last executing test programs: 8m35.117216486s ago: executing program 3 (id=4): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000c0000000a0000000000001104000000ffffffff000000000000000400000000000000000000000b02000000020000000000000e0300000000000000000061000000000000002e"], 0x0, 0x5c}, 0x20) socket$inet_udplite(0x2, 0x2, 0x88) gettid() openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e01f3440cee51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cad32b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337602d3e5a815232f5e16c1b30c3a6abc85018e5ff2c91018afc9ffc2cc788bee1b47683db012469398685211dfbbae3e2ed0a50e7393bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d300006aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7af22e30d46a9d26d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977fb536a9caab37d9ac4cfc1c7b400000000000007ffc826b956ba859ac8e3c177b91bd7d5e41ff83ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d000069a16203a967c1bbe09315c29877a308bcc87dc3addb08142bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8240000e3428d2129369ee1b85af9ffffff0d0df414b315f651c8412392191fa83ee830548f11be359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92000000000f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb74d4ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905de328c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a978ee56c83a3466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342e0eaf6f330e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea95ec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf81700cd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be3827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f969369de47422604e2fc5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293b6c833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b612272d40f522d8c98c879aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbe71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd46dbd61627a2e0a74b5e6aefb7eee403502734137ff47a57f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a125e3af1130d66a7b66837ae7e7123dde7404a067ad0a6a2d6bec9411b61cad4121be3c72ff3a04713042253d438e7becf8120de3895b8ce974958bde39cb8da3427a2e9e2de936431e67fed5ab5684db07de39083d8948cc4c8a2608100000000000000000000aecb8b0b7941088f971ce17427eec32a012295cc0cdd32955176b6ad5a4bb953e58ccfa9428f452cfb5a48a9fda26db3985c8be3c2f99827da074825b01c4a3a71fb59d5798100000000000000c76b05a45d2dd8c20d971e2f3e4369168f5cb83d6ff3a18733fec726034fbfa95624135bee374414b2c8c61f52357a520efd6a10aff244bc8a62ed367981fb4d5d77f7bc093958ff46527499957da4934cd4b370cf76f72dd05fa80cdfb68c836fd81be7a58532e041a87f9222f157610a4bcdc05b2a55308c8e7568b90f7a338557e816a16972aea79dff5becefa6f9c5ce6c58fb38da9e7532dc53cfdc2e789b76f7d32aca1bfea2aa62621b78dded30fc07171866bf3d552900000000a32dda61eeda1750e157c2d569b9d08f583c0ee28daec2e8bb85f3c8e91c4448096ee953def18dc73e55cb30f9cd069d8780b00eaba382f0c3ae391c30a5f1b0f36dd0c2193b791995d2890327a10d7abac76d1202f72e97f0105184d7aaaab8d3e29c9a8d263f076b55cf53c5bb9c0662a3d19a6722d7f83ae4331d3256f90af0857788b380ccc3b266c418e66d1d756d5df6423dd0cea67bc235d3776d22270fc19301ead09f156893e9"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0xfffffffffffffdf5, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), r2) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(r4, &(0x7f0000004380)={0x2020}, 0x2020) write$P9_RGETLOCK(r5, &(0x7f00000094c0)=ANY=[], 0x200002e6) fcntl$setpipe(r5, 0x407, 0x7000000) 8m19.775001693s ago: executing program 32 (id=4): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000c0000000a0000000000001104000000ffffffff000000000000000400000000000000000000000b02000000020000000000000e0300000000000000000061000000000000002e"], 0x0, 0x5c}, 0x20) socket$inet_udplite(0x2, 0x2, 0x88) gettid() openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0xfffffffffffffdf5, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), r2) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(r4, &(0x7f0000004380)={0x2020}, 0x2020) write$P9_RGETLOCK(r5, &(0x7f00000094c0)=ANY=[], 0x200002e6) fcntl$setpipe(r5, 0x407, 0x7000000) 2m59.762942581s ago: executing program 0 (id=756): chmod(&(0x7f0000000100)='./file0\x00', 0x35b) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7101400000000000000ffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000440)=ANY=[@ANYBLOB="dc0000002d00010027bd7000fcdbdf2504000000040012800a00090027"], 0xdc}}, 0x8004) 2m57.411754473s ago: executing program 0 (id=762): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x2, 0x0, 0x20, 0x9}, [@call={0x85, 0x0, 0x0, 0x29}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m54.88334886s ago: executing program 0 (id=766): r0 = syz_io_uring_setup(0x116, &(0x7f0000000100)={0x0, 0x3f28, 0x2, 0x0, 0x2fb}, &(0x7f0000000000), &(0x7f0000000200)) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, 0x0, 0x64044814) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x800) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r6 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r7 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r7, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r6, &(0x7f0000000440)="6af937e695978826", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r8, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000140)=[0x7], 0x0, 0x0, 0x1}}, 0x40) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000040)}], 0x1) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0xf3, 0x80ffff, 0x49, 0x0, 0x40) 2m44.015017928s ago: executing program 0 (id=786): symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') chmod(&(0x7f0000000100)='./file0\x00', 0x35b) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000800000000000000000850000004100000085000000d0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000080), 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, 0x0, 0x8004) 2m42.863003272s ago: executing program 0 (id=790): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0x6, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb600000000000000008d0000007500000095"], 0x0}, 0x94) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f0000000c00)="c8af5fc479cf", &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2m42.059330452s ago: executing program 0 (id=793): socket$alg(0x26, 0x5, 0x0) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0x0) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80000) r1 = socket(0x2, 0x1, 0x0) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000080)='udf\x00', 0x2008087, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000fdffffff11000000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r3, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES16, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e27, 0x6, @mcast2, 0x7}, 0x1c) 2m26.083197663s ago: executing program 33 (id=793): socket$alg(0x26, 0x5, 0x0) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0x0) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80000) r1 = socket(0x2, 0x1, 0x0) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000080)='udf\x00', 0x2008087, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000fdffffff11000000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r3, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES16, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e27, 0x6, @mcast2, 0x7}, 0x1c) 18.96417202s ago: executing program 1 (id=1147): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001bc0)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000005000000020000000000"], 0x0, 0x29, 0x0, 0x1, 0x8}, 0x28) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e21, @empty}], 0x10) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x24, 0x0, 0x0) syz_usb_connect$uac1(0x69a90eab3db9c902, 0xa6, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x94, 0x3, 0x1, 0x5, 0xa0, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xfff7, 0x7}, [@output_terminal={0x9, 0x24, 0x3, 0x3, 0x300, 0x3, 0x3, 0xb}, @selector_unit={0x5, 0x24, 0x5, 0x6, 0x2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x82, 0x4, 0x9, 0x10, "", "ca"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x9, 0x4, 0x7, 0x6, "f7e04239"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0xff, 0xc8, 0x3, {0x7, 0x25, 0x1, 0x0, 0x4, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x6, 0x1, 0x8, 0x1, "3a3882"}, @as_header={0x7, 0x24, 0x1, 0x1, 0xc0, 0x5}]}, {{0x9, 0x5, 0x82, 0x9, 0x50, 0x5, 0x8, 0x41, {0x7, 0x25, 0x1, 0x82, 0xfe, 0x7}}}}}}}]}}, 0x0) 18.813529937s ago: executing program 6 (id=1149): sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg(r0, &(0x7f0000000540)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x4, @loopback, 0xa, 0x3}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000000)='p', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[{0x10, 0x84, 0x5}], 0x10}}], 0x2, 0x20000000) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001aa40)=""/102400, 0x19000) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$cont(0x20, r2, 0x9, 0x3) ptrace$getregs(0xc, r2, 0x21aa, &(0x7f0000000000)=""/56) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$loop(&(0x7f0000000040), 0x1, 0x30000) open$dir(&(0x7f0000000180)='./file0\x00', 0x20200, 0x81) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi3\x00', 0x48081, 0x0) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f00000000c0)={'dt2801\x00', [0x4f27, 0x2, 0x10000, 0x4, 0x4, 0x0, 0x8, 0x7, 0xa, 0x0, 0x2, 0x1, 0xff6b, 0x800, 0xfffffffe, 0xb4c, 0xffffffff, 0x1a449, 0x3, 0x40000003, 0x89, 0xcaa7, 0x0, 0x20001e58, 0xb, 0xe69, 0x3c, 0x8, 0x65c, 0xfffffffd, 0xfffffff8]}) pwrite64(r3, 0x0, 0x0, 0x5) 17.873662463s ago: executing program 4 (id=1158): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$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") lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000240)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000002640)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7c01000019000100000000000000000000000000000000000000ffff0a010101000000000000000000000000000000000000000300000000020020000c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000070000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000c40008"], 0x17c}}, 0x20044004) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) sendfile(r2, r2, 0x0, 0xe3aa6ea) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/tcp6\x00') openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$hid(0x6, 0x36, 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @random="a0725ce9403b", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb8000", 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, {[], @time_exceed={0x4, 0x0, 0x0, 0x60, '\x00', {0x0, 0x6, "fd9063", 0x2, 0x3a, 0x0, @empty, @mcast2}}}}}}}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) setpriority(0x2, 0x0, 0x7) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000001000)={0x10, 0x140d, 0xe3263c25d365e57d, 0x70bd2a, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x50) socket$inet6(0xa, 0x1, 0x8010000000000084) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) 17.674156176s ago: executing program 1 (id=1159): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000a0db000000000000000000850000000e000000c50000002a00000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x1c0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f0000000180)=@v2={0x2, @aes256, 0x1, '\x00', @d}) socket$kcm(0x29, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000001a40)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000700)='mnt/encrypted_dir/file\x00', 0x42, 0x180) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='netlink_extack\x00', r0}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000440)="d800000018007b7be00212ba0d0505040a003f00000f040b067c55a1bc000900070006990300000004000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e07000000", 0xd4}, {&(0x7f0000000100)="d8bcf4de", 0x4}], 0x2, 0x0, 0x0, 0x2663}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x8, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000001000080000000000300008da50400fcffffff82abfcff1000000095000000000000006c4800091c291bf397fb9c0e000000000000cd14e21d89d0cd433397036ce437d9723668346f8b37cb7a163cb30f7ff9f88edf4fd4f04956d0e7fd8e7896982e366a3e4b6c89c7e531d519d425e2e9c91caeea0c74f1ce174e5334a6e7e30fcab811ffe363ac22272cbb5c5e5615197187b9f547ef707bc6590b66acea5c30bbcc007409fe32b90d45146c566dfa23ec04c08b0bb495586fd53f4d25ed063b1753ce795e98d761d33c133604199f727442117c6597000000bfda12c3b0d35319fba7956aee2d53be4ee700"], &(0x7f0000000300)='GPL\x00', 0x101, 0x19, &(0x7f0000000340)=""/25, 0x41100, 0x78, '\x00', 0x0, @cgroup_skb=0x1, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x4, 0xd, 0xb, 0xe34e}, 0x10, 0xffffffffffffffff, r5, 0x2, &(0x7f00000003c0)=[0x1, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000400)=[{0x3, 0x5, 0x0, 0x5}, {0x5, 0x3, 0x8, 0xa}]}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@fallback=r5, r6, 0x1, 0x0, 0x0, @void, @value=r6}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)=ANY=[@ANYRES32=r5, @ANYRES32=0x0, @ANYBLOB='/'], 0x20) syz_open_procfs(0x0, &(0x7f0000000080)='net/softnet_stat\x00') 17.351059531s ago: executing program 6 (id=1161): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) 11.24765685s ago: executing program 6 (id=1164): r0 = syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x3d0, &(0x7f00000004c0)="$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") r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102000028"], 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="240000002100000200000300000000000000342c9427bc49595300"/36], 0x24}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0xfffffffffffffffc}, 0x18) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) r4 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x480280, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r5, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000900)={0x22c, r6, 0x20, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_WOL_SOPASS={0xa1, 0x3, "2038e274b651a937246baab9ff81a680635dca798be5f6d44c0b1e2734233de202b4fcbd71978d8956e8cb29e9e92b0b55b872fd1d4a081668c277fa8c21fb532e7665ae300f809dae4cde944430c397df314ce10a46d0aa33f7110764fad26fb89516a9f4214b662b8b81d0789dc7bf850515d951a4dd347e04ac3c0833ff3ef45130adc781fcf4bf8b2b38550d38f6a1b3a2faec65c2b449a38c01ef"}, @ETHTOOL_A_WOL_MODES={0x174, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x15, 0x4, "0ed869f344cabbc7e5f4aeef0bed0ff065"}, @ETHTOOL_A_BITSET_VALUE={0x2e, 0x4, "dc6606cb0d1f594f92edf572b21df7bf7c674c3f1d13fd2685043ad6aaefcfe51024596ca9554554e9c8"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_MASK={0x5b, 0x5, "523aa9e2a8be76fdc247ff75af2b792b4710b1bcb9a09238a100f4b9e429d2b2111043261acc775bec0e86a54552ad9d2c9658b099aa4cbce92a7dbb1e74d71f3aa3561bdf14fd12e3a7f9ffdc011de35e8a588d944689"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xb9, 0x4, "54d1a76b91342f9acd995544c7dc78322046ce458f99eda851131953b01d4ec5a73fcbbb57f03a650dbf5fe69ad600f591347568e384e0866c36615cc25761e7180724a3b90840900dc3c04f8e0d0eb4e6f8b41363b5dca03db11142a2b3efdc0202aca00c6950158acbbc33d0321aad66575d51c5c5a2eef4c9cb55ad9ed8b36bf41eab2f11126429f2e0524d9d37cbb1f3b82aa7078da7ca9bc662ec1646e3c5bb5e275981d2652b9e508e2b4a785617383cd23c"}]}]}, 0x22c}, 0x1, 0x0, 0x0, 0x2010}, 0xa37ed632325b1081) fallocate(r4, 0x0, 0x400000002000000, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x13, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000611869000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x1, 0x4, 0x401, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0xc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048805}, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(r7, 0xc02054a5, &(0x7f0000000100)={0x2, r0, 'id0\x00'}) r10 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r10, 0xc0145608, &(0x7f0000000040)={0x6, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r10, 0xc058560f, &(0x7f00000000c0)=@multiplanar_mmap={0x5, 0x1, 0x4, 0x800, 0x7, {}, {0x2, 0xa, 0x5, 0x5, 0xc, 0x2, "b3848769"}, 0x5, 0x1, {0x0}, 0x8}) ioctl$TIOCSLCKTRMIOS(r9, 0x5457, &(0x7f00000000c0)) r11 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x800, 0x650ce4b086bd45db) r12 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r12, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000004c0)=""/4070, 0xfe6}, {&(0x7f0000000340)=""/67, 0x43}], 0x2}}], 0x1, 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r11, 0x40806685, 0x0) 11.099550172s ago: executing program 4 (id=1166): socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_procfs(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xba}, 0x90) 10.975140928s ago: executing program 5 (id=1168): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x800, 0x0, 0x103, 0x1, 0x3}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80000, @local, 0x11200}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=[@tclass={{0x14, 0x29, 0x43, 0x200}}], 0x18}, 0x440c0) 10.805105067s ago: executing program 7 (id=1169): openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = epoll_create(0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x80044940, &(0x7f00000007c0)) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000440)=@assoc_value={0x0, 0x10000}, 0x8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$video(0x0, 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x0, 0x0, 0x20493859, 0x0, 0x0, 0x0, 0x5, 0xfeedcafe, 0x3, 0x7}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) socket(0x2a, 0x2, 0x0) select(0x0, 0x0, 0x0, 0x0, 0x0) close(0x3) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) getpid() setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r1, &(0x7f0000000780)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x3404c8d4) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="f710020004000500"], 0xc) 10.732489097s ago: executing program 2 (id=1170): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x55}, 0x94) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r1 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) syz_mount_image$cramfs(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x8000, &(0x7f0000000000)=ANY=[], 0xfd, 0x14e, &(0x7f0000000400)="$eJzskD9LamEcxz/PPeqV65XrhXvBgiJoSAzzeMS2Bo0kITsQuLTmiQJN0cUxmxt6AQ5F0HRw6gWUTZZCGL2HFregsXjOo0PQ0At4PtPv++d8D+dsrA1jRMBAsV6r1htOs+mUF3bsYt4/sfkJBL2rWm/Icln5N1k4AH4A47ay78JSVZyVvVpF6nEWYkAuBPuHfkw51YZf0vv3LBBqSz4fW4Tef9mrONYXXnrizfog90d5JvB+AUty76/yUsAr0OpMPyERv5ozshDwVKsTwr3fHvQLifi8c2rlZy5/Rw1KjoyFzJ+S/cRjsuuOhoPill20h2nLWk2bKdPMjOyHQSFzfIZv8wXY9frLXddQewG5UYITAR0BrpePb0WY6esVRxEQMvFU7/zNrspfcR0ElRhE/WLaVkfgk9JoNBqNRqPRaDQajeZbfAQAAP//hTdUVg==") r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r2, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x80000000) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000140)={0x8, 0x1, 0x0, "c47ca974d752119b86f18278d4bdf6cc096d032843d14d6134c64207cc7cead7", 0x33363248}) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty=0xe0000001}, {0x0, 0x17c1, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "0b86c107cddd39d10e870794ae120f860174b07efe05336d54f519ebba5a2b26", "5e5992c2209db5127a4a84d3d6e03d081a4118a2bbd22f0ca038289c45b30eca6703476382c29175c40096a9c60c3cce", "6a9f3a451dd7eb4523c02c2a4a00f81073727f3ac9f91e284b975a32", {"8f865412904bf83debafc6eb2500b006", "21144ab13a642475fc21552dce5cda9c"}}}}}}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x0, {0x2, 0x4e22, @multicast1=0xe000cc02}}) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x21408c, &(0x7f00000006c0)=ANY=[@ANYBLOB="7a65726f5f73697a655f6469722c696f636861727365743d6d61637475726b6973682c6572726f72733d72656d6f756e742d726f2c646d61736b3d30303030303030303030303030303030303030303031312c6572726f72733d72656d6f756e742d726f2c646d61736b3d303030303030303030303030303030303030303030302c646d61736b3d30303030303030303030303030303030303030303137312c6572726f72733d72656d6f756e742d726f2c646973636172642c646d61736b3d30303030303030303030303030303030303030303030342c002e934329e090e6b5d13f753b89b7a89542f7eebfc0547079cce74b9a260eb2bf25ed96cbe29d669e816fe957c3b358409596eee859eda1d789b37215fdc66fd5c57483bdc31e92515a619cfbd2ff5ef73cc6eb56f737f28c116374658350d240033709495ca5d9ef"], 0x5, 0x1524, &(0x7f0000000e00)="$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") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x48242, 0x1ff) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000002340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELSETELEM={0x56f0, 0xe, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x1638, 0x3, 0x0, 0x1, [{0x278, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_USERDATA={0x1e, 0x6, 0x1, 0x0, "54f4853ff86efce7e7382948229ad136e99d5a4b5a16110c3178"}, @NFTA_SET_ELEM_KEY_END={0x24c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x100, 0x1, "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"}, @NFTA_DATA_VALUE={0x5a, 0x1, "2e82591abf3bf8822978db2cc3db0d0b1c5277823b09992f071436a1440ca665a71a82f5ef87e485b0845dcae717fc42b5404e58a211d44ecc99d64f975deba021f0fff08d809d5a74a18a017b9cc1168524b88054e9"}, @NFTA_DATA_VALUE={0xaa, 0x1, "57ebdca9b321169fb7c721216a4d9fb439f99a132430ffdbff4180e5563325e9c4e75f5a9710ffd81e7dfde76a289b111b90cb37077db48bfc2d382bf88e179d4a65bba6d4bd96e0d67800c5ff90eb1fed79f2455228ad77bcc7e4da0303f9bc9d062db84e0adb0ec572142e42b8a2f949d08a7f970276f4e410e3d64678f78a2e3175226e87da6e6607457f18c25b0f56ced00c9c08119bc5c9dae7288f9bad2b33847bfa2b"}, @NFTA_DATA_VALUE={0x40, 0x1, "36a89ec0a29c5802b559b9225902e47ea7a481278e4a9c0af11e1ef46fba95cbb04a0739b133ef32cd8cd6065edb8aa1a9d64db2bf6d56f4b0b22736"}]}]}, {0x121c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x26, 0x6, 0x1, 0x0, "fc3168a233e19e6e43bafd78171b01a4528c862c58925174788c61caeef04021375b"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x10001}, @NFTA_SET_ELEM_USERDATA={0xcd, 0x6, 0x1, 0x0, "0b80d8155ac7d660a1df9f8995ff38071889d61719c5c16974fb17a15780d5631f01641847e06f1a584d4fd909ad02f5b91b59c2c4947a3d583537a26addeb619a8b6ff049cd976d8a466bad59229ad6579847fafcda7a3329a03bdcc9b18a11f661425a83b141ad60b9d1f8566f2226b9c81bea8b2f081aff5c7b109eed856e0446eb5d6c59e4e316792154e0aecee4ab38ff9c2825f25f4b2e17cefbf1b47a9f1769b70f7f4f9ec0340284d383bcce19e4dffb8a80a0a1df153a7626118bc8467f46e0b469005f31"}, @NFTA_SET_ELEM_KEY={0x1114, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xeb, 0x1, "83a1f5fba2b74e1348d8c8104dbb6d60245d59799b07950a83346e79268e951f5c60a78816bd99082f950ac31726e26b596f931dfb5e0f0b6ba9dca583b5fc185a4c71eba95f344c41018f89858cb9a473fd77a11a405e2a8b803c59d8d5be00f9448df4ee375bf7010171f0a964c917db85a76279ce73d76c5967a245dd2de27fe2a21533927fcce4de7cad324118d43f036f950ef50afe60a8b99154adb7492259d17220fba668068d8f8e36459a267ec8abd6ab1c820c45afa3be16aa4d53df4aee5729f7ea10cfc82c2fef7341f8d97ab83f226fc2e9cbc51944efd6c45e765de2ae9aad80"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}]}, {0x1a0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x9f, 0x6, 0x1, 0x0, "c8fe84029e3812566bcd2115aba6ed03d202a5220a6aeae05d80cfa1a1af5c418df7a2844dfef57e010918b4d31f8a6df174f16cd88fb86f129181f7d52c1764d58c0f067c613ad7d84447caa19f4f8d8f0ece233d28d11892d8fa36b8ea004569eab5e86253a00ce70fdc070381d17979b0abb3d2699a8c71c430b40c270554b1ccf80a509779469136c7adf4e044b66ed20beaf0dc92d0fb6038"}, @NFTA_SET_ELEM_KEY_END={0xe4, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x7c, 0x1, "9c0552f0842260a7aee0b0760d3e7485441e9ca60866ab9e816dd14994c3edc3ade23abeb553b004f62eac783ad647d2a2d9d855f17147e87eea2902f81805d7e93e33f0ca60e88e2f6bd2805147add46c8245241fd9702e903308637030f09b7fa9656d1467503f6c1b698d36e77c33a32f2ca9c0fd566d"}, @NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1a50, 0x3, 0x0, 0x1, [{0x1a4c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_KEY={0x1f8, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xda, 0x1, "5cf57f17e02639da7150ef12d71eb20c8a48c27a6bd8c7ad5a10088b60aaee8e5bbd0448308aacc9a782d97fda1a140770b45ac5688c92bc30b5e25b739ddf9c7173b0f4917087300019b34eb56add97d075e6fbb99891ed0393d2e631c519ada9ba40fed3e052bb7f9b67a2ea5c2ecb50f689195c0b8345942d815c1bc666013ed704fd2c056d0808ded39ee68bcd40caad71a733e124158bf099855c0852c6094b6ed0c419acd954262daf601625a619b008a978a7637a518c06a56ff26c3f0dea71de61f0a4d9008fed0821ed2543dc7de414a4d4"}, @NFTA_DATA_VALUE={0x72, 0x1, "cb58481a7884ea21fbe86645a35d19c6461ab119b6615de96991fe26850986b4f1a6040971785a85e72af3928598513dec05bc43b264f901e8599fe986242259ad638f773d3f55e97fbf8993a565609f04a73b255609b1e48ce7f97fd49173b611ab16743f29dca890c536f934cc"}, @NFTA_DATA_VALUE={0x44, 0x1, "432053616a9eaefbb6443750f4bdd0883652e3b8454e5b7eb0b0760ca5e718cab29fe8ec760eb6998d21753ff8dbce75b3cfe0b21b5523891d7d6cb44ce5264e"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_KEY={0x10c0, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0x55, 0x1, "e9ce1c764f252cb6561d7fb220ab243dc64225ba24cf500b4e45afdd03464aa055488ab84846cc04744ae0adfa1f6333dd6e22143589a773a994c7ff5ff2dcc8db97800e628f39ba7d5370bd7f5fd0b8a8"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_KEY_END={0x70, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x8, 0x1, "4c029c88"}]}, @NFTA_SET_ELEM_KEY={0x90, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x18, 0x1, "dab7353b9399331aa01b61011da05b0d3144b43b"}, @NFTA_DATA_VALUE={0x3c, 0x1, "6fa729810b5506230fd8182ee429dca2c004ae48a244d9a5e6df2b3b422ee2d9144529b763f53cfbbbc7f6b048e4fec64fb4689b1821c5ef"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x4}]}, @NFTA_SET_ELEM_KEY_END={0x4}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x400}, @NFTA_SET_ELEM_EXPRESSIONS={0x668, 0xb, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_LOG_LEVEL={0x8}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0xa874}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x7}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x55}, @NFTA_LOG_PREFIX={0xa, 0x2, 0x1, 0x0, 'exfat\x00'}, @NFTA_LOG_QTHRESHOLD={0x6}, @NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x9}]}}}, {0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0x5f0, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x5e0, 0x2, 0x0, 0x1, [@NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_BITWISE_DATA={0x330, 0x7, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xbe, 0x1, "9ecc6cb177e93c3422902ff3c0fe40eff83bf0a567dda20e7e224317b44abb2c880dcbab37aa06affe7b72aebd9a2405a622cee94c8bbc1bc8d5bac42c0af8289882ef0d9e7c2520d75216242961286b8e8789f3c065aba156b0fee86534568712fd79109cb2dbfbeaa2e05a26bc82f02a04a6e591014ff0d390bc28921e4c28936a92eea49e351e5ea97ebf65ac589796dafe9ebc0439cc4043c97647ddbd0a4e35d71d2e6a0e5fabb9bd731d0e29271482af32c52111912918"}, @NFTA_DATA_VALUE={0x30, 0x1, "010f8494c121e79f5a8d3172c00b861f0b37caf63727ff086e7150e96ecf9bf3de87d5ca1cdf2713db053a65"}, @NFTA_DATA_VALUE={0x2d, 0x1, "156f681cf754a9bfab4818ed00b7b46f814cd387a0a6da75f64885c31643f5bebf200affcd58b627dd"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xcb, 0x1, "65b0f7fc04549c6b9a71609e39e91c0f9793acbaaf5be59f6c11c4c9c5044df41caf915d09dc3d7907bd32b2ef8c1eff6dd17aa16596e77e0c51c35f36c12e3c942d8a552e88f4121d1551839d633b87974b3adbb899671311b63dc1f9ca61d3772b49f9e8aba8f4137cc040c33596d195aa4c6406d18e3e53db077517452d812767042291163846cddfe8d24a77085127174b1a9d5dd71cd0e6ff9194889109ba17970c1e0f848487c3f463aca76ea67ac3e528a70195ab3fca5b8e6ecd08ed083c849ce05335"}, @NFTA_DATA_VALUE={0xea, 0x1, "27e4d99ed7b40529291550a0c345884ee14cabd3c9150e6758bc7a2bf608d4ee3a5f711730f72b526187ce2eee3d1ff36f04d0766834d763b7fed7a9be269d994e81e75894a4b7fb444495a78a17c77bdcf89b31daab60046b886dac37bdfb73ccb44c708f5d4ff72de2e49cd6a77e3eaca7e6d42796a7ab5ebf8001fb5f61db5be2058fab52b3b657f3839aa70811e9490592389533a0100f2179118ac6da73d5c54b7557866fb56b9bd2f8b96252411226696151d2df8253f921a8e5c9ab134d638c2ba62669cee9adce21cc7ea4d683444894f18d93f85a682652a7042efba3e83dc3778b"}]}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_BITWISE_XOR={0x20, 0x5, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_BITWISE_MASK={0xf8, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x6c, 0x1, "df319d67a7380e35c634002edb66ad30e1022873461af40b53fea9e85ace96d5646a4fbd2e717c2fb647d450d6b65bf71339f44a7418b5cdf233ece33a11f527ab70aea02348b686a7560853c28df5fa4542fb06589c26e450e3fcf5ae8e8ad5538cdfc1cae2fa07"}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x8000}]}]}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_BITWISE_DATA={0x174, 0x7, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xb2, 0x1, "3f20d403c3f0a436576a97095e81ade1eddad70622e9f97faf3f491a4d978225de6298a51218608c0acb16ec2011aefe5905993ea9deaf811e1bca08910dcf2d6176d6dcc5588141460fc33bf05d157f7b29f2b92fe4751f1ae40a19ba57656386c59eaa53a5ae2f46a2735a08a85c1e05a4981606a8f91bea80eaa555eaebbae3cf1cc445bf30887bdd5a3ea39b4de96a180cc2c01ef3a18976d245554f84625bc648d0c659930d3a715856acbd"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x9a, 0x1, "35ead301d2cd205b504819a20b6ab3ace5459671ec8438640da44372c76fdc554ed88004a369dcd3bea8ecb7ef7c26e0fc9635047719b9cd1585f12015ea9516b68b18663c6d4dc3c469023bf0e82a2908afd00c9e79da4734eccb48f72a01b8e9d33395de0602c5d2374327cbfe3595ce1b2c1559512bd052f84bb88802c7513f46b91d63b6eeff4a12fb58c90fb1f980101993ef4e"}]}]}}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2654, 0x3, 0x0, 0x1, [{0x1b0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x6c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x68, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_SET_ELEM_USERDATA={0xe2, 0x6, 0x1, 0x0, "dd63555730499d9da0a3f46c7fc91ac59f266071c9f819e0a9c1ce124d60ffe8bcfe84ac3cdb8f4dbc23b83745d9ed26d392435bb981ed5211819a153e57602763afc3fedcfe5e3c32a050973f5ff8d21931f38d13414760203b56ca4bbf30c0c0b87b56da17cbd6dfdc7ab4096992a8c031ed97b33e1de1e03d233e2e67bd9768e42ff8da3d1b2588dc1942612a9b828d679f6d3d28fcc73f8277f63b94225a1a9cf5f388876d1bdcf32b5fc3b110fb4756272874a6e3edad785aeb94eb5350f2de895429f260537ff3a1ae842854a1301897dc7f58cfb4cea7fcc43048"}, @NFTA_SET_ELEM_EXPR={0x40, 0x7, 0x0, 0x1, @osf={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_OSF_DREG={0x8}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xf}]}}}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x185}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @bitwise={{0xc}, @void}}]}, {0x214, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x4c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x23, 0x1, "5b8e071da90d46e157cc52415041606175bcd827f4e9a49ddc35d91acd63df"}]}, @NFTA_SET_ELEM_KEY_END={0x1c4, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd, 0x1, "ad29354e3fe75190ca"}, @NFTA_DATA_VALUE={0x13, 0x1, "5268afa71878f7f9b7aea2c0f1980d"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xc1, 0x1, "322115da4676a11f2fb67ae24840fc49665da8e496dd75ceccfc23a70733c6e0d659a8f843a778b98d8614d8c27f388c0a1f774d69764d2dd77172b2508b9ad1d63c8d00c449209e6a14e0ab19e71cbf7575877485563eabb28277daea6e5c55a4432e91cf5e46a311e23442399b7615cfdd27c0a4d0aa113a1c5b7c1398c332b4dccab56a15ce8e17c4d606a99295f162316e4ffcae48d3da385dbd46f475c498839dfdbf8376784e5da91e560f96d9e5fbb5688e730660c1008d2054"}, @NFTA_DATA_VALUE={0xbf, 0x1, "5cd331c433ea99599251123ccc5945d3bc2788e85e4c848b483f74a5a00eb4408dfba03358dd42f3b847e77870c913e8a230d432e06e9b2f69c25638ee4c9421908fdac3ad5db15c91e9c6a4a265f2520371f9b4be0110f49e2076a8b9e0ce42d7dc701b90f354d93dea685e626263c0486680cf7480cc098ccefe145ae725bc6d41f1febb48b4659e12143daacd1d92b52839f0038b178d3a97aed3700f675311c9ae499eff317618886f96b0f7d45bc66d4eb71557df8a31076a"}]}]}, {0x1500, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xa}, @NFTA_SET_ELEM_KEY={0x194, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1c, 0x1, "7ad7113a2fe4979056e23cbdb5a274fbbdb31f59fa2a5dee"}, @NFTA_DATA_VALUE={0x27, 0x1, "de0c5323266fa5686f4b8ecc2c131473aa3b84bf896620730581384905ef8daea0c9ef"}, @NFTA_DATA_VALUE={0x40, 0x1, "05fcff178b5384bca676f0e208d45231084bd9b61c93bad650f05f072c83850606d4ffd13091b077b589acc0dc7fab22b8aeaa24bb15793378a0e237"}, @NFTA_DATA_VALUE={0x1b, 0x1, "e4debe216ae3f428c8af3a2aec605ef949abcb060cd611"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x75, 0x1, "e75f5cfd69b71094fa838fb8bd5417005605cb6ab1420be120ad402bfa446987b393a8288af6a769811e355769a841df851b6bf3edb7e41dbb75a11b0579b93737361513ba5aa27c2fe0b3e257a21a4b2d672d6e668701cd8f80af4e9f4ec8c7f6a1ce76b3dc16314e9e4d092582921bdf"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x10c, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0x38, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0xd}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x77}]}}}, {0x64, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_HASH_SREG={0x8}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0xffff}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0xc0a2}, @NFTA_HASH_TYPE={0x8}, @NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0xf}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_HASH_SEED={0x8, 0x5, 0x1, 0x0, 0x7f}, @NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0x40}, @NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}]}}}, {0x1c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}]}}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, [""]}}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}]}, @NFTA_SET_ELEM_USERDATA={0xc5, 0x6, 0x1, 0x0, "a151c83223b52849aba6dcd923cb1df49ef6308ff5995a9b516fa1d2fa9b9364ae0bf58cbcc118a8a923ec24fb37fa0620107eb20d4ebfe69be394a9141f3f504dc70951096bd9917aaa1c9684d3169bff6b35b2cd6df5b6264602cbc4d84b2133ad87c31cd4bafd11d5ad5eda729530193a3a940d5f3c0b7e717ae89875c8de5c4920528c94f26de8fa253e1eb9086ab86d691b42b93390d2036d414a35a25cde4ba31b44b50c3baf0915f95e39a452de558f167255692b4e77a2b3a408bfeac3"}, @NFTA_SET_ELEM_EXPRESSIONS={0x20, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}]}, @NFTA_SET_ELEM_DATA={0x1168, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x32, 0x1, "65ef6d77f9159e069aaeca26b5dcb20669158b6dd49cdfc22a96ac5ef0e1550bd5deca87a85b03d1700bed31d278"}, @NFTA_DATA_VALUE={0xa6, 0x1, "48ab50d7a73425ec957d981b1becb6305b7188345b991b858280c69cf136f62b25cd8b7dc641448772b8edd76cfb173037f161af05eaa29008b6a500e478227a17cb21be9abddb2e59a289e3b85e84fa706dcd780fa08c13a96c5c195b243c8bac2942665f2d0de910bc2bff31268944a8db067ee09bbfe5a3510131ae3e9035d32d4eade1627588ded38fa37d1a3a85b53e0b326ac19938d4b3c03c3b57014ae72a"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0x1b, 0x1, "47342c1334f0dbaf683ee9474d264c3f8fd666113019b5"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}, {0x1b8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8000000000000000}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @connlimit={{0xe}, @void}}, @NFTA_SET_ELEM_USERDATA={0xa, 0x6, 0x1, 0x0, "ddc8f6e607c8"}, @NFTA_SET_ELEM_EXPR={0x1c, 0x7, 0x0, 0x1, @limit={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LIMIT_TYPE={0x8}]}}}, @NFTA_SET_ELEM_KEY_END={0x160, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xb9, 0x1, "9c18ba9bcae5bb4bbded7dcef327b89f81badc687d8c252ae2c2b87c6acc7054859878708da34ea584ce733e1866e9834877cf37cb98988639383b05ef8842e844edb7cf91702e5d53cb81aca2ad37d67b4d266cd937394e1d05f8c8ef8d3aebb0f8c661c58609a619cd91afe3f8fba4865ac27efd57629a87727bbb99513b003e27842ef4d742e1212b9b561ac5e60df837b64f12ddabe167cfa31ef5d22be51b5d61aed5ccfe3601771eaaf5f75bf74b994a2cbf"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x2e, 0x1, "1918602db825d7bd610e1c24241f61344d1de024b1f0eaf3250cee4f58e54e5f50c851bbe383e0d68a44"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xfc}]}, {0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3}]}, {0x334, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x63}, @NFTA_SET_ELEM_KEY={0x1b4, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0xea, 0x1, "51b9dbb0708093b644e785389e0bc54cc86dd25f62745a53afbf0e19e294c8bc1bf3f61789a38158c9426c6dc82b2ffb368164bf6ffc97354aca300ab36cf7cd7f322e4ae313c834fb769e6e24a4d117187c25b55b04760b168bc7aecbaf3143ffebf1df9429b367057b661f3a597d963f748d51a14dfa8258f7a41e63582963141aa284d5c078c6c24c78563278ada6ba2df432929ea294d5e58b79749405d51e46349a3f7bc8be89f82add8cf7189b5aced3bf0ec02e733d2a88fe85a559d73865bbb8b9199f6d25141587fd707978a3af67334a118329da6f96da5eb04a53486bc83bc6f9"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_KEY_END={0xcc, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xab, 0x1, "b0137286eff875172e28dd45411a0b686ad2a881c104996212f2f095090b4016679ba3e4852216bab88020a4a0e87f77151c540af367144a4f2451718b67d45591627b0dcb4ca7b4a7f76b0bbd649d3721d7ea0e2de195292fc446e206e0333ca14416905194ec3b3db898bed43e314e43d62df47a7cb8c15fe9ff11e4c11f1e26f24d529dd8601cd26c9b48f39e6811b2ab9f419e2c3a7bd4046eaec5451023cb0b2bcfc106a4"}, @NFTA_DATA_VALUE={0x1a, 0x1, "64a0d2f89b962a1678b353aeebe2b2a9e8da06ec5246"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPRESSIONS={0x80, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}, {0x54, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x7}, @NFTA_LOG_PREFIX={0x8, 0x2, 0x1, 0x0, '}}^\x00'}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x9}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x6}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x6}, @NFTA_LOG_PREFIX={0xc, 0x2, 0x1, 0x0, '(,\'(\\*]\x00'}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x1a70}]}}}, {0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_FLAGS={0x8}]}}}]}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0x684, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x328, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x7, 0x1, "b971e4"}, @NFTA_DATA_VALUE={0x50, 0x1, "607af0312766cd79af4c44be252e27142e0d1b4384dd95efe587e7a3902785d9931573d1975c96bf68769aa3d9eaf9a940c5ddc135d9270fa1dad7926c92fb2f0092165092b28cc54a911bf3"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x4}]}, @NFTA_DATA_VALUE={0x9c, 0x1, "c9a790db613da41cd94941273cd0471502f1d53c8a03b3600e9f61e168d8276eaf91fa45394a75f720dbb4fb7728ebf8eb7f765c067410e1521760e79aeab1fd77894b901219825ed3db0d5163da176fe4b5a13fe83e94fabb0c7b74c4ed49fa684644bbd76d17618e0e498099a096e171d4e758a2ba322f9c4a87939197f8b3abf26e47a5ec490bc3d29e30dbaf21f91a627af0b86135c7"}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0xff, 0x1, "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"}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_KEY_END={0x19c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe1, 0x1, "18150c6bb341549c66fd879df2f467d0e5b9b75be080ef4733c88e3a1ada801f9f772496df48c931ee33750349537a6325a0f54e71f6971d953ddbb35ed62f5db530873850a62e1294b98c13b837e8b639d53dba04be97c2074d30a1b01dbbd4e582b8e5db0c9a0010f546597abba3d5953c400fafacf38460fcbd87bc058104093878a521d9d4c9934b567b8bebfbe54b937ccea848d0d8a75f46645cc7d95f39c21f0c63f6ce356f7110e27c9eb04b6351918b53da40c06bb25a4721dfc82b6333a254ba02a1ab790afef732b90478500ceb4ae87b5d82eec9ae112e"}, @NFTA_DATA_VALUE={0x26, 0x1, "68a2bf441eb85262a6f7e68c388579d0f3e13cd30b9da702b3d58f21ef0561c08fee"}, @NFTA_DATA_VALUE={0x74, 0x1, "99da4db427f0f086fd4b55a917cef515d8b0cf9ba195bb6737750764cd70c2479cca1ecbdb28787d30ea637e8ece56c7bb33bb9484bd6cc0d1de90d5da9883349d168c5d4b24e7985295cc31779fb98495819d9d2c118e41aec9f9daff69a67e59245834e76869497e4f391fc025b064"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_EXPR={0x38, 0x7, 0x0, 0x1, @fwd={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}]}}}, @NFTA_SET_ELEM_KEY={0x2c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x19, 0x1, "b4dea643ea8ffb6dc88910823d4d3e761ae44a987d"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x14c, 0xb, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TARGET_NAME={0xc, 0x1, 'NFQUEUE\x00'}]}}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0x58, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_QUOTA_CONSUMED={0xc}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x81}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}]}}}, {0x48, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x8}]}}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0x1c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x7fff}]}}}, {0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x5a}]}, {0x1f0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0xf0, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}, {0x20, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_DYNSET_TIMEOUT={0xc, 0x6, 0x1, 0x0, 0x5}]}}}, {0x48, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_TTL={0x5, 0x2, 0x80}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_OSF_TTL={0x5, 0x2, 0x4}, @NFTA_OSF_FLAGS={0x8}]}}}, {0x64, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x1f}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0xe5}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0xdb}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x3c}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}, @NFTA_SET_ELEM_EXPR={0x24, 0x7, 0x0, 0x1, @inner={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4815a8ee5eccf59d}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0xe}]}}}, @NFTA_SET_ELEM_KEY_END={0x54, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_DATA={0x18, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x60, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}, {0x34, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_TUNNEL_MODE={0x8}]}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xdb1f}]}]}]}, @NFT_MSG_DELOBJ={0x3c, 0x14, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x12c, 0x16, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0x110, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x52}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'erspan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'pim6reg0\x00'}, {0x14, 0x1, 'dummy0\x00'}, {0x14, 0x1, 'veth0_to_bridge\x00'}, {0x14, 0x1, 'geneve0\x00'}, {0x14, 0x1, 'syz_tun\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'dvmrp1\x00'}, {0x14, 0x1, 'wg0\x00'}, {0x14, 0x1, 'veth1_to_batadv\x00'}, {0x14, 0x1, 'pim6reg\x00'}, {0x14, 0x1, 'team0\x00'}]}]}]}, @NFT_MSG_DELSET={0x120, 0xb, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_EXPRESSIONS={0xe8, 0x12, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x9}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x8}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x6}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x4}]}}}, {0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}, {0x54, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x1e}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TPROXY_FAMILY={0x8}, @NFTA_TPROXY_REG_ADDR={0x8}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_TPROXY_REG_PORT={0x8}]}}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}]}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @objref={{0xb}, @void}}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x10}]}, @NFT_MSG_NEWCHAIN={0xa8, 0x3, 0xa, 0x401, 0x0, 0x0, {0xd, 0x0, 0x4}, [@NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6451}]}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x14f1d32a}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_FLAGS={0x8}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x88, 0x16, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x6}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffff8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9ac0}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1c}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x34, 0xb, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x4}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x20}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x40}]}, @NFT_MSG_DELOBJ={0xbc, 0x14, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_OBJ_USERDATA={0x25, 0x8, "9db2c149bfb54cae0995de01506b1af1fd41a59794a023cc79b31ef4805a73251f"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_USERDATA={0x54, 0x8, "820c138193683d069ed48208889a7317892e651b6c50f6b606b7a57f7399608d129d424058e23384e03631d049fe109adf116b9ddd3b0099f35db4dfe2a70de5cff936db276d86a46bf37f5c03b54a5a"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x5be8}, 0x1, 0x0, 0x0, 0x20008050}, 0x4000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b7"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r4, 0x0, 0x115}, 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000029000000180001801400020073797a5f74756e"], 0x2c}}, 0x0) 10.402323347s ago: executing program 5 (id=1171): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000002c0)="beaa38543627a7a662afe0d83fc3e43fc6c358893ae9cb8787f4659b80c54d51815d", 0x22}], 0x1}, 0x20048050) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="930200007d00000005f0000000000000040000000000000000000000000000000000000000000000000000000000000000001f00206e6f6465767b6376666f7892ffffff8102000000000031ffcebc920000003800704a86cec6"], 0x232) r2 = accept4(r1, 0x0, 0x0, 0x800) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000700), &(0x7f0000000740)=0xc) statx(0xffffffffffffff9c, &(0x7f00000007c0)='./file0\x00', 0x6000, 0x7ff, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 9.808771821s ago: executing program 4 (id=1172): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)={0x38, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "f2deaec60d4b1e2df07090b7d0448baffb97e853a83fd542"}]]}, 0x38}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) write$FUSE_LSEEK(r1, &(0x7f0000000040)={0x18, 0x0, r2, {0xf}}, 0x18) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000240)=r0) 9.719713189s ago: executing program 7 (id=1173): sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg(r0, &(0x7f0000000540)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x4, @loopback, 0xa, 0x3}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000000)='p', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[{0x10, 0x84, 0x5}], 0x10}}], 0x2, 0x20000000) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001aa40)=""/102400, 0x19000) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$cont(0x20, r2, 0x9, 0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$loop(&(0x7f0000000040), 0x1, 0x30000) open$dir(&(0x7f0000000180)='./file0\x00', 0x20200, 0x81) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi3\x00', 0x48081, 0x0) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f00000000c0)={'dt2801\x00', [0x4f27, 0x2, 0x10000, 0x4, 0x4, 0x0, 0x8, 0x7, 0xa, 0x0, 0x2, 0x1, 0xff6b, 0x800, 0xfffffffe, 0xb4c, 0xffffffff, 0x1a449, 0x3, 0x40000003, 0x89, 0xcaa7, 0x0, 0x20001e58, 0xb, 0xe69, 0x3c, 0x8, 0x65c, 0xfffffffd, 0xfffffff8]}) pwrite64(r4, 0x0, 0x0, 0x5) 9.634978186s ago: executing program 5 (id=1174): syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(0x0, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'bond_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r3, 0x11, 0x6, @random}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0x5}, {0x0, 0xa}, {0x0, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000100)={'\x00', 0x8, 0x893, 0xfef, 0x9, 0x13, 0xffffffffffffffff}) fcntl$lock(r4, 0x6, &(0x7f00000000c0)={0x0, 0x2, 0x7fffffffffffffff, 0x0, r5}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071042b000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 9.455482138s ago: executing program 2 (id=1175): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000180)={'\x00', 0x86, 0x3, 0x30f, 0x200000000004, 0xfd22, 0xffffffffffffffff}) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1e000000320000000300000002010000140200005ac595875d39a754c82bd519b9740282c9d97ff460664ccba310ae5386aca244dfbe2b2e5e34f5d60bf3b5a709d0d7d1a92d68bdaae47644506207cf6e6ef14c056386f42ac0ce75bd1452ce92a82b91777ff6b81ea4d08d540fe41f2ba976140cd52b3068092fa245e197927b", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000050000000400"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="2030e7ff0100f3ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x8040587f, &(0x7f0000000100)={0x0, 0x8008000000000005}) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) io_setup(0x8, &(0x7f00000003c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000780)=[0x0]) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) accept4(r3, 0x0, 0x0, 0x800) 9.420143907s ago: executing program 4 (id=1176): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) 8.246181293s ago: executing program 6 (id=1177): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0x6, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb600000000000000008d0000007500000095"], 0x0}, 0x94) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f0000000c00)="c8af5fc479cf", &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 8.0499144s ago: executing program 2 (id=1178): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x4040810) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000040)="0000006aac", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000002f40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001b00)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x2400c044}], 0x1, 0x8800) sendmsg$nl_route_sched_retired(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f80)=@delchain={0x43c, 0x65, 0x200, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x4, 0xfff2}, {0x5, 0xa}, {0x4, 0xf}}, [@f_tcindex={{0xc}, {0x40c, 0x2, [@TCA_TCINDEX_POLICE={0x408, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x8, 0x4d8, 0xffffffff, 0x8d1, 0x8, 0x9, 0x9, 0x0, 0xfffffff7, 0x4, 0x3, 0x81, 0x8, 0x6, 0x6, 0xd62, 0x6, 0x7, 0x29, 0x5, 0x5, 0x9, 0x2, 0x1000, 0x2, 0x793, 0x4, 0x101, 0xffffdc7a, 0x5, 0x7fff, 0x1, 0x5, 0x4b37, 0x2, 0x4, 0xd9a, 0x1, 0x4e, 0x3, 0x800, 0x9, 0x1, 0x9, 0x1, 0x0, 0x9, 0x8, 0x4e, 0x0, 0x80, 0x10000, 0x80, 0x10000, 0x8, 0x4, 0x5, 0x7, 0x9, 0x2, 0x7fffffff, 0xfcf, 0x7, 0x2, 0x2, 0x4, 0x1000, 0xea, 0x1, 0x9, 0x5, 0x200, 0xfec0, 0xffffe49a, 0x2, 0x4, 0x58e, 0xffffffff, 0x5, 0x6, 0x7f, 0x400, 0x8, 0x80, 0x7, 0x3, 0x6, 0xd, 0x3, 0xce, 0xd, 0x7fffffff, 0x1, 0x6, 0x4, 0x6, 0x3, 0x7f, 0x8001, 0xed4b, 0x68, 0x9, 0xc, 0xffff, 0x9, 0x7, 0xabe1, 0xf97, 0x5, 0x4, 0x80000001, 0x6, 0x7, 0x6, 0x5, 0xfff, 0x3, 0x46, 0x3ff, 0x7e4d, 0x5, 0x0, 0x6, 0x9, 0xf1, 0x4, 0x3, 0x3, 0xb, 0x8, 0x7, 0xa, 0x6, 0x9, 0x2, 0x0, 0x4, 0x5d6e5b73, 0x8, 0x3, 0x1, 0x4a0b, 0x9a0, 0x400, 0x3, 0x0, 0x3, 0x9, 0x401, 0x9e, 0x8000, 0xf8, 0x5, 0x2, 0xffffffff, 0x3, 0x7fffffff, 0x0, 0x2, 0x6, 0x8, 0x7, 0x80000000, 0x74, 0x1, 0x7, 0xa94, 0x3, 0x4, 0x44, 0x0, 0x1, 0x13, 0x5, 0x0, 0x7f, 0x4, 0x818, 0x1, 0x560, 0x6, 0x9, 0x3, 0x4, 0x1ff, 0x4, 0x8001, 0x44, 0x2, 0x9, 0x8, 0x3, 0x8000, 0x100, 0x1, 0x1b35709e, 0x9629, 0x1, 0x5, 0x400, 0x0, 0x0, 0xba9, 0x2, 0x7, 0xe1, 0x4, 0x7, 0x5, 0x2, 0x21, 0xfffffeff, 0x0, 0x2d5b, 0xd, 0x1, 0x1000, 0x9, 0x2a, 0x8, 0x4, 0x9, 0x7, 0x8, 0x5, 0x1, 0x6, 0x6, 0x1, 0x1, 0x80, 0x1, 0x5, 0x0, 0x7fffffff, 0x3ff, 0x2, 0x5, 0x9, 0x8003, 0x8ee, 0x8, 0x4, 0x2, 0x9, 0x8, 0xd, 0x8, 0x7, 0x1, 0x440, 0x1, 0xaa20, 0x5, 0x4]}]}]}}]}, 0x43c}}, 0x4080000) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='h'], 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e0000000000000000000c0003800400038004000100c1"], 0x38}}, 0x0) 7.296627256s ago: executing program 2 (id=1179): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$eJzs3M9rHFUcAPDvTJL+bhNrrba2Gq1i8UfSpFV78KCi4EFB0EM9xiSttdtGmgi2BI0i9SgF7+JR8C/w5kXUgwheFTxKoWgQmnqKzK9mu9mkSZpkbfbzgc2+t/Nm3/vOzNt9My+zAbSt3uxPErEjIn6LiO4ie3OB3uJpZnpy+Pr05HASs7Nv/JXk5a5NTw5XRav1tpeZw2lE+mkSzyfz6x2/cPHMUK02er7M90+cfa9//MLFp06fHTo1emr03ODx48eODjz7zODTqxJnFte1/R+OHdj3yluXXxs+cfntH7/JmrX3YLG8Po5but4koCZ6s63292yucdmjy2j7nWBnXTrpbGFDWJaOiMh2V1fe/7ujI+Z2Xne8/ElLGwesqey7afPCi6dmgQ0siVa3AGiN6os+O/+tHus09PhfuPpCxKYyPTM9OTxzI/7OSMvXu9aw/t6IODH175fZI5Z7HQIAYAXysc2TzcZ/aezNn4u5jl3lHEpPRNwVEbsj4u6I2BMR90TkZe+NiPuKlWe7l1h/b0N+/vgnvdK0zaskG/89Vzf2m6mLv3zq6ShzO/P4u5KTp2ujR8ptcji6Nmf5gUXq+O6lXz9faFn9+C97ZPVXY8GyAVc6Gy7QjQxNDK3WRrj6ccT+zmbxJzdmArIjYF9E7F/eW++qEqcf//rAQoVuHf8iVmGeafariMeK/T8VDfFXksXnJ/u3RG30SH91VMz30y+XXl+o/tuKfxVk+3/bzcd/Q4nuf5JivrYrarXR8+PLr+PS758teE6z0uN/U/JmPmf98zvFax8MTUycH4jYlLya56tzuvz1wbl1q3xVPov/8KHm/X93uU4W//0RkR3EByPigYh4sGz7QxHxcEQcWiT+H1585N1F4k8iiZbu/5Gmn383jv+epH6+fgWJjjPff7vQjPnS9v+xmMo/awv5598tLLWBt7n5AAAA4I6QRsSOSNK+It27I9K0r6/4H/49sS2tjY1PPHFy7P1zI8U9Aj3RlVZXurrrrocOJFPlOxb5wfJacbX8aHnd+IuOrXm+b3isNtLi2KHdbb+5/0fV/zN/drS6dcCac78WtK/G/p+2qB3A+lvK979zAdiYmvT/ra1oB7D+nP9D+2rW/z9qyBv/w8Y0v///0eQn64CNyPgf2pf+D+1L/4e2dDv39a88Ud0ssPL32bLkO/zbJVH94sVa1rU15l6JtOUht1Ei6zHrW+ncb6gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcyf4LAAD///ss5ts=") lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000240)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000002640)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7c01000019000100000000000000000000000000000000000000ffff0a010101000000000000000000000000000000000000000300000000020020000c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000070000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000c40008"], 0x17c}}, 0x20044004) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) sendfile(r2, r2, 0x0, 0xe3aa6ea) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/tcp6\x00') openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$hid(0x6, 0x36, 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @random="a0725ce9403b", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb8000", 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, {[], @time_exceed={0x4, 0x0, 0x0, 0x60, '\x00', {0x0, 0x6, "fd9063", 0x2, 0x3a, 0x0, @empty, @mcast2}}}}}}}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) setpriority(0x2, 0x0, 0x7) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000001000)={0x10, 0x140d, 0xe3263c25d365e57d, 0x70bd2a, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x50) socket$inet6(0xa, 0x1, 0x8010000000000084) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) 7.130942161s ago: executing program 7 (id=1180): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x4040810) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000040)="0000006aac", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000002f40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001b00)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x2400c044}], 0x1, 0x8800) recvmsg$can_j1939(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000480)=""/154, 0x9a}], 0x2}, 0x81) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='h'], 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e0000000000000000000c0003800400038004000100c1"], 0x38}}, 0x0) 7.043939131s ago: executing program 5 (id=1181): r0 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xf758, 0x0, 0xfffffffd, 0x2000203}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f0000000080)={@val={0x0, 0x6003}, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x4000, 0x0, 0x3, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x1c}, @multicast1}, {0xa000, 0x6558, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0x9, 0x0, @val=0x80}}}}}}}}, 0x36) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SPLICE={0x1e, 0x1, 0x0, @fd, 0x7, {}, 0x2}) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) io_uring_enter(r0, 0x47b7, 0x2000, 0x0, 0x0, 0xffffffffffffff0c) 6.382596799s ago: executing program 1 (id=1182): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x78, r1, 0x1, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bridge\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x810}, 0x8000) 6.340205245s ago: executing program 6 (id=1183): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000380)={[{@debug}, {@delalloc}, {@journal_ioprio}, {@test_dummy_encryption}, {@nodiscard}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@acl}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}]}, 0x1, 0xbb4, &(0x7f00000017c0)="$eJzs3M1rXOUaAPDnnHy2zb2TXi6X27tpLpdLC+I0raTYIthKxY0LQbdCQzopIdMPkkhNmsVE/wFR14IbQS1KF3bdjYJbN1q3FhdCkdgoiGjkzEeSJjNJ2k5yYvL7wZvzvvOcOe/z5DBzzgszE8CeNZD9SSMORcT5JKJQfzyNiO5qrzeiUttvYX525Jf52ZEkFhdf/jGJJCLuz8+ONI6V1LcH6oPeiPjquST+8ebaeSenZ8aHy+XSRH18bOrS1WOT0zNPjl0avli6WLp8/OTTQyeGTg6eGmpbrb9+d+bWz/994fvKbx/9fuOndz5I4kz01WMr66hX/dgGYmDpf7JSZ0QMt+H4O0FHvZ6VdSadGzwp3eKkAABoKV1xD/evKERHLN+8FeLzr3NNDgAAAGiLxY6IRQAAAGCXS6z/AQAAYJdrfA7g/vzsSKPl+4mE7XXvbET01+pfqLdapDMq1W1vdEXE/vtJrPxaa1J72mMbiIi73576NGvR5HvIW60yFxH/bnb+k2r9/fVvQq+uP42IwTbMP7Bq/Feq/0wb5s+7fgD2pttnaxeytde/dOn+J5pc/zqbXLseRd7Xv8b938Ka+7/l+jta3P+9tMk5rn/43rVWsaz+Z249/0mjZfNn28cq6iHcm4v4T2ez+pOl+pMW9Z/f5ByFP66VWsXyrn/x/Ygj0bz+hmT93yc6NjpWLg3W/jadY+7LoY9bzZ93/dn539+i/o3O/9UHjtT6R31ePXfuZqvYxvWnP3Qnr1R73fVHXh+empo4HtGdvLj28RPr19vYp3GMrP6j/1v/9d+s/uw9oVL/P2SVz9W32fiNVXM+e+P6Z+vVn6398jz/Fx7x/L+1yTn+/8XbR1vFVq5/s5bNfzeprYUBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoCGNiL5I0mJEJNV+mhaLEQci4p+xPy1fmZx6YvTKa5cvZLGI/uhKR8fKpcGIKNTGSTY+Xu0vj0+sGj8VEQcj4t3Cvuq4OHKlfCHv4gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFhyICL6IkmLEZFGxEIhTYvFvLMCAAAA2q4/7wQAAACALWf9DwAAALuf9T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABb7ODh23eSiKic3ldtme56rCvXzICtluadAJCbjrwTAHLTmXcCQG4eco3vdgF2oWSDeG/LSE/bcwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg5zpy6PadJCIqp/dVW6a7Hutq+ozD25gdsJXSvBMActOxXrBz+/IAtp+XOOxdzdf4wF6SbBDvXd6n8mCkZ8tyAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDn6au2JC1GRFrtp2mxGPG3iOiPrmR0rFwajIi/R8Q3ha6ebNyTd9IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC03eT0zPhwuVya0NHRybeT7Iw0ap2835kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMjD5PTM+HC5XJqYzDsTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIG+T0zPjw+VyaWITnZsPs/OKTt41AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQnz8DAAD//9b4DfQ=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x17e) fadvise64(r0, 0x4, 0x7f, 0x1) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000), 0x4) getdents64(r0, &(0x7f0000000200)=""/179, 0xb3) 3.046017803s ago: executing program 5 (id=1184): socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_procfs(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xba}, 0x90) 3.030961753s ago: executing program 7 (id=1185): openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = epoll_create(0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x80044940, &(0x7f00000007c0)) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000440)=@assoc_value={0x0, 0x10000}, 0x8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$video(0x0, 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x0, 0x0, 0x20493859, 0x0, 0x0, 0x0, 0x5, 0xfeedcafe, 0x3, 0x7}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) socket(0x2a, 0x2, 0x0) select(0x0, 0x0, 0x0, 0x0, 0x0) close(0x3) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) getpid() setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r1, &(0x7f0000000780)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x3404c8d4) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="f710020004000500"], 0xc) 2.978741161s ago: executing program 4 (id=1186): r0 = syz_open_dev$video(&(0x7f0000000000), 0x75, 0x101140) r1 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = socket$packet(0x11, 0x3, 0x300) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xa, &(0x7f0000000280)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @exit], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000040)=r5, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x14, 0x2c, 0x0, @private0, @local, {[], {{0x600, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}}}}}}}, 0x0) syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x1014800, &(0x7f0000000200)=ANY=[@ANYRES16=0x0, @ANYRES32=0x0, @ANYRESDEC, @ANYRES16, @ANYBLOB="0cbd5b5353912a879413ea41a5629122f6276e175b189b44b947b5ed8f34c9675196c7f420a9b4778c892a009b17763f4dbda6a421bf154a20ef7653d70337286d09a41d27fbb619ff647f585a8577dd9c318e307ee0e9c3328c5093134a7c98153b0d68aba22a65e8773fad07b59a0c5437e47d4255e1e8658b9b5a0cf45c27f88d87d58476713ea75cc39cdeb6036614e0b73cfbcd4f9243e2124d8ff5112db88857c7b69007b6ff5355f42dac04033a790725615a827b96542e64ad60984b7626cc74628d2d76b1f32df646d70aa036bc7d42fd", @ANYRESHEX=0x0, @ANYRESHEX, @ANYRES32=0x0, @ANYBLOB="36f8c35371956e4f97a54fd2c44dba6172b1db9c34c1"], 0x1, 0xda6, &(0x7f0000003c80)="$eJzs3ctvXFf9APBzx544r/7iNO4vJoTEJJSGR+wmtSg7XCksKqQKKX9BFdKS4pZHwqJVKiVZsCVS1T+AqmtY8MyiUtRVUDcg/oGqKzahqlQgQmqNbJ8zHn8zw51xbI/H8/lId87c+z33nnPmcefOfZ0EjKzGyuP8/HSV0tt33rrw4OT4v5ennGzlmFl5HM9jCymlZmu+lCbD8hYmVtPPPrl+qT39PKdVOp+qVLWmpxfut+Y9kFK6kWbS3TSZLn589PYrHzy/+N6Rm0cuvHnm3ta0HgAARsuD77370z8/9d3rh//zmxMLaaI1vWyfL+Txg3m7f6FaHc9J639A1ZZWbePFnpBvPA+NkG+sQ772cpoh33iX8veE5Ta75JuoKX+sbVqndsMwW/sfXzVm1403GrOzq//Jl304tqeafe3K4ktXB1RRYNN9ejLv4jMYDCM3LB0a9BoIYFU8bviQG3HPwqNpLW28t/LvP9foPD9sgu3+/Ct/uMp/96Y1Dptnt36aSrvK9+hgHo/HEcbDfP1+/8vy4vGIZo/17HYcYViOL3Sr59g212OjutU/fi52qy/ltLwOJ0K8/fsT39NheY+Bzh7Y/28wjOywNOgVELBjxfPmlrISj+f1xfhETXxvTXxfTXx/TfxATRxG2W+v/TLdrtb+58f/9P3uDyv72R7L6f/1WZ+4P7Lf8uN5v/161PLj+cSwo5351/FPf373L/H8/8/D+f+n82/pZF5BlP2Fcb9669z/cGFwo0u+x0N1HuuQf+X51Pp81dTaclLbeuahekyvn+9Qt3zH1+ebDPn2522RvaG+cftkf5ivbH+U9Wp5vcZDe5uhHXtCPco7czine0N7DndrV9iRvSfka+bhSGjXVGjXE2G+/w/tqqbXtyvuPy/1ORqmx+MkJV942x76XYrvRbwu41ROb+X0nZy+n9OPOpQ7isrnsdv5/+XzOZ2a1UtXFi8/ncfL5/TeWHNiefq5ba438Oh6vf5nOq2//udga3qz0b5eOLQ2vWpfL0yG6ee7TH8mj5ffsx+O7VuZPnvpx4s/2OzGw4i7+vobP3pxcfHyzzzxxBNPWk/+x0rj1zMXr23jOgrYGnPXXv3J3NXX3zh75dUXX7788uXXzj397W898+yz83MrW/Vz7dv2wO6y9qM/6JoAAAAAAAAAAAAAPav2dZ6c07r725brycv16fH6eIZDed/Kp6Hcx6Bc/9ntvi7l+s3D21BHNt92XE406DYCnf3D/X8NhpEdlpbcxR/YGQbd/1+572FJD5792+HloWS7/9z69WW8fyE8ip3e/5zyd1f/f63+r3pe/4UesyY3Vu7vHuz7a1ux6Viv5cf2l/vATvVX/u9z+aU1T6beyl/6VSg/3qi0R38I5e/vsfyH2n98Y+X/MZdfXrYzp3stf7XGVWN9PeJ+43IfwLjfuPhTaH+5t18/7T91a+Mdtd3J5cMoG5Z+Jvs1LP1/dlOWW9aDefXcOk5X7r8d+zvot/7lvt/ld+CJsPyq5vdN/5/Dra7/z/L5m9P/J+w6Hzr+ZzCM7LC0tDTQrk9Gtd+VnWLQr/+gtyEHXf6gX/86sf/P+H8p9v8Z47H/zxiP/X/GeOxfK8Zj/5/x9Yz9f8b40bDc2D/odE38CzXxYzXxL9bEj9fE4/+3GJ+piZ+oiZ+siT9eEz9VEz9dE/9KTfzJmvhTNfEzNfHd7ss5HdX2wyiL/Ub6/sPoKMd/un3/p2riwPCK/TrH7/dXa+LA8Crnefh+wwiqOt+xI+5vL/txb+X0nZy+n9OPtqyCbIev5fTrOf1GTr+Z07M5nc3pXE71DTncfvH3YyduV2vn+R0K8V7PJ43XA8T7xJzrsT7x+Fy/57Me7bGcrSp/g5eDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyNxsrj/Px0ldLbd9668M+p73x/ecrJVo6ZlcfxPLaQUmqmlKo8Ph6Wd2NiNf3sk+uXOqVVOr/yWMbTC/db8x5Ynj/NpLtpMl38+OjtVz54fvG9IzePXHjzzL2taT0AAACMhv8GAAD//5Cp5/o=") r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.memory_pressure\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) ftruncate(r6, 0xc17a) ioctl$FS_IOC_FIEMAP(r6, 0xc020660b, &(0x7f00000003c0)=ANY=[@ANYBLOB="090000000000000003"]) kcmp(r1, r1, 0x0, 0xffffffffffffffff, r2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x14, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x24000805}, 0x8000) r8 = socket(0x2, 0x2, 0x0) setsockopt$inet_int(r8, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r8, 0x0, 0x0, 0x80, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x20d00, 0x0) ioctl$TCSETS(r9, 0x40045431, &(0x7f0000000100)={0x0, 0xff, 0xffffffff, 0xfffffffd, 0x7, "ff00"}) r10 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r10, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r10, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$NFT_BATCH(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x40005}, 0x50) r11 = syz_open_pts(r9, 0x0) ioctl$TIOCSTI(r11, 0x5412, &(0x7f0000000240)=0xd) recvmsg$unix(r8, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x2000) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000080)={0x0, 0x34343452, 0x280, 0x2, 0x3, @stepwise={{0x8001, 0x6}, {0x3, 0x200}, {0x7ff, 0x84}}}) 2.864204479s ago: executing program 1 (id=1187): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000940)={0x60, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x10000000}}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, r1, 0x5, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_NOLEARN={0x5, 0x1e, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x48041}, 0x10) 2.253889887s ago: executing program 5 (id=1188): r0 = syz_io_uring_setup(0x116, &(0x7f0000000100)={0x0, 0x3f28, 0x2, 0x0, 0x2fb}, &(0x7f0000000000), &(0x7f0000000200)) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, 0x0, 0x64044814) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x800) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r7 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r7, &(0x7f0000000440)="6af937e695978826", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r8, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000140)=[0x7], 0x0, 0x0, 0x1}}, 0x40) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000040)}], 0x1) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r9, &(0x7f00000002c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r9, 0x0) io_uring_enter(r0, 0xf3, 0x80ffff, 0x49, 0x0, 0x40) 2.167075385s ago: executing program 1 (id=1189): r0 = socket$inet(0x2, 0x80000, 0xfffffffd) bind$inet(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000440)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}, {@verity_on}, {@metacopy_off}, {@index_off}], [], 0x2f}) setxattr$incfs_metadata(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280), &(0x7f0000000380)="1542abad2bd2a2ded0fdad4fd315037f21b5c8e4d5f4298e", 0x18, 0x2) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) open(&(0x7f00000000c0)='.\x00', 0x200442, 0x1) 2.076764914s ago: executing program 2 (id=1190): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000180)={'\x00', 0x86, 0x3, 0x30f, 0x200000000004, 0xfd22, 0xffffffffffffffff}) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1e000000320000000300000002010000140200005ac595875d39a754c82bd519b9740282c9d97ff460664ccba310ae5386aca244dfbe2b2e5e34f5d60bf3b5a709d0d7d1a92d68bdaae47644506207cf6e6ef14c056386f42ac0ce75bd1452ce92a82b91777ff6b81ea4d08d540fe41f2ba976140cd52b3068092fa245e197927b", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000050000000400"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="2030e7ff0100f3ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x8040587f, &(0x7f0000000100)={0x0, 0x8008000000000005}) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) io_setup(0x8, &(0x7f00000003c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000780)=[0x0]) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) accept4(r3, 0x0, 0x0, 0x800) 1.7353513s ago: executing program 7 (id=1191): syz_mount_image$romfs(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000001c0)=ANY=[], 0x1, 0x18d, &(0x7f0000000500)="$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") syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000100)='.\x00', 0x302ce4, &(0x7f0000000140)=ANY=[], 0xfe, 0x0, &(0x7f0000000000)) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e22, 0x3b8, @empty, 0x4b9f}}, 0xb440, 0xe700}, 0x90) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x80, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x5, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) 1.037389617s ago: executing program 1 (id=1192): quotactl_fd$Q_SYNC(0xffffffffffffffff, 0xffffffff80000101, 0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000400)=[{{&(0x7f00000000c0), 0x6e, &(0x7f0000000340)}}], 0x1, 0x12000, &(0x7f0000000440)={0x0, 0x989680}) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100008cad3240e1060907040201020301090212000100cc000009042fb9167df2bbc3e30000d291e10084c77709a56c2e9fb51547f6c3d27d7ce9dfe9955fbe952de687376966aeef37e9cd1878b7a7cf5c802e523fb089961573bf5c3897ef5ab8218479b4af25bff7aea909e0ae2258e44d8705ef"], 0x0) 235.486286ms ago: executing program 7 (id=1193): r0 = socket$inet6(0xa, 0x2, 0x3a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf100, 0x0, 0x0, 0x0, 0x2000000}, [@printk={@p, {0x3, 0x3, 0x6}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xca}}]}, &(0x7f0000000400)='GPL\x00', 0x1, 0xe0, &(0x7f0000000440)=""/224, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) sendmmsg$inet6(r0, &(0x7f0000000b80)=[{{&(0x7f0000000140)={0xa, 0x4e24, 0x7ffe, @private2, 0x4}, 0x1c, &(0x7f0000000200)=[{&(0x7f00000000c0)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000180)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x32}}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x1d}}}], 0x30}}], 0x1, 0x4040084) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000b3b2000800000085100000fdffffff9500"/32], &(0x7f00000000c0)='GPL\x00', 0x4, 0x99, &(0x7f0000001300)=""/153, 0x0, 0x44}, 0x94) 234.671988ms ago: executing program 4 (id=1194): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$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") lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1000000000"], 0x5c, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000000000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000240)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000002640)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7c01000019000100000000000000000000000000000000000000ffff0a010101000000000000000000000000000000000000000300000000020020000c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000070000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000c40008"], 0x17c}}, 0x20044004) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) sendfile(r2, r2, 0x0, 0xe3aa6ea) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/tcp6\x00') openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$hid(0x6, 0x36, 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @random="a0725ce9403b", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb8000", 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, {[], @time_exceed={0x4, 0x0, 0x0, 0x60, '\x00', {0x0, 0x6, "fd9063", 0x2, 0x3a, 0x0, @empty, @mcast2}}}}}}}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) setpriority(0x2, 0x0, 0x7) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000001000)={0x10, 0x140d, 0xe3263c25d365e57d, 0x70bd2a, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x50) socket$inet6(0xa, 0x1, 0x8010000000000084) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) 115.542786ms ago: executing program 2 (id=1195): openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0x0) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80000) r1 = socket(0x2, 0x1, 0x0) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000080)='udf\x00', 0x2008087, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000fdffffff11000000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r3, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES16, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e27, 0x6, @mcast2, 0x7}, 0x1c) 0s ago: executing program 6 (id=1196): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa6}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x84, &(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRESHEX], 0x8b, 0x2bb, &(0x7f00000009c0)="$eJzs3U9rE0EYx/Hf7KZJamtdbUUQD1ItepK2XsRLQIqvwYuiNhGKocVaQb0YPIsvwLsXX4AvwpMInvXkyRfQ28pMJs1ss5s0Lc22+P1Ams3u/Hlms8nOs5CuAPy37q39+nz7j30YKVYs6a4U2U1XVZF0UZfqrzZ3NnbareawhmKpLvcwkqtpBsqsb7byqtp6roaX2FcVzYbrcDzSNE1/lx0EylT3z3Hexkiq+U9nHBY+Tab2ve7EUqekWE4Ks6tdvdZc2XEAAMpluuf3yJ/nZ/38PYqkJX/aD8//P8+WHO/R3NBu2SGULDj/uywrNfb9Pec29fM9l8LZ7VEvSxy3Hzt5rKp7ZGUmmCabVQ4miy6WaPrZRrt1a32r3Yz0Xg3HhHnhgqSGmj5n9TLRDja9mLMuq6qi1sYy48YwZcew2o+/0QiKzOd1evgeRzPfzHfzyCT6pObe/K+SmnDM/p26P9WPf7moua0XD+1z0i1VMMrzrpPL2R07dJRxUUYiv6fSWNkLBEk2zmpurar21eqObqWoJ9/OfG6t1RG1FmytL0Gt/tFcXPO4mY/mgVnUX33VWjD/j+zeXtLgJzO/EVfSHxlDx1NxJZNwVedKbslo/LFgTP19/EFPdUdzL9+8ff6k3W5tT3rBxjDxTlnoLvQOgpMSz+EW7HdsuEZJa7symd6rR951dY0qUwsLZ0e6f6H3sT5A770LeCMjnPA3E0rRf9OLy7ybZECYNPvlYbr5X5CvLLsUyf5JhszT01HTtqDFlZzcoLZX8EzQkvHX54szoJncDK6jMXKuazel68HKETlXogvS9NCxniZmTT/0mOv/AAAAAAAAAAAAAAAAAAAAp80kfq0RdMd/9AEAAAAAAAAAAAAAAAAAAAAA4BCK7/9b1zHe/zfzO4AD3/+3doSBAhjwLwAA///073LE") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x1e, 0x1, 0x0) syz_open_dev$sndpcmp(0x0, 0xb, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0xe) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r3) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000500)=0xd0) kernel console output (not intermixed with test programs): g 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 442.781248][ T5884] usb 7-1: string descriptor 0 read error: -71 [ 442.788925][ T9412] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 442.789112][ T5884] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 442.924858][ T5884] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.222244][ T5884] usb 7-1: config 0 descriptor?? [ 443.231802][ T5884] usb 7-1: can't set config #0, error -71 [ 443.239510][ T5884] usb 7-1: USB disconnect, device number 11 [ 444.221306][ T5861] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.251670][ T9428] loop1: detected capacity change from 0 to 2048 [ 444.301273][ T9428] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 444.647012][ T5884] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 445.501540][ T5884] usb 3-1: Using ep0 maxpacket: 8 [ 445.633372][ T5884] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 445.679114][ T5884] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.729142][ T5884] usb 3-1: Product: syz [ 445.785983][ T5884] usb 3-1: Manufacturer: syz [ 445.868607][ T5884] usb 3-1: SerialNumber: syz [ 445.966960][ T5884] usb 3-1: config 0 descriptor?? [ 446.200308][ T5884] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 446.260005][ T9459] netlink: 56 bytes leftover after parsing attributes in process `syz.1.773'. [ 446.269174][ T9459] netlink: 16 bytes leftover after parsing attributes in process `syz.1.773'. [ 446.640749][ T5884] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 446.712403][ T5884] usb 3-1: USB disconnect, device number 15 [ 446.810818][ T9461] loop1: detected capacity change from 0 to 8 [ 446.920171][ T9461] cramfs: empty filesystem [ 447.009178][ T6157] udevd[6157]: incorrect cramfs checksum on /dev/loop1 [ 447.156314][ T6281] udevd[6281]: incorrect cramfs checksum on /dev/loop1 [ 447.588207][ T9465] loop1: detected capacity change from 0 to 128 [ 447.597433][ T9465] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 447.645885][ T9465] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 448.353905][ T9470] loop4: detected capacity change from 0 to 64 [ 448.619654][ T9472] netlink: 96 bytes leftover after parsing attributes in process `syz.2.778'. [ 448.957166][ T9477] block nbd6: Attempted send on invalid socket [ 449.012881][ T9477] blk_print_req_error: 2 callbacks suppressed [ 449.012904][ T9477] I/O error, dev nbd6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 449.088905][ T9479] loop1: detected capacity change from 0 to 512 [ 449.118180][ T9479] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.780: casefold flag without casefold feature [ 449.173104][ T9479] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.780: couldn't read orphan inode 15 (err -117) [ 449.199727][ T9477] block nbd6: Send control failed (result -32) [ 449.249674][ T9477] block nbd6: Request send failed, requeueing [ 449.257864][ T7109] block nbd6: Dead connection, failed to find a fallback [ 449.265053][ T7109] block nbd6: shutting down sockets [ 449.270337][ T7109] I/O error, dev nbd6, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 449.279798][ T9477] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 449.293095][ T9479] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 449.303994][ T9419] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 449.306765][ T9477] I/O error, dev nbd6, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 449.335711][ T9419] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 449.422590][ T9477] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 449.538582][ T9477] I/O error, dev nbd6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 449.558773][ T9477] I/O error, dev nbd6, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 449.572716][ T9477] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 449.590693][ T9477] I/O error, dev nbd6, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 449.602446][ T9477] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 449.624474][ T5879] Bluetooth: hci0: Unknown advertising packet type: 0x5d [ 449.624525][ T5879] Bluetooth: hci0: Unknown advertising packet type: 0x7f [ 449.631996][ T5879] Bluetooth: hci0: Unknown advertising packet type: 0x7f [ 449.639165][ T5879] Bluetooth: hci0: Malformed LE Event: 0x0d [ 449.653271][ T9477] I/O error, dev nbd6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 450.109795][ T9477] I/O error, dev nbd6, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 450.148292][ T9477] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 450.248628][ T9477] I/O error, dev nbd6, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 450.757478][ T9477] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 450.829021][ T9477] I/O error, dev nbd6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 450.870156][ T9477] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 451.222654][ T9477] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 451.305067][ T9488] loop4: detected capacity change from 0 to 2048 [ 451.370265][ T9477] UDF-fs: warning (device nbd6): udf_fill_super: No partition found (1) [ 451.640136][ T9488] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 451.834936][ T9484] fido_id[9484]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 453.922512][ T5857] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 454.944384][ T9507] loop2: detected capacity change from 0 to 8 [ 454.997007][ T9507] cramfs: empty filesystem [ 455.028240][ T6281] udevd[6281]: incorrect cramfs checksum on /dev/loop2 [ 455.451902][ T6157] udevd[6157]: incorrect cramfs checksum on /dev/loop2 [ 455.864746][ T9519] loop2: detected capacity change from 0 to 64 [ 455.968067][ T9519] hfs: hfs: Invalid key length: 94 [ 456.737518][ T30] audit: type=1326 audit(1756550059.672:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9522 comm="syz.4.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f343738ebe9 code=0x7ffc0000 [ 456.913009][ T9419] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 457.075664][ T9419] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 457.123697][ T30] audit: type=1326 audit(1756550059.672:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9522 comm="syz.4.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f343738ebe9 code=0x7ffc0000 [ 457.300316][ T9534] loop1: detected capacity change from 0 to 128 [ 457.320629][ T30] audit: type=1326 audit(1756550059.682:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9522 comm="syz.4.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f343738ebe9 code=0x7ffc0000 [ 457.425811][ T30] audit: type=1326 audit(1756550059.682:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9522 comm="syz.4.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f343738ebe9 code=0x7ffc0000 [ 457.454157][ T9534] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 457.506924][ T9534] ext4 filesystem being mounted at /127/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 457.530192][ T30] audit: type=1326 audit(1756550059.682:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9522 comm="syz.4.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f343738ebe9 code=0x7ffc0000 [ 457.580269][ T9534] netlink: 12 bytes leftover after parsing attributes in process `syz.1.794'. [ 457.593974][ T9536] fido_id[9536]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 457.656398][ T30] audit: type=1326 audit(1756550059.682:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9522 comm="syz.4.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f343738ebe9 code=0x7ffc0000 [ 457.747348][ T30] audit: type=1326 audit(1756550059.682:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9522 comm="syz.4.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f343738ebe9 code=0x7ffc0000 [ 457.769388][ T5857] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 457.841231][ T30] audit: type=1326 audit(1756550059.682:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9522 comm="syz.4.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f343738ebe9 code=0x7ffc0000 [ 457.981548][ T30] audit: type=1326 audit(1756550059.692:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9522 comm="syz.4.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f343738ebe9 code=0x7ffc0000 [ 458.182356][ T5879] Bluetooth: hci4: unexpected event for opcode 0x0c5b [ 458.198550][ T5879] Bluetooth: hci4: unexpected event for opcode 0x0c6d [ 458.373431][ T9555] loop4: detected capacity change from 0 to 64 [ 458.386454][ T5879] Bluetooth: hci2: Unknown advertising packet type: 0x5d [ 458.386489][ T5879] Bluetooth: hci2: Unknown advertising packet type: 0x7f [ 458.393866][ T5879] Bluetooth: hci2: Unknown advertising packet type: 0x7f [ 458.400900][ T5879] Bluetooth: hci2: Malformed LE Event: 0x0d [ 458.506629][ T9555] hfs: hfs: Invalid key length: 94 [ 458.720829][ T9553] loop1: detected capacity change from 0 to 8192 [ 458.947641][ T9559] loop6: detected capacity change from 0 to 256 [ 460.457870][ T9570] loop2: detected capacity change from 0 to 1024 [ 460.517766][ T3959] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 460.608801][ T9570] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 460.619181][ T9577] IPv6: sit1: Disabled Multicast RS [ 460.633199][ T9577] sit1: entered allmulticast mode [ 460.687354][ T9570] ext4 filesystem being mounted at /129/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 460.763642][ T9581] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 460.770835][ T5989] IPVS: starting estimator thread 0... [ 460.801807][ T9579] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 460.863619][ T9582] IPVS: using max 26 ests per chain, 62400 per kthread [ 461.302817][ T9583] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: block 3: comm syz.2.805: lblock 3 mapped to illegal pblock 3 (length 13) [ 462.223865][ T9583] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117 [ 462.238667][ T9583] EXT4-fs (loop2): This should not happen!! Data will be lost [ 462.238667][ T9583] [ 462.928418][ T9596] loop1: detected capacity change from 0 to 128 [ 463.140753][ T9596] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 463.162233][ T5865] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.192460][ T9596] ext4 filesystem being mounted at /129/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 463.253720][ T9596] netlink: 12 bytes leftover after parsing attributes in process `syz.1.809'. [ 463.430651][ T9606] program syz.2.812 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 463.520558][ T5857] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 463.807444][ T9609] netlink: 52 bytes leftover after parsing attributes in process `syz.5.814'. [ 463.979446][ T9615] loop4: detected capacity change from 0 to 64 [ 464.006631][ T9615] hfs: hfs: Invalid key length: 94 [ 464.875359][ T9622] block nbd1: Attempted send on invalid socket [ 464.881705][ T9622] blk_print_req_error: 2 callbacks suppressed [ 464.881723][ T9622] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 464.920036][ T9622] block nbd1: Attempted send on invalid socket [ 464.929239][ T9622] I/O error, dev nbd1, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 464.979346][ T9622] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 465.030315][ T5989] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 465.039768][ T5989] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 465.064983][ T9622] block nbd1: Send control failed (result -32) [ 465.083136][ T9622] block nbd1: Request send failed, requeueing [ 465.104624][ T7109] block nbd1: Dead connection, failed to find a fallback [ 465.112550][ T7109] block nbd1: shutting down sockets [ 465.117792][ T7109] I/O error, dev nbd1, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 465.129263][ T9622] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 465.236896][ T9622] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 465.381619][ T9622] I/O error, dev nbd1, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 465.390994][ T9622] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 465.401554][ T9622] I/O error, dev nbd1, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 465.412343][ T9622] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 465.425510][ T9622] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 465.438096][ T9622] I/O error, dev nbd1, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 465.459140][ T9622] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 465.629250][ T9634] netlink: 56 bytes leftover after parsing attributes in process `syz.2.822'. [ 465.650675][ T9634] netlink: 16 bytes leftover after parsing attributes in process `syz.2.822'. [ 465.713618][ T9622] I/O error, dev nbd1, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 465.728271][ T9622] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 465.927277][ T9622] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 466.148986][ T9622] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 466.186910][ T9637] binder: 9636:9637 ioctl c0306201 200000000080 returned -14 [ 466.420751][ T9637] loop4: detected capacity change from 0 to 32768 [ 466.435926][ T9622] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 466.561500][ T9622] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 467.480856][ T9637] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,str_hash=crc32c,noacl,usrquota,grpquota,nojournal_transaction_names,allocator_stuck_timeout=256 [ 467.480882][ T9637] allowing incompatible features above 0.0: (unknown version) [ 467.480894][ T9637] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 467.524319][ T9637] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0 [ 467.532711][ T9637] bcachefs (loop4): initializing new filesystem [ 467.546407][ T9637] bcachefs (loop4): going read-write [ 467.604546][ T9637] bcachefs (loop4): marking superblocks [ 467.623043][ T9637] bcachefs (loop4): initializing freespace [ 467.634163][ T9637] bcachefs (loop4): done initializing freespace [ 467.642886][ T9637] bcachefs (loop4): reading snapshots table [ 467.648834][ T9637] bcachefs (loop4): reading snapshots done [ 467.690813][ T9637] bcachefs (loop4): done starting filesystem [ 467.762438][ T9655] loop2: detected capacity change from 0 to 512 [ 467.822804][ T30] audit: type=1800 audit(1756550071.192:82): pid=9637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.824" name="file1" dev="loop4" ino=4098 res=0 errno=0 [ 467.855544][ T9655] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 468.130904][ T9637] syz.4.824 (9637) used greatest stack depth: 16280 bytes left [ 468.314688][ T5861] bcachefs (loop4): shutting down [ 468.330814][ T5861] bcachefs (loop4): going read-only [ 468.361316][ T5861] bcachefs (loop4): finished waiting for writes to stop [ 468.426562][ T5861] bcachefs (loop4): flushing journal and stopping allocators, journal seq 31 [ 468.449614][ T49] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 469.318956][ T9666] loop1: detected capacity change from 0 to 512 [ 469.325990][ T5861] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 32 [ 469.347901][ T9664] netlink: 'syz.2.828': attribute type 9 has an invalid length. [ 469.352141][ T5861] bcachefs (loop4): clean shutdown complete, journal seq 33 [ 469.357522][ T9664] netlink: 184 bytes leftover after parsing attributes in process `syz.2.828'. [ 469.401559][ T9666] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.829: casefold flag without casefold feature [ 469.415674][ T5861] bcachefs (loop4): marking filesystem clean [ 469.464017][ T7109] block nbd0: Possible stuck request ffff8880250601c0: control (read@0,1024B). Runtime 120 seconds [ 469.475299][ T7109] block nbd0: Possible stuck request ffff888025060380: control (read@1024,1024B). Runtime 120 seconds [ 469.495753][ T7109] block nbd0: Possible stuck request ffff888025060540: control (read@2048,1024B). Runtime 120 seconds [ 469.509788][ T9666] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.829: couldn't read orphan inode 15 (err -117) [ 469.523026][ T7109] block nbd0: Possible stuck request ffff888025060700: control (read@3072,1024B). Runtime 120 seconds [ 469.538297][ T9666] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 469.571992][ T5861] bcachefs (loop4): shutdown complete [ 469.721855][ T9674] loop2: detected capacity change from 0 to 8 [ 469.792349][ T5874] Bluetooth: hci0: Unknown advertising packet type: 0x5d [ 469.792383][ T5874] Bluetooth: hci0: Unknown advertising packet type: 0x7f [ 469.799641][ T5874] Bluetooth: hci0: Unknown advertising packet type: 0x7f [ 469.806927][ T5874] Bluetooth: hci0: Malformed LE Event: 0x0d [ 474.103025][ T9694] netlink: 8 bytes leftover after parsing attributes in process `syz.6.837'. [ 474.167613][ T5857] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 474.316929][ T9696] sctp: failed to load transform for md5: -2 [ 474.356702][ T9697] sctp: failed to load transform for md5: -2 [ 474.376181][ T9699] sctp: failed to load transform for md5: -2 [ 474.689394][ T9710] loop1: detected capacity change from 0 to 4096 [ 474.806925][ T5874] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 475.856636][ T5178] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 475.876783][ T5178] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 475.886661][ T5178] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 475.895058][ T5178] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 475.904649][ T5178] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 476.581910][ T9724] syz.5.844 (9724) used greatest stack depth: 16088 bytes left [ 476.635486][ T9710] loop1: detected capacity change from 0 to 32768 [ 476.669937][ T9735] loop4: detected capacity change from 0 to 128 [ 476.716351][ T9710] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.839 (9710) [ 476.834240][ T9735] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 476.904270][ T9710] BTRFS info (device loop1 state S): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 476.970745][ T9735] ext4 filesystem being mounted at /138/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 476.974073][ T9710] BTRFS info (device loop1 state S): using blake2b (blake2b-256-generic) checksum algorithm [ 477.004792][ T9735] netlink: 12 bytes leftover after parsing attributes in process `syz.4.827'. [ 477.141510][ T9710] BTRFS error (device loop1 state S): ignoremetacsums must be used with ro mount option [ 477.194886][ T9710] BTRFS error (device loop1 state S): open_ctree failed: -22 [ 477.226534][ T5861] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 477.240977][ T9746] block nbd2: Attempted send on invalid socket [ 477.245796][ T9722] chnl_net:caif_netlink_parms(): no params data found [ 477.263121][ T9746] blk_print_req_error: 2 callbacks suppressed [ 477.263139][ T9746] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 477.343398][ T9746] block nbd2: Attempted send on invalid socket [ 477.703953][ T9746] I/O error, dev nbd2, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 477.843024][ T9754] random: crng reseeded on system resumption [ 477.910814][ T9746] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 477.966443][ T9746] block nbd2: Send control failed (result -32) [ 477.970635][ T5947] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 477.972808][ T9746] block nbd2: Request send failed, requeueing [ 477.999042][ T7109] block nbd2: Dead connection, failed to find a fallback [ 478.006708][ T7109] block nbd2: shutting down sockets [ 478.013358][ T7109] I/O error, dev nbd2, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 478.022986][ T5178] Bluetooth: hci6: command tx timeout [ 478.031889][ T5947] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 478.041721][ T9746] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 478.062642][ T9746] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 478.155282][ T9746] I/O error, dev nbd2, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 478.171648][ T9746] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 478.186170][ T9746] I/O error, dev nbd2, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 478.196077][ T9746] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 478.210334][ T9746] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 478.219875][ T9746] I/O error, dev nbd2, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 478.231894][ T9746] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 478.242018][ T9746] I/O error, dev nbd2, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 478.262202][ T9746] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 478.272766][ T9746] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 478.282381][ T9746] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 478.292722][ T9746] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 478.306358][ T9746] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 478.361523][ T9754] loop4: detected capacity change from 0 to 512 [ 478.433331][ T9754] EXT4-fs: Ignoring removed oldalloc option [ 478.440895][ T9754] EXT4-fs: Ignoring removed mblk_io_submit option [ 478.791025][ T9754] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 479.578433][ T9754] EXT4-fs (loop4): orphan cleanup on readonly fs [ 479.671484][ T9754] Quota error (device loop4): do_check_range: Getting block 196613 out of range 1-5 [ 479.727991][ T9754] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 479.736583][ T9722] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.801884][ T9754] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.849: Failed to acquire dquot type 1 [ 479.908242][ T9722] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.927908][ T9722] bridge_slave_0: entered allmulticast mode [ 479.946081][ T9722] bridge_slave_0: entered promiscuous mode [ 479.964960][ T9754] EXT4-fs (loop4): 1 truncate cleaned up [ 479.987927][ T9722] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.026999][ T9754] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 480.028899][ T9722] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.058673][ T9780] loop2: detected capacity change from 0 to 512 [ 480.101837][ T5178] Bluetooth: hci6: command tx timeout [ 480.127979][ T9722] bridge_slave_1: entered allmulticast mode [ 480.137612][ T9780] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.855: casefold flag without casefold feature [ 480.144389][ T9722] bridge_slave_1: entered promiscuous mode [ 480.213155][ T9780] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.855: couldn't read orphan inode 15 (err -117) [ 480.281432][ T9754] EXT4-fs error (device loop4): ext4_lookup:1791: inode #2: comm syz.4.849: deleted inode referenced: 12 [ 480.306861][ T9780] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 480.344773][ T9722] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 480.375085][ T9784] loop6: detected capacity change from 0 to 512 [ 480.392121][ T9754] EXT4-fs error (device loop4): ext4_lookup:1791: inode #2: comm syz.4.849: deleted inode referenced: 12 [ 480.403040][ T9722] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 480.434785][ T9784] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 480.486288][ T9785] EXT4-fs error (device loop4): ext4_lookup:1791: inode #2: comm syz.4.849: deleted inode referenced: 12 [ 480.526222][ T9784] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 480.584127][ T9754] EXT4-fs error (device loop4): ext4_lookup:1791: inode #2: comm syz.4.849: deleted inode referenced: 12 [ 480.619212][ T5178] Bluetooth: hci5: Unknown advertising packet type: 0x5d [ 480.619243][ T5178] Bluetooth: hci5: Unknown advertising packet type: 0x7f [ 481.461086][ T5178] Bluetooth: hci5: Unknown advertising packet type: 0x7f [ 481.471807][ T5178] Bluetooth: hci5: Malformed LE Event: 0x0d [ 481.525512][ T9784] EXT4-fs (loop6): failed to initialize system zone (-117) [ 481.629507][ T9784] EXT4-fs (loop6): mount failed [ 482.259571][ T5178] Bluetooth: hci6: command tx timeout [ 483.484404][ T5861] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 483.493245][ T9791] netlink: 'syz.6.856': attribute type 10 has an invalid length. [ 483.607888][ T5865] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 483.692098][ T9797] FAULT_INJECTION: forcing a failure. [ 483.692098][ T9797] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 483.737814][ T9797] CPU: 1 UID: 0 PID: 9797 Comm: syz.4.858 Not tainted syzkaller #0 PREEMPT(full) [ 483.737848][ T9797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 483.737864][ T9797] Call Trace: [ 483.737874][ T9797] [ 483.737884][ T9797] dump_stack_lvl+0x189/0x250 [ 483.737920][ T9797] ? __pfx____ratelimit+0x10/0x10 [ 483.737956][ T9797] ? __pfx_dump_stack_lvl+0x10/0x10 [ 483.737986][ T9797] ? __pfx__printk+0x10/0x10 [ 483.738021][ T9797] ? srso_alias_return_thunk+0x5/0xfbef5 [ 483.738066][ T9797] should_fail_ex+0x414/0x560 [ 483.738105][ T9797] _copy_from_user+0x2d/0xb0 [ 483.738143][ T9797] __sys_bpf+0x1ed/0x870 [ 483.738179][ T9797] ? __pfx___sys_bpf+0x10/0x10 [ 483.738227][ T9797] ? ksys_write+0x1e1/0x250 [ 483.738270][ T9797] ? __pfx_ksys_write+0x10/0x10 [ 483.738300][ T9797] ? rcu_is_watching+0x15/0xb0 [ 483.738334][ T9797] __x64_sys_bpf+0x7c/0x90 [ 483.738365][ T9797] do_syscall_64+0xfa/0x3b0 [ 483.738387][ T9797] ? lockdep_hardirqs_on+0x9c/0x150 [ 483.738422][ T9797] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.738446][ T9797] ? srso_alias_return_thunk+0x5/0xfbef5 [ 483.738473][ T9797] ? exc_page_fault+0x9f/0xf0 [ 483.738510][ T9797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.738534][ T9797] RIP: 0033:0x7f343738ebe9 [ 483.738555][ T9797] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 483.738576][ T9797] RSP: 002b:00007f34381a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 483.738603][ T9797] RAX: ffffffffffffffda RBX: 00007f34375c5fa0 RCX: 00007f343738ebe9 [ 483.738622][ T9797] RDX: 0000000000000048 RSI: 0000200000000040 RDI: 0000000000000000 [ 483.738638][ T9797] RBP: 00007f34381a7090 R08: 0000000000000000 R09: 0000000000000000 [ 483.738654][ T9797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 483.738669][ T9797] R13: 00007f34375c6038 R14: 00007f34375c5fa0 R15: 00007ffe86a99658 [ 483.738707][ T9797] [ 483.987424][ T9794] loop6: detected capacity change from 0 to 4096 [ 484.154206][ T9791] team0: Port device dummy0 added [ 484.213052][ T9802] netlink: 12 bytes leftover after parsing attributes in process `syz.5.860'. [ 484.250124][ T9722] team0: Port device team_slave_0 added [ 484.250658][ T9803] loop4: detected capacity change from 0 to 1024 [ 484.269767][ T9722] team0: Port device team_slave_1 added [ 484.326261][ T9806] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 484.341434][ T5178] Bluetooth: hci6: command tx timeout [ 484.482670][ T30] audit: type=1800 audit(1756550087.852:83): pid=9803 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.861" name="file2" dev="loop4" ino=22 res=0 errno=0 [ 484.763345][ T9722] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 484.770341][ T9722] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 484.878673][ T9722] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 484.892254][ T9815] loop2: detected capacity change from 0 to 4096 [ 484.897646][ T9817] loop6: detected capacity change from 0 to 512 [ 484.932990][ T9815] EXT4-fs (loop2): Test dummy encryption mode enabled [ 484.987630][ T9722] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 485.024113][ T9817] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #15: comm syz.6.865: casefold flag without casefold feature [ 485.275305][ T9815] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 485.285064][ T9722] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 485.648866][ T9817] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.865: couldn't read orphan inode 15 (err -117) [ 485.828829][ T9815] System zones: 0-5 [ 485.899027][ T9722] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 485.965263][ T9817] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 485.990781][ T9815] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 486.256718][ T5178] Bluetooth: hci1: Unknown advertising packet type: 0x5d [ 486.256821][ T5178] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 486.269828][ T5178] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 486.277040][ T5178] Bluetooth: hci1: Malformed LE Event: 0x0d [ 487.669889][ T5865] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 487.994685][ T9722] hsr_slave_0: entered promiscuous mode [ 488.023718][ T9722] hsr_slave_1: entered promiscuous mode [ 488.030081][ T9722] debugfs: 'hsr0' already exists in 'hsr' [ 489.709746][ T9845] loop1: detected capacity change from 0 to 128 [ 489.935050][ T9722] Cannot create hsr debugfs directory [ 490.010925][ T9845] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 490.092684][ T9846] netlink: 8 bytes leftover after parsing attributes in process `syz.5.875'. [ 490.168027][ T9851] netlink: 56 bytes leftover after parsing attributes in process `syz.2.873'. [ 490.180335][ T9851] netlink: 16 bytes leftover after parsing attributes in process `syz.2.873'. [ 490.234511][ T9845] ext4 filesystem being mounted at /139/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 490.259387][ T9846] netlink: 'syz.5.875': attribute type 16 has an invalid length. [ 490.654241][ T9845] netlink: 12 bytes leftover after parsing attributes in process `syz.1.874'. [ 490.746903][ T6168] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 491.014471][ T5857] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 491.509673][ T9861] fuse: Bad value for 'fd' [ 491.532753][ T9865] loop6: detected capacity change from 0 to 1024 [ 491.548639][ T9865] EXT4-fs: inline encryption not supported [ 491.628498][ T9865] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 491.789776][ T9722] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 491.803410][ T30] audit: type=1326 audit(1756550095.172:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9863 comm="syz.6.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81db38ebe9 code=0x7ffc0000 [ 491.909158][ T9879] netlink: 56 bytes leftover after parsing attributes in process `syz.2.882'. [ 491.919047][ T9879] netlink: 16 bytes leftover after parsing attributes in process `syz.2.882'. [ 492.320304][ T6063] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 492.340737][ T9722] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 492.342381][ T30] audit: type=1326 audit(1756550095.172:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9863 comm="syz.6.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7f81db38ebe9 code=0x7ffc0000 [ 492.381589][ T30] audit: type=1326 audit(1756550095.172:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9863 comm="syz.6.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81db38ebe9 code=0x7ffc0000 [ 492.405635][ T30] audit: type=1326 audit(1756550095.182:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9863 comm="syz.6.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f81db38ebe9 code=0x7ffc0000 [ 492.431647][ T30] audit: type=1326 audit(1756550095.182:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9863 comm="syz.6.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81db38ebe9 code=0x7ffc0000 [ 492.455995][ T30] audit: type=1326 audit(1756550095.182:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9863 comm="syz.6.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f81db38ebe9 code=0x7ffc0000 [ 492.521177][ T9722] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 492.567449][ T30] audit: type=1326 audit(1756550095.182:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9863 comm="syz.6.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81db38ebe9 code=0x7ffc0000 [ 492.590620][ T30] audit: type=1326 audit(1756550095.182:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9863 comm="syz.6.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f81db38d550 code=0x7ffc0000 [ 492.621671][ T30] audit: type=1326 audit(1756550095.182:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9863 comm="syz.6.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81db38ebe9 code=0x7ffc0000 [ 492.644044][ T30] audit: type=1326 audit(1756550095.182:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9863 comm="syz.6.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f81db38ebe9 code=0x7ffc0000 [ 492.644839][ T9722] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 493.008273][ T9894] loop2: detected capacity change from 0 to 1024 [ 493.815068][ T6168] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 493.830666][ T9894] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 493.863085][ T9894] ext4 filesystem being mounted at /150/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 494.097743][ T9908] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: block 3: comm syz.2.885: lblock 3 mapped to illegal pblock 3 (length 13) [ 494.479606][ T9908] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117 [ 494.504634][ T9908] EXT4-fs (loop2): This should not happen!! Data will be lost [ 494.504634][ T9908] [ 494.689208][ T9912] loop1: detected capacity change from 0 to 1024 [ 494.725845][ T9910] loop6: detected capacity change from 0 to 512 [ 494.734548][ T5865] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 494.877163][ T9722] 8021q: adding VLAN 0 to HW filter on device bond0 [ 494.892621][ T9910] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #15: comm syz.6.886: casefold flag without casefold feature [ 494.906585][ T9722] 8021q: adding VLAN 0 to HW filter on device team0 [ 494.935055][ T6242] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.942266][ T6242] bridge0: port 1(bridge_slave_0) entered forwarding state [ 494.993276][ T9910] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.886: couldn't read orphan inode 15 (err -117) [ 495.056964][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.064169][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 495.084338][ T9910] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 495.156114][ T9924] loop4: detected capacity change from 0 to 128 [ 495.543784][ T6168] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 495.575669][ T9924] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 495.654043][ T9924] ext4 filesystem being mounted at /148/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 495.757412][ T9924] netlink: 12 bytes leftover after parsing attributes in process `syz.4.891'. [ 496.201450][ T5947] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 496.339078][ T5861] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 496.352782][ T9945] loop2: detected capacity change from 0 to 64 [ 496.885128][ T5947] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 496.927062][ T5947] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 496.944871][ T5947] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 496.979985][ T5947] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.087666][ T9938] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 497.150932][ T9722] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 497.200283][ T5947] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 497.517890][ T9938] loop1: detected capacity change from 0 to 1024 [ 497.532757][ T5884] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 498.060876][ T5884] usb 5-1: not running at top speed; connect to a high speed hub [ 498.154661][ T9419] usb 2-1: USB disconnect, device number 8 [ 498.274017][ T5884] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 498.296494][ T5884] usb 5-1: config 1 has no interface number 1 [ 498.311188][ T5884] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 498.349311][ T5884] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 498.368935][ T5884] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.406090][ T5884] usb 5-1: Product: syz [ 498.431005][ T5884] usb 5-1: Manufacturer: syz [ 498.475771][ T5884] usb 5-1: SerialNumber: syz [ 498.900192][ T5884] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 498.954029][ T5884] usb 5-1: USB disconnect, device number 19 [ 499.082960][ T1331] hfsplus: b-tree write err: -5, ino 4 [ 499.109924][ T6281] udevd[6281]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 499.364739][ T9722] veth0_vlan: entered promiscuous mode [ 499.428707][ T9722] veth1_vlan: entered promiscuous mode [ 499.580802][ T9982] dummy0: entered allmulticast mode [ 499.612321][ T7109] block nbd0: Possible stuck request ffff8880250601c0: control (read@0,1024B). Runtime 150 seconds [ 499.623340][ T7109] block nbd0: Possible stuck request ffff888025060380: control (read@1024,1024B). Runtime 150 seconds [ 499.636136][ T7109] block nbd0: Possible stuck request ffff888025060540: control (read@2048,1024B). Runtime 150 seconds [ 499.647444][ T7109] block nbd0: Possible stuck request ffff888025060700: control (read@3072,1024B). Runtime 150 seconds [ 499.852399][ T9985] loop4: detected capacity change from 0 to 128 [ 499.873147][ T9985] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 499.886107][ T9985] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 499.923862][ T9722] veth0_macvtap: entered promiscuous mode [ 500.501876][ T9722] veth1_macvtap: entered promiscuous mode [ 500.581026][ T9722] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 500.660017][ T9992] loop1: detected capacity change from 0 to 128 [ 500.724452][ T9722] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 500.755216][ T9992] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 500.783275][ T9996] loop6: detected capacity change from 0 to 736 [ 500.809681][ T49] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.827151][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.834306][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 500.843396][ T49] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.863937][ T9992] ext4 filesystem being mounted at /146/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 500.879850][ T9992] netlink: 12 bytes leftover after parsing attributes in process `syz.1.908'. [ 500.904743][ T49] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.973748][T10000] loop4: detected capacity change from 0 to 64 [ 501.002697][ T49] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.120066][T10000] hfs: hfs: Invalid key length: 94 [ 502.224678][ T5947] libceph: connect (1)[c::]:6789 error -101 [ 502.230799][ T5947] libceph: mon0 (1)[c::]:6789 connect error [ 502.589044][T10009] ceph: No mds server is up or the cluster is laggy [ 502.592084][ T5977] libceph: connect (1)[c::]:6789 error -101 [ 502.611714][T10005] ceph: No mds server is up or the cluster is laggy [ 502.630064][ T5977] libceph: mon0 (1)[c::]:6789 connect error [ 502.707012][T10014] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 502.942219][ T5977] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 502.954815][ T5857] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 503.103511][ T5977] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 503.136981][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 503.156501][ T5977] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 503.192171][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 503.238395][ T5977] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 503.269229][T10028] FAULT_INJECTION: forcing a failure. [ 503.269229][T10028] name failslab, interval 1, probability 0, space 0, times 0 [ 503.301805][T10028] CPU: 1 UID: 0 PID: 10028 Comm: syz.1.915 Not tainted syzkaller #0 PREEMPT(full) [ 503.301839][T10028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 503.301853][T10028] Call Trace: [ 503.301862][T10028] [ 503.301872][T10028] dump_stack_lvl+0x189/0x250 [ 503.301908][T10028] ? __pfx____ratelimit+0x10/0x10 [ 503.301944][T10028] ? __pfx_dump_stack_lvl+0x10/0x10 [ 503.301974][T10028] ? __pfx__printk+0x10/0x10 [ 503.302011][T10028] ? __pfx___might_resched+0x10/0x10 [ 503.302035][T10028] ? srso_alias_return_thunk+0x5/0xfbef5 [ 503.302071][T10028] should_fail_ex+0x414/0x560 [ 503.302120][T10028] should_failslab+0xa8/0x100 [ 503.302163][T10028] __kmalloc_noprof+0xcb/0x4f0 [ 503.302195][T10028] ? tomoyo_encode+0x28b/0x550 [ 503.302225][T10028] tomoyo_encode+0x28b/0x550 [ 503.302257][T10028] tomoyo_realpath_from_path+0x58d/0x5d0 [ 503.302295][T10028] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 503.302331][T10028] tomoyo_path_number_perm+0x1e8/0x5a0 [ 503.302370][T10028] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 503.302412][T10028] ? srso_alias_return_thunk+0x5/0xfbef5 [ 503.302451][T10028] ? srso_alias_return_thunk+0x5/0xfbef5 [ 503.302488][T10028] ? __lock_acquire+0xab9/0xd20 [ 503.302550][T10028] ? __fget_files+0x2a/0x420 [ 503.302590][T10028] ? __fget_files+0x2a/0x420 [ 503.302622][T10028] ? __fget_files+0x3a0/0x420 [ 503.302658][T10028] ? __fget_files+0x2a/0x420 [ 503.302700][T10028] security_file_ioctl+0xcb/0x2d0 [ 503.302735][T10028] __se_sys_ioctl+0x47/0x170 [ 503.302769][T10028] do_syscall_64+0xfa/0x3b0 [ 503.302792][T10028] ? lockdep_hardirqs_on+0x9c/0x150 [ 503.302834][T10028] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.302861][T10028] ? srso_alias_return_thunk+0x5/0xfbef5 [ 503.302888][T10028] ? exc_page_fault+0x9f/0xf0 [ 503.302926][T10028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.302950][T10028] RIP: 0033:0x7f174218ebe9 [ 503.302972][T10028] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 503.302992][T10028] RSP: 002b:00007f1742f94038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 503.303019][T10028] RAX: ffffffffffffffda RBX: 00007f17423c5fa0 RCX: 00007f174218ebe9 [ 503.303036][T10028] RDX: 00002000000005c0 RSI: 0000000080345621 RDI: 0000000000000003 [ 503.303052][T10028] RBP: 00007f1742f94090 R08: 0000000000000000 R09: 0000000000000000 [ 503.303068][T10028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 503.303083][T10028] R13: 00007f17423c6038 R14: 00007f17423c5fa0 R15: 00007ffc5f4a2938 [ 503.303121][T10028] [ 503.303499][T10028] ERROR: Out of memory at tomoyo_realpath_from_path. [ 503.313987][ T5977] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.628454][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 503.643816][T10022] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 503.698487][ T5977] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 503.706861][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 503.868912][T10022] loop2: detected capacity change from 0 to 1024 [ 504.544203][ T10] usb 3-1: USB disconnect, device number 16 [ 504.830008][T10044] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode balance-xor(2) [ 505.179997][T10051] netlink: 8 bytes leftover after parsing attributes in process `syz.1.921'. [ 505.201483][ T6242] hfsplus: b-tree write err: -5, ino 4 [ 505.223080][T10054] FAULT_INJECTION: forcing a failure. [ 505.223080][T10054] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 505.252177][T10054] CPU: 0 UID: 0 PID: 10054 Comm: syz.6.922 Not tainted syzkaller #0 PREEMPT(full) [ 505.252210][T10054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 505.252224][T10054] Call Trace: [ 505.252233][T10054] [ 505.252252][T10054] dump_stack_lvl+0x189/0x250 [ 505.252288][T10054] ? __pfx____ratelimit+0x10/0x10 [ 505.252324][T10054] ? __pfx_dump_stack_lvl+0x10/0x10 [ 505.252353][T10054] ? __pfx__printk+0x10/0x10 [ 505.252401][T10054] should_fail_ex+0x414/0x560 [ 505.252440][T10054] _copy_to_user+0x31/0xb0 [ 505.252472][T10054] simple_read_from_buffer+0xe1/0x170 [ 505.252513][T10054] proc_fail_nth_read+0x1b3/0x220 [ 505.252545][T10054] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 505.252575][T10054] ? srso_alias_return_thunk+0x5/0xfbef5 [ 505.252602][T10054] ? rw_verify_area+0x2a6/0x4d0 [ 505.252630][T10054] ? __lock_acquire+0xab9/0xd20 [ 505.252663][T10054] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 505.252693][T10054] vfs_read+0x200/0xa30 [ 505.252723][T10054] ? fdget_pos+0x247/0x320 [ 505.252750][T10054] ? __pfx___mutex_lock+0x10/0x10 [ 505.252774][T10054] ? __pfx_vfs_read+0x10/0x10 [ 505.252806][T10054] ? __fget_files+0x2a/0x420 [ 505.252847][T10054] ? srso_alias_return_thunk+0x5/0xfbef5 [ 505.252880][T10054] ? __fget_files+0x3a0/0x420 [ 505.252915][T10054] ? __fget_files+0x2a/0x420 [ 505.252955][T10054] ? srso_alias_return_thunk+0x5/0xfbef5 [ 505.252987][T10054] ksys_read+0x145/0x250 [ 505.253021][T10054] ? __pfx_ksys_read+0x10/0x10 [ 505.253049][T10054] ? rcu_is_watching+0x15/0xb0 [ 505.253080][T10054] ? do_syscall_64+0xbe/0x3b0 [ 505.253108][T10054] do_syscall_64+0xfa/0x3b0 [ 505.253128][T10054] ? lockdep_hardirqs_on+0x9c/0x150 [ 505.253160][T10054] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.253182][T10054] ? srso_alias_return_thunk+0x5/0xfbef5 [ 505.253208][T10054] ? exc_page_fault+0x9f/0xf0 [ 505.253251][T10054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.253274][T10054] RIP: 0033:0x7f81db38d5fc [ 505.253295][T10054] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 505.253315][T10054] RSP: 002b:00007f81dc219030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 505.253339][T10054] RAX: ffffffffffffffda RBX: 00007f81db5c5fa0 RCX: 00007f81db38d5fc [ 505.253357][T10054] RDX: 000000000000000f RSI: 00007f81dc2190a0 RDI: 0000000000000004 [ 505.253372][T10054] RBP: 00007f81dc219090 R08: 0000000000000000 R09: 0000000000000000 [ 505.253388][T10054] R10: 0000000000020000 R11: 0000000000000246 R12: 0000000000000001 [ 505.253402][T10054] R13: 00007f81db5c6038 R14: 00007f81db5c5fa0 R15: 00007ffcbb627738 [ 505.253440][T10054] [ 506.239637][T10066] netlink: 56 bytes leftover after parsing attributes in process `syz.6.927'. [ 506.280609][T10066] netlink: 16 bytes leftover after parsing attributes in process `syz.6.927'. [ 506.388592][T10068] loop1: detected capacity change from 0 to 128 [ 506.478542][T10068] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 506.591087][T10068] ext4 filesystem being mounted at /150/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 506.678358][T10068] netlink: 12 bytes leftover after parsing attributes in process `syz.1.926'. [ 506.930640][ T5857] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 507.996152][T10090] loop6: detected capacity change from 0 to 64 [ 508.434214][T10090] process 'syz.6.931' launched './file1' with NULL argv: empty string added [ 510.571949][ T5178] Bluetooth: hci0: command 0x0406 tx timeout [ 510.741898][T10099] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 511.371919][T10099] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 511.388359][T10099] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 511.395766][T10099] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 511.404618][T10099] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 511.413618][T10099] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 511.421794][T10099] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 511.428127][T10099] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 511.439555][T10099] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 511.721459][ T975] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 512.821592][ T5178] Bluetooth: hci2: command 0x0406 tx timeout [ 515.270660][ T5178] Bluetooth: hci6: command 0x0c1a tx timeout [ 515.277367][ T5874] Bluetooth: hci1: command 0x0406 tx timeout [ 515.278236][ T5178] Bluetooth: hci4: command 0x0406 tx timeout [ 515.283533][ T5879] Bluetooth: hci5: command 0x0406 tx timeout [ 515.289812][ T5178] Bluetooth: hci3: command 0x0406 tx timeout [ 515.511574][T10288] netlink: 56 bytes leftover after parsing attributes in process `syz.4.950'. [ 515.525534][T10288] netlink: 16 bytes leftover after parsing attributes in process `syz.4.950'. [ 516.214551][T10334] loop2: detected capacity change from 0 to 64 [ 517.301421][ T5178] Bluetooth: hci6: command 0x0c1a tx timeout [ 517.503841][T10347] loop1: detected capacity change from 0 to 256 [ 517.581777][T10347] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 517.812468][ T10] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 517.962318][ T6104] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 517.991430][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 518.001583][ T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 518.027777][ T10] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 518.075588][ T10] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 518.090975][ T10] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 518.115556][ T10] usb 7-1: Product: syz [ 518.133980][ T10] usb 7-1: Manufacturer: syz [ 518.144399][ T6104] usb 2-1: Using ep0 maxpacket: 8 [ 518.146525][ T10] usb 7-1: SerialNumber: syz [ 518.168550][ T6104] usb 2-1: unable to get BOS descriptor or descriptor too short [ 518.185086][ T10] usb 7-1: config 0 descriptor?? [ 518.216924][ T6104] usb 2-1: config 7 has an invalid interface number: 148 but max is 0 [ 518.255840][ T6104] usb 2-1: config 7 has no interface number 0 [ 518.316509][ T6104] usb 2-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice=1c.76 [ 518.339349][ T6104] usb 2-1: New USB device strings: Mfr=27, Product=2, SerialNumber=3 [ 518.362277][ T6104] usb 2-1: Product: syz [ 518.366527][ T6104] usb 2-1: Manufacturer: syz [ 518.395468][ T6104] usb 2-1: SerialNumber: syz [ 519.384175][ T5178] Bluetooth: hci6: command 0x0c1a tx timeout [ 519.390516][ T9419] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 519.449229][T10347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 519.494122][T10347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 519.771632][ T9419] usb 5-1: Using ep0 maxpacket: 16 [ 520.429870][ T9419] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 520.449945][ T6104] ldusb 2-1:7.148: Interrupt in endpoint not found [ 520.483309][ T9419] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 520.523313][ T6104] usb 2-1: USB disconnect, device number 10 [ 520.530654][ T9419] usb 5-1: config 0 interface 0 has no altsetting 0 [ 520.563684][ T9419] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 520.597061][ T9419] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.696021][ T9419] usb 5-1: config 0 descriptor?? [ 520.739434][ T5977] usb 7-1: USB disconnect, device number 12 [ 521.559121][ T9419] nzxt-smart2 0003:1E71:2009.0011: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 521.801970][ T9419] usb 5-1: USB disconnect, device number 20 [ 521.804842][T10379] loop2: detected capacity change from 0 to 128 [ 521.889066][T10379] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 521.983212][T10389] netlink: 56 bytes leftover after parsing attributes in process `syz.6.970'. [ 521.997051][T10389] netlink: 16 bytes leftover after parsing attributes in process `syz.6.970'. [ 522.140373][T10384] loop1: detected capacity change from 0 to 64 [ 522.186330][T10393] FAULT_INJECTION: forcing a failure. [ 522.186330][T10393] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 522.199629][T10393] CPU: 0 UID: 0 PID: 10393 Comm: syz.7.972 Not tainted syzkaller #0 PREEMPT(full) [ 522.199663][T10393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 522.199674][T10393] Call Trace: [ 522.199683][T10393] [ 522.199692][T10393] dump_stack_lvl+0x189/0x250 [ 522.199719][T10393] ? __pfx____ratelimit+0x10/0x10 [ 522.199747][T10393] ? __pfx_dump_stack_lvl+0x10/0x10 [ 522.199769][T10393] ? __pfx__printk+0x10/0x10 [ 522.199795][T10393] ? srso_alias_return_thunk+0x5/0xfbef5 [ 522.199828][T10393] should_fail_ex+0x414/0x560 [ 522.199858][T10393] _copy_from_user+0x2d/0xb0 [ 522.199881][T10393] ___sys_sendmsg+0x158/0x2a0 [ 522.199905][T10393] ? __pfx____sys_sendmsg+0x10/0x10 [ 522.199928][T10393] ? srso_alias_return_thunk+0x5/0xfbef5 [ 522.199948][T10393] ? rcu_is_watching+0x15/0xb0 [ 522.199993][T10393] ? __fget_files+0x2a/0x420 [ 522.200019][T10393] ? srso_alias_return_thunk+0x5/0xfbef5 [ 522.200039][T10393] ? __fget_files+0x3a0/0x420 [ 522.200076][T10393] __x64_sys_sendmsg+0x19b/0x260 [ 522.200099][T10393] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 522.200128][T10393] ? __pfx_ksys_write+0x10/0x10 [ 522.200150][T10393] ? rcu_is_watching+0x15/0xb0 [ 522.200172][T10393] ? do_syscall_64+0xbe/0x3b0 [ 522.200193][T10393] do_syscall_64+0xfa/0x3b0 [ 522.200210][T10393] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.200227][T10393] ? asm_sysvec_call_function_single+0x1a/0x20 [ 522.200264][T10393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.200281][T10393] RIP: 0033:0x7f6d3c58ebe9 [ 522.200297][T10393] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 522.200312][T10393] RSP: 002b:00007f6d3d3f4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 522.200331][T10393] RAX: ffffffffffffffda RBX: 00007f6d3c7c6090 RCX: 00007f6d3c58ebe9 [ 522.200344][T10393] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000006 [ 522.200355][T10393] RBP: 00007f6d3d3f4090 R08: 0000000000000000 R09: 0000000000000000 [ 522.200366][T10393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 522.200377][T10393] R13: 00007f6d3c7c6128 R14: 00007f6d3c7c6090 R15: 00007ffc46084658 [ 522.200405][T10393] [ 522.792618][T10379] ext4 filesystem being mounted at /168/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 523.874737][T10377] fido_id[10377]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 524.051909][ T6249] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 524.126258][ T5865] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 524.395176][T10407] fuse: Bad value for 'group_id' [ 524.400663][T10407] fuse: Bad value for 'group_id' [ 525.123042][ T5977] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 525.314279][ T5977] usb 3-1: config 0 has an invalid interface number: 47 but max is 0 [ 525.345601][ T5977] usb 3-1: config 0 has no interface number 0 [ 525.372771][ T5977] usb 3-1: config 0 interface 47 altsetting 185 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 525.402256][ T5977] usb 3-1: config 0 interface 47 has no altsetting 0 [ 525.411181][T10416] loop7: detected capacity change from 0 to 4096 [ 525.411925][T10424] netlink: 'syz.6.984': attribute type 5 has an invalid length. [ 525.471996][ T5977] usb 3-1: New USB device found, idVendor=06e1, idProduct=0709, bcdDevice= 2.04 [ 525.477691][T10416] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 525.523221][ T5977] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.542825][ T10] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 525.641892][ T5977] usb 3-1: Product: syz [ 525.646099][ T5977] usb 3-1: Manufacturer: syz [ 525.690916][ T5977] usb 3-1: SerialNumber: syz [ 525.695855][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 525.722572][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 525.736367][ T5977] usb 3-1: config 0 descriptor?? [ 525.754204][T10434] loop4: detected capacity change from 0 to 64 [ 525.802236][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 526.362024][ T5977] go7007 3-1:0.47: probe with driver go7007 failed with error -12 [ 526.391216][ T10] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 526.395588][ T9722] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 526.412027][ T5977] usb 3-1: USB disconnect, device number 17 [ 526.419105][ T10] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 526.459004][ T10] usb 2-1: Product: syz [ 526.521550][ T10] usb 2-1: Manufacturer: syz [ 526.526202][ T10] usb 2-1: SerialNumber: syz [ 526.574633][ T10] usb 2-1: config 0 descriptor?? [ 526.831275][T10440] loop7: detected capacity change from 0 to 128 [ 526.847950][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 526.847971][ T30] audit: type=1326 audit(1756550130.222:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10436 comm="syz.5.989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99fff8ebe9 code=0x7ffc0000 [ 526.916061][ T30] audit: type=1326 audit(1756550130.222:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10436 comm="syz.5.989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99fff8ebe9 code=0x7ffc0000 [ 526.950848][T10440] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 526.966833][ T30] audit: type=1326 audit(1756550130.222:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10436 comm="syz.5.989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f99fff8ebe9 code=0x7ffc0000 [ 526.993118][ T30] audit: type=1326 audit(1756550130.222:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10436 comm="syz.5.989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f99fff8ec23 code=0x7ffc0000 [ 526.993742][T10440] ext4 filesystem being mounted at /11/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 527.015342][ C1] vkms_vblank_simulate: vblank timer overrun [ 527.017362][ T30] audit: type=1326 audit(1756550130.262:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10436 comm="syz.5.989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f99fff8d69f code=0x7ffc0000 [ 527.054838][ T6104] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 527.095398][T10446] loop4: detected capacity change from 0 to 256 [ 527.161473][ T30] audit: type=1326 audit(1756550130.272:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10436 comm="syz.5.989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f99fff8ec77 code=0x7ffc0000 [ 527.219820][T10446] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 527.231849][ T6104] usb 7-1: Using ep0 maxpacket: 16 [ 527.246418][ T6104] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 527.262502][T10447] loop2: detected capacity change from 0 to 4096 [ 527.283259][ T30] audit: type=1326 audit(1756550130.272:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10436 comm="syz.5.989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f99fff8d550 code=0x7ffc0000 [ 527.346307][ T6104] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 527.431163][T10447] EXT4-fs (loop2): Test dummy encryption mode enabled [ 527.475241][ T6104] usb 7-1: config 0 interface 0 has no altsetting 0 [ 527.561571][ T6104] usb 7-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 527.570749][ T6104] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.700819][ T30] audit: type=1326 audit(1756550130.272:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10436 comm="syz.5.989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f99fff8d84a code=0x7ffc0000 [ 527.766002][ T30] audit: type=1326 audit(1756550130.282:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10436 comm="syz.5.989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99fff8ebe9 code=0x7ffc0000 [ 527.790296][ T30] audit: type=1326 audit(1756550130.282:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10436 comm="syz.5.989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99fff8ebe9 code=0x7ffc0000 [ 527.814669][ C1] vkms_vblank_simulate: vblank timer overrun [ 527.869228][T10447] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 527.878125][T10447] System zones: 0-5 [ 527.940137][T10447] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 528.055505][ T6104] usb 7-1: config 0 descriptor?? [ 528.172311][ T9722] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 528.280032][ T5865] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 528.490468][ T9419] usb 2-1: USB disconnect, device number 11 [ 528.822486][ T6104] nzxt-smart2 0003:1E71:2009.0012: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.6-1/input0 [ 529.271428][T10465] fuse: Bad value for 'group_id' [ 529.279164][T10465] fuse: Bad value for 'group_id' [ 530.034873][T10469] loop2: detected capacity change from 0 to 256 [ 530.130396][ T6104] usb 7-1: USB disconnect, device number 13 [ 530.306854][ T7109] block nbd0: Possible stuck request ffff8880250601c0: control (read@0,1024B). Runtime 180 seconds [ 530.318308][ T7109] block nbd0: Possible stuck request ffff888025060380: control (read@1024,1024B). Runtime 180 seconds [ 530.322048][T10473] block nbd1: Attempted send on invalid socket [ 530.330357][ T7109] block nbd0: Possible stuck request ffff888025060540: control (read@2048,1024B). Runtime 180 seconds [ 530.348384][ T7109] block nbd0: Possible stuck request ffff888025060700: control (read@3072,1024B). Runtime 180 seconds [ 530.438076][T10476] loop7: detected capacity change from 0 to 8 [ 530.521942][T10473] blk_print_req_error: 2 callbacks suppressed [ 530.522005][T10473] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 530.598693][T10476] cramfs: empty filesystem [ 530.621135][ T6164] udevd[6164]: incorrect cramfs checksum on /dev/loop7 [ 530.629512][T10473] block nbd1: Attempted send on invalid socket [ 530.638808][T10473] I/O error, dev nbd1, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 530.652342][T10473] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 530.973581][ T6164] udevd[6164]: incorrect cramfs checksum on /dev/loop7 [ 530.993322][T10473] block nbd1: Attempted send on invalid socket [ 530.997407][ T5989] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 531.008850][T10473] I/O error, dev nbd1, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 531.029592][T10470] fido_id[10470]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 531.044358][T10473] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 531.296301][T10473] block nbd1: Attempted send on invalid socket [ 531.307122][ T5989] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz1] on syz0 [ 531.852273][T10473] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 531.895695][T10473] block nbd1: Attempted send on invalid socket [ 531.941600][T10473] I/O error, dev nbd1, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 531.952455][T10473] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 532.059941][T10473] block nbd1: Attempted send on invalid socket [ 532.087393][T10490] fido_id[10490]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 532.116405][T10473] I/O error, dev nbd1, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 532.243647][T10473] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 532.262388][T10473] block nbd1: Attempted send on invalid socket [ 532.272327][T10494] overlayfs: failed to resolve 'euid=00000000000000000000': -2 [ 532.298581][T10496] loop6: detected capacity change from 0 to 128 [ 532.308078][T10473] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 532.380657][T10473] block nbd1: Attempted send on invalid socket [ 532.391657][T10473] I/O error, dev nbd1, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 532.401909][T10496] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 532.424093][T10496] ext4 filesystem being mounted at /125/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 532.513259][T10473] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 532.545595][T10498] loop7: detected capacity change from 0 to 128 [ 532.558773][T10494] loop4: detected capacity change from 0 to 256 [ 532.582849][T10498] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 532.595576][T10498] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 533.042786][T10473] block nbd1: Attempted send on invalid socket [ 533.561548][T10473] I/O error, dev nbd1, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 533.607846][T10494] vfat: Bad value for 'allow_utime' [ 534.027379][T10473] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 534.068139][T10473] block nbd1: Attempted send on invalid socket [ 534.075280][T10473] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 534.163606][T10473] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 534.216631][T10473] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 534.288330][T10473] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 534.540408][ T6168] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 535.628805][T10520] loop1: detected capacity change from 0 to 512 [ 535.775895][T10520] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.1012: casefold flag without casefold feature [ 535.827117][T10530] loop2: detected capacity change from 0 to 128 [ 535.845930][T10524] loop7: detected capacity change from 0 to 256 [ 535.880420][T10520] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.1012: couldn't read orphan inode 15 (err -117) [ 535.954770][T10530] syz.2.1015: attempt to access beyond end of device [ 535.954770][T10530] loop2: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 535.989908][T10520] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 536.117243][T10534] syz.2.1015: attempt to access beyond end of device [ 536.117243][T10534] loop2: rw=2049, sector=144, nr_sectors = 2 limit=128 [ 536.142335][ T6104] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 536.161553][T10531] IPVS: persistence engine module ip_vs_pe_s not found [ 536.189581][T10534] Buffer I/O error on dev loop2, logical block 72, lost async page write [ 536.302198][T10527] syz.2.1015: attempt to access beyond end of device [ 536.302198][T10527] loop2: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 536.381711][T10527] Buffer I/O error on dev loop2, logical block 69, lost async page write [ 536.472379][ T5178] Bluetooth: hci0: Unknown advertising packet type: 0x5d [ 536.472418][ T5178] Bluetooth: hci0: Unknown advertising packet type: 0x7f [ 536.479580][ T5178] Bluetooth: hci0: Unknown advertising packet type: 0x7f [ 536.489499][ T5178] Bluetooth: hci0: Malformed LE Event: 0x0d [ 536.521767][ T6104] usb 5-1: Using ep0 maxpacket: 16 [ 536.923672][ T6104] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 537.102836][ T6104] usb 5-1: config 0 interface 0 has no altsetting 0 [ 537.249479][ T6104] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 538.060852][ T6104] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.593667][T10540] fuse: Bad value for 'group_id' [ 539.598762][T10540] fuse: Bad value for 'group_id' [ 539.600820][ T6104] usb 5-1: config 0 descriptor?? [ 540.364585][T10544] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1017'. [ 540.382051][T10544] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1017'. [ 540.852975][ T6104] usb 5-1: can't set config #0, error -71 [ 540.894628][ T6104] usb 5-1: USB disconnect, device number 21 [ 541.162765][ T5857] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 541.202042][T10547] loop2: detected capacity change from 0 to 1024 [ 541.474657][T10552] loop7: detected capacity change from 0 to 512 [ 541.931560][T10552] EXT4-fs error (device loop7): ext4_orphan_get:1392: inode #15: comm syz.7.1022: casefold flag without casefold feature [ 542.021474][T10552] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.1022: couldn't read orphan inode 15 (err -117) [ 542.074474][T10564] cifs: Unknown parameter '0xffffffffffffffff00000000000000000000' [ 542.113744][T10552] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 542.180763][T10547] hfsplus: xattr search failed [ 542.189180][T10566] nbd_handle_cmd: 2 callbacks suppressed [ 542.189204][T10566] block nbd6: Attempted send on invalid socket [ 542.208860][T10566] blk_print_req_error: 2 callbacks suppressed [ 542.208877][T10566] I/O error, dev nbd6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 542.232455][T10566] block nbd6: Attempted send on invalid socket [ 542.260701][T10566] I/O error, dev nbd6, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 542.267948][ T6104] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 542.301879][ T6104] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz1] on syz0 [ 542.315964][T10566] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 542.387769][T10566] block nbd6: Attempted send on invalid socket [ 542.397068][T10566] I/O error, dev nbd6, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 542.438092][T10566] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 542.484022][T10566] block nbd6: Attempted send on invalid socket [ 542.500527][T10566] I/O error, dev nbd6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 542.582097][T10566] block nbd6: Attempted send on invalid socket [ 542.617270][ T5178] Bluetooth: hci6: Unknown advertising packet type: 0x5d [ 542.617373][ T5178] Bluetooth: hci6: Unknown advertising packet type: 0x7f [ 542.624998][ T5178] Bluetooth: hci6: Unknown advertising packet type: 0x7f [ 542.632319][ T5178] Bluetooth: hci6: Malformed LE Event: 0x0d [ 542.758756][T10566] I/O error, dev nbd6, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 542.772281][T10566] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 542.793454][T10566] block nbd6: Attempted send on invalid socket [ 542.799756][T10566] I/O error, dev nbd6, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 542.816623][T10566] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 542.832176][T10566] block nbd6: Attempted send on invalid socket [ 543.193566][T10566] I/O error, dev nbd6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 543.865027][T10566] block nbd6: Attempted send on invalid socket [ 544.130515][T10566] I/O error, dev nbd6, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 544.161339][T10566] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 544.191869][T10566] block nbd6: Attempted send on invalid socket [ 544.355366][T10566] I/O error, dev nbd6, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 545.163594][T10566] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 545.262334][T10569] fido_id[10569]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 545.445898][T10566] block nbd6: Attempted send on invalid socket [ 545.720304][T10566] I/O error, dev nbd6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 545.801982][T10566] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 545.811982][T10566] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 545.822458][T10566] UDF-fs: warning (device nbd6): udf_fill_super: No partition found (1) [ 546.226241][T10588] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1028'. [ 546.240044][T10588] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1028'. [ 546.829226][ T5865] hfsplus: node 4:3 still has 1 user(s)! [ 546.910798][ T9722] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 548.092383][T10600] loop7: detected capacity change from 0 to 512 [ 548.111400][ T5977] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 548.158347][T10602] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1034'. [ 548.167464][T10602] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1034'. [ 548.314905][T10600] EXT4-fs error (device loop7): ext4_orphan_get:1392: inode #15: comm syz.7.1032: casefold flag without casefold feature [ 548.377149][ T5977] usb 3-1: Using ep0 maxpacket: 16 [ 548.438762][ T5977] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 548.461168][T10600] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.1032: couldn't read orphan inode 15 (err -117) [ 548.491042][ T5977] usb 3-1: config 0 interface 0 has no altsetting 0 [ 548.513322][T10610] loop1: detected capacity change from 0 to 128 [ 548.533182][T10600] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 548.546042][ T5977] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 548.627547][ T5977] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.652902][T10610] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 548.737550][ T5977] usb 3-1: config 0 descriptor?? [ 548.766800][T10610] ext4 filesystem being mounted at /166/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 549.088058][ T5178] Bluetooth: hci6: Unknown advertising packet type: 0x5d [ 549.088095][ T5178] Bluetooth: hci6: Unknown advertising packet type: 0x7f [ 549.096530][ T5178] Bluetooth: hci6: Unknown advertising packet type: 0x7f [ 549.103885][ T5178] Bluetooth: hci6: Malformed LE Event: 0x0d [ 549.503833][T10617] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1038'. [ 549.581147][ T5977] usbhid 3-1:0.0: can't add hid device: -71 [ 549.861080][ T5977] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 550.092124][ T5977] usb 3-1: USB disconnect, device number 18 [ 550.495626][ T5857] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 550.792055][T10628] loop1: detected capacity change from 0 to 512 [ 550.807169][T10628] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 550.938345][T10623] loop6: detected capacity change from 0 to 4096 [ 551.132024][T10623] EXT4-fs (loop6): Test dummy encryption mode enabled [ 551.240359][ T9722] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 551.321441][T10623] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 551.329698][T10623] System zones: 0-5 [ 551.496776][T10636] FAULT_INJECTION: forcing a failure. [ 551.496776][T10636] name failslab, interval 1, probability 0, space 0, times 0 [ 551.574204][T10623] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 551.595182][T10636] CPU: 1 UID: 0 PID: 10636 Comm: syz.2.1044 Not tainted syzkaller #0 PREEMPT(full) [ 551.595213][T10636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 551.595228][T10636] Call Trace: [ 551.595237][T10636] [ 551.595246][T10636] dump_stack_lvl+0x189/0x250 [ 551.595295][T10636] ? __pfx____ratelimit+0x10/0x10 [ 551.595332][T10636] ? __pfx_dump_stack_lvl+0x10/0x10 [ 551.595360][T10636] ? __pfx__printk+0x10/0x10 [ 551.595397][T10636] ? __pfx___might_resched+0x10/0x10 [ 551.595421][T10636] ? srso_alias_return_thunk+0x5/0xfbef5 [ 551.595457][T10636] should_fail_ex+0x414/0x560 [ 551.595497][T10636] should_failslab+0xa8/0x100 [ 551.595536][T10636] __kmalloc_noprof+0xcb/0x4f0 [ 551.595568][T10636] ? tomoyo_encode+0x28b/0x550 [ 551.595598][T10636] tomoyo_encode+0x28b/0x550 [ 551.595630][T10636] tomoyo_realpath_from_path+0x58d/0x5d0 [ 551.595667][T10636] ? tomoyo_mount_permission+0x27a/0x970 [ 551.595707][T10636] tomoyo_mount_permission+0x377/0x970 [ 551.595748][T10636] ? srso_alias_return_thunk+0x5/0xfbef5 [ 551.595775][T10636] ? tomoyo_mount_permission+0x27a/0x970 [ 551.595814][T10636] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 551.595913][T10636] ? srso_alias_return_thunk+0x5/0xfbef5 [ 551.595946][T10636] security_sb_mount+0xec/0x350 [ 551.595975][T10636] path_mount+0xbc/0xfe0 [ 551.596010][T10636] ? srso_alias_return_thunk+0x5/0xfbef5 [ 551.596037][T10636] ? kmem_cache_free+0x18f/0x400 [ 551.596081][T10636] __se_sys_mount+0x317/0x410 [ 551.596126][T10636] ? __pfx___se_sys_mount+0x10/0x10 [ 551.596160][T10636] ? rcu_is_watching+0x15/0xb0 [ 551.596196][T10636] ? srso_alias_return_thunk+0x5/0xfbef5 [ 551.596223][T10636] ? __x64_sys_mount+0x20/0xc0 [ 551.596268][T10636] do_syscall_64+0xfa/0x3b0 [ 551.596290][T10636] ? lockdep_hardirqs_on+0x9c/0x150 [ 551.596325][T10636] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.596347][T10636] ? srso_alias_return_thunk+0x5/0xfbef5 [ 551.596375][T10636] ? exc_page_fault+0x9f/0xf0 [ 551.596412][T10636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.596436][T10636] RIP: 0033:0x7f973238ebe9 [ 551.596456][T10636] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 551.596477][T10636] RSP: 002b:00007f973313a038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 551.596501][T10636] RAX: ffffffffffffffda RBX: 00007f97325c6090 RCX: 00007f973238ebe9 [ 551.596519][T10636] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000200000000100 [ 551.596535][T10636] RBP: 00007f973313a090 R08: 0000000000000000 R09: 0000000000000000 [ 551.596550][T10636] R10: 00000000012d7498 R11: 0000000000000246 R12: 0000000000000001 [ 551.596565][T10636] R13: 00007f97325c6128 R14: 00007f97325c6090 R15: 00007ffd2fd68448 [ 551.596603][T10636] [ 551.907841][T10640] trusted_key: syz.7.1043 sent an empty control message without MSG_MORE. [ 552.151842][T10638] loop1: detected capacity change from 0 to 32768 [ 552.159685][T10638] btrfs: Deprecated parameter 'usebackuproot' [ 552.168987][T10638] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 552.205233][T10638] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1045 (10638) [ 552.231709][T10636] ERROR: Out of memory at tomoyo_realpath_from_path. [ 552.929251][T10638] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 552.984802][T10638] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm [ 553.061696][T10638] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 553.069057][T10647] loop4: detected capacity change from 0 to 8 [ 553.218397][T10647] cramfs: empty filesystem [ 553.265587][ T6281] udevd[6281]: incorrect cramfs checksum on /dev/loop4 [ 553.267045][T10658] loop2: detected capacity change from 0 to 16 [ 553.270723][ T6168] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 553.281795][T10658] erofs (device loop2): mounted with root inode @ nid 36. [ 553.454130][T10645] : entered promiscuous mode [ 553.515088][ T6281] udevd[6281]: incorrect cramfs checksum on /dev/loop4 [ 553.610352][T10638] BTRFS info (device loop1): rebuilding free space tree [ 553.775546][T10638] BTRFS info (device loop1): disabling free space tree [ 553.811559][T10638] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 553.853365][T10638] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 554.020626][T10638] BTRFS info (device loop1): turning on sync discard [ 554.095103][T10638] BTRFS info (device loop1): enabling disk space caching [ 554.120911][T10673] loop7: detected capacity change from 0 to 2048 [ 554.245177][ T5989] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 554.766092][T10638] BTRFS info (device loop1): force clearing of disk cache [ 554.900629][T10638] BTRFS info (device loop1): trying to use backup root at mount time [ 555.130015][T10673] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 555.141185][ T5989] usb 5-1: config 0 has an invalid interface number: 47 but max is 0 [ 555.260342][ T5989] usb 5-1: config 0 has no interface number 0 [ 555.394497][ T5989] usb 5-1: config 0 interface 47 altsetting 185 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 555.660159][ T1331] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 555.867501][ T5989] usb 5-1: config 0 interface 47 has no altsetting 0 [ 555.884772][ T5989] usb 5-1: New USB device found, idVendor=06e1, idProduct=0709, bcdDevice= 2.04 [ 555.894418][ T5989] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.903518][ T5989] usb 5-1: Product: syz [ 555.907716][ T5989] usb 5-1: Manufacturer: syz [ 555.917957][ T5989] usb 5-1: SerialNumber: syz [ 555.925974][ T5989] usb 5-1: config 0 descriptor?? [ 556.584628][T10688] loop2: detected capacity change from 0 to 512 [ 556.674987][ T5989] go7007 5-1:0.47: probe with driver go7007 failed with error -12 [ 556.709442][ T5178] Bluetooth: hci2: Unknown advertising packet type: 0x5d [ 556.709468][ T5178] Bluetooth: hci2: Unknown advertising packet type: 0x7f [ 556.716649][ T5178] Bluetooth: hci2: Unknown advertising packet type: 0x7f [ 556.723754][ T5178] Bluetooth: hci2: Malformed LE Event: 0x0d [ 556.739732][ T5989] usb 5-1: USB disconnect, device number 22 [ 556.741076][ T5857] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 556.895626][T10688] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.1056: casefold flag without casefold feature [ 556.963780][T10688] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.1056: couldn't read orphan inode 15 (err -117) [ 557.044453][T10688] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 557.429214][T10699] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1060'. [ 557.439422][T10699] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1060'. [ 557.874199][ T5178] Bluetooth: hci5: Unknown advertising packet type: 0x5d [ 557.874271][ T5178] Bluetooth: hci5: Unknown advertising packet type: 0x7f [ 557.882821][ T5178] Bluetooth: hci5: Unknown advertising packet type: 0x7f [ 557.889962][ T5178] Bluetooth: hci5: Malformed LE Event: 0x0d [ 560.657356][ T8621] block nbd0: Possible stuck request ffff8880250601c0: control (read@0,1024B). Runtime 210 seconds [ 560.696229][ T8621] block nbd0: Possible stuck request ffff888025060380: control (read@1024,1024B). Runtime 210 seconds [ 560.744520][ T8621] block nbd0: Possible stuck request ffff888025060540: control (read@2048,1024B). Runtime 210 seconds [ 560.906181][ T8621] block nbd0: Possible stuck request ffff888025060700: control (read@3072,1024B). Runtime 210 seconds [ 560.986388][T10711] loop4: detected capacity change from 0 to 4096 [ 561.003181][T10711] EXT4-fs (loop4): Test dummy encryption mode enabled [ 561.087137][T10711] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 561.150430][T10711] System zones: 0-5 [ 561.239406][T10711] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 561.269332][ T5865] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 561.568204][ T5861] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 562.274894][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.323288][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.901975][ T5947] usb 7-1: new full-speed USB device number 14 using dummy_hcd [ 563.150953][ T5947] usb 7-1: not running at top speed; connect to a high speed hub [ 563.224621][ T5947] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 563.260992][T10739] loop4: detected capacity change from 0 to 1024 [ 563.283221][ T5947] usb 7-1: config 1 has no interface number 1 [ 563.289125][T10739] EXT4-fs: Ignoring removed nobh option [ 563.311566][T10739] EXT4-fs: Ignoring removed bh option [ 563.324568][ T5947] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 563.380912][ T5947] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 563.406242][ T5947] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.448271][ T5947] usb 7-1: Product: syz [ 563.476127][T10739] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 563.509582][ T5947] usb 7-1: Manufacturer: syz [ 563.532082][ T5947] usb 7-1: SerialNumber: syz [ 564.384917][ T5947] usb 7-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 564.540439][ T5947] usb 7-1: USB disconnect, device number 14 [ 564.717022][T10746] loop7: detected capacity change from 0 to 256 [ 564.985248][ T6281] udevd[6281]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 565.035727][ T5861] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 565.601550][ T5947] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 565.817043][ T5947] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 565.856050][ T5947] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 565.895378][ T5947] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 565.932237][ T5947] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.023756][T10766] fuse: Bad value for 'group_id' [ 566.028912][T10766] fuse: Bad value for 'group_id' [ 566.403832][T10759] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 566.450969][ T5947] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 566.763490][T10759] loop4: detected capacity change from 0 to 1024 [ 566.879764][T10768] loop1: detected capacity change from 0 to 512 [ 566.890218][ T5989] usb 5-1: USB disconnect, device number 23 [ 567.155370][T10768] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.1078: casefold flag without casefold feature [ 567.380496][T10768] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.1078: couldn't read orphan inode 15 (err -117) [ 567.512972][T10768] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 567.948738][ T5178] Bluetooth: hci0: Unknown advertising packet type: 0x5d [ 567.948845][ T5178] Bluetooth: hci0: Unknown advertising packet type: 0x7f [ 567.959449][ T5178] Bluetooth: hci0: Unknown advertising packet type: 0x7f [ 567.967146][ T5178] Bluetooth: hci0: Malformed LE Event: 0x0d [ 568.417403][ T6260] hfsplus: b-tree write err: -5, ino 4 [ 571.132665][T10780] loop4: detected capacity change from 0 to 1024 [ 571.287764][T10777] loop6: detected capacity change from 0 to 4096 [ 571.385168][T10780] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 571.440807][T10780] ext4 filesystem being mounted at /176/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 571.570669][T10777] EXT4-fs (loop6): Test dummy encryption mode enabled [ 571.693738][T10786] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: block 3: comm syz.4.1081: lblock 3 mapped to illegal pblock 3 (length 13) [ 571.801512][T10777] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 571.802195][T10777] EXT4-fs: failed to create workqueue [ 571.817476][T10786] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117 [ 571.832109][T10786] EXT4-fs (loop4): This should not happen!! Data will be lost [ 571.832109][T10786] [ 572.023242][T10777] EXT4-fs (loop6): mount failed [ 572.370771][ T5861] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 572.583740][ T5857] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 572.651525][ T5977] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 572.695753][T10798] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1086'. [ 572.821589][ T5977] usb 7-1: Using ep0 maxpacket: 32 [ 572.843758][ T5977] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 572.909009][ T5977] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 572.960373][ T5977] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 573.051397][ T5977] usb 7-1: Product: syz [ 573.067863][ T5977] usb 7-1: Manufacturer: syz [ 573.076842][ T5977] usb 7-1: SerialNumber: syz [ 573.102431][ T5977] usb 7-1: config 0 descriptor?? [ 573.290759][T10803] loop1: detected capacity change from 0 to 4096 [ 573.300263][ T6104] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 573.351437][T10803] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512). [ 573.472884][ T6104] usb 5-1: not running at top speed; connect to a high speed hub [ 573.498953][ T6104] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 573.538528][ T6104] usb 5-1: config 1 has no interface number 1 [ 573.586333][ T5178] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 573.598086][ T6104] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 573.707705][ T6104] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 573.739066][ T6104] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.839313][ T6104] usb 5-1: Product: syz [ 573.870744][ T6104] usb 5-1: Manufacturer: syz [ 573.874483][ T5947] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 573.998886][T10815] comedi: valid board names for 8255 driver are: [ 574.256964][T10815] 8255 [ 574.291547][T10815] comedi: valid board names for vmk80xx driver are: [ 574.294030][ T6104] usb 5-1: SerialNumber: syz [ 574.308595][T10815] vmk80xx [ 574.318810][T10815] comedi: valid board names for usbduxsigma driver are: [ 574.349417][T10815] usbduxsigma [ 574.360978][T10815] comedi: valid board names for usbduxfast driver are: [ 574.388906][T10815] usbduxfast [ 574.408379][T10815] comedi: valid board names for usbdux driver are: [ 574.419791][ T5947] usb 3-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 574.482647][ T5947] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.502565][T10815] usbdux [ 574.505800][T10815] comedi: valid board names for ni6501 driver are: [ 574.602352][T10815] ni6501 [ 574.617146][ T6104] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 574.638864][ T5947] usb 3-1: config 0 descriptor?? [ 574.648887][T10815] comedi: valid board names for dt9812 driver are: [ 574.739679][ T6104] usb 5-1: USB disconnect, device number 24 [ 574.757495][ T5947] usb 3-1: selecting invalid altsetting 1 [ 574.769397][T10815] dt9812 [ 574.785799][T10815] comedi: valid board names for ni_labpc_cs driver are: [ 574.844312][T10815] ni_labpc_cs [ 574.866713][T10815] comedi: valid board names for ni_daq_700 driver are: [ 574.975212][T10815] ni_daq_700 [ 574.993410][T10815] comedi: valid board names for labpc_pci driver are: [ 575.009767][T10815] labpc_pci [ 575.019246][ T5947] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 575.044739][ T6281] udevd[6281]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 575.064308][T10815] comedi: valid board names for adl_pci9118 driver are: [ 575.098243][ T5947] usb 3-1: USB disconnect, device number 19 [ 575.119412][T10815] pci9118dg [ 575.143891][T10815] pci9118hg [ 575.163947][ T10] usb 7-1: USB disconnect, device number 15 [ 575.182674][T10815] pci9118hr [ 575.190520][T10815] comedi: valid board names for 8255_pci driver are: [ 575.246634][T10815] 8255_pci [ 575.295593][T10815] comedi: valid board names for s526 driver are: [ 575.300253][ T6157] udevd[6157]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 575.335274][T10815] s526 [ 575.338063][T10815] comedi: valid board names for multiq3 driver are: [ 575.450301][T10815] multiq3 [ 575.458731][T10815] comedi: valid board names for pcmuio driver are: [ 575.487207][T10815] pcmuio48 [ 575.490371][T10815] pcmuio96 [ 575.547909][T10815] comedi: valid board names for pcmmio driver are: [ 575.567942][T10815] pcmmio [ 575.572613][T10815] comedi: valid board names for pcmda12 driver are: [ 575.594307][T10815] pcmda12 [ 575.644466][T10815] comedi: valid board names for pcmad driver are: [ 575.676708][T10815] pcmad12 [ 575.740760][T10815] pcmad16 [ 575.744939][T10815] comedi: valid board names for ni_labpc driver are: [ 575.774733][T10815] lab-pc-1200 [ 575.778157][T10815] lab-pc-1200ai [ 575.785047][T10815] lab-pc+ [ 575.788085][T10815] comedi: valid board names for atmio16 driver are: [ 575.805308][T10815] atmio16 [ 575.818277][T10815] atmio16d [ 575.836656][T10815] comedi: valid board names for ni_at_ao driver are: [ 575.885908][T10815] at-ao-6 [ 575.888982][T10815] at-ao-10 [ 575.911705][T10815] comedi: valid board names for ni_at_a2150 driver are: [ 575.918693][T10815] ni_at_a2150 [ 575.977902][T10815] comedi: valid board names for adq12b driver are: [ 576.019146][T10815] adq12b [ 576.028747][T10815] comedi: valid board names for mpc624 driver are: [ 576.059917][T10815] mpc624 [ 576.077560][T10832] loop1: detected capacity change from 0 to 4096 [ 576.084354][T10815] comedi: valid board names for c6xdigio driver are: [ 576.091119][T10815] c6xdigio [ 576.107881][T10815] comedi: valid board names for aio_iiro_16 driver are: [ 576.141616][T10815] aio_iiro_16 [ 576.158915][T10815] comedi: valid board names for aio_aio12_8 driver are: [ 576.201055][T10832] EXT4-fs (loop1): Test dummy encryption mode enabled [ 576.208312][T10815] aio_aio12_8 [ 576.232134][T10815] aio_ai12_8 [ 576.235466][T10815] aio_ao12_4 [ 576.238750][T10815] comedi: valid board names for fl512 driver are: [ 576.287319][T10832] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 576.310953][T10815] fl512 [ 576.325963][T10815] comedi: valid board names for dmm32at driver are: [ 576.361429][ T5885] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 576.394270][T10815] dmm32at [ 576.397388][T10815] comedi: valid board names for dt282x driver are: [ 576.404579][T10815] dt2821 [ 576.407519][T10815] dt2821-f [ 576.410621][T10815] dt2821-g [ 576.414522][T10815] dt2823 [ 576.417595][T10815] dt2824-pgh [ 576.420903][T10815] dt2824-pgl [ 576.425055][T10832] System zones: 0-5 [ 576.428985][T10815] dt2825 [ 576.448352][T10815] dt2827 [ 576.469754][T10815] dt2828 [ 576.497775][T10815] dt2829 [ 576.500762][T10815] dt21-ez [ 576.521783][ T5885] usb 5-1: Using ep0 maxpacket: 8 [ 576.549519][T10815] dt23-ez [ 576.642574][T10832] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 576.833771][ T5885] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 577.012987][T10815] dt24-ez [ 577.016056][T10815] dt24-ez-pgl [ 577.019434][T10815] comedi: valid board names for dt2817 driver are: [ 577.047284][ T5885] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.111784][ T5885] usb 5-1: Product: syz [ 577.113144][T10815] dt2817 [ 577.116020][ T5885] usb 5-1: Manufacturer: syz [ 577.116043][ T5885] usb 5-1: SerialNumber: syz [ 577.154378][T10815] comedi: valid board names for dt2815 driver are: [ 577.401535][T10815] dt2815 [ 577.418319][T10815] comedi: valid board names for dt2814 driver are: [ 578.113057][ T5885] usb 5-1: config 0 descriptor?? [ 578.121706][T10815] dt2814 [ 578.163893][T10815] comedi: valid board names for dt2811 driver are: [ 578.202450][T10815] dt2811-pgh [ 578.221112][T10815] dt2811-pgl [ 578.235384][T10815] comedi: valid board names for dt2801 driver are: [ 578.271207][T10815] dt2801 [ 578.280292][T10815] comedi: valid board names for das6402 driver are: [ 578.299576][T10815] das6402-12 [ 578.364159][ T5857] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 578.433601][T10815] das6402-16 [ 578.441765][T10815] comedi: valid board names for das1800 driver are: [ 578.461497][ T5885] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 578.497827][T10815] das-1701st [ 578.513098][T10815] das-1701st-da [ 578.516690][T10815] das-1702st [ 578.519972][T10815] das-1702st-da [ 578.541498][T10815] das-1702hr [ 578.544836][T10815] das-1702hr-da [ 578.548384][T10815] das-1701ao [ 578.603330][T10815] das-1702ao [ 578.611946][ T5885] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 578.640794][T10815] das-1801st [ 578.650636][T10815] das-1801st-da [ 578.663240][T10815] das-1802st [ 578.666601][T10815] das-1802st-da [ 578.670142][T10815] das-1802hr [ 578.674199][T10854] loop6: detected capacity change from 0 to 128 [ 578.681515][ T5885] usb 5-1: USB disconnect, device number 25 [ 578.715183][T10815] das-1802hr-da [ 578.718771][T10815] das-1801hc [ 578.758850][T10815] das-1802hc [ 578.779442][T10815] das-1801ao [ 578.795251][T10815] das-1802ao [ 578.798586][T10815] comedi: valid board names for das800 driver are: [ 578.838627][T10815] das-800 [ 578.862761][T10815] cio-das800 [ 578.866083][T10815] das-801 [ 578.891556][T10815] cio-das801 [ 578.917015][T10815] das-802 [ 578.920082][T10815] cio-das802 [ 578.938750][T10815] cio-das802/16 [ 578.943452][T10815] comedi: valid board names for isa-das08 driver are: [ 578.954369][T10815] isa-das08 [ 578.962355][T10856] FAULT_INJECTION: forcing a failure. [ 578.962355][T10856] name failslab, interval 1, probability 0, space 0, times 0 [ 578.982790][T10815] das08-pgm [ 579.000560][T10815] das08-pgh [ 579.012376][T10815] das08-pgl [ 579.015913][T10815] das08-aoh [ 579.039357][T10815] das08-aol [ 579.051800][T10815] das08-aom [ 579.058972][T10856] CPU: 1 UID: 0 PID: 10856 Comm: syz.2.1106 Not tainted syzkaller #0 PREEMPT(full) [ 579.059003][T10856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 579.059018][T10856] Call Trace: [ 579.059027][T10856] [ 579.059037][T10856] dump_stack_lvl+0x189/0x250 [ 579.059071][T10856] ? __pfx____ratelimit+0x10/0x10 [ 579.059108][T10856] ? __pfx_dump_stack_lvl+0x10/0x10 [ 579.059137][T10856] ? __pfx__printk+0x10/0x10 [ 579.059175][T10856] ? __pfx___might_resched+0x10/0x10 [ 579.059199][T10856] ? srso_alias_return_thunk+0x5/0xfbef5 [ 579.059235][T10856] should_fail_ex+0x414/0x560 [ 579.059285][T10856] should_failslab+0xa8/0x100 [ 579.059324][T10856] __kmalloc_noprof+0xcb/0x4f0 [ 579.059354][T10856] ? srso_alias_return_thunk+0x5/0xfbef5 [ 579.059382][T10856] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 579.059421][T10856] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 579.059461][T10856] genl_family_rcv_msg_doit+0xb8/0x300 [ 579.059497][T10856] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 579.059530][T10856] ? srso_alias_return_thunk+0x5/0xfbef5 [ 579.059561][T10856] ? srso_alias_return_thunk+0x5/0xfbef5 [ 579.059588][T10856] ? apparmor_capable+0x137/0x1b0 [ 579.059619][T10856] ? srso_alias_return_thunk+0x5/0xfbef5 [ 579.059646][T10856] ? srso_alias_return_thunk+0x5/0xfbef5 [ 579.059673][T10856] ? security_capable+0x7e/0x2e0 [ 579.059717][T10856] genl_rcv_msg+0x60e/0x790 [ 579.059754][T10856] ? __pfx_genl_rcv_msg+0x10/0x10 [ 579.059783][T10856] ? __pfx_netlbl_mgmt_adddef+0x10/0x10 [ 579.059826][T10856] netlink_rcv_skb+0x208/0x470 [ 579.059862][T10856] ? __lock_acquire+0xab9/0xd20 [ 579.059898][T10856] ? __pfx_genl_rcv_msg+0x10/0x10 [ 579.059929][T10856] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 579.059987][T10856] ? srso_alias_return_thunk+0x5/0xfbef5 [ 579.060015][T10856] ? down_read+0x1ad/0x2e0 [ 579.060043][T10856] genl_rcv+0x28/0x40 [ 579.060069][T10856] netlink_unicast+0x82f/0x9e0 [ 579.060113][T10856] ? __pfx_netlink_unicast+0x10/0x10 [ 579.060149][T10856] ? srso_alias_return_thunk+0x5/0xfbef5 [ 579.060176][T10856] ? skb_put+0x11b/0x210 [ 579.060199][T10856] ? srso_alias_return_thunk+0x5/0xfbef5 [ 579.060232][T10856] netlink_sendmsg+0x805/0xb30 [ 579.060276][T10856] ? __pfx_netlink_sendmsg+0x10/0x10 [ 579.060302][T10856] ? srso_alias_return_thunk+0x5/0xfbef5 [ 579.060328][T10856] ? aa_sock_msg_perm+0xf1/0x1d0 [ 579.060353][T10856] ? srso_alias_return_thunk+0x5/0xfbef5 [ 579.060380][T10856] ? srso_alias_return_thunk+0x5/0xfbef5 [ 579.060409][T10856] ? __pfx_netlink_sendmsg+0x10/0x10 [ 579.060433][T10856] __sock_sendmsg+0x21c/0x270 [ 579.060470][T10856] ____sys_sendmsg+0x505/0x830 [ 579.060504][T10856] ? __pfx_____sys_sendmsg+0x10/0x10 [ 579.060541][T10856] ? srso_alias_return_thunk+0x5/0xfbef5 [ 579.060568][T10856] ? import_iovec+0x74/0xa0 [ 579.060602][T10856] ___sys_sendmsg+0x21f/0x2a0 [ 579.060632][T10856] ? __pfx____sys_sendmsg+0x10/0x10 [ 579.060667][T10856] ? srso_alias_return_thunk+0x5/0xfbef5 [ 579.060728][T10856] ? __fget_files+0x2a/0x420 [ 579.060764][T10856] ? srso_alias_return_thunk+0x5/0xfbef5 [ 579.060791][T10856] ? __fget_files+0x3a0/0x420 [ 579.060839][T10856] __x64_sys_sendmsg+0x19b/0x260 [ 579.060869][T10856] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 579.060909][T10856] ? __pfx_ksys_write+0x10/0x10 [ 579.060938][T10856] ? rcu_is_watching+0x15/0xb0 [ 579.060967][T10856] ? do_syscall_64+0xbe/0x3b0 [ 579.060995][T10856] do_syscall_64+0xfa/0x3b0 [ 579.061015][T10856] ? lockdep_hardirqs_on+0x9c/0x150 [ 579.061050][T10856] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.061073][T10856] ? srso_alias_return_thunk+0x5/0xfbef5 [ 579.061100][T10856] ? exc_page_fault+0x9f/0xf0 [ 579.061137][T10856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.061160][T10856] RIP: 0033:0x7f973238ebe9 [ 579.061181][T10856] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 579.061202][T10856] RSP: 002b:00007f973315b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 579.061227][T10856] RAX: ffffffffffffffda RBX: 00007f97325c5fa0 RCX: 00007f973238ebe9 [ 579.061244][T10856] RDX: 0000000020004044 RSI: 0000200000000100 RDI: 0000000000000004 [ 579.061260][T10856] RBP: 00007f973315b090 R08: 0000000000000000 R09: 0000000000000000 [ 579.061287][T10856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 579.061301][T10856] R13: 00007f97325c6038 R14: 00007f97325c5fa0 R15: 00007ffd2fd68448 [ 579.061339][T10856] [ 579.731522][T10815] das08/jr-ao [ 579.735589][T10815] das08jr-16-ao [ 579.739142][T10815] pc104-das08 [ 579.781834][T10815] das08jr/16 [ 579.785186][T10815] comedi: valid board names for das16m1 driver are: [ 579.837304][T10815] das16m1 [ 579.840377][T10815] comedi: valid board names for dac02 driver are: [ 579.991839][T10815] dac02 [ 579.994759][T10815] comedi: valid board names for rti802 driver are: [ 580.001254][T10815] rti802 [ 580.009379][T10815] comedi: valid board names for rti800 driver are: [ 580.070461][T10815] rti800 [ 580.081355][T10815] rti815 [ 580.084320][T10815] comedi: valid board names for pcm3724 driver are: [ 580.090908][T10815] pcm3724 [ 580.121367][T10815] comedi: valid board names for pcl818 driver are: [ 580.132693][T10815] pcl818l [ 580.135754][T10815] pcl818h [ 580.138819][T10815] pcl818hd [ 580.155477][T10815] pcl818hg [ 580.158621][T10815] pcl818 [ 580.252142][T10815] pcl718 [ 580.255139][T10815] pcm3718 [ 580.258141][T10815] comedi: valid board names for pcl816 driver are: [ 580.285416][T10858] loop1: detected capacity change from 0 to 128 [ 580.344088][T10815] pcl816 [ 580.511369][T10815] pcl814b [ 580.511388][T10815] comedi: valid board names for pcl812 driver are: [ 580.511402][T10815] pcl812 [ 580.511412][T10815] pcl812pg [ 580.511422][T10815] acl8112pg [ 580.511432][T10815] acl8112dg [ 580.511443][T10815] acl8112hg [ 580.511453][T10815] a821pgl [ 580.511462][T10815] a821pglnda [ 580.511473][T10815] a821pgh [ 580.511482][T10815] a822pgl [ 580.511492][T10815] a822pgh [ 580.511501][T10815] a823pgl [ 580.511511][T10815] a823pgh [ 580.511520][T10815] pcl813 [ 580.511530][T10815] pcl813b [ 580.511540][T10815] acl8113 [ 580.511550][T10815] iso813 [ 580.511560][T10815] acl8216 [ 580.511571][T10815] a826pg [ 580.511581][T10815] comedi: valid board names for pcl730 driver are: [ 580.511594][T10815] pcl730 [ 580.511603][T10815] iso730 [ 580.511612][T10815] acl7130 [ 580.511623][T10815] pcm3730 [ 580.521538][T10815] pcl725 [ 580.521581][T10815] p8r8dio [ 580.521618][T10815] acl7225b [ 580.521656][T10815] p16r16dio [ 580.525397][T10815] pcl733 [ 580.526650][T10815] pcl734 [ 580.526711][T10815] opmm-1616-xt [ 580.526722][T10815] pearl-mm-p [ 580.526731][T10815] ir104-pbf [ 580.528925][T10815] comedi: valid board names for pcl726 driver are: [ 580.529211][T10815] pcl726 [ 580.529222][T10815] pcl727 [ 580.529322][T10815] pcl728 [ 580.529567][T10815] acl6126 [ 580.529607][T10815] acl6128 [ 580.529786][T10815] comedi: valid board names for pcl724 driver are: [ 580.652745][T10815] pcl724 [ 580.652904][T10815] pcl722 [ 580.653213][T10815] pcl731 [ 580.655107][T10815] acl7122 [ 580.655121][T10815] acl7124 [ 580.655131][T10815] pet48dio [ 580.655467][T10815] pcmio48 [ 580.655479][T10815] onyx-mm-dio [ 580.655490][T10815] comedi: valid board names for pcl711 driver are: [ 580.655503][T10815] pcl711 [ 580.655513][T10815] pcl711b [ 580.655523][T10815] acl8112hg [ 580.656721][T10815] acl8112dg [ 580.656945][T10815] comedi: valid board names for amplc_pc263 driver are: [ 580.656959][T10815] pc263 [ 580.656969][T10815] comedi: valid board names for amplc_pc236 driver are: [ 580.656981][T10815] pc36at [ 580.656991][T10815] comedi: valid board names for amplc_dio200 driver are: [ 580.657119][T10815] pc212e [ 580.657239][T10815] pc214e [ 580.657544][T10815] pc215e [ 580.657583][T10815] pc218e [ 580.657619][T10815] pc272e [ 580.657906][T10815] comedi: valid board names for comedi_parport driver are: [ 580.658324][T10815] comedi_parport [ 580.658337][T10815] comedi: valid board names for comedi_test driver are: [ 580.658349][T10815] comedi_test [ 580.658360][T10815] comedi: valid board names for comedi_bond driver are: [ 580.658402][T10815] comedi_bond [ 580.689501][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 580.689525][ T30] audit: type=1800 audit(1756550183.912:155): pid=10864 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1105" name="file2" dev="loop6" ino=1048624 res=0 errno=0 [ 580.950313][T10858] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 580.958818][T10858] ext4 filesystem being mounted at /177/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 581.873032][T10874] loop4: detected capacity change from 0 to 8192 [ 581.885054][T10874] msdos: Bad value for 'time_offset' [ 583.138709][ T5857] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 584.868454][T10897] loop6: detected capacity change from 0 to 256 [ 585.808522][T10863] tty tty28: ldisc open failed (-12), clearing slot 27 [ 586.085137][T10867] tty tty29: ldisc open failed (-12), clearing slot 28 [ 586.126989][T10896] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 586.155252][T10905] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1119'. [ 586.166569][T10905] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1119'. [ 586.369073][T10910] netlink: 'syz.2.1121': attribute type 9 has an invalid length. [ 586.425292][T10910] netlink: 184 bytes leftover after parsing attributes in process `syz.2.1121'. [ 586.438861][T10912] loop6: detected capacity change from 0 to 128 [ 586.447244][T10912] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 586.459964][T10912] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 586.799950][T10917] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 587.124320][T10917] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 587.397562][ T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 587.781064][T10929] loop4: detected capacity change from 0 to 64 [ 590.193336][ T5977] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 590.874925][T10938] loop7: detected capacity change from 0 to 64 [ 591.075580][ T7109] block nbd0: Possible stuck request ffff8880250601c0: control (read@0,1024B). Runtime 240 seconds [ 591.087463][ T7109] block nbd0: Possible stuck request ffff888025060380: control (read@1024,1024B). Runtime 240 seconds [ 591.103641][ T7109] block nbd0: Possible stuck request ffff888025060540: control (read@2048,1024B). Runtime 240 seconds [ 591.120847][ T7109] block nbd0: Possible stuck request ffff888025060700: control (read@3072,1024B). Runtime 240 seconds [ 592.049102][ T5977] usb 2-1: device descriptor read/all, error -71 [ 592.206249][ T10] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 592.503593][ T10] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz1] on syz0 [ 592.778001][T10941] block nbd4: shutting down sockets [ 593.031803][T10958] overlay: Unknown parameter 'appraise' [ 593.186419][T10970] loop6: detected capacity change from 0 to 512 [ 593.744836][T10959] fido_id[10959]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 593.754783][T10970] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #15: comm syz.6.1141: casefold flag without casefold feature [ 593.781501][ T5178] Bluetooth: hci2: Unknown advertising packet type: 0x5d [ 593.781529][ T5178] Bluetooth: hci2: Unknown advertising packet type: 0x7f [ 593.789552][ T5178] Bluetooth: hci2: Unknown advertising packet type: 0x7f [ 593.801505][ T5178] Bluetooth: hci2: Malformed LE Event: 0x0d [ 593.864800][T10970] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.1141: couldn't read orphan inode 15 (err -117) [ 593.979868][T10970] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 594.211372][ T5989] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 594.234348][ T5178] Bluetooth: hci1: Unknown advertising packet type: 0x5d [ 594.234384][ T5178] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 594.236426][T10980] netlink: 'syz.7.1144': attribute type 9 has an invalid length. [ 594.241582][ T5178] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 594.389491][ T5178] Bluetooth: hci1: Malformed LE Event: 0x0d [ 595.277347][ T5989] usb 5-1: Using ep0 maxpacket: 32 [ 596.152633][ T5989] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 597.358762][ T5989] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 597.376297][T10980] netlink: 184 bytes leftover after parsing attributes in process `syz.7.1144'. [ 597.387271][ T5989] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 597.401443][ T5989] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 597.409603][ T5989] usb 5-1: Product: syz [ 597.421323][ T5989] usb 5-1: Manufacturer: syz [ 597.427274][ T5989] usb 5-1: SerialNumber: syz [ 597.434893][ T5989] usb 5-1: config 0 descriptor?? [ 599.060610][T10994] fuse: Unknown parameter 'f' [ 599.086787][ T6168] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 599.102377][T10990] fuse: Bad value for 'fd' [ 599.125507][ T5977] usb 5-1: USB disconnect, device number 26 [ 599.228396][T10996] loop7: detected capacity change from 0 to 256 [ 599.241432][ T10] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 599.471529][ T10] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 599.490290][ T10] usb 2-1: can't read configurations, error -71 [ 599.608265][T11008] loop4: detected capacity change from 0 to 8 [ 599.678132][T11008] cramfs: empty filesystem [ 599.726090][ T6281] udevd[6281]: incorrect cramfs checksum on /dev/loop4 [ 599.777090][ T5947] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 599.828671][ T6281] udevd[6281]: incorrect cramfs checksum on /dev/loop4 [ 599.857877][ T5947] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz1] on syz0 [ 599.950001][ T6281] udevd[6281]: incorrect cramfs checksum on /dev/loop4 [ 599.973162][T11005] block nbd2: shutting down sockets [ 600.024894][T11018] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1157'. [ 600.036176][T11018] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1157'. [ 600.045382][T11018] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1157'. [ 600.054810][T11018] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1157'. [ 600.160968][ T6281] udevd[6281]: incorrect cramfs checksum on /dev/loop4 [ 600.318284][T11020] loop4: detected capacity change from 0 to 512 [ 600.376467][T11016] fido_id[11016]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 600.457690][T11022] loop1: detected capacity change from 0 to 128 [ 600.596131][T11020] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.1158: casefold flag without casefold feature [ 600.673159][T11020] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.1158: couldn't read orphan inode 15 (err -117) [ 600.686029][T11022] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 600.807286][T11022] ext4 filesystem being mounted at /187/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 600.822167][T11020] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 601.119362][T11030] netlink: 'syz.5.1162': attribute type 32 has an invalid length. [ 601.790437][T11030] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1162'. [ 601.800126][ T9419] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 602.378958][ T5178] Bluetooth: hci4: Unknown advertising packet type: 0x5d [ 602.378995][ T5178] Bluetooth: hci4: Unknown advertising packet type: 0x7f [ 602.386218][ T5178] Bluetooth: hci4: Unknown advertising packet type: 0x7f [ 602.393358][ T5178] Bluetooth: hci4: Malformed LE Event: 0x0d [ 604.144198][ T5228] udevd[5228]: worker [6265] /devices/virtual/block/nbd0 timeout; kill it [ 604.321459][ T9419] usb 7-1: Using ep0 maxpacket: 16 [ 605.443610][T11030] (unnamed net_device) (uninitialized): option coupled_control: invalid value (60) [ 605.735955][ T5228] udevd[5228]: seq 14023 '/devices/virtual/block/nbd0' killed [ 606.630964][ T9419] usb 7-1: device descriptor read/all, error -71 [ 606.829555][T11047] dns_resolver: Unsupported server list version (0) [ 606.840694][ T5861] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 606.923627][T11047] overlayfs: missing 'workdir' [ 607.008569][T11054] loop6: detected capacity change from 0 to 512 [ 607.162921][T11054] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 607.808340][T11066] loop2: detected capacity change from 0 to 8 [ 607.916034][T11066] cramfs: empty filesystem [ 608.047140][ T6164] udevd[6164]: incorrect cramfs checksum on /dev/loop2 [ 608.208746][ T6164] udevd[6164]: incorrect cramfs checksum on /dev/loop2 [ 608.417583][T11072] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1174'. [ 609.594134][T11072] bond0: (slave bond_slave_1): Releasing backup interface [ 609.637018][ T6168] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 609.961376][ T9419] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 610.583685][ T9419] usb 5-1: Using ep0 maxpacket: 16 [ 610.641917][ T9419] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 610.718960][ T9419] usb 5-1: config 0 interface 0 has no altsetting 0 [ 610.756241][ T9419] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 610.795502][ T9419] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.803815][T11090] loop2: detected capacity change from 0 to 512 [ 610.902455][T11090] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.1179: casefold flag without casefold feature [ 611.340831][T11090] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.1179: couldn't read orphan inode 15 (err -117) [ 611.411601][ T9419] usb 5-1: config 0 descriptor?? [ 611.442970][T11090] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 611.510165][ T5857] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 611.876673][ T5178] Bluetooth: hci5: Unknown advertising packet type: 0x5d [ 611.876762][ T5178] Bluetooth: hci5: Unknown advertising packet type: 0x7f [ 611.884061][ T5178] Bluetooth: hci5: Unknown advertising packet type: 0x7f [ 611.891900][ T5178] Bluetooth: hci5: Malformed LE Event: 0x0d [ 614.843733][ T9419] usbhid 5-1:0.0: can't add hid device: -71 [ 614.886883][ T9419] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 614.951880][ T9419] usb 5-1: USB disconnect, device number 27 [ 615.697537][T11114] loop4: detected capacity change from 0 to 4096 [ 615.751845][T11108] loop6: detected capacity change from 0 to 4096 [ 615.787070][T11114] NILFS (loop4): invalid segment: Checksum error in segment payload [ 615.863593][T11114] NILFS (loop4): trying rollback from an earlier position [ 616.081831][ T5865] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 616.094154][T11108] EXT4-fs (loop6): Test dummy encryption mode enabled [ 616.102724][T11124] overlayfs: failed to resolve 'verity=on': -2 [ 616.127352][T11108] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 616.199077][T11114] NILFS (loop4): recovery complete [ 616.246971][T11108] System zones: 0-5 [ 616.266039][T11127] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 616.330066][T11129] loop7: detected capacity change from 0 to 22 [ 616.360942][T11129] MTD: Attempt to mount non-MTD device "/dev/loop7" [ 617.382449][T11129] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 617.482282][T11108] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 617.485850][T11129] romfs: Unknown parameter 'msdos' [ 617.811406][ T5977] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 617.877858][T11139] nbd_handle_cmd: 2 callbacks suppressed [ 617.877881][T11139] block nbd2: Attempted send on invalid socket [ 617.910408][T11139] blk_print_req_error: 2 callbacks suppressed [ 617.910426][T11139] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 617.941617][ T31] INFO: task syz.0.793:9521 blocked for more than 143 seconds. [ 617.949172][ T31] Not tainted syzkaller #0 [ 617.974174][ T6168] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 617.982449][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 618.002176][ T31] task:syz.0.793 state:D stack:28264 pid:9521 tgid:9520 ppid:5860 task_flags:0x400040 flags:0x00004004 [ 618.018631][ T31] Call Trace: [ 618.018676][ T5977] usb 2-1: config 0 has an invalid interface number: 47 but max is 0 [ 618.022311][ T31] [ 618.055693][ T31] __schedule+0x1798/0x4cc0 [ 618.059074][ T5977] usb 2-1: config 0 has no interface number 0 [ 618.080297][ T5977] usb 2-1: config 0 interface 47 altsetting 185 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 618.093719][ T31] ? __pfx___schedule+0x10/0x10 [ 618.099190][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 618.101704][T11143] loop4: detected capacity change from 0 to 512 [ 618.122020][ T31] ? schedule+0x91/0x360 [ 618.136728][ T5947] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 618.172605][ T31] schedule+0x165/0x360 [ 618.204009][ T5977] usb 2-1: config 0 interface 47 has no altsetting 0 [ 618.204022][ T31] schedule_preempt_disabled+0x13/0x30 [ 618.231400][ T31] __mutex_lock+0x7e6/0x1350 [ 618.247030][ T31] ? __mutex_lock+0x5bb/0x1350 [ 618.253397][T11143] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.1194: casefold flag without casefold feature [ 618.255393][ T31] ? bdev_open+0xe0/0xd30 [ 618.270823][ T5947] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.00 Device [syz1] on syz0 [ 618.276199][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 618.285824][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 618.291761][ T31] ? wait_on_inode+0xc0/0x230 [ 618.296965][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 618.303164][ T31] ? kobject_get_unless_zero+0x161/0x1f0 [ 618.311364][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 618.318728][ T31] ? disk_block_events+0xab/0x120 [ 618.324052][ T31] ? bdev_open+0xaf/0xd30 [ 618.328502][ T31] bdev_open+0xe0/0xd30 [ 618.331880][ T5977] usb 2-1: New USB device found, idVendor=06e1, idProduct=0709, bcdDevice= 2.04 [ 618.332721][ T31] blkdev_open+0x3a8/0x510 [ 618.346592][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 618.362230][T11143] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.1194: couldn't read orphan inode 15 (err -117) [ 618.396947][ T31] do_dentry_open+0x953/0x13f0 [ 618.397823][ T5977] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.423742][T11143] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 618.430119][ T5977] usb 2-1: Product: syz [ 618.448708][ T5977] usb 2-1: Manufacturer: syz [ 618.467685][ T31] vfs_open+0x3b/0x340 [ 618.490784][ T31] ? path_openat+0x2ecd/0x3830 [ 618.491705][ T5977] usb 2-1: SerialNumber: syz [ 618.521033][ T5977] usb 2-1: config 0 descriptor?? [ 618.532906][ T31] path_openat+0x2ee5/0x3830 [ 618.556062][ T31] ? arch_stack_walk+0xfc/0x150 [ 618.567075][ T31] ? stack_depot_save_flags+0x40/0x860 [ 618.593215][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 618.610974][ T31] ? __pfx_path_openat+0x10/0x10 [ 618.629776][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.670675][ T31] do_filp_open+0x1fa/0x410 [ 618.700522][T11148] fido_id[11148]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 618.701313][ T31] ? __lock_acquire+0xab9/0xd20 [ 618.786097][ T5977] go7007 2-1:0.47: probe with driver go7007 failed with error -12 [ 618.819727][ T5178] Bluetooth: hci4: Unknown advertising packet type: 0x5d [ 618.820052][ T5178] Bluetooth: hci4: Unknown advertising packet type: 0x7f [ 618.830377][ T5178] Bluetooth: hci4: Unknown advertising packet type: 0x7f [ 618.837715][ T5178] Bluetooth: hci4: Malformed LE Event: 0x0d [ 619.810051][ T5977] usb 2-1: USB disconnect, device number 16 [ 620.241579][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 621.142498][ T8621] block nbd0: Possible stuck request ffff8880250601c0: control (read@0,1024B). Runtime 270 seconds [ 621.153281][ T8621] block nbd0: Possible stuck request ffff888025060380: control (read@1024,1024B). Runtime 270 seconds [ 621.183445][ T8621] block nbd0: Possible stuck request ffff888025060540: control (read@2048,1024B). Runtime 270 seconds [ 621.221875][ T8621] block nbd0: Possible stuck request ffff888025060700: control (read@3072,1024B). Runtime 270 seconds [ 621.355144][T11153] loop6: detected capacity change from 0 to 64 [ 621.410140][ T31] ? _raw_spin_unlock+0x28/0x50 [ 621.849916][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 621.855670][ T31] ? alloc_fd+0x64c/0x6c0 [ 621.860035][ T31] do_sys_openat2+0x121/0x1c0 [ 621.864791][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 621.870563][ T31] ? __se_sys_futex+0x36f/0x400 [ 621.894181][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 621.900913][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 621.906636][ T31] ? rcu_is_watching+0x15/0xb0 [ 621.911435][ T31] __x64_sys_openat+0x138/0x170 [ 621.916300][ T31] do_syscall_64+0xfa/0x3b0 [ 621.921085][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 621.926471][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.932571][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 621.948050][ T31] ? exc_page_fault+0x9f/0xf0 [ 621.953520][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.959451][ T31] RIP: 0033:0x7fbd14f8d550 [ 621.963930][ T31] RSP: 002b:00007fbd15e95b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 621.972381][ T31] RAX: ffffffffffffffda RBX: 0000000000080000 RCX: 00007fbd14f8d550 [ 621.980891][T11152] hfs: hfs: Invalid key length: 94 [ 621.986111][ T31] RDX: 0000000000080000 RSI: 00007fbd15e95c10 RDI: 00000000ffffff9c [ 622.001688][ T31] RBP: 00007fbd15e95c10 R08: 0000000000000000 R09: 002364626e2f7665 [ 622.009669][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 622.026337][ T31] R13: 00007fbd151c6038 R14: 00007fbd151c5fa0 R15: 00007ffe96a0e378 [ 622.482706][ T31] [ 622.488245][ T31] INFO: task syz.0.793:9525 blocked for more than 147 seconds. [ 622.501550][ T31] Not tainted syzkaller #0 [ 622.506559][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 622.516091][ T31] task:syz.0.793 state:D stack:28616 pid:9525 tgid:9520 ppid:5860 task_flags:0x400140 flags:0x00004004 [ 622.528232][ T31] Call Trace: [ 622.531608][ T31] [ 622.534610][ T31] __schedule+0x1798/0x4cc0 [ 622.539819][ T31] ? __pfx___schedule+0x10/0x10 [ 622.544798][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 622.550506][ T31] ? schedule+0x91/0x360 [ 622.555117][ T31] schedule+0x165/0x360 [ 622.560770][ T31] schedule_preempt_disabled+0x13/0x30 [ 622.566759][ T31] __mutex_lock+0x7e6/0x1350 [ 622.571747][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 622.581547][ T31] ? __mutex_lock+0x5bb/0x1350 [ 622.586520][ T31] ? bdev_open+0xe0/0xd30 [ 622.590989][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 622.596580][ T31] ? __pfx_bd_prepare_to_claim+0x10/0x10 [ 622.603309][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 622.609035][ T31] ? alloc_file_pseudo_noaccount+0x203/0x2c0 [ 622.717131][ T6249] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 622.791660][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 622.798334][ T31] ? disk_block_events+0xab/0x120 [ 622.811824][ T31] ? bdev_open+0xbe/0xd30 [ 622.838217][ T31] bdev_open+0xe0/0xd30 [ 622.859348][ T31] bdev_file_open_by_dev+0x1be/0x240 [ 622.872759][ T31] setup_bdev_super+0x5a/0x5b0 [ 622.885070][ T31] get_tree_bdev_flags+0x366/0x4d0 [ 622.897178][ T31] ? __pfx_udf_fill_super+0x10/0x10 [ 622.909574][ T31] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 622.921405][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 622.958697][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 623.010885][ T31] vfs_get_tree+0x92/0x2b0 [ 623.074897][ T31] do_new_mount+0x2a2/0x9e0 [ 623.106286][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 623.128782][ T31] ? ns_capable+0x8a/0xf0 [ 623.135438][ T31] ? __pfx_do_new_mount+0x10/0x10 [ 623.140514][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 623.148808][ T31] ? path_mount+0x61c/0xfe0 [ 623.158702][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 623.164740][ T31] __se_sys_mount+0x317/0x410 [ 623.169833][ T31] ? __pfx___se_sys_mount+0x10/0x10 [ 623.176067][ T31] ? rcu_is_watching+0x15/0xb0 [ 623.180879][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 623.186929][ T31] ? __x64_sys_mount+0x20/0xc0 [ 623.192035][ T31] do_syscall_64+0xfa/0x3b0 [ 623.196576][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 623.202237][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.208347][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 623.214442][ T31] ? exc_page_fault+0x9f/0xf0 [ 623.219202][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.225720][ T31] RIP: 0033:0x7fbd14f8ebe9 [ 623.230956][ T31] RSP: 002b:00007fbd15e75038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 623.240257][ T31] RAX: ffffffffffffffda RBX: 00007fbd151c6090 RCX: 00007fbd14f8ebe9 [ 623.248495][ T31] RDX: 0000200000000080 RSI: 0000200000004a00 RDI: 0000200000000000 [ 623.257773][ T31] RBP: 00007fbd15011e19 R08: 0000000000000000 R09: 0000000000000000 [ 623.268162][ T31] R10: 0000000002008087 R11: 0000000000000246 R12: 0000000000000000 [ 623.279140][ T31] R13: 00007fbd151c6128 R14: 00007fbd151c6090 R15: 00007ffe96a0e378 [ 623.288360][ T31] [ 623.291984][ T31] [ 623.291984][ T31] Showing all locks held in the system: [ 623.322146][T11139] block nbd2: Send control failed (result -32) [ 623.446676][ T5861] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 623.451325][ T31] 2 locks held by rcu_tasks_trace/29: [ 623.461646][T11139] block nbd2: Request send failed, requeueing [ 623.468448][ T9658] block nbd2: Dead connection, failed to find a fallback [ 623.475976][ T9658] block nbd2: shutting down sockets [ 623.481170][ T9658] I/O error, dev nbd2, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 623.490533][T11139] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 623.531518][ T31] #0: ffffffff8e13ac10 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{4:4}, at: rcu_tasks_one_gp+0xaf9/0xdf0 [ 623.585426][T11139] I/O error, dev nbd2, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 623.594746][ T31] #1: ffff8880b8724008 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 623.603897][ T31] 1 lock held by khungtaskd/31: [ 623.608785][ T31] #0: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 623.621076][ T31] 1 lock held by udevd/5228: [ 623.641635][T11139] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 623.699142][ T31] #0: ffff8880b8639f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 623.731359][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.736281][T11139] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 623.741417][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 623.772102][ T31] 2 locks held by getty/5617: [ 623.778332][ T31] #0: ffff8880337760a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 623.789585][ T31] #1: ffffc9000332e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 623.800081][ T31] 2 locks held by kworker/u8:15/6249: [ 623.805872][T11139] I/O error, dev nbd2, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 623.806790][ T31] #0: ffff88801dbd4948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 623.848081][ T31] #1: ffffc9000b92fbc0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 623.873832][T11139] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 623.897753][ T31] 1 lock held by udevd/6265: [ 623.906031][ T31] #0: ffff888024f11358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 623.917444][ T31] 1 lock held by syz.0.793/9521: [ 623.924583][ T31] #0: ffff888024f11358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 623.939044][ T31] 2 locks held by syz.0.793/9525: [ 623.952492][ T31] #0: ffff88802d32a0e0 (&type->s_umount_key#59/1){+.+.}-{4:4}, at: alloc_super+0x204/0x970 [ 623.954261][T11139] I/O error, dev nbd2, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 623.972301][ T31] #1: ffff888024f11358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 624.014927][T11139] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 624.017073][ T31] 1 lock held by syz.6.1149/11013: [ 624.039548][ T31] 1 lock held by syz.2.1195/11139: [ 624.056972][T11139] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 624.062348][ T31] 2 locks held by syz.6.1196/11152: [ 624.086767][ T31] [ 624.090820][T11139] I/O error, dev nbd2, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 624.100806][ T31] ============================================= [ 624.100806][ T31] [ 624.100821][ T31] NMI backtrace for cpu 0 [ 624.100837][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 624.100863][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 624.100878][ T31] Call Trace: [ 624.100887][ T31] [ 624.100896][ T31] dump_stack_lvl+0x189/0x250 [ 624.100934][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 624.100964][ T31] ? __pfx__printk+0x10/0x10 [ 624.101013][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 624.101050][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 624.101083][ T31] ? __pfx__printk+0x10/0x10 [ 624.101117][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 624.101149][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 624.101196][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 624.101229][ T31] watchdog+0xf93/0xfe0 [ 624.101270][ T31] ? watchdog+0x1de/0xfe0 [ 624.101310][ T31] kthread+0x711/0x8a0 [ 624.101344][ T31] ? __pfx_watchdog+0x10/0x10 [ 624.101376][ T31] ? __pfx_kthread+0x10/0x10 [ 624.101408][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 624.101439][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 624.101471][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 624.101497][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 624.101530][ T31] ? __pfx_kthread+0x10/0x10 [ 624.101560][ T31] ret_from_fork+0x3fc/0x770 [ 624.101589][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 624.101620][ T31] ? __switch_to_asm+0x39/0x70 [ 624.101651][ T31] ? __switch_to_asm+0x33/0x70 [ 624.101680][ T31] ? __pfx_kthread+0x10/0x10 [ 624.101711][ T31] ret_from_fork_asm+0x1a/0x30 [ 624.101761][ T31] [ 624.102027][ T31] Sending NMI from CPU 0 to CPUs 1: [ 624.274557][ C1] NMI backtrace for cpu 1 [ 624.274576][ C1] CPU: 1 UID: 0 PID: 6249 Comm: kworker/u8:15 Not tainted syzkaller #0 PREEMPT(full) [ 624.274600][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 624.274619][ C1] Workqueue: bat_events batadv_nc_worker [ 624.274661][ C1] RIP: 0010:check_preemption_disabled+0x12/0x120 [ 624.274686][ C1] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 41 57 41 56 53 48 83 ec 10 65 48 8b 05 be 9e 26 07 <48> 89 44 24 08 65 8b 05 c6 9e 26 07 65 8b 0d bb 9e 26 07 f7 c1 ff [ 624.274704][ C1] RSP: 0018:ffffc9000b92f9c8 EFLAGS: 00000282 [ 624.274722][ C1] RAX: 2c5afd74ea89ee00 RBX: 0000000000000001 RCX: 0000000000000000 [ 624.274736][ C1] RDX: ffff888025188000 RSI: ffffffff8be337e0 RDI: ffffffff8be337a0 [ 624.274752][ C1] RBP: fffffffffffffe38 R08: 0000000000000000 R09: ffffffff8b4751e2 [ 624.274767][ C1] R10: dffffc0000000000 R11: ffffffff8b475110 R12: dffffc0000000000 [ 624.274784][ C1] R13: ffffffff8b4751e2 R14: ffff888033428d80 R15: 00000000000000d9 [ 624.274801][ C1] FS: 0000000000000000(0000) GS:ffff888125d18000(0000) knlGS:0000000000000000 [ 624.274819][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 624.274833][ C1] CR2: 0000200000032000 CR3: 00000000227e0000 CR4: 0000000000350ef0 [ 624.274851][ C1] Call Trace: [ 624.274858][ C1] [ 624.274871][ C1] rcu_is_watching+0x15/0xb0 [ 624.274894][ C1] batadv_nc_worker+0x208/0x610 [ 624.274925][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 624.274949][ C1] process_scheduled_works+0xae1/0x17b0 [ 624.274990][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 624.275016][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 624.275048][ C1] worker_thread+0x8a0/0xda0 [ 624.275087][ C1] kthread+0x711/0x8a0 [ 624.275116][ C1] ? __pfx_worker_thread+0x10/0x10 [ 624.275137][ C1] ? __pfx_kthread+0x10/0x10 [ 624.275161][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 624.275187][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 624.275216][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 624.275240][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 624.275270][ C1] ? __pfx_kthread+0x10/0x10 [ 624.275296][ C1] ret_from_fork+0x3fc/0x770 [ 624.275324][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 624.275350][ C1] ? __switch_to_asm+0x39/0x70 [ 624.275379][ C1] ? __switch_to_asm+0x33/0x70 [ 624.275406][ C1] ? __pfx_kthread+0x10/0x10 [ 624.275432][ C1] ret_from_fork_asm+0x1a/0x30 [ 624.275472][ C1] [ 624.284048][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 624.284069][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 624.284096][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 624.284112][ T31] Call Trace: [ 624.284122][ T31] [ 624.284133][ T31] dump_stack_lvl+0x99/0x250 [ 624.284168][ T31] ? __asan_memcpy+0x40/0x70 [ 624.284197][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 624.284227][ T31] ? __pfx__printk+0x10/0x10 [ 624.284271][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 624.284304][ T31] vpanic+0x281/0x750 [ 624.284337][ T31] ? __pfx_vpanic+0x10/0x10 [ 624.284363][ T31] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 624.284403][ T31] ? preempt_schedule+0xae/0xc0 [ 624.284439][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 624.284467][ T31] ? preempt_schedule_common+0x83/0xd0 [ 624.284509][ T31] panic+0xb9/0xc0 [ 624.284537][ T31] ? __pfx_panic+0x10/0x10 [ 624.284574][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 624.284602][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 624.284645][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 624.284673][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 624.284708][ T31] watchdog+0xfd2/0xfe0 [ 624.284748][ T31] ? watchdog+0x1de/0xfe0 [ 624.284789][ T31] kthread+0x711/0x8a0 [ 624.284823][ T31] ? __pfx_watchdog+0x10/0x10 [ 624.284857][ T31] ? __pfx_kthread+0x10/0x10 [ 624.284884][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 624.284916][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 624.284948][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 624.284975][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 624.285009][ T31] ? __pfx_kthread+0x10/0x10 [ 624.285041][ T31] ret_from_fork+0x3fc/0x770 [ 624.285070][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 624.285102][ T31] ? __switch_to_asm+0x39/0x70 [ 624.285134][ T31] ? __switch_to_asm+0x33/0x70 [ 624.285165][ T31] ? __pfx_kthread+0x10/0x10 [ 624.285197][ T31] ret_from_fork_asm+0x1a/0x30 [ 624.285247][ T31] [ 624.715298][ T31] Kernel Offset: disabled [ 624.719605][ T31] Rebooting in 86400 seconds..