last executing test programs: 5m19.472527486s ago: executing program 0 (id=1): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x2208050, &(0x7f0000000140)=ANY=[], 0x1, 0x1520, &(0x7f0000011680)="$eJzs3Au4TtX2MPAx5pyLbefyJrmvMcfiTS6TJMklSS5JkoQj9yQJSZIkscktCUnIdSe5h9zTTtv9fsk9SY4kSUJCkvk9u/R3upyvc86/8znf2eP3POvZc6y15njH2mO/73rnu5+9v+wytFrD6pXrMTP8K/TPA/zpSxIAJADAAADIBgABAJTOXjp72vFMGpP+pQcR/yb1p1/pCsSVJP1P36T/6Zv0P32T/qdv0v/0Tfqfvkn/0zfpvxDp2sw8V8uWfjf5/P//c+p/M1nu//99EH+76++dK/3/b6P/qbOl/+lGht/bKf1PL37/FiD9T9+k/+lZcKULEFeYPP/TN+m/EOnan/6Z8vpzV/ozbdn+iU0IIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhPh/4Jy/zADAz+MrXZcQQgghhBBCCCH+PP7tK12BEEIIIYQQQggh/v0QFGgwEEAGyAgJkAkS4SrIDFkgK2SDGFwN2eEayAHXQk7IBbkhD+SFfJAfQiCwwBBBASgIcbgOCsH1UBiKQFEoBg6KQwm4AUrCjVAKboLScDOUgVugLJSD8lABboWKcBtUgtuhMtwBVaAqVIPqcCfUgLugJtwNteAeqA33Qh24D+rC/VAP6kMD+As0hAegETSGJtAUmkFzaPEH85Oz/d78Z6E7PAc9oCckQS/oDc9DH+gL/aA/DIAXYCC8CIPgJRgMQ2AovAzD4BUYDq/CCBgJo+A1GA1jYCyMg/EwAZLhdZgIb8AkePOBLDAFpsI0mA4zYCa8BbNgNsyBt2EuzIP5kJxpISyCxfAOLIF3IQXeg6XwPqTCMlgOK2AlrILVsAbWwjpYDxtgI2yCzbAFtsIHsA22ww7YCbtgN+yBD2EvfAT74GPYj5/8k/PP/nI+dEVAQIUKDRrMgBkwARMwERMxM2bGrJgVYxjD7Jgdc2AOzIk5MTfmxryYF/NjfiQkZGQsgAUwjnEshIWwMBbGolgUHTosgSWwJN6IpbAUlsbSWAbLYFksh+WwAlbAilgRK2ElrIyVsQpWwWpYDe/EO/EurIk1sRbWwtpYG+tgHayLdbEe1sMG2AAbYkNshI2wCTbBZtgMW2ALbIktsRW2wtbYGttgG2yLbbE9tscO2AE7YkfshJ2wM3bGLtgFu+Iz+Aw+i8/ic/gc9sQqqhf2xt7YB/tgP+yP/fEFHIgv4ov4Eg7GITgUX8aX8RUcjmdwBI7EUTgKK6oxOBbHIasJmIzJmBEm4iSchJNxCk7BaTgdZ+BMnImzcDbOxrdxLs7DebgAF+AiXIyLcQm+iymYgkvxLKbiMlyOK3AlrsKVuAbX4hpcjxtwPW7CTbgFt+AH+AFux+24E3fibtyNH+KH+BF+hINxP+7HA3gAD+JBPISH8DAexiN4BI/iUTyGx/A4HscTeBJP4Uk8jafxDJ7FcwBwHs/jBbyAF/Fi2pNfpTHKqAwqg0pQCSpRJarMKrPKqrKqmIqp7Cq7yqFyqJwqp8qtcqu8Kq/Kr/IrUqRYRaqAKqDiKq4KqUKqsCqsiqqiyimnSqgSqqQqqUqpUqq0ulmVUbeosqqcethVUBVURdXaVVK3q8qqsqqiqqpqqrqqrmqoGqqmqqlqqVqqtqqt6qj7VF3VC/thfZXWmYZqCDZSQ7GJaqqaqebqFXxQtVTDsZV6WLVWj6iROALbqpauvXpMdVBjsaN6Qo3DJ1VnNQG7qKdVV/WM6qaeVd1VK9dD9VSTsZfqraZhH9VX9VP91SysqtI6Vk29pAarIWqoelktwlfUcPWqGqFGqlHqNTVajVFj1Tg1Xk1Qyep1NVG9oSapN9VkNUVNVdPUdDVDzVRvqVlqtpqj3lZz1Tw1Xy1QC9UitVi9o5aod1WKek8tVe+rVLVMLVcr1Eq1Sq1Wa9RatU6tVxvURrVJbVZb1Fb1gdqmtqsdaqfapXarPepDtVd9pPapj9V+9Yk6oP6qDqpP1SH1mTqsPldH1BfqqPpSHVNfqePqa3VCnVSn1DfqtPpWnVFn1Tn1nTqvvlcX1A/qovIKNGqltTY60Bl0Rp2gM+lEfZXOrLPorDqbjumrdXZ9jc6hr9U5dS6d2+TReXU+nV+HmrTVrCNdQBfUcX2dLqSv14V1EV1UF9NOF9cl9A26pL5Rl9I36dL6Zl1G36LL6nK6vAd9q66ob9OV9O26sr5DV9FVdTVdXd+pa+i7dE19t66l79G19b26jr5P19X363q6vm6gM1y6ZzXWTXRT3Uw31y30g7qlfki30g/r1voR3UY/Ckm6nW6vH9Md9OO6o35Cd9JP6s76Kd1FP6276md0N/2Dvqi97qF76iTdS/fWz+s+uq/up/vrAfoFPVC/qAfpl/RgPUQP1S/rYfoVPVy/qkfokXqUfk2P1mP0WD1Oj9cTdLJ+XU/Ub+hJ+k09WU/RU/U0PV3P0P0uZZrzD8x/43fmD/rx0bforfoDvU1v1zv0Tr1L79Z79B69V+/V+/Q+vV/v1wf0AX1QH9SH9CF9WB/WR/QRfVQf1cf0MX1cH9cn9En9nf5Gn9bf6jP6rD6rv9Pn9Xl94dL3AAwaZbQxJjAZTEaTYDKZRHOVyWyymKwmm4mZq012c43JYa41OU0uk9vkMXlNPpPfhIaMNWwiU8AUNHFznSlkrjeFTRFT1BQzzhQ3JcwN/+v5f1RfC9PCtDQtTSvTyrQ2rU0b08a0NW1Ne9PedDAdTEfT0XQynUxn09l0MV1MV9PVdDPdTHfT3fQwPUySSTK9zfOmj+lr+pn+ZoB5wQw0A80gM8gMNoPNUDPUDDPDzHAz3IwwI8woM8qMNqPNWDPWjDfjTbLPZiaaiWaSmWQmm8lm6oBsZrqZbmaamWaWmWXmmDlmrplr5pv5ZqFZaBabxWaJWWJSTIpZapaaVLPMLDMrzAqzyqwya8was86sMxvMBrPJbDKpZqvZaraZbWaH2WF2mV1mj9lj9pq9Zp/ZZ/ab/eaAOWAOmoPmkDlkDpvD5og5Yo6ao+aYOWaOm+PmhDlhTplT5rQ5bc6YM+acOWfOm/PmgrlgLpqLaW/7AhWowAQmyBBkCBKChCAxSAwyB5mDrEHWIBbEguxB9iBHcG2QM8gV5A7yBHmDfEH+IAwosAEHUVAgKBjEg+uCQsH1QeGgSFA0KBa4oHhQIrghKBncGJQKbgpKBzcHZYJbgrJBuaB8UCG4NagY3BZUCm4PKgd3BFWCqkG1oHpwZ1AjuCuoGdwd1AruCWoH9wZ1gvuCusH9Qb2gftAg+EvQMHggaBQ0DpoETYNmQfOgxZ+a3/szuR5yPcKeYVLYK+wdPh/2CfuG/cL+4YDwhXBg+GI4KHwpHBwOCYeGL4fDwlfC4eGr4YhwZDgqfC0cHY4Jx4bjwvHhhDA5fD2cGL4RTgrfDCeHU8KpwbRwejgjnBm+Fc4KZ4dzwrfDueG8cH64IFwYLgoRf3plSwnfC5eG74ep4bJwebgiXBmuCleHa8K14bpwfbgh3BhuKj3wp1PDbeH2cEe4M9wV7g73hB+Ge8OPwn3hx+H+8JPwQPjX8GD4aXgo/Cw8HH4eHgm/CI+GX4bHwq/C4+HX4YnwZCYIvwlPh9+GZ8Kz4bnwu/B8+H14IfwhvBj6tDf3abd3MmQoA2WgBEqgREqkzJSZslJWilGMslN2ykE5KCflpNyUm/JSXspP+SkNE1MBKkBxilMhKkSFqTAVpaLkyFEJKkElqSSVolJUmkpTGSpDZclSeSpPt9KtdBvdRrfT7XQH3UFVqSpVp+qEWINqUk2qRbWoNtWmOlSH6lJdqkf1qAE1oIbUkBpRI2pCTagZNaMW1IJaUktqRa2oNbWmNtSG2lJbak/tqQN1oI7UkTpRJ+pMnakLdaGu1JW6UTfqTt2pB/WgJEqi3tSb+lAf6kf9aAANoIE0kAbRIBpMg2koDaVhNIyG03AaQSNpFL1Go2kMjaVxNJ4mUDIl00SaSJNoEk2myTSVptJ0mk4zaSbNolk0h+bQXJpL82k+LaSFtJgW0xJaQimUQktpKaVSKi2n5bSSVtJqWk1raS2tp/W0kTbSZtpMW2krbaNttIN20C7aRXtoD+2lvbSP9tF+2k8H6AAdpIN0iA7RYTpMR+gIHaWjdIyO0XE6TifoBJ2iU3SaTtMZOkPn6Bydp+/pAv1AF8lTgs1kE+1VNrPNYrPabPbXcW6bx+a1+Wx+G9qcNtcvYrLWFrZFbFFbzDpb3JawN/wmLmvL2fK2gr3VVrS32Uq2rM0EfxvXsHfZmvZuW8veY6vbO38R17b32jr2AVvXNrb1bFPbwDa3De0DtpFtbJvYpraZbW7b2EdtW9vOtreP2Q728d/ES+y7dq1dZ9fbDXav/cies9/Zo/ZLe95+b3vYnnaAfcEOtC/aQfYlO9gO+WUMYEfZ1+xoO8aOtePseDvhN/FUO81OtzPA2LfsLDv759jOvBQvtu/YuTbFzrcL7EK76Mc4raYU+55dat+3qXaZXW5X2JV2lV1t1/xPrSvsJrvZbrF77Id2m91ud9iddpfd/WOcdh377Md2v/3EHrFf2IP2U3vIHrOH7ec/xmnXd8x+ZY/br+0Je9Kest/Y0/Zbe8ae/fH60679G/uDvWi9BUZWrNlwwBk4IydwJk7kqzgzZ+GsnI1jfDVn52s4B1/LOTkX5+Y8nJfzcX4Omdgyc8QFuCDH+TouxNdzYS7CRbkYOy7OJfgGLsk3cim+iUvzzVyGb+GyXI7LcwW+lSvybVyJb+fKfAdX4apcjavznVyD7+KafDfX4nu4Nt/Ldfg+rsv3cz2uzw34L9yQH+BG3JibcFNuxs0Z+EFuyQ9xK36YW/Mj3IYf5bbcjtvzY9yBH+eO/AR34ie5Mz/FXfhp7srPcDd+lrvzc9yDe3IS9+Le/Dz34b7cj/vzAH6BB/KLPIhf4sE8hIfyyzyMX+Hh/CqP4JE8il/j0TyGx/I4Hs8TOJlf54n8Bk/iN3kyT+GpPI2n8wyeyW/xLJ7Nc/htnsvzeD4v4IW8iBfzO7yE3+UUfo+X8vucyst4Oa/glbyKV/MaXsvreD1v4I28iTfzFt7KH/A23s47eCfv4t28hz/kvfwR7+OPeT9/wgf4r3yQP+VD/Bkf5s/5CH/BR/lLPsZf8XH+mk/wST7F3/Bp/pbP8Fk+x9/xef6eL/APfJE9Q4SRinRkoiDKEGWMEqJMUWJ0VZQ5yhJljbJFsejqKHt0TZQjujbKGeWKckd5orxRvih/FEYU2YijKCoQFYzi0XVRoej6qHBUJCoaFYtcVDwqEd0QlYxujEpFN0Wlo5ujMtEtUdmoXFQ+qhDdGlWMbosqRbdHlaM7oipR1ahaVD26M6oR3RXVjO6OakX3RKWie6M60X1R3ej+qF5UP2oQ/SVqGD0QNYoaR02iplGzqHnUInowahk9FCUAQOvokahN9GjUNmoXtY8eizpEj//P8VZFgp/upr86nhT1ivSl1cbdemF8UXxx/J34kvi78ZT4e/Gl8ffjqfFl8eXxFfGV8VXx1fE18bXxdfH18Q3xjfFN8c3xLXHvq2cEh2kLYTAucBlcRpfgMrlEd5XL7LK4rC6bi7mrXXZ3jcvhrnU5XS6X2+VxeV0+l9+FjtylyqCgi7vrXCF3vSvsiriirphzrrgr4Zq7Fq6Fa+kecq3cw661e8Q94h51j7p2rp17zHVwj7uO7gnXyT3pOrun3FPuadfVPeO6uWddd/ec6+F6uiSX5Hq73q6P6+P6uX5ugBvgBrqBbpAb5Aa7wW6oG+qGuWFuuBvuRrgRbpQb5Ua70W6sG+vGu/Eu2SW7iW6im+Qmucluspvqprrpbrqb6Wa6WW6Wm+PmuLlurpvv5ruFbqFb7Ba7JW6JS3Epbqlb6lJdqlvulruVbqVb7Va7tW6tW+/Wu41uo9vsNrutbqvb5ra5HW6H2+V2uT1uj9vr9rp9bp/b7/a7A+6AO+gOukPuM3fYfe6OuC/cUfelO+a+csfd1+6EO+lOuW/cafetO+POunPuO3fefe8uuB/cReddcuz12MTYG7FJsTdjk2NTYlNj02LTYzNiM2NvxWbFZsfmxN6OzY3Ni82PLYgtjC2KLY69E1sSezeWEnsvtjT2fiw1tiy2PLYitjK2KuZ9vm2RL+AL+ri/zhfy1/vCvogv6ot554v7Ev4GX9Lf6Ev5m3xpf7Mv42/xZX05X9439k18U9/MN/ct/IO+pX/It/IP+9b+Ed/GP+rb+na+vX/Md/CP+47+Cd/JP+k7+6d8F//0vEs/Hr67f8738D19ku/le/vnfR/f1/fz/f0A/4If6F/0g/xLfrAf4of6l/0w/4of7l/1I/xIP8q/5kf7MX6sH+fH+wk+2b/uJ/o3/CT/pp/sp/ipfpqf7mf4mf4tP8vP9nP8236un+fn+wV+oV/kF/t3/BL/rk/x7/ml/n2f6pf55X6FX+lX+dV+jV/r1/n1foPf6Df5zX6L3+ozwja/3e/wO/0uv9vv8R/6vf4jv89/7Pf7T/wB/1d/0H/qD/nP/GH/uT/iv/BH/Zf+mP/KH/df+xP+pD/lv/Gn/bf+jD/rz/nv/Hn/vb/gf/AX5W/WhBBCCCH+IfoPjvf6nX3q0mYAoDcAZNme5/Cvc27M+dO4r9rbIQYAj/XsUv/nrX79pKSkS+emGggKLgCA2OX5P/6W51K8DFrDo9AeHoaSv1tfX1Ue+Vf5g785nqohiN8MkAiQ6ed9aWvCRPh1/hv/Tv7G7/w6/y/qT8u/AKBwwctz0h7o5/hy/lJ/J//uNn+QP9OnyQCt/mZOZrgcX85fAh6Cx6H9L84UQgghhBBCCCF+0led7/pH69u09Xlec3lORrgc/9H6/A9U+jOuQQghhBBCCCGEEP93Tz7Trd2D7ds/3Om/cqAA4Jlu7TL+p9RzxQcIAP8BZcjgP39wpV+ZhBBCCCGEEH+2y2/6r3QlQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCFE+vWv/4cw9Q+ffKWvUQghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhLjS/k8AAAD//8zaSEs=") chdir(&(0x7f0000000000)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file2\x00', 0x6042, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14937f, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x10fb40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(0xffffffffffffffff, 0xc0406619, 0x0) 5m16.861818674s ago: executing program 0 (id=9): set_mempolicy(0x2, 0x0, 0xf5) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019100)) readv(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1) r2 = getpid() syz_pidfd_open(r2, 0x0) tkill(0x0, 0x39) r3 = socket$igmp6(0xa, 0x3, 0x2) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f00000005c0)={@dev={0xfe, 0x80, '\x00', 0x40}, @remote, @remote, 0x3, 0x2, 0x5, 0x400, 0xb7, 0xc20022, r5}) syz_emit_ethernet(0x82, &(0x7f0000000040)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x80}, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @private1, @private2, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x80}}]}]}}}}}}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb00282b00fc020000000000000000000000000000fe8000000000000000000000000000aa"], 0x0) 5m15.904531881s ago: executing program 0 (id=12): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffe6, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x97, 0x406, 0x4, 0xffffffff, 0x25}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 5m11.98723423s ago: executing program 32 (id=12): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffe6, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x97, 0x406, 0x4, 0xffffffff, 0x25}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3m48.43583078s ago: executing program 5 (id=181): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="aa"], 0x1, 0x16c, &(0x7f0000000240)="$eJzsVc1K80AUPdNOf75vIQV3glBQtAradKriwkUfog9gSWMtpv40AW0pNu58ArfduvQRfIu8gigu6sqNRCZzM47ZKwjJIueee7ln7k3gzLF34ZUAfMwnNloAA5DHAl4YAwewKBMA2iWF70WFB8SfuMJlyt8TPhN6o/FJx3Wd4Q8Gv3FGFmRBFvy14Is2b3J4jb0snE9sMjX9dAGY9XyqtsSlK0a6Lk1PknUAdX9wXvdG463+oNNzes6pEM09a8eydkX9qO86lnozQz5H0hI3AEgv/WfUC8bx/1OjJqNfk/GafdJzD6leW/neJ8+KoiiCgQyPupf8HHL1NtZQBnAZMCNbjVU44nVaYMgTafDUbDmU48K2feZ2p2BgSdsMXGs0QhQ0ESZpVoJkjVuuVO/oPtkPkoWmhFXCFuGMMCRMbrAHUuCxwhuxWgAUcdXx/WFDplSkc0LnRCUwP+Uq6L8Za28S/wwAAP//8cRVEw==") ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0xd0) 3m47.407494052s ago: executing program 5 (id=185): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', 0x3200014, &(0x7f00000000c0)=ANY=[], 0x1, 0x625, &(0x7f0000002c40)="$eJzs3U9oHNcdB/DvrFay5IKjJHZiSqAihrRU1NYflFa92C2l6BBKSA+9VthyLLxWgqQUJYdW/X/tIddCetCtp0Lvhvbc3HLVMVDoJSdBDyozO7ta2autLNvSKvl8zNv33r437735zcyudhczAb6ylqbTfJgiS9NvbZX1n+/Mt3Z35i/Uza0kZbmRNNtZirWk+efkVtopoz3DFUfN8/Hq4juffbH7ebvWrFPVv3F4iJPYrlOmkozUebJ/4XC3AdPs7x853u3ueCdVdCNTBuxamW8/1YDwbOw/pnNm/vc4mx95vQPnR9F+33zMZHIxyXj9d0DqV4fG6a7u2fP+CwAAwFfBC3vZy1YunfU6AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Dyp7/9f1KnRKU+l6Nz/f6x+LnX5nCkO1R6e2ToAAAAAAAAA4Nn5xl72spVLnfp+Uf3m/3pVuVw9fi0fZCMrWc/1bGU5m9nMemaTTPYMNLa1vLm5PnuMLef6bjl3OvsLAAAAAAAAAOfHzSfp/JssHfz+DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAw6BIRtpZlS53ypNpNJOMJxkr+20nn3bK59nDs14AAAAAnIIX9rKXrVzq1PeL6jP/K9Xn/vF8kLVsZjWbaWUld6rvAtqf+hu7O/Ot3Z35B2V6fNwf/OeJllGNmPZ3D/1nvlr1mMjdrFbPXM/tvJdW7qRRbVm62llP/3X9ulxTcbOtOObK7tR52f9PdT4cJquIjHYjMlOvrYzGi4Mj8YRH59GZZtPofvNz+dGZRg5teijmN48538U6L/fnD0Md87n67Pu0vGYGxzz55t//+rN7rbX79+5uTA/PLp1QHYntZh2J+Z7r8NVzGonRE201U0XiSre+lB/np5nOVN7e/1WSX2Q5m1nJVH5UlZZTdM/oycGRunWo9vb/W8lYfVzal+ARa8p6Vvus6fVq20tZzU/yXu5kJW9W/+Yym+9mIQtZ7DnCV47xStt4sqv+2rfqwkSSP9b5MBit4vpiT1x7X3Mnq7beZw6i9NLRUSpO+NrY/HpdKOf4bZ0Ph0cjMdsTiZcHny9/2S8fN1pr99fvLb9/zPneqPMylL8fqneJ8nx5qTxYVe3w2VG2vdy3bbZqu9xtazzWdqXb1vdKXe/Mv1j1fqXvSHNV26t92+artqs9bf3+3gJg6F389sWxiX9P/Gvik4nfTdybeGv8hxe+d+G1sYz+c/T7zZmRNxqvFX/LJ/nlwed/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg5DY+/Oj+cqu1sj6g0LnBzqA+T1so6hv5PMcpFIaskPGhWMbzLDQzFMs40dEBvuRubD54/8bGhx99Z/XB8rsr766sjS4sLM4sLrw5f+Puamtlpv141qsEnoeDN/2zXgkAAAAAAAAAAABwXKfx3wnOeh8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA821pOs2HKTI7c32mrO/uzLfK1Ckf9GwmaSTjZbn4R3Ir7ZTJnuGKo+b5eHXxnc++2P38YKxmp39j0HZ9jT76xHadMpVkpM6fwqHxbj/1eEV3D8uAXesEDs7a/wIAAP//XHoJeA==") r0 = creat(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180), 0xfefc) sendmsg(r0, &(0x7f0000000140)={&(0x7f00000000c0)=@l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000400)="7432b80bd9457940aece696a3b816a12b5a0e86135958c6d16c9fbc9483d56e93a1a9f08744153611d7918929333bf4b454105267693d6e812c0cadf115140ad847b7649c444ba71444a0b1b59cc1e13f0cb6f49d474b1e4eab217e347fc020c7af0a1e2afd8e39481683240737c74483273db38c33db967004d5e6ffa4ce047f1e0c5a6019a16871edf6f861f9054e84d7bd6af58a9d4de288c91c110e3b9f18950bffd813293e3d248c043b2764ae5fe18b468eaea956dc70cd196d4d16ae8fb278de4f60f0ce76a2cf888f40365d3f4e716ade154dcb31f1fb6", 0xdb}], 0x1, &(0x7f0000000240)=[{0xb0, 0x10c, 0xc, "627046a24163b0a70c7f642c1a9f9270c347a13edd67e3d036cf8e209e8bcfda6725b78963028857f84ea4a34e72a7c8fb0ddac250d1152761de02a5d0671165e94271b5e662c9313bbac999d87bff9f92fcf92ef44ad99b887fc79aaf2fe1dbbd608b01bcff9b8b4cfb6d0772eb5f8d97df00d1b44a11e945b7c6bb30b38b0aa9e0c753baef5192b3757a126583dbd39941d3d6ddbaa8e35347612bc8"}], 0xb0}, 0x40) 3m46.055413527s ago: executing program 5 (id=191): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101d40, 0xd2) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000100), 0xa00000, &(0x7f0000000980)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r4, 0xc008ae88, &(0x7f0000000100)={0x1000000e}) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r6, 0x4, 0x70bd26, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 3m44.295659672s ago: executing program 5 (id=197): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x2004000, &(0x7f0000000040), 0xfe, 0x563, &(0x7f00000007c0)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000fb00000000000000008500000017000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_int(r2, &(0x7f0000000000)=0x8, 0x12) rt_sigpending(&(0x7f0000000240), 0x8) close(r2) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000380)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) splice(r1, 0x0, r2, &(0x7f00000002c0)=0x87ffffe, 0x6, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000200)=ANY=[], 0x2, 0x5505, &(0x7f000000cd80)="$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") getpid() r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) rt_tgsigqueueinfo(r3, r3, 0x8, &(0x7f0000000140)={0x3d, 0x5, 0xfffffff9}) tkill(r3, 0x2e) ptrace$peeksig(0x4209, r3, &(0x7f0000000580)={0x3, 0x0, 0x1}, &(0x7f00000016c0)=[{}]) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xe, 0x0, &(0x7f0000000300)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000081a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00021205000100000000000800074000000001"], 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000000)={0x0, 0x6, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="800000000001010400000000efffffff02000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000200000080002007f0000010c0002800500010000000000080007400000000008000300000000f7e7024000000000"], 0x80}}, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x4) 3m40.930713795s ago: executing program 5 (id=203): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000580)='\xc1J\xaf\xfd,\x86\xbc\xa9\x02\xf2\xf6\xe2\xcd\x9f\xf6\x83\xeb\xba_6\xfdR\xd0\x8d\xc1\xf6.$w\xab|*`\x11H+^\xbb\x8ar\xb1\x8ec\xec,\xd5\xfd,\xce`\x9f\x92\xb4\xbe\x06?\xaa\x16Q\x94\x15\xbe\x80E\x9c\x93Hq?<(+\xceb0\xcc\xad\xdd\x1c\xee\x19\x1b\x91Z\x85\xb7\x04\xe7\xaf\xe0W,G\xc8\xc0\xbcR\x90\x17\x19@m\xa5\x19\x16i\xc8\x99)\xa5\xb0\xba\xbc\xe0rV\x06\xd0B\x0f\xcdF\xbc\x8e\x8a^%8k\x849S\x15=kxS\x1c\xc1\xdaT\x9c\b\xb6\xd8\xa0st~\xf1\x93\xb8\xba\xa5gV\x18F\x8f\xe4b\xdc\x19_P\x81\xa4\xc3\\g\x11\xd1\xc8 U\xba\x03\xc9\xf17\x88\r\xb99]\xdfM\xc8AQB\xc3\xf0\xf7t\xee\x95&w\xc3;', &(0x7f0000000180), 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000140)='{:\'@-\x00', &(0x7f0000000180)='%*.\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000003c0)='\x00', &(0x7f0000000400)='(!\xef(.(\\-]\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000000c0)='fuseblk\x00', &(0x7f0000000100)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000200)='^,/\x00j\xd6pS\x99FN\xf3\xa3Y\xe1\x90\nJ\x9c\xb7\x0f\x85\xea\xbc28\x04\xe1\x99\tmi\x1b\xcd\x9d\xf8i\xdc\xff \x02J\xa5\t\r\xc8\x1c\xed\xcd', &(0x7f0000000a80)='f}seblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000280)='\x1c@\\\x00', &(0x7f00000002c0)='\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000300)='\x00', &(0x7f0000000340)='\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000780)='g#^$\x00', 0x0, r0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000380)='}\x00', &(0x7f0000000880)='\xc1J\xaf\xfd,\x86\xbc\xa9\x02\xf2\xf6\xe2\xcd\x9f\xf6\x83\xeb\xba_6\xfdR\xd0\x8d\xc1\xf6.$w\xab|*`\x11H+^\xbb\x8ar\xb1\x8ec\xecQ\x94\x15\xbe\x80E\x9c\x93Hq?<(+\xceb0\xcc\xad\xdd\x1c\xee\x19\x1b\x91Z\x85\xb7\x04\xe7\xaf\xe0W,G\xc8\xc0\xbcR\x90\x17\x19@m\xa5\x19\x16i\xc8\x99)\xa5\xb0\xba\xbc\xe0rV\x06\xd0B\x0f\xcdF\xbc\x8e\x8a^%8k\x849@\x15=kxS\x1c\xc1\xdaT\x9c\b\xb6\xd8\xa0st~\xf1\x93\xb8\xba\xa5gV\x18F\x8f\xf4b\xdc\x19_P\x81\xa4\xc3\\g\x11\xd1\xc8 U\xba\x03\xc9\xf17\x88\r\xb99]\xdfM\xc8AQB\xc3\xf0\xf7t\xee\x95&w\xc3;\xf1C\xea!J\x19\xe1\xfe\x0f\x84\xdfY\x10\xed\x1c\xb2n\xc0ME\xaa\x9e\xd1f\x92q\xeb\xdb)\xcd1(>\x8e\x0f}\x03\xdd\xf8\x84\x9bz!\x80F\xc5ls< \x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x98\x1c\x9f\xbd\xcd\xea\xc3w\xa3\xf5\x1d.\x00\x00\x00\xa0\xf4\xe9\xe2\x83\xac\xde\x95cmvM\x12\xc1O\x1f#\xcd\x90\x1e\x03\x1e}\xe7w\xe7\"Oh`\xed\bM9\xaf\xa3BQ\xbf\xfd1\x1cG\xb5\xed\x86\xb9Q(\x19dZ\x8da\x008e*\x928\xcf\x0f\x0e\x05\x1dM?\x11$E\xc3\x12\x1e\xffI\x84t0D\xec\xf3T\xe2\xddJm\x87\xc9\xb1\xff\n\xa1\x13\xcbo\xc6\xda\x84\x02\xa3\x14\xf2q\x96\xa8Sa\xe4\x1f\x01\xa2]\xb2\xc9\xd5\xff\xfd\xf2\xb5\xf5\xef \xc7\x02\x927\xdb\xa5\a\x9eS\xb6\xe2\xbaL\x99n\xb4\xe3\xf7\x0eU\xc0', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='(\xed\xef(.(\\-]\x00', &(0x7f0000000080)='\x00', 0x0) read(r1, 0x0, 0x0) close(r1) 3m30.511747403s ago: executing program 5 (id=227): pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLOCK(r0, &(0x7f0000000040)={0x8, 0x35, 0x1, 0x3}, 0x8) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtaction={0x80, 0x32, 0x53b, 0x0, 0x0, {0x9}, [{0x6c, 0x1, [@m_sample={0x68, 0x1, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x600000}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x10, 0x1, 0x7, 0x200, 0x60}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x1000}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x7fff}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x7985}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x80}}, 0x0) 3m27.716770594s ago: executing program 33 (id=227): pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLOCK(r0, &(0x7f0000000040)={0x8, 0x35, 0x1, 0x3}, 0x8) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtaction={0x80, 0x32, 0x53b, 0x0, 0x0, {0x9}, [{0x6c, 0x1, [@m_sample={0x68, 0x1, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x600000}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x10, 0x1, 0x7, 0x200, 0x60}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x1000}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x7fff}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x7985}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x80}}, 0x0) 6.471832906s ago: executing program 3 (id=1153): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000580)=0x3, 0x4) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x801) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) connect$bt_l2cap(r0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x28, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 6.161538877s ago: executing program 1 (id=1154): syz_usb_connect(0x3, 0x57d, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x0) (async) r0 = syz_usb_connect(0x3, 0x57d, &(0x7f0000000b40)=ANY=[@ANYBLOB="120110013b1ff220c6055390a3170102030109026b0501090d1082090406430d4b068c050905800008000009001409f16a88000000006507000000000000000000090501001000070200521070be10445496debccdc2b77617abb9e60d07a8c60045167850097831477d4a59d6735c9b692f5a4d663595f354a0c150a76fafada8937b9803f76d68841bfbb781296b951b8c9b88f27d5e735f2487ffedd4987eeeba16bc0c8afe0a32be42ded8930460fa3598f6db43e51ef95569482049eef71a1d75768b7060fcac23c046900983ba8c96c4de418bc7564d5eeed166cf7a6ebe8530021f2de72f6f0faf47ac65954af6cd46af6ce2d0694849f8d7aa4d02ff53a677abd91c4c6544ade85a2b6c9d2d93df65067f38bc2d080ad1a5ad474335e6d62684941a4802610145bdf2dab6c5190ff23d782bd943793cde14092f7ba47b50ba5ea88271f215794dd3be889f4dfd1e85ade8af71a37801b65a1aa796090507080004043007090500000004f800089909cc60028575d12cc8112cc99ebe2ffcea5c6926f6d46b3d45cc777c47d8e4787842f7ddefae24fae081c5e14b931265d5459d3b50b0c4331104685cfb5fab5d3589a603a29fe59e572041723f50b929aac8827beeae3ee6006dac08466c02916a895cad0e89577ea2841572ced9041ead0b4ad00615ccde94801e6b3e3c024cdba039c7f0d64e6e18d8619c3c10efa415f5ce0928ca486409050a101000020afbad22ee5c8b2d6482c63f266061c8f8fbd10778f5a49e86c77c003582b5e2a0cb34b9d5c59685af2096361edc32211df2efc63ffebc7191b76155fdf9576f376af1d2fd4657df6328e1f209af27514e837941a327f5fbf31b609c7e2bf4cd5b5046897c52d230dcdf36d6005a68f3e16600bca5f5367b0190b20288335b3fae5abaa7a3bc5223a94c5d49f437becbdfd705ad7274afb4d566d1234efb7659faf38a71cc8cb6eebe9e1d233d3f55072501805600fc0905051040000603030725018002f83309050d00080040f6030725018005020007250181017b0409050d0100040e090f7b0f10859239274f297e4e8b4dacb0528d945500f80d238bdc04cca14266d38effff65f772a98a5886de14d3f3f989d8826fffbe82de1f136d0061c7f24049d29e428cd06fef61ac1e3135cda012788902eaa915fc803668569928c413f8a97c9a790c2a5d18675709000000000000000000000000000000000000230302b018eb3420bca1c61b5cbb1f1b3d14a4de6f6b382d7a5ecb35a81911ab4984e0090508002000e1810b0905060000020409810725010006fa0709050b100800e0400009050bcf35d68e1e365d93dc3f38e70fa240d4c826e546a2db5263361f9e6db9c23951d88e616e36a6786b4cd9d620376fa5a1db2c3c135a627f986723bbc4e0d58b9a0eb9696772b84f9eeaebf133063b7cfb7ba7c90f8d160a4c7a8fb8c5bfdd474f45b9490d19935a99f0002714b7c87585b940658e190ba5978a240f22b78af7cbe94b6a829271e2ed6a510a29fdb7adb0218bf8d27fd4e94133b4aa8f051c5011ee0ddca28550a3d75631fefb435a14748003c154201d6d1107dd443b723de4d5c40f8192107255e8476a86d58e8356a47c11b487298a4f3c689881e426e929e90f8339136362b21bcfa1cb232dd7ddce2b1fe33f295eba2601742e4ac4d7d0015204bd3fcf2552fab62b1df986b77de59c70c256eae41b6ef67c3e4562f6c681ed675b98f04c00bac2fe9b162ef5de8ce955906be15a37f7a3dfc5571ff68d090502061000ea070507250102000c007b10f9a673eff83828fa83a3404b017049ab591621dcc5c2c1f4c22f2925f84dfe73cc3d85180c6d5c0fbf15fb323368a5f28969d941e2a41bac2bd487c294759dfcf0d33595ad0502784a79f9bb62aa73e6b88c5b262d6c1dde9db67d142db3246b6172a94f923cf7348b10dc76009ef15f6ca1b781c2c65c9805e12163cb6f0aca2bda136e2dae1ffa90f7410a3372ca61350634060d4b435e0a507f51341c4b985f227157e41ac392c9ed7f9c02b4505a06369c2a2713ed8ba38f763e1763bd6779e21cb7f6db5d6c638ce1fee744ee48feb5b67f27cc70b26e9450835cd45f02792279881d4a8763dae3c0ef2e4c160cada40f1f697a5b4a423a53bbd874dff3eaf7bd3885b75d94b1795400bccd96296e566f0ba05546efc3b174469256a9df7b8e35bf0dab74c533bb44c9c37556d46116f0b20892f16f06f843b695d29935935ab5255bac1ebfc903ba5c"], 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r0]) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, 0x0) (async) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f00000000c0)='\\\x00') sendmmsg$sock(r1, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="89", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)}}], 0x2, 0x48800) (async) sendmmsg$sock(r1, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="89", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)}}], 0x2, 0x48800) shutdown(r1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) prctl$PR_MCE_KILL(0x35, 0x0, 0x2) syz_read_part_table(0x1065, &(0x7f0000002100)="$eJzsz7FNxEAQhtF/vV5pndKA2yAkQCIhBFEOIFECFRASkdMBXdCCGzCSse46uLvgvXDm00gTzmoa+tVXcv1W39OTvCR5aklq6rGak++f+5KkfSw9tdTcjNumJ3PZq5qMd8tD2vpcftdhm5Xb6b9qezS8zofD9fHzhK8CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMX6CwAA//9BDg4U") syz_usb_connect$hid(0x6, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB="120100cb000000106a05f80040000102030109022d0001010820760904000002030102520921008008012277070905810340000cc0030905020310001d0704"], &(0x7f0000000400)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x110, 0x1, 0xfc, 0x5, 0x10, 0x5}, 0x20, &(0x7f00000004c0)=ANY=[@ANYRESOCT=0x0, @ANYRESOCT=r0, @ANYBLOB="c8f6a49fccdbff9318ef2f66dfcb5ecb8ffe9199320f896aefc104de2d93d987788b3a6b130b316126485d4fc819e4aec79550b69d14181f6c7c348fa6ae2b28a7de1095c92b99027032f790e9af1de177f3ba7927f7c0fe8b1e906e85ddd033825f287b4b54004b0810b4c7194026440b042612c139a30c649eac1487bf04d0afd5f7fa730aad40f15551002919659dd0cbbd0be8290fb113b190d14c9fa2241d77add90b9befd2ef88bd7a692bfacab6974279087d7fcac63d25477098a817c7b7f8dc4e97e71e197a883a4e", @ANYRES64=r1], 0x6, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x810}}, {0x61, &(0x7f0000000100)=@string={0x61, 0x3, "4c3136d7847e178ef4028c3fa6bd77f111890fffbf6c18583fffe28379a772e9f89d79b869ceafc28eed69c4b4c5a216d0615f5808cc040ea80b1410f868844fea16b94b998a1a7ee773ef3da4bc90f5966d37775968fd59b2aba014e43b54"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x814}}, {0xd5, &(0x7f00000001c0)=@string={0xd5, 0x3, "0eb2c9fc13a37584eb22dab5b0ca4019e06b0bad2d09f171c9e53f9321c3c48cb937f8f016495798fe494f5027bd666bc81557b3717847ce7e4a9a2c77cae32a1617d2d7067222f1a423dc1ac10f7ee90f9c55af0061270b091996e1ad77b6bf87310eec73a2d2a07f5d2001fb399e61e56d73a8f59985e52eb8fc11b114b8f50fe97e9a76c22f10f0f82fb6799ec93da5467e048975b1a9fb398913ed41edc6350813f48c16a744ee6e5c3bdcac3f6e568dfc7353a16068f81ba014b3071cf1742916cf51516586d338c6144275f649313287"}}, {0x1c, &(0x7f0000000000)=@string={0x1c, 0x3, "12e8ee15afbfcc26800f800fe41cdf3739a8abb923bf96ba31f7"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x2c0a}}]}) (async) syz_usb_connect$hid(0x6, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB="120100cb000000106a05f80040000102030109022d0001010820760904000002030102520921008008012277070905810340000cc0030905020310001d0704"], &(0x7f0000000400)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x110, 0x1, 0xfc, 0x5, 0x10, 0x5}, 0x20, &(0x7f00000004c0)=ANY=[@ANYRESOCT=0x0, @ANYRESOCT=r0, @ANYBLOB="c8f6a49fccdbff9318ef2f66dfcb5ecb8ffe9199320f896aefc104de2d93d987788b3a6b130b316126485d4fc819e4aec79550b69d14181f6c7c348fa6ae2b28a7de1095c92b99027032f790e9af1de177f3ba7927f7c0fe8b1e906e85ddd033825f287b4b54004b0810b4c7194026440b042612c139a30c649eac1487bf04d0afd5f7fa730aad40f15551002919659dd0cbbd0be8290fb113b190d14c9fa2241d77add90b9befd2ef88bd7a692bfacab6974279087d7fcac63d25477098a817c7b7f8dc4e97e71e197a883a4e", @ANYRES64=r1], 0x6, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x810}}, {0x61, &(0x7f0000000100)=@string={0x61, 0x3, "4c3136d7847e178ef4028c3fa6bd77f111890fffbf6c18583fffe28379a772e9f89d79b869ceafc28eed69c4b4c5a216d0615f5808cc040ea80b1410f868844fea16b94b998a1a7ee773ef3da4bc90f5966d37775968fd59b2aba014e43b54"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x814}}, {0xd5, &(0x7f00000001c0)=@string={0xd5, 0x3, "0eb2c9fc13a37584eb22dab5b0ca4019e06b0bad2d09f171c9e53f9321c3c48cb937f8f016495798fe494f5027bd666bc81557b3717847ce7e4a9a2c77cae32a1617d2d7067222f1a423dc1ac10f7ee90f9c55af0061270b091996e1ad77b6bf87310eec73a2d2a07f5d2001fb399e61e56d73a8f59985e52eb8fc11b114b8f50fe97e9a76c22f10f0f82fb6799ec93da5467e048975b1a9fb398913ed41edc6350813f48c16a744ee6e5c3bdcac3f6e568dfc7353a16068f81ba014b3071cf1742916cf51516586d338c6144275f649313287"}}, {0x1c, &(0x7f0000000000)=@string={0x1c, 0x3, "12e8ee15afbfcc26800f800fe41cdf3739a8abb923bf96ba31f7"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x2c0a}}]}) 5.328861038s ago: executing program 6 (id=1157): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x28, 0x0, 0x0) r0 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000100)={0x0, 0x1, 0x16, 0x0, 0x8}, 0xc) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0x267a4e37}, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r2, 0xf21, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ff4ae0086d04dd08f4ff0802030109021200"], 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000800)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)={0x1c, 0x0, 0x1, 0x80, 0x0, {{0x8}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 4.762549089s ago: executing program 3 (id=1160): socket$packet(0x11, 0xa, 0x300) syz_emit_ethernet(0x3e, &(0x7f0000000400)={@local, @random="7f0a00030011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x2, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x5, 0x1, 0x0, @rand_addr=0x64010101, {0x5, 0x4, 0x1, 0x1d, 0x64, 0x65, 0x9, 0xf9, 0xff, 0x10, @empty=0x600, @dev={0xac, 0x14, 0x14, 0x1a}}}}}}}, 0x0) openat(0xffffffffffffff9c, 0x0, 0xc4042, 0x1ff) 4.612493919s ago: executing program 1 (id=1161): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001f40), r0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000001fc0)={&(0x7f0000000540)={0x1c, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40010) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x18, r3, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) 4.283500823s ago: executing program 6 (id=1162): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_usb_connect(0x5, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="1201500246c7f540"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, r0, 0x0, &(0x7f0000000040)) (async) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) (async) symlink(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00') (async) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(r0, &(0x7f0000000140)='net/packet\x00') 4.257078111s ago: executing program 3 (id=1163): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e24, @local}, 0x10) 4.036874819s ago: executing program 4 (id=1165): r0 = socket$packet(0x11, 0xa, 0x300) syz_emit_ethernet(0x2d, &(0x7f0000000400)={@local, @random="7f0a8d8b0011", @void, {@arp={0x806, @generic={0x324, 0x15, 0x6, 0x7, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}, "1776c242616df7", @empty, "72274afd"}}}}, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000040)=@req={0x28, &(0x7f0000000000)={'veth0_to_team\x00', @ifru_names='netpci0\x00'}}) openat(0xffffffffffffff9c, 0x0, 0xc4042, 0x1ff) 3.991346654s ago: executing program 3 (id=1166): syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@mb_optimize_scan}, {@delalloc}, {@stripe={'stripe', 0x3d, 0x4}}]}, 0x7d, 0x50f, &(0x7f0000000140)="$eJzs3c9vI1cdAPCvnThxsmmTlh4AQbu0hQWt1km8bVT1AOUCQqgSokeQtiHxRlHsOIqd0oQ9pGeuSFTiBEf+AG5IPSFx5ILgxqUckPgRgRokDoNmPMk6WbuJNokdxZ+PNJr35s36+32bnffWL4lfACPrdkTsR8RERLwbEbP59UJ+xFudI73vk4NHK4cHj1YKkSTv/LOQtafXouvPpG7lr1mOiO9/O+JHhSfjtnb3Npbr9dp2Xp9vN7bmW7t799Yby2u1tdpmtbq0uLTwxv3Xq5fW15caE3npix//Yf9rP0nTmsmvdPfjMnW6XjqOkxqPiO9eRbAhGMv7MzHsRHgqxYh4PiJezp7/2RjLvpoAwE2WJLORzHbXAYCbrpitgRWKlXwtYCaKxUqls4b3QkwX681W++7D5s7mametbC5KxYfr9dpCvlY4F6VCWl/Myo/r1VP1+xHxXET8bHIqq1dWmvXVYf7HBwBG2K1T8/9/JjvzPwBww5WHnQAAMHDmfwAYPeZ/ABg95n8AGD2d+X9q2GkAAAPk/T8AjB7zPwCMlO+9/XZ6JIf551+vvre7s9F8795qrbVRaeysVFaa21uVtWZzLfvMnsZZr1dvNrcWX4ud9+e+vtVqz7d29x40mjub7QfZ53o/qJWyu/YH0DMAoJ/nXvroz4V0Rn5zKjuiay+H0lAzA65acdgJAEMzNuwEgKGx2xeMrgu8x7c8ADdEjy16j/3+W0lS7vULQkmSJFebFnCF7nzO+j+Mqq71fz8FDCPG+j+MLuv/MLqSpHDePf/jvDcCANebNX6gz/f/n8/Pv86/OfDD1dN3fHiVWQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD1drT/byXfC3wmisVKJeKZiJiLUuHher22EBHPRsSfJkuTaX1xyDkDABdV/Fsh3//rzuyrMyeaXrx1XJyIiB//4p2fv7/cbm//MWKi8K/Jo+vtD/Pr1cFnDwCc7Wiezs5db+Q/OXi0cnQMMp+/fzMiyp34hwcTcXgcfzzGs3M5ShEx/e9CXu8odK1dXMT+BxHx2V79L8RMtgbS2fn0dPw09jMDjV88Eb+YtXXO6d/FZy4hFxg1H6Xjz1u9nr9i3M7OvZ//cjZCXVw+/qUvtXKYjYGP4x+Nf2N9xr/b543x2u++0ylNPdn2QcTnxyOOYh92jT9H8Qt94r96+sX6DIh/+cKLL/fLLfllxJ3oHb871ny7sTXf2t27t95YXqut1Tar1aXFpYU37r9enc/WqOf7zwb/ePPus/3a0v5P94lfPqP/X+4b8aRf/e/dH3zpU+J/9ZVe8YvxwqfET+fEr5wz/vL0b8r92tL4q336f9bX/+4543/8170ntg0HAIantbu3sVyv17b7Fn47ffY9CgoDKaT/ZK9BGj0L3xhUrIno3fTTVzrP9KmmJHmqWCfHicfvHC9j1Q24Do4f+oj477CTAQAAAAAAAAAAAAAAehrEbywNu48AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcXP8PAAD//9140jY=") syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) socketpair(0x8, 0xa, 0x7, &(0x7f0000000680)={0xffffffffffffffff}) bind$nfc_llcp(r0, &(0x7f0000000880)={0x27, 0x0, 0x1, 0x3, 0xfe, 0x12, "db1d9dbc2d4caa5eae6533b7b1d518c4d2eeb03b113a01b0d03818415ee6c6e1dbdb9a6f9da81a3456000000b2764d4c13b8e0420fba2828ce47e28c56e377", 0x32}, 0x60) getpeername$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x28000000, 0x0, 0x0) ptrace(0x10, r1) ptrace$getregset(0x4205, r1, 0x200, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70}) 3.952588743s ago: executing program 1 (id=1167): newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r0, r0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000001c0)='./file2\x00', 0x2000082, &(0x7f00000006c0)={[{@numtail}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'cp1250'}}, {@rodir}, {@uni_xlate}, {@numtail}, {@uni_xlate}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'cp932'}}, {@utf8no}, {@utf8}, {@utf8}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'euc-jp'}}, {@shortname_mixed}], [{@mask={'mask', 0x3d, '^MAY_READ'}}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@obj_role={'obj_role', 0x3d, 'hash:ip,mark\x00'}}, {@hash}, {@fowner_eq={'fowner', 0x3d, r0}}, {@obj_user={'obj_user', 0x3d, 'syz0\x00'}}]}, 0x26, 0x378, &(0x7f0000000d40)="$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") r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = open(&(0x7f0000000080)='.\x00', 0x480, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000006c0)=ANY=[@ANYBLOB="516498fb", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fedbdf253b0000000c0099000600000061000000080057004612000008005700230c00000800a100ef000000050019010c00000008009f00000000000800a100b00b0000080027000000000008009f00030000000800a100040000000800a000380000000800220100100000"], 0x78}, 0x1, 0x0, 0x0, 0x640d0}, 0x404c000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800fe067c05e8fe55a10a0005000140020003600e41b0000900ac0006fc1100000004000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef40900", 0x6b}], 0x1}, 0x20004804) r4 = socket(0x10, 0x803, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x28, r6, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) fremovexattr(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='user.\a']) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, &(0x7f0000000080)=0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000600)={r7, @in6={{0xa, 0x4e23, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x85}}, 0xb}, 0x90) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000900)={'syztnl2\x00', &(0x7f00000008c0)={'syztnl2\x00', 0x0, 0x10, 0x7800, 0x5cdc03c3, 0xd9f46e3, {{0x8, 0x4, 0x2, 0x4, 0x20, 0x64, 0x0, 0x0, 0x4, 0x0, @multicast2, @local, {[@lsrr={0x83, 0xb, 0x5b, [@local, @dev={0xac, 0x14, 0x14, 0xe}]}]}}}}}) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@bloom_filter={0x1e, 0x8, 0x6, 0x8, 0x10800, r1, 0x64fc, '\x00', r9, r3, 0x5, 0x3, 0x4, 0xd, @void, @value, @value=r3}, 0x50) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffe}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x800}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x4001}, 0x0) readv(r2, &(0x7f0000000040)=[{&(0x7f0000001600)=""/4112, 0x1010}], 0x1) r10 = msgget(0x0, 0x50) msgctl$IPC_RMID(r10, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file2\x00', 0xc4042, 0x1ff) r11 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r11, 0xc1105517, &(0x7f0000000340)={{0x1, 0x2, 0x0, 0x0, 'syz1\x00', 0x9}, 0x1, 0x30, 0x4, 0xffffffffffffffff, 0x0, 0x0, 'syz0\x00', 0x0}) 3.771610798s ago: executing program 2 (id=1168): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_int(r0, 0x6, 0x6, &(0x7f00000000c0), 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1}, 0x50) 3.731917018s ago: executing program 4 (id=1169): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x20080) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r1, 0x4b47, &(0x7f00000001c0)={0x9, 0x0, 0x27f}) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000280)) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000180)=ANY=[@ANYBLOB="b00000002c00010026bd7000fcdbdf2504"], 0xb0}}, 0x200c0090) ioctl$sock_inet_SIOCGIFDSTADDR(r2, 0x8917, &(0x7f0000000000)={'veth0_to_hsr\x00', {0x2, 0x0, @private}}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') writev(r3, 0x0, 0x0) write$FUSE_GETXATTR(r3, &(0x7f0000000040)={0x18, 0xfffffffffffffff5, 0x0, {0x8}}, 0x18) 3.321108081s ago: executing program 2 (id=1170): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x18000000) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 'syz0\x00', 0x0}) 3.272674019s ago: executing program 4 (id=1171): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = memfd_create(&(0x7f0000000780)='/dev/loop#\x00\xee\b\xce\xde\xe9\x8d\xd3\xd4\xe2\xfd\x7f\xf5R%\xe8]l\xa1s\b\xa5\xd2\xd59\xe8\xda\b\xd6\xb2\x15\xf6F\xb8\xb4{r.\xd2\xea\xec\xdbXe&J \xe9\x16\x82\xe8=\x83\x88sN\x83N`\xf9\xec\xe1\xbb\x05vH\xdd\x01?k\x97\xa5\xbf\x89#=2G\xb16\xfb*\xf5\xd5\\\xa7\xebe\xbe\x9d\xd7\xf5\xb9<\xb2\xc4\xf9:\xef\xc0g\xc3\xa6\x7f\xc0\xcck.5=\xcc\x10Y\xad^*;MVh\xd9\xcf )\x0e%\x84\x95bXy\x81;o\xc9\x94\xc5M\xaf\xdbr\xec\xf6', 0x6) fallocate(r0, 0x0, 0x0, 0x200401) fallocate(r0, 0x0, 0x0, 0x200401) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000007, 0x810, r0, 0xb7bb8000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = io_uring_setup(0xf08, &(0x7f0000000780)={0x0, 0xfb6e, 0x38c1, 0x4, 0xf0}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000000c000/0x1000)=nil, &(0x7f000001f000/0x1000)=nil, &(0x7f0000015000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f000000c000/0x4000)=nil, &(0x7f000001d000/0x3000)=nil, &(0x7f0000012000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000000a280)="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", 0x2000, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0xfff1}, {0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) io_uring_register$IORING_REGISTER_FILES(r2, 0x20, &(0x7f0000000000)=[r2], 0x1) move_pages(r1, 0x0, &(0x7f0000000140), &(0x7f0000000040), 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') statx(r3, 0x0, 0x7000, 0x1, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fd9e1a40f30c74933bbc0000000109021b0001040000000904000065d4695e000905", @ANYBLOB='1M@'], 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x75c, 0x10d840) msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x2000, 0x0) 3.156919377s ago: executing program 6 (id=1172): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x28, 0x0, 0x0) r0 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000100)={0x0, 0x1, 0x16, 0x0, 0x8}, 0xc) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0x267a4e37}, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r2, 0xf21, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ff4ae0086d04dd08f4ff080203010902120001000000"], 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000800)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)={0x1c, 0x0, 0x1, 0x80, 0x0, {{0x8}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 3.106500893s ago: executing program 2 (id=1173): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x80000000000000, 0x80000) (async) r1 = syz_open_dev$midi(&(0x7f0000000000), 0x80000000000000, 0x80000) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r1, 0x80045700, &(0x7f0000000040)) sendmmsg$inet(r0, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000200)="a90500", 0x3}], 0x1}}], 0x1, 0x840) 2.841097722s ago: executing program 3 (id=1174): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$jfs(&(0x7f0000000e80), &(0x7f0000000340)='./file1\x00', 0x0, &(0x7f0000000ec0)=ANY=[@ANYRESHEX, @ANYBLOB="5f08229e10a8b8d201e80b820a39961612f7337ac3cc6a5335a9bf066291dd222842081abab8f08c87e234491bee8da7474349462d3effb0c4530e2dc8d65dbe1631b778f7e26ad1a33ea931b6ce03c6637f442534b323b05b23967504669288bf28fb2db5852771b171b61183126c4dae9b95a5da38fd3d8abd15978eb410959485ed2858ee4d250ffb309d0496dbd2620b80710bab8e88ff1e6253cf39406a851221761bcdc73fcff88a0ab7fb420f357a80755e174e7070b8", @ANYRES64], 0x0, 0x5fe0, &(0x7f0000004ec0)="$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") openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x105042, 0x62) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="460609000000000050001280080001007369740044000280060012004e23000006000e000300000008000300ac1414bb0800140000000000060008003c00000006000800030000000500050081000000050004"], 0x80}, 0x1, 0x0, 0x0, 0x600}, 0x0) 2.814671648s ago: executing program 2 (id=1175): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}}, @NFT_MSG_NEWSETELEM={0x2c, 0x1e, 0xa, 0x205, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0xffffffffffffff62, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}}, 0x68}}, 0x200400c0) 2.78783382s ago: executing program 1 (id=1176): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x300, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="4000000010000305000020000000000000000000", @ANYRES32=0x0, @ANYBLOB="115a0100000000002000128008000100687372001400028008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r3], 0x40}}, 0x44) 2.024712196s ago: executing program 6 (id=1177): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000003000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.976109703s ago: executing program 2 (id=1178): r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x101042, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f00000003c0)={0x1d, 0x3, 0x7, 0x6, 0x2, [0xc54, 0xd, 0x24ae00, 0x1]}) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000240)={0x3, {{0xa, 0x800, 0x0, @mcast1, 0xfffffffe}}, {{0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x100b}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/273], 0x90) fcntl$setstatus(r1, 0x4, 0x6100) write$cgroup_type(r1, &(0x7f0000000200), 0x175d9003) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)=@multiplanar_overlay={0x0, 0x5, 0x4, 0x2000, 0x0, {}, {0x3, 0x8, 0xa, 0x1, 0x1, 0x5, "092e251b"}, 0x6, 0x3, {&(0x7f00000001c0)=[{0x66de, 0x10, {0x7}, 0x101}, {0x0, 0x40, {0x1}, 0x6}]}, 0x1, 0x0, r1}) socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/locks\x00', 0x0, 0x0) pread64(r3, &(0x7f0000001440)=""/126, 0x7e, 0x41) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x4002, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@multicast2}}, &(0x7f0000000480)=0xe8) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000700)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@userxattr}], [{@obj_user={'obj_user', 0x3d, '\xff\xff'}}, {@fowner_lt={'fowner<', r4}}]}) r5 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r5, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x40}, 0x20008024) chdir(&(0x7f0000000140)='./bus\x00') rename(&(0x7f0000000400)='./bus\x00', &(0x7f0000000f00)='./file0\x00') socket$nl_xfrm(0x10, 0x3, 0x6) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f0000004200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000040)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0x40, 0x0, 0x8, 0x0, 0xf, 0x0, 0x0, 0x8}}, 0x50) syz_fuse_handle_req(r6, &(0x7f0000008900)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bcd4681f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b2c1ec000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008df76a250000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000131a5d9400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0xf098, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.806251013s ago: executing program 4 (id=1179): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYBLOB="0100000000000000000003000000140001800600010002000000080003"], 0x28}}, 0x0) 1.684241746s ago: executing program 1 (id=1180): sendmmsg$unix(0xffffffffffffffff, &(0x7f00000014c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@cred={{0x1c}}], 0x20}}], 0x1, 0x40025) r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r0, r0}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={'xxhash64\x00'}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xa}, 0x28) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$inet(r1, &(0x7f0000000f00)={&(0x7f00000000c0)={0x2, 0x0, @rand_addr=0x64010102}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000100)='f', 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="20000000000000008400000008"], 0x20}, 0x0) sendmsg$inet(r1, &(0x7f0000000f00)={&(0x7f0000000180)={0x2, 0x0, @dev}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)='&', 0x1}], 0x1, &(0x7f0000000000)=ANY=[], 0x20}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x2, &(0x7f00000001c0)=[{0x4d, 0x6, 0x9, 0xa7b9}, {0x6, 0x9, 0x2, 0x87e2}]}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000001400)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000100)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000300)) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, &(0x7f0000000180)={r4, 0x4004, 0xffff37a4}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000540)=@ethtool_coalesce={0xf, 0x6, 0x8, 0x9, 0xe, 0x4, 0xa, 0x7, 0x3, 0x9, 0x1, 0x4, 0x7, 0x8, 0x93a1, 0x51e5, 0x1, 0x137, 0xf, 0x8, 0x401, 0x8455, 0x4}}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000280)={r4, 0x6, r1, 0xffff, 0x80000}) syz_mount_image$vfat(&(0x7f0000000a40), &(0x7f0000000000)='./file1\x00', 0x2010000, &(0x7f0000000940)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c756e695f786c6174653d312c696f636861727365743d63703836352c73686f72746e616d653d6d697865642c636f6465706167653d3836392c726f6469722c616c6c6f775f7574696d653d30303030303030303030303030303030303137373737372c73686f72746e616d653d77696e39352c696f636861727365743d6370313235352c636865636b3d7374726963742c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e39352c004c21fbd23364597e61bd9e6c47bce24b3f93d831eaa8688deebdbf10d10f509bad0fabd2253225b10ce42f4dc8b613d3585bcb3b5892369a7a4e0325cb6510"], 0x25, 0x34c, &(0x7f0000001740)="$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") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=@newlink={0x20, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x52a6a, 0x40}}, 0x20}, 0x1, 0x0, 0x0, 0x4000080}, 0x2c00c080) creat(&(0x7f0000000100)='./bus\x00', 0x0) mount(&(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000380)='./bus\x00', 0x0, 0x850040, 0x0) r6 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x100) preadv2(r6, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) 1.267916861s ago: executing program 3 (id=1181): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x2000}}, [@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffff0}}, @jmp={0x5, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffff4, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x4f}, 0x94) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r3 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000b40)=ANY=[@ANYBLOB='iocharset=koi8-r,umask=00000000000000000000005,namecase=1,uid=', @ANYRESHEX=0x0, @ANYBLOB="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"], 0x1, 0x1528, &(0x7f00000037c0)="$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") r4 = memfd_create(&(0x7f0000000480)='[\v\xdbX\xae[5\xa9\x90\xffc\x1f\x1a\xa9\xfd\xfa\xad\xd1md\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\x9fc\xda\xa9\x83r\xd8\x98\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9', 0x0) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x0, 0x0, [0x4, 0x0, 0x3, 0x3, 0x1, 0x6], 0x6, &(0x7f0000000380)=[{}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}, {}, {}]}, 0xd8) write$binfmt_script(r4, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) pwrite64(r4, &(0x7f0000000040)="ab", 0x1, 0x2) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0) r5 = socket(0x1d, 0x2, 0x6) r6 = io_uring_setup(0x7d82, &(0x7f00000000c0)={0x0, 0x72f, 0x10000, 0x200002, 0x2c0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x800, 0x0, 0x4, 0x10000000}, 0x0, &(0x7f0000000400)={0x1f, 0x0, 0x800000000000, 0x0, 0x1000000000, 0x0, 0xfffffffffffffffe}, 0x0, 0x0) bind$can_j1939(r5, &(0x7f0000000080)={0x1d, r7, 0x3, {0x1, 0x1, 0x3}, 0xfe}, 0x18) sendmsg$inet(r5, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10) r8 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi2\x00', 0x10000, 0x0) r9 = landlock_create_ruleset(&(0x7f00000001c0)={0x213c, 0x1, 0x2}, 0x18, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmmsg$unix(r10, &(0x7f0000000280)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008054}}, {{&(0x7f00000000c0)=@file={0x1, './file0/file3\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40080}}], 0x2, 0x0) ppoll(&(0x7f0000000200)=[{r8, 0x1002}, {r2, 0x8}, {r9, 0x6}, {0xffffffffffffffff, 0x8}, {r1, 0x12}, {r10, 0x4002}, {r6, 0x1008}], 0x7, &(0x7f0000000240)={0x0, 0x989680}, &(0x7f0000000280)={[0x4010000000000]}, 0x8) 1.17262039s ago: executing program 6 (id=1182): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x2000, 0x0) 1.062564991s ago: executing program 4 (id=1183): write(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x2c}, 0x1, 0x30000}, 0x0) 634.94741ms ago: executing program 6 (id=1184): syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@mb_optimize_scan}, {@delalloc}, {@stripe={'stripe', 0x3d, 0x4}}]}, 0x7d, 0x50f, &(0x7f0000000140)="$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") syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) socketpair(0x8, 0xa, 0x7, &(0x7f0000000680)={0xffffffffffffffff}) bind$nfc_llcp(r0, &(0x7f0000000880)={0x27, 0x0, 0x1, 0x3, 0xfe, 0x12, "db1d9dbc2d4caa5eae6533b7b1d518c4d2eeb03b113a01b0d03818415ee6c6e1dbdb9a6f9da81a3456000000b2764d4c13b8e0420fba2828ce47e28c56e377", 0x32}, 0x60) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x28000000, 0x0, 0x0) ptrace(0x10, r1) ptrace$getregset(0x4205, r1, 0x200, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70}) 271.139239ms ago: executing program 2 (id=1185): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x0, 0x6}, 0x8) syz_emit_ethernet(0xc2, &(0x7f00000001c0)={@local, @link_local, @val={@void, {0x8100, 0x0, 0x1, 0x4}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x1, "65a252e7cb7a5918c004a9971a46afced2c32642b1ec9fe34818d8ccd82041b7", "c930713c550e74ee13c2638ac75b2a9666efd31a34fce4498df8105d8bd8ed283a220c3a9becd8a70d3607ea8270d351", "ae12e16b560f2f8ac4ca3e745ce285f12f6e8719e7f1e7f286a68f76", {"980aa8fb8f80d69f1fb587086447e93e", "55e824bb69e833bd36300b088233545a"}}}}}}}, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) 250.589211ms ago: executing program 4 (id=1186): newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r0, r0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000001c0)='./file2\x00', 0x2000082, &(0x7f00000006c0)={[{@numtail}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'cp1250'}}, {@rodir}, {@uni_xlate}, {@numtail}, {@uni_xlate}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'cp932'}}, {@utf8no}, {@utf8}, {@utf8}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'euc-jp'}}, {@shortname_mixed}], [{@mask={'mask', 0x3d, '^MAY_READ'}}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@obj_role={'obj_role', 0x3d, 'hash:ip,mark\x00'}}, {@hash}, {@fowner_eq={'fowner', 0x3d, r0}}, {@obj_user={'obj_user', 0x3d, 'syz0\x00'}}]}, 0x26, 0x378, &(0x7f0000000d40)="$eJzs3T2IHOUbAPBnMne3l/DP/7YQAlarnSAhCdhYJYQIwSs0svjVuJiL6O0a2MWFpMjuNkqwUmwErexSaJlaLETsLGyNIH5gY7pADkd2d3b2O7mAe0b8/Yrl4XnfZ95n5obbD27fe60TuxfX49Lt2z/H5mYSa6fPno47SZTjUKQx1I2F3t9YnAcAHnJ3siz+yIbuP/vDI6PIcz8A/HsNnv/fODpOlB6g+Pr/VtESALBi4/f/yb3e/z+3MHt5ZW0BACs09/n/4xGRFMMzH/OvFX8TMHT4YJoEAP5WL7z8yrNntiMuVCqbEY332tV2NZ4ej5+5FG9GPXbiRGzFXsTwhcLw1UL/8Znz2+dOVPp+KUe1X9GuRjQ67erwlcKZdFBfipOxFeW8Pivq0379yUF9JSK6ncH60Uja1fU4kq//w5HYiVOxFY/M1Uec3z53qpIfoNoY1XcierE5Ool+/8djK757PS5HPS5Gv3bc/7WTlcrZbHuqvn2jNJgHAAAAAAAAAAAAAAAAAAAAAACrcLxSKBf732SNTvvdC8WENGbGB/v7DIfz/YF6w/2BstJod57r6ez+QNP787Sra3HoHz1zAAAAAAAAAAAAAAAAAAAAeHi0rmxErV7fabauXN2dDDoTmbe/+fyrwzEaWstL30rHVZEnd5qtpBsxPM5o4sSR0yiWyIryLJ2as9uNiGYrjdFxrnZrN24WHU+2WirOYrr5PCjNDSV5T7V6/ehjP32yqOrPftAdZNKYuyzTQZKvPzHU+H8/sRkRe8uqlgen7jPnVpZly8qvfTybybdi6DxwG/sIvl7vX9tjTw0yX+YrPfHk1ou3Pvrst91aPXrDK1OvbzRbe9k+jhxJRJHJsjxIJ+6fJL/OyYI7YXHQG2d6zdaVWvr97y89+sG3M5PTxfdPNpl5Z/laX8xmNoZBElEeXYR7tboe+73yr94t7t7JoaW3xFRw7NPTtZvXfvx1vz/liV8SNuoAAAAAAAAAAAAAAAAAAIADMf7S7zi33n/IsqwzM3cjRl/zj+cPsEUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWLnx//+fCHpzmTwox/zkIrjbifmh0k6ztXTxwwd6qgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/If9FQAA///uLXiX") r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = open(&(0x7f0000000080)='.\x00', 0x480, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000006c0)=ANY=[@ANYBLOB="516498fb", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fedbdf253b0000000c0099000600000061000000080057004612000008005700230c00000800a100ef000000050019010c00000008009f00000000000800a100b00b0000080027000000000008009f00030000000800a100040000000800a000380000000800220100100000"], 0x78}, 0x1, 0x0, 0x0, 0x640d0}, 0x404c000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800fe067c05e8fe55a10a0005000140020003600e41b0000900ac0006fc1100000004000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef40900", 0x6b}], 0x1}, 0x20004804) r4 = socket(0x10, 0x803, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x28, r6, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) fremovexattr(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='user.\a']) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, &(0x7f0000000080)=0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000600)={r7, @in6={{0xa, 0x4e23, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x85}}, 0xb}, 0x90) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000900)={'syztnl2\x00', &(0x7f00000008c0)={'syztnl2\x00', 0x0, 0x10, 0x7800, 0x5cdc03c3, 0xd9f46e3, {{0x8, 0x4, 0x2, 0x4, 0x20, 0x64, 0x0, 0x0, 0x4, 0x0, @multicast2, @local, {[@lsrr={0x83, 0xb, 0x5b, [@local, @dev={0xac, 0x14, 0x14, 0xe}]}]}}}}}) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@bloom_filter={0x1e, 0x8, 0x6, 0x8, 0x10800, r1, 0x64fc, '\x00', r9, r3, 0x5, 0x3, 0x4, 0xd, @void, @value, @value=r3}, 0x50) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffe}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x800}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x4001}, 0x0) readv(r2, &(0x7f0000000040)=[{&(0x7f0000001600)=""/4112, 0x1010}], 0x1) r10 = msgget(0x0, 0x50) msgctl$IPC_RMID(r10, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file2\x00', 0xc4042, 0x1ff) r11 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r11, 0xc1105517, &(0x7f0000000340)={{0x1, 0x2, 0x0, 0x0, 'syz1\x00', 0x9}, 0x1, 0x30, 0x4, 0xffffffffffffffff, 0x0, 0x0, 'syz0\x00', 0x0}) 0s ago: executing program 1 (id=1187): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000340)="d2411a", 0x3}], 0x2}, 0x240408c1) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000005c0)=0xc) syz_emit_ethernet(0x14, &(0x7f00000010c0)={@broadcast, @remote, @val={@void, {0x8100, 0x0, 0x0, 0xffc}}, {@generic={0x88fb, "e305"}}}, 0x0) kernel console output (not intermixed with test programs): 67295 subj=unconfined op=collect_data cause=failed comm="syz.4.105" name=20042008010208 dev="mqueue" ino=10200 res=0 errno=0 [ 283.995375][ T24] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 284.061378][ T24] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 284.071122][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 284.079823][ T24] usb 2-1: SerialNumber: syz [ 284.841968][ T6519] loop5: detected capacity change from 0 to 1024 [ 284.996036][ T6507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.009555][ T6507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.180039][ T6507] loop1: detected capacity change from 0 to 256 [ 285.353255][ T6525] loop3: detected capacity change from 0 to 3 [ 285.413795][ T6525] syz.3.108: attempt to access beyond end of device [ 285.413795][ T6525] loop3: rw=2048, sector=0, nr_sectors = 8 limit=3 [ 285.431166][ T6525] SQUASHFS error: Failed to read block 0x0: -5 [ 285.438740][ T6525] unable to read squashfs_super_block [ 285.484006][ T24] cdc_ether 2-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.1-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 285.541603][ T6524] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.697128][ T5812] Bluetooth: hci1: link tx timeout [ 285.702765][ T5812] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 285.762295][ T6524] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.823559][ T5864] usb 2-1: USB disconnect, device number 4 [ 285.862076][ T5864] cdc_ether 2-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.1-1, CDC Ethernet Device [ 286.009671][ T6524] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.128849][ T6524] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.575535][ T76] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.714281][ T4233] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.889944][ T76] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.931360][ T76] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.792820][ T5812] Bluetooth: hci1: command 0x0406 tx timeout [ 296.290374][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 296.297335][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 296.975688][ T6555] FAULT_INJECTION: forcing a failure. [ 296.975688][ T6555] name failslab, interval 1, probability 0, space 0, times 0 [ 296.991721][ T6555] CPU: 0 UID: 0 PID: 6555 Comm: syz.1.111 Not tainted syzkaller #0 PREEMPT(none) [ 296.991866][ T6555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 296.991947][ T6555] Call Trace: [ 296.992000][ T6555] [ 296.992050][ T6555] __dump_stack+0x26/0x30 [ 296.992225][ T6555] dump_stack_lvl+0x1df/0x270 [ 296.992399][ T6555] dump_stack+0x1e/0x25 [ 296.992550][ T6555] should_fail_ex+0x7dc/0x8a0 [ 296.992763][ T6555] should_failslab+0x15b/0x200 [ 296.992939][ T6555] __kmalloc_noprof+0x182/0x1310 [ 296.993115][ T6555] ? tomoyo_realpath_from_path+0xeb/0x9f0 [ 296.993300][ T6555] ? tomoyo_path_number_perm+0x21/0x7d0 [ 296.993497][ T6555] ? filter_irq_stacks+0x49/0x190 [ 296.993706][ T6555] ? kmsan_get_metadata+0xfb/0x160 [ 296.993882][ T6555] tomoyo_realpath_from_path+0xeb/0x9f0 [ 296.994060][ T6555] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 296.994243][ T6555] ? __srcu_read_lock+0x5e/0xd0 [ 296.994410][ T6555] tomoyo_path_number_perm+0x1d0/0x7d0 [ 296.994619][ T6555] ? stack_depot_save_flags+0x35/0x7b0 [ 296.994839][ T6555] ? kmsan_get_metadata+0xfb/0x160 [ 296.994990][ T6555] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 296.995209][ T6555] tomoyo_file_ioctl+0x3d/0x50 [ 296.995387][ T6555] security_file_ioctl+0x141/0x590 [ 296.995596][ T6555] __se_sys_ioctl+0xbb/0x400 [ 296.995755][ T6555] __x64_sys_ioctl+0x97/0xe0 [ 296.995918][ T6555] x64_sys_call+0x1cbc/0x3e20 [ 296.996100][ T6555] do_syscall_64+0xd9/0x210 [ 296.996282][ T6555] ? irqentry_exit+0x16/0x60 [ 296.996439][ T6555] ? clear_bhb_loop+0x40/0x90 [ 296.996594][ T6555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.996754][ T6555] RIP: 0033:0x7f75b8f8ebe9 [ 296.996863][ T6555] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 296.996983][ T6555] RSP: 002b:00007f75b9e13038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 296.997115][ T6555] RAX: ffffffffffffffda RBX: 00007f75b91b5fa0 RCX: 00007f75b8f8ebe9 [ 296.997222][ T6555] RDX: 0000200000001440 RSI: 00000000000089f0 RDI: 0000000000000003 [ 296.997310][ T6555] RBP: 00007f75b9e13090 R08: 0000000000000000 R09: 0000000000000000 [ 296.997399][ T6555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 296.997481][ T6555] R13: 00007f75b91b6038 R14: 00007f75b91b5fa0 R15: 00007ffdd731db68 [ 296.997612][ T6555] [ 297.237517][ T6555] ERROR: Out of memory at tomoyo_realpath_from_path. [ 297.383902][ T6556] loop2: detected capacity change from 0 to 4096 [ 297.391418][ T6560] loop4: detected capacity change from 0 to 2048 [ 297.409810][ T6556] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512). [ 297.449802][ T6556] ntfs3(loop2): ino=0, mi_enum_attr [ 297.455729][ T6556] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 297.485483][ T6556] ntfs3(loop2): failed to replay log file. Can't mount rw! [ 297.524365][ T6554] loop3: detected capacity change from 0 to 2048 [ 297.647475][ T6560] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 298.356642][ T6570] loop3: detected capacity change from 0 to 3 [ 298.416142][ T6570] syz.3.116: attempt to access beyond end of device [ 298.416142][ T6570] loop3: rw=2048, sector=0, nr_sectors = 8 limit=3 [ 298.433133][ T6570] SQUASHFS error: Failed to read block 0x0: -5 [ 298.439693][ T6570] unable to read squashfs_super_block [ 298.504821][ T6569] loop4: detected capacity change from 0 to 256 [ 298.560205][ T6569] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 298.683207][ T6569] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 298.693370][ T6569] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 298.701195][ T6569] UDF-fs: Scanning with blocksize 512 failed [ 298.800562][ T6569] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 298.883486][ T6569] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 300.558638][ T6584] loop1: detected capacity change from 0 to 40427 [ 300.568769][ T6584] F2FS-fs: heap/no_heap options were deprecated [ 300.579002][ T6584] f2fs: Bad value for 'alloc_mode' [ 301.016155][ T6592] fuse: Bad value for 'group_id' [ 301.026261][ T6592] fuse: Bad value for 'group_id' [ 301.089215][ T6594] loop4: detected capacity change from 0 to 1764 [ 301.235638][ T6598] loop5: detected capacity change from 0 to 256 [ 301.279868][ T6594] netlink: 2200 bytes leftover after parsing attributes in process `syz.4.126'. [ 301.387396][ T6598] netlink: 176980 bytes leftover after parsing attributes in process `syz.5.128'. [ 302.440394][ T6598] loop5: detected capacity change from 0 to 40427 [ 302.456307][ T6598] F2FS-fs (loop5): build fault injection rate: 14 [ 302.463245][ T6598] F2FS-fs (loop5): build fault injection type: 0x3bfe8c [ 302.481292][ T6598] F2FS-fs (loop5): invalid crc value [ 302.537982][ T5864] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 302.554931][ C0] F2FS-fs (loop5): inject read IO error in f2fs_read_end_io of bio_endio+0xe24/0xf80 [ 302.589351][ C1] F2FS-fs (loop5): inject read IO error in f2fs_read_end_io of bio_endio+0xe24/0xf80 [ 302.883613][ T6598] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 302.887967][ T5864] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 302.893086][ T6598] F2FS-fs (loop5): inject page alloc in f2fs_grab_cache_folio of f2fs_get_tmp_folio+0x38/0x50 [ 302.913433][ T5864] usb 3-1: config 0 has no interface number 0 [ 302.953412][ T6598] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 303.065132][ T5864] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 303.075146][ T5864] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.083527][ T5864] usb 3-1: Product: syz [ 303.087917][ T5864] usb 3-1: Manufacturer: syz [ 303.093209][ T5864] usb 3-1: SerialNumber: syz [ 303.280973][ T6618] loop2: detected capacity change from 0 to 7 [ 303.325134][ T5864] usb 3-1: config 0 descriptor?? [ 303.351625][ T6618] Dev loop2: unable to read RDB block 7 [ 303.358645][ T6618] loop2: unable to read partition table [ 303.382591][ C1] F2FS-fs (loop5): inject write IO error in f2fs_write_end_io of bio_endio+0xe24/0xf80 [ 303.392927][ C1] CPU: 1 UID: 0 PID: 6620 Comm: udevd Not tainted syzkaller #0 PREEMPT(none) [ 303.393071][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 303.393165][ C1] Call Trace: [ 303.393229][ C1] [ 303.393279][ C1] __dump_stack+0x26/0x30 [ 303.393462][ C1] dump_stack_lvl+0x1df/0x270 [ 303.393649][ C1] dump_stack+0x1e/0x25 [ 303.393820][ C1] f2fs_handle_critical_error+0xa6f/0xc20 [ 303.394044][ C1] f2fs_stop_checkpoint+0x65/0x80 [ 303.394299][ C1] f2fs_write_end_io+0x101c/0x1bc0 [ 303.394550][ C1] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 303.394752][ C1] bio_endio+0xe24/0xf80 [ 303.394913][ C1] blk_update_request+0xf4c/0x1a90 [ 303.395165][ C1] blk_mq_end_request+0x50/0xb0 [ 303.395360][ C1] lo_complete_rq+0x188/0x3a0 [ 303.395514][ C1] ? __pfx_lo_complete_rq+0x10/0x10 [ 303.395678][ C1] blk_done_softirq+0x10f/0x1f0 [ 303.395864][ C1] ? __pfx_blk_done_softirq+0x10/0x10 [ 303.396047][ C1] handle_softirqs+0x166/0x6e0 [ 303.396226][ C1] __irq_exit_rcu+0x66/0x180 [ 303.396370][ C1] irq_exit_rcu+0x12/0x20 [ 303.396510][ C1] sysvec_apic_timer_interrupt+0x84/0x90 [ 303.396686][ C1] [ 303.396736][ C1] [ 303.396797][ C1] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 303.396977][ C1] RIP: 0010:virt_to_page_or_null+0x27/0x180 [ 303.397169][ C1] Code: 90 90 90 48 89 f8 48 2d 00 00 00 80 73 29 48 89 fa 48 2b 15 d3 99 9a 0f 48 39 c2 77 12 0f b6 0d 60 45 38 10 48 89 d6 48 d3 ee <48> 85 f6 74 1a 31 c0 e9 4d 1f 49 0e cc 48 3d ff ff ff 1f 77 f0 48 [ 303.397286][ C1] RSP: 0000:ffff88805e4efa90 EFLAGS: 00000246 [ 303.397408][ C1] RAX: ffff8881bfda8270 RBX: ffff88813fda8270 RCX: 000000000000002e [ 303.397501][ C1] RDX: 000000013fda8270 RSI: 0000000000000000 RDI: ffff88813fda8270 [ 303.397597][ C1] RBP: ffff88805e4efab0 R08: ffffea000000000f R09: 0000000000000000 [ 303.397697][ C1] R10: ffff888237c07b38 R11: 0000000000000000 R12: 0000000000000000 [ 303.397795][ C1] R13: ffffd0ffffd1add8 R14: 0000000000000001 R15: ffff88813fda8270 [ 303.397931][ C1] ? kmsan_get_metadata+0xfb/0x160 [ 303.398101][ C1] kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 303.398274][ C1] __msan_metadata_ptr_for_load_8+0x24/0x40 [ 303.398444][ C1] css_rstat_updated+0x138/0x520 [ 303.398612][ C1] count_memcg_events+0x152/0x630 [ 303.398799][ C1] handle_mm_fault+0x288d/0xdf70 [ 303.398974][ C1] ? kmsan_get_metadata+0xfb/0x160 [ 303.399179][ C1] ? lock_vma_under_rcu+0x340/0x400 [ 303.399402][ C1] do_user_addr_fault+0x177d/0x2560 [ 303.399557][ C1] ? kmsan_get_metadata+0xfb/0x160 [ 303.399742][ C1] ? kmsan_get_metadata+0xfb/0x160 [ 303.399954][ C1] exc_page_fault+0x68/0xb0 [ 303.400118][ C1] asm_exc_page_fault+0x2b/0x30 [ 303.400261][ C1] RIP: 0033:0x7f9c10eb72dd [ 303.400369][ C1] Code: 41 fe 48 83 c0 02 80 3d 60 1e 14 00 00 48 8b 14 c3 0f 84 a6 00 00 00 48 39 d6 0f 84 db 00 00 00 4c 89 c7 48 c1 ef 0c 48 31 d7 <48> 89 7e 10 48 89 34 c3 48 85 d2 74 15 83 e5 01 74 10 48 8b 42 08 [ 303.400492][ C1] RSP: 002b:00007ffd197577b0 EFLAGS: 00010206 [ 303.400608][ C1] RAX: 0000000000000002 RBX: 00007f9c10ff1ac0 RCX: 0000000000000000 [ 303.400698][ C1] RDX: 0000559f53dd3470 RSI: 0000559f53dd5ce0 RDI: 0000559a0a2809a5 [ 303.400804][ C1] RBP: 0000000000000000 R08: 0000559f53dd5cf0 R09: 0000000000000002 [ 303.400893][ C1] R10: 0000559f273675e0 R11: 00000000ffffffff R12: 0000559f53dd5d00 [ 303.400987][ C1] R13: 0000000000000002 R14: 0000000000000000 R15: 00007f9c10ff1ac0 [ 303.401108][ C1] [ 303.401166][ C1] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 303.556166][ T5864] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in cold state [ 303.561995][ C1] CPU: 1 UID: 0 PID: 6620 Comm: udevd Not tainted syzkaller #0 PREEMPT(none) [ 303.562139][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 303.562236][ C1] Call Trace: [ 303.562296][ C1] [ 303.562356][ C1] __dump_stack+0x26/0x30 [ 303.562563][ C1] dump_stack_lvl+0x1df/0x270 [ 303.562775][ C1] dump_stack+0x1e/0x25 [ 303.562967][ C1] f2fs_handle_critical_error+0xa6f/0xc20 [ 303.563241][ C1] f2fs_stop_checkpoint+0x65/0x80 [ 303.563467][ C1] f2fs_write_end_io+0x101c/0x1bc0 [ 303.563748][ C1] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 303.563979][ C1] bio_endio+0xe24/0xf80 [ 303.564151][ C1] blk_update_request+0xf4c/0x1a90 [ 303.564427][ C1] blk_mq_end_request+0x50/0xb0 [ 303.564657][ C1] lo_complete_rq+0x188/0x3a0 [ 303.564848][ C1] ? __pfx_lo_complete_rq+0x10/0x10 [ 303.565035][ C1] blk_done_softirq+0x10f/0x1f0 [ 303.565241][ C1] ? __pfx_blk_done_softirq+0x10/0x10 [ 303.565444][ C1] handle_softirqs+0x166/0x6e0 [ 303.565642][ C1] __irq_exit_rcu+0x66/0x180 [ 303.565814][ C1] irq_exit_rcu+0x12/0x20 [ 303.565972][ C1] sysvec_apic_timer_interrupt+0x84/0x90 [ 303.566207][ C1] [ 303.566269][ C1] [ 303.566331][ C1] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 303.566550][ C1] RIP: 0010:virt_to_page_or_null+0x27/0x180 [ 303.566761][ C1] Code: 90 90 90 48 89 f8 48 2d 00 00 00 80 73 29 48 89 fa 48 2b 15 d3 99 9a 0f 48 39 c2 77 12 0f b6 0d 60 45 38 10 48 89 d6 48 d3 ee <48> 85 f6 74 1a 31 c0 e9 4d 1f 49 0e cc 48 3d ff ff ff 1f 77 f0 48 [ 303.566907][ C1] RSP: 0000:ffff88805e4efa90 EFLAGS: 00000246 [ 303.567043][ C1] RAX: ffff8881bfda8270 RBX: ffff88813fda8270 RCX: 000000000000002e [ 303.567157][ C1] RDX: 000000013fda8270 RSI: 0000000000000000 RDI: ffff88813fda8270 [ 303.567265][ C1] RBP: ffff88805e4efab0 R08: ffffea000000000f R09: 0000000000000000 [ 303.567378][ C1] R10: ffff888237c07b38 R11: 0000000000000000 R12: 0000000000000000 [ 303.567482][ C1] R13: ffffd0ffffd1add8 R14: 0000000000000001 R15: ffff88813fda8270 [ 303.567633][ C1] ? kmsan_get_metadata+0xfb/0x160 [ 303.567831][ C1] kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 303.568038][ C1] __msan_metadata_ptr_for_load_8+0x24/0x40 [ 303.568229][ C1] css_rstat_updated+0x138/0x520 [ 303.568416][ C1] count_memcg_events+0x152/0x630 [ 303.568623][ C1] handle_mm_fault+0x288d/0xdf70 [ 303.568827][ C1] ? kmsan_get_metadata+0xfb/0x160 [ 303.569058][ C1] ? lock_vma_under_rcu+0x340/0x400 [ 303.569310][ C1] do_user_addr_fault+0x177d/0x2560 [ 303.569481][ C1] ? kmsan_get_metadata+0xfb/0x160 [ 303.569667][ C1] ? kmsan_get_metadata+0xfb/0x160 [ 303.569897][ C1] exc_page_fault+0x68/0xb0 [ 303.570078][ C1] asm_exc_page_fault+0x2b/0x30 [ 303.570209][ C1] RIP: 0033:0x7f9c10eb72dd [ 303.570309][ C1] Code: 41 fe 48 83 c0 02 80 3d 60 1e 14 00 00 48 8b 14 c3 0f 84 a6 00 00 00 48 39 d6 0f 84 db 00 00 00 4c 89 c7 48 c1 ef 0c 48 31 d7 <48> 89 7e 10 48 89 34 c3 48 85 d2 74 15 83 e5 01 74 10 48 8b 42 08 [ 303.570428][ C1] RSP: 002b:00007ffd197577b0 EFLAGS: 00010206 [ 303.570539][ C1] RAX: 0000000000000002 RBX: 00007f9c10ff1ac0 RCX: 0000000000000000 [ 303.570629][ C1] RDX: 0000559f53dd3470 RSI: 0000559f53dd5ce0 RDI: 0000559a0a2809a5 [ 303.570742][ C1] RBP: 0000000000000000 R08: 0000559f53dd5cf0 R09: 0000000000000002 [ 303.570856][ C1] R10: 0000559f273675e0 R11: 00000000ffffffff R12: 0000559f53dd5d00 [ 303.570967][ C1] R13: 0000000000000002 R14: 0000000000000000 R15: 00007f9c10ff1ac0 [ 303.571105][ C1] [ 303.571308][ C1] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 303.894277][ T6618] loop2: partition table beyond EOD, [ 303.895931][ C1] CPU: 1 UID: 0 PID: 6620 Comm: udevd Not tainted syzkaller #0 PREEMPT(none) [ 303.896128][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 303.896222][ C1] Call Trace: [ 303.896282][ C1] [ 303.896340][ C1] __dump_stack+0x26/0x30 [ 303.896558][ C1] dump_stack_lvl+0x1df/0x270 [ 303.896769][ C1] dump_stack+0x1e/0x25 [ 303.896955][ C1] f2fs_handle_critical_error+0xa6f/0xc20 [ 303.897227][ C1] f2fs_stop_checkpoint+0x65/0x80 [ 303.897468][ C1] f2fs_write_end_io+0x101c/0x1bc0 [ 303.897748][ C1] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 303.897977][ C1] bio_endio+0xe24/0xf80 [ 303.898147][ C1] blk_update_request+0xf4c/0x1a90 [ 303.898446][ C1] blk_mq_end_request+0x50/0xb0 [ 303.898674][ C1] lo_complete_rq+0x188/0x3a0 [ 303.898865][ C1] ? __pfx_lo_complete_rq+0x10/0x10 [ 303.899049][ C1] blk_done_softirq+0x10f/0x1f0 [ 303.899255][ C1] ? __pfx_blk_done_softirq+0x10/0x10 [ 303.899469][ C1] handle_softirqs+0x166/0x6e0 [ 303.899668][ C1] __irq_exit_rcu+0x66/0x180 [ 303.899833][ C1] irq_exit_rcu+0x12/0x20 [ 303.899989][ C1] sysvec_apic_timer_interrupt+0x84/0x90 [ 303.900188][ C1] [ 303.900244][ C1] [ 303.900305][ C1] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 303.900498][ C1] RIP: 0010:virt_to_page_or_null+0x27/0x180 [ 303.900708][ C1] Code: 90 90 90 48 89 f8 48 2d 00 00 00 80 73 29 48 89 fa 48 2b 15 d3 99 9a 0f 48 39 c2 77 12 0f b6 0d 60 45 38 10 48 89 d6 48 d3 ee <48> 85 f6 74 1a 31 c0 e9 4d 1f 49 0e cc 48 3d ff ff ff 1f 77 f0 48 [ 303.900845][ C1] RSP: 0000:ffff88805e4efa90 EFLAGS: 00000246 [ 303.900980][ C1] RAX: ffff8881bfda8270 RBX: ffff88813fda8270 RCX: 000000000000002e [ 303.901093][ C1] RDX: 000000013fda8270 RSI: 0000000000000000 RDI: ffff88813fda8270 [ 303.901200][ C1] RBP: ffff88805e4efab0 R08: ffffea000000000f R09: 0000000000000000 [ 303.901313][ C1] R10: ffff888237c07b38 R11: 0000000000000000 R12: 0000000000000000 [ 303.901416][ C1] R13: ffffd0ffffd1add8 R14: 0000000000000001 R15: ffff88813fda8270 [ 303.901590][ C1] ? kmsan_get_metadata+0xfb/0x160 [ 303.901778][ C1] kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 303.901974][ C1] __msan_metadata_ptr_for_load_8+0x24/0x40 [ 303.902159][ C1] css_rstat_updated+0x138/0x520 [ 303.902346][ C1] count_memcg_events+0x152/0x630 [ 303.902575][ C1] handle_mm_fault+0x288d/0xdf70 [ 303.902772][ C1] ? kmsan_get_metadata+0xfb/0x160 [ 303.903015][ C1] ? lock_vma_under_rcu+0x340/0x400 [ 303.903261][ C1] do_user_addr_fault+0x177d/0x2560 [ 303.903582][ C1] ? kmsan_get_metadata+0xfb/0x160 [ 303.903773][ C1] ? kmsan_get_metadata+0xfb/0x160 [ 303.903996][ C1] exc_page_fault+0x68/0xb0 [ 303.904189][ C1] asm_exc_page_fault+0x2b/0x30 [ 303.904360][ C1] RIP: 0033:0x7f9c10eb72dd [ 303.904491][ C1] Code: 41 fe 48 83 c0 02 80 3d 60 1e 14 00 00 48 8b 14 c3 0f 84 a6 00 00 00 48 39 d6 0f 84 db 00 00 00 4c 89 c7 48 c1 ef 0c 48 31 d7 <48> 89 7e 10 48 89 34 c3 48 85 d2 74 15 83 e5 01 74 10 48 8b 42 08 [ 303.904637][ C1] RSP: 002b:00007ffd197577b0 EFLAGS: 00010206 [ 303.904762][ C1] RAX: 0000000000000002 RBX: 00007f9c10ff1ac0 RCX: 0000000000000000 [ 303.904864][ C1] RDX: 0000559f53dd3470 RSI: 0000559f53dd5ce0 RDI: 0000559a0a2809a5 [ 303.904978][ C1] RBP: 0000000000000000 R08: 0000559f53dd5cf0 R09: 0000000000000002 [ 303.905080][ C1] R10: 0000559f273675e0 R11: 00000000ffffffff R12: 0000559f53dd5d00 [ 303.905191][ C1] R13: 0000000000000002 R14: 0000000000000000 R15: 00007f9c10ff1ac0 [ 303.905329][ C1] [ 303.905644][ C1] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 303.916006][ T6618] truncated [ 303.921750][ C1] CPU: 1 UID: 0 PID: 6620 Comm: udevd Not tainted syzkaller #0 PREEMPT(none) [ 303.921919][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 303.922014][ C1] Call Trace: [ 303.922076][ C1] [ 303.922136][ C1] __dump_stack+0x26/0x30 [ 303.922341][ C1] dump_stack_lvl+0x1df/0x270 [ 303.922567][ C1] dump_stack+0x1e/0x25 [ 303.922751][ C1] f2fs_handle_critical_error+0xa6f/0xc20 [ 303.923031][ C1] f2fs_stop_checkpoint+0x65/0x80 [ 303.923264][ C1] f2fs_write_end_io+0x101c/0x1bc0 [ 303.923556][ C1] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 303.923782][ C1] bio_endio+0xe24/0xf80 [ 303.923955][ C1] blk_update_request+0xf4c/0x1a90 [ 303.924235][ C1] blk_mq_end_request+0x50/0xb0 [ 303.924485][ C1] lo_complete_rq+0x188/0x3a0 [ 303.924676][ C1] ? __pfx_lo_complete_rq+0x10/0x10 [ 303.924871][ C1] blk_done_softirq+0x10f/0x1f0 [ 303.925079][ C1] ? __pfx_blk_done_softirq+0x10/0x10 [ 303.925281][ C1] handle_softirqs+0x166/0x6e0 [ 303.925491][ C1] __irq_exit_rcu+0x66/0x180 [ 303.925655][ C1] irq_exit_rcu+0x12/0x20 [ 303.925809][ C1] sysvec_apic_timer_interrupt+0x84/0x90 [ 303.926005][ C1] [ 303.926063][ C1] [ 303.926126][ C1] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 303.926312][ C1] RIP: 0010:virt_to_page_or_null+0x27/0x180 [ 303.926549][ C1] Code: 90 90 90 48 89 f8 48 2d 00 00 00 80 73 29 48 89 fa 48 2b 15 d3 99 9a 0f 48 39 c2 77 12 0f b6 0d 60 45 38 10 48 89 d6 48 d3 ee <48> 85 f6 74 1a 31 c0 e9 4d 1f 49 0e cc 48 3d ff ff ff 1f 77 f0 48 [ 303.926687][ C1] RSP: 0000:ffff88805e4efa90 EFLAGS: 00000246 [ 303.926823][ C1] RAX: ffff8881bfda8270 RBX: ffff88813fda8270 RCX: 000000000000002e [ 303.926937][ C1] RDX: 000000013fda8270 RSI: 0000000000000000 RDI: ffff88813fda8270 [ 303.927044][ C1] RBP: ffff88805e4efab0 R08: ffffea000000000f R09: 0000000000000000 [ 303.927157][ C1] R10: ffff888237c07b38 R11: 0000000000000000 R12: 0000000000000000 [ 303.927270][ C1] R13: ffffd0ffffd1add8 R14: 0000000000000001 R15: ffff88813fda8270 [ 303.927438][ C1] ? kmsan_get_metadata+0xfb/0x160 [ 303.927628][ C1] kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 303.927824][ C1] __msan_metadata_ptr_for_load_8+0x24/0x40 [ 303.928010][ C1] css_rstat_updated+0x138/0x520 [ 303.928198][ C1] count_memcg_events+0x152/0x630 [ 303.928407][ C1] handle_mm_fault+0x288d/0xdf70 [ 303.928614][ C1] ? kmsan_get_metadata+0xfb/0x160 [ 303.928849][ C1] ? lock_vma_under_rcu+0x340/0x400 [ 303.929111][ C1] do_user_addr_fault+0x177d/0x2560 [ 303.929290][ C1] ? kmsan_get_metadata+0xfb/0x160 [ 303.929487][ C1] ? kmsan_get_metadata+0xfb/0x160 [ 303.929711][ C1] exc_page_fault+0x68/0xb0 [ 303.929860][ C1] asm_exc_page_fault+0x2b/0x30 [ 303.930013][ C1] RIP: 0033:0x7f9c10eb72dd [ 303.930132][ C1] Code: 41 fe 48 83 c0 02 80 3d 60 1e 14 00 00 48 8b 14 c3 0f 84 a6 00 00 00 48 39 d6 0f 84 db 00 00 00 4c 89 c7 48 c1 ef 0c 48 31 d7 <48> 89 7e 10 48 89 34 c3 48 85 d2 74 15 83 e5 01 74 10 48 8b 42 08 [ 303.930267][ C1] RSP: 002b:00007ffd197577b0 EFLAGS: 00010206 [ 303.930400][ C1] RAX: 0000000000000002 RBX: 00007f9c10ff1ac0 RCX: 0000000000000000 [ 303.930510][ C1] RDX: 0000559f53dd3470 RSI: 0000559f53dd5ce0 RDI: 0000559a0a2809a5 [ 303.930624][ C1] RBP: 0000000000000000 R08: 0000559f53dd5cf0 R09: 0000000000000002 [ 303.930725][ C1] R10: 0000559f273675e0 R11: 00000000ffffffff R12: 0000559f53dd5d00 [ 303.930836][ C1] R13: 0000000000000002 R14: 0000000000000000 R15: 00007f9c10ff1ac0 [ 303.930973][ C1] [ 303.931171][ C1] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 303.938234][ T6618] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 303.946327][ C1] CPU: 1 UID: 0 PID: 6620 Comm: udevd Not tainted syzkaller #0 PREEMPT(none) [ 303.946505][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 303.946611][ C1] Call Trace: [ 303.946674][ C1] [ 303.946735][ C1] __dump_stack+0x26/0x30 [ 303.946941][ C1] dump_stack_lvl+0x1df/0x270 [ 303.947152][ C1] dump_stack+0x1e/0x25 [ 303.947335][ C1] f2fs_handle_critical_error+0xa6f/0xc20 [ 303.947610][ C1] f2fs_stop_checkpoint+0x65/0x80 [ 303.947837][ C1] f2fs_write_end_io+0x101c/0x1bc0 [ 303.948123][ C1] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 303.948350][ C1] bio_endio+0xe24/0xf80 [ 303.948529][ C1] blk_update_request+0xf4c/0x1a90 [ 303.948807][ C1] blk_mq_end_request+0x50/0xb0 [ 303.949039][ C1] lo_complete_rq+0x188/0x3a0 [ 303.949223][ C1] ? __pfx_lo_complete_rq+0x10/0x10 [ 303.949412][ C1] blk_done_softirq+0x10f/0x1f0 [ 303.949625][ C1] ? __pfx_blk_done_softirq+0x10/0x10 [ 303.949828][ C1] handle_softirqs+0x166/0x6e0 [ 303.950026][ C1] __irq_exit_rcu+0x66/0x180 [ 303.950190][ C1] irq_exit_rcu+0x12/0x20 [ 303.950348][ C1] sysvec_apic_timer_interrupt+0x84/0x90 [ 303.950548][ C1] [ 303.950604][ C1] [ 303.950668][ C1] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 303.950856][ C1] RIP: 0010:virt_to_page_or_null+0x27/0x180 [ 303.951068][ C1] Code: 90 90 90 48 89 f8 48 2d 00 00 00 80 73 29 48 89 fa 48 2b 15 d3 99 9a 0f 48 39 c2 77 12 0f b6 0d 60 45 38 10 48 89 d6 48 d3 ee <48> 85 f6 74 1a 31 c0 e9 4d 1f 49 0e cc 48 3d ff ff ff 1f 77 f0 48 [ 303.951205][ C1] RSP: 0000:ffff88805e4efa90 EFLAGS: 00000246 [ 303.951341][ C1] RAX: ffff8881bfda8270 RBX: ffff88813fda8270 RCX: 000000000000002e [ 303.951452][ C1] RDX: 000000013fda8270 RSI: 0000000000000000 RDI: ffff88813fda8270 [ 303.951572][ C1] RBP: ffff88805e4efab0 R08: ffffea000000000f R09: 0000000000000000 [ 303.951685][ C1] R10: ffff888237c07b38 R11: 0000000000000000 R12: 0000000000000000 [ 303.951787][ C1] R13: ffffd0ffffd1add8 R14: 0000000000000001 R15: ffff88813fda8270 [ 303.951941][ C1] ? kmsan_get_metadata+0xfb/0x160 [ 303.952135][ C1] kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 303.952333][ C1] __msan_metadata_ptr_for_load_8+0x24/0x40 [ 303.952530][ C1] css_rstat_updated+0x138/0x520 [ 303.952716][ C1] count_memcg_events+0x152/0x630 [ 303.952921][ C1] handle_mm_fault+0x288d/0xdf70 [ 303.953120][ C1] ? kmsan_get_metadata+0xfb/0x160 [ 303.953355][ C1] ? lock_vma_under_rcu+0x340/0x400 [ 303.953619][ C1] do_user_addr_fault+0x177d/0x2560 [ 303.953791][ C1] ? kmsan_get_metadata+0xfb/0x160 [ 303.953980][ C1] ? kmsan_get_metadata+0xfb/0x160 [ 303.954206][ C1] exc_page_fault+0x68/0xb0 [ 303.954381][ C1] asm_exc_page_fault+0x2b/0x30 [ 303.954520][ C1] RIP: 0033:0x7f9c10eb72dd [ 303.954624][ C1] Code: 41 fe 48 83 c0 02 80 3d 60 1e 14 00 00 48 8b 14 c3 0f 84 a6 00 00 00 48 39 d6 0f 84 db 00 00 00 4c 89 c7 48 c1 ef 0c 48 31 d7 <48> 89 7e 10 48 89 34 c3 48 85 d2 74 15 83 e5 01 74 10 48 8b 42 08 [ 303.954746][ C1] RSP: 002b:00007ffd197577b0 EFLAGS: 00010206 [ 303.954857][ C1] RAX: 0000000000000002 RBX: 00007f9c10ff1ac0 RCX: 0000000000000000 [ 303.954947][ C1] RDX: 0000559f53dd3470 RSI: 0000559f53dd5ce0 RDI: 0000559a0a2809a5 [ 303.955048][ C1] RBP: 0000000000000000 R08: 0000559f53dd5cf0 R09: 0000000000000002 [ 303.955138][ C1] R10: 0000559f273675e0 R11: 00000000ffffffff R12: 0000559f53dd5d00 [ 303.955238][ C1] R13: 0000000000000002 R14: 0000000000000000 R15: 00007f9c10ff1ac0 [ 303.955360][ C1] [ 303.955541][ C1] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 303.960391][ T6063] F2FS-fs (loop5): do_checkpoint failed err:-5, stop checkpoint [ 304.026153][ T6604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.268633][ T6604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.285277][ T5864] usb 3-1: Direct firmware load for dvb-usb-ec168.fw failed with error -2 [ 305.295099][ T5864] usb 3-1: Falling back to sysfs fallback for: dvb-usb-ec168.fw [ 306.093438][ T6636] qrtr: Invalid version 4 [ 307.207255][ T6653] netlink: 8 bytes leftover after parsing attributes in process `syz.3.142'. [ 307.377179][ T6649] loop2: detected capacity change from 0 to 1764 [ 307.688878][ T6649] netlink: 2200 bytes leftover after parsing attributes in process `syz.2.140'. [ 307.880166][ T24] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 307.888098][ T24] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 307.896718][ T24] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 308.094743][ T24] hid-generic 0003:0004:0000.0001: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 308.207375][ T6663] loop4: detected capacity change from 0 to 128 [ 308.994116][ T6672] netlink: 8 bytes leftover after parsing attributes in process `syz.2.148'. [ 309.286761][ T6677] bond0: option mode: unable to set because the bond device has slaves [ 309.468587][ T6677] binder_alloc: 6674: binder_alloc_buf, no vma [ 310.267962][ T6685] loop2: detected capacity change from 0 to 1024 [ 310.301303][ T6678] fido_id[6678]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 310.356021][ T6685] EXT4-fs: Ignoring removed orlov option [ 310.364679][ T6685] EXT4-fs: Ignoring removed mblk_io_submit option [ 310.524736][ T6685] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 310.727717][ T6685] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 310.773058][ T24] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 311.125780][ T24] usb 4-1: config 241 has an invalid descriptor of length 59, skipping remainder of the config [ 311.136954][ T24] usb 4-1: config 241 has 0 interfaces, different from the descriptor's value: 1 [ 311.146686][ T24] usb 4-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 311.151661][ T6688] loop1: detected capacity change from 0 to 32768 [ 311.156418][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.505529][ T6685] netlink: 8 bytes leftover after parsing attributes in process `syz.2.152'. [ 311.718321][ T6688] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 311.718482][ T6688] allowing incompatible features above 0.0: (unknown version) [ 311.718563][ T6688] features: [ 311.756425][ T6688] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0 [ 311.764987][ T6688] bcachefs (loop1): initializing new filesystem [ 311.786782][ T6688] bcachefs (loop1): going read-write [ 311.858171][ T6688] bcachefs (loop1): marking superblocks [ 311.917055][ T6688] bcachefs (loop1): initializing freespace [ 311.952753][ T6688] bcachefs (loop1): done initializing freespace [ 311.974617][ T6688] bcachefs (loop1): reading snapshots table [ 311.981015][ T6688] bcachefs (loop1): reading snapshots done [ 312.205862][ T5818] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.224682][ T6688] bcachefs (loop1): done starting filesystem [ 312.294389][ T6693] af_packet: tpacket_rcv: packet too big, clamped from 42 to 4294967286. macoff=82 [ 312.399458][ T6705] loop4: detected capacity change from 0 to 1764 [ 312.517533][ T6688] syz.1.153 (6688) used greatest stack depth: 1200 bytes left [ 312.611134][ T5808] bcachefs (loop1): shutting down [ 312.616825][ T5808] bcachefs (loop1): going read-only [ 312.642259][ T5808] bcachefs (loop1): finished waiting for writes to stop [ 312.718673][ T6705] netlink: 2200 bytes leftover after parsing attributes in process `syz.4.158'. [ 312.754684][ T5808] bcachefs (loop1): flushing journal and stopping allocators, journal seq 3 [ 313.056364][ T6705] netlink: 12 bytes leftover after parsing attributes in process `syz.4.158'. [ 313.059940][ T6693] loop3: detected capacity change from 0 to 64 [ 313.362799][ T5808] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 3 [ 313.438312][ T6693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.449090][ T6693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.520306][ T5808] bcachefs (loop1): clean shutdown complete, journal seq 4 [ 313.530362][ T5808] bcachefs (loop1): marking filesystem clean [ 313.601384][ T6722] loop2: detected capacity change from 0 to 7 [ 313.758276][ T6722] Dev loop2: unable to read RDB block 7 [ 313.764969][ T6722] loop2: unable to read partition table [ 313.820337][ T5808] bcachefs (loop1): shutdown complete [ 313.854332][ T6722] loop2: partition table beyond EOD, truncated [ 313.861011][ T6722] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 313.918839][ T24] usb 4-1: string descriptor 0 read error: -71 [ 313.969956][ T24] usb 4-1: USB disconnect, device number 3 [ 314.222370][ T6726] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 314.445263][ T6725] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 314.621110][ T6725] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 314.695489][ T6728] netlink: 8 bytes leftover after parsing attributes in process `syz.4.162'. [ 315.404215][ T6739] bond0: option mode: unable to set because the bond device has slaves [ 315.438554][ T24] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 315.535302][ T6739] binder_alloc: 6737: binder_alloc_buf, no vma [ 315.669410][ T24] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 315.732220][ T24] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 315.741821][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 315.750752][ T24] usb 4-1: SerialNumber: syz [ 316.332792][ T6750] loop8: detected capacity change from 0 to 8 [ 316.384168][ T6736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.395299][ T6736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.466622][ T6750] Dev loop8: unable to read RDB block 8 [ 316.472912][ T6750] loop8: unable to read partition table [ 316.525635][ T6750] loop8: partition table beyond EOD, truncated [ 316.532273][ T6750] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 316.753819][ T24] cdc_ether 4-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.3-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 317.134446][ T6758] loop2: detected capacity change from 0 to 128 [ 317.145156][ T6758] msdos: Bad value for 'umask' [ 317.173962][ T5871] usb 4-1: USB disconnect, device number 4 [ 317.183222][ T5871] cdc_ether 4-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.3-1, CDC Ethernet Device [ 317.314889][ T24] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 317.577371][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 317.589428][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 317.603040][ T24] usb 6-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 317.612343][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.826086][ T24] usb 6-1: config 0 descriptor?? [ 317.834148][ T6755] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 318.125993][ T6755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.137118][ T6755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.216424][ T24] usbhid 6-1:0.0: can't add hid device: -71 [ 318.223503][ T24] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 318.323223][ T24] usb 6-1: USB disconnect, device number 2 [ 318.420165][ T6767] loop2: detected capacity change from 0 to 7 [ 318.524208][ T6767] Dev loop2: unable to read RDB block 7 [ 318.530124][ T6767] loop2: unable to read partition table [ 318.609626][ T6767] loop2: partition table beyond EOD, truncated [ 318.617406][ T6767] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 318.678685][ T6769] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 318.773426][ T6769] qrtr: Invalid version 8 [ 318.813366][ T24] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 318.973007][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 319.021867][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 129, changing to 11 [ 319.033708][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 319.048252][ T24] usb 6-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 319.058596][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.067928][ T6773] netlink: 8 bytes leftover after parsing attributes in process `syz.2.175'. [ 319.209078][ T24] usb 6-1: config 0 descriptor?? [ 319.287601][ T24] hub 6-1:0.0: bad descriptor, ignoring hub [ 319.295059][ T24] hub 6-1:0.0: probe with driver hub failed with error -5 [ 319.470103][ T24] usbhid 6-1:0.0: can't add hid device: -32 [ 319.477009][ T24] usbhid 6-1:0.0: probe with driver usbhid failed with error -32 [ 319.847322][ T6785] bond0: option mode: unable to set because the bond device has slaves [ 319.959783][ T6779] loop4: detected capacity change from 0 to 47 [ 320.005164][ T6779] minix: Unknown parameter '8' [ 320.613733][ T5932] usb 6-1: USB disconnect, device number 3 [ 320.840405][ T6798] loop5: detected capacity change from 0 to 3 [ 321.022259][ T6798] squashfs: Unknown parameter 'ª' [ 321.047427][ T6799] syzkaller0: entered promiscuous mode [ 321.055399][ T6799] syzkaller0: entered allmulticast mode [ 321.934296][ T5932] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 322.012756][ T6814] loop2: detected capacity change from 0 to 7 [ 322.023616][ T6814] Dev loop2: unable to read RDB block 7 [ 322.029500][ T6814] loop2: unable to read partition table [ 322.072596][ T6814] loop2: partition table beyond EOD, truncated [ 322.081915][ T6814] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 322.100959][ T6813] loop5: detected capacity change from 0 to 1024 [ 322.187853][ T5932] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 322.257006][ T6817] loop1: detected capacity change from 0 to 8 [ 322.291587][ T5932] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 322.301141][ T5932] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 322.309509][ T5932] usb 4-1: SerialNumber: syz [ 322.452024][ T6817] unable to read fragment index table [ 322.608879][ T6817] loop1: detected capacity change from 0 to 16 [ 322.714505][ T6817] erofs (device loop1): mounted with root inode @ nid 36. [ 322.982845][ T6810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.994501][ T6810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 323.380243][ T5932] cdc_ether 4-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.3-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 323.717048][ T6831] bond0: option mode: unable to set because the bond device has slaves [ 323.767846][ T5932] usb 4-1: USB disconnect, device number 5 [ 323.777464][ T5932] cdc_ether 4-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.3-1, CDC Ethernet Device [ 323.901074][ T6834] netlink: 8 bytes leftover after parsing attributes in process `syz.4.193'. [ 325.181550][ T6848] loop5: detected capacity change from 0 to 1024 [ 325.416414][ T6848] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 325.595302][ T6848] EXT4-fs error (device loop5): __ext4_new_inode:1073: comm syz.5.197: reserved inode found cleared - inode=2 [ 325.627629][ T6858] pim6reg: entered allmulticast mode [ 326.155112][ T24] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 326.405343][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 326.508262][ T24] usb 4-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 326.518014][ T24] usb 4-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 326.526669][ T24] usb 4-1: Product: syz [ 326.531041][ T24] usb 4-1: Manufacturer: syz [ 326.536037][ T24] usb 4-1: SerialNumber: syz [ 326.642276][ T6864] loop1: detected capacity change from 0 to 1024 [ 326.749808][ T6864] EXT4-fs: Ignoring removed bh option [ 326.756477][ T6864] EXT4-fs: inline encryption not supported [ 326.854604][ T24] usb 4-1: config 0 descriptor?? [ 326.943344][ T6864] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 326.978094][ T24] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 327.208604][ T6864] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 327.358575][ T6866] netlink: 'syz.4.201': attribute type 64 has an invalid length. [ 327.367071][ T6866] netlink: 164 bytes leftover after parsing attributes in process `syz.4.201'. [ 327.415222][ T6864] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 2: comm syz.1.200: lblock 2 mapped to illegal pblock 2 (length 1) [ 327.499081][ T6864] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 327.511298][ T6864] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.200: lblock 0 mapped to illegal pblock 48 (length 1) [ 327.515153][ T24] gspca_zc3xx: reg_w_i err -71 [ 327.531510][ T24] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 327.605284][ T6864] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 327.616659][ T6864] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.200: Failed to acquire dquot type 0 [ 327.661083][ T6848] Driver unsupported XDP return value 0 on prog (id 23) dev N/A, expect packet loss! [ 327.708862][ T24] usb 4-1: USB disconnect, device number 6 [ 327.733918][ T6864] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 327.745574][ T6860] netlink: 20 bytes leftover after parsing attributes in process `syz.5.197'. [ 327.771612][ T6871] loop2: detected capacity change from 0 to 1024 [ 327.783713][ T6864] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.200: mark_inode_dirty error [ 327.839758][ T6864] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 327.850760][ T6864] EXT4-fs (loop1): 1 orphan inode deleted [ 327.858944][ T6864] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 327.888219][ T4155] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:19: lblock 1 mapped to illegal pblock 1 (length 1) [ 327.939546][ T4155] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 327.948640][ T4155] EXT4-fs error (device loop1): ext4_release_dquot:6973: comm kworker/u8:19: Failed to release dquot type 0 [ 327.994859][ T6063] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem [ 328.034186][ T6063] EXT4-fs error (device loop5): ext4_read_inline_dir:1476: inode #12: block 7: comm syz-executor: path /22/file1/file0: bad entry in directory: inode out of bounds - offset=24, inode=150994957, rec_len=16, size=80 fake=0 [ 328.077332][ T6063] EXT4-fs error (device loop5): ext4_read_inline_dir:1476: inode #12: block 7: comm syz-executor: path /22/file1/file0: bad entry in directory: inode out of bounds - offset=24, inode=150994957, rec_len=16, size=80 fake=0 [ 328.144263][ T6063] EXT4-fs error (device loop5): empty_inline_dir:1760: inode #12: block 7: comm syz-executor: bad entry in directory: inode out of bounds - offset=4, inode=150994957, rec_len=16, size=60 fake=0 [ 328.216377][ T6063] EXT4-fs warning (device loop5): empty_inline_dir:1767: bad inline directory (dir #12) - inode 150994957, rec_len 16, name_len 5inline size 60 [ 328.293996][ T6063] EXT4-fs error (device loop5): ext4_read_inline_dir:1476: inode #12: block 7: comm syz-executor: path /22/file1/file0: bad entry in directory: inode out of bounds - offset=24, inode=150994957, rec_len=16, size=80 fake=0 [ 328.351121][ T6864] EXT4-fs: Cannot change journaled quota options when quota turned on [ 328.418647][ T6063] EXT4-fs error (device loop5): ext4_read_inline_dir:1476: inode #12: block 7: comm syz-executor: path /22/file1/file0: bad entry in directory: inode out of bounds - offset=24, inode=150994957, rec_len=16, size=80 fake=0 [ 328.455652][ T6063] EXT4-fs error (device loop5): empty_inline_dir:1760: inode #12: block 7: comm syz-executor: bad entry in directory: inode out of bounds - offset=4, inode=150994957, rec_len=16, size=60 fake=0 [ 328.474048][ T6864] syz_tun: entered promiscuous mode [ 328.480349][ T6864] macsec1: entered allmulticast mode [ 328.486354][ T6864] syz_tun: entered allmulticast mode [ 328.522350][ T6063] EXT4-fs warning (device loop5): empty_inline_dir:1767: bad inline directory (dir #12) - inode 150994957, rec_len 16, name_len 5inline size 60 [ 328.586950][ T6063] EXT4-fs error (device loop5): ext4_read_inline_dir:1476: inode #12: block 7: comm syz-executor: path /22/file1/file0: bad entry in directory: inode out of bounds - offset=24, inode=150994957, rec_len=16, size=80 fake=0 [ 328.606218][ T6864] syz_tun: left allmulticast mode [ 328.614000][ T6864] syz_tun: left promiscuous mode [ 328.694099][ T6063] EXT4-fs error (device loop5): ext4_read_inline_dir:1476: inode #12: block 7: comm syz-executor: path /22/file1/file0: bad entry in directory: inode out of bounds - offset=24, inode=150994957, rec_len=16, size=80 fake=0 [ 328.808712][ T6063] EXT4-fs warning (device loop5): empty_inline_dir:1767: bad inline directory (dir #12) - inode 150994957, rec_len 16, name_len 5inline size 60 [ 328.841153][ T6883] syzkaller0: entered promiscuous mode [ 328.847389][ T6883] syzkaller0: entered allmulticast mode [ 328.948540][ T6063] EXT4-fs warning (device loop5): empty_inline_dir:1767: bad inline directory (dir #12) - inode 150994957, rec_len 16, name_len 5inline size 60 [ 328.971879][ T6063] EXT4-fs warning (device loop5): empty_inline_dir:1767: bad inline directory (dir #12) - inode 150994957, rec_len 16, name_len 5inline size 60 [ 329.005812][ T6063] EXT4-fs warning (device loop5): empty_inline_dir:1767: bad inline directory (dir #12) - inode 150994957, rec_len 16, name_len 5inline size 60 [ 329.082903][ T5814] Bluetooth: hci0: command 0x0406 tx timeout [ 329.090190][ T5814] Bluetooth: hci3: command 0x0406 tx timeout [ 329.098427][ T5814] Bluetooth: hci2: command 0x0406 tx timeout [ 329.174881][ T5808] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.187550][ T6063] EXT4-fs warning (device loop5): empty_inline_dir:1767: bad inline directory (dir #12) - inode 150994957, rec_len 16, name_len 5inline size 60 [ 329.251623][ T6063] EXT4-fs warning (device loop5): empty_inline_dir:1767: bad inline directory (dir #12) - inode 150994957, rec_len 16, name_len 5inline size 60 [ 329.273799][ T5808] EXT4-fs error (device loop1): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 329.308071][ T5808] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 329.331157][ T6063] EXT4-fs warning (device loop5): empty_inline_dir:1767: bad inline directory (dir #12) - inode 150994957, rec_len 16, name_len 5inline size 60 [ 329.356600][ T5808] EXT4-fs error (device loop1): ext4_quota_off:7221: inode #3: comm syz-executor: mark_inode_dirty error [ 329.431731][ T6063] EXT4-fs warning (device loop5): empty_inline_dir:1767: bad inline directory (dir #12) - inode 150994957, rec_len 16, name_len 5inline size 60 [ 330.249552][ T6902] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 330.605460][ T6063] EXT4-fs error: 127 callbacks suppressed [ 330.605560][ T6063] EXT4-fs error (device loop5): ext4_read_inline_dir:1476: inode #12: block 7: comm syz-executor: path /22/file1/file0: bad entry in directory: inode out of bounds - offset=24, inode=150994957, rec_len=16, size=80 fake=0 [ 330.749595][ T6063] EXT4-fs error (device loop5): ext4_read_inline_dir:1476: inode #12: block 7: comm syz-executor: path /22/file1/file0: bad entry in directory: inode out of bounds - offset=24, inode=150994957, rec_len=16, size=80 fake=0 [ 330.781864][ T6901] netlink: 28 bytes leftover after parsing attributes in process `syz.1.212'. [ 330.875148][ T6063] EXT4-fs error (device loop5): empty_inline_dir:1760: inode #12: block 7: comm syz-executor: bad entry in directory: inode out of bounds - offset=4, inode=150994957, rec_len=16, size=60 fake=0 [ 331.014685][ T6063] EXT4-fs error (device loop5): ext4_read_inline_dir:1476: inode #12: block 7: comm syz-executor: path /22/file1/file0: bad entry in directory: inode out of bounds - offset=24, inode=150994957, rec_len=16, size=80 fake=0 [ 331.166857][ T6898] loop4: detected capacity change from 0 to 32768 [ 331.218057][ T6063] EXT4-fs error (device loop5): ext4_read_inline_dir:1476: inode #12: block 7: comm syz-executor: path /22/file1/file0: bad entry in directory: inode out of bounds - offset=24, inode=150994957, rec_len=16, size=80 fake=0 [ 331.223678][ T24] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 331.287663][ T6063] EXT4-fs error (device loop5): empty_inline_dir:1760: inode #12: block 7: comm syz-executor: bad entry in directory: inode out of bounds - offset=4, inode=150994957, rec_len=16, size=60 fake=0 [ 331.289886][ T6898] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 331.369820][ T6063] EXT4-fs error (device loop5): ext4_read_inline_dir:1476: inode #12: block 7: comm syz-executor: path /22/file1/file0: bad entry in directory: inode out of bounds - offset=24, inode=150994957, rec_len=16, size=80 fake=0 [ 331.423489][ T6063] EXT4-fs error (device loop5): ext4_read_inline_dir:1476: inode #12: block 7: comm syz-executor: path /22/file1/file0: bad entry in directory: inode out of bounds - offset=24, inode=150994957, rec_len=16, size=80 fake=0 [ 331.451359][ T24] usb 2-1: not running at top speed; connect to a high speed hub [ 331.462040][ T6063] EXT4-fs error (device loop5): empty_inline_dir:1760: inode #12: block 7: comm syz-executor: bad entry in directory: inode out of bounds - offset=4, inode=150994957, rec_len=16, size=60 fake=0 [ 331.517792][ T24] usb 2-1: config 1 has an invalid interface number: 78 but max is 0 [ 331.526620][ T24] usb 2-1: config 1 has no interface number 0 [ 331.533460][ T24] usb 2-1: config 1 interface 78 has no altsetting 0 [ 331.550581][ T6063] EXT4-fs error (device loop5): ext4_read_inline_dir:1476: inode #12: block 7: comm syz-executor: path /22/file1/file0: bad entry in directory: inode out of bounds - offset=24, inode=150994957, rec_len=16, size=80 fake=0 [ 331.614067][ T24] usb 2-1: New USB device found, idVendor=11ba, idProduct=1001, bcdDevice=ec.57 [ 331.623832][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.627248][ T6898] XFS (loop4): Ending clean mount [ 331.632065][ T24] usb 2-1: Product: syz [ 331.632172][ T24] usb 2-1: Manufacturer: syz [ 331.649023][ T24] usb 2-1: SerialNumber: syz [ 331.684457][ T6898] XFS (loop4): Quotacheck needed: Please wait. [ 331.781884][ T6898] XFS (loop4): Quotacheck: Done. [ 332.554257][ T24] pvrusb2: Hardware description: OnAir USB2 Hybrid USB tuner [ 332.564445][ T24] usb 2-1: selecting invalid altsetting 0 [ 332.600834][ T2333] pvrusb2: control-write URB failure, status=-71 [ 332.607630][ T2333] pvrusb2: Device being rendered inoperable [ 332.614102][ T2333] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 332.625936][ T2333] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 332.733762][ T6916] loop3: detected capacity change from 0 to 32768 [ 332.735218][ T5817] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 332.756168][ T6916] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.214 (6916) [ 332.783693][ T24] usb 2-1: USB disconnect, device number 5 [ 332.860249][ T6916] BTRFS info (device loop3): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 332.871147][ T6916] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 333.146261][ T6921] loop2: detected capacity change from 0 to 1024 [ 333.161558][ T6916] BTRFS info (device loop3): enabling ssd optimizations [ 333.169525][ T6916] BTRFS info (device loop3): enabling free space tree [ 333.233393][ T30] audit: type=1800 audit(1755702469.703:49): pid=6916 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.214" name="memory.events" dev="loop3" ino=263 res=0 errno=0 [ 333.309204][ T6063] EXT4-fs warning: 66 callbacks suppressed [ 333.309288][ T6063] EXT4-fs warning (device loop5): empty_inline_dir:1767: bad inline directory (dir #12) - inode 150994957, rec_len 16, name_len 5inline size 60 [ 333.478308][ T6063] EXT4-fs warning (device loop5): empty_inline_dir:1767: bad inline directory (dir #12) - inode 150994957, rec_len 16, name_len 5inline size 60 [ 333.902198][ T6937] netlink: 8 bytes leftover after parsing attributes in process `syz.1.217'. [ 333.963117][ T6063] EXT4-fs warning (device loop5): empty_inline_dir:1767: bad inline directory (dir #12) - inode 150994957, rec_len 16, name_len 5inline size 60 [ 334.399556][ T6063] EXT4-fs warning (device loop5): empty_inline_dir:1767: bad inline directory (dir #12) - inode 150994957, rec_len 16, name_len 5inline size 60 [ 334.741331][ T6063] EXT4-fs warning (device loop5): empty_inline_dir:1767: bad inline directory (dir #12) - inode 150994957, rec_len 16, name_len 5inline size 60 [ 334.999230][ T6063] EXT4-fs warning (device loop5): empty_inline_dir:1767: bad inline directory (dir #12) - inode 150994957, rec_len 16, name_len 5inline size 60 [ 335.215781][ T6063] EXT4-fs warning (device loop5): empty_inline_dir:1767: bad inline directory (dir #12) - inode 150994957, rec_len 16, name_len 5inline size 60 [ 335.461301][ T6063] EXT4-fs warning (device loop5): empty_inline_dir:1767: bad inline directory (dir #12) - inode 150994957, rec_len 16, name_len 5inline size 60 [ 335.559011][ T6063] EXT4-fs warning (device loop5): empty_inline_dir:1767: bad inline directory (dir #12) - inode 150994957, rec_len 16, name_len 5inline size 60 [ 335.644182][ T5822] BTRFS info (device loop3): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 335.697023][ T6063] EXT4-fs error: 110 callbacks suppressed [ 335.697125][ T6063] EXT4-fs error (device loop5): ext4_read_inline_dir:1476: inode #12: block 7: comm syz-executor: path /22/file1/file0: bad entry in directory: inode out of bounds - offset=24, inode=150994957, rec_len=16, size=80 fake=0 [ 335.848355][ T6063] EXT4-fs error (device loop5): ext4_read_inline_dir:1476: inode #12: block 7: comm syz-executor: path /22/file1/file0: bad entry in directory: inode out of bounds - offset=24, inode=150994957, rec_len=16, size=80 fake=0 [ 335.951990][ T6944] loop2: detected capacity change from 0 to 2048 [ 335.979176][ T6063] EXT4-fs error (device loop5): empty_inline_dir:1760: inode #12: block 7: comm syz-executor: bad entry in directory: inode out of bounds - offset=4, inode=150994957, rec_len=16, size=60 fake=0 [ 336.106226][ T6063] EXT4-fs warning (device loop5): empty_inline_dir:1767: bad inline directory (dir #12) - inode 150994957, rec_len 16, name_len 5inline size 60 [ 336.165299][ T6063] EXT4-fs error (device loop5): ext4_read_inline_dir:1476: inode #12: block 7: comm syz-executor: path /22/file1/file0: bad entry in directory: inode out of bounds - offset=24, inode=150994957, rec_len=16, size=80 fake=0 [ 336.223048][ T6944] loop2: p1 < > p3 p4 [ 336.227390][ T6944] loop2: partition table partially beyond EOD, truncated [ 336.283120][ T6063] EXT4-fs error (device loop5): ext4_read_inline_dir:1476: inode #12: block 7: comm syz-executor: path /22/file1/file0: bad entry in directory: inode out of bounds - offset=24, inode=150994957, rec_len=16, size=80 fake=0 [ 336.340044][ T6944] loop2: p3 start 458752 is beyond EOD, truncated [ 336.346991][ T6944] loop2: p4 start 4294901760 is beyond EOD, truncated [ 336.395966][ T6063] EXT4-fs error (device loop5): empty_inline_dir:1760: inode #12: block 7: comm syz-executor: bad entry in directory: inode out of bounds - offset=4, inode=150994957, rec_len=16, size=60 fake=0 [ 336.463407][ T6947] syzkaller0: entered promiscuous mode [ 336.469255][ T6947] syzkaller0: entered allmulticast mode [ 336.492298][ T4155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.500652][ T4155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.505874][ T6063] EXT4-fs error (device loop5): ext4_read_inline_dir:1476: inode #12: block 7: comm syz-executor: path /22/file1/file0: bad entry in directory: inode out of bounds - offset=24, inode=150994957, rec_len=16, size=80 fake=0 [ 336.545999][ T6954] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.623613][ T6063] EXT4-fs error (device loop5): ext4_read_inline_dir:1476: inode #12: block 7: comm syz-executor: path /22/file1/file0: bad entry in directory: inode out of bounds - offset=24, inode=150994957, rec_len=16, size=80 fake=0 [ 336.712257][ T6063] EXT4-fs error (device loop5): empty_inline_dir:1760: inode #12: block 7: comm syz-executor: bad entry in directory: inode out of bounds - offset=4, inode=150994957, rec_len=16, size=60 fake=0 [ 336.776356][ T6063] EXT4-fs error (device loop5): ext4_read_inline_dir:1476: inode #12: block 7: comm syz-executor: path /22/file1/file0: bad entry in directory: inode out of bounds - offset=24, inode=150994957, rec_len=16, size=80 fake=0 [ 336.899156][ T6700] udevd[6700]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 337.697303][ T6959] loop3: detected capacity change from 0 to 2048 [ 337.930236][ T6959] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 337.995616][ T6873] syz_tun (unregistering): left promiscuous mode [ 338.053662][ T5932] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 338.084119][ T30] audit: type=1800 audit(1755702474.573:50): pid=6959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.224" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 338.222264][ T6873] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.303942][ T5932] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 338.308462][ T57] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.453158][ T5932] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 338.465027][ T5932] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 338.474128][ T5932] usb 5-1: SerialNumber: syz [ 338.579006][ T57] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.703907][ T6969] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 338.816777][ T57] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.887380][ T6958] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 160 with max blocks 320 with error 28 [ 338.900721][ T6958] EXT4-fs (loop3): This should not happen!! Data will be lost [ 338.900721][ T6958] [ 338.911012][ T6958] EXT4-fs (loop3): Total free blocks count 0 [ 338.917430][ T6958] EXT4-fs (loop3): Free/Dirty block details [ 338.923753][ T6958] EXT4-fs (loop3): free_blocks=2415919504 [ 338.929690][ T6958] EXT4-fs (loop3): dirty_blocks=320 [ 338.935355][ T6958] EXT4-fs (loop3): Block reservation details [ 338.941549][ T6958] EXT4-fs (loop3): i_reserved_data_blocks=20 [ 339.067528][ T6965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.080582][ T6965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.186050][ T57] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.432878][ T5822] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.450782][ T5932] cdc_ether 5-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.4-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 339.843727][ T57] bridge_slave_1: left allmulticast mode [ 339.849705][ T57] bridge_slave_1: left promiscuous mode [ 339.856983][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.959160][ T1676] usb 5-1: USB disconnect, device number 6 [ 339.978263][ T57] bridge_slave_0: left allmulticast mode [ 339.986578][ T57] bridge_slave_0: left promiscuous mode [ 339.993559][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.011144][ T1676] cdc_ether 5-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.4-1, CDC Ethernet Device [ 340.567373][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 340.601435][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 340.639473][ T57] bond0 (unregistering): Released all slaves [ 341.148411][ T57] batadv_slave_0: left promiscuous mode [ 341.199258][ T57] hsr_slave_0: left promiscuous mode [ 341.215828][ T57] hsr_slave_1: left promiscuous mode [ 341.228560][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 341.236476][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 341.248187][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 341.255981][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 341.299590][ T57] veth1_macvtap: left promiscuous mode [ 341.306021][ T57] veth0_macvtap: left promiscuous mode [ 341.311973][ T57] veth1_vlan: left promiscuous mode [ 341.318059][ T57] veth0_vlan: left promiscuous mode [ 342.073585][ T1676] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 342.301546][ T1676] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 342.365650][ T1676] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 342.375632][ T1676] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 342.384188][ T1676] usb 5-1: SerialNumber: syz [ 342.733676][ T49] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 342.743672][ T49] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 342.753675][ T49] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 342.770526][ T49] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 342.783855][ T49] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 342.806772][ T57] team0 (unregistering): Port device team_slave_1 removed [ 342.876917][ T57] team0 (unregistering): Port device team_slave_0 removed [ 343.454095][ T6991] netlink: 28 bytes leftover after parsing attributes in process `syz.2.235'. [ 343.463541][ T6991] netlink: 28 bytes leftover after parsing attributes in process `syz.2.235'. [ 343.689459][ T1676] cdc_ether 5-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.4-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 343.831845][ T1676] usb 5-1: USB disconnect, device number 7 [ 343.843290][ T1676] cdc_ether 5-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.4-1, CDC Ethernet Device [ 344.136975][ T7005] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 344.265511][ T6995] loop2: detected capacity change from 0 to 4096 [ 344.914778][ T49] Bluetooth: hci1: command tx timeout [ 344.988131][ T30] audit: type=1800 audit(1755702481.453:51): pid=6991 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.235" name="file1" dev="loop2" ino=33 res=0 errno=0 [ 345.107488][ T6990] chnl_net:caif_netlink_parms(): no params data found [ 345.600745][ T7023] netlink: 12 bytes leftover after parsing attributes in process `syz.4.240'. [ 345.610215][ T7023] netlink: 16 bytes leftover after parsing attributes in process `syz.4.240'. [ 345.850209][ T7026] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 345.943638][ T1676] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 346.027752][ T7024] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 346.192706][ T7024] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 346.207055][ T1676] usb 5-1: config 0 has an invalid interface number: 199 but max is 1 [ 346.215852][ T1676] usb 5-1: config 0 has no interface number 1 [ 346.222243][ T1676] usb 5-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 346.232833][ T1676] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 346.255428][ T1676] usb 5-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 346.265027][ T1676] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 346.273579][ T1676] usb 5-1: SerialNumber: syz [ 346.326085][ T1676] usb 5-1: config 0 descriptor?? [ 346.416239][ T1676] usb 5-1: Found UVC 0.00 device (0002:0000) [ 346.424437][ T1676] usb 5-1: No valid video chain found. [ 346.698735][ T6990] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.708847][ T6990] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.716852][ T6990] bridge_slave_0: entered allmulticast mode [ 346.726706][ T6990] bridge_slave_0: entered promiscuous mode [ 346.759826][ T6990] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.767986][ T6990] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.776386][ T6990] bridge_slave_1: entered allmulticast mode [ 346.786493][ T6990] bridge_slave_1: entered promiscuous mode [ 346.995231][ T49] Bluetooth: hci1: command tx timeout [ 347.305513][ T6990] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 347.381047][ T6990] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 347.628120][ T7046] netlink: 'syz.2.246': attribute type 3 has an invalid length. [ 347.636361][ T7046] netlink: 8 bytes leftover after parsing attributes in process `syz.2.246'. [ 347.732328][ T6990] team0: Port device team_slave_0 added [ 347.768151][ T6990] team0: Port device team_slave_1 added [ 348.095546][ T6990] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 348.104505][ T6990] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.131132][ T6990] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 348.144807][ T7051] syzkaller0: entered promiscuous mode [ 348.150626][ T7051] syzkaller0: entered allmulticast mode [ 348.170731][ T6990] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 348.178752][ T6990] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.207059][ T6990] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 348.525195][ T6990] hsr_slave_0: entered promiscuous mode [ 348.535829][ T6990] hsr_slave_1: entered promiscuous mode [ 348.545026][ T6990] debugfs: 'hsr0' already exists in 'hsr' [ 348.550961][ T6990] Cannot create hsr debugfs directory [ 348.857633][ T1676] usb 5-1: USB disconnect, device number 8 [ 349.073878][ T49] Bluetooth: hci1: command tx timeout [ 349.204969][ T7064] loop3: detected capacity change from 0 to 3 [ 349.245281][ T7064] squashfs: Unknown parameter 'obj_type' [ 349.385715][ T7067] netlink: 20 bytes leftover after parsing attributes in process `syz.2.253'. [ 349.607256][ T1676] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 349.654366][ T7070] netlink: 8 bytes leftover after parsing attributes in process `syz.4.254'. [ 349.828628][ T1676] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 349.838358][ T1676] usb 2-1: config 0 has no interface number 0 [ 349.899818][ T1676] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 349.909807][ T1676] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.918269][ T1676] usb 2-1: Product: syz [ 349.922809][ T1676] usb 2-1: Manufacturer: syz [ 349.929173][ T1676] usb 2-1: SerialNumber: syz [ 350.024201][ T1676] usb 2-1: config 0 descriptor?? [ 350.042211][ T7075] netlink: 'syz.3.255': attribute type 1 has an invalid length. [ 350.051498][ T7075] netlink: 4 bytes leftover after parsing attributes in process `syz.3.255'. [ 350.137998][ T7076] loop2: detected capacity change from 0 to 7 [ 350.214328][ T7076] Dev loop2: unable to read RDB block 7 [ 350.220768][ T7076] loop2: unable to read partition table [ 350.245140][ T1676] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in cold state [ 350.268093][ T7076] loop2: partition table beyond EOD, truncated [ 350.275273][ T7076] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 350.615510][ T6990] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 350.774010][ T6990] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 350.903050][ T6990] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 351.055400][ T6990] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 351.154068][ T49] Bluetooth: hci1: command tx timeout [ 351.726561][ T7092] syzkaller0: entered promiscuous mode [ 351.732285][ T7092] syzkaller0: entered allmulticast mode [ 352.338228][ T7108] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 352.818914][ T6990] 8021q: adding VLAN 0 to HW filter on device bond0 [ 353.138147][ T6990] 8021q: adding VLAN 0 to HW filter on device team0 [ 353.193859][ T7118] loop3: detected capacity change from 0 to 1024 [ 353.269885][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.277536][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 353.399943][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.407690][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.046222][ T24] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 354.230120][ T7129] loop1: detected capacity change from 0 to 512 [ 354.263678][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 354.336865][ T24] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 354.346945][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.356084][ T24] usb 5-1: Product: syz [ 354.360565][ T24] usb 5-1: Manufacturer: syz [ 354.365515][ T24] usb 5-1: SerialNumber: syz [ 354.545813][ T24] r8152-cfgselector 5-1: Unknown version 0x0000 [ 354.552743][ T24] r8152-cfgselector 5-1: config 0 descriptor?? [ 354.805800][ T24] r8152-cfgselector 5-1: Unknown version 0x1c70 [ 354.813460][ T24] r8152-cfgselector 5-1: bad CDC descriptors [ 355.036545][ T5932] r8152-cfgselector 5-1: USB disconnect, device number 9 [ 355.860734][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 356.136684][ T9] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 356.145397][ T9] usb 4-1: config 0 has no interface number 0 [ 356.278079][ T9] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 356.287823][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.296391][ T9] usb 4-1: Product: syz [ 356.300776][ T9] usb 4-1: Manufacturer: syz [ 356.305809][ T9] usb 4-1: SerialNumber: syz [ 356.438666][ T9] usb 4-1: config 0 descriptor?? [ 356.497949][ T7160] pim6reg: entered allmulticast mode [ 356.653576][ T6990] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 356.686325][ T9] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in cold state [ 357.053936][ T7168] loop2: detected capacity change from 0 to 7 [ 357.079821][ T7168] Dev loop2: unable to read RDB block 7 [ 357.087944][ T7168] loop2: unable to read partition table [ 357.112934][ T7168] loop2: partition table beyond EOD, truncated [ 357.119582][ T7168] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 357.279891][ T7169] loop1: detected capacity change from 0 to 2048 [ 357.454716][ T7169] Alternate GPT is invalid, using primary GPT. [ 357.463488][ T7169] loop1: p2 p3 p7 [ 357.739224][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 357.746266][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 359.430844][ T6700] udevd[6700]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 359.798277][ T6990] veth0_vlan: entered promiscuous mode [ 359.878627][ T6700] udevd[6700]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 359.937686][ T6990] veth1_vlan: entered promiscuous mode [ 360.195781][ T6990] veth0_macvtap: entered promiscuous mode [ 360.296739][ T6990] veth1_macvtap: entered promiscuous mode [ 360.461559][ T6990] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 360.545146][ T7213] loop2: detected capacity change from 0 to 7 [ 360.575643][ T6990] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 360.613628][ T7213] Dev loop2: unable to read RDB block 7 [ 360.619626][ T7213] loop2: unable to read partition table [ 360.676168][ T7213] loop2: partition table beyond EOD, truncated [ 360.684625][ T7213] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 360.714745][ T4065] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.749405][ T3670] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.819777][ T7215] pim6reg: entered allmulticast mode [ 360.830465][ T3670] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.863200][ T3670] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.275183][ T5866] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 361.481627][ T5866] usb 5-1: Using ep0 maxpacket: 8 [ 361.530781][ T5866] usb 5-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 361.540573][ T5866] usb 5-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 361.549494][ T5866] usb 5-1: Product: syz [ 361.554012][ T5866] usb 5-1: Manufacturer: syz [ 361.558830][ T5866] usb 5-1: SerialNumber: syz [ 361.646032][ T5866] usb 5-1: config 0 descriptor?? [ 361.700870][ T5866] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 362.238742][ T7228] loop1: detected capacity change from 0 to 512 [ 362.323806][ T5866] gspca_zc3xx: reg_w_i err -71 [ 362.329079][ T5866] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 362.406151][ T5866] usb 5-1: USB disconnect, device number 10 [ 362.418848][ T6700] udevd[6700]: setting mode of /dev/bus/usb/005/010 to 020664 failed: No such file or directory [ 362.501063][ T6700] udevd[6700]: setting owner of /dev/bus/usb/005/010 to uid=0, gid=0 failed: No such file or directory [ 364.389050][ T7246] loop4: detected capacity change from 0 to 32768 [ 364.399042][ T7246] xfs: Unknown parameter 'biosize' [ 364.945991][ T7246] loop4: detected capacity change from 0 to 2048 [ 365.242049][ T7255] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 365.305880][ T7258] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 365.331208][ T6700] loop4: p2 p3 p7 [ 365.525930][ T7255] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 365.688765][ T7246] loop4: p2 p3 p7 [ 366.354446][ T7274] loop2: detected capacity change from 0 to 7 [ 366.414636][ T7274] Dev loop2: unable to read RDB block 7 [ 366.420648][ T7274] loop2: unable to read partition table [ 366.471753][ T7278] netlink: 80 bytes leftover after parsing attributes in process `syz.3.298'. [ 366.524234][ T7274] loop2: partition table beyond EOD, truncated [ 366.530800][ T7274] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 366.750348][ T6700] udevd[6700]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 366.810472][ T6630] udevd[6630]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 367.462023][ T7278] loop3: detected capacity change from 0 to 32768 [ 367.569485][ T6643] udevd[6643]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 367.971751][ T5864] usb 3-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-ec168.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 367.988456][ T5864] dvb_usb_ec168 3-1:0.1: probe with driver dvb_usb_ec168 failed with error -110 [ 367.990532][ T1676] usb 2-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-ec168.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 368.013940][ T9] usb 4-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-ec168.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 368.014227][ T9] dvb_usb_ec168 4-1:0.1: probe with driver dvb_usb_ec168 failed with error -2 [ 368.030160][ T1676] dvb_usb_ec168 2-1:0.1: probe with driver dvb_usb_ec168 failed with error -2 [ 368.190508][ T5864] usb 3-1: USB disconnect, device number 11 [ 368.233504][ T9] usb 4-1: USB disconnect, device number 7 [ 368.361495][ T1676] usb 2-1: USB disconnect, device number 6 [ 368.392960][ T5866] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 368.548683][ T6700] udevd[6700]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 368.618500][ T5866] usb 5-1: Using ep0 maxpacket: 8 [ 368.755152][ T6568] udevd[6568]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 368.763708][ T5866] usb 5-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 368.776960][ T5866] usb 5-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 368.785916][ T5866] usb 5-1: Product: syz [ 368.790371][ T5866] usb 5-1: Manufacturer: syz [ 368.795444][ T5866] usb 5-1: SerialNumber: syz [ 368.957310][ T5866] usb 5-1: config 0 descriptor?? [ 369.003549][ T7298] udevd[7298]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 369.023989][ T7303] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 369.030572][ T7303] [U] J"—e:ÀÆ" [ 369.033959][ T5866] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 369.625347][ T5866] gspca_zc3xx: reg_w_i err -71 [ 369.630731][ T5866] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 369.704728][ T5866] usb 5-1: USB disconnect, device number 11 [ 370.660676][ T4089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.668848][ T4089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.694352][ T7318] loop3: detected capacity change from 0 to 1024 [ 370.902716][ T7322] netlink: 766 bytes leftover after parsing attributes in process `syz.1.309'. [ 371.028615][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.037124][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.094880][ T7327] tipc: Started in network mode [ 371.100088][ T7327] tipc: Node identity 2a114ab2c69e, cluster identity 4711 [ 371.108583][ T7327] tipc: Enabled bearer , priority 0 [ 371.213130][ T5866] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 371.213336][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 371.309407][ T7326] tipc: Resetting bearer [ 371.451737][ T7325] tipc: Disabling bearer [ 371.459204][ T5866] usb 2-1: New USB device found, idVendor=090a, idProduct=1200, bcdDevice=24.87 [ 371.469491][ T5866] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.481012][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 371.539138][ T9] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 371.539225][ T5866] usb 2-1: config 0 descriptor?? [ 371.554292][ T9] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 371.564162][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 371.573777][ T9] usb 4-1: config 1 has no interface number 0 [ 371.579258][ T5866] usb-storage 2-1:0.0: USB Mass Storage device detected [ 371.580130][ T9] usb 4-1: config 1 interface 1 altsetting 0 has an endpoint descriptor with address 0xF5, changing to 0x85 [ 371.580294][ T9] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 371.615119][ T9] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 371.628542][ T9] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 371.638386][ T5866] usb-storage 2-1:0.0: This device (090a,1200,2487 S 01 P 00) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 371.638386][ T5866] Please send a copy of this message to and [ 371.667026][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.908648][ T9] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 371.941247][ T5866] usb 2-1: USB disconnect, device number 7 [ 372.102114][ T7333] netlink: 8 bytes leftover after parsing attributes in process `syz.2.312'. [ 372.166393][ T9] snd_usb_pod 4-1:1.1: endpoint not available, using fallback values [ 372.176197][ T9] snd_usb_pod 4-1:1.1: invalid control EP [ 372.182160][ T9] snd_usb_pod 4-1:1.1: cannot start listening: -22 [ 372.189548][ T9] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 372.199693][ T9] snd_usb_pod 4-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 372.397256][ T7335] loop6: detected capacity change from 0 to 1024 [ 373.564796][ T7339] loop4: detected capacity change from 0 to 40427 [ 373.606710][ T7339] F2FS-fs (loop4): build fault injection type: 0x3bfe8c [ 373.644216][ T7339] F2FS-fs (loop4): invalid crc value [ 374.024263][ T7339] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 374.039178][ T7339] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 374.550782][ T9] usb 4-1: USB disconnect, device number 8 [ 374.734662][ T4155] hfsplus: b-tree write err: -5, ino 4 [ 376.215300][ T7371] netlink: 8 bytes leftover after parsing attributes in process `syz.3.324'. [ 376.682920][ T7378] loop4: detected capacity change from 0 to 1024 [ 377.543112][ T7392] netlink: 8 bytes leftover after parsing attributes in process `syz.3.332'. [ 378.880194][ T7414] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 378.970922][ T7414] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 379.161650][ T7420] loop6: detected capacity change from 0 to 3 [ 380.630437][ T7439] overlayfs: failed to clone upperpath [ 381.769016][ T7457] pim6reg: entered allmulticast mode [ 382.275934][ T9] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 382.542968][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 382.673090][ T9] usb 7-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 382.683488][ T9] usb 7-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 382.691738][ T9] usb 7-1: Product: syz [ 382.701294][ T9] usb 7-1: Manufacturer: syz [ 382.706837][ T9] usb 7-1: SerialNumber: syz [ 382.986098][ T9] usb 7-1: config 0 descriptor?? [ 383.025503][ T9] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 383.157369][ T7458] netlink: 16 bytes leftover after parsing attributes in process `syz.2.358'. [ 383.177232][ T7458] IPv6: sit1: Disabled Multicast RS [ 383.187374][ T7458] sit1: entered allmulticast mode [ 383.637651][ T9] gspca_zc3xx: reg_w_i err -71 [ 383.643005][ T9] gspca_zc3xx 7-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 383.725051][ T9] usb 7-1: USB disconnect, device number 2 [ 384.024896][ T7478] 8021q: VLANs not supported on ip_vti0 [ 386.162691][ T9] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 387.386732][ T9] usb 7-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 387.396647][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.407776][ T9] usb 7-1: Product: syz [ 387.412172][ T9] usb 7-1: Manufacturer: syz [ 387.417826][ T9] usb 7-1: SerialNumber: syz [ 387.746729][ T9] usb 7-1: config 0 descriptor?? [ 387.808082][ T7506] netlink: 16 bytes leftover after parsing attributes in process `syz.4.372'. [ 387.837890][ T7506] IPv6: sit1: Disabled Multicast RS [ 387.850618][ T7506] sit1: entered allmulticast mode [ 387.991343][ T9] hso 7-1:0.0: Can't find BULK IN endpoint [ 388.000024][ T9] usb-storage 7-1:0.0: USB Mass Storage device detected [ 390.878944][ T9] usb 7-1: USB disconnect, device number 3 [ 392.243779][ T7569] netlink: 16 bytes leftover after parsing attributes in process `syz.2.391'. [ 395.493573][ T9] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 395.753300][ T9] usb 7-1: config 0 has an invalid interface number: 107 but max is 0 [ 395.761911][ T9] usb 7-1: config 0 has no interface number 0 [ 395.769032][ T9] usb 7-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid maxpacket 12336, setting to 64 [ 395.875286][ T9] usb 7-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 395.886129][ T9] usb 7-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 395.894725][ T9] usb 7-1: Product: syz [ 395.899098][ T9] usb 7-1: Manufacturer: syz [ 395.906759][ T9] usb 7-1: SerialNumber: syz [ 396.039962][ T9] usb 7-1: config 0 descriptor?? [ 396.113273][ T9] keyspan 7-1:0.107: Keyspan 4 port adapter converter detected [ 396.121372][ T9] keyspan 7-1:0.107: found no endpoint descriptor for endpoint 81 [ 396.136351][ T9] keyspan 7-1:0.107: found no endpoint descriptor for endpoint 1 [ 396.350789][ T9] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 396.365456][ T9] keyspan 7-1:0.107: found no endpoint descriptor for endpoint 2 [ 396.446846][ T9] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 396.460087][ T9] keyspan 7-1:0.107: found no endpoint descriptor for endpoint 4 [ 396.505057][ T9] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 396.523780][ T9] keyspan 7-1:0.107: found no endpoint descriptor for endpoint 6 [ 396.569636][ T7631] overlayfs: failed to resolve './file1': -2 [ 396.578985][ T9] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 396.671501][ T9] usb 7-1: USB disconnect, device number 4 [ 396.748596][ T9] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 396.795670][ T7640] futex_wake_op: syz.2.412 tries to shift op by 36; fix this program [ 396.926336][ T9] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 397.064906][ T9] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 397.141879][ T9] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 397.156147][ T9] keyspan 7-1:0.107: device disconnected [ 399.218676][ T7667] loop6: detected capacity change from 0 to 1024 [ 399.478431][ T7675] pim6reg: entered allmulticast mode [ 401.054386][ T7687] netlink: 4 bytes leftover after parsing attributes in process `syz.3.427'. [ 401.106269][ T7667] netlink: 20 bytes leftover after parsing attributes in process `syz.6.421'. [ 401.140256][ T7667] 9pnet_fd: Insufficient options for proto=fd [ 401.295423][ T3670] hfsplus: b-tree write err: -5, ino 4 [ 401.874896][ T7703] netlink: 8 bytes leftover after parsing attributes in process `syz.6.429'. [ 403.055117][ T7721] tmpfs: Unknown parameter '' [ 404.648446][ T7721] overlayfs: failed to clone upperpath [ 405.298800][ T7745] netlink: 8 bytes leftover after parsing attributes in process `syz.2.444'. [ 405.308883][ T7745] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 405.385413][ T7747] netlink: 8 bytes leftover after parsing attributes in process `syz.1.445'. [ 405.385428][ T7745] bond1: entered allmulticast mode [ 405.387640][ T7745] 8021q: adding VLAN 0 to HW filter on device bond1 [ 405.585775][ T7757] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 405.672883][ T7757] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 406.121671][ T7765] overlayfs: failed to resolve './file1': -2 [ 406.510222][ T7775] netlink: 8 bytes leftover after parsing attributes in process `syz.4.453'. [ 407.599307][ T7796] netlink: 8 bytes leftover after parsing attributes in process `syz.6.460'. [ 407.756388][ T7789] netlink: 32 bytes leftover after parsing attributes in process `syz.3.457'. [ 408.793976][ T5866] IPVS: starting estimator thread 0... [ 408.884162][ T7798] IPVS: using max 192 ests per chain, 9600 per kthread [ 408.894913][ T7802] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 409.359016][ T7805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 410.397416][ T7807] netlink: 28 bytes leftover after parsing attributes in process `syz.4.463'. [ 410.426581][ T7815] overlayfs: failed to resolve './file1': -2 [ 413.098504][ T7832] netlink: 20 bytes leftover after parsing attributes in process `syz.3.472'. [ 413.429340][ T7785] Set syz1 is full, maxelem 65536 reached [ 413.843705][ T7840] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 413.928698][ T7843] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 414.103796][ T49] Bluetooth: to_multiplier 49751 > 3200 [ 414.537617][ T7848] overlayfs: failed to clone upperpath [ 415.050580][ T7861] netlink: 20 bytes leftover after parsing attributes in process `syz.2.486'. [ 416.106370][ T7883] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 416.117571][ T49] Bluetooth: hci2: command 0x0406 tx timeout [ 416.169396][ T7885] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 416.711196][ T7895] fuse: Bad value for 'fd' [ 416.883252][ T7898] netlink: 20 bytes leftover after parsing attributes in process `syz.4.500'. [ 416.990863][ T7901] mmap: syz.1.501 (7901) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 417.052048][ T7901] netlink: 'syz.1.501': attribute type 13 has an invalid length. [ 417.060573][ T7901] netlink: 'syz.1.501': attribute type 17 has an invalid length. [ 418.463216][ T7901] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 419.180613][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 419.187711][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 419.673814][ T7927] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 419.786335][ T7931] netlink: 20 bytes leftover after parsing attributes in process `syz.1.513'. [ 422.468438][ T7962] netlink: 20 bytes leftover after parsing attributes in process `syz.3.525'. [ 423.655771][ T7976] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 423.788065][ T7977] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 424.257943][ T7984] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.360842][ T7984] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.527095][ T7984] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.617255][ T7984] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.966120][ T7996] netlink: 20 bytes leftover after parsing attributes in process `syz.4.539'. [ 425.018890][ T4233] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.216270][ T4758] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.271537][ T4758] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.300890][ T4758] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.303974][ T7998] netlink: 'syz.3.540': attribute type 4 has an invalid length. [ 426.548612][ T8013] netlink: 3 bytes leftover after parsing attributes in process `syz.2.543'. [ 426.641587][ T8016] netlink: 28 bytes leftover after parsing attributes in process `syz.6.546'. [ 426.947937][ T8022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 427.014211][ T8023] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 427.580881][ T8032] netlink: 20 bytes leftover after parsing attributes in process `syz.2.552'. [ 427.740615][ T8033] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.923205][ T8033] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.110286][ T8033] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.340868][ T8033] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.793945][ T4233] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.844637][ T4233] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.900179][ T4233] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.952690][ T4233] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.057858][ T8052] overlayfs: failed to clone upperpath [ 429.299713][ T8056] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 429.364615][ T8060] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 429.365193][ T8059] netlink: 20 bytes leftover after parsing attributes in process `syz.4.565'. [ 430.736279][ T8071] vlan2: entered promiscuous mode [ 430.741551][ T8071] bridge0: entered promiscuous mode [ 430.747961][ T8071] vlan2: entered allmulticast mode [ 430.753461][ T8071] bridge0: entered allmulticast mode [ 431.730431][ T8082] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.050416][ T8082] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.322077][ T8082] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.443335][ T8082] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.484859][ T8093] netlink: 20 bytes leftover after parsing attributes in process `syz.2.578'. [ 432.671946][ T4089] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.729096][ T4233] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.830441][ T4233] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.943317][ T57] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.975465][ T8099] netlink: 12 bytes leftover after parsing attributes in process `syz.6.582'. [ 434.105713][ T8121] netlink: 20 bytes leftover after parsing attributes in process `syz.4.591'. [ 434.983941][ T8131] netlink: 8 bytes leftover after parsing attributes in process `syz.4.595'. [ 434.993485][ T8131] netlink: 24 bytes leftover after parsing attributes in process `syz.4.595'. [ 435.002822][ T8131] netlink: 24 bytes leftover after parsing attributes in process `syz.4.595'. [ 435.042836][ T8132] netlink: 'syz.3.596': attribute type 1 has an invalid length. [ 436.714592][ T8156] netlink: 20 bytes leftover after parsing attributes in process `syz.3.605'. [ 438.130358][ T8182] netlink: 378 bytes leftover after parsing attributes in process `syz.3.616'. [ 438.165935][ T8184] netlink: 20 bytes leftover after parsing attributes in process `syz.1.618'. [ 438.555816][ T8192] netlink: 28 bytes leftover after parsing attributes in process `syz.3.621'. [ 438.944089][ T8196] tipc: Enabling of bearer rejected, failed to enable media [ 439.026553][ T8198] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 439.989747][ T8217] netlink: 8 bytes leftover after parsing attributes in process `syz.1.631'. [ 440.628897][ T8226] netlink: 28 bytes leftover after parsing attributes in process `syz.4.637'. [ 441.287028][ T8239] netlink: 'syz.4.642': attribute type 4 has an invalid length. [ 441.522515][ T8245] syz_tun: entered promiscuous mode [ 441.528215][ T8245] macsec1: entered allmulticast mode [ 441.533947][ T8245] syz_tun: entered allmulticast mode [ 441.547219][ T8241] tipc: Enabling of bearer rejected, failed to enable media [ 442.371105][ T8257] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.623263][ T8257] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.909421][ T8257] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.156929][ T8257] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.342813][ T8266] netlink: 28 bytes leftover after parsing attributes in process `syz.2.652'. [ 443.509008][ T57] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.648847][ T3670] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.692865][ T3670] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.720722][ T3670] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.048363][ T8275] overlayfs: failed to clone upperpath [ 444.066885][ T8277] netlink: 204 bytes leftover after parsing attributes in process `syz.4.654'. [ 444.110892][ T8273] netlink: 84 bytes leftover after parsing attributes in process `syz.4.654'. [ 444.615925][ T8284] tipc: Enabling of bearer rejected, failed to enable media [ 447.178305][ T8342] netlink: 8 bytes leftover after parsing attributes in process `syz.4.678'. [ 447.211470][ T8342] netlink: 44 bytes leftover after parsing attributes in process `syz.4.678'. [ 447.243709][ T8342] netlink: 830 bytes leftover after parsing attributes in process `syz.4.678'. [ 447.338952][ T8347] sctp: [Deprecated]: syz.6.679 (pid 8347) Use of struct sctp_assoc_value in delayed_ack socket option. [ 447.338952][ T8347] Use struct sctp_sack_info instead [ 447.728972][ T8355] netlink: 'syz.4.684': attribute type 4 has an invalid length. [ 448.667111][ T8372] netlink: 'syz.1.689': attribute type 39 has an invalid length. [ 448.693596][ T8372] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.912218][ T8372] bridge_slave_0 (unregistering): left allmulticast mode [ 448.920745][ T8372] bridge_slave_0 (unregistering): left promiscuous mode [ 448.928532][ T8372] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.588540][ T8389] netlink: 12 bytes leftover after parsing attributes in process `syz.1.695'. [ 449.604331][ T8383] overlayfs: failed to clone upperpath [ 449.650791][ T30] audit: type=1326 audit(1755702586.123:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8382 comm="syz.3.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73a438ebe9 code=0x7ffc0000 [ 449.675223][ T30] audit: type=1326 audit(1755702586.133:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8382 comm="syz.3.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f73a438ebe9 code=0x7ffc0000 [ 449.697974][ T30] audit: type=1326 audit(1755702586.133:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8382 comm="syz.3.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73a438ebe9 code=0x7ffc0000 [ 450.767324][ T30] audit: type=1326 audit(1755702586.213:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8382 comm="syz.3.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f73a438ebe9 code=0x7ffc0000 [ 450.792064][ T30] audit: type=1326 audit(1755702586.213:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8382 comm="syz.3.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73a438ebe9 code=0x7ffc0000 [ 450.816787][ T30] audit: type=1326 audit(1755702586.213:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8382 comm="syz.3.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f73a438ebe9 code=0x7ffc0000 [ 450.839445][ T30] audit: type=1326 audit(1755702586.223:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8382 comm="syz.3.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73a438ebe9 code=0x7ffc0000 [ 450.862295][ T30] audit: type=1326 audit(1755702586.223:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8382 comm="syz.3.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f73a438ebe9 code=0x7ffc0000 [ 450.885219][ T30] audit: type=1326 audit(1755702586.223:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8382 comm="syz.3.693" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f73a438ebe9 code=0x0 [ 451.357362][ T8401] netlink: 4 bytes leftover after parsing attributes in process `syz.2.699'. [ 452.428577][ C0] wlan0: beacon TX faster than countdown (channel/color switch) completion [ 453.439503][ T8398] netlink: 232 bytes leftover after parsing attributes in process `syz.1.698'. [ 453.606810][ T8398] netlink: 8 bytes leftover after parsing attributes in process `syz.1.698'. [ 454.904213][ T8427] netlink: 12 bytes leftover after parsing attributes in process `syz.3.708'. [ 455.803453][ T30] audit: type=1326 audit(1755702592.273:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8428 comm="syz.1.710" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f75b8f8ebe9 code=0x0 [ 456.903779][ T30] audit: type=1326 audit(1755702593.323:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8455 comm="syz.4.720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f602038ebe9 code=0x7fc00000 [ 457.633312][ T30] audit: type=1326 audit(1755702594.083:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8455 comm="syz.4.720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f602038ebe9 code=0x7fc00000 [ 457.658598][ T30] audit: type=1326 audit(1755702594.083:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8455 comm="syz.4.720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f602038ebe9 code=0x7fc00000 [ 457.681995][ T30] audit: type=1326 audit(1755702594.083:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8455 comm="syz.4.720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f602038ebe9 code=0x7fc00000 [ 457.704710][ T30] audit: type=1326 audit(1755702594.083:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8455 comm="syz.4.720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f602038ebe9 code=0x7fc00000 [ 457.727375][ T30] audit: type=1326 audit(1755702594.083:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8455 comm="syz.4.720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f602038ebe9 code=0x7fc00000 [ 457.750005][ T30] audit: type=1326 audit(1755702594.083:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8455 comm="syz.4.720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f602038ebe9 code=0x7fc00000 [ 457.775343][ T30] audit: type=1326 audit(1755702594.083:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8455 comm="syz.4.720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f602038ebe9 code=0x7fc00000 [ 457.798654][ T30] audit: type=1326 audit(1755702594.083:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8455 comm="syz.4.720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f602038ebe9 code=0x7fc00000 [ 458.160679][ T8457] netlink: 16 bytes leftover after parsing attributes in process `syz.3.718'. [ 462.275297][ T8512] netlink: 4 bytes leftover after parsing attributes in process `syz.4.742'. [ 462.333718][ T8512] netlink: 12 bytes leftover after parsing attributes in process `syz.4.742'. [ 462.543394][ T8520] netlink: 8 bytes leftover after parsing attributes in process `syz.1.744'. [ 462.612305][ T8520] netlink: 'syz.1.744': attribute type 9 has an invalid length. [ 462.620574][ T8520] netlink: 'syz.1.744': attribute type 7 has an invalid length. [ 462.961314][ T8526] IPVS: set_ctl: invalid protocol: 60 127.0.0.1:20003 [ 463.549597][ T8542] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 463.580615][ T8537] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 465.500794][ T8551] tmpfs: Bad value for 'mpol' [ 465.556140][ T8551] netlink: 'syz.6.757': attribute type 11 has an invalid length. [ 465.824005][ T8557] overlayfs: failed to clone upperpath [ 465.952135][ T8564] capability: warning: `syz.2.762' uses deprecated v2 capabilities in a way that may be insecure [ 466.816888][ T8582] netlink: 'syz.3.768': attribute type 3 has an invalid length. [ 466.826964][ T8582] netlink: 'syz.3.768': attribute type 1 has an invalid length. [ 466.835141][ T8582] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.768'. [ 467.167156][ T8582] netlink: 12 bytes leftover after parsing attributes in process `syz.3.768'. [ 467.987448][ T8590] syz_tun: entered promiscuous mode [ 467.993177][ T8590] macsec1: entered allmulticast mode [ 468.002275][ T8590] syz_tun: entered allmulticast mode [ 468.610278][ T8600] netlink: 28 bytes leftover after parsing attributes in process `syz.6.774'. [ 470.101637][ T8613] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 477.633167][ T49] Bluetooth: hci1: command 0x0406 tx timeout [ 479.387488][ T8697] netlink: 12 bytes leftover after parsing attributes in process `syz.2.813'. [ 480.703904][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 480.710817][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 483.271736][ T8747] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 483.383859][ T8750] overlayfs: failed to clone upperpath [ 483.996173][ T8755] netlink: 20 bytes leftover after parsing attributes in process `syz.4.836'. [ 484.117524][ T8755] netlink: 20 bytes leftover after parsing attributes in process `syz.4.836'. [ 486.940672][ T8797] netlink: 56 bytes leftover after parsing attributes in process `syz.1.850'. [ 487.077436][ T8797] overlayfs: failed to clone upperpath [ 487.213703][ T8806] sctp: [Deprecated]: syz.3.852 (pid 8806) Use of int in maxseg socket option. [ 487.213703][ T8806] Use struct sctp_assoc_value instead [ 487.844884][ T8813] netlink: 8 bytes leftover after parsing attributes in process `syz.1.856'. [ 488.101139][ T8817] IPVS: set_ctl: invalid protocol: 43 127.0.0.1:20000 [ 488.541890][ T8820] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 488.550280][ T8820] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 488.588975][ T8820] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 488.597089][ T8820] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 489.952025][ T8850] vlan2: entered promiscuous mode [ 489.957653][ T8850] mac80211_hwsim hwsim15 wlan1: entered promiscuous mode [ 490.472066][ T8862] netlink: 'syz.6.875': attribute type 4 has an invalid length. [ 490.480863][ T8862] netlink: 152 bytes leftover after parsing attributes in process `syz.6.875'. [ 490.515986][ T8862] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 491.374876][ T8878] netlink: 164 bytes leftover after parsing attributes in process `syz.4.881'. [ 491.605091][ T8886] netlink: 4 bytes leftover after parsing attributes in process `syz.1.884'. [ 492.181330][ T8899] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 492.360245][ T8899] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 492.531074][ T8903] netlink: 8 bytes leftover after parsing attributes in process `syz.4.890'. [ 493.679083][ T8927] overlayfs: failed to clone upperpath [ 494.457242][ T8939] netlink: 8 bytes leftover after parsing attributes in process `syz.6.906'. [ 495.004035][ T8943] netlink: 8 bytes leftover after parsing attributes in process `syz.2.909'. [ 495.021349][ T8943] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.121035][ T8927] overlayfs: failed to resolve './file0': -2 [ 495.314936][ T8945] netlink: 64 bytes leftover after parsing attributes in process `syz.4.910'. [ 495.890698][ T8954] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 496.013678][ T8954] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 496.137378][ T8954] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 501.716957][ T9018] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.899132][ T9018] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.048568][ T9018] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.264938][ T9018] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.665639][ T4065] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.689076][ T9036] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 502.712202][ T4065] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.742073][ T4065] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.776024][ T9036] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 502.786683][ T4065] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.858062][ T9038] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 503.179814][ T9046] netlink: 8 bytes leftover after parsing attributes in process `syz.6.950'. [ 504.069253][ T9051] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 504.114734][ T9052] netlink: 8 bytes leftover after parsing attributes in process `syz.6.952'. [ 504.327696][ T9044] netlink: 1284 bytes leftover after parsing attributes in process `syz.3.949'. [ 504.337565][ T9044] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 504.350819][ T9044] netlink: 1284 bytes leftover after parsing attributes in process `syz.3.949'. [ 504.360463][ T9044] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 505.706745][ T9075] netlink: 16 bytes leftover after parsing attributes in process `syz.4.962'. [ 505.716340][ T9075] netlink: 24 bytes leftover after parsing attributes in process `syz.4.962'. [ 505.726385][ T9075] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 505.794264][ T9075] bond2: entered allmulticast mode [ 505.801090][ T9075] 8021q: adding VLAN 0 to HW filter on device bond2 [ 507.632251][ T9105] overlayfs: failed to clone upperpath [ 508.256482][ T9112] infiniband syz!: set active [ 508.261431][ T9112] infiniband syz!: added team_slave_0 [ 508.392550][ T9112] RDS/IB: syz!: added [ 508.396815][ T9112] smc: adding ib device syz! with port count 1 [ 508.403775][ T9112] smc: ib device syz! port 1 has pnetid [ 511.128207][ T9142] netlink: 28 bytes leftover after parsing attributes in process `syz.2.982'. [ 511.824500][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 511.824575][ T30] audit: type=1326 audit(1755702648.313:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9151 comm="syz.2.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4bf18ebe9 code=0x7ffc0000 [ 511.895005][ T9153] netlink: 'syz.2.987': attribute type 16 has an invalid length. [ 511.903219][ T9153] netlink: 34618 bytes leftover after parsing attributes in process `syz.2.987'. [ 511.946442][ T30] audit: type=1326 audit(1755702648.353:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9151 comm="syz.2.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=445 compat=0 ip=0x7fe4bf18ebe9 code=0x7ffc0000 [ 511.969168][ T30] audit: type=1326 audit(1755702648.363:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9151 comm="syz.2.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4bf18ebe9 code=0x7ffc0000 [ 511.991952][ T30] audit: type=1326 audit(1755702648.363:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9151 comm="syz.2.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe4bf18d69f code=0x7ffc0000 [ 512.014473][ T30] audit: type=1326 audit(1755702648.363:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9151 comm="syz.2.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4bf18ebe9 code=0x7ffc0000 [ 512.038703][ T30] audit: type=1326 audit(1755702648.363:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9151 comm="syz.2.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe4bf18ebe9 code=0x7ffc0000 [ 512.061330][ T30] audit: type=1326 audit(1755702648.363:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9151 comm="syz.2.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4bf18ebe9 code=0x7ffc0000 [ 512.083979][ T30] audit: type=1326 audit(1755702648.373:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9151 comm="syz.2.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe4bf18ebe9 code=0x7ffc0000 [ 512.106444][ T30] audit: type=1326 audit(1755702648.373:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9151 comm="syz.2.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4bf18ebe9 code=0x7ffc0000 [ 512.130926][ T30] audit: type=1326 audit(1755702648.383:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9151 comm="syz.2.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe4bf18ebe9 code=0x7ffc0000 [ 513.007343][ T9172] fuse: Bad value for 'fd' [ 513.107600][ T9179] netlink: 21 bytes leftover after parsing attributes in process `syz.3.990'. [ 513.234443][ T9179] bond0: entered allmulticast mode [ 513.239948][ T9179] bond_slave_0: entered allmulticast mode [ 513.252528][ T9179] bond_slave_1: entered allmulticast mode [ 513.260607][ T9179] syz_tun: entered allmulticast mode [ 513.714963][ T9185] netlink: 4 bytes leftover after parsing attributes in process `syz.6.998'. [ 514.721051][ T9196] netlink: 'syz.6.1002': attribute type 3 has an invalid length. [ 515.493727][ T9194] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.754077][ T9214] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 515.810200][ T9214] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 515.870770][ T9214] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 515.963758][ T9218] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1010'. [ 518.024240][ T9247] capability: warning: `syz.6.1021' uses 32-bit capabilities (legacy support in use) [ 518.688291][ T9252] mmap: syz.1.1023 (9252): VmData 175878144 exceed data ulimit 33554432. Update limits or use boot option ignore_rlimit_data. [ 518.841984][ T9233] overlay: Unknown parameter 'smackfshat' [ 522.714968][ T9294] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 522.762259][ T9294] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 523.961225][ T9309] netlink: 'syz.1.1045': attribute type 1 has an invalid length. [ 523.969996][ T9309] netlink: 'syz.1.1045': attribute type 4 has an invalid length. [ 523.978345][ T9309] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1045'. [ 524.939824][ T9332] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 525.608891][ T9345] overlay: ./file0 is not a directory [ 525.765771][ T9348] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1061'. [ 527.822839][ T9384] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1078'. [ 527.832084][ T9384] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1078'. [ 528.477161][ T9396] kAFS: unable to lookup cell 'sy@0' [ 529.069895][ T9411] fuse: Bad value for 'fd' [ 529.106202][ T9411] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1089'. [ 529.116134][ T9411] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1089'. [ 529.541720][ T9416] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1091'. [ 529.551304][ T9416] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1091'. [ 530.785648][ T9442] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 530.826377][ T9442] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 530.894761][ T9444] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1104'. [ 530.904226][ T9444] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1104'. [ 531.988184][ T9461] IPv6: NLM_F_CREATE should be specified when creating new route [ 531.999236][ T9461] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 532.006838][ T9461] IPv6: NLM_F_CREATE should be set when creating new route [ 532.014404][ T9461] IPv6: NLM_F_CREATE should be set when creating new route [ 532.021901][ T9461] IPv6: NLM_F_CREATE should be set when creating new route [ 532.035928][ T9461] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 532.145192][ T9469] netlink: 'syz.2.1110': attribute type 10 has an invalid length. [ 532.153849][ T9469] ipvlan1: entered allmulticast mode [ 532.159362][ T9469] veth0_vlan: entered allmulticast mode [ 532.175030][ T9469] team0: Device ipvlan1 failed to register rx_handler [ 538.342838][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 540.979004][ T9540] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1143'. [ 542.022582][ T9554] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.061883][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 542.068879][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 542.156143][ T9554] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.349444][ T9554] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.446521][ T9554] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.773438][ T4758] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.782014][ T4758] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.828825][ T9566] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.886751][ T4758] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.924593][ T9566] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.977288][ T4758] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.979282][ T9569] 9pnet_fd: Insufficient options for proto=fd [ 543.039830][ T9566] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.126099][ T9566] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.294078][ T57] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.316277][ T57] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.363437][ T57] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.400459][ T57] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.459380][ T9581] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1159'. [ 544.693747][ T9572] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1155'. [ 545.414894][ T9604] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1169'. [ 546.354964][ T9627] syz_tun: entered promiscuous mode [ 546.366642][ T9627] batadv_slave_0: entered promiscuous mode [ 546.376625][ T9627] debugfs: 'hsr1' already exists in 'hsr' [ 546.382731][ T9627] Cannot create hsr debugfs directory [ 546.388726][ T9627] hsr1: entered allmulticast mode [ 546.394264][ T9627] syz_tun: entered allmulticast mode [ 546.399765][ T9627] batadv_slave_0: entered allmulticast mode [ 546.479543][ T9626] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1175'. [ 547.595615][ T9624] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1174'. [ 547.615574][ T9624] IPv6: sit1: Disabled Multicast RS [ 547.625550][ T9624] sit1: entered allmulticast mode [ 547.699195][ T9637] overlay: ./file1 is not a directory [ 548.038290][ T9643] ------------[ cut here ]------------ [ 548.044738][ T9643] verifier bug: REG INVARIANTS VIOLATION (false_reg1): range bounds violation u64=[0x2001, 0x2001] s64=[0x2001, 0x2001] u32=[0x2001, 0x2000] s32=[0x2001, 0x2001] var_off=(0x2001, 0x0)(1) [ 548.064222][ T9643] WARNING: CPU: 1 PID: 9643 at kernel/bpf/verifier.c:2728 reg_bounds_sanity_check+0xb26/0x14b0 [ 548.075803][ T9643] Modules linked in: [ 548.079966][ T9643] CPU: 1 UID: 0 PID: 9643 Comm: syz.3.1181 Not tainted syzkaller #0 PREEMPT(none) [ 548.089986][ T9643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 548.100573][ T9643] RIP: 0010:reg_bounds_sanity_check+0xb26/0x14b0 [ 548.107516][ T9643] Code: ff ff ff b5 20 ff ff ff ff b5 18 ff ff ff ff b5 48 ff ff ff ff b5 10 ff ff ff ff b5 08 ff ff ff e8 5f 1b 02 ff 48 83 c4 38 90 <0f> 0b 90 90 4c 8b bd 70 ff ff ff e9 83 f8 ff ff 8b 3a e8 03 5b 79 [ 548.127658][ T9643] RSP: 0018:ffff888026d76f58 EFLAGS: 00010282 [ 548.134867][ T9643] RAX: ffffffff81207e8e RBX: ffff888069b29438 RCX: 0000000000080000 [ 548.143279][ T9643] RDX: ffffc90009806000 RSI: 000000000000abcc RDI: 000000000000abcd [ 548.151697][ T9643] RBP: ffff888026d770d8 R08: ffffea000000000f R09: 0000000000000000 [ 548.160571][ T9643] R10: ffff888237b74028 R11: ffff88823f2635c0 R12: 0000000000000000 [ 548.169026][ T9643] R13: ffff888118748b60 R14: 0000000000000000 R15: 0000000000000000 [ 548.178200][ T9643] FS: 00007f73a52ac6c0(0000) GS:ffff8881aa797000(0000) knlGS:0000000000000000 [ 548.187773][ T9643] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 548.194993][ T9643] CR2: 000000110c28079e CR3: 000000004e9dc000 CR4: 00000000003526f0 [ 548.203384][ T9643] Call Trace: [ 548.206838][ T9643] [ 548.209941][ T9643] ? kmsan_get_metadata+0xfb/0x160 [ 548.215604][ T9643] reg_set_min_max+0x3a8/0x440 [ 548.220714][ T9643] check_cond_jmp_op+0x3187/0x4820 [ 548.226389][ T9643] do_check+0x2374/0x15760 [ 548.231089][ T9643] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 548.237471][ T9643] ? __pfx_verbose+0x10/0x10 [ 548.243005][ T9643] ? __pfx_disasm_kfunc_name+0x10/0x10 [ 548.248927][ T9643] do_check_common+0x2482/0x3740 [ 548.254513][ T9643] bpf_check+0x61f8/0x2a100 [ 548.259330][ T9643] ? kmsan_get_metadata+0xfb/0x160 [ 548.265013][ T9643] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 548.271145][ T9643] ? pcpu_block_update_hint_alloc+0x12df/0x1390 [ 548.278695][ T9643] ? kmsan_get_metadata+0x150/0x160 [ 548.284639][ T9643] ? kmsan_get_metadata+0xfb/0x160 [ 548.290061][ T9643] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 548.296983][ T9643] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 548.303738][ T9643] ? kmsan_get_metadata+0xfb/0x160 [ 548.309155][ T9643] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 548.315499][ T9643] ? kmsan_get_metadata+0xfb/0x160 [ 548.320916][ T9643] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 548.327290][ T9643] ? strncpy_from_user+0x71/0x470 [ 548.333556][ T9643] ? stack_depot_save_flags+0x35/0x7b0 [ 548.339367][ T9643] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 548.346311][ T9643] ? kmsan_get_metadata+0xfb/0x160 [ 548.351731][ T9643] ? kmsan_get_metadata+0xfb/0x160 [ 548.357382][ T9643] ? kmsan_get_metadata+0xfb/0x160 [ 548.363158][ T9643] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 548.369809][ T9643] ? kmsan_get_metadata+0xfb/0x160 [ 548.375563][ T9643] ? kmsan_get_metadata+0xfb/0x160 [ 548.381678][ T9643] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 548.388117][ T9643] bpf_prog_load+0x28e6/0x2e50 [ 548.393389][ T9643] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 548.400025][ T9643] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 548.406796][ T9643] ? security_bpf+0x88/0x620 [ 548.411646][ T9643] ? _copy_from_user+0xcb/0x100 [ 548.416977][ T9643] __sys_bpf+0x7f4/0xed0 [ 548.421517][ T9643] __x64_sys_bpf+0xa4/0xf0 [ 548.426899][ T9643] x64_sys_call+0x3550/0x3e20 [ 548.431896][ T9643] do_syscall_64+0xd9/0x210 [ 548.437051][ T9643] ? irqentry_exit+0x16/0x60 [ 548.441937][ T9643] ? clear_bhb_loop+0x40/0x90 [ 548.447279][ T9643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.453707][ T9643] RIP: 0033:0x7f73a438ebe9 [ 548.458359][ T9643] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 548.478682][ T9643] RSP: 002b:00007f73a52ac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 548.488230][ T9643] RAX: ffffffffffffffda RBX: 00007f73a45b5fa0 RCX: 00007f73a438ebe9 [ 548.496704][ T9643] RDX: 0000000000000094 RSI: 00002000000002c0 RDI: 0000000000000005 [ 548.505212][ T9643] RBP: 00007f73a4411e19 R08: 0000000000000000 R09: 0000000000000000 [ 548.514078][ T9643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 548.522465][ T9643] R13: 00007f73a45b6038 R14: 00007f73a45b5fa0 R15: 00007ffdbbc452e8 [ 548.530731][ T9643] [ 548.534167][ T9643] ---[ end trace 0000000000000000 ]--- [ 549.318241][ T9663] ===================================================== [ 549.325722][ T9663] BUG: KMSAN: uninit-value in hsr_get_node+0xd4a/0xd70 [ 549.333059][ T9663] hsr_get_node+0xd4a/0xd70 [ 549.337963][ T9663] hsr_forward_skb+0x399/0x3c40 [ 549.343355][ T9663] hsr_handle_frame+0xcea/0xf70 [ 549.348537][ T9663] __netif_receive_skb_core+0x2040/0x6df0 [ 549.354662][ T9663] __netif_receive_skb+0xcc/0xac0 [ 549.359910][ T9663] netif_receive_skb+0x57/0x630 [ 549.365161][ T9663] tun_rx_batched+0x1df/0x980 [ 549.370156][ T9663] tun_get_user+0x5028/0x6ca0 [ 549.375189][ T9663] tun_chr_write_iter+0x3e9/0x5c0 [ 549.380406][ T9663] vfs_write+0xbdf/0x15d0 [ 549.385281][ T9663] __x64_sys_write+0x1fb/0x4d0 [ 549.390291][ T9663] x64_sys_call+0x3014/0x3e20 [ 549.395364][ T9663] do_syscall_64+0xd9/0x210 [ 549.400094][ T9663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.406366][ T9663] [ 549.408821][ T9663] Uninit was stored to memory at: [ 549.414181][ T9663] hsr_get_node+0xd43/0xd70 [ 549.418862][ T9663] hsr_forward_skb+0x399/0x3c40 [ 549.424130][ T9663] hsr_handle_frame+0xcea/0xf70 [ 549.429297][ T9663] __netif_receive_skb_core+0x2040/0x6df0 [ 549.435619][ T9663] __netif_receive_skb+0xcc/0xac0 [ 549.440870][ T9663] netif_receive_skb+0x57/0x630 [ 549.446121][ T9663] tun_rx_batched+0x1df/0x980 [ 549.451003][ T9663] tun_get_user+0x5028/0x6ca0 [ 549.456045][ T9663] tun_chr_write_iter+0x3e9/0x5c0 [ 549.461293][ T9663] vfs_write+0xbdf/0x15d0 [ 549.465992][ T9663] __x64_sys_write+0x1fb/0x4d0 [ 549.470972][ T9663] x64_sys_call+0x3014/0x3e20 [ 549.476061][ T9663] do_syscall_64+0xd9/0x210 [ 549.480782][ T9663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.487034][ T9663] [ 549.489453][ T9663] Uninit was created at: [ 549.494082][ T9663] __alloc_frozen_pages_noprof+0x689/0xf00 [ 549.500087][ T9663] alloc_pages_mpol+0x328/0x860 [ 549.505315][ T9663] alloc_pages_noprof+0x102/0x280 [ 549.510570][ T9663] skb_page_frag_refill+0x34e/0x740 [ 549.516161][ T9663] tun_get_user+0x1d71/0x6ca0 [ 549.521092][ T9663] tun_chr_write_iter+0x3e9/0x5c0 [ 549.526457][ T9663] vfs_write+0xbdf/0x15d0 [ 549.531005][ T9663] __x64_sys_write+0x1fb/0x4d0 [ 549.536136][ T9663] x64_sys_call+0x3014/0x3e20 [ 549.541035][ T9663] do_syscall_64+0xd9/0x210 [ 549.545940][ T9663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.552026][ T9663] [ 549.554678][ T9663] CPU: 1 UID: 0 PID: 9663 Comm: syz.1.1187 Tainted: G W syzkaller #0 PREEMPT(none) [ 549.565910][ T9663] Tainted: [W]=WARN [ 549.569821][ T9663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 549.580194][ T9663] ===================================================== [ 549.587431][ T9663] Disabling lock debugging due to kernel taint [ 549.593864][ T9663] Kernel panic - not syncing: kmsan.panic set ... [ 549.600538][ T9663] CPU: 1 UID: 0 PID: 9663 Comm: syz.1.1187 Tainted: G B W syzkaller #0 PREEMPT(none) [ 549.611683][ T9663] Tainted: [B]=BAD_PAGE, [W]=WARN [ 549.616829][ T9663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 549.627138][ T9663] Call Trace: [ 549.630541][ T9663] [ 549.633612][ T9663] __dump_stack+0x26/0x30 [ 549.638169][ T9663] dump_stack_lvl+0x53/0x270 [ 549.642991][ T9663] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 549.649123][ T9663] dump_stack+0x1e/0x25 [ 549.653498][ T9663] vpanic+0x361/0xc50 [ 549.657740][ T9663] panic+0x15d/0x160 [ 549.661906][ T9663] kmsan_report+0x31c/0x320 [ 549.666632][ T9663] ? __msan_warning+0x1b/0x30 [ 549.671495][ T9663] ? hsr_get_node+0xd4a/0xd70 [ 549.676378][ T9663] ? hsr_forward_skb+0x399/0x3c40 [ 549.681639][ T9663] ? hsr_handle_frame+0xcea/0xf70 [ 549.686869][ T9663] ? __netif_receive_skb_core+0x2040/0x6df0 [ 549.693013][ T9663] ? __netif_receive_skb+0xcc/0xac0 [ 549.698496][ T9663] ? netif_receive_skb+0x57/0x630 [ 549.703706][ T9663] ? tun_rx_batched+0x1df/0x980 [ 549.708723][ T9663] ? tun_get_user+0x5028/0x6ca0 [ 549.713740][ T9663] ? tun_chr_write_iter+0x3e9/0x5c0 [ 549.719097][ T9663] ? vfs_write+0xbdf/0x15d0 [ 549.723780][ T9663] ? __x64_sys_write+0x1fb/0x4d0 [ 549.728903][ T9663] ? x64_sys_call+0x3014/0x3e20 [ 549.733953][ T9663] ? do_syscall_64+0xd9/0x210 [ 549.738832][ T9663] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.745067][ T9663] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.751309][ T9663] ? kmsan_get_metadata+0xfb/0x160 [ 549.756838][ T9663] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 549.762838][ T9663] ? static_protections+0x1a1/0xc70 [ 549.768221][ T9663] ? filter_irq_stacks+0x49/0x190 [ 549.773481][ T9663] ? kmsan_get_metadata+0xfb/0x160 [ 549.778771][ T9663] ? kmsan_get_metadata+0xfb/0x160 [ 549.784065][ T9663] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 549.790063][ T9663] ? kmsan_get_metadata+0xfb/0x160 [ 549.795401][ T9663] __msan_warning+0x1b/0x30 [ 549.800062][ T9663] hsr_get_node+0xd4a/0xd70 [ 549.804778][ T9663] hsr_forward_skb+0x399/0x3c40 [ 549.809865][ T9663] ? kmsan_get_metadata+0xfb/0x160 [ 549.815162][ T9663] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 549.821190][ T9663] hsr_handle_frame+0xcea/0xf70 [ 549.826266][ T9663] ? __pfx_hsr_handle_frame+0x10/0x10 [ 549.831837][ T9663] __netif_receive_skb_core+0x2040/0x6df0 [ 549.837764][ T9663] ? kmsan_get_metadata+0xfb/0x160 [ 549.843059][ T9663] ? kmsan_get_metadata+0xfb/0x160 [ 549.848355][ T9663] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 549.854367][ T9663] ? filter_irq_stacks+0x49/0x190 [ 549.859670][ T9663] __netif_receive_skb+0xcc/0xac0 [ 549.864917][ T9663] netif_receive_skb+0x57/0x630 [ 549.869950][ T9663] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 549.875955][ T9663] ? tun_rx_batched+0x16c/0x980 [ 549.880992][ T9663] tun_rx_batched+0x1df/0x980 [ 549.885854][ T9663] ? kmsan_get_metadata+0xfb/0x160 [ 549.891170][ T9663] tun_get_user+0x5028/0x6ca0 [ 549.896024][ T9663] ? stack_depot_save_flags+0x35/0x7b0 [ 549.901699][ T9663] ? kmsan_get_metadata+0xfb/0x160 [ 549.906993][ T9663] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 549.913595][ T9663] tun_chr_write_iter+0x3e9/0x5c0 [ 549.918820][ T9663] vfs_write+0xbdf/0x15d0 [ 549.923350][ T9663] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 549.929077][ T9663] __x64_sys_write+0x1fb/0x4d0 [ 549.934066][ T9663] x64_sys_call+0x3014/0x3e20 [ 549.938992][ T9663] do_syscall_64+0xd9/0x210 [ 549.943693][ T9663] ? irqentry_exit+0x16/0x60 [ 549.948454][ T9663] ? clear_bhb_loop+0x40/0x90 [ 549.953310][ T9663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.959386][ T9663] RIP: 0033:0x7f75b8f8d69f [ 549.963931][ T9663] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 549.983715][ T9663] RSP: 002b:00007f75b9e13000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 549.992388][ T9663] RAX: ffffffffffffffda RBX: 00007f75b91b5fa0 RCX: 00007f75b8f8d69f [ 550.000495][ T9663] RDX: 0000000000000014 RSI: 00002000000010c0 RDI: 00000000000000c8 [ 550.008590][ T9663] RBP: 00007f75b9011e19 R08: 0000000000000000 R09: 0000000000000000 [ 550.016741][ T9663] R10: 0000000000000014 R11: 0000000000000293 R12: 0000000000000000 [ 550.024850][ T9663] R13: 00007f75b91b6038 R14: 00007f75b91b5fa0 R15: 00007ffdd731db68 [ 550.033081][ T9663] [ 550.036608][ T9663] Kernel Offset: disabled [ 550.041004][ T9663] Rebooting in 86400 seconds..