0, 0x0, 0x0, 0x0, 0xeeef0000}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) 1.966274327s ago: executing program 5 (id=1766): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(0x0, r1) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = add_key$user(&(0x7f0000000180), &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000480)='.', 0x1, 0xfffffffffffffffd) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xf1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r3, r4, r3}, &(0x7f00000001c0)=""/241, 0xf1, &(0x7f0000000000)={&(0x7f0000000140)={'rmd160\x00'}}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x1}}]}, 0x38}}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0036000000ffffffffffffffffffe7ee000000000000000002000000000000000000", 0x58}], 0x1) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@gettclass={0x24, 0x2a, 0x129, 0x870bd2c, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x3}, {}, {0x0, 0xe}}}, 0x24}}, 0x40004) 1.746160403s ago: executing program 0 (id=1767): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000fc0)=@newtfilter={0x24c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xb}, {0x0, 0xfff3}, {0xd, 0x300}}, [@filter_kind_options=@f_flow={{0x9}, {0x21c, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0xc1f5}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_ACT={0x208, 0x9, 0x0, 0x1, [@m_mirred={0xb8, 0x4, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x88, 0x7, 0x8001, 0x3}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x6, 0x0, 0xe, 0x7}, 0x4, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x9, 0x4, 0xc, 0x21f}, 0xb908b0738123de3, r2}}]}, {0x2a, 0x6, "bfbed12fb9aab2c9ff3239fe94f4dd1742c53136248f3899bb53c6e1a12fd7b632c2f51453c4"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ct={0x14c, 0x6, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_MARK_MASK={0x8}, @TCA_CT_PARMS={0x18, 0x1, {0xa6, 0x7, 0x0, 0xa, 0xe1b}}]}, {0x102, 0x6, "37ff080e7845f95be1d1a8867e2d70c12f9f46ea3356b07d200dfbf4e0d4294979ebaeb64026b02d24b5a19014cba9083d930117c1302d62dd219cc7ba90e7d7fcedb3b48314a8bbded3fde95e1d1e4dd16ed823a7d14048cd66ce43e8f8eebcd3c72f78a04e9a4f3d7af5a1bc208064f96767856ffae0742a1fe9c25d5e8cd2447599162855c400bce72048d3151723ae0209dee45904b9842e1e438516df02ed478c36eac56a0ae34eda70c0d166d84deb82b682ed52116e3b856fab42712e3daea6ca0438e5b427588f03e8fd8959bca128dc590a689b526533665a668c6288bb44e042e8946877afca0718ab472523d0ca7a9060b0975e40e38cf6f5"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}]}, 0x24c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 1.347163938s ago: executing program 9 (id=1768): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="b80000000001050500000000000000000a0000003c0002802c00018014000300"], 0xb8}}, 0x0) r1 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000000c0), 0x0) 1.320605137s ago: executing program 4 (id=1769): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000340)=@generic={&(0x7f0000000300)='./cgroup/file0\x00', 0x0, 0x1c}, 0x18) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000380)=r1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='veth1_to_bond\x00', 0x10) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89101) mount_setattr(r3, &(0x7f0000001d80)='.\x00', 0x8800, &(0x7f0000001dc0)={0x0, 0x0, 0x80000}, 0x20) r4 = openat2(r2, &(0x7f0000000040)='./cgroup/file0\x00', &(0x7f0000000440)={0x4400, 0x0, 0x13}, 0x18) r5 = syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x30d4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) r6 = memfd_create(&(0x7f0000000100)=';e\x00\x00\xa4\xd8\xe0\x9c\x7f9\x8aZ]3N\xbb\xe1^\x9c\xe1\x9b6s$0Y\xf8\x90\x00\x00\x00\x00\xd2~l\xf6\x12\xde\xdd\xd5\x1d\x96\xb0a\xad\xcd\x16\xd8G\xae\xd9DZm\xabO\xad\x11%\x7f`@\x16c\xc0\xb6\x1f\xe3\x00\x1a_\xc7\xbf\xa7T\xbe\x13\x8b\xb3r\x8fL\xe6\xba\xe7\x18\xb4$BIj\xa3\xc9\xc6|\x9b\x88\xddPx\x02I\xde\xe8\xcd\x02\xc1\xedc2\x06\xcbM\xfb\x13jZ\x96\xeej\x9b\xe4XjN\xb9>\xdf3U\r \x8dh8T/h)\x90\xff\x8d\xd9\x89\xab\xf8P\xacYtk\xa3\xed\xfa*8\x13\b\xce\xf8z\xed\xadnz\x96\xa3\x9a9R\xd9]\xe11We\xfe3\xe06\x1a^\x04^\xef\xa3\x0fU\x9b1\xc6J\x83\x9d[\\a\xfd\xdc\xa1\xcd\xbe\x9b\xc5z7\xe8VP\x89\x16MK`\xe5\x137\b\x00\x00\x00\xd5\x01\xea\x98\xe6Z\x95j\xe3\x0ek>\x14\x80\rXS\xce\xf9\x0e\x89\xc4\xc6\x1bOm4Lla\r\xce\x17\xb5r&\xf3\x96\xbc\xc39\xa7\x95\xd9F\x17', 0x0) r7 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r8 = userfaultfd(0x1) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r7, 0x20, &(0x7f00000005c0)="1c681411f7a496c0dacc6a3c24465b016f64b4c00b5f7c691cb24cb8000000001a0000200000000000201500", 0x0, 0x48) ioctl$UFFDIO_WAKE(r8, 0x8010aa02, &(0x7f00000002c0)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) close_range(r6, 0xffffffffffffffff, 0x0) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002340), 0x40800) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r3, {0x401}}, './cgroup/file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r9, 0xc058534f, &(0x7f0000000000)={{0x0, 0x1}, 0x1, 0x140, 0x2, {0x4, 0x1}, 0xe, 0x900}) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000002c0)=0x4000) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x1c, r10, 0x301, 0x0, 0x0, {0x2b}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) syz_clone(0x1000, &(0x7f0000000100)="bf1c6d6a9c14d1691325a794025dd1957d4f80aff3880da66e6829ef91a338ac01937a3361950a6025c4deb1caa4eb2016884c76ce2561185cc1c6a320ac6df1b5bbfb9d791699170c4009d7cc3953f41e3c66", 0x53, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)="b0cbc1712c186e29d19fbca26a20ed9e6ff5a6fbafc105f6518c36360b31a72e0c03f3012b6669f629ab90c98160533ab38cb5a72593e939ded5e0df50b896451246153b88374d0e7117be0c60ce18339d4b0688b3f82dd31de5a8dfd678c7979dfe4b8c564661957eac53fd6872ae7305afccf89b4f9b97d56dc5f6eb464c073ce221b0db73764e28a6204336437cf55bd78eab2a193ff65c8c28bb1e4a96ef6f3e0c7468a2bf2997cfad39cdb1873450f25d43d8cc") syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000000)={0x2c, &(0x7f0000000080)={0x20, 0x22, 0x57, {0x57, 0xf, "a708d14cdc9474240d2428073864ff9e4b8b450c3ecad38cdf681ecd78df1126724e16650b0300000000000000b1801b815fc76e51d1b81cab776fb71bba93dcb452692bc02cc14d116bce17ce0bf2fc4bf7441799"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0xa, 0x2, 0x9) 583.554194ms ago: executing program 7 (id=1770): r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f00000002c0)={0x2, 'vlan0\x00', {0xfffffff9}, 0x6}) memfd_secret(0x5f4660753b07564b) r1 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"2ac78e02ff04856af9fb71f0d3fe13be", "3dfab043e15fad27a639f105b5e9f977", "47eb0b1889b90f105d66b3e5a7c94742"}, 0x4}) preadv(r1, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1, 0x1, 0xd) r2 = syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file1\x00', 0x0, &(0x7f0000000000), 0xfe, 0x250, &(0x7f0000000300)="$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") r3 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r4 = open(&(0x7f0000000180)='./file1\x00', 0x3f5242, 0x2b) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000040)={0x48}) sendfile(r3, r2, 0x0, 0x1800000201001) 453.375994ms ago: executing program 0 (id=1771): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file1\x00', 0x0, &(0x7f0000000000), 0xfe, 0x250, &(0x7f0000000300)="$eJzs3T9oJFUcB/DvzO565m7RUxtB/AMiooFwdoLN2SgcyHGICCqciNgod8J5h11iZWOhtUoqmyB2RktJE2wUwSpqitgIGiwMFlqs7M4G8mc1ZnfdkcznA5OZybyZ3xt2vm+3ebsBGutskvNJWknmk3SSFHsb3FctZ4e7y3Prl5Ne7+lfi0G7ar+ye96ZJEtJHk2yVhZ5tZ3cWH1+6/eNJx9853rngY9Wn5ub6U0ObW9tPrXz4cW3P73wyI2vv/35YpHz6e67r+krRvyvXSS3/xfF/ieKdt094N+49OYn3/Vzf0eS+wf576RM9eK9e+2mtU4e/uDvzn3vl2/ummVfgenr9Tr998ClHtA4ZZJuinIhSbVdlgsL1Wf471uny9euXntj/pWr16+8XPdIBUxLN9l84vNTn505kP+fWlX+gZOrn/9nLq380N/eadXdG2Am7q5W/fzPv7j4UOQfGkf+obnkH5pL/qG55B+aS/6hueQfTrDOPx+Wf2gu+Yfmkn9orr35BwCapXdqnFnDt05/IjIwc3WPPwAAAAAAAAAAAAAAAAAAwGHLc+uXd5dxr1Ecs/2X7yfbjydpj6rfGvwecXLz4O/p34p+s3212uN2dOiFeye8wIQ+rnn29S0/1lv/q3vqrb94JVl6K8m5dvvw81cMn7/x3XbE8c5LExY4poP5fOzZ2dY/6M+Veutf2Ei+6I8/50aNP2XuHKxHjz/do79i+Uiv/zHhBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJiZvwIAAP//1rxsXQ==") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r1 = open(&(0x7f0000000180)='./file1\x00', 0x185142, 0x2b) sendfile(r0, r1, 0x0, 0x1000000201001) (fail_nth: 2) 0s ago: executing program 9 (id=1772): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000280)={0x0, 0x7, 0x0, 0x81, 0xffffffff}) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x9) kernel console output (not intermixed with test programs): register: -EPIPE [ 879.209912][T11417] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 879.256990][ T5840] usb 10-1: Using ep0 maxpacket: 8 [ 879.338075][T11417] ext4 filesystem being mounted at /214/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 879.524296][ T5840] usb 10-1: unable to get BOS descriptor or descriptor too short [ 879.596659][ T5840] usb 10-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 879.607423][ T5840] usb 10-1: config 7 has 0 interfaces, different from the descriptor's value: 1 [ 879.774787][ T5840] usb 10-1: New USB device found, idVendor=12d1, idProduct=140d, bcdDevice= 0.00 [ 879.784720][ T5840] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 879.793390][ T5840] usb 10-1: Product: syz [ 879.798107][ T5840] usb 10-1: Manufacturer: syz [ 879.803019][ T5840] usb 10-1: SerialNumber: syz [ 880.358380][ T7466] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 880.507364][ T5840] usb 10-1: USB disconnect, device number 2 [ 880.778797][T11054] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPROTO [ 880.793172][T11054] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 880.926144][T11054] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 881.010214][T11054] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 881.193417][T11054] usb 4-1: USB disconnect, device number 83 [ 881.830763][T11437] loop4: detected capacity change from 0 to 1024 [ 881.904112][T11437] EXT4-fs: Ignoring removed bh option [ 881.971621][T11437] EXT4-fs: Ignoring removed orlov option [ 882.085745][T11436] ip6erspan0: entered promiscuous mode [ 882.187432][T11437] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 882.954845][T10966] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 883.347114][ T5840] usb 8-1: new high-speed USB device number 76 using dummy_hcd [ 883.591412][ T5840] usb 8-1: device descriptor read/64, error -71 [ 883.897190][ T5840] usb 8-1: new high-speed USB device number 77 using dummy_hcd [ 884.107215][ T5840] usb 8-1: device descriptor read/64, error -71 [ 884.227440][ T5840] usb usb8-port1: attempt power cycle [ 884.616066][ T5840] usb 8-1: new high-speed USB device number 78 using dummy_hcd [ 884.725741][ T5840] usb 8-1: device descriptor read/8, error -71 [ 884.950780][T11469] tipc: Enabling of bearer rejected, failed to enable media [ 885.004974][ T5840] usb 8-1: new high-speed USB device number 79 using dummy_hcd [ 885.098694][ T5840] usb 8-1: device descriptor read/8, error -71 [ 885.218601][ T5840] usb usb8-port1: unable to enumerate USB device [ 885.401300][T11476] FAULT_INJECTION: forcing a failure. [ 885.401300][T11476] name failslab, interval 1, probability 0, space 0, times 0 [ 885.414679][T11476] CPU: 1 UID: 0 PID: 11476 Comm: syz.5.1453 Not tainted syzkaller #0 PREEMPT(voluntary) [ 885.414849][T11476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 885.414934][T11476] Call Trace: [ 885.414989][T11476] [ 885.415044][T11476] __dump_stack+0x26/0x30 [ 885.415224][T11476] dump_stack_lvl+0x14c/0x1c0 [ 885.415406][T11476] dump_stack+0x1e/0x25 [ 885.415573][T11476] should_fail_ex+0x7e2/0x8c0 [ 885.415781][T11476] should_failslab+0x158/0x200 [ 885.415938][T11476] __kmalloc_noprof+0x1e4/0x1bf0 [ 885.416103][T11476] ? tomoyo_encode+0x603/0x9f0 [ 885.416280][T11476] ? prepend_path+0xfc1/0x1090 [ 885.416425][T11476] ? kmsan_get_metadata+0xf1/0x160 [ 885.416645][T11476] ? kmsan_get_metadata+0xf1/0x160 [ 885.416881][T11476] tomoyo_encode+0x603/0x9f0 [ 885.417098][T11476] tomoyo_realpath_from_path+0x92e/0x9f0 [ 885.417329][T11476] tomoyo_path_number_perm+0x1d0/0x7d0 [ 885.417520][T11476] ? kmsan_get_metadata+0xf1/0x160 [ 885.417739][T11476] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 885.418008][T11476] tomoyo_file_ioctl+0x3d/0x50 [ 885.418205][T11476] security_file_ioctl+0x139/0x570 [ 885.418434][T11476] __se_sys_ioctl+0xbb/0x400 [ 885.418616][T11476] __x64_sys_ioctl+0x97/0xe0 [ 885.418803][T11476] x64_sys_call+0x18a7/0x3e70 [ 885.418999][T11476] do_syscall_64+0xc9/0xf80 [ 885.419180][T11476] ? clear_bhb_loop+0x40/0x90 [ 885.419345][T11476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 885.419509][T11476] RIP: 0033:0x7f027c99aeb9 [ 885.419623][T11476] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 885.419776][T11476] RSP: 002b:00007f027d900028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 885.419925][T11476] RAX: ffffffffffffffda RBX: 00007f027cc15fa0 RCX: 00007f027c99aeb9 [ 885.420033][T11476] RDX: 0000000000000000 RSI: 0000000000005414 RDI: 0000000000000003 [ 885.420122][T11476] RBP: 00007f027d900090 R08: 0000000000000000 R09: 0000000000000000 [ 885.420220][T11476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 885.420315][T11476] R13: 00007f027cc16038 R14: 00007f027cc15fa0 R15: 00007fffc8da8ea8 [ 885.420459][T11476] [ 885.648663][T11476] ERROR: Out of memory at tomoyo_realpath_from_path. [ 886.070369][T11478] fuse: Bad value for 'fd' [ 886.124902][T11478] loop3: detected capacity change from 0 to 64 [ 886.189351][T11478] hfs: Unknown parameter '0xffffffffffffffff0x000000000000000000000000000000000000000' [ 886.358638][ T5784] Bluetooth: hci4: command tx timeout [ 886.618473][T11478] loop3: detected capacity change from 0 to 2048 [ 886.816570][T11478] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 887.116976][ T5840] libceph: connect (1)[c::]:6789 error -101 [ 887.134636][ T5840] libceph: mon0 (1)[c::]:6789 connect error [ 887.149917][ T5840] libceph: connect (1)[c::]:6789 error -101 [ 887.158898][ T5840] libceph: mon0 (1)[c::]:6789 connect error [ 887.418304][ T5840] libceph: connect (1)[c::]:6789 error -101 [ 887.440100][ T5840] libceph: mon0 (1)[c::]:6789 connect error [ 887.626537][T11493] ceph: No mds server is up or the cluster is laggy [ 887.948187][ T5840] libceph: connect (1)[c::]:6789 error -101 [ 887.954597][ T5840] libceph: mon0 (1)[c::]:6789 connect error [ 888.507050][T11507] loop5: detected capacity change from 0 to 1024 [ 888.710390][T11507] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1462'. [ 888.899971][T11511] kvm: pic: non byte read [ 888.975751][T11511] kvm: pic: non byte read [ 888.989133][T11511] kvm: pic: non byte read [ 889.026667][T11511] kvm: pic: non byte read [ 889.092047][T11511] kvm: pic: non byte read [ 889.123288][T11511] kvm: pic: non byte read [ 889.172134][T11511] kvm: pic: non byte read [ 889.199683][T11511] kvm: pic: non byte read [ 889.264807][T11511] kvm: pic: non byte read [ 889.313942][T11511] kvm: pic: non byte read [ 890.312483][ T7945] INFO: The task syz.3.514:7945 has been waiting for writeback completion for more than 1 seconds. [ 890.445511][T11521] loop4: detected capacity change from 0 to 32768 [ 890.482859][T11521] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1465 (11521) [ 890.516136][T11521] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 890.528110][T11521] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm [ 890.759475][ T5883] BTRFS warning (device loop4): checksum verify failed on logical 5332992 mirror 1 wanted 0x45c4daa94c2fee9c24887d4bee8f983cd8ca9d8901c4a5aa51fab9bc8d8bf5d6 found 0xb2758922e8d827c8bc6ab859562b2c8f647d73fe0cdaf8bcd72871bad21ec5e5 level 0 [ 890.788598][T11521] BTRFS warning (device loop4): couldn't read tree root [ 890.884269][T11521] BTRFS error (device loop4): open_ctree failed: -5 [ 891.278330][ T3447] hfsplus: b-tree write err: -5, ino 4 [ 891.364372][ T5883] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 891.712854][ T5883] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 891.920767][T11538] tipc: Enabling of bearer rejected, failed to enable media [ 892.134805][ T5883] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 892.481469][ T5883] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 893.338874][ T5883] bridge_slave_1: left allmulticast mode [ 893.344785][ T5883] bridge_slave_1: left promiscuous mode [ 893.351736][ T5883] bridge0: port 2(bridge_slave_1) entered disabled state [ 893.607274][ T5883] bridge_slave_0: left allmulticast mode [ 893.613185][ T5883] bridge_slave_0: left promiscuous mode [ 893.620701][ T5883] bridge0: port 1(bridge_slave_0) entered disabled state [ 894.854653][ T5883] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 894.924712][ T5883] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 894.952446][ T5883] bond0 (unregistering): Released all slaves [ 895.819728][ T5883] hsr_slave_0: left promiscuous mode [ 895.830929][ T5883] hsr_slave_1: left promiscuous mode [ 895.844890][ T5883] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 895.852751][ T5883] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 895.900197][ T5883] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 895.907982][ T5883] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 895.981755][ T5883] veth1_macvtap: left promiscuous mode [ 896.007634][ T5883] veth0_macvtap: left promiscuous mode [ 896.015278][ T5883] veth1_vlan: left promiscuous mode [ 896.036001][ T5883] veth0_vlan: left promiscuous mode [ 896.539734][T11561] loop5: detected capacity change from 0 to 512 [ 896.624635][T11561] EXT4-fs: Ignoring removed oldalloc option [ 896.664899][ T31] usb 8-1: new high-speed USB device number 80 using dummy_hcd [ 896.810154][T11561] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a856c01c, mo2=0002] [ 896.887784][T11561] System zones: 0-2, 18-18, 34-34 [ 896.894120][T11561] EXT4-fs (loop5): orphan cleanup on readonly fs [ 896.985257][ T31] usb 8-1: New USB device found, idVendor=05ac, idProduct=0241, bcdDevice=40.bf [ 896.997759][ T31] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 897.006010][ T31] usb 8-1: Product: syz [ 897.010787][ T31] usb 8-1: Manufacturer: syz [ 897.015696][ T31] usb 8-1: SerialNumber: syz [ 897.046531][T11561] EXT4-fs warning (device loop5): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 897.187682][T11561] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 897.215680][ T31] usb 8-1: config 0 descriptor?? [ 897.269944][T11561] EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #13: comm syz.5.1475: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 897.343455][ T31] input: bcm5974 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input32 [ 897.379160][T11561] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.1475: couldn't read orphan inode 13 (err -117) [ 897.450595][T11561] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 897.783633][ T9607] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 897.803418][ T9607] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 897.828981][ T9607] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 897.879463][ T9607] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 897.935604][ T9607] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 898.454968][T11572] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 898.493750][T11572] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a856c01c, mo2=0002] [ 898.591753][T11572] EXT4-fs warning (device loop5): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 898.679704][T11576] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 898.708947][T11576] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a856c01c, mo2=0002] [ 898.780610][T11576] EXT4-fs warning (device loop5): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 899.059344][ T5883] team0 (unregistering): Port device team_slave_1 removed [ 899.162267][ T5883] team0 (unregistering): Port device team_slave_0 removed [ 899.185963][T11582] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1476'. [ 900.059666][ T9607] Bluetooth: hci3: command tx timeout [ 900.591849][T11571] lo speed is unknown, defaulting to 1000 [ 900.684388][ T5121] bcm5974 8-1:0.0: could not read from device [ 900.761006][ T5121] bcm5974 8-1:0.0: could not read from device [ 900.846004][ T31] usb 8-1: USB disconnect, device number 80 [ 900.852705][ T5121] bcm5974 8-1:0.0: could not read from device [ 900.928919][ T5121] bcm5974 8-1:0.0: could not read from device [ 901.149515][ T6831] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 901.980157][T11602] loop5: detected capacity change from 0 to 512 [ 902.126935][ T9607] Bluetooth: hci3: command tx timeout [ 902.215752][T11602] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 902.304922][T11602] EXT4-fs (loop5): orphan cleanup on readonly fs [ 902.410231][T11602] EXT4-fs warning (device loop5): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 902.507155][T11602] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 902.532792][T11602] EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #13: comm syz.5.1480: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 902.630648][T11602] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.1480: couldn't read orphan inode 13 (err -117) [ 902.848742][T11602] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 903.217506][T11602] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 903.362166][T11602] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 903.501009][T11602] EXT4-fs warning (device loop5): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 903.520211][T11608] loop4: detected capacity change from 0 to 32768 [ 903.559620][T11608] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1481 (11608) [ 903.639642][T11608] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 903.650361][T11608] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm [ 903.673491][T11613] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 903.744528][T11614] loop7: detected capacity change from 0 to 1024 [ 903.765108][T11613] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 903.835680][T11613] EXT4-fs warning (device loop5): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 903.923880][ T133] BTRFS warning (device loop4): checksum verify failed on logical 5332992 mirror 1 wanted 0x45c4daa94c2fee9c24887d4bee8f983cd8ca9d8901c4a5aa51fab9bc8d8bf5d6 found 0xb2758922e8d827c8bc6ab859562b2c8f647d73fe0cdaf8bcd72871bad21ec5e5 level 0 [ 903.948322][T11608] BTRFS warning (device loop4): couldn't read tree root [ 903.997051][T11608] BTRFS error (device loop4): open_ctree failed: -5 [ 904.044981][T11608] program syz.4.1481 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 904.128639][T11614] syz.7.1483: attempt to access beyond end of device [ 904.128639][T11614] loop7: rw=8388608, sector=5778, nr_sectors = 2 limit=1024 [ 904.144327][T11614] Buffer I/O error on dev loop7, logical block 2889, async page read [ 904.152876][T11614] syz.7.1483: attempt to access beyond end of device [ 904.152876][T11614] loop7: rw=8388608, sector=5778, nr_sectors = 2 limit=1024 [ 904.167090][T11614] Buffer I/O error on dev loop7, logical block 2889, async page read [ 904.176268][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 904.182773][ T30] audit: type=1800 audit(2000000638.847:719): pid=11614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1483" name="file1" dev="loop7" ino=20 res=0 errno=0 [ 904.214407][ T9607] Bluetooth: hci3: command tx timeout [ 904.649124][ T6831] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 904.868518][T11571] chnl_net:caif_netlink_parms(): no params data found [ 905.328743][T11644] FAULT_INJECTION: forcing a failure. [ 905.328743][T11644] name failslab, interval 1, probability 0, space 0, times 0 [ 905.342235][T11644] CPU: 1 UID: 0 PID: 11644 Comm: syz.4.1487 Not tainted syzkaller #0 PREEMPT(voluntary) [ 905.342393][T11644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 905.342485][T11644] Call Trace: [ 905.342563][T11644] [ 905.342620][T11644] __dump_stack+0x26/0x30 [ 905.342814][T11644] dump_stack_lvl+0x14c/0x1c0 [ 905.342996][T11644] dump_stack+0x1e/0x25 [ 905.343163][T11644] should_fail_ex+0x7e2/0x8c0 [ 905.343361][T11644] should_failslab+0x158/0x200 [ 905.343522][T11644] __kmalloc_noprof+0x1e4/0x1bf0 [ 905.343685][T11644] ? kmsan_get_metadata+0xf1/0x160 [ 905.343904][T11644] ? tomoyo_realpath_from_path+0xeb/0x9f0 [ 905.344103][T11644] ? tomoyo_path_number_perm+0xc1/0x7d0 [ 905.344262][T11644] ? kmsan_get_metadata+0xf1/0x160 [ 905.344489][T11644] tomoyo_realpath_from_path+0xeb/0x9f0 [ 905.344700][T11644] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 905.344921][T11644] ? __srcu_read_lock+0x5e/0xd0 [ 905.345116][T11644] tomoyo_path_number_perm+0x1d0/0x7d0 [ 905.345309][T11644] ? kmsan_get_metadata+0xf1/0x160 [ 905.345524][T11644] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 905.345810][T11644] tomoyo_file_ioctl+0x3d/0x50 [ 905.346013][T11644] security_file_ioctl+0x139/0x570 [ 905.346242][T11644] __se_sys_ioctl+0xbb/0x400 [ 905.346419][T11644] __x64_sys_ioctl+0x97/0xe0 [ 905.346594][T11644] x64_sys_call+0x18a7/0x3e70 [ 905.346798][T11644] do_syscall_64+0xc9/0xf80 [ 905.346981][T11644] ? clear_bhb_loop+0x40/0x90 [ 905.347151][T11644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 905.347315][T11644] RIP: 0033:0x7f2994d9aeb9 [ 905.347435][T11644] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 905.347570][T11644] RSP: 002b:00007f2995c40028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 905.347722][T11644] RAX: ffffffffffffffda RBX: 00007f2995015fa0 RCX: 00007f2994d9aeb9 [ 905.347832][T11644] RDX: 0000200000000240 RSI: 00000000c0189374 RDI: 0000000000000003 [ 905.347932][T11644] RBP: 00007f2995c40090 R08: 0000000000000000 R09: 0000000000000000 [ 905.348028][T11644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 905.348118][T11644] R13: 00007f2995016038 R14: 00007f2995015fa0 R15: 00007ffc3ededa08 [ 905.348264][T11644] [ 905.577196][T11644] ERROR: Out of memory at tomoyo_realpath_from_path. [ 905.587108][T11645] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1485'. [ 905.604437][T11645] nbd: must specify at least one socket [ 906.277539][ T9607] Bluetooth: hci3: command tx timeout [ 907.098638][T11054] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 907.291785][T11054] usb 6-1: Using ep0 maxpacket: 32 [ 907.367786][T11664] netlink: 48 bytes leftover after parsing attributes in process `syz.9.1492'. [ 907.370435][T11054] usb 6-1: config 0 has an invalid interface number: 23 but max is 0 [ 907.389874][T11054] usb 6-1: config 0 has no interface number 0 [ 907.466983][T11054] usb 6-1: New USB device found, idVendor=052b, idProduct=1803, bcdDevice= c.62 [ 907.476690][T11054] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 907.504728][T11054] usb 6-1: config 0 descriptor?? [ 907.631932][T11054] gspca_main: sunplus-2.14.0 probing 052b:1803 [ 908.018187][T11674] loop4: detected capacity change from 0 to 128 [ 908.035898][T11673] kAFS: No cell specified [ 908.118584][ T30] audit: type=1326 audit(2000000642.777:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11662 comm="syz.9.1492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f310f19aeb9 code=0x7ffc0000 [ 908.276607][ T30] audit: type=1326 audit(2000000642.947:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11662 comm="syz.9.1492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f310f19aeb9 code=0x7ffc0000 [ 908.304439][ T30] audit: type=1326 audit(2000000642.947:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11662 comm="syz.9.1492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f310f19aeb9 code=0x7ffc0000 [ 908.328781][ T30] audit: type=1326 audit(2000000642.947:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11662 comm="syz.9.1492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f310f19aeb9 code=0x7ffc0000 [ 908.486156][T11656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 908.536813][ T9] usb 8-1: new full-speed USB device number 81 using dummy_hcd [ 908.628180][ T30] audit: type=1326 audit(2000000643.027:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11662 comm="syz.9.1492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f310f19aeb9 code=0x7ffc0000 [ 908.652142][ T30] audit: type=1326 audit(2000000643.027:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11662 comm="syz.9.1492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f310f19aeb9 code=0x7ffc0000 [ 908.675358][T11656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 908.683977][ T30] audit: type=1326 audit(2000000643.027:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11662 comm="syz.9.1492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f310f19aeb9 code=0x7ffc0000 [ 908.716967][T11054] usb 6-1: USB disconnect, device number 59 [ 908.837162][ T9] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 908.903088][ T9] usb 8-1: too many endpoints for config 1 interface 0 altsetting 0: 238, using maximum allowed: 30 [ 908.950510][ T9] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 908.962429][ T9] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 908.973688][ T9] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 238 [ 909.117943][ T9] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 909.130678][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 909.139108][ T9] usb 8-1: Product: syz [ 909.143493][ T9] usb 8-1: Manufacturer: syz [ 909.148526][ T9] usb 8-1: SerialNumber: syz [ 909.298980][T11673] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 909.353622][ T9] usbtest 8-1:1.0: couldn't get endpoints, -22 [ 909.360501][ T9] usbtest 8-1:1.0: probe with driver usbtest failed with error -22 [ 909.525558][ T9] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 909.533287][ T9] cdc_ncm 8-1:1.1: bind() failure [ 909.578346][T11668] bridge0: port 2(bridge_slave_1) entered disabled state [ 909.588406][T11668] bridge0: port 1(bridge_slave_0) entered disabled state [ 909.622855][T11673] netlink: 'syz.7.1494': attribute type 2 has an invalid length. [ 909.630979][T11673] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1494'. [ 909.663463][ T9] usbtest 8-1:1.1: couldn't get endpoints, -22 [ 909.670489][ T9] usbtest 8-1:1.1: probe with driver usbtest failed with error -22 [ 909.862944][T11673] loop7: detected capacity change from 0 to 512 [ 909.995550][T11673] EXT4-fs (loop7): Test dummy encryption mode enabled [ 910.002893][T11673] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 910.258712][T11673] EXT4-fs error (device loop7): xattr_find_entry:337: inode #15: comm syz.7.1494: corrupted xattr entries [ 910.290386][T11673] EXT4-fs (loop7): 1 orphan inode deleted [ 910.396846][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 910.410533][T11673] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 910.608387][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 910.658755][ T9] usb 5-1: config 0 has an invalid interface number: 48 but max is 0 [ 910.667829][ T9] usb 5-1: config 0 has no interface number 0 [ 910.737701][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 910.747966][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 910.791744][ T9] usb 5-1: config 0 interface 48 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 910.803343][ T9] usb 5-1: config 0 interface 48 has no altsetting 0 [ 910.885110][ T9] usb 5-1: New USB device found, idVendor=1ae7, idProduct=0525, bcdDevice=74.d5 [ 910.895385][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 910.903861][ T9] usb 5-1: Product: syz [ 910.908357][ T9] usb 5-1: Manufacturer: syz [ 910.913174][ T9] usb 5-1: SerialNumber: syz [ 911.043760][ T9] usb 5-1: config 0 descriptor?? [ 911.169595][ T9] HFC-S_USB 5-1:0.48: probe with driver HFC-S_USB failed with error -5 [ 911.335831][ T9] usb 5-1: USB disconnect, device number 3 [ 911.412255][T11691] loop5: detected capacity change from 0 to 32768 [ 911.497004][T11691] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1496 (11691) [ 911.565144][T11691] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 911.575867][T11691] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm [ 911.634073][T11673] fscrypt (loop7): Missing crypto API support for AES-256-CBC-CTS (API name: "cts(cbc(aes))") [ 911.832270][T11668] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 911.846981][T10149] BTRFS warning (device loop5): checksum verify failed on logical 5332992 mirror 1 wanted 0x45c4daa94c2fee9c24887d4bee8f983cd8ca9d8901c4a5aa51fab9bc8d8bf5d6 found 0xb2758922e8d827c8bc6ab859562b2c8f647d73fe0cdaf8bcd72871bad21ec5e5 level 0 [ 911.875018][T11691] BTRFS warning (device loop5): couldn't read tree root [ 911.951462][T11691] BTRFS error (device loop5): open_ctree failed: -5 [ 912.000134][T11690] program syz.5.1496 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 912.199597][T11668] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 912.609746][ T9] usb 8-1: USB disconnect, device number 81 [ 912.740236][ T7466] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 912.759706][ T5784] Bluetooth: hci1: command 0x0406 tx timeout [ 913.022438][T11714] FAULT_INJECTION: forcing a failure. [ 913.022438][T11714] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 913.036306][T11714] CPU: 0 UID: 0 PID: 11714 Comm: syz.4.1497 Not tainted syzkaller #0 PREEMPT(voluntary) [ 913.036462][T11714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 913.036556][T11714] Call Trace: [ 913.036616][T11714] [ 913.036671][T11714] __dump_stack+0x26/0x30 [ 913.036841][T11714] dump_stack_lvl+0x14c/0x1c0 [ 913.037016][T11714] dump_stack+0x1e/0x25 [ 913.037180][T11714] should_fail_ex+0x7e2/0x8c0 [ 913.037384][T11714] should_fail+0x2a/0x40 [ 913.037560][T11714] should_fail_usercopy+0x2e/0x40 [ 913.037740][T11714] _copy_from_user+0x33/0x100 [ 913.037927][T11714] sctp_setsockopt+0x2cb/0x2260 [ 913.038120][T11714] ? __pfx_sctp_setsockopt+0x10/0x10 [ 913.038300][T11714] sock_common_setsockopt+0xf5/0x140 [ 913.038494][T11714] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 913.038679][T11714] __sys_setsockopt+0x43e/0x580 [ 913.038906][T11714] __x64_sys_setsockopt+0xf4/0x1a0 [ 913.039129][T11714] x64_sys_call+0x28e3/0x3e70 [ 913.039333][T11714] do_syscall_64+0xc9/0xf80 [ 913.039502][T11714] ? clear_bhb_loop+0x40/0x90 [ 913.039657][T11714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 913.039816][T11714] RIP: 0033:0x7f2994d9aeb9 [ 913.039930][T11714] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 913.040064][T11714] RSP: 002b:00007f2995c40028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 913.040204][T11714] RAX: ffffffffffffffda RBX: 00007f2995015fa0 RCX: 00007f2994d9aeb9 [ 913.040324][T11714] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000005 [ 913.040410][T11714] RBP: 00007f2995c40090 R08: 000000000000009c R09: 0000000000000000 [ 913.040499][T11714] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 913.040596][T11714] R13: 00007f2995016038 R14: 00007f2995015fa0 R15: 00007ffc3ededa08 [ 913.040744][T11714] [ 913.581492][T11717] loop7: detected capacity change from 0 to 128 [ 913.699476][T11717] FAT-fs (loop7): bogus number of reserved sectors [ 913.706247][T11717] FAT-fs (loop7): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 913.720727][T11717] FAT-fs (loop7): Can't find a valid FAT filesystem [ 913.825646][T11717] IPVS: set_ctl: invalid protocol: 8 0.0.0.0:20004 [ 914.126664][ T5840] usb 8-1: new high-speed USB device number 82 using dummy_hcd [ 914.330766][ T5840] usb 8-1: Using ep0 maxpacket: 16 [ 914.363530][ T5840] usb 8-1: unable to get BOS descriptor or descriptor too short [ 914.469396][ T5840] usb 8-1: config 1 has an invalid interface number: 206 but max is 0 [ 914.478151][ T5840] usb 8-1: config 1 has no interface number 0 [ 914.649099][ T5840] usb 8-1: New USB device found, idVendor=152d, idProduct=0310, bcdDevice=3b.0a [ 914.658852][ T5840] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 914.667403][ T5840] usb 8-1: Product: syz [ 914.671807][ T5840] usb 8-1: Manufacturer: syz [ 914.676789][ T5840] usb 8-1: SerialNumber: syz [ 915.018530][T11720] loop4: detected capacity change from 0 to 32768 [ 915.161043][T11720] (syz.4.1499,11720,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 915.180743][T11720] (syz.4.1499,11720,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 915.244537][ T5840] uvcvideo 8-1:1.206: probe with driver uvcvideo failed with error -22 [ 915.289344][ T5840] usb 8-1: USB disconnect, device number 82 [ 915.311238][T11720] (syz.4.1499,11720,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xbec99099, computed 0x3881d996. Applying ECC. [ 915.328056][T11720] (syz.4.1499,11720,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x93f628a2, computed 0x2aee8be5. Applying ECC. [ 915.380810][T11720] JBD2: Ignoring recovery information on journal [ 915.472361][ T5834] lo speed is unknown, defaulting to 1000 [ 915.479404][T11720] (syz.4.1499,11720,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xbec99099, computed 0x3881d996. Applying ECC. [ 915.480536][T11720] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 915.481209][T11720] (syz.4.1499,11720,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x93f628a2, computed 0x2aee8be5. Applying ECC. [ 915.515386][T11720] (syz.4.1499,11720,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC. [ 915.518315][ T5834] syz2: Port: 1 Link DOWN [ 915.704723][T10109] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 915.728377][T11571] bridge0: port 1(bridge_slave_0) entered blocking state [ 915.736086][T11571] bridge0: port 1(bridge_slave_0) entered disabled state [ 915.787125][T11571] bridge_slave_0: entered allmulticast mode [ 915.887155][T11571] bridge_slave_0: entered promiscuous mode [ 915.924147][T10109] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 915.983754][T11571] bridge0: port 2(bridge_slave_1) entered blocking state [ 915.991442][T11571] bridge0: port 2(bridge_slave_1) entered disabled state [ 916.043084][T11571] bridge_slave_1: entered allmulticast mode [ 916.111884][T10966] ocfs2: Unmounting device (7,4) on (node local) [ 916.148049][T11571] bridge_slave_1: entered promiscuous mode [ 916.196700][ T6539] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 916.416780][ T6539] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 916.912442][T11571] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 917.162890][T11571] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 917.221138][T11732] sctp: [Deprecated]: syz.9.1503 (pid 11732) Use of int in max_burst socket option. [ 917.221138][T11732] Use struct sctp_assoc_value instead [ 917.469655][T11728] loop7: detected capacity change from 0 to 32768 [ 917.482250][T11728] xfs: Deprecated parameter 'attr2' [ 917.487877][T11728] XFS: attr2 mount option is deprecated. [ 917.593302][T11728] XFS (loop7): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 917.664507][T11730] loop4: detected capacity change from 0 to 4096 [ 917.727650][T11730] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 917.817957][T11730] ntfs3(loop4): It is recommended to use chkdsk. [ 917.990945][T11744] loop5: detected capacity change from 0 to 128 [ 918.003048][T11571] team0: Port device team_slave_0 added [ 918.046131][T11728] XFS (loop7): Ending clean mount [ 918.085721][T11728] XFS (loop7): Quotacheck needed: Please wait. [ 918.158721][T11571] team0: Port device team_slave_1 added [ 918.213102][T11728] XFS (loop7): Quotacheck: Done. [ 918.395585][ T7466] XFS (loop7): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 918.405167][T11730] ntfs3(loop4): Failed to load $Extend (-22). [ 918.405296][T11730] ntfs3(loop4): Failed to initialize $Extend. [ 918.847372][T11571] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 918.854573][T11571] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 918.881864][T11571] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 918.947437][T11730] ntfs3(loop4): failed to convert "076c" to iso8859-1 [ 919.093600][T11571] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 919.101533][T11571] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 919.128295][T11571] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 919.589239][T11755] FAULT_INJECTION: forcing a failure. [ 919.589239][T11755] name failslab, interval 1, probability 0, space 0, times 0 [ 919.602585][T11755] CPU: 1 UID: 0 PID: 11755 Comm: syz.5.1507 Not tainted syzkaller #0 PREEMPT(voluntary) [ 919.602746][T11755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 919.602840][T11755] Call Trace: [ 919.602897][T11755] [ 919.602953][T11755] __dump_stack+0x26/0x30 [ 919.603138][T11755] dump_stack_lvl+0x14c/0x1c0 [ 919.603314][T11755] dump_stack+0x1e/0x25 [ 919.603479][T11755] should_fail_ex+0x7e2/0x8c0 [ 919.603670][T11755] should_failslab+0x158/0x200 [ 919.603826][T11755] __kmalloc_noprof+0x1e4/0x1bf0 [ 919.603978][T11755] ? tomoyo_encode+0x603/0x9f0 [ 919.604138][T11755] ? prepend_path+0xfc1/0x1090 [ 919.604270][T11755] ? kmsan_get_metadata+0xf1/0x160 [ 919.604473][T11755] ? kmsan_get_metadata+0xf1/0x160 [ 919.604680][T11755] tomoyo_encode+0x603/0x9f0 [ 919.604878][T11755] tomoyo_realpath_from_path+0x92e/0x9f0 [ 919.605087][T11755] tomoyo_path_number_perm+0x1d0/0x7d0 [ 919.605261][T11755] ? kmsan_get_metadata+0xf1/0x160 [ 919.605484][T11755] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 919.605729][T11755] tomoyo_file_ioctl+0x3d/0x50 [ 919.605905][T11755] security_file_ioctl+0x139/0x570 [ 919.606112][T11755] __se_sys_ioctl+0xbb/0x400 [ 919.606277][T11755] __x64_sys_ioctl+0x97/0xe0 [ 919.606456][T11755] x64_sys_call+0x18a7/0x3e70 [ 919.606640][T11755] do_syscall_64+0xc9/0xf80 [ 919.606805][T11755] ? clear_bhb_loop+0x40/0x90 [ 919.606956][T11755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 919.607109][T11755] RIP: 0033:0x7f027c99aeb9 [ 919.607211][T11755] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 919.607328][T11755] RSP: 002b:00007f027d900028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 919.607461][T11755] RAX: ffffffffffffffda RBX: 00007f027cc15fa0 RCX: 00007f027c99aeb9 [ 919.607558][T11755] RDX: 0000200000000040 RSI: 000000004008af30 RDI: 0000000000000003 [ 919.607649][T11755] RBP: 00007f027d900090 R08: 0000000000000000 R09: 0000000000000000 [ 919.607734][T11755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 919.607814][T11755] R13: 00007f027cc16038 R14: 00007f027cc15fa0 R15: 00007fffc8da8ea8 [ 919.607949][T11755] [ 919.827336][T11755] ERROR: Out of memory at tomoyo_realpath_from_path. [ 919.838194][T11753] fuse: Bad value for 'fd' [ 920.031482][T11571] hsr_slave_0: entered promiscuous mode [ 920.041900][T11571] hsr_slave_1: entered promiscuous mode [ 920.050871][T11571] debugfs: 'hsr0' already exists in 'hsr' [ 920.056940][T11571] Cannot create hsr debugfs directory [ 921.410985][T11769] loop7: detected capacity change from 0 to 136 [ 921.455922][T11769] iso9660: Unknown parameter 'sessionIZוP8ַ' [ 922.364095][T11767] loop5: detected capacity change from 0 to 32768 [ 922.451206][T11767] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1511 (11767) [ 922.476045][T11767] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 922.486965][T11767] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm [ 922.716802][ T5890] BTRFS warning (device loop5): checksum verify failed on logical 5332992 mirror 1 wanted 0x45c4daa94c2fee9c24887d4bee8f983cd8ca9d8901c4a5aa51fab9bc8d8bf5d6 found 0xb2758922e8d827c8bc6ab859562b2c8f647d73fe0cdaf8bcd72871bad21ec5e5 level 0 [ 922.742174][T11767] BTRFS warning (device loop5): couldn't read tree root [ 922.864791][T11767] BTRFS error (device loop5): open_ctree failed: -5 [ 922.938566][T11767] program syz.5.1511 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 923.038128][T11794] autofs: Bad value for 'fd' [ 923.399672][T11793] pimreg: entered allmulticast mode [ 924.354689][T11571] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 924.521235][T11571] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 924.621186][T11571] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 924.801201][T11571] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 925.290172][T11811] loop7: detected capacity change from 0 to 8 [ 925.399616][T11811] unable to read xattr id index table [ 925.827272][T11054] usb 8-1: new high-speed USB device number 83 using dummy_hcd [ 926.007207][T11054] usb 8-1: device descriptor read/64, error -71 [ 926.287155][T11054] usb 8-1: new high-speed USB device number 84 using dummy_hcd [ 926.476674][T11054] usb 8-1: device descriptor read/64, error -71 [ 926.581488][T11571] 8021q: adding VLAN 0 to HW filter on device bond0 [ 926.606458][T11054] usb usb8-port1: attempt power cycle [ 926.832489][T11571] 8021q: adding VLAN 0 to HW filter on device team0 [ 926.846951][ T5834] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 926.967424][ T3447] bridge0: port 1(bridge_slave_0) entered blocking state [ 926.974979][ T3447] bridge0: port 1(bridge_slave_0) entered forwarding state [ 927.020193][T11054] usb 8-1: new high-speed USB device number 85 using dummy_hcd [ 927.079804][ T3447] bridge0: port 2(bridge_slave_1) entered blocking state [ 927.087342][T11054] usb 8-1: device descriptor read/8, error -71 [ 927.087979][ T3447] bridge0: port 2(bridge_slave_1) entered forwarding state [ 927.103591][ T5834] usb 6-1: Using ep0 maxpacket: 32 [ 927.158428][ T5834] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 927.169962][ T5834] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 927.180295][ T5834] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 927.189752][ T5834] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 927.374569][T11054] usb 8-1: new high-speed USB device number 86 using dummy_hcd [ 927.392099][ T5834] usb 6-1: config 0 descriptor?? [ 927.460358][T11054] usb 8-1: device descriptor read/8, error -71 [ 927.584963][T11054] usb usb8-port1: unable to enumerate USB device [ 927.767045][ T952] libceph: connect (1)[c::]:6789 error -101 [ 927.777865][ T952] libceph: mon0 (1)[c::]:6789 connect error [ 927.939144][ T5834] savu 0003:1E7D:2D5A.0006: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0 [ 928.041271][ T952] libceph: connect (1)[c::]:6789 error -101 [ 928.079619][ T5834] usb 6-1: USB disconnect, device number 60 [ 928.121874][ T952] libceph: mon0 (1)[c::]:6789 connect error [ 928.361152][T11832] ceph: No mds server is up or the cluster is laggy [ 928.987919][T11841] fido_id[11841]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 929.422614][T11852] loop5: detected capacity change from 0 to 128 [ 929.675479][T11853] netlink: 104 bytes leftover after parsing attributes in process `syz.9.1529'. [ 929.848404][T11856] 9pnet_fd: Insufficient options for proto=fd [ 930.721147][T11571] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 931.704717][T11863] loop7: detected capacity change from 0 to 32768 [ 931.724500][T11863] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.1534 (11863) [ 931.767635][T11863] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 931.778241][T11863] BTRFS info (device loop7): using sha256 (sha256-lib) checksum algorithm [ 931.931906][ T5890] BTRFS warning (device loop7): checksum verify failed on logical 5332992 mirror 1 wanted 0x45c4daa94c2fee9c24887d4bee8f983cd8ca9d8901c4a5aa51fab9bc8d8bf5d6 found 0xb2758922e8d827c8bc6ab859562b2c8f647d73fe0cdaf8bcd72871bad21ec5e5 level 0 [ 931.961194][T11863] BTRFS warning (device loop7): couldn't read tree root [ 932.066047][T11863] BTRFS error (device loop7): open_ctree failed: -5 [ 932.082970][T11571] veth0_vlan: entered promiscuous mode [ 932.134283][T11863] program syz.7.1534 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 932.390390][T11571] veth1_vlan: entered promiscuous mode [ 932.736024][T11888] loop4: detected capacity change from 0 to 136 [ 932.800849][T11888] iso9660: Unknown parameter 'sessionIZוP8ַ' [ 932.983542][T11571] veth0_macvtap: entered promiscuous mode [ 933.174761][T11571] veth1_macvtap: entered promiscuous mode [ 933.650995][T11571] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 933.845915][T11571] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 934.084210][ T6539] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.158909][ T6539] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.179866][ T24] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 934.248909][ T5883] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.303537][ T58] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.423983][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 934.473382][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 934.485204][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 934.495535][ T24] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 934.507055][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 934.668217][ T24] usb 5-1: config 0 descriptor?? [ 935.196990][ T24] usbhid 5-1:0.0: can't add hid device: -71 [ 935.203645][ T24] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 935.337882][ T24] usb 5-1: USB disconnect, device number 4 [ 935.360905][T11913] netlink: 104 bytes leftover after parsing attributes in process `syz.9.1542'. [ 935.640460][T11915] loop5: detected capacity change from 0 to 128 [ 936.235200][T11921] loop7: detected capacity change from 0 to 512 [ 936.460951][T11921] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 937.985348][T11937] FAULT_INJECTION: forcing a failure. [ 937.985348][T11937] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 938.000027][T11937] CPU: 0 UID: 0 PID: 11937 Comm: syz.7.1547 Not tainted syzkaller #0 PREEMPT(voluntary) [ 938.000181][T11937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 938.000273][T11937] Call Trace: [ 938.000330][T11937] [ 938.000385][T11937] __dump_stack+0x26/0x30 [ 938.000566][T11937] dump_stack_lvl+0x14c/0x1c0 [ 938.000745][T11937] dump_stack+0x1e/0x25 [ 938.000915][T11937] should_fail_ex+0x7e2/0x8c0 [ 938.001117][T11937] should_fail+0x2a/0x40 [ 938.001275][T11937] should_fail_usercopy+0x2e/0x40 [ 938.001455][T11937] _copy_from_user+0x33/0x100 [ 938.001634][T11937] ucma_write+0x155/0x5c0 [ 938.001801][T11937] ? kmsan_get_metadata+0xf1/0x160 [ 938.002021][T11937] ? __pfx_ucma_write+0x10/0x10 [ 938.002185][T11937] vfs_writev+0xb34/0x1500 [ 938.002324][T11937] ? __x64_sys_writev+0x99/0xf0 [ 938.002526][T11937] ? __pfx_ucma_write+0x10/0x10 [ 938.002725][T11937] ? kmsan_get_metadata+0xf1/0x160 [ 938.002949][T11937] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 938.003186][T11937] do_writev+0x235/0x5d0 [ 938.003350][T11937] __x64_sys_writev+0x99/0xf0 [ 938.003550][T11937] x64_sys_call+0x210f/0x3e70 [ 938.003744][T11937] do_syscall_64+0xc9/0xf80 [ 938.003938][T11937] ? clear_bhb_loop+0x40/0x90 [ 938.004105][T11937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 938.004269][T11937] RIP: 0033:0x7f7e9399aeb9 [ 938.004382][T11937] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 938.004515][T11937] RSP: 002b:00007f7e91bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 938.004663][T11937] RAX: ffffffffffffffda RBX: 00007f7e93c15fa0 RCX: 00007f7e9399aeb9 [ 938.004782][T11937] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 000000000000000b [ 938.004881][T11937] RBP: 00007f7e91bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 938.004976][T11937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 938.005069][T11937] R13: 00007f7e93c16038 R14: 00007f7e93c15fa0 R15: 00007ffe61292ba8 [ 938.005218][T11937] [ 938.585773][T11940] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1548'. [ 938.676100][T11943] 9pnet_fd: Insufficient options for proto=fd [ 939.482028][T11940] loop4: detected capacity change from 0 to 4096 [ 939.571320][T11940] EXT4-fs: Ignoring removed bh option [ 939.577221][T11940] EXT4-fs: Ignoring removed mblk_io_submit option [ 939.669139][T11940] EXT4-fs: Conflicting test_dummy_encryption options [ 939.717101][ T24] usb 8-1: new high-speed USB device number 87 using dummy_hcd [ 939.933992][ T24] usb 8-1: Using ep0 maxpacket: 32 [ 940.043819][ T24] usb 8-1: config 76 has an invalid descriptor of length 0, skipping remainder of the config [ 940.077055][T11942] loop5: detected capacity change from 0 to 32768 [ 940.098846][T11942] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1546 (11942) [ 940.149964][T11942] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 940.160630][T11942] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm [ 940.277079][ T24] usb 8-1: New USB device found, idVendor=069a, idProduct=0001, bcdDevice=51.c5 [ 940.286782][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 940.295034][ T24] usb 8-1: Product: syz [ 940.301321][ T24] usb 8-1: Manufacturer: syz [ 940.306161][ T24] usb 8-1: SerialNumber: syz [ 940.411299][ T24] pwc: Askey VC010 type 1 USB webcam detected. [ 940.464996][ T6541] BTRFS warning (device loop5): checksum verify failed on logical 5332992 mirror 1 wanted 0x45c4daa94c2fee9c24887d4bee8f983cd8ca9d8901c4a5aa51fab9bc8d8bf5d6 found 0xb2758922e8d827c8bc6ab859562b2c8f647d73fe0cdaf8bcd72871bad21ec5e5 level 0 [ 940.488882][T11942] BTRFS warning (device loop5): couldn't read tree root [ 940.654926][ T24] pwc: send_video_command error -71 [ 940.660704][ T24] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 940.669179][ T24] Philips webcam 8-1:76.0: probe with driver Philips webcam failed with error -71 [ 940.738876][T11942] BTRFS error (device loop5): open_ctree failed: -5 [ 940.769334][T11951] bridge0: entered allmulticast mode [ 940.840452][T11951] bridge_slave_1: left allmulticast mode [ 940.855270][T11951] bridge_slave_1: left promiscuous mode [ 940.862267][T11951] bridge0: port 2(bridge_slave_1) entered disabled state [ 940.877607][ T24] usb 8-1: USB disconnect, device number 87 [ 940.921793][T11942] program syz.5.1546 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 941.025293][T11951] bridge_slave_0: left allmulticast mode [ 941.031595][T11951] bridge_slave_0: left promiscuous mode [ 941.038495][T11951] bridge0: port 1(bridge_slave_0) entered disabled state [ 941.283276][T11967] siw: device registration error -23 [ 942.291431][T11975] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1553'. [ 942.767637][ T24] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 943.011597][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 943.111533][T11985] loop7: detected capacity change from 0 to 512 [ 943.130699][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 943.142566][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 943.153015][ T24] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 943.162555][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 943.243666][T11985] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 943.365409][ T24] usb 6-1: config 0 descriptor?? [ 944.220626][ T24] usbhid 6-1:0.0: can't add hid device: -71 [ 944.229483][ T24] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 944.352297][ T24] usb 6-1: USB disconnect, device number 61 [ 945.232197][T12003] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1560'. [ 945.338078][T12003] 9pnet_fd: Insufficient options for proto=fd [ 945.739297][T11998] loop7: detected capacity change from 0 to 32768 [ 945.987852][T12003] loop4: detected capacity change from 0 to 4096 [ 946.060345][T12003] EXT4-fs: Ignoring removed bh option [ 946.065996][T12003] EXT4-fs: Ignoring removed mblk_io_submit option [ 946.116880][T11998] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 946.187814][T12003] EXT4-fs: Conflicting test_dummy_encryption options [ 947.016861][ T6539] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 947.024944][ T6539] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 947.067163][T11998] XFS (loop7): Ending clean mount [ 947.355921][ T7466] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 947.594395][T10109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 947.603212][T10109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 948.619733][ T5834] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 948.879157][ T5834] usb 6-1: Using ep0 maxpacket: 32 [ 948.948709][ T5834] usb 6-1: config 76 has an invalid descriptor of length 0, skipping remainder of the config [ 949.123327][ T5834] usb 6-1: New USB device found, idVendor=069a, idProduct=0001, bcdDevice=51.c5 [ 949.133402][ T5834] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 949.146243][ T5834] usb 6-1: Product: syz [ 949.152167][ T5834] usb 6-1: Manufacturer: syz [ 949.157265][ T5834] usb 6-1: SerialNumber: syz [ 949.202061][ T5834] pwc: Askey VC010 type 1 USB webcam detected. [ 949.316709][ T24] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 949.409955][ T5834] pwc: send_video_command error -71 [ 949.415575][ T5834] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 949.423927][ T5834] Philips webcam 6-1:76.0: probe with driver Philips webcam failed with error -71 [ 949.466187][ T5834] usb 6-1: USB disconnect, device number 62 [ 949.508482][ T5981] udevd[5981]: setting mode of /dev/bus/usb/006/062 to 020664 failed: No such file or directory [ 949.558470][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 949.599237][ T5981] udevd[5981]: setting owner of /dev/bus/usb/006/062 to uid=0, gid=0 failed: No such file or directory [ 949.646755][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 12336, setting to 64 [ 949.712821][ T24] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 949.724575][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 949.733419][ T24] usb 5-1: Product: syz [ 949.738065][ T24] usb 5-1: Manufacturer: syz [ 949.743016][ T24] usb 5-1: SerialNumber: syz [ 949.884316][ T24] usb 5-1: config 0 descriptor?? [ 949.949744][ T24] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 949.963478][ T24] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 950.539451][ T24] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 951.000383][ T24] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 951.009955][ T24] em28xx 5-1:0.0: board has no eeprom [ 951.447111][ T24] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 951.455361][ T24] em28xx 5-1:0.0: dvb set to bulk mode. [ 951.467338][ T31] em28xx 5-1:0.0: Binding DVB extension [ 951.501707][T12036] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 952.445298][T12068] loop7: detected capacity change from 0 to 16 [ 952.561737][T12068] erofs (device loop7): invalid checksum 0xf13cde71, 0xe73df4ff expected [ 952.572654][T12069] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1573'. [ 952.671171][ T8896] udevd[8896]: incorrect erofs checksum on /dev/loop7 [ 952.696885][T12042] em28xx 5-1:0.0: reading from i2c device at 0xfe00 failed (error=-5) [ 952.704630][T12070] 9pnet_fd: Insufficient options for proto=fd [ 952.722301][ T5834] usb 5-1: USB disconnect, device number 5 [ 952.811598][ T5834] em28xx 5-1:0.0: Disconnecting em28xx [ 952.839770][T12068] comedi comedi3: comedi_config --init_data is deprecated [ 952.914828][T12073] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1572'. [ 952.982280][T12073] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 953.248308][ T31] em28xx 5-1:0.0: Registering input extension [ 953.306806][ T5834] em28xx 5-1:0.0: Closing input extension [ 953.322059][ T24] usb 8-1: new full-speed USB device number 88 using dummy_hcd [ 953.414057][T12069] loop0: detected capacity change from 0 to 4096 [ 953.461399][ T5834] em28xx 5-1:0.0: Freeing device [ 953.490774][T12069] EXT4-fs: Ignoring removed bh option [ 953.497688][T12069] EXT4-fs: Ignoring removed mblk_io_submit option [ 953.549311][T12069] EXT4-fs: Conflicting test_dummy_encryption options [ 953.549451][ T24] usb 8-1: device descriptor read/64, error -71 [ 954.715680][ T24] usb 8-1: new full-speed USB device number 89 using dummy_hcd [ 955.166928][ T24] usb 8-1: device descriptor read/64, error -71 [ 955.337433][ T24] usb usb8-port1: attempt power cycle [ 955.676921][ T24] usb 8-1: new full-speed USB device number 90 using dummy_hcd [ 955.757385][ T24] usb 8-1: device descriptor read/8, error -71 [ 956.139478][T12090] netlink: 'syz.9.1578': attribute type 1 has an invalid length. [ 956.565532][T12097] loop0: detected capacity change from 0 to 512 [ 956.724115][T12097] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 956.748240][T12097] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 957.006877][ T24] usb 8-1: new high-speed USB device number 91 using dummy_hcd [ 957.078452][ T24] usb 8-1: Using ep0 maxpacket: 32 [ 957.146828][ T24] usb 8-1: config 76 has an invalid descriptor of length 0, skipping remainder of the config [ 957.286020][ T24] usb 8-1: New USB device found, idVendor=069a, idProduct=0001, bcdDevice=51.c5 [ 957.296565][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 957.304823][ T24] usb 8-1: Product: syz [ 957.310004][ T24] usb 8-1: Manufacturer: syz [ 957.314840][ T24] usb 8-1: SerialNumber: syz [ 957.352836][T11571] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 957.553571][ T24] pwc: Askey VC010 type 1 USB webcam detected. [ 957.702211][ T24] pwc: send_video_command error -71 [ 957.708708][ T24] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 957.717324][ T24] Philips webcam 8-1:76.0: probe with driver Philips webcam failed with error -71 [ 957.933394][ T24] usb 8-1: USB disconnect, device number 91 [ 958.060680][T12113] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1584'. [ 958.328916][T12099] loop5: detected capacity change from 0 to 4096 [ 958.453183][T12099] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 958.540479][T12099] ntfs3(loop5): It is recommended to use chkdsk. [ 958.986916][T12119] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1586'. [ 959.169935][T12126] loop7: detected capacity change from 0 to 256 [ 959.185691][T12126] exfat: Deprecated parameter 'utf8' [ 959.191669][T12126] exfat: Unknown parameter 'i' [ 959.271190][ T30] audit: type=1326 audit(2000000693.947:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12118 comm="syz.4.1586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2994d9aeb9 code=0x7ffc0000 [ 960.090250][T12099] ntfs3(loop5): Failed to read $UpCase (-4). [ 960.242685][T12123] loop0: detected capacity change from 0 to 32768 [ 960.264431][ T30] audit: type=1326 audit(2000000693.997:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12118 comm="syz.4.1586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2994d9aeb9 code=0x7ffc0000 [ 960.498627][ T30] audit: type=1326 audit(2000000695.137:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12118 comm="syz.4.1586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f2994d9aeb9 code=0x7ffc0000 [ 960.607130][T12123] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 961.112180][ T30] audit: type=1326 audit(2000000695.787:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12118 comm="syz.4.1586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2994d9aeb9 code=0x7ffc0000 [ 961.300177][ T30] audit: type=1326 audit(2000000695.877:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12118 comm="syz.4.1586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2994d9aeb9 code=0x7ffc0000 [ 961.802396][T12123] XFS (loop0): Ending clean mount [ 961.894165][T12123] XFS (loop0): Metadata CRC error detected at xfs_rmapbt_read_verify+0xaf/0x2c0, xfs_rmapbt block 0x14 [ 961.906244][T12123] XFS (loop0): Unmount and run xfs_repair [ 961.912426][T12123] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 961.920204][T12123] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 961.929599][T12123] 00000010: 00 a7 50 00 00 00 00 14 00 00 00 01 00 00 00 80 ..P............. [ 961.939036][T12123] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 961.957045][T12123] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01 ....[.;......... [ 961.966167][T12123] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 961.975490][T12123] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 961.984731][T12123] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 961.994019][T12123] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 962.003259][T12123] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x33d/0x5f0" at daddr 0x14 len 4 error 74 [ 962.084409][T12123] XFS (loop0): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x740/0xe60 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 962.102253][T12123] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 962.537359][T12149] netlink: 'syz.4.1592': attribute type 2 has an invalid length. [ 962.669388][T11571] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 962.748063][T12149] netlink: 'syz.4.1592': attribute type 2 has an invalid length. [ 963.446984][ T24] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 963.908706][ T24] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 963.918813][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 963.927306][ T24] usb 6-1: Product: syz [ 963.931700][ T24] usb 6-1: Manufacturer: syz [ 963.936690][ T24] usb 6-1: SerialNumber: syz [ 964.392791][T12172] FAULT_INJECTION: forcing a failure. [ 964.392791][T12172] name failslab, interval 1, probability 0, space 0, times 0 [ 964.410873][T12172] CPU: 0 UID: 0 PID: 12172 Comm: syz.0.1598 Not tainted syzkaller #0 PREEMPT(voluntary) [ 964.411038][T12172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 964.411131][T12172] Call Trace: [ 964.411191][T12172] [ 964.411248][T12172] __dump_stack+0x26/0x30 [ 964.411435][T12172] dump_stack_lvl+0x14c/0x1c0 [ 964.411629][T12172] dump_stack+0x1e/0x25 [ 964.411794][T12172] should_fail_ex+0x7e2/0x8c0 [ 964.411998][T12172] should_failslab+0x158/0x200 [ 964.412162][T12172] kmem_cache_alloc_node_noprof+0x152/0x1780 [ 964.412331][T12172] ? stack_depot_save_flags+0x35/0x790 [ 964.412500][T12172] ? __alloc_skb+0x799/0x1030 [ 964.412704][T12172] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 964.412921][T12172] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 964.413138][T12172] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 964.413362][T12172] __alloc_skb+0x799/0x1030 [ 964.413557][T12172] ? __alloc_skb+0x3b2/0x1030 [ 964.413749][T12172] ? netlink_autobind+0x3b0/0x430 [ 964.413912][T12172] netlink_alloc_large_skb+0xa5/0x290 [ 964.414126][T12172] netlink_sendmsg+0xae9/0x1250 [ 964.414313][T12172] ? __pfx_netlink_sendmsg+0x10/0x10 [ 964.414463][T12172] ? __pfx_netlink_sendmsg+0x10/0x10 [ 964.414620][T12172] ____sys_sendmsg+0xfe7/0x1080 [ 964.414815][T12172] ___sys_sendmsg+0x271/0x3b0 [ 964.414957][T12172] ? kmsan_get_metadata+0xf1/0x160 [ 964.415204][T12172] ? __rcu_read_unlock+0x6c/0xd0 [ 964.415373][T12172] ? __fget_files+0x3b4/0x4a0 [ 964.415578][T12172] ? __fget_files+0x3b9/0x4a0 [ 964.415810][T12172] ? kmsan_get_metadata+0xf1/0x160 [ 964.416024][T12172] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 964.416257][T12172] __x64_sys_sendmsg+0x211/0x3e0 [ 964.416424][T12172] ? kmsan_get_metadata+0xf1/0x160 [ 964.416659][T12172] x64_sys_call+0x1c60/0x3e70 [ 964.416852][T12172] do_syscall_64+0xc9/0xf80 [ 964.417031][T12172] ? clear_bhb_loop+0x40/0x90 [ 964.417205][T12172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 964.417397][T12172] RIP: 0033:0x7f83bb59aeb9 [ 964.417512][T12172] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 964.417653][T12172] RSP: 002b:00007f83bc50a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 964.417797][T12172] RAX: ffffffffffffffda RBX: 00007f83bb815fa0 RCX: 00007f83bb59aeb9 [ 964.417911][T12172] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 964.418005][T12172] RBP: 00007f83bc50a090 R08: 0000000000000000 R09: 0000000000000000 [ 964.418101][T12172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 964.418194][T12172] R13: 00007f83bb816038 R14: 00007f83bb815fa0 R15: 00007fffde9e7768 [ 964.418340][T12172] [ 964.927949][ T24] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 964.941000][ T24] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 965.056668][ T5834] usb 8-1: new high-speed USB device number 92 using dummy_hcd [ 965.279806][ T5834] usb 8-1: Using ep0 maxpacket: 32 [ 965.348503][ T5834] usb 8-1: config 76 has an invalid descriptor of length 0, skipping remainder of the config [ 965.459403][ T5834] usb 8-1: New USB device found, idVendor=069a, idProduct=0001, bcdDevice=51.c5 [ 965.469123][ T5834] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 965.478996][ T5834] usb 8-1: Product: syz [ 965.483392][ T5834] usb 8-1: Manufacturer: syz [ 965.488625][ T5834] usb 8-1: SerialNumber: syz [ 965.849560][ T5834] pwc: Askey VC010 type 1 USB webcam detected. [ 965.922126][ T31] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 965.995120][ T5834] pwc: send_video_command error -71 [ 966.000823][ T5834] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 966.009077][ T5834] Philips webcam 8-1:76.0: probe with driver Philips webcam failed with error -71 [ 966.194637][ T31] usb 5-1: Using ep0 maxpacket: 16 [ 966.288581][ T5834] usb 8-1: USB disconnect, device number 92 [ 966.310216][ T30] audit: type=1326 audit(2000000700.977:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12173 comm="syz.9.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f310f19aeb9 code=0x7ffc0000 [ 966.311753][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 12336, setting to 64 [ 966.513296][ T30] audit: type=1326 audit(2000000701.077:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12173 comm="syz.9.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f310f19aeb9 code=0x7ffc0000 [ 966.537625][ T30] audit: type=1326 audit(2000000701.137:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12173 comm="syz.9.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f310f19aeb9 code=0x7ffc0000 [ 966.561551][ T30] audit: type=1326 audit(2000000701.137:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12173 comm="syz.9.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f310f19aeb9 code=0x7ffc0000 [ 966.680163][ T24] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): timeout on completion of LiteReset [ 966.690743][ T24] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 966.717551][ T31] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 966.727063][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 966.735319][ T31] usb 5-1: Product: syz [ 966.739943][ T31] usb 5-1: Manufacturer: syz [ 966.744819][ T31] usb 5-1: SerialNumber: syz [ 966.907525][ T24] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 967.064408][ T31] usb 5-1: config 0 descriptor?? [ 967.102701][ T30] audit: type=1326 audit(2000000701.207:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12173 comm="syz.9.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f310f19aeb9 code=0x7ffc0000 [ 967.126100][ T30] audit: type=1326 audit(2000000701.277:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12173 comm="syz.9.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f310f19aeb9 code=0x7ffc0000 [ 967.137257][ T24] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -110 [ 967.150525][ T30] audit: type=1326 audit(2000000701.277:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12173 comm="syz.9.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f310f19aeb9 code=0x7ffc0000 [ 967.184027][ T30] audit: type=1326 audit(2000000701.277:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12173 comm="syz.9.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f310f19aeb9 code=0x7ffc0000 [ 967.208193][ T30] audit: type=1326 audit(2000000701.287:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12173 comm="syz.9.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f310f19aeb9 code=0x7ffc0000 [ 967.231101][ T30] audit: type=1326 audit(2000000701.287:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12173 comm="syz.9.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f310f19aeb9 code=0x7ffc0000 [ 967.344265][ T31] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 967.354804][ T31] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 967.482285][ T24] usb 6-1: USB disconnect, device number 63 [ 967.959222][ T31] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 968.430617][ T31] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 968.442283][ T31] em28xx 5-1:0.0: board has no eeprom [ 968.866923][ T31] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 968.875208][ T31] em28xx 5-1:0.0: dvb set to bulk mode. [ 968.881680][ T24] em28xx 5-1:0.0: Binding DVB extension [ 970.048967][T12182] em28xx 5-1:0.0: reading from i2c device at 0xfe00 failed (error=-5) [ 970.071303][ T31] usb 5-1: USB disconnect, device number 6 [ 970.135402][ T31] em28xx 5-1:0.0: Disconnecting em28xx [ 970.549829][ T24] em28xx 5-1:0.0: Registering input extension [ 970.617107][ T31] em28xx 5-1:0.0: Closing input extension [ 970.790278][ T31] em28xx 5-1:0.0: Freeing device [ 970.968358][T12219] loop0: detected capacity change from 0 to 512 [ 971.410854][T12230] FAULT_INJECTION: forcing a failure. [ 971.410854][T12230] name failslab, interval 1, probability 0, space 0, times 0 [ 971.427891][T12230] CPU: 0 UID: 0 PID: 12230 Comm: syz.5.1610 Not tainted syzkaller #0 PREEMPT(voluntary) [ 971.428048][T12230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 971.428128][T12230] Call Trace: [ 971.428189][T12230] [ 971.428244][T12230] __dump_stack+0x26/0x30 [ 971.428410][T12230] dump_stack_lvl+0x14c/0x1c0 [ 971.428591][T12230] dump_stack+0x1e/0x25 [ 971.428738][T12230] should_fail_ex+0x7e2/0x8c0 [ 971.428932][T12230] should_failslab+0x158/0x200 [ 971.429093][T12230] kmem_cache_alloc_node_noprof+0x152/0x1780 [ 971.429252][T12230] ? stack_depot_save_flags+0x35/0x790 [ 971.429413][T12230] ? __alloc_skb+0x799/0x1030 [ 971.429598][T12230] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 971.429797][T12230] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 971.429991][T12230] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 971.430205][T12230] __alloc_skb+0x799/0x1030 [ 971.430406][T12230] ? __alloc_skb+0x3b2/0x1030 [ 971.430583][T12230] ? netlink_autobind+0x3b0/0x430 [ 971.430733][T12230] netlink_alloc_large_skb+0xa5/0x290 [ 971.430937][T12230] netlink_sendmsg+0xae9/0x1250 [ 971.431122][T12230] ? __pfx_netlink_sendmsg+0x10/0x10 [ 971.431256][T12230] ? __pfx_netlink_sendmsg+0x10/0x10 [ 971.431398][T12230] ____sys_sendmsg+0xfe7/0x1080 [ 971.431582][T12230] ___sys_sendmsg+0x271/0x3b0 [ 971.431705][T12230] ? kmsan_get_metadata+0xf1/0x160 [ 971.431933][T12230] ? __rcu_read_unlock+0x6c/0xd0 [ 971.432106][T12230] ? __fget_files+0x3b4/0x4a0 [ 971.432294][T12230] ? __fget_files+0x3b9/0x4a0 [ 971.432485][T12230] ? kmsan_get_metadata+0xf1/0x160 [ 971.432696][T12230] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 971.432911][T12230] __x64_sys_sendmsg+0x211/0x3e0 [ 971.433082][T12230] ? kmsan_get_metadata+0xf1/0x160 [ 971.433299][T12230] x64_sys_call+0x1c60/0x3e70 [ 971.433477][T12230] do_syscall_64+0xc9/0xf80 [ 971.433648][T12230] ? clear_bhb_loop+0x40/0x90 [ 971.433813][T12230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 971.433967][T12230] RIP: 0033:0x7f027c99aeb9 [ 971.434080][T12230] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 971.434204][T12230] RSP: 002b:00007f027d900028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 971.434343][T12230] RAX: ffffffffffffffda RBX: 00007f027cc15fa0 RCX: 00007f027c99aeb9 [ 971.434445][T12230] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 971.434539][T12230] RBP: 00007f027d900090 R08: 0000000000000000 R09: 0000000000000000 [ 971.434626][T12230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 971.434714][T12230] R13: 00007f027cc16038 R14: 00007f027cc15fa0 R15: 00007fffc8da8ea8 [ 971.434853][T12230] [ 972.168714][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 972.175379][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 972.876785][ T5834] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 972.980468][T12243] 9pnet_fd: Insufficient options for proto=fd [ 973.127469][ T5834] usb 5-1: Using ep0 maxpacket: 32 [ 973.175702][ T5834] usb 5-1: config 76 has an invalid descriptor of length 0, skipping remainder of the config [ 973.251216][ T5834] usb 5-1: New USB device found, idVendor=069a, idProduct=0001, bcdDevice=51.c5 [ 973.260979][ T5834] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 973.269544][ T5834] usb 5-1: Product: syz [ 973.273937][ T5834] usb 5-1: Manufacturer: syz [ 973.278961][ T5834] usb 5-1: SerialNumber: syz [ 973.435276][ T5834] pwc: Askey VC010 type 1 USB webcam detected. [ 973.462207][T12251] loop7: detected capacity change from 0 to 128 [ 973.525816][T12251] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 973.604933][ T5834] pwc: send_video_command error -71 [ 973.610465][ T5834] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 973.625138][ T5834] Philips webcam 5-1:76.0: probe with driver Philips webcam failed with error -71 [ 973.787577][ T5834] usb 5-1: USB disconnect, device number 7 [ 973.908282][T12254] UDF-fs: error (device loop7): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 974.053804][T12251] UDF-fs: error (device loop7): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 974.436899][ T31] usb 8-1: new high-speed USB device number 93 using dummy_hcd [ 974.634167][ T31] usb 8-1: Using ep0 maxpacket: 8 [ 974.703789][ T31] usb 8-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config [ 974.731727][ T31] usb 8-1: too many endpoints for config 0 interface 0 altsetting 2: 97, using maximum allowed: 30 [ 975.670939][T12260] loop4: detected capacity change from 0 to 32768 [ 975.682801][ T31] usb 8-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 97 [ 975.696534][ T31] usb 8-1: config 0 interface 0 has no altsetting 0 [ 975.714800][ T31] usb 8-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 975.724391][ T31] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 975.732920][ T31] usb 8-1: Product: syz [ 975.737433][ T31] usb 8-1: Manufacturer: syz [ 975.742241][ T31] usb 8-1: SerialNumber: syz [ 975.772747][ T31] usb 8-1: config 0 descriptor?? [ 975.840281][T12260] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 976.390091][ T5834] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 976.646741][ T5834] usb 6-1: Using ep0 maxpacket: 16 [ 976.786650][ T5834] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 12336, setting to 64 [ 976.934986][T12260] XFS (loop4): Ending clean mount [ 977.028305][ T5834] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 977.037924][ T5834] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 977.046161][ T5834] usb 6-1: Product: syz [ 977.051424][ T5834] usb 6-1: Manufacturer: syz [ 977.056252][ T5834] usb 6-1: SerialNumber: syz [ 977.144208][ T5834] usb 6-1: config 0 descriptor?? [ 977.211719][T12256] UDF-fs: error (device loop7): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 977.320032][ T5834] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 977.330380][ T5834] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 977.757543][T10966] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 977.933350][ T5834] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 978.536840][ T5834] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 978.545252][ T5834] em28xx 6-1:0.0: board has no eeprom [ 979.100437][ T5834] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 979.108845][ T5834] em28xx 6-1:0.0: dvb set to bulk mode. [ 979.127506][ T952] em28xx 6-1:0.0: Binding DVB extension [ 979.362649][T12288] loop0: detected capacity change from 0 to 512 [ 979.998432][T12288] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 980.127202][T12288] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 980.317739][T12287] em28xx 6-1:0.0: reading from i2c device at 0xfe00 failed (error=-5) [ 980.471644][ T5834] usb 6-1: USB disconnect, device number 64 [ 980.576018][ T5834] em28xx 6-1:0.0: Disconnecting em28xx [ 980.582769][ T31] snd_usb_toneport 8-1:0.0: Line 6 TonePort UX2 found [ 980.694574][ T31] snd_usb_toneport 8-1:0.0: set_interface failed [ 980.766781][ T31] snd_usb_toneport 8-1:0.0: Line 6 TonePort UX2 now disconnected [ 980.775657][ T31] snd_usb_toneport 8-1:0.0: probe with driver snd_usb_toneport failed with error -71 [ 980.957578][ T31] usb 8-1: USB disconnect, device number 93 [ 981.047163][ T952] em28xx 6-1:0.0: Registering input extension [ 981.077129][ T5834] em28xx 6-1:0.0: Closing input extension [ 981.203383][ T5834] em28xx 6-1:0.0: Freeing device [ 981.270870][T12301] loop4: detected capacity change from 0 to 512 [ 981.331609][T12301] EXT4-fs warning (device loop4): ext4_init_metadata_csum:4637: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 981.349731][T12301] EXT4-fs (loop4): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 981.404517][T12301] loop4: detected capacity change from 0 to 512 [ 981.443679][T12301] EXT4-fs warning (device loop4): ext4_init_metadata_csum:4637: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 981.457579][T12301] EXT4-fs (loop4): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 981.579815][T11571] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 982.366691][ T31] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 982.547024][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 982.554968][ T5834] libceph: connect (1)[c::]:6789 error -101 [ 982.569686][ T31] usb 5-1: config 76 has an invalid descriptor of length 0, skipping remainder of the config [ 982.596851][ T5834] libceph: mon0 (1)[c::]:6789 connect error [ 982.608063][ T31] usb 5-1: New USB device found, idVendor=069a, idProduct=0001, bcdDevice=51.c5 [ 982.617694][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 982.628669][ T31] usb 5-1: Product: syz [ 982.633055][ T31] usb 5-1: Manufacturer: syz [ 982.638864][ T31] usb 5-1: SerialNumber: syz [ 982.712685][ T5834] libceph: connect (1)[c::]:6789 error -101 [ 982.764152][ T5834] libceph: mon0 (1)[c::]:6789 connect error [ 982.793534][ T31] pwc: Askey VC010 type 1 USB webcam detected. [ 982.839389][T12314] ceph: No mds server is up or the cluster is laggy [ 982.941857][ T31] pwc: send_video_command error -71 [ 982.947566][ T31] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 982.955677][ T31] Philips webcam 5-1:76.0: probe with driver Philips webcam failed with error -71 [ 983.160536][ T31] usb 5-1: USB disconnect, device number 8 [ 984.073400][T12319] loop0: detected capacity change from 0 to 32768 [ 984.228569][T12319] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 985.104286][T12319] XFS (loop0): Ending clean mount [ 985.234153][T12319] XFS (loop0): Metadata CRC error detected at xfs_rmapbt_read_verify+0xaf/0x2c0, xfs_rmapbt block 0x14 [ 985.245935][T12319] XFS (loop0): Unmount and run xfs_repair [ 985.252051][T12319] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 985.259944][T12319] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 985.269237][T12319] 00000010: 00 a7 50 00 00 00 00 14 00 00 00 01 00 00 00 80 ..P............. [ 985.278474][T12319] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 985.292815][T12319] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01 ....[.;......... [ 985.302073][T12319] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 985.311288][T12319] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 985.320732][T12319] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 985.330031][T12319] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 985.339207][T12319] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x33d/0x5f0" at daddr 0x14 len 4 error 74 [ 985.364724][T12319] XFS (loop0): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x740/0xe60 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 985.380760][T12319] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 985.718243][T11571] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 985.916140][T12336] loop4: detected capacity change from 0 to 1024 [ 986.375300][T12335] loop5: detected capacity change from 0 to 32768 [ 986.395292][T12335] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1635 (12335) [ 986.427660][T12335] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 986.440777][T12335] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm [ 986.457972][T12336] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 986.571682][T12336] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 986.866176][ T6539] BTRFS warning (device loop5): checksum verify failed on logical 5332992 mirror 1 wanted 0x45c4daa94c2fee9c24887d4bee8f983cd8ca9d8901c4a5aa51fab9bc8d8bf5d6 found 0xb2758922e8d827c8bc6ab859562b2c8f647d73fe0cdaf8bcd72871bad21ec5e5 level 0 [ 986.890596][T12335] BTRFS warning (device loop5): couldn't read tree root [ 986.910967][T12336] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1637: bg 0: block 112: padding at end of block bitmap is not set [ 987.005569][ T5834] libceph: connect (1)[c::]:6789 error -101 [ 987.047857][ T5834] libceph: mon0 (1)[c::]:6789 connect error [ 987.068908][T12335] BTRFS error (device loop5): open_ctree failed: -5 [ 987.162904][ T5834] libceph: connect (1)[c::]:6789 error -101 [ 987.219560][ T5834] libceph: mon0 (1)[c::]:6789 connect error [ 987.241646][T12351] loop7: detected capacity change from 0 to 512 [ 987.251205][T12347] ceph: No mds server is up or the cluster is laggy [ 987.362425][T12351] EXT4-fs (loop7): external journal device major/minor numbers have changed [ 987.377904][T12374] loop0: detected capacity change from 0 to 128 [ 987.399152][T12351] EXT4-fs (loop7): failed to open journal device unknown-block(8,1) -16 [ 987.486486][ T5834] libceph: connect (1)[c::]:6789 error -101 [ 987.492873][ T5834] libceph: mon0 (1)[c::]:6789 connect error [ 988.691652][T10966] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 991.256994][ T31] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 991.593492][ T31] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 991.603605][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 991.612087][ T31] usb 6-1: Product: syz [ 991.616596][ T31] usb 6-1: Manufacturer: syz [ 991.621428][ T31] usb 6-1: SerialNumber: syz [ 993.133544][ T31] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 993.146133][ T31] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 993.256831][ T24] usb 8-1: new high-speed USB device number 94 using dummy_hcd [ 993.487372][ T24] usb 8-1: Using ep0 maxpacket: 16 [ 993.533401][ T24] usb 8-1: config 0 has an invalid interface number: 174 but max is 0 [ 993.542155][ T24] usb 8-1: config 0 has no interface number 0 [ 993.618943][ T24] usb 8-1: config 0 interface 174 has no altsetting 0 [ 993.688615][ T24] usb 8-1: New USB device found, idVendor=10cf, idProduct=8063, bcdDevice=b3.5a [ 993.698240][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 993.706810][ T24] usb 8-1: Product: syz [ 993.711347][ T24] usb 8-1: Manufacturer: syz [ 993.716418][ T24] usb 8-1: SerialNumber: syz [ 993.941891][ T24] usb 8-1: config 0 descriptor?? [ 994.659245][ T24] vmk80xx 8-1:0.174: driver 'vmk80xx' failed to auto-configure device. [ 994.891603][ T24] usb 8-1: USB disconnect, device number 94 [ 994.930602][T12418] loop4: detected capacity change from 0 to 32768 [ 994.985352][T12418] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1652 (12418) [ 994.992665][ T31] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): timeout on completion of LiteReset [ 995.009192][ T31] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 995.103498][T12418] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 995.114357][T12418] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm [ 995.197461][ T31] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 995.251359][ T31] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -110 [ 995.394602][ T59] BTRFS warning (device loop4): checksum verify failed on logical 5332992 mirror 1 wanted 0x45c4daa94c2fee9c24887d4bee8f983cd8ca9d8901c4a5aa51fab9bc8d8bf5d6 found 0xb2758922e8d827c8bc6ab859562b2c8f647d73fe0cdaf8bcd72871bad21ec5e5 level 0 [ 995.418518][T12418] BTRFS warning (device loop4): couldn't read tree root [ 995.576120][T12418] BTRFS error (device loop4): open_ctree failed: -5 [ 995.710176][ T31] libceph: connect (1)[c::]:6789 error -101 [ 995.797359][ T31] libceph: mon0 (1)[c::]:6789 connect error [ 995.852026][ T24] libceph: connect (1)[c::]:6789 error -101 [ 995.889175][ T31] usb 6-1: USB disconnect, device number 65 [ 995.899367][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 996.104596][T12426] ceph: No mds server is up or the cluster is laggy [ 996.218028][ T24] libceph: connect (1)[c::]:6789 error -101 [ 996.262417][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 998.306092][ T5834] libceph: connect (1)[c::]:6789 error -101 [ 998.312906][ T5834] libceph: mon0 (1)[c::]:6789 connect error [ 998.323745][ T5834] libceph: connect (1)[c::]:6789 error -101 [ 998.331148][ T5834] libceph: mon0 (1)[c::]:6789 connect error [ 998.588112][T12467] ceph: No mds server is up or the cluster is laggy [ 998.607177][ T5834] libceph: connect (1)[c::]:6789 error -101 [ 998.613581][ T5834] libceph: mon0 (1)[c::]:6789 connect error [ 998.768845][ T952] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 999.001187][ T952] usb 5-1: Using ep0 maxpacket: 16 [ 999.075222][T12477] loop7: detected capacity change from 0 to 1024 [ 999.127108][ T952] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 999.136808][ T952] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 999.145058][ T952] usb 5-1: Product: syz [ 999.149636][ T952] usb 5-1: Manufacturer: syz [ 999.154479][ T952] usb 5-1: SerialNumber: syz [ 999.236872][ T5834] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 999.307674][ T952] r8152-cfgselector 5-1: Unknown version 0x0000 [ 999.314347][ T952] r8152-cfgselector 5-1: config 0 descriptor?? [ 999.406856][T12477] __quota_error: 3 callbacks suppressed [ 999.406948][T12477] Quota error (device loop7): do_check_range: Getting block 64 out of range 1-5 [ 999.426003][T12477] Quota error (device loop7): qtree_read_dquot: Can't read quota structure for id 0 [ 999.442297][T12477] EXT4-fs error (device loop7): ext4_acquire_dquot:6986: comm syz.7.1664: Failed to acquire dquot type 0 [ 999.544644][ T5834] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 999.576902][ T5834] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 999.751706][ T5834] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 999.761574][ T5834] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 999.770053][ T5834] usb 6-1: Manufacturer: syz [ 999.838735][T12477] EXT4-fs error (device loop7): mb_free_blocks:2037: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 999.861959][ T5834] usb 6-1: config 0 descriptor?? [ 999.987624][T12477] EXT4-fs (loop7): 1 truncate cleaned up [ 999.995983][T12477] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1000.219607][T12477] Quota error (device loop7): do_check_range: Getting block 64 out of range 1-5 [ 1000.229931][T12477] Quota error (device loop7): qtree_read_dquot: Can't read quota structure for id 0 [ 1000.242886][T12477] EXT4-fs error (device loop7): ext4_acquire_dquot:6986: comm syz.7.1664: Failed to acquire dquot type 0 [ 1000.355232][ T952] r8152-cfgselector 5-1: USB disconnect, device number 9 [ 1000.695447][ T5834] rc_core: IR keymap rc-hauppauge not found [ 1000.701839][ T5834] Registered IR keymap rc-empty [ 1000.791274][ T5834] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1000.810130][T12497] loop5: detected capacity change from 0 to 64 [ 1000.880777][ T5834] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input36 [ 1001.143954][ C0] igorplugusb 6-1:0.0: Error: urb status = -32 [ 1001.805773][T12499] loop0: detected capacity change from 0 to 32768 [ 1001.852022][T12499] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1666 (12499) [ 1001.891238][T12499] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1001.903271][T12499] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 1002.243081][ T7466] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1002.252823][ T6539] BTRFS warning (device loop0): checksum verify failed on logical 5332992 mirror 1 wanted 0x45c4daa94c2fee9c24887d4bee8f983cd8ca9d8901c4a5aa51fab9bc8d8bf5d6 found 0xb2758922e8d827c8bc6ab859562b2c8f647d73fe0cdaf8bcd72871bad21ec5e5 level 0 [ 1002.278243][T12499] BTRFS warning (device loop0): couldn't read tree root [ 1002.480237][T12499] BTRFS error (device loop0): open_ctree failed: -5 [ 1003.912069][ T31] usb 6-1: USB disconnect, device number 66 [ 1004.842690][ T952] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1005.106831][ T952] usb 5-1: Using ep0 maxpacket: 32 [ 1005.197900][ T952] usb 5-1: config 0 has an invalid interface number: 48 but max is 0 [ 1005.206762][ T952] usb 5-1: config 0 has no interface number 0 [ 1005.232563][ T952] usb 5-1: config 0 interface 48 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1005.244125][ T952] usb 5-1: config 0 interface 48 has no altsetting 0 [ 1005.302109][ T952] usb 5-1: New USB device found, idVendor=1ae7, idProduct=0525, bcdDevice=74.d5 [ 1005.312123][ T952] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1005.320787][ T952] usb 5-1: Product: syz [ 1005.325196][ T952] usb 5-1: Manufacturer: syz [ 1005.330207][ T952] usb 5-1: SerialNumber: syz [ 1005.480151][ T952] usb 5-1: config 0 descriptor?? [ 1005.590358][ T952] HFC-S_USB 5-1:0.48: probe with driver HFC-S_USB failed with error -5 [ 1005.751899][ T952] usb 5-1: USB disconnect, device number 10 [ 1007.064127][T12548] loop5: detected capacity change from 0 to 512 [ 1007.248701][T12557] loop0: detected capacity change from 0 to 256 [ 1007.288435][T12548] ext4: Bad value for 'min_batch_time' [ 1007.459020][T12553] FAULT_INJECTION: forcing a failure. [ 1007.459020][T12553] name failslab, interval 1, probability 0, space 0, times 0 [ 1007.472510][T12553] CPU: 1 UID: 0 PID: 12553 Comm: syz.0.1677 Not tainted syzkaller #0 PREEMPT(voluntary) [ 1007.472814][T12553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1007.472902][T12553] Call Trace: [ 1007.472958][T12553] [ 1007.473008][T12553] __dump_stack+0x26/0x30 [ 1007.473182][T12553] dump_stack_lvl+0x14c/0x1c0 [ 1007.473376][T12553] dump_stack+0x1e/0x25 [ 1007.473541][T12553] should_fail_ex+0x7e2/0x8c0 [ 1007.473737][T12553] should_failslab+0x158/0x200 [ 1007.473903][T12553] __kmalloc_noprof+0x1e4/0x1bf0 [ 1007.474063][T12553] ? dynamic_dname+0x27d/0x2c0 [ 1007.474211][T12553] ? tomoyo_encode+0x603/0x9f0 [ 1007.474389][T12553] ? kmsan_get_metadata+0xf1/0x160 [ 1007.474607][T12553] ? kmsan_get_metadata+0xf1/0x160 [ 1007.474840][T12553] tomoyo_encode+0x603/0x9f0 [ 1007.475059][T12553] tomoyo_realpath_from_path+0x92e/0x9f0 [ 1007.475255][T12553] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1007.475488][T12553] tomoyo_path_number_perm+0x1d0/0x7d0 [ 1007.475685][T12553] ? kmsan_get_metadata+0xf1/0x160 [ 1007.475900][T12553] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1007.476157][T12553] tomoyo_file_ioctl+0x3d/0x50 [ 1007.476349][T12553] security_file_ioctl+0x139/0x570 [ 1007.476572][T12553] __se_sys_ioctl+0xbb/0x400 [ 1007.476758][T12553] __x64_sys_ioctl+0x97/0xe0 [ 1007.476944][T12553] x64_sys_call+0x18a7/0x3e70 [ 1007.477137][T12553] do_syscall_64+0xc9/0xf80 [ 1007.477315][T12553] ? clear_bhb_loop+0x40/0x90 [ 1007.477481][T12553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1007.477643][T12553] RIP: 0033:0x7f83bb59aeb9 [ 1007.477759][T12553] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1007.477896][T12553] RSP: 002b:00007f83bc50a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1007.478041][T12553] RAX: ffffffffffffffda RBX: 00007f83bb815fa0 RCX: 00007f83bb59aeb9 [ 1007.478154][T12553] RDX: 00002000000007c0 RSI: 00000000c208ae62 RDI: 0000000000000004 [ 1007.478255][T12553] RBP: 00007f83bc50a090 R08: 0000000000000000 R09: 0000000000000000 [ 1007.478354][T12553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1007.478447][T12553] R13: 00007f83bb816038 R14: 00007f83bb815fa0 R15: 00007fffde9e7768 [ 1007.478595][T12553] [ 1007.705757][T12553] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1007.764486][T12555] loop4: detected capacity change from 0 to 1024 [ 1008.192864][T12555] Quota error (device loop4): do_check_range: Getting block 64 out of range 1-5 [ 1008.202540][T12555] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 1008.212710][T12555] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.1679: Failed to acquire dquot type 0 [ 1008.393717][T12555] EXT4-fs error (device loop4): mb_free_blocks:2037: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 1008.554922][T12555] EXT4-fs (loop4): 1 truncate cleaned up [ 1008.628774][T12555] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1008.807553][T12555] Quota error (device loop4): do_check_range: Getting block 64 out of range 1-5 [ 1008.817482][T12555] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 1008.827368][T12555] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.1679: Failed to acquire dquot type 0 [ 1009.839236][T10966] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1010.197010][ T9607] Bluetooth: hci4: command 0x0406 tx timeout [ 1010.279308][T12578] program syz.0.1682 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1010.414610][ T952] usb 8-1: new high-speed USB device number 95 using dummy_hcd [ 1010.646671][ T952] usb 8-1: Using ep0 maxpacket: 16 [ 1010.729259][ T952] usb 8-1: config 1 has an invalid interface number: 209 but max is 0 [ 1010.738256][ T952] usb 8-1: config 1 has no interface number 0 [ 1010.766564][ T952] usb 8-1: config 1 interface 209 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1010.776906][ T952] usb 8-1: config 1 interface 209 altsetting 2 bulk endpoint 0x81 has invalid maxpacket 64 [ 1010.792068][ T952] usb 8-1: config 1 interface 209 has no altsetting 0 [ 1010.946747][ T952] usb 8-1: New USB device found, idVendor=8086, idProduct=07d3, bcdDevice=7e.e9 [ 1010.956252][ T952] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1010.964747][ T952] usb 8-1: Product: syz [ 1010.969338][ T952] usb 8-1: Manufacturer: syz [ 1010.974180][ T952] usb 8-1: SerialNumber: syz [ 1011.125924][T12575] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1011.159718][T12575] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1011.654653][T12575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1011.728581][T12575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1011.792822][T12575] netlink: 'syz.7.1683': attribute type 1 has an invalid length. [ 1011.932327][ T952] cdc_subset 8-1:1.209: probe with driver cdc_subset failed with error -71 [ 1012.091403][ T952] usb 8-1: USB disconnect, device number 95 [ 1012.653001][T12596] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1687'. [ 1013.251407][T12597] loop4: detected capacity change from 0 to 32768 [ 1013.396885][T12597] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1014.185673][T12597] XFS (loop4): Ending clean mount [ 1014.226593][ T952] usb 8-1: new high-speed USB device number 96 using dummy_hcd [ 1014.512035][ T952] usb 8-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 1014.521388][ T952] usb 8-1: config 0 has an invalid interface number: 2 but max is -1 [ 1014.530613][ T952] usb 8-1: config 0 has an invalid interface number: 2 but max is -1 [ 1014.539232][ T952] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1014.549794][ T952] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1014.559050][ T952] usb 8-1: config 0 has no interface number 0 [ 1014.664602][T10966] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1014.756648][ T952] usb 8-1: config 0 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1014.917725][ T952] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1014.927514][ T952] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1014.935846][ T952] usb 8-1: Product: syz [ 1014.940524][ T952] usb 8-1: Manufacturer: syz [ 1014.945382][ T952] usb 8-1: SerialNumber: syz [ 1015.146950][ T952] usb 8-1: config 0 descriptor?? [ 1015.572246][T12624] loop5: detected capacity change from 0 to 128 [ 1015.647910][ T952] usb 8-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 1015.655586][ T952] usb 8-1: MIDIStreaming interface descriptor not found [ 1015.727772][T12624] ufs: ufs_fill_super(): fragment size 3263967611 is not a power of 2 [ 1016.074415][ T952] usb 8-1: USB disconnect, device number 96 [ 1016.541697][ T5979] udevd[5979]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1017.355465][T12633] loop5: detected capacity change from 0 to 4096 [ 1017.519028][T12633] nilfs2: Unknown parameter 'n~aqiy_e_ucC&oC.C!C)ğC%_C-C#?C+ĿC'C/!NNNNNNNppgpE8sD8kE8{sD8gsE8wD8oE8 D` EpDhExKDdDTKGLF\' [ 1018.755035][T12645] loop4: detected capacity change from 0 to 32768 [ 1018.765320][T12645] xfs: Deprecated parameter 'attr2' [ 1018.770985][T12645] XFS: attr2 mount option is deprecated. [ 1018.885888][T12645] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1019.268456][T12645] XFS (loop4): Ending clean mount [ 1019.322844][T12645] XFS (loop4): Quotacheck needed: Please wait. [ 1019.463477][T12645] XFS (loop4): Quotacheck: Done. [ 1019.536594][ T24] usb 8-1: new high-speed USB device number 97 using dummy_hcd [ 1019.554456][ T30] audit: type=1326 audit(2000000754.227:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12644 comm="syz.4.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2994d9aeb9 code=0x7ffc0000 [ 1019.577625][ T30] audit: type=1326 audit(2000000754.227:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12644 comm="syz.4.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2994d9aeb9 code=0x7ffc0000 [ 1019.768764][ T30] audit: type=1326 audit(2000000754.287:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12644 comm="syz.4.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f2994d9aeb9 code=0x7ffc0000 [ 1019.775587][ T24] usb 8-1: Using ep0 maxpacket: 16 [ 1019.791909][ T30] audit: type=1326 audit(2000000754.287:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12644 comm="syz.4.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2994d9aeb9 code=0x7ffc0000 [ 1019.825207][ T30] audit: type=1326 audit(2000000754.287:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12644 comm="syz.4.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2994d9aeb9 code=0x7ffc0000 [ 1019.850697][ T30] audit: type=1326 audit(2000000754.287:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12644 comm="syz.4.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7f2994d9aeb9 code=0x7ffc0000 [ 1019.873586][ T30] audit: type=1326 audit(2000000754.287:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12644 comm="syz.4.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2994d9aeb9 code=0x7ffc0000 [ 1019.897977][ T30] audit: type=1326 audit(2000000754.287:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12644 comm="syz.4.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2994d9aeb9 code=0x7ffc0000 [ 1019.924680][ T30] audit: type=1326 audit(2000000754.287:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12644 comm="syz.4.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f2994d9aeb9 code=0x7ffc0000 [ 1020.122644][ T24] usb 8-1: config 1 has an invalid interface number: 209 but max is 0 [ 1020.131993][ T24] usb 8-1: config 1 has no interface number 0 [ 1020.276813][T12559] Bluetooth: hci3: command 0x0406 tx timeout [ 1020.290433][T10966] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1020.303202][ T24] usb 8-1: config 1 interface 209 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1020.317830][ T24] usb 8-1: config 1 interface 209 altsetting 2 bulk endpoint 0x81 has invalid maxpacket 64 [ 1020.335893][ T24] usb 8-1: config 1 interface 209 has no altsetting 0 [ 1020.362043][ T24] usb 8-1: New USB device found, idVendor=8086, idProduct=07d3, bcdDevice=7e.e9 [ 1020.371757][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1020.381269][ T24] usb 8-1: Product: syz [ 1020.385678][ T24] usb 8-1: Manufacturer: syz [ 1020.390712][ T24] usb 8-1: SerialNumber: syz [ 1020.413386][T12663] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1020.458763][T12663] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1020.979058][T12668] FAULT_INJECTION: forcing a failure. [ 1020.979058][T12668] name failslab, interval 1, probability 0, space 0, times 0 [ 1020.992254][T12668] CPU: 0 UID: 0 PID: 12668 Comm: syz.0.1700 Not tainted syzkaller #0 PREEMPT(voluntary) [ 1020.992421][T12668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1020.992515][T12668] Call Trace: [ 1020.992572][T12668] [ 1020.992632][T12668] __dump_stack+0x26/0x30 [ 1020.992814][T12668] dump_stack_lvl+0x14c/0x1c0 [ 1020.992991][T12668] dump_stack+0x1e/0x25 [ 1020.993154][T12668] should_fail_ex+0x7e2/0x8c0 [ 1020.993358][T12668] should_failslab+0x158/0x200 [ 1020.993522][T12668] kmem_cache_alloc_node_noprof+0x152/0x1780 [ 1020.993693][T12668] ? stack_depot_save_flags+0x35/0x790 [ 1020.993857][T12668] ? __alloc_skb+0x799/0x1030 [ 1020.994050][T12668] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1020.994262][T12668] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1020.994470][T12668] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1020.994704][T12668] __alloc_skb+0x799/0x1030 [ 1020.994912][T12668] ? __alloc_skb+0x3b2/0x1030 [ 1020.995112][T12668] ? netlink_autobind+0x3b0/0x430 [ 1020.995287][T12668] netlink_alloc_large_skb+0xa5/0x290 [ 1020.995513][T12668] netlink_sendmsg+0xae9/0x1250 [ 1020.995696][T12668] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1020.995847][T12668] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1020.996001][T12668] ____sys_sendmsg+0xfe7/0x1080 [ 1020.996192][T12668] ___sys_sendmsg+0x271/0x3b0 [ 1020.996343][T12668] ? kmsan_get_metadata+0xf1/0x160 [ 1020.996576][T12668] ? __rcu_read_unlock+0x6c/0xd0 [ 1020.996744][T12668] ? __fget_files+0x3b4/0x4a0 [ 1020.996951][T12668] ? __fget_files+0x3b9/0x4a0 [ 1020.997161][T12668] ? kmsan_get_metadata+0xf1/0x160 [ 1020.997377][T12668] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1020.997610][T12668] __x64_sys_sendmsg+0x211/0x3e0 [ 1020.997774][T12668] ? kmsan_get_metadata+0xf1/0x160 [ 1020.998006][T12668] x64_sys_call+0x1c60/0x3e70 [ 1020.998202][T12668] do_syscall_64+0xc9/0xf80 [ 1020.998385][T12668] ? clear_bhb_loop+0x40/0x90 [ 1020.998550][T12668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1020.998713][T12668] RIP: 0033:0x7f83bb59aeb9 [ 1020.998827][T12668] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1020.998962][T12668] RSP: 002b:00007f83bc50a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1020.999107][T12668] RAX: ffffffffffffffda RBX: 00007f83bb815fa0 RCX: 00007f83bb59aeb9 [ 1020.999218][T12668] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 1020.999315][T12668] RBP: 00007f83bc50a090 R08: 0000000000000000 R09: 0000000000000000 [ 1020.999418][T12668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1020.999510][T12668] R13: 00007f83bb816038 R14: 00007f83bb815fa0 R15: 00007fffde9e7768 [ 1020.999656][T12668] [ 1021.316871][T12663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1021.488868][T12663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1021.629487][T12663] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1021.696716][T12663] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1021.827274][ T24] cdc_subset 8-1:1.209 usb0: register 'cdc_subset' at usb-dummy_hcd.7-1, Boot Loader OBject, 4e:20:bf:a1:16:ad [ 1021.846758][ T31] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1022.068538][ T952] usb 8-1: USB disconnect, device number 97 [ 1022.096174][ T31] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1022.105663][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1022.114361][ T31] usb 5-1: Product: syz [ 1022.118857][ T31] usb 5-1: Manufacturer: syz [ 1022.123679][ T31] usb 5-1: SerialNumber: syz [ 1022.167345][ T952] cdc_subset 8-1:1.209 usb0: unregister 'cdc_subset' usb-dummy_hcd.7-1, Boot Loader OBject [ 1023.410069][ T31] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1023.422624][ T31] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1024.125620][T12684] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1704'. [ 1024.783629][ T31] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPROTO [ 1024.796076][ T31] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1024.907543][ T31] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1025.028885][ T31] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 1025.150051][ T31] usb 5-1: USB disconnect, device number 11 [ 1026.308561][T12707] loop0: detected capacity change from 0 to 128 [ 1026.450568][T12709] FAULT_INJECTION: forcing a failure. [ 1026.450568][T12709] name failslab, interval 1, probability 0, space 0, times 0 [ 1026.468768][T12709] CPU: 0 UID: 0 PID: 12709 Comm: syz.4.1709 Not tainted syzkaller #0 PREEMPT(voluntary) [ 1026.468931][T12709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1026.469017][T12709] Call Trace: [ 1026.469074][T12709] [ 1026.469130][T12709] __dump_stack+0x26/0x30 [ 1026.469302][T12709] dump_stack_lvl+0x14c/0x1c0 [ 1026.469472][T12709] dump_stack+0x1e/0x25 [ 1026.469638][T12709] should_fail_ex+0x7e2/0x8c0 [ 1026.469829][T12709] should_failslab+0x158/0x200 [ 1026.469973][T12709] __kmalloc_noprof+0x1e4/0x1bf0 [ 1026.470137][T12709] ? tomoyo_encode+0x603/0x9f0 [ 1026.470307][T12709] ? prepend_path+0xfc1/0x1090 [ 1026.470453][T12709] ? kmsan_get_metadata+0xf1/0x160 [ 1026.470662][T12709] ? kmsan_get_metadata+0xf1/0x160 [ 1026.470884][T12709] tomoyo_encode+0x603/0x9f0 [ 1026.471086][T12709] tomoyo_realpath_from_path+0x92e/0x9f0 [ 1026.471306][T12709] tomoyo_path_number_perm+0x1d0/0x7d0 [ 1026.471489][T12709] ? kmsan_get_metadata+0xf1/0x160 [ 1026.471712][T12709] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1026.471970][T12709] tomoyo_file_ioctl+0x3d/0x50 [ 1026.472165][T12709] security_file_ioctl+0x139/0x570 [ 1026.472373][T12709] __se_sys_ioctl+0xbb/0x400 [ 1026.472539][T12709] __x64_sys_ioctl+0x97/0xe0 [ 1026.472710][T12709] x64_sys_call+0x18a7/0x3e70 [ 1026.472909][T12709] do_syscall_64+0xc9/0xf80 [ 1026.473072][T12709] ? clear_bhb_loop+0x40/0x90 [ 1026.473232][T12709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1026.473393][T12709] RIP: 0033:0x7f2994d9aeb9 [ 1026.473498][T12709] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1026.473629][T12709] RSP: 002b:00007f2995c1f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1026.473768][T12709] RAX: ffffffffffffffda RBX: 00007f2995016090 RCX: 00007f2994d9aeb9 [ 1026.473884][T12709] RDX: 00002000000001c0 RSI: 00000000c08c5335 RDI: 0000000000000004 [ 1026.473973][T12709] RBP: 00007f2995c1f090 R08: 0000000000000000 R09: 0000000000000000 [ 1026.474064][T12709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1026.474150][T12709] R13: 00007f2995016128 R14: 00007f2995016090 R15: 00007ffc3ededa08 [ 1026.474300][T12709] [ 1026.474403][T12709] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1029.156649][ T5840] usb 8-1: new high-speed USB device number 98 using dummy_hcd [ 1029.356978][ T5840] usb 8-1: Using ep0 maxpacket: 16 [ 1029.418219][ T5840] usb 8-1: config 1 has an invalid interface number: 209 but max is 0 [ 1029.431224][ T5840] usb 8-1: config 1 has no interface number 0 [ 1029.506766][ T5840] usb 8-1: config 1 interface 209 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1029.517620][ T5840] usb 8-1: config 1 interface 209 altsetting 2 bulk endpoint 0x81 has invalid maxpacket 64 [ 1029.532793][ T5840] usb 8-1: config 1 interface 209 has no altsetting 0 [ 1029.693309][ T5840] usb 8-1: New USB device found, idVendor=8086, idProduct=07d3, bcdDevice=7e.e9 [ 1029.706786][ T5840] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1029.715064][ T5840] usb 8-1: Product: syz [ 1029.720201][ T5840] usb 8-1: Manufacturer: syz [ 1029.725019][ T5840] usb 8-1: SerialNumber: syz [ 1029.844731][T12729] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1029.862173][T12729] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1030.431516][T12737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1030.568678][T12737] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1030.894302][T12736] loop4: detected capacity change from 0 to 32768 [ 1030.911368][T12729] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1030.967124][T12729] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1031.044050][T12736] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1031.146081][ T5840] cdc_subset 8-1:1.209 usb0: register 'cdc_subset' at usb-dummy_hcd.7-1, Boot Loader OBject, d6:61:f1:f6:c1:6e [ 1031.222646][T12748] loop5: detected capacity change from 0 to 256 [ 1031.291169][ T31] usb 8-1: USB disconnect, device number 98 [ 1031.336938][T12748] exFAT-fs (loop5): Invalid boot checksum (boot checksum : 0x1100abd0, checksum : 0x1119abd0) [ 1031.347831][T12748] exFAT-fs (loop5): invalid boot region [ 1031.353567][T12748] exFAT-fs (loop5): failed to recognize exfat type [ 1031.396912][ T31] cdc_subset 8-1:1.209 usb0: unregister 'cdc_subset' usb-dummy_hcd.7-1, Boot Loader OBject [ 1032.506600][T12736] XFS (loop4): Ending clean mount [ 1033.531401][T10966] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1033.590462][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1033.597357][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1035.167496][T12767] sctp: [Deprecated]: syz.9.1723 (pid 12767) Use of int in max_burst socket option. [ 1035.167496][T12767] Use struct sctp_assoc_value instead [ 1040.491389][ T30] audit: type=1326 audit(2000000775.147:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12782 comm="syz.9.1727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f310f19aeb9 code=0x7ffc0000 [ 1040.515285][ T30] audit: type=1326 audit(2000000775.147:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12782 comm="syz.9.1727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f310f19aeb9 code=0x7ffc0000 [ 1040.540957][ T30] audit: type=1326 audit(2000000775.167:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12782 comm="syz.9.1727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7f310f19aeb9 code=0x7ffc0000 [ 1040.668069][T12795] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 1040.766226][T12795] xt_SECMARK: invalid mode: 9 [ 1040.902609][ T30] audit: type=1326 audit(2000000775.167:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12782 comm="syz.9.1727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f310f19aeb9 code=0x7ffc0000 [ 1040.925935][ T30] audit: type=1326 audit(2000000775.167:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12782 comm="syz.9.1727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f310f19aeb9 code=0x7ffc0000 [ 1040.948921][ T30] audit: type=1326 audit(2000000775.167:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12782 comm="syz.9.1727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f310f19aeb9 code=0x7ffc0000 [ 1040.972296][ T30] audit: type=1326 audit(2000000775.167:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12782 comm="syz.9.1727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f310f19aeb9 code=0x7ffc0000 [ 1040.999310][ T30] audit: type=1326 audit(2000000775.197:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12782 comm="syz.9.1727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f310f19aeb9 code=0x7ffc0000 [ 1041.023714][ T30] audit: type=1326 audit(2000000775.217:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12782 comm="syz.9.1727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f310f19aeb9 code=0x7ffc0000 [ 1041.046599][ T30] audit: type=1326 audit(2000000775.217:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12782 comm="syz.9.1727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f310f19aeb9 code=0x7ffc0000 [ 1041.073086][T12791] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1729'. [ 1042.259480][T12800] loop4: detected capacity change from 0 to 32768 [ 1042.269801][T12800] xfs: Deprecated parameter 'attr2' [ 1042.275312][T12800] XFS: attr2 mount option is deprecated. [ 1042.343652][T12800] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1042.467447][ T5840] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1042.557840][ T6541] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1042.566606][ T6541] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1042.741360][T12800] XFS (loop4): Ending clean mount [ 1042.755408][T12800] XFS (loop4): Quotacheck needed: Please wait. [ 1042.829734][T12800] XFS (loop4): Quotacheck: Done. [ 1043.028229][T10966] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1043.317835][ T5840] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1043.708109][T12819] loop7: detected capacity change from 0 to 32768 [ 1043.721064][ T31] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1043.765745][T12819] (syz.7.1735,12819,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1043.794265][T12819] (syz.7.1735,12819,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1043.989372][T12819] (syz.7.1735,12819,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xbec99099, computed 0x3881d996. Applying ECC. [ 1044.004583][T12819] (syz.7.1735,12819,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x93f628a2, computed 0x2aee8be5. Applying ECC. [ 1044.030540][T12819] JBD2: Ignoring recovery information on journal [ 1044.223712][T12819] (syz.7.1735,12819,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xbec99099, computed 0x3881d996. Applying ECC. [ 1044.239641][T12819] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 1044.261832][T12819] (syz.7.1735,12819,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x93f628a2, computed 0x2aee8be5. Applying ECC. [ 1044.363374][T12819] (syz.7.1735,12819,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC. [ 1044.753573][ T7466] ocfs2: Unmounting device (7,7) on (node local) [ 1045.456732][ T5840] libceph: connect (1)[c::]:6789 error -101 [ 1045.534404][ T5840] libceph: mon0 (1)[c::]:6789 connect error [ 1045.586487][T12845] netlink: 300 bytes leftover after parsing attributes in process `syz.7.1740'. [ 1045.641830][T12834] ceph: No mds server is up or the cluster is laggy [ 1046.561530][T12843] loop4: detected capacity change from 0 to 32768 [ 1046.573476][ T5840] libceph: connect (1)[c::]:6789 error -101 [ 1046.589845][ T5840] libceph: mon0 (1)[c::]:6789 connect error [ 1046.597061][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1046.609303][T12843] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1741 (12843) [ 1046.707057][T12843] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1046.717677][T12843] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm [ 1046.872980][T10149] BTRFS warning (device loop4): checksum verify failed on logical 5332992 mirror 1 wanted 0x45c4daa94c2fee9c24887d4bee8f983cd8ca9d8901c4a5aa51fab9bc8d8bf5d6 found 0xb2758922e8d827c8bc6ab859562b2c8f647d73fe0cdaf8bcd72871bad21ec5e5 level 0 [ 1046.897199][T12843] BTRFS warning (device loop4): couldn't read tree root [ 1046.952456][T12843] BTRFS error (device loop4): open_ctree failed: -5 [ 1049.754624][T12875] loop4: detected capacity change from 0 to 32768 [ 1049.765722][T12875] xfs: Deprecated parameter 'attr2' [ 1049.771373][T12875] XFS: attr2 mount option is deprecated. [ 1049.868820][T12875] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1049.870263][T12879] FAULT_INJECTION: forcing a failure. [ 1049.870263][T12879] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1049.891797][T12879] CPU: 1 UID: 0 PID: 12879 Comm: syz.0.1746 Not tainted syzkaller #0 PREEMPT(voluntary) [ 1049.891949][T12879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1049.892034][T12879] Call Trace: [ 1049.892090][T12879] [ 1049.892146][T12879] __dump_stack+0x26/0x30 [ 1049.892314][T12879] dump_stack_lvl+0x14c/0x1c0 [ 1049.892482][T12879] dump_stack+0x1e/0x25 [ 1049.892645][T12879] should_fail_ex+0x7e2/0x8c0 [ 1049.892852][T12879] should_fail+0x2a/0x40 [ 1049.892999][T12879] should_fail_usercopy+0x2e/0x40 [ 1049.893171][T12879] _copy_to_user+0x35/0x120 [ 1049.893334][T12879] simple_read_from_buffer+0x1b2/0x340 [ 1049.893537][T12879] proc_fail_nth_read+0x1e0/0x2d0 [ 1049.893732][T12879] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1049.893895][T12879] vfs_read+0x27c/0xf90 [ 1049.894058][T12879] ? stack_depot_save_flags+0x35/0x790 [ 1049.894217][T12879] ? kmsan_get_metadata+0xf1/0x160 [ 1049.894420][T12879] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1049.894623][T12879] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1049.894848][T12879] ksys_read+0x1d9/0x470 [ 1049.895038][T12879] __x64_sys_read+0x97/0xf0 [ 1049.895219][T12879] x64_sys_call+0x3123/0x3e70 [ 1049.895394][T12879] do_syscall_64+0xc9/0xf80 [ 1049.895560][T12879] ? clear_bhb_loop+0x40/0x90 [ 1049.895723][T12879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1049.895882][T12879] RIP: 0033:0x7f83bb55b78e [ 1049.895994][T12879] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1049.896115][T12879] RSP: 002b:00007f83bc509fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1049.896259][T12879] RAX: ffffffffffffffda RBX: 00007f83bc50a6c0 RCX: 00007f83bb55b78e [ 1049.896365][T12879] RDX: 000000000000000f RSI: 00007f83bc50a0a0 RDI: 0000000000000004 [ 1049.896458][T12879] RBP: 00007f83bc50a090 R08: 0000000000000000 R09: 0000000000000000 [ 1049.896547][T12879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1049.896633][T12879] R13: 00007f83bb816038 R14: 00007f83bb815fa0 R15: 00007fffde9e7768 [ 1049.896777][T12879] [ 1050.745381][T12875] XFS (loop4): Ending clean mount [ 1050.779379][T12875] XFS (loop4): Quotacheck needed: Please wait. [ 1051.005753][T12875] XFS (loop4): Quotacheck: Done. [ 1051.150627][T10966] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1052.736841][ T5840] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 1053.227379][ T5840] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1053.236986][ T5840] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1053.245244][ T5840] usb 6-1: Product: syz [ 1053.249822][ T5840] usb 6-1: Manufacturer: syz [ 1053.254821][ T5840] usb 6-1: SerialNumber: syz [ 1054.185219][ T5840] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1054.198152][ T5840] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1055.317109][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1056.142095][ T5840] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): timeout on completion of LiteReset [ 1056.160062][ T5840] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1056.263849][ T5840] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1056.416786][ T5840] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -110 [ 1056.727909][ T5840] usb 6-1: USB disconnect, device number 67 [ 1057.015293][ T31] libceph: connect (1)[c::]:6789 error -101 [ 1057.048458][ T31] libceph: mon0 (1)[c::]:6789 connect error [ 1057.118264][ T31] libceph: connect (1)[c::]:6789 error -101 [ 1057.124667][ T31] libceph: mon0 (1)[c::]:6789 connect error [ 1057.499027][ T31] libceph: connect (1)[c::]:6789 error -101 [ 1057.505437][ T31] libceph: mon0 (1)[c::]:6789 connect error [ 1057.534501][T12946] ceph: No mds server is up or the cluster is laggy [ 1059.319455][T12972] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1766'. [ 1059.437137][T12975] netlink: 104 bytes leftover after parsing attributes in process `syz.9.1768'. [ 1059.497012][T12975] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1768'. [ 1059.506224][T12975] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1768'. [ 1060.207306][T12984] ===================================================== [ 1060.214568][T12984] BUG: KMSAN: uninit-value in dvb_demux_read+0x580/0xa40 [ 1060.222182][T12984] dvb_demux_read+0x580/0xa40 [ 1060.227272][T12984] vfs_readv+0x931/0xf30 [ 1060.231702][T12984] __x64_sys_preadv+0x2a3/0x510 [ 1060.237295][T12984] x64_sys_call+0x3033/0x3e70 [ 1060.242208][T12984] do_syscall_64+0xc9/0xf80 [ 1060.249537][T12984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1060.255740][T12984] [ 1060.259245][T12984] Uninit was created at: [ 1060.263855][T12984] __alloc_frozen_pages_noprof+0x6df/0xf50 [ 1060.270852][T12984] alloc_pages_mpol+0x328/0x860 [ 1060.275997][T12984] alloc_pages_noprof+0x101/0x280 [ 1060.281411][T12984] __vmalloc_node_range_noprof+0xa97/0x2d80 [ 1060.287711][T12984] __vmalloc_noprof+0x128/0x1f0 [ 1060.292792][T12984] vmalloc_array_noprof+0x48/0x80 [ 1060.298444][T12984] dvb_dmxdev_init+0xd8/0x680 [ 1060.303311][T12984] vidtv_bridge_probe+0x1bfd/0x2690 [ 1060.308916][T12984] platform_probe+0x213/0x370 [ 1060.313818][T12984] really_probe+0x4d5/0xe40 [ 1060.320152][T12984] __driver_probe_device+0x25e/0x370 [ 1060.325695][T12984] driver_probe_device+0x70/0x8f0 [ 1060.331369][T12984] __driver_attach+0x53e/0xaa0 [ 1060.336511][T12984] bus_for_each_dev+0x33b/0x580 [ 1060.341569][T12984] driver_attach+0x51/0x70 [ 1060.349151][T12984] bus_add_driver+0x54f/0xdb0 [ 1060.354060][T12984] driver_register+0x42e/0x6a0 [ 1060.360240][T12984] __platform_driver_register+0x65/0x80 [ 1060.366110][T12984] vidtv_bridge_init+0x73/0x100 [ 1060.371415][T12984] do_one_initcall+0x22b/0xad0 [ 1060.376615][T12984] do_initcall_level+0x157/0x2e0 [ 1060.376784][T12984] do_initcalls+0x176/0x310 [ 1060.376938][T12984] do_basic_setup+0x1d/0x30 [ 1060.391211][T12984] kernel_init_freeable+0x213/0x430 [ 1060.396845][T12984] kernel_init+0x2f/0x5e0 [ 1060.401416][T12984] ret_from_fork+0x207/0x6f0 [ 1060.406439][T12984] ret_from_fork_asm+0x1a/0x30 [ 1060.411431][T12984] [ 1060.413891][T12984] CPU: 1 UID: 0 PID: 12984 Comm: syz.7.1770 Not tainted syzkaller #0 PREEMPT(voluntary) [ 1060.424798][T12984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1060.435344][T12984] ===================================================== [ 1060.442668][T12984] Disabling lock debugging due to kernel taint [ 1060.451266][T12984] Kernel panic - not syncing: kmsan.panic set ... [ 1060.457880][T12984] CPU: 1 UID: 0 PID: 12984 Comm: syz.7.1770 Tainted: G B syzkaller #0 PREEMPT(voluntary) [ 1060.469499][T12984] Tainted: [B]=BAD_PAGE [ 1060.473802][T12984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1060.484032][T12984] Call Trace: [ 1060.487447][T12984] [ 1060.490504][T12984] __dump_stack+0x26/0x30 [ 1060.495081][T12984] dump_stack_lvl+0x50/0x1c0 [ 1060.499895][T12984] ? dump_stack+0x12/0x25 [ 1060.504456][T12984] dump_stack+0x1e/0x25 [ 1060.508842][T12984] vpanic+0x435/0xd40 [ 1060.513083][T12984] panic+0x15d/0x160 [ 1060.517233][T12984] kmsan_report+0x31a/0x320 [ 1060.521985][T12984] ? __msan_warning+0x1b/0x30 [ 1060.526876][T12984] ? dvb_demux_read+0x580/0xa40 [ 1060.531925][T12984] ? vfs_readv+0x931/0xf30 [ 1060.536510][T12984] ? __x64_sys_preadv+0x2a3/0x510 [ 1060.541762][T12984] ? x64_sys_call+0x3033/0x3e70 [ 1060.546830][T12984] ? do_syscall_64+0xc9/0xf80 [ 1060.551715][T12984] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1060.558003][T12984] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1060.564094][T12984] ? __rcu_read_unlock+0x6c/0xd0 [ 1060.569232][T12984] ? aa_file_perm+0x417/0x27c0 [ 1060.574226][T12984] ? aa_file_perm+0x532/0x27c0 [ 1060.579267][T12984] ? stack_depot_save_flags+0x35/0x790 [ 1060.584920][T12984] ? kmsan_get_metadata+0xf1/0x160 [ 1060.590257][T12984] ? kmsan_get_metadata+0xf1/0x160 [ 1060.595606][T12984] ? kmsan_get_metadata+0xf1/0x160 [ 1060.601055][T12984] ? kmsan_get_metadata+0x146/0x160 [ 1060.606613][T12984] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1060.613301][T12984] ? __pfx_dvb_demux_read+0x10/0x10 [ 1060.618706][T12984] ? kmsan_get_metadata+0x146/0x160 [ 1060.624159][T12984] __msan_warning+0x1b/0x30 [ 1060.628876][T12984] dvb_demux_read+0x580/0xa40 [ 1060.633788][T12984] ? __pfx_dvb_demux_read+0x10/0x10 [ 1060.639200][T12984] vfs_readv+0x931/0xf30 [ 1060.644131][T12984] ? kmsan_get_metadata+0xf1/0x160 [ 1060.649490][T12984] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1060.655557][T12984] __x64_sys_preadv+0x2a3/0x510 [ 1060.660689][T12984] x64_sys_call+0x3033/0x3e70 [ 1060.665621][T12984] do_syscall_64+0xc9/0xf80 [ 1060.670351][T12984] ? clear_bhb_loop+0x40/0x90 [ 1060.675274][T12984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1060.681445][T12984] RIP: 0033:0x7f7e9399aeb9 [ 1060.686006][T12984] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1060.705819][T12984] RSP: 002b:00007f7e91bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1060.714683][T12984] RAX: ffffffffffffffda RBX: 00007f7e93c15fa0 RCX: 00007f7e9399aeb9 [ 1060.722860][T12984] RDX: 0000000000000001 RSI: 0000200000000480 RDI: 0000000000000004 [ 1060.731349][T12984] RBP: 00007f7e93a08c1f R08: 000000000000000d R09: 0000000000000000 [ 1060.739471][T12984] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 1060.747588][T12984] R13: 00007f7e93c16038 R14: 00007f7e93c15fa0 R15: 00007ffe61292ba8 [ 1060.755768][T12984] [ 1060.759544][T12984] Kernel Offset: disabled [ 1060.763973][T12984] Rebooting in 86400 seconds..